H3C-USER-MIB

Description: H3C MIB for local user account management including usernames, authentication modes, and access level configuration.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

H3C-USER-MIB is a vendor-specific MIB from H3C for managing and monitoring local user accounts (the 'userlog' feature) configured directly on a device, as opposed to centralized AAA servers. It exposes username, password, authentication mode, privilege level, account state, and access-limit attributes for each local user, along with row-status control for adding/removing accounts. This MIB is used to monitor the software/configuration status of local authentication, letting administrators verify which accounts exist, whether they are enabled, what privilege level they hold, and how many concurrent sessions each is permitted, which is important for detecting unauthorized or stale accounts. As a private H3C MIB it operates independently of centralized RADIUS/TACACS+ standards, serving as the local fallback authentication store. It is typically deployed on H3C/HPE Comware switches and routers where local user accounts are used for device management access, either as primary authentication or as a backup when AAA servers are unreachable. Engineers can download the H3C-USER-MIB file directly to load it into their MIB browser.

An administrator would poll h3cUserInfoTable/h3cUserInfoEntry, indexed by h3cUserIndex, to enumerate h3cUserName entries and check h3cUserState and h3cUserLevel to confirm no unexpected accounts have been created or elevated to a higher privilege. The h3cAuthMode field reveals whether an account uses password, scheme, or none-based authentication, which matters for security audits. The h3cUserAttributeTable/h3cUserAttributeEntry with h3cAccessLimit lets an operator confirm the maximum concurrent-session limit configured for a user is still enforced. Discovery of a new high-privilege account with an unrecognized h3cUserName would be a strong indicator of unauthorized configuration change.

Vendor-private MIB for H3C network devices, providing management objects for local user accounts, authentication policies, and privilege levels.