H3C-DOMAIN-MIB

All MIBs › H3C-DOMAIN-MIB

Organization: H3C Technologies Co., Ltd.

Last Updated: 2009-08-05

Category: RADIUS and AAA, Vendor: H3C/HH3C

Description: H3C MIB for ISP domain management controlling authentication, authorization, and accounting schemes per domain.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is H3C-DOMAIN-MIB?

H3C-DOMAIN-MIB manages ISP domain configuration on H3C devices, controlling which authentication, authorization, and accounting (AAA) schemes apply to users grouped by domain, a common construct in H3C/Huawei-style AAA deployments. Per its module description it is used for managing domains, and while no sample objects were available in this data, such MIBs typically expose per-domain AAA scheme bindings, domain state (active/enabled), and possibly session or user counts per domain. Its monitoring value would be around AAA/software configuration status, confirming the correct authentication scheme is bound to a domain and that domains are in an active state, catching misconfigurations that could lock out or misauthenticate users. It is a standalone H3C-private MIB, functioning alongside other AAA-related H3C MIBs though no explicit dependency is stated. It is deployed on H3C routers, switches, or broadband access servers that segment user authentication by ISP domain, and administrators can download the H3C-DOMAIN-MIB file to load it into their MIB browser for reference.

IPNetwork Monitor allows you to monitor SNMP objects defined in H3C-DOMAIN-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

H3C router/switch/BRAS (domain-based AAA management)

Monitoring Examples

No sample objects were provided in the source data, so no concrete monitoring scenario can be described without inventing object names; the actual MIB source would need to be consulted to identify real domain-configuration or AAA-scheme-binding objects.

Imported Objects

From HUAWEI-3COM-OID-MIB

h3cCommon

OBJECT-IDENTITY

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

From SNMPv2-TC

RowStatus
TEXTUAL-CONVENTION
TruthValue

How to Use in IPNetwork Monitor

Example using h3cDomainState OID:

Select an H3C router/switch/BRA (ISP domain-based AAA) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type h3cDomainState into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The state of the domain, which reflects whether the domain is active. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is an INTEGER-type OID, Value bounds is the most useful condition here — trigger an alert if the value is anything other than 'active', since that indicates the condition this object reports has changed to one worth investigating. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
h3cDomain	1.3.6.1.4.1.2011.10.2.46			The MIB module is used for managing domain.
h3cDomainControl	1.3.6.1.4.1.2011.10.2.46.1
OCT h3cDomainDefault	1.3.6.1.4.1.2011.10.2.46.1.1	OCTET STRING	read-write	Specifies default domain on the equipment. Default value is 'system'.
h3cDomainTables	1.3.6.1.4.1.2011.10.2.46.2
h3cDomainInfoTable	1.3.6.1.4.1.2011.10.2.46.2.1		not-accessible	The (conceptual) table listing the domains.
h3cDomainInfoEntry	1.3.6.1.4.1.2011.10.2.46.2.1.1		not-accessible	An entry (conceptual row) representing a domain.
OCT h3cDomainName	1.3.6.1.4.1.2011.10.2.46.2.1.1.1	OCTET STRING	not-accessible	An index uniquely identifies a domain.
INT h3cDomainStateEx	1.3.6.1.4.1.2011.10.2.46.2.1.1.2	INTEGER	read-create	The state of the domain, which reflects whether the domain is active. Default value is active.
I32 h3cDomainMaxAccessNum	1.3.6.1.4.1.2011.10.2.46.2.1.1.3	Integer32	read-create	The maximum number which the domain allows to access. If the value is set to 0, the access limit will be disabled.
INT h3cDomainVlanAssignMode	1.3.6.1.4.1.2011.10.2.46.2.1.1.4	INTEGER	read-create	The vlan assignment mode. The mode SHOULD be the same as the mode of corresponding server. 1 (integer) - Integer Vlan assignment mode. 2 (string) - String Vlan assignment mode. 3 (vlanlist) - VLAN-List Vlan assignment mode. The default value is integer.
T/F h3cDomainIdleCutEnable	1.3.6.1.4.1.2011.10.2.46.2.1.1.5	TruthValue	read-create	The idle cut control. Setting this attribute to true, the connection will be cut when the flow is less than h3cDomainIdleCutMinFlow and lasts h3cDomainIdleCutMaxTime. Default value is false.
I32 h3cDomainIdleCutMaxTime	1.3.6.1.4.1.2011.10.2.46.2.1.1.6	Integer32	read-create	The maximal time of idle-cut. The unit is minute. If the value of h3cDomainIdleCutEnable is false, the value of h3cDomainIdleCutMaxTime is meaningless.
I32 h3cDomainIdleCutMinFlow	1.3.6.1.4.1.2011.10.2.46.2.1.1.7	Integer32	read-create	The minimal flow of idle-cut. The unit is byte. If the value of h3cDomainIdleCutEnable is false, the value of h3cDomainIdleCutMinFlow is meaningless.
T/F h3cDomainMessengerEnable	1.3.6.1.4.1.2011.10.2.46.2.1.1.8	TruthValue	read-create	The messenger service control. If set h3cDomainMessengerEnable to true, h3cDomainMessengerLimitTime and h3cDomainMessengerSpanTime must be set to valid values. Default value is false.
I32 h3cDomainMessengerLimitTime	1.3.6.1.4.1.2011.10.2.46.2.1.1.9	Integer32	read-create	The messenger service limit time. The unit is minute. If the value of h3cDomainMessengerEnable is false, the value of h3cDomainMessengerLimitTime is meaningless.
I32 h3cDomainMessengerSpanTime	1.3.6.1.4.1.2011.10.2.46.2.1.1.10	Integer32	read-create	The messenger service span time. The unit is minute. It must be a multiple of 5. If the value of h3cDomainMessengerEnable is false, the value of h3cDomainMessengerSpanTime is meaningless.
T/F h3cDomainSelfServiceEnable	1.3.6.1.4.1.2011.10.2.46.2.1.1.11	TruthValue	read-create	The self service control. If set h3cDomainSelfServiceEnable to true, h3cDomainSelfServiceURL must be set to a valid value. Default value is FALSE.
OCT h3cDomainSelfServiceURL	1.3.6.1.4.1.2011.10.2.46.2.1.1.12	OCTET STRING	read-create	Self-service URL(Uniform Resource Locator) of the domain.
INT h3cDomainAccFailureAction	1.3.6.1.4.1.2011.10.2.46.2.1.1.13	INTEGER	read-create	Defines the action that authentication should be taken if authentication succeeds but the associated accounting start fails. 1 (ignore) - treat as authentication success; ignore accounting start failure. 2 (reject) - treat as authentication failed if corresponding accounting start fails. Default value is reject.
ROW h3cDomainRowStatus	1.3.6.1.4.1.2011.10.2.46.2.1.1.14	RowStatus	read-create	This object is responsible for managing the creation, deletion and modification of rows, which supports active status and CreateAndGo, Destroy operation. To destroy an existent row, the domain of the row MUST NOT be used by user.
