HH3C-ACFP-MIB

All MIBs › HH3C-ACFP-MIB

Organization: Hangzhou H3C Tech. Co., Ltd.

Last Updated: 2006-07-04

Category: Quality of Service, Vendor: H3C/HH3C

Description: Manages H3C Auxiliary Control Flow Processing (ACFP) policies for traffic classification and forwarding.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HH3C-ACFP-MIB?

HH3C-ACFP-MIB manages H3C's Auxiliary Control Flow Processing (ACFP) feature, which lets a switch or router ACFP server collect identifying and policy information from connecting client endpoints for traffic classification, access control, or forwarding decisions. It exposes configuration/server-state objects, such as maximum session lifetime and persistent-rules settings, alongside a per-client table that records each client's identity and software/hardware profile. Notably for endpoint visibility, it can report a connected client's hardware version, operating system version, application version, and IP address, effectively giving administrators software/firmware inventory data on devices attached to the network rather than on the H3C device itself. It is an H3C-proprietary feature and does not depend on an external standard MIB, though it interacts with the switch/router's underlying forwarding and ACL infrastructure. It is typically deployed on H3C campus switches or routers used for network access control, BYOD profiling, or client-aware traffic policy enforcement. Engineers can download the HH3C-ACFP-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HH3C-ACFP-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

H3C switches
H3C routers with ACFP-enabled ports

Monitoring Examples

An administrator would poll the hh3cAcfpClientInfoTable, keyed by hh3cAcfpClientID, to see hh3cAcfpClientHwVersion, hh3cAcfpClientOSVersion, and hh3cAcfpClientAppVersion for connected endpoints, alongside hh3cAcfpClientIP to correlate identity with network address. Combined with hh3cAcfpServerMaxLifetime and hh3cAcfpServerCurContextType, this lets an NMS confirm that ACFP client-context entries are being refreshed and aged out as expected. A client reporting an unexpectedly old hh3cAcfpClientOSVersion would flag an endpoint overdue for a software update relative to the network's access policy.

What Can Be Monitored

connected client hardware version
connected client OS version
connected client application version
connected client IP address
ACFP server context lifetime
persistent rule configuration

