path: root/MIBS/telco-systems/binos/PRVT-SWITCH-ACCESS-LIST-MIB

-- *********************************************************************
-- *********************************************************************
-- ** Filename: PRVT-SWITCH-ACCESS-LIST-MIB
-- ** Project: T - Ethernet and Fast Ethernet IP Switches.
-- ** Purpose: Private MIB
-- *********************************************************************
-- (c) Copyright, 2001, BATM Advanced Communications. All rights reserved.
-- WARNING:
--
-- BY UTILIZING THIS FILE, YOU AGREE TO THE FOLLOWING:
--
-- This file is the property of BATM Advanced Communications.
-- BATM Advanced Communications retains all title and
-- ownership in the Specification, including any revisions.

-- BATM Advanced Communications grants all interested parties a non-exclusive
-- license to use and distribute an unmodified copy of this
-- Specification in connection with management of BATM Advanced Communications 
-- and Telco Systems products, and without fee, provided that the following
-- conditions are met:
-- 1. Redistributions of this specification must retain the above copyright
-- notice, this list of conditions and the following disclaimer.
-- 2. Redistributions in binary form must reproduce the above copyright
-- notice, this list of conditions and the following disclaimer in the
-- documentation and/or other materials provided with the distribution.
-- 3. The name of the BATM Advanced Communications MAY NOT be used to endorse
-- or promote products derived from this specification without specific prior written
-- permission.
--
-- EXCEPT AS RESTRICTED BY LAW, OR AS PROVIDED IN BATM'S LIMITED
-- WARRANTY, THE SPECIFICATIONS CONTAINED IN THIS FILE ARE
-- PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED
-- OR IMPLIED, INCLUDING BUT NOT LIMITED TO, ANY IMPLIED WARRANTIES
-- OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
-- IN NO EVENT SHALL BATM BE LIABLE FOR ANY DAMAGES WHATSOEVER
-- INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF BUSINESS
-- PROFITS, BUSINESS INTERRUPTION, LOSS OF BUSINESS INFORMATION OR
-- OTHER CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE, OR INABILITY
-- TO USE, THE SPECIFICATION CONTAINED IN THIS FILE.

PRVT-SWITCH-ACCESS-LIST-MIB DEFINITIONS ::= BEGIN
IMPORTS

    MODULE-IDENTITY, OBJECT-TYPE,IpAddress                                            
        FROM SNMPv2-SMI
    RowStatus, DisplayString, TEXTUAL-CONVENTION, MacAddress, TruthValue
        FROM SNMPv2-TC
    ifIndex
        FROM IF-MIB
    dot1qVlanIndex, dot1qVlanStatus
        FROM Q-BRIDGE-MIB
       NOTIFICATION-TYPE
          FROM SNMPv2-SMI       
              
      MODULE-COMPLIANCE, NOTIFICATION-GROUP,
OBJECT-GROUP
FROM SNMPv2-CONF

svcId,
sapPortId, 
sapEncapValue,  
sdpId
FROM  PRVT-SERV-MIB
 
   ipSwitch   
	                                     FROM PRVT-SWITCH-MIB;  


    prvtSwitchAccessListMib MODULE-IDENTITY
    LAST-UPDATED "201011160000Z"
    ORGANIZATION "BATM Advanced Communication"
    CONTACT-INFO
         " BATM/Telco Systems Support team
				Email: 
				For North America: techsupport@telco.com
				For North Europe: support@batm.de, info@batm.de
				For the rest of the world: techsupport@telco.com"
    DESCRIPTION
        "The access-list MIB module that controls L3 switches access-list parameters"

    -- revision history   
    REVISION   "201102070000Z"
    DESCRIPTION   
    "Addeed accessListInterfaceRateStatistics object"

    REVISION   "201011160000Z"
    DESCRIPTION
    	"Added accessListSapTable and accessListSapStatisticsTable"

    REVISION   "201011030000Z"
    DESCRIPTION
    	"Added new OIDs standardAccessListDropLevel,  extendedAccessListDropLevel, macAccessListDropLevel,
    	 standardAccessListDscp, extendedAccessListDscp"
	REVISION	"200904170000Z"
	DESCRIPTION
		"Created AccessListRemarkString TC."

	REVISION	"200811200000Z"
	DESCRIPTION
		"Added objects for Egress Access Lists"

	REVISION	"200802140000Z"
	DESCRIPTION
		"Added Access List Interface Statistics"
         REVISION     "200801010000Z"
     	 DESCRIPTION
		"Removed redefined OIDs in private vendor extension definitions." 
    REVISION 	 "200712050000Z"
    	DESCRIPTION
    	" "
    REVISION     "200603220000Z"
     	 DESCRIPTION
		"Added the tag filter object in the interface and VLAN access group tables and changed some
		description with TMetro specific information."      
		
    REVISION     "200510030000Z"
     	 DESCRIPTION
		"Switched the values of greater-than and less-than in PortDef textual convention."                
		
    REVISION     "200509300000Z"
     	 DESCRIPTION
		"Changed the Rate textual convention to include the value of 0 (zero)."

    REVISION     "200502280000Z"
     	 DESCRIPTION
		"Added the span track objects in the interface tables."
		   
    REVISION     "200502240000Z"
     	 DESCRIPTION
		"Added the source and destination range objects in the extended access list table."

    
      REVISION     "200502160000Z"
     	 DESCRIPTION
		"Fixed spelling errors and changed the contact info."
		
     REVISION     "200412150000Z"
    DESCRIPTION
       "1. accessListControlTable is now indexed only by accessListControlListGroup and the row
       status creates whole groups.
       2. Added standardAccessListIndex and extendedAccessListIndex as indices of standardAccessListTable 
       and extendedAccessListTable to replace accessGroupControlListIndex.
       3. Added standardAccessListRowStatus and extendedAccessListRowStatus to enable creation of rules.
       Rules, however, cannot be deleted using these objects. 
       4. Added support for enabling the loggin of ACLs (standardAccessListLog, extendedAccessListLog).
       5. Added support for redirection traffic to a vlan and ip next hop
           (accessListInterfaceRedirectVlanID,accessListVLANRedirectVlanID,accessListInterfaceRedirectNexthop,accessListVLANRedirectNexthop).
       6. Added objects for configuring the Peak rate and peak burst when dual rate limit is used.
       (accessListInterfacePeakRate, accessListInterfacePeakBurst, accessListVLANPeakRate,accessListVLANPeakBurst) 
       7. Added objects for toggling the traffic metering color awareness and remarking policy. 
       (accessListInterfaceColorAware, accessListVlanColorAware,accessListInterfacePolicy, accessListVlanPolicy)
        "

    REVISION     "200310150000Z" 
          DESCRIPTION
       "Global changes:
        1. Added support for VLAN IP access-group.
        2. Added support for redirecting traffic to an interface
           (accessListInterfaceRedirectIfIndex,accessListVLANRedirectIfIndex).
        3. Renamed accessListControlListGroupIndex to accessListInterfaceGroupIndex
        4. Changes in AccessListAction, removed shaper.
        5. Removed Burst TEXTUAL-CONVENTION.
        
        Changes for E-Series
        1. Introduced changes in PortDef,ExceedAction,AccessListDiscard TEXTUAL-CONVENTION for E-Series.
        2. The objects extendedAccessListIgmpType and accessListInterfaceShaper are
           not supported for E-Series.
        3. Added accessListInterfaceBurst,accessListVLANBurst for E-Series.
        4. The range of accessListInterfaceDscp is now 0..63 for E-Series."

    REVISION     "200305080000Z"
    DESCRIPTION
       "Moved to SMI-V2.
        Removed extendedAccessListEstablished and
        extendedAccessListMSS."

    REVISION     "200211120000Z"
    DESCRIPTION
        "Changed mapping of AccessListAction enum."

    REVISION     "200111050000Z"
    DESCRIPTION
        "Added shaper to access group."

    REVISION     "200109300000Z"
    DESCRIPTION
        "Added ICMP type,ICMP code and IGMP to extended access list."

    REVISION     "200108270000Z"
    DESCRIPTION
        "Added access group with rate limit."

    REVISION     "200107310000Z"
    DESCRIPTION
        "Added routed ISP."

    REVISION     "200105140000Z"
    DESCRIPTION
        "1. Added remark, MSS and Established to access list.
         2. Added Priority and Discard to access group."

    REVISION     "200102200000Z"
    DESCRIPTION
        "Added the ability to modify TOS in extended access list."

    REVISION     "200102150000Z"
    DESCRIPTION
        "Added shaper mode for access list action."

    REVISION     "200101280000Z"
    DESCRIPTION
        "Added support for access group in ISP."

    REVISION     "200011130959Z"
    DESCRIPTION
        "Initial version."

    ::= { ipSwitch 1 }
        
    AccessListAction ::= TEXTUAL-CONVENTION
      STATUS current
      DESCRIPTION
        "The AccessListAction type represents action taken when this 
         access-list condition are asserted.
         "
      SYNTAX INTEGER
      {
        permit(0),
        deny(1),
        shaper(2),
        remark(3),
        undefined(100)
      }

     IpProtocol ::= TEXTUAL-CONVENTION
      STATUS current
      DESCRIPTION
        "The IpProtocol type represents the protocol number in the IP datagram header"
      SYNTAX INTEGER (0..255)

     PortDef ::= TEXTUAL-CONVENTION
      STATUS current
      DESCRIPTION
        "The PortDef type operates together with the port number filed inside
         the access-list & control how the port number is being processed.
         The values greater-than(3) and less-than(4) are supported only on
         E-Series family boards"
      SYNTAX INTEGER
      {
        equal(1),
        range(2),
        greater-than(3),
        less-than(4),
        undefined(0)
      }

    Rate ::= TEXTUAL-CONVENTION
      STATUS current
      DESCRIPTION
        "The Rate type represents in Kbps the maximum rate limit for the flow"
      SYNTAX INTEGER (0|13..1000000)

    ExceedAction ::= TEXTUAL-CONVENTION
      STATUS current
      DESCRIPTION
        "the ExceedAction type represents the action that the switch should take
         when one of the limits exceeded: drop -> drop the packets, markDiscardable
         this packet is discardable if a conjection ocure
         Only the E-Series family boards support the values green, yellow and red. Other
         values are not supported by the E-Series"
      SYNTAX INTEGER
      {
        drop(0),
        markDiscardable(1),
        undefined(2),
        green(3),
        yellow(4),
        red(5)
      }

