-- ZyXEL Communications Corporation
-- Private Enterprise MIB definition 
  
-- This file describes the ZyXEL Communications Corporation Enterprise MIB.
-- It contains ZyXEL products OIDs, and common managed objects.

-- Initial revision 

ZYXEL-AclV2-MIB DEFINITIONS ::= BEGIN

    IMPORTS
    OBJECT-TYPE
        FROM SNMPv2-SMI         -- RFC2578  
        
    MODULE-IDENTITY
        FROM SNMPv2-SMI
    
    RowStatus, MacAddress
        FROM SNMPv2-TC          -- RFC2579
    
    DisplayString                                          
        FROM SNMPv2-TC
        
    EnabledStatus
        FROM  P-BRIDGE-MIB
    PortList
        FROM  Q-BRIDGE-MIB
    InetAddress
        FROM INET-ADDRESS-MIB       -- RFC2851
    
    IpAddress
        FROM SNMPv2-SMI

    esMgmt          
        FROM ZYXEL-ES-SMI;

    zyxelAclV2 MODULE-IDENTITY
        LAST-UPDATED    "201207010000Z"    
        ORGANIZATION "Enterprise Solution ZyXEL"     
        CONTACT-INFO
            ""     
        DESCRIPTION
            "The subtree for access control list (ACL) version 2"
        ::= { esMgmt 105 }

    zyxelAclV2ClassifierStatus  OBJECT IDENTIFIER ::= { zyxelAclV2 1 }
    zyxelAclV2PolicyStatus      OBJECT IDENTIFIER ::= { zyxelAclV2 2 }    
    zyxelAclV2TrapInfoObjects   OBJECT IDENTIFIER ::= { zyxelAclV2 3 }
    zyxelAclV2Notifications     OBJECT IDENTIFIER ::= { zyxelAclV2 4 }  
-- *******************************************************************
-- *
-- * zyxelAclV2ClassifierStatus
-- *
-- *******************************************************************

-- zyxelAclV2ClassifierTable
    zyxelAclV2ClassifierTable OBJECT-TYPE
    SYNTAX SEQUENCE OF ZyxelAclV2ClassifierEntry
    MAX-ACCESS  not-accessible
    STATUS  current
    DESCRIPTION
    "The table contains classifier general configuration and information."
    ::= { zyxelAclV2ClassifierStatus 1 }    


    zyxelAclV2ClassifierEntry OBJECT-TYPE
    SYNTAX  ZyxelAclV2ClassifierEntry
    MAX-ACCESS  not-accessible
    STATUS  current
    DESCRIPTION
    "An entry contains classifier general configuration and information."
    INDEX { zyAclV2ClassifierName }
    ::= { zyxelAclV2ClassifierTable 1 }
    
    ZyxelAclV2ClassifierEntry ::=
    SEQUENCE {
        zyAclV2ClassifierName                           DisplayString,
        zyAclV2ClassifierState                          EnabledStatus,
        zyAclV2ClassifierWeight                          INTEGER,
        zyAclV2ClassifierCountState                      EnabledStatus,
        zyAclV2ClassifierLogState                        EnabledStatus,  
        zyAclV2ClassifierTimeRange                       DisplayString,
        zyAclV2ClassifierMatchCount                     Counter64
    }   

    zyAclV2ClassifierName OBJECT-TYPE
    SYNTAX  DisplayString
    MAX-ACCESS  not-accessible
    STATUS  current
    DESCRIPTION
    "The name of classifier rule is used for identifying purposes."
    ::= { zyxelAclV2ClassifierEntry 1 }
    
    zyAclV2ClassifierState OBJECT-TYPE
    SYNTAX  EnabledStatus
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "Enable/Disable classifier rule on this switch."
    ::= { zyxelAclV2ClassifierEntry 2 }
    

    zyAclV2ClassifierWeight OBJECT-TYPE
    SYNTAX  INTEGER
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "Weght value for classifier rule, 0~65535. Default 32767.
     When the match order is manual, the higher weight the higher priorit
     When the match order is auto, the priority depends on the depth of qualifier."
    ::= { zyxelAclV2ClassifierEntry 3 }

    zyAclV2ClassifierCountState OBJECT-TYPE
    SYNTAX  EnabledStatus
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "Enable/disable count on this classifier rule.
     To Enable counting the matched packet number of this rule."
    ::= { zyxelAclV2ClassifierEntry 4 }

    zyAclV2ClassifierLogState OBJECT-TYPE
    SYNTAX  EnabledStatus
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "Enable/disable log on this classifier rule.
     To Enable recording the matched packet number of this rule in a configurable time interval."
    ::= { zyxelAclV2ClassifierEntry 5 }

    zyAclV2ClassifierTimeRange OBJECT-TYPE
    SYNTAX  DisplayString
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "Time Range Name for classifier rule.
     Bind a time range profile with this rule to active this rule in specific time."
    ::= { zyxelAclV2ClassifierEntry 6 }

    zyAclV2ClassifierMatchCount OBJECT-TYPE
    SYNTAX  Counter64
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "Match-Count of this classifier rule.
     It will show the matched packet count of this rule if zyAclV2ClassifierCount is enabled."
    ::= { zyxelAclV2ClassifierEntry 7 }


