530 lines
21 KiB
Plaintext
530 lines
21 KiB
Plaintext
------------------------------------------------------------------------------
|
||
--
|
||
-- File : mpAcl.mib
|
||
-- Description :
|
||
-- Version :
|
||
-- Date : March 20, 2006
|
||
-- Copyright : 2006 by maipu (sichuan) communication technology co.,ltd.
|
||
-- All rights reserved.
|
||
--
|
||
-- $Id:
|
||
--
|
||
------------------------------------------------------------------------------
|
||
|
||
------------------------------------------------------------------------------
|
||
MPACL-MIB DEFINITIONS ::= BEGIN
|
||
|
||
|
||
IMPORTS
|
||
MODULE-IDENTITY, OBJECT-TYPE, NOTIFICATION-TYPE, Counter32, Gauge32,
|
||
Integer32, Unsigned32, TimeTicks,IpAddress,Counter64
|
||
FROM SNMPv2-SMI
|
||
TEXTUAL-CONVENTION, TruthValue, MacAddress,
|
||
RowStatus, DisplayString, DateAndTime
|
||
FROM SNMPv2-TC
|
||
MODULE-COMPLIANCE, OBJECT-GROUP
|
||
FROM SNMPv2-CONF
|
||
mpMgmt
|
||
FROM MAIPU-SMI
|
||
ObjectName, ObjectSyntax, NetworkAddress
|
||
FROM RFC1155-SMI;
|
||
|
||
|
||
|
||
mpAclMib MODULE-IDENTITY
|
||
LAST-UPDATED "0603201716Z"
|
||
ORGANIZATION "四川迈普数据通信股份有限公司,
|
||
Maipu (Sichuan) Communication Technology Co. LTD."
|
||
CONTACT-INFO
|
||
"编 写 人：huyq
|
||
联系地址：四川省 成都市 高新区 九兴大道16号
|
||
邮 编：610041
|
||
电 话：
|
||
传 真：
|
||
电子邮件："
|
||
DESCRIPTION
|
||
""
|
||
::= { mpMgmt 30 }
|
||
|
||
|
||
|
||
|
||
------------------------------------------------------------------------------
|
||
mpAclConf OBJECT IDENTIFIER ::= { mpAclMib 5 }
|
||
|
||
mpAclStdTable OBJECT-TYPE
|
||
SYNTAX SEQUENCE OF MpAclStdEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"标准ACL的配置表."
|
||
::= { mpAclConf 10 }
|
||
|
||
mpAclStdEntry OBJECT-TYPE
|
||
SYNTAX MpAclStdEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"标准ACL的配置表."
|
||
INDEX { aclStdName, aclStdSequence }
|
||
::= { mpAclStdTable 1 }
|
||
|
||
MpAclStdEntry ::= SEQUENCE {
|
||
aclStdName DisplayString,
|
||
aclStdSequence INTEGER,
|
||
aclStdType INTEGER,
|
||
aclStdSrcAddr IpAddress,
|
||
aclStdSrcWildcard IpAddress,
|
||
aclStdLogEnable INTEGER,
|
||
-- aclStdAuditEnable INTEGER,
|
||
aclStdTimeRngName DisplayString,
|
||
aclStdRemark DisplayString,
|
||
aclStdMatchPkts Counter64,
|
||
-- aclStdMatchBytes Counter64,
|
||
aclStdRowStatus RowStatus
|
||
}
|
||
|
||
|
||
aclStdName OBJECT-TYPE
|
||
SYNTAX DisplayString(SIZE(1..31))
|
||
MAX-ACCESS read-create
|
||
STATUS current
|
||
DESCRIPTION
|
||
"访问列表名称或编号."
|
||
::= { mpAclStdEntry 1 }
|
||
|
||
aclStdSequence OBJECT-TYPE
|
||
SYNTAX INTEGER(1..2147483647)
|
||
MAX-ACCESS read-create
|
||
STATUS current
|
||
DESCRIPTION
|
||
"规则的序号."
|
||
::= { mpAclStdEntry 2 }
|
||
|
||
aclStdType OBJECT-TYPE
|
||
SYNTAX INTEGER {
|
||
permit(1),
|
||
deny(2),
|
||
remark(3)
|
||
}
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"规则的类型，该字段必须指定."
|
||
::= { mpAclStdEntry 3 }
|
||
|
||
aclStdSrcAddr OBJECT-TYPE
|
||
SYNTAX IpAddress
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"源IP地址，该字段必须指定."
|
||
::= { mpAclStdEntry 4 }
|
||
|
||
aclStdSrcWildcard OBJECT-TYPE
|
||
SYNTAX IpAddress
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"源IP地址通配符。当是host的时候，该值为0;是any的时候，该值为0xffffffff。该字段必须指定."