    VlanTag ::= TEXTUAL-CONVENTION
      STATUS current
      DESCRIPTION
        "The VlanTag type represents if the VLAN is tagged or untagged."
      SYNTAX INTEGER
      {
        untagged (0),
        tagged   (1),
        undefined (2)
      }

    ISPType ::= TEXTUAL-CONVENTION
      STATUS current
      DESCRIPTION
        "The ISPType type represents the ISP type - either connective or normal."
      SYNTAX INTEGER
      {
        connectivity (0),
        normal	     (1),
        routed       (2)   
        
      }

    Shaper ::= TEXTUAL-CONVENTION
      STATUS current
      DESCRIPTION
        "The Shaper type represents the status of the shaper"
      SYNTAX INTEGER
      {
        disable (0),
        enable (1)
      }

    ConformAction ::= TEXTUAL-CONVENTION
      STATUS current
      DESCRIPTION
        "The action to perform if the condition is matched."
      SYNTAX INTEGER
      {
        transmit (0)
      }
      
    AssigenValue ::= TEXTUAL-CONVENTION
      STATUS current
      DESCRIPTION
        "Enables/disables assignment of an ISP user to this interface."
      SYNTAX INTEGER
      {
        enable  (1),
        disable (2)
      }

    AccessListModifyTos ::= TEXTUAL-CONVENTION
      STATUS current
      DESCRIPTION
        "The AccessListModifyTos must be enabled if the user wants the ToS to be modified."
      SYNTAX INTEGER
      {
        enable  (1),
        disable (0)
      }    

    AccessListEstablished ::= TEXTUAL-CONVENTION
      STATUS current
      DESCRIPTION
        "Match established connection (ACK or RST flages)"
      SYNTAX INTEGER
      {
        enable  (1),
        disable (0)
      }        
      
    AccessListDiscard ::= TEXTUAL-CONVENTION
      STATUS current
      DESCRIPTION
        "Mark discardable or normal for priority on access group
         Only the E-Series family and the G-Series family boards support the values green, yellow and red. Other
         values are not supported by the E-Series and G-series."
      SYNTAX INTEGER
      {
        normal(0),
        discardable(1),
        green(2),
        yellow(3),
        red(4),
        undefined(5)
      }

    AccessListRemarkString ::= TEXTUAL-CONVENTION
      DISPLAY-HINT "40a"
      STATUS       current
      DESCRIPTION
        "Access list entry comment string"
      SYNTAX       OCTET STRING (SIZE (0..40))

   TxqDropLevel ::= TEXTUAL-CONVENTION
    STATUS       current
    DESCRIPTION
        "TXQ drop level values"
    SYNTAX  INTEGER { undefined(0), green(1), yellow(2) }
 
MatchTraffic ::= TEXTUAL-CONVENTION
    STATUS       current
    DESCRIPTION
        "Match traffic values"
    SYNTAX  INTEGER { 
	undefined(0), 
	untagged(1),
	unknown-unicast(2),
	multicast(3),
	broadcast(4),
	known-unicast(5) }

    AccessListStatistics ::= TEXTUAL-CONVENTION
      STATUS current
      DESCRIPTION
        "Access list statistics values"
      SYNTAX INTEGER
      {
        enable  (1),
        disable (0)
      }        

    AccessListDirection ::= TEXTUAL-CONVENTION
      STATUS current
      DESCRIPTION
        "Access list applied direction values"
      SYNTAX INTEGER
      {
        ingress  (0),
        egress (1)
      }        

    prvtSwitchAccessListNotifications  	OBJECT IDENTIFIER ::= { prvtSwitchAccessListMib 0 }  
    accessLists 						OBJECT IDENTIFIER ::= { prvtSwitchAccessListMib 1 }
    isp         						OBJECT IDENTIFIER ::= { prvtSwitchAccessListMib 2 }  
    prvtSwitchAccessListConformance  	OBJECT IDENTIFIER ::= { prvtSwitchAccessListMib 3 }


    accessListTemplate OBJECT-TYPE
    SYNTAX INTEGER {
        standard  (1),
        vlan-priority (2)
    }
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "The access-list template in use. For non E-series devices, the device must be restarted 
        for this setting to take effect."
    ::= { accessLists 1 }

    accessGroupsDefinitions OBJECT IDENTIFIER ::= { accessLists 2 }
    accessListsInterfaces   OBJECT IDENTIFIER ::= { accessLists 3 }
    accessListsVLAN         OBJECT IDENTIFIER ::= { accessLists 4 }     
    accessListsServices     OBJECT IDENTIFIER ::= { accessLists 5 }
    accessListsInterfaceStatistics OBJECT IDENTIFIER ::= { accessLists 6 }  
    accessListsServicesStatistics OBJECT IDENTIFIER ::= {accessLists 7}

    accessListControlTable OBJECT-TYPE
    SYNTAX SEQUENCE OF AccessListControlEntry
	MAX-ACCESS not-accessible
	STATUS current
	DESCRIPTION
        "This table controls the creation or removal of a access-list
         group from all access-list tables. The real programming of values is
         done in the coresponding access-list table."
	::= { accessGroupsDefinitions 1 }

    accessListControlEntry OBJECT-TYPE
	SYNTAX	AccessListControlEntry
	MAX-ACCESS	not-accessible
	STATUS	current
	DESCRIPTION
	    "An entry in the accessListControlTable table."
    INDEX { accessListControlListGroup }
	::= { accessListControlTable 1 }

    AccessListControlEntry ::= SEQUENCE {
        accessListControlListGroup INTEGER,
        accessListControlRowStatus RowStatus
    }

    accessListControlListGroup OBJECT-TYPE
    SYNTAX INTEGER (1..65535)
	MAX-ACCESS accessible-for-notify
	STATUS current
	DESCRIPTION
        "This object identifies the index of the group of access-list rules         
        Each range of group indexes is related to a different access-list type
         1..99    for standard access-list
         100..199 for extended access-list."
	::= { accessListControlEntry 1 }
    accessListControlRowStatus OBJECT-TYPE
	SYNTAX RowStatus
	MAX-ACCESS read-create
	STATUS current
	DESCRIPTION
	    "This indicates the row status & enables creation & deletion of lines in
	     this table. See SNMPv2-TC for more information."
    ::= { accessListControlEntry 2 }

 ----------------------------------------------

    standardAccessListTable OBJECT-TYPE
    SYNTAX SEQUENCE OF StandardAccessListEntry
	MAX-ACCESS not-accessible
	STATUS current
	DESCRIPTION
        "This table contains standard access-list parameters."
	::= { accessGroupsDefinitions 2 }

    standardAccessListEntry OBJECT-TYPE
	SYNTAX StandardAccessListEntry
	MAX-ACCESS not-accessible
	STATUS current
	DESCRIPTION
        "An entry in the standardAccessListTable table."
    INDEX { accessListControlListGroup, standardAccessListIndex }
	::= { standardAccessListTable 1 }

    StandardAccessListEntry ::= SEQUENCE { 
        standardAccessListIndex		INTEGER,
	standardAccessListAction    AccessListAction,
        standardAccessListIpSrc     IpAddress,
        standardAccessListIpMASKsrc IpAddress,
        standardAccessListRemark    AccessListRemarkString,
        standardAccessListLog       INTEGER,
        standardAccessListVpt		INTEGER,
        standardAccessListRowStatus RowStatus,
	standardAccessListVlanId	INTEGER,
	standardAccessListVlanMask	DisplayString,
        standardAccessListProviderVlanId INTEGER,
        standardAccessListProviderVlanMask DisplayString,
	standardAccessListProviderVpt	INTEGER,
	standardAccessListUntaggedMode	TruthValue,
	standardAccessListDropLevel     INTEGER,
	standardAccessListDscp  		INTEGER
	
    }

    standardAccessListIndex OBJECT-TYPE
	SYNTAX INTEGER (1..65535)
	MAX-ACCESS not-accessible
	STATUS current
	DESCRIPTION
	    "Index of the particular rule of the group."
    ::= { standardAccessListEntry 1 }

    standardAccessListAction OBJECT-TYPE
	SYNTAX AccessListAction
	MAX-ACCESS read-create
	STATUS current
	DESCRIPTION
	    "The action to preform if the condition of this access-list rule condition is true."
    ::= { standardAccessListEntry 2 }

    standardAccessListIpSrc OBJECT-TYPE
	SYNTAX	IpAddress
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "The IP source address associated with this flow."
        ::= { standardAccessListEntry 3 }

    standardAccessListIpMASKsrc OBJECT-TYPE
	SYNTAX	IpAddress
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "The IP mask that, together with standardAccessListIpSrc, defines the subnet."
        ::= { standardAccessListEntry 4 }
        
    standardAccessListRemark OBJECT-TYPE 
	SYNTAX	AccessListRemarkString
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "Access list entry comment"
        ::= { standardAccessListEntry 5 }  
        
   	standardAccessListLog OBJECT-TYPE 
   	SYNTAX	INTEGER 
   	{
        undefined (0),
        log  (1),
        log-input (2)
    }
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "Enable normal or extended logging of this access-list rule."
        ::= { standardAccessListEntry 6 }  
        
    standardAccessListVpt OBJECT-TYPE 
   	SYNTAX	INTEGER  
	{
	 vpt-value0(0),
	 vpt-value1(1),
	 vpt-value2(2),
	 vpt-value3(3),
	 vpt-value4(4),
	 vpt-value5(5),
	 vpt-value6(6),   
	 vpt-value7(7),
	 undefined(8),	
	 fc-be(241),
	 fc-l2(242),
	 fc-af(243),
	 fc-l1(244),
	 fc-h2(245),
	 fc-ef(246),
	 fc-h1(247),
	 fc-nc(248) 
	}
   	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "This object is meaningful :
	    1.when vlan-priority template is used and will reprezent vlan priority tag. 
	    2.Forwarding class reprezented in the second part of enumeration: fc-##.
	    A value of 8 means that neither of above is defined."
        ::= { standardAccessListEntry 7 }  

   standardAccessListRowStatus OBJECT-TYPE
	SYNTAX RowStatus
	MAX-ACCESS read-write
	STATUS current
	DESCRIPTION
	    "This indicates the row status & enables creation of rows in
	     this table. In order to be consistent with ACL policy, this object 
	     does not allow deletion of rules. The entire group must be deleted and all 
	     rules removed at once."
    ::= { standardAccessListEntry 8 }

