ES3528MO-MIB: View SNMP OID List / Download MIB

The total number of switches present on this system.

Table of descriptive and status information about the switch units in this system.

Table providing descriptions and status information for switch units.

This object identifies the switch within the system for which this entry contains information. This value can never be greater than switchNumber.

Hardware version of the main board.

Microcode version of the main board.

Loader version of the main board.

Boot ROM code version of the main board.

Operation code version of the main board.

The number of ports on this switch.

Indicates the switch using internalPower(1), redundantPower(2) or both(3)

Indicates the switch is master(1), backupMaster(2) or slave(3) in this system.

Serial number of the switch.

Service tag serial-number of the switch.

Model number of the switch.

The EPLD version of the switch.

Global operation state of the switch.

The product name of this switch.

The product manufacturer of this switch.

The product description of this switch.

The runtime code version of this switch.

The URL of this switch, which we can connect through a web browser.

A unique identifier of which switch in the chassis is currently being looked at.

The service tag of the chassis this switch resides in.

Table about the status of individual powers.

Table about the status of individual power.

This is defined as swUnitIndex.

1 means internal power, 2 means external power.

notPresent(1) means not present, green(2) means up, red(3) means down.

enable(1) means the Jumbo Frame has enabled, disabled(2) means the Jumbo Frame has disabled.

If this is enabled(1), the MAC address table will age out according to its timer. If this is disabled(2), the MAC address table will not age out.

The number of dot1dTpFdbTable entries in the BRIDGE-MIB.

The number of dot1dStaticTable entries in the BRIDGE-MIB.

The sum of dot1dTpFdbTable and dot1dStaticTable entries.

Table of descriptive and status information describing the configuration of each switch port. This table also contains information about each trunk.

An entry in the table, describing the configuration of one switch port or trunk.

The port and the trunk (including trunk members) interface of the portTable. The interface identified by a particular value of this index is the same interface as identified by the same value of ifIndex in the IF-MIB.

The name of the port or trunk. This is the same as ifAlias in the IF-MIB (RFC2863 or later).

Indicates the port type of the configuration of the switch.

Configures the speed and duplex mode for a port or trunk, according to: halfDuplex10(2) - 10Mbps and half duplex mode fullDuplex10(3) - 10Mbps and full duplex mode halfDuplex100(4) - 100Mbps and half duplex mode fullDuplex100(5) - 100Mbps and full duplex mode halfDuplex1000(6) - 1000Mbps and half duplex mode fullDuplex1000(7) - 1000Mbps and full duplex mode halfDuplex10g(8) - 10g and half duplex mode fullDuplex10g(9) - 10g and full duplex mode hundredBaseTX port can be set as: halfDuplex10(2) fullDuplex10(3) halfDuplex100(4) fullDuplex100(5) hundredBaseFX port can be set as: fullDuplex100(5) thousandBaseSX port can be set as: fullDuplex1000(7) thousandBaseLX port can be set as: fullDuplex1000(7) thousandBaseT port can be set as: halfDuplex10(2) fullDuplex10(3) halfDuplex100(4) fullDuplex100(5) thousandBaseGBIC port can be set as: fullDuplex1000(7) thousandBaseSfp port can be set as: fullDuplex1000(7) hundredBaseFxScSingleMode port can be set as: fullDuplex100(5) hundredBaseFxScMultiMode port can be set as: fullDuplex100(5) thousandBaseCX port can be set as: fullDuplex1000(7) tenG port can be set as: halfDuplex10g(8) fullDuplex10g(9) The actual operating speed and duplex of the port is given by portSpeedDpxStatus.

(1) Flow control mechanism is enabled with tx and rx pause mechansim. If the port type is hundredBaseTX or thousandBaseSX: When the port is operating in halfDuplex mode, the port uses backPressure flow control mechanism. When the port is operating in fullDuplex mode, the port uses IEEE 802.3x flow control mechanism. If the port type is hundredBaseFX: When the port is operating in halfDuplex mode, the port uses backPressure flow control mechanism. When the port is operating in fullDuplex mode, Flow control mechanism will not function. (2) Flow control mechanism is disabled. (5) Flow control mechanism is enabled with tx pause mechanism only. (6) Flow control mechansim is enabled with rx pause mechansim only. Fast ethernet ports can be set as: enabled(1), disabled(2). Gigabit ethernet ports can be set as: enabled(1), disabled(2), tx(5), rx(6). The actual flow control mechanism is used given by portFlowCtrlStatus.

Port or trunk capabilities.

Whether auto-negotiation is enabled.

The operating speed and duplex mode of the switched port or trunk. If the entry represents a trunk, the speed is that of its individual members unless the member ports have been inconsistently configured in which case the value is error(1).

(2) BackPressure flow control mechanism is used. (3) IEEE 802.3 flow control mechanism is used. (4) Flow control mechanism is disabled. If the entry represents a trunk and the member ports have been inconsistently configured then this value is error(1).

The trunk to which this port belongs. A value of 0 means that this port does not belong to any trunk. A value greater than zero means that this port belongs to a trunk in the trunkIndex, defined by the corresponding trunkPorts.

This determines the running mode of a combo port. For a non-combo port, this variable has a value of none(1), and setting this variable to none(1) has no effect. For a combo port, this has its own valid values not equal to none(1), and setting this variable to none(1) is not allowed. copperForced(2) is set if user want to force this combo port running in copper mode. copperPreferredAuto(3) is obsoleted, and user shall not set this state. sfpForced(4) is set if user want to force this combo port running in fiber mode. sfpPreferredAuto(5) is set if user want to change copper or fiber mode automatically by SFP transceiver present state. If SFP transceiver is present, this combo port will run in fiber mode, and if SFP transceiver is not present, this combo port will run in copper mode.

Configures the PHY mode when auto negotiation is disabled and speed-duplex is 1000full for giga copper port.

To execute cable diagnostics on a port, assign cableDiagCtlAction to the value of ifIndex defined by the ifIndex in the IF-MIB. When read, this object always returns 0.

Table for cable diagnostics result.

Entry for cable diagnostics result.

This is defined as the ifIndex.

The result of cable diagnostics. If there is no fault on the cable, the value is ok(2). Value notTestedYet(1) means the pair is not tested yet. Value ok(2) means the pair works well. Value open(3) means there is a lack of continuity between pins at each end of the pair. Value short(4) means conductors are short-circuited together on the pair. Value openShort(5) means the pair has open and short issues. Value crosstalk(6) means the pair is incorrectly connected at one end. Value unknown(7) means pair has an error matching none of the above. Value impedanceMismatch(8) means different quality cables connected together. Value fail(9) means test failed. Value notSupport(10) means cable diagnostics is not supported.

The result of cable diagnostics. If there is no fault on the cable, the value is ok(2). Value notTestedYet(1) means the pair is not tested yet. Value ok(2) means the pair works well. Value open(3) means there is a lack of continuity between pins at each end of the pair. Value short(4) means conductors are short-circuited together on the pair. Value openShort(5) means the pair has open and short issues. Value crosstalk(6) means the pair is incorrectly connected at one end. Value unknown(7) means pair has an error matching none of the above. Value impedanceMismatch(8) means different quality cables connected together. Value fail(9) means test failed. Value notSupport(10) means cable diagnostics is not supported.

Displays the fault distance of pair A of the cable in meters.

Displays the fault distance of pair B of the cable in meters.

Displays the last time of cable diagnostics. For example, Jan 1 02:03:04 2002.

Dispalys port utilization during recent 300 seconds.

Dispalys port utilization during recent 300 seconds.

The port and trunk interface of the portUtilTable. The interface identified by a particular value of this index is the same interface identified by the same value of ifIndex in the IF-MIB.

The input octet rate (kbits/sec) of the port.

The input packet rate (pkts/sec) of the port.

The input utilization of the port, in one per hundred.

The output octet rate (kbits/sec) of the port.

The output packet rate (pkts/sec) of the port.

The output utilization of the port, in one per hundred.

The maximum number for a trunk identifier.

The number of valid trunks.

Table describing the configuration and status of each trunk.

An entry describing the configuration and status of a particular trunk.

Identifies the trunk within the switch that is described by the table entry.

The complete set of ports currently associated with this trunk.

A value of static(1) means a statically configured trunk. A value of lacp(2) means an LACP-configured trunk.

Writing this to valid(1) creates an entry. Writing this to invalid(2) destroys an entry. A trunk created by LACP cannot be manually destroyed or (re)configured.

Table for LACP port configuration.

Entry for LACP port configuration. While an entry may exist for a particular port, the port may not support LACP and an attempt to enable LACP may result in failure.

The port interface of the lacpPortTable. The interface identified by a particular value of this index is the same interface as identified by the same value of ifIndex in the IF-MIB.

Whether 802.3ad LACP is enabled.

Global spanning tree status. (1) Spanning tree protocol is enabled. (2) Spanning tree protocol is disabled.

The table manages port settings for Spanning Tree Protocol 802.1d, 802.1w or 802.1s depending on the value specified by staProtocolType.

The conceptual entry of staPortTable.

Whether fast forwarding is enabled.

When operating in RSTP (version 2) mode, writing true(1) to this object forces this port to transmit RSTP BPDUs. Any other operation on this object has no effect and it always returns false(2) when read.

The operational value of the edge port parameter. The object is initialized to the value of staPortAdminEdgePort and is set false when a BPDU is received.

The administrative point-to-point status of the LAN segment attached to this port. A value of forceTrue(0) indicates that this port should always be treated as if it is connected to a point-to-point link. A value of forceFalse(1) indicates that this port should be treated as having a shared media connection. A value of auto(2) indicates that this port is considered to have a point-to-point link if it is an Aggregator and all of its members are aggregatable, or if the MAC entity is configured for full duplex operation, either through auto-negotiation or by management means.

The operational point-to-point status of the LAN segment attached to this port. This indicates whether a port is considered to have a point-to-point connection or not. The value is determined by management or by auto-detection, as described in the staPortAdminPointToPoint object.

Per-port spanning tree status. (1) Spanning tree protocol is enabled. (2) Spanning tree protocol is disabled.

The admin value of the RSTP path cost or MST external pathcost. The contribution of this port to the path cost (in 32 bits value) of paths towards the spanning tree root which include this port. This object is used to configure the spanning tree port path cost in the 32-bit value range when the staPathCostMethod is long(2). If the staPathCostMethod is short(1), this mib object is not instantiated. Setting this to 0 means that the path cost is automatically determined. In this case, read staPortLongOperPathCost to get the oper value.

The oper value of the RSTP path cost or MST external pathcost. The contribution of this port to the path cost (in 32 bits value) of paths towards the spanning tree root which include this port. This object is used to configure the spanning tree port path cost in the 32-bit value range when the staPathCostMethod is long(2). If the staPathCostMethod is short(1), this mib object is not instantiated.

Specifies the desired status of the root guard. This variable configures the root guard feature to enforce the root bridge placement in the network.

The current operational status of the root guard which provides a way to enforce the root bridge placement in the network.

A value of enabled(1) indicates that BPDU port guard feature is enabled for each port. A value of disabled(2) indicates that the feature is disabled.

The administrative value of the edge port parameter. A value of enable(1) indicates that this port should be assumed as an edge-port, a value of disable(2) indicates that this port should be assumed as a non-edge-port and a value of auot (3) indicates this port in RSPT or MSTP mode should be assumed as an edge-port after migration or max age expire without receiving any BPDU and sending BPDU with proposal flag on.

The administrative value of the BPDU filter parameter. A value of enabled(1) indicates that this port will avoid transmitting BPDUs on edge-port and the value of disabled(2) indicates that this port will not avoid transmitting BPDUs on edge-port.

A value of enabled(1) indicates that BPDU port guard auto recovery mechanism is enabled for this port. A value of disabled(2) indicates that the mechanism is disabled.

The interval in seconds used by BPDU guard auto recovery mechanism.

The version of Spanning Tree Protocol the bridge is currently running. The value stp(1) indicates the Spanning Tree Protocol is as specified in IEEE 802.1D,rstp(2) indicates that the Rapid Spanning Tree Protocol is as specified in IEEE 802.1w, and the value mstp(3) indicates that the Multiple Spanning Tree Protocol is as specified in IEEE 802.1s. New values may be defined in the future as new or updated versions of the protocol become available.

