901 lines
34 KiB
Plaintext
901 lines
34 KiB
Plaintext
NETGEAR-QOS-ACL-MIB DEFINITIONS ::= BEGIN
|
|
|
|
-- LVL7 Quality of Service - ACL Package MIB
|
|
-- Copyright LVL7 Systems (2002-2005) All rights reserved.
|
|
|
|
-- This SNMP Management Information Specification
|
|
-- embodies LVL7 System's confidential and proprietary
|
|
-- intellectual property. LVL7 Systems retains all title
|
|
-- and ownership in the Specification including any revisions.
|
|
|
|
-- This Specification is supplied "AS IS", LVL7 Systems
|
|
-- makes no warranty, either expressed or implied,
|
|
-- as to the use, operation, condition, or performance of the
|
|
-- Specification.
|
|
|
|
|
|
IMPORTS
|
|
TEXTUAL-CONVENTION FROM SNMPv2-TC
|
|
MODULE-IDENTITY, OBJECT-TYPE, IpAddress,
|
|
Integer32, Unsigned32 FROM SNMPv2-SMI
|
|
RowStatus,MacAddress,TruthValue FROM SNMPv2-TC
|
|
|
|
DisplayString FROM RFC1213-MIB
|
|
InterfaceIndexOrZero FROM IF-MIB
|
|
|
|
agentQOS FROM NETGEAR-QOS-MIB;
|
|
|
|
agentQOSACL MODULE-IDENTITY
|
|
LAST-UPDATED "200409200000Z" -- 09 Sep 2004 12:00:00 GMT
|
|
ORGANIZATION "Netgear"
|
|
CONTACT-INFO
|
|
""
|
|
DESCRIPTION
|
|
"The MIB definitions for Quality of Service - ACL Flex package."
|
|
|
|
-- Revision history.
|
|
REVISION
|
|
"200409200000Z" -- 20 Sep 2004 12:00:00 GMT
|
|
DESCRIPTION
|
|
"Added L2 MAC ACL support."
|
|
REVISION
|
|
"200311210000Z" -- 21 Nov 2003 12:00:00 GMT
|
|
DESCRIPTION
|
|
"Revisions made for new release."
|
|
REVISION
|
|
"200302062334Z" -- 6 February 2003
|
|
DESCRIPTION
|
|
"Updated for release"
|
|
::= { agentQOS 2 }
|
|
|
|
|
|
EtypeValue ::= TEXTUAL-CONVENTION
|
|
DISPLAY-HINT "x"
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Ethertype value of a packet. The allowed value is 0x0600 to 0xFFFF."
|
|
SYNTAX Unsigned32 (1536..65535) -- hex value 0x0600 to 0xFFFF
|
|
|
|
|
|
--**************************************************************************************
|
|
|
|
aclTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AclEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A table of ACL instances."
|
|
::= { agentQOSACL 1 }
|
|
|
|
aclEntry OBJECT-TYPE
|
|
SYNTAX AclEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
""
|
|
INDEX { aclIndex }
|
|
::= { aclTable 1 }
|
|
|
|
AclEntry ::= SEQUENCE {
|
|
aclIndex
|
|
Integer32,
|
|
aclStatus
|
|
RowStatus
|
|
}
|
|
|
|
aclIndex OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The IP ACL table index this instance is associated with."
|
|
::= { aclEntry 1 }
|
|
|
|
aclStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Status of this instance. Entries can not be deleted until all rows in
|
|
the aclIfTable and aclRuleTable with corresponding values of aclIndex
|
|
have been deleted.
|
|
|
|
active(1) - this ACL instance is active
|
|
createAndGo(4) - set to this value to create an instance
|
|
destroy(6) - set to this value to delete an instance"
|
|
::= { aclEntry 3 }
|
|
|
|
--**************************************************************************************
|
|
|
|
aclIfTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AclIfEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A table of ACL interface instances per direction."
