summaryrefslogtreecommitdiff
path: root/MIBS/telco-systems/binos/PRVT-SWITCH-ACCESS-LIST-MIB
diff options
context:
space:
mode:
authorDavid Leutgeb <david.leutgeb@mannundmouse.com>2023-12-05 12:25:34 +0100
committerDavid Leutgeb <david.leutgeb@mannundmouse.com>2023-12-05 12:25:34 +0100
commit98a672123c7872f6b9b75a9a2b6bb3aea504de6a (patch)
tree9b13bd7f563c3198047bd359195327cf28b3caf0 /MIBS/telco-systems/binos/PRVT-SWITCH-ACCESS-LIST-MIB
downloadmibs-98a672123c7872f6b9b75a9a2b6bb3aea504de6a.tar.gz
mibs-98a672123c7872f6b9b75a9a2b6bb3aea504de6a.zip
Initial commitHEADmain
Diffstat (limited to 'MIBS/telco-systems/binos/PRVT-SWITCH-ACCESS-LIST-MIB')
-rw-r--r--MIBS/telco-systems/binos/PRVT-SWITCH-ACCESS-LIST-MIB2529
1 files changed, 2529 insertions, 0 deletions
diff --git a/MIBS/telco-systems/binos/PRVT-SWITCH-ACCESS-LIST-MIB b/MIBS/telco-systems/binos/PRVT-SWITCH-ACCESS-LIST-MIB
new file mode 100644
index 0000000..d36047f
--- /dev/null
+++ b/MIBS/telco-systems/binos/PRVT-SWITCH-ACCESS-LIST-MIB
@@ -0,0 +1,2529 @@
+-- *********************************************************************
+-- *********************************************************************
+-- ** Filename: PRVT-SWITCH-ACCESS-LIST-MIB
+-- ** Project: T - Ethernet and Fast Ethernet IP Switches.
+-- ** Purpose: Private MIB
+-- *********************************************************************
+-- (c) Copyright, 2001, BATM Advanced Communications. All rights reserved.
+-- WARNING:
+--
+-- BY UTILIZING THIS FILE, YOU AGREE TO THE FOLLOWING:
+--
+-- This file is the property of BATM Advanced Communications.
+-- BATM Advanced Communications retains all title and
+-- ownership in the Specification, including any revisions.
+
+-- BATM Advanced Communications grants all interested parties a non-exclusive
+-- license to use and distribute an unmodified copy of this
+-- Specification in connection with management of BATM Advanced Communications
+-- and Telco Systems products, and without fee, provided that the following
+-- conditions are met:
+-- 1. Redistributions of this specification must retain the above copyright
+-- notice, this list of conditions and the following disclaimer.
+-- 2. Redistributions in binary form must reproduce the above copyright
+-- notice, this list of conditions and the following disclaimer in the
+-- documentation and/or other materials provided with the distribution.
+-- 3. The name of the BATM Advanced Communications MAY NOT be used to endorse
+-- or promote products derived from this specification without specific prior written
+-- permission.
+--
+-- EXCEPT AS RESTRICTED BY LAW, OR AS PROVIDED IN BATM'S LIMITED
+-- WARRANTY, THE SPECIFICATIONS CONTAINED IN THIS FILE ARE
+-- PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED
+-- OR IMPLIED, INCLUDING BUT NOT LIMITED TO, ANY IMPLIED WARRANTIES
+-- OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
+-- IN NO EVENT SHALL BATM BE LIABLE FOR ANY DAMAGES WHATSOEVER
+-- INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF BUSINESS
+-- PROFITS, BUSINESS INTERRUPTION, LOSS OF BUSINESS INFORMATION OR
+-- OTHER CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE, OR INABILITY
+-- TO USE, THE SPECIFICATION CONTAINED IN THIS FILE.
+
+PRVT-SWITCH-ACCESS-LIST-MIB DEFINITIONS ::= BEGIN
+IMPORTS
+
+ MODULE-IDENTITY, OBJECT-TYPE,IpAddress
+ FROM SNMPv2-SMI
+ RowStatus, DisplayString, TEXTUAL-CONVENTION, MacAddress, TruthValue
+ FROM SNMPv2-TC
+ ifIndex
+ FROM IF-MIB
+ dot1qVlanIndex, dot1qVlanStatus
+ FROM Q-BRIDGE-MIB
+ NOTIFICATION-TYPE
+ FROM SNMPv2-SMI
+
+ MODULE-COMPLIANCE, NOTIFICATION-GROUP,
+OBJECT-GROUP
+FROM SNMPv2-CONF
+
+svcId,
+sapPortId,
+sapEncapValue,
+sdpId
+FROM PRVT-SERV-MIB
+
+ ipSwitch
+ FROM PRVT-SWITCH-MIB;
+
+
+ prvtSwitchAccessListMib MODULE-IDENTITY
+ LAST-UPDATED "201011160000Z"
+ ORGANIZATION "BATM Advanced Communication"
+ CONTACT-INFO
+ " BATM/Telco Systems Support team
+ Email:
+ For North America: techsupport@telco.com
+ For North Europe: support@batm.de, info@batm.de
+ For the rest of the world: techsupport@telco.com"
+ DESCRIPTION
+ "The access-list MIB module that controls L3 switches access-list parameters"
+
+ -- revision history
+ REVISION "201102070000Z"
+ DESCRIPTION
+ "Addeed accessListInterfaceRateStatistics object"
+
+ REVISION "201011160000Z"
+ DESCRIPTION
+ "Added accessListSapTable and accessListSapStatisticsTable"
+
+ REVISION "201011030000Z"
+ DESCRIPTION
+ "Added new OIDs standardAccessListDropLevel, extendedAccessListDropLevel, macAccessListDropLevel,
+ standardAccessListDscp, extendedAccessListDscp"
+ REVISION "200904170000Z"
+ DESCRIPTION
+ "Created AccessListRemarkString TC."
+
+ REVISION "200811200000Z"
+ DESCRIPTION
+ "Added objects for Egress Access Lists"
+
+ REVISION "200802140000Z"
+ DESCRIPTION
+ "Added Access List Interface Statistics"
+ REVISION "200801010000Z"
+ DESCRIPTION
+ "Removed redefined OIDs in private vendor extension definitions."
+ REVISION "200712050000Z"
+ DESCRIPTION
+ " "
+ REVISION "200603220000Z"
+ DESCRIPTION
+ "Added the tag filter object in the interface and VLAN access group tables and changed some
+ description with TMetro specific information."
+
+ REVISION "200510030000Z"
+ DESCRIPTION
+ "Switched the values of greater-than and less-than in PortDef textual convention."
+
+ REVISION "200509300000Z"
+ DESCRIPTION
+ "Changed the Rate textual convention to include the value of 0 (zero)."
+
+ REVISION "200502280000Z"
+ DESCRIPTION
+ "Added the span track objects in the interface tables."
+
+ REVISION "200502240000Z"
+ DESCRIPTION
+ "Added the source and destination range objects in the extended access list table."
+
+
+ REVISION "200502160000Z"
+ DESCRIPTION
+ "Fixed spelling errors and changed the contact info."
+
+ REVISION "200412150000Z"
+ DESCRIPTION
+ "1. accessListControlTable is now indexed only by accessListControlListGroup and the row
+ status creates whole groups.
+ 2. Added standardAccessListIndex and extendedAccessListIndex as indices of standardAccessListTable
+ and extendedAccessListTable to replace accessGroupControlListIndex.
+ 3. Added standardAccessListRowStatus and extendedAccessListRowStatus to enable creation of rules.
+ Rules, however, cannot be deleted using these objects.
+ 4. Added support for enabling the loggin of ACLs (standardAccessListLog, extendedAccessListLog).
+ 5. Added support for redirection traffic to a vlan and ip next hop
+ (accessListInterfaceRedirectVlanID,accessListVLANRedirectVlanID,accessListInterfaceRedirectNexthop,accessListVLANRedirectNexthop).
+ 6. Added objects for configuring the Peak rate and peak burst when dual rate limit is used.
+ (accessListInterfacePeakRate, accessListInterfacePeakBurst, accessListVLANPeakRate,accessListVLANPeakBurst)
+ 7. Added objects for toggling the traffic metering color awareness and remarking policy.
+ (accessListInterfaceColorAware, accessListVlanColorAware,accessListInterfacePolicy, accessListVlanPolicy)
+ "
+
+ REVISION "200310150000Z"
+ DESCRIPTION
+ "Global changes:
+ 1. Added support for VLAN IP access-group.
+ 2. Added support for redirecting traffic to an interface
+ (accessListInterfaceRedirectIfIndex,accessListVLANRedirectIfIndex).
+ 3. Renamed accessListControlListGroupIndex to accessListInterfaceGroupIndex
+ 4. Changes in AccessListAction, removed shaper.
+ 5. Removed Burst TEXTUAL-CONVENTION.
+
+ Changes for E-Series
+ 1. Introduced changes in PortDef,ExceedAction,AccessListDiscard TEXTUAL-CONVENTION for E-Series.
+ 2. The objects extendedAccessListIgmpType and accessListInterfaceShaper are
+ not supported for E-Series.
+ 3. Added accessListInterfaceBurst,accessListVLANBurst for E-Series.
+ 4. The range of accessListInterfaceDscp is now 0..63 for E-Series."
+
+ REVISION "200305080000Z"
+ DESCRIPTION
+ "Moved to SMI-V2.
+ Removed extendedAccessListEstablished and
+ extendedAccessListMSS."
+
+ REVISION "200211120000Z"
+ DESCRIPTION
+ "Changed mapping of AccessListAction enum."
+
+ REVISION "200111050000Z"
+ DESCRIPTION
+ "Added shaper to access group."
+
+ REVISION "200109300000Z"
+ DESCRIPTION
+ "Added ICMP type,ICMP code and IGMP to extended access list."
