MITEL-IPFILTER-MIB

All MIBs › MITEL-IPFILTER-MIB

Organization: MITEL Corporation

Last Updated: 2003-03-24

Category: Security

Description: Manages MITEL IP packet filter rule sets and access control policy entries.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is MITEL-IPFILTER-MIB?

MITEL-IPFILTER-MIB is a vendor-specific MIB from Mitel covering IP packet filtering/access-control functionality on Mitel networking or telephony-network equipment. It exposes filter group objects—an access-restriction enable flag, a logical filter-group table, and an access-restriction table with rule ordering, type, and source address range—that together define an IP access control policy. Its monitoring role is primarily configuration/security-status oriented: verifying whether IP access restriction is enabled and inspecting deployed filter rules to confirm the intended access-control policy is actually in effect on a given interface. It is a Mitel-proprietary IP networking security MIB with no strong stated dependency on external standard MIBs beyond general IP addressing conventions. It is deployed on Mitel IP networking/voice infrastructure where administrators restrict IP access to management or signaling interfaces for security. Network engineers evaluating or troubleshooting this functionality can download the MITEL-IPFILTER-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in MITEL-IPFILTER-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Mitel IP networking/telephony equipment

Monitoring Examples

An operator would check mitelFltGrpAccessRestrictEnable to confirm access restriction is active, then poll mitelFltGrpAccessRestrictTable/mitelFltGrpAccessRestrictEntry rows for mitelAccResTableSrcAddrFrom/mitelAccResTableSrcAddrTo and mitelAccResTableOrder to verify filter rules match the intended source-address policy. A filter rule with an unexpectedly broad source address range, or the restriction feature reporting disabled, would reveal a security gap allowing unintended IP access.

What Can Be Monitored

IP access restriction enable state
filter group rule table
source address range per filter rule
filter rule order/type