-- classifier ethernet
    zyxelAclV2ClassifierEthernetTable OBJECT-TYPE
    SYNTAX SEQUENCE OF ZyxelAclV2ClassifierEthernetEntry
    MAX-ACCESS  not-accessible
    STATUS  current
    DESCRIPTION
    "The table contains classifier ethernet configuration."
    ::= { zyxelAclV2ClassifierStatus 2 }    


    zyxelAclV2ClassifierEthernetEntry OBJECT-TYPE
    SYNTAX  ZyxelAclV2ClassifierEthernetEntry
    MAX-ACCESS  not-accessible
    STATUS  current
    DESCRIPTION
    "An entry contains classifier ethernet configuration."
    INDEX           { zyAclV2ClassifierName }
    ::= { zyxelAclV2ClassifierEthernetTable 1 }
    
    ZyxelAclV2ClassifierEthernetEntry ::=
    SEQUENCE {
        zyAclV2ClassifierEthernetSourcePorts                    PortList,
        zyAclV2ClassifierEthernetSourceTrunks                   PortList,
        zyAclV2ClassifierEthernetPacketFormat                   INTEGER,
        zyAclV2ClassifierEthernet8021pPriority                  INTEGER,
        zyAclV2ClassifierEthernetInner8021pPriority             INTEGER,
        zyAclV2ClassifierEthernetType                   INTEGER,
        zyAclV2ClassifierEthernetSourceMacAddress               MacAddress,
        zyAclV2ClassifierEthernetSourceMACMask                  MacAddress,
        zyAclV2ClassifierEthernetDestinationMacAddress          MacAddress,
        zyAclV2ClassifierEthernetDestinationMACMask             MacAddress
    }


    zyAclV2ClassifierEthernetSourcePorts OBJECT-TYPE
    SYNTAX  PortList
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "Source Port List for classifier rule."
    ::= { zyxelAclV2ClassifierEthernetEntry 1 }

    zyAclV2ClassifierEthernetSourceTrunks OBJECT-TYPE
    SYNTAX  PortList
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "Source Trunk List for classifier rule."
    ::= { zyxelAclV2ClassifierEthernetEntry 2 }

    zyAclV2ClassifierEthernetPacketFormat OBJECT-TYPE
    SYNTAX  INTEGER {
        all(1),
        ethernetIIUntagged(2),
        ethernetIITagged(3),
        ethernet802dot3Untagged(4),
        ethernet802dot3Tagged(5)
        }
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "Packet format for classifier rule. A value of 802.3 indicates that the packets are 
     formatted according to the IEEE 802.3 standards. A value of Ethernet II indicates 
     that the packets are formatted according to RFC 894, Ethernet II encapsulation."
    ::= { zyxelAclV2ClassifierEthernetEntry 3 }
    
    zyAclV2ClassifierEthernet8021pPriority OBJECT-TYPE
    SYNTAX  INTEGER
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "802.1p priority for classifier rule. 0~7. The range is 0~7 and value -1 means any priority level."
    ::= { zyxelAclV2ClassifierEthernetEntry 4 }
    
    zyAclV2ClassifierEthernetInner8021pPriority OBJECT-TYPE
    SYNTAX  INTEGER
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "Inner 802.1p priority for classifier rule, 0~7. Value -1 means any priority level."
    ::= { zyxelAclV2ClassifierEthernetEntry 5 }
    
    zyAclV2ClassifierEthernetType OBJECT-TYPE
    SYNTAX  INTEGER
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "Ethernet type for classifier rule. It is represented in decimal expression and value 65535 means any Ethernet type."
    ::= { zyxelAclV2ClassifierEthernetEntry 6 }
    
    zyAclV2ClassifierEthernetSourceMacAddress OBJECT-TYPE
    SYNTAX  MacAddress
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "Source MAC address for classifier rule. 00:00:00:00:00:00 means any source MAC address."
    ::= { zyxelAclV2ClassifierEthernetEntry 7 }

    zyAclV2ClassifierEthernetSourceMACMask OBJECT-TYPE
    SYNTAX  MacAddress
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "Source MAC Mask for classifier rule."
    ::= { zyxelAclV2ClassifierEthernetEntry 8 }

    zyAclV2ClassifierEthernetDestinationMacAddress OBJECT-TYPE
    SYNTAX  MacAddress
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "Destination MAC address for classifier rule. 00:00:00:00:00:00 means any destination MAC address."
    ::= { zyxelAclV2ClassifierEthernetEntry 9 }

    zyAclV2ClassifierEthernetDestinationMACMask OBJECT-TYPE
    SYNTAX  MacAddress
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "Destination MAC Mask for classifier rule."
    ::= { zyxelAclV2ClassifierEthernetEntry 10 }