Imported Objects

From HH3C-OID-MIB

hh3cCommon

OBJECT-IDENTITY

From INET-ADDRESS-MIB

InetAddressPrefixLength

From IPV6-TC

Ipv6Address

From SNMPv2-SMI

Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

From SNMPv2-TC

DisplayString
MacAddress
RowStatus
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
hh3cAcfp	1.3.6.1.4.1.25506.2.74			This MIB module defines a set of basic objects for configuring switches and routers to enable ACFP.
STR hh3cAcfpClientAppVersion	1.3.6.1.4.1.25506.2.74.1.1.2.1.1.5	DisplayString	read-create	The application version running on ACFP client
NTF hh3cAcfpClientDead	1.3.6.1.4.1.25506.2.74.1.1.5.4			This notification is sent when the ACFP client is not responding.
STR hh3cAcfpClientDescription	1.3.6.1.4.1.25506.2.74.1.1.2.1.1.2	DisplayString	read-create	Description of the application that is running on ACFP client, eg. IPS, VCX.
STR hh3cAcfpClientHwVersion	1.3.6.1.4.1.25506.2.74.1.1.2.1.1.3	DisplayString	read-create	The hardware revision of ACFP client.
I32 hh3cAcfpClientID	1.3.6.1.4.1.25506.2.74.1.1.2.1.1.1	Integer32	accessible-for-notify	The identifier of ACFP client.
hh3cAcfpClientInfo	1.3.6.1.4.1.25506.2.74.1.1.2
hh3cAcfpClientInfoEntry	1.3.6.1.4.1.25506.2.74.1.1.2.1.1		not-accessible	This list contains the basic information about ACFP client.
hh3cAcfpClientInfoTable	1.3.6.1.4.1.25506.2.74.1.1.2.1		not-accessible	This table contains the basic information about ACFP client.
IP hh3cAcfpClientIP	1.3.6.1.4.1.25506.2.74.1.1.2.1.1.6	IpAddress	read-create	IP address of ACFP client.
BIT hh3cAcfpClientMode	1.3.6.1.4.1.25506.2.74.1.1.2.1.1.7	Bits	read-create	ACFP client informs Router or switch which mode it is operating. Router or switch checks hh3cAcfpServerInfo to see whether it is capable of fulfilling this function. If not, router or switch generates a trap informing ACFP client such OAP mode is not supported.
STR hh3cAcfpClientOSVersion	1.3.6.1.4.1.25506.2.74.1.1.2.1.1.4	DisplayString	read-create	The operating system version running ACFP client.
NTF hh3cAcfpClientRegister	1.3.6.1.4.1.25506.2.74.1.1.5.2			This notification is sent when the ACFP client is registered.
ROW hh3cAcfpClientRowStatus	1.3.6.1.4.1.25506.2.74.1.1.2.1.1.8	RowStatus	read-create	RowStatus, supports three states: createAndGo, active, destroy. Creation Operation Restriction: Node hh3cAcfpClientMode must be bound while creating a row. It is optional for other nodes. ACFP module must be enabled for the server while creating a row. The number of rows created must not exceed upper limit. Modification Operation Restriction: Nodes that do not support modification: hh3cAcfpClientMode. Nodes that support modification: hh3cAcfpClientDescription, hh3cAcfpClientHwVersion, hh3cAcfpClientOSVersion, hh3cAcfpClientAppVersion and hh3cAcfpClientIP. If the row to be modified does not exist, error returns directly. Deletion Operation Restriction: If the row to be deleted does not exist, success returns directly.
NTF hh3cAcfpClientUnRegister	1.3.6.1.4.1.25506.2.74.1.1.5.3			This notification is sent when the ACFP client is unregistered.
NTF hh3cAcfpCurContextChanged	1.3.6.1.4.1.25506.2.74.1.1.5.1			This notification is sent when router or switch changed hh3cAcfpServerCurContextType.
NTF hh3cAcfpLifetimeChangeEvent	1.3.6.1.4.1.25506.2.74.1.1.5.6			This notification can be generated for indicating that The lifetime of all member rules of the was changed by successfully writing to object hh3cAcfpPolicyLifetime. Note that this notification is only sent if the lifetime of a policy was changed by successfully writing to object hh3cAcfpPolicyLifetime.
NTF hh3cAcfpLifetimeExpireEvent	1.3.6.1.4.1.25506.2.74.1.1.5.10			This notification is sent when the time of the policy existed exceeds its lifetime.
hh3cAcfpNotifications	1.3.6.1.4.1.25506.2.74.1.1.5
NTF hh3cAcfpNotSupportedOAPMode	1.3.6.1.4.1.25506.2.74.1.1.5.5			This notification is sent when router or switch cannot support OAP mode that ACFP client wants to operate on.
hh3cAcfpOAP	1.3.6.1.4.1.25506.2.74.1.1
hh3cAcfpObjects	1.3.6.1.4.1.25506.2.74.1
hh3cAcfpPolicy	1.3.6.1.4.1.25506.2.74.1.1.3
INT hh3cAcfpPolicyAdminStatus	1.3.6.1.4.1.25506.2.74.1.1.3.1.1.6	INTEGER	read-create	The value of this object indicates the desired status of the policy.
