H3C-PORTAL-MIB

All MIBs › H3C-PORTAL-MIB

Organization: Hangzhou H3C Tech. Co., Ltd.

Last Updated: 2011-11-08

Category: RADIUS and AAA, Vendor: H3C/HH3C

Description: H3C MIB for web portal authentication management controlling captive portal sessions and user authentication state.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is H3C-PORTAL-MIB?

H3C-PORTAL-MIB is an H3C (Hangzhou H3C Technologies) enterprise MIB for managing captive-portal (Web authentication) services, registered under the h3cCommon OID tree. It defines h3cPortalServerTable for configuring portal server addresses/ports, h3cPortalIfInfoTable exposing per-interface counters h3cPortalAuthReqNumber, h3cPortalAuthSuccNumber, and h3cPortalAuthFailNumber, plus h3cPortalStatistic-family objects (h3cPortalStatAuthReq, h3cPortalStatChallengeReq, h3cPortalStatAuthFail, h3cPortalStatPwdError, etc.) that track portal authentication protocol exchanges in detail. Additional tables handle free-rule and forbidden-rule access-control lists (h3cPortalFreeRuleTable, h3cPortalForbiddenRuleTable) that bypass or block portal authentication for specific traffic, MAC-triggered portal services (h3cPortalMacTriggerSrvTable), and NOTIFICATION-TYPE traps h3cPortalServerLost and h3cPortalServerGet signaling portal server reachability changes. This makes the MIB useful for monitoring both authentication success/failure trends and portal server health in Wi-Fi/wired captive-portal deployments. It depends on IF-MIB (ifIndex/InterfaceIndex) and INET-ADDRESS-MIB for interface and address typing, and is deployed on H3C switches/access controllers/wireless controllers running Web-based portal authentication. Administrators troubleshooting login failures can download the H3C-PORTAL-MIB file to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in H3C-PORTAL-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

H3C switches, wireless access controllers, and routers running Web portal authentication

Monitoring Examples

An operator polls h3cPortalIfInfoTable to compare h3cPortalAuthSuccNumber against h3cPortalAuthFailNumber for a given interface, and watches for an h3cPortalServerLost trap; a spike in h3cPortalStatAuthFail or h3cPortalStatPwdError combined with an h3cPortalServerLost notification would indicate the portal authentication server has become unreachable, causing clients to fail captive-portal login.

What Can Be Monitored

portal server configuration and reachability
per-interface authentication request/success/failure counters
detailed portal protocol statistics (auth/challenge exchanges)
free-rule and forbidden-rule ACL entries
portal server lost/get trap notifications

Imported Objects

From HUAWEI-3COM-OID-MIB

h3cCommon

OBJECT-IDENTITY

From IF-MIB

InterfaceIndex
ifIndex	OBJECT-TYPE

From INET-ADDRESS-MIB

InetAddress
InetAddressPrefixLength
InetAddressType

From SNMPv2-SMI

Counter64
Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
TimeTicks
Unsigned32

From SNMPv2-TC

MacAddress
RowStatus
TruthValue

How to Use in IPNetwork Monitor

Example using h3cPortalStatAuthReq OID:

Select an H3C switch/wireless access controller/router (Web portal authentication) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type h3cPortalStatAuthReq into the Find box to locate it in the OID tree, then select it and click OK. It shows the total number of portal authentication requests from the portal server. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
h3cPortal	1.3.6.1.4.1.2011.10.2.99			The MIB module is used for managing portal.
h3cPortalConfig	1.3.6.1.4.1.2011.10.2.99.1
I32 h3cPortalMaxUserNumber	1.3.6.1.4.1.2011.10.2.99.1.1	Integer32	read-write	Specify the maximum number of online users, the value to be set should meet the following two conditions: 1. Less than or equal to h3cPortalUserNumberUpperLimit. 2. Greater than or equal to one. The default value is equal to h3cPortalUserNumberUpperLimit.
I32 h3cPortalCurrentUserNumber	1.3.6.1.4.1.2011.10.2.99.1.2	Integer32	read-only	The current number of users connecting to the portal.
INT h3cPortalStatus	1.3.6.1.4.1.2011.10.2.99.1.3	INTEGER	read-only	It indicates the portal status. enabled: Portal is enabled on one or more interfaces. disabled: Portal is not enabled on any interface.
I32 h3cPortalUserNumberUpperLimit	1.3.6.1.4.1.2011.10.2.99.1.4	Integer32	read-only	The upper limit of h3cPortalMaxUserNumber.
OCT h3cPortalNasId	1.3.6.1.4.1.2011.10.2.99.1.5	OCTET STRING	read-write	The nas id of this device.
h3cPortalTables	1.3.6.1.4.1.2011.10.2.99.2
h3cPortalServerTable	1.3.6.1.4.1.2011.10.2.99.2.1		not-accessible	This table defines the name and URL of portal server. It can not be created and destroyed by MIB.
h3cPortalServerEntry	1.3.6.1.4.1.2011.10.2.99.2.1.1		not-accessible	There is a row in this table for each name and URL of portal server. It is indexed using the object h3cPortalServerName.
OCT h3cPortalServerName	1.3.6.1.4.1.2011.10.2.99.2.1.1.1	OCTET STRING	accessible-for-notify	It is the index of the table of h3cPortalServerTable, it shows the name of the portal server.
OCT h3cPortalServerUrl	1.3.6.1.4.1.2011.10.2.99.2.1.1.2	OCTET STRING	read-write	It shows the uniform resource locator to the portal server. Users which have not logon to portal will be redirected to the portal server according to h3cPortalServerUrl. The value is consisted of protocol, IP address and relative path. For example: HTTP://10.1.1.1/portal It is not configurable when the portal server has been enabled.
I32 h3cPortalServerPort	1.3.6.1.4.1.2011.10.2.99.2.1.1.3	Integer32	read-write	It shows the UDP port of the portal server. The port will be used when client sends packets to portal server. Default value is 50100. It is not configurable when the portal server has been enabled.
h3cPortalIfInfoTable	1.3.6.1.4.1.2011.10.2.99.2.2		not-accessible	This table describes the portal information on some interface.
h3cPortalIfInfoEntry	1.3.6.1.4.1.2011.10.2.99.2.2.1		not-accessible	There is a row in this table for a interface on which portal has been enabled. It is indexed using the object ifIndex.
I32 h3cPortalAuthReqNumber	1.3.6.1.4.1.2011.10.2.99.2.2.1.1	Integer32	read-only	It shows the number of authentication request messages which are sent by portal module to AAA module.
I32 h3cPortalAuthSuccNumber	1.3.6.1.4.1.2011.10.2.99.2.2.1.2	Integer32	read-only	It shows the number of authentication success response messages which are sent by AAA module to portal module.
I32 h3cPortalAuthFailNumber	1.3.6.1.4.1.2011.10.2.99.2.2.1.3	Integer32	read-only	It shows the number of authentication failure response messages which are sent by AAA module to portal module.
h3cPortalIfServerTable	1.3.6.1.4.1.2011.10.2.99.2.3		not-accessible	This table describes the portal information on some interface.
