H3C-OBJP-MIB

All MIBs › H3C-OBJP-MIB

Organization: Hangzhou H3C Technologies Co., Ltd.

Last Updated: 2014-03-10

Category: Vendor: H3C/HH3C

Description: H3C MIB for object policy management defining reusable network objects for use in security and QoS policies.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is H3C-OBJP-MIB?

H3C-OBJP-MIB is an H3C (formerly 3Com/Huawei-3Com) enterprise MIB for object-policy management, providing reusable named network objects -- such as security zone pairs -- that are referenced by security and QoS policy rules on H3C switches and routers/firewalls. Its exposed data spans both configuration (object and zone-pair definitions) and runtime statistics, since it tracks per-rule match counts and last-match timestamps for zone-pair traffic. This gives it real operational monitoring value for confirming that firewall/security-zone policies are actively matching traffic as expected, functioning as a lightweight software-status indicator for the policy engine rather than raw hardware health. It is used alongside H3C's broader security/QoS policy MIB family and depends on interface/zone configuration already present on the device. It is deployed on H3C Comware-based routers, switches, and security gateways that support object-policy-based firewall/QoS rules. Engineers can download the H3C-OBJP-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in H3C-OBJP-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

H3C Comware switch/router
H3C security gateway/firewall

Monitoring Examples

An operator would walk h3cObjpZonePairRunningInfoTable/h3cObjpZonePairRunningInfoEntry to see h3cObjpZonePairSrcZone and h3cObjpZonePairDstZone pairs along with h3cObjpZonePairMatchPacketCount and h3cObjpZonePairLastMatchTime for each h3cObjpZonePairRuleID. A rule whose match count stays at zero over time suggests a misconfigured or unreachable policy object, while a rapidly climbing count combined with a recent h3cObjpZonePairLastMatchTime confirms the security policy is actively filtering live traffic between the given zones.

What Can Be Monitored

zone-pair policy match packet counts
last policy match timestamp
configured security zone pairs
object-policy rule identifiers

Imported Objects

From HUAWEI-3COM-OID-MIB

h3cCommon

OBJECT-IDENTITY

From SNMPv2-SMI

Counter64
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

How to Use in IPNetwork Monitor

Example using h3cObjpZonePairMatchPacketCount OID:

Select an H3C Comware switch/router/security gateway (object-policy management) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type h3cObjpZonePairMatchPacketCount into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. It reports the number of packets matching the rule. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
h3cObjp	1.3.6.1.4.1.2011.10.2.155			Object-policy management information base for managing devices that support object policy.
h3cObjpZonePairObjects	1.3.6.1.4.1.2011.10.2.155.1
h3cObjpZonePairRunningInfoTable	1.3.6.1.4.1.2011.10.2.155.1.1		not-accessible	Object policy of zone pair running information base.
h3cObjpZonePairRunningInfoEntry	1.3.6.1.4.1.2011.10.2.155.1.1.1		not-accessible	Object policy of zone pair running information entry.
OCT h3cObjpZonePairSrcZone	1.3.6.1.4.1.2011.10.2.155.1.1.1.1	OCTET STRING	not-accessible	Name of the source security zone.
OCT h3cObjpZonePairDstZone	1.3.6.1.4.1.2011.10.2.155.1.1.1.2	OCTET STRING	not-accessible	Name of the destination security zone.
INT h3cObjpZonePairIPVersion	1.3.6.1.4.1.2011.10.2.155.1.1.1.3	INTEGER	not-accessible	IP protocol version.
U32 h3cObjpZonePairRuleID	1.3.6.1.4.1.2011.10.2.155.1.1.1.4	Unsigned32	not-accessible	Rule ID of object policy.
C64 h3cObjpZonePairMatchPacketCountEx	1.3.6.1.4.1.2011.10.2.155.1.1.1.5	Counter64	read-only	Number of packets matching the rule.
U32 h3cObjpZonePairLastMatchTime	1.3.6.1.4.1.2011.10.2.155.1.1.1.6	Unsigned32	read-only	Interval in seconds between the last match and 1970/1/1 00:00:00.

RFC description

Object Policy management MIB for H3C devices controlling zone pair policies and firewall security rules.

Start monitoring H3C Comware switch/router/security gateway (object-policy management) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download H3C-OBJP-MIB