All MIBs › HP-AUTH-MIB
Organization: HPE Networking
Last Updated: 2017-09-28
Category: Domain: Security, RADIUS and AAA, Vendor: HP/HPE
Description: HP SNMP MIB for authentication management on HP ProCurve and networking devices, supporting 802.1X and MAC-based authentication.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is HP-AUTH-MIB?
HP-AUTH-MIB is an HP proprietary MIB for the Authentication feature of devices in the HP Integrated Communication Facility (ICF) product line, covering HP ProCurve and Aruba networking switches. It is expected to expose configuration and status objects for port-based network access control such as 802.1X and MAC-based authentication, including per-port authentication mode and connected-client authentication state. Its monitoring value is in tracking software/security enforcement status - confirming that ports are successfully authenticating clients or correctly blocking unauthorized devices - rather than physical hardware health. It operates alongside the IEEE 802.1X standard and other HP-ICF MIBs (e.g. HP-ICF-BASIC) used for port and device identification. It is deployed on HP ProCurve/Aruba managed switches that enforce 802.1X or MAC-based port authentication in enterprise LANs, with the HP-AUTH-MIB MIB defining the objects behind that enforcement.
IPNetwork Monitor allows you to monitor SNMP objects defined in HP-AUTH-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- HP ProCurve switch
- HP Aruba (ICF-based) switch
Monitoring Examples
No specific object or table names were captured in the sampled data for this module, so a concrete OID-level example cannot be given; based on its stated purpose, an administrator would typically poll per-port authentication mode and client authentication state to confirm a port has successfully authenticated its connected device, with a rising count of authentication failures on a port pointing to a misconfigured supplicant or credential problem.
What Can Be Monitored
- per-port authentication mode
- 802.1X/MAC authentication status
- authenticated client state
- authentication failure counts
This MIB depends on
Related MIBs
Imported Objects
From HP-ICF-OID
| hpSwitch | OBJECT-IDENTITY |
From INET-ADDRESS-MIB
| InetAddress | |
| InetAddressType |
From OSPF-MIB
| ospfIfEntry | |
| ospfVirtIfEntry |
From RIPv2-MIB
| rip2IfConfEntry | OBJECT-TYPE |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| NOTIFICATION-GROUP | |
| OBJECT-GROUP |
From SNMPv2-SMI
| Counter32 | |
| Gauge32 | |
| Integer32 | |
| IpAddress | |
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE | |
| TimeTicks | |
| Unsigned32 |
From SNMPv2-TC
| DateAndTime | |
| DisplayString | |
| RowStatus | |
| TruthValue |
How to Use in IPNetwork Monitor
Example using hpTacacsStatsNumSessOpened OID:
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| hpSwitchAuthenticationMIB | 1.3.6.1.4.1.11.2.14.11.5.1.16 | This MIB module describes objects for managing the Authentication features of devices in the HP Integrated Communication Facility product line. | ||
| hpSwitchAuthNotifications | 1.3.6.1.4.1.11.2.14.11.5.1.16.0 | |||
| NTF hpSwitchPasswordExpiryNotify | 1.3.6.1.4.1.11.2.14.11.5.1.16.0.1 | An hpSwitchPasswordExpiryNotify notification that signifies that the password configured for the specified user has expired. | ||
| hpSwitchAuthenticationConfig | 1.3.6.1.4.1.11.2.14.11.5.1.16.1 | |||
| I32 hpSwitchNumLoginAttempts | 1.3.6.1.4.1.11.2.14.11.5.1.16.1.1 | Integer32 | read-write | The number of login attempts allowed, both per session and within the time of hpSwitchAuthLockoutDelay. |
| INT hpSwitchAuthRespectPriv | 1.3.6.1.4.1.11.2.14.11.5.1.16.1.2 | INTEGER | read-write | This object allows the switch to set privilege level of the session based on the received configuration variable from the authentication server. For RADIUS, the Service-Type attribute's configured value on the server should be 6-Administrative for manager's privilege level, or 7-NAS-prompt for the user/operator privilege level. |
| INT hpSwitchAuthenticationEncryptCredentialsMethod | 1.3.6.1.4.1.11.2.14.11.5.1.16.1.3 | INTEGER | read-write | This object determines the methods used to encrypt passwords configured on this device. |
| I32 hpSwitchAuthLockoutDelay | 1.3.6.1.4.1.11.2.14.11.5.1.16.1.4 | Integer32 | read-write | The number of seconds after repeated login failures before a user may again attempt login, and the period within which login rate is limited. When the value is set 0, the login rate limit feature is disabled. |
| I32 hpSwitchMinimumPasswordLength | 1.3.6.1.4.1.11.2.14.11.5.1.16.1.5 | Integer32 | read-write | Minimum number of permissible characters required to set a new password for manager, operator, or local management privilege user. The exact range of valid values for this object is implementation dependent; consult the product documentation to determine the supported range for a specific product. |
| T/F hpSwitchAuthAllowVlanTagged | 1.3.6.1.4.1.11.2.14.11.5.1.16.1.6 | TruthValue | read-write | When set to 'true', tagged VLAN membership changes are immediately applied on AAA enabled ports. By default, VLAN changes are postponed when there are authenticated clients connected on the port. |
| INT hpSwitchAuthenHideSensitiveData | 1.3.6.1.4.1.11.2.14.11.5.1.16.1.7 | INTEGER | read-write | This object enables/disables hiding of the sensitive data in standard secure-mode. |
| OCT hpSwitchAuthUnlockUser | 1.3.6.1.4.1.11.2.14.11.5.1.16.1.8 | OCTET STRING | read-write | The User Name, in ASCII format. The exact size of this object is implementation dependent; the user will be unlocked, if the current state of the user is locked out. |
| INT hpSwitchAuthUserBasedLockout | 1.3.6.1.4.1.11.2.14.11.5.1.16.1.9 | INTEGER | read-write | This object enables/disables the user-based-lockout. If this feature is enabled, the lockout is based on username and not based on the IP address. |
| hpSwitchAuthenTable | 1.3.6.1.4.1.11.2.14.11.5.1.16.2 | not-accessible | This table lists the authentication methods to be tried for granting different access levels through various access tasks. | |
| hpSwitchAuthenEntry | 1.3.6.1.4.1.11.2.14.11.5.1.16.2.1 | not-accessible | An Authentication Method Table Entry. | |
| INT hpSwitchAuthenIndex | 1.3.6.1.4.1.11.2.14.11.5.1.16.2.1.1 | INTEGER | not-accessible | Signifies the access task for which authentication methods are listed in this entry. |
| INT hpSwitchAuthenLoginPrimary | 1.3.6.1.4.1.11.2.14.11.5.1.16.2.1.2 | INTEGER | read-write | The value of this object indicates the primary login authentication mechanism. When a user logs in, the authentication method configured by this object will be tried first. |
