HH3C-CONFIG-MAN-MIB

All MIBs › HH3C-CONFIG-MAN-MIB

Organization: Hangzhou H3C Tech. Co., Ltd.

Last Updated: 2011-11-26

Category: Device Management, Vendor: H3C/HH3C

Description: Manages configuration file operations on H3C devices including save, rollback, and configuration change notifications.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HH3C-CONFIG-MAN-MIB?

HH3C-CONFIG-MAN-MIB is an H3C enterprise MIB for configuration management on H3C network devices, covering the model used to represent configuration data on the device and its peripherals. It exposes objects tracking when the running and startup configurations were last modified or saved, a log table of individual configuration-change events, and operational controls for triggering configuration operations. Its monitoring value centers on software/configuration status rather than hardware health: administrators use it to detect unsaved or drifted configuration by comparing last-modified versus last-saved timestamps, and to audit exactly what changes were made via the change log. It parallels concepts found in general configuration-management MIB designs, though implemented as an H3C proprietary module. It is typically deployed on H3C routers and switches in enterprise networks where change auditing and configuration-drift detection are required. Engineers can download the HH3C-CONFIG-MAN-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HH3C-CONFIG-MAN-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

H3C router
H3C switch

Monitoring Examples

An administrator would compare hh3cCfgRunModifiedLast against hh3cCfgRunSavedLast to detect a device running with unsaved configuration changes that would be lost on reboot. Polling the hh3cCfgLogTable (via hh3cCfgLogIndex, hh3cCfgLogTime, hh3cCfgLogSrcCmd, hh3cCfgLogSrcData) provides an audit trail of exactly which commands changed the configuration and when, while hh3cCfgLogLimitedEntries and hh3cCfgLogDeletedEntries reveal whether older log entries have rolled off before being reviewed.

What Can Be Monitored

config last-modified/last-saved timestamps
configuration change log entries
source command of each change
log entries deleted/limited

Imported Objects

From HH3C-OID-MIB

hh3cCommon

OBJECT-IDENTITY

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
TimeTicks

From SNMPv2-TC

DisplayString
RowStatus
TEXTUAL-CONVENTION
TruthValue

How to Use in IPNetwork Monitor

Example using hh3cCfgLogDeletedEntries OID:

Select an H3C router/switch (configuration management/change log) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hh3cCfgLogDeletedEntries into the Find box to locate it in the OID tree, then select it and click OK. The total number of rows deleted from hh3cCfgLogTable. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
TIK hh3cCfgExecuteEndTime	1.3.6.1.4.1.25506.2.4.1.2.6.2.1.6	TimeTicks	read-only	Record the time of the execution is finished.
hh3cCfgExecuteOperate	1.3.6.1.4.1.25506.2.4.1.2.6
I32 hh3cCfgExecuteOperateResultEntryLimit	1.3.6.1.4.1.25506.2.4.1.2.6.1	Integer32	read-write	The maximum number of ConfigOperationType entries that may be held in hh3cCfgExecuteResultTable. A particular setting does not guarantee that much data can be held.
hh3cCfgExecuteResultEntry	1.3.6.1.4.1.25506.2.4.1.2.6.2.1		not-accessible	The result entries of configuration execute operation.
I32 hh3cCfgExecuteResultIndex	1.3.6.1.4.1.25506.2.4.1.2.6.2.1.1	Integer32	not-accessible	The index of Table, which is an incremental integer. The maximum value of the node is 2147483647. The agent should wrap the value to 1 and flush all the existing entries when the maximum value is reached.
I32 hh3cCfgExecuteResultOptIndex	1.3.6.1.4.1.25506.2.4.1.2.6.2.1.2	Integer32	read-only	The configuration execute operation index in the hh3cCfgExecuteResultTable.
CON hh3cCfgExecuteResultOpType	1.3.6.1.4.1.25506.2.4.1.2.6.2.1.3	ConfigOperationType	read-only	The operation type in the hh3cCfgExecuteResultTable.
hh3cCfgExecuteResultTable	1.3.6.1.4.1.25506.2.4.1.2.6.2		not-accessible	A table of configuration execute result.
CON hh3cCfgExecuteState	1.3.6.1.4.1.25506.2.4.1.2.6.2.1.4	ConfigOperationStateType	read-only	Record the status of the specified operation.
TIK hh3cCfgExecuteTime	1.3.6.1.4.1.25506.2.4.1.2.6.2.1.5	TimeTicks	read-only	Record the time of the execution starts.
TIK hh3cCfgFirstTrapTime	1.3.6.1.4.1.25506.2.4.1.1.8	TimeTicks	accessible-for-notify	Time when the first trap is sent.
NTF hh3cCfgInvalidConfigFile	1.3.6.1.4.1.25506.2.4.2.3			When the configuration file is invalid, this notification will be generated.
hh3cCfgLog	1.3.6.1.4.1.25506.2.4.1.1
IP hh3cCfgLogCmdSrcAddress	1.3.6.1.4.1.25506.2.4.1.1.7.1.10	IpAddress	read-only	The address from which a request comes when the value of hh3cCfgLogSrcCmd is 'snmp(2)'. The ip address of the remote system connected when the value of hh3cCfgLogTerminalType is 'virtual'. Other, the value of 0.0.0.0. This object is replaced by hh3cCfgLogCmdSrcAddrRev for it only support IPv4.
IP hh3cCfgLogCmdSrcAddrRev	1.3.6.1.4.1.25506.2.4.1.1.7.1.16	InetAddress	read-only	The address from which a request comes when the value of hh3cCfgLogSrcCmd is 'snmp(2)'. The ip address of the remote system connected when the value of hh3cCfgLogTerminalType is 'virtual'. Other, the value of 0.0.0.0.
IPt hh3cCfgLogCmdSrcAddrType	1.3.6.1.4.1.25506.2.4.1.1.7.1.15	InetAddressType	read-only	The type of IP address for the hh3cCfgLogCmdSrcAddrRev.
STR hh3cCfgLogCmdSrcAddrVPNName	1.3.6.1.4.1.25506.2.4.1.1.7.1.17	DisplayString	read-only	The VPN instance of this operation uses.
C32 hh3cCfgLogDeletedEntriesEx	1.3.6.1.4.1.25506.2.4.1.1.5	Counter32	read-only	The total number of rows deleted from hh3cCfgLogTable.
INT hh3cCfgLogDesData	1.3.6.1.4.1.25506.2.4.1.1.7.1.5	INTEGER	read-only	The destination for the configuration data event. unknown unknown runningData operational data alive commandSource the command source itself startupData what the system will use next reboot local local NVRAM or flash netFtp FTP network transfer hotPlugging board is inserted or pulled out on line
hh3cCfgLogEntry	1.3.6.1.4.1.25506.2.4.1.1.7.1		not-accessible	Information of the entry.
STR hh3cCfgLogFile	1.3.6.1.4.1.25506.2.4.1.1.7.1.14	DisplayString	read-only	The current configuration file name when hh3cCfgLogSrcData has the value of 'netFtp',and hh3cCfgLogDesData has the value of 'startupData'. Other, a zero length string.
I32 hh3cCfgLogIndex	1.3.6.1.4.1.25506.2.4.1.1.7.1.1	Integer32	not-accessible	Index of the table beginning from 1.
I32 hh3cCfgLogLimitedEntries	1.3.6.1.4.1.25506.2.4.1.1.4	Integer32	read-only	The object shows the maximum number of rows in hh3cCfgLogTable. The value supported by the system is 10.
