TIARA-PACKETFILTER-MIB

All MIBs › TIARA-PACKETFILTER-MIB

Organization: Tiara Networks Inc.

Last Updated: 1994-07-27

Category: Security and Filtering

Description: Manages Tiara Networks WAN router packet filter rule sets and access control entries.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is TIARA-PACKETFILTER-MIB?

TIARA-PACKETFILTER-MIB is Tiara Networks' enterprise MIB for configuring packet filter rule sets and access control entries on its WAN routers, functioning as the device's firewall/ACL management interface. It exposes a named-filter index table, rule-set assignment tables mapping filter rule sets to inbound/outbound directions on an interface, and a counter-clearing control object. Its monitoring value is primarily configuration verification and traffic-filtering software status: an operator can confirm which rule sets are assigned to which interface direction and reset counters to baseline before investigating filtering behavior, useful for troubleshooting unexpected traffic drops or permits. It is a self-contained enterprise MIB with no apparent dependency on other standard MIBs beyond RowStatus conventions. It is typically deployed by network/security operators managing access-control policy on Tiara Networks WAN routers. Engineers can download the TIARA-PACKETFILTER-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in TIARA-PACKETFILTER-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Tiara Networks WAN router

Monitoring Examples

An administrator would review filterNameIndexTable entries via filterEntryName and filterNameIndex to enumerate defined filters, then check filterRuleAssignTable to see which filterRuleSetNameIn and filterRuleSetNameOut are applied to a given interface. Invoking filterRuleClearCounters before a test would let the operator isolate fresh hit counts for a rule set, revealing whether unexpected traffic is being matched (and dropped or permitted) by a particular filter after a policy change. filterEntryRowStatus and filterRuleAssignTableRowStatus would be checked to confirm a filter or its assignment is active rather than left in a notInService state.

What Can Be Monitored

defined packet filter names/rule sets
rule set assignment to interface direction
filter/assignment row status (active/inactive)
filter rule hit counters

Imported Objects

From RFC1213-MIB

DisplayString

From SNMPv2-SMI

Counter32
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

RowStatus
TruthValue

From TIARA-IP-MIB

tiaraIpIfIndex

OBJECT-TYPE

From TIARA-NETWORKS-SMI

tiaraMgmt

OBJECT-IDENTITY

How to Use in IPNetwork Monitor

Example using filterRuleStatsInBoundPermittedPkts OID:

Select a Tiara Networks WAN router (packet-filter rule-set/ACL config status) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type filterRuleStatsInBoundPermittedPkts into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. It reports the number of InBound Permitted Packets. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
tiaraPacketFilterMib	1.3.6.1.4.1.3174.2.51			The MIB module to describe Tiara's Packet Filter MIB
STR filterRuleClearCounters	1.3.6.1.4.1.3174.2.51.1	DisplayString	read-write	This variable is used to clear counters for a given Rule Set Name or All the counters. Whenever a set on this variable is done , the value given by the manager will be interpreted as the filter rule set name for which the counters will be cleared. As a special case if 'all' is the value of this variable then counters corresponding to all the filter rule set names will be cleared.
filterNameIndexTable	1.3.6.1.4.1.3174.2.51.2		not-accessible	This Table maintains a mapping of filter name and Filter Index
filterNameIndexEntry	1.3.6.1.4.1.3174.2.51.2.1		not-accessible	An entry in the filterRuleNameIndexTable
STR filterEntryName	1.3.6.1.4.1.3174.2.51.2.1.1	DisplayString	read-create	A unique name for the filter rule
I32 filterNameIndex	1.3.6.1.4.1.3174.2.51.2.1.2	Integer32	not-accessible	A unique identifier for the filter rule
ROW filterEntryRowStatus	1.3.6.1.4.1.3174.2.51.2.1.3	RowStatus	read-create	Used to add or delete a row in the table
filterRuleAssignTable	1.3.6.1.4.1.3174.2.51.3		not-accessible	FilterRuleAssign Table
filterRuleAssignTableEntry	1.3.6.1.4.1.3174.2.51.3.1		not-accessible	An entry in the filterRuleName Table
STR filterRuleSetNameIn	1.3.6.1.4.1.3174.2.51.3.1.1	DisplayString	read-create	Rule Set Name for IN coming Direction
STR filterRuleSetNameOut	1.3.6.1.4.1.3174.2.51.3.1.2	DisplayString	read-create	Rule Set Name for OUT going Direction
ROW filterRuleAssignTableRowStatus	1.3.6.1.4.1.3174.2.51.3.1.3	RowStatus	read-create	Used to Add or Delete a Row in the table
filterRuleSetTable	1.3.6.1.4.1.3174.2.51.4		not-accessible	Filter Rule SetTable
filterRuleSetTableEntry	1.3.6.1.4.1.3174.2.51.4.1		not-accessible	An entry in the Filter Rule Table
I32 filterRuleSetLineNo	1.3.6.1.4.1.3174.2.51.4.1.1	Integer32	not-accessible	Line Number where the Rule has to be inserted or an invalid number (0XFFFF) when a row has to be appeded
STR filterRuleName	1.3.6.1.4.1.3174.2.51.4.1.2	DisplayString	read-create	A unique name for the filter rule
INT filterRuleSetAction	1.3.6.1.4.1.3174.2.51.4.1.3	INTEGER	read-create	Specifies Action to be taken by the filter when a match occurs to corresponding filter rule
INT filterRuleSetProtocolType	1.3.6.1.4.1.3174.2.51.4.1.4	INTEGER	read-create	where protocol type ip will have value
IP filterRuleSetSrcIpAddr	1.3.6.1.4.1.3174.2.51.4.1.5	IpAddress	read-create	Number of the Source Network
IP filterRuleSetSrcMask	1.3.6.1.4.1.3174.2.51.4.1.6	IpAddress	read-create	Wild card Address to be applied to source Address
IP filterRuleSetDestIpAddr	1.3.6.1.4.1.3174.2.51.4.1.7	IpAddress	read-create	Number of the Destination Network
IP filterRuleSetDestMask	1.3.6.1.4.1.3174.2.51.4.1.8	IpAddress	read-create	Wild card Address to be applied to destination Address
I32 filterRuleSetPrecedence	1.3.6.1.4.1.3174.2.51.4.1.9	Integer32	read-create	Ip address precedence feild can be used to filter packets
I32 filterRuleSetTos	1.3.6.1.4.1.3174.2.51.4.1.10	Integer32	read-create	Ip header TOS feild can be used to filter the packets
I32 filterRuleSetIcmpType	1.3.6.1.4.1.3174.2.51.4.1.11	Integer32	read-create	ICMP message type can be used to filter the packets
I32 filterRuleSetIcmpCode	1.3.6.1.4.1.3174.2.51.4.1.12	Integer32	read-create	ICMP message Code can be used to filter the packets
I32 filterRuleSetSrcPortOne	1.3.6.1.4.1.3174.2.51.4.1.13	Integer32	read-create	Source Port 1
I32 filterRuleSetSrcPortTwo	1.3.6.1.4.1.3174.2.51.4.1.14	Integer32	read-create	Source Port 2
I32 filterRuleSetDestPortOne	1.3.6.1.4.1.3174.2.51.4.1.15	Integer32	read-create	Destination Port 1
I32 filterRuleSetDestPortTwo	1.3.6.1.4.1.3174.2.51.4.1.16	Integer32	read-create	Destination Port 2
INT filterRuleSetSrcRelationBetnPorts	1.3.6.1.4.1.3174.2.51.4.1.17	INTEGER	read-create	relation between the Source port
INT filterRuleSetDestRelationBetnPorts	1.3.6.1.4.1.3174.2.51.4.1.18	INTEGER	read-create	relation between the Destination ports
BIT filterRuleSetTcpFlags	1.3.6.1.4.1.3174.2.51.4.1.19	Bits	read-create	TCP flags can be used to filter the packets
T/F filterRuleSetLogAction	1.3.6.1.4.1.3174.2.51.4.1.20	TruthValue	read-create	When a rule match occurs a logging message about the packet which the match occured the entry will be logged
INT filterRuleSetConfigure	1.3.6.1.4.1.3174.2.51.4.1.21	INTEGER	read-create	This variable is used to append or insert a given filter rule to the filter rule set. If 'insert' is the command the linenumber at which the rule is inserted should be available in filterRuleSetLineNumber.'If command is 'add' then the line number should contain the invalid value (OxFFFF). Incase of 'add' to know the line number at which the filter rule was added the manager should do a SNMP walk
ROW filterRuleSetTableRowStatus	1.3.6.1.4.1.3174.2.51.4.1.22	RowStatus	read-create	Used to Add or Delete a Row in the table
filterRuleStatsTable	1.3.6.1.4.1.3174.2.51.5		not-accessible	Filter Rule Statistics Table
filterRuleStatsTableEntry	1.3.6.1.4.1.3174.2.51.5.1		not-accessible	An entry in the Filter Rule Statistics Table
C32 filterRuleStatsInBoundPermittedPktsEx	1.3.6.1.4.1.3174.2.51.5.1.1	Counter32	read-only	Number of InBound Permitted Packets
C32 filterRuleStatsInBoundDeniedPkts	1.3.6.1.4.1.3174.2.51.5.1.2	Counter32	read-only	Number of InBound Denied Packets
C32 filterRuleStatsInBoundUnMatchedPkts	1.3.6.1.4.1.3174.2.51.5.1.3	Counter32	read-only	Number of InBound UnMatched Packets
C32 filterRuleStatsOutBoundPermittedPkts	1.3.6.1.4.1.3174.2.51.5.1.4	Counter32	read-only	Number of OutBound Permitted Packets
C32 filterRuleStatsOutBoundDeniedPkts	1.3.6.1.4.1.3174.2.51.5.1.5	Counter32	read-only	Number of OutBound Denied Packets
C32 filterRuleStatsOutBoundUnMatchedPkts	1.3.6.1.4.1.3174.2.51.5.1.6	Counter32	read-only	Number of OutBound UnMatched Packets
C32 filterRuleStatsNonIpInBoundPkts	1.3.6.1.4.1.3174.2.51.5.1.7	Counter32	read-only	Number of Non Ip InBound Packets
C32 filterRuleStatsNonIpOutBoundPkts	1.3.6.1.4.1.3174.2.51.5.1.8	Counter32	read-only	Number of Non Ip OutBound Packets
C32 filterRuleStatsBadIpInBoundPkts	1.3.6.1.4.1.3174.2.51.5.1.9	Counter32	read-only	Number of Bad Non Ip InBound Packets
C32 filterRuleStatsBadIpOutBoundPkts	1.3.6.1.4.1.3174.2.51.5.1.10	Counter32	read-only	Number of Bad Non Ip OutBound Packets

RFC description

Manages packet filter rules and statistics on Tiara Networks routing platforms.

Start monitoring Tiara Networks WAN router (packet-filter rule-set/ACL config status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download TIARA-PACKETFILTER-MIB