H3C-CONFIG-MAN-MIB

All MIBs › H3C-CONFIG-MAN-MIB

Organization: Hangzhou H3C Tech. Co., Ltd.

Last Updated: 2011-11-26

Category: Device Management, Vendor: H3C/HH3C

Description: H3C MIB for configuration file management including saving, loading, and tracking configuration change history.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is H3C-CONFIG-MAN-MIB?

H3C-CONFIG-MAN-MIB is an H3C-specific MIB for configuration management, modeling the device's running and startup configuration state and providing a change-log/history mechanism. It exposes timestamps for when the running configuration was last modified or saved and when the startup configuration was last modified, plus a configuration-change log table recording each change's source command and source data. As a software/state-monitoring MIB it is used to detect unsaved or drifted configuration (comparing "last modified" vs "last saved" timestamps) and to audit who/what changed the configuration and when, valuable for change-management and compliance monitoring rather than hardware health. It states no formal MIB dependency and is explicitly unconstrained, representing configuration data that "exists elsewhere in the system." It is typically deployed across H3C switches and routers in environments requiring configuration-drift detection, audit trails, or automated backup triggers. Engineers can download the H3C-CONFIG-MAN-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in H3C-CONFIG-MAN-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

H3C switches and routers

Monitoring Examples

Comparing h3cCfgRunModifiedLast against h3cCfgRunSavedLast reveals whether the running configuration has unsaved changes that would be lost on reboot. Polling h3cCfgLogTable / h3cCfgLogEntry (indexed by h3cCfgLogIndex) surfaces h3cCfgLogTime, h3cCfgLogSrcCmd, and h3cCfgLogSrcData for each recorded change, letting an admin audit exactly which command altered the configuration. A climbing h3cCfgLogDeletedEntries or h3cCfgLogLimitedEntries count indicates the log buffer is being trimmed and older change history is being lost.

What Can Be Monitored

running vs. saved configuration timestamps
startup configuration modification time
configuration change log entries
source command/data of each change
configuration log buffer limits and backup status

Imported Objects

From HUAWEI-3COM-OID-MIB

h3cCommon

OBJECT-IDENTITY

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
TimeTicks

From SNMPv2-TC

DisplayString
RowStatus
TEXTUAL-CONVENTION
TruthValue

How to Use in IPNetwork Monitor

Example using h3cCfgLogDeletedEntries OID:

Select an H3C switch/router (configuration management/change log) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type h3cCfgLogDeletedEntries into the Find box to locate it in the OID tree, then select it and click OK. The total number of rows deleted from h3cCfgLogTable. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
h3cConfig	1.3.6.1.4.1.2011.10.2.4			This MIB contains objects to manage the system configuration. It contains the model used to represent configuration data that exists elsewhere in the system and in peripheral devices. There are no constraints on this MIB.
h3cConfigManObjects	1.3.6.1.4.1.2011.10.2.4.1
h3cCfgLog	1.3.6.1.4.1.2011.10.2.4.1.1
TIK h3cCfgRunModifiedLast	1.3.6.1.4.1.2011.10.2.4.1.1.1	TimeTicks	read-only	The object records the value of sysUpTime when the current configuration running in the system was last modified. The value will be changed immediately after system detects the current configuration has been changed.
TIK h3cCfgRunSavedLast	1.3.6.1.4.1.2011.10.2.4.1.1.2	TimeTicks	read-only	The object records the value of sysUpTime when the current configuration running in the system was last saved. If the value of the object is smaller than h3cCfgRunModifiedLast, the current configuration has been modified but not saved.
TIK h3cCfgStartModifiedLast	1.3.6.1.4.1.2011.10.2.4.1.1.3	TimeTicks	read-only	The object records the value of sysUpTime when the saved configuration used currently was last modified. It may have been modified by a save of the current configuration running in the system or other methods such as copy.
I32 h3cCfgLogLimitedEntries	1.3.6.1.4.1.2011.10.2.4.1.1.4	Integer32	read-only	The object shows the maximum number of rows in h3cCfgLogTable. The value supported by the system is 10.
C32 h3cCfgLogDeletedEntriesEx	1.3.6.1.4.1.2011.10.2.4.1.1.5	Counter32	read-only	The total number of rows deleted from h3cCfgLogTable.
T/F h3cCfgLogWantBackup	1.3.6.1.4.1.2011.10.2.4.1.1.6	TruthValue	read-write	Decide whether to backup the value of objects about h3cCfgLog.
h3cCfgLogTable	1.3.6.1.4.1.2011.10.2.4.1.1.7		not-accessible	Table for logging configuration operation in device.
h3cCfgLogEntry	1.3.6.1.4.1.2011.10.2.4.1.1.7.1		not-accessible	Information of the entry.
I32 h3cCfgLogIndex	1.3.6.1.4.1.2011.10.2.4.1.1.7.1.1	Integer32	not-accessible	Index of the table beginning from 1.
TIK h3cCfgLogTime	1.3.6.1.4.1.2011.10.2.4.1.1.7.1.2	TimeTicks	read-only	Specify the sysUpTime when the config log was generated.
INT h3cCfgLogSrcCmd	1.3.6.1.4.1.2011.10.2.4.1.1.7.1.3	INTEGER	read-only	Specify the source command which brought the log. Currently we provide the types of source: 1.cmdLine(1):configure log instigated by command line. 2.snmp(2):configure log instigated by snmp. 3.other(3):configure log instigated by other source unknown.
INT h3cCfgLogSrcData	1.3.6.1.4.1.2011.10.2.4.1.1.7.1.4	INTEGER	read-only	The source of the configuration data event. erase erasing destination runningData operational data alive commandSource the command source itself startupData what the system will use next reboot local local NVRAM or flash netFtp FTP network transfer hotPlugging board is inserted or pulled out on line
INT h3cCfgLogDesData	1.3.6.1.4.1.2011.10.2.4.1.1.7.1.5	INTEGER	read-only	The destination for the configuration data event. unknown unknown runningData operational data alive commandSource the command source itself startupData what the system will use next reboot local local NVRAM or flash netFtp FTP network transfer hotPlugging board is inserted or pulled out on line
INT h3cCfgLogTerminalType	1.3.6.1.4.1.2011.10.2.4.1.1.7.1.6	INTEGER	read-only	Specifies the terminal type. If h3cCfgLogSrcCmd is not 'cmdLine', use 'notApplicable'. The value list: notApplicable(1): no meaning at this time. unknown(2): unknown terminal type. console(3): console interface. terminal(4): generic terminal. virtual(5): virtual terminal such as telnet. auxiliary(6): auxiliary interface.
STR h3cCfgLogTerminalUser	1.3.6.1.4.1.2011.10.2.4.1.1.7.1.7	DisplayString	read-only	The name of logging user which is available when h3cCfgLogSrcCmd is 'cmdLine'. Other, a zero length string.
