HH3C-SECP-MIB

MIB Reference — IPNetwork Monitor · Updated October 05, 2026

All MIBs › HH3C-SECP-MIB

Organization: New H3C Technologies Co., Ltd.

Last Updated: 2016-12-19

Category: Domain: Security, Vendor: H3C/HH3C

Description: HH3C MIB for security policy (SECP) management defining firewall and security zone policies on H3C devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HH3C-SECP-MIB?

HH3C-SECP-MIB is a private enterprise MIB from H3C (Hangzhou Huawei-3Com/New H3C) covering the Security Policy (SECP) feature used for zone-based firewall rule enforcement on H3C routers, switches, and security appliances. It exposes configuration data for security policy rules along with runtime statistics such as per-rule match counts and IP version scoping. Monitoring with this MIB is oriented toward verifying software-enforced security behavior rather than physical hardware health: administrators track whether configured rules are actively matching traffic and when they last fired, which reveals whether the security policy engine is functioning as intended. It typically works alongside H3C's zone/interface management MIBs since security policies are applied per security zone rather than in isolation. It is deployed on H3C enterprise-grade routers, switches, and firewalls that implement zone-based security policy. Engineers can download the HH3C-SECP-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HH3C-SECP-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

  • H3C routers
  • H3C switches
  • H3C security gateways/firewalls

Monitoring Examples

An operator can poll hh3cSecpRunningInfoTable, indexed by hh3cSecpRuleID, to read hh3cSecpMatchPacketCount and hh3cSecpLastMatchTime for each configured rule. A rule whose match count climbs rapidly may indicate a traffic surge or attack the policy is filtering, while a rule whose hh3cSecpLastMatchTime never advances suggests it is obsolete or shadowed by an earlier rule. hh3cSecpIPVersion lets the admin separate IPv4 and IPv6 policy instances when auditing rule effectiveness.

What Can Be Monitored

  • security rule match packet counts
  • last rule match timestamp
  • security rule identifiers
  • IP version scope of rules
  • active security policy hit activity

This MIB depends on

Related MIBs

Imported Objects

From HH3C-OID-MIB

hh3cCommonOBJECT-IDENTITY

From SNMPv2-SMI

Counter64
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

How to Use in IPNetwork Monitor

Example using hh3cSecpMatchPacketCount OID:

Select an H3C router/switch/security gateway (zone-based Security Policy rules) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hh3cSecpMatchPacketCount into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. It reports the number of packets matching the rule. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.
OIDs

RFC description

Security policies management information base for managing devices that support security policies.

Start monitoring H3C router/switch/security gateway (zone-based Security Policy rules) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HH3C-SECP-MIB