-- classifier vlan                
    zyxelAclV2ClassifierVlanTable OBJECT-TYPE
    SYNTAX SEQUENCE OF  ZyxelAclV2ClassifierVlanEntry
    MAX-ACCESS  not-accessible
    STATUS  current
    DESCRIPTION
    "An entry contains classifier VLAN configuration."
    ::= { zyxelAclV2ClassifierStatus 3 }

    zyxelAclV2ClassifierVlanEntry OBJECT-TYPE
    SYNTAX  ZyxelAclV2ClassifierVlanEntry
    MAX-ACCESS  not-accessible
    STATUS  current
    DESCRIPTION
    "An entry contains classifier VLAN configuration."
    INDEX           { zyAclV2ClassifierName }
    ::= { zyxelAclV2ClassifierVlanTable 1 }

    ZyxelAclV2ClassifierVlanEntry ::=
    SEQUENCE {
        zyAclV2ClassifierVlanMap1k                          OCTET STRING,
        zyAclV2ClassifierVlanMap2k                          OCTET STRING,
        zyAclV2ClassifierVlanMap3k                          OCTET STRING,
        zyAclV2ClassifierVlanMap4k                          OCTET STRING
    }          


    zyAclV2ClassifierVlanMap1k OBJECT-TYPE
    SYNTAX  OCTET STRING (SIZE (0..128))
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "VLAN ID List for classifer rule. range : 1~4094."
    ::= { zyxelAclV2ClassifierVlanEntry 1 }

    zyAclV2ClassifierVlanMap2k OBJECT-TYPE
    SYNTAX  OCTET STRING (SIZE (0..128))
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "VLAN ID List for classifer rule. range : 1~4094."
    ::= { zyxelAclV2ClassifierVlanEntry 2 }

    zyAclV2ClassifierVlanMap3k OBJECT-TYPE
    SYNTAX  OCTET STRING (SIZE (0..128))
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "VLAN ID List for classifer rule. range : 1~4094."
    ::= { zyxelAclV2ClassifierVlanEntry 3 }

    zyAclV2ClassifierVlanMap4k OBJECT-TYPE
    SYNTAX  OCTET STRING (SIZE (0..128))
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "VLAN ID List for classifer rule. range : 1~4094."
    ::= { zyxelAclV2ClassifierVlanEntry 4 }  

-- classifier inner vlan    
    zyxelAclV2ClassifierInnerVlanTable OBJECT-TYPE
    SYNTAX SEQUENCE OF  ZyxelAclV2ClassifierInnerVlanEntry
    MAX-ACCESS  not-accessible
    STATUS  current
    DESCRIPTION
    "An entry contains classifier inner VLAN configuration."
    ::= { zyxelAclV2ClassifierStatus 4 }

    zyxelAclV2ClassifierInnerVlanEntry OBJECT-TYPE
    SYNTAX  ZyxelAclV2ClassifierInnerVlanEntry
    MAX-ACCESS  not-accessible
    STATUS  current
    DESCRIPTION
    "An entry contains classifier inner VLAN configuration."
    INDEX           { zyAclV2ClassifierName }
    ::= { zyxelAclV2ClassifierInnerVlanTable 1 }

    ZyxelAclV2ClassifierInnerVlanEntry ::=
    SEQUENCE {
        zyAclV2ClassifierInnerVlanMap1k                 OCTET STRING,
        zyAclV2ClassifierInnerVlanMap2k                 OCTET STRING,
        zyAclV2ClassifierInnerVlanMap3k                 OCTET STRING,
        zyAclV2ClassifierInnerVlanMap4k                 OCTET STRING
    }          


    zyAclV2ClassifierInnerVlanMap1k OBJECT-TYPE
    SYNTAX  OCTET STRING (SIZE (0..128))
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "inner VLAN ID List for classifer rule. range : 1~4094."
    ::= { zyxelAclV2ClassifierInnerVlanEntry 1 }