I32 h3cCfgLogTerminalNum	1.3.6.1.4.1.2011.10.2.4.1.1.7.1.8	Integer32	read-only	Specifies the terminal number. If h3cCfgLogSrcCmd is not 'cmdLine', use '-1'
STR h3cCfgLogTerminalLocation	1.3.6.1.4.1.2011.10.2.4.1.1.7.1.9	DisplayString	read-only	The location of logging user which is available when h3cCfgLogSrcCmd is 'cmdLine'. Other, a zero length string.
IP h3cCfgLogCmdSrcAddress	1.3.6.1.4.1.2011.10.2.4.1.1.7.1.10	IpAddress	read-only	The address from which a request comes when the value of h3cCfgLogSrcCmd is 'snmp(2)'. The ip address of the remote system connected when the value of h3cCfgLogTerminalType is 'virtual'. Other, the value of 0.0.0.0. This object is replaced by for it only support IPv4.
STR h3cCfgLogVirHost	1.3.6.1.4.1.2011.10.2.4.1.1.7.1.11	DisplayString	read-only	The host name of remote system connected if h3cCfgLogTerminalType has the value of 'virtual'. Other, a zero length string.
STR h3cCfgLogUserName	1.3.6.1.4.1.2011.10.2.4.1.1.7.1.12	DisplayString	read-only	The user name used when h3cCfgLogSrcData or h3cCfgLogDesData has the value of 'netFtp'. Other, a zero length string.
IP h3cCfgLogServerAddress	1.3.6.1.4.1.2011.10.2.4.1.1.7.1.13	IpAddress	read-only	The remote server address when h3cCfgLogSrcData or h3cCfgLogDesData has the value of 'netFtp'. Other, a value of 0.0.0.0. This object is replaced by for it only support IPv4.
STR h3cCfgLogFile	1.3.6.1.4.1.2011.10.2.4.1.1.7.1.14	DisplayString	read-only	The current configuration file name when h3cCfgLogSrcData has the value of 'netFtp',and h3cCfgLogDesData has the value of 'startupData'. Other, a zero length string.
IPt h3cCfgLogCmdSrcAddrType	1.3.6.1.4.1.2011.10.2.4.1.1.7.1.15	InetAddressType	read-only	The type of IP address for the h3cCfgLogCmdSrcAddrRev.
IP h3cCfgLogCmdSrcAddrRev	1.3.6.1.4.1.2011.10.2.4.1.1.7.1.16	InetAddress	read-only	The address from which a request comes when the value of h3cCfgLogSrcCmd is 'snmp(2)'. The ip address of the remote system connected when the value of h3cCfgLogTerminalType is 'virtual'. Other, the value of 0.0.0.0.
STR h3cCfgLogCmdSrcAddrVPNName	1.3.6.1.4.1.2011.10.2.4.1.1.7.1.17	DisplayString	read-only	The VPN instance of this operation uses.
IPt h3cCfgLogServerAddrType	1.3.6.1.4.1.2011.10.2.4.1.1.7.1.18	InetAddressType	read-only	The type of IP address for the h3cCfgLogServerAddrRev.
IP h3cCfgLogServerAddrRev	1.3.6.1.4.1.2011.10.2.4.1.1.7.1.19	InetAddress	read-only	The remote server address when h3cCfgLogSrcData or h3cCfgLogDesData has the value of 'netFtp'. Other, a value of 0.0.0.0.
STR h3cCfgLogServerAddrVPNName	1.3.6.1.4.1.2011.10.2.4.1.1.7.1.20	DisplayString	read-only	The VPN instance of this operation uses.
TIK h3cCfgFirstTrapTime	1.3.6.1.4.1.2011.10.2.4.1.1.8	TimeTicks	accessible-for-notify	Represents the first trap time.
h3cCfgOperate	1.3.6.1.4.1.2011.10.2.4.1.2
I32 h3cCfgOperateGlobalEntryLimit	1.3.6.1.4.1.2011.10.2.4.1.2.1	Integer32	read-only	The maximum number of copy entries that may be held in h3cCfgOperateTable. A particular setting does not guarantee that much data can be held.
I32 h3cCfgOperateEntryAgeOutTime	1.3.6.1.4.1.2011.10.2.4.1.2.2	Integer32	read-write	The number of minutes an unactive h3cCfgOperateEntry SHOULD be kept in the h3cCfgOperateTable before it is active. The object is a fator taken account of when it needs delete some rows make room in h3cCfgOperateTable.
I32 h3cCfgOperateResultGlobalEntryLimit	1.3.6.1.4.1.2011.10.2.4.1.2.3	Integer32	read-write	The maximum number of copy entries that may be held in h3cCfgOperateResultTable. A particular setting does not guarantee that much data can be held.
h3cCfgOperateTable	1.3.6.1.4.1.2011.10.2.4.1.2.4		not-accessible	A table of config-operation requests.
h3cCfgOperateEntry	1.3.6.1.4.1.2011.10.2.4.1.2.4.1		not-accessible	An operate request entry.
I32 h3cCfgOperateIndex	1.3.6.1.4.1.2011.10.2.4.1.2.4.1.1	Integer32	not-accessible	The unique index value of a row in this table.
CON h3cCfgOperateType	1.3.6.1.4.1.2011.10.2.4.1.2.4.1.2	ConfigOperationType	read-create	Specify the type of operation on configuration.
