ACC-IPFILTER

All MIBs › ACC-IPFILTER

Category: IP and Core Protocols, Vendor: ACC/Ericsson

Description: Handles IP packet filtering (access control list) configuration on ACC/Ericsson routers, supporting permit/deny rules based on address and protocol.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ACC-IPFILTER?

This MIB manages IP packet-filtering (access control list) configuration on ACC/Ericsson routers, defining permit/deny rules based on source/destination address and protocol. It is purely a security/configuration MIB governing which traffic is allowed or blocked at the router. It doesn't expose hardware or software health telemetry itself; no sample objects were supplied to confirm whether it includes rule-hit counters, but if present such counters would let an operator verify filter rules are actively matching traffic as intended, useful for confirming a security policy is working or diagnosing unexpectedly blocked traffic. It parallels standard IP access-list concepts found in many vendor and IETF filtering MIBs. It's deployed on ACC/Ericsson routers used for perimeter or inter-network traffic filtering. Network engineers evaluating or troubleshooting this functionality can download the ACC-IPFILTER file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in ACC-IPFILTER. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

ACC/Ericsson routers

Monitoring Examples

No sample object names were provided for this module; typically, an admin would review the configured permit/deny rule set (source/destination address, protocol) applied to an interface, and if rule-hit or match counters are exposed, would poll them to confirm a specific filter rule is actively blocking or passing the expected traffic, or to detect a rule silently failing to match due to misconfiguration.

What Can Be Monitored

configured IP filter/ACL rules
permit/deny rule matches (if exposed)

