HH3C-USER-MIB

All MIBs › HH3C-USER-MIB

Organization: Hangzhou H3C Tech. Co., Ltd.

Last Updated: 2003-04-10

Category: Device Management, RADIUS and AAA, Vendor: H3C/HH3C

Description: HH3C MIB for local user account management configuring usernames, passwords, and access privileges on H3C devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HH3C-USER-MIB?

HH3C-USER-MIB is a private H3C enterprise MIB for managing local user accounts on H3C network devices, covering usernames, passwords, authentication mode, privilege level, and account state. It exposes both configuration objects (for creating/modifying accounts via row status) and status objects reflecting each account's current state and access limits. Its monitoring value is chiefly software/administrative in nature — confirming which local accounts exist, their assigned privilege level, and whether they are enabled or disabled — which supports security auditing rather than hardware health checks. It typically works alongside H3C AAA and SSH/Telnet access MIBs, since local user records here often govern authentication for those management channels. It is deployed on H3C routers and switches wherever local (non-RADIUS/TACACS) user authentication is configured. Network engineers evaluating or troubleshooting this functionality can download the HH3C-USER-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HH3C-USER-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

H3C routers
H3C switches

Monitoring Examples

An administrator can poll hh3cUserInfoTable (via hh3cUserInfoEntry, keyed by hh3cUserIndex) to review hh3cUserName, hh3cUserLevel, and hh3cUserState for each local account, flagging any account left at an unexpectedly high privilege level or in an unexpected enabled/disabled state. hh3cUserAttributeTable and hh3cAccessLimit can be checked to confirm concurrent-login limits are enforced as intended. Unexpected changes to hh3cUserInfoRowStatus would indicate accounts being added or removed outside of change control.

What Can Be Monitored

local user account list
user privilege level
user account enabled/disabled state
authentication mode per user
concurrent access limit
user account row/config status