The value used by the Port Transmit state machine to limit the maximum transmission rate.

Indicates the type of spanning tree path cost mode configured on the switch. This mode applies to all instances of the spanning tree protocol running on the switch. When the value of this MIB object is changed, the path cost of all ports will be reassigned to the default path cost values based on the new spanning tree path cost mode and the ports speed. When the value of this MIB object is set to long(2), the staPortLongPathCost MIB object must be used to retrieve/configure the spanning tree port path cost as a 32-bit value. The set operation on dot1dStpPortPathCost in BRIDGE-MIB will be rejected. While retrieving the value of dot1dStpPortPathCost, the maximum value of 65535 will be returned if the value of staPortLongPathCost for the same instance exceeds 65535. When the value of this MIB object is set to short(1), the dot1dStpPortPathCost in BRIDGE-MIB must be used.

The name of the Multiple Spanning Tree region.

The Revision number of the Multiple Spanning Tree region.

The max hop number counts of the Multiple Spanning Tree region.

This table is used to configure the property of a specific instance in Multiple Spanning Tree or Rapid Spanning Tree. If Rapid Spanning Tree protocol is in use, the mstInstanceEditIndex is always 0.

A conceptual row containing the property of the RST or MST instance.

An arbitrary integer within the range from 1 to the value of the maximum instance that uniquely identifies a spanning tree instance.

The priority of a specific spanning tree instance. The value assigned should be in the range 0-61440 in steps of 4096.

The time (in hundredths of a second) since the last topology change detected by the bridge entity in RST or MST.

The total number of topology changes detected by this bridge in RST or MST since the management entity was last reset or initialized.

The bridge identifier of the root of the spanning tree as determined by the Multiple Spanning Tree Protocol. (802.1s) or Rapid Spanning Tree Protocol (802.1w) executed by this node. This value is used as the root identifier parameter in all configuration bridge PDUs originated by this node.

The cost of the path to the root as seen from this bridge of the RST or MST.

The number of the port which offers the lowest cost path from this bridge to the root bridge of the RST or MST.

The maximum age of Multiple Spanning Tree Protocol (802.1s) or Rapid Spanning Tree Protocol (802.1w) information learned from the network on any port before it is discarded, in units of hundredths of a second. This is the actual value that this bridge is currently using.

The amount of time between the transmission of configuration bridge PDUs by this node on any port when it is the root of the specific spanning tree or trying to become so, in units of hundredths of a second. This is the actual value that this bridge is currently using in RST or MST.

This time value determines the interval length during which no more than two configuration bridge PDUs shall be transmitted by this node, in units of hundredths of a second.

For RST or MST protocol, this time value, measured in units of hundredths of a second, controls how fast a port changes its spanning state when moving towards the forwarding state. The value determines how long the port stays in each of the listening and learning states, which precede the forwarding state. This value is also used, when a topology change has been detected and is underway, to age all dynamic entries in the forwarding database. This value is the current value being used by the bridge. xstInstanceCfgBridgeForwardDelay defines the value that this bridge and all others would start using if/when this bridge were to become the root.

For RST or MST protocol, the time (in hundredths of second) that all bridges use for MaxAge when this bridge is acting as the root. Note that 802.1D-1990 specifies that the range for this parameter is related to the value of xstInstanceCfgBridgeHelloTime. The granularity of this timer is specified by 802.1D-1990 to be 1 second.

For RST or MST protocol,the time (in hundredths of a second) that all bridges use for HelloTime when this bridge is acting as the root. The granularity of this timer is specified by 802.1D-1990 to be 1 second.

For RST or MST protocol, the time (in hundredths of a second) that all bridges use for ForwardDelay when this bridge is acting as the root. Note that 802.1D-1990 specifies that the range for this parameter is related to the value of xstInstanceCfgBridgeMaxAge. The granularity of this timer is specified by 802.1D-1990 to be 1 second.

For RST or MST protocol, the value used by the port transmit state machine to limit the maximum transmission rate.

For RST or MST protocol, this indicates the type of spanning tree path cost mode used by the switch. The mode applies to all instances of the Spanning Tree protocol running on the switch. When the value of this MIB object is changed, the path cost of all ports will be reassigned to the default path cost values based on the new spanning tree path cost mode and the ports speed. When the value of this MIB object is set to long(2), the xstInstancePortPathCost MIB object must be used in order to retrieve/configure the spanning tree port path cost as a 32-bit value. The set operation on dot1dStpPortPathCost in BRIDGE-MIB will be rejected. While retrieving the value of dot1dStpPortPathCost, the maximum value of 65535 will be returned if the value of xstInstancePortPathCost for the same instance exceeds 65535. When the value of this MIB object is set to short(1), the dot1dStpPortPathCost in BRIDGE-MIB must be used.

The extension table for dot1dStpPortEntry to provide additional Spanning Tree information and configuration.

The conceptual row for xstInstancePortTable.

The instance of the MSTP.

The port and the trunk (excluding trunk member ports) interface of the mstInstancePortTable. The interface identified by a particular value of this index is the same interface as identified by the same value of dot1dStpPort in the BRIDGE-MIB.

Defines the priority used for this port in the Spanning Tree Algorithm. If the path cost for all ports on a switch is the same, the port with the highest priority (i.e., lowest value) will be configured as an active link in the Spanning Tree. This makes a port with higher priority less likely to be blocked if the Spanning Tree Algorithm is detecting network loops. Where more than one port is assigned the highest priority, the port with lowest numeric identifier will be enabled.

The ports current state as defined by application of the Spanning Tree Protocol. This state controls what action a port takes on reception of a frame: discarding(1): Port receives configuration messages, but does not forward packets. learning(2): Port has transmitted configuration messages for an interval set by the Forward Delay parameter without receiving contradictory information. Port address table is cleared, and the port begins learning addresses. forwarding(3): Port forwards packets, and continues learning addresses. For ports which are disabled (see xstInstancePortEnable), this object will have a value of discarding(1).

The enabled/disabled status of the port.

The pathcost of the RST or MST in the range 1 to 200000000. This parameter is used to determine the best path between devices. Therefore, lower values should be assigned to ports attached to faster media, and higher values assigned to ports with slower media. (Path cost takes precedence over port priority).

The unique bridge identifier of the bridge recorded as the root in the configuration BPDUs transmitted by the designated bridge for the segment to which the port is attached.

The path cost of the designated port of the segment connected to this port. This value is compared to the root path cost field in received bridge PDUs.

The bridge identifier of the bridge which this port considers to be the designated bridge for this ports segment.

The port identifier of the port on the designated bridge for this ports segment.

The number of times this port has transitioned from the learning state to the forwarding state.

The role of the port in the RST or MST protocol: (1) The port has no role within the spanning tree (2) The port is part of the active topology connecting the bridge to the root bridge (i.e., root port) (3) The port is connecting a LAN through the bridge to the root bridge (i.e., designated port) (4) The port may provide connectivity if other bridges, bridge ports, or LANs fail or are removed. (5) The port provides backup if other bridges, bridge ports, or LANs fail or are removed. (6) For MST protocol only, indicates whether this instance is in a master role.

The admin value of the RST pathcost or MST internal pathcost, in the range of 1 to 200000000. This parameter is used to determine the best path between devices. Therefore, lower values should be assigned to ports attached to faster media, and higher values assigned to ports with slower media. (Path cost takes precedence over port priority).

The oper value of the RST pathcost or MST internal pathcost, in the range of 1 to 200000000. This parameter is used to determine the best path between devices. Therefore, lower values should be assigned to ports attached to faster media, and higher values assigned to ports with slower media. (Path cost takes precedence over port priority).

The Multiple Spanning Tree region instance vlan configuration table. Please read the actual instance vlan mapped in the mstInstanceOperTable.

A conceptual row containing the status of the MSTP instance.

An arbitrary integer within the range from 1 to the value of the maximum instance that uniquely identifies a spanning tree instance.

A string of octets containing one bit per VLAN. The first octet corresponds to VLANs with vlanIndex values of 0 through 7; the second octet to VLANs 8 through 15; etc., The most significant bit of each octet corresponds to the lowest value vlanIndex in that octet. For each VLAN, if it is mapped to this MSTP instance, then the bit corresponding to that VLAN is set to 1. To create a row, write any of mstInstanceEditVlansMap, mstInstanceEditVlansMap2k, mstInstanceEditVlansMap3k or mstInstanceEditVlansMap4k, to a non-empty list. To destroy a row, write all of these four variables to an empty list.

A string of octets containing one bit per VLAN for VLANS with vlanIndex values of 1024 through 2047. The first octet corresponds to VLANs with vlanIndex values of 1024 through 1031; the second octet to VLANs 1032 through 1039; etc. The most significant bit of each octet corresponds to the lowest value vlanIndex in that octet. For each VLAN, if it is mapped to this MSTP instance, then the bit corresponding to that VLAN is set to 1. To create a row, write any of mstInstanceEditVlansMap, mstInstanceEditVlansMap2k, mstInstanceEditVlansMap3k or mstInstanceEditVlansMap4k, to a non-empty list. To destroy a row, write all of these four variables to an empty list.

A string of octets containing one bit per VLAN for VLANS with vlanIndex values of 2048 through 3071. The first octet corresponds to VLANs with vlanIndex values of 2048 through 2055; the second octet to VLANs 2056 through 2063; etc. The most significant bit of each octet corresponds to the lowest value vlanIndex in that octet. For each VLAN, if it is mapped to this MSTP instance, then the bit corresponding to that VLAN is set to 1. To create a row, write any of mstInstanceEditVlansMap, mstInstanceEditVlansMap2k, mstInstanceEditVlansMap3k or mstInstanceEditVlansMap4k, to a non-empty list. To destroy a row, write all of these four variables to an empty list.

A string of octets containing one bit per VLAN for VLANS with vlanIndex values of 3072 through 4095. The first octet corresponds to VLANs with vlanIndex values of 3072 through 3079; the second octet to VLANs 3080 through 3087; etc. The most significant bit of each octet corresponds to the lowest value vlanIndex in that octet. For each VLAN, if it is mapped to this MSTP instance, then the bit corresponding to that VLAN is set to 1. To create a row, write any of mstInstanceEditVlansMap, mstInstanceEditVlansMap2k, mstInstanceEditVlansMap3k or mstInstanceEditVlansMap4k, to a non-empty list. To destroy a row, write all of these four variables to an empty list.

The remaining hop count for this MST instance.

The Multiple Spanning Tree region instance vlan mapped table.

A conceptual row containing the status of the MSTP instance.

An arbitrary integer within the range from 1 to the value of the maximum instance that uniquely identifies a spanning tree instance.

A string of octets containing one bit per VLAN. The first octet corresponds to VLANs with vlanIndex values of 0 through 7; the second octet to VLANs 8 through 15; etc., The most significant bit of each octet corresponds to the lowest value vlanIndex in that octet. For each VLAN, if it is mapped to this MSTP instance, then the bit corresponding to that VLAN is set to 1.

A string of octets containing one bit per VLAN for VLANS with vlanIndex values of 1024 through 2047. The first octet corresponds to VLANs with vlanIndex values of 1024 through 1031; the second octet to VLANs 1032 through 1039; etc. The most significant bit of each octet corresponds to the lowest value vlanIndex in that octet. For each VLAN, if it is mapped to this MSTP instance, then the bit corresponding to that VLAN is set to 1.

A string of octets containing one bit per VLAN for VLANS with vlanIndex values of 2048 through 3071. The first octet corresponds to VLANs with vlanIndex values of 2048 through 2055; the second octet to VLANs 2056 through 2063; etc. The most significant bit of each octet corresponds to the lowest value vlanIndex in that octet. For each VLAN, if it is mapped to this MSTP instance, then the bit corresponding to that VLAN is set to 1.

A string of octets containing one bit per VLAN for VLANS with vlanIndex values of 3072 through 4095. The first octet corresponds to VLANs with vlanIndex values of 3072 through 3079; the second octet to VLANs 3080 through 3087; etc. The most significant bit of each octet corresponds to the lowest value vlanIndex in that octet. For each VLAN, if it is mapped to this MSTP instance, then the bit corresponding to that VLAN is set to 1.

A table provides the mechanism to configure the spanning tree loopback detection of each port or trunk

A conceptual row of staLoopbackDetectionPortTable.

