ARTEM-COMPOINT-FILTER-MIB

All MIBs › ARTEM-COMPOINT-FILTER-MIB

Organization: Funkwerk Enterprise Communications.

Last Updated: 2005-06-10

Category: Wireless and WLAN

Description: artem ComPoint 802.11 WLAN access point MAC and traffic filtering policy management.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ARTEM-COMPOINT-FILTER-MIB?

This is a Funkwerk Enterprise Communications (artem) proprietary MIB for the ComPoint family of 802.11 WLAN access points, adding attributes not covered by standard MIBs for Layer 2 and MAC-address-based traffic filtering. It exposes configuration data for filtering policy — rule sets that permit or deny traffic based on MAC address and other Layer 2 criteria on the wireless access point. Its monitoring value is mainly in confirming the software-enforced filtering policy is correctly applied and active on the AP, helping an administrator verify that a MAC/traffic filter configuration change took effect and that no misconfiguration is inadvertently blocking or allowing client traffic. It supplements standard IEEE 802.11 and bridge MIBs rather than replacing them, adding artem/Funkwerk-specific filtering objects on top of standard WLAN management. It is deployed on artem ComPoint wireless access points in enterprise WLAN deployments, typically alongside the vendor's other WLAN management MIBs, with an ARTEM-COMPOINT-FILTER-MIB download needed to add MAC-based filtering visibility to that management stack.

IPNetwork Monitor allows you to monitor SNMP objects defined in ARTEM-COMPOINT-FILTER-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

artem ComPoint 802.11 wireless access point

Monitoring Examples

No specific filter object or table names were included in the sampled instrumentation for this module, so a concrete polling example can't be tied to real OIDs; in general, an administrator would use this MIB's MAC/Layer-2 filter rule objects to confirm which client MAC addresses are permitted or blocked on the ComPoint AP, and would check the rule set after a policy change to verify a legitimate client hasn't been inadvertently locked out.

Imported Objects

From RFC1213-MIB

ifIndex

From SNMPv2-CONF

NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-IDENTITY
OBJECT-TYPE
enterprises

From SNMPv2-TC

MacAddress
RowStatus
TEXTUAL-CONVENTION
TruthValue

How to Use in IPNetwork Monitor

Example using artemFilterMACState OID:

Select a Funkwerk (artem) ComPoint 802.11 WLAN access point (legacy) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type artemFilterMACState into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. This attribute defines the state of the filtering rule in the corresponding table row. disabled(0) - This rule is inactive. enabled(1) - This rule is active and currrently in use for filtering. conflict(2) - This rule conflicts with another table row and. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is an INTEGER-type OID, Value bounds is the most useful condition here — trigger an alert if the value is anything other than 'enabled', since that indicates the condition this object reports has changed to one worth investigating. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
artem	1.3.6.1.4.1.4280			Funkwerk Enterprise Communications MIB file that provides additional attributes not covered by standard MIBs for for layer-2 protocol and MAC address-based filtering functionality in artem products.
artemFilter	1.3.6.1.4.1.4280.7			Definitions and attributes for layer-2 protocol and MAC address-based filtering.
T/F artemFilterArpTranslation	1.3.6.1.4.1.4280.7.1	TruthValue	read-write	This attribute reflects the enable state of special ARP processing for access point functionality. If ARP processing is enabled, all ARP packets from associated clients are forwarded, disregarding all other filterung rules. ARP requests for associated clients are translated from MAC multicast to MAC unicast frames. All other ARP requests (not for associated clients) are filtered. In the artemFilterProtocolTable, a special rule is created with protocol of ARP (0x0806) and state of arpProcess. This entry cannot be modified.
ART artemFilterDefaultProcessing	1.3.6.1.4.1.4280.7.2	ArtemFilterProcessing	read-write	This attribute defines the default processing rule for all the protocols which have no specific actions defined.
artemFilterProtocolTable	1.3.6.1.4.1.4280.7.3		not-accessible	Table of protocol type based filtering rules.
artemFilterProtocolEntry	1.3.6.1.4.1.4280.7.3.1		not-accessible	An entry in artemFilterProtocolTable.
ROW artemFilterProtocolRowStatus	1.3.6.1.4.1.4280.7.3.1.1	RowStatus	read-create	Auxiliary variable for creation of new object instances and/or the deletion of existing object instances.
INT artemFilterProtocolType	1.3.6.1.4.1.4280.7.3.1.2	INTEGER	not-accessible	This attribute holds the ethernet protocol type this rule matches. Protocol type examples: 0x0800 IP 0x0806 ARP 0x0bad Banyan VINES IP
ART artemFilterProtocolProcessing	1.3.6.1.4.1.4280.7.3.1.3	ArtemFilterProcessing	read-create	This rule defines what to do with frames that match the rule in the current table row. forward(1) - All frames are forwarded (no filtering takes place). discard(2) - All frames are discarded and none are forwarded. filterMAC(3) - Frames are filtered by applying MAC filtering rules, according to artemFilterMACTable. arpProcess(4) - Special processing for ARP requests if artemFilterArpTranslation is enabled. Note that rules with type arpProcess(4) are automatically generated by the system according to artemFilterArpTranslation and cannot be directly modified by the user in any form.
artemFilterMACTable	1.3.6.1.4.1.4280.7.4		not-accessible	Table of MAC address based filtering rules.
artemFilterMACEntry	1.3.6.1.4.1.4280.7.4.1		not-accessible	An entry in artemFilterMACTable.
INT artemFilterMACIndex	1.3.6.1.4.1.4280.7.4.1.1	INTEGER	not-accessible	The auxiliary variable used to identify instances of the columnar objects in the artemFilterMACTable.
ROW artemFilterMACRowStatus	1.3.6.1.4.1.4280.7.4.1.2	RowStatus	read-create	Auxiliary variable for creation of new object instances and/or the deletion of existing object instances.
INT artemFilterMACStateEx	1.3.6.1.4.1.4280.7.4.1.3	INTEGER	read-create	This attribute defines the state of the filtering rule in the corresponding table row. disabled(0) - This rule is inactive. enabled(1) - This rule is active and currrently in use for filtering. conflict(2) - This rule conflicts with another table row and has been inactivated. This state cannot be modified by writing this attribute, but rather is changed by the system to 'disabled(0)' as soon as the conflict has been resolved. invalid(3) - This rule has some invalid entries and has been inactivated. This state cannot be modified by writing this attribute, but rather is changed by the system to 'disabled(0)' as soon as the invalid entry has been corrected.
MAC artemFilterMACSourceAddress	1.3.6.1.4.1.4280.7.4.1.4	MacAddress	read-create	This attribute defines the source MAC address the filtering rule checks for. The following MAC address values have special meaning: 0xff0000000000 - matches packets originating from the Compoint itself. 0x000000000000 - matches all packets. 0xffffff__0000 - matches packets originating from the interface with a given ifIndex that is encoded at the '_' marked places.
MAC artemFilterMACDestAddress	1.3.6.1.4.1.4280.7.4.1.5	MacAddress	read-create	This attribute defines the destination MAC address the filtering rule checks for. The following MAC address values have special meaning: 0x010000000000 - matches any multicast packet. 0x01005E800000 - matches any IP multicast packet.
artemFilterMACDestIfTable	1.3.6.1.4.1.4280.7.5		not-accessible	This table contains the destination interfaces for each rule in the artemFilterMACTable.
artemFilterMACDestIfEntry	1.3.6.1.4.1.4280.7.5.1		not-accessible	An entry in artemFilterMACDestPortsTable.
ROW artemFilterMACDestIfRowStatus	1.3.6.1.4.1.4280.7.5.1.1	RowStatus	read-create	Auxiliary variable for creation of new object instances and/or the deletion of existing object instances.
artemFilterGroup	1.3.6.1.4.1.4280.7.7			parameters not covered in standard 802.11 MIB.

RFC description

Artem network filtering MIB for ComPoint network appliances. Manages packet filtering rules, firewall policies, and access control configurations.

Start monitoring Funkwerk (artem) ComPoint 802.11 WLAN access points (legacy) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ARTEM-COMPOINT-FILTER-MIB

What Is ARTEM-COMPOINT-FILTER-MIB?

Supported Devices

Monitoring Examples

This MIB depends on

Related MIBs

How to Use in IPNetwork Monitor

RFC description