RowStatus, supports three states: createAndGo, active, destroy. Creation Operation Restriction: The client corresponding to the index hh3cAcfpClientID must exist while creating a row. Nodes hh3cAcfpPolicyTimeStart and hh3cAcfpPolicyTimeEnd are bound together, and hh3cAcfpPolicyTimeEnd must be greater than hh3cAcfpPolicyTimeStart. The number of rows created on an incoming/outgoing interface cannot exceed the upper limit. The number of rows created cannot exceed the upper limit for each client. A packet matches a policy in the following order: - It first matches the policy with the highest priority. - For two policies with the same priority, it matches the one with the smallest client index. - For two policies with the same client index, it matches the one with the smallest policy index. Modification Operation Restriction: Nodes that do not support modification: hh3cAcfpPolicyInIfIndex, hh3cAcfpPolicyOutIfIndex, hh3cAcfpPolicyDestIfIndex, hh3cAcfpPolicyDestIfFailAction, hh3cAcfpPolicyPriority. Nodes that support modification: hh3cAcfpPolicyAdminStatus, hh3cAcfpPolicyLifetime, hh3cAcfpPolicyTimeStart and hh3cAcfpPolicyTimeEnd. While modifying a row, if the row corresponding to the index configured does not exist, error returns directly. While modifying a node, the restriction over hh3cAcfpPolicyTimeStart and hh3cAcfpPolicyTimeEnd is the same as creating a node. Deletion Operation Restriction: If the row to be deleted does not exist, success returns directly.