  	standardAccessListVlanId OBJECT-TYPE
		SYNTAX INTEGER (0..4092)
		MAX-ACCESS read-create
		STATUS current
		DESCRIPTION
		"This object shows the customer VLAN. The object is meaningful only 
		 if standardAccessListVlanMask is set."
	::= { standardAccessListEntry 9 }

	standardAccessListVlanMask OBJECT-TYPE
		SYNTAX DisplayString
		MAX-ACCESS read-create
		STATUS current
		DESCRIPTION
		"This object shows the customer VLAN mask. It is meaningful only 
		 if standardAccessListVlanId is set.
		 The value is in hexadecimal type DisplayString (0xXXX)."
	::= { standardAccessListEntry 10 }

	standardAccessListProviderVlanId OBJECT-TYPE
		SYNTAX INTEGER (0..4092)
		MAX-ACCESS read-create
		STATUS current
		DESCRIPTION
		"This object shows the provider VLAN. The object is meaningful only 
		 if standardAccessListProviderVlanMask is set."
	::= { standardAccessListEntry 11 }

	standardAccessListProviderVlanMask OBJECT-TYPE
		SYNTAX DisplayString
		MAX-ACCESS read-create
		STATUS current
		DESCRIPTION
		"This object shows the provider VLAN mask. It is meaningful only
		 if standardAccessListProviderVlanId is set.
		 The value is in hexadecimal type DisplayString (0xXXX)"
	::= { standardAccessListEntry 12}

	standardAccessListProviderVpt OBJECT-TYPE
		SYNTAX INTEGER (0..8)
		MAX-ACCESS read-create
		STATUS current
		DESCRIPTION
		"This object shows the provider VLAN priority tag.
		 A value of 8 means undefined."
	::= { standardAccessListEntry 13 }

	standardAccessListUntaggedMode OBJECT-TYPE
		SYNTAX TruthValue
		MAX-ACCESS read-create
		STATUS current
		DESCRIPTION
		"This object enables the untagged mode"
	::= { standardAccessListEntry 14 }    
	
	standardAccessListDropLevel OBJECT-TYPE
	SYNTAX  INTEGER
	{  
	green(0),
	yellow(1)	
    }  
	MAX-ACCESS read-create
	STATUS current
	DESCRIPTION 
    "This object define drop-level."
    ::= { standardAccessListEntry 15}      
    
    standardAccessListDscp OBJECT-TYPE
    SYNTAX INTEGER (0..63)
    MAX-ACCESS read-create
    STATUS current
    DESCRIPTION
    "The object shows the DiffServ Point (DSCP) value from IP header."
    ::= {standardAccessListEntry 16}
    

    extendedAccessListTable OBJECT-TYPE
    SYNTAX SEQUENCE OF ExtendedAccessListEntry
	MAX-ACCESS not-accessible
	STATUS current
	DESCRIPTION
        "This table contains extended access-list parameters."
	::= { accessGroupsDefinitions 3 }

    extendedAccessListEntry 	OBJECT-TYPE
	SYNTAX	ExtendedAccessListEntry
	MAX-ACCESS	not-accessible
	STATUS	current
	DESCRIPTION
        "An entry in the extendedAccessListTable table."
    INDEX { accessListControlListGroup, extendedAccessListIndex	}
	::= { extendedAccessListTable 1 }

    ExtendedAccessListEntry ::= SEQUENCE {
    		extendedAccessListIndex		INTEGER,
            extendedAccessListAction     AccessListAction,
            extendedAccessListIpProtocol IpProtocol,
            extendedAccessListIpSrc      IpAddress,
            extendedAccessListIpMASKsrc  IpAddress,
            extendedAccessListPortDefSrc PortDef,
            extendedAccessListPortNumSrc INTEGER,
            extendedAccessListPortRangeSrc INTEGER,
            extendedAccessListIpDest     IpAddress,
            extendedAccessListIpMASKdst  IpAddress,
            extendedAccessListPortDefDst PortDef,
            extendedAccessListPortNumDst INTEGER, 
            extendedAccessListPortRangeDst INTEGER,
            extendedAccessListTos 	  INTEGER,
            extendedAccessListPrec       INTEGER,
            extendedAccessListModifyTos  AccessListModifyTos,
            extendedAccessListRemark     AccessListRemarkString,
            extendedAccessListIcmpType   INTEGER,
	    	extendedAccessListIcmpCode   INTEGER,
	    	extendedAccessListIgmpType   INTEGER,   
	    	extendedAccessListEstablished   AccessListEstablished,
	    	extendedAccessListLog       INTEGER,
        	extendedAccessListVpt		INTEGER,
        	extendedAccessListRowStatus RowStatus,
		extendedAccessListVlanId INTEGER,
        	extendedAccessListVlanMask DisplayString,
        	extendedAccessListProviderVlanId INTEGER,
        	extendedAccessListProviderVlanMask DisplayString,
		extendedAccessListProviderVpt	INTEGER,
		extendedAccessListUntaggedMode TruthValue,
		extendedAccessListDropLevel INTEGER,
		extendedAccessListDscp INTEGER
    }

    extendedAccessListIndex OBJECT-TYPE
	SYNTAX INTEGER (1..65535)
	MAX-ACCESS not-accessible
	STATUS current
	DESCRIPTION
	    "Index of the particular rule of the group."
    ::= { extendedAccessListEntry 1 }

    extendedAccessListAction OBJECT-TYPE
	SYNTAX	AccessListAction
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "The action to preform if this access-list rule condition is true."
        ::= { extendedAccessListEntry 2 }

	extendedAccessListIpProtocol OBJECT-TYPE
	SYNTAX	IpProtocol
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "The IP protocol number (see IpProtocol)."
        ::= { extendedAccessListEntry 3 }

    extendedAccessListIpSrc OBJECT-TYPE
	SYNTAX	IpAddress
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "The IP source address associated with this flow."
        ::= { extendedAccessListEntry 4 }

    extendedAccessListIpMASKsrc OBJECT-TYPE
	SYNTAX	IpAddress
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "The IP mask, together with extendendAccessListIpSrc, defines the subnet."
        ::= { extendedAccessListEntry 5 }

    extendedAccessListPortDefSrc OBJECT-TYPE
	SYNTAX	PortDef
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "The extendedAccessListPortDefSrc object operates together with the port number filed inside 
	    the access-list & controls how the port number is being processed.
	    The values less-than(3) and greater-than(4) are supported only on E-Series family boards."
        ::= { extendedAccessListEntry 6 }

    extendedAccessListPortNumSrc OBJECT-TYPE
	SYNTAX	INTEGER (0..65535)
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "UDP/TCP port number. A value of 0 represents undefined port number."
        ::= { extendedAccessListEntry 7 } 
        
    extendedAccessListPortRangeSrc OBJECT-TYPE
	SYNTAX	INTEGER (0..65535)
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "UDP/TCP ned range port number. A value of 0 represents undefined port number. Valid
	    only with extendedAccessListPortDefSrc value of range(2)."
        ::= { extendedAccessListEntry 8 }    

    extendedAccessListIpDest OBJECT-TYPE
	SYNTAX	IpAddress
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "The IP destination address associated with this flow."
        ::= { extendedAccessListEntry 9 }

    extendedAccessListIpMASKdst OBJECT-TYPE
	SYNTAX	IpAddress
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "The IP mask, together with extendedAccessListIpMASKdst, defines the subnet."
        ::= { extendedAccessListEntry 10 }

    extendedAccessListPortDefDst OBJECT-TYPE
	SYNTAX	PortDef
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "The extendedAccessListPortDefDst object operates together with the port number filed inside 
	    the access-list & controls how the port number is being processed.
	    The values less-than(3) and greater-than(4) are supported only on E-Series family boards."
        ::= { extendedAccessListEntry 11 }

    extendedAccessListPortNumDst OBJECT-TYPE
	SYNTAX	INTEGER (0..65535)
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "UDP/TCP port number. A value of 0 represents undefined port number."
        ::= { extendedAccessListEntry 12 }  
        
     extendedAccessListPortRangeDst OBJECT-TYPE
	SYNTAX	INTEGER (0..65535)
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "UDP/TCP ned range port number. A value of 0 represents undefined port number. Valid for
	    value range (2) of extendedAccessListPortDefDst."
        ::= { extendedAccessListEntry 13 }  


    extendedAccessListTos OBJECT-TYPE
	SYNTAX	INTEGER (0..15)
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "This object shows the type of service value."
        ::= { extendedAccessListEntry 14 }

    extendedAccessListPrec OBJECT-TYPE
	SYNTAX	INTEGER (0..7)
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "Precedence value."
        ::= { extendedAccessListEntry 15 }
        
    extendedAccessListModifyTos OBJECT-TYPE
	SYNTAX	AccessListModifyTos
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "extendedAccessListModifyTos must be enabled if the user wants the ToS to be modified."
        ::= { extendedAccessListEntry 16 }    
        
    extendedAccessListRemark OBJECT-TYPE 
	SYNTAX	AccessListRemarkString
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "Access list entry comment."
        ::= { extendedAccessListEntry 17 }        
        
    extendedAccessListIcmpType OBJECT-TYPE 
	SYNTAX	INTEGER (0..255)
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "ICMP message type."
        ::= { extendedAccessListEntry 18 }        
        
    extendedAccessListIcmpCode OBJECT-TYPE 
	SYNTAX	INTEGER (0..255)
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "ICMP message code."
        ::= { extendedAccessListEntry 19 }            
    
    extendedAccessListIgmpType OBJECT-TYPE
	SYNTAX	INTEGER (0..15)
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "IGMP message type. This object is not supported in E-Series"
        ::= { extendedAccessListEntry 20 }   
        
     extendedAccessListEstablished OBJECT-TYPE 
	SYNTAX	AccessListEstablished	
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "When TCP protocol type is chosen, setting this object indicates that established connections will be matched."
        ::= { extendedAccessListEntry 21 }        
    
    extendedAccessListLog OBJECT-TYPE 
   	SYNTAX	INTEGER 
   	{
        undefined (0),
        log  (1),
        log-input (2)
    }
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	     "Enable normal or extended logging of this access-list rule."
        ::= { extendedAccessListEntry 22 }  
        
    extendedAccessListVpt OBJECT-TYPE 
   	SYNTAX	INTEGER 
   	{
	 vpt-value0(0),
	 vpt-value1(1),
	 vpt-value2(2),
	 vpt-value3(3),
	 vpt-value4(4),
	 vpt-value5(5),
	 vpt-value6(6),    
	 vpt-value7(7),
	 undefined(8),	
	 fc-be(241),
	 fc-l2(242),
	 fc-af(243),
	 fc-l1(244),
	 fc-h2(245),
	 fc-ef(246),
	 fc-h1(247),
	 fc-nc(248) 
	}
   	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "This object is meaningful :
	    1.when vlan-priority template is used and will reprezent vlan priority tag. 
	    2.Forwarding class reprezented in the second part of enumeration: fc-##.
	    A value of 8 means that neither of above is defined."

