TN-FILTER-MIB

All MIBs › TN-FILTER-MIB

Organization: Nokia

Last Updated: 2014-10-17

Category: Nokia Carrier Ethernet, Security and Filtering

Description: Manages Nokia carrier Ethernet IP and MAC filter policy configuration and entries.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is TN-FILTER-MIB?

TN-FILTER-MIB is a Nokia (formerly Alcatel-Lucent) proprietary MIB for managing IP and MAC traffic filter policies on Nokia 7x50 series carrier Ethernet/IP service routers. It exposes configuration tables for defining MAC filters, including filter identity, scope, default action, filter type, name, and whether the filter is actively applied, along with associated filter parameter tables. Its primary use is configuration and operational status monitoring of traffic filtering policy: administrators can verify whether a filter is applied to an interface, how many entries a filter contains, and its row status (active, provisioning, etc.), which reflects the software/configuration health of the filtering subsystem rather than physical hardware. As a Nokia SR OS module it works within Nokia's broader service-router MIB family and standard SNMP row-status conventions. It is deployed by carrier and service-provider network operators running Nokia 7x50 routers to enforce security/QoS filtering policies on Ethernet and IP traffic. When cross-referencing an unfamiliar identifier in an SNMP trap, an engineer can look up the corresponding TN-FILTER-MIB OID to determine which filter table or parameter it belongs to.

IPNetwork Monitor allows you to monitor SNMP objects defined in TN-FILTER-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Nokia 7x50 series carrier Ethernet/IP service routers, entire product line (IP/MAC filter policy config status)

Monitoring Examples

An administrator would poll tnMacFilterTable/tnMacFilterEntry, indexed by tnMacFilterId, checking tnMacFilterRowStatus to confirm a filter is active and tnMacFilterApplied to see if it's currently enforced on an interface, alongside tnMacFilterNumEntries to verify the expected number of filter rules are present. tnMacFilterDefaultAction and tnMacFilterType/tnMacFilterScope would be checked when troubleshooting unexpected traffic drops or permits, and tnMacFilterParamsTable would be examined for per-rule parameter detail.

What Can Be Monitored

MAC filter row status (active/provisioning)
whether a filter is applied to an interface
number of filter entries
default filter action
filter type and scope

Imported Objects

From INET-ADDRESS-MIB

InetAddressIPv6
InetAddressPrefixLength

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Counter64
Gauge32
Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Opaque
TimeTicks
Unsigned32

From SNMPv2-TC

DisplayString
MacAddress
RowPointer
RowStatus
TEXTUAL-CONVENTION
TimeStamp
TruthValue

From TN-SAP-MIB

tnSapEncapValue	OBJECT-TYPE
tnSapPortId	OBJECT-TYPE

From TN-SERV-MIB

tnSvcId

OBJECT-TYPE

From TN-TC-MIB

Dot1PPriority
IpAddressPrefixLength
SdpBindId
ServiceAccessPoint
TDSCPFilterActionValue
TDSCPNameOrEmpty
TEntryId
TEntryIndicator
TFrameType
TIpOption
TIpProtocol
TItemDescription
TItemMatch
TItemScope
TLNamedItemOrEmpty
TMacFilterType
TNamedItem
TNamedItemOrEmpty
TTcpUdpPort
TTcpUdpPortOperator
TmnxAdminState
TmnxEncapVal
TmnxOperState
TmnxPortID
TmnxServId

From TROPIC-GLOBAL-REG

tnSRMIBModules	OBJECT-IDENTITY
tnSRNotifyPrefix	OBJECT-IDENTITY
tnSRObjs	OBJECT-IDENTITY

