All MIBs › TN-FILTER-MIB
Organization: Nokia
Last Updated: 2014-10-17
Category: Nokia Carrier Ethernet, Security and Filtering
Description:
Manages Nokia carrier Ethernet IP and MAC filter policy configuration and entries.
Imported Objects
From INET-ADDRESS-MIB
| InetAddressIPv6 | |
| InetAddressPrefixLength |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| NOTIFICATION-GROUP | |
| OBJECT-GROUP |
From SNMPv2-SMI
| Counter32 | |
| Counter64 | |
| Gauge32 | |
| Integer32 | |
| IpAddress | |
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE | |
| Opaque | |
| TimeTicks | |
| Unsigned32 |
From SNMPv2-TC
| DisplayString | |
| MacAddress | |
| RowPointer | |
| RowStatus | |
| TEXTUAL-CONVENTION | |
| TimeStamp | |
| TruthValue |
From TN-SAP-MIB
| tnSapEncapValue | OBJECT-TYPE |
| tnSapPortId | OBJECT-TYPE |
From TN-SERV-MIB
| tnSvcId | OBJECT-TYPE |
From TN-TC-MIB
| Dot1PPriority | |
| IpAddressPrefixLength | |
| SdpBindId | |
| ServiceAccessPoint | |
| TDSCPFilterActionValue | |
| TDSCPNameOrEmpty | |
| TEntryId | |
| TEntryIndicator | |
| TFrameType | |
| TIpOption | |
| TIpProtocol | |
| TItemDescription | |
| TItemMatch | |
| TItemScope | |
| TLNamedItemOrEmpty | |
| TMacFilterType | |
| TNamedItem | |
| TNamedItemOrEmpty | |
| TTcpUdpPort | |
| TTcpUdpPortOperator | |
| TmnxAdminState | |
| TmnxEncapVal | |
| TmnxOperState | |
| TmnxPortID | |
| TmnxServId |
From TROPIC-GLOBAL-REG
| tnSRMIBModules | OBJECT-IDENTITY |
| tnSRNotifyPrefix | OBJECT-IDENTITY |
| tnSRObjs | OBJECT-IDENTITY |
From TROPIC-SYSTEM-MIB
| tnSysSwitchId | OBJECT-TYPE |
What Is TN-FILTER-MIB?
TN-FILTER-MIB is a Nokia (formerly Alcatel-Lucent) proprietary MIB for managing IP and MAC traffic filter policies on Nokia 7x50 series carrier Ethernet/IP service routers. It exposes configuration tables for defining MAC filters, including filter identity, scope, default action, filter type, name, and whether the filter is actively applied, along with associated filter parameter tables. Its primary use is configuration and operational status monitoring of traffic filtering policy: administrators can verify whether a filter is applied to an interface, how many entries a filter contains, and its row status (active, provisioning, etc.), which reflects the software/configuration health of the filtering subsystem rather than physical hardware. As a Nokia SR OS module it works within Nokia's broader service-router MIB family and standard SNMP row-status conventions. It is deployed by carrier and service-provider network operators running Nokia 7x50 routers to enforce security/QoS filtering policies on Ethernet and IP traffic. When cross-referencing an unfamiliar identifier in an SNMP trap, an engineer can look up the corresponding TN-FILTER-MIB OID to determine which filter table or parameter it belongs to.
IPNetwork Monitor allows you to monitor SNMP objects defined in TN-FILTER-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
What Can Be Monitored
- MAC filter row status (active/provisioning)
- whether a filter is applied to an interface
- number of filter entries
- default filter action
- filter type and scope
Supported Devices
- Nokia 7x50 series carrier Ethernet/IP service routers, entire product line (IP/MAC filter policy config status)
Monitoring Examples
An administrator would poll tnMacFilterTable/tnMacFilterEntry, indexed by tnMacFilterId, checking tnMacFilterRowStatus to confirm a filter is active and tnMacFilterApplied to see if it's currently enforced on an interface, alongside tnMacFilterNumEntries to verify the expected number of filter rules are present. tnMacFilterDefaultAction and tnMacFilterType/tnMacFilterScope would be checked when troubleshooting unexpected traffic drops or permits, and tnMacFilterParamsTable would be examined for per-rule parameter detail.