| INT hpSwitchAuthenLoginSecondary | 1.3.6.1.4.1.11.2.14.11.5.1.16.2.1.3 | INTEGER | read-write | The value of this object indicates the secondary login authentication mechanism, i.e whether Local or Authorized will be tried in case the primary authentication results in an error.The Local authentication method uses the credential database on the switch. The Authorized authentication method will be granted access without authenticating. The cachedReauth authentication method will grant access in case of reauthentication retaining the current session attributes. |
| INT hpSwitchAuthenEnablePrimary | 1.3.6.1.4.1.11.2.14.11.5.1.16.2.1.4 | INTEGER | read-write | This object configures the primary authentication mechanism that will be tried first when a user requests manager-level access |
| INT hpSwitchAuthenEnableSecondary | 1.3.6.1.4.1.11.2.14.11.5.1.16.2.1.5 | INTEGER | read-write | This object indicates the secondary login authentication mechanism, i.e whether Local or Authorized will be tried in case the primary authentication results in an error. The authentication method Local uses the credential database on the switch. The Authorized authentication method will be granted access without authenticating. |
| STR hpSwitchAuthenLoginServerGroupName | 1.3.6.1.4.1.11.2.14.11.5.1.16.2.1.6 | DisplayString | read-write | The name that defines the RADIUS server group that this authentication method is associated with. The current maximum length is 12. |
| STR hpSwitchAuthenEnableServerGroupName | 1.3.6.1.4.1.11.2.14.11.5.1.16.2.1.7 | DisplayString | read-write | The name that defines the RADIUS server group that this authentication method is associated with. The current maximum length is 12. |
| INT hpSwitchAuthenLoginTwoFactorType | 1.3.6.1.4.1.11.2.14.11.5.1.16.2.1.8 | INTEGER | read-write | This object configures the type of two-factor authentication |
| INT hpSwitchAuthenEnableTwoFactorType | 1.3.6.1.4.1.11.2.14.11.5.1.16.2.1.9 | INTEGER | read-write | This object configures the type of two-factor authentication |
| INT hpSwitchAuthenLoginSecondAuthMethod | 1.3.6.1.4.1.11.2.14.11.5.1.16.2.1.10 | INTEGER | read-write | This object configures the password configuration for two-factor authentication |
| INT hpSwitchAuthenEnableSecondAuthMethod | 1.3.6.1.4.1.11.2.14.11.5.1.16.2.1.11 | INTEGER | read-write | This object configures the password configuration for two-factor authentication |
| INT hpSwitchAuthenClientPrimary | 1.3.6.1.4.1.11.2.14.11.5.1.16.2.1.12 | INTEGER | read-write | This object configures the primary authentication for SSH when the switch acts as a client. |
| INT hpSwitchAuthenClientSecondary | 1.3.6.1.4.1.11.2.14.11.5.1.16.2.1.13 | INTEGER | read-write | This object indicates the secondary login authentication for SSH when the switch acts as a client. This is a placeholder as secondary authentication is not currently supported when primary authentication is 'certificate' for SSH client. |
| T/F hpSwitchAuthenCachedReauthAuthorized | 1.3.6.1.4.1.11.2.14.11.5.1.16.2.1.14 | TruthValue | read-write | When the value of object hpSwitchAuthenLoginSecondary is set to cachedReauth(4),the ture value set for this object indicates cachedReauth authentication method will grant access in case of reauthentication fails. |
| hpSwitchTacacsConfig | 1.3.6.1.4.1.11.2.14.11.5.1.16.3 | |||
| I32 hpSwitchTacacsTimeout | 1.3.6.1.4.1.11.2.14.11.5.1.16.3.1 | Integer32 | read-write | The duration in seconds to wait for a response from the TACACS+ server host. |
| OCT hpSwitchTacacsAuthKey | 1.3.6.1.4.1.11.2.14.11.5.1.16.3.2 | OCTET STRING | read-write | The key used in encrypting the packets passed between the TACACS+ server and the client. This key must match the one configured on the server. |
| OCT hpSwitchTacacsAuthKeyEncrypted | 1.3.6.1.4.1.11.2.14.11.5.1.16.3.3 | OCTET STRING | read-write | An encrypted form of the key used in encrypting the packets passed between the TACACS+ server and the client. This key must match the one configured on the server. This object may only be read or written when hpSwitchAuthenticationEncryptCredentialsMethod is set to a value other than none(0). At most one of hpSwitchTacacsAuthKey and hpSwitchTacacsAuthKeyEncrypted may be set in any transaction. This object should only be written with an encrypted key previously read from a compatible HP Networking device. |
| I32 hpSwitchTacacsDeadTime | 1.3.6.1.4.1.11.2.14.11.5.1.16.3.4 | Integer32 | read-write | This object specifies the TACACS+ server unavailability time. When a response is not received from a TACACS+ server, that server is then not contacted for Authentication, Authorization, or Accounting (AAA) requests for a period of dead-time defined. During this period, any AAA request received from the client is sent to the next available server. A value of zero indicates that all AAA requests are continuously sent to the unavailable server. |
| hpSwitchTacacsServersTable | 1.3.6.1.4.1.11.2.14.11.5.1.16.4 | not-accessible | This table lists a maximum of 3 TACACS+ servers. | |
| hpSwitchTacacsServersEntry | 1.3.6.1.4.1.11.2.14.11.5.1.16.4.1 | not-accessible | A TACACS+ server table entry. | |
| I32 hpSwitchTacacsServerIndex | 1.3.6.1.4.1.11.2.14.11.5.1.16.4.1.1 | Integer32 | not-accessible | The index value which uniquely identifies a row in the TACACS+ Servers Table. |
| IP hpSwitchTacacsServerIpAddr | 1.3.6.1.4.1.11.2.14.11.5.1.16.4.1.2 | IpAddress | read-create | The IP address of a TACACS+ Server. |
| OCT hpSwitchTacacsServerKey | 1.3.6.1.4.1.11.2.14.11.5.1.16.4.1.3 | OCTET STRING | read-create | The key used in encrypting the packets passed between the TACACS+ server and the client. This key must match the one configured on the server. |
| ROW hpSwitchTacacsServerStatus | 1.3.6.1.4.1.11.2.14.11.5.1.16.4.1.4 | RowStatus | read-create | Status of Servers Table row. |
| T/F hpSwitchTacacsServerIsOobm | 1.3.6.1.4.1.11.2.14.11.5.1.16.4.1.5 | TruthValue | read-create | This object indicates whether this TACACS+ Server is reachable over OOBM (Out Of Band Management) interface or not. This mib object will be applicable only if there is a physical OOBM port on the device. |
| OCT hpSwitchTacacsServerKeyEncrypted | 1.3.6.1.4.1.11.2.14.11.5.1.16.4.1.6 | OCTET STRING | read-create | An encrypted form of the key used in encrypting the packets passed between the TACACS+ server and the client. This key must match the one configured on the server. This object may only be read or written when hpSwitchAuthenticationEncryptCredentialsMethod is set to a value other than none(0). At most one of hpSwitchTacacsServerKey and hpSwitchTacacsServerKeyEncrypted may be set in any transaction. This object should only be written with an encrypted key previously read from a compatible HP Networking device. |
| hpTacacsStatsServersTable | 1.3.6.1.4.1.11.2.14.11.5.1.16.5 | not-accessible | A table containing statistics for the configured TACACS+ servers. | |
| hpTacacsStatsServersEntry | 1.3.6.1.4.1.11.2.14.11.5.1.16.5.1 | not-accessible | The information associated with each row in the TACACS+ servers table. | |
