attributetype ( 1.3.6.1.4.1.23812.1.0 NAME 'SrcIPStart'
	DESC 'An integer defining the beginning of an IP src scope'
	EQUALITY integerMatch
	ORDERING integerOrderingMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.23812.1.1 NAME 'SrcIPEnd'
	DESC 'An integer defining the end of an IP src scope'
	EQUALITY integerMatch
	ORDERING integerOrderingMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.23812.1.2 NAME 'DstIPStart'
	DESC 'An integer defining the start of an IP dst scope'
	EQUALITY integerMatch
	ORDERING integerOrderingMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.23812.1.3 NAME 'DstIPEnd'
	DESC 'An integer defining the end of an IP dst scope'
	EQUALITY integerMatch
	ORDERING integerOrderingMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.23812.1.4 NAME 'SrcPortStart'
	DESC 'An integer defining the start of a Port src scope'
	EQUALITY integerMatch
	ORDERING integerOrderingMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.23812.1.5 NAME 'SrcPortEnd'
	DESC 'An integer defining the end of a Port dst scope'
	EQUALITY integerMatch
	ORDERING integerOrderingMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.23812.1.6 NAME 'DstPortStart'
	DESC 'An integer defining the start of a Port dst scope'
	EQUALITY integerMatch
	ORDERING integerOrderingMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.23812.1.7 NAME 'DstPortEnd'
	DESC 'An integer defining the end of a Port dst scope'
	EQUALITY integerMatch
	ORDERING integerOrderingMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.23812.1.8 NAME 'Proto'
	DESC 'An integer defining the IP protocol'
	EQUALITY integerMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.27)

attributetype ( 1.3.6.1.4.1.23812.1.9 NAME 'Decision'
	DESC 'An integer defining the ACL Decision'
	EQUALITY integerMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.23812.1.10 NAME 'Group'
	DESC 'An integer defining a group id'
	EQUALITY integerMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.27)

attributetype ( 1.3.6.1.4.1.23812.1.11 NAME 'DstPort'
	DESC 'An integer defining a Port dst'
	EQUALITY integerMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.27)

attributetype ( 1.3.6.1.4.1.23812.1.12 NAME 'OsName'
	DESC 'Operating System Name'
	EQUALITY caseIgnoreMatch
	SUBSTR caseIgnoreSubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256})

attributetype ( 1.3.6.1.4.1.23812.1.13 NAME 'OsVersion'
	DESC 'Operating System Version'
	EQUALITY caseIgnoreMatch
	SUBSTR caseIgnoreSubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256})

attributetype ( 1.3.6.1.4.1.23812.1.14 NAME 'OsRelease'
	DESC 'Operating System Release'
	EQUALITY caseIgnoreMatch
	SUBSTR caseIgnoreSubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256})

attributetype ( 1.3.6.1.4.1.23812.1.15 NAME 'AppName'
	DESC 'Application Name'
	EQUALITY caseIgnoreMatch
	SUBSTR caseIgnoreSubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256})

attributetype ( 1.3.6.1.4.1.23812.1.16 NAME 'AppSig'
	DESC 'Application Signature'
	EQUALITY caseIgnoreMatch
	SUBSTR caseIgnoreSubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256})

attributetype ( 1.3.6.1.4.1.23812.1.17 NAME 'SrcPort'
	DESC 'An integer defining a Port src'
	EQUALITY integerMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.27)

attributetype ( 1.3.6.1.4.1.23812.1.18 NAME 'TimeRange'
	DESC 'Name of Time Range to apply'
	EQUALITY caseIgnoreMatch
	SUBSTR caseIgnoreSubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.23812.1.19 NAME 'AclFlags'
	DESC 'An integer defining acl flags'
	EQUALITY integerMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.27)

attributetype ( 1.3.6.1.4.1.23812.1.20 NAME 'AclWeight'
	DESC 'An integer defining acl weight'
	EQUALITY integerMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.27)

attributetype ( 1.3.6.1.4.1.23812.1.21 NAME 'User'
	DESC 'An integer defining a user id'
	EQUALITY integerMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.27)

attributetype ( 1.3.6.1.4.1.23812.1.22 NAME 'AuthQuality'
	DESC 'An integer defining needed auth quality of packet'
	EQUALITY integerMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.27)

attributetype ( 1.3.6.1.4.1.23812.1.23 NAME 'InDev'
	DESC 'Input Device'
	EQUALITY caseIgnoreMatch
	SUBSTR caseIgnoreSubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.23812.1.24 NAME 'PhysInDev'
	DESC 'Physical Input Device'
	EQUALITY caseIgnoreMatch
	SUBSTR caseIgnoreSubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.23812.1.25 NAME 'OutDev'
	DESC 'Output Device'
	EQUALITY caseIgnoreMatch
	SUBSTR caseIgnoreSubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.23812.1.26 NAME 'PhysOutDev'
	DESC 'Physical Output Device'
	EQUALITY caseIgnoreMatch
	SUBSTR caseIgnoreSubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} SINGLE-VALUE)

objectclass ( 1.3.6.1.4.1.23812.2.1 NAME 'NuAccessControlList'
	DESC 'An IP Acl'
	MUST (cn $ SrcIPStart $ SrcIPEnd $ DstIPStart $ DstIPEnd $ Decision $ DstPortStart $ DstPortEnd )
	MAY (Proto $ SrcPortStart $ SrcPortEnd $ DstPort $ SrcPort  $ OsName $ OsVersion $ OsRelease $ AppName $ AppSig $ User $ Group $ description $ TimeRange $ AclFlags $ AclWeight $ InDev $ PhysInDev $ OutDev $ PhysOutDev) )