        ::= { extendedAccessListEntry 23 }  

   extendedAccessListRowStatus OBJECT-TYPE
	SYNTAX RowStatus
	MAX-ACCESS read-write
	STATUS current
	DESCRIPTION
	     "This indicates the row status & enables creation of lines in
	     this table. In order to be consistent with ACL policy, this object 
	     does not allow deletion of rules. The entire group must be deleted and all 
	     rules removed at once."
    ::= { extendedAccessListEntry 24 }
	extendedAccessListVlanId OBJECT-TYPE
		SYNTAX INTEGER (0..4092)
		MAX-ACCESS read-create
		STATUS current
		DESCRIPTION
		"This object shows the customer VLAN. The object is meaningful
		 only if extendedAccessListVlanMask is set."
	::= { extendedAccessListEntry 25 }

	extendedAccessListVlanMask OBJECT-TYPE
		SYNTAX DisplayString
		MAX-ACCESS read-create		
		STATUS current                                                                        
		DESCRIPTION
		"This object shows the customer VLAN mask. It is meaningful only
		 if extendedAccessListVlanId is set.
		 The value is in hexadecimal type string(0x..)."
	::= { extendedAccessListEntry 26 }

	extendedAccessListProviderVlanId OBJECT-TYPE
		SYNTAX INTEGER (0..4092)
		MAX-ACCESS read-create
		STATUS current
		DESCRIPTION
		"This object shows the provider VLAN. The object is meaningful only
		 if extendedAccessListProviderVlanMask is set."
	::= { extendedAccessListEntry 27 }

	extendedAccessListProviderVlanMask OBJECT-TYPE
		SYNTAX DisplayString
		MAX-ACCESS read-create		
		STATUS current                                                                        
		DESCRIPTION
		"This object shows the provider VLAN mask. It is meaningful only
		 if extendedAccessListProviderVlanId is set.
		 The value is in hexadecimal type string(0x..)."
	::= { extendedAccessListEntry 28 }

	extendedAccessListProviderVpt OBJECT-TYPE
		SYNTAX INTEGER (0..8)
		MAX-ACCESS read-create		
		STATUS current                                                                        
		DESCRIPTION
		"This object shows the provider VLAN priority tag. 
		 A value of 8 means undefined.
		 This object is meaningful only if vlan-priority template is used."
	::= { extendedAccessListEntry 29 }

	extendedAccessListUntaggedMode OBJECT-TYPE
		SYNTAX TruthValue
		MAX-ACCESS read-create		
		STATUS current                                                                        
		DESCRIPTION
		"This object enables the untagged mode."
	::= { extendedAccessListEntry 30 }        
	
	extendedAccessListDropLevel OBJECT-TYPE
	SYNTAX  INTEGER
	{  
	green(0),
	yellow(1)
	}  
	MAX-ACCESS read-create
	STATUS current
	DESCRIPTION 
	"This object define drop-level."
    ::= { extendedAccessListEntry 31}  
    
    extendedAccessListDscp OBJECT-TYPE      
    SYNTAX INTEGER (0..63)
    MAX-ACCESS read-create
    STATUS current
    DESCRIPTION 
    "The object shows the DiffServ Point (DSCP) value from IP header."
    ::= {extendedAccessListEntry 32}

--MAC ACL----------------------------------------------------------------
   macAccessListTable OBJECT-TYPE
    SYNTAX SEQUENCE OF MACAccessListEntry
	MAX-ACCESS not-accessible
	STATUS current
	DESCRIPTION
        "This table contains MAC access-list parameters."
	::= { accessGroupsDefinitions 4 }

    macAccessListEntry 	OBJECT-TYPE
	SYNTAX	MACAccessListEntry
	MAX-ACCESS	not-accessible
	STATUS	current
	DESCRIPTION
        "An entry in the macAccessListTable table."
    INDEX { accessListControlListGroup, macAccessListIndex }
	::= { macAccessListTable 1 }

    MACAccessListEntry ::= SEQUENCE {
		macAccessListIndex		INTEGER,
		macAccessListAction     	AccessListAction,
		macAccessListMacSrc		MacAddress,
		macAccessListMacSrcMask		MacAddress,
		macAccessListMacDst		MacAddress,
		macAccessListMacDstMask		MacAddress,
		macAccessListRemark		AccessListRemarkString,
		macAccessListLog		INTEGER,
		macAccessListRowStatus		RowStatus,
		macAccessListTos		INTEGER,
		macAccessListPrecedence		INTEGER,
		macAccessListVpt		INTEGER,
		macAccessListVlanId		INTEGER,
		macAccessListVlanMask 		DisplayString,
		macAccessListInnerVlanId 	INTEGER,
		macAccessListInnerVlanMask 	DisplayString,
		macAccessListInnerVpt 	INTEGER,
		macAccessListEtherType 		DisplayString,
		macAccessListDscp 		INTEGER,
		macAccessListMatchTraffic	MatchTraffic,
		macAccessListMatchTrafficPort	DisplayString,
		macAccessListUntaggedMode	TruthValue,
		macAccessListDropLevel  INTEGER

	}

    macAccessListIndex OBJECT-TYPE
	SYNTAX INTEGER (1..65535)
	MAX-ACCESS not-accessible
	STATUS current
	DESCRIPTION
	    "Index of the particular rule of the group."
    ::= { macAccessListEntry 1 }

    macAccessListAction OBJECT-TYPE
	SYNTAX	AccessListAction
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "The action to preform if this access-list rule condition is true."
        ::= { macAccessListEntry 2 }
   
	macAccessListMacSrc OBJECT-TYPE
	SYNTAX	MacAddress
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "The object contains the MAC address of source.
	     If this object is not set, the result is 'any' source mac address.
	     If object macAccessListMacSrcMask is not set, this object means the host address."
        ::= { macAccessListEntry 3 }
       
	macAccessListMacSrcMask		OBJECT-TYPE
	SYNTAX	MacAddress
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "This object contains the mask for MAC source address.
	     The object affects macAccessListMacSrc, defines host or range."
		::= { macAccessListEntry 4 } 
	
	macAccessListMacDst OBJECT-TYPE
	SYNTAX	MacAddress
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "The object contains the MAC address of destination.
	     If this object is not set, the result is 'any' destination mac address.
	     If object macAccessListMacDstMask is not set, this object means the host address."
        ::= { macAccessListEntry 5 }
        
	macAccessListMacDstMask OBJECT-TYPE
	SYNTAX	MacAddress
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "This object contains the mask for MAC destination address.
	     The object affects macAccessListMacDst, defines host or range."
    	::= { macAccessListEntry 6 }

	macAccessListRemark OBJECT-TYPE 
	SYNTAX	AccessListRemarkString
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "Access list entry comment"
        ::= { macAccessListEntry 7 }  
        
   	macAccessListLog OBJECT-TYPE 
   	SYNTAX	INTEGER 
   	{
        undefined (0),
        log  (1),
        log-input (2)
	}
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "Enable normal or extended logging of this access-list rule."
        ::= { macAccessListEntry 8 }  
       
	macAccessListRowStatus OBJECT-TYPE
	SYNTAX RowStatus
	MAX-ACCESS read-write
	STATUS current
	DESCRIPTION
	    "This indicates the row status & enables creation of rows in
	     this table. In order to be consistent with ACL policy, this object 
	     does not allow deletion of rules. The entire group must be deleted and all 
	     rules removed at once."
    ::= { macAccessListEntry 9 }
	
	macAccessListTos OBJECT-TYPE
	SYNTAX	INTEGER
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "This object shows the type of service value."
        ::= { macAccessListEntry 10}
	
	macAccessListPrecedence OBJECT-TYPE
	SYNTAX INTEGER
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "This object shows the precedence value.
	     The parameter is matched for IP traffic only.
	     The value is in the range between <0-8>.
	     When precendence is disable the object will take 8 value."
        ::= { macAccessListEntry 11 }

	macAccessListVpt OBJECT-TYPE
	SYNTAX INTEGER 
	{
	 vpt-value0(0),
	 vpt-value1(1),
	 vpt-value2(2),
	 vpt-value3(3),
	 vpt-value4(4),
	 vpt-value5(5),
	 vpt-value6(6),      
	 vpt-value7(7),
	 undefined(8),	
	 fc-be(241),
	 fc-l2(242),
	 fc-af(243),
	 fc-l1(244),
	 fc-h2(245),
	 fc-ef(246),
	 fc-h1(247),
	 fc-nc(248) 
	}

	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	   "This object is meaningful :
	    1.when vlan-priority template is used and will reprezent vlan priority tag. 
	    2.Forwarding class reprezented in the second part of enumeration: fc-##.
	    A value of 8 means that neither of above is defined."
        ::= { macAccessListEntry 12 }

	macAccessListVlanId OBJECT-TYPE
	SYNTAX INTEGER (0..4092)
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "This object shows the customer VLAN. The object is meaningful only
	     if macAccessListVlanMask is set."
        ::= { macAccessListEntry 13 }

	macAccessListVlanMask OBJECT-TYPE
	SYNTAX	DisplayString
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "This object shows the customer VLAN mask. It is meaningful only 
	     if macAccessListVlanId is set.
	     The value is in hexadecimal type string(0x..)."
        ::= { macAccessListEntry 14 }
        
	macAccessListInnerVlanId OBJECT-TYPE
	SYNTAX INTEGER (0..4092)
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "This object shows the provider VLAN. The object is meaningful only
	     if macAccessListProviderVlanMask is set."
        ::= { macAccessListEntry 15 } 

	macAccessListInnerVlanMask OBJECT-TYPE
	SYNTAX	DisplayString
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "This object shows the provider VLAN mask. It is meaningful only
	     if macAccessListProviderVlanId is set.
	     The value is in hexadecimal type string(0x..). "
        ::= { macAccessListEntry 16 } 
	
	macAccessListInnerVpt OBJECT-TYPE
	SYNTAX INTEGER (0..8)
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "This object shows the provider VLAN priority tag.
	     A value of 8 means undefined"
        ::= { macAccessListEntry 17 }

	macAccessListEtherType OBJECT-TYPE
	SYNTAX DisplayString
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "The object shows the EtherType field in the Ethernet header.
	     The field is matched only for non-IP and non-ARP traffic only."
        ::= { macAccessListEntry 18 }

	macAccessListDscp OBJECT-TYPE
	SYNTAX INTEGER
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "The object shows the DiffServ Point (DSCP) value from IP header."
        ::= { macAccessListEntry 19 }

	macAccessListMatchTraffic OBJECT-TYPE
	SYNTAX	MatchTraffic
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "This object shows the type of traffic to match."
        ::= { macAccessListEntry 20 }

	macAccessListMatchTrafficPort OBJECT-TYPE
	SYNTAX	DisplayString
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "This object is meaningful only if macAccessListMatchTraffic
	     is set to 'known-unicast' value - else returns error.
		 The values are of types PORTLIST (for example 1/1/1-1/1/4,1/1/6)"
        ::= { macAccessListEntry 21 }

	macAccessListUntaggedMode OBJECT-TYPE
	SYNTAX	TruthValue
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "This object enables the untagged mode."
        ::= { macAccessListEntry 22 }
        
    macAccessListDropLevel OBJECT-TYPE
	SYNTAX  INTEGER
	{  
	green(0),
	yellow(1)
	}  
	MAX-ACCESS read-create
	STATUS current
	DESCRIPTION 
	"This object define drop-level."
	::= { macAccessListEntry 23}