Imported Objects

From ACC-MIB

DisplayString
IfIndex
RowStatus
SmdsAddress
accBRG	OBJECT-IDENTITY

From ACC-SYSTEM

accTrapLogSeqNum

OBJECT-TYPE

From RFC1155-SMI

Counter
IpAddress
OBJECT-TYPE
TimeTicks

OIDs

OID symbolic	OID numeric	Type	Access	Description
accIpFiltApplEntry	1.3.6.1.4.1.5.1.1.18.8.1		not-accessible	A single entry in the filter application table.
INT accIpFiltApplIfIndex	1.3.6.1.4.1.5.1.1.18.8.1.1	INTEGER	read-only	Interface index to which this filter applies, or zero for global filters. This integer identifies the row of the system wide interfaces table associated with the particular interface.
TIK accIpFiltApplLastMatch	1.3.6.1.4.1.5.1.1.18.8.1.6	TimeTicks	read-only	Time/Date that filter was last matched
CTR accIpFiltApplMatches	1.3.6.1.4.1.5.1.1.18.8.1.5	Counter	read-only	Count of times this filter has been matched
STR accIpFiltApplName	1.3.6.1.4.1.5.1.1.18.8.1.4	DisplayString	read-only	The name of the filter entry.
INT accIpFiltApplPktDir	1.3.6.1.4.1.5.1.1.18.8.1.2	INTEGER	read-only	Stream direction to which filter is applied. Input and Output require an interface to be specified. Global indicates all interfaces and both directions. Input and Global filters are applied prior to Output filters. NOTE: a packet originating in the router may not pass through the filter logic.
INT accIpFiltApplSeqNum	1.3.6.1.4.1.5.1.1.18.8.1.3	INTEGER	read-only	An internally generated sequence number used to allow the Filter display table to be returned in the order the filters are applied (most specific to least specific) without violating SNMP ordering rules. Sequence numbers for all filters may change with a single addition or modification of a filter. Sequence numbers, once assigned, are not assigned again. This number has no intrinsic meaning.
accIpFiltApplTable	1.3.6.1.4.1.5.1.1.18.8		not-accessible	Table showing the list of IP filters that will be applied on a given interface, shown in the order that they will be applied. This is essentially an expansion of the filter profile to filter entries on a per interface basis.
IP accIpFiltDAddr	1.3.6.1.4.1.5.1.1.18.2.1.1	IpAddress	read-write	Destination Address
INT accIpFiltDisp	1.3.6.1.4.1.5.1.1.18.2.1.6	INTEGER	read-write	Disposition of packets meeting the filter criteria. Packets not discarded will be output with the selected relative transmission priority.
IP accIpFiltDNetMask	1.3.6.1.4.1.5.1.1.18.2.1.2	IpAddress	read-write	Destination Network Mask
accIpFiltEntry	1.3.6.1.4.1.5.1.1.18.2.1		not-accessible	Specific IP filter
accIpFilter	1.3.6.1.4.1.5.1.1.18
OCT accIpFiltParm	1.3.6.1.4.1.5.1.1.18.2.1.5	OCTET STRING	read-write	Filter parameters; Byte 0 is Operation 1 [0,1,2] = [None, !,=] Bytes 1,2 is Protocol Byte 3 is Operation 2 [0 = none [1,2,3,4] = both [!, , =] [5,6,7,8] = destination [!, , =] [9,10,11,12] = source [!, , =] Bytes 4,5 is UDP/TCP port number
IP accIpFiltSAddr	1.3.6.1.4.1.5.1.1.18.2.1.3	IpAddress	read-write	Source Address
IP accIpFiltSNetMask	1.3.6.1.4.1.5.1.1.18.2.1.4	IpAddress	read-write	Source Network Mask
accIpFiltTable	1.3.6.1.4.1.5.1.1.18.2		not-accessible	List of IP filters Entries added/deleted by management action. Setting any object to NULL deletes the entry
IP accIpIfFiltDispDAddr	1.3.6.1.4.1.5.1.1.18.5.1.4	IpAddress	read-only	Destination Address
INT accIpIfFiltDispDispos	1.3.6.1.4.1.5.1.1.18.5.1.12	INTEGER	read-only	Disposition of packets meeting the filter criteria. Packets not discarded will be output with the selected relative transmission priority. The log option causes a rate selected trap to be generated.
IP accIpIfFiltDispDNetMask	1.3.6.1.4.1.5.1.1.18.5.1.5	IpAddress	read-only	Destination Network Mask
accIpIfFiltDispEntry	1.3.6.1.4.1.5.1.1.18.5.1		not-accessible	An entry in the revised IP filter table.
INT accIpIfFiltDispIfIndex	1.3.6.1.4.1.5.1.1.18.5.1.1	INTEGER	read-only	Interface index to which this filter applies, or zero for global filters. This integer identifies the row of the system wide interfaces table associated with the particular interface.
TIK accIpIfFiltDispLastMatchTime	1.3.6.1.4.1.5.1.1.18.5.1.14	TimeTicks	read-only	The value of sysUpTime the last time this filter was applied.