h3cPortalIfServerEntry	1.3.6.1.4.1.2011.10.2.99.2.3.1		not-accessible	There is a row in this table for a interface on which portal has been enabled. It is indexed using the object ifIndex.
I32 h3cPortalIfServerIndex	1.3.6.1.4.1.2011.10.2.99.2.3.1.1	Integer32	not-accessible	It is the index of the table of h3cIfPtServerTable, it shows the index of the portal server.
OCT h3cPortalIfServerUrl	1.3.6.1.4.1.2011.10.2.99.2.3.1.2	OCTET STRING	read-create	It shows the uniform resource locator to the portal server. Users which have not logon to portal will be redirected to the portal server according to h3cPortalServerIfUrl. The value is consisted of protocol, IP address and relative path. For example: HTTP://10.1.1.1/portal It is not configurable when the portal server has been enabled.
ROW h3cPortalIfServerRowStatus	1.3.6.1.4.1.2011.10.2.99.2.3.1.3	RowStatus	read-create	This object is responsible for managing the creation, deletion and modification of rows, which support active status and CreateAndGo, Destroy operation. To create a new row, portal server must be specified. To destroy an existent row, the portal server MUST NOT be referred by interface.
h3cPortalIfVlanNasIDTable	1.3.6.1.4.1.2011.10.2.99.2.4		not-accessible	This table describes the interface on which portal has been enabled, the Vlan that the interface belongs to and the NAS ID to which the Vlan is bound.
h3cPortalIfVlanNasIDEntry	1.3.6.1.4.1.2011.10.2.99.2.4.1		not-accessible	There is a row in this table for a interface on which portal has been enabled, the Vlan that the interface belongs to and the NAS ID to which the Vlan is bound. It is indexed using the object ifIndex and Vlan that the interface belongs to.
NUM h3cPortalIfVlanNasIDIfIndex	1.3.6.1.4.1.2011.10.2.99.2.4.1.1	InterfaceIndex	not-accessible	It is the index of the table of h3cPortalIfVlanNasIDTable, it shows the interface on which portal has been enabled.
I32 h3cPortalIfVlanNasIDVlanID	1.3.6.1.4.1.2011.10.2.99.2.4.1.2	Integer32	not-accessible	It is the index of the table of h3cPortalIfVlanNasIDTable, it shows the Vlan that the interface belongs to.
OCT h3cPortalIfVlanNasIDNasID	1.3.6.1.4.1.2011.10.2.99.2.4.1.3	OCTET STRING	read-only	It is the NAS ID to which the Vlan is bound to.
h3cPortalSSIDFreeRuleTable	1.3.6.1.4.1.2011.10.2.99.2.5		not-accessible	This table describes SSID portal-free rule(s) allows specified users to access specified external websites without portal authentication.
h3cPortalSSIDFreeRuleEntry	1.3.6.1.4.1.2011.10.2.99.2.5.1		not-accessible	There is a row in this table for SSID portal-free rule. It is indexed using the object Index.
I32 h3cPortalSSIDFreeRuleIndex	1.3.6.1.4.1.2011.10.2.99.2.5.1.1	Integer32	not-accessible	It is the index of the table of h3cPortalSSIDFreeRuleTable, it shows the index of the SSID portal-free rule.
OCT h3cPortalSSIDFreeRuleSrcSSID	1.3.6.1.4.1.2011.10.2.99.2.5.1.2	OCTET STRING	read-create	The SSID match against the packet's source SSID.
ROW h3cPortalSSIDFreeRuleRowStatus	1.3.6.1.4.1.2011.10.2.99.2.5.1.3	RowStatus	read-create	This object is responsible for managing the creation, deletion and modification of rows, which support active status and CreateAndGo, Destroy operation.
h3cPortalMacTriggerSrvTable	1.3.6.1.4.1.2011.10.2.99.2.6		not-accessible	This table describes the configration of MAC Trigger Portal server.
h3cPortalMacTriggerSrvEntry	1.3.6.1.4.1.2011.10.2.99.2.6.1		not-accessible	There is a row in the table for MAC Trigger Portal server. It is indexed using the object Index.
I32 h3cPortalMacTriggerSrvIndex	1.3.6.1.4.1.2011.10.2.99.2.6.1.1	Integer32	not-accessible	It is the index of the table of h3cPortalMacTriggerSrvTable, it shows the index of the MAC Trigger Portal server.
