A3COM-HUAWEI-DOMAIN-MIB

All MIBs › A3COM-HUAWEI-DOMAIN-MIB

Organization: H3C Technologies Co., Ltd.

Last Updated: 2009-08-05

Category: RADIUS and AAA, Vendor: H3C/HH3C

Description: Manages AAA domain profiles, authentication and accounting schemes assigned per domain on H3C devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is A3COM-HUAWEI-DOMAIN-MIB?

This is a joint 3Com/Huawei (H3C) private enterprise MIB for managing AAA "domains" — logical groupings that bind authentication, authorization, and accounting schemes to sets of users — on H3C/3Com switches and routers. It exposes configuration objects for domain names and the specific authentication, authorization, and accounting scheme assigned to each domain. It is primarily a configuration/security MIB rather than a hardware-health MIB, but administrators use it to verify that AAA domain bindings are correctly applied, which affects whether users can even authenticate to manage or monitor the device. It depends conceptually on the device's broader AAA subsystem and typically coexists with related H3C authentication-scheme MIBs. It is deployed on H3C/3Com enterprise switches and routers where centralized or domain-based AAA policy is used for network access control. Network engineers evaluating or troubleshooting this functionality can download the A3COM-HUAWEI-DOMAIN-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in A3COM-HUAWEI-DOMAIN-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

H3C/3Com enterprise switch or router

Monitoring Examples

No sample_objects were provided; based on the module description it would expose a domain table keyed by domain name with columns for the assigned authentication, authorization, and accounting scheme, letting an administrator confirm that a given domain is bound to the intended RADIUS/local scheme rather than an unexpected or default one.

What Can Be Monitored

configured AAA domain names
authentication scheme per domain
accounting scheme per domain