CTR accIpIfFiltDispMatches	1.3.6.1.4.1.5.1.1.18.5.1.13	Counter	read-only	The number of times this filter criteria has been applied.
OCT accIpIfFiltDispMatchPkt	1.3.6.1.4.1.5.1.1.18.5.1.15	OCTET STRING	read-only	This object is used exclusivley for returning information in a trap about the last packet that was filtered. A query of this object will return an octet string of length zero.
INT accIpIfFiltDispOp1	1.3.6.1.4.1.5.1.1.18.5.1.8	INTEGER	read-only	Logical operation to be performed on the next object/parameter (protocol). If 'none', the filter will match any protocol.
INT accIpIfFiltDispOp2	1.3.6.1.4.1.5.1.1.18.5.1.10	INTEGER	read-only	Logical operation to be performed on the next object/parameter (port).
INT accIpIfFiltDispPktDir	1.3.6.1.4.1.5.1.1.18.5.1.2	INTEGER	read-only	Stream direction to which filter is applied. Input and Output require an interface to be specified. Global indicates all interfaces and both directions. Input and Global filters are applied prior to Output filters. NOTE: a packet originating in the router may not pass through the filter logic.
INT accIpIfFiltDispProtocol	1.3.6.1.4.1.5.1.1.18.5.1.9	INTEGER	read-only	Ip protocol on which to filter.
IP accIpIfFiltDispSAddr	1.3.6.1.4.1.5.1.1.18.5.1.6	IpAddress	read-only	Source Address
INT accIpIfFiltDispSeqNum	1.3.6.1.4.1.5.1.1.18.5.1.3	INTEGER	read-only	An internally generated sequence number used to allow the Filter display table to be retruned in the order the filters are applied (most specific to least specific) without violating SNMP ordering rules. Sequence numbers for all filters may change with a single addition or modification of a filter. Sequence numbers, once assigned, are not assigned again. This number has no intrinsic meaning.
IP accIpIfFiltDispSNetMask	1.3.6.1.4.1.5.1.1.18.5.1.7	IpAddress	read-only	Source Network Mask
accIpIfFiltDispTable	1.3.6.1.4.1.5.1.1.18.5		not-accessible	List of revised IP filters which add support for filtering by source or destination interface.
INT accIpIfFiltDispUDPTCPPort	1.3.6.1.4.1.5.1.1.18.5.1.11	INTEGER	read-only	The UDP or TCP port number to which the previous logical operation is to apply.
INT accIpIfFiltEditAction	1.3.6.1.4.1.5.1.1.18.6.1.2	INTEGER	read-write	The action to be performed with this record. In the future the field 'pending' may be added.
IP accIpIfFiltEditDAddr	1.3.6.1.4.1.5.1.1.18.6.1.5	IpAddress	read-write	Destination Address
INT accIpIfFiltEditDispos	1.3.6.1.4.1.5.1.1.18.6.1.13	INTEGER	read-write	Disposition of packets meeting the filter criteria. Packets not discarded will be output with the selected relative transmission priority. The log option causes a rate sensitive trap to be generated.
IP accIpIfFiltEditDNetMask	1.3.6.1.4.1.5.1.1.18.6.1.6	IpAddress	read-write	Destination Network Mask
accIpIfFiltEditEntry	1.3.6.1.4.1.5.1.1.18.6.1		not-accessible	An entry in the revised IP filter table.
INT accIpIfFiltEditIfIndex	1.3.6.1.4.1.5.1.1.18.6.1.3	INTEGER	read-write	Interface index to which this filter applies, or zero for global filters. This integer identifies the row of the system wide interfaces table associated with the particular interface.
INT accIpIfFiltEditIndex	1.3.6.1.4.1.5.1.1.18.6.1.1	INTEGER	read-only	An arbitrary number assigned to the record that is currently being edited.
INT accIpIfFiltEditOp1	1.3.6.1.4.1.5.1.1.18.6.1.9	INTEGER	read-write	Logical operation to be performed on the next object/parameter (protocol). If 'none', the filter will match any protocol.
INT accIpIfFiltEditOp2	1.3.6.1.4.1.5.1.1.18.6.1.11	INTEGER	read-write	Logical operation to be performed on the next object/parameter (port).
INT accIpIfFiltEditPktDir	1.3.6.1.4.1.5.1.1.18.6.1.4	INTEGER	read-write	Stream direction to which filter is applied. Input and Output require an interface to be specified. Global indicates all interfaces and both directions. Input and Global filters are applied prior to Output filters. NOTE: a packet originating in the router may not pass through the filter logic.
INT accIpIfFiltEditProtocol	1.3.6.1.4.1.5.1.1.18.6.1.10	INTEGER	read-write	Ip protocol on which to filter.
IP accIpIfFiltEditSAddr	1.3.6.1.4.1.5.1.1.18.6.1.7	IpAddress	read-write	Source Address
IP accIpIfFiltEditSNetMask	1.3.6.1.4.1.5.1.1.18.6.1.8	IpAddress	read-write	Source Network Mask