From TROPIC-SYSTEM-MIB

tnSysSwitchId

OBJECT-TYPE

OIDs

OID symbolic	OID numeric	Type	Access	Description
tnFilterMIBModule	1.3.6.1.4.1.7483.5.1.3.21			This document is the SNMP MIB module to manage and provision Filter features on Nokia 7x50 systems. Copyright 2003-2011 Nokia. All rights reserved. Reproduction of this document is authorized on the condition that the foregoing copyright notice is included. This SNMP MIB module (Specification) embodies Nokia's proprietary intellectual property. Nokia retains all title and ownership in the Specification, including any revisions. Nokia grants all interested parties a non-exclusive license to use and distribute an unmodified copy of this Specification in connection with management of Nokia products, and without fee, provided this copyright notice and license appear on all copies. This Specification is supplied 'as is', and Nokia makes no warranty, either express or implied, as to the use, operation, condition, or performance of the Specification.
tnFilterObjects	1.3.6.1.4.1.7483.6.1.2.21
U32 tnFilterScalar1	1.3.6.1.4.1.7483.6.1.2.21.101	Unsigned32	read-only	A dummy scalar that satisfies a SNMP get request quickly when there is no 11QPE24 card provisioned. Otherwise, it has to traverse the remaining 11QPE24 MIB to get to the next applicable item.
U32 tnFilterScalar2	1.3.6.1.4.1.7483.6.1.2.21.102	Unsigned32	read-only
T/F tnMacFilterApplied	1.3.6.1.4.1.7483.6.1.2.21.3.1.8	TruthValue	read-only	Indicates if the filter has been applied or not.
INT tnMacFilterAssociationDirection	1.3.6.1.4.1.7483.6.1.2.21.8.1.1	INTEGER	read-only	The value of tnMacFilterAssociationDirection specifies the direction (ingress/egress) that the filter is applied.
tnMacFilterAssociationEntry	1.3.6.1.4.1.7483.6.1.2.21.8.1		not-accessible	Information about a particular MAC Filter association. Entries are automatically created when a filter is applied to a SAP.
I32 tnMacFilterAssociationScalar	1.3.6.1.4.1.7483.6.1.2.21.7	Integer32	read-only	Dummy scalar for tnMacFilterAssociationTable.
tnMacFilterAssociationTable	1.3.6.1.4.1.7483.6.1.2.21.8		not-accessible	Contains a List of all mac filters associations present on this system.
TFI tnMacFilterDefaultAction	1.3.6.1.4.1.7483.6.1.2.21.3.1.5	TFilterAction	read-create	The action to take for packets that do not match any filter entries.
TIT tnMacFilterDescription	1.3.6.1.4.1.7483.6.1.2.21.3.1.4	TItemDescription	read-create	User-provided description for this filter.
tnMacFilterEntry	1.3.6.1.4.1.7483.6.1.2.21.3.1		not-accessible	Information about a particular MAC Filter. Entries are created/deleted by user. Entries have a presumed StorageType of nonVolatile.
TMA tnMacFilterId	1.3.6.1.4.1.7483.6.1.2.21.3.1.1	TMACFilterID	not-accessible	Uniquely identifies a mac filter as configures on this system.
TLN tnMacFilterName	1.3.6.1.4.1.7483.6.1.2.21.3.1.7	TLNamedItemOrEmpty	read-create	The value of tnMacFilterName specifies the name to associate with this filter.
U32 tnMacFilterNumEntries	1.3.6.1.4.1.7483.6.1.2.21.3.1.9	Unsigned32	read-only	The number of MAC filter match entries configure against the MAC filter.
TFI tnMacFilterParamsAction	1.3.6.1.4.1.7483.6.1.2.21.4.1.5	TFilterActionOrDefault	read-create	The action to take for packets that match this filter entry. The value default(3) specifies this entry to inherit the behavior defined as the default for the filter.
TIT tnMacFilterParamsDescription	1.3.6.1.4.1.7483.6.1.2.21.4.1.4	TItemDescription	read-create	User-provided description for this filter entry.
DOT tnMacFilterParamsDot1pMask	1.3.6.1.4.1.7483.6.1.2.21.4.1.13	Dot1PPriority	read-create	IEEE 802.1p priority mask value for this policy MAC filter entry. Use zero to disable matching, use 7 to match everything.