IPt h3cPortalMacTriggerSrvIPAddrType	1.3.6.1.4.1.2011.10.2.99.2.6.1.2	InetAddressType	read-create	The type of MAC Trigger Portal server IP address. While other types of addresses are defined in the InetAddressType textual convention, and DNS names, a classifier can only look at packets on the wire.
IP h3cPortalMacTriggerSrvIP	1.3.6.1.4.1.2011.10.2.99.2.6.1.3	InetAddress	read-create	It shows the IP address of MAC Trigger Portal server.
I32 h3cPortalMacTriggerSrvPort	1.3.6.1.4.1.2011.10.2.99.2.6.1.4	Integer32	read-create	It shows the UDP port of MAC Trigger Portal server. The port will be used when client sends packets to MAC Trigger Portal server. Default value is 50100.
ROW h3cPortalMacTriggerSrvRowStatus	1.3.6.1.4.1.2011.10.2.99.2.6.1.5	RowStatus	read-create	This object is responsible for managing the creation, deletion and modification of rows, which support active status and CreateAndGo, Destroy operation.
h3cPortalMacTriggerOnIfTable	1.3.6.1.4.1.2011.10.2.99.2.7		not-accessible	This table describes the configration of Portal MAC Trigger on interface.
h3cPortalMacTriggerOnIfEntry	1.3.6.1.4.1.2011.10.2.99.2.7.1		not-accessible	There is a row in the table for Portal MAC Trigger configuration on interface. It is indexed using the object Index.
NUM h3cPortalMacTriggerOnIfIfIndex	1.3.6.1.4.1.2011.10.2.99.2.7.1.1	InterfaceIndex	not-accessible	It is the interface index and the index of h3cPortalMacTriggerOnIfTable.
I32 h3cPortalMacTriggerOnIfDetctFlowPeriod	1.3.6.1.4.1.2011.10.2.99.2.7.1.2	Integer32	read-create	It shows the period of detecting the user flow when MAC Trigger and Portal is enabled. The unit is second.
U32 h3cPortalMacTriggerOnIfThresholdFlow	1.3.6.1.4.1.2011.10.2.99.2.7.1.3	Unsigned32	read-create	It shows the threshold flow of the user to triggering authentication when MAC Trigger and Portal is enabled. The unit is byte.
ROW h3cPortalMacTriggerOnIfRowStatus	1.3.6.1.4.1.2011.10.2.99.2.7.1.4	RowStatus	read-create	This object is responsible for managing the creation, deletion and modification of rows, which support active status and CreateAndGo, Destroy operation.
h3cPortalFreeRuleTable	1.3.6.1.4.1.2011.10.2.99.2.8		not-accessible	This table describes portal-free rule(s) allows specified users to access specified external websites without portal authentication.
h3cPortalFreeRuleEntry	1.3.6.1.4.1.2011.10.2.99.2.8.1		not-accessible	There is a row in this table for portal-free rule. It is indexed using the object Index.
I32 h3cPortalFreeRuleIndex	1.3.6.1.4.1.2011.10.2.99.2.8.1.1	Integer32	not-accessible	It is the index of the table of h3cPortalFreeRuleTable, it shows the index of the portal-free rule.
NUM h3cPortalFreeRuleSrcIfIndex	1.3.6.1.4.1.2011.10.2.99.2.8.1.2	InterfaceIndex	read-create	The index of source interface.
I32 h3cPortalFreeRuleSrcVlanID	1.3.6.1.4.1.2011.10.2.99.2.8.1.3	Integer32	read-create	The identification of source vlan.
MAC h3cPortalFreeRuleSrcMac	1.3.6.1.4.1.2011.10.2.99.2.8.1.4	MacAddress	read-create	The MAC address to match against the packet's source MAC address.
IPt h3cPortalFreeRuleAddrType	1.3.6.1.4.1.2011.10.2.99.2.8.1.5	InetAddressType	read-create	The type of IP address used by this classifier entry. While other types of addresses are defined in the InetAddressType textual convention, and DNS names, a classifier can only look at packets on the wire.
IP h3cPortalFreeRuleSrcAddr	1.3.6.1.4.1.2011.10.2.99.2.8.1.6	InetAddress	read-create	The IP address to match against the packet's source IP address. This may be a DNS name or an IPv4 or IPv6 prefix. h3cPortalFreeRuleSrcPrefix indicates the number of bits that are relevant.