|
|
::= { agentQOSACL 2 }
|
|
|
|
aclIfEntry OBJECT-TYPE
|
|
SYNTAX AclIfEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
""
|
|
INDEX { aclIfIndex, aclIfDirection, aclIfSequence, aclIfAclType, aclIfAclId }
|
|
::= { aclIfTable 1 }
|
|
|
|
AclIfEntry ::= SEQUENCE {
|
|
aclIfIndex
|
|
Integer32,
|
|
aclIfDirection
|
|
INTEGER,
|
|
aclIfSequence
|
|
Unsigned32,
|
|
aclIfAclType
|
|
INTEGER,
|
|
aclIfAclId
|
|
Integer32,
|
|
aclIfStatus
|
|
RowStatus
|
|
}
|
|
|
|
aclIfIndex OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The interface to which this ACL instance applies."
|
|
::= { aclIfEntry 1 }
|
|
|
|
aclIfDirection OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
inbound(1),
|
|
outbound(2)
|
|
}
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The interface direction to which this ACL instance applies."
|
|
::= { aclIfEntry 2 }
|
|
|
|
aclIfSequence OBJECT-TYPE
|
|
SYNTAX Unsigned32 (1..4294967295)
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The relative evaluation sequence of this ACL for this
|
|
interface and direction. When multiple ACLs are allowed
|
|
for a given interface and direction, the sequence number
|
|
determines the order in which the list of ACLs are evaluated,
|
|
with lower sequence numbers given higher precedence. The
|
|
sequence number value is arbitrary, but must be a unique
|
|
non-zero value for a given interface and direction.
|
|
|
|
Setting this object to an existing sequence number
|
|
value for a given interface and direction causes the
|
|
ACL corresponding to that value to be replaced with
|
|
this ACL."
|
|
::= { aclIfEntry 3 }
|
|
|
|
aclIfAclType OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
ip(1),
|
|
mac(2)
|
|
}
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of this ACL, which is used to interpret the
|
|
aclIfId object value. Each type of ACL uses its own
|
|
numbering scheme for identification (see aclIfId object
|
|
for details).
|
|
|
|
The aclIfId object must be specified along with this
|
|
object."
|
|
::= { aclIfEntry 4 }
|
|
|
|
aclIfAclId OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The ACL identifier value, which is interpreted based on
|
|
the aclIfType object.
|
|
|
|
For the IP ACLs, the actual ACL number is its identifier
|
|
as follows: IP standard ranges from 1-99, while
|
|
IP extended ranges from 100-199. Here, aclIfAclId represents
|
|
aclIndex.
|
|
|
|
The MAC ACLs use an internally-generated index value
|
|
that is assigned when the ACL is created.Here, aclIfAclId
|
|
represents aclMacIndex.
|
|
|
|
The aclIfType object must be specified along with
|
|
this object."
|
|
::= { aclIfEntry 5 }
|
|
|
|
aclIfStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Status of this instance.
|
|
|
|
active(1) - this ACL interface instance is active
|
|
createAndGo(4) - set to this value to assign an ACL to an interface and direction
|
|
destroy(6) - set to this value to remove an ACL from an interface and direction"
|
|
::= { aclIfEntry 6 }
|
|
|
|
|
|
--**************************************************************************************
|
|
-- Layer 3 IP Access List Rules
|
|
--
|
|
--**************************************************************************************
|
|
|
|
aclRuleTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AclRuleEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A table of IP ACL Rule instances."
