Wellfleet-RFWALL-MIB

All MIBs › Wellfleet-RFWALL-MIB

Category: Wellfleet BayNetworks System Management

Description: Manages Wellfleet route filter and firewall combined policies for inter-zone traffic control.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is Wellfleet-RFWALL-MIB?

Wellfleet-RFWALL-MIB is a Wellfleet/Bay Networks vendor MIB combining route filtering and firewall functionality to control inter-zone traffic on the router. It exposes combined policy definitions spanning route filters and firewall rule sets, along with statistics on how those policies are applied to traffic between security zones. Monitoring this MIB is primarily about confirming the security/policy software is enforcing rules as intended; unexpectedly permissive rule matches or a policy showing no enforcement activity can indicate a firewall misconfiguration or a software fault in the policy engine. It builds directly on the base Wellfleet-RF-MIB route filter objects, extending them with firewall/zone concepts, so the two MIBs are used together. It is deployed on Wellfleet/Bay Networks routers acting as inter-zone security gateways in enterprise networks. Engineers can download the Wellfleet-RFWALL-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in Wellfleet-RFWALL-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Wellfleet/Bay Networks router

Monitoring Examples

An administrator would poll the combined policy table to confirm inter-zone rules are active and check rule match counters to see which policies are being triggered by real traffic. A zone-to-zone policy with an unexpectedly high deny count could indicate a legitimate application being blocked, while zero hits on a rule meant to block known bad traffic could mean the policy isn't being applied. No sample object names were provided for this MIB, so this example is inferred from the stated short description.

What Can Be Monitored

combined route filter/firewall policy configuration
inter-zone traffic match counts
policy enforcement statistics

Imported Objects

From RFC-1212

OBJECT-TYPE

From RFC1155-SMI

IpAddress

From Wellfleet-COMMON-MIB

wfFwallGroup

OBJECT-IDENTITY

OIDs

OID symbolic	OID numeric	Type	Access	Description
wfRFwallGroup	1.3.6.1.4.1.18.3.5.1.11.2
INT wfRFwallDelete	1.3.6.1.4.1.18.3.5.1.11.2.1	INTEGER	read-write	Create/Delete parameter
INT wfRFwallDisable	1.3.6.1.4.1.18.3.5.1.11.2.2	INTEGER	read-write	Enable/Disable parameter
INT wfRFwallState	1.3.6.1.4.1.18.3.5.1.11.2.3	INTEGER	read-only	State parameter
IP wfRFwallLogHostIp	1.3.6.1.4.1.18.3.5.1.11.2.4	IpAddress	read-write	Primary Log Machine IP address ip notation
INT wfRFwallLogHostIpInt	1.3.6.1.4.1.18.3.5.1.11.2.5	INTEGER	read-write	Primary Log Machine IP address decimal value: NOT IN USE
IP wfRFwallLocalHostIp	1.3.6.1.4.1.18.3.5.1.11.2.6	IpAddress	read-write	Local host IP address ip notation
INT wfRFwallLocalHostIpInt	1.3.6.1.4.1.18.3.5.1.11.2.7	INTEGER	read-write	Local host IP address decimal value: NOT IN USE
INT wfRFwallVersion	1.3.6.1.4.1.18.3.5.1.11.2.8	INTEGER	read-write	Version parameter - FireWall Protocol Version Number
INT wfRFwallHmemMin	1.3.6.1.4.1.18.3.5.1.11.2.9	INTEGER	read-write	Memory allocator initialization parameter: Min Value
INT wfRFwallHmemMax	1.3.6.1.4.1.18.3.5.1.11.2.10	INTEGER	read-write	Memory allocator initialization parameter: Max Value
IP wfRFwallLogHostIpBkp1	1.3.6.1.4.1.18.3.5.1.11.2.11	IpAddress	read-write	Secondary Log Machine IP address ip notation
INT wfRFwallLogHostIpIntBkp1	1.3.6.1.4.1.18.3.5.1.11.2.12	INTEGER	read-write	Secondary Log Machine IP address decimal value: NOT IN USE
IP wfRFwallLogHostIpBkp2	1.3.6.1.4.1.18.3.5.1.11.2.13	IpAddress	read-write	Tertiary Log Machine IP address ip notation
INT wfRFwallLogHostIpIntBkp2	1.3.6.1.4.1.18.3.5.1.11.2.14	INTEGER	read-write	Tertiary Log Machine IP address decimal value: NOT IN USE
INT wfRFwallFastPathDisable	1.3.6.1.4.1.18.3.5.1.11.2.15	INTEGER	read-write	Fast Path optimization Enable/Disable parameter
INT wfRFwallFilterTimer	1.3.6.1.4.1.18.3.5.1.11.2.16	INTEGER	read-write	This timer value specified in seconds, is the time interval between the attempts to download the filter from the backup management station if the download is not successful from the current management station.
INT wfRFwallLogTimer	1.3.6.1.4.1.18.3.5.1.11.2.17	INTEGER	read-write	This timer value specified in seconds, is the time interval between the attempts to log to the backup management hosts if the logging is not successful to the current management station.
INT wfRFwallKeepaliveTimerIdle	1.3.6.1.4.1.18.3.5.1.11.2.18	INTEGER	read-write	Idle session timeout period, in seconds. If an established TCP connection remains inactive for this interval, KEEPALIVE messages will be sent to the peer (if the Keepalive Timer is non-zero). Setting the Idle Timer to zero disables the keepalive feature.
INT wfRFwallKeepaliveTimerRetryTmo	1.3.6.1.4.1.18.3.5.1.11.2.19	INTEGER	read-write	KEEPALIVE retransmit timeout period, in seconds. This is the interval at which unacknowledged KEEPALIVE messages will be retransmitted. If the Idle Timer is set to zero, this timer ignored. If the Idle Timer is non-zero and this timer IS zero, no KEEPALIVEs are sent and the session is terminated upon expiration of the Idle Timer.
INT wfRFwallKeepaliveTimerRetries	1.3.6.1.4.1.18.3.5.1.11.2.20	INTEGER	read-write	Number of unacknowledged KEEPALIVE messages retransmitted before the TCP session is terminated. If this count is set to zero, only one KEEPALIVE message will be sent.

RFC description

Vendor-private Wellfleet MIB for managing firewall-related functions and configurations on Wellfleet network equipment.

Start monitoring Wellfleet/Bay Networks router (route-filter/firewall zone-policy enforcement status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download Wellfleet-RFWALL-MIB

What Is Wellfleet-RFWALL-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description