ADR h3cPortalFreeRuleSrcPrefix	1.3.6.1.4.1.2011.10.2.99.2.8.1.7	InetAddressPrefixLength	read-create	The length of the CIDR Prefix carried in h3cPortalFreeRuleSrcAddr. In IPv4 addresses, a length of 0 indicates a match of any address; a length of 32 indicates a match of a single host address, and a length between 0 and 32 indicates the use of a CIDR Prefix. IPv6 is similar, except that prefix lengths range from 0..128.
IP h3cPortalFreeRuleDstAddr	1.3.6.1.4.1.2011.10.2.99.2.8.1.8	InetAddress	read-create	The IP address to match against the packet's destination IP address. This may be a DNS name or an IPv4 or IPv6 prefix. h3cPortalFreeRuleDstPrefix indicates the number of bits that are relevant.
ADR h3cPortalFreeRuleDstPrefix	1.3.6.1.4.1.2011.10.2.99.2.8.1.9	InetAddressPrefixLength	read-create	The length of the CIDR Prefix carried in h3cPortalFreeRuleDstAddr. In IPv4 addresses, a length of 0 indicates a match of any address; a length of 32 indicates a match of a single host address, and a length between 0 and 32 indicates the use of a CIDR Prefix. IPv6 is similar, except that prefix lengths range from 0..128.
INT h3cPortalFreeRuleProtocol	1.3.6.1.4.1.2011.10.2.99.2.8.1.10	INTEGER	read-create	The protocol-type of port.
I32 h3cPortalFreeRuleSrcPort	1.3.6.1.4.1.2011.10.2.99.2.8.1.11	Integer32	read-create	The source port allows users to access.
I32 h3cPortalFreeRuleDstPort	1.3.6.1.4.1.2011.10.2.99.2.8.1.12	Integer32	read-create	The destination port allows users to access.
ROW h3cPortalFreeRuleRowStatus	1.3.6.1.4.1.2011.10.2.99.2.8.1.13	RowStatus	read-create	This object is responsible for managing the creation, deletion and modification of rows, which support active status and CreateAndGo, Destroy operation.
h3cPortalForbiddenRuleTable	1.3.6.1.4.1.2011.10.2.99.2.9		not-accessible	This table describes a portal-forbidden rule does not allow specified users to access specified external websites.
h3cPortalForbiddenRuleEntry	1.3.6.1.4.1.2011.10.2.99.2.9.1		not-accessible	There is a row in this table for portal-forbidden rule. It is indexed using the object Index.
I32 h3cPortalForbiddenRuleIndex	1.3.6.1.4.1.2011.10.2.99.2.9.1.1	Integer32	not-accessible	It is the index of the table of h3cPortalForbiddenRuleTable, it shows the index of the portal-forbidden rule.
NUM h3cPortalForbiddenRuleSrcIfIndex	1.3.6.1.4.1.2011.10.2.99.2.9.1.2	InterfaceIndex	read-create	The index of source interface.
I32 h3cPortalForbiddenRuleSrcVlanID	1.3.6.1.4.1.2011.10.2.99.2.9.1.3	Integer32	read-create	The identification of source vlan.
MAC h3cPortalForbiddenRuleSrcMac	1.3.6.1.4.1.2011.10.2.99.2.9.1.4	MacAddress	read-create	The MAC address to match against the packet's source MAC address.
IPt h3cPortalForbiddenRuleAddrType	1.3.6.1.4.1.2011.10.2.99.2.9.1.5	InetAddressType	read-create	The type of IP address used by this classifier entry. While other types of addresses are defined in the InetAddressType textual convention, and DNS names, a classifier can only look at packets on the wire.
IP h3cPortalForbiddenRuleSrcAddr	1.3.6.1.4.1.2011.10.2.99.2.9.1.6	InetAddress	read-create	The IP address to match against the packet's source IP address. This may be a DNS name or an IPv4 or IPv6 prefix. h3cPortalForbiddenRuleSrcPrefix indicates the number of bits that are relevant.
ADR h3cPortalForbiddenRuleSrcPrefix	1.3.6.1.4.1.2011.10.2.99.2.9.1.7	InetAddressPrefixLength	read-create	The length of the CIDR Prefix carried in h3cPortalFreeRuleSrcAddr. In IPv4 addresses, a length of 0 indicates a match of any address; a length of 32 indicates a match of a single host address, and a length between 0 and 32 indicates the use of a CIDR Prefix. IPv6 is similar, except that prefix lengths range from 0..128.
