HH3C-VPN-PEER-MIB

All MIBs › HH3C-VPN-PEER-MIB

Organization: New H3C Technologies Co., Ltd.

Last Updated: 2016-03-09

Category: Domain: Security, Technology: VPN, VPN and Security, Vendor: H3C/HH3C

Description: HH3C MIB for VPN peer management configuring and monitoring VPN peer relationships on H3C security devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HH3C-VPN-PEER-MIB?

HH3C-VPN-PEER-MIB provides visibility into VPN peer relationships on H3C provider-edge (PE) devices, applicable to MPLS/IP VPN deployments where a PE maintains per-peer traffic statistics. It exposes a peer statistics table keyed by peer name with counters for outbound packets and bytes passed versus dropped. Its monitoring purpose is performance and fault detection on the VPN data plane: a rising drop-packet or drop-byte counter for a specific peer indicates policy filtering, congestion, or a misconfiguration affecting that VPN peer's traffic, distinguishing healthy peers from problematic ones. As a PE-device MIB it is closely tied to underlying MPLS/BGP VPN mechanisms (e.g., MPLS-VPN-MIB concepts) even though it is not itself IETF-standardized. It is deployed on H3C routers and security gateways acting as PE nodes in MPLS L3VPN or IPsec VPN environments. Engineers can download the HH3C-VPN-PEER-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HH3C-VPN-PEER-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

H3C PE router/security gateway

Monitoring Examples

An administrator would poll hh3cVpnPeerStatTable for a given hh3cVpnPeerName to compare hh3cVpnPeerOutPassPkts/hh3cVpnPeerOutPassBytes against hh3cVpnPeerOutDropPkts/hh3cVpnPeerOutDropBytes. A peer whose drop counters climb disproportionately relative to passed traffic would flag a policy, ACL, or capacity issue specific to that VPN peer relationship that warrants investigation.

What Can Be Monitored

per-peer passed packets/bytes
per-peer dropped packets/bytes
VPN peer name/identity

Imported Objects

From HH3C-OID-MIB

hh3cCommon

OBJECT-IDENTITY

From SNMPv2-SMI

Counter64
MODULE-IDENTITY
OBJECT-TYPE

How to Use in IPNetwork Monitor

Example using hh3cVpnPeerOutPassPkts OID:

Select an H3C PE router/security gateway (MPLS/IPsec VPN peer traffic stats) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hh3cVpnPeerOutPassPkts into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The total number of packets transmitted out of the VPN peer. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
hh3cVpnPeer	1.3.6.1.4.1.25506.2.165			This MIB provides information about VPN peers. This MIB is applicable to PE devices. Some objects in this MIB may be used only for some specific products, so users should refer to the related documents to acquire more detailed information.
hh3cVpnPeerGroup	1.3.6.1.4.1.25506.2.165.1
hh3cVpnPeerStat	1.3.6.1.4.1.25506.2.165.1.1
hh3cVpnPeerStatTable	1.3.6.1.4.1.25506.2.165.1.1.1		not-accessible	This table contains objects to get statistic information of a VPN peer on a device.
hh3cVpnPeerStatEntry	1.3.6.1.4.1.25506.2.165.1.1.1.1		not-accessible	Entry items
OCT hh3cVpnPeerName	1.3.6.1.4.1.25506.2.165.1.1.1.1.1	OCTET STRING	not-accessible	A unique human-readable value for each VPN peer.
C64 hh3cVpnPeerOutPassPktsEx	1.3.6.1.4.1.25506.2.165.1.1.1.1.2	Counter64	read-only	The total number of packets transmitted out of the VPN peer.
C64 hh3cVpnPeerOutPassBytes	1.3.6.1.4.1.25506.2.165.1.1.1.1.3	Counter64	read-only	The total number of bytes transmitted out of the VPN peer.
C64 hh3cVpnPeerOutDropPkts	1.3.6.1.4.1.25506.2.165.1.1.1.1.4	Counter64	read-only	The total number of dropped packets transmitted out of the VPN peer.
C64 hh3cVpnPeerOutDropBytes	1.3.6.1.4.1.25506.2.165.1.1.1.1.5	Counter64	read-only	The total number of dropped bytes transmitted out of the VPN peer.

RFC description

VPN peer statistics and information for provider edge (PE) device VPN management.

Start monitoring H3C PE router/security gateway (MPLS/IPsec VPN peer traffic stats) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HH3C-VPN-PEER-MIB