|
|
::= { agentQOSACL 4 }
|
|
|
|
aclRuleEntry OBJECT-TYPE
|
|
SYNTAX AclRuleEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A table of IP ACL Classification Rules"
|
|
INDEX { aclIndex, aclRuleIndex }
|
|
::= { aclRuleTable 1 }
|
|
|
|
AclRuleEntry ::= SEQUENCE {
|
|
aclRuleIndex
|
|
Integer32,
|
|
aclRuleAction
|
|
INTEGER,
|
|
aclRuleProtocol
|
|
Integer32,
|
|
aclRuleSrcIpAddress
|
|
IpAddress,
|
|
aclRuleSrcIpMask
|
|
IpAddress,
|
|
aclRuleSrcL4Port
|
|
Integer32,
|
|
aclRuleSrcL4PortRangeStart
|
|
Integer32,
|
|
aclRuleSrcL4PortRangeEnd
|
|
Integer32,
|
|
aclRuleDestIpAddress
|
|
IpAddress,
|
|
aclRuleDestIpMask
|
|
IpAddress,
|
|
aclRuleDestL4Port
|
|
Integer32,
|
|
aclRuleDestL4PortRangeStart
|
|
Integer32,
|
|
aclRuleDestL4PortRangeEnd
|
|
Integer32,
|
|
aclRuleIPDSCP
|
|
Integer32,
|
|
aclRuleIpPrecedence
|
|
Integer32,
|
|
aclRuleIpTosBits
|
|
Integer32,
|
|
aclRuleIpTosMask
|
|
Integer32,
|
|
aclRuleStatus
|
|
RowStatus,
|
|
aclRuleAssignQueueId
|
|
Unsigned32,
|
|
aclRuleRedirectIntf
|
|
InterfaceIndexOrZero,
|
|
aclRuleMatchEvery
|
|
TruthValue
|
|
}
|
|
|
|
aclRuleIndex OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The index of this rule instance within an IP ACL."
|
|
::= { aclRuleEntry 1 }
|
|
|
|
aclRuleAction OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
permit(1),
|
|
deny(2)
|
|
}
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of action this rule should perform."
|
|
DEFVAL { deny }
|
|
::= { aclRuleEntry 2 }
|
|
|
|
aclRuleProtocol OBJECT-TYPE
|
|
SYNTAX Integer32 (1..255)
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"icmp - 1
|
|
igmp - 2
|
|
ip - 4
|
|
tcp - 6
|
|
udp - 17
|
|
All values from 1 to 255 are valid."
|
|
::= { aclRuleEntry 3 }
|
|
|
|
aclRuleSrcIpAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Source IP Address used in the ACL Classification."
|
|
::= { aclRuleEntry 4 }
|
|
|
|
aclRuleSrcIpMask OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Source IP Mask used in the ACL Classification.
|
|
This mask is expressed using wild-card notation,which
|
|
is the 1's compliment of traditional Subnet Masks.
|
|
Here, the 'Don't care bits' are represented by binary 1's and
|
|
'Do care bits' are represented by binary 0's. "
|
|
::= { aclRuleEntry 5 }
|
|
|
|
|
|
aclRuleSrcL4Port OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Source Port Number (Layer 4) used in the ACL Classification."
|
|
::= { aclRuleEntry 6 }
|
|
|
|
aclRuleSrcL4PortRangeStart OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Source Port Number(Layer 4) range start."
|
|
::= { aclRuleEntry 7 }
|
|
|
|
aclRuleSrcL4PortRangeEnd OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Source Port Number(Layer 4) range end."
|
|
::= { aclRuleEntry 8 }
|
|
|
|
aclRuleDestIpAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Destination IP Address used in the ACL Classification."
|
|
::= { aclRuleEntry 9 }
|
|
|
|
aclRuleDestIpMask OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Destination IP Mask used in the ACL Classification.
|
|
This mask is expressed using wild-card notation,which
|
|
is the 1's compliment of traditional Subnet Masks.
|
|
Here, the 'Don't care bits' are represented by binary 1's and
|
|
'Do care bits' are represented by binary 0's. "
|
|
::= { aclRuleEntry 10 }
|
|
|
|
aclRuleDestL4Port OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Destination Port (Layer 4) used in ACl classification."