Imported Objects

From A3COM-HUAWEI-OID-MIB

h3cCommon

OBJECT-IDENTITY

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

From SNMPv2-TC

RowStatus
TEXTUAL-CONVENTION
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
h3cDomain	1.3.6.1.4.1.43.45.1.10.2.46			The MIB module is used for managing domain.
h3cDomainControl	1.3.6.1.4.1.43.45.1.10.2.46.1
OCT h3cDomainDefault	1.3.6.1.4.1.43.45.1.10.2.46.1.1	OCTET STRING	read-write	Specifies default domain on the equipment. Default value is 'system'.
h3cDomainTables	1.3.6.1.4.1.43.45.1.10.2.46.2
h3cDomainInfoTable	1.3.6.1.4.1.43.45.1.10.2.46.2.1		not-accessible	The (conceptual) table listing the domains.
h3cDomainInfoEntry	1.3.6.1.4.1.43.45.1.10.2.46.2.1.1		not-accessible	An entry (conceptual row) representing a domain.
OCT h3cDomainName	1.3.6.1.4.1.43.45.1.10.2.46.2.1.1.1	OCTET STRING	not-accessible	An index uniquely identifies a domain.
INT h3cDomainState	1.3.6.1.4.1.43.45.1.10.2.46.2.1.1.2	INTEGER	read-create	The state of the domain, which reflects whether the domain is active. Default value is active.
I32 h3cDomainMaxAccessNum	1.3.6.1.4.1.43.45.1.10.2.46.2.1.1.3	Integer32	read-create	The maximum number which the domain allows to access. If the value is set to 0, the access limit will be disabled.
INT h3cDomainVlanAssignMode	1.3.6.1.4.1.43.45.1.10.2.46.2.1.1.4	INTEGER	read-create	The vlan assignment mode. The mode SHOULD be the same as the mode of corresponding server. 1 (integer) - Integer Vlan assignment mode. 2 (string) - String Vlan assignment mode. 3 (vlanlist) - VLAN-List Vlan assignment mode. The default value is integer.
T/F h3cDomainIdleCutEnable	1.3.6.1.4.1.43.45.1.10.2.46.2.1.1.5	TruthValue	read-create	The idle cut control. Setting this attribute to true, the connection will be cut when the flow is less than h3cDomainIdleCutMinFlow and lasts h3cDomainIdleCutMaxTime. Default value is false.
I32 h3cDomainIdleCutMaxTime	1.3.6.1.4.1.43.45.1.10.2.46.2.1.1.6	Integer32	read-create	The maximal time of idle-cut. The unit is minute. If the value of h3cDomainIdleCutEnable is false, the value of h3cDomainIdleCutMaxTime is meaningless.
I32 h3cDomainIdleCutMinFlow	1.3.6.1.4.1.43.45.1.10.2.46.2.1.1.7	Integer32	read-create	The minimal flow of idle-cut. The unit is byte. If the value of h3cDomainIdleCutEnable is false, the value of h3cDomainIdleCutMinFlow is meaningless.
T/F h3cDomainMessengerEnable	1.3.6.1.4.1.43.45.1.10.2.46.2.1.1.8	TruthValue	read-create	The messenger service control. If set h3cDomainMessengerEnable to true, h3cDomainMessengerLimitTime and h3cDomainMessengerSpanTime must be set to valid values. Default value is false.
I32 h3cDomainMessengerLimitTime	1.3.6.1.4.1.43.45.1.10.2.46.2.1.1.9	Integer32	read-create	The messenger service limit time. The unit is minute. If the value of h3cDomainMessengerEnable is false, the value of h3cDomainMessengerLimitTime is meaningless.
I32 h3cDomainMessengerSpanTime	1.3.6.1.4.1.43.45.1.10.2.46.2.1.1.10	Integer32	read-create	The messenger service span time. The unit is minute. It must be a multiple of 5. If the value of h3cDomainMessengerEnable is false, the value of h3cDomainMessengerSpanTime is meaningless.
T/F h3cDomainSelfServiceEnable	1.3.6.1.4.1.43.45.1.10.2.46.2.1.1.11	TruthValue	read-create	The self service control. If set h3cDomainSelfServiceEnable to true, h3cDomainSelfServiceURL must be set to a valid value. Default value is FALSE.
OCT h3cDomainSelfServiceURL	1.3.6.1.4.1.43.45.1.10.2.46.2.1.1.12	OCTET STRING	read-create	Self-service URL(Uniform Resource Locator) of the domain.
INT h3cDomainAccFailureAction	1.3.6.1.4.1.43.45.1.10.2.46.2.1.1.13	INTEGER	read-create	Defines the action that authentication should be taken if authentication succeeds but the associated accounting start fails. 1 (ignore) - treat as authentication success; ignore accounting start failure. 2 (reject) - treat as authentication failed if corresponding accounting start fails. Default value is reject.
ROW h3cDomainRowStatus	1.3.6.1.4.1.43.45.1.10.2.46.2.1.1.14	RowStatus	read-create	This object is responsible for managing the creation, deletion and modification of rows, which supports active status and CreateAndGo, Destroy operation. To destroy an existent row, the domain of the row MUST NOT be used by user.
I32 h3cDomainCurrentAccessNum	1.3.6.1.4.1.43.45.1.10.2.46.2.1.1.15	Integer32	read-only	The current access number of the domain.