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| tnFilterMIBModule | 1.3.6.1.4.1.7483.5.1.3.21 | This document is the SNMP MIB module to manage and provision Filter features on Nokia 7x50 systems. Copyright 2003-2011 Nokia. All rights reserved. Reproduction of this document is authorized on the condition that the foregoing copyright notice is included. This SNMP MIB module (Specification) embodies Nokia's proprietary intellectual property. Nokia retains all title and ownership in the Specification, including any revisions. Nokia grants all interested parties a non-exclusive license to use and distribute an unmodified copy of this Specification in connection with management of Nokia products, and without fee, provided this copyright notice and license appear on all copies. This Specification is supplied 'as is', and Nokia makes no warranty, either express or implied, as to the use, operation, condition, or performance of the Specification. | ||
| tnFilterObjects | 1.3.6.1.4.1.7483.6.1.2.21 | |||
| tnMacFilterTable | 1.3.6.1.4.1.7483.6.1.2.21.3 | not-accessible | Contains a List of all mac filters configured on this system. | |
| tnMacFilterEntry | 1.3.6.1.4.1.7483.6.1.2.21.3.1 | not-accessible | Information about a particular MAC Filter. Entries are created/deleted by user. Entries have a presumed StorageType of nonVolatile. | |
| TMA tnMacFilterId | 1.3.6.1.4.1.7483.6.1.2.21.3.1.1 | TMACFilterID | not-accessible | Uniquely identifies a mac filter as configures on this system. |
| ROW tnMacFilterRowStatus | 1.3.6.1.4.1.7483.6.1.2.21.3.1.2 | RowStatus | read-create | This object allows entries to be created and deleted in the tnMacFilterTable. |
| TIT tnMacFilterScope | 1.3.6.1.4.1.7483.6.1.2.21.3.1.3 | TItemScope | read-create | This object specifies the scope of this filter definition. If defined as exclusive(1), this filter can be instantiated only once as compared to the multiple instances that the filter can have if defined as template(2). |
| TIT tnMacFilterDescription | 1.3.6.1.4.1.7483.6.1.2.21.3.1.4 | TItemDescription | read-create | User-provided description for this filter. |
| TFI tnMacFilterDefaultAction | 1.3.6.1.4.1.7483.6.1.2.21.3.1.5 | TFilterAction | read-create | The action to take for packets that do not match any filter entries. |
| TMA tnMacFilterType | 1.3.6.1.4.1.7483.6.1.2.21.3.1.6 | TMacFilterType | read-create | tnMacFilterType specifies which type of entries this mac filter can contain. If tnMacFilterType is set to 'normal(1)', all match criteria are accepted except the criteria mentioned below that belong to type isid(2) and vid(3). if tnMacFilterType is set to 'isid(2)' the only accepted match criteria for the filter entries are: - tMacFilterParamsLowISID - tMacFilterParamsHighISID If tnMacFilterType is set to vid(3) the only accepted match criteria for the filter entries are: - tMacFilterParamsInnerTagValue - tMacFilterParamsInnerTagMask - tMacFilterParamsOuterTagValue - tMacFilterParamsOuterTagMask tnMacFilterType can only be changed if the filter is not applied and has no entries. |
| TLN tnMacFilterName | 1.3.6.1.4.1.7483.6.1.2.21.3.1.7 | TLNamedItemOrEmpty | read-create | The value of tnMacFilterName specifies the name to associate with this filter. |
| T/F tnMacFilterApplied | 1.3.6.1.4.1.7483.6.1.2.21.3.1.8 | TruthValue | read-only | Indicates if the filter has been applied or not. |
| U32 tnMacFilterNumEntries | 1.3.6.1.4.1.7483.6.1.2.21.3.1.9 | Unsigned32 | read-only | The number of MAC filter match entries configure against the MAC filter. |
| tnMacFilterParamsTable | 1.3.6.1.4.1.7483.6.1.2.21.4 | not-accessible | A table of all MAC filter match entries for all MAC filters. | |
