MIB Viewer
MIB Viewer Desktop New

ruleExtendedProtocol

OBJECT-TYPE
1.3.6.1.4.1.3902.15.2.11.17.3.1.4
Access
read-write
Status
current
Sub-identifiers
0
Extended acl config for other protocol. The format is P:RULE. P means protocol value, P is IC,known as icmp(1) protocol, the format of RULE is X-A.B.C.D/N-A.B.C.D/N-IC-C-D-F; P is I,known as ip protocol, the format of RULE is X-A.B.C.D/N-A.B.C.D/N-D-F; P is T,known as tcp(6) protocol, the format of RULE is X-A.B.C.D/N-S-A.B.C.D/N-DE-E-D-F; P is U,known as udp(17) protocol, the format of RULE is X-A.B.C.D/N-S-A.B.C.D/N-DE-D-F; P is A,known as arp protocol, the format of RULE is X-A.B.C.D/N-A.B.C.D/N; P is 0-255(except 1,6 and 17),known as protocol id 0-255(except 1,6 and 17), the format of RULE is X-A.B.C.D/N-A.B.C.D/N-D-F; If P is 1(ICMP),the format of RULE is X-A.B.C.D/N-A.B.C.D/N-IC-C-D-F; If P is 6(TCP),the format of RULE is X-A.B.C.D/N-S-A.B.C.D/N-DE-E-D-F; If P is 17(UDP),the format of RULE is X-A.B.C.D/N-S-A.B.C.D/N-DE-D-F; Here X is 1:deny;2:permit; the first A.B.C.D/N is source ip and mask.if 'x' means any; the second A.B.C.D/N is destination ip and mask.if 'x' means any; IC takes the value of 0-255; 0 means no icmp message type set; 1-255 means icmp message type (0-254) set ; C takes the value of 0-255; 0 means no icmp code type set; 1-255 means icmp code type (0-254) set ; E: 0 means tcp connectiong mode set; 1 means establishing set;2 means established set; S takes the format of P*Q,P: 0: no source port set,Q is also 0; 1-65536: source port 0-65535 ,same scope for Q. DE takes the format of P*Q,P: 0: no destination port set,Q is also 0; 1-65536: destination port 0-65535 ,same scope for Q. D takes the value of 0-64; 0 means no dscp value set; 1-64 means dscp value (0-63) set ; F : 0 means no fragment set;1 means fragment set.
OCTET STRING