| I32 hpTacacsStatsServerIndex | 1.3.6.1.4.1.11.2.14.11.5.1.16.5.1.1 | Integer32 | not-accessible | The index identifying the row in the table. |
| IP hpTacacsStatsTacacsServerIpAddr | 1.3.6.1.4.1.11.2.14.11.5.1.16.5.1.2 | IpAddress | read-only | The IP address of a TACACS+ Server. |
| C32 hpTacacsStatsNumSessOpenedEx | 1.3.6.1.4.1.11.2.14.11.5.1.16.5.1.3 | Counter32 | read-only | The number of authentication, authorization and accounting sessions opened with the server. |
| C32 hpTacacsStatsNumSessClosed | 1.3.6.1.4.1.11.2.14.11.5.1.16.5.1.4 | Counter32 | read-only | The number of authentication, authorization and accounting sessions closed with the server. |
| C32 hpTacacsStatsNumSessAborted | 1.3.6.1.4.1.11.2.14.11.5.1.16.5.1.5 | Counter32 | read-only | The number of authentication, authorization and accounting sessions aborted with the server. |
| C32 hpTacacsStatsNumSessErrors | 1.3.6.1.4.1.11.2.14.11.5.1.16.5.1.6 | Counter32 | read-only | The number of authentication, authorization and accounting sessions with this server resulted in an error. |
| C32 hpTacacsStatsNumPktsIn | 1.3.6.1.4.1.11.2.14.11.5.1.16.5.1.7 | Counter32 | read-only | The number of responses received from the server. |
| C32 hpTacacsStatsNumPktsOut | 1.3.6.1.4.1.11.2.14.11.5.1.16.5.1.8 | Counter32 | read-only | The number of requests sent to the server. |
| C32 hpTacacsStatsNumAuthPktsIn | 1.3.6.1.4.1.11.2.14.11.5.1.16.5.1.9 | Counter32 | read-only | The number of authentication responses received from the server. |
| C32 hpTacacsStatsNumAuthPktsOut | 1.3.6.1.4.1.11.2.14.11.5.1.16.5.1.10 | Counter32 | read-only | The number of authentication requests sent to the server. |
| C32 hpTacacsStatsNumAuthPktsTimedOut | 1.3.6.1.4.1.11.2.14.11.5.1.16.5.1.11 | Counter32 | read-only | The number of authentication requests that timed out due to no response from the server. |
| C32 hpTacacsStatsNumAutzPktsIn | 1.3.6.1.4.1.11.2.14.11.5.1.16.5.1.12 | Counter32 | read-only | The number of authorization responses received from the server. |
| C32 hpTacacsStatsNumAutzPktsOut | 1.3.6.1.4.1.11.2.14.11.5.1.16.5.1.13 | Counter32 | read-only | The number of authorization requests sent to the server. |
| C32 hpTacacsStatsNumAutzPktsTimedOut | 1.3.6.1.4.1.11.2.14.11.5.1.16.5.1.14 | Counter32 | read-only | The number of authorization requests that timed out due to no response from the server. |
| C32 hpTacacsStatsNumAcctPktsIn | 1.3.6.1.4.1.11.2.14.11.5.1.16.5.1.15 | Counter32 | read-only | The number of accounting responses received from the server. |
| C32 hpTacacsStatsNumAcctPktsOut | 1.3.6.1.4.1.11.2.14.11.5.1.16.5.1.16 | Counter32 | read-only | The number of accounting requests sent to the server. |
| C32 hpTacacsStatsNumAcctPktsTimedOut | 1.3.6.1.4.1.11.2.14.11.5.1.16.5.1.17 | Counter32 | read-only | The number of accounting requests that timed out due to no response from the server. |
| hpSwitchRadiusConfig | 1.3.6.1.4.1.11.2.14.11.5.1.16.6 | |||
| I32 hpSwitchRadiusDeadTime | 1.3.6.1.4.1.11.2.14.11.5.1.16.6.1 | Integer32 | read-write | The length of time in minutes a RADIUS server is skipped over by transaction requests (from 0 up to 24 hours). Used to improve RADIUS response times when some servers might be unavailable. |
| I32 hpSwitchRadiusTimeout | 1.3.6.1.4.1.11.2.14.11.5.1.16.6.2 | Integer32 | read-write | The duration in seconds to wait for a response from the RADIUS server host. |
| I32 hpSwitchRadiusRetransmitAttempts | 1.3.6.1.4.1.11.2.14.11.5.1.16.6.3 | Integer32 | read-write | Maximum number of retransmission attempts. |
| OCT hpSwitchRadiusAuthKey | 1.3.6.1.4.1.11.2.14.11.5.1.16.6.4 | OCTET STRING | read-write | The key used in encrypting the packets passed between the RADIUS server and the client. This key must match the one configured on the server. |
| I32 hpSwitchRadiusDynAutzPortNumber | 1.3.6.1.4.1.11.2.14.11.5.1.16.6.5 | Integer32 | read-write | The UDP port number to listen for Disconnect and Change-of-Authorization messages. |
| OCT hpSwitchRadiusAuthKeyEncrypted | 1.3.6.1.4.1.11.2.14.11.5.1.16.6.6 | OCTET STRING | read-write | An encrypted form of the key used in encrypting the packets passed between the RADIUS server and the client. This key must match the one configured on the server. This object may only be read or written when hpSwitchAuthenticationEncryptCredentialsMethod is set to a value other than none(0). At most one of hpSwitchRadiusAuthKey and hpSwitchRadiusAuthKeyEncrypted may be set in any transaction. This object should only be written with an encrypted key previously read from a compatible HP Networking device. |
| T/F hpSwitchRadiusTracking | 1.3.6.1.4.1.11.2.14.11.5.1.16.6.10 | TruthValue | read-write | To enable or disable the RADIUS service tracking. If this feature is enabled, it is used to send access-request packets at regular intervals to track the availability of server. |
| STR hpSwitchRadiusTrackingUserName | 1.3.6.1.4.1.11.2.14.11.5.1.16.6.11 | DisplayString | read-write | This user name will be used to send Access-Request packets to the RADIUS server to track it. |
| STR hpSwitchRadiusCppmIdentity | 1.3.6.1.4.1.11.2.14.11.5.1.16.6.12 | DisplayString | read-write | The cppm identity value to be used during authentication with cppm server. |
| STR hpSwitchRadiusCppmKey | 1.3.6.1.4.1.11.2.14.11.5.1.16.6.13 | DisplayString | read-write | The cppm key value to be used during authentication with cppm server. |
| STR hpSwitchRadiusCppmEncryptedKey | 1.3.6.1.4.1.11.2.14.11.5.1.16.6.14 | DisplayString | read-write | The encrypted cppm key value to be used during authentication with cppm server.The key value used to set this object should be read from a compatible HPE netwokring device only. |
| T/F hpSwitchRadiusDeadTimeInfinite | 1.3.6.1.4.1.11.2.14.11.5.1.16.6.15 | TruthValue | read-write | If this is set to true, a dead RADIUS server is skipped over by transaction requests until the RADIUS server is tracked up and alive by RADIUS tracking. The default value is set to FLASE. |
| I32 hpSwitchRadiusTrackingInterval | 1.3.6.1.4.1.11.2.14.11.5.1.16.6.16 | Integer32 | read-write | The regular time interval in seconds at which RADIUS access-request packets are sent to track the availability of RADIUS server. The default time interval is 5 minutes. |
| hpSwitchRadiusServerTable | 1.3.6.1.4.1.11.2.14.11.5.1.16.7 | not-accessible | This table lists a maximum of 3 RADIUS servers. | |
| hpSwitchRadiusServerEntry | 1.3.6.1.4.1.11.2.14.11.5.1.16.7.1 | not-accessible | A RADIUS server table entry. | |
| I32 hpSwitchRadiusServerIndex | 1.3.6.1.4.1.11.2.14.11.5.1.16.7.1.1 | Integer32 | not-accessible | The index value which uniquely identifies a row in the RADIUS Servers Table. |