accIpIfFiltEditTable	1.3.6.1.4.1.5.1.1.18.6		not-accessible	A transient table which is used to create/delete /modify an entry in the IP filter database.
INT accIpIfFiltEditUDPTCPPort	1.3.6.1.4.1.5.1.1.18.6.1.12	INTEGER	read-write	The UDP or TCP port number to which the previous logical operation is to apply.
INT accIpNamedFiltAction	1.3.6.1.4.1.5.1.1.18.7.1.2	INTEGER	read-write	Action to perform on filter entry: ADD or DELETE
INT accIpNamedFiltApplId	1.3.6.1.4.1.5.1.1.18.7.1.15	INTEGER	read-only	User defined identification number associated with an application. (i.e, telnet, ftp)
IP accIpNamedFiltDAddr	1.3.6.1.4.1.5.1.1.18.7.1.4	IpAddress	read-write	Destination address to apply in filter
INT accIpNamedFiltDisp	1.3.6.1.4.1.5.1.1.18.7.1.12	INTEGER	read-write
IP accIpNamedFiltDNetMask	1.3.6.1.4.1.5.1.1.18.7.1.5	IpAddress	read-write	Desintation network mask to apply in filter
accIpNamedFiltEntry	1.3.6.1.4.1.5.1.1.18.7.1		not-accessible	Entry for a single named port-independent named IP filter
TIK accIpNamedFiltLastMatch	1.3.6.1.4.1.5.1.1.18.7.1.14	TimeTicks	read-only	Time/Date that filter was last matched
CTR accIpNamedFiltMatches	1.3.6.1.4.1.5.1.1.18.7.1.13	Counter	read-only	Count of times this filter has been matched
OCT accIpNamedFiltName	1.3.6.1.4.1.5.1.1.18.7.1.1	OCTET STRING	read-write	The name of the filter entry.
INT accIpNamedFiltOp1	1.3.6.1.4.1.5.1.1.18.7.1.8	INTEGER	read-write	First operator to apply in filter
INT accIpNamedFiltOp2	1.3.6.1.4.1.5.1.1.18.7.1.10	INTEGER	read-write	The secondary operator to apply
INT accIpNamedFiltPktDir	1.3.6.1.4.1.5.1.1.18.7.1.3	INTEGER	read-write	Direction filter is to be applied in. Filters which are applied globally ignore this parameter
INT accIpNamedFiltProtocol	1.3.6.1.4.1.5.1.1.18.7.1.9	INTEGER	read-write	Protocol to apply in filter
IP accIpNamedFiltSAddr	1.3.6.1.4.1.5.1.1.18.7.1.6	IpAddress	read-write	Source address to apply in filter
OCT accIpNamedFiltSAIndex	1.3.6.1.4.1.5.1.1.18.7.1.16	OCTET STRING	read-write	Points to a Security Association used for one communication flow
IP accIpNamedFiltSNetMask	1.3.6.1.4.1.5.1.1.18.7.1.7	IpAddress	read-write	Source network mask to apply in filter
accIpNamedFiltTable	1.3.6.1.4.1.5.1.1.18.7		not-accessible	Table of port-independent named IP filters
INT accIpNamedFiltUDPTCPPort	1.3.6.1.4.1.5.1.1.18.7.1.11	INTEGER	read-write	UDP/TCP port number to apply in filter
ADR accIpSmdsAtArpMcast	1.3.6.1.4.1.5.1.1.18.3.1.4	SmdsAddress	read-only	The ARP Multicast SMDS Group address in E.164 address format (e.g.,0xE18005551111FFFF)
accIpSmdsAtEntry	1.3.6.1.4.1.5.1.1.18.3.1		not-accessible	An IP/SMDS address translation table entry. Each entry contains an IP address and necessary SMDS translation parameters.
IP accIpSmdsAtIpAddr	1.3.6.1.4.1.5.1.1.18.3.1.1	IpAddress	read-only	The IP address associated with the Local SNI, IP Multicast and ARP Multicast SMDS addresses.
ADR accIpSmdsAtIpMcast	1.3.6.1.4.1.5.1.1.18.3.1.3	SmdsAddress	read-write	The IP Multicast SMDS Group address in E.164 address format (e.g.,0xE18005551111FFFF)
ADR accIpSmdsAtSmdsAddr	1.3.6.1.4.1.5.1.1.18.3.1.2	SmdsAddress	read-write	The local SNI SMDS address in E.164 address format (e.g., 0xC18005551212FFFF)
accIpSmdsAtTable	1.3.6.1.4.1.5.1.1.18.3		not-accessible	The IP/SMDS address translation table. Contains the IP address, Local SNI, IP multicast address (E.164 format), and ARP multicast address (E.164 format).
INT accIpSrcRouting	1.3.6.1.4.1.5.1.1.18.1	INTEGER	read-write	Source Routing mode
INT accIpSubDirBcast	1.3.6.1.4.1.5.1.1.18.4	INTEGER	read-write	Packets with an all-ones host portion of the destination IP address are called Subnet Directed Broadcast (or Limited Broadcast) packets. This object selects if these packets are to be broadcast onto the destination subnet.
INT pysmiFakeCol349	1.3.6.1.4.1.5.1.1.18.7.1.4294967295	INTEGER	not-accessible

RFC description

Manages IP packet filtering (access control list) configuration on ACC/Ericsson routers, providing permit/deny rules based on address and protocol.

Start monitoring ACC/Ericsson WAN access routers (legacy) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ACC-IPFILTER

What Is ACC-IPFILTER?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description