I32 hh3cAcfpPolicyContextID	1.3.6.1.4.1.25506.2.74.1.1.3.1.1.5	Integer32	read-only	Internal id ACFP server allocated used to map to the interface. ACFP server may send packet with this hh3cAcfpPolicyContextID to ACFP client, ACFP client can make use of this hh3cAcfpPolicyContextID and find the policy.
INT hh3cAcfpPolicyDestIfFailAction	1.3.6.1.4.1.25506.2.74.1.1.3.1.1.11	INTEGER	read-create	The value of this object indicates the action of the policy when the destination interface failed.
I32 hh3cAcfpPolicyDestIfIndex	1.3.6.1.4.1.25506.2.74.1.1.3.1.1.4	Integer32	read-create	Through this interface, packet go to ACFP client from ACFP server. The value of this object contains the same value of ifIndex of ifTable.
hh3cAcfpPolicyEntry	1.3.6.1.4.1.25506.2.74.1.1.3.1.1		not-accessible	The list contains basic information of ACFP Policy.
I32 hh3cAcfpPolicyIndex	1.3.6.1.4.1.25506.2.74.1.1.3.1.1.1	Integer32	accessible-for-notify	The identifier of the Policy of ACFP client
I32 hh3cAcfpPolicyInIfIndex	1.3.6.1.4.1.25506.2.74.1.1.3.1.1.2	Integer32	read-create	Packet is received from this interface. The value of this object contains the same value of ifIndex of ifTable.
I32 hh3cAcfpPolicyLifetime	1.3.6.1.4.1.25506.2.74.1.1.3.1.1.7	Integer32	read-create	When retrieved, this object delivers the maximum lifetime (seconds) of all the rules of this, i.e., of all the rows in hh3cAcfpRuleTable that have the same values of hh3cAcfpRulePolicyIndex and hh3cAcfpClientID. Successfully writing to this object modifies the lifetime of all the rules of this. Successfully writing a value of 0 terminates all the rules and implicitly deletes this as soon as all member entries are removed from the hh3cAcfpRuleTable. Note that after a lifetime expired, all the corresponding entry in the hh3cAcfpRuleTable will be removed and this will be deleted implicitly. Writing to this object is processed by the ACFP MIB implementation by choosing a lifetime value that is greater than or equal to zero and less than or equal to the minimum of the requested value and the value specified by object hh3cAcfpServerMaxLifetime: 0 <= lt_granted <= MINIMUM(lt_requested, lt_maximum) whereas: lt_granted is the actually granted lifetime by the ACFP MIB implementation. lt_requested is the requested lifetime of the ACFP client. lt_maximum is the value of object hh3cAcfpServerMaxLifetime. SNMP set requests to this object may be rejected or the value of the object after an accepted set operation may be less than the value that was contained in the SNMP set request.
I32 hh3cAcfpPolicyOutIfIndex	1.3.6.1.4.1.25506.2.74.1.1.3.1.1.3	Integer32	read-create	Packet is sent to this interface. The value of this object contains the same value of ifIndex of ifTable.
INT hh3cAcfpPolicyPriority	1.3.6.1.4.1.25506.2.74.1.1.3.1.1.12	INTEGER	read-create	The value of this object indicates the priority of the policy. Priority8 is maximal priority. Priority1 is minimal priority.
ROW hh3cAcfpPolicyRowStatus	1.3.6.1.4.1.25506.2.74.1.1.3.1.1.10	RowStatus	read-create	RowStatus, supports three states: createAndGo, active, destroy. Creation Operation Restriction: The client corresponding to the index hh3cAcfpClientID must exist while creating a row. Nodes hh3cAcfpPolicyTimeStart and hh3cAcfpPolicyTimeEnd are bound together, and hh3cAcfpPolicyTimeEnd must be greater than hh3cAcfpPolicyTimeStart. The number of rows created on an incoming/outgoing interface cannot exceed the upper limit. The number of rows created cannot exceed the upper limit for each client. A packet matches a policy in the following order: - It first matches the policy with the highest priority. - For two policies with the same priority, it matches the one with the smallest client index. - For two policies with the same client index, it matches the one with the smallest policy index. Modification Operation Restriction: Nodes that do not support modification: hh3cAcfpPolicyInIfIndex, hh3cAcfpPolicyOutIfIndex, hh3cAcfpPolicyDestIfIndex, hh3cAcfpPolicyDestIfFailAction, hh3cAcfpPolicyPriority. Nodes that support modification: hh3cAcfpPolicyAdminStatus, hh3cAcfpPolicyLifetime, hh3cAcfpPolicyTimeStart and hh3cAcfpPolicyTimeEnd. While modifying a row, if the row corresponding to the index configured does not exist, error returns directly. While modifying a node, the restriction over hh3cAcfpPolicyTimeStart and hh3cAcfpPolicyTimeEnd is the same as creating a node. Deletion Operation Restriction: If the row to be deleted does not exist, success returns directly.
