ACC-IPFILTER

All MIBs › ACC-IPFILTER

Category: IP and Core Protocols, Vendor: ACC/Ericsson

Description: Handles IP packet filtering (access control list) configuration on ACC/Ericsson routers, supporting permit/deny rules based on address and protocol.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ACC-IPFILTER?

This MIB manages IP packet-filtering (access control list) configuration on ACC/Ericsson routers, defining permit/deny rules based on source/destination address and protocol. It is purely a security/configuration MIB governing which traffic is allowed or blocked at the router. It doesn't expose hardware or software health telemetry itself; no sample objects were supplied to confirm whether it includes rule-hit counters, but if present such counters would let an operator verify filter rules are actively matching traffic as intended, useful for confirming a security policy is working or diagnosing unexpectedly blocked traffic. It parallels standard IP access-list concepts found in many vendor and IETF filtering MIBs. It's deployed on ACC/Ericsson routers used for perimeter or inter-network traffic filtering. Network engineers evaluating or troubleshooting this functionality can download the ACC-IPFILTER file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in ACC-IPFILTER. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

ACC/Ericsson routers

Monitoring Examples

No sample object names were provided for this module; typically, an admin would review the configured permit/deny rule set (source/destination address, protocol) applied to an interface, and if rule-hit or match counters are exposed, would poll them to confirm a specific filter rule is actively blocking or passing the expected traffic, or to detect a rule silently failing to match due to misconfiguration.

What Can Be Monitored

configured IP filter/ACL rules
permit/deny rule matches (if exposed)

