ZTE-AN-ACL-MIB: View SNMP OID List / Download MIB

This MIB defines managed objects of ZTE access control list.

The ACL capabilities for this equipment. The bit value 1 means the function represented by this bit is supported. tagTpid(0): value 1 means supporting zxAnAclHybridRuleStagTpid, zxAnAclHybridRuleCtagTpid. itag(1): value 1 means supporting zxAnAclHybridRuleItagTpid, zxAnAclHybridRuleIsid. unifiedTypeAcl(2): value 1 means just supporting one type of ACL, all ACLs in zxAnAclTable are the same type, zxAnAclNumber range is 1~699, and only supporting zxAnAclIpv6HybridRuleTable. aclNotSupportName(3): value 1 means not supporting zxAnAclName. aclRuleIpGroup(4): value 1 means supporting zxAnAclIpv6HybridSrcIpGrpName and zxAnAclIpv6HybridDestIpGrpName. icmpType(5),value 1 means supporting zxAnAclIpv6HybridStartIcmpType, zxAnAclIpv6HybridEndIcmpType and zxAnAclIpv6HybridIcmpTypeOper. Bits: 'aclRuleParamGroup': 4, 'aclNotSupportName': 3, 'itag': 1, 'icmpType': 5, 'tagTpid': 0, 'unifiedTypeAcl': 2.

This table represents the ACL related parameters.

An entry in zxAnAclTable. The multi-variables binding rule should be complied with when a manager creates an entry. According to this rule, all the related mib variables must be included in one SNMP set operation. There are two types of variables: mandatory and optional. All of the mandatory variables must be included in one SNMP set operation. Optional variables may be included in one SNMP set operation with the mandatory variables. To create an entry of this table, all the variable are optional. After an entry is created, every variable can be modified.

The number of an ACL. When unifiedTypeAcl(2) bit of zxAnAclCapabilities is 0: range 1-99 - standard ACL. range 100-199 - extended ACL. range 200-299 - link ACL. range 300-399 - hybrid ACL. range 500-599 - ipv6 extended ACL. range 600-699 - ipv6 hybrid ACL. When unifiedTypeAcl(2) bit of zxAnAclCapabilities is 1: range 1-699 - ipv6 hybrid ACL.

The name of an ACL. The first element (excluding plus & minus) in an ACL name should not be a number. You can't make the same name to different ACLs. It's not necessary to create an ACL entry.

The status of this conceptual row. The supported actions of this conceptual row only include: 'createAndGo' and 'destroy'. To create a row in this table, a manager must set this object to createAndGo(4), and must comply with the multi-variables binding rule described in zxAnAclEntry. To delete a row in this table, a manager must set this object to destroy(6). To get this object, the agent always returns active(1).

Acl standard rule table. Provide acl standard rule configuration.

An entry in zxAnAclStandardRuleTable. The multi-variables binding rule should be complied with when a manager creates an entry. According to this rule, all the related mib variables must be included in one SNMP set operation. There are two types of variables: mandatory and optional. All of the mandatory variables must be included in one SNMP set operation. Optional variables may be included in one SNMP set operation with the mandatory variables, but must not be used alone. To create an entry of this table, all the variable are optional. After an entry is created, no variable can be modified. If a manager tries to modify any variables in this entry, agent will return error with SNMP error code inconsistentValue.

The number of a standard Acl.

The index of a rule within a standard Acl.

Specify packets to be rejected or to be forwarded. Enumeration: 'deny': 2, 'permit': 1.

The type of IP address used by this rule entry.

The source IP address to be matched for this rule. A value of zero causes all source address to match. The object value has to be consistent with the type specified in zxAnAclStdRuleSrcIpType.

This is the wildcard mask for the zxAnAclStdRuleSrcIp bits that must match. 0 bits in the mask indicate the corresponding bits in the zxAnAclStdRuleSrcIp must match in order for the matching to be successful, and 1 bits are not care bits in the matching. A value of zero causes only IP packets of source address the same as zxAnAclStdRuleSrcIp to match. This object value has to be consistent with the type specified in zxAnAclStdRuleSrcIpType.