The port and the trunk interfaces of the portTable. The interface identified by a particular value of this index is the same interface as identified by the same value of ifIndex in the IF-MIB.

Status of the port on whether spanning tree loopback detection is enabled.

The parameter indicates whether the trap has to be sent when the loopback BPDUs have been detected.

Setting it to auto(1) indicates that this port can be released from discarding state automatically after loopback has occurred. Setting it to manual(2) indicates that this port can be released from discarding state manually after loopback has occurred.

Set this to release(2) to release the port from discarding state. noRelease(1) will always be obtained when reading this variable.

Name of op-code file for start-up.

Name of configuration file for start-up.

Setting this object to warmBoot(2) causes the device to reinitialize itself such that neither the agent configuration nor the protocol entity implementation is altered. Setting this object to coldBoot(3) causes the device to reinitialize itself such that the agents configuration or the protocol entity implementation may be altered. When the device is running normally, this variable has a value of running(1).

Table for port mirroring, enabling a port to be mirrored to/from another port. Not all ports can be mirrored and limitations may apply as to which ports can be used as either source or destination ports.

The conceptual row of mirrorTable.

The destination port interface for mirrored packets. The interface identified by a particular value of this index is the same interface as identified by the same value of ifIndex in the IF-MIB.

The source port interface for mirrored packets. The interface identified by a particular value of this index is the same interface as identified by the same value of ifIndex in the IF-MIB.

If this value is rx(1), receive packets will be mirrored. If this value is tx(2), transmit packets will be mirrored. If this value is both(3), both receive and transmit packets will be mirrored.

Setting this to valid(1) creates an entry. Setting this to invalid(2) destroys an entry.

Table for VLAN mirroring, enabling a VLAN to be mirrored to a port.

The conceptual row of vlanMirrorTable.

The destination port interface for mirrored packets. The interface identified by a particular value of this index is the same interface as identified by the same value of ifIndex in the IF-MIB.

The source VLAN for mirrored packets. The interface identified by a particular value of this index is the same interface as identified by the same value of dot1qVlanIndex in the Q-BRIDGE-MIB.

Set this to valid(1) to create an entry. Set this to invalid(2) to destroy an entry.

Parameter to enable or disable IGMP snooping on the device. When enabled, the device will examine IGMP packets and set up filters for IGMP ports.

Enables (disables) whether the switch acts as an IGMP querier.

The query count from a querier, during which a response is expected from an endstation. If a querier has sent a number of counts defined by igmpSnoopQueryCount, but an endstation has not responded, a countdown timer is started using the time defined by igmpSnoopQueryMaxResponseTime. If the countdown finishes, and the endstation still has not responded, then that endstation is deemed to have left the multicast group.

The interval (in seconds) between IGMP host-query messages sent by the switch.

The time after a query, during which a response is expected from an endstation. If a querier has sent a number of queries defined by igmpSnoopQueryCount, but an endstation has not responded, a countdown timer is started using an initial value set by igmpSnoopQueryMaxResponseTime. If the countdown finishes, and the endstation still has not responded, then that the endstation is deemed to have left the multicast group.

Sets the time (in seconds) the switch waits after the previous querier has stopped querying before the router port (which received query packets from previous querier) expires.

IGMP version snooped

Table for current router ports.

Entry for current router ports.

The interface identified by a particular value of this index is the same interface as identified by the same value of dot1qVlanIndex in the Q-BRIDGE-MIB. The entry will only appear here after a configure to igmpSnoopRouterStaticTable.

The set of ports which are current router ports, including static router ports. Please refer to igmpSnoopRouterStaticTable.

The set of ports which are static router ports.

Table for static router ports.

Entry for static router ports.

The interface identified by a particular value of this index is the same interface as identified by the same value of dot1qVlanIndex in the Q-BRIDGE-MIB. The entry will only appear here after a configure to igmpSnoopRouterStaticTable.

The set of ports which are static router ports.

Setting this to valid(1) creates an entry. Setting this to invalid(2) destroys an entry.

Table for current multicast addresses.

Entry for current multicast addresses.

The interface identified by a particular value of this index is the same interface as identified by the same value of dot1qVlanIndex in the Q-BRIDGE-MIB. The entry will only appear here after a configure to igmpSnoopMulticastStaticTable.

IP address of multicast group.

The set of ports which are members of a multicast group, including static members. Please refer to igmpSnoopMulticastStaticTable.

The set of ports which are static members.

Table for static multicast addresses.

Entry for static multicast addresses.

The interface identified by a particular value of this index is the same interface as identified by the same value of dot1qVlanIndex in the Q-BRIDGE-MIB. The entry will only appear here after a configure to igmpSnoopMulticastStaticTable.

IP address of multicast group.

The set of ports which are members.

Setting this to valid(1) creates an entry. Setting this to invalid(2) destroys an entry.

Table for enabling or disabling IGMP snooping per VLAN.

Entry for enabling or disabling IGMP snooping.

Same is dot1qVlanIndex in the Q-BRIDGE-MIB. This table has only one entry - the entry for the VLAN of the management interface.

The parameter to enable or disable the Immediate-Leave feature on this VLAN.

This enables or disables Leave Proxy for IGMP Snooping.

Parameter to enable or disable IGMP filtering on the device.

The table for configuring the IGMP snooping profile.

The entry for configuring the IGMP snooping profile.

The ID of the IGMP snooping profile.

The access mode of the IGMP snooping profile.

Setting this to valid(1) creates an entry. Setting this to invalid(2) destroys an entry.

The ID of the IGMP snooping profile.

The address type is associated with this agent. Only ipv4(1) type is supported.

The specified addresses in the start of the controlled IP multicast addresses.

The specified addresses in the end of the controlled IP multicast addresses.

Setting it to create(2) creates the range of the controlled IP multicast addresses. Setting it to destroy(3) destroys the range of the controlled IP multicast addresses. When the action is completed, this object becomes noAction(1).

The table for configuring the range of the IGMP snooping profile.

The entry for configuring the range of the IGMP snooping profile.

This is defined as igmpSnoopProfileId.

The address type is associated with this agent. Only ipv4(1) type is supported.

The specified addresses in the start of the controlled IP multicast addresses.

The specified addresses in the end of the controlled IP multicast addresses.

The access mode of the IGMP snooping profile.

Table for port configuration in IGMP filtering.

Entry for port configuration in IGMP filtering.

The port and trunk (including trunk members) interface of the portTable. The interface identified by a particular value of this index is the same interface identified by the same value of ifIndex in the IF-MIB.

The igmpSnoopProfileEntry identified by a particular value of this index is the same interface identified by the same value of the igmpSnoopProfileId object. If there is no corresponding entry in the igmpSnoopProfileTable, then no association exists. In particular, if this value is zero, no associated profile will be generated, as zero is not a valid profile index.

Table for port configuration in IGMP throttling.

Entry for port configuration in IGMP throttling.

The port and trunk (including trunk members) interface of the portTable. The interface identified by a particular value of this index is the same interface identified by the same value of ifIndex in the IF-MIB.

Describes the running status of the IGMP throttling to the switch. A value of true(1) indicates the IGMP throttling mechanism is active. A value of false(2) indicates the IGMP throttling mechanism is inactive.

The action mode of the IGMP throttling. A value of replace(1) means to replace a joined multicast group randomly when an interface receives an IGMP report and the number of current joined multicast groups is equal to the maximum number of IGMP groups that the interface can join. A value of deny(2) means to deny the IGMP report request when an interface receives an IGMP report and the number of current joined multicast groups is equal to the maximum number of IGMP groups that the interface can join.

The maximum number of IGMP groups that the interface can join.

The current number of IGMP groups that the interface has joined.

Table of IGMP Snooping service per port.

Entry of IGMP Snooping service per port.

The port and the trunk (excluding trunk members) interface of the igmpSnoopPortTable. The interface identified by a particular value of this index is the same interface as identified by the same value of ifIndex in the IF-MIB.

Parameter to enable or disable dropping IGMP Query packet.

Configure IGMP snooping multicast stream forwarding priority. If value is 65535, it means the priority is disabled

Table of IGMP Snooping service per port per VLAN.

Entry of IGMP Snooping service per port.

The port and the trunk (excluding trunk members) interface of the igmpSnoopPortTable. The interface identified by a particular value of this index is the same interface as identified by the same value of ifIndex in the IF-MIB.

The interface identified by a particular value of this index is the same interface as identified by the same value of dot1qVlanIndex in the Q-BRIDGE-MIB.

Parameter to enable or disable dropping IGMP Query packet.

A table of netConfigEntry.

A set of configuration parameters for a particular network interface on this device. If the device has no network interface, this table is empty. The index is composed of the ifIndex assigned to the corresponding interface.

The VLAN interface being used by this table entry. Only the VLAN interfaces which have an IP configured will appear in the table.

The IP address of this Net interface. The default value for this object is 0.0.0.0. If either the netConfigIPAddress or netConfigSubnetMask is 0.0.0.0, then when the device boots, it may use BOOTP to try to figure out what these values should be. If BOOTP fails, before the device can talk on the network, this value must be configured (e.g., through a terminal attached to the device).

The subnet mask of this Net interface. The default value for this object is 0.0.0.0. If either the netConfigIPAddress or netConfigSubnetMask are 0.0.0.0, then when the device boots, it may use BOOTP to try to figure out what these values should be. If BOOTP fails, before the device can talk on the network, this value must be configured (e.g., through a terminal attached to the device).

Whether this is a primary interface.

Whether this is an unnumbered interface.

The status of this conceptual row entry. This object isused to manage the creation and deletion of conceptual rows. The status column has six defined values: - active, which indicates that the conceptual row is available for use by the managed device; - notInService, which indicates that the conceptual row exists in the agent, but is unavailable for use by the managed device (see NOTE below); - notReady, which indicates that the conceptual row exists in the agent, but is missing information necessary in order to be available for use by the managed device; - createAndGo, which is supplied by a management station wishing to create a new instance of a conceptual row and to have its status automatically set to active, making it available for use by the managed device; - createAndWait, which is supplied by a management station wishing to create a new instance of a conceptual row (but not make it available for use by the managed device); and, - destroy, which is supplied by a management station wishing to delete all of the instances associated with an existing conceptual row. Whereas five of the six values (all except notReady) may be specified in a management protocol set operation, only three values will be returned in response to a management protocol retrieval operation: notReady, notInService or active. That is, when queried, an existing conceptual row has only three states: it is either available for use by the managed device (the status column has value active); it is not available for use by the managed device, though the agent has sufficient information to make it so (the status column has value notInService); or, it is not available for use by the managed device, and an attempt to make it so would fail because the agent has insufficient information (the state column has value notReady). For a detailed description of this object, please refer to SNMPv2-TC MIB.

The IP Address of the default gateway. If this value is undefined or unknown, it shall have the value 0.0.0.0.

Whether HTTP is enabled.

The port number for HTTP.

When set to restart(1) the DHCP server will restart. When read, this value always returns noRestart(2).

Whether HTTPS is enabled.

The port number for HTTPS.

Table for DHCP client information listed by interface. Depending on the nature of the product, this table may have only one entry(e.g. for the management VLAN), or may have many entries(e.g. for all ports, or for all static VLANs).

Entry for DHCP client information listed by interface.

This is defined by ifIndex in the IF-MIB.(static vlan if index)

Whether the Client ID is in text mode or in Hex mode.

The value that the DHCP client sets in the client_id option of DHCPDISCOVER and DHCPREQUEST messages. This value may be used by DHCP servers to uniquely identify the client.

Set enabled(1) to enable DHCP Relay Option 82, set disabled(2) to disable it.

Provide three policies to handle packet

Provide five mode for insertion remote-id sub-option of option 82. If configured-string(5) has been set, dhcpOption82RemoteIDString will take effect.

Set string to remote-id sub-option of option 82. It only take effect when dhcpOption82RemoteIDMode is set to configured-string(5)

Set encode format for CID and RID in option82. Set extra-subtype-included(1) will have extra subtype and length field in CID and RID. Set no-extra-subtype-included(2) will only have TLV format for CID and RID.

This table is to specify relay server IP address, the maximum number of server IP addresses user can specify is 5.

A conceptual row of dhcpOption82RelayServerAddrTable.

The index of the relay server IP address.

The IP address of the relay server.