| IP hpSwitchRadiusServerIpAddr | 1.3.6.1.4.1.11.2.14.11.5.1.16.7.1.2 | IpAddress | read-create | The IP address of a RADIUS Server. When the RADIUS server has been configured with IPv6 address, the value of this object will be set to Null. |
| OCT hpSwitchRadiusServerKey | 1.3.6.1.4.1.11.2.14.11.5.1.16.7.1.3 | OCTET STRING | read-create | The key used in encrypting the packets passed between the RADIUS server and the client. This key must match the one configured on the server. |
| I32 hpSwitchRadiusServerAuthPortNumber | 1.3.6.1.4.1.11.2.14.11.5.1.16.7.1.4 | Integer32 | read-create | The UDP destination port number to use for sending authentication requests to this RADIUS Server. |
| I32 hpSwitchRadiusServerAcctPortNumber | 1.3.6.1.4.1.11.2.14.11.5.1.16.7.1.5 | Integer32 | read-create | The UDP destination port number to use for sending accounting requests to this RADIUS server. |
| T/F hpSwitchRadiusServerDynAutzEnabled | 1.3.6.1.4.1.11.2.14.11.5.1.16.7.1.6 | TruthValue | read-create | This object indicates whether Dynamic Authorization messages (Disconnect-Requests and CoA-Requests) are authorized for processing from this RADIUS Server. |
| I32 hpSwitchRadiusServerDynAutzTimeWindow | 1.3.6.1.4.1.11.2.14.11.5.1.16.7.1.7 | Integer32 | read-create | A non-zero value indicates that the Event-Timestamp attribute must be used in the dynamic authorization communication exchange between the NAS and the RADIUS server. Such a value determines the time window (in seconds) within which RADIUS packets carrying the Event-Timestamp attribute will be considered as current and accepted for processing by the NAS and the RADIUS Server. Zero value disables checking for the Event-Timestamp attribute. The default time window is 300 seconds. |
| ROW hpSwitchRadiusServerStatus | 1.3.6.1.4.1.11.2.14.11.5.1.16.7.1.8 | RowStatus | read-create | Status of Servers Table row. |
| T/F hpSwitchRadiusServerIsOobm | 1.3.6.1.4.1.11.2.14.11.5.1.16.7.1.9 | TruthValue | read-create | This object indicates whether this RADIUS Server is reachable over OOBM (Out Of Band Management) interface or not. This mib object will be applicable only if there is a physical OOBM port on the device. |
| OCT hpSwitchRadiusServerKeyEncrypted | 1.3.6.1.4.1.11.2.14.11.5.1.16.7.1.10 | OCTET STRING | read-create | An encrypted form of the key used in encrypting the packets passed between the RADIUS server and the client. This key must match the one configured on the server. This object may only be read or written when hpSwitchAuthenticationEncryptCredentialsMethod is set to a value other than none(0). At most one of hpSwitchRadiusServerKey and hpSwitchRadiusServerKeyEncrypted may be set in any transaction. This object should only be written with an encrypted key previously read from a compatible HP Networking device. |
| IPt hpSwitchRadiusServerAddrType | 1.3.6.1.4.1.11.2.14.11.5.1.16.7.1.11 | InetAddressType | read-create | Type of RADIUS Server IP Address stored in hpSwitchRadiusServerAddress. |
| IP hpSwitchRadiusServerAddress | 1.3.6.1.4.1.11.2.14.11.5.1.16.7.1.12 | InetAddress | read-create | The IPv4 or IPv6 Address of the RADIUS server. |
| INT hpSwitchRadiusServerDynAutzTimeWindowType | 1.3.6.1.4.1.11.2.14.11.5.1.16.7.1.13 | INTEGER | read-create | Window type indicates the acceptable window size for dynamic authorization messages. Positive window type will allow messages when time difference between sender Event-TimeStamp and receiver/switch timeStamp is between 0 to +hpSwitchRadiusServerDynAutzTimeWindow. plusorminus type will allow messages when time difference time difference between sender Event-TimeStamp and receiver/switch timeStamp is between 0 to +hpSwitchRadiusServerDynAutzTimeWindow.The default window type is positive. |
| hpSwitchAuthenticationMIBConformance | 1.3.6.1.4.1.11.2.14.11.5.1.16.11 | |||
| hpSwitchAuthenticationMIBCompliances | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1 | |||
| hpSwitchAuthenticationMIBCompliance | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.1 | The compliance statement for devices implementing the HP Authentication Mib. | ||
| hpSwitchAuthenticationMIBCompliance1 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.2 | The compliance statement for devices implementing the HP Authentication Mib. | ||
| hpSwitchAuthenticationMIBCompliance2 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.3 | The compliance statement for devices implementing the HP Authentication Mib. | ||
| hpSwitchAuthenticationMIBComplianceOobm | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.4 | The compliance statement for devices implementing the HP Authentication Mib with OOBM support | ||
| hpSwitchUserConfigMIBCompliance | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.5 | The compliance statement for configuring user-name/password for operator/manager/port-access. | ||
| hpSwitchAAAServerMIBCompliance | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.6 | The compliance statement for configuring RADIUS server groups. | ||
| hpSwitchAuthenMIBCompliance | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.7 | The compliance statement for listing the authentication methods to be tried for granting different access levels through various access tasks | ||
| hpSwitchLocalMgmtPrivUserMIBCompliance | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.8 | The compliance statement for listing the local management privilege methods to be tried for granting different access levels through various access tasks | ||
| hpSwitchAuthenticationMIBCompliance3 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.9 | The compliance statement for devices implementing the HP Authentication Mib. | ||
| hpSwitchUserConfigMIBCompliance1 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.10 | The compliance statement for configuring user-name/password for operator/manager/port-access. | ||
| hpSwitchLocalMgmtPrivUserMIBCompliance1 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.11 | The compliance statement for configuring user-name/password for operator/manager/port-access. | ||
| hpSwitchAuthenticationMIBCompliance4 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.12 | The compliance statement for devices implementing the HP Authentication MIB. | ||
| hpSwitchAuthenticationMIBCompliance5 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.13 | The compliance statement for devices implementing the HP Authentication Mib. | ||
| hpSwitchAuthenticationMIBComplianceOobm1 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.14 | The compliance statement for devices implementing the HP Authentication Mib with OOBM support | ||
| hpSwitchAuthenticationMIBCompliance6 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.15 | The compliance statement for devices implementing the HP Authentication Mib. | ||
| hpSwitchAuthenticationMIBCompliance7 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.16 | The compliance statement for devices implementing the HP Authentication Mib. | ||
