HH3C-IPA-MIB

All MIBs › HH3C-IPA-MIB

Organization: Hangzhou H3C Tech. Co., Ltd.

Last Updated: 2004-11-01

Category: Technology: NetFlow, Vendor: H3C/HH3C

Description: Manages H3C IP Accounting (IPA) traffic statistics collection per source/destination prefix on router interfaces.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HH3C-IPA-MIB?

HH3C-IPA-MIB is an H3C (Hangzhou H3C Technologies) vendor MIB for the IP Accounting (IPA) feature, which classifies and counts IP traffic crossing enabled router interfaces by source/destination address and firewall disposition. hh3cIpaGlobalEnable turns IPA on and off and hh3cIpaTimeOutSeconds/hh3cIpaIntListMaxItemNum/hh3cIpaExtListMaxItemNum bound aging and table size; hh3cIpaIfConfigTable, keyed per interface, enables inbound/outbound/firewall-direction accounting per interface; hh3cIpaAccountListTable defines the user-configured IP/mask entries used to classify packets as "internal" vs. "external"; and three parallel accounting tables — hh3cIpaIntListTable (matches the account list), hh3cIpaExtListTable (doesn't match), and hh3cIpaFWListTable (denied by firewall) — each key on source/destination IP and expose Counter32/Counter64 in/out packet and byte counts. This gives an operator fine-grained traffic-accounting visibility split by classification and firewall action, useful for capacity planning and for identifying unexpectedly large flows to or from a given prefix. It depends only on HH3C-OID-MIB's hh3cCommon root, and is deployed on H3C routers with IP Accounting enabled; administrators can perform an HH3C-IPA-MIB download when instrumenting IP accounting on these devices.

IPNetwork Monitor allows you to monitor SNMP objects defined in HH3C-IPA-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

H3C routers

Monitoring Examples

An operator polls hh3cIpaIntListTable for a source/destination pair matching an entry in hh3cIpaAccountListTable, comparing hh3cIpaIntListInBytes against hh3cIpaIntListOutBytes; a sudden large jump in hh3cIpaFWListTable counters for the same address pair would indicate a spike in traffic being denied by the firewall from that source.

What Can Be Monitored

IP accounting global enable/timeout/table-size configuration
per-interface inbound/outbound/firewall accounting enable
account-list IP/mask classification entries
internal/external traffic list in/out packet and byte counters
firewall-denied traffic packet and byte counters

Imported Objects

From HH3C-OID-MIB

hh3cCommon

OBJECT-IDENTITY

From SNMPv2-SMI

Counter32
Counter64
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

RowStatus
TEXTUAL-CONVENTION

How to Use in IPNetwork Monitor

Example using hh3cIpaIntListInPackets OID:

Select an H3C router (IP traffic accounting) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hh3cIpaIntListInPackets into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The number of inbound packets in hh3cIpaIntListTable. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
hh3cIpa	1.3.6.1.4.1.25506.2.25			This MIB is used to acquire ip accounting information. The hh3cIpaAccountListTable is set by user to define the group of ip address which they want to account. This module can be enabled in each port, which was defined in the hh3cIpaIfConfigTable. If this module has been enabled, the packets will be accounted when crossing the router from the ports having been enabled by user, according to whether the source/destination ip address is in hh3cIpaAccountListTable and what kinds of function(in/out/both/fw) are enabled and also whether it is denied by the firewall. If it is denied by the firewall, it will be accounted in hh3cIpaFWListTable If it is accepted by the firewall, and ip source or ip destination is in hh3cIpaAccountListTable, it will be accounted in hh3cIpaIntListTable, otherwise it will be accounted in hh3cIpaExtListTable. And IP Accounting function also differentiates the packets by direction. If the packet is inbound, the accounting information can be seen as hh3cIpaIntListInPackets/hh3cIpaIntListInBytes in hh3cIpaIntListTable, hh3cIpaExtListInPackets/hh3cIpaExtListInBytes in hh3cIpaExtListTable, hh3cIpaFWListInPackets/hh3cIpaFWListInBytes in hh3cIpaFWListTable. or else the accounting information can be seen as hh3cIpaIntListOutPackets/hh3cIpaIntListOutBytes in hh3cIpaIntListTable, hh3cIpaExtListOutPackets/hh3cIpaExtListOutBytes in hh3cIpaExtListTable, hh3cIpaFWListOutPackets/hh3cIpaFWListOutBytes in hh3cIpaFWListTable.
hh3cIpaGlobalStats	1.3.6.1.4.1.25506.2.25.1
INT hh3cIpaGlobalEnable	1.3.6.1.4.1.25506.2.25.1.1	INTEGER	read-write	The indication of whether Ip Accounting function is enabled. If it is disabled, ip packets will not be accounted.
I32 hh3cIpaTimeOutSeconds	1.3.6.1.4.1.25506.2.25.1.2	Integer32	read-write	The value of List aging timeout. The unit is second. If exceeding the interval, the item in hh3cIpaIntListTable, hh3cIpaExtListTable and hh3cIpaFWListTable will be removed automaticlly. The range is (3600..604800).
I32 hh3cIpaIntListMaxItemNum	1.3.6.1.4.1.25506.2.25.1.3	Integer32	read-write	The max number of items in hh3cIpaIntListTable. The range is (0..16384).
I32 hh3cIpaExtListMaxItemNum	1.3.6.1.4.1.25506.2.25.1.4	Integer32	read-write	The max number of items in hh3cIpaExtListTable. The range is (0..8192).
I32 hh3cIpaFWListMaxItemNum	1.3.6.1.4.1.25506.2.25.1.5	Integer32	read-only	The max number of items in hh3cIpaFWListTable.
I32 hh3cIpaAccountListMaxItemNum	1.3.6.1.4.1.25506.2.25.1.6	Integer32	read-only	The max number of items in hh3cIpaAccountListTable.
I32 hh3cIpaAccountListNextIndex	1.3.6.1.4.1.25506.2.25.1.7	Integer32	read-only	The next available index for creating rows of hh3cIpaAccountListTable. If the value is zero, it means the table is full and no available index can be used.
INT hh3cIpaListCleaningFlag	1.3.6.1.4.1.25506.2.25.1.8	INTEGER	read-write	Cleaning List in this module. The default value is idle. If user wants to clean some lists, he can set the value to 2, 3, 4 and 5 to clean the corresponding list. After the operation, the value will return to idle.
hh3cIpaIfConfigTable	1.3.6.1.4.1.25506.2.25.2		not-accessible	Enable or disable the ip accounting inbound/outbound function under a particular interface.
hh3cIpaIfConfigEntry	1.3.6.1.4.1.25506.2.25.2.1		not-accessible	Entry of the table.
NUM hh3cIpaIfConfigIfIndex	1.3.6.1.4.1.25506.2.25.2.1.1	InterfaceIndex	not-accessible	It equals to ifIndex
INT hh3cIpaIfConfigInEnable	1.3.6.1.4.1.25506.2.25.2.1.2	INTEGER	read-write	This object is applicable to hh3cIpaIntListTable and hh3cIpaExtListTable. If the value is disabled, inbound ip packets are not accounted.
INT hh3cIpaIfConfigOutEnable	1.3.6.1.4.1.25506.2.25.2.1.3	INTEGER	read-write	This object is applicable to hh3cIpaIntListTable and hh3cIpaExtListTable. If the value is disabled, outbound ip packets are not accounted.
INT hh3cIpaIfConfigFWEnable	1.3.6.1.4.1.25506.2.25.2.1.4	INTEGER	read-write	This object is applicable to hh3cIpaFWListTable only. If the value is 'inbound', then inbound ip packets which are denied by firewall are accounted. If the value is 'outbound', then outbound ip packets which were denied by firewall are accounted. If the value is 'nodirection', neither inbound nor outbound ip packets which were denied by firewall are accounted. If the value is 'bidirection', both inbound and outbound ip packets which were denied by firewall are accounted.