To delete all dynamic entries in the ARP cache, write this variable to delete(1). Writing this variable to noDelete(2) has no effect on the device. When read, this variable always returns noDelete(2). This object is only for Layer 2 switch.

Table for VLAN configuration.

Entry for VLAN configuration.

Based on dot1qVlanIndex in the Q-BRIDGE-MIB. This table has only one entry - the entry for the VLAN of the management interface.

Method to get the IP address.

Table for port configuration in VLAN.

Entry for port configuration in VLAN.

The port and the trunk (excluding trunk members) interface of the portTable. The interface identified by a particular value of this index is the same interface as identified by the same value of dot1qPvid in the Q-BRIDGE-MIB.

This variable sets the 802.1Q VLAN mode. Setting it to hybrid(1) sets a hybrid link. Setting it to dot1qTrunk(2) sets a trunk link. Setting it to access(3) sets an access link.

The port type defined for private VLAN.

The configuration table which contains the binding entry of the protocol-group and VLANs.

The binding entry of the protocol-group and VLANs.

The specified protocol group of a binding entry.

The vlan index of the binding entry. The vid zero is used to delete the binding entry.

A table containing the mac address which can be identified by voice vlan.

A table containing the mac address which can be identified by voice vlan.

MAC address can be identified by voice vlan.

The mask of MAC address.

The description of oui.

Current operation status of the row.

Voice vlan enable status: enabled (2..4095), disabled (-1).

Voice vlan aging time, the unit of which is minute.

A list of voice vlan mode entries.

An entry containing voice vlan mode information, which is applicable to a voice vlan enabled interface.

The index of interface on which voice vlan function is enabled.

Voice vlan configuration mode status.

If the security is enabled, the port is only allow voice traffuc for the voice vlan.

The priority of the voice vlan traffic in the port.

The address of voice device is learned from Oui table.

The address of voice device is learned from LLDP discovery.

Set enabled(1) to enable remarking of IP DSCP for voice traffic. Set disabled(2) to disable it.

New IP DSCP value for voice traffic.

This parameter is used to globally enable/disable 802.1Q Tunneling on the device.

Table for port configuration in 802.1Q Tunneling.

Entry for port configuration in 802.1Q Tunneling.

The port and the trunk (excluding trunk members) interface of the portTable. The interface identified by a particular value of this index is the same interface as identified by the same value of ifIndex in the IF-MIB.

This variable sets the 802.1Q Tunneling mode. Setting it to none(1) indicates no mode in this port. Setting it to dot1qTunnel(2) sets as dot1q-tunnel mode port which link to customer. Setting it to dot1qTunnelUplink(3) sets as dot1q-tunnel mode port which link to service-provider. If vlanDot1qTunnelStatus is disabled, it means vlanDot1qTunnelPortMode is inactive.

TPID for 802.1Q encapsulation. Its used to select a nonstandard (nondefault) 2-byte ethertype to identify 802.1Q tagged frames.

A table that contains the settings for MAC-based VLAN.

A conceptual row in the macVlanTable.

The MAC address that may specify an entry in the table which contains MAC-based VLAN information.

Specifies the VLAN ID which the MAC address associates with.

Set this to valid(1) to create an entry. Set this to invalid(2) to destroy an entry.

The MAC address mask that may specify an entry in the table which contains MAC-based VLAN information.

Action for clearing macVlanTable. When this object is set to clear(2), all entries in macVlanTable will be cleared. When this object is read, the value of this object is always noClear(1).

A table that contains the settings for IP subnet-based VLAN.

A conceptual row in the subnetVlanTable.

The IPv4 address of a subnet. Any assignment (implicit or otherwise) of an instance of this object to a value x must be rejected if the bitwise logical-AND of x with the value of the corresponding instance of the subnetVlanMask object is not equal to x.

The netmask of a subnet. Any assignment (implicit or otherwise) of an instance of this object to a value x must be rejected if the bitwise logical-AND of x with the value of the corresponding instance of the subnetVlanIpAddress object is not equal to subnetVlanIpAddress.

Specifies the VLAN ID which the subnet associates with.

Specifies the priority whcich the subnet associates with.

Set this to valid(1) to create an entry. Set this to invalid(2) to destroy an entry.

Action for clearing subnetVlanTable. When this object is set to clear(2), all entries in subnetVlanTable will be cleared. When this object is read, the value of this object is always noClear(1).

Table for port configuration in Layer 2 Protocol Tunneling.

Entry for port configuration in Layer 2 Protocol Tunneling.

The port and the trunk (excluding trunk members) interface of the portTable. The interface identified by a particular value of this index is the same interface as identified by the same value of ifIndex in the IF-MIB.

Set enabled(1) to enable Layer 2 protocol tunneling for spanning-tree protocol. Set disabled(2) to disable Layer 2 protocol tunneling for spanning-tree protocol.

Set enabled(1) to enable Layer 2 protocol tunneling for LLDP. Set disabled(2) to disable Layer 2 protocol tunneling for LLDP.

Set enabled(1) to enable Layer 2 protocol tunneling for Cisco Discovery Protocol. Set disabled(2) to disable Layer 2 protocol tunneling for Cisco Discovery Protocol.

Set enabled(1) to enable Layer 2 protocol tunneling for Cisco VTP. Set disabled(2) to disable Layer 2 protocol tunneling for Cisco VTP.

Set enabled(1) to enable Layer 2 protocol tunneling for Cisco PVST+. Set disabled(2) to disable Layer 2 protocol tunneling for Cisco PVST+.

Destination MAC address for PDU tunneling.

Selects whether no frame priority mapping, IP ToS precedence mapping or DSCP mapping is performed.

Table for IP DSCP priority mapping.

Entry for IP DSCP priority mapping.

The port and the trunk (excluding trunk members) interface of the portTable. The interface identified by a particular value of this index is the same interface as identified by the same value of ifIndex in the IF-MIB.

Value of IP DSCP as specified in the packet header.

Class of Service as defined by dot1dTrafficClassPriority in the P-BRIDGE-MIB. The prioIpDscpValue value in the same table row will be mapped to this Class of Service (CoS). This CoS is then further mapped to the hardware queue according to dot1dTrafficClassTable.

Enables the IP DSCP settings of a port to be reset to their defaults. To reset the IP DSCP settings of a port, assign the value of the relevant ifIndex defined by the ifIndex in the IF-MIB. For example, assigning the value 1 will result in the IP DSCP settings of port 1 being restored to their default. 0 will always be obtained when reading this variable

Action to copy IP DSCP settings from a source port to many destination ports. The first four octets represent an integer for the source port in high-to-low (big-endian) order. Starting from the 5th octet is the destination port list in a form described by PortList in the Q-BRIDGE-MIB. Writing this object will perform copy. Reading this object will always get a zero-length octet string.

Table for weighted round robin (WRR).

Entry for weighted round robin (WRR).

Traffic class for this entry, as defined in dot1dTrafficClass in the P-BRIDGE-MIB. The actual maximum depends on the hardware, and is equal to dot1dPortNumTrafficClasses-1.

Weight for this entry.

The global status for the prioQueue. wrr(1),strict(2)

A list of trap destination entries.

A destination entry describes the destination IP address, the community string, and SNMP version to use when sending a trap.

The address to send traps.

A community to which this destination address belongs.

Setting this to valid(1) creates an entry. Setting this to invalid(2) destroys an entry.

Determines the version of the trap that is to be sent to the trap receiver. If the value is 1, then an SNMP version 1 trap is sent and if the value is 2, an SNMP version 2 trap is sent.

Determines the UDP port number that the trap will be sent to.

This variable is for trap var binding, indicated the ipfilter reject mode. web(1), snmp(2), telnet(3).

This variable is for trap var binding, indicating the IP address that rejected by the ipfilter.

The parameter indicates which result triggers the trap.

The parameter indicates new version which was upgraded to. When trapAutoUpgradeResult was failed(2), it would be null string.

ifIndex for the port connected to DHCP rouge server.

The IP address of the rouge server.

This variable is for trap var binding, indicated the VLAN id of MAC operation.

This variable is for trap var binding, indicated the MAC address of MAC operation.

This variable is for trap var binding, indicated the action of MAC operation. add(1), remove(2).

This variable indicates the intrusion MAC address.

This variable is for trap var binding, indicating the index of an interface.

This variable is for trap var binding, indicating the identifier of a VLAN.

Table for rate limit of each port.

Entry for rate limit of each port.

The port and the trunk (including trunk member) interface of the portTable. The interface identified by a particular value of this index is the same interface as identified by the same value of ifIndex in the IF-MIB.

Whether input rate limit is enabled for this port.

Whether output rate limit is enabled for this port.

Value of the input rate limit. Its unit is kilobits per second. For a 100 Mbps port, the range is 64 to 100000. For a 1000 Mbps port, the range is 64 to 1000000.

Value of the output rate limit. Its unit is kilobits per second. For a 100 Mbps port, the range is 64 to 100000. For a 1000 Mbps port, the range is 64 to 1000000.

Table for differentiated services on each port.

Entry for differentiated services on each port.

This object is the interface index of diffServPortEntry. The interface identified by a particular value of this index is the same interface as identified by the same value of ifIndex in the IF-MIB.

Specifies the policy map binding to the interface. The policy map identified by a particular value of this index is associated with the same DiffServPolicyMapEntry as identified by the same value of diffServPolicyMapIndex.

Specifies the ingress IP ACL binding to the interface. The ingress IP ACL identified by a particular value of this index is associated with the same diffServAclEntry as identified by the same value of diffServAclIndex.

Specifies the ingress MAC ACL binding to the interface. The ingress MAC ACL identified by a particular value of this index is associated with the same diffServAclEntry as identified by the same value of diffServAclIndex.

Specifies the ingress IPv6 ACL binding to the interface. The ingress IPv6 ACL identified by a particular value of this index is associated with the same diffServAclEntry as identified by the same value of diffServAclIndex.

Table for policy map.

Entry for policy map.

An index that uniquely identifies an entry in this table.

The name of this entry.

The description of this entry.

The octet string containes the diffServPolicyMapElementEntry indexes. Two octets express one index and it is represented in network order. This index list indicates the diffServPolicyMapEntrys which belong to this entry.

This object is used to create a new row, or modify or delete an existing row, in this table. The status column has six defined values: The status column has six defined values: - active, which indicates that the conceptual row is available for use by the managed device; - notInService, which indicates that the conceptual row exists in the agent, but is unavailable for use by the managed device (see NOTE below); - notReady, which indicates that the conceptual row exists in the agent, but is missing information necessary in order to be available for use by the managed device; - createAndGo, which is supplied by a management station wishing to create a new instance of a conceptual row and to have its status automatically set to active, making it available for use by the managed device; - createAndWait, which is supplied by a management station wishing to create a new instance of a conceptual row (but not make it available for use by the managed device); and, - destroy, which is supplied by a management station wishing to delete all of the instances associated with an existing conceptual row. Whereas five of the six values (all except notReady) may be specified in a management protocol set operation, only three values will be returned in response to a management protocol retrieval operation: notReady, notInService or active. That is, when queried, an existing conceptual row has only three states: it is either available for use by the managed device (the status column has the value active);it is not available for use by the managed device, though the agent has sufficient information to make it so (the status column has the value notInService); or, it is not available for use by the managed device, and an attempt to make it so would fail because the agent has insufficient information (the state column has the value notReady). For a detailed description of this object, please refer to SNMPv2-TC MIB.

Index for attachment control. Specifies the policy map as the target to relate with the policy map element. The policy map identified by a particular value of this index is associated with the same diffServPolicyMapEntry as identified by the same value of diffServPolicyMapIndex.

Element Index for attachment control.Specifies the policy map element to relate with the policy map. The policy map element identified by a particular value of this index is associated with the same diffServPolicyMapElementEntry as identified by the same value of diffServPolicyMapElementIndex.

Action for attachment control. When setting this object to attach(2) to begin the attaching operation, a particular policy map element is attached to a particular policy map. When setting this object to detach(3) to begin the not attached operation, a particular policy map element is not attached to a particular policy map. When the action is finshed or no action is taken, the value of this object is noAction(1). A particular policy map is specified in the diffServPolicyMapAttachCtlIndex. A particularpolicy map element is specified in the diffServPolicyMapAttachCtlElementIndex.

Table for policy map element.

Entry for policy map element.

An index that uniquely identifies an entry in this table.