DOT tnMacFilterParamsDot1pValue	1.3.6.1.4.1.7483.6.1.2.21.4.1.12	Dot1PPriority	read-create	IEEE 802.1p priority value for this policy MAC filter entry. Use -1 to disable matching this filter criteria.
NUM tnMacFilterParamsDsap	1.3.6.1.4.1.7483.6.1.2.21.4.1.15	ServiceAccessPoint	read-create	MAC DSAP to match for this policy MAC filter entry. This object has no significance if the object tnMacFilterParamsFrameType is not set to 802dot2LLC.
NUM tnMacFilterParamsDsapMask	1.3.6.1.4.1.7483.6.1.2.21.4.1.16	ServiceAccessPoint	read-create	MAC DSAP mask for this policy MAC filter entry. use 0 to disable matching by this criteria. This object has no significance if the object tnMacFilterParamsFrameType is not set to 802dot2LLC.
MAC tnMacFilterParamsDstMAC	1.3.6.1.4.1.7483.6.1.2.21.4.1.10	MacAddress	read-create	Destination MAC mask value for this policy MAC filter entry.
MAC tnMacFilterParamsDstMACMask	1.3.6.1.4.1.7483.6.1.2.21.4.1.11	MacAddress	read-create	Destination MAC mask value for this policy MAC filter entry. The mask is ANDed with the MAC to match tnMacFilterParamsDstMAC. A zero bit means ignore this bit, do not match. a one bit means match this bit with tnMacFilterParamsDstMAC. Use the value 00-00-00-00-00-00 to disable this filter criteria.
C64 tnMacFilterParamsEgressHitCount	1.3.6.1.4.1.7483.6.1.2.21.4.1.22	Counter64	read-only	This object indicates the number of times an egress packet matched this entry.
C64 tnMacFilterParamsEgrHitByteCount	1.3.6.1.4.1.7483.6.1.2.21.4.1.32	Counter64	read-only	The value of tnMacFilterParamsEgrHitByteCount indicates the number of bytes of all egress packets that matched this entry.
tnMacFilterParamsEntry	1.3.6.1.4.1.7483.6.1.2.21.4.1		not-accessible	Information about a particular MAC Filter entry. Every MAC Filter can have zero or more MAC Filter match entries. a filter entry with no match criteria set will match every packet, and the entry action will be taken. Entries are created/deleted by user. There is no StorageType object, entries have a presumed StorageType of nonVolatile.
INT tnMacFilterParamsEtherType	1.3.6.1.4.1.7483.6.1.2.21.4.1.14	INTEGER	read-create	Ethertype for this policy MAC filter entry. Use -1 to disable matching by this criteria. This object has no significance if the object tnMacFilterParamsFrameType is not set to Ethernet_II.
TFR tnMacFilterParamsFrameType	1.3.6.1.4.1.7483.6.1.2.21.4.1.6	TFrameType	read-create	The type of mac frame for which we are defining this match criteria.
TMN tnMacFilterParamsFwdSapEncapVal	1.3.6.1.4.1.7483.6.1.2.21.4.1.26	TmnxEncapVal	read-create	tnMacFilterParamsFwdSapEncapVal specifies the sap port encap value of the destination SAP for this Mac filter entry. A value different from 0 can only be specified if the tnMacFilterParamsFwdSvcId object also has a non-zero value, the tnMacFilterParamsFwdSapPortId object has a non zero value, and if the the value of the tnMacFilterParamsAction object of this entry is 'forward'. In addition a non-zero value can only be given if the object tnMacFilterParamsFwdSdpBind has a zero value. A value of 0 indicates that either 1) the sap encapsulation value is not specified when tnMacFilterParamsFwdSapPortId and tnMacFilterParamsFwdSvcId have valid values; or 2) that there is no SAP destination.
TMN tnMacFilterParamsFwdSapPortId	1.3.6.1.4.1.7483.6.1.2.21.4.1.25	TmnxPortID	read-create	tnMacFilterParamsFwdSapPortId specifies the sap port identity of the destination for this Mac filter entry. A value of 0 indicates that there is currently no SAP destination defined. A value different from 0 can only be specified if the tnMacFilterParamsFwdSvcId object also has a non-zero value, and if the the value of the tnMacFilterParamsAction object of this entry is 'forward'. In addition a non-zero value can only be given if the object tnMacFilterParamsFwdSdpBind has a zero value.
