TN-ACCESS-MGMT-MIB

All MIBs › TN-ACCESS-MGMT-MIB

Description: MIB for configuring and monitoring access management mode and statistics on Transition Networks managed switches and devices

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is TN-ACCESS-MGMT-MIB?

TN-ACCESS-MGMT-MIB is a Transition Networks vendor MIB that configures and monitors the Access Management feature on Transition Networks managed switches, which restricts device management access (Telnet/SSH, Web, SNMP) to specific source IP ranges. tnAccessMgmtCfgTable, indexed by entPhysicalIndex, holds the global tnAccessMgmtMode enable/disable switch and a tnAccessMgmtClearOpCommand to reset statistics, while tnAccessMgmtTable defines each access rule as an IP address range (tnAccessMgmtStartIPAddress/EndIPAddress via InetAddress) with a BITS-valued tnAccessMgmtServiceType selecting which of Telnet/Web/SNMP the range may use, managed through tnAccessMgmtRowStatus for row creation and deletion. tnAccessMgmtStatsTable then exposes per-protocol received/discarded packet counters (Http, Https, Snmp, Telnet, Ssh) so an operator can confirm access control is actively filtering traffic as intended. This is primarily a security/access-control MIB rather than a hardware-sensor MIB, but its statistics reveal whether management-plane access restrictions are working or inadvertently blocking legitimate management traffic. It depends on ENTITY-MIB's entPhysicalIndex and INET-ADDRESS-MIB's InetAddress/InetAddressType, and is deployed on Transition Networks managed switches; administrators can perform a TN-ACCESS-MGMT-MIB download when instrumenting these devices.

IPNetwork Monitor allows you to monitor SNMP objects defined in TN-ACCESS-MGMT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Transition Networks managed switches

Monitoring Examples

An operator polls tnAccessMgmtStatsTable to compare tnAccessMgmtSshReceivedCount against tnAccessMgmtSshDiscardedCount after enabling tnAccessMgmtMode; a sudden spike in discarded SSH packets would indicate a management workstation's IP has fallen outside a configured tnAccessMgmtStartIPAddress/EndIPAddress range.

What Can Be Monitored

access management global enable/disable mode
configured IP address range per access rule
per-protocol (Telnet/Web/SNMP) service type bitmask
per-protocol received/discarded packet counters
access rule row status