| hpSwitchAuthenticationMIBCompliance8 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.17 | The compliance statement for devices implementing the HP Authentication Mib. | ||
| hpSwitchAuthenticationMIBCompliance9 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.18 | The compliance statement for devices implementing the HP Authentication Mib. | ||
| hpSwitchAuthenticationMIBCompliance10 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.19 | The compliance statement for devices implementing the HP password Authentication MIB. | ||
| hpSwitchLocalMgmtPrivUserMIBCompliance2 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.20 | The compliance statement for listing the local management privilege methods to be tried for granting different access levels through various access tasks | ||
| hpSwitchUserConfigMIBCompliance2 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.21 | The compliance statement for configuring user-name/password for operator/manager/port-access. | ||
| hpSwitchAuthenticationMIBCompliance11 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.22 | The compliance statement for devices implementing the HP Authentication Mib. | ||
| hpSwitchAuthenticationMIBCompliance12 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.23 | The compliance statement for devices implementing the HP Authentication Mib. | ||
| hpSwitchUserConfigMIBCompliance3 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.24 | The compliance statement for configuring username and password for operator, manager or port-access. | ||
| hpSwitchLocalMgmtPrivUserMIBCompliance3 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.25 | The compliance statement for listing the local management privilege methods to be tried for granting different access levels through various access tasks | ||
| hpSwitchAuthenticationMIBCompliance13 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.26 | The compliance statement for devices implementing the HP Authentication Mib. | ||
| hpSwitchAuthenticationMIBCompliance14 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.27 | The compliance statement for devices implementing the HP Authentication Mib. | ||
| hpSwitchAuthenticationMIBCompliance15 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.28 | The compliance statement for devices implementing the HP Authentication Mib. | ||
| hpSwitchAuthenticationMIBCompliance16 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.29 | The compliance statement for devices implementing the HP Authentication Mib. | ||
| hpSwitchFrontPanelSecurityCompliance | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.30 | The compliance statement for configuring front panel security commands. | ||
| hpSwitchAuthenticationMIBCompliance17 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.1.31 | The compliance statement for devices implementing the HP Authentication Mib. | ||
| hpSwitchAuthenticationMIBGroups | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2 | |||
| hpSwitchAuthenticationConfigGroup | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.1 | A collection of objects for configuring the authentication features. | ||
| hpSwitchTacacsConfigGroup | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.2 | A collection of objects for configuring the state of the TACACS+ protocol. | ||
| hpSwitchTacacsStatsGroup | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.3 | A collection of objects for viewing the status information of the TACACS+ protocol. | ||
| hpSwitchRadiusConfigGroup | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.4 | A collection of objects for configuring the state of the RADIUS protocol. | ||
| hpSwitchKmsGroup | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.6 | A collection of objects for configuring KMS functionality. | ||
| hpSwitchOspfAuthGroup | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.7 | A collection of objects for configuring OSPF authentication. | ||
| hpSwitchAuthenticationConfigGroup1 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.8 | A collection of objects for configuring the authentication features. | ||
| hpSwitchSslGroup | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.9 | A collection of objects for configuring SSL Servers. | ||
| hpSwitchCertGroup | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.10 | A collection of objects for configuring Certificates. | ||
| hpSwitchCertStatusGroup | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.11 | A collection of objects for configuring Certificate Status. | ||
| hpSwitchTacacsOobmGroup | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.12 | A collection of objects for configuring the TACACS+ server entry with support for OOBM (Out of Band Management) interface. | ||
| hpSwitchRadiusOobmGroup | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.13 | A collection of objects for configuring the RADIUS server entry with support for OOBM (Out of Band Management) interface. | ||
| hpSwitchCertStatusGroup2 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.14 | A collection of objects for configuring Certificate Status. | ||
| hpSwitchUserConfigGroup | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.15 | A collection of objects for configuring user-name/password for operator/manager/port-access. | ||
| hpSwitchAAAServerGroup | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.16 | A collection of objects for configuring RADIUS server groups. | ||
| hpSwitchAuthenGroup | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.17 | A collection of objects for listing the authentication methods to be tried for granting different access levels through various access tasks. | ||
| hpSwitchAuthLocalMgmtPrivUserGroup | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.18 | A collection of objects for configuring Local Management Privilege Groups | ||
| hpSwitchTacacsConfigGroup1 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.19 | A collection of objects for configuring the state of the TACACS+ protocol. | ||
| hpSwitchRadiusConfigGroup1 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.20 | A collection of objects for configuring the state of the RADIUS protocol. | ||
| hpSwitchKmsGroup1 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.21 | A collection of objects for configuring KMS functionality. | ||
| hpSwitchUserConfigGroup1 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.22 | A collection of objects for configuring user-name/password for operator/manager/port-access. | ||
| hpSwitchAuthLocalMgmtPrivUserGroup1 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.23 | Row Status of objects for configuring Local Management Privilege Groups | ||
| hpSwitchCertStatusGroup3 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.24 | A collection of objects for configuring Certificate Keys. | ||