IP hh3cCfgLogServerAddress	1.3.6.1.4.1.25506.2.4.1.1.7.1.13	IpAddress	read-only	The remote server address when hh3cCfgLogSrcData or hh3cCfgLogDesData has the value of 'netFtp'. Other, a value of 0.0.0.0. This object is replaced by hh3cCfgLogServerAddrRev for it only support IPv4.
IP hh3cCfgLogServerAddrRev	1.3.6.1.4.1.25506.2.4.1.1.7.1.19	InetAddress	read-only	The remote server address when hh3cCfgLogSrcData or hh3cCfgLogDesData has the value of 'netFtp'. Other, a value of 0.0.0.0.
IPt hh3cCfgLogServerAddrType	1.3.6.1.4.1.25506.2.4.1.1.7.1.18	InetAddressType	read-only	The type of IP address for the hh3cCfgLogServerAddrRev.
STR hh3cCfgLogServerAddrVPNName	1.3.6.1.4.1.25506.2.4.1.1.7.1.20	DisplayString	read-only	The VPN instance of this operation uses.
INT hh3cCfgLogSrcCmd	1.3.6.1.4.1.25506.2.4.1.1.7.1.3	INTEGER	read-only	Specify the source command which brought the log. Currently we provide the types of source: 1.cmdLine(1):configure log instigated by command line. 2.snmp(2):configure log instigated by snmp. 3.other(3):configure log instigated by other source unknown.
INT hh3cCfgLogSrcData	1.3.6.1.4.1.25506.2.4.1.1.7.1.4	INTEGER	read-only	The source of the configuration data event. erase erasing destination runningData operational data alive commandSource the command source itself startupData what the system will use next reboot local local NVRAM or flash netFtp FTP network transfer hotPlugging board is inserted or pulled out on line
hh3cCfgLogTable	1.3.6.1.4.1.25506.2.4.1.1.7		not-accessible	Table for logging configuration operation in device.
STR hh3cCfgLogTerminalLocation	1.3.6.1.4.1.25506.2.4.1.1.7.1.9	DisplayString	read-only	The location of logging user which is available when hh3cCfgLogSrcCmd is 'cmdLine'. Other, a zero length string.
I32 hh3cCfgLogTerminalNum	1.3.6.1.4.1.25506.2.4.1.1.7.1.8	Integer32	read-only	Specifies the terminal number. If hh3cCfgLogSrcCmd is not 'cmdLine', use '-1'
INT hh3cCfgLogTerminalType	1.3.6.1.4.1.25506.2.4.1.1.7.1.6	INTEGER	read-only	Specifies the terminal type. If hh3cCfgLogSrcCmd is not 'cmdLine', use 'notApplicable'. The value list: notApplicable(1): no meaning at this time. unknown(2): unknown terminal type. console(3): console interface. terminal(4): generic terminal. virtual(5): virtual terminal such as telnet. auxiliary(6): auxiliary interface.
STR hh3cCfgLogTerminalUser	1.3.6.1.4.1.25506.2.4.1.1.7.1.7	DisplayString	read-only	The name of logging user which is available when hh3cCfgLogSrcCmd is 'cmdLine'. Other, a zero length string.
TIK hh3cCfgLogTime	1.3.6.1.4.1.25506.2.4.1.1.7.1.2	TimeTicks	read-only	Specify the sysUpTime when the config log was generated.
STR hh3cCfgLogUserName	1.3.6.1.4.1.25506.2.4.1.1.7.1.12	DisplayString	read-only	The user name used when hh3cCfgLogSrcData or hh3cCfgLogDesData has the value of 'netFtp'. Other, a zero length string.
STR hh3cCfgLogVirHost	1.3.6.1.4.1.25506.2.4.1.1.7.1.11	DisplayString	read-only	The host name of remote system connected if hh3cCfgLogTerminalType has the value of 'virtual'. Other, a zero length string.
T/F hh3cCfgLogWantBackup	1.3.6.1.4.1.25506.2.4.1.1.6	TruthValue	read-write	Decide whether to backup the value of objects about hh3cCfgLog.
NTF hh3cCfgManEventlog	1.3.6.1.4.1.25506.2.4.2.1			The object calculates the checksum on the current config per 10 minutes and even if it is different from the saved config but if a trap has been sent with the same checksum then don't send again until the checksum is different.
hh3cCfgManLogGroup	1.3.6.1.4.1.25506.2.4.3.2.1			A collection of objects configuration log group.
hh3cCfgManNotificationGroup	1.3.6.1.4.1.25506.2.4.3.2.3			Collection of notification objects.
hh3cCfgOperate	1.3.6.1.4.1.25506.2.4.1.2
NTF hh3cCfgOperateCompletion	1.3.6.1.4.1.25506.2.4.2.2			When create hh3cCfgOperateTable successfully, a notification may be generated.
T/F hh3cCfgOperateEndNotificationSwitch	1.3.6.1.4.1.25506.2.4.1.2.4.1.8	TruthValue	read-create	Specifies whether or not a notification should be issued on the completion of the operation.
