Dell-MNGINF-MIB

All MIBs › Dell-MNGINF-MIB

Organization: Dell

Last Updated: 2003-09-21

Category: Domain: Network Management, Vendor: Dell

Description: Provides management interface configuration and status objects for Dell network devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is Dell-MNGINF-MIB?

Dell-MNGINF-MIB is a Dell proprietary MIB that manages the management-interface access control feature on Dell switches, controlling which IP addresses or networks are permitted to access the device's management plane and via which interfaces/services. It exposes an access-list table defining permitted source addresses, network masks, applicable services, and allow/deny actions, along with global enablement and active-list selection. Its monitoring value is on the software/security-configuration side, letting an operator audit which management-access policy is currently active and verify its rules, which directly affects who can reach the switch's SNMP, Telnet, SSH, or web management services. It is a self-contained vendor MIB conceptually related to standard access-control-list concepts but implemented independently. It is deployed on Dell PowerConnect/Networking switches to restrict management-plane access as a security hardening measure. Engineers can download the Dell-MNGINF-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in Dell-MNGINF-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Dell PowerConnect/Networking switch

Monitoring Examples

An operator would check rlMngInfEnable and rlMngInfActiveListName to confirm whether management access restriction is enabled and which named list is currently enforced, then inspect rlMngInfListTable/rlMngInfListEntry (indexed by rlMngInfListName/rlMngInfListPriority) for rlMngInfListIpAddr, rlMngInfListIpNetMask, rlMngInfListService, and rlMngInfListAction to audit exactly which source addresses and services are permitted or denied. This is useful for confirming a security policy change (e.g. restricting SNMP access to a NOC subnet) actually took effect on the device.

What Can Be Monitored

management access control enable state
active access list name
access list entries (source IP, mask, service, action)
list entry priority

Imported Objects

From Dell-MIB

rnd	MODULE-IDENTITY

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMPv2-SMI

IpAddress
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DisplayString
RowStatus
TEXTUAL-CONVENTION
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
rlMngInf	1.3.6.1.4.1.89.89			The private MIB module definition for management access control.
INT rlMngInfMibVersion	1.3.6.1.4.1.89.89.1	INTEGER	read-only	MIB's version, the current version is 1.
T/F rlMngInfEnable	1.3.6.1.4.1.89.89.2	TruthValue	read-write	The variable specifies if Management ACL functionality is enabled.
STR rlMngInfActiveListName	1.3.6.1.4.1.89.89.3	DisplayString	read-write	The currently activated Management ACL name
rlMngInfListTable	1.3.6.1.4.1.89.89.4		not-accessible	The table specifies all defined Access Lists definitions for IPv4 addresses. Provide backward compatibility for previous versions.
rlMngInfListEntry	1.3.6.1.4.1.89.89.4.1		not-accessible	Row definition for this table.
STR rlMngInfListName	1.3.6.1.4.1.89.89.4.1.1	DisplayString	read-only	The Name of the Access List.
U32 rlMngInfListPriority	1.3.6.1.4.1.89.89.4.1.2	Unsigned32	read-only	The Priority value.
U32 rlMngInfListIfIndex	1.3.6.1.4.1.89.89.4.1.3	Unsigned32	read-write	The IfIndex value. The IfIndex can be configured to be 0, which means don't care value.
IP rlMngInfListIpAddr	1.3.6.1.4.1.89.89.4.1.4	IpAddress	read-write	The IP address. The IP address can be configured to be 0, which means don't care value.
IP rlMngInfListIpNetMask	1.3.6.1.4.1.89.89.4.1.5	IpAddress	read-write	The subnet mask associated with the IP address of this entry. The value of the mask is an IP address with all the network bits set to 1 and all the hosts bits set to 0.
RLM rlMngInfListService	1.3.6.1.4.1.89.89.4.1.6	RlMngInfServiceType	read-write	Service type. The Service type address can be configured to be 0, which means any of Telnet, SNMP, HTTP, HTTPS, SSH.
RLM rlMngInfListAction	1.3.6.1.4.1.89.89.4.1.7	RlMngInfActionType	read-write	Action type. Can be permit or deny.
ROW rlMngInfListRowStatus	1.3.6.1.4.1.89.89.4.1.8	RowStatus	read-write	The row status variable, used according to row installation and removal conventions.
T/F rlMngInfAuditingEnable	1.3.6.1.4.1.89.89.5	TruthValue	read-write	Controls whether SysLog messages should be issued on reject by rule
rlMngInfListInetTable	1.3.6.1.4.1.89.89.6		not-accessible	The table specifies all defined Access Lists definitions definitions for both IPv4 and IPv6 addresses.
rlMngInfListInetEntry	1.3.6.1.4.1.89.89.6.1		not-accessible	Row definition for this table.
STR rlMngInfListInetName	1.3.6.1.4.1.89.89.6.1.1	DisplayString	read-only	The Name of the Access List.
U32 rlMngInfListInetPriority	1.3.6.1.4.1.89.89.6.1.2	Unsigned32	read-only	The Priority value.
U32 rlMngInfListInetIfIndex	1.3.6.1.4.1.89.89.6.1.3	Unsigned32	read-write	The IfIndex value. The IfIndex can be configured to be 0, which means don't care value.
IPt rlMngInfListInetIpAddrType	1.3.6.1.4.1.89.89.6.1.4	InetAddressType	read-write	The Inet address type.
IP rlMngInfListInetIpAddr	1.3.6.1.4.1.89.89.6.1.5	InetAddress	read-write	The Inet address.Used for both IPv4 and IPv6 addresses. The InetIpAddress can be configured to be 0.0.0.0 and address type IPv4 , which means ignored value.
IP rlMngInfListInetIpNetMask	1.3.6.1.4.1.89.89.6.1.6	IpAddress	read-write	This field will used in case of IPv4 addresses . For IPv6 this field ignored. Default value 255.255.255.255.
RLM rlMngInfListInetService	1.3.6.1.4.1.89.89.6.1.7	RlMngInfServiceType	read-write	Service type. The Service type address can be configured to be 0, which means any of Telnet, SNMP, HTTP, HTTPS, SSH.
RLM rlMngInfListInetAction	1.3.6.1.4.1.89.89.6.1.8	RlMngInfActionType	read-write	Action type. Can be permit or deny.
ROW rlMngInfListInetRowStatus	1.3.6.1.4.1.89.89.6.1.9	RowStatus	read-write	The row status variable, used according to row installation and removal conventions.
INT rlMngInfListInetIPv6PrefixLength	1.3.6.1.4.1.89.89.6.1.10	INTEGER	read-write	IPv6 prefix length.This field provide IPv6 prefix length (mask) for IPv6 only.In case of IPv4 this field will ignored

RFC description

Manages Dell Management ACL functionality for controlling SNMP, Telnet, HTTP/HTTPS, and SSH access to network devices.

Start monitoring Dell PowerConnect/Networking managed switch (management access control) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download Dell-MNGINF-MIB

What Is Dell-MNGINF-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description