INT h3cCfgOperateProtocol	1.3.6.1.4.1.2011.10.2.4.1.2.4.1.3	INTEGER	read-create	If the value of h3cCfgOperateType is running2Net,net2Running,net2Startup or startup2net, this node specify the protocol to be used for file transfer . The default protocol is ftp if no protocol is specified. And for other value of h3cCfgOperateType , this object may be ignored by the implementation. when clusterftp or clustertftp is selected, the h3cCfgOperateServerAddress needn't be set, the server address can be acquired automatically, the value of h3cCfgOperateServerAddress is uncertain during operation. both member switch and commander switch can use them if they support HGMP v2.
STR h3cCfgOperateFileName	1.3.6.1.4.1.2011.10.2.4.1.2.4.1.4	DisplayString	read-create	When the object of h3cCfgOperateType has the value of net2Startup, net2running or running2Net,the value must be specified. The file name may include the path if applicable. If the value of h3cCfgOperateType is net2Startup or net2running, this node specify the source file name of transfers.If the value of h3cCfgOperateType is running2Net , this node specify the destination file name of transfers. When h3cCfgOperateType has the value of startup2net,the object may not be created instead of using the file name of startup configuration file.
IP h3cCfgOperateServerAddress	1.3.6.1.4.1.2011.10.2.4.1.2.4.1.5	IpAddress	read-create	When the operation type is running2Net,net2Running,net2Startup or startup2net , the ip address of the ftp/tftp server from/to which to download/upload must be specified. Values of 0.0.0.0 or FF.FF.FF.FF are not permitted. This object is replaced by h3cFlhOperSrvAddr for it only support IPv4.
STR h3cCfgOperateUserName	1.3.6.1.4.1.2011.10.2.4.1.2.4.1.6	DisplayString	read-create	When the operation type is running2Net,net2Running,net2Startup or startup2net , the user name for the ftp server from/to which to download/upload should be specified. The object must be created if h3cCfgOperateProtocol has the value of ftp.
STR h3cCfgOperateUserPassword	1.3.6.1.4.1.2011.10.2.4.1.2.4.1.7	DisplayString	read-create	When the operation type is running2Net,net2Running,net2Startup or startup2net , the user password for the ftp server from/to which to download/upload should be specified. The object must be created if h3cCfgOperateProtocol has the value of ftp.
T/F h3cCfgOperateEndNotificationSwitch	1.3.6.1.4.1.2011.10.2.4.1.2.4.1.8	TruthValue	read-create	Specifies whether or not a notification should be issued on the completion of the operation.
ROW h3cCfgOperateRowStatus	1.3.6.1.4.1.2011.10.2.4.1.2.4.1.9	RowStatus	read-create	The status of this table entry. When the status is active all the object's value in the entry is not allowed to modified.
I32 h3cCfgOperateServerPort	1.3.6.1.4.1.2011.10.2.4.1.2.4.1.10	Integer32	read-create	When the operation type is running2Net, net2Running, net2Startup or startup2Net, this node is used for specifying the remote port number. If the value is 0 or not specified, the known port number will be used.
IPt h3cCfgOperateSrvAddrType	1.3.6.1.4.1.2011.10.2.4.1.2.4.1.11	InetAddressType	read-create	The type of IP address for h3cCfgOperateSrvAddrRev.
IP h3cCfgOperateSrvAddrRev	1.3.6.1.4.1.2011.10.2.4.1.2.4.1.12	InetAddress	read-create	When the operation type is running2Net,net2Running,net2Startup or startup2net , the ip address of the ftp/tftp server from/to which to download/upload must be specified.
STR h3cCfgOperateSrvVPNName	1.3.6.1.4.1.2011.10.2.4.1.2.4.1.13	DisplayString	read-create	The VPN instance of this operation uses.
h3cCfgOperateResultTable	1.3.6.1.4.1.2011.10.2.4.1.2.5		not-accessible	A table of config-operation requests result.
h3cCfgOperateResultEntry	1.3.6.1.4.1.2011.10.2.4.1.2.5.1		not-accessible	The result entries of configuration operation requests.
I32 h3cCfgOperateResultIndex	1.3.6.1.4.1.2011.10.2.4.1.2.5.1.1	Integer32	not-accessible	The index of Table, which is an incremental integer. The maximum value of the node is 2147483647. The agent should wrap the value to 1 and flush all the existing entries when the maximum value is reached.