| hpSwitchAuthenticationConfigGroup2 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.25 | A collection of objects for configuring the authentication features. | ||
| hpSwitchRadiusConfigGroup2 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.26 | A collection of objects for configuring the state of the RADIUS protocol. | ||
| hpSwitchAuthenticationConfigGroup3 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.27 | A collection of objects for configuring the authentication features. | ||
| hpSwitchAuthenticationConfigGroup4 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.28 | A collection of objects which controls bypassing of the username during authentication to get Operator or Manager access. | ||
| hpSwitchRadiusConfigGroup3 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.29 | A collection of objects for configuring the state of the RADIUS protocol. | ||
| hpSwitchRipAuthGroup | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.31 | A collection of objects for configuring RIP authentication. | ||
| hpSwitchAuthenticationPasswordConfigGroup | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.32 | A collection of objects for configuring the password authentication features as per UCR guidelines. | ||
| hpSwitchUserConfigGroup2 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.33 | A collection of objects for configuring user-name/password for operator/manager/port-access. | ||
| hpSwitchAuthLocalMgmtPrivUserGroup2 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.34 | A collection of objects for configuring Local Management Privilege Groups | ||
| hpSwitchAuthNotificationGroup | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.35 | A collection of objects that lists the authentication notifications. | ||
| hpSwitchRadiusConfigGroup4 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.36 | A collection of objects for configuring the state of the RADIUS protocol. | ||
| hpSwitchAuthenticationConfigGroup5 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.37 | A collection of objects for configuring the authentication features. | ||
| hpSwitchUserConfigGroup3 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.38 | A collection of objects for configuring username and password for operator, manager or port-access. | ||
| hpSwitchAuthLocalMgmtPrivUserGroup3 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.39 | A collection of objects for configuring Local Management Privilege Groups | ||
| hpSwitchOspfAuthGroup1 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.40 | A collection of objects for configuring OSPF authentication. | ||
| hpSwitchRipAuthGroup1 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.41 | A collection of objects for configuring RIP authentication. | ||
| hpSwitchAuthenticationConfigGroup6 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.42 | A collection of objects for configuring the authentication features. | ||
| hpSwitchAuthenticationConfigGroup7 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.43 | A collection of objects for configuring the authentication features. | ||
| hpSwitchRadiusConfigGroup5 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.44 | A collection of objects for configuring the state of the RADIUS protocol. | ||
| hpSwitchFrontPanelSecurityGroup | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.45 | A collection of objects for configuring front panel security commands. | ||
| hpSwitchRadiusConfigGroup6 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.46 | A collection of objects for configuring the state of the RADIUS protocol. | ||
| hpSwitchAuthenticationConfigGroup8 | 1.3.6.1.4.1.11.2.14.11.5.1.16.11.2.47 | A collection of objects for configuring the authentication features. | ||
| hpSwitchSslConfig | 1.3.6.1.4.1.11.2.14.11.5.1.16.12 | |||
| INT hpSwitchSslAdminStatus | 1.3.6.1.4.1.11.2.14.11.5.1.16.12.1 | INTEGER | read-write | This objects specifies the desired operational status of SSL. |
| I32 hpSwitchSslPortNumber | 1.3.6.1.4.1.11.2.14.11.5.1.16.12.2 | Integer32 | read-write | The port number on which the SSL server should listen for connection requests. |
| hpSwitchCertConfig | 1.3.6.1.4.1.11.2.14.11.5.1.16.13 | |||
| INT hpSwitchServerCertificateOperation | 1.3.6.1.4.1.11.2.14.11.5.1.16.13.1 | INTEGER | read-write | When this object is read, it returns the last value that was written. If a value was not set previously, then the object value will be 'none'(1). The object supports the following values and actions: 'none' - no action is taken, null operation. 'useInstalled' - This causes the switch to use a previously installed server certificate, if one is present. 'createAndUseSelfSigned' - This causes the switch to create a new self-signed certificate based on the hpSwitchServerNewCertificate parameters and use it. 'createCACertReq' - This causes the switch to create a certificate request, which is to be signed by a CA authority, based on the hpSwitchServerNewCertificate parameters. The user must subsequently download the signed certificate to complete certificate creation process. 'applyCASignedCert' - This causes the switch to process the user's response to a signed certificate from a CA to complete the certificate creation process. 'abortCASignedRequest' - This causes the switch to abort the certificate request procedure, which was initiated on createAndUseCASigned set. |
| INT hpSwitchServerNewRSAKeyOperation | 1.3.6.1.4.1.11.2.14.11.5.1.16.13.2 | INTEGER | read-write | This object when will returns a value either 'useInstalled'(1) or 'createBits1024'(4). The value 'useInstalled'(1) is returned when a certificate RSA key already exists on switch. The value 'createBits1024'(4) is returned when no certificate RSA key exists on switch. When user configuresthe values, the value triggers the following action: 'useInstalled' - The switch will use the currently configured RSA key that is already present on the switch. 'createBits512' - This value is deprecated and no longer supported. 'createBits768' - This value is deprecated and no longer supported. 'createBits1024' - This value specifies the creation of a new RSA key of length 1024-bit. 'createBits2048' - This value specifies the creation of a new RSA key of length 2048-bit. |
| DAT hpSwitchServerNewCertificateStartDate | 1.3.6.1.4.1.11.2.14.11.5.1.16.13.3 | DateAndTime | read-write | Specifies the start date of validity for a new server certificate. |
| DAT hpSwitchServerNewCertificateEndDate | 1.3.6.1.4.1.11.2.14.11.5.1.16.13.4 | DateAndTime | read-write | Specifies the end date of validity for a new server certificate. |
| OCT hpSwitchServerNewCertificateCommonName | 1.3.6.1.4.1.11.2.14.11.5.1.16.13.5 | OCTET STRING | read-write | Specifies the common name for a new server certificate. |