    zyAclV2ClassifierInnerVlanMap2k OBJECT-TYPE
    SYNTAX  OCTET STRING (SIZE (0..128))
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "inner VLAN ID List for classifer rule. range : 1~4094."
    ::= { zyxelAclV2ClassifierInnerVlanEntry 2 }

    zyAclV2ClassifierInnerVlanMap3k OBJECT-TYPE
    SYNTAX  OCTET STRING (SIZE (0..128))
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "inner VLAN ID List for classifer rule. range : 1~4094."
    ::= { zyxelAclV2ClassifierInnerVlanEntry 3 }

    zyAclV2ClassifierInnerVlanMap4k OBJECT-TYPE
    SYNTAX  OCTET STRING (SIZE (0..128))
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "inner VLAN ID List for classifer rule. range : 1~4094."
    ::= { zyxelAclV2ClassifierInnerVlanEntry 4 }

--Classifier IP
    zyxelAclV2ClassifierIpTable OBJECT-TYPE
    SYNTAX SEQUENCE OF ZyxelAclV2ClassifierIpEntry
    MAX-ACCESS  not-accessible
    STATUS  current
    DESCRIPTION
    "The table contains classifier IP configuration."
    ::= { zyxelAclV2ClassifierStatus 5 }    
    
    zyxelAclV2ClassifierIpEntry OBJECT-TYPE
    SYNTAX  ZyxelAclV2ClassifierIpEntry
    MAX-ACCESS  not-accessible
    STATUS  current
    DESCRIPTION
    "An entry contains classifier IP configuration."
    INDEX { zyAclV2ClassifierName }
    ::= { zyxelAclV2ClassifierIpTable 1 }

    ZyxelAclV2ClassifierIpEntry ::=
    SEQUENCE {
        zyAclV2ClassifierIpPacketLenRangeStart           INTEGER,
        zyAclV2ClassifierIpPacketLenRangeEnd             INTEGER,
        zyAclV2ClassifierIpDSCP                         INTEGER,
        zyAclV2ClassifierIpPrecedence                      INTEGER,
        zyAclV2ClassifierIpToS                             INTEGER,
        zyAclV2ClassifierIpProtocol                     INTEGER,
        zyAclV2ClassifierIpEstablishOnly                    EnabledStatus,
        zyAclV2ClassifierIpSourceIpAddress                  IpAddress,
        zyAclV2ClassifierIpSourceIpMaskBits             INTEGER,
        zyAclV2ClassifierIpDestinationIpAddress         IpAddress,
        zyAclV2ClassifierIpDestinationIpMaskBits            INTEGER,
        zyAclV2ClassifierIpSourceSocketRangeStart          INTEGER,
        zyAclV2ClassifierIpSourceSocketRangeEnd          INTEGER,
        zyAclV2ClassifierIpDestinationSocketRangeStart     INTEGER,         
        zyAclV2ClassifierIpDestinationSocketRangeEnd     INTEGER
    }   


    zyAclV2ClassifierIpPacketLenRangeStart OBJECT-TYPE
    SYNTAX  INTEGER
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "The Start value of IP packet length range, 0~65535. 
    And it must smaller then the zyAclV2ClassifierIpPacketLenRangeEnd. 
    Value -1 means any start value. "
    ::= { zyxelAclV2ClassifierIpEntry 1 }

    zyAclV2ClassifierIpPacketLenRangeEnd OBJECT-TYPE
    SYNTAX  INTEGER
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "The End value of IP packet length range, 0~65535. 
    And it must larger then the zyAclV2ClassifierIpPacketLenRangeStart. 
    Value -1 means any start value. "
    ::= { zyxelAclV2ClassifierIpEntry 2 }

    zyAclV2ClassifierIpDSCP OBJECT-TYPE
    SYNTAX  INTEGER
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "DSCP (DiffServ Code Point) for classifier rule. The range is 0~63 and value -1 means any DSCP."
    ::= { zyxelAclV2ClassifierIpEntry 3 }
    
    zyAclV2ClassifierIpPrecedence OBJECT-TYPE
    SYNTAX  INTEGER
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "Precedence for calssifier rule, 0~7. Value -1 means any Precedence."
    ::= { zyxelAclV2ClassifierIpEntry 4 }

    zyAclV2ClassifierIpToS OBJECT-TYPE
    SYNTAX  INTEGER
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "ToS for calssifier rule, 0~127. Value -1 means any ToS."
    ::= { zyxelAclV2ClassifierIpEntry 5 }

    zyAclV2ClassifierIpProtocol OBJECT-TYPE
    SYNTAX  INTEGER
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "IP Protocol for classifier rule. Value 255 means any IP protocol."
    ::= { zyxelAclV2ClassifierIpEntry 6 }
    
