All MIBs › INTEL-IPF-MIB
Category: Domain: Security, VPN and Security, Vendor: Intel
Description: Intel IP filtering MIB providing SNMP objects for access control list configuration and packet filter statistics.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is INTEL-IPF-MIB?
INTEL-IPF-MIB is Intel's private MIB for IP packet filtering (access control) on Intel switching platforms, organizing filter rules into named user groups matched against Layer 3 (IP address/subnet) and Layer 4 (port number) criteria. It exposes a user-groups table (name and count), a Layer 3 user-group-membership table matching IP address/subnet to group, and a Layer 4 table matching port numbers to groups, with entries individually deletable. As a monitoring/configuration-verification MIB it is used to confirm that IP filtering policy is correctly applied, checking which IP subnets or ports are assigned to a given filter group, which is essential for diagnosing unexpected traffic blocking or permitted access on the switch, rather than exposing hardware health metrics. There is no explicit dependency stated on other standard MIBs; it is a self-contained Intel private-enterprise filtering module. It is typically deployed on Intel Ethernet switches used at network edges or in environments requiring granular Layer 3/4 access control policy. Engineers can download the INTEL-IPF-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in INTEL-IPF-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Intel Ethernet switches
Monitoring Examples
An administrator polling ipfUGsTable/ipfUGsEntry by ipfUGsNumber can retrieve ipfUGsName to identify a named filter group, then cross-reference ipfL3UGMTable/ipfL3UGMEntry for ipfL3UGMIpAddress/ipfL3UGMSubnetMask to confirm which subnets belong to that group. Checking ipfL4UGMTable/ipfL4UGMEntry's ipfL4UGMPortNumber reveals whether a specific application port is included in the filter, helping explain why traffic on that port is being permitted or dropped unexpectedly.
What Can Be Monitored
- named IP filter group definitions
- Layer 3 IP address/subnet group membership
- Layer 4 port number group membership
- filter group count
Imported Objects
From INTEL-GEN-MIB
| mib2ext | OBJECT-IDENTITY |
From RFC-1212
| OBJECT-TYPE |
From RFC1155-SMI
| Counter | |
| IpAddress | |
| TimeTicks |
From RFC1213-MIB
| DisplayString |
OIDs
RFC description
Intel IP filtering configuration for user groups and network access control.
Start monitoring Intel Ethernet switch (IP packet filtering) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.