Imported Objects

From ACC-MIB

DisplayString
IfIndex
RowStatus
SmdsAddress
accBRG	OBJECT-IDENTITY

From ACC-SYSTEM

accTrapLogSeqNum

OBJECT-TYPE

From RFC1155-SMI

Counter
IpAddress
OBJECT-TYPE
TimeTicks

OIDs

OID symbolic	OID numeric	Type	Access	Description
accIpFilter	1.3.6.1.4.1.5.1.1.18
INT accIpSrcRouting	1.3.6.1.4.1.5.1.1.18.1	INTEGER	read-write	Source Routing mode
accIpFiltTable	1.3.6.1.4.1.5.1.1.18.2		not-accessible	List of IP filters Entries added/deleted by management action. Setting any object to NULL deletes the entry
accIpFiltEntry	1.3.6.1.4.1.5.1.1.18.2.1		not-accessible	Specific IP filter
IP accIpFiltDAddr	1.3.6.1.4.1.5.1.1.18.2.1.1	IpAddress	read-write	Destination Address
IP accIpFiltDNetMask	1.3.6.1.4.1.5.1.1.18.2.1.2	IpAddress	read-write	Destination Network Mask
IP accIpFiltSAddr	1.3.6.1.4.1.5.1.1.18.2.1.3	IpAddress	read-write	Source Address
IP accIpFiltSNetMask	1.3.6.1.4.1.5.1.1.18.2.1.4	IpAddress	read-write	Source Network Mask
OCT accIpFiltParm	1.3.6.1.4.1.5.1.1.18.2.1.5	OCTET STRING	read-write	Filter parameters; Byte 0 is Operation 1 [0,1,2] = [None, !,=] Bytes 1,2 is Protocol Byte 3 is Operation 2 [0 = none [1,2,3,4] = both [!, , =] [5,6,7,8] = destination [!, , =] [9,10,11,12] = source [!, , =] Bytes 4,5 is UDP/TCP port number
INT accIpFiltDisp	1.3.6.1.4.1.5.1.1.18.2.1.6	INTEGER	read-write	Disposition of packets meeting the filter criteria. Packets not discarded will be output with the selected relative transmission priority.
accIpSmdsAtTable	1.3.6.1.4.1.5.1.1.18.3		not-accessible	The IP/SMDS address translation table. Contains the IP address, Local SNI, IP multicast address (E.164 format), and ARP multicast address (E.164 format).
accIpSmdsAtEntry	1.3.6.1.4.1.5.1.1.18.3.1		not-accessible	An IP/SMDS address translation table entry. Each entry contains an IP address and necessary SMDS translation parameters.
IP accIpSmdsAtIpAddr	1.3.6.1.4.1.5.1.1.18.3.1.1	IpAddress	read-only	The IP address associated with the Local SNI, IP Multicast and ARP Multicast SMDS addresses.
ADR accIpSmdsAtSmdsAddr	1.3.6.1.4.1.5.1.1.18.3.1.2	SmdsAddress	read-write	The local SNI SMDS address in E.164 address format (e.g., 0xC18005551212FFFF)
ADR accIpSmdsAtIpMcast	1.3.6.1.4.1.5.1.1.18.3.1.3	SmdsAddress	read-write	The IP Multicast SMDS Group address in E.164 address format (e.g.,0xE18005551111FFFF)
ADR accIpSmdsAtArpMcast	1.3.6.1.4.1.5.1.1.18.3.1.4	SmdsAddress	read-only	The ARP Multicast SMDS Group address in E.164 address format (e.g.,0xE18005551111FFFF)
INT accIpSubDirBcast	1.3.6.1.4.1.5.1.1.18.4	INTEGER	read-write	Packets with an all-ones host portion of the destination IP address are called Subnet Directed Broadcast (or Limited Broadcast) packets. This object selects if these packets are to be broadcast onto the destination subnet.
accIpIfFiltDispTable	1.3.6.1.4.1.5.1.1.18.5		not-accessible	List of revised IP filters which add support for filtering by source or destination interface.
accIpIfFiltDispEntry	1.3.6.1.4.1.5.1.1.18.5.1		not-accessible	An entry in the revised IP filter table.
INT accIpIfFiltDispIfIndex	1.3.6.1.4.1.5.1.1.18.5.1.1	INTEGER	read-only	Interface index to which this filter applies, or zero for global filters. This integer identifies the row of the system wide interfaces table associated with the particular interface.
INT accIpIfFiltDispPktDir	1.3.6.1.4.1.5.1.1.18.5.1.2	INTEGER	read-only	Stream direction to which filter is applied. Input and Output require an interface to be specified. Global indicates all interfaces and both directions. Input and Global filters are applied prior to Output filters. NOTE: a packet originating in the router may not pass through the filter logic.
INT accIpIfFiltDispSeqNum	1.3.6.1.4.1.5.1.1.18.5.1.3	INTEGER	read-only	An internally generated sequence number used to allow the Filter display table to be retruned in the order the filters are applied (most specific to least specific) without violating SNMP ordering rules. Sequence numbers for all filters may change with a single addition or modification of a filter. Sequence numbers, once assigned, are not assigned again. This number has no intrinsic meaning.
IP accIpIfFiltDispDAddr	1.3.6.1.4.1.5.1.1.18.5.1.4	IpAddress	read-only	Destination Address
