A3COM-HUAWEI-USERLOG-MIB

All MIBs › A3COM-HUAWEI-USERLOG-MIB

Organization: Huawei Technologies co.,Ltd.

Last Updated: 2003-04-10

Category: Device Management, Vendor: H3C/HH3C

Description: Manages user activity logging on H3C/3Com devices, providing configuration for NAT and flow log export to external syslog or netflow collectors.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is A3COM-HUAWEI-USERLOG-MIB?

A3COM-HUAWEI-USERLOG-MIB is an H3C/3Com vendor MIB that manages the "userlog" feature on H3C/3Com devices, providing configuration objects for exporting NAT session logs and traffic/flow logs to external syslog or NetFlow-style collectors, per its module description. It exposes configuration state for the logging feature (enable/disable, destination server settings) and running-state monitoring for the userlog export process itself. Its monitoring role centers on software/service status: an operator can confirm the userlog export feature is enabled and actively forwarding NAT/flow records to the configured collector, rather than exposing hardware counters. It is described as covering configuration and monitoring of running state, implying dependency on the device's underlying NAT and flow-logging subsystems but no indicated dependency on other external standard MIBs. It's deployed on H3C/3Com routers/firewalls performing NAT where compliance or security teams need an audit trail of translated sessions sent to a central log collector, typically after completing an A3COM-HUAWEI-USERLOG-MIB download to load the module into their management tools.

IPNetwork Monitor allows you to monitor SNMP objects defined in A3COM-HUAWEI-USERLOG-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

H3C/3Com router/firewall performing NAT with userlog export

Monitoring Examples

No concrete object or table names were provided for this module, so specific OIDs cannot be cited; based on its stated purpose, a monitoring scenario would poll the userlog feature's enabled/running state and its configured export-destination objects to confirm NAT/flow logs are actively being forwarded, catching a scenario where the export process has stopped sending records to the syslog/NetFlow collector. Confirming exact object names would require the underlying MIB source.

What Can Be Monitored

userlog feature enabled/running status
NAT log export configuration
flow log export destination configuration

Imported Objects

From A3COM-HUAWEI-OID-MIB

huawei	OBJECT-IDENTITY
huaweiDatacomm	OBJECT-IDENTITY
huaweiMgmt	OBJECT-IDENTITY

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE

How to Use in IPNetwork Monitor

Example using hwUserlogNatTotalEntries OID:

Select an H3C/3Com routers/firewall (NAT) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hwUserlogNatTotalEntries into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The total number of NAT flow entries which are logged. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
I32 hwUserlogAccessCfgSlotNumber	1.3.6.1.4.1.43.45.1.5.25.18.1.3.4.1.1	Integer32	read-only	Slot number. Specify which slot is configured with BAS ACCESS LOG.
I32 hwUserlogAccessClearRunStat	1.3.6.1.4.1.43.45.1.5.25.18.1.3.5.1.6	Integer32	read-write	Clear the running statistics for ACCESS LOG. Write-only. If 1, the running statistics for ACCESS LOG is resetted. Other value is invalid.
I32 hwUserlogAccessEnable	1.3.6.1.4.1.43.45.1.5.25.18.1.3.4.1.2	Integer32	read-write	The BAS ACCESS LOG feature Enable status. If 1, BAS ACCESS LOG is enbled. If 0, BAS ACCESS LOG is disabled.
C32 hwUserlogAccessFailedEntries	1.3.6.1.4.1.43.45.1.5.25.18.1.3.5.1.4	Counter32	read-only	The total number of BAS ACCESS entries failed in outputting.
C32 hwUserlogAccessFailedPackets	1.3.6.1.4.1.43.45.1.5.25.18.1.3.5.1.5	Counter32	read-only	The total number of BAS ACCESS LOG UDP packet failed in outputting.
IP hwUserlogAccessHostAddress	1.3.6.1.4.1.43.45.1.5.25.18.1.3.4.1.3	IpAddress	read-write	The IP address of BAS ACCESS LOG server.
hwUserlogAccessObjects	1.3.6.1.4.1.43.45.1.5.25.18.1.3
I32 hwUserlogAccessRunSlotNumber	1.3.6.1.4.1.43.45.1.5.25.18.1.3.5.1.1	Integer32	read-only	Slot number. Specify on which slot the BAS ACCESS LOG statistics displayed.
hwUserlogAccessSlotCfgInfoEntry	1.3.6.1.4.1.43.45.1.5.25.18.1.3.4.1		not-accessible	BAS ACCESS LOG Configuration Information Entry for a slot.
hwUserlogAccessSlotCfgInfoTable	1.3.6.1.4.1.43.45.1.5.25.18.1.3.4		not-accessible	A table of BAS ACCESS LOG configuration information for the specified slot.
hwUserlogAccessSlotRunInfoEntry	1.3.6.1.4.1.43.45.1.5.25.18.1.3.5.1		not-accessible	Running Information Entry for a slot.
hwUserlogAccessSlotRunInfoTable	1.3.6.1.4.1.43.45.1.5.25.18.1.3.5		not-accessible	A table of BAS ACCESS LOG running information for the specified slot.
IP hwUserlogAccessSourceIP	1.3.6.1.4.1.43.45.1.5.25.18.1.3.3	IpAddress	read-write	The Source IP address of BAS ACCESS LOG UDP packet.
I32 hwUserlogAccessSyslog	1.3.6.1.4.1.43.45.1.5.25.18.1.3.2	Integer32	read-write	BAS ACCESS LOG format. If 1, LOG format is sysLog; If 0, LOG format is UDP packet. UDP packet is the default format, and is recommended.
C32 hwUserlogAccessTotalEntries	1.3.6.1.4.1.43.45.1.5.25.18.1.3.5.1.2	Counter32	read-only	The total number of BAS ACCESS Records which are logged.
C32 hwUserlogAccessTotalPackets	1.3.6.1.4.1.43.45.1.5.25.18.1.3.5.1.3	Counter32	read-only	The total number of ACCESS LOG UDP packet generated by the router.
I32 hwUserlogAccessUdpPort	1.3.6.1.4.1.43.45.1.5.25.18.1.3.4.1.4	Integer32	read-write	The UDP Port Number of BAS ACCESS LOG UDP packet.
I32 hwUserlogAccessVersion	1.3.6.1.4.1.43.45.1.5.25.18.1.3.1	Integer32	read-only	BAS ACCESS LOG version. Currently only version 1 is developed.
hwUserlogCompliance	1.3.6.1.4.1.43.45.1.5.25.18.3.1.1			The compliance statement for entities which implement the Huawei Userlog mib.
hwUserlogCompliances	1.3.6.1.4.1.43.45.1.5.25.18.3.1
hwUserlogConfigGroup	1.3.6.1.4.1.43.45.1.5.25.18.3.2.2			All configurable parameters of Userlog feature.
hwUserlogConformance	1.3.6.1.4.1.43.45.1.5.25.18.3
I32 hwUserlogFlowAclNumber	1.3.6.1.4.1.43.45.1.5.25.18.1.2.6.1.3	Integer32	read-write	Access-list number. The value 0 means no ACL is specified. Only when BAS FLOW LOG is enabled, can ACL be configured. Only BAS flow which match the ACL will be logged.