|
|
::= { aclRuleEntry 11 }
|
|
|
|
aclRuleDestL4PortRangeStart OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Destination Port (Layer 4) starting range used in ACL classification."
|
|
::= { aclRuleEntry 12 }
|
|
|
|
aclRuleDestL4PortRangeEnd OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Destination Port (Layer 4) ending range used in ACL classification."
|
|
::= { aclRuleEntry 13 }
|
|
|
|
aclRuleIPDSCP OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Differentiated Services Code Point value."
|
|
::= { aclRuleEntry 14 }
|
|
|
|
aclRuleIpPrecedence OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Type of Service (TOS) IP Precedence value."
|
|
::= { aclRuleEntry 15 }
|
|
|
|
aclRuleIpTosBits OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Type of Service (TOS) Bits value."
|
|
::= { aclRuleEntry 16 }
|
|
|
|
aclRuleIpTosMask OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Type of Service (TOS) Mask value."
|
|
::= { aclRuleEntry 17 }
|
|
|
|
aclRuleStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Status of this instance.
|
|
|
|
active(1) - this ACL Rule is active
|
|
createAndGo(4) - set to this value to create an instance
|
|
destroy(6) - set to this value to delete an instance"
|
|
::= { aclRuleEntry 18 }
|
|
|
|
aclRuleAssignQueueId OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Queue identifier to which all inbound packets matching this
|
|
ACL rule are directed. This object defaults to the standard
|
|
queue assignment for user priority 0 traffic per the IEEE 802.1D
|
|
specification based on the number of assignable queues in the
|
|
system:
|
|
1-3 queues: 0
|
|
4-7 queues: 1
|
|
8 queues: 2
|
|
This default assignment is static and is not influenced by
|
|
other system configuration changes."
|
|
::= { aclRuleEntry 19 }
|
|
|
|
aclRuleRedirectIntf OBJECT-TYPE
|
|
SYNTAX InterfaceIndexOrZero
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A non-zero value indicates the external ifIndex to which all
|
|
inbound packets matching this ACL rule are directed. A
|
|
value of zero means packet redirection is not in effect, which
|
|
is the default value of this object."
|
|
DEFVAL { 0 }
|
|
::= { aclRuleEntry 20 }
|
|
|
|
aclRuleMatchEvery OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Flag to indicate that the acl rule is defined to match on every IP packet,
|
|
regardless of content."
|
|
::= { aclRuleEntry 21 }
|
|
|
|
|
|
--**************************************************************************************
|
|
-- Layer 2 MAC Access Lists
|
|
--
|
|
--**************************************************************************************
|
|
|
|
aclMacGroup OBJECT IDENTIFIER ::= { agentQOSACL 5 }
|
|
|
|
aclMacIndexNextFree OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object contains an unused value for the aclMacIndex
|
|
to be used when creating a new MAC ACL. A value of zero
|
|
zero indicates the ACL table is full."
|
|
::= { aclMacGroup 1 }
|
|
|
|
--**************************************************************************************
|
|
|
|
aclMacTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AclMacEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A table of MAC ACL instances."
|
|
::= { aclMacGroup 2 }
|
|
|
|
aclMacEntry OBJECT-TYPE
|
|
SYNTAX AclMacEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
""
|
|
INDEX { aclMacIndex }
|
|
::= { aclMacTable 1 }
|
|
|
|
AclMacEntry ::= SEQUENCE {
|
|
aclMacIndex
|
|
Integer32,
|
|
aclMacName
|
|
DisplayString,
|
|
aclMacStatus
|
|
RowStatus
|
|
}
|
|
|
|
aclMacIndex OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The MAC ACL table index this instance is associated with.
|
|
When creating a new MAC ACL, refer to the aclMacIndexNextFree
|
|
object to determine the next available aclMacIndex to use."