| OCT hpSwitchServerNewCertificateOrgUnit | 1.3.6.1.4.1.11.2.14.11.5.1.16.13.6 | OCTET STRING | read-write | Specifies the organization for a new server certificate. |
| OCT hpSwitchServerNewCertificateOrgName | 1.3.6.1.4.1.11.2.14.11.5.1.16.13.7 | OCTET STRING | read-write | Specifies the organization name for a new server certificate. |
| OCT hpSwitchServerNewCertificateCityName | 1.3.6.1.4.1.11.2.14.11.5.1.16.13.8 | OCTET STRING | read-write | Specifies the city for a new server certificate. |
| OCT hpSwitchServerNewCertificateStateName | 1.3.6.1.4.1.11.2.14.11.5.1.16.13.9 | OCTET STRING | read-write | Specifies the state for a new server certificate. |
| OCT hpSwitchServerNewCertificateCountryCode | 1.3.6.1.4.1.11.2.14.11.5.1.16.13.10 | OCTET STRING | read-write | Specifies the 2-letter ISO country code of the server certificate. |
| OCT hpSwitchServerNewCertCommonName | 1.3.6.1.4.1.11.2.14.11.5.1.16.13.11 | OCTET STRING | read-write | Specifies the common name for a new server certificate. |
| OCT hpSwitchServerNewCertOrgUnit | 1.3.6.1.4.1.11.2.14.11.5.1.16.13.12 | OCTET STRING | read-write | Specifies the organization for a new server certificate. |
| OCT hpSwitchServerNewCertOrgName | 1.3.6.1.4.1.11.2.14.11.5.1.16.13.13 | OCTET STRING | read-write | Specifies the organization name for a new server certificate. |
| OCT hpSwitchServerNewCertCityName | 1.3.6.1.4.1.11.2.14.11.5.1.16.13.14 | OCTET STRING | read-write | Specifies the city for a new server certificate. |
| OCT hpSwitchServerNewCertStateName | 1.3.6.1.4.1.11.2.14.11.5.1.16.13.15 | OCTET STRING | read-write | Specifies the state for a new server certificate. |
| T/F hpSwitchServerNewCertKeySizeExists | 1.3.6.1.4.1.11.2.14.11.5.1.16.13.16 | TruthValue | read-write | Specifies whether the given key size already exist. |
| hpSwitchCertStatus | 1.3.6.1.4.1.11.2.14.11.5.1.16.14 | |||
| INT hpSwitchServerCertificateType | 1.3.6.1.4.1.11.2.14.11.5.1.16.14.1 | INTEGER | read-only | Specifies the type of server certificate the switch is currently using as follows: 'none' - no server certificate is present. 'pendCaSigned' - switch is waiting for user to offer CA-signed certificate request. 'selfSigned' - a self-signed server certificate is being used. 'caSigned' - a CA-signed server certificate is being used. |
| INT hpSwitchServerCertificateRSAKeySize | 1.3.6.1.4.1.11.2.14.11.5.1.16.14.2 | INTEGER | read-only | Specifies the RSA key length of the public key contained in the certificate as follows: 'none' - no certificate is present 'Bits512' - certificate has a 512-bit public key 'Bits768' - certificate has a 768-bit public key 'Bits1024' - certificate has a 1024-bit public key 'Bits2048' - certificate has a 2048-bit public key |
| OCT hpSwitchServerCertificateSerialNumber | 1.3.6.1.4.1.11.2.14.11.5.1.16.14.3 | OCTET STRING | read-only | Specifies the serial number of installed server certificate. |
| DAT hpSwitchServerCertificateStartDate | 1.3.6.1.4.1.11.2.14.11.5.1.16.14.4 | DateAndTime | read-only | Specifies the start date of validity of installed server certificate. |
| DAT hpSwitchServerCertificateEndDate | 1.3.6.1.4.1.11.2.14.11.5.1.16.14.5 | DateAndTime | read-only | Specifies the end date of validity of installed server server certificate. |
| OCT hpSwitchServerCertificateCommonName | 1.3.6.1.4.1.11.2.14.11.5.1.16.14.6 | OCTET STRING | read-only | Specifies the common name of installed server certificate. |
| OCT hpSwitchServerCertificateOrgUnit | 1.3.6.1.4.1.11.2.14.11.5.1.16.14.7 | OCTET STRING | read-only | Specifies the organization of installed server certificate. |
| OCT hpSwitchServerCertificateOrgName | 1.3.6.1.4.1.11.2.14.11.5.1.16.14.8 | OCTET STRING | read-only | Specifies the organization name of installed server certificate. |
| OCT hpSwitchServerCertificateCityName | 1.3.6.1.4.1.11.2.14.11.5.1.16.14.9 | OCTET STRING | read-only | Specifies the city of installed server certificate. |
| OCT hpSwitchServerCertificateStateName | 1.3.6.1.4.1.11.2.14.11.5.1.16.14.10 | OCTET STRING | read-only | Specifies the state of installed server certificate. |
| OCT hpSwitchServerCertificateCountryCode | 1.3.6.1.4.1.11.2.14.11.5.1.16.14.11 | OCTET STRING | read-only | Specifies the 2-letter ISO country code of installed server certificate. |
| OCT hpSwitchServerCertificateFingerprintMD5 | 1.3.6.1.4.1.11.2.14.11.5.1.16.14.12 | OCTET STRING | read-only | Specifies the MD5 fingerprint of installed server certificate. |
| OCT hpSwitchServerCertificateFingerprintSHA1 | 1.3.6.1.4.1.11.2.14.11.5.1.16.14.13 | OCTET STRING | read-only | Specifies the SHA1 fingerprint of installed server certificate. |
| hpSwitchKmsChainConfigTable | 1.3.6.1.4.1.11.2.14.11.5.1.16.15 | not-accessible | This table contains configuration objects for Key Management Subsystem chains. | |
| hpSwitchKmsChainConfigEntry | 1.3.6.1.4.1.11.2.14.11.5.1.16.15.1 | not-accessible | KMS chain configuration table entry. | |
| I32 hpSwitchKmsChainId | 1.3.6.1.4.1.11.2.14.11.5.1.16.15.1.1 | Integer32 | not-accessible | This object is the KMS chain index. Do not rely on it since it may be removed in the future, when it is possible to use the object hpSwitchKmsChainName as the index. |
| STR hpSwitchKmsChainName | 1.3.6.1.4.1.11.2.14.11.5.1.16.15.1.2 | DisplayString | read-create | This object configures the KMS chain name. |
| G32 hpSwitchKmsChainKeys | 1.3.6.1.4.1.11.2.14.11.5.1.16.15.1.4 | Gauge32 | read-only | Returns the number of keys in the KMS chain. |
| G32 hpSwitchKmsChainActiveKeys | 1.3.6.1.4.1.11.2.14.11.5.1.16.15.1.5 | Gauge32 | read-only | Returns the number of active keys in the KMS chain. |
| G32 hpSwitchKmsChainExpKeys | 1.3.6.1.4.1.11.2.14.11.5.1.16.15.1.6 | Gauge32 | read-only | Returns the number of expired keys in the KMS chain. |
| ROW hpSwitchKmsChainStatus | 1.3.6.1.4.1.11.2.14.11.5.1.16.15.1.7 | RowStatus | read-create | The status of the row in the KMS chain configuration table. |
| hpSwitchKmsKeyConfigTable | 1.3.6.1.4.1.11.2.14.11.5.1.16.16 | not-accessible | This table contains the configuration objects for the Key Management Subsystem. | |
| hpSwitchKmsKeyConfigEntry | 1.3.6.1.4.1.11.2.14.11.5.1.16.16.1 | not-accessible | KMS configuration table entry. | |
| I32 hpSwitchKmsKeyChainId | 1.3.6.1.4.1.11.2.14.11.5.1.16.16.1.1 | Integer32 | not-accessible | This object is the KMS chain index. Do not rely on it since it may be removed in the future, when it is possible to use the object hpSwitchKmsChainName as the index. |
| I32 hpSwitchKmsKeyId | 1.3.6.1.4.1.11.2.14.11.5.1.16.16.1.2 | Integer32 | not-accessible | This object is the KMS key index. |
| OCT hpSwitchKmsKeyStr | 1.3.6.1.4.1.11.2.14.11.5.1.16.16.1.3 | OCTET STRING | read-create | This object configures the KMS key chain name. |
| U32 hpSwitchKmsKeyStartTime | 1.3.6.1.4.1.11.2.14.11.5.1.16.16.1.4 | Unsigned32 | read-create | Start time of the KMS key. |