    zyAclV2ClassifierIpEstablishOnly OBJECT-TYPE
    SYNTAX  EnabledStatus
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "Establish Only for TCP protocol type in classifier rule. 
     This means that the switch will pick out the packets that are sent to establish TCP connections."
    ::= { zyxelAclV2ClassifierIpEntry 7 }
    
    zyAclV2ClassifierIpSourceIpAddress OBJECT-TYPE
    SYNTAX  IpAddress
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "Source IP address for classifier rule. 0.0.0.0 means any source IP address."
    ::= { zyxelAclV2ClassifierIpEntry 8 }
    
    zyAclV2ClassifierIpSourceIpMaskBits OBJECT-TYPE
    SYNTAX  INTEGER
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "Source IP mask bits for classifier rule."
    ::= { zyxelAclV2ClassifierIpEntry 9 }
    
    zyAclV2ClassifierIpDestinationIpAddress OBJECT-TYPE
    SYNTAX  IpAddress
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "Destination IP address for classifier rule. 0.0.0.0 means any destination IP address."
    ::= { zyxelAclV2ClassifierIpEntry 10 }
    
    zyAclV2ClassifierIpDestinationIpMaskBits OBJECT-TYPE
    SYNTAX  INTEGER
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "Destination IP mask bits for classifier rule."
    ::= { zyxelAclV2ClassifierIpEntry 11 }
    
    zyAclV2ClassifierIpSourceSocketRangeStart OBJECT-TYPE
    SYNTAX  INTEGER
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "Source Socket Number range start for classifier rule, 0~65535.
     If not qualifying a range of socket numbers,
     the zyAclV2ClassifierSourceSocketRangeEnd is no need to configure. "
    ::= { zyxelAclV2ClassifierIpEntry 12 }

    zyAclV2ClassifierIpSourceSocketRangeEnd OBJECT-TYPE
    SYNTAX  INTEGER
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "Destination Socket Number range end for classifier rule.
     This object is not necessary. "
    ::= { zyxelAclV2ClassifierIpEntry 13 }

    zyAclV2ClassifierIpDestinationSocketRangeStart OBJECT-TYPE
    SYNTAX  INTEGER
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "Source Socket Number range start for classifier rule, 0~65535.
     If not qualifying a range of socket numbers,
     the zyAclV2ClassifierDestinationSocketRangeEnd is no need to configure."
    ::= { zyxelAclV2ClassifierIpEntry 14 }

    zyAclV2ClassifierIpDestinationSocketRangeEnd OBJECT-TYPE
    SYNTAX  INTEGER
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "Destination Socket Number range end for classifier rule.
     This object is not necessary."
    ::= { zyxelAclV2ClassifierIpEntry 15 }


-- zyxelAclV2ClassifierIpv6Table
    zyxelAclV2ClassifierIpv6Table OBJECT-TYPE
    SYNTAX SEQUENCE OF ZyxelAclV2ClassifierIpv6Entry
    MAX-ACCESS  not-accessible
    STATUS  current
    DESCRIPTION
    "The table contains classifier IPv6 configuration."
    ::= { zyxelAclV2ClassifierStatus 6 }    


    zyxelAclV2ClassifierIpv6Entry OBJECT-TYPE
    SYNTAX  ZyxelAclV2ClassifierIpv6Entry
    MAX-ACCESS  not-accessible
    STATUS  current
    DESCRIPTION
        "An entry contains classifier IPv6 configuration."
    INDEX { zyAclV2ClassifierName }
    ::= { zyxelAclV2ClassifierIpv6Table 1 }
    
    ZyxelAclV2ClassifierIpv6Entry ::=
    SEQUENCE {
        zyAclV2ClassifierIPv6DSCP                       INTEGER,
        zyAclV2ClassifierIPv6NextHeader                 INTEGER,
        zyAclV2ClassifierIPv6EstablishOnly              EnabledStatus,
        zyAclV2ClassifierIPv6SourceIpAddress            InetAddress,
        zyAclV2ClassifierIPv6SourceIpPrefixLength       INTEGER,
        zyAclV2ClassifierIPv6DestinationIpAddress       InetAddress,
        zyAclV2ClassifierIPv6DestinationIpPrefixLength  INTEGER
    }   
    

    zyAclV2ClassifierIPv6DSCP OBJECT-TYPE
    SYNTAX  INTEGER
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "DSCP (DiffServ Code Point) for classifier rule. The range is 0~63 and value -1 means any DSCP."
    ::= { zyxelAclV2ClassifierIpv6Entry 1 }
    
    zyAclV2ClassifierIPv6NextHeader OBJECT-TYPE
    SYNTAX  INTEGER
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "IPv6 next header protocol type for classifier rule. Value 255 means any protocol type."
    ::= { zyxelAclV2ClassifierIpv6Entry 2 }
    