|
|
::= { aclMacEntry 1 }
|
|
|
|
aclMacName OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(1..31))
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The name of this MAC ACL entry, which must consist of
|
|
1 to 31 alphanumeric characters and uniquely identify
|
|
this MAC ACL. An existing MAC ACL can be renamed by
|
|
setting this object to a new name.
|
|
|
|
This object must be set to complete a new MAC ACL
|
|
row instance."
|
|
::= { aclMacEntry 2 }
|
|
|
|
aclMacStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Status of this instance. ACL MAC entries can not be deleted until all rows in
|
|
the aclIfTable and aclRuleTable with corresponding values of aclMacIndex
|
|
have been deleted.
|
|
|
|
active(1) - this ACL instance is active
|
|
createAndGo(4) - set to this value to create an instance
|
|
destroy(6) - set to this value to delete an instance
|
|
|
|
The aclMacName object must be set to complete this row instance."
|
|
::= { aclMacEntry 3 }
|
|
|
|
--**************************************************************************************
|
|
|
|
aclMacRuleTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF AclMacRuleEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A table of layer 2 MAC ACL Rule instances."
|
|
::= { aclMacGroup 3 }
|
|
|
|
aclMacRuleEntry OBJECT-TYPE
|
|
SYNTAX AclMacRuleEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A table of layer 2 MAC ACL Classification Rules"
|
|
INDEX { aclMacIndex, aclMacRuleIndex }
|
|
::= { aclMacRuleTable 1 }
|
|
|
|
AclMacRuleEntry ::= SEQUENCE {
|
|
aclMacRuleIndex
|
|
Integer32,
|
|
aclMacRuleAction
|
|
INTEGER,
|
|
aclMacRuleCos
|
|
Unsigned32,
|
|
aclMacRuleCos2
|
|
Unsigned32,
|
|
aclMacRuleDestMacAddr
|
|
MacAddress,
|
|
aclMacRuleDestMacMask
|
|
MacAddress,
|
|
aclMacRuleEtypeKey
|
|
INTEGER,
|
|
aclMacRuleEtypeValue
|
|
EtypeValue,
|
|
aclMacRuleSrcMacAddr
|
|
MacAddress,
|
|
aclMacRuleSrcMacMask
|
|
MacAddress,
|
|
aclMacRuleVlanId
|
|
Unsigned32,
|
|
aclMacRuleVlanIdRangeStart
|
|
Unsigned32,
|
|
aclMacRuleVlanIdRangeEnd
|
|
Unsigned32,
|
|
aclMacRuleVlanId2
|
|
Unsigned32,
|
|
aclMacRuleVlanId2RangeStart
|
|
Unsigned32,
|
|
aclMacRuleVlanId2RangeEnd
|
|
Unsigned32,
|
|
aclMacRuleStatus
|
|
RowStatus,
|
|
aclMacRuleAssignQueueId
|
|
Unsigned32,
|
|
aclMacRuleRedirectIntf
|
|
InterfaceIndexOrZero,
|
|
aclMacRuleMatchEvery
|
|
TruthValue
|
|
}
|
|
|
|
aclMacRuleIndex OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The index of this rule instance within an MAC ACL."
|
|
::= { aclMacRuleEntry 1 }
|
|
|
|
aclMacRuleAction OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
permit(1),
|
|
deny(2)
|
|
}
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of action this MAC ACL rule should perform."
|
|
DEFVAL { deny }
|
|
::= { aclMacRuleEntry 2 }
|
|
|
|
aclMacRuleCos OBJECT-TYPE
|
|
SYNTAX Unsigned32 (0..7)
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Class of Service (COS) used in the MAC ACL Classification.
|
|
|
|
This is the three-bit user priority field in the 802.1Q tag
|
|
header of a tagged Ethernet frame. For frames containing a
|
|
double VLAN tag, this field is located in the first/outer tag."
|
|
::= { aclMacRuleEntry 3 }
|
|
|
|
aclMacRuleCos2 OBJECT-TYPE
|
|
SYNTAX Unsigned32 (0..7)
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Secondary Class of Service (COS2) used in the MAC ACL Classification.