+
+ REVISION "200108270000Z"
+ DESCRIPTION
+ "Added access group with rate limit."
+
+ REVISION "200107310000Z"
+ DESCRIPTION
+ "Added routed ISP."
+
+ REVISION "200105140000Z"
+ DESCRIPTION
+ "1. Added remark, MSS and Established to access list.
+ 2. Added Priority and Discard to access group."
+
+ REVISION "200102200000Z"
+ DESCRIPTION
+ "Added the ability to modify TOS in extended access list."
+
+ REVISION "200102150000Z"
+ DESCRIPTION
+ "Added shaper mode for access list action."
+
+ REVISION "200101280000Z"
+ DESCRIPTION
+ "Added support for access group in ISP."
+
+ REVISION "200011130959Z"
+ DESCRIPTION
+ "Initial version."
+
+ ::= { ipSwitch 1 }
+
+ AccessListAction ::= TEXTUAL-CONVENTION
+ STATUS current
+ DESCRIPTION
+ "The AccessListAction type represents action taken when this
+ access-list condition are asserted.
+ "
+ SYNTAX INTEGER
+ {
+ permit(0),
+ deny(1),
+ shaper(2),
+ remark(3),
+ undefined(100)
+ }
+
+ IpProtocol ::= TEXTUAL-CONVENTION
+ STATUS current
+ DESCRIPTION
+ "The IpProtocol type represents the protocol number in the IP datagram header"
+ SYNTAX INTEGER (0..255)
+
+ PortDef ::= TEXTUAL-CONVENTION
+ STATUS current
+ DESCRIPTION
+ "The PortDef type operates together with the port number filed inside
+ the access-list & control how the port number is being processed.
+ The values greater-than(3) and less-than(4) are supported only on
+ E-Series family boards"
+ SYNTAX INTEGER
+ {
+ equal(1),
+ range(2),
+ greater-than(3),
+ less-than(4),
+ undefined(0)
+ }
+
+ Rate ::= TEXTUAL-CONVENTION
+ STATUS current
+ DESCRIPTION
+ "The Rate type represents in Kbps the maximum rate limit for the flow"
+ SYNTAX INTEGER (0|13..1000000)
+
+ ExceedAction ::= TEXTUAL-CONVENTION
+ STATUS current
+ DESCRIPTION
+ "the ExceedAction type represents the action that the switch should take
+ when one of the limits exceeded: drop -> drop the packets, markDiscardable
+ this packet is discardable if a conjection ocure
+ Only the E-Series family boards support the values green, yellow and red. Other
+ values are not supported by the E-Series"
+ SYNTAX INTEGER
+ {
+ drop(0),
+ markDiscardable(1),
+ undefined(2),
+ green(3),
+ yellow(4),
+ red(5)
+ }
+
+ VlanTag ::= TEXTUAL-CONVENTION
+ STATUS current
+ DESCRIPTION
+ "The VlanTag type represents if the VLAN is tagged or untagged."
+ SYNTAX INTEGER
+ {
+ untagged (0),
+ tagged (1),
+ undefined (2)
+ }
+
+ ISPType ::= TEXTUAL-CONVENTION
+ STATUS current
+ DESCRIPTION
+ "The ISPType type represents the ISP type - either connective or normal."
+ SYNTAX INTEGER
+ {
+ connectivity (0),
+ normal (1),
+ routed (2)
+
+ }
+
+ Shaper ::= TEXTUAL-CONVENTION
+ STATUS current
+ DESCRIPTION
+ "The Shaper type represents the status of the shaper"
+ SYNTAX INTEGER
+ {
+ disable (0),
+ enable (1)
+ }
+
+ ConformAction ::= TEXTUAL-CONVENTION
+ STATUS current
+ DESCRIPTION
+ "The action to perform if the condition is matched."
+ SYNTAX INTEGER
+ {
+ transmit (0)
+ }
+
+ AssigenValue ::= TEXTUAL-CONVENTION
+ STATUS current
+ DESCRIPTION
+ "Enables/disables assignment of an ISP user to this interface."
+ SYNTAX INTEGER
+ {
+ enable (1),
+ disable (2)
+ }
+
+ AccessListModifyTos ::= TEXTUAL-CONVENTION
+ STATUS current
+ DESCRIPTION
+ "The AccessListModifyTos must be enabled if the user wants the ToS to be modified."
+ SYNTAX INTEGER
+ {
+ enable (1),
+ disable (0)
+ }
+
+ AccessListEstablished ::= TEXTUAL-CONVENTION
+ STATUS current
+ DESCRIPTION
+ "Match established connection (ACK or RST flages)"
+ SYNTAX INTEGER
+ {
+ enable (1),
+ disable (0)
+ }
+
+ AccessListDiscard ::= TEXTUAL-CONVENTION
+ STATUS current
+ DESCRIPTION
+ "Mark discardable or normal for priority on access group
+ Only the E-Series family and the G-Series family boards support the values green, yellow and red. Other
+ values are not supported by the E-Series and G-series."
+ SYNTAX INTEGER
+ {
+ normal(0),
+ discardable(1),
+ green(2),
+ yellow(3),
+ red(4),
+ undefined(5)
+ }
+
+ AccessListRemarkString ::= TEXTUAL-CONVENTION
+ DISPLAY-HINT "40a"
+ STATUS current
+ DESCRIPTION
+ "Access list entry comment string"
+ SYNTAX OCTET STRING (SIZE (0..40))
+
+ TxqDropLevel ::= TEXTUAL-CONVENTION
+ STATUS current
+ DESCRIPTION
+ "TXQ drop level values"
+ SYNTAX INTEGER { undefined(0), green(1), yellow(2) }
+
+MatchTraffic ::= TEXTUAL-CONVENTION
+ STATUS current
+ DESCRIPTION
+ "Match traffic values"
+ SYNTAX INTEGER {
+ undefined(0),
+ untagged(1),
+ unknown-unicast(2),
+ multicast(3),
+ broadcast(4),
+ known-unicast(5) }
+
+ AccessListStatistics ::= TEXTUAL-CONVENTION
+ STATUS current
+ DESCRIPTION
+ "Access list statistics values"
+ SYNTAX INTEGER
+ {
+ enable (1),
+ disable (0)
+ }
+
+ AccessListDirection ::= TEXTUAL-CONVENTION
+ STATUS current
+ DESCRIPTION
+ "Access list applied direction values"
+ SYNTAX INTEGER
+ {
+ ingress (0),
+ egress (1)
+ }
+
+ prvtSwitchAccessListNotifications OBJECT IDENTIFIER ::= { prvtSwitchAccessListMib 0 }
+ accessLists OBJECT IDENTIFIER ::= { prvtSwitchAccessListMib 1 }
+ isp OBJECT IDENTIFIER ::= { prvtSwitchAccessListMib 2 }
+ prvtSwitchAccessListConformance OBJECT IDENTIFIER ::= { prvtSwitchAccessListMib 3 }
+
+
+ accessListTemplate OBJECT-TYPE
+ SYNTAX INTEGER {
+ standard (1),
+ vlan-priority (2)
+ }
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The access-list template in use. For non E-series devices, the device must be restarted
+ for this setting to take effect."
+ ::= { accessLists 1 }
+
+ accessGroupsDefinitions OBJECT IDENTIFIER ::= { accessLists 2 }
+ accessListsInterfaces OBJECT IDENTIFIER ::= { accessLists 3 }
+ accessListsVLAN OBJECT IDENTIFIER ::= { accessLists 4 }
+ accessListsServices OBJECT IDENTIFIER ::= { accessLists 5 }
+ accessListsInterfaceStatistics OBJECT IDENTIFIER ::= { accessLists 6 }
+ accessListsServicesStatistics OBJECT IDENTIFIER ::= {accessLists 7}
+
+ accessListControlTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF AccessListControlEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "This table controls the creation or removal of a access-list
+ group from all access-list tables. The real programming of values is
+ done in the coresponding access-list table."
+ ::= { accessGroupsDefinitions 1 }
+
+ accessListControlEntry OBJECT-TYPE
+ SYNTAX AccessListControlEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "An entry in the accessListControlTable table."
+ INDEX { accessListControlListGroup }
+ ::= { accessListControlTable 1 }
+
+ AccessListControlEntry ::= SEQUENCE {
+ accessListControlListGroup INTEGER,
+ accessListControlRowStatus RowStatus
+ }
+
+ accessListControlListGroup OBJECT-TYPE
+ SYNTAX INTEGER (1..65535)
+ MAX-ACCESS accessible-for-notify
+ STATUS current
+ DESCRIPTION
+ "This object identifies the index of the group of access-list rules
+ Each range of group indexes is related to a different access-list type
+ 1..99 for standard access-list
+ 100..199 for extended access-list."
+ ::= { accessListControlEntry 1 }
+ accessListControlRowStatus OBJECT-TYPE
+ SYNTAX RowStatus
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This indicates the row status & enables creation & deletion of lines in
+ this table. See SNMPv2-TC for more information."
+ ::= { accessListControlEntry 2 }
+
+ ----------------------------------------------
+
+ standardAccessListTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF StandardAccessListEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "This table contains standard access-list parameters."
+ ::= { accessGroupsDefinitions 2 }
+
+ standardAccessListEntry OBJECT-TYPE
+ SYNTAX StandardAccessListEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "An entry in the standardAccessListTable table."
+ INDEX { accessListControlListGroup, standardAccessListIndex }
+ ::= { standardAccessListTable 1 }
+
+ StandardAccessListEntry ::= SEQUENCE {
+ standardAccessListIndex INTEGER,
+ standardAccessListAction AccessListAction,
+ standardAccessListIpSrc IpAddress,
+ standardAccessListIpMASKsrc IpAddress,
+ standardAccessListRemark AccessListRemarkString,
+ standardAccessListLog INTEGER,
+ standardAccessListVpt INTEGER,
+ standardAccessListRowStatus RowStatus,
+ standardAccessListVlanId INTEGER,
+ standardAccessListVlanMask DisplayString,
+ standardAccessListProviderVlanId INTEGER,
+ standardAccessListProviderVlanMask DisplayString,
+ standardAccessListProviderVpt INTEGER,
+ standardAccessListUntaggedMode TruthValue,
+ standardAccessListDropLevel INTEGER,
+ standardAccessListDscp INTEGER
+
+ }
+
+ standardAccessListIndex OBJECT-TYPE
+ SYNTAX INTEGER (1..65535)
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "Index of the particular rule of the group."