| tnMacFilterParamsEntry | 1.3.6.1.4.1.7483.6.1.2.21.4.1 | not-accessible | Information about a particular MAC Filter entry. Every MAC Filter can have zero or more MAC Filter match entries. a filter entry with no match criteria set will match every packet, and the entry action will be taken. Entries are created/deleted by user. There is no StorageType object, entries have a presumed StorageType of nonVolatile. | |
| TEN tnMacFilterParamsIndex | 1.3.6.1.4.1.7483.6.1.2.21.4.1.1 | TEntryId | not-accessible | This is the secondary index for the entry. Every mac filter can have multiple entries, therefore every mac filter entry is identified by the tnMacFilterId and tnMacFilterParamsIndex. |
| ROW tnMacFilterParamsRowStatus | 1.3.6.1.4.1.7483.6.1.2.21.4.1.2 | RowStatus | read-create | This object allows entries to be created and deleted in the tnMacFilterParamsTable. |
| TFI tnMacFilterParamsLogId | 1.3.6.1.4.1.7483.6.1.2.21.4.1.3 | TFilterLogId | read-create | This object specifies the log to use for packets that match this entry. The value zero indicates that logging is disabled. |
| TIT tnMacFilterParamsDescription | 1.3.6.1.4.1.7483.6.1.2.21.4.1.4 | TItemDescription | read-create | User-provided description for this filter entry. |
| TFI tnMacFilterParamsAction | 1.3.6.1.4.1.7483.6.1.2.21.4.1.5 | TFilterActionOrDefault | read-create | The action to take for packets that match this filter entry. The value default(3) specifies this entry to inherit the behavior defined as the default for the filter. |
| TFR tnMacFilterParamsFrameType | 1.3.6.1.4.1.7483.6.1.2.21.4.1.6 | TFrameType | read-create | The type of mac frame for which we are defining this match criteria. |
| MAC tnMacFilterParamsSrcMAC | 1.3.6.1.4.1.7483.6.1.2.21.4.1.8 | MacAddress | read-create | Source MAC to match for this policy MAC filter entry. |
| MAC tnMacFilterParamsSrcMACMask | 1.3.6.1.4.1.7483.6.1.2.21.4.1.9 | MacAddress | read-create | Source MAC mask value for this policy MAC filter entry. The mask is ANDed with the MAC to match tnMacFilterParamsSrcMAC. A zero bit means ignore this bit, do not match. a one bit means match this bit with tnMacFilterParamsSrcMAC. Use the value 00-00-00-00-00-00 to disable this filter criteria. |
| MAC tnMacFilterParamsDstMAC | 1.3.6.1.4.1.7483.6.1.2.21.4.1.10 | MacAddress | read-create | Destination MAC mask value for this policy MAC filter entry. |
| MAC tnMacFilterParamsDstMACMask | 1.3.6.1.4.1.7483.6.1.2.21.4.1.11 | MacAddress | read-create | Destination MAC mask value for this policy MAC filter entry. The mask is ANDed with the MAC to match tnMacFilterParamsDstMAC. A zero bit means ignore this bit, do not match. a one bit means match this bit with tnMacFilterParamsDstMAC. Use the value 00-00-00-00-00-00 to disable this filter criteria. |
| DOT tnMacFilterParamsDot1pValue | 1.3.6.1.4.1.7483.6.1.2.21.4.1.12 | Dot1PPriority | read-create | IEEE 802.1p priority value for this policy MAC filter entry. Use -1 to disable matching this filter criteria. |
| DOT tnMacFilterParamsDot1pMask | 1.3.6.1.4.1.7483.6.1.2.21.4.1.13 | Dot1PPriority | read-create | IEEE 802.1p priority mask value for this policy MAC filter entry. Use zero to disable matching, use 7 to match everything. |
| INT tnMacFilterParamsEtherType | 1.3.6.1.4.1.7483.6.1.2.21.4.1.14 | INTEGER | read-create | Ethertype for this policy MAC filter entry. Use -1 to disable matching by this criteria. This object has no significance if the object tnMacFilterParamsFrameType is not set to Ethernet_II. |
| NUM tnMacFilterParamsDsap | 1.3.6.1.4.1.7483.6.1.2.21.4.1.15 | ServiceAccessPoint | read-create | MAC DSAP to match for this policy MAC filter entry. This object has no significance if the object tnMacFilterParamsFrameType is not set to 802dot2LLC. |