--Ethertype ACL---------------------------------
    etherTypeAccessListTable OBJECT-TYPE
    SYNTAX SEQUENCE OF EtherTypeAccessListEntry
	MAX-ACCESS not-accessible
	STATUS current
	DESCRIPTION
        "This table contains extended MAC access-list parameters."
	::= { accessGroupsDefinitions 5 }

    etherTypeAccessListEntry 	OBJECT-TYPE
	SYNTAX	EtherTypeAccessListEntry
	MAX-ACCESS	not-accessible
	STATUS	current
	DESCRIPTION
        "An entry in the etherTypeAccessListTable table."
    INDEX { accessListControlListGroup, etherTypeAccessListIndex }
	::= { etherTypeAccessListTable 1 }

    EtherTypeAccessListEntry ::= SEQUENCE {
	etherTypeAccessListIndex		INTEGER,
	etherTypeAccessListAction		AccessListAction,
	etherTypeAccessListEtherType		DisplayString,
	etherTypeAccessListEtherTypeCodeMask 	DisplayString,
   	etherTypeAccessListRemark		AccessListRemarkString,
        etherTypeAccessListLog			INTEGER,
        etherTypeAccessListRowStatus		RowStatus,
        etherTypeAccessListVlanId		INTEGER,
       	etherTypeAccessListVlanMask		DisplayString,
       	etherTypeAccessListProviderVlanId 	INTEGER,
       	etherTypeAccessListProviderVlanMask 	DisplayString,
       	etherTypeAccessListProviderVpt 		INTEGER
     }

    etherTypeAccessListIndex OBJECT-TYPE
	SYNTAX INTEGER (1..65535)
	MAX-ACCESS not-accessible
	STATUS current
	DESCRIPTION
	    "Index of the particular rule of the group."
    ::= { etherTypeAccessListEntry 1 }

    etherTypeAccessListAction OBJECT-TYPE
	SYNTAX	AccessListAction
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "The action to preform if this access-list rule condition is true."
        ::= { etherTypeAccessListEntry 2 }

	etherTypeAccessListEtherType OBJECT-TYPE
	SYNTAX	DisplayString
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "The IP protocol number (see IpProtocol)."
        ::= { etherTypeAccessListEntry 3 }

    etherTypeAccessListEtherTypeCodeMask OBJECT-TYPE
	SYNTAX	DisplayString
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "The IP source address associated with this flow."
        ::= { etherTypeAccessListEntry 4 }

	etherTypeAccessListRemark OBJECT-TYPE 
	SYNTAX	AccessListRemarkString
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "Access list entry comment"
        ::= { etherTypeAccessListEntry 5 }  
        
   	etherTypeAccessListLog OBJECT-TYPE 
   	SYNTAX	INTEGER 
   	{
        undefined (0),
        log  (1),
        log-input (2)
	}
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "Enable normal or extended logging of this access-list rule."
        ::= { etherTypeAccessListEntry 6 }  
       
	etherTypeAccessListRowStatus OBJECT-TYPE
	SYNTAX RowStatus
	MAX-ACCESS read-write
	STATUS current
	DESCRIPTION
	    "This indicates the row status & enables creation of rows in
	     this table. In order to be consistent with ACL policy, this object 
	     does not allow deletion of rules. The entire group must be deleted and all 
	     rules removed at once."
    ::= { etherTypeAccessListEntry 7 }

  	etherTypeAccessListVlanId OBJECT-TYPE
		SYNTAX INTEGER (0..4092)
		MAX-ACCESS read-create
		STATUS current
		DESCRIPTION
		"This object shows the customer VLAN.The object is meaningful only
		 if etherTypeAccessListVlanMask is set."
	::= { etherTypeAccessListEntry 8 }

	etherTypeAccessListVlanMask OBJECT-TYPE
		SYNTAX DisplayString
		MAX-ACCESS read-create		
		STATUS current                                                                        
		DESCRIPTION
		"This object shows the customer VLAN mask. It is meaningful only
		 if etherTypeAccessListVlanId is set."
	::= { etherTypeAccessListEntry 9 }

  	etherTypeAccessListProviderVlanId OBJECT-TYPE
		SYNTAX INTEGER (0..4092)
		MAX-ACCESS read-create
		STATUS current
		DESCRIPTION
		"This object shows the provider VLAN. The object is meaningful only
		 if etherTypeAccessListProviderVlanMask is set."
	::= { etherTypeAccessListEntry 10 }

	etherTypeAccessListProviderVlanMask OBJECT-TYPE
		SYNTAX DisplayString
		MAX-ACCESS read-create		
		STATUS current                                                                        
		DESCRIPTION
		"This object shows the provider VLAN mask. It is meaningful only 
		 if etherTypeAccessListProviderVlanId is set.
		 The value is in hexadecimal type string (0x..). "
	::= { etherTypeAccessListEntry 11 }
      
    etherTypeAccessListProviderVpt OBJECT-TYPE 
   		SYNTAX	INTEGER  (0..8)
   		MAX-ACCESS	read-create
		STATUS	current
		DESCRIPTION
	    "The vlan priority tag. A value of 8 means undefined. This object is meaningful 
	    only if vlan-priority template is used."
        ::= { etherTypeAccessListEntry 12 }  
    -----------------------------------------------

    accessListInterfaceTable OBJECT-TYPE
    SYNTAX SEQUENCE OF AccessListInterfaceEntry
	MAX-ACCESS not-accessible
	STATUS current
	DESCRIPTION
        "This table controls the assigment of access groups to an interface."
	::= { accessListsInterfaces 1 }

    accessListInterfaceEntry OBJECT-TYPE
	SYNTAX	AccessListInterfaceEntry
	MAX-ACCESS	not-accessible
	STATUS	current
	DESCRIPTION
	    "An entry in the AccessListInterfaceEntry table."
    INDEX { ifIndex, accessListInterfaceTableIndex, accessListInterfaceGroupIndex }
	::= { accessListInterfaceTable 1 }

    AccessListInterfaceEntry ::= SEQUENCE {
        accessListInterfaceTableIndex	   INTEGER,
        accessListInterfaceGroupIndex      INTEGER,
        accessListInterfaceDscp            INTEGER,
        accessListInterfaceRowStatus       RowStatus,
        accessListInterfacePriority        INTEGER,
        accessListInterfaceDiscard         AccessListDiscard,
        accessListInterfaceRateLimit       Rate,
		accessListInterfaceExceedAction    ExceedAction,
        accessListInterfaceShaper          Shaper,
        accessListInterfaceBurst           Rate,
        accessListInterfaceRedirectIfIndex INTEGER,
        accessListInterfaceRedirectVlanID 	INTEGER,
        accessListInterfaceRedirectNexthop  IpAddress,
        accessListInterfacePeakRate			Rate,  
        accessListInterfacePeakBurst		Rate,  
        accessListInterfaceColorAware		INTEGER,
        accessListInterfacePolicy			INTEGER,
        accessListInterfaceTrafficClass		INTEGER,
        accessListInterfaceSpanRootTrack    INTEGER,
        accessListInterfaceUntagFilter	    INTEGER,
	accessListInterfaceTxq			INTEGER,
	accessListInterfaceTxqDropLevel		TxqDropLevel,
	accessListInterfaceApplyMirror		TruthValue,
	accessListInterfaceStatistics		AccessListStatistics,
	accessListInterfaceDirection		AccessListDirection,
	accessListInterfaceRateStatistics		AccessListStatistics

    }

    accessListInterfaceTableIndex OBJECT-TYPE
    SYNTAX INTEGER (1..65535)
	MAX-ACCESS not-accessible
	STATUS current
	DESCRIPTION
        "This object identifies the row number for this (ifIndex) interface."
	::= { accessListInterfaceEntry 1 }

    accessListInterfaceGroupIndex OBJECT-TYPE
	SYNTAX INTEGER (1..65535)
	MAX-ACCESS not-accessible
	STATUS current
	DESCRIPTION
        "This indicates the index of the access group for this interface. This value is
         the same as the value of accessListControlListGroup for the assigned ACL."
    ::= { accessListInterfaceEntry 2 }

    accessListInterfaceDscp OBJECT-TYPE
	SYNTAX	INTEGER 
				{
				disable(0),
				enable(1)
				}	
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "Enable Diffserv codepoint."
    ::= { accessListInterfaceEntry 3}

    accessListInterfaceRowStatus OBJECT-TYPE
	SYNTAX RowStatus
	MAX-ACCESS read-write
	STATUS current
	DESCRIPTION
	    "This indicates the row status & enables creation & deletion of lines in
	     this (and related) tables. See SNMPv2-TC for more information."
    ::= { accessListInterfaceEntry 4 }
    
    accessListInterfacePriority OBJECT-TYPE
	SYNTAX INTEGER (0..8)
	MAX-ACCESS read-write
	STATUS current
	DESCRIPTION
	    "Priority level value. Valid values are 0 to 7, 8 means undefined."
    ::= { accessListInterfaceEntry 5 }
    