hh3cAcfpPolicyTable	1.3.6.1.4.1.25506.2.74.1.1.3.1		not-accessible	This table lists all current policies for ACFP client(s). Entries in this table are created or removed implicitly when entries in the hh3cAcfpRuleTable are created or removed, respectively. A policy entry in this table only exists as long as there is rule of this policy in the hh3cAcfpRuleTable. The table serves for listing the existing policies and their remaining lifetimes and for changing lifetimes of policies and implicitly of all policy members and all their member policy rules can be deleted by setting hh3cAcfpPolicyLifetime to 0.
OCT hh3cAcfpPolicyTimeEnd	1.3.6.1.4.1.25506.2.74.1.1.3.1.1.9	OCTET STRING	read-create	Ending time of this policy every day. Eg. HH:MM:SS
OCT hh3cAcfpPolicyTimeStart	1.3.6.1.4.1.25506.2.74.1.1.3.1.1.8	OCTET STRING	read-create	Beginning time of this policy every day. Eg. HH:MM:SS
hh3cAcfpRule	1.3.6.1.4.1.25506.2.74.1.1.4
INT hh3cAcfpRuleAction	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.3	INTEGER	read-create	The action of this rule.
T/F hh3cAcfpRuleAll	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.4	TruthValue	read-create	The rule match all packet or does not. true : all false : not all
NTF hh3cAcfpRuleCreatedEvent	1.3.6.1.4.1.25506.2.74.1.1.5.7			This notification is sent when a new rule is created.
NTF hh3cAcfpRuleDeletedEvent	1.3.6.1.4.1.25506.2.74.1.1.5.8			This notification is sent when a rule is deleted.
I32 hh3cAcfpRuleDscp	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.22	Integer32	read-create	The value of DSCP. Invalid value value of DSCP Be(0) best effort af11(10) assured forwarding 11 service af12(12) assured forwarding 12 service af13(14) assured forwarding 13 service af21(18) assured forwarding 18 service af22(20) assured forwarding 20 service af23(22) assured forwarding 22 service af31(26) assured forwarding 31 service af32(28) assured forwarding 32 service af33(30) assured forwarding 33 service af41(34) assured forwarding 41 service af42(36) assured forwarding 42 service af43(38) assured forwarding 43 service cs1(8) class selector 1 service cs2(16) class selector 2 service cs3(24) class selector 3 service cs4(32) class selector 4 service cs5(40) class selector 5 service cs6(48) class selector 6 service cs7(56) class selector 7 service ef(46) expedited forwarding service
I32 hh3cAcfpRuleDstEndPort	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.19	Integer32	read-create	Ending UDP/TCP Destination Port of this rule.
IP hh3cAcfpRuleDstIP	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.15	IpAddress	read-create	Destination IP address of this rule.
IP hh3cAcfpRuleDstIPMask	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.16	IpAddress	read-create	Destination IP-address wild of this rule. Eg. 0.0.0.255
ADR hh3cAcfpRuleDstIPV6Address	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.30	Ipv6Address	read-create	Destination IPv6 address of this rule.
MAC hh3cAcfpRuleDstMAC	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.6	MacAddress	read-create	Destination MAC of this rule.
INT hh3cAcfpRuleDstOp	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.17	INTEGER	read-create	Destination Port operation for this rule
ADR hh3cAcfpRuleDstPrefixLen	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.31	InetAddressPrefixLength	read-create	Destination IPv6 address prefix length of this rule. Eg. 64.
I32 hh3cAcfpRuleDstStartPort	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.18	Integer32	read-create	Starting UDP/TCP Destination Port number of this rule.
hh3cAcfpRuleEntry	1.3.6.1.4.1.25506.2.74.1.1.4.1.1		not-accessible	The list contains basic information of the rule.
NTF hh3cAcfpRuleErrorEvent	1.3.6.1.4.1.25506.2.74.1.1.5.9			This notification is sent when rule cannot be applied.