| NUM tnMacFilterParamsDsapMask | 1.3.6.1.4.1.7483.6.1.2.21.4.1.16 | ServiceAccessPoint | read-create | MAC DSAP mask for this policy MAC filter entry. use 0 to disable matching by this criteria. This object has no significance if the object tnMacFilterParamsFrameType is not set to 802dot2LLC. |
| NUM tnMacFilterParamsSsap | 1.3.6.1.4.1.7483.6.1.2.21.4.1.17 | ServiceAccessPoint | read-create | MAC SSAP to match for this policy MAC filter entry. This object has no significance if the object tnMacFilterParamsFrameType is not set to 802dot2LLC. |
| NUM tnMacFilterParamsSsapMask | 1.3.6.1.4.1.7483.6.1.2.21.4.1.18 | ServiceAccessPoint | read-create | MAC SSAP mask for this policy MAC filter entry. use 0 to disable matching by this criteria. This object has no significance if the object tnMacFilterParamsFrameType is not set to 802dot2LLC. |
| INT tnMacFilterParamsSnapPid | 1.3.6.1.4.1.7483.6.1.2.21.4.1.19 | INTEGER | read-create | MAC SNAP PID to match for this policy MAC filter entry. use -1 to disable matching by this criteria. This object has no significance if object tnMacFilterParamsFrameType is not set to 802dot2SNAP. |
| INT tnMacFilterParamsSnapOui | 1.3.6.1.4.1.7483.6.1.2.21.4.1.20 | INTEGER | read-create | MAC SNAP OUI to match. The values zero(2) and nonZero(3) specify what to match. Matching can be disabled by the use of the value off(1). This object has no significance if the object tnMacFilterParamsFrameType is not set to 802dot2SNAP. |
| C64 tnMacFilterParamsIngressHitCount | 1.3.6.1.4.1.7483.6.1.2.21.4.1.21 | Counter64 | read-only | This object indicates the number of times an ingress packet matched this entry. |
| C64 tnMacFilterParamsEgressHitCount | 1.3.6.1.4.1.7483.6.1.2.21.4.1.22 | Counter64 | read-only | This object indicates the number of times an egress packet matched this entry. |
| T/F tnMacFilterParamsLogInstantiated | 1.3.6.1.4.1.7483.6.1.2.21.4.1.23 | TruthValue | read-only | tnMacFilterParamsLogInstantiated indicates if the filter log for this filter entry has been instantiated or not. |
| TMN tnMacFilterParamsFwdSvcId | 1.3.6.1.4.1.7483.6.1.2.21.4.1.24 | TmnxServId | read-only | tnMacFilterParamsFwdSvcId indicates the service id of the destination for this Mac filter entry. A value of 0 indicates that there is currently no active SAP or SDP destination. |
| TMN tnMacFilterParamsFwdSapPortId | 1.3.6.1.4.1.7483.6.1.2.21.4.1.25 | TmnxPortID | read-create | tnMacFilterParamsFwdSapPortId specifies the sap port identity of the destination for this Mac filter entry. A value of 0 indicates that there is currently no SAP destination defined. A value different from 0 can only be specified if the tnMacFilterParamsFwdSvcId object also has a non-zero value, and if the the value of the tnMacFilterParamsAction object of this entry is 'forward'. In addition a non-zero value can only be given if the object tnMacFilterParamsFwdSdpBind has a zero value. |
| TMN tnMacFilterParamsFwdSapEncapVal | 1.3.6.1.4.1.7483.6.1.2.21.4.1.26 | TmnxEncapVal | read-create | tnMacFilterParamsFwdSapEncapVal specifies the sap port encap value of the destination SAP for this Mac filter entry. A value different from 0 can only be specified if the tnMacFilterParamsFwdSvcId object also has a non-zero value, the tnMacFilterParamsFwdSapPortId object has a non zero value, and if the the value of the tnMacFilterParamsAction object of this entry is 'forward'. In addition a non-zero value can only be given if the object tnMacFilterParamsFwdSdpBind has a zero value. A value of 0 indicates that either 1) the sap encapsulation value is not specified when tnMacFilterParamsFwdSapPortId and tnMacFilterParamsFwdSvcId have valid values; or 2) that there is no SAP destination. |