Name of the time range. Empty string means all the time the rule is valid.

The status of this conceptual row. The supported actions of this conceptual row only include: 'createAndGo' and 'destroy'. To create a row in this table, a manager must set this object to createAndGo(4), and must comply with the multi-variables binding rule described in zxAnAclStandardRuleEntry. To delete a row in this table, a manager must set this object to destroy(6). To get this object, the agent always returns active(1).

Acl hybrid rule table. Provide acl hybrid rule configuration.

An entry in zxAnAclHybridRuleTable. The multi-variables binding rule should be complied with when a manager creates an entry. According to this rule, all the related mib variables must be included in one SNMP set operation. There are two types of variables: mandatory and optional. All of the mandatory variables must be included in one SNMP set operation. Optional variables may be included in one SNMP set operation with the mandatory variables, but must not be used alone. To create an entry of this table, all the variable are optional. After an entry is created, no variable can be modified. If a manager tries to modify any variables in this entry, agent will return error with SNMP error code inconsistentValue.

The number of a hybrid Acl.

The index of a rule within a hybrid Acl

Specify packets to be rejected or to be forwarded. Enumeration: 'deny': 2, 'permit': 1.

The type of source IP address used by this rule entry.

The source IP address to be matched against for this rule. A zero value of this variable and a 0xFFFFFF value of variable zxAnAclHybridRuleSrcIpMask causes all source address to match. The object value has to be consistent with the type specified in zxAnAclHybridRuleSrcIpType.

This is the wildcard mask for the zxAnAclStdRuleSrcIp bits that must match.0 bits in the mask indicate the corresponding bits in the zxAnAclHybridRuleSrcIp must match in order for the matching to be successful, and 1 bits are not care bits in the matching. A value of zero causes only IP packets of source address the same as zxAnAclHybridRuleSrcIp to match. This object value has to be consistent with the type specified in zxAnAclHybridRuleSrcIpType.

The type of destination IP address used by this rule entry.

The destination IP address to be matched against for this rule. A zero value of this variable and a 0xFFFFFF value of variable zxAnAclHybridRuleDestIpMask causes all destination address to match. The object value has to be consistent with the type specified in zxAnAclHybridRuleDestIpType.

This is the wildcard mask for the zxAnAclHybridRuleDestIp bits that must match. 0 bits in the mask indicate the corresponding bits in the zxAnAclHybridRuleDestIp must match in order for the matching to be successful, and 1 bits are not care bits in the matching. A value of zero causes only IP packets of destination address the same as zxAnAclHybridRuleDestIp to match. This object value has to be consistent with the type specified in zxAnAclHybridRuleDestIpType.

The protocol number field in the IP header used to indicate the higher layer protocol as specified in RFC 1700.A value of '0xFF' matches every IP packet. For example : 255 is any, 1 is ICMP, 2 is IGMP, 4 is IP in IP encapsulation, 6 is TCP, 9 is IGRP, 17 is UDP, 47 is GRE, 50 is ESP, 51 is AH, 88 is IGRP, 89 is OSPF, 94 is KA9Q/NOS compatible IP over IP, 103 is PIMv2, 108 is PCP.

This 16-bit number indicates the matched Ethernet type. 0xFFFF means any Ethernet type will be matched.

Indicates how a packet's source TCP/UDP port number is to be compared. If the zxAnAclHybridRuleIpProto object in the same row does not indicate TCP or UDP, this object has to be 'none(1)' and cannot be changed. 'none(1)',which is the default value, means that no comparison is to be made with the source TCP/UDP port number. eq(2) means equal, ge(3) means greater than or equal, le(4) means less than or equal. Those 3 operators are using the zxAnAclHybridRuleStartSrcPort object as an operand which is the only one needed. range(5) means that it compares the port value between two numbers, so this operator needs 2 operands. One operand is the starting port number of the range which is zxAnAclHybridRuleStartSrcPort object, and the other operand is the ending port number of the range which the zxAnAclHybridRuleEndSrcPort object is in.