T/F hh3cAcfpRuleEstablish	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.23	TruthValue	read-create	Establish Flag. Matches the TCP packets with the ACK and/or RST flag, including the TCP packets of these types: SYN+ACK, ACK, FIN+ACK, RST, RST+ACK.
T/F hh3cAcfpRuleFragment	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.24	TruthValue	read-create	The flag of matching fragmented packet.
I32 hh3cAcfpRuleIndex	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.1	Integer32	accessible-for-notify	The identifier of the rules which have the same hh3cAcfpPolicyIndex and hh3cAcfpClientID.hh3cAcfpRuleIndex indicates rule sequence in the same policy.
INT hh3cAcfpRuleOperStatus	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.2	INTEGER	read-only	The value of this object indicates the status of a rule. success : Applied rule to interface successfully. fail : Failed to apply rule to interface.
I32 hh3cAcfpRulePacketRate	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.25	Integer32	read-create	Packet rate (Kbps) of this rule.
I32 hh3cAcfpRulePrecedence	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.20	Integer32	read-create	The value of precedence field in IP header. Invalid value value of precedence routine(0) Routine precedence priority(1) Priority precedence immediate(2) Immediate precedence flash(3) Flash precedence flash-override(4) Flash Override precedence critical(5) Critical precedence internet(6) Network Control precedence network(7) Internetwork Control precedence
I32 hh3cAcfpRuleProtocol	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.9	Integer32	read-create	The protocol-type of this rule. Protocol number gre GRE tunneling(47) icmp Internet Control Message Protocol(1) igmp Internet Management Protocol(2) ip Any IP protocol(0) ipinip IP in IP tunneling(4) ospf OSPF routing protocol(89) tcp Transmission Control Protocol (6) udp User Datagram Protocol (17)
ROW hh3cAcfpRuleRowStatus	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.26	RowStatus	read-create	RowStatus, supports three states: createAndGo, active, destroy. Creation Operation Restriction: Node hh3cAcfpRuleAction must be bound while creating a line. Nodes hh3cAcfpRuleAll and hh3cAcfpRuleProtocol, hh3cAcfpRuleSrcIP, hh3cAcfpRuleSrcIPMask, hh3cAcfpRuleDstIP, hh3cAcfpRuleSrcOp, hh3cAcfpRuleSrcStartPort, hh3cAcfpRuleSrcEndPort, hh3cAcfpRuleDstIP, hh3cAcfpRuleDstIPMask, hh3cAcfpRuleDstOp, hh3cAcfpRuleDstStartPort, hh3cAcfpRuleDstEndPort, hh3cAcfpRulePrecedence, hh3cAcfpRuleTos, hh3cAcfpRuleDscp, hh3cAcfpRuleTCPFlag, hh3cAcfpRuleFragment are mutually exclusive. Nodes hh3cAcfpRuleSrcIP and hh3cAcfpRuleSrcIPMask are bound together, otherwise, the source IP address is neglected. The restriction over hh3cAcfpRuleDstIP and hh3cAcfpRuleDstIPMask is the same as hh3cAcfpRuleSrcIP and hh3cAcfpRuleSrcIPMask. Nodes hh3cAcfpRuleDscp and hh3cAcfpRulePrecedence, hh3cAcfpRuleTos are mutually exclusive. If the node hh3cAcfpRuleSrcOp is bound to range(5), hh3cAcfpRuleSrcStartPort and hh3cAcfpRuleSrcEndPort must be bound together, and hh3cAcfpRuleSrcEndPort must be greater than hh3cAcfpRuleSrcStartPort. If the node hh3cAcfpRuleSrcOp is bound to equal(1), notEqual(2), lessThan(3) or greaterThan(4), hh3cAcfpRuleSrcStartPort must be bound together, and hh3cAcfpRuleSrcEndPort is neglected. The restriction over hh3cAcfpRuleDstOp, hh3cAcfpRuleDstStartPort and hh3cAcfpRuleDstEndPort is the same as hh3cAcfpRuleSrcOp, hh3cAcfpRuleSrcStartPort and hh3cAcfpRuleSrcEndPort. If the node hh3cAcfpRuleAction is bound to redirect(3) or mirror(4), the destination interfaces of the policy the rule belonging to must exist; The number of rows created cannot exceed the upper limit for each policy, each inbound interface and each outbound interface. Modification Operation Restriction: The row does not support modification. Deletion Operation Restriction If the row to be deleted does not exist, success returns directly.
I32 hh3cAcfpRuleSrcEndPort	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.14	Integer32	read-create	Ending UDP/TCP Source Port of this rule.
IP hh3cAcfpRuleSrcIP	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.10	IpAddress	read-create	Source IP address of this rule.
IP hh3cAcfpRuleSrcIPMask	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.11	IpAddress	read-create	Source IP-address wild of this rule. Eg. 0.0.0.255.