| U32 hpSwitchKmsKeyStopTime | 1.3.6.1.4.1.11.2.14.11.5.1.16.16.1.5 | Unsigned32 | read-create | Stop time of the KMS key. |
| U32 hpSwitchKmsKeyTxStartTime | 1.3.6.1.4.1.11.2.14.11.5.1.16.16.1.6 | Unsigned32 | read-create | Start time of the transmission for the KMS key. |
| U32 hpSwitchKmsKeyTxStopTime | 1.3.6.1.4.1.11.2.14.11.5.1.16.16.1.7 | Unsigned32 | read-create | Stop time of the transmission for the KMS key. |
| ROW hpSwitchKmsKeyStatus | 1.3.6.1.4.1.11.2.14.11.5.1.16.16.1.8 | RowStatus | read-create | Row Status of the KMS chain configuration table. |
| OCT hpSwitchKmsKeyEncrypted | 1.3.6.1.4.1.11.2.14.11.5.1.16.16.1.9 | OCTET STRING | read-create | An encrypted form of the KMS key. This object may only be read or written when hpSwitchAuthenticationEncryptCredentialsMethod is set to a value other than none(0). At most one of hpSwitchKmsKeyStr and hpSwitchKmsKeyEncrypted may be set in any transaction. This object should only be written with an encrypted key previously read from a compatible HP Networking device. |
| hpSwitchOspfIfAuthTable | 1.3.6.1.4.1.11.2.14.11.5.1.16.17 | not-accessible | This table supplements the OSPF interface configuration table. | |
| hpSwitchOspfIfAuthEntry | 1.3.6.1.4.1.11.2.14.11.5.1.16.17.1 | not-accessible | OSPF interface authentication configuration table entry. | |
| STR hpSwitchOspfIfAuthChain | 1.3.6.1.4.1.11.2.14.11.5.1.16.17.1.1 | DisplayString | read-create | This object configures the KMS chain name for OSPF interfaces. |
| OCT hpSwitchOspfIfAuthKeyEncrypted | 1.3.6.1.4.1.11.2.14.11.5.1.16.17.1.2 | OCTET STRING | read-create | The object represents the encrypted format of authentication key stored in the object ospfIfAuthKey. This object may only be read or written when hpSwitchAuthenticationEncryptCredentialsMethod is set to a value other than none(0). This object should only be written with an encrypted key. |
| hpSwitchOspfVirtIfAuthTable | 1.3.6.1.4.1.11.2.14.11.5.1.16.18 | not-accessible | This table supplements the OSPF virtual interface configuration table. | |
| hpSwitchOspfVirtIfAuthEntry | 1.3.6.1.4.1.11.2.14.11.5.1.16.18.1 | not-accessible | OSPF virtual interface authentication configuration table entry. | |
| STR hpSwitchOspfVirtIfAuthChain | 1.3.6.1.4.1.11.2.14.11.5.1.16.18.1.1 | DisplayString | read-create | This object configures the KMS chain name for OSPF virtual interfaces. |
| OCT hpSwitchOspfVirtIfAuthKeyEncrypted | 1.3.6.1.4.1.11.2.14.11.5.1.16.18.1.2 | OCTET STRING | read-create | This object represents the encrypted format of authentication key stored in the object ospfVirtIfAuthKey. This object may only be read or written when hpSwitchAuthenticationEncryptCredentialsMethod is set to a value other than none(0). This object should only be written with an encrypted key. |
| hpicfSwitchUserConfigTable | 1.3.6.1.4.1.11.2.14.11.5.1.16.19 | not-accessible | This table supplements the manager/operator name/password. The manager/operator password are limited to the CLI interface through Console and Menu interface, and web. | |
| hpicfSwitchUserConfigEntry | 1.3.6.1.4.1.11.2.14.11.5.1.16.19.1 | not-accessible | Manager/operator name/password table entry. | |
| I32 hpicfSwitchUserConfigIndex | 1.3.6.1.4.1.11.2.14.11.5.1.16.19.1.1 | Integer32 | not-accessible | The index value uniquely identifies a row in the User Config table, currently limited to a value of 1. |
| OCT hpicfSwitchUserName | 1.3.6.1.4.1.11.2.14.11.5.1.16.19.1.2 | OCTET STRING | read-create | The User Name, in ASCII format. The exact size of this object is implementation dependent; consult the product documentation to determine the supported size for a specific product. |
| OCT hpicfSwitchOperatorName | 1.3.6.1.4.1.11.2.14.11.5.1.16.19.1.3 | OCTET STRING | read-create | The Operator Name, in ASCII format. The exact size of this object is implementation dependent; consult the product documentation to determine the supported size for a specific product. |
| OCT hpicfSwitchUserPassword | 1.3.6.1.4.1.11.2.14.11.5.1.16.19.1.4 | OCTET STRING | read-create | The User Password, in ASCII format. The exact size of this object is implementation dependent; consult the product documentation to determine the supported size for a specific product. |
| OCT hpicfSwitchOperatorPassword | 1.3.6.1.4.1.11.2.14.11.5.1.16.19.1.5 | OCTET STRING | read-create | The Operator Password, in ASCII format. The exact size of this object is implementation dependent; consult the product documentation to determine the supported size for a specific product. |
| ROW hpicfSwitchUserConfigStatus | 1.3.6.1.4.1.11.2.14.11.5.1.16.19.1.6 | RowStatus | read-create | Status of User Config Table row. |
| OCT hpicfSwitchPortAccessName | 1.3.6.1.4.1.11.2.14.11.5.1.16.19.1.7 | OCTET STRING | read-create | The Port-Access Name, ASCII format. The exact size of this object is implementation dependent; consult the product documentation to determine the supported size for a specific product. |
| OCT hpicfSwitchPortAccessPassword | 1.3.6.1.4.1.11.2.14.11.5.1.16.19.1.8 | OCTET STRING | read-create | The Port-Access Password, in ASCII format. The exact size of this object is implementation dependent; consult the product documentation to determine the supported size for a specific product. |
| INT hpicfSwitchUserPasswordHashType | 1.3.6.1.4.1.11.2.14.11.5.1.16.19.1.9 | INTEGER | read-create | The hash-type of the User Password. |
| INT hpicfSwitchOperatorPasswordHashType | 1.3.6.1.4.1.11.2.14.11.5.1.16.19.1.10 | INTEGER | read-create | The hash-type of the Operator Password. |
| INT hpicfSwitchPortAccessPasswordHashType | 1.3.6.1.4.1.11.2.14.11.5.1.16.19.1.11 | INTEGER | read-create | The hash-type of the Port-Access Password. |
| OCT hpicfSwitchUserPasswordEncrypted | 1.3.6.1.4.1.11.2.14.11.5.1.16.19.1.12 | OCTET STRING | read-create | An encrypted form of the user password. The exact size of this object is implementation dependent; consult the product documentation to determine the supported size for a specific product. This object may only be read or written when hpSwitchAuthenticationEncryptCredentialsMethod is set to a value other than none(0). At most one of hpicfSwitchUserPassword and hpicfSwitchUserPasswordEncrypted may be set in any transaction. This object should only be written with an encrypted password previously read from a compatible HP Networking device. |
| OCT hpicfSwitchOperatorPasswordEncrypted | 1.3.6.1.4.1.11.2.14.11.5.1.16.19.1.13 | OCTET STRING | read-create | An encrypted form of the operator password. The exact size of this object is implementation dependent; consult the product documentation to determine the supported size for a specific product. This object may only be read or written when hpSwitchAuthenticationEncryptCredentialsMethod is set to a value other than none(0). At most one of hpicfSwitchOperatorPassword and