I32 h3cCfgOperateResultOptIndex	1.3.6.1.4.1.2011.10.2.4.1.2.5.1.2	Integer32	read-only	The operation index in the h3cCfgOperateTable.
CON h3cCfgOperateResultOpType	1.3.6.1.4.1.2011.10.2.4.1.2.5.1.3	ConfigOperationType	read-only	The operation type in the h3cCfgOperateTable.
CON h3cCfgOperateState	1.3.6.1.4.1.2011.10.2.4.1.2.5.1.4	ConfigOperationStateType	read-only	The operation state type in the h3cCfgOperateTable.
TIK h3cCfgOperateTime	1.3.6.1.4.1.2011.10.2.4.1.2.5.1.5	TimeTicks	read-only	Record the time taken for the operation. This object will be like a stopwatch, starting when the operation starts, and stopping when the operation completes.
TIK h3cCfgOperateEndTime	1.3.6.1.4.1.2011.10.2.4.1.2.5.1.6	TimeTicks	read-only	The value of sysUpTime when the configuration operation is finished.
STR h3cCfgOperFailReason	1.3.6.1.4.1.2011.10.2.4.1.2.5.1.7	DisplayString	read-only	The failure reasons of configuration operation.
h3cCfgExecuteOperate	1.3.6.1.4.1.2011.10.2.4.1.2.6
I32 h3cCfgExecuteOperateResultEntryLimit	1.3.6.1.4.1.2011.10.2.4.1.2.6.1	Integer32	read-write	The maximum number of ConfigOperationType entries that may be held in h3cCfgExecuteResultTable. A particular setting does not guarantee that much data can be held.
h3cCfgExecuteResultTable	1.3.6.1.4.1.2011.10.2.4.1.2.6.2		not-accessible	A table of configuration execute result.
h3cCfgExecuteResultEntry	1.3.6.1.4.1.2011.10.2.4.1.2.6.2.1		not-accessible	The result entries of configuration execute operation.
I32 h3cCfgExecuteResultIndex	1.3.6.1.4.1.2011.10.2.4.1.2.6.2.1.1	Integer32	not-accessible	The index of Table, which is an incremental integer. The maximum value of the node is 2147483647. The agent should wrap the value to 1 and flush all the existing entries when the maximum value is reached.
I32 h3cCfgExecuteResultOptIndex	1.3.6.1.4.1.2011.10.2.4.1.2.6.2.1.2	Integer32	read-only	The configuration execute operation index in the h3cCfgExecuteResultTable.
CON h3cCfgExecuteResultOpType	1.3.6.1.4.1.2011.10.2.4.1.2.6.2.1.3	ConfigOperationType	read-only	The operation type in the h3cCfgExecuteResultTable.
CON h3cCfgExecuteState	1.3.6.1.4.1.2011.10.2.4.1.2.6.2.1.4	ConfigOperationStateType	read-only	Record the status of the specified operation.
TIK h3cCfgExecuteTime	1.3.6.1.4.1.2011.10.2.4.1.2.6.2.1.5	TimeTicks	read-only	Record the time of the execution starts.
TIK h3cCfgExecuteEndTime	1.3.6.1.4.1.2011.10.2.4.1.2.6.2.1.6	TimeTicks	read-only	Record the time of the execution is finished.
INT h3cCfgReset	1.3.6.1.4.1.2011.10.2.4.1.2.7	INTEGER	read-write	Reboot device as default configuration.
h3cConfigManNotifications	1.3.6.1.4.1.2011.10.2.4.2
NTF h3cCfgManEventlog	1.3.6.1.4.1.2011.10.2.4.2.1			The object calculates the checksum on the current config per 10 minutes and even if it is different from the saved config but if a trap has been sent with the same checksum then don't send again until the checksum is different.
NTF h3cCfgOperateCompletion	1.3.6.1.4.1.2011.10.2.4.2.2			When create h3cCfgOperateTable successfully, a notification may be generated.
NTF h3cCfgInvalidConfigFile	1.3.6.1.4.1.2011.10.2.4.2.3			When the configuration file is invalid, this notification will be generated.
h3cConfigManConformance	1.3.6.1.4.1.2011.10.2.4.3
h3cConfigManCompliances	1.3.6.1.4.1.2011.10.2.4.3.1
h3cConfigManCompliance	1.3.6.1.4.1.2011.10.2.4.3.1.1			The statement of compliance for those implementing the Huawei 3Com ConfigMan MIB.
h3cConfigManGroups	1.3.6.1.4.1.2011.10.2.4.3.2
h3cCfgManLogGroup	1.3.6.1.4.1.2011.10.2.4.3.2.1			A collection of objects configuration log group.
h3cCfgOperateGroup	1.3.6.1.4.1.2011.10.2.4.3.2.2			A group of configuration operation.
h3cCfgManNotificationGroup	1.3.6.1.4.1.2011.10.2.4.3.2.3			Collection of notification objects.

RFC description

Manages system configuration data, backup/restore operations, and configuration change logging for H3C devices.

Start monitoring H3C switch/router (configuration management/change log) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download H3C-CONFIG-MAN-MIB