+ ::= { standardAccessListEntry 1 }
+
+ standardAccessListAction OBJECT-TYPE
+ SYNTAX AccessListAction
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "The action to preform if the condition of this access-list rule condition is true."
+ ::= { standardAccessListEntry 2 }
+
+ standardAccessListIpSrc OBJECT-TYPE
+ SYNTAX IpAddress
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "The IP source address associated with this flow."
+ ::= { standardAccessListEntry 3 }
+
+ standardAccessListIpMASKsrc OBJECT-TYPE
+ SYNTAX IpAddress
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "The IP mask that, together with standardAccessListIpSrc, defines the subnet."
+ ::= { standardAccessListEntry 4 }
+
+ standardAccessListRemark OBJECT-TYPE
+ SYNTAX AccessListRemarkString
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "Access list entry comment"
+ ::= { standardAccessListEntry 5 }
+
+ standardAccessListLog OBJECT-TYPE
+ SYNTAX INTEGER
+ {
+ undefined (0),
+ log (1),
+ log-input (2)
+ }
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "Enable normal or extended logging of this access-list rule."
+ ::= { standardAccessListEntry 6 }
+
+ standardAccessListVpt OBJECT-TYPE
+ SYNTAX INTEGER
+ {
+ vpt-value0(0),
+ vpt-value1(1),
+ vpt-value2(2),
+ vpt-value3(3),
+ vpt-value4(4),
+ vpt-value5(5),
+ vpt-value6(6),
+ vpt-value7(7),
+ undefined(8),
+ fc-be(241),
+ fc-l2(242),
+ fc-af(243),
+ fc-l1(244),
+ fc-h2(245),
+ fc-ef(246),
+ fc-h1(247),
+ fc-nc(248)
+ }
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object is meaningful :
+ 1.when vlan-priority template is used and will reprezent vlan priority tag.
+ 2.Forwarding class reprezented in the second part of enumeration: fc-##.
+ A value of 8 means that neither of above is defined."
+ ::= { standardAccessListEntry 7 }
+
+ standardAccessListRowStatus OBJECT-TYPE
+ SYNTAX RowStatus
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "This indicates the row status & enables creation of rows in
+ this table. In order to be consistent with ACL policy, this object
+ does not allow deletion of rules. The entire group must be deleted and all
+ rules removed at once."
+ ::= { standardAccessListEntry 8 }
+
+ standardAccessListVlanId OBJECT-TYPE
+ SYNTAX INTEGER (0..4092)
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object shows the customer VLAN. The object is meaningful only
+ if standardAccessListVlanMask is set."
+ ::= { standardAccessListEntry 9 }
+
+ standardAccessListVlanMask OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object shows the customer VLAN mask. It is meaningful only
+ if standardAccessListVlanId is set.
+ The value is in hexadecimal type DisplayString (0xXXX)."
+ ::= { standardAccessListEntry 10 }
+
+ standardAccessListProviderVlanId OBJECT-TYPE
+ SYNTAX INTEGER (0..4092)
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object shows the provider VLAN. The object is meaningful only
+ if standardAccessListProviderVlanMask is set."
+ ::= { standardAccessListEntry 11 }
+
+ standardAccessListProviderVlanMask OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object shows the provider VLAN mask. It is meaningful only
+ if standardAccessListProviderVlanId is set.
+ The value is in hexadecimal type DisplayString (0xXXX)"
+ ::= { standardAccessListEntry 12}
+
+ standardAccessListProviderVpt OBJECT-TYPE
+ SYNTAX INTEGER (0..8)
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object shows the provider VLAN priority tag.
+ A value of 8 means undefined."
+ ::= { standardAccessListEntry 13 }
+
+ standardAccessListUntaggedMode OBJECT-TYPE
+ SYNTAX TruthValue
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object enables the untagged mode"
+ ::= { standardAccessListEntry 14 }
+
+ standardAccessListDropLevel OBJECT-TYPE
+ SYNTAX INTEGER
+ {
+ green(0),
+ yellow(1)
+ }
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object define drop-level."
+ ::= { standardAccessListEntry 15}
+
+ standardAccessListDscp OBJECT-TYPE
+ SYNTAX INTEGER (0..63)
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "The object shows the DiffServ Point (DSCP) value from IP header."
+ ::= {standardAccessListEntry 16}
+
+
+ extendedAccessListTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF ExtendedAccessListEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "This table contains extended access-list parameters."
+ ::= { accessGroupsDefinitions 3 }
+
+ extendedAccessListEntry OBJECT-TYPE
+ SYNTAX ExtendedAccessListEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "An entry in the extendedAccessListTable table."
+ INDEX { accessListControlListGroup, extendedAccessListIndex }
+ ::= { extendedAccessListTable 1 }
+
+ ExtendedAccessListEntry ::= SEQUENCE {
+ extendedAccessListIndex INTEGER,
+ extendedAccessListAction AccessListAction,
+ extendedAccessListIpProtocol IpProtocol,
+ extendedAccessListIpSrc IpAddress,
+ extendedAccessListIpMASKsrc IpAddress,
+ extendedAccessListPortDefSrc PortDef,
+ extendedAccessListPortNumSrc INTEGER,
+ extendedAccessListPortRangeSrc INTEGER,
+ extendedAccessListIpDest IpAddress,
+ extendedAccessListIpMASKdst IpAddress,
+ extendedAccessListPortDefDst PortDef,
+ extendedAccessListPortNumDst INTEGER,
+ extendedAccessListPortRangeDst INTEGER,
+ extendedAccessListTos INTEGER,
+ extendedAccessListPrec INTEGER,
+ extendedAccessListModifyTos AccessListModifyTos,
+ extendedAccessListRemark AccessListRemarkString,
+ extendedAccessListIcmpType INTEGER,
+ extendedAccessListIcmpCode INTEGER,
+ extendedAccessListIgmpType INTEGER,
+ extendedAccessListEstablished AccessListEstablished,
+ extendedAccessListLog INTEGER,
+ extendedAccessListVpt INTEGER,
+ extendedAccessListRowStatus RowStatus,
+ extendedAccessListVlanId INTEGER,
+ extendedAccessListVlanMask DisplayString,
+ extendedAccessListProviderVlanId INTEGER,
+ extendedAccessListProviderVlanMask DisplayString,
+ extendedAccessListProviderVpt INTEGER,
+ extendedAccessListUntaggedMode TruthValue,
+ extendedAccessListDropLevel INTEGER,
+ extendedAccessListDscp INTEGER
+ }
+
+ extendedAccessListIndex OBJECT-TYPE
+ SYNTAX INTEGER (1..65535)
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "Index of the particular rule of the group."
+ ::= { extendedAccessListEntry 1 }
+
+ extendedAccessListAction OBJECT-TYPE
+ SYNTAX AccessListAction
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "The action to preform if this access-list rule condition is true."
+ ::= { extendedAccessListEntry 2 }
+
+ extendedAccessListIpProtocol OBJECT-TYPE
+ SYNTAX IpProtocol
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "The IP protocol number (see IpProtocol)."
+ ::= { extendedAccessListEntry 3 }
+
+ extendedAccessListIpSrc OBJECT-TYPE
+ SYNTAX IpAddress
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "The IP source address associated with this flow."
+ ::= { extendedAccessListEntry 4 }
+
+ extendedAccessListIpMASKsrc OBJECT-TYPE
+ SYNTAX IpAddress
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "The IP mask, together with extendendAccessListIpSrc, defines the subnet."
+ ::= { extendedAccessListEntry 5 }
+
+ extendedAccessListPortDefSrc OBJECT-TYPE
+ SYNTAX PortDef
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "The extendedAccessListPortDefSrc object operates together with the port number filed inside
+ the access-list & controls how the port number is being processed.
+ The values less-than(3) and greater-than(4) are supported only on E-Series family boards."
+ ::= { extendedAccessListEntry 6 }
+
+ extendedAccessListPortNumSrc OBJECT-TYPE
+ SYNTAX INTEGER (0..65535)
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "UDP/TCP port number. A value of 0 represents undefined port number."
+ ::= { extendedAccessListEntry 7 }
+
+ extendedAccessListPortRangeSrc OBJECT-TYPE
+ SYNTAX INTEGER (0..65535)
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "UDP/TCP ned range port number. A value of 0 represents undefined port number. Valid
+ only with extendedAccessListPortDefSrc value of range(2)."
+ ::= { extendedAccessListEntry 8 }
+
+ extendedAccessListIpDest OBJECT-TYPE
+ SYNTAX IpAddress
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "The IP destination address associated with this flow."
+ ::= { extendedAccessListEntry 9 }
+
+ extendedAccessListIpMASKdst OBJECT-TYPE
+ SYNTAX IpAddress
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "The IP mask, together with extendedAccessListIpMASKdst, defines the subnet."
+ ::= { extendedAccessListEntry 10 }
+
+ extendedAccessListPortDefDst OBJECT-TYPE
+ SYNTAX PortDef
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "The extendedAccessListPortDefDst object operates together with the port number filed inside
+ the access-list & controls how the port number is being processed.
+ The values less-than(3) and greater-than(4) are supported only on E-Series family boards."
+ ::= { extendedAccessListEntry 11 }
+
+ extendedAccessListPortNumDst OBJECT-TYPE
+ SYNTAX INTEGER (0..65535)
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "UDP/TCP port number. A value of 0 represents undefined port number."