    zyAclV2ClassifierIPv6EstablishOnly OBJECT-TYPE
    SYNTAX  EnabledStatus
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "Establish Only for TCP protocol type in classifier rule. 
     This means that the switch will pick out the packets that are sent to establish TCP connections."
    ::= { zyxelAclV2ClassifierIpv6Entry 3 }
    
    zyAclV2ClassifierIPv6SourceIpAddress OBJECT-TYPE
    SYNTAX  InetAddress
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
     "IPv6 source address for classifier rule. :: means any IPv6 source ip address."
    ::= { zyxelAclV2ClassifierIpv6Entry 4 }
    
    zyAclV2ClassifierIPv6SourceIpPrefixLength OBJECT-TYPE
    SYNTAX  INTEGER
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "IPv6 source address prefix length for classifier rule."
    ::= { zyxelAclV2ClassifierIpv6Entry 5 }
    
    zyAclV2ClassifierIPv6DestinationIpAddress OBJECT-TYPE
    SYNTAX  InetAddress
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "IPv6 destination address for classifier rule. :: means any IPv6 destination ip address."
    ::= { zyxelAclV2ClassifierIpv6Entry 6 }
    
    zyAclV2ClassifierIPv6DestinationIpPrefixLength OBJECT-TYPE
    SYNTAX  INTEGER
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "IPv6 destination address prefix length for classifier rule."
    ::= { zyxelAclV2ClassifierIpv6Entry 7 }


            
    zyxelAclV2ClassifierMatchOrder OBJECT-TYPE
    SYNTAX  INTEGER{        
        auto(1),
        manual(2)       
    }
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "Manual or Auto to determine the rule ordering. When the match order is manual,
     the higher weight the higher priority. 
     When the match order is auto, the priority is depended on the depth of the qualifier."
    ::= { zyxelAclV2ClassifierStatus 7 }
  
    zyxelAclV2ClassifierLoggingState OBJECT-TYPE
    SYNTAX  EnabledStatus
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "Enable/disable Logging for classifier."
    ::= { zyxelAclV2ClassifierStatus 8 }
    
    zyxelAclV2ClassifierLoggingInterval OBJECT-TYPE
    SYNTAX  INTEGER
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
    "Logging Interval for classifier, 0~65535."
    ::= { zyxelAclV2ClassifierStatus 9 }       


-- *******************************************************************
-- *
-- * zyxelAclV2PolicyStatus
-- *
-- *******************************************************************

-- zyxelAclV2PolicyTable
        zyxelAclV2PolicyTable OBJECT-TYPE
        SYNTAX SEQUENCE OF ZyxelAclV2PolicyEntry
        MAX-ACCESS  not-accessible
        STATUS  current
        DESCRIPTION
        "The table contains policy configuration."
        ::= { zyxelAclV2PolicyStatus 1 }
        
        zyxelAclV2PolicyEntry OBJECT-TYPE
        SYNTAX  ZyxelAclV2PolicyEntry
        MAX-ACCESS  not-accessible
        STATUS  current
        DESCRIPTION
        "An entry contains policy configuration."
        INDEX           { zyAclV2PolicyName }
        ::= { zyxelAclV2PolicyTable 1 }

        ZyxelAclV2PolicyEntry ::=
        SEQUENCE {
            zyAclV2PolicyName               DisplayString,
            zyAclV2PolicyState              EnabledStatus,
            zyAclV2PolicyClassifier         DisplayString,
            zyAclV2PolicyVid                    INTEGER,
            zyAclV2PolicyEgressPort         INTEGER,
            zyAclV2Policy8021pPriority      INTEGER,
            zyAclV2PolicyDSCP               INTEGER,
            zyAclV2PolicyTOS                    INTEGER,
            zyAclV2PolicyBandwidth          INTEGER,
            zyAclV2PolicyOutOfProfileDSCP   INTEGER,
            zyAclV2PolicyForwardingAction   INTEGER,
            zyAclV2PolicyPriorityAction     INTEGER,
            zyAclV2PolicyDiffServAction     INTEGER,
            zyAclV2PolicyOutgoingAction     BITS,
            zyAclV2PolicyMeteringState      INTEGER,
            zyAclV2PolicyOutOfProfileAction BITS,
            zyAclV2PolicyRowstatus          RowStatus,
            zyAclV2PolicyQueueAction            INTEGER
        }
        
        zyAclV2PolicyName OBJECT-TYPE
        SYNTAX  DisplayString
        MAX-ACCESS  not-accessible
        STATUS  current
        DESCRIPTION
        "The name of policy rule is used for identifying purposes."
        ::= { zyxelAclV2PolicyEntry 1 }
        