| SDP tnMacFilterParamsFwdSdpBind | 1.3.6.1.4.1.7483.6.1.2.21.4.1.27 | SdpBindId | read-create | tnMacFilterParamsFwdSdpBind specifies the sdp bibd identity of the destination for this Mac filter entry. A value of 0 indicates that there is currently no SDP binding defined. A value different from 0 can only be specified if the tnMacFilterParamsFwdSvcId object also has a non-zero value, and if the the value of the tnMacFilterParamsAction object of this entry is 'forward'. In addition a non-zero value can only be given if the objects tnMacFilterParamsFwdSapPortId and tnMacFilterParamsFwdSapEncapVal have a zero value. |
| TNA tnMacFilterParamsTimeRangeName | 1.3.6.1.4.1.7483.6.1.2.21.4.1.28 | TNamedItemOrEmpty | read-create | tnMacFilterParamsTimeRangeName specifies the tmnxTimeRangeEntry to be associated with this filter entry. A value for this object can only be specified during row creation, and cannot be altered lateron. Also, a value is accepted only if the tmnxTimeRangeEntry is defined in the TIMETRA-SCHEDULER-MIB::tmnxTimeRangeTable.tTimeRangeName. |
| TTI tnMacFilterParamsTimeRangeState | 1.3.6.1.4.1.7483.6.1.2.21.4.1.29 | TTimeRangeState | read-only | tnMacFilterParamsTimeRangeState indicates whether or not the entry is currently in effect. - timeRangeNotApplic: no time range is applicable for this entry. - timeRangeNotActive: A time range is defined in tnMacFilterParamsTimeRangeName, but is not active at this moment. Consequently the filter entry is not installed. - timeRangeActive. A time range is defined in tnMacFilterParamsTimeRangeName, and is activated successfully. - timeRangeActiveDownloadFailed: A time range is defined in tnMacFilterParamsTimeRangeName, and is activated, but the corresponding filter entry could not be installed due to resource problems. |
| STR tnMacFilterParamsRedirectURL | 1.3.6.1.4.1.7483.6.1.2.21.4.1.30 | DisplayString | read-create | The value of tnMacFilterParamsRedirectURL specifies the URL to redirect to, when the value of tnMacFilterParamsAction is 'httpRedirect'. |
| C64 tnMacFilterParamsIngrHitByteCount | 1.3.6.1.4.1.7483.6.1.2.21.4.1.31 | Counter64 | read-only | The value of tnMacFilterParamsIngrHitByteCount indicates the number of bytes of all ingress packets that matched this entry. |
| C64 tnMacFilterParamsEgrHitByteCount | 1.3.6.1.4.1.7483.6.1.2.21.4.1.32 | Counter64 | read-only | The value of tnMacFilterParamsEgrHitByteCount indicates the number of bytes of all egress packets that matched this entry. |
| I32 tnMacFilterAssociationScalar | 1.3.6.1.4.1.7483.6.1.2.21.7 | Integer32 | read-only | Dummy scalar for tnMacFilterAssociationTable. |
| tnMacFilterAssociationTable | 1.3.6.1.4.1.7483.6.1.2.21.8 | not-accessible | Contains a List of all mac filters associations present on this system. | |
| tnMacFilterAssociationEntry | 1.3.6.1.4.1.7483.6.1.2.21.8.1 | not-accessible | Information about a particular MAC Filter association. Entries are automatically created when a filter is applied to a SAP. | |
| INT tnMacFilterAssociationDirection | 1.3.6.1.4.1.7483.6.1.2.21.8.1.1 | INTEGER | read-only | The value of tnMacFilterAssociationDirection specifies the direction (ingress/egress) that the filter is applied. |
| U32 tnFilterScalar1 | 1.3.6.1.4.1.7483.6.1.2.21.101 | Unsigned32 | read-only | A dummy scalar that satisfies a SNMP get request quickly when there is no 11QPE24 card provisioned. Otherwise, it has to traverse the remaining 11QPE24 MIB to get to the next applicable item. |
| U32 tnFilterScalar2 | 1.3.6.1.4.1.7483.6.1.2.21.102 | Unsigned32 | read-only |
RFC description
Vendor-specific filter MIB for TN systems providing management of packet filtering and access control lists.
Start monitoring Nokia 7x50 series carrier Ethernet/IP service routers, entire product line (IP/MAC filter policy config status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.