Specifies the class map binding to this entry. The class map identified by a particular value of this index is associated with the same diffServClassMapEntry as identified by the same value of diffServClassMapIndex.

Specifies the meter binding to this entry. The meter identified by a particular value of this index is associated with the same diffServMeterEntry as identified by the same value of diffServMeterIndex. If this value is zero, no associated meter will be associated, as zero is not a valid meter index.

Specifies the action binding to this entry. The action identified by a particular value of this index is associated with the same diffServActionEntry as identified by the same value of diffServActionIndex.

This object is used to create a new row, or modify or delete an existing row, in this table. The status column has six defined values: The status column has six defined values: - active, which indicates that the conceptual row is available for use by the managed device; - notInService, which indicates that the conceptual row exists in the agent, but is unavailable for use by the managed device (see NOTE below); - notReady, which indicates that the conceptual row exists in the agent, but is missing information necessary in order to be available for use by the managed device; - createAndGo, which is supplied by a management station wishing to create a new instance of a conceptual row and to have its status automatically set to active, making it available for use by the managed device; - createAndWait, which is supplied by a management station wishing to create a new instance of a conceptual row (but not make it available for use by the managed device); and, - destroy, which is supplied by a management station wishing to delete all of the instances associated with an existing conceptual row. Whereas five of the six values (all except notReady) may be specified in a management protocol set operation, only three values will be returned in response to a management protocol retrieval operation: notReady, notInService or active. That is, when queried, an existing conceptual row has only three states: it is either available for use by the managed device (the status column has the value active); it is not available for use by the managed device, though the agent has sufficient information to make it so (the status column has the value notInService); or, it is not available for use by the managed device, and an attempt to make it so would fail because the agent has insufficient information (the state column has the value notReady). For a detailed description of this object, please refer to SNMPv2-TC MIB.

Table for class map.

Entry for class map.

An index that uniquely identifies an entry in this table.

The name of this entry.

The description of this entry.

The map match type of this entry.

The octet string containes the type of class map element indexes. Two octets which are represented in network order express one type of the class map element index in network order and it maps the index of differServClasssMapElementIndexList in order. When the type is macAce(1), the maping index of differServClasssMapElementIndexList is the diffServMacAceEntry. When the type is ipAce(2), the maping index of differServClasssMapElementIndexList is the diffServIpAceEntry. When the type is acl(3), the maping index of differServClasssMapElementIndexList is the diffServAclEntry.

The octet string containes the class map element indexes. Two octets express one index and it is represented in network order. This index list indicates the particular class map elements which belong to this table. The class map element uses type to indicate diffServAclEntry, the diffServIpAceEntry or diffServMacAceEntry. The type is two octet specified in differServClasssMapElementIndexTypeList in order. When the type is macAce(1), the maping index of differServClasssMapElementIndexList is the diffServMacAceEntry. When the type is ipAce(2), the maping index of differServClasssMapElementIndexList is the diffServIpAceEntry. When the type is acl(3), the maping index of differServClasssMapElementIndexList is the diffServAclEntry.

This object is used to create a new row or modify or delete an existing row in this table.The status column has six defined values: The status column has six defined values: - active, which indicates that the conceptual row is available for use by the managed device; - notInService, which indicates that the conceptual row exists in the agent, but is unavailable for use by the managed device (see NOTE below); - notReady, which indicates that the conceptual row exists in the agent, but is missing information necessary in order to be available for use by the managed device; - createAndGo, which is supplied by a management station wishing to create a new instance of a conceptual row and to have its status automatically set to active, making it available for use by the managed device; - createAndWait, which is supplied by a management station wishing to create a new instance of a conceptual row (but not make it available for use by the managed device); and, - destroy, which is supplied by a management station wishing to delete all of the instances associated with an existing conceptual row. Whereas five of the six values (all except notReady) may be specified in a management protocol set operation, only three values will be returned in response to a management protocol retrieval operation: notReady, notInService or active. That is, when queried, an existing conceptual row has only three states: it is either available for use by the managed device (the status column has the value active); it is not available for use by the managed device, though the agent has sufficient information to make it so (the status column has the value notInService); or, it is not available for use by the managed device, and an attempt to make it so would fail because the agent has insufficient information (the state column has the value notReady). For a detailed description of this object, please refer to SNMPv2-TC MIB.

Index for attachment control. Specifies the class map as the target to relate with class map elements. The class map identified by a particular value of this index is associated with the same diffServClassMapEntry as identified by the same value of diffServClassMapIndex.

Element Index for attachment control. Specifies the type of class map element to relate with the class map. When type is macAce(1), the index of diffServClassMapAttachCtlElementIndex is the index of diffServMacAceEntry. When the type is ipAce(2), the index of diffServClassMapAttachCtlElementIndex is the index of diffServIpAceEntry. When the type is acl(3), the index of diffServClassMapAttachCtlElementIndex is the index of diffServAclEntry.

Element Index for attachment control. Specifies the class map element related with the class map. The class map element uses type to indicate diffServAclEntry, the diffServIpAceEntry or diffServMacAceEntry. The type is specified in diffServClassMapAttachCtlElementIndexType. When the type is macAce(1), the maping index of differServClasssMapElementIndexList is the diffServMacAceEntry. When the type is ipAce(2), the maping index of differServClasssMapElementIndexList is the diffServIpAceEntry. When the type is acl(3), the maping index of differServClasssMapElementIndexList is the diffServAclEntry.

Action for attachment control. When setting this object to attach(2) to begin the attaching operation, a particular class map element is attached to a particular class map. When setting this object to detach(3) to begin the not attached operation, then a particular class map element is not attached to a particular class map. When the action is finshed whether successfully or not, or no action is taken, the value of this object always is noAction(1). The value of a particular class map is specified in the AclAttachCtlTargetIndex. The class map element is specified by diffServClassMapAttachCtlElementIndexType and diffServClassMapAttachCtlElementIndex.

Table for ACL.

Entry for ACL.

An index that uniquely identifies an entry in the ACL table.

The name of this entry.

The type of this entry. When the value of ACL type is modified, then the ACEs in the diffServAclAceIndexList of this entry will be auto-removed, and this entry will be auto- unbound from the diffServPortTable and the diffServClassMapTable.

The octet string containes the ACE indexes. Two octets express one index and it is represented in network order. This index list indicates the particular ACEs which belong to this table. The ACE uses type to indicate the diffServMacAceEntry, the diffServIpAceEntry, the diffServIpv6AceEntry or the diffServArpAceEntry. The type is specified in diffServAclType. When the type is mac(1), the index of diffServAclAceIndexList is the diffServMacAceEntry. When the type is ipstandard(2) or ipextended(3), the index of diffServAclAceIndexList is the diffServIpAceEntry. When the type is ipv6standard(4) or ipv6extended(5), the index of diffServAclAceIndexList is the diffServIpv6AceEntry. When the type is arp(6), the index of diffServAclAceIndexList is the diffServArpAceEntry.

This object is used to create a new row or modify or delete an existing row in this table. The status column has six defined values: - active, which indicates that the conceptual row is available for use by the managed device; - notInService, which indicates that the conceptual row exists in the agent, but is unavailable for use by the managed device (see NOTE below); - notReady, which indicates that the conceptual row exists in the agent, but is missing information necessary in order to be available for use by the managed device; - createAndGo, which is supplied by a management station wishing to create a new instance of a conceptual row and to have its status automatically set to active, making it available for use by the managed device; - createAndWait, which is supplied by a management station wishing to create a new instance of a conceptual row (but not make it available for use by the managed device); and, - destroy, which is supplied by a management station wishing to delete all of the instances associated with an existing conceptual row. Whereas five of the six values (all except notReady) may be specified in a management protocol set operation, only three values will be returned in response to a management protocol retrieval operation: notReady, notInService or active. That is, when queried, an existing conceptual row has only three states: it is either available for use by the managed device (the status column has the value active); it is not available for use by the managed device, though the agent has sufficient information to make it so (the status column has the value notInService); or, it is not available for use by the managed device, and an attempt to make it so would fail because the agent has insufficient information (the state column has the value notReady). For a detailed description of this object, please refer to SNMPv2-TC MIB.

Index for attachment control. Specifies the ACL as the target to relate with the IP ACE, the MAC ACE or IPv6 ACE. The ACL identified by a particular value of this index is associated with the same diffServAclEntry as identified by the same value of diffServAclIndex.

Type for attachment control. Specifies the type of diffServAclAttachCtlAceIndex to relate with the diffServAclAttachCtlIndex. When the type is macAce(1), the index of diffServAclAceIndexList is the diffServMacAceEntry. When the type is ipAce(2), the index of diffServAclAceIndexList is the diffServIpAceEntry. When the type is ipv6Ace(3), the index of diffServAclAceIndexList is the diffServIpv6AceEntry. When the type is arpAce(4), the index of diffServAclAceIndexList is the diffServArpAceEntry.

Index for attachment control. Specifies the ACE to relate with the diffServAclAttachCtlIndex. When diffServAclAttachCtlAceType is macAce(1), the value of diffServAclAttachCtlIndex is the diffServMacAceEntry. When diffServAclAttachCtlAceType is ipAce(2), the value of diffServAclAttachCtlIndex is the diffServIpAceEntry. When diffServAclAttachCtlAceType is ipv6Ace(3), the value of diffServAclAttachCtlIndex is the diffServIpv6AceEntry. When diffServAclAttachCtlAceType is arpAce(4), the value of diffServAclAttachCtlIndex is the diffServArpAceEntry.

Action for attachment control. When setting this object to attach(2) to begin the attaching operation, a particular ACE is attached to a particular ACL. When setting this object to detach(3) to begin the not attached operation, then a particular ACE is not attached to a particular ACL. When the action is finshed whether successfully or not, or no action is taken, the value of this object always is noAction(1), The value of a particular ACL is specified in the diffServAclAttachCtlAceType and diffServAclAttachCtlAceIndex.

Table for IP ACE.

Entry for IP ACE.

An index that uniquely identifies an entry in the IP ACE table.

The specified IP ACE type. When the type of this entry is modified, then this entry will be auto-unbound from the diffServAclEntry and the not supporting field of this entry will be set 0.

Indicates the action to be taken if a packet matches this ACE.

The specified source IP address. The packets source address is AND-ed with the value of IpAceSourceIpAddrBitmask and then compared against the value of this object.

The specified source IP address mask. The packets source address is AND-ed with the value of IpAceSourceIpAddr and then compared against the value of this object.

The specified destination IP address. The packets destination address is AND-ed with the value of diffServIpAceDestIpAddrBitmask and then compared against the value of this object. This object may not be modified if the associated diffServIpAceType object is equal to standard(1).

The specified destination IP address mask. This object may not be modified if the associated diffServIpAceType object is equal to standard(1).

The protocol number field in the IP header used to indicate the higher layer protocol as specified in RFC 1700. A value of 0 matches every IP packet. The object=256 means any. For example: 0 is IP, 1 is ICMP, 2 is IGMP, 4 is IP in IP encapsulation, 6 is TCP, 9 is IGRP, 17 is UDP, 47 is GRE, 50 is ESP, 51 is AH, 88 is IGRP, 89 is OSPF, 94 is KA9Q/NOS compatible IP over IP, 103 is PIMv2, 108 is PCP. This object may not be modified if the associated diffServIpAceType object is equal to standard(1).

Specifies the IP precedence value to match against. The value of this object is ignored whenever the value of diffServIpAcePrec object is 8. This object may not be modified if the associated diffServIpAceType object is equal to standard(1).

Specifies the IP ToS facility value to match against. The value of this object is ignored whenever the value of diffServIpAcePrec object is 9. This object may not be modified if the associated diffServIpAceType object is equal to standard(1).

Specifies the DSCP value to match against. The value of this object is ignored whenever the value of diffServIpAcePrec object is 64. This object may not be modified if the associated diffServIpAceType object is equal to standard(1).

Indicates how a packets source TCP/UDP port number is to be compared. noOperator(1), which is the default value, means no comparison is to be made with the source TCP/UDP port number. equal(2), which is used the diffServIpAceSourcePortBitmask and the diffServIpAceMinSourcePort to match against. range(3),which is used the diffServIpAceMinSourcePort and the diffServIpAceMaxSourcePort to match against. This object may not be modified if the associated diffServIpAceType object is equal to standard(1).