        zyAclV2PolicyState OBJECT-TYPE
        SYNTAX  EnabledStatus
        MAX-ACCESS  read-only
        STATUS  current
        DESCRIPTION
        "Enable/Disable policy rule on this switch."
        ::= { zyxelAclV2PolicyEntry 2 }
        
        zyAclV2PolicyClassifier OBJECT-TYPE
        SYNTAX  DisplayString
        MAX-ACCESS  read-only
        STATUS  current
        DESCRIPTION
        "The classifier(s) applies in this policy rule."
        ::= { zyxelAclV2PolicyEntry 3 }
        
        zyAclV2PolicyVid OBJECT-TYPE
        SYNTAX  INTEGER
        MAX-ACCESS  read-only
        STATUS  current
        DESCRIPTION
        "VLAN ID for policy rule."
        ::= { zyxelAclV2PolicyEntry 4 }
        
        zyAclV2PolicyEgressPort OBJECT-TYPE
        SYNTAX  INTEGER
        MAX-ACCESS  read-only
        STATUS  current
        DESCRIPTION
        "The outgoing port number in this policy rule."
        ::= { zyxelAclV2PolicyEntry 5 }
        
        zyAclV2Policy8021pPriority OBJECT-TYPE
        SYNTAX  INTEGER
        MAX-ACCESS  read-only
        STATUS  current
        DESCRIPTION
        "Specify a 802.1p priority level for policy rule. The value of 802.1p is between 0 and 7."
        ::= { zyxelAclV2PolicyEntry 6 }
        
        zyAclV2PolicyDSCP OBJECT-TYPE
        SYNTAX  INTEGER
        MAX-ACCESS  read-only
        STATUS  current
        DESCRIPTION
        "Specify a DSCP (DiffServ Code Point) for policy rule. DSCP number is between 0 and 63."
        ::= { zyxelAclV2PolicyEntry 7 }
        
        zyAclV2PolicyTOS OBJECT-TYPE
        SYNTAX  INTEGER
        MAX-ACCESS  read-only
        STATUS  current
        DESCRIPTION
        "Specify the type of service (TOS) priority level for policy rule. The value of TOS is between 0 and 7."
        ::= { zyxelAclV2PolicyEntry 8 }
        
        zyAclV2PolicyBandwidth OBJECT-TYPE
        SYNTAX  INTEGER
        MAX-ACCESS  read-only
        STATUS  current
        DESCRIPTION
        "Specify the bandwidth for policy rule in kilobit per second (Kbps)."
        ::= { zyxelAclV2PolicyEntry 9 }
        
        zyAclV2PolicyOutOfProfileDSCP OBJECT-TYPE
        SYNTAX  INTEGER
        MAX-ACCESS  read-only
        STATUS  current
        DESCRIPTION
        "Specify a new DSCP number (between 0 and 63) for policy rule if you want to replace or remark the DSCP number for out-of-profile traffic."
        ::= { zyxelAclV2PolicyEntry 10 }
        
        zyAclV2PolicyForwardingAction OBJECT-TYPE
        SYNTAX  INTEGER {
            noChange(1),
            discardThePacket(2),
            doNotDropTheMatchingFramePreviouslyMarkedForDropping(3)
        }
        MAX-ACCESS  read-only
        STATUS  current
        DESCRIPTION
        "There are three forwarding actions for policy rule. 'No change' is forward the packets. 'Discard the packet' is drop the packets.  
        'Do not drop the matching frame previously marked for dropping' is retain the frames that were marked to be dropped before."
        ::= { zyxelAclV2PolicyEntry 11 }
        
        zyAclV2PolicyPriorityAction OBJECT-TYPE
        SYNTAX  INTEGER {
            noChange(1),
            setThePackets802dot1Priority(2),
            sendThePacketToPriorityQueue(3),
            replaceThe802dot1PriorityFieldWithTheIpTosValue(4),
            replaceThe802dot1PriorityByInner802dot1Priority(5)
        }
        MAX-ACCESS  read-only
        STATUS  current
        DESCRIPTION
        "There are four priority actions for policy rule. 'No change' is keep the priority setting of the frames.
         'Set the packet's 802.1 priority' is replace the packet's 802.1 priority field with the value you set in the Priority field. 
         'Send the packet to priority queue' is put the packets in the designated queue. 
         'Replace the 802.1 priority field with the IP TOS value' to replace the packet's 802.1 priority field with the value you set in the TOS field.
         'Replace the 802.1p priority by inner 802.1p priority' to replace 802.1p priority by inner 802.1p priority if there is an inner vlan tag."
        ::= { zyxelAclV2PolicyEntry 12 }
        