IP h3cPortalForbiddenRuleDstAddr	1.3.6.1.4.1.2011.10.2.99.2.9.1.8	InetAddress	read-create	The IP address to match against the packet's destination IP address. This may be a DNS name or an IPv4 or IPv6 prefix. h3cPortalForbiddenRuleDstPrefix indicates the number of bits that are relevant.
ADR h3cPortalForbiddenRuleDstPrefix	1.3.6.1.4.1.2011.10.2.99.2.9.1.9	InetAddressPrefixLength	read-create	The length of the CIDR Prefix carried in h3cPortalFreeRuleDstAddr. In IPv4 addresses, a length of 0 indicates a match of any address; a length of 32 indicates a match of a single host address, and a length between 0 and 32 indicates the use of a CIDR Prefix. IPv6 is similar, except that prefix lengths range from 0..128.
INT h3cPortalForbiddenRuleProtocol	1.3.6.1.4.1.2011.10.2.99.2.9.1.10	INTEGER	read-create	The protocol-type of port.
I32 h3cPortalForbiddenRuleSrcPort	1.3.6.1.4.1.2011.10.2.99.2.9.1.11	Integer32	read-create	The source port does not allow users to access.
I32 h3cPortalForbiddenRuleDstPort	1.3.6.1.4.1.2011.10.2.99.2.9.1.12	Integer32	read-create	The destination port does not allow users to access.
ROW h3cPortalForbiddenRuleRowStatus	1.3.6.1.4.1.2011.10.2.99.2.9.1.13	RowStatus	read-create	This object is responsible for managing the creation, deletion and modification of rows, which support active status and CreateAndGo, Destroy operation.
h3cPortalTraps	1.3.6.1.4.1.2011.10.2.99.3
h3cPortalTrapPrefix	1.3.6.1.4.1.2011.10.2.99.3.0
NTF h3cPortalServerLost	1.3.6.1.4.1.2011.10.2.99.3.0.1			This trap is generated when the device finds that the portal server is unreachable, the portal server's name is h3cPortalServerName, and the portal server has been enabled.
NTF h3cPortalServerGet	1.3.6.1.4.1.2011.10.2.99.3.0.2			This trap is generated when the device finds that the state of portal server changes from unreachable state to reachable, the portal server's name is h3cPortalServerName, and the portal server has been enabled.
h3cPortalTrapVarObjects	1.3.6.1.4.1.2011.10.2.99.3.1
TIK h3cPortalFirstTrapTime	1.3.6.1.4.1.2011.10.2.99.3.1.1	TimeTicks	accessible-for-notify	Represents the first trap time.
h3cPortalStatistic	1.3.6.1.4.1.2011.10.2.99.4
C64 h3cPortalStatAuthReqEx	1.3.6.1.4.1.2011.10.2.99.4.1	Counter64	read-only	It shows the total number of portal authentication requests from the portal server.
C64 h3cPortalStatAckLogout	1.3.6.1.4.1.2011.10.2.99.4.2	Counter64	read-only	It shows the number of logout requests from the portal server.
C64 h3cPortalStatNotifyLogout	1.3.6.1.4.1.2011.10.2.99.4.3	Counter64	read-only	It shows the number of logout requests from the access device.
C64 h3cPortalStatChallengeTimeout	1.3.6.1.4.1.2011.10.2.99.4.4	Counter64	read-only	It shows the number of challenge from the portal server without response.
C64 h3cPortalStatChallengeBusy	1.3.6.1.4.1.2011.10.2.99.4.5	Counter64	read-only	It shows the number of device-busy responses for challenges from the portal server.
C64 h3cPortalStatChallengeFail	1.3.6.1.4.1.2011.10.2.99.4.6	Counter64	read-only	It shows the number of challenges from the portal server with failure response.
C64 h3cPortalStatAuthTimeout	1.3.6.1.4.1.2011.10.2.99.4.7	Counter64	read-only	It shows the number of authentication requests from the portal server without responses.
C64 h3cPortalStatAuthFail	1.3.6.1.4.1.2011.10.2.99.4.8	Counter64	read-only	It shows the number of authentication requests from the portal server with failure responses.
C64 h3cPortalStatPwdError	1.3.6.1.4.1.2011.10.2.99.4.9	Counter64	read-only	It shows the number of password errors.
C64 h3cPortalStatAuthBusy	1.3.6.1.4.1.2011.10.2.99.4.10	Counter64	read-only	It shows the number of device-busy responses to authentication requests from the portal server.
C64 h3cPortalStatAuthDisordered	1.3.6.1.4.1.2011.10.2.99.4.11	Counter64	read-only	It shows the number of disordered authentication packets from the portal server.