Imported Objects

From HH3C-OID-MIB

hh3cCommon

OBJECT-IDENTITY

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

DateAndTime
MacAddress
RowStatus
TEXTUAL-CONVENTION

OIDs

OID symbolic	OID numeric	Type	Access	Description
hh3cUser	1.3.6.1.4.1.25506.2.12			This MIB contains objects to Manage configuration and Monitor running state for userlog feature.
hh3cUserObjects	1.3.6.1.4.1.25506.2.12.1
hh3cUserInfoTable	1.3.6.1.4.1.25506.2.12.1.1		not-accessible	Local User Info Table
hh3cUserInfoEntry	1.3.6.1.4.1.25506.2.12.1.1.1		not-accessible	The entry of hh3cUserInfoTable
STR hh3cUserName	1.3.6.1.4.1.25506.2.12.1.1.1.1	DisplayString	read-create	The name of local user, it must be unique.
STR hh3cUserPassword	1.3.6.1.4.1.25506.2.12.1.1.1.2	DisplayString	read-create	The password of local user, default is null.
I32 hh3cAuthMode	1.3.6.1.4.1.25506.2.12.1.1.1.3	Integer32	read-create	The encrypting type of password: 0 : password simple, means password is clean text. 7 : password cipher, means password is encrypted text. default is 0.
I32 hh3cUserLevel	1.3.6.1.4.1.25506.2.12.1.1.1.4	Integer32	read-create	The privilege of local user the value range is from 0 to 3, and 0 is minimum, 3 is maximum. default is 0.
INT hh3cUserState	1.3.6.1.4.1.25506.2.12.1.1.1.5	INTEGER	read-create	The state of local user 0: active, means local user can execute any operations that he has privilege to do. 1: block, means local user can not execute any operations. default is active.
ROW hh3cUserInfoRowStatus	1.3.6.1.4.1.25506.2.12.1.1.1.6	RowStatus	read-create	The status of this conceptual row. Now only support CreateAndGo and Destroy and Active.
I32 hh3cUserIndex	1.3.6.1.4.1.25506.2.12.1.1.1.7	Integer32	not-accessible	The index of local user
hh3cUserAttributeTable	1.3.6.1.4.1.25506.2.12.1.2		not-accessible	Local User Attribute Table. if there are data in hh3cUserInfoTable, this table should have the relevant data. this table only support query and modify, but not support create and delete operations.
hh3cUserAttributeEntry	1.3.6.1.4.1.25506.2.12.1.2.1		not-accessible	The entry of hh3cUserAttributeTable
I32 hh3cAccessLimit	1.3.6.1.4.1.25506.2.12.1.2.1.1	Integer32	read-write	The maximum user number of current user who can access devices. default is 0, means no limit.
I32 hh3cIdleCut	1.3.6.1.4.1.25506.2.12.1.2.1.2	Integer32	read-write	Valid idle time out(second): 60..7200, default is 0, means disable idle time out.
IP hh3cIPAddress	1.3.6.1.4.1.25506.2.12.1.2.1.3	IpAddress	read-write	Set local user's ip address. default is 0.0.0.0
IP hh3cNasIPAddress	1.3.6.1.4.1.25506.2.12.1.2.1.4	IpAddress	read-write	Set local user's ip address of network access server. default is 127.0.0.1, means local machine.
I32 hh3cSlotNum	1.3.6.1.4.1.25506.2.12.1.2.1.5	Integer32	read-write	Set local user's slot. default is 0.
I32 hh3cSubSlotNum	1.3.6.1.4.1.25506.2.12.1.2.1.6	Integer32	read-write	Set local user's sub-slot. default is 0.
I32 hh3cPortNum	1.3.6.1.4.1.25506.2.12.1.2.1.7	Integer32	read-write	Set local user's port number. 0 is an insignificant value for initial status.
MAC hh3cMacAddress	1.3.6.1.4.1.25506.2.12.1.2.1.8	MacAddress	read-write	Set local user's mac address. default is 0-0-0, means the local user do not bind any mac address.
I32 hh3cVlan	1.3.6.1.4.1.25506.2.12.1.2.1.9	Integer32	read-write	Set local user's vlan id. the value range is from 0 to 4094. default is 0, means the local user is not in any vlan.
SER hh3cFtpService	1.3.6.1.4.1.25506.2.12.1.2.1.10	ServiceType	read-write	FTP service: enable Setting this object to the value enable has the effect of enabling the FTP service for the corresponding entry in the hh3cUserAttributeTable. disable Setting this object to the value disable has the effect of disabling the FTP service for the corresponding entry in the hh3cUserAttributeTable. The default value is disable.
OCT hh3cFtpDirectory	1.3.6.1.4.1.25506.2.12.1.2.1.11	OCTET STRING	read-write	Directory of FTP user. default is null, means if local user has the privilege of ftp service.
SER hh3cLanAccessService	1.3.6.1.4.1.25506.2.12.1.2.1.12	ServiceType	read-write	Lan Access service: enable Setting this object to the value enable has the effect of enabling the lan access service for the corresponding entry in the hh3cUserAttributeTable. disable Setting this object to the value disable has the effect of disabling the lan access service for the corresponding entry in the hh3cUserAttributeTable. The default value is disable.
SER hh3cSshService	1.3.6.1.4.1.25506.2.12.1.2.1.13	ServiceType	read-write	SSH service: enable Setting this object to the value enable has the effect of enabling the SSH service for the corresponding entry in the hh3cUserAttributeTable. disable Setting this object to the value disable has the effect of disabling the SSH service for the corresponding entry in the hh3cUserAttributeTable. The default value is disable.
SER hh3cTelnetService	1.3.6.1.4.1.25506.2.12.1.2.1.14	ServiceType	read-write	Telnet service: enable Setting this object to the value enable has the effect of enabling the TELNET service for the corresponding entry in the hh3cUserAttributeTable. disable Setting this object to the value disable has the effect of disabling the TELNET service for the corresponding entry in the hh3cUserAttributeTable. The default value is disable.
SER hh3cTerminalService	1.3.6.1.4.1.25506.2.12.1.2.1.15	ServiceType	read-write	Terminal service: enable Setting this object to the value enable has the effect of enabling the terminal service for the corresponding entry in the hh3cUserAttributeTable. disable Setting this object to the value disable has the effect of disabling the terminal service for the corresponding entry in the hh3cUserAttributeTable. The default value is disable.
DAT hh3cExpirationDate	1.3.6.1.4.1.25506.2.12.1.2.1.16	DateAndTime	read-write	Expired date of user. The default value is 0-0-0,0:0:0.0, and means it doesn't expire for ever.
STR hh3cUserGroup	1.3.6.1.4.1.25506.2.12.1.2.1.17	DisplayString	read-write	The user group that user belongs to. Any user must belong to a user group. The default group is the 'system' group. The maximum length of the group name is 80.
SER hh3cPortalService	1.3.6.1.4.1.25506.2.12.1.2.1.18	ServiceType	read-write	Portal service: enable Setting this object to the value enable has the effect of enabling the portal service for the corresponding entry in the hh3cUserAttributeTable. disable Setting this object to the value disable has the effect of disabling the portal service for the corresponding entry in the hh3cUserAttributeTable. The default value is disable.
I32 hh3cUserMaxNum	1.3.6.1.4.1.25506.2.12.1.3	Integer32	read-only	This object contains the maximum number of local users.
I32 hh3cUserCurrNum	1.3.6.1.4.1.25506.2.12.1.4	Integer32	read-only	This object contains the current number of local users.
I32 hh3cUserIndexIndicator	1.3.6.1.4.1.25506.2.12.1.5	Integer32	read-only	This object contains an appropriate value to be used for hh3cUserIndex when creating entries in the hh3cUserInfoTable. The value 0 indicates that no unassigned entries are available. To obtain the hh3cUserIndex value for a new entry, the manager issues a management protocol retrieval operation to obtain the current value of this object. After each retrieval, the agent should modify the value to the next unassigned index. After a manager retrieves a value the agent will determine through its local policy when this index value will be made available for reuse.
hh3cUserGroupObjects	1.3.6.1.4.1.25506.2.12.2
hh3cUserGroupInfoTable	1.3.6.1.4.1.25506.2.12.2.1		not-accessible	User group information table.
hh3cUserGroupInfoEntry	1.3.6.1.4.1.25506.2.12.2.1.1		not-accessible	The entry of hh3cUserGroupInfoTable.
STR hh3cUserGroupName	1.3.6.1.4.1.25506.2.12.2.1.1.1	DisplayString	not-accessible	The index of user group.
ROW hh3cUserGroupInfoRowStatus	1.3.6.1.4.1.25506.2.12.2.1.1.2	RowStatus	read-create	The status of this conceptual row. Only support createAndGo, destroy and active.

RFC description

Manages user accounts, authentication, and access services on H3C network devices.

Start monitoring H3C router/switch (local user account management) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HH3C-USER-MIB

What Is HH3C-USER-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description