        zyAclV2PolicyDiffServAction OBJECT-TYPE
        SYNTAX  INTEGER {
            noChange(1),
            setThePacketsTosField(2),
            replaceTheIpTosFieldWithThe802dot1PriorityValue(3),
            setTheDiffservCodepointFieldInTheFrame(4) 
        }
        MAX-ACCESS  read-only
        STATUS  current
        DESCRIPTION
        "There are four DiffServ actions for policy rule. 
         'No change' is keeping the TOS and/or DSCP fields in the packets. 
         'Set the packet's TOS field' is set the TOS field with the value you configure in the TOS field. 
         'Replace the IP TOS with the 802.1 priority value' is replace the TOS field with the value you configure in the Priority field. 
         'Set the Diffserv Codepoint field in the frame' to set the DSCP field with the value you configure in the DSCP field."
        ::= { zyxelAclV2PolicyEntry 13 }
        
        zyAclV2PolicyOutgoingAction OBJECT-TYPE
        SYNTAX  BITS {
            sendThePacketToTheMirrorPort(0),
            sendThePacketToTheEgressPort(1),
            sendTheMatchingFramesToTheEgressPort(2),
            setThePacketVlanId(3)
        }
        MAX-ACCESS  read-only
        STATUS  current
        DESCRIPTION
        "There are four outgoing actions for policy rule. 
        'Send the packet to the mirror port' is sent the packet to the mirror port. 
        'Send the packet to the egress port' is sent the packet to the egress port. 
        'Send the matching frames to the egress port' is sent the matching policy rule frames to the egress port. 
        'Set the packets VLAN ID' is set packet with tag."
        ::= { zyxelAclV2PolicyEntry 14 }
        
        zyAclV2PolicyMeteringState OBJECT-TYPE
        SYNTAX  INTEGER
        MAX-ACCESS  read-only
        STATUS  current
        DESCRIPTION
        "Enable/Disable bandwidth limitation on the traffic flow(s) then set the actions to be taken on out-of-profile packets."
        ::= { zyxelAclV2PolicyEntry 15 }
        
        zyAclV2PolicyOutOfProfileAction OBJECT-TYPE
        SYNTAX  BITS {
            dropThePacket(0),
            changeTheDscpValue(1),
            setOutDropPrecedence(2),
            doNotDropTheMatchingFramePreviouslyMarkedForDropping(3)
        }
        MAX-ACCESS  read-only
        STATUS  current
        DESCRIPTION
        "There are four out of profile actions for policy rule. 
         'Drop the packet' is discard the out-of-profile traffic. 
         'Change the DSCP value' is replace the DSCP field with the value specified in the Out of profile DSCP field. 
         'Set Out-Drop Precedence' is mark out-of-profile traffic and drop it when network is congested. 
         'Do not drop the matching frame previously marked for dropping' to queue the frames that are marked to be dropped."
        ::= { zyxelAclV2PolicyEntry 16 }
            
        zyAclV2PolicyRowstatus OBJECT-TYPE
        SYNTAX  RowStatus
        MAX-ACCESS  read-only
        STATUS  current
        DESCRIPTION
        "This object shows the entry of policy rule status."
        ::= { zyxelAclV2PolicyEntry 17 }
      
        zyAclV2PolicyQueueAction OBJECT-TYPE
        SYNTAX  INTEGER {
            noChange(1),
            sendThePacketToPriorityQueue(2)
        }
        MAX-ACCESS  read-only
        STATUS  current
        DESCRIPTION
        "There are two queue actions for policy rule. 'No change' is keep the priority setting of the frames.
         'Send the packet to priority queue' is put the packets in the designated queue. "
        ::= { zyxelAclV2PolicyEntry 18 }

-- *******************************************************************
-- *
-- * zyxelAclV2TrapInfoObjects
-- *
-- *******************************************************************
       
        zyAclV2TrapClassifierLogMatchCount OBJECT-TYPE
        SYNTAX  INTEGER
        MAX-ACCESS  not-accessible
        STATUS  current  
        DESCRIPTION
        "display log match count of specific classifier rule."
        ::= { zyxelAclV2TrapInfoObjects 1 }  
        
-- *******************************************************************
-- *
-- * zyxelAclV2Notifications
-- *
-- *******************************************************************
    
        zyAclV2ClassifierLogNotification NOTIFICATION-TYPE
        OBJECTS {
                zyAclV2ClassifierName,
                zyAclV2TrapClassifierLogMatchCount
         }       
        STATUS  current
        DESCRIPTION
        "classifier log information."
        ::= { zyxelAclV2Notifications 1 }  

END