If the diffServIpAceSourcePortOp is range(3), this indicates the lower bound of the TCP/UDP port number value range. This object may not be modified if the associated diffServIpAceType object is equal to standard(1).

If the diffServIpAceSourcePortOp is equal(2), this indicates the bitmask of the diffServIpAceMinSourcePort. This object may not be modified if the associated diffServIpAceType object is equal to standard(1).

Indicates how a packets destination TCP/UDP port number is to be compared. noOperator(1), which is the default value, means that no comparison is to be made with the destination TCP/UDP port number. equal(2), which is used the diffServIpAceSourcePortBitmask and the diffServIpAceMinDestPort to match against. range(3),which is used the diffServIpAceMinDestPort and the diffServIpAceMaxDestPort to match against. This object may not be modified if the associated diffServIpAceType object is equal to standard(1).

If the diffServIpAceDestPortOp is range(3), this indicates the lower bound of the TCP/UDP port number value range. This object may not be modified if the associated diffServIpAceType object is equal to standard(1).

If the diffServIpAceDestPortOp is equal(2), this indicates the bitmask of the diffServIpAceMinDestPort. This object may not be modified if the associated diffServIpAceType object is equal to standard(1).

Indicates how the control flags of TCP packets are to be compared. diffServIpAceControlCode is AND-ed with diffServIpAceControlCodeBitmask. This object may not be modified if the associated diffServIpAceType object is equal to standard(1).

Indicates how the control flags of TCP packets are to be compared. It can be used to check multiple flags of the FIN, SYN, RST, PSH, ACK, URG by the sum of FIN=1, SYN=2, RST=4, PSH=8, ACK=16, URG=32. This object may not be modified if the associated diffServIpAceType object is equal to standard(1).

This object is used to create a new row or modify or delete an existing row in this table. The status column has six defined values: The status column has six defined values: - active, which indicates that the conceptual row is available for use by the managed device; - notInService, which indicates that the conceptual row exists in the agent, but is unavailable for use by the managed device (see NOTE below); - notReady, which indicates that the conceptual row exists in the agent, but is missing information necessary in order to be available for use by the managed device; - createAndGo, which is supplied by a management station wishing to create a new instance of a conceptual row and to have its status automatically set to active, making it available for use by the managed device; - createAndWait, which is supplied by a management station wishing to create a new instance of a conceptual row (but not make it available for use by the managed device); and, - destroy, which is supplied by a management station wishing to delete all of the instances associated with an existing conceptual row. Whereas five of the six values (all except notReady) may be specified in a management protocol set operation, only three values will be returned in response to a management protocol retrieval operation: notReady, notInService or active. That is, when queried, an existing conceptual row has only three states: it is either available for use by the managed device (the status column has the value active); it is not available for use by the managed device, though the agent has sufficient information to make it so (the status column has the value notInService); or, it is not available for use by the managed device, and an attempt to make it so would fail because the agent has insufficient information (the state column has the value notReady). For a detailed description of this object, please refer to SNMPv2-TC MIB.

Table for MAC ACE.

Entry for MAC ACE.

An index that uniquely identifies an entry in the MAC ACE table.

Indicates the action to be taken if a packet matches this ACE.

Used to check the packet format of the packets. This object cannot be configured when the status of the entry, diffServMacAceStatus, is active(1).

Indicates the 48-bit source MAC address. The specified source MAC of the packet. The packets source MAC address is AND-ed with the value of diffServMacAceSourceMacAddrBitmask and then compared against the value of this object.

The specified source MAC address mask.

Indicates the 48-bit destination MAC address. The specified destination MAC of the packet. The packets destination MAC address is AND-ed with the value of diffServMacAceDestMacAddrBitmask and then compared against the value of this object.

The specified destination MAC address mask.

Indicates how a packets VID is to be compared. This object cannot be configured when the status of the entry, diffServMacAceStatus, is active(1).

Indicates the lower bound of the VID value range if the diffServMacAceVidOp is range(3).

The bit mask of the VID. The default value is 0.

Indicates how a packets ether type is to be compared.

The bit mask of Ether type. The default value is 0.

Indicates the lower bound of the ether type value range if the diffServMacAceEtherTypeOp is range(3).

This object is used to create a new row or modify or delete an existing row in this table. The status column has six defined values: The status column has six defined values: - active, which indicates that the conceptual row is available for use by the managed device; - notInService, which indicates that the conceptual row exists in the agent, but is unavailable for use by the managed device (see NOTE below); - notReady, which indicates that the conceptual row exists in the agent, but is missing information necessary in order to be available for use by the managed device; - createAndGo, which is supplied by a management station wishing to create a new instance of a conceptual row and to have its status automatically set to active, making it available for use by the managed device; - createAndWait, which is supplied by a management station wishing to create a new instance of a conceptual row (but not make it available for use by the managed device); and, - destroy, which is supplied by a management station wishing to delete all of the instances associated with an existing conceptual row. Whereas five of the six values (all except notReady) may be specified in a management protocol set operation, only three values will be returned in response to a management protocol retrieval operation: notReady, notInService or active. That is, when queried, an existing conceptual row has only three states: it is either available for use by the managed device (the status column has the value active); it is not available for use by the managed device, though the agent has sufficient information to make it so (the status column has the value notInService); or, it is not available for use by the managed device, and an attempt to make it so would fail because the agent has insufficient information (the state column has the value notReady). For a detailed description of this object, please refer to SNMPv2-TC MIB.

Indicates how a packets CoS is compared. If the object type of diffServMacAceCosOp is equal(2), diffServMacAceMinCos indicates the CoS value for comparing, and diffServMacAceCosBitmask is used as the bitmask of the CoS value. If the object type of diffServMacAceCosOp is range(3), diffServMacAceMinCos should be used as the lower bound of the CoS value.

Indicates the bitmask of the CoS value if the object type of diffServMacAceCosOp is equal(2). The default value is 0.

If the object type of diffServMacAceCosOp is equal(2), diffServMacAceMinCos indicates the CoS value for comparing. If the object type of diffServMacAceCosOp is range(3), diffServMacAceMinCos indicates the lower bound of the CoS value.

Table for action.

Entry for action.

An index that uniquely identifies an entry in the action table.

The bitmap value used to identify which action capabilities are enabled on the entry. The actionPktNewPri and actionPktNewDscp can not be enabled at the same time on the entry. The actionRedPktNewDscp and actionRedDrop can not be enabled at the same time on the entry.

Specifies the new priority value for the packet when the action is satisfied. If the actionPktNewPri bit of the diffServActionList is not enabled, this object can not be set.

Specifies the new DSCP value for the packet when the action is satisfied. If the actionPktNewDscp bit of the diffServActionList is not enabled, this object can not be set.

Specifies the new DSCP value for the red marking packet when the action is satisfied. If the actionRedPktNewDscp bit of the diffServActionList is not enabled, this object can not be set.

The actionRedDrop bit of the diffServActionList is for configuring this object. If the value of this object is enabled, the red marking packet will be dropped.

This object is used to create a new row, modify or delete an existing row in this table. The status column has six defined values: The status column has six defined values: - active, which indicates that the conceptual row is available for use by the managed device; - notInService, which indicates that the conceptual row exists in the agent, but is unavailable for use by the managed device (see NOTE below); - notReady, which indicates that the conceptual row exists in the agent, but is missing information necessary in order to be available for use by the managed device; - createAndGo, which is supplied by a management station wishing to create a new instance of a conceptual row and to have its status automatically set to active, making it available for use by the managed device; - createAndWait, which is supplied by a management station wishing to create a new instance of a conceptual row (but not make it available for use by the managed device); and, - destroy, which is supplied by a management station wishing to delete all of the instances associated with an existing conceptual row. Whereas five of the six values (all except notReady) may be specified in a management protocol set operation, only three values will be returned in response to a management protocol retrieval operation: notReady, notInService or active. That is, when queried, an existing conceptual row has only three states: it is either available for use by the managed device (the status column has the value active); it is not available for use by the managed device, though the agent has sufficient information to make it so (the status column has the value notInService); or, it is not available for use by the managed device, and an attempt to make it so would fail because the agent has insufficient information (the state column has the value notReady). For a detailed description of this object, please refer to SNMPv2-TC MIB.

Table for meter.

Entry for meter.

An entry that describes a single set of token bucket parameters.

The Metering algorithm associated with the Token Bucket parameters. The zeroDotZero indicates this is unknown.

The token-bucket rate, in kilobits per second (kbps).

The maximum number of bytes in a single transmission burst.

The time interval used with the token bucket.

This object is used to create a new row or modify or delete an existing row in this table. The status column has six defined values: The status column has six defined values: - active, which indicates that the conceptual row is available for use by the managed device; - notInService, which indicates that the conceptual row exists in the agent, but is unavailable for use by the managed device (see NOTE below); - notReady, which indicates that the conceptual row exists in the agent, but is missing information necessary in order to be available for use by the managed device; - createAndGo, which is supplied by a management station wishing to create a new instance of a conceptual row and to have its status automatically set to active, making it available for use by the managed device; - createAndWait, which is supplied by a management station wishing to create a new instance of a conceptual row (but not make it available for use by the managed device); and, - destroy, which is supplied by a management station wishing to delete all of the instances associated with an existing conceptual row. Whereas five of the six values (all except notReady) may be specified in a management protocol set operation, only three values will be returned in response to a management protocol retrieval operation: notReady, notInService or active. That is, when queried, an existing conceptual row has only three states: it is either available for use by the managed device (the status column has the value active); it is not available for use by the managed device, though the agent has sufficient information to make it so (the status column has the value notInService); or, it is not available for use by the managed device, and an attempt to make it so would fail because the agent has insufficient information (the state column has the value notReady). For a detailed description of this object, please refer to SNMPv2-TC MIB.

Table for IPv6 ACE.

Entry fo IPv6 ACE.

An index that uniquely identifies an entry in the IPv6 table.

The specified IP v6 ACE type. When the type of this entry is modified, then this entry will be auto-unbound from the diffServAclEntry and the not supporting field of this entry will be set 0.

Indicates the action to be taken if a packet matches this ACE.

Specifies the source IPv6 address.

The length (in bits) associated with the source IPv6 address prefix of this entry.

Specifies the destination IPv6 address. This object may not be modified if the associated diffServIpv6AceType object is equal to standard(1).

The length (in bits) associated with the destination IPv6 address prefix of this entry. This object may not be modified if the associated diffServIpv6AceType object is equal to standard(1).

Specifies the DSCP value to match against. This object may not be modified if the associated diffServIpv6AceType object is equal to standard(1).

This object is used to create a new row or modify or delete an existing row in this table. The status column has six defined values: The status column has six defined values: - active, which indicates that the conceptual row is available for use by the managed device; - notInService, which indicates that the conceptual row exists in the agent, but is unavailable for use by the managed device (see NOTE below); - notReady, which indicates that the conceptual row exists in the agent, but is missing information necessary in order to be available for use by the managed device; - createAndGo, which is supplied by a management station wishing to create a new instance of a conceptual row and to have its status automatically set to active, making it available for use by the managed device; - createAndWait, which is supplied by a management station wishing to create a new instance of a conceptual row (but not make it available for use by the managed device); and, - destroy, which is supplied by a management station wishing to delete all of the instances associated with an existing conceptual row. Whereas five of the six values (all except notReady) may be specified in a management protocol set operation, only three values will be returned in response to a management protocol retrieval operation: notReady, notInService or active. That is, when queried, an existing conceptual row has only three states: it is either available for use by the managed device (the status column has the value active); it is not available for use by the managed device, though the agent has sufficient information to make it so (the status column has the value notInService); or, it is not available for use by the managed device, and an attempt to make it so would fail because the agent has insufficient information (the state column has the value notReady). For a detailed description of this object, please refer to SNMPv2-TC MIB.

The conceptual table of all of diffServArpAceEntry.

The conceptual row for diffServArpAceTable.

The unique index of an ACE within an ACL.

Indicates the action to be taken if a packet matches this ACE. This object cannot not be configured when the status of the entry, diffServArpAceStatus, is active(1).

Indicates the packet type to be taken if a packet matches this ACE. This object can not be configured when the status of the entry, diffServArpAceStatus, is active(1).