Imported Objects

From ENTITY-MIB

entPhysicalIndex

OBJECT-TYPE

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMPv2-SMI

OBJECT-TYPE
Unsigned32

From SNMPv2-TC

RowStatus

From TN-MGMT-MIB

tnDevMgmt

OBJECT-IDENTITY

OIDs

OID symbolic	OID numeric	Type	Access	Description
tnDevAccessMgmt	1.3.6.1.4.1.868.2.5.3.1.1.36
tnAccessMgmtCfgTable	1.3.6.1.4.1.868.2.5.3.1.1.36.1		not-accessible	This table contains a mapping for access management configuraition.
tnAccessMgmtCfgEntry	1.3.6.1.4.1.868.2.5.3.1.1.36.1.1		not-accessible	The entry contains variables that are intended to configurate Access Management.
INT tnAccessMgmtMode	1.3.6.1.4.1.868.2.5.3.1.1.36.1.1.1	INTEGER	read-write	Indicates the access management mode operation. Possible modes are: Enabled: Enable access management mode operation. Disabled: Disable access management mode operation.
INT tnAccessMgmtClearOpCommand	1.3.6.1.4.1.868.2.5.3.1.1.36.1.1.2	INTEGER	read-write	none perform nothing. clear perform the operating of clear the Access Management Statistics.
tnAccessMgmtTable	1.3.6.1.4.1.868.2.5.3.1.1.36.2		not-accessible	This table contains a mapping for access management.
tnAccessMgmtEntry	1.3.6.1.4.1.868.2.5.3.1.1.36.2.1		not-accessible	The entry contains detailed information used to implement access controls.
U32 tnAccessMgmtId	1.3.6.1.4.1.868.2.5.3.1.1.36.2.1.1	Unsigned32	not-accessible	Indicates the access id in the entry.
IPt tnAccessMgmtAddressType	1.3.6.1.4.1.868.2.5.3.1.1.36.2.1.2	InetAddressType	read-write	Indicates the type of target device IP address.
IP tnAccessMgmtStartIPAddress	1.3.6.1.4.1.868.2.5.3.1.1.36.2.1.3	InetAddress	read-write	Indicates the start IP address for the access management entry.
IP tnAccessMgmtEndIPAddress	1.3.6.1.4.1.868.2.5.3.1.1.36.2.1.4	InetAddress	read-write	Indicates the end IP address for the access management entry.
BIT tnAccessMgmtServiceType	1.3.6.1.4.1.868.2.5.3.1.1.36.2.1.5	Bits	read-write	- Telnet(0) Indicates that the host can access the switch from TELNET/SSH interface if the host IP address matches the IP address range provided in the entry. - Web(1) Indicates that the host can access the switch from HTTP/HTTPS interface if the host IP address matches the IP address range provided in the entry. - Snmp(2) Indicates that the host can access the switch from SNMP interface if the host IP address matches the IP address range provided in the entry.
ROW tnAccessMgmtRowStatus	1.3.6.1.4.1.868.2.5.3.1.1.36.2.1.6	RowStatus	read-create	This indicates the status of the entry, and is used to create and delete entries in this table.
tnAccessMgmtStatsTable	1.3.6.1.4.1.868.2.5.3.1.1.36.3		not-accessible	This table contains a mapping for access management statistics.
tnAccessMgmtStatsEntry	1.3.6.1.4.1.868.2.5.3.1.1.36.3.1		not-accessible	The entry contains the details of Access Management Statistics.
U32 tnAccessMgmtHttpReceivedCount	1.3.6.1.4.1.868.2.5.3.1.1.36.3.1.1	Unsigned32	read-only	Number of received packets from the interface(http) when access management mode is enabled.
U32 tnAccessMgmtHttpDiscardedCount	1.3.6.1.4.1.868.2.5.3.1.1.36.3.1.2	Unsigned32	read-only	Number of discarded packets from the interface(http) when access management mode is enabled.
U32 tnAccessMgmtHttpsReceivedCount	1.3.6.1.4.1.868.2.5.3.1.1.36.3.1.3	Unsigned32	read-only	Number of received packets from the interface(https) when access management mode is enabled.
U32 tnAccessMgmtHttpsDiscardedCount	1.3.6.1.4.1.868.2.5.3.1.1.36.3.1.4	Unsigned32	read-only	Number of discarded packets from the interface(https) when access management mode is enabled.
U32 tnAccessMgmtSnmpReceivedCount	1.3.6.1.4.1.868.2.5.3.1.1.36.3.1.5	Unsigned32	read-only	Number of received packets from the interface(snmp) when access management mode is enabled.
U32 tnAccessMgmtSnmpDiscardedCount	1.3.6.1.4.1.868.2.5.3.1.1.36.3.1.6	Unsigned32	read-only	Number of discarded packets from the interface(snmp) when access management mode is enabled.
U32 tnAccessMgmtTelnetReceivedCount	1.3.6.1.4.1.868.2.5.3.1.1.36.3.1.7	Unsigned32	read-only	Number of received packets from the interface(telnet) when access management mode is enabled.
U32 tnAccessMgmtTelnetDiscardedCount	1.3.6.1.4.1.868.2.5.3.1.1.36.3.1.8	Unsigned32	read-only	Number of discarded packets from the interface(telnet) when access management mode is enabled.
U32 tnAccessMgmtSshReceivedCount	1.3.6.1.4.1.868.2.5.3.1.1.36.3.1.9	Unsigned32	read-only	Number of received packets from the interface(ssh) when access management mode is enabled.
U32 tnAccessMgmtSshDiscardedCount	1.3.6.1.4.1.868.2.5.3.1.1.36.3.1.10	Unsigned32	read-only	Number of discarded packets from the interface(ssh) when access management mode is enabled.

RFC description

Configures access management mode and tracks access management statistics for Transition Networks devices.

Start monitoring Transition Networks managed switches (management-access source-IP restriction/statistics status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download TN-ACCESS-MGMT-MIB

What Is TN-ACCESS-MGMT-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description