SDP tnMacFilterParamsFwdSdpBind	1.3.6.1.4.1.7483.6.1.2.21.4.1.27	SdpBindId	read-create	tnMacFilterParamsFwdSdpBind specifies the sdp bibd identity of the destination for this Mac filter entry. A value of 0 indicates that there is currently no SDP binding defined. A value different from 0 can only be specified if the tnMacFilterParamsFwdSvcId object also has a non-zero value, and if the the value of the tnMacFilterParamsAction object of this entry is 'forward'. In addition a non-zero value can only be given if the objects tnMacFilterParamsFwdSapPortId and tnMacFilterParamsFwdSapEncapVal have a zero value.
TMN tnMacFilterParamsFwdSvcId	1.3.6.1.4.1.7483.6.1.2.21.4.1.24	TmnxServId	read-only	tnMacFilterParamsFwdSvcId indicates the service id of the destination for this Mac filter entry. A value of 0 indicates that there is currently no active SAP or SDP destination.
TEN tnMacFilterParamsIndex	1.3.6.1.4.1.7483.6.1.2.21.4.1.1	TEntryId	not-accessible	This is the secondary index for the entry. Every mac filter can have multiple entries, therefore every mac filter entry is identified by the tnMacFilterId and tnMacFilterParamsIndex.
C64 tnMacFilterParamsIngressHitCount	1.3.6.1.4.1.7483.6.1.2.21.4.1.21	Counter64	read-only	This object indicates the number of times an ingress packet matched this entry.
C64 tnMacFilterParamsIngrHitByteCount	1.3.6.1.4.1.7483.6.1.2.21.4.1.31	Counter64	read-only	The value of tnMacFilterParamsIngrHitByteCount indicates the number of bytes of all ingress packets that matched this entry.
TFI tnMacFilterParamsLogId	1.3.6.1.4.1.7483.6.1.2.21.4.1.3	TFilterLogId	read-create	This object specifies the log to use for packets that match this entry. The value zero indicates that logging is disabled.
T/F tnMacFilterParamsLogInstantiated	1.3.6.1.4.1.7483.6.1.2.21.4.1.23	TruthValue	read-only	tnMacFilterParamsLogInstantiated indicates if the filter log for this filter entry has been instantiated or not.
STR tnMacFilterParamsRedirectURL	1.3.6.1.4.1.7483.6.1.2.21.4.1.30	DisplayString	read-create	The value of tnMacFilterParamsRedirectURL specifies the URL to redirect to, when the value of tnMacFilterParamsAction is 'httpRedirect'.
ROW tnMacFilterParamsRowStatus	1.3.6.1.4.1.7483.6.1.2.21.4.1.2	RowStatus	read-create	This object allows entries to be created and deleted in the tnMacFilterParamsTable.
INT tnMacFilterParamsSnapOui	1.3.6.1.4.1.7483.6.1.2.21.4.1.20	INTEGER	read-create	MAC SNAP OUI to match. The values zero(2) and nonZero(3) specify what to match. Matching can be disabled by the use of the value off(1). This object has no significance if the object tnMacFilterParamsFrameType is not set to 802dot2SNAP.
INT tnMacFilterParamsSnapPid	1.3.6.1.4.1.7483.6.1.2.21.4.1.19	INTEGER	read-create	MAC SNAP PID to match for this policy MAC filter entry. use -1 to disable matching by this criteria. This object has no significance if object tnMacFilterParamsFrameType is not set to 802dot2SNAP.
MAC tnMacFilterParamsSrcMAC	1.3.6.1.4.1.7483.6.1.2.21.4.1.8	MacAddress	read-create	Source MAC to match for this policy MAC filter entry.
MAC tnMacFilterParamsSrcMACMask	1.3.6.1.4.1.7483.6.1.2.21.4.1.9	MacAddress	read-create	Source MAC mask value for this policy MAC filter entry. The mask is ANDed with the MAC to match tnMacFilterParamsSrcMAC. A zero bit means ignore this bit, do not match. a one bit means match this bit with tnMacFilterParamsSrcMAC. Use the value 00-00-00-00-00-00 to disable this filter criteria.