|
||
::= { mpAclStdEntry 5 }
|
||
|
||
aclStdLogEnable OBJECT-TYPE
|
||
SYNTAX INTEGER {
|
||
disable(1),
|
||
enable(2)
|
||
}
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"是否进行日志记录,缺省为disable."
|
||
::= { mpAclStdEntry 6 }
|
||
|
||
-- 更新7500、3700、2700、MP5、PM3特殊出厂版本：注释掉不用的配置项 by zhaoym 2007.12.12
|
||
--aclStdAuditEnable OBJECT-TYPE
|
||
-- SYNTAX INTEGER {
|
||
-- disable(1),
|
||
-- enable(2)
|
||
-- }
|
||
-- MAX-ACCESS read-write
|
||
-- STATUS current
|
||
-- DESCRIPTION
|
||
-- "是否进行审计,缺省为disable."
|
||
-- ::= { mpAclStdEntry 7 }
|
||
|
||
aclStdTimeRngName OBJECT-TYPE
|
||
SYNTAX DisplayString(SIZE(0..31))
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"时间域名称，缺省为空."
|
||
::= { mpAclStdEntry 8 }
|
||
|
||
aclStdRemark OBJECT-TYPE
|
||
SYNTAX DisplayString(SIZE(0..99))
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"规则的注释，仅当aclStdType为remark(3)时该字段有意义."
|
||
::= { mpAclStdEntry 9 }
|
||
|
||
aclStdMatchPkts OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"与该规则相匹配的报文数统计值."
|
||
::= { mpAclStdEntry 10 }
|
||
-- 更新7500、3700、2700、MP5、PM3特殊出厂版本：注释掉不用的配置项 by zhaoym 2007.12.12
|
||
--aclStdMatchBytes OBJECT-TYPE
|
||
-- SYNTAX Counter64
|
||
-- MAX-ACCESS read-only
|
||
-- STATUS current
|
||
-- DESCRIPTION
|
||
-- "与该规则相匹配的字节数统计值."
|
||
-- ::= { mpAclStdEntry 11 }
|
||
|
||
aclStdRowStatus OBJECT-TYPE
|
||
SYNTAX RowStatus
|
||
MAX-ACCESS read-create
|
||
STATUS current
|
||
DESCRIPTION
|
||
"标准ACL的配置表的行状态."
|
||
::= { mpAclStdEntry 12 }
|
||
|
||
mpAclExtTable OBJECT-TYPE
|
||
SYNTAX SEQUENCE OF MpAclExtEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"扩展ACL的配置表."
|
||
::= { mpAclConf 20 }
|
||
|
||
mpAclExtEntry OBJECT-TYPE
|
||
SYNTAX MpAclExtEntry
|
||
MAX-ACCESS not-accessible
|
||
STATUS current
|
||
DESCRIPTION
|
||
"扩展ACL的配置表."
|
||
INDEX { aclExtName, aclExtSequence }
|
||
::= { mpAclExtTable 1 }
|
||
|
||
MpAclExtEntry ::= SEQUENCE {
|
||
aclExtName DisplayString,
|
||
aclExtSequence INTEGER,
|
||
aclExtType INTEGER,
|
||
aclExtProtocol INTEGER,
|
||
aclExtSrcAddr IpAddress,
|
||
aclExtSrcWildcard IpAddress,
|
||
aclExtDestAddr IpAddress,
|
||
aclExtDestWildcard IpAddress,
|
||
aclExtPrecedence INTEGER,
|
||
aclExtTos INTEGER,
|
||
aclExtIcmpMsgType INTEGER,
|
||
aclExtIcmpMsgCode INTEGER,
|
||
aclExtIgmpMsgType INTEGER,
|
||
aclExtTUSrcPortType INTEGER,
|
||
aclExtTUSrcPort INTEGER,
|
||
aclExtTUSrcEndPort INTEGER,
|
||
aclExtTUDestPortType INTEGER,
|
||
aclExtTUDestPort INTEGER,
|
||
aclExtTUDestEndPort INTEGER,
|
||
aclExtTcpFlag INTEGER,
|
||
aclExtLogEnable INTEGER,
|
||
-- aclExtAuditEnable INTEGER,
|
||
aclExtTimeRngName DisplayString,
|
||
aclExtReflectName DisplayString,
|
||
aclExtReflectTimeOut INTEGER,
|
||
aclExtEvaluateName DisplayString,
|
||
aclExtRemark DisplayString,
|
||
aclExtMatchPkts Counter64,
|
||
-- aclExtMatchBytes Counter64,
|
||
aclExtRowStatus RowStatus
|
||
}
|
||
|
||
|
||
aclExtName OBJECT-TYPE
|
||
SYNTAX DisplayString(SIZE(1..31))
|
||
MAX-ACCESS read-create
|
||
STATUS current
|
||
DESCRIPTION
|
||
"访问列表名称或编号."