Imported Objects

From RFC1213-MIB

ifIndex

From SNMPv2-CONF

NOTIFICATION-GROUP

From SNMPv2-SMI

Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
enterprises

From SNMPv2-TC

RowStatus

OIDs

OID symbolic	OID numeric	Type	Access	Description
mitel	1.3.6.1.4.1.1027
mitelIdentification	1.3.6.1.4.1.1027.1
mitelIdCallServers	1.3.6.1.4.1.1027.1.2
mitelIdCsIpera1000	1.3.6.1.4.1.1027.1.2.4
mitelIpera1000Notifications	1.3.6.1.4.1.1027.1.2.4.0			Call Server Ipera 1000 Notifications.
NTF mitelAccResTableTrapped	1.3.6.1.4.1.1027.1.2.4.0.402			The mitelAccResTableTrapped trap indicates that a datagram has matched a mitelFltGrpAccessRestrictEntry that has the mitelAccResTableTrap enabled.
mitelProprietary	1.3.6.1.4.1.1027.4
mitelPropIpNetworking	1.3.6.1.4.1.1027.4.8
mitelIpNetRouter	1.3.6.1.4.1.1027.4.8.1
mitelRouterIpGroup	1.3.6.1.4.1.1027.4.8.1.1
mitelIpGrpFilterGroup	1.3.6.1.4.1.1027.4.8.1.1.1			The MITEL IP MIB module.
INT mitelFltGrpAccessRestrictEnable	1.3.6.1.4.1.1027.4.8.1.1.1.1	INTEGER	read-write	This object indicates if the IP Access Restriction table is being used to filter or forward packets.
mitelFltGrpLogicalTable	1.3.6.1.4.1.1027.4.8.1.1.1.2		not-accessible	A table containing information about logical IP LAN destinations.
mitelFltGrpLogicalEntry	1.3.6.1.4.1.1027.4.8.1.1.1.2.1		not-accessible	Each entry of this table contains information about a specific logical interface toa local area network. Each logical LAN can support routing or bridging functions, these are considered virtual interfaces.
INT mitelLogTableAccessDef	1.3.6.1.4.1.1027.4.8.1.1.1.2.1.1	INTEGER	read-write	This object indicates what default access rights will apply to IP packets that do not match any of the access restrictions.
INT mitelLogTableAllowSrcRouting	1.3.6.1.4.1.1027.4.8.1.1.1.2.1.2	INTEGER	read-write	This indicates whether IP datagrams received on this interface and containing a source route option are to be discarded or accepted.
mitelFltGrpAccessRestrictTable	1.3.6.1.4.1.1027.4.8.1.1.1.3		not-accessible	The IP Access REstriction configuration table.
mitelFltGrpAccessRestrictEntry	1.3.6.1.4.1.1027.4.8.1.1.1.3.1		not-accessible	Contains information about a single IP Access filter.
I32 mitelAccResTableIfIndex	1.3.6.1.4.1.1027.4.8.1.1.1.3.1.1	Integer32	read-only	Identifies the destination interface to which this filter apply.
I32 mitelAccResTableOrder	1.3.6.1.4.1.1027.4.8.1.1.1.3.1.2	Integer32	read-only	Specifies the order that the filters on a destination are searched.
INT mitelAccResTableType	1.3.6.1.4.1.1027.4.8.1.1.1.3.1.3	INTEGER	read-write	This object indicates what action should be taken when a match on this entry has occurred.
IP mitelAccResTableSrcAddrFrom	1.3.6.1.4.1.1027.4.8.1.1.1.3.1.4	IpAddress	read-write	Defines the lower bound of the source IP address range. When determining address ranges, these four values are sequential: 255.255.255.254, 255.255.255.255, 0.0.0.0, and 0.0.0.1.
IP mitelAccResTableSrcAddrTo	1.3.6.1.4.1.1027.4.8.1.1.1.3.1.5	IpAddress	read-write	Defines the upper bound of the source IP address range. When determining address ranges, these four values are sequential: 255.255.255.254, 255.255.255.255, 0.0.0.0, and 0.0.0.1.
INT mitelAccResTableSrcAddrOutsideRange	1.3.6.1.4.1.1027.4.8.1.1.1.3.1.6	INTEGER	read-write	This indicates whether action is taken on values outside of the source IP address range or within that range.
IP mitelAccResTableDstAddrFrom	1.3.6.1.4.1.1027.4.8.1.1.1.3.1.7	IpAddress	read-write	Defines the lower bound of the destination IP address range. When determining address ranges, these four values are sequential: 255.255.255.254, 255.255.255.255, 0.0.0.0, and 0.0.0.1.
IP mitelAccResTableDstAddrTo	1.3.6.1.4.1.1027.4.8.1.1.1.3.1.8	IpAddress	read-write	Defines the upper bound of the destination IP address range. When determining address ranges, these four values are sequential: 255.255.255.254, 255.255.255.255, 0.0.0.0, and 0.0.0.1.