NUM tnMacFilterParamsSsap	1.3.6.1.4.1.7483.6.1.2.21.4.1.17	ServiceAccessPoint	read-create	MAC SSAP to match for this policy MAC filter entry. This object has no significance if the object tnMacFilterParamsFrameType is not set to 802dot2LLC.
NUM tnMacFilterParamsSsapMask	1.3.6.1.4.1.7483.6.1.2.21.4.1.18	ServiceAccessPoint	read-create	MAC SSAP mask for this policy MAC filter entry. use 0 to disable matching by this criteria. This object has no significance if the object tnMacFilterParamsFrameType is not set to 802dot2LLC.
tnMacFilterParamsTable	1.3.6.1.4.1.7483.6.1.2.21.4		not-accessible	A table of all MAC filter match entries for all MAC filters.
TNA tnMacFilterParamsTimeRangeName	1.3.6.1.4.1.7483.6.1.2.21.4.1.28	TNamedItemOrEmpty	read-create	tnMacFilterParamsTimeRangeName specifies the tmnxTimeRangeEntry to be associated with this filter entry. A value for this object can only be specified during row creation, and cannot be altered lateron. Also, a value is accepted only if the tmnxTimeRangeEntry is defined in the TIMETRA-SCHEDULER-MIB::tmnxTimeRangeTable.tTimeRangeName.
TTI tnMacFilterParamsTimeRangeState	1.3.6.1.4.1.7483.6.1.2.21.4.1.29	TTimeRangeState	read-only	tnMacFilterParamsTimeRangeState indicates whether or not the entry is currently in effect. - timeRangeNotApplic: no time range is applicable for this entry. - timeRangeNotActive: A time range is defined in tnMacFilterParamsTimeRangeName, but is not active at this moment. Consequently the filter entry is not installed. - timeRangeActive. A time range is defined in tnMacFilterParamsTimeRangeName, and is activated successfully. - timeRangeActiveDownloadFailed: A time range is defined in tnMacFilterParamsTimeRangeName, and is activated, but the corresponding filter entry could not be installed due to resource problems.
ROW tnMacFilterRowStatus	1.3.6.1.4.1.7483.6.1.2.21.3.1.2	RowStatus	read-create	This object allows entries to be created and deleted in the tnMacFilterTable.
TIT tnMacFilterScope	1.3.6.1.4.1.7483.6.1.2.21.3.1.3	TItemScope	read-create	This object specifies the scope of this filter definition. If defined as exclusive(1), this filter can be instantiated only once as compared to the multiple instances that the filter can have if defined as template(2).
tnMacFilterTable	1.3.6.1.4.1.7483.6.1.2.21.3		not-accessible	Contains a List of all mac filters configured on this system.
TMA tnMacFilterType	1.3.6.1.4.1.7483.6.1.2.21.3.1.6	TMacFilterType	read-create	tnMacFilterType specifies which type of entries this mac filter can contain. If tnMacFilterType is set to 'normal(1)', all match criteria are accepted except the criteria mentioned below that belong to type isid(2) and vid(3). if tnMacFilterType is set to 'isid(2)' the only accepted match criteria for the filter entries are: - tMacFilterParamsLowISID - tMacFilterParamsHighISID If tnMacFilterType is set to vid(3) the only accepted match criteria for the filter entries are: - tMacFilterParamsInnerTagValue - tMacFilterParamsInnerTagMask - tMacFilterParamsOuterTagValue - tMacFilterParamsOuterTagMask tnMacFilterType can only be changed if the filter is not applied and has no entries.

RFC description

Vendor-specific filter MIB for TN systems providing management of packet filtering and access control lists.

Start monitoring Nokia 7x50 series carrier Ethernet/IP service routers, entire product line (IP/MAC filter policy config status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download TN-FILTER-MIB

What Is TN-FILTER-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description