h3cDomainSchemeTable	1.3.6.1.4.1.43.45.1.10.2.46.2.2		not-accessible	The (conceptual) table listing schemes of all domains.
h3cDomainSchemeEntry	1.3.6.1.4.1.43.45.1.10.2.46.2.2.1		not-accessible	An entry (conceptual row) representing an IP pool of a domain
I32 h3cDomainSchemeIndex	1.3.6.1.4.1.43.45.1.10.2.46.2.2.1.1	Integer32	not-accessible	The scheme index of domain, which is an identifier of a domain scheme.
H3C h3cDomainSchemeMode	1.3.6.1.4.1.43.45.1.10.2.46.2.2.1.2	H3cModeOfDomainScheme	read-create	The scheme mode of the domain. Setting h3cDomainSchemeMode to none(1) indicates the domain has none scheme. Setting h3cDomainSchemeMode to local(2) indicates the domain will use local-server as a scheme. Setting h3cDomainSchemeMode to radius(3) or tacacs(4) indicates the domain will use radius or tacacs scheme. If set h3cDomainSchemeMode to radius(3) or tacacs(4), h3cDomainAuthSchemeName and h3cDomainAcctSchemeName must be set to valid values. And if h3cDomainSchemeMode is set to none(1) or local(2), the value of h3cDomainAuthSchemeName and h3cDomainAcctSchemeName will be ignored.
OCT h3cDomainAuthSchemeName	1.3.6.1.4.1.43.45.1.10.2.46.2.2.1.3	OCTET STRING	read-create	The authentication scheme name of domain. If h3cDomainSchemeMode is set to radius or tacacs, the h3cDomainAuthSchemeName must be configured with a valid value.
OCT h3cDomainAcctSchemeName	1.3.6.1.4.1.43.45.1.10.2.46.2.2.1.4	OCTET STRING	read-create	The accounting scheme name of the domain. If h3cDomainSchemeMode is set to radius or tacacs, the h3cDomainAcctSchemeName must be configured with a valid value.
ROW h3cDomainSchemeRowStatus	1.3.6.1.4.1.43.45.1.10.2.46.2.2.1.5	RowStatus	read-create	This object is responsible for managing the creation, deletion and modification of rows, which supports active status and createAndGo, destroy operation. To create a new row, h3cDomainSchemeMode must be specified. To destroy an existent row, the scheme of the row MUST NOT be used by user.
H3C h3cDomainSchemeAAAType	1.3.6.1.4.1.43.45.1.10.2.46.2.2.1.6	H3cAAATypeDomainScheme	read-create	Service Type of the server.
OCT h3cDomainSchemeAAAName	1.3.6.1.4.1.43.45.1.10.2.46.2.2.1.7	OCTET STRING	read-create	The scheme name of the domain, whether the scheme represents accounting, authentication or authorization references the object h3cDomainSchemeAAAType. The value of the object must be valid if the value of h3cDomainSchemeMode is radius or tacacs, the value of the object will be ignored if the value of h3cDomainSchemeMode is none or local. If the domain has no scheme, there will be a null string. If this object is supported, the objects h3cDomainAuthSchemeName and h3cDomainAcctSchemeName will be ignored.
H3C h3cDomainSchemeAccessMode	1.3.6.1.4.1.43.45.1.10.2.46.2.2.1.8	H3cAccessModeofDomainScheme	read-create	The access mode of the domain scheme.
h3cDomainIpPoolTable	1.3.6.1.4.1.43.45.1.10.2.46.2.3		not-accessible	The (conceptual) table listing IP pools of all domains.
h3cDomainIpPoolEntry	1.3.6.1.4.1.43.45.1.10.2.46.2.3.1		not-accessible	An entry (conceptual row) representing an IP pool of a domain.
I32 h3cDomainIpPoolNum	1.3.6.1.4.1.43.45.1.10.2.46.2.3.1.1	Integer32	not-accessible	The number of IP pool, which is an identifier of an IP pool.
IPt h3cDomainIpPoolLowIpAddrType	1.3.6.1.4.1.43.45.1.10.2.46.2.3.1.2	InetAddressType	read-create	The low IP addresses type (IPv4 or IPv6) of IP pool.
IP h3cDomainIpPoolLowIpAddr	1.3.6.1.4.1.43.45.1.10.2.46.2.3.1.3	InetAddress	read-create	The low IP address of IP pool.
I32 h3cDomainIpPoolLen	1.3.6.1.4.1.43.45.1.10.2.46.2.3.1.4	Integer32	read-create	The length of IP pool. Default value is 1.
ROW h3cDomainIpPoolRowStatus	1.3.6.1.4.1.43.45.1.10.2.46.2.3.1.5	RowStatus	read-create	This object is responsible for managing the creation, deletion and modification of rows, which supports active status and CreateAndGo, Destroy operation. To create a new row, h3cDomainIpPoolNum and h3cDomainIpPoolLowIpAddr must be specified. To destroy an existent row, the IP pool of this row MUST NOT be used by user.

RFC description

Manages authentication and authorization domains for network access on H3C/Huawei devices.

Start monitoring H3C switches and routers with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download A3COM-HUAWEI-DOMAIN-MIB

What Is A3COM-HUAWEI-DOMAIN-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description