+ ::= { extendedAccessListEntry 12 }
+
+ extendedAccessListPortRangeDst OBJECT-TYPE
+ SYNTAX INTEGER (0..65535)
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "UDP/TCP ned range port number. A value of 0 represents undefined port number. Valid for
+ value range (2) of extendedAccessListPortDefDst."
+ ::= { extendedAccessListEntry 13 }
+
+
+ extendedAccessListTos OBJECT-TYPE
+ SYNTAX INTEGER (0..15)
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object shows the type of service value."
+ ::= { extendedAccessListEntry 14 }
+
+ extendedAccessListPrec OBJECT-TYPE
+ SYNTAX INTEGER (0..7)
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "Precedence value."
+ ::= { extendedAccessListEntry 15 }
+
+ extendedAccessListModifyTos OBJECT-TYPE
+ SYNTAX AccessListModifyTos
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "extendedAccessListModifyTos must be enabled if the user wants the ToS to be modified."
+ ::= { extendedAccessListEntry 16 }
+
+ extendedAccessListRemark OBJECT-TYPE
+ SYNTAX AccessListRemarkString
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "Access list entry comment."
+ ::= { extendedAccessListEntry 17 }
+
+ extendedAccessListIcmpType OBJECT-TYPE
+ SYNTAX INTEGER (0..255)
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "ICMP message type."
+ ::= { extendedAccessListEntry 18 }
+
+ extendedAccessListIcmpCode OBJECT-TYPE
+ SYNTAX INTEGER (0..255)
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "ICMP message code."
+ ::= { extendedAccessListEntry 19 }
+
+ extendedAccessListIgmpType OBJECT-TYPE
+ SYNTAX INTEGER (0..15)
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "IGMP message type. This object is not supported in E-Series"
+ ::= { extendedAccessListEntry 20 }
+
+ extendedAccessListEstablished OBJECT-TYPE
+ SYNTAX AccessListEstablished
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "When TCP protocol type is chosen, setting this object indicates that established connections will be matched."
+ ::= { extendedAccessListEntry 21 }
+
+ extendedAccessListLog OBJECT-TYPE
+ SYNTAX INTEGER
+ {
+ undefined (0),
+ log (1),
+ log-input (2)
+ }
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "Enable normal or extended logging of this access-list rule."
+ ::= { extendedAccessListEntry 22 }
+
+ extendedAccessListVpt OBJECT-TYPE
+ SYNTAX INTEGER
+ {
+ vpt-value0(0),
+ vpt-value1(1),
+ vpt-value2(2),
+ vpt-value3(3),
+ vpt-value4(4),
+ vpt-value5(5),
+ vpt-value6(6),
+ vpt-value7(7),
+ undefined(8),
+ fc-be(241),
+ fc-l2(242),
+ fc-af(243),
+ fc-l1(244),
+ fc-h2(245),
+ fc-ef(246),
+ fc-h1(247),
+ fc-nc(248)
+ }
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object is meaningful :
+ 1.when vlan-priority template is used and will reprezent vlan priority tag.
+ 2.Forwarding class reprezented in the second part of enumeration: fc-##.
+ A value of 8 means that neither of above is defined."
+
+ ::= { extendedAccessListEntry 23 }
+
+ extendedAccessListRowStatus OBJECT-TYPE
+ SYNTAX RowStatus
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "This indicates the row status & enables creation of lines in
+ this table. In order to be consistent with ACL policy, this object
+ does not allow deletion of rules. The entire group must be deleted and all
+ rules removed at once."
+ ::= { extendedAccessListEntry 24 }
+ extendedAccessListVlanId OBJECT-TYPE
+ SYNTAX INTEGER (0..4092)
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object shows the customer VLAN. The object is meaningful
+ only if extendedAccessListVlanMask is set."
+ ::= { extendedAccessListEntry 25 }
+
+ extendedAccessListVlanMask OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object shows the customer VLAN mask. It is meaningful only
+ if extendedAccessListVlanId is set.
+ The value is in hexadecimal type string(0x..)."
+ ::= { extendedAccessListEntry 26 }
+
+ extendedAccessListProviderVlanId OBJECT-TYPE
+ SYNTAX INTEGER (0..4092)
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object shows the provider VLAN. The object is meaningful only
+ if extendedAccessListProviderVlanMask is set."
+ ::= { extendedAccessListEntry 27 }
+
+ extendedAccessListProviderVlanMask OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object shows the provider VLAN mask. It is meaningful only
+ if extendedAccessListProviderVlanId is set.
+ The value is in hexadecimal type string(0x..)."
+ ::= { extendedAccessListEntry 28 }
+
+ extendedAccessListProviderVpt OBJECT-TYPE
+ SYNTAX INTEGER (0..8)
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object shows the provider VLAN priority tag.
+ A value of 8 means undefined.
+ This object is meaningful only if vlan-priority template is used."
+ ::= { extendedAccessListEntry 29 }
+
+ extendedAccessListUntaggedMode OBJECT-TYPE
+ SYNTAX TruthValue
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object enables the untagged mode."
+ ::= { extendedAccessListEntry 30 }
+
+ extendedAccessListDropLevel OBJECT-TYPE
+ SYNTAX INTEGER
+ {
+ green(0),
+ yellow(1)
+ }
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object define drop-level."
+ ::= { extendedAccessListEntry 31}
+
+ extendedAccessListDscp OBJECT-TYPE
+ SYNTAX INTEGER (0..63)
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "The object shows the DiffServ Point (DSCP) value from IP header."
+ ::= {extendedAccessListEntry 32}
+
+--MAC ACL----------------------------------------------------------------
+ macAccessListTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF MACAccessListEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "This table contains MAC access-list parameters."
+ ::= { accessGroupsDefinitions 4 }
+
+ macAccessListEntry OBJECT-TYPE
+ SYNTAX MACAccessListEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "An entry in the macAccessListTable table."
+ INDEX { accessListControlListGroup, macAccessListIndex }
+ ::= { macAccessListTable 1 }
+
+ MACAccessListEntry ::= SEQUENCE {
+ macAccessListIndex INTEGER,
+ macAccessListAction AccessListAction,
+ macAccessListMacSrc MacAddress,
+ macAccessListMacSrcMask MacAddress,
+ macAccessListMacDst MacAddress,
+ macAccessListMacDstMask MacAddress,
+ macAccessListRemark AccessListRemarkString,
+ macAccessListLog INTEGER,
+ macAccessListRowStatus RowStatus,
+ macAccessListTos INTEGER,
+ macAccessListPrecedence INTEGER,
+ macAccessListVpt INTEGER,
+ macAccessListVlanId INTEGER,
+ macAccessListVlanMask DisplayString,
+ macAccessListInnerVlanId INTEGER,
+ macAccessListInnerVlanMask DisplayString,
+ macAccessListInnerVpt INTEGER,
+ macAccessListEtherType DisplayString,
+ macAccessListDscp INTEGER,
+ macAccessListMatchTraffic MatchTraffic,
+ macAccessListMatchTrafficPort DisplayString,
+ macAccessListUntaggedMode TruthValue,
+ macAccessListDropLevel INTEGER
+
+ }
+
+ macAccessListIndex OBJECT-TYPE
+ SYNTAX INTEGER (1..65535)
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "Index of the particular rule of the group."
+ ::= { macAccessListEntry 1 }
+
+ macAccessListAction OBJECT-TYPE
+ SYNTAX AccessListAction
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "The action to preform if this access-list rule condition is true."
+ ::= { macAccessListEntry 2 }
+
+ macAccessListMacSrc OBJECT-TYPE
+ SYNTAX MacAddress
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "The object contains the MAC address of source.
+ If this object is not set, the result is 'any' source mac address.
+ If object macAccessListMacSrcMask is not set, this object means the host address."
+ ::= { macAccessListEntry 3 }
+
+ macAccessListMacSrcMask OBJECT-TYPE
+ SYNTAX MacAddress
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object contains the mask for MAC source address.
+ The object affects macAccessListMacSrc, defines host or range."
+ ::= { macAccessListEntry 4 }
+
+ macAccessListMacDst OBJECT-TYPE
+ SYNTAX MacAddress
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "The object contains the MAC address of destination.
+ If this object is not set, the result is 'any' destination mac address.
+ If object macAccessListMacDstMask is not set, this object means the host address."
+ ::= { macAccessListEntry 5 }
+
+ macAccessListMacDstMask OBJECT-TYPE
+ SYNTAX MacAddress
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object contains the mask for MAC destination address.
+ The object affects macAccessListMacDst, defines host or range."
+ ::= { macAccessListEntry 6 }
+
+ macAccessListRemark OBJECT-TYPE
+ SYNTAX AccessListRemarkString
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "Access list entry comment"
+ ::= { macAccessListEntry 7 }
+
+ macAccessListLog OBJECT-TYPE
+ SYNTAX INTEGER
+ {
+ undefined (0),
+ log (1),
+ log-input (2)
+ }
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "Enable normal or extended logging of this access-list rule."
+ ::= { macAccessListEntry 8 }
+
+ macAccessListRowStatus OBJECT-TYPE
+ SYNTAX RowStatus
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "This indicates the row status & enables creation of rows in
+ this table. In order to be consistent with ACL policy, this object
+ does not allow deletion of rules. The entire group must be deleted and all
+ rules removed at once."
+ ::= { macAccessListEntry 9 }
+
+ macAccessListTos OBJECT-TYPE
+ SYNTAX INTEGER
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object shows the type of service value."
+ ::= { macAccessListEntry 10}
+
+ macAccessListPrecedence OBJECT-TYPE
+ SYNTAX INTEGER
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object shows the precedence value.
+ The parameter is matched for IP traffic only.
+ The value is in the range between <0-8>.
+ When precendence is disable the object will take 8 value."
+ ::= { macAccessListEntry 11 }
+
+ macAccessListVpt OBJECT-TYPE
+ SYNTAX INTEGER
+ {
+ vpt-value0(0),
+ vpt-value1(1),
+ vpt-value2(2),
+ vpt-value3(3),
+ vpt-value4(4),
+ vpt-value5(5),
+ vpt-value6(6),
+ vpt-value7(7),
+ undefined(8),
+ fc-be(241),
+ fc-l2(242),
+ fc-af(243),
+ fc-l1(244),
+ fc-h2(245),
+ fc-ef(246),
+ fc-h1(247),
+ fc-nc(248)
+ }
+
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object is meaningful :
+ 1.when vlan-priority template is used and will reprezent vlan priority tag.
+ 2.Forwarding class reprezented in the second part of enumeration: fc-##.
+ A value of 8 means that neither of above is defined."
+ ::= { macAccessListEntry 12 }
+
+ macAccessListVlanId OBJECT-TYPE
+ SYNTAX INTEGER (0..4092)
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object shows the customer VLAN. The object is meaningful only
+ if macAccessListVlanMask is set."
+ ::= { macAccessListEntry 13 }
+
+ macAccessListVlanMask OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object shows the customer VLAN mask. It is meaningful only
+ if macAccessListVlanId is set.
+ The value is in hexadecimal type string(0x..)."
+ ::= { macAccessListEntry 14 }
+
+ macAccessListInnerVlanId OBJECT-TYPE
+ SYNTAX INTEGER (0..4092)
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object shows the provider VLAN. The object is meaningful only
+ if macAccessListProviderVlanMask is set."
+ ::= { macAccessListEntry 15 }
+
+ macAccessListInnerVlanMask OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object shows the provider VLAN mask. It is meaningful only
+ if macAccessListProviderVlanId is set.
+ The value is in hexadecimal type string(0x..). "
+ ::= { macAccessListEntry 16 }
+
+ macAccessListInnerVpt OBJECT-TYPE
+ SYNTAX INTEGER (0..8)
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object shows the provider VLAN priority tag.
+ A value of 8 means undefined"
+ ::= { macAccessListEntry 17 }
+
+ macAccessListEtherType OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "The object shows the EtherType field in the Ethernet header.
+ The field is matched only for non-IP and non-ARP traffic only."
+ ::= { macAccessListEntry 18 }
+
+ macAccessListDscp OBJECT-TYPE
+ SYNTAX INTEGER
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "The object shows the DiffServ Point (DSCP) value from IP header."
+ ::= { macAccessListEntry 19 }
+
+ macAccessListMatchTraffic OBJECT-TYPE
+ SYNTAX MatchTraffic
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object shows the type of traffic to match."
+ ::= { macAccessListEntry 20 }
+
+ macAccessListMatchTrafficPort OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object is meaningful only if macAccessListMatchTraffic
+ is set to 'known-unicast' value - else returns error.
+ The values are of types PORTLIST (for example 1/1/1-1/1/4,1/1/6)"
+ ::= { macAccessListEntry 21 }
+
+ macAccessListUntaggedMode OBJECT-TYPE
+ SYNTAX TruthValue
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object enables the untagged mode."
+ ::= { macAccessListEntry 22 }
+
+ macAccessListDropLevel OBJECT-TYPE
+ SYNTAX INTEGER
+ {
+ green(0),
+ yellow(1)
+ }
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object define drop-level."
+ ::= { macAccessListEntry 23}
+
+
+--Ethertype ACL---------------------------------
+ etherTypeAccessListTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF EtherTypeAccessListEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "This table contains extended MAC access-list parameters."
+ ::= { accessGroupsDefinitions 5 }
+
+ etherTypeAccessListEntry OBJECT-TYPE
+ SYNTAX EtherTypeAccessListEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "An entry in the etherTypeAccessListTable table."
+ INDEX { accessListControlListGroup, etherTypeAccessListIndex }
+ ::= { etherTypeAccessListTable 1 }
+
+ EtherTypeAccessListEntry ::= SEQUENCE {
+ etherTypeAccessListIndex INTEGER,
+ etherTypeAccessListAction AccessListAction,
+ etherTypeAccessListEtherType DisplayString,
+ etherTypeAccessListEtherTypeCodeMask DisplayString,
+ etherTypeAccessListRemark AccessListRemarkString,
+ etherTypeAccessListLog INTEGER,
+ etherTypeAccessListRowStatus RowStatus,
+ etherTypeAccessListVlanId INTEGER,
+ etherTypeAccessListVlanMask DisplayString,
+ etherTypeAccessListProviderVlanId INTEGER,
+ etherTypeAccessListProviderVlanMask DisplayString,
+ etherTypeAccessListProviderVpt INTEGER
+ }
+
+ etherTypeAccessListIndex OBJECT-TYPE
+ SYNTAX INTEGER (1..65535)
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "Index of the particular rule of the group."
+ ::= { etherTypeAccessListEntry 1 }
+
+ etherTypeAccessListAction OBJECT-TYPE
+ SYNTAX AccessListAction
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "The action to preform if this access-list rule condition is true."
+ ::= { etherTypeAccessListEntry 2 }
+
+ etherTypeAccessListEtherType OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "The IP protocol number (see IpProtocol)."
+ ::= { etherTypeAccessListEntry 3 }
+
+ etherTypeAccessListEtherTypeCodeMask OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "The IP source address associated with this flow."
+ ::= { etherTypeAccessListEntry 4 }
+
+ etherTypeAccessListRemark OBJECT-TYPE
+ SYNTAX AccessListRemarkString
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "Access list entry comment"
+ ::= { etherTypeAccessListEntry 5 }
+
+ etherTypeAccessListLog OBJECT-TYPE
+ SYNTAX INTEGER
+ {
+ undefined (0),
+ log (1),
+ log-input (2)
+ }
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "Enable normal or extended logging of this access-list rule."
+ ::= { etherTypeAccessListEntry 6 }
+
+ etherTypeAccessListRowStatus OBJECT-TYPE
+ SYNTAX RowStatus
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "This indicates the row status & enables creation of rows in
+ this table. In order to be consistent with ACL policy, this object
+ does not allow deletion of rules. The entire group must be deleted and all
+ rules removed at once."
+ ::= { etherTypeAccessListEntry 7 }
+
+ etherTypeAccessListVlanId OBJECT-TYPE
+ SYNTAX INTEGER (0..4092)
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object shows the customer VLAN.The object is meaningful only
+ if etherTypeAccessListVlanMask is set."
+ ::= { etherTypeAccessListEntry 8 }
+
+ etherTypeAccessListVlanMask OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object shows the customer VLAN mask. It is meaningful only
+ if etherTypeAccessListVlanId is set."
+ ::= { etherTypeAccessListEntry 9 }
+
+ etherTypeAccessListProviderVlanId OBJECT-TYPE
+ SYNTAX INTEGER (0..4092)
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object shows the provider VLAN. The object is meaningful only
+ if etherTypeAccessListProviderVlanMask is set."
+ ::= { etherTypeAccessListEntry 10 }
+
+ etherTypeAccessListProviderVlanMask OBJECT-TYPE
+ SYNTAX DisplayString
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object shows the provider VLAN mask. It is meaningful only
+ if etherTypeAccessListProviderVlanId is set.
+ The value is in hexadecimal type string (0x..). "
+ ::= { etherTypeAccessListEntry 11 }
+
+ etherTypeAccessListProviderVpt OBJECT-TYPE
+ SYNTAX INTEGER (0..8)
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "The vlan priority tag. A value of 8 means undefined. This object is meaningful
+ only if vlan-priority template is used."
+ ::= { etherTypeAccessListEntry 12 }
+ -----------------------------------------------
+
+ accessListInterfaceTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF AccessListInterfaceEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "This table controls the assigment of access groups to an interface."
+ ::= { accessListsInterfaces 1 }
+
+ accessListInterfaceEntry OBJECT-TYPE
+ SYNTAX AccessListInterfaceEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "An entry in the AccessListInterfaceEntry table."
+ INDEX { ifIndex, accessListInterfaceTableIndex, accessListInterfaceGroupIndex }
+ ::= { accessListInterfaceTable 1 }
+
+ AccessListInterfaceEntry ::= SEQUENCE {
+ accessListInterfaceTableIndex INTEGER,
+ accessListInterfaceGroupIndex INTEGER,
+ accessListInterfaceDscp INTEGER,
+ accessListInterfaceRowStatus RowStatus,
+ accessListInterfacePriority INTEGER,
+ accessListInterfaceDiscard AccessListDiscard,
+ accessListInterfaceRateLimit Rate,
+ accessListInterfaceExceedAction ExceedAction,
+ accessListInterfaceShaper Shaper,
+ accessListInterfaceBurst Rate,
+ accessListInterfaceRedirectIfIndex INTEGER,
+ accessListInterfaceRedirectVlanID INTEGER,
+ accessListInterfaceRedirectNexthop IpAddress,
+ accessListInterfacePeakRate Rate,
+ accessListInterfacePeakBurst Rate,
+ accessListInterfaceColorAware INTEGER,
+ accessListInterfacePolicy INTEGER,
+ accessListInterfaceTrafficClass INTEGER,
+ accessListInterfaceSpanRootTrack INTEGER,
+ accessListInterfaceUntagFilter INTEGER,
+ accessListInterfaceTxq INTEGER,
+ accessListInterfaceTxqDropLevel TxqDropLevel,
+ accessListInterfaceApplyMirror TruthValue,
+ accessListInterfaceStatistics AccessListStatistics,
+ accessListInterfaceDirection AccessListDirection,
+ accessListInterfaceRateStatistics AccessListStatistics
+
+ }
+
+ accessListInterfaceTableIndex OBJECT-TYPE
+ SYNTAX INTEGER (1..65535)
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "This object identifies the row number for this (ifIndex) interface."
+ ::= { accessListInterfaceEntry 1 }
+
+ accessListInterfaceGroupIndex OBJECT-TYPE
+ SYNTAX INTEGER (1..65535)
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "This indicates the index of the access group for this interface. This value is
+ the same as the value of accessListControlListGroup for the assigned ACL."
+ ::= { accessListInterfaceEntry 2 }
+
+ accessListInterfaceDscp OBJECT-TYPE
+ SYNTAX INTEGER
+ {
+ disable(0),
+ enable(1)
+ }
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "Enable Diffserv codepoint."
+ ::= { accessListInterfaceEntry 3}
+
+ accessListInterfaceRowStatus OBJECT-TYPE
+ SYNTAX RowStatus
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "This indicates the row status & enables creation & deletion of lines in
+ this (and related) tables. See SNMPv2-TC for more information."
+ ::= { accessListInterfaceEntry 4 }
+
+ accessListInterfacePriority OBJECT-TYPE
+ SYNTAX INTEGER (0..8)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Priority level value. Valid values are 0 to 7, 8 means undefined."
+ ::= { accessListInterfaceEntry 5 }
+
+ accessListInterfaceDiscard OBJECT-TYPE
+ SYNTAX AccessListDiscard
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Mark discardable or normal for priority on access group
+ Only the E-Series family and the G-Series family boards
+ support the values green, yellow and red. Other
+ values are not supported by the E-Series and G-series."
+ ::= { accessListInterfaceEntry 6 }
+
+ accessListInterfaceRateLimit OBJECT-TYPE
+ SYNTAX Rate
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The maximum rate in kBps(kilobytes per second)"
+ ::= { accessListInterfaceEntry 7 }
+
+ accessListInterfaceExceedAction OBJECT-TYPE
+ SYNTAX ExceedAction
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The action to perform when the condition is true."
+ ::= { accessListInterfaceEntry 8 }
+
+ accessListInterfaceShaper OBJECT-TYPE
+ SYNTAX Shaper
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Enable/disable shaper.
+ This object is supported only in B-series."
+ ::= { accessListInterfaceEntry 9 }
+
+ accessListInterfaceBurst OBJECT-TYPE
+ SYNTAX Rate
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The maximum Burst rate in kBps(kilobytes per second).
+ This object is supported only by E-Series and G-series."
+ ::= { accessListInterfaceEntry 10 }
+
+ accessListInterfaceRedirectIfIndex OBJECT-TYPE
+ SYNTAX INTEGER
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "This object controls redirection of traffic matching this ACG. If the
+ value is a valid ifIndex, the traffic will be redirected to it. If the value is 0
+ redirection is disabled. Setting this object requires that accessListInterfaceRedirectVlanID is also set."
+ ::= { accessListInterfaceEntry 11 }
+
+ accessListInterfaceRedirectVlanID OBJECT-TYPE
+ SYNTAX INTEGER
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "This object controls redirection of traffic matching this ACG. If the
+ value is a valid VLAN ID, the traffic will be redirected to it. If the value is 0
+ redirection is disabled. If the device is TMetro, this object sets the tag substitution
+ policy for this access group"
+ ::= { accessListInterfaceEntry 12 }
+
+ accessListInterfaceRedirectNexthop OBJECT-TYPE
+ SYNTAX IpAddress
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "This object controls redirection of traffic matching this ACG. If the
+ value is a valid IP address then the traffic will be redirected to it. If the value is 0
+ redirection is disabled."
+ ::= { accessListInterfaceEntry 13 }
+
+ accessListInterfacePeakRate OBJECT-TYPE
+ SYNTAX Rate
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Peak Information Rate in kBps(kilobytes per second)."
+ ::= { accessListInterfaceEntry 14 }
+
+ accessListInterfacePeakBurst OBJECT-TYPE
+ SYNTAX Rate
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Peak Burst Size in kBps(kilobytes per second)."
+ ::= { accessListInterfaceEntry 15 }
+
+ accessListInterfaceColorAware OBJECT-TYPE
+ SYNTAX INTEGER {
+ disable (0),
+ enable (1)
+ }
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Toggle Color aware traffic metering. Disabled by default."
+ ::= { accessListInterfaceEntry 16 }
+
+ accessListInterfacePolicy OBJECT-TYPE
+ SYNTAX INTEGER {
+ undefined (0),
+ dcsp (1),
+ priority (2),
+ priority-dp (3)
+ }
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Set remarking policy."
+ ::= { accessListInterfaceEntry 17 }
+
+ accessListInterfaceTrafficClass OBJECT-TYPE
+ SYNTAX INTEGER (0..256)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Diff Serv CP - Type of Service
+ In E-Series and G-series the range is 0..63. A value of 256 means Traffic Class is not set."
+ ::= { accessListInterfaceEntry 18 }
+
+ accessListInterfaceSpanRootTrack OBJECT-TYPE
+ SYNTAX INTEGER
+ {
+ disable(0),
+ enable(1)
+ }
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "The span root track option for VLAN redirects."
+ ::= { accessListInterfaceEntry 19 }
+
+ accessListInterfaceUntagFilter OBJECT-TYPE
+ SYNTAX INTEGER
+ {
+ disable(0),
+ enable(1)
+ }
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "The filter for tagged or untagged backets to be applied."
+ ::= { accessListInterfaceEntry 20 }
+
+ accessListInterfaceTxq OBJECT-TYPE
+ SYNTAX INTEGER
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object performs QoS and remarking of traffic matching an ACG"
+ ::= { accessListInterfaceEntry 21 }
+
+ accessListInterfaceTxqDropLevel OBJECT-TYPE
+ SYNTAX TxqDropLevel
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object shows the drop-level (green/yellow)
+ and is related to accessListInterfaceTxq."
+ ::= { accessListInterfaceEntry 22 }
+
+ accessListInterfaceApplyMirror OBJECT-TYPE
+ SYNTAX TruthValue
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object shows that the traffic on the interface will be mirrored"
+ ::= { accessListInterfaceEntry 23 }
+
+ accessListInterfaceStatistics OBJECT-TYPE
+ SYNTAX AccessListStatistics
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object enables statistics on the interface."
+ ::= { accessListInterfaceEntry 24 }
+
+ accessListInterfaceDirection OBJECT-TYPE
+ SYNTAX AccessListDirection
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object determines the ingress-egress type of applied ACL."
+ ::= { accessListInterfaceEntry 25 }
+
+ accessListInterfaceRateStatistics OBJECT-TYPE
+ SYNTAX AccessListStatistics
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object enables rate statistics on the interface."
+ ::= { accessListInterfaceEntry 26 }
+
+ -----------------------------------------------
+ accessListVLANTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF AccessListVLANEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "This table controls the assignment of access groups to a VLAN."
+ ::= { accessListsVLAN 1 }
+
+ accessListVLANEntry OBJECT-TYPE
+ SYNTAX AccessListVLANEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "An entry in the AccessListVLANEntry table."
+ INDEX { dot1qVlanIndex, accessListVLANTableIndex, accessListVLANGroupIndex}
+ ::= { accessListVLANTable 1 }
+
+ AccessListVLANEntry ::= SEQUENCE {
+ accessListVLANTableIndex INTEGER,
+ accessListVLANGroupIndex INTEGER,
+ accessListVLANDscp INTEGER,
+ accessListVLANRowStatus RowStatus,
+ accessListVLANPriority INTEGER,
+ accessListVLANDiscard AccessListDiscard,
+ accessListVLANRateLimit Rate,
+ accessListVLANExceedAction ExceedAction,
+ accessListVLANBurst Rate,
+ accessListVLANRedirectIfIndex INTEGER,
+ accessListVLANRedirectVlanID INTEGER,
+ accessListVLANRedirectNexthop IpAddress,
+ accessListVLANPeakRate Rate,
+ accessListVLANPeakBurst Rate,
+ accessListVLANColorAware INTEGER,
+ accessListVLANPolicy INTEGER,
+ accessListVLANTrafficClass INTEGER,
+ accessListVLANSpanRootTrack INTEGER,
+ accessListVLANUntagFilter INTEGER,
+ accessListVLANApplyMirror TruthValue,
+ accessListVLANStatistics AccessListStatistics,
+ accessListVLANDirection AccessListDirection
+ }
+
+ accessListVLANTableIndex OBJECT-TYPE
+ SYNTAX INTEGER (1..65535)
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "This object identifies the order in which the access group was applied on this VLAN."
+ ::= { accessListVLANEntry 1 }
+
+ accessListVLANGroupIndex OBJECT-TYPE
+ SYNTAX INTEGER (1..65535)
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "This indicates the index of the access group for this VLAN. This value is
+ the same as the value of accessListControlListGroup for the assigned ACL."
+ ::= { accessListVLANEntry 2 }
+
+ accessListVLANDscp OBJECT-TYPE
+ SYNTAX INTEGER
+ {
+ disable(0),
+ enable(1)
+ }
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "Enable Diffserv codepoint."
+
+ ::= { accessListVLANEntry 3}
+
+ accessListVLANRowStatus OBJECT-TYPE
+ SYNTAX RowStatus
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "This indicates the row status & enables creation & delettion of rows in
+ this and related tables. See SNMPv2-TC for more information."
+ ::= { accessListVLANEntry 4 }
+
+ accessListVLANPriority OBJECT-TYPE
+ SYNTAX INTEGER (0..8)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Priority level value. Valid values are 0 to 7, 8 means undefined."
+ ::= { accessListVLANEntry 5 }
+
+ accessListVLANDiscard OBJECT-TYPE
+ SYNTAX AccessListDiscard
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Mark discardable or normal for priority on access group
+ Only the E-Series family and the G-Series family boards
+ support the values green, yellow and red. Other
+ values are not supported by the E-Series and G-series."
+ ::= { accessListVLANEntry 6 }
+
+ accessListVLANRateLimit OBJECT-TYPE
+ SYNTAX Rate
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The maximum rate in kBps(kilobytes per second)."
+ ::= { accessListVLANEntry 7 }
+
+ accessListVLANExceedAction OBJECT-TYPE
+ SYNTAX ExceedAction
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The action to perform when the condition is true."
+ ::= { accessListVLANEntry 8 }
+
+ accessListVLANBurst OBJECT-TYPE
+ SYNTAX Rate
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The maximum Burst rate in kBps(kilobytes per second).
+ This object is supported only by E-Series and G-series."
+ ::= { accessListVLANEntry 9 }
+
+ accessListVLANRedirectIfIndex OBJECT-TYPE
+ SYNTAX INTEGER
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "This object controls redirection of traffic matching this ACG. If the
+ value is a valid ifIndex, the traffic will be redirected to it. If the value is 0
+ redirection is disabled. Setting this object requires that accessListInterfaceRedirectVlanID is also set."
+ ::= { accessListVLANEntry 10 }
+
+ accessListVLANRedirectVlanID OBJECT-TYPE
+ SYNTAX INTEGER
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "his object controls redirection of traffic matching this ACG. If the
+ value is a valid VLAN ID, the traffic will be redirected to it. If the value is 0
+ redirection is disabled. If the device is TMetro, this object sets the tag substitution
+ policy for this access group"
+ ::= { accessListVLANEntry 11 }
+
+ accessListVLANRedirectNexthop OBJECT-TYPE
+ SYNTAX IpAddress
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "This object controls redirection of traffic matching this ACG. If the
+ value is a valid IP address then the traffic will be redirected to it. If the value is 0
+ redirection is disabled."
+ ::= { accessListVLANEntry 12 }
+
+ accessListVLANPeakRate OBJECT-TYPE
+ SYNTAX Rate
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Peak Information Rate in kBps(kilobytes per second)."
+ ::= { accessListVLANEntry 13 }
+
+ accessListVLANPeakBurst OBJECT-TYPE
+ SYNTAX Rate
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Peak Burst Size in kBps(kilobytes per second)."
+ ::= { accessListVLANEntry 14 }
+
+ accessListVLANColorAware OBJECT-TYPE
+ SYNTAX INTEGER {
+ disable (0),
+ enable (1)
+ }
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Toggle Color aware traffic metering.Disabled by default."
+ ::= { accessListVLANEntry 15 }
+
+ accessListVLANPolicy OBJECT-TYPE
+ SYNTAX INTEGER {
+ undefined (0),
+ dcsp (1),
+ priority (2),
+ priority-dp (3)
+ }
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Set remarking policy."
+ ::= { accessListVLANEntry 16 }
+
+ accessListVLANTrafficClass OBJECT-TYPE
+ SYNTAX INTEGER (0..256)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Diff Serv CP - Type of Service
+ In E-Series and G-series the range is 0..63. A value of 256 means that Traffic Class is not set."
+ ::= { accessListVLANEntry 17 }
+
+ accessListVLANSpanRootTrack OBJECT-TYPE
+ SYNTAX INTEGER
+ {
+ disable(0),
+ enable(1)
+ }
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "The span root track option for VLAN redirects."
+ ::= { accessListVLANEntry 18 }
+
+ accessListVLANUntagFilter OBJECT-TYPE
+ SYNTAX INTEGER
+ {
+ disable(0),
+ enable(1)
+ }
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "The filter for tagged or untagged backets to be applied"
+ ::= { accessListVLANEntry 19 }
+
+ accessListVLANApplyMirror OBJECT-TYPE
+ SYNTAX TruthValue
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object shows that the traffic on the interface will be mirrored."
+ ::= { accessListVLANEntry 20 }
+
+ accessListVLANStatistics OBJECT-TYPE
+ SYNTAX AccessListStatistics
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object enables statistics on the interface."
+ ::= { accessListVLANEntry 21 }
+
+ accessListVLANDirection OBJECT-TYPE
+ SYNTAX AccessListDirection
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object determines the ingress-egress type of applied ACL."
+ ::= { accessListVLANEntry 22 }
+
+ ----------------------------------------------------------------------------------
+ accessListSapTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF AccessListSapEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "This table controls the assigment of access groups to a SAP."
+ ::= { accessListsServices 1 }
+
+ accessListSapEntry OBJECT-TYPE
+ SYNTAX AccessListSapEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "An entry in the AccessListSapEntry table."
+ INDEX { svcId, sapPortId, sapEncapValue , accessListSapTableIndex, accessListSapGroupIndex }
+ ::= { accessListSapTable 1 }
+
+ AccessListSapEntry ::= SEQUENCE {
+ accessListSapTableIndex INTEGER,
+ accessListSapGroupIndex INTEGER,
+ accessListSapRowStatus RowStatus,
+ accessListSapRateLimit Rate,
+ accessListSapExceedAction ExceedAction,
+ accessListSapBurst Rate,
+ accessListSapPeakRate Rate,
+ accessListSapPeakBurst Rate,
+ accessListSapColorAware INTEGER,
+ accessListSapTxq INTEGER,
+ accessListSapTxqDropLevel TxqDropLevel,
+ accessListSapStatistics AccessListStatistics,
+ accessListSapRateStatistics AccessListStatistics,
+ accessListSapDirection AccessListDirection
+ }
+
+ accessListSapTableIndex OBJECT-TYPE
+ SYNTAX INTEGER (1..65535)
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "This object identifies the row number for this (ifIndex) interface."
+ ::= { accessListSapEntry 1 }
+
+ accessListSapGroupIndex OBJECT-TYPE
+ SYNTAX INTEGER (1..65535)
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "This indicates the index of the access group for this interface. This value is
+ the same as the value of accessListControlListGroup for the assigned ACL."
+ ::= { accessListSapEntry 2 }
+
+
+ accessListSapRowStatus OBJECT-TYPE
+ SYNTAX RowStatus
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "This indicates the row status & enables creation & deletion of lines in
+ this (and related) tables. See SNMPv2-TC for more information."
+ ::= { accessListSapEntry 3 }
+
+ accessListSapRateLimit OBJECT-TYPE
+ SYNTAX Rate
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The maximum rate in kBps(kilobytes per second)"
+ ::= { accessListSapEntry 4 }
+
+ accessListSapExceedAction OBJECT-TYPE
+ SYNTAX ExceedAction
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The action to perform when the condition is true."
+ ::= { accessListSapEntry 5 }
+
+
+ accessListSapBurst OBJECT-TYPE
+ SYNTAX Rate
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The maximum Burst rate in kBps(kilobytes per second).
+ This object is supported only by E-Series and G-series."
+ ::= { accessListSapEntry 6 }
+
+
+ accessListSapPeakRate OBJECT-TYPE
+ SYNTAX Rate
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Peak Information Rate in kBps(kilobytes per second)."
+ ::= { accessListSapEntry 7 }
+
+ accessListSapPeakBurst OBJECT-TYPE
+ SYNTAX Rate
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Peak Burst Size in kBps(kilobytes per second)."
+ ::= { accessListSapEntry 8 }
+
+ accessListSapColorAware OBJECT-TYPE
+ SYNTAX INTEGER {
+ disable (0),
+ enable (1)
+ }
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Toggle Color aware traffic metering. Disabled by default."
+ ::= { accessListSapEntry 9 }
+
+
+ accessListSapTxq OBJECT-TYPE
+ SYNTAX INTEGER
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object performs QoS and remarking of traffic matching an ACG"
+ ::= { accessListSapEntry 10 }
+
+ accessListSapTxqDropLevel OBJECT-TYPE
+ SYNTAX TxqDropLevel
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object shows the drop-level (green/yellow)
+ and is related to accessListInterfaceTxq."
+ ::= { accessListSapEntry 11 }
+
+
+ accessListSapStatistics OBJECT-TYPE
+ SYNTAX AccessListStatistics
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object enables statistics on the SAP."
+ ::= { accessListSapEntry 12 }
+
+ accessListSapRateStatistics OBJECT-TYPE
+ SYNTAX AccessListStatistics
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object enables rate statistics on the SAP."
+ ::= { accessListSapEntry 13 }
+
+
+ accessListSapDirection OBJECT-TYPE
+ SYNTAX AccessListDirection
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "This object determines the ingress-egress type of applied ACL."
+ ::= { accessListSapEntry 14 }
+
+ --------------------------------------------------------------
+
+ accessListInterfaceStatisticsTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF AccessListInterfaceStatisticsEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "This table serves the interface statistics."
+ ::= { accessListsInterfaceStatistics 1 }
+
+ accessListInterfaceStatisticsEntry OBJECT-TYPE
+ SYNTAX AccessListInterfaceStatisticsEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "An entry in the accessListInterfaceStatisticsTable table."
+ INDEX { ifIndex, accessListInterfaceStatisticsGroupIndex }
+ ::= { accessListInterfaceStatisticsTable 1 }
+
+ AccessListInterfaceStatisticsEntry ::= SEQUENCE {
+ accessListInterfaceStatisticsGroupIndex INTEGER,
+ accessListInterfaceGreenBytes INTEGER,
+ accessListInterfaceYellowBytes INTEGER,
+ accessListInterfaceRedBytes INTEGER,
+ accessListInterfaceClassifiedPackets INTEGER
+ }
+
+ accessListInterfaceStatisticsGroupIndex OBJECT-TYPE
+ SYNTAX INTEGER (1..65535)
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "This indicates the index of the access group for this interface. This value is
+ the same as the value of accessListControlListGroup for the assigned ACL."
+ ::= { accessListInterfaceStatisticsEntry 1 }
+
+ accessListInterfaceGreenBytes OBJECT-TYPE
+ SYNTAX INTEGER
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION
+ "This object shows green traffic in bytes for access group with enabled rate-limit statistics."
+ ::= { accessListInterfaceStatisticsEntry 2 }
+
+ accessListInterfaceYellowBytes OBJECT-TYPE
+ SYNTAX INTEGER
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION
+ "This object shows yellow traffic in bytes for access group with enabled rate-limit statistics."
+ ::= { accessListInterfaceStatisticsEntry 3 }
+
+ accessListInterfaceRedBytes OBJECT-TYPE
+ SYNTAX INTEGER
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION
+ "This object shows red traffic in bytes for access group with enabled rate-limit statistics."
+ ::= { accessListInterfaceStatisticsEntry 4 }
+
+ accessListInterfaceClassifiedPackets OBJECT-TYPE
+ SYNTAX INTEGER
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION
+ "This object shows match classified packets in bytes for access group with enabled statistics."
+ ::= { accessListInterfaceStatisticsEntry 5 }
+-----------------------------------------------------------------------------------------------------------
+ accessListSapStatisticsTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF AccessListSapStatisticsEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "This table serves the Sap statistics."
+ ::= { accessListsServicesStatistics 1 }
+
+ accessListSapStatisticsEntry OBJECT-TYPE
+ SYNTAX AccessListSapStatisticsEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "An entry in the accessListSapStatisticsTable table."
+ INDEX { svcId, sapPortId, sapEncapValue , accessListSapStatisticsGroupIndex }
+ ::= { accessListSapStatisticsTable 1 }
+
+ AccessListSapStatisticsEntry ::= SEQUENCE {
+ accessListSapStatisticsGroupIndex INTEGER,
+ accessListSapGreenBytes INTEGER,
+ accessListSapYellowBytes INTEGER,
+ accessListSapRedBytes INTEGER,
+ accessListSapClassifiedPackets INTEGER
+ }
+
+ accessListSapStatisticsGroupIndex OBJECT-TYPE
+ SYNTAX INTEGER (1..65535)
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "This indicates the index of the access group for this Sap. This value is
+ the same as the value of accessListControlListGroup for the assigned ACL."
+ ::= { accessListSapStatisticsEntry 1 }
+
+ accessListSapGreenBytes OBJECT-TYPE
+ SYNTAX INTEGER
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION
+ "This object shows green traffic in bytes for access group with enabled rate-limit statistics."
+ ::= { accessListSapStatisticsEntry 2 }
+
+ accessListSapYellowBytes OBJECT-TYPE
+ SYNTAX INTEGER
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION
+ "This object shows yellow traffic in bytes for access group with enabled rate-limit statistics."
+ ::= { accessListSapStatisticsEntry 3 }
+
+ accessListSapRedBytes OBJECT-TYPE
+ SYNTAX INTEGER
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION
+ "This object shows red traffic in bytes for access group with enabled rate-limit statistics."
+ ::= { accessListSapStatisticsEntry 4 }
+
+ accessListSapClassifiedPackets OBJECT-TYPE
+ SYNTAX INTEGER
+ MAX-ACCESS read-only
+ STATUS current
+ DESCRIPTION
+ "This object shows classified packets in bytes for access group with enabled match statistics."
+ ::= { accessListSapStatisticsEntry 5 }
+
+ -----------------------------------------------
+
+ ispUpLinkTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF IspUpLinkEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "This table controls the ISP up-links. This table is supported only by B-Series."
+ ::= { isp 1 }
+
+ ispUpLinkEntry OBJECT-TYPE
+ SYNTAX IspUpLinkEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "An entry in the ispUpLinkTable table."
+ INDEX { ispUpLinkIndex }
+ ::= { ispUpLinkTable 1 }
+
+ IspUpLinkEntry ::= SEQUENCE {
+ ispUpLinkIndex INTEGER,
+ ispUpLinkIfIndex INTEGER,
+ ispUpLinkType ISPType,
+ ispUpLinkAccessGroup INTEGER,
+ ispUpLinkVLANid INTEGER,
+ ispUpLinkVLANtag VlanTag,
+ ispUpLinkRowStatus RowStatus
+ }
+
+ ispUpLinkIndex OBJECT-TYPE
+ SYNTAX INTEGER (1..32)
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "The ISP index."
+ ::= { ispUpLinkEntry 1 }
+
+ ispUpLinkIfIndex OBJECT-TYPE
+ SYNTAX INTEGER
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "The ifIndex (from RFC1213) that this ISP belongs to."
+ ::= { ispUpLinkEntry 2 }
+
+ ispUpLinkType OBJECT-TYPE
+ SYNTAX ISPType
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "The ispUpLinkType object shows if the ISP is connective or normal."
+ ::= { ispUpLinkEntry 3 }
+
+ ispUpLinkAccessGroup OBJECT-TYPE
+ SYNTAX INTEGER (1..199)
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "A valid index (accessListControlListGroup) from accessListControlTable.
+ For the ISP up-link the index groups are 100..199."
+ ::= { ispUpLinkEntry 4 }
+
+ ispUpLinkVLANid OBJECT-TYPE
+ SYNTAX INTEGER (0..4000)
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "The VID for this link. 0 means no VID."
+ ::= { ispUpLinkEntry 5 }
+
+ ispUpLinkVLANtag OBJECT-TYPE
+ SYNTAX VlanTag
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "Type of the VLAN - tagged or untagged."
+ ::= { ispUpLinkEntry 6 }
+
+ ispUpLinkRowStatus OBJECT-TYPE
+ SYNTAX RowStatus
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "This indicates the row status and enables creation & deletion of rows in
+ this and related tables. See SNMPv2-TC for more information."
+ ::= { ispUpLinkEntry 7 }
+
+ -----------------------------------------------
+
+ ispUserInterfaceTable OBJECT-TYPE
+ SYNTAX SEQUENCE OF IspUserInterfaceEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "This table controls the assignment of ISP users to an interface.
+ This table is supported only by B-Series."
+ ::= { isp 2 }
+
+ ispUserInterfaceEntry OBJECT-TYPE
+ SYNTAX IspUserInterfaceEntry
+ MAX-ACCESS not-accessible
+ STATUS current
+ DESCRIPTION
+ "An entry in the ispUserInterfaceTable table."
+ INDEX { ifIndex}
+ ::= { ispUserInterfaceTable 1 }
+
+ IspUserInterfaceEntry ::= SEQUENCE {
+ ispUserInterfaceAssigen AssigenValue,
+ ispUserInterfaceIspUplinkIndex INTEGER,
+ ispUserInterfaceRateLimit Rate,
+ ispUserInterfaceConformAction ConformAction,
+ ispUserInterfaceExceedAction ExceedAction,
+ ispUserInterfaceShaper Shaper
+ }
+
+ ispUserInterfaceAssigen OBJECT-TYPE
+ SYNTAX AssigenValue
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "Indicates if an ISP user is assigned to this interface."
+ ::= { ispUserInterfaceEntry 1 }
+
+ ispUserInterfaceIspUplinkIndex OBJECT-TYPE
+ SYNTAX INTEGER (1..32)
+ MAX-ACCESS read-create
+ STATUS current
+ DESCRIPTION
+ "A valid index from ispUpLinkTable."
+ ::= { ispUserInterfaceEntry 2 }
+
+ ispUserInterfaceRateLimit OBJECT-TYPE
+ SYNTAX Rate
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The maximum rate."
+ ::= { ispUserInterfaceEntry 3 }
+
+ ispUserInterfaceConformAction OBJECT-TYPE
+ SYNTAX ConformAction
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The action to perform when the condition is true."
+ ::= { ispUserInterfaceEntry 4 }
+
+ ispUserInterfaceExceedAction OBJECT-TYPE
+ SYNTAX ExceedAction
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "The action to perform when the condition is true."
+ ::= { ispUserInterfaceEntry 5 }
+
+ ispUserInterfaceShaper OBJECT-TYPE
+ SYNTAX Shaper
+ MAX-ACCESS read-write
+ STATUS current
+ DESCRIPTION
+ "This object controls the status of the shaper."
+ ::= { ispUserInterfaceEntry 6 }
+
+ standardAccessListRuleMatched NOTIFICATION-TYPE
+ OBJECTS { ifIndex, dot1qVlanStatus, standardAccessListAction}
+ STATUS current
+ DESCRIPTION
+ "This trap indicates that a packet matching a standard ACL rule has been received."
+ ::= { prvtSwitchAccessListNotifications 1}
+
+ extendedAccessListRuleMatched NOTIFICATION-TYPE
+ OBJECTS { ifIndex, dot1qVlanStatus, extendedAccessListAction}
+ STATUS current
+ DESCRIPTION
+ "This trap indicates that a packet matching an extended ACL rule has been received."
+ ::= { prvtSwitchAccessListNotifications 2}
+
+ macAccessListRuleMatched NOTIFICATION-TYPE
+ OBJECTS { ifIndex, dot1qVlanStatus, macAccessListAction}
+ STATUS current
+ DESCRIPTION
+ "This trap indicates that a packet matching a mac ACL rule has been received."
+ ::= { prvtSwitchAccessListNotifications 3}
+
+ etherTypeAccessListRuleMatched NOTIFICATION-TYPE
+ OBJECTS { ifIndex, dot1qVlanStatus, etherTypeAccessListAction}
+ STATUS current
+ DESCRIPTION
+ "This trap indicates that a packet matching a ether-type ACL rule has been received."
+ ::= { prvtSwitchAccessListNotifications 4}
+
+-- *******************************************************************
+-- Conformance Information
+-- *******************************************************************
+
+ prvtSwitchAccessListMibGroups OBJECT IDENTIFIER ::= { prvtSwitchAccessListConformance 1 }
+
+
+ prvtSwitchAccessListNotificationGroup NOTIFICATION-GROUP
+ NOTIFICATIONS {
+ standardAccessListRuleMatched,
+ extendedAccessListRuleMatched,
+ macAccessListRuleMatched,
+ etherTypeAccessListRuleMatched
+ }
+ STATUS current
+ DESCRIPTION
+ "Private Notification Group."
+ ::= { prvtSwitchAccessListMibGroups 1 }
+
+END
+
+
+