I32 hwUserlogFlowActiveTime	1.3.6.1.4.1.43.45.1.5.25.18.1.2.5	Integer32	read-write	The active time for long-time existed BAS flow. Unit: minute. Range: 10 minutes ~ 120 minutes. When setting it, BAS flow can be logged after an internal of active time. This function will be used when real-time monitor required. The default value 0 means real-time monitor function is disabled.
I32 hwUserlogFlowCfgSlotNumber	1.3.6.1.4.1.43.45.1.5.25.18.1.2.6.1.1	Integer32	read-only	Slot number. Specify which slot is configured with BAS FLOW LOG.
I32 hwUserlogFlowClearRunStat	1.3.6.1.4.1.43.45.1.5.25.18.1.2.7.1.6	Integer32	read-write	Clear the running statistics for FLOW LOG. Write-only. If 1, the running statistics for FLOW LOG is resetted. Other value is invalid.
I32 hwUserlogFlowEnable	1.3.6.1.4.1.43.45.1.5.25.18.1.2.6.1.2	Integer32	read-write	The BAS FLOW LOG feature Enable status. If 1, BAS FLOW LOG is enbled. If 0, BAS FLOW LOG is disabled.
C32 hwUserlogFlowFailedEntries	1.3.6.1.4.1.43.45.1.5.25.18.1.2.7.1.4	Counter32	read-only	The total number of BAS FLOW entries failed in outputting.
C32 hwUserlogFlowFailedPackets	1.3.6.1.4.1.43.45.1.5.25.18.1.2.7.1.5	Counter32	read-only	The total number of BAS FLOW LOG UDP packet failed in outputting.
I32 hwUserlogFlowFlowBegin	1.3.6.1.4.1.43.45.1.5.25.18.1.2.4	Integer32	read-write	Log the BAS flow when it is created. If 1, this function is enabled. If 0, this function is disabled. This function will be used when real-time monitor required.
IP hwUserlogFlowHostAddress	1.3.6.1.4.1.43.45.1.5.25.18.1.2.6.1.4	IpAddress	read-write	The IP address of BAS FLOW LOG server.
hwUserlogFlowObjects	1.3.6.1.4.1.43.45.1.5.25.18.1.2
I32 hwUserlogFlowRunSlotNumber	1.3.6.1.4.1.43.45.1.5.25.18.1.2.7.1.1	Integer32	read-only	Slot number. Specify on which slot the BAS FLOW LOG statistics displayed.
hwUserlogFlowSlotCfgInfoEntry	1.3.6.1.4.1.43.45.1.5.25.18.1.2.6.1		not-accessible	BAS FLOW LOG Configuration Information Entry for a slot.
hwUserlogFlowSlotCfgInfoTable	1.3.6.1.4.1.43.45.1.5.25.18.1.2.6		not-accessible	A table of BAS FLOW LOG configuration information for the specified slot.
hwUserlogFlowSlotRunInfoEntry	1.3.6.1.4.1.43.45.1.5.25.18.1.2.7.1		not-accessible	Running Information Entry for a slot.
hwUserlogFlowSlotRunInfoTable	1.3.6.1.4.1.43.45.1.5.25.18.1.2.7		not-accessible	A table of BAS FLOW LOG running information for the specified slot.
IP hwUserlogFlowSourceIP	1.3.6.1.4.1.43.45.1.5.25.18.1.2.3	IpAddress	read-write	The Source IP address of BAS FLOW LOG UDP packet.
I32 hwUserlogFlowSyslog	1.3.6.1.4.1.43.45.1.5.25.18.1.2.2	Integer32	read-write	BAS FLOW LOG format. If 1, LOG format is sysLog. If 0, LOG format is UDP packet. UDP packet is the default format, and is recommended.
C32 hwUserlogFlowTotalEntries	1.3.6.1.4.1.43.45.1.5.25.18.1.2.7.1.2	Counter32	read-only	The total number of BAS FLOW Entries which are logged.
C32 hwUserlogFlowTotalPackets	1.3.6.1.4.1.43.45.1.5.25.18.1.2.7.1.3	Counter32	read-only	The total number of FLOW LOG UDP packet generated by the router.
I32 hwUserlogFlowUdpPort	1.3.6.1.4.1.43.45.1.5.25.18.1.2.6.1.5	Integer32	read-write	The UDP Port Number of BAS FLOW LOG UDP packet.
I32 hwUserlogFlowVersion	1.3.6.1.4.1.43.45.1.5.25.18.1.2.1	Integer32	read-only	BAS FLOW LOG version. Currently only version 1 is developed.
hwUserlogGroups	1.3.6.1.4.1.43.45.1.5.25.18.3.2
hwUserlogInfoGroup	1.3.6.1.4.1.43.45.1.5.25.18.3.2.3			All running information of Userlog feature.
hwUserlogMandatoryGroup	1.3.6.1.4.1.43.45.1.5.25.18.3.2.1			A collection of objects providing mandatory Userlog information.
hwUserLogMIB	1.3.6.1.4.1.43.45.1.5.25.18			The A3COM-HUAWEI-USERLOG-MIB contains objects to Manage configuration and Monitor running state for userlog feature.