The specified source ARP address. The packets source address is ANDed with the value of diffServArpAceSourceIpAddrBitmask and then compared against the value of this object. This object cannot be configured when the status of the entry, diffServArpAceStatus, is active(1).

The specified source ARP address mask. The packets destination address is ANDed with the value of diffServArpAceSourceIpAddr and then compared against the value of this object.

The specified destination IP address. The packets destination address is ANDed with the value of diffServArpAceDestIpAddrBitmask and then compared against the value of this object.

The specified destination IP address mask.

Indicates the 48-bit destination MAC address. The specified source MAC of the packet. The packets source MAC address is ANDed with the value of aceArpSourceMacAddrBitmask and then compared against the value of this object. This object cannot be configured when the status of the entry, diffServArpAceStatus, is active(1).

The specified source MAC address mask. This object cannot be configured when the status of the entry, diffServArpAceStatus, is active(1).

Indicates the 48-bit destination MAC address. The specified destination MAC of the packet. The packets destination MAC address is ANDed with the value of aceArpDestMacAddrBitmask and then compared against the value of this object. This object cannot be configured when the status of the entry, diffServArpAceStatus, is active(1).

The specified destination MAC address mask. This object cannot be configured when the status of the entry, diffServArpAceStatus, is active(1).

Indicates whether to log messages against the packets. This object cannot be configured when the status of the entry, diffServArpAceStatus, is active(1).

The status of this conceptual row entry. This object isused to manage the creation and deletion of conceptual rows. The status column has six defined values: - active, which indicates that the conceptual row is available for use by the managed device; - notInService, which indicates that the conceptual row exists in the agent, but is unavailable for use by the managed device (see NOTE below); - notReady, which indicates that the conceptual row exists in the agent, but is missing information necessary in order to be available for use by the managed device; - createAndGo, which is supplied by a management station wishing to create a new instance of a conceptual row and to have its status automatically set to active, making it available for use by the managed device; - createAndWait, which is supplied by a management station wishing to create a new instance of a conceptual row (but not make it available for use by the managed device); and, - destroy, which is supplied by a management station wishing to delete all of the instances associated with an existing conceptual row. Whereas five of the six values (all except notReady) may be specified in a management protocol set operation, only three values will be returned in response to a management protocol retrieval operation: notReady, notInService or active. That is, when queried, an existing conceptual row has only three states: it is either available for use by the managed device (the status column has value active); it is not available for use by the managed device, though the agent has sufficient information to make it so (the status column has value notInService); or, it is not available for use by the managed device, and an attempt to make it so would fail because the agent has insufficient information (the state column has value notReady). For a detailed description of this object, please refer to SNMPv2-TC MIB.

The conceptual table of all of diffServArpEntry.

The conceptual row for diffServArpTable.

The name of an ACL. Within a feature, a unique name is used to identify the list to which the entry belongs in the device.

The total number of policy control entries.

The free number of policy control entries.

TCAM utilization in hundredths of a percent.

This controls whether private VLAN is enabled.

A table containing private VLAN information on the VLANs which currently exist.

A conceptual row containing the private VLAN information on the VLANs for a particular management domain.

The VLAN ID of this private VLAN.

The VLAN type as defined for Private VLAN feature. Set the value to invalid(1) to destroy an entry. Set other values to create an entry. If an index already exists, set others to modifiy it. Note that a VLANs private VLAN type cannot be changed once it has any port members.

The VLAN ID of the associated primary VLAN used for the private VLAN feature if privateVlanVlanType has the value of isolated(3), community(4). If privateVlanVlanType has the value of primary(2), then this object has the value of 0. Note that one isolated VLAN can only be associated with one unique primary VLAN. One primary VLAN can only be associated with one isolated VLAN. One primary VLAN can be associated with multiple community VLANs; one community VLAN can only be associated with one unique primary VLAN.

A table containing information on the configuration of secondary VLANs on the device ports.

A conceptual row containing information of the configuration of secondary VLANs for each port. An entry is created by the managed system for each interface which can be configured as a private port for Private VLAN feature.

This is defined as the ifIndex.

The VLAN ID of the secondary VLAN configured on this private port. A private port is a port that allows ingress traffic of the secondary VLAN as well as egress traffic of its associated primary VLAN, but blocks the egress traffic of the isolated VLAN while allowing the egress traffic of the community or twoWayCommunity VLAN depending on the type of the secondary VLAN. Note that a port can join a secondary VLAN only after this secondary VLAN has been associated with a primary VLAN, i.e., the cpvlanVlanAssociatedPrimaryVlan has a non-zero value. The default value of 0 for this object means this port has not yet joined a secondary VLAN.

A table containing secondary VLAN to primary VLAN remapping information on ports of the device.

A conceptual row containing secondary VLAN to primary VLAN remapping information for each port. An entry is created by the managed system for each interface which can be configured as a promiscuous port for the private VLAN feature.

This is defined as ifIndex.

The primary VLAN ID of the promiscous port.

A string of octets containing one bit per VLAN in the management domain on this port. The first octet corresponds to VLANs with VlanIndexOrZero values of 0 through 7; the second octet to VLANs 8 through 15; etc. The most significant bit of each octet corresponds to the lowest value VlanIndexOrZero in that octet. Note that if the length of this string is less than 128 octets, any missing octets are assumed to contain the value zero. An NMS may omit any zero-valued octets from the end of this string in order to reduce SetPDU size, and the agent may also omit zero-valued trailing octets, to reduce the size of GetResponse PDUs.

A string of octets containing one bit per VLAN for VLANs with VlanIndexOrZero values of 1024 through 2047 in the management domain on this port. The first octet corresponds to VLANs with VlanIndexOrZero values of 1024 through 1031; the second octet to VLANs 1032 through 1039; etc. The most significant bit of each octet corresponds to the lowest value VlanIndexOrZero in that octet. Note that if the length of this string is less than 128 octets, any missing octets are assumed to contain the value zero. An NMS may omit any zero-valued octets from the end of this string in order to reduce SetPDU size, and the agent may also omit zero-valued trailing octets, to reduce the size of GetResponse PDUs. This object is only instantiated on devices which support the range of VlanIndexOrZero up to 4095.

A string of octets containing one bit per VLAN for VLANs with VlanIndexOrZero values of 2048 through 3071 in the management domain on this port. The first octet corresponds to VLANs with VlanIndexOrZero values of 2048 through 2055; the second octet to VLANs 2056 through 2063; etc. The most significant bit of each octet corresponds to the lowest value VlanIndexOrZero in that octet. Note that if the length of this string is less than 128 octets, any missing octets are assumed to contain the value zero. An NMS may omit any zero-valued octets from the end of this string in order to reduce SetPDU size, and the agent may also omit zero-valued trailing octets, to reduce the size of GetResponse PDUs. This object is only instantiated on devices which support the range of VlanIndexOrZero up to 4095.

A string of octets containing one bit per VLAN for VLANs with VlanIndexOrZero values of 3072 through 4095 in the management domain on this port. The first octet corresponds to VLANs with VlanIndexOrZero values of 3072 through 3079; the second octet to VLANs 3080 through 3087; etc. The most significant bit of each octet corresponds to the lowest value VlanIndexOrZero in that octet. Note that if the length of this string is less than 128 octets, any missing octets are assumed to contain the value zero. An NMS may omit any zero-valued octets from the end of this string in order to reduce SetPDU size, and the agent may also omit zero-valued trailing octets, to reduce the size of GetResponse PDUs. This object is only instantiated on devices which support the range of VlanIndexOrZero up to 4095.

Contains the settings for private VLAN Session.

A conceptual row in the privateVlanSession table.

The session ID that may specifiy certain entry in the table which contains private VLAN session information.

This is the list of uplink ports for a session of private VLAN. They should not overlap with the privateVlanSessionPortDownlink of the same session, and they also should not overlap with the privateVlanSessionPortUplink and the privateVlanSessionPortDownlink of other session.

This is the list of downlink ports for a session of private VLAN. They should not overlap with the privateVlanSessionPortUplink of the same session, and they also should not overlap with the privateVlanSessionPortUplink and the privateVlanSessionPortDownlink of other session.

Set this to valid(1) to create an entry. Sets this to invalid(2) to destroy an entry.

Sets this to blocking(2) to deny the traffic of uplink ports between different sessions. Set this to forwarding(1) to allow the traffic of uplink ports between different sessions.

The port security(MAC binding) Table.

The entry of portSecPortTable.

The port and the trunk (excluding trunk members) interface of the portTable. The interface identified by a particular value of this index is the same interface as identified by the same value of ifIndex in the IF-MIB.

Set enabled(1) to enable port security and set disabled(2) to disable port security.

The corresponding actions that will take place when a port is under intrusion, when this variable is set to none(1), no action will be performed, when this variable is set to trap(2), a swPortSecurityTrap trap will be sent, when this variable is set to shutdown(3), the port will shutdown, when this variable is set to trapAndShutdown(4), a swPortSecurityTrap will be sent and the port will shutdown.

The maximun number of MAC addresses that will be learned and locked. When we change the value of this variable, if the portSecPortStatus is enabled, we will discard all secure MAC and begin to learn again, until the number of MAC has reached this value, and only the secure MAC addresses can enter this port. If the portSecPortStatus is disabled, we will begin to learn the MAC, and auto enabled the portSecPortStatus when the MAC has reached this value.

Aauthentication port number for RADIUS server. When specified radius server do not set aauthentication port number, this value is used.

Accounting port number of RADIUS server. When specified radius server do not set accounting port number, this value is used.

Key for RADIUS. This variable can only be written. When this variable is read, it always returns a zero-length string. When specified radius server do not set key, this this value is used.

Maximum number of retransmissions for RADIUS. When specified radius server do not set maximum number of retransmissions, this value is used.

Timeout for RADIUS. When specified radius server do not set timeout, this value is used.

The table for RADIUS server.

The conceptual row for radiusServerTable.

The RADIUS server index in the table.

IP address of a RADIUS server.

Authentication port number of RADIUS server.

Accounting port number of RADIUS server.

Key for RADIUS. This variable can only be written. When this variable is read, it always returns a zero-length string.

Timeout for RADIUS.

Timeout for RADIUS.

Setting this to valid(1) creates an entry. Setting this to invalid(2) destroys an entry.

TCP port number of TACACS+ server. When specified TACACS+ server do not set TCP port number, this this value is used.

The encryption key used to encrpt the traffic between client and TACACS+ server. Do not use blank spaces in the string. This variable can only be set. When this variable is read, it always returns a zero-length string.When specified TACACS+ server do not set the encryption key , this this value is used.

The table for TACACS+ server.

The conceptual row for tacacsPlusServerTable.

TACACS+ server index.

IP address of a TACACS+ server.

TCP port number of a TACACS+ server.

The encryption key used to encrpt the traffic between client and TACACS+ server. Do not use blank spaces in the string. This variable can only be set. When this variable is read, it always returns a zero-length string.

Setting this to valid(1) creates an entry. Setting this to invalid(2) destroys an entry.

The maximum number of retransmissions for TACACS+.

Timeout for TACACS+.

The maximum number of retransmissions for TACACS+ global server.

Timeout for TACACS+ global server.

The status of Secure Shell Server. Set this value to enabled(1) to enable SSH server, set this value to disabled(2) to disable the SSH server.

The major version of the SSH Server.

The minor version of the SSH Server.

The time interval that the router waits for the SSH client to respond. The range is 1-120.

The number of attempts after which the interface is reset. The range is 1-5.

The table for Secure Shell Connection.

The conceptual row for sshConnInfoTable.

The connection ID of the Secure Shell Connection.

The SSH major version.

The SSH minor version.

The SSH connection State. negotiationStart(1) means the SSH is in its negotiation start state, authenticationStart(2) means the SSH is in authentication start state, sessionStart(3) means the SSH is in session start State.

The user name of the connection.

Set the variable to disconnect the connection, noDisconnect(1) will always be obtained when reading this variable.

The encryption type of the SSH.

The SSH server key size.

The RSA host key segment 1.

The RSA host key segment 2.

The RSA host key segment 3.

The RSA host key segment 4.

The RSA host key segment 5.

The RSA host key segment 6.

The RSA host key segment 7.

The RSA host key segment 8.

The DSA host key segment 1.

The DSA host key segment 2.

The DSA host key segment 3.

The DSA host key segment 4.

The DSA host key segment 5.