C64 h3cPortalStatAuthUnknownError	1.3.6.1.4.1.2011.10.2.99.4.12	Counter64	read-only	It shows the number of unknown errors.
C64 h3cPortalStatAuthResp	1.3.6.1.4.1.2011.10.2.99.4.13	Counter64	read-only	It shows the number of authentication response messages which are sent by AC to portal server.
C64 h3cPortalStatChallengeReq	1.3.6.1.4.1.2011.10.2.99.4.14	Counter64	read-only	It shows the number of challenge request messages which are sent by portal server to AC.
C64 h3cPortalStatChallengeResp	1.3.6.1.4.1.2011.10.2.99.4.15	Counter64	read-only	It shows the number of challenge response messages which are sent by AC to portal server.
h3cPortalPktStatistic	1.3.6.1.4.1.2011.10.2.99.5
C64 h3cPortalPktStaReqAuthNum	1.3.6.1.4.1.2011.10.2.99.5.1	Counter64	read-only	It shows the total number of portal authentication requests from the portal server.
C64 h3cPortalPktStaAckAuthSuccess	1.3.6.1.4.1.2011.10.2.99.5.2	Counter64	read-only	It shows the total number of the response to REQ-AUTH packet of portal server including error code 0 in the packet, that is authentication success.
C64 h3cPortalPktStaAckAuthReject	1.3.6.1.4.1.2011.10.2.99.5.3	Counter64	read-only	It shows the total number of the response to REQ-AUTH packet of portal server including error code 1 in the packet, that is rejected by server.
C64 h3cPortalPktStaAckAuthEstablish	1.3.6.1.4.1.2011.10.2.99.5.4	Counter64	read-only	It shows the total number of the response to REQ-AUTH packet of portal server including error code 2 in the packet, that is the link is already established.
C64 h3cPortalPktStaAckAuthBusy	1.3.6.1.4.1.2011.10.2.99.5.5	Counter64	read-only	It shows the total number of the response to REQ-AUTH packet of portal server including error code 3 in the packet, that is the system is busy.
C64 h3cPortalPktStaAckAuthAuthFail	1.3.6.1.4.1.2011.10.2.99.5.6	Counter64	read-only	It shows the total number of the response to REQ-AUTH packet of portal server including error code 4 in the packet, that is authentication fail.
C64 h3cPortalPktStaReqChallengeNum	1.3.6.1.4.1.2011.10.2.99.5.7	Counter64	read-only	It shows the total number of portal challenge requests from the portal server.
C64 h3cPortalPktStaAckChallengeSuccess	1.3.6.1.4.1.2011.10.2.99.5.8	Counter64	read-only	It shows the total number of the response to challenge packet of portal server including error code 0 in the packet, that is challenge is success.
C64 h3cPortalPktStaAckChallengeReject	1.3.6.1.4.1.2011.10.2.99.5.9	Counter64	read-only	It shows the total number of the response to challenge packet of portal server including error code 1 in the packet, that is challenge is rejected by server.
C64 h3cPortalPktStaAckChallengeEstablish	1.3.6.1.4.1.2011.10.2.99.5.10	Counter64	read-only	It shows the total number of the response to challenge packet of portal server including error code 2 in the packet, that is the link is alreadys established.
C64 h3cPortalPktStaAckChallengeBusy	1.3.6.1.4.1.2011.10.2.99.5.11	Counter64	read-only	It shows the total number of the response to challenge packet of portal server including error code 3 in the packet, that is the system is busy.
C64 h3cPortalPktStaAckChallengeAuthFail	1.3.6.1.4.1.2011.10.2.99.5.12	Counter64	read-only	It shows the total number of the response to challenge packet of portal server including error code 4 in the packet, that is authentication fail.

RFC description

Manages portal authentication and access control for H3C devices with support for RADIUS, MAC-based triggers, and traffic statistics.

Start monitoring H3C switch/wireless access controller/router (Web portal authentication) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download H3C-PORTAL-MIB