DEVFILTER-MIB

Description: Device filter MIB providing objects to configure and monitor packet filtering rules applied at device interfaces.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

DEVFILTER-MIB is a vendor device MIB (using the 'ani' object prefix, associated with broadband/subscriber access equipment referring to Base Station Unit/Subscriber Unit or BSU/SU hardware) that provides objects to configure and monitor packet-filtering (ACL-like) rules applied at device interfaces. It exposes per-interface filter table entries covering filter identity, name, priority, activation state, permission (permit/deny), and IP-based match criteria such as source/destination address and mask plus protocol. Its monitoring value is primarily software/configuration status: administrators check aniDevFilterActivationState and aniDevFilterPermission to confirm security filtering rules are active and correctly enforcing intended traffic policy on a given interface. It appears to be a self-contained vendor filter table without strong dependency on other standard MIBs beyond basic ifIndex referencing. It is typically deployed on wireless or broadband access devices (BSU/SU-style equipment) where per-interface packet filtering enforces subscriber traffic and security policy. Network engineers evaluating or troubleshooting this functionality can download the DEVFILTER-MIB file directly to load it into their MIB browser.

An admin would poll aniDevFilterTable/aniDevFilterEntry, indexed by aniDevFilterIfIndex and aniDevFilterIdentifier, to confirm a named filter (aniDevFilterName) at a given aniDevFilterPriority is aniDevFilterActivationState=active and its aniDevFilterPermission is set as expected (permit or deny). Checking aniDevFilterIpSaddr/aniDevFilterIpSmask against aniDevFilterIpDaddr reveals which source and destination subnet the filter rule matches, useful for auditing whether an unintended filter is blocking or allowing traffic on an interface. An unexpectedly disabled or missing filter row would explain unfiltered traffic reaching a protected interface.

Manages IP filter rules and configurations for Aperto Networks BSU and SU devices.