The source port number of the TCP or UDP protocol. If the zxAnAclHybridRuleSrcPortOper object in the same row is range(5), this object will be the starting port number of the port range. This object cannot be configured if zxAnAclHybridRuleSrcPortOper in the same row is none(1).

The source port number of the TCP or UDP protocol. If the zxAnAclHybridRuleSrcPortOper object in the same row is range(5), this object will be the ending port number of the port range. This object cannot be configured if zxAnAclHybridRuleSrcPortOper in the same row is not range(5).

Indicates how a packet's destination TCP/UDP port number is to be compared. If the zxAnAclHybridRuleIpProto object in the same row does not indicate TCP or UDP, this object has to be 'none(1)' and cannot be changed. 'none(1)', which is the default value, means that no comparison is to be made with the source TCP/UDP port number. eq(2) means equal, ge(3) means greater than or equal, le(4) means less than or equal. Those 3 operators are using the zxAnAclHybridRuleStartDestPort object as an operand which is the only one needed. range(5) means that it compares the port value between two numbers, so this operator needs 2 operands. One operand is the starting port number of the range which is zxAnAclHybridRuleStartDestPort object, and the other operand is the ending port number of the range which the zxAnAclHybridRuleEndDestPort object is in.

The destination port number of the TCP or UDP protocol. If the zxAnAclHybridRuleDestPortOper object in the same row is range(5), this object will be the starting port number of the port range. This object cannot be configured if zxAnAclHybridRuleDestPortOper in the same row is none(1).

The destination port number of the TCP or UDP protocol. If the zxAnAclHybridRuleDestPortOper object in the same row is range(5), this object will be the ending port number of the port range. This object cannot be configured if zxAnAclHybridRuleDestPortOper in the same row is not range(5).

Specifies the IP precedence value to be matched against. Packets can be matched the IP precedence value from 0 to 7. This object can't be configured simultaneously with zxAnAclHybridRuleDscp. The value of this object is ignored whenever the value of zxAnAclHybridRuleEthProto object is not 0xFFFF or 0x0800. '0xFF' indicates no configure.

Specifies the Tos value to be matched against. Packets can be matched the Tos value from 0 to 15. This object can't be configured simultaneously with zxAnAclHybridRuleDscp. The value of this object is ignored whenever the value of zxAnAclHybridRuleEthProto object is not 0xFFFF or 0x0800. '0xFF' indicates no configure.

Specifies the Dscp value to be matched against. Packets can be matched the DSCP level from 0 to 63. This object can't be configured simultaneously with zxAnAclHybridRuleTos and ZxAnAclHybridRulePrecedence. The value of this object is ignored whenever the value of zxAnAclHybridRuleEthProto object is not 0xFFFF or 0x0800. '0xFF' indicates no configure.

Indicates the packet Cos value to be matched. If there are two tags in the packets, this object will be the Cos value in outer tag.'0xFF' indicates no configure.

Indicates the packet VLAN number to be matched. If there are two tags in the packets, this object will be the VLAN number in outer tag.'0xFFFF' indicates no configure.

Indicates the packet Cos value to be matched. If there are two tags in the packets, this object will be the Cos value in inner tag. The value of this object is ignored whenever there is only one tag in the packets.'0xFF' indicates no configure.

Indicates the packet VLAN number to be matched. If there are two tags in the packets, this object will be the VLAN number in inner tag. The value of this object is ignored whenever there is only one tag in the packets.'0xFFFF' indicates no configure.

The source MAC address to be matched against for this rule. A 0 value of this variable and a 0xFFFFFFFFFFFF value of variable zxAnAclHybridRuleSrcMacMask causes all source addresses to match.