TIK hh3cCfgOperateEndTime	1.3.6.1.4.1.25506.2.4.1.2.5.1.6	TimeTicks	read-only	The value of sysUpTime when the configuration operation is finished.
hh3cCfgOperateEntry	1.3.6.1.4.1.25506.2.4.1.2.4.1		not-accessible	An operate request entry.
I32 hh3cCfgOperateEntryAgeOutTime	1.3.6.1.4.1.25506.2.4.1.2.2	Integer32	read-write	The number of minutes an unactive hh3cCfgOperateEntry SHOULD be kept in the hh3cCfgOperateTable before it is active. The object is a fator taken account of when it needs delete some rows make room in hh3cCfgOperateTable.
STR hh3cCfgOperateFileName	1.3.6.1.4.1.25506.2.4.1.2.4.1.4	DisplayString	read-create	When the object of hh3cCfgOperateType has the value of net2Startup, net2running or running2Net,the value must be specified. The file name may include the path if applicable. If the value of hh3cCfgOperateType is net2Startup or net2running, this node specify the source file name of transfers.If the value of hh3cCfgOperateType is running2Net , this node specify the destination file name of transfers. When hh3cCfgOperateType has the value of startup2net,the object may not be created instead of using the file name of startup configuration file.
I32 hh3cCfgOperateGlobalEntryLimit	1.3.6.1.4.1.25506.2.4.1.2.1	Integer32	read-only	The maximum number of copy entries that may be held in hh3cCfgOperateTable. A particular setting does not guarantee that much data can be held.
hh3cCfgOperateGroup	1.3.6.1.4.1.25506.2.4.3.2.2			A group of configuration operation.
I32 hh3cCfgOperateIndex	1.3.6.1.4.1.25506.2.4.1.2.4.1.1	Integer32	not-accessible	The unique index value of a row in this table.
INT hh3cCfgOperateProtocol	1.3.6.1.4.1.25506.2.4.1.2.4.1.3	INTEGER	read-create	If the value of hh3cCfgOperateType is running2Net,net2Running,net2Startup or startup2net, this node specify the protocol to be used for file transfer . The default protocol is ftp if no protocol is specified. And for other value of hh3cCfgOperateType , this object may be ignored by the implementation. when clusterftp or clustertftp is selected, the hh3cCfgOperateServerAddress needn't be set, the server address can be acquired automatically, the value of hh3cCfgOperateServerAddress is uncertain during operation. both member switch and commander switch can use them if they support HGMP v2.
hh3cCfgOperateResultEntry	1.3.6.1.4.1.25506.2.4.1.2.5.1		not-accessible	The result entries of configuration operation requests.
I32 hh3cCfgOperateResultGlobalEntryLimit	1.3.6.1.4.1.25506.2.4.1.2.3	Integer32	read-write	The maximum number of copy entries that may be held in hh3cCfgOperateResultTable. A particular setting does not guarantee that much data can be held.
I32 hh3cCfgOperateResultIndex	1.3.6.1.4.1.25506.2.4.1.2.5.1.1	Integer32	not-accessible	The index of Table, which is an incremental integer. The maximum value of the node is 2147483647. The agent should wrap the value to 1 and flush all the existing entries when the maximum value is reached.
I32 hh3cCfgOperateResultOptIndex	1.3.6.1.4.1.25506.2.4.1.2.5.1.2	Integer32	read-only	The operation index in the hh3cCfgOperateTable.
CON hh3cCfgOperateResultOpType	1.3.6.1.4.1.25506.2.4.1.2.5.1.3	ConfigOperationType	read-only	The operation type in the hh3cCfgOperateTable.
hh3cCfgOperateResultTable	1.3.6.1.4.1.25506.2.4.1.2.5		not-accessible	A table of config-operation requests result.
ROW hh3cCfgOperateRowStatus	1.3.6.1.4.1.25506.2.4.1.2.4.1.9	RowStatus	read-create	The status of this table entry. When the status is active all the object's value in the entry is not allowed to modified.
IP hh3cCfgOperateServerAddress	1.3.6.1.4.1.25506.2.4.1.2.4.1.5	IpAddress	read-create	When the operation type is running2Net,net2Running,net2Startup or startup2net , the ip address of the ftp/tftp server from/to which to download/upload must be specified. Values of 0.0.0.0 or FF.FF.FF.FF are not permitted. This object is replaced by hh3cCfgOperateSrvAddrRev for it only support IPv4.
I32 hh3cCfgOperateServerPort	1.3.6.1.4.1.25506.2.4.1.2.4.1.10	Integer32	read-create	When the operation type is running2Net, net2Running, net2Startup or startup2Net, this node is used for specifying the remote port number. If the value is 0 or not specified, the known port number will be used.