IP accIpIfFiltDispDNetMask	1.3.6.1.4.1.5.1.1.18.5.1.5	IpAddress	read-only	Destination Network Mask
IP accIpIfFiltDispSAddr	1.3.6.1.4.1.5.1.1.18.5.1.6	IpAddress	read-only	Source Address
IP accIpIfFiltDispSNetMask	1.3.6.1.4.1.5.1.1.18.5.1.7	IpAddress	read-only	Source Network Mask
INT accIpIfFiltDispOp1	1.3.6.1.4.1.5.1.1.18.5.1.8	INTEGER	read-only	Logical operation to be performed on the next object/parameter (protocol). If 'none', the filter will match any protocol.
INT accIpIfFiltDispProtocol	1.3.6.1.4.1.5.1.1.18.5.1.9	INTEGER	read-only	Ip protocol on which to filter.
INT accIpIfFiltDispOp2	1.3.6.1.4.1.5.1.1.18.5.1.10	INTEGER	read-only	Logical operation to be performed on the next object/parameter (port).
INT accIpIfFiltDispUDPTCPPort	1.3.6.1.4.1.5.1.1.18.5.1.11	INTEGER	read-only	The UDP or TCP port number to which the previous logical operation is to apply.
INT accIpIfFiltDispDispos	1.3.6.1.4.1.5.1.1.18.5.1.12	INTEGER	read-only	Disposition of packets meeting the filter criteria. Packets not discarded will be output with the selected relative transmission priority. The log option causes a rate selected trap to be generated.
CTR accIpIfFiltDispMatches	1.3.6.1.4.1.5.1.1.18.5.1.13	Counter	read-only	The number of times this filter criteria has been applied.
TIK accIpIfFiltDispLastMatchTime	1.3.6.1.4.1.5.1.1.18.5.1.14	TimeTicks	read-only	The value of sysUpTime the last time this filter was applied.
OCT accIpIfFiltDispMatchPkt	1.3.6.1.4.1.5.1.1.18.5.1.15	OCTET STRING	read-only	This object is used exclusivley for returning information in a trap about the last packet that was filtered. A query of this object will return an octet string of length zero.
accIpIfFiltEditTable	1.3.6.1.4.1.5.1.1.18.6		not-accessible	A transient table which is used to create/delete /modify an entry in the IP filter database.
accIpIfFiltEditEntry	1.3.6.1.4.1.5.1.1.18.6.1		not-accessible	An entry in the revised IP filter table.
INT accIpIfFiltEditIndex	1.3.6.1.4.1.5.1.1.18.6.1.1	INTEGER	read-only	An arbitrary number assigned to the record that is currently being edited.
INT accIpIfFiltEditAction	1.3.6.1.4.1.5.1.1.18.6.1.2	INTEGER	read-write	The action to be performed with this record. In the future the field 'pending' may be added.
INT accIpIfFiltEditIfIndex	1.3.6.1.4.1.5.1.1.18.6.1.3	INTEGER	read-write	Interface index to which this filter applies, or zero for global filters. This integer identifies the row of the system wide interfaces table associated with the particular interface.
INT accIpIfFiltEditPktDir	1.3.6.1.4.1.5.1.1.18.6.1.4	INTEGER	read-write	Stream direction to which filter is applied. Input and Output require an interface to be specified. Global indicates all interfaces and both directions. Input and Global filters are applied prior to Output filters. NOTE: a packet originating in the router may not pass through the filter logic.
IP accIpIfFiltEditDAddr	1.3.6.1.4.1.5.1.1.18.6.1.5	IpAddress	read-write	Destination Address
IP accIpIfFiltEditDNetMask	1.3.6.1.4.1.5.1.1.18.6.1.6	IpAddress	read-write	Destination Network Mask
IP accIpIfFiltEditSAddr	1.3.6.1.4.1.5.1.1.18.6.1.7	IpAddress	read-write	Source Address
IP accIpIfFiltEditSNetMask	1.3.6.1.4.1.5.1.1.18.6.1.8	IpAddress	read-write	Source Network Mask
INT accIpIfFiltEditOp1	1.3.6.1.4.1.5.1.1.18.6.1.9	INTEGER	read-write	Logical operation to be performed on the next object/parameter (protocol). If 'none', the filter will match any protocol.
INT accIpIfFiltEditProtocol	1.3.6.1.4.1.5.1.1.18.6.1.10	INTEGER	read-write	Ip protocol on which to filter.
INT accIpIfFiltEditOp2	1.3.6.1.4.1.5.1.1.18.6.1.11	INTEGER	read-write	Logical operation to be performed on the next object/parameter (port).
INT accIpIfFiltEditUDPTCPPort	1.3.6.1.4.1.5.1.1.18.6.1.12	INTEGER	read-write	The UDP or TCP port number to which the previous logical operation is to apply.
INT accIpIfFiltEditDispos	1.3.6.1.4.1.5.1.1.18.6.1.13	INTEGER	read-write	Disposition of packets meeting the filter criteria. Packets not discarded will be output with the selected relative transmission priority. The log option causes a rate sensitive trap to be generated.
accIpNamedFiltTable	1.3.6.1.4.1.5.1.1.18.7		not-accessible	Table of port-independent named IP filters