This is the wildcard mask for the zxAnAclHybridRuleSrcMac bits that must match. 0 bits in the mask indicate the corresponding bits in the zxAnAclHybridRuleSrcMac must match in order for the matching to be successful, and 1 bits are not care bits in the matching. A value of zero causes only packets of source address the same as zxAnAclHybridRuleSrcMac to match.

The destination MAC address to be matched against for this rule. A 0 value of this variable and a 0xFFFFFFFFFFFF value of variable zxAnAclHybridRuleDestMacMask causes all destination addresses to match.

This is the wildcard mask for the zxAnAclHybridRuleDestMac bits that must match. 0 bits in the mask indicate the corresponding bits in the zxAnAclHybridRuleDestMac must match in order for the matching to be successful, and 1 bits are not care bits in the matching. A value of zero causes only packets of source address the same as zxAnAclHybridRuleDestMac to match.

Specifies the value which will be matched 802.1q TPID field. If there are two vlan tags in the packet, this object will be matched the field which in outer tag. Value '0' indicates no configure.

Specifies the value which will be matched the inner TPID field when there are two vlan tags. Value '0' indicates no configure.

Specifies the value which will be matched the 802.1ah I-Tag TPID field. Value '0' indicates no configure.

Specifies the value which will be matched the 802.1ah I-SID field. Value '0x7FFFFFFF' indicates no configure.

Name of the time range. Empty string means all the time the rule is valid.

The status of this conceptual row. The supported actions of this conceptual row only include: 'createAndGo' and 'destroy'. To create a row in this table, a manager must set this object to createAndGo(4), and must comply with the multi-variables binding rule described in zxAnAclHybridRuleEntry. To delete a row in this table, a manager must set this object to destroy(6). To get this object, the agent always returns active(1).

ACL IPv6 rule table. Provide ACL hybrid rule configuration.

An entry in zxAnAclIpv6HybridRuleEntry. The multi-variables binding rule should be complied with when a manager creates an entry. According to this rule, all the related mib variables must be included in one SNMP set operation. There are two types of variables: mandatory and optional. All of the mandatory variables must be included in one SNMP set operation. Optional variables may be included in one SNMP set operation with the mandatory variables, but must not be used alone. To create an entry of this table, all the variable are optional. After an entry is created, no variable can be modified. If a manager tries to modify any variables in this entry, agent will return error with SNMP error code inconsistentValue.

The number of an IPv6 hybrid ACL.

The index of a rule within an IPv6 hybrid ACL.

Specify packets to be rejected or to be forwarded. Enumeration: 'deny': 2, 'permit': 1.

The type of source IP address used by this rule entry.

The source IP address to be matched against for this rule. The object value has to be consistent with the type specified in zxAnAclIpv6HybridSrcIpType.

This is the wildcard mask for the zxAnAclIpv6HybridSrcIp bits that must match.0 bits in the mask indicate the corresponding bits in the zxAnAclIpv6HybridSrcIp must match in order for the matching to be successful, and 1 bits are not care bits in the matching. A value of zero causes only IP packets of source address the same as zxAnAclIpv6HybridSrcIp to match. Only valid when zxAnAclIpv6HybridSrcIpType is ipv4.

Source IP address prefix length. Only valid when zxAnAclIpv6HybridSrcIpType is ipv6.

The type of destination IP address used by this rule entry.

The destination IP address to be matched against for this rule. The object value has to be consistent with the type specified in zxAnAclIpv6HybridDestIpType.

This is the wildcard mask for the zxAnAclIpv6HybridDestIpMask bits that must match. 0 bits in the mask indicate the corresponding bits in the zxAnAclIpv6HybridDestIp must match in order for the matching to be successful, and 1 bits are not care bits in the matching. A value of zero causes only IP packets of destination address the same as zxAnAclIpv6HybridDestIp to match. Only valid when zxAnAclIpv6HybridDestIpType is ipv4.

Destination IP address prefix length. Only valid when zxAnAclIpv6HybridDestIpType is ipv6.