|
||
::= { mpAclExtEntry 1 }
|
||
|
||
aclExtSequence OBJECT-TYPE
|
||
SYNTAX INTEGER(1..2147483647)
|
||
MAX-ACCESS read-create
|
||
STATUS current
|
||
DESCRIPTION
|
||
"规则的序号."
|
||
::= { mpAclExtEntry 2 }
|
||
|
||
aclExtType OBJECT-TYPE
|
||
SYNTAX INTEGER {
|
||
permit(1),
|
||
deny(2),
|
||
remark(3),
|
||
evaluate(4)
|
||
}
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"规则的类型，该字段必须指定."
|
||
::= { mpAclExtEntry 3 }
|
||
|
||
aclExtProtocol OBJECT-TYPE
|
||
SYNTAX INTEGER(0..255)
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"IP协议类型，该字段必须指定."
|
||
::= { mpAclExtEntry 4 }
|
||
|
||
aclExtSrcAddr OBJECT-TYPE
|
||
SYNTAX IpAddress
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"源IP地址，该字段必须指定."
|
||
::= { mpAclExtEntry 5 }
|
||
|
||
aclExtSrcWildcard OBJECT-TYPE
|
||
SYNTAX IpAddress
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"源IP地址通配符。当是host的时候，该值为0;是any的时候，该值为0xffffffff。该字段必须指定."
|
||
::= { mpAclExtEntry 6 }
|
||
|
||
aclExtDestAddr OBJECT-TYPE
|
||
SYNTAX IpAddress
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"目的IP地址，该字段必须指定."
|
||
::= { mpAclExtEntry 7 }
|
||
|
||
aclExtDestWildcard OBJECT-TYPE
|
||
SYNTAX IpAddress
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"目的IP地址通配符。当是host的时候，该值为0;是any的时候，该值为0xffffffff。该字段必须指定."
|
||
::= { mpAclExtEntry 8 }
|
||
|
||
aclExtPrecedence OBJECT-TYPE
|
||
SYNTAX INTEGER(-1..7)
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"IP优先级。routine - 0, priority - 1, immediate - 2, flash - 3, flash-voeride - 4, critical - 5, internet - 6, network - 7, -1表示不关心."
|
||
::= { mpAclExtEntry 9 }
|
||
|
||
aclExtTos OBJECT-TYPE
|
||
SYNTAX INTEGER(-1..15)
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"IP TOS。 normal - 0, min-monetary-cost - 1, max-reliability - 2, max-throughput - 4, min-delay - 8, -1表示不关心."
|
||
::= { mpAclExtEntry 10 }
|
||
|
||
aclExtIcmpMsgType OBJECT-TYPE
|
||
SYNTAX INTEGER(-1..255)
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"ICMP类型, -1表示不关心."
|
||
::= { mpAclExtEntry 11 }
|
||
|
||
aclExtIcmpMsgCode OBJECT-TYPE
|
||
SYNTAX INTEGER(-1..255)
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"ICMP代码, -1表示不关心."
|
||
::= { mpAclExtEntry 12 }
|
||
|
||
aclExtIgmpMsgType OBJECT-TYPE
|
||
SYNTAX INTEGER(-1..15)
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"IGMP类型, -1表示不关心."
|
||
::= { mpAclExtEntry 13 }
|
||
|
||
aclExtTUSrcPortType OBJECT-TYPE
|
||
SYNTAX INTEGER {
|
||
no-care(0),
|
||
eq(1),
|
||
gt(2),
|
||
lt(3),
|
||
neq(4),
|
||
range(5),
|
||
wildcard(6)
|
||
}
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"TCP或UDP源端口类型，0表示不关心源端口."
|
||
::= { mpAclExtEntry 14 }
|
||
|
||
aclExtTUSrcPort OBJECT-TYPE
|
||
SYNTAX INTEGER(0..65535)
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"源端口号。当类型是range时，这是起始端口号."
|
||
::= { mpAclExtEntry 15 }
|
||
|
||
aclExtTUSrcEndPort OBJECT-TYPE
|
||
SYNTAX INTEGER(0..65535)
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"当类型是range时，这是终止端口号；当类型是wildcard时，这是端口的wildcard值."
|
||
::= { mpAclExtEntry 16 }
|
||
|
||
aclExtTUDestPortType OBJECT-TYPE
|
||
SYNTAX INTEGER {
|
||
no-care(0),
|
||
eq(1),
|
||
gt(2),
|
||
lt(3),
|
||
neq(4),
|
||
range(5),
|
||
wildcard(6)
|
||
}
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"TCP或UDP目的端口类型， 0表示不关心目的端口."