ADR hh3cAcfpRuleSrcIPV6Address	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.28	Ipv6Address	read-create	Source IPv6 address of this rule.
MAC hh3cAcfpRuleSrcMAC	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.5	MacAddress	read-create	Source MAC of this rule.
INT hh3cAcfpRuleSrcOp	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.12	INTEGER	read-create	Source Port operation for this rule
ADR hh3cAcfpRuleSrcPrefixLen	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.29	InetAddressPrefixLength	read-create	Source IPv6 address prefix length of this rule. Eg. 64.
I32 hh3cAcfpRuleSrcStartPort	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.13	Integer32	read-create	Starting UDP/TCP Source Port number of this rule.
hh3cAcfpRuleTable	1.3.6.1.4.1.25506.2.74.1.1.4.1		not-accessible	This table lists all the rules. It is indexed by hh3cAcfpClientID, hh3cAcfpRulePolicyIndex and hh3cAcfpRuleIndex. Entries can be deleted by writing hh3cAcfpPolicyLifetime to 0.
I32 hh3cAcfpRuleTCPFlag	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.27	Integer32	read-create	TCP Flag. don't care for TCP flag to match packets care for TCP flag to match packets, the value is combination of next list. URG_VALID (1 << 13) URG_SET (1 << 5) ACK_VALID (1 << 12) ACK_SET (1 << 4) PSH_VALID (1 << 11) PSH_SET (1 << 3) RST_VALID (1 << 10) RST_SET (1 << 2) SYN_VALID (1 << 9) SYN_SET (1 << 1) FIN_VALID (1 << 8) FIN_SET 1 Matches the TCP packets with the URG and/or ACK and/or PSH and/or RST and/or SYN and/or FIN flag, including the TCP packets of these types: SYN+ACK, ACK, FIN+ACK, RST, RST+ACK.
I32 hh3cAcfpRuleTos	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.21	Integer32	read-create	The value of TOS field in IP header. Invalid value value of ToS (Type of Service) Normal(0) normal service min-monetary-cost(1) minimum monetary cost max-reliability(2) maximum reliability max-throughput(4) maximum throughput min-delay(8) minimum delay
BIT hh3cAcfpRuleTrafficType	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.32	Bits	read-create	Traffic type of this rule. When retrieved, this object returns a set of bits indicating the traffic type.
I32 hh3cAcfpRuleTypeOrLen	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.33	Integer32	read-create	The type or length of ethernet packet. For Ethernet II encapsulation, it stands for packet type. For 802.3 encapsulation, it stands for packet length.
I32 hh3cAcfpRuleVlanEnd	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.8	Integer32	read-create	Ending VLAN id of this rule. 0 : Invalid value
I32 hh3cAcfpRuleVlanStart	1.3.6.1.4.1.25506.2.74.1.1.4.1.1.7	Integer32	read-create	Starting VLAN id of this rule. 0 : Invalid value
hh3cAcfpServer	1.3.6.1.4.1.25506.2.74.1.1.1
INT hh3cAcfpServerCurContextType	1.3.6.1.4.1.25506.2.74.1.1.1.4	INTEGER	read-only	In some circumstances, it's necessary that packets go to ACFP client with context from ACFP server. However, the context perhaps is different. hh3cAcfpServerCurContextType is used to distinguish this difference, ACFP client may process distinctively.
BIT hh3cAcfpServerInfo	1.3.6.1.4.1.25506.2.74.1.1.1.1	Bits	read-only	When retrieved, this object returns a set of bits indicating the capabilities (or configuration) of the switch or router. The set bit is indication that a router or switch can support the action for security rule.
I32 hh3cAcfpServerMaxLifetime	1.3.6.1.4.1.25506.2.74.1.1.1.2	Integer32	read-only	When retrieved, this object returns the maximum lifetime in seconds, that this router or switch allows policy rules to have.
T/F hh3cAcfpServerPersistentRules	1.3.6.1.4.1.25506.2.74.1.1.1.3	TruthValue	read-only	When retrieved, this object returns true(1) if the ACFP MIB implementation can store policy rules persistently. Otherwise, it returns false(2).

RFC description

Configures and monitors ACFP (Access Control Flow Policy) rules and policies on H3C switches and routers.

Start monitoring H3C switch/router (Auxiliary Control Flow Processing, client profiling) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HH3C-ACFP-MIB

What Is HH3C-ACFP-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description