    accessListInterfaceDiscard OBJECT-TYPE
	SYNTAX AccessListDiscard
	MAX-ACCESS read-write
	STATUS current
	DESCRIPTION
	    "Mark discardable or normal for priority on access group
         Only the E-Series family and the G-Series family boards 
         support the values green, yellow and red. Other
         values are not supported by the E-Series and G-series."
    ::= { accessListInterfaceEntry 6 }
    
    accessListInterfaceRateLimit OBJECT-TYPE
	SYNTAX	Rate
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "The maximum rate in kBps(kilobytes per second)"
        ::= { accessListInterfaceEntry 7 }

    accessListInterfaceExceedAction OBJECT-TYPE
	SYNTAX	ExceedAction
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "The action to perform when the condition is true."
        ::= { accessListInterfaceEntry 8 }

    accessListInterfaceShaper OBJECT-TYPE
	SYNTAX	Shaper
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "Enable/disable shaper.
         This object is supported only in B-series."
        ::= { accessListInterfaceEntry 9 }

    accessListInterfaceBurst OBJECT-TYPE
	SYNTAX	Rate
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "The maximum Burst rate in kBps(kilobytes per second).
	    This object is supported only by E-Series and G-series."
        ::= { accessListInterfaceEntry 10 }

    accessListInterfaceRedirectIfIndex OBJECT-TYPE
	SYNTAX	INTEGER
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "This object controls redirection of traffic matching this ACG. If the
             value is a valid ifIndex, the traffic will be redirected to it. If the value is 0 
             redirection is disabled. Setting this object requires that accessListInterfaceRedirectVlanID is also set."
        ::= { accessListInterfaceEntry 11 }  
        
    accessListInterfaceRedirectVlanID OBJECT-TYPE
	SYNTAX	INTEGER
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "This object controls redirection of traffic matching this ACG. If the
             value is a valid VLAN ID, the traffic will be redirected to it. If the value is 0 
             redirection is disabled. If the device is TMetro, this object sets the tag substitution
             policy for this access group"
        ::= { accessListInterfaceEntry 12 }  
        
   	accessListInterfaceRedirectNexthop OBJECT-TYPE
	SYNTAX	IpAddress
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "This object controls redirection of traffic matching this ACG. If the
             value is a valid IP address then the traffic will be redirected to it. If the value is 0 
             redirection is disabled."
        ::= { accessListInterfaceEntry 13 }  
        
    accessListInterfacePeakRate OBJECT-TYPE
	SYNTAX	Rate
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "Peak Information Rate in kBps(kilobytes per second)."
        ::= { accessListInterfaceEntry 14 }

    accessListInterfacePeakBurst OBJECT-TYPE
	SYNTAX	Rate
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "Peak Burst Size in kBps(kilobytes per second)."
        ::= { accessListInterfaceEntry 15 }

    accessListInterfaceColorAware OBJECT-TYPE
	SYNTAX	INTEGER {
					disable (0),
					enable (1)
	}
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "Toggle Color aware traffic metering. Disabled by default."
        ::= { accessListInterfaceEntry 16 } 
        
   accessListInterfacePolicy OBJECT-TYPE
	SYNTAX	INTEGER {
					undefined (0),
					dcsp (1),
					priority (2),
					priority-dp (3)
	}
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "Set remarking policy."
        ::= { accessListInterfaceEntry 17 }

    accessListInterfaceTrafficClass OBJECT-TYPE
    	SYNTAX	INTEGER (0..256)   
    		MAX-ACCESS	read-write
			STATUS	current
			DESCRIPTION
	      "Diff Serv CP - Type of Service
             In E-Series and G-series the range is 0..63. A value of 256 means Traffic Class is not set."
        ::= { accessListInterfaceEntry 18 } 
        
     accessListInterfaceSpanRootTrack OBJECT-TYPE
    	SYNTAX	INTEGER 
				{
				disable(0),
				enable(1)
				}	 
		MAX-ACCESS	read-create
		STATUS	current
		DESCRIPTION
	      "The span root track option for VLAN redirects."
        ::= { accessListInterfaceEntry 19 }
                                                
      accessListInterfaceUntagFilter OBJECT-TYPE
    	SYNTAX	INTEGER 
				{
				disable(0),
				enable(1)
				}	 
		MAX-ACCESS	read-create
		STATUS	current
		DESCRIPTION
	      "The filter for tagged or untagged backets to be applied."
        ::= { accessListInterfaceEntry 20 }

      accessListInterfaceTxq OBJECT-TYPE
    	SYNTAX	INTEGER 
		MAX-ACCESS	read-create
		STATUS	current
		DESCRIPTION
	      "This object performs QoS and remarking of traffic matching an ACG"
        ::= { accessListInterfaceEntry 21 }

      accessListInterfaceTxqDropLevel OBJECT-TYPE
    	SYNTAX	TxqDropLevel
		MAX-ACCESS	read-create
		STATUS	current
		DESCRIPTION
		"This object shows the drop-level (green/yellow)
		 and is related to accessListInterfaceTxq."
        ::= { accessListInterfaceEntry 22 }

	accessListInterfaceApplyMirror OBJECT-TYPE
    	SYNTAX	TruthValue 
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	"This object shows that the traffic on the interface will be mirrored"
        ::= { accessListInterfaceEntry 23 }

	accessListInterfaceStatistics OBJECT-TYPE
    	SYNTAX	AccessListStatistics 
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	"This object enables statistics on the interface."
        ::= { accessListInterfaceEntry 24 }

	accessListInterfaceDirection OBJECT-TYPE
    	SYNTAX	AccessListDirection
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	"This object determines the ingress-egress type of applied ACL."
        ::= { accessListInterfaceEntry 25 }

	accessListInterfaceRateStatistics OBJECT-TYPE
    	SYNTAX	AccessListStatistics 
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	"This object enables rate statistics on the interface."
        ::= { accessListInterfaceEntry 26 }

    -----------------------------------------------
    accessListVLANTable OBJECT-TYPE
    SYNTAX SEQUENCE OF AccessListVLANEntry
	MAX-ACCESS not-accessible
	STATUS current
	DESCRIPTION
        "This table controls the assignment of access groups to a VLAN."
	::= { accessListsVLAN 1 }

    accessListVLANEntry OBJECT-TYPE
	SYNTAX	AccessListVLANEntry
	MAX-ACCESS	not-accessible
	STATUS	current
	DESCRIPTION
	    "An entry in the AccessListVLANEntry table."
    INDEX { dot1qVlanIndex, accessListVLANTableIndex, accessListVLANGroupIndex}
	::= { accessListVLANTable 1 }

    AccessListVLANEntry ::= SEQUENCE {
        accessListVLANTableIndex      INTEGER,
        accessListVLANGroupIndex      INTEGER,
        accessListVLANDscp            INTEGER,
        accessListVLANRowStatus       RowStatus,
        accessListVLANPriority        INTEGER,
        accessListVLANDiscard         AccessListDiscard,
        accessListVLANRateLimit       Rate,
		accessListVLANExceedAction    ExceedAction,
		accessListVLANBurst           Rate,
		accessListVLANRedirectIfIndex INTEGER,
		accessListVLANRedirectVlanID 	INTEGER,
        accessListVLANRedirectNexthop  IpAddress,
        accessListVLANPeakRate			Rate,  
        accessListVLANPeakBurst			Rate,  
        accessListVLANColorAware		INTEGER,
        accessListVLANPolicy			INTEGER,
        accessListVLANTrafficClass		INTEGER,
        accessListVLANSpanRootTrack     INTEGER,
        accessListVLANUntagFilter			INTEGER,
	accessListVLANApplyMirror	TruthValue,
	accessListVLANStatistics	AccessListStatistics,
	accessListVLANDirection			AccessListDirection
        }

    accessListVLANTableIndex OBJECT-TYPE
    SYNTAX INTEGER (1..65535)
	MAX-ACCESS not-accessible
	STATUS current
	DESCRIPTION
        "This object identifies the order in which the access group was applied on this VLAN."
	::= { accessListVLANEntry 1 }

    accessListVLANGroupIndex OBJECT-TYPE
	SYNTAX INTEGER (1..65535)
	MAX-ACCESS not-accessible
	STATUS current
	DESCRIPTION
        "This indicates the index of the access group for this VLAN. This value is 
         the same as the value of accessListControlListGroup for the assigned ACL."
    ::= { accessListVLANEntry 2 }

    accessListVLANDscp OBJECT-TYPE
	SYNTAX	INTEGER 
				{
				disable(0),
				enable(1)
				}	
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "Enable Diffserv codepoint."

    ::= { accessListVLANEntry 3}

    accessListVLANRowStatus OBJECT-TYPE
	SYNTAX RowStatus
	MAX-ACCESS read-write
	STATUS current
	DESCRIPTION
	    "This indicates the row status & enables creation & delettion of rows in
	     this and related tables. See SNMPv2-TC for more information."
    ::= { accessListVLANEntry 4 }
    
    accessListVLANPriority OBJECT-TYPE
	SYNTAX INTEGER (0..8)
	MAX-ACCESS read-write
	STATUS current
	DESCRIPTION
	    "Priority level value. Valid values are 0 to 7, 8 means undefined."
    ::= { accessListVLANEntry 5 }
    
    accessListVLANDiscard OBJECT-TYPE
	SYNTAX AccessListDiscard
	MAX-ACCESS read-write
	STATUS current
	DESCRIPTION
	    "Mark discardable or normal for priority on access group
         Only the E-Series family and the G-Series family boards 
         support the values green, yellow and red. Other
         values are not supported by the E-Series and G-series."
    ::= { accessListVLANEntry 6 }
    
    accessListVLANRateLimit OBJECT-TYPE
	SYNTAX	Rate
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "The maximum rate in kBps(kilobytes per second)."
        ::= { accessListVLANEntry 7 }

    accessListVLANExceedAction OBJECT-TYPE
	SYNTAX	ExceedAction
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "The action to perform when the condition is true."
        ::= { accessListVLANEntry 8 }

    accessListVLANBurst OBJECT-TYPE
	SYNTAX	Rate
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "The maximum Burst rate in kBps(kilobytes per second).
	    This object is supported only by E-Series and G-series."
        ::= { accessListVLANEntry 9 }

    accessListVLANRedirectIfIndex OBJECT-TYPE
	SYNTAX	INTEGER
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "This object controls redirection of traffic matching this ACG. If the
             value is a valid ifIndex, the traffic will be redirected to it. If the value is 0 
             redirection is disabled. Setting this object requires that accessListInterfaceRedirectVlanID is also set."
        ::= { accessListVLANEntry 10 }  
    