The DSA host key segment 6.

The DSA host key segment 7.

The DSA host key segment 8.

This variable is for host key generating. For the set behavior: Set it to genRsaKey(2) to generate the RSA host key, and to genDsaKey(3) to generate the DSA host key, if genBothKeys(4) is set, both RSA and DSA host key are generated. For the get behavior: You will get genRsaKey(2), genDsaKey(3) or genBothKeys(4) when the key gen action is in progress. otherwise, you will get noGen(1).

The result of the last KeyGen status. if no key gen action has been performed. you will get unknown(1) status.

To save host key from memory to flash. For the set behavior: Set it to save(2) to perform the save operation. For the get behavior: You will get save(1) when the save action is in progress. Otherwise, you will get noSave(1).

The result of the last savekey status. If no save action has been performed, you will get unknown(1) status.

To delete the host key. For the set behavior: Set it to delRsaKey(2) to delete the RSA host key, to delDsaKey(3) to delete the DSA host key, or to delBothKeys(4) to delete both RSA and DSA host key. For the get behavior: You will get delRsaKey(2), delDsaKey(3) or delBothKeys(4) when the delete operation is in progress. Otherwise, you will get noDel(1).

The conceptual table of all of sshUserEntry.

The conceptual row for sshUserTable.

User Name.

The RSA user key segment 1.

The RSA user key segment 2.

The RSA user key segment 3.

The RSA user key segment 4.

The RSA user key segment 5.

The RSA user key segment 6.

The RSA user key segment 7.

The RSA user key segment 8.

The DSA user key segment 1.

The DSA user key segment 2.

The DSA user key segment 3.

The DSA user key segment 4.

The DSA user key segment 5.

The DSA user key segment 6.

The DSA user key segment 7.

The DSA user key segment 8.

To delete the user key. For the set behavior: Set it to delRsaKey(2) to delete the RSA user key, to delDsaKey(3) to delete the DSA user key, or to delBothKeys(4) to delete both RSA and DSA user key. For the get behavior: You will get delRsaKey(2), delDsaKey(3) or delBothKeys(4) when the delete operation is in progress. Otherwise, you will get noDel(1).

The SHA1 finger print of the RSA host key.

The MD5 finger print of RSA host key.

The SHA1 finger print of the DSA host key.

The MD5 finger print of the DSA host key.

A list of IP address entries.

This entry includes an IP address range which the system will allow to connect to this device through SNMP.

The start IP address.

The end IP address.

Setting this to valid(1) creates an entry. Setting this to invalid(2) destroys an entry.

A list of IP address entries.

This entry includes an IP address range which the system will allow to connect to this device through SNMP.

The start IP address.

The end IP address.

Setting this to valid(1) creates an entry. Setting this to invalid(2) destroys an entry.

A list of IP address entries.

This entry includes an IP address range which the system will allow them to connect to this device through SNMP.

The start IP address.

The end IP address.

Setting this to valid(1) creates an entry. Setting this to invalid(2) destroys an entry.

Indicates whether user authentication failure/success traps should be generated.

The extension table of dot1xAuthConfigTable.

The entry of dot1xAuthConfigExtTable.

The operation mode of dot1x port which allows host connection to 802.1x-authorized ports.

The maximum number of hosts when the dot1xAuthConfigExtOperMode is multiHost(2). When the operation Mode is singleHost(1), we can ignore this variables.

Responses to intrusion when the authentication is failed; block-traffic(1) means that to block traffic when the authentication is failed and guest-vlan(2) means that to join to a guest VLAN when the authentication is failed.

The user name that will be sent to Request-Id packects.

The password that should be used when replying to a MD5 challenge.

The table of supplicant for port.

The entry of dot1xSuppConfigPortTable.

The port and the trunk (excluding trunk members) interface of the portTable. The interface identified by a particular value of this port index is the same interface identified by the same value of ifIndex in the IF-MIB.

Set enabled(1) to let the port act as a supplicant and will not respond to messages that are meant for an authenticator. Set disabled(2) to disable supplicant ability of the port.

When this variable is enabled(1), EAPOL frames will be forwarded to all ports where the Spanning Tree status is forwarding. When this variable is disabled(2), EAPOL frames will be discarded. EAPOL Pass-Through operates when the global status of 802.1X is disabled.

Contains the settings needed for accounting.

A conceptual row in the aaaMethodTable.

Specifies the index for the entry.

Name for the method.

Name for the server to use, pointing to aaaRadiusGroupName or aaaTacacsPlusGroupName.

start-stop(1),sends a start accounting notice at the beginning of a process and a stop accounting notice at the end of a process. The start accounting record is sent in the background. The requested user process begins regardless of whether or not the start accounting notice was received by the accounting server.

Set to 1 to initiate the aaaMethodTable, 2 to destroy the table.

dot1x(1): Provides accounting service for 802.1x activity; exec(2): Provides accounting service for EXEC connection such as Telnet, SSH or console; commands(3): Provides accounting service for command privileges.

Specifies the privilege level for the entry. When aaaMethodClientType is in the mode of command(3), the privilege level is enabled to be accessed.

Uses a subset of RADIUS servers for accounting as defined by the server group

A conceptual row of aaaRadiusGroupEntry.

Specifies the index for the entry.

Identifies which RADIUS sever to use, each bit points to each radius server. 80 (1000 0000) point to radius server 1, C0 (11000000) points to radius 1 and radius 2.

Uses a subset of servers for accounting as defined by the server group. The same name as aaaTacasPlusGroupName is not allowed.

Set to 1 to initiate the aaaRadiusGroupTable, 2 to destroy the table.

Uses a subset of TACACS+ servers for accounting as defined by the server group

A conceptual row of aaaTacacsPlusGroupEntry.

Specifies the index for the entry.

Identifies which TACACS+ sever to use.

Uses a subset of servers for accounting as defined by the server group. We cant have the same name as aaaRadiusGroupName

Set to 1 to initiate the aaaRadiusGroupTable, 2 to destroy the table.

Specifies the periodic interim accounting records to be sent to the accounting server and periodic intervals to send accounting update records(in minutes).

Specifies an interface or a set of interfaces that the accounting method list will be applied to.

A conceptual row of aaaAccountTable.

Defined as the ifIndex

Specifies the name of the list of accounting methods to use. If no method name is specified, the system uses the default.

Get the protocol type of a list method to know which server (RADIUS or TACACS+) is in use.

Set to 1 to initiate the aaaRadiusGroupTable, 2 to destroy the table.

Contains the settings needed for command privileges.

A conceptual row in the aaaCommandPrivilegesTable.

Specifies the privilege level index for the entry.

Specifies the interface index for the entry.

Specifies the method name in the lists under the mode of command privileges.

Specifies an interface or a set of interfaces that the accounting method list will be applied to.

A conceptual row of aaaAccExecTable.

The method of accessing CLI management.

Specifies the name of the list of accounting methods to use. If no method name is specified, the system uses the default.

A table contains the information of network access about every port.

A conceptual row in the networkAccessPort table.

The port and the trunk (excluding trunk members) interface of the portTable. The interface identified by a particular value of this port index is the same interface identified by the same value of ifIndex in the IF-MIB.

Specifies the maximum number of authenticated MAC address.

Specifies the secure port mode. enabled(1) means that Mac address authentication is used and disabled(2) means that the authentication is disabled.

Specifies the MAC filter ID, Set this variable to zero to disable MAC filter.

Specifies the guest VLAN ID. To disable the VLAN, set the value to 0.

Set this object to enabled(1) to enable link detection. Set this object to disabled(2) to disable link detection.

Specifies the detection event for a port. Set this object to linkUp(1) to detect a link-up event. Set this object to linkDown(2) to detect a link-down event. Set this object to linkUpDown(3) to detect both link up and link down events.

Specifies the action to take when a networkAccessPortLinkDetection event is triggered. Set this object to trap(1) to send a trap when a networkAccessPortLinkDetection event is triggered. Set this object to shutDown(2) to shut down the port when a networkAccessPortLinkDetection event is triggered. Set this object to trapAndShutDown(3) to send a trap and shut down the port when a networkAccessPortLinkDetection event is triggered.

Set this object to enabled(1) to enable Dynamic QoS. Set this object to disabled(2) to disable Dynamic QoS.

Attribute for clearing Mac address. Specifies the certain attribute in Mac address table. all(1) indicates both reauthorized and learnt secure MAC address; static(2) indicates reauthorized MAC address; dynamic(3) indicates learnt secure MAC address.

Specifies MAC address in the MAC address table for clearing MAC address. 000000 represents that no MAC address is specified.

The specifies port in the MAC address table for clearing MAC address. 0 represents that no port is specified.

Action for clearing MAC address . When setting this object to clear(2) to begin the clearing MAC address operation, a particular MAC address is cleared from the MAC address table. When the action is finshed whether or not it is successful or no action is taken, the value of this object is always noclear(1).

Contains the information of network access MAC addresses.

A conceptual row in the networkAccessMacAddress table.

Specifies the authenticated MAC address.

Specifies the port of authenticated MAC address.

This object indicates the type of IP address denoted in networkAccessMacAddressRadiusServerInetAddress type.

Displays the IP address of radius server that authenticates the specified Mac address.

Displays the authentication time of the authenticated MAC address. The following form is a text string; yyyy MMm DDd HHh MMm SSs. yyyy is a four-digit year. MM is a month. A single-digit month is preceded by a zero. DD is the day of a month. A single-digit day is preceded by the value zero. HH, MM and SS are hour, minute, and second respectively. A single-digit hour, minute, and second are preceded by a zero value. An example is: 2001y 01m 01d 00h 04m 43s.

Displays the attribute of an authenticated MAC address. static(1) indicates resauthorized secure MAC address. dynamic(2) indicates learnt secure MAC address.

Set this object to enabled(1) to enable MAC address aging feature. Set this object to disabled(2) to disable MAC address aging feature.

Contains the settings for MAC filter.

A conceptual row in the networkAccessMacFilterWithMaskTable.

Specifies the MAC filter ID.

Specifies the MAC address to be filtered.

Specifies the MAC mask to be filtered.

Set this object to valid(1) to create an entry. Set this object to invalid(2) to destroy an entry.

Specifies the reauthentication time period.

Contains the settings for mac authentication of each port.

A conceptual row in the macAuthPort table.

The port and the trunk (including trunk members) interface of the port table. The interface identified by a particular value of this index is the same interface identified by the same value of ifIndex in the IF-MIB.

Specifies the maximum number of authenticated MAC addresses for MAC authentication.

Responses to intrusion when the authentication is failed. block-traffic(1) : denies network access to an unauthorized client; pass-traffic(2) : allows unauthorized clients to the access network.

Sets enabled(1) to enable WebAuth feature and sets disabled(2) to disable WebAuth feature.

For authenticated success users, they can use internet service during a certain period. Whenever this period expires, users need to be re-authenticated again. This period is called session time.

Specifies the re-authentication interval when the authentication fail attempts reach the webAuthLoginAttempts value. Unauthenticated user wont be authenticated during this period.

Specifies the counter that configures the authentication fail times for a client. If authentication fail times reaches the specified value, the client are not allowed to login for some period.

Specifies the port to re-authenticate for all of its authenticated hosts.

Specifies host type to re-authenticate.

Specificies host to re-authenticate.

Action for WebAuth re-authenication. When setting this object to reauth(2) to begin the re-authenticated operation, a particular user is re-authenticated. When the action is finshed whether it is successfully, or no action is taken, the value of this object is always noReauth(1).

Contains the settings for web authentication of each port.

A conceptual row in the webAuthPortConfigTable.

The port number of the port that may specify certain entry in the table which contains web authentication information.

Sets enabled(1) to enable web authentication feature for each port and sets disabled(2) to disable web authentication for each port.

Displays the authenticated host counts for each port

Contains the information for web authentication of each port.

A conceptual row in the webAuthPortTable.

The port number for which this entry contains web authentication information.

The authentication success number of port for which this entry contains web authentication information.

This object indicates the type of IP address denoted in webAuthPortInfoIpAddress type.

The IP address which may specify the entry containing web authentication information.

The remaining session time for authenticated hosts. During this period, they may use internet resource. When the session time expires, they will need to re-authenticate again.

Displays the web authentication status for each port. authenticated (1) means the user is authenticated.

Whether the system log is enabled.