HH3C-SSLVPN-MIB

All MIBs › HH3C-SSLVPN-MIB

Organization: New H3C Technologies Co., Ltd.

Last Updated: 2017-07-05

Category: Domain: Security, Technology: VPN, VPN and Security, Vendor: H3C/HH3C

Description: HH3C MIB for SSL VPN gateway configuration managing virtual gateways and remote access policies on H3C devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HH3C-SSLVPN-MIB?

HH3C-SSLVPN-MIB is a private H3C enterprise MIB that manages SSL VPN gateway contexts, exposing configuration for virtual gateways and remote-access policies used for encrypted remote connectivity. It provides per-context traffic counters that quantify client and server byte flow through each SSL VPN instance. Its primary monitoring role is tracking the operational and traffic health of the SSL VPN service — confirming tunnels are passing data and spotting stalled or failing contexts — rather than physical device hardware. Because SSL VPN sits atop the device's IP stack and often integrates with local user/AAA authentication, it commonly depends on related H3C user-management MIBs for the identity side of remote access. It is deployed on H3C security gateways and firewall appliances offering SSL VPN remote access services, and an HH3C-SSLVPN-MIB download lets administrators load the module into their SNMP monitoring platform.

IPNetwork Monitor allows you to monitor SNMP objects defined in HH3C-SSLVPN-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

H3C SSL VPN gateways
H3C security appliances/firewalls

Monitoring Examples

An operator can poll hh3cSslvpnCtxIpacStatTable, keyed by hh3cSslvpnCtxName, to read hh3cSslvpnCtxIpacClientInBytes/OutBytes and hh3cSslvpnCtxIpacServerInBytes/OutBytes for each SSL VPN context. A context whose byte counters stop incrementing while remote users are supposedly connected points to a stalled or dropped VPN tunnel. Comparing client versus server byte counts across contexts also helps identify unusually heavy remote-access sessions.

What Can Be Monitored

SSL VPN context client inbound/outbound bytes
SSL VPN context server inbound/outbound bytes
per-context VPN traffic activity
SSL VPN gateway context status

Imported Objects

From HH3C-OID-MIB

hh3cCommon

OBJECT-IDENTITY

From SNMPv2-SMI

Counter64
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

DisplayString

How to Use in IPNetwork Monitor

Example using hh3cSslvpnCtxIpacClientInBytes OID:

Select an H3C SSL VPN gateway/security appliance as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hh3cSslvpnCtxIpacClientInBytes into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. It reports the number of IP-access packet bytes that the SSL VPN context received from client. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
hh3cSslvpn	1.3.6.1.4.1.25506.2.170			The private MIB file includes the SSL VPN information of a device.
hh3cSslvpnMibObjects	1.3.6.1.4.1.25506.2.170.1
hh3cSslvpnInfomation	1.3.6.1.4.1.25506.2.170.1.1
hh3cSslvpnCtxIpacStatTable	1.3.6.1.4.1.25506.2.170.1.1.1		not-accessible	This table contains SSL VPN context configuration.
hh3cSslvpnCtxIpacStatEntry	1.3.6.1.4.1.25506.2.170.1.1.1.1		not-accessible	An entry (conceptual row) in the SSL VPN context IP-access packet statistics table.
STR hh3cSslvpnCtxName	1.3.6.1.4.1.25506.2.170.1.1.1.1.1	DisplayString	not-accessible	Name of the SSL VPN context, which is case insensitive and must be unique. The string can contain only letters, digits, and underscores (_).
C64 hh3cSslvpnCtxIpacClientInBytesEx	1.3.6.1.4.1.25506.2.170.1.1.1.1.2	Counter64	read-only	Number of IP-access packet bytes that the SSL VPN context received from client.
C64 hh3cSslvpnCtxIpacClientOutBytes	1.3.6.1.4.1.25506.2.170.1.1.1.1.3	Counter64	read-only	Number of IP-access packet bytes that the SSL VPN context sent to client.
C64 hh3cSslvpnCtxIpacServerInBytes	1.3.6.1.4.1.25506.2.170.1.1.1.1.4	Counter64	read-only	Number of IP-access packet bytes that the SSL VPN context received from server.
C64 hh3cSslvpnCtxIpacServerOutBytes	1.3.6.1.4.1.25506.2.170.1.1.1.1.5	Counter64	read-only	Number of IP-access packet bytes that the SSL VPN context sent to server.

RFC description

Vendor-private H3C MIB managing SSL VPN (Secure Sockets Layer Virtual Private Network) functionality on H3C networking devices.

Start monitoring H3C SSL VPN gateway/security appliance with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HH3C-SSLVPN-MIB