     accessListVLANRedirectVlanID OBJECT-TYPE
	SYNTAX	INTEGER
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "his object controls redirection of traffic matching this ACG. If the
             value is a valid VLAN ID, the traffic will be redirected to it. If the value is 0 
             redirection is disabled. If the device is TMetro, this object sets the tag substitution
             policy for this access group"
        ::= { accessListVLANEntry 11 }  
        
   	accessListVLANRedirectNexthop OBJECT-TYPE
	SYNTAX	IpAddress
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "This object controls redirection of traffic matching this ACG. If the
             value is a valid IP address then the traffic will be redirected to it. If the value is 0 
             redirection is disabled."
        ::= { accessListVLANEntry 12 }  
        
    accessListVLANPeakRate OBJECT-TYPE
	SYNTAX	Rate
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "Peak Information Rate in kBps(kilobytes per second)."
        ::= { accessListVLANEntry 13 }

    accessListVLANPeakBurst OBJECT-TYPE
	SYNTAX	Rate
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	     "Peak Burst Size in kBps(kilobytes per second)."
        ::= { accessListVLANEntry 14 }

    accessListVLANColorAware OBJECT-TYPE
	SYNTAX	INTEGER {
					disable (0),
					enable (1)
	}
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	       "Toggle Color aware traffic metering.Disabled by default."
        ::= { accessListVLANEntry 15 } 
        
   accessListVLANPolicy OBJECT-TYPE
	SYNTAX	INTEGER {
					undefined (0),
					dcsp (1),
					priority (2),
					priority-dp (3)
	}
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "Set remarking policy."
        ::= { accessListVLANEntry 16 }
                                        
    accessListVLANTrafficClass OBJECT-TYPE
    	SYNTAX	INTEGER (0..256)   
    		MAX-ACCESS	read-write
			STATUS	current
			DESCRIPTION
	      "Diff Serv CP - Type of Service
             In E-Series and G-series the range is 0..63. A value of 256 means that Traffic Class is not set."
        ::= { accessListVLANEntry 17 }
                        
     accessListVLANSpanRootTrack OBJECT-TYPE
    	SYNTAX	INTEGER 
				{
				disable(0),
				enable(1)
				}	 
		MAX-ACCESS	read-create
		STATUS	current
		DESCRIPTION
	      "The span root track option for VLAN redirects."
        ::= { accessListVLANEntry 18 }      
        
     accessListVLANUntagFilter OBJECT-TYPE
    	SYNTAX	INTEGER 
				{
				disable(0),
				enable(1)
				}	 
		MAX-ACCESS	read-create
		STATUS	current
		DESCRIPTION
	      "The filter for tagged or untagged backets to be applied"
        ::= { accessListVLANEntry 19 }

     accessListVLANApplyMirror OBJECT-TYPE
    	SYNTAX	TruthValue 
		MAX-ACCESS	read-create
		STATUS	current
		DESCRIPTION
	      "This object shows that the traffic on the interface will be mirrored."
        ::= { accessListVLANEntry 20 }

     accessListVLANStatistics OBJECT-TYPE
    	SYNTAX	AccessListStatistics 
		MAX-ACCESS	read-create
		STATUS	current
		DESCRIPTION
	      "This object enables statistics on the interface."
        ::= { accessListVLANEntry 21 }

     accessListVLANDirection OBJECT-TYPE
    	SYNTAX	AccessListDirection 
		MAX-ACCESS	read-create
		STATUS	current
		DESCRIPTION
	      "This object determines the ingress-egress type of applied ACL."
        ::= { accessListVLANEntry 22 }

    ----------------------------------------------------------------------------------
	 accessListSapTable OBJECT-TYPE
	    SYNTAX SEQUENCE OF AccessListSapEntry
		MAX-ACCESS not-accessible
		STATUS current
		DESCRIPTION
	        "This table controls the assigment of access groups to a SAP."
		::= { accessListsServices 1 }
	
	    accessListSapEntry OBJECT-TYPE
		SYNTAX	AccessListSapEntry
		MAX-ACCESS	not-accessible
		STATUS	current
		DESCRIPTION
		    "An entry in the AccessListSapEntry table."
	    INDEX { svcId, sapPortId, sapEncapValue , accessListSapTableIndex, accessListSapGroupIndex }
		::= { accessListSapTable 1 }
	
	    AccessListSapEntry ::= SEQUENCE {
	        accessListSapTableIndex	   INTEGER,
	        accessListSapGroupIndex      INTEGER,
	        accessListSapRowStatus       RowStatus,
	        accessListSapRateLimit       Rate,
			accessListSapExceedAction    ExceedAction,
	        accessListSapBurst           Rate,
	        accessListSapPeakRate			Rate,  
	        accessListSapPeakBurst		Rate,  
	        accessListSapColorAware		INTEGER,
	        accessListSapTxq			INTEGER,
			accessListSapTxqDropLevel		TxqDropLevel,
			accessListSapStatistics		AccessListStatistics,  
			accessListSapRateStatistics    AccessListStatistics,
			accessListSapDirection		AccessListDirection
	    }

    accessListSapTableIndex OBJECT-TYPE
    SYNTAX INTEGER (1..65535)
	MAX-ACCESS not-accessible
	STATUS current
	DESCRIPTION
        "This object identifies the row number for this (ifIndex) interface."
	::= { accessListSapEntry 1 }

    accessListSapGroupIndex OBJECT-TYPE
	SYNTAX INTEGER (1..65535)
	MAX-ACCESS not-accessible
	STATUS current
	DESCRIPTION
        "This indicates the index of the access group for this interface. This value is
         the same as the value of accessListControlListGroup for the assigned ACL."
    ::= { accessListSapEntry 2 }

    
    accessListSapRowStatus OBJECT-TYPE
	SYNTAX RowStatus
	MAX-ACCESS read-write
	STATUS current
	DESCRIPTION
	    "This indicates the row status & enables creation & deletion of lines in
	     this (and related) tables. See SNMPv2-TC for more information."
    ::= { accessListSapEntry 3 }
    
    accessListSapRateLimit OBJECT-TYPE
	SYNTAX	Rate
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "The maximum rate in kBps(kilobytes per second)"
        ::= { accessListSapEntry 4 }

    accessListSapExceedAction OBJECT-TYPE
	SYNTAX	ExceedAction
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "The action to perform when the condition is true."
        ::= { accessListSapEntry 5 }


    accessListSapBurst OBJECT-TYPE
	SYNTAX	Rate
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "The maximum Burst rate in kBps(kilobytes per second).
	    This object is supported only by E-Series and G-series."
        ::= { accessListSapEntry 6 }

         
    accessListSapPeakRate OBJECT-TYPE
	SYNTAX	Rate
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "Peak Information Rate in kBps(kilobytes per second)."
        ::= { accessListSapEntry 7 }

    accessListSapPeakBurst OBJECT-TYPE
	SYNTAX	Rate
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "Peak Burst Size in kBps(kilobytes per second)."
        ::= { accessListSapEntry 8 }

    accessListSapColorAware OBJECT-TYPE
	SYNTAX	INTEGER {
					disable (0),
					enable (1)
	}
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "Toggle Color aware traffic metering. Disabled by default."
        ::= { accessListSapEntry 9 } 
        
   
     accessListSapTxq OBJECT-TYPE
     SYNTAX	INTEGER 
	 MAX-ACCESS	read-create
	 STATUS	current
	 DESCRIPTION
     "This object performs QoS and remarking of traffic matching an ACG"
      ::= { accessListSapEntry 10 }

    accessListSapTxqDropLevel OBJECT-TYPE
   	SYNTAX	TxqDropLevel
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	"This object shows the drop-level (green/yellow)
	 and is related to accessListInterfaceTxq."
     ::= { accessListSapEntry 11 }


	accessListSapStatistics OBJECT-TYPE
    	SYNTAX	AccessListStatistics 
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	"This object enables statistics on the SAP."
        ::= { accessListSapEntry 12 }    
    
   accessListSapRateStatistics OBJECT-TYPE
    	SYNTAX	AccessListStatistics 
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	"This object enables rate statistics on the SAP."
        ::= { accessListSapEntry 13 }


	accessListSapDirection OBJECT-TYPE
   		SYNTAX	AccessListDirection
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	"This object determines the ingress-egress type of applied ACL."
        ::= { accessListSapEntry 14 }

    --------------------------------------------------------------            
            
    accessListInterfaceStatisticsTable OBJECT-TYPE
    SYNTAX SEQUENCE OF AccessListInterfaceStatisticsEntry
	MAX-ACCESS not-accessible
	STATUS current
	DESCRIPTION
        "This table serves the interface statistics."
	::= { accessListsInterfaceStatistics 1 }

    accessListInterfaceStatisticsEntry OBJECT-TYPE
	SYNTAX	AccessListInterfaceStatisticsEntry
	MAX-ACCESS	not-accessible
	STATUS	current
	DESCRIPTION
	    "An entry in the accessListInterfaceStatisticsTable table."
    INDEX { ifIndex, accessListInterfaceStatisticsGroupIndex }
	::= { accessListInterfaceStatisticsTable 1 }

     AccessListInterfaceStatisticsEntry ::= SEQUENCE {
        accessListInterfaceStatisticsGroupIndex	INTEGER,
        accessListInterfaceGreenBytes	INTEGER,
        accessListInterfaceYellowBytes	INTEGER,
        accessListInterfaceRedBytes	INTEGER,
		accessListInterfaceClassifiedPackets	INTEGER
     }

    accessListInterfaceStatisticsGroupIndex OBJECT-TYPE
    SYNTAX INTEGER (1..65535)
	MAX-ACCESS not-accessible
	STATUS current
	DESCRIPTION
        "This indicates the index of the access group for this interface. This value is
 	the same as the value of accessListControlListGroup for the assigned ACL."
	::= { accessListInterfaceStatisticsEntry 1 }

    accessListInterfaceGreenBytes OBJECT-TYPE
	SYNTAX INTEGER
	MAX-ACCESS read-only
	STATUS current
	DESCRIPTION
        "This object shows green traffic in bytes for access group with enabled rate-limit statistics."
    ::= { accessListInterfaceStatisticsEntry 2 }

    accessListInterfaceYellowBytes OBJECT-TYPE
	SYNTAX INTEGER
	MAX-ACCESS read-only
	STATUS current
	DESCRIPTION
        "This object shows yellow traffic in bytes for access group with enabled rate-limit statistics."
    ::= { accessListInterfaceStatisticsEntry 3 }

    accessListInterfaceRedBytes OBJECT-TYPE
	SYNTAX INTEGER
	MAX-ACCESS read-only
	STATUS current
	DESCRIPTION
        "This object shows red traffic in bytes for access group with enabled rate-limit statistics."
    ::= { accessListInterfaceStatisticsEntry 4 }
	
	accessListInterfaceClassifiedPackets OBJECT-TYPE
	SYNTAX INTEGER
	MAX-ACCESS read-only
	STATUS current
	DESCRIPTION
        "This object shows match classified packets in bytes for access group with enabled statistics."
    ::= { accessListInterfaceStatisticsEntry 5 }
-----------------------------------------------------------------------------------------------------------    
    accessListSapStatisticsTable OBJECT-TYPE
    SYNTAX SEQUENCE OF AccessListSapStatisticsEntry
	MAX-ACCESS not-accessible
	STATUS current
	DESCRIPTION
        "This table serves the Sap statistics."
	::= { accessListsServicesStatistics 1 }

    accessListSapStatisticsEntry OBJECT-TYPE
	SYNTAX	AccessListSapStatisticsEntry
	MAX-ACCESS	not-accessible
	STATUS	current
	DESCRIPTION
	    "An entry in the accessListSapStatisticsTable table."
    INDEX { svcId, sapPortId, sapEncapValue , accessListSapStatisticsGroupIndex }
	::= { accessListSapStatisticsTable 1 }

     AccessListSapStatisticsEntry ::= SEQUENCE {
        accessListSapStatisticsGroupIndex	INTEGER,
        accessListSapGreenBytes	INTEGER,
        accessListSapYellowBytes	INTEGER,
        accessListSapRedBytes	INTEGER,
		accessListSapClassifiedPackets	INTEGER
     }

    accessListSapStatisticsGroupIndex OBJECT-TYPE
    SYNTAX INTEGER (1..65535)
	MAX-ACCESS not-accessible
	STATUS current
	DESCRIPTION
        "This indicates the index of the access group for this Sap. This value is
 	the same as the value of accessListControlListGroup for the assigned ACL."
	::= { accessListSapStatisticsEntry 1 }

    accessListSapGreenBytes OBJECT-TYPE
	SYNTAX INTEGER
	MAX-ACCESS read-only
	STATUS current
	DESCRIPTION
        "This object shows green traffic in bytes for access group with enabled rate-limit statistics."
    ::= { accessListSapStatisticsEntry 2 }

    accessListSapYellowBytes OBJECT-TYPE
	SYNTAX INTEGER
	MAX-ACCESS read-only
	STATUS current
	DESCRIPTION
        "This object shows yellow traffic in bytes for access group with enabled rate-limit statistics."
    ::= { accessListSapStatisticsEntry 3 }

    accessListSapRedBytes OBJECT-TYPE
	SYNTAX INTEGER
	MAX-ACCESS read-only
	STATUS current
	DESCRIPTION
        "This object shows red traffic in bytes for access group with enabled rate-limit statistics."
    ::= { accessListSapStatisticsEntry 4 }
	
	accessListSapClassifiedPackets OBJECT-TYPE
	SYNTAX INTEGER
	MAX-ACCESS read-only
	STATUS current
	DESCRIPTION
        "This object shows classified packets in bytes for access group with enabled match statistics."
    ::= { accessListSapStatisticsEntry 5 }

    -----------------------------------------------
    
    ispUpLinkTable OBJECT-TYPE
    SYNTAX SEQUENCE OF IspUpLinkEntry
	MAX-ACCESS not-accessible
	STATUS current
	DESCRIPTION
        "This table controls the ISP up-links. This table is supported only by B-Series."
	::= { isp 1 }

    ispUpLinkEntry OBJECT-TYPE
	SYNTAX	IspUpLinkEntry
	MAX-ACCESS	not-accessible
	STATUS	current
	DESCRIPTION
	    "An entry in the ispUpLinkTable table."
    INDEX { ispUpLinkIndex }
	::= { ispUpLinkTable 1 }

    IspUpLinkEntry ::= SEQUENCE {
		ispUpLinkIndex       INTEGER,
		ispUpLinkIfIndex     INTEGER,
                ispUpLinkType        ISPType,
                ispUpLinkAccessGroup INTEGER,
		ispUpLinkVLANid      INTEGER,
		ispUpLinkVLANtag     VlanTag,
                ispUpLinkRowStatus   RowStatus
   }

	ispUpLinkIndex OBJECT-TYPE
	SYNTAX	INTEGER (1..32)
	MAX-ACCESS	not-accessible
	STATUS	current
	DESCRIPTION
	    "The ISP index."
    ::= { ispUpLinkEntry 1 }

	ispUpLinkIfIndex OBJECT-TYPE
	SYNTAX	INTEGER
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "The ifIndex (from RFC1213) that this ISP belongs to."
    ::= { ispUpLinkEntry 2 }

    ispUpLinkType OBJECT-TYPE
	SYNTAX	ISPType
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "The ispUpLinkType object shows if the ISP is connective or normal."
        ::= { ispUpLinkEntry 3 }
        
    ispUpLinkAccessGroup OBJECT-TYPE
	SYNTAX	INTEGER (1..199)
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "A valid index (accessListControlListGroup) from accessListControlTable.
	     For the ISP up-link the index groups are 100..199."
        ::= { ispUpLinkEntry 4 }

    ispUpLinkVLANid OBJECT-TYPE
	SYNTAX	INTEGER (0..4000)
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "The VID for this link. 0 means no VID."
    ::= { ispUpLinkEntry 5 }

	ispUpLinkVLANtag OBJECT-TYPE
	SYNTAX	VlanTag
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "Type of the VLAN - tagged or untagged."
        ::= { ispUpLinkEntry 6 }

    ispUpLinkRowStatus OBJECT-TYPE
	SYNTAX RowStatus
	MAX-ACCESS read-write
	STATUS current
	DESCRIPTION
	    "This indicates the row status and enables creation & deletion of rows in
	     this and related tables. See SNMPv2-TC for more information."
        ::= { ispUpLinkEntry 7 }

    -----------------------------------------------

    ispUserInterfaceTable OBJECT-TYPE
    SYNTAX SEQUENCE OF IspUserInterfaceEntry
	MAX-ACCESS not-accessible
	STATUS current
	DESCRIPTION
        "This table controls the assignment of ISP users to an interface.
        This table is supported only by B-Series."
	::= { isp 2 }

    ispUserInterfaceEntry OBJECT-TYPE
	SYNTAX	IspUserInterfaceEntry
	MAX-ACCESS	not-accessible
	STATUS	current
	DESCRIPTION
	    "An entry in the ispUserInterfaceTable table."
    INDEX { ifIndex}
	::= { ispUserInterfaceTable 1 }

    IspUserInterfaceEntry ::= SEQUENCE {
        ispUserInterfaceAssigen        AssigenValue,
        ispUserInterfaceIspUplinkIndex INTEGER,
        ispUserInterfaceRateLimit      Rate,
	ispUserInterfaceConformAction  ConformAction,
        ispUserInterfaceExceedAction   ExceedAction,
        ispUserInterfaceShaper         Shaper
   }

	ispUserInterfaceAssigen OBJECT-TYPE
	SYNTAX	AssigenValue
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "Indicates if an ISP user is assigned to this interface."
        ::= { ispUserInterfaceEntry 1 }

	ispUserInterfaceIspUplinkIndex OBJECT-TYPE
	SYNTAX	INTEGER (1..32)
	MAX-ACCESS	read-create
	STATUS	current
	DESCRIPTION
	    "A valid index from ispUpLinkTable."
        ::= { ispUserInterfaceEntry 2 }

	ispUserInterfaceRateLimit OBJECT-TYPE
	SYNTAX	Rate
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "The maximum rate."
        ::= { ispUserInterfaceEntry 3 }

	ispUserInterfaceConformAction OBJECT-TYPE
	SYNTAX	ConformAction
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "The action to perform when the condition is true."
        ::= { ispUserInterfaceEntry 4 }

        ispUserInterfaceExceedAction OBJECT-TYPE
	SYNTAX	ExceedAction
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "The action to perform when the condition is true."
        ::= { ispUserInterfaceEntry 5 }

        ispUserInterfaceShaper OBJECT-TYPE
	SYNTAX	Shaper
	MAX-ACCESS	read-write
	STATUS	current
	DESCRIPTION
	    "This object controls the status of the shaper."
        ::= { ispUserInterfaceEntry 6 }     
        
  standardAccessListRuleMatched  NOTIFICATION-TYPE
       OBJECTS { ifIndex, dot1qVlanStatus, standardAccessListAction}
         STATUS current
         DESCRIPTION
         "This trap indicates that a packet matching a standard ACL rule has been received."
         ::= { prvtSwitchAccessListNotifications 1} 
          
  extendedAccessListRuleMatched  NOTIFICATION-TYPE
  		OBJECTS { ifIndex, dot1qVlanStatus, extendedAccessListAction}
         STATUS current
         DESCRIPTION
         "This trap indicates that a packet matching an extended ACL rule has been received."
         ::= { prvtSwitchAccessListNotifications 2}  

   macAccessListRuleMatched  NOTIFICATION-TYPE
       OBJECTS { ifIndex, dot1qVlanStatus, macAccessListAction}
         STATUS current
         DESCRIPTION
         "This trap indicates that a packet matching a mac ACL rule has been received."
         ::= { prvtSwitchAccessListNotifications 3} 

   etherTypeAccessListRuleMatched  NOTIFICATION-TYPE
       OBJECTS { ifIndex, dot1qVlanStatus, etherTypeAccessListAction}
         STATUS current
         DESCRIPTION
         "This trap indicates that a packet matching a ether-type ACL rule has been received."
         ::= { prvtSwitchAccessListNotifications 4} 

-- *******************************************************************
--  Conformance Information
-- *******************************************************************

    prvtSwitchAccessListMibGroups       OBJECT IDENTIFIER ::= { prvtSwitchAccessListConformance 1 }


    prvtSwitchAccessListNotificationGroup NOTIFICATION-GROUP
    	NOTIFICATIONS {
    		standardAccessListRuleMatched,
    		extendedAccessListRuleMatched,
		macAccessListRuleMatched,
		etherTypeAccessListRuleMatched
    	}
	STATUS current
     	DESCRIPTION
        	"Private Notification Group."
     ::= { prvtSwitchAccessListMibGroups 1 }

END