FILTER-MIB

All MIBs › FILTER-MIB

Organization: D-Link Corp.

Last Updated: 2008-08-12

Category: FILTER-MIB

Description: MIB providing configuration and status objects for packet filtering rules applied to network interfaces or management traffic.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is FILTER-MIB?

FILTER-MIB is a D-Link proprietary MIB defining protocol-filtering objects on D-Link managed switches. Its objects cover a DHCP-server permit table (server IP, client MAC, ports, status) and a companion DHCP-permit port table (state) with illegal-server log-suppression duration and a trap-log-state flag, a NetBIOS filter table (per-port state) with an extended variant, a Layer 3 CPU control-packet filter table (per-port RIP/OSPF/VRRP/PIM/DVMRP/IGMP-query state), and an egress-filter control table. As a configuration/security MIB it lets an administrator confirm which protocols (DHCP, NetBIOS, routing-protocol control traffic) are being filtered on a given port — a common defense against rogue DHCP servers and unwanted broadcast/control traffic. It is deployed on D-Link managed switches. Administrators searching for network protocol filtering devices use this MIB's per-port DHCP/NetBIOS filter tables to confirm rogue-traffic filtering is active on a D-Link switch.

IPNetwork Monitor allows you to monitor SNMP objects defined in FILTER-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

D-Link managed switches

Monitoring Examples

An administrator checks swFilterDhcpPermitTable to confirm only the authorized DHCP server's IP address is permitted on a port, blocking a rogue DHCP server from serving addresses on a D-Link switch.