<0-254> An IP protocol number icmpv6 Internet Control Message Protocol for Ipv6(58) igmp Internet Group Management Protocol (2) ospf Open Shortest Path First Protocol (89) pim Protocol Independent Multicast (103) tcp Transmission Control Protocol (6) udp User Datagram Protocol (17) vrrp Virtual Router Redundancy Protocol (112) 255 Any internet protocol

0xHHHH Ethernet protocol number any Any ether protocol type arp Address resolution protocol (2054) ip Internet protocol (2048)

Indicates how a packet's source TCP/UDP port number is to be compared. If the zxAnAclIpv6HybridIpProto object in the same row does not indicate TCP or UDP, this object has to be 'none(1)' and cannot be changed. 'none(1)',which is the default value, means that no comparison is to be made with the source TCP/UDP port number. eq(2) means equal, ge(3) means greater than or equal, le(4) means less than or equal. Those 3 operators are using the zxAnAclIpv6HybridStartSrcPort object as an operand which is the only one needed. range(5) means that it compares the port value between two numbers, so this operator needs 2 operands. One operand is the starting port number of the range which is zxAnAclIpv6HybridStartSrcPort object, and the other operand is the ending port number of the range which the zxAnAclIpv6HybridEndSrcPort object is in.

The source port number of the TCP or UDP protocol. If the zxAnAclIpv6HybridSrcPortOper object in the same row is range(5), this object will be the starting port number of the port range. This object cannot be configured if zxAnAclIpv6HybridSrcPortOper in the same row is none(1).

The source port number of the TCP or UDP protocol. If the zxAnAclIpv6HybridSrcPortOper object in the same row is range(5), this object will be the ending port number of the port range. This object cannot be configured if zxAnAclIpv6HybridSrcPortOper in the same row is not range(5).

Indicates how a packet's destination TCP/UDP port number is to be compared. If the zxAnAclIpv6HybridIpProto object in the same row does not indicate TCP or UDP, this object has to be 'none(1)' and cannot be changed. 'none(1)', which is the default value, means that no comparison is to be made with the source TCP/UDP port number. eq(1) means equal, ge(2) means greater than or equal, le(3) means less than or equal. Those 3 operators are using the zxAnAclIpv6HybridStartDestPort object as an operand which is the only one needed. range(5) means that it compares the port value between two numbers, so this operator needs 2 operands. One operand is the starting port number of the range which is zxAnAclIpv6HybridStartDestPort object, and the other operand is the ending port number of the range which the zxAnAclIpv6HybridEndDestPort object is in.

The destination port number of the TCP or UDP protocol. If the zxAnAclIpv6HybridDestPortOper object in the same row is range(5), this object will be the starting port number of the port range. This object cannot be configured if zxAnAclIpv6HybridDestPortOper in the same row is none(1).

The destination port number of the TCP or UDP protocol. If the zxAnAclIpv6HybridDestPortOper object in the same row is range(5), this object will be the ending port number of the port range. This object cannot be configured if zxAnAclIpv6HybridDestPortOper in the same row is not range(5).

Specifies the IP precedence value to be matched against. Packets can be matched the IP precedence value from 0 to 7. This object can't be configured simultaneously with zxAnAclIpv6HybridDscp. A value of '0xFF' indicates not care about this field.

Specifies the TOS value to be matched against. Packets can be matched the TOS value from 0 to 15. This object can't be configured simultaneously with zxAnAclIpv6HybridDscp. A value of '0xFF' indicates not care about this field.

Specifies the DSCP value to be matched against. Packets can be matched the DSCP level from 0 to 63. This object can't be configured simultaneously with zxAnAclIpv6HybridTos and zxAnAclIpv6HybridPrecedence. A value of '0xFF' indicates not care about this field.

Indicates the packet CoS value to be matched. If there are two tags in the packets, this object will be the CoS value in outer tag. A value of '0xFF' indicates not care about this field.

Indicates the packet VLAN number to be matched. If there are two tags in the packets, this object will be the VLAN number in outer tag. A value of '0xFFFF' indicates not care about this field.