IP hh3cCfgOperateSrvAddrRev	1.3.6.1.4.1.25506.2.4.1.2.4.1.12	InetAddress	read-create	When the operation type is running2Net,net2Running,net2Startup or startup2net , the ip address of the ftp/tftp server from/to which to download/upload must be specified.
IPt hh3cCfgOperateSrvAddrType	1.3.6.1.4.1.25506.2.4.1.2.4.1.11	InetAddressType	read-create	The type of IP address for hh3cCfgOperateSrvAddrRev.
STR hh3cCfgOperateSrvVPNName	1.3.6.1.4.1.25506.2.4.1.2.4.1.13	DisplayString	read-create	The VPN instance of this operation uses.
CON hh3cCfgOperateState	1.3.6.1.4.1.25506.2.4.1.2.5.1.4	ConfigOperationStateType	read-only	The operation state type in the hh3cCfgOperateTable.
hh3cCfgOperateTable	1.3.6.1.4.1.25506.2.4.1.2.4		not-accessible	A table of config-operation requests.
TIK hh3cCfgOperateTime	1.3.6.1.4.1.25506.2.4.1.2.5.1.5	TimeTicks	read-only	Record the time taken for the operation. This object will be like a stopwatch, starting when the operation starts, and stopping when the operation completes.
CON hh3cCfgOperateType	1.3.6.1.4.1.25506.2.4.1.2.4.1.2	ConfigOperationType	read-create	Specify the type of operation on configuration.
STR hh3cCfgOperateUserName	1.3.6.1.4.1.25506.2.4.1.2.4.1.6	DisplayString	read-create	When the operation type is running2Net,net2Running,net2Startup or startup2net , the user name for the ftp server from/to which to download/upload should be specified. The object must be created if hh3cCfgOperateProtocol has the value of ftp.
STR hh3cCfgOperateUserPassword	1.3.6.1.4.1.25506.2.4.1.2.4.1.7	DisplayString	read-create	When the operation type is running2Net,net2Running,net2Startup or startup2net , the user password for the ftp server from/to which to download/upload should be specified. The object must be created if hh3cCfgOperateProtocol has the value of ftp.
STR hh3cCfgOperFailReason	1.3.6.1.4.1.25506.2.4.1.2.5.1.7	DisplayString	read-only	The failure reasons of configuration operation.
INT hh3cCfgReset	1.3.6.1.4.1.25506.2.4.1.2.7	INTEGER	read-write	Reboot the device with the default configuration.
INT hh3cCfgReset2	1.3.6.1.4.1.25506.2.4.1.2.8	INTEGER	read-write	normal:do nothing. reset :reboot the device with the default configuration. 'normal' will be returned when getting. This node differs from hh3cCfgReset in value.
TIK hh3cCfgRunModifiedLast	1.3.6.1.4.1.25506.2.4.1.1.1	TimeTicks	read-only	The object records the value of sysUpTime when the current configuration running in the system was last modified. The value will be changed immediately after system detects the current configuration has been changed.
TIK hh3cCfgRunSavedLast	1.3.6.1.4.1.25506.2.4.1.1.2	TimeTicks	read-only	The object records the value of sysUpTime when the current configuration running in the system was last saved. If the value of the object is smaller than hh3cCfgRunModifiedLast, the current configuration has been modified but not saved.
TIK hh3cCfgStartModifiedLast	1.3.6.1.4.1.25506.2.4.1.1.3	TimeTicks	read-only	The object records the value of sysUpTime when the saved configuration used currently was last modified. It may have been modified by a save of the current configuration running in the system or other methods such as copy.
hh3cConfig	1.3.6.1.4.1.25506.2.4			This MIB contains objects for managing the system configuration. It contains the model used to represent configuration data that exists elsewhere in the system and in peripheral devices. There are no constraints on this MIB.
hh3cConfigManCompliance	1.3.6.1.4.1.25506.2.4.3.1.1			The statement of compliance for those implementing the configuration management MIB.
hh3cConfigManCompliances	1.3.6.1.4.1.25506.2.4.3.1
hh3cConfigManConformance	1.3.6.1.4.1.25506.2.4.3
hh3cConfigManGroups	1.3.6.1.4.1.25506.2.4.3.2
hh3cConfigManNotifications	1.3.6.1.4.1.25506.2.4.2
hh3cConfigManObjects	1.3.6.1.4.1.25506.2.4.1

RFC description

Manages system configuration including configuration file operations, logging, and configuration change tracking on H3C devices.

Start monitoring H3C router/switch (configuration management/change log) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HH3C-CONFIG-MAN-MIB