What Can Be Monitored

DHCP/NetBIOS/routing-protocol filtering configuration

Imported Objects

From DLINK-ID-REC-MIB

dlink-common-mgmt

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-SMI

IpAddress
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

MacAddress
RowStatus

OIDs

OID symbolic	OID numeric	Type	Access	Description
swFilterMIB	1.3.6.1.4.1.171.12.37			This MIB module defining objects for the management of filter.
swFilterDhcp	1.3.6.1.4.1.171.12.37.1
swFilterDhcpPermitTable	1.3.6.1.4.1.171.12.37.1.1		not-accessible	The table specifies DHCP permit information.
swFilterDhcpPermitEntry	1.3.6.1.4.1.171.12.37.1.1.1		not-accessible	This entry includes all port DHCP information which is supported by the device, like server IP address, client MAC address...
IP swFilterDhcpServerIP	1.3.6.1.4.1.171.12.37.1.1.1.1	IpAddress	read-only	This object indicates the DHCP server IP address of this entry.
MAC swFilterDhcpClientMac	1.3.6.1.4.1.171.12.37.1.1.1.2	MacAddress	read-only	This object indicates the DHCP client MAC address of this entry.
POR swFilterDhcpPorts	1.3.6.1.4.1.171.12.37.1.1.1.3	PortList	read-create	This object indicates the operating port list of this entry.
ROW swFilterDhcpStatus	1.3.6.1.4.1.171.12.37.1.1.1.4	RowStatus	read-create	This object indicates the status of this entry.
swFilterDhcpPortTable	1.3.6.1.4.1.171.12.37.1.2		not-accessible	The table specifies the DHCP filter function of a particular port.
swFilterDhcpPortEntry	1.3.6.1.4.1.171.12.37.1.2.1		not-accessible	This entry includes all port DHCP states which are supported by the device.
INT swFilterDhcpPortIndex	1.3.6.1.4.1.171.12.37.1.2.1.1	INTEGER	read-only	This object indicates the module's port number. The range is from 1 to the maximum port number supported by this module.
INT swFilterDhcpPortState	1.3.6.1.4.1.171.12.37.1.2.1.2	INTEGER	read-write	This object indicates the DHCP filter status of this entry.
INT swFilterDhcpServerIllegalSerLogSuppressDuration	1.3.6.1.4.1.171.12.37.1.3	INTEGER	read-write	This object indicates the illegal server log suppression duration. The same illegal DHCP server IP address detected is logged just once within the log ceasing unauthorized duration. The log ceasing unauthorized duration is 1 minute, 5 minutes, and 30 minutes. The default value is 5 minutes.
INT swFilterDhcpServerTrapLogState	1.3.6.1.4.1.171.12.37.1.4	INTEGER	read-write	This object indicates the state of the filter DHCP server log or trap on the switch.
swFilterNetbios	1.3.6.1.4.1.171.12.37.2
swFilterNetbiosTable	1.3.6.1.4.1.171.12.37.2.1		not-accessible	The table specifies the NetBIOS filter function of a port.
swFilterNetbiosEntry	1.3.6.1.4.1.171.12.37.2.1.1		not-accessible	This entry includes all port NetBIOS states which are supported by the device.
INT swFilterNetbiosPortIndex	1.3.6.1.4.1.171.12.37.2.1.1.1	INTEGER	read-only	This object indicates the module's port number. The range is from 1 to the maximum port number supported by this module.
INT swFilterNetbiosState	1.3.6.1.4.1.171.12.37.2.1.1.2	INTEGER	read-write	This object indicates the status of the NetBIOS filter.
swFilterExtNetbios	1.3.6.1.4.1.171.12.37.3
swFilterExtNetbiosTable	1.3.6.1.4.1.171.12.37.3.1		not-accessible	The table specifies the extensive NetBIOS filter function of a port.
swFilterExtNetbiosEntry	1.3.6.1.4.1.171.12.37.3.1.1		not-accessible	This entry includes all port extensive NetBIOS states which are supported by the device.
INT swFilterExtNetbiosPortIndex	1.3.6.1.4.1.171.12.37.3.1.1.1	INTEGER	read-only	This object indicates the module's port number. The range is from 1 to the maximum port number supported by this module.
INT swFilterExtNetbiosState	1.3.6.1.4.1.171.12.37.3.1.1.2	INTEGER	read-write	This object indicates the extensive NetBIOS filter status.
swFilterCPU	1.3.6.1.4.1.171.12.37.4
swFilterCPUL3CtrlPktTable	1.3.6.1.4.1.171.12.37.4.1		not-accessible	The table specifies the CPU filter of the layer 3 control packet function of a port.
swFilterCPUL3CtrlPktEntry	1.3.6.1.4.1.171.12.37.4.1.1		not-accessible	This entry includes all port CPU filters of layer 3 control packet states which are supported by the device.
INT swFilterCPUL3CtrlPktPortIndex	1.3.6.1.4.1.171.12.37.4.1.1.1	INTEGER	read-only	This object indicates the module's port number. The range is from 1 to the maximum port number supported by this module.
INT swFilterCPUL3CtrlPktRIPState	1.3.6.1.4.1.171.12.37.4.1.1.2	INTEGER	read-write	This object indicates the RIP status of the layer 3 control packet.
INT swFilterCPUL3CtrlPktOSPFState	1.3.6.1.4.1.171.12.37.4.1.1.3	INTEGER	read-write	This object indicates the OSPF status of the layer 3 control packet.
INT swFilterCPUL3CtrlPktVRRPState	1.3.6.1.4.1.171.12.37.4.1.1.4	INTEGER	read-write	This object indicates the VRRP status of the layer 3 control packet.
INT swFilterCPUL3CtrlPktPIMState	1.3.6.1.4.1.171.12.37.4.1.1.5	INTEGER	read-write	This object indicates the PIM status of the layer 3 control packet.
INT swFilterCPUL3CtrlPktDVMRPState	1.3.6.1.4.1.171.12.37.4.1.1.6	INTEGER	read-write	This object indicates the DVMRP status of the layer 3 control packet.
INT swFilterCPUL3CtrlPktIGMPQueryState	1.3.6.1.4.1.171.12.37.4.1.1.7	INTEGER	read-write	This object indicates the IGMP query status of the layer 3 control packet.
swFilterEgress	1.3.6.1.4.1.171.12.37.5
swPktEgressFilterCtrlTable	1.3.6.1.4.1.171.12.37.5.1		not-accessible	A table that contains information about egress filter control.
swPktEgressFilterCtrlEntry	1.3.6.1.4.1.171.12.37.5.1.1		not-accessible	A list of information for each port of the device. unicast: Specifies the egress filter state of destination lookup fail packets. multicast: Specifies the egress filter state of unregistered multicast packets.
INT swPktEgressFilterPortIndex	1.3.6.1.4.1.171.12.37.5.1.1.1	INTEGER	read-only	This object indicates the device's port number.(1..Max port number in the device).Used to specify a range of ports to be configured.
INT swPktEgressFilterUnknownUnicastStatus	1.3.6.1.4.1.171.12.37.5.1.1.2	INTEGER	read-write	This object indicates the egress filter state of destination lookup fail packets.
INT swPktEgressFilterUnknownMulticastStatus	1.3.6.1.4.1.171.12.37.5.1.1.3	INTEGER	read-write	This object indicates the egress filter state of unregistered multicast packets.
swFilterNotify	1.3.6.1.4.1.171.12.37.100
swFilterNotifyPrefix	1.3.6.1.4.1.171.12.37.100.0
NTF swFilterDetectedTrap	1.3.6.1.4.1.171.12.37.100.0.1			Send trap when illegal DHCP server is detected. The same illegal DHCP server IP address detected is just sent once to the trap receivers within the log ceasing unauthorized duration.
swFilterNotificationBindings	1.3.6.1.4.1.171.12.37.100.2
IP swFilterDetectedIP	1.3.6.1.4.1.171.12.37.100.2.1	IpAddress	accessible-for-notify	This object indicates the detected illegal DHCP server IP address.
INT swFilterDetectedport	1.3.6.1.4.1.171.12.37.100.2.2	INTEGER	accessible-for-notify	This object indicates the port which detected the illegal DHCP server.

RFC description

D-Link filter management for DHCP, NetBIOS, and egress packet filtering on switches.

Start monitoring D-Link managed switch (protocol filtering: DHCP/NetBIOS/L3 control-packet) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download FILTER-MIB

What Is FILTER-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

RFC description