Indicates the packet CoS value to be matched. If there are two tags in the packets, this object will be the CoS value in inner tag. The value of this object is ignored whenever there is only one tag in the packets. A value of '0xFF' indicates not care about this field.

Indicates the packet VLAN number to be matched. If there are two tags in the packets, this object will be the VLAN number in inner tag. The value of this object is ignored whenever there is only one tag in the packets. A value of '0xFFFF' indicates not care about this field.

The source MAC address to be matched against for this rule. A 0 value of this variable and a 0xFFFFFFFFFFFF value of variable zxAnAclIpv6HybridSrcMacMask indicates not care about this field.

This is the wildcard mask for the zxAnAclIpv6HybridSrcMac bits that must match. 0 bits in the mask indicate the corresponding bits in the zxAnAclIpv6HybridSrcMac must match in order for the matching to be successful, and 1 bits are not care bits in the matching. A value of zero causes only packets of source address the same as zxAnAclIpv6HybridSrcMac to match.

The destination MAC address to be matched against for this rule. A 0 value of this variable and a 0xFFFFFFFFFFFF value of variable zxAnAclIpv6HybridDestMacMask indicates not care about this field.

This is the wildcard mask for the zxAnAclIpv6HybridDestMac bits that must match. 0 bits in the mask indicate the corresponding bits in the zxAnAclIpv6HybridDestMac must match in order for the matching to be successful, and 1 bits are not care bits in the matching. A value of zero causes only packets of source address the same as zxAnAclIpv6HybridDestMac to match.

Traffic class field of IPv6. 65535 means unconfigured.

Flow label field of IPv6. 16777215(0xFFFFFF) means unconfigured.

Specifies the ICMPv6 type value to be matched against. A value of '0xFF' indicates not care about this field. If the zxAnAclIpv6HybridIpProto object in the same row does not indicate ICMPv6(58), or zxAnAclIpv6HybridIcmpTypeOper indicates none(1) or range(5), this object has to be '0xFF' and cannot be changed.

Specifies the ICMPv6 code value to be matched against. A value of '0xFF' indicates not care about this field. If the zxAnAclIpv6HybridIpProto object in the same row does not indicate ICMPv6(58), this object has to be '0xFF' and cannot be changed.

Name of the ACL rule parameter group for source IP. Empty string means the rule param group is unused.

Name of the ACL rule parameter group for destination IP. Empty string means the rule param group is unused.

Specifies how an ICMP type is to be compared. If the zxAnAclIpv6HybridIpProto object in the same row does not indicate ICMPv6(58), this object has to be 'none(1)' and cannot be changed. 'none(1)', which is the default value, means that no comparison is to be made with the ICMP type. equal(2) means ICMP type should be equal to zxAnAclIpv6HybridIcmpType. greater(3) means ICMP type should be greater than or equal to zxAnAclIpv6HybridIcmpType. less(4) means ICMP type should be less than or equal to zxAnAclIpv6HybridIcmpType. Those 3 operators are using the zxAnAclIpv6HybridIcmpType object as an operand which is the only one needed. range(5) means that it compares the ICMP type between two numbers, so this operator needs 2 operands. One operand is the starting type value of the range which is zxAnAclIpv6HybridStartIcmpType object, and the other operand is the ending type value of the range which is the zxAnAclIpv6HybridEndIcmpType object.

Specifies the ICMP type starting value to be matched against. A value of '0xFF' indicates not care about this field. If the zxAnAclIpv6HybridIpProto object in the same row does not indicate ICMPv6(58) or zxAnAclIpv6HybridIcmpTypeOper does not indicate range(5), this object has to be '0xFF' and cannot be changed.

Specifies the ICMP type ending value to be matched against. A value of '0xFF' indicates not care about this field. If the zxAnAclIpv6HybridIpProto object in the same row does not indicate ICMPv6(58) or zxAnAclIpv6HybridIcmpTypeOper does not indicate range(5), this object has to be '0xFF' and cannot be changed.