I32 hwUserlogNatAclNumber	1.3.6.1.4.1.43.45.1.5.25.18.1.1.6.1.3	Integer32	read-write	Access-list number. The value 0 means no ACL is specified. Only when NAT LOG is enabled, can ACL be configured. Only NAT flow which match the ACL will be logged.
I32 hwUserlogNatActiveTime	1.3.6.1.4.1.43.45.1.5.25.18.1.1.5	Integer32	read-write	The active time for long-time existed NAT flow. Unit: minute. Range: 10 minutes ~ 120 minutes. When setting it, NAT flow can be logged after an interval of active time. This function will be used when real-time monitor required. The default value 0 means real-time monitor function is disabled.
I32 hwUserlogNatCfgSlotNumber	1.3.6.1.4.1.43.45.1.5.25.18.1.1.6.1.1	Integer32	read-only	Slot number. Specify which slot is configured with NAT LOG.
I32 hwUserlogNatClearRunStat	1.3.6.1.4.1.43.45.1.5.25.18.1.1.7.1.6	Integer32	read-write	Clear the running statistics for NAT LOG. Write-only. If 1, the running statistics for NAT LOG is resetted. Other value is invalid.
I32 hwUserlogNatEnable	1.3.6.1.4.1.43.45.1.5.25.18.1.1.6.1.2	Integer32	read-write	The NAT LOG feature Enable status. If 1, NAT LOG is enbled. If 0, NAT LOG is disabled.
C32 hwUserlogNatFailedEntries	1.3.6.1.4.1.43.45.1.5.25.18.1.1.7.1.4	Counter32	read-only	The total number of NAT flow entries failed in outputting.
C32 hwUserlogNatFailedPackets	1.3.6.1.4.1.43.45.1.5.25.18.1.1.7.1.5	Counter32	read-only	The total number of NAT LOG UDP packets failed in outputting.
I32 hwUserlogNatFlowBegin	1.3.6.1.4.1.43.45.1.5.25.18.1.1.4	Integer32	read-write	Log the NAT flow when it is created. If 1, this function is enabled. If 0, this function is disabled. This function will be used when real-time monitor required.
IP hwUserlogNatHostAddress	1.3.6.1.4.1.43.45.1.5.25.18.1.1.6.1.4	IpAddress	read-write	The IP address of NAT LOG server.
hwUserlogNatObjects	1.3.6.1.4.1.43.45.1.5.25.18.1.1
I32 hwUserlogNatRunSlotNumber	1.3.6.1.4.1.43.45.1.5.25.18.1.1.7.1.1	Integer32	read-only	Slot number. Specify on which slot the NAT LOG statistics displayed.
hwUserlogNatSlotCfgInfoEntry	1.3.6.1.4.1.43.45.1.5.25.18.1.1.6.1		not-accessible	NAT LOG Configuration Information Entry for a slot.
hwUserlogNatSlotCfgInfoTable	1.3.6.1.4.1.43.45.1.5.25.18.1.1.6		not-accessible	A table of NAT LOG configuration information for the specified slot.
hwUserlogNatSlotRunInfoEntry	1.3.6.1.4.1.43.45.1.5.25.18.1.1.7.1		not-accessible	NAT LOG Running Information Entry for a slot.
hwUserlogNatSlotRunInfoTable	1.3.6.1.4.1.43.45.1.5.25.18.1.1.7		not-accessible	A table of NAT LOG running information for the specified slot.
IP hwUserlogNatSourceIP	1.3.6.1.4.1.43.45.1.5.25.18.1.1.3	IpAddress	read-write	The Source IP address of NAT LOG UDP packet.
I32 hwUserlogNatSyslog	1.3.6.1.4.1.43.45.1.5.25.18.1.1.2	Integer32	read-write	NAT LOG format. If 1, LOG format is sysLog. If 0, LOG format is UDP packet. UDP packet is the default format, and is recommended.
C32 hwUserlogNatTotalEntriesEx	1.3.6.1.4.1.43.45.1.5.25.18.1.1.7.1.2	Counter32	read-only	The total number of NAT flow entries which are logged.
C32 hwUserlogNatTotalPackets	1.3.6.1.4.1.43.45.1.5.25.18.1.1.7.1.3	Counter32	read-only	The total number of NAT LOG UDP packets generated by the router.
I32 hwUserlogNatUdpPort	1.3.6.1.4.1.43.45.1.5.25.18.1.1.6.1.5	Integer32	read-write	The UDP Port Number of NAT LOG UDP packet.
I32 hwUserlogNatVersion	1.3.6.1.4.1.43.45.1.5.25.18.1.1.1	Integer32	read-only	NAT LOG version. Currently only version 1 is developed.
hwUserlogNotifications	1.3.6.1.4.1.43.45.1.5.25.18.2
hwUserlogObjects	1.3.6.1.4.1.43.45.1.5.25.18.1

RFC description

Joint 3COM-Huawei private MIB managing user authentication and logging events on enterprise network devices.

Start monitoring H3C/3Com routers/firewalls (NAT) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download A3COM-HUAWEI-USERLOG-MIB