|
|
|
|
This is the three-bit user priority field in the second/inner 802.1Q
|
|
tag header of a double VLAN tagged Ethernet frame."
|
|
::= { aclMacRuleEntry 4 }
|
|
|
|
aclMacRuleDestMacAddr OBJECT-TYPE
|
|
SYNTAX MacAddress
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Destination MAC address used in the MAC ACL Classification."
|
|
::= { aclMacRuleEntry 5 }
|
|
|
|
aclMacRuleDestMacMask OBJECT-TYPE
|
|
SYNTAX MacAddress
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Destination MAC address mask used in the MAC ACL Classification.
|
|
|
|
This mask value identifies the portion of the aclMacRuleDestMacAddr
|
|
that is compared against a packet. A non-contiguous mask value is
|
|
permitted."
|
|
::= { aclMacRuleEntry 6 }
|
|
|
|
aclMacRuleEtypeKey OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
custom(1),
|
|
appletalk(2),
|
|
arp(3),
|
|
ibmsna(4),
|
|
ipv4(5),
|
|
ipv6(6),
|
|
ipx(7),
|
|
mplsmcast(8),
|
|
mplsucast(9),
|
|
netbios(10),
|
|
novell(11),
|
|
pppoe(12),
|
|
rarp(13)
|
|
}
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Ethertype keyword used in the MAC ACL Classification.
|
|
|
|
A keyword of custom(1) requires that the aclMacRuleEtypeValue
|
|
object also be set."
|
|
::= { aclMacRuleEntry 7 }
|
|
|
|
aclMacRuleEtypeValue OBJECT-TYPE
|
|
SYNTAX EtypeValue
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Ethertype custom value used in the MAC ACL Classification.
|
|
|
|
This object is only valid if the aclMacRuleEtypeKey is set to
|
|
custom(1). The allowed value for this object is 0x0600 to 0xFFFF
|
|
(1536 to 65535)."
|
|
::= { aclMacRuleEntry 8 }
|
|
|
|
aclMacRuleSrcMacAddr OBJECT-TYPE
|
|
SYNTAX MacAddress
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Source MAC address used in the MAC ACL Classification."
|
|
::= { aclMacRuleEntry 9 }
|
|
|
|
aclMacRuleSrcMacMask OBJECT-TYPE
|
|
SYNTAX MacAddress
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Source MAC address mask used in the MAC ACL Classification.
|
|
|
|
This mask value identifies the portion of the aclMacRuleSrcMacAddr
|
|
that is compared against a packet. A non-contiguous mask value is
|
|
permitted."
|
|
::= { aclMacRuleEntry 10 }
|
|
|
|
aclMacRuleVlanId OBJECT-TYPE
|
|
SYNTAX Unsigned32 (0..4095)
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The VLAN ID value used in the MAC ACL Classification.
|
|
|
|
The VLAN ID field is defined as the 12-bit VLAN identifier
|
|
in the 802.1Q tag header of a tagged Ethernet frame. This is
|
|
contained in the first/outer tag of a double VLAN tagged frame."
|
|
::= { aclMacRuleEntry 11 }
|
|
|
|
aclMacRuleVlanIdRangeStart OBJECT-TYPE
|
|
SYNTAX Unsigned32 (0..4095)
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The VLAN ID range start value used in the MAC ACL Classification.
|
|
Setting this value greater than the current aclMacRuleVlanIdRangeEnd
|
|
changes the VLAN ID range end to the same value as the range start.
|
|
|
|
The VLAN ID field is defined as the 12-bit VLAN identifier
|
|
in the 802.1Q tag header of a tagged Ethernet frame. This is
|
|
contained in the first/outer tag of a double VLAN tagged frame."
