ASCEND-FIREWALL-MIB

All MIBs › ASCEND-FIREWALL-MIB

Category: VPN and Security, Vendor: Ascend/Lucent

Description: Configures and monitors firewall access control rules and statistics on Ascend devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ASCEND-FIREWALL-MIB?

ASCEND-FIREWALL-MIB is a vendor-specific MIB from Ascend Communications for configuring and monitoring firewall access-control rules and related statistics on Ascend access/routing equipment. It is intended to expose firewall rule/policy configuration objects along with counters for permitted/denied traffic, giving visibility into how the device's built-in firewall is filtering traffic. Its monitoring value centers on software/security status: tracking denied-packet counts or rule-hit statistics reveals whether the firewall is actively blocking unwanted traffic (or unexpectedly blocking legitimate traffic), which is important for both security monitoring and troubleshooting connectivity complaints. It is a self-contained Ascend proprietary MIB with no stated dependency beyond standard SNMP conventions. It was deployed on Ascend routers/access concentrators used at network edges where basic firewall filtering was configured directly on the WAN device. Network engineers evaluating or troubleshooting this functionality can download the ASCEND-FIREWALL-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in ASCEND-FIREWALL-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Ascend Communications router/access concentrator

Monitoring Examples

No sample objects were provided for this legacy module. Based on its stated purpose, an administrator would typically poll rule-hit or denied-packet counters to confirm the firewall is actively enforcing configured access-control policy, and would investigate a spike in denied packets as either an attack attempt or a misconfigured rule blocking legitimate traffic. Firewall rule configuration objects would be checked when auditing which policies are currently active on the device.

Imported Objects

From ASCEND-MIB

DisplayString
firewallGroup	OBJECT-IDENTITY

From RFC-1212

OBJECT-TYPE

From RFC1155-SMI

IpAddress

OIDs

OID symbolic	OID numeric	Type	Access	Description
firewallStatus	1.3.6.1.4.1.529.16.1
firewallControl	1.3.6.1.4.1.529.16.2
STR fwallCtrlRuleName	1.3.6.1.4.1.529.16.2.1	DisplayString	read-write	The name of the firewall rule to be enabled or disabled. This name corresponds with a name established when the firewall was created (as by the Secure Access Manager). There is no valid default value.
INT fwallCtrlExecute	1.3.6.1.4.1.529.16.2.2	INTEGER	read-write	Cause a firewall given by the above parameters to be affected as requested. enb-rule causes a dynamic rule to be created; dis-rule causes a dynamic rule to cease operating. Default to 1 (no-op).
INT fwallCtrlTimeOut	1.3.6.1.4.1.529.16.2.3	INTEGER	read-write	Time, expressed in seconds, during which this firewall rule will effect the firewall. After the expiration time, the rule will cease being effective exactly as if a del-rule (see fwallCtrlExecute above) had been executed on it. Default is defined in the firewall as defined by the firewall designer, and if none is given in the firewall, it is 3600 seconds.
IP fwallCtrlExtAddr	1.3.6.1.4.1.529.16.2.4	IpAddress	read-write	Address of entity outside firewall. This value defaults to 0.0.0.0, equivalent to a don't care. May be used when selecting firewall to be updated (see fwallCtrlRoutAddr). The default value of zero could match any real IP address if ExtAddrMask is zero, otherwise it would match NO IP address.
IP fwallCtrlExtAddrMask	1.3.6.1.4.1.529.16.2.5	IpAddress	read-write	Netmask of entity outside firewall. This value defaults to 255.255.255.255, equivalent to a host address if fwallCtrlExtAddr is non-zero.
INT fwallCtrlExtPort	1.3.6.1.4.1.529.16.2.6	INTEGER	read-write	For external entity, specifies a port number. Defaults to 0, equivalent to don't care.
INT fwallCtrlExtPortMax	1.3.6.1.4.1.529.16.2.7	INTEGER	read-write	For external entity, specifies the maximum port number of a range of ports. Defaults to 0, equivalent to specifying a single port number if fwallCtrlExtPort is nonzero.
IP fwallCtrlIntAddr	1.3.6.1.4.1.529.16.2.8	IpAddress	read-write	Address of entity inside firewall. This value defaults to 0.0.0.0, equivalent to a don't care.
IP fwallCtrlIntAddrMask	1.3.6.1.4.1.529.16.2.9	IpAddress	read-write	Netmask of entity inside firewall. This value defaults to 255.255.255.255, equivalent to a host address if fwallCtrlIntAddr is non-zero.
INT fwallCtrlIntPort	1.3.6.1.4.1.529.16.2.10	INTEGER	read-write	For Internal entity, specifies a port number. Defaults to 0, equivalent to don't care.
INT fwallCtrlIntPortMax	1.3.6.1.4.1.529.16.2.11	INTEGER	read-write	For Internal entity, specifies the maximum port number of a range of ports. Defaults to 0, equivalent to specifying a single port number if fwallCtrlIntPort is nonzero.
IP fwallCtrlRoutAddr	1.3.6.1.4.1.529.16.2.12	IpAddress	read-write	This address may be supplied by the management station to choose a firewall for alteration. The default for this address is 0.0.0.0, which would cause the router to use fwallCtrlExtAddr to choose its firewall instead.
INT fwallCtrlAddrOpts	1.3.6.1.4.1.529.16.2.13	INTEGER	read-write	Firewall requests may require additional bit- encoded options to determine the firewall's new behavior. This options variable is a mechanism to allow those options to be defined at a later date. Until then, this variable really has no meaning.

RFC description

Provides firewall rule management for Ascend Secure Access devices, allowing dynamic creation and modification of firewall rules.

Start monitoring Ascend Communications (Lucent) MAX/Pipeline/TNT WAN access equipment (legacy) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ASCEND-FIREWALL-MIB

What Is ASCEND-FIREWALL-MIB?

Supported Devices

Monitoring Examples

This MIB depends on

Related MIBs

RFC description