I32 h3cDomainCurrentAccessNum	1.3.6.1.4.1.2011.10.2.46.2.1.1.15	Integer32	read-only	The current access number of the domain.
h3cDomainSchemeTable	1.3.6.1.4.1.2011.10.2.46.2.2		not-accessible	The (conceptual) table listing schemes of all domains.
h3cDomainSchemeEntry	1.3.6.1.4.1.2011.10.2.46.2.2.1		not-accessible	An entry (conceptual row) representing an IP pool of a domain
I32 h3cDomainSchemeIndex	1.3.6.1.4.1.2011.10.2.46.2.2.1.1	Integer32	not-accessible	The scheme index of domain, which is an identifier of a domain scheme.
H3C h3cDomainSchemeMode	1.3.6.1.4.1.2011.10.2.46.2.2.1.2	H3cModeOfDomainScheme	read-create	The scheme mode of the domain. Setting h3cDomainSchemeMode to none(1) indicates the domain has none scheme. Setting h3cDomainSchemeMode to local(2) indicates the domain will use local-server as a scheme. Setting h3cDomainSchemeMode to radius(3) or tacacs(4) indicates the domain will use radius or tacacs scheme. If set h3cDomainSchemeMode to radius(3) or tacacs(4), h3cDomainAuthSchemeName and h3cDomainAcctSchemeName must be set to valid values. And if h3cDomainSchemeMode is set to none(1) or local(2), the value of h3cDomainAuthSchemeName and h3cDomainAcctSchemeName will be ignored.
OCT h3cDomainAuthSchemeName	1.3.6.1.4.1.2011.10.2.46.2.2.1.3	OCTET STRING	read-create	The authentication scheme name of domain. If h3cDomainSchemeMode is set to radius or tacacs, the h3cDomainAuthSchemeName must be configured with a valid value.
OCT h3cDomainAcctSchemeName	1.3.6.1.4.1.2011.10.2.46.2.2.1.4	OCTET STRING	read-create	The accounting scheme name of the domain. If h3cDomainSchemeMode is set to radius or tacacs, the h3cDomainAcctSchemeName must be configured with a valid value.
ROW h3cDomainSchemeRowStatus	1.3.6.1.4.1.2011.10.2.46.2.2.1.5	RowStatus	read-create	This object is responsible for managing the creation, deletion and modification of rows, which supports active status and createAndGo, destroy operation. To create a new row, h3cDomainSchemeMode must be specified. To destroy an existent row, the scheme of the row MUST NOT be used by user.
H3C h3cDomainSchemeAAAType	1.3.6.1.4.1.2011.10.2.46.2.2.1.6	H3cAAATypeDomainScheme	read-create	Service Type of the server.
OCT h3cDomainSchemeAAAName	1.3.6.1.4.1.2011.10.2.46.2.2.1.7	OCTET STRING	read-create	The scheme name of the domain, whether the scheme represents accounting, authentication or authorization references the object h3cDomainSchemeAAAType. The value of the object must be valid if the value of h3cDomainSchemeMode is radius or tacacs, the value of the object will be ignored if the value of h3cDomainSchemeMode is none or local. If the domain has no scheme, there will be a null string. If this object is supported, the objects h3cDomainAuthSchemeName and h3cDomainAcctSchemeName will be ignored.
H3C h3cDomainSchemeAccessMode	1.3.6.1.4.1.2011.10.2.46.2.2.1.8	H3cAccessModeofDomainScheme	read-create	The access mode of the domain scheme.
h3cDomainIpPoolTable	1.3.6.1.4.1.2011.10.2.46.2.3		not-accessible	The (conceptual) table listing IP pools of all domains.
h3cDomainIpPoolEntry	1.3.6.1.4.1.2011.10.2.46.2.3.1		not-accessible	An entry (conceptual row) representing an IP pool of a domain.
I32 h3cDomainIpPoolNum	1.3.6.1.4.1.2011.10.2.46.2.3.1.1	Integer32	not-accessible	The number of IP pool, which is an identifier of an IP pool.
IPt h3cDomainIpPoolLowIpAddrType	1.3.6.1.4.1.2011.10.2.46.2.3.1.2	InetAddressType	read-create	The low IP addresses type (IPv4 or IPv6) of IP pool.
IP h3cDomainIpPoolLowIpAddr	1.3.6.1.4.1.2011.10.2.46.2.3.1.3	InetAddress	read-create	The low IP address of IP pool.
I32 h3cDomainIpPoolLen	1.3.6.1.4.1.2011.10.2.46.2.3.1.4	Integer32	read-create	The length of IP pool. Default value is 1.
ROW h3cDomainIpPoolRowStatus	1.3.6.1.4.1.2011.10.2.46.2.3.1.5	RowStatus	read-create	This object is responsible for managing the creation, deletion and modification of rows, which supports active status and CreateAndGo, Destroy operation. To create a new row, h3cDomainIpPoolNum and h3cDomainIpPoolLowIpAddr must be specified. To destroy an existent row, the IP pool of this row MUST NOT be used by user.

RFC description

H3C Technologies vendor-private MIB for managing domain configuration, authentication, and user access schemes.

Start monitoring H3C router/switch/BRAS (ISP domain-based AAA) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download H3C-DOMAIN-MIB

What Is H3C-DOMAIN-MIB?

Supported Devices

Monitoring Examples

This MIB depends on

Related MIBs

How to Use in IPNetwork Monitor

RFC description