|
||
::= { mpAclExtEntry 17 }
|
||
|
||
aclExtTUDestPort OBJECT-TYPE
|
||
SYNTAX INTEGER(0..65535)
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"目的端口号。当类型是range时，这是起始端口号."
|
||
::= { mpAclExtEntry 18 }
|
||
|
||
aclExtTUDestEndPort OBJECT-TYPE
|
||
SYNTAX INTEGER(0..65535)
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"当类型是range时，这是终止端口号；当类型是wildcard时，这是端口的wildcard值."
|
||
::= { mpAclExtEntry 19 }
|
||
|
||
aclExtTcpFlag OBJECT-TYPE
|
||
SYNTAX INTEGER(-1..63)
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"TCP标志。FIN - 0x01,SYN - 0x02,RST - 0x04,SH - 0x08,ACK - 0x10,URG - 0x20,ESTABLISHED - 0x14, -1表示不关心."
|
||
::= { mpAclExtEntry 20 }
|
||
|
||
aclExtLogEnable OBJECT-TYPE
|
||
SYNTAX INTEGER {
|
||
disable(1),
|
||
enable(2)
|
||
}
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"是否进行日志记录,缺省为disable."
|
||
::= { mpAclExtEntry 21 }
|
||
|
||
-- 更新7500、3700、2700、MP5、PM3特殊出厂版本：注释掉不用的配置项 by zhaoym 2007.12.12
|
||
--aclExtAuditEnable OBJECT-TYPE
|
||
-- SYNTAX INTEGER {
|
||
-- disable(1),
|
||
-- enable(2)
|
||
-- }
|
||
-- MAX-ACCESS read-write
|
||
-- STATUS current
|
||
-- DESCRIPTION
|
||
-- "是否进行审计,缺省为disable."
|
||
-- ::= { mpAclExtEntry 22 }
|
||
|
||
aclExtTimeRngName OBJECT-TYPE
|
||
SYNTAX DisplayString(SIZE(0..31))
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"时间域的名称，缺省为空."
|
||
::= { mpAclExtEntry 23 }
|
||
|
||
aclExtReflectName OBJECT-TYPE
|
||
SYNTAX DisplayString(SIZE(0..31))
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"自反访问列表的名称，缺省为空."
|
||
::= { mpAclExtEntry 24 }
|
||
|
||
aclExtReflectTimeOut OBJECT-TYPE
|
||
SYNTAX INTEGER(0..2147483647)
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"自反访问列表超时时间，单位为秒，缺省为0,表示使用全局的超时时间。仅当aclExtReflectName非空时该字段才有效.0表示不关心该字段."
|
||
::= { mpAclExtEntry 25 }
|
||
|
||
aclExtEvaluateName OBJECT-TYPE
|
||
SYNTAX DisplayString(SIZE(0..31))
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"evaluate访问列表的名称，缺省为空."
|
||
::= { mpAclExtEntry 26 }
|
||
|
||
aclExtRemark OBJECT-TYPE
|
||
SYNTAX DisplayString(SIZE(0..99))
|
||
MAX-ACCESS read-write
|
||
STATUS current
|
||
DESCRIPTION
|
||
"规则的注释，仅当aclExtType为remark(3)时该字段有意义."
|
||
::= { mpAclExtEntry 27 }
|
||
|
||
|
||
aclExtMatchPkts OBJECT-TYPE
|
||
SYNTAX Counter64
|
||
MAX-ACCESS read-only
|
||
STATUS current
|
||
DESCRIPTION
|
||
"与该规则相匹配的报文数统计值."
|
||
::= { mpAclExtEntry 28 }
|
||
|
||
-- 更新7500、3700、2700、MP5、PM3特殊出厂版本：注释掉不用的配置项 by zhaoym 2007.12.12
|
||
--aclExtMatchBytes OBJECT-TYPE
|
||
-- SYNTAX Counter64
|
||
-- MAX-ACCESS read-only
|
||
-- STATUS current
|
||
-- DESCRIPTION
|
||
-- "与该规则相匹配的字节数统计值."
|
||
-- ::= { mpAclExtEntry 29 }
|
||
|
||
aclExtRowStatus OBJECT-TYPE
|
||
SYNTAX RowStatus
|
||
MAX-ACCESS read-create
|
||
STATUS current
|
||
DESCRIPTION
|
||
"扩展ACL的配置表的行状态."
|
||
::= { mpAclExtEntry 30 }
|
||
|
||
|
||
|
||
END
|
||
------------------------------------------------------------------------------
|
||
-- ============================================================================
|
||
-- $Log: mpAcl.mib,v $
|
||
-- Revision 1.1 2010/06/21 11:18:46 liyh
|
||
-- first commit
|
||
--
|
||
--
|
||
--
|
||
-- ============================================================================
|
||
|
||
|