accIpNamedFiltEntry	1.3.6.1.4.1.5.1.1.18.7.1		not-accessible	Entry for a single named port-independent named IP filter
OCT accIpNamedFiltName	1.3.6.1.4.1.5.1.1.18.7.1.1	OCTET STRING	read-write	The name of the filter entry.
INT accIpNamedFiltAction	1.3.6.1.4.1.5.1.1.18.7.1.2	INTEGER	read-write	Action to perform on filter entry: ADD or DELETE
INT accIpNamedFiltPktDir	1.3.6.1.4.1.5.1.1.18.7.1.3	INTEGER	read-write	Direction filter is to be applied in. Filters which are applied globally ignore this parameter
IP accIpNamedFiltDAddr	1.3.6.1.4.1.5.1.1.18.7.1.4	IpAddress	read-write	Destination address to apply in filter
IP accIpNamedFiltDNetMask	1.3.6.1.4.1.5.1.1.18.7.1.5	IpAddress	read-write	Desintation network mask to apply in filter
IP accIpNamedFiltSAddr	1.3.6.1.4.1.5.1.1.18.7.1.6	IpAddress	read-write	Source address to apply in filter
IP accIpNamedFiltSNetMask	1.3.6.1.4.1.5.1.1.18.7.1.7	IpAddress	read-write	Source network mask to apply in filter
INT accIpNamedFiltOp1	1.3.6.1.4.1.5.1.1.18.7.1.8	INTEGER	read-write	First operator to apply in filter
INT accIpNamedFiltProtocol	1.3.6.1.4.1.5.1.1.18.7.1.9	INTEGER	read-write	Protocol to apply in filter
INT accIpNamedFiltOp2	1.3.6.1.4.1.5.1.1.18.7.1.10	INTEGER	read-write	The secondary operator to apply
INT accIpNamedFiltUDPTCPPort	1.3.6.1.4.1.5.1.1.18.7.1.11	INTEGER	read-write	UDP/TCP port number to apply in filter
INT accIpNamedFiltDisp	1.3.6.1.4.1.5.1.1.18.7.1.12	INTEGER	read-write
CTR accIpNamedFiltMatches	1.3.6.1.4.1.5.1.1.18.7.1.13	Counter	read-only	Count of times this filter has been matched
TIK accIpNamedFiltLastMatch	1.3.6.1.4.1.5.1.1.18.7.1.14	TimeTicks	read-only	Time/Date that filter was last matched
INT accIpNamedFiltApplId	1.3.6.1.4.1.5.1.1.18.7.1.15	INTEGER	read-only	User defined identification number associated with an application. (i.e, telnet, ftp)
OCT accIpNamedFiltSAIndex	1.3.6.1.4.1.5.1.1.18.7.1.16	OCTET STRING	read-write	Points to a Security Association used for one communication flow
INT pysmiFakeCol349	1.3.6.1.4.1.5.1.1.18.7.1.4294967295	INTEGER	not-accessible
accIpFiltApplTable	1.3.6.1.4.1.5.1.1.18.8		not-accessible	Table showing the list of IP filters that will be applied on a given interface, shown in the order that they will be applied. This is essentially an expansion of the filter profile to filter entries on a per interface basis.
accIpFiltApplEntry	1.3.6.1.4.1.5.1.1.18.8.1		not-accessible	A single entry in the filter application table.
INT accIpFiltApplIfIndex	1.3.6.1.4.1.5.1.1.18.8.1.1	INTEGER	read-only	Interface index to which this filter applies, or zero for global filters. This integer identifies the row of the system wide interfaces table associated with the particular interface.
INT accIpFiltApplPktDir	1.3.6.1.4.1.5.1.1.18.8.1.2	INTEGER	read-only	Stream direction to which filter is applied. Input and Output require an interface to be specified. Global indicates all interfaces and both directions. Input and Global filters are applied prior to Output filters. NOTE: a packet originating in the router may not pass through the filter logic.
INT accIpFiltApplSeqNum	1.3.6.1.4.1.5.1.1.18.8.1.3	INTEGER	read-only	An internally generated sequence number used to allow the Filter display table to be returned in the order the filters are applied (most specific to least specific) without violating SNMP ordering rules. Sequence numbers for all filters may change with a single addition or modification of a filter. Sequence numbers, once assigned, are not assigned again. This number has no intrinsic meaning.
STR accIpFiltApplName	1.3.6.1.4.1.5.1.1.18.8.1.4	DisplayString	read-only	The name of the filter entry.
CTR accIpFiltApplMatches	1.3.6.1.4.1.5.1.1.18.8.1.5	Counter	read-only	Count of times this filter has been matched
TIK accIpFiltApplLastMatch	1.3.6.1.4.1.5.1.1.18.8.1.6	TimeTicks	read-only	Time/Date that filter was last matched

RFC description

Manages IP packet filtering (access control list) configuration on ACC/Ericsson routers, providing permit/deny rules based on address and protocol.

Start monitoring ACC/Ericsson WAN access routers (legacy) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ACC-IPFILTER

What Is ACC-IPFILTER?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description