hh3cIpaAccountListTable	1.3.6.1.4.1.25506.2.25.3		not-accessible	The List is used by user to sort packets into two groups by source or destination ip address. When source/destination ip address of a packet matches a item in this table, the packet is accounted in hh3cIpaIntListTable. When source/destination ip address of a packet does not match any item in this table, the packet is accounted in hh3cIpaExtListTable.
hh3cIpaAccountListEntry	1.3.6.1.4.1.25506.2.25.3.1		not-accessible	Entry of the table.
I32 hh3cIpaAccountListIndex	1.3.6.1.4.1.25506.2.25.3.1.1	Integer32	not-accessible	The Index of the table.
IP hh3cIpaAccountListIpAddr	1.3.6.1.4.1.25506.2.25.3.1.2	IpAddress	read-create	The IP address to which this entry's addressing information pertains.
IP hh3cIpaAccountListIpMask	1.3.6.1.4.1.25506.2.25.3.1.3	IpAddress	read-create	The subnet mask associated with the IP address of this entry. The value of the mask is an IP address with all the network bits set to 1 and all the hosts bits set to 0.
ROW hh3cIpaAccountListRowStatus	1.3.6.1.4.1.25506.2.25.3.1.4	RowStatus	read-create	The row status of the entry, Supporting CreateAndGo and Destroy operation.
hh3cIpaIntListTable	1.3.6.1.4.1.25506.2.25.4		not-accessible	If matching the ip address recorded in hh3cIpaAccountListTable and not denied by the firewall, the packets will be accounted in this list.
hh3cIpaIntListEntry	1.3.6.1.4.1.25506.2.25.4.1		not-accessible	Entry of the table.
IP hh3cIpaIntListIpSrc	1.3.6.1.4.1.25506.2.25.4.1.1	IpAddress	not-accessible	Source IP-address of these accounted packets.
IP hh3cIpaIntListIpDst	1.3.6.1.4.1.25506.2.25.4.1.2	IpAddress	not-accessible	Destination IP-address of these accounted packets.
I32 hh3cIpaIntListProtocol	1.3.6.1.4.1.25506.2.25.4.1.3	Integer32	not-accessible	The type of these accounted IP packets defined in RFC 1700.
C32 hh3cIpaIntListInPacketsEx	1.3.6.1.4.1.25506.2.25.4.1.4	Counter32	read-only	The number of inbound packets in hh3cIpaIntListTable.
C64 hh3cIpaIntListInBytes	1.3.6.1.4.1.25506.2.25.4.1.5	Counter64	read-only	The number of inbound bytes in hh3cIpaIntListTable.
C32 hh3cIpaIntListOutPackets	1.3.6.1.4.1.25506.2.25.4.1.6	Counter32	read-only	The number of outbound Packets in hh3cIpaIntListTable.
C64 hh3cIpaIntListOutBytes	1.3.6.1.4.1.25506.2.25.4.1.7	Counter64	read-only	The number of outbound bytes in hh3cIpaIntListTable.
hh3cIpaExtListTable	1.3.6.1.4.1.25506.2.25.5		not-accessible	If mismatching the ip address recorded in the hh3cIpaAccountListTable and not denied by the firewall, the packets will be accounted in this list.
hh3cIpaExtListEntry	1.3.6.1.4.1.25506.2.25.5.1		not-accessible	Entry of the table.
IP hh3cIpaExtListIpSrc	1.3.6.1.4.1.25506.2.25.5.1.1	IpAddress	not-accessible	Source IP-address of these accounted packets.
IP hh3cIpaExtListIpDst	1.3.6.1.4.1.25506.2.25.5.1.2	IpAddress	not-accessible	Destination IP-address of these accounted packets.
I32 hh3cIpaExtListProtocol	1.3.6.1.4.1.25506.2.25.5.1.3	Integer32	not-accessible	The value indicates the value of the 'protocol' field which is part of ip packet header.
C32 hh3cIpaExtListInPackets	1.3.6.1.4.1.25506.2.25.5.1.4	Counter32	read-only	The number of inbound packets in hh3cIpaExtListTable.
C64 hh3cIpaExtListInBytes	1.3.6.1.4.1.25506.2.25.5.1.5	Counter64	read-only	The number of inbound bytes in hh3cIpaExtListTable.
C32 hh3cIpaExtListOutPackets	1.3.6.1.4.1.25506.2.25.5.1.6	Counter32	read-only	The number of outbound packets in hh3cIpaExtListTable.
C64 hh3cIpaExtListOutBytes	1.3.6.1.4.1.25506.2.25.5.1.7	Counter64	read-only	The number of outbound bytes in hh3cIpaExtListTable.
hh3cIpaFWListTable	1.3.6.1.4.1.25506.2.25.6		not-accessible	If the packet is denied by the firewall, it will be accounted in this list.
hh3cIpaFWListEntry	1.3.6.1.4.1.25506.2.25.6.1		not-accessible	Entry of the table.
IP hh3cIpaFWListIpSrc	1.3.6.1.4.1.25506.2.25.6.1.1	IpAddress	not-accessible	Source IP-address of these accounted packets.
IP hh3cIpaFWListIpDst	1.3.6.1.4.1.25506.2.25.6.1.2	IpAddress	not-accessible	Destination IP-address of these accounted packets.
C32 hh3cIpaFWListInPackets	1.3.6.1.4.1.25506.2.25.6.1.3	Counter32	read-only	The number of outbound packets in hh3cIpaFWListTable.
C64 hh3cIpaFWListInBytes	1.3.6.1.4.1.25506.2.25.6.1.4	Counter64	read-only	The number of inbound bytes in hh3cIpaFWListTable.
C32 hh3cIpaFWListOutPackets	1.3.6.1.4.1.25506.2.25.6.1.5	Counter32	read-only	The number of outbound packets in hh3cIpaFWListTable.
C64 hh3cIpaFWListOutBytes	1.3.6.1.4.1.25506.2.25.6.1.6	Counter64	read-only	The number of outbound bytes in hh3cIpaFWListTable.

RFC description

Monitors IP accounting on H3C routers tracking ingress/egress traffic, firewall-blocked packets, and internal/external address flows.

Start monitoring H3C router (IP traffic accounting) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HH3C-IPA-MIB