INT mitelAccResTableDstAddrOutsideRange	1.3.6.1.4.1.1027.4.8.1.1.1.3.1.9	INTEGER	read-write	This indicates whether action is taken on values outside of the destination IP address range or within that range.
INT mitelAccResTableProtocolFrom	1.3.6.1.4.1.1027.4.8.1.1.1.3.1.10	INTEGER	read-write	Defines the lower bound of the protocol ID range. When determining protocol ID ranges, these four values are sequential: 254, 255, 0, and 1.
INT mitelAccResTableProtocolTo	1.3.6.1.4.1.1027.4.8.1.1.1.3.1.11	INTEGER	read-write	Defines the upper bound of the protocol ID range. When determining protocol ID ranges, these four values are sequential: 254, 255, 0, and 1.
INT mitelAccResTableProtocolOutsideRange	1.3.6.1.4.1.1027.4.8.1.1.1.3.1.12	INTEGER	read-write	This indicates whether action is taken on values outside of the protocol ID range or within that range.
INT mitelAccResTableSrcPortFrom	1.3.6.1.4.1.1027.4.8.1.1.1.3.1.13	INTEGER	read-write	Defines the lower bound of the source port number range. When determining port number ranges, these four values are sequential: 65534, 65535, 0, and 1.
INT mitelAccResTableSrcPortTo	1.3.6.1.4.1.1027.4.8.1.1.1.3.1.14	INTEGER	read-write	Defines the upper bound of the source port number range. When determining port number ranges, these four values are sequential: 65534, 65535, 0, and 1.
INT mitelAccResTableSrcPortOutsideRange	1.3.6.1.4.1.1027.4.8.1.1.1.3.1.15	INTEGER	read-write	This indicates whether action is taken on values outside of the source port number range or within that range.
INT mitelAccResTableDstPortFrom	1.3.6.1.4.1.1027.4.8.1.1.1.3.1.16	INTEGER	read-write	Defines the lower bound of the destination port number range. When determining port number ranges, these four values are sequential: 65534, 65535, 0, and 1.
INT mitelAccResTableDstPortTo	1.3.6.1.4.1.1027.4.8.1.1.1.3.1.17	INTEGER	read-write	Defines the upper bound of the destination port number range. When determining port number ranges, these four values are sequential: 65534, 65535, 0, and 1.
INT mitelAccResTableDstPortOutsideRange	1.3.6.1.4.1.1027.4.8.1.1.1.3.1.18	INTEGER	read-write	This indicates whether action is taken on values outside of the destination port number range or within that range.
INT mitelAccResTableTcpSyn	1.3.6.1.4.1.1027.4.8.1.1.1.3.1.19	INTEGER	read-write	TCP header, synchronize sequence numbers flag.
INT mitelAccResTableTcpAck	1.3.6.1.4.1.1027.4.8.1.1.1.3.1.20	INTEGER	read-write	TCP header, acknowledgment flag.
INT mitelAccResTableTcpFin	1.3.6.1.4.1.1027.4.8.1.1.1.3.1.21	INTEGER	read-write	TCP header, finish flag.
INT mitelAccResTableTcpRst	1.3.6.1.4.1.1027.4.8.1.1.1.3.1.22	INTEGER	read-write	TCP header, reset flag.
INT mitelAccResTableMatchIn	1.3.6.1.4.1.1027.4.8.1.1.1.3.1.23	INTEGER	read-write	Indicates whether the filter applies to datagrams received on the interface. Normally, either mitelAccResTableMatchIn or mitelAccResTableMatchOut should be enabled.
INT mitelAccResTableMatchOut	1.3.6.1.4.1.1027.4.8.1.1.1.3.1.24	INTEGER	read-write	Indicates whether the filter applies to datagrams transmitted on the interface. Normally, either mitelAccResTableMatchIn or mitelAccResTableMatchOut should be enabled.
INT mitelAccResTableLog	1.3.6.1.4.1.1027.4.8.1.1.1.3.1.25	INTEGER	read-write	Controls whether a log message is to be produced each time a datagram matches the filter.
INT mitelAccResTableTrap	1.3.6.1.4.1.1027.4.8.1.1.1.3.1.26	INTEGER	read-write	Controls the generation of SNMP trap.
ROW mitelAccResTableStatus	1.3.6.1.4.1.1027.4.8.1.1.1.3.1.27	RowStatus	read-create	The current status of this entry.
I32 mitelAccResTableCount	1.3.6.1.4.1.1027.4.8.1.1.1.3.1.28	Integer32	read-only	Records the number of datagrams that matched this instance.

RFC description

MITEL IP filter configuration for managing IP access restrictions and packet forwarding.

Start monitoring Mitel IP networking/telephony equipment (IP packet filtering) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download MITEL-IPFILTER-MIB

What Is MITEL-IPFILTER-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description