Name of the time range. Empty string means all the time the rule is valid.

The status of this conceptual row. The supported actions of this conceptual row only include: 'createAndGo' and 'destroy'. To create a row in this table, a manager must set this object to createAndGo(4), and must comply with the multi-variables binding rule described in zxAnAclIpv6HybridRuleEntry. To delete a row in this table, a manager must set this object to destroy(6). To get this object, the agent always returns active(1).

ACL time range table.

ACL time range entry.

Name of the time range.

For example: onlyOnce: from 10:01:01 05-01-2007 to 12:01:01 05-01-2007 weekly: 14:00:00 to 22:00:00 friday. Enumeration: 'onlyOnce': 1, 'weekly': 2.

Once range start time.

Once range end time.

Week day of the weekly time range. Bits: 'monday': 1, 'tuesday': 2, 'friday': 5, 'wednesday': 3, 'thursday': 4, 'sunday': 0, 'saturday': 6.

Week range start time. For example: HH:MM:SS.(02:22:33).

Week range end time. For example: HH:MM:SS.(02:22:33).

The status of this conceptual row. The supported actions of this conceptual row only include: 'createAndGo' and 'destroy'. To create a row in this table, a manager must set this object to createAndGo(4). To delete a row in this table, a manager must set this object to destroy(6). To get this object, the agent always returns active(1).

This table is to provide service that a specific Acl apply to a specific inteface with direction. Then the traffic that through this interface is managed according to the acl.

An entry in zxAnAclIfConfTable. The multi-variables binding rule should be complied with when a manager creates an entry. According to this rule, all the related mib variables must be included in one SNMP set operation. There are two types of variables: mandatory and optional. All of the mandatory variables must be included in one SNMP set operation. Optional variables may be included in one SNMP set operation with the mandatory variables, but must not be used alone. To create an entry of this table, all the variable are mandatory. Agent just support zxAnAclIfConfDirection with value ingress(1). After an entry is created, no variable can be modified. If a manager tries to modify any variables in this entry, agent will return error with SNMP error code inconsistentValue. Inner port only supports direction ingress.

Indicates whether this row's parameters are to be applied for ingress or for egress traffic. Enumeration: 'ingress': 1, 'egress': 2.

The number of an ACL. Reference to the description of zxAnAclNumber.

The status of this conceptual row. The supported actions of this conceptual row only include: 'createAndGo' and 'destroy'. To create a row in this table, a manager must set this object to createAndGo(4), and must comply with the multi-variables binding rule described in zxAnAclIfConfEntry. To delete a row in this table, a manager must set this object to destroy(6). To get this object, the agent always returns active(1).

ACL rule parameter group table.

ACL rule parameter group entry.

ACL rule parameter group name.

ACL rule parameter group type. ip(1): IP. Enumeration: 'ip': 1.

The status of this conceptual row. The supported actions of this conceptual row only include: 'createAndGo' and 'destroy'. To create a row in this table, a manager must set this object to createAndGo(4). To delete a row in this table, a manager must set this object to destroy(6). To get this object, the agent always returns active(1).

ACL IP address group table.

ACL IP address group entry.

Index of the IP.

IP type.

IP address.

IP address prefix length. Only valid when zxAnAclRuleIpGroupIpType is ipv6.

IP mask. Only valid when zxAnAclRuleIpGroupIpType is ipv4.

The status of this conceptual row. The supported actions of this conceptual row only include: 'createAndGo' and 'destroy'. To create a row in this table, a manager must set this object to createAndGo(4). To delete a row in this table, a manager must set this object to destroy(6). To get this object, the agent always returns active(1).

The compliance statement for the ZTE-AN-ACL-MIB.

A collection of objects providing the access control list configuration information.

A collection of objects providing the standard ACL rule configuration information.

A collection of objects providing the hybrid ACL rule configuration information.

A collection of objects providing the configuration information of ACL apply to the interface.