|
|
::= { aclMacRuleEntry 12 }
|
|
|
|
aclMacRuleVlanIdRangeEnd OBJECT-TYPE
|
|
SYNTAX Unsigned32 (0..4095)
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The VLAN ID range end value used in the MAC ACL Classification.
|
|
Setting this value less than the current aclMacRuleVlanIdRangeStart
|
|
changes the VLAN ID range start to the same value as the range end.
|
|
|
|
The VLAN ID field is defined as the 12-bit VLAN identifier
|
|
in the 802.1Q tag header of a tagged Ethernet frame. This is
|
|
contained in the first/outer tag of a double VLAN tagged frame."
|
|
::= { aclMacRuleEntry 13 }
|
|
|
|
aclMacRuleVlanId2 OBJECT-TYPE
|
|
SYNTAX Unsigned32 (0..4095)
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Secondary VLAN ID value used in the MAC ACL Classification.
|
|
|
|
The Secondary VLAN ID field is defined as the 12-bit VLAN identifier
|
|
in the second/inner 802.1Q tag header of a double VLAN tagged Ethernet
|
|
frame."
|
|
::= { aclMacRuleEntry 14 }
|
|
|
|
aclMacRuleVlanId2RangeStart OBJECT-TYPE
|
|
SYNTAX Unsigned32 (0..4095)
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Secondary VLAN ID range start value used in the MAC ACL Classification.
|
|
Setting this value greater than the current aclMacRuleVlanId2RangeEnd
|
|
changes the Secondary VLAN ID range end to the same value as the range start.
|
|
|
|
The Secondary VLAN ID field is defined as the 12-bit VLAN identifier
|
|
in the second/inner 802.1Q tag header of a double VLAN tagged Ethernet
|
|
frame."
|
|
::= { aclMacRuleEntry 15 }
|
|
|
|
aclMacRuleVlanId2RangeEnd OBJECT-TYPE
|
|
SYNTAX Unsigned32 (0..4095)
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Secondary VLAN ID range end value used in the MAC ACL Classification.
|
|
Setting this value less than the current aclMacRuleVlanId2RangeStart
|
|
changes the Secondary VLAN ID range start to the same value as the range end.
|
|
|
|
The Secondary VLAN ID field is defined as the 12-bit VLAN identifier
|
|
in the second/inner 802.1Q tag header of a double VLAN tagged Ethernet
|
|
frame."
|
|
::= { aclMacRuleEntry 16 }
|
|
|
|
aclMacRuleStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Status of this instance.
|
|
|
|
active(1) - this ACL Rule is active
|
|
createAndGo(4) - set to this value to create an instance
|
|
destroy(6) - set to this value to delete an instance"
|
|
::= { aclMacRuleEntry 17 }
|
|
|
|
aclMacRuleAssignQueueId OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Queue identifier to which all inbound packets matching this
|
|
MAC ACL rule are directed. This object defaults to the standard
|
|
queue assignment for user priority 0 traffic per the IEEE 802.1D
|
|
specification based on the number of assignable queues in the
|
|
system:
|
|
1-3 queues: 0
|
|
4-7 queues: 1
|
|
8 queues: 2
|
|
This default assignment is static and is not influenced by
|
|
other system configuration changes."
|
|
::= { aclMacRuleEntry 18 }
|
|
|
|
aclMacRuleRedirectIntf OBJECT-TYPE
|
|
SYNTAX InterfaceIndexOrZero
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A non-zero value indicates the external ifIndex to which all
|
|
inbound packets matching this MAC ACL rule are directed. A
|
|
value of zero means packet redirection is not in effect, which
|
|
is the default value of this object."
|
|
DEFVAL { 0 }
|
|
::= { aclMacRuleEntry 19 }
|
|
|
|
aclMacRuleMatchEvery OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Flag to indicate that the MAC acl rule is defined to match all packets,
|
|
regardless of Ethertype."
|
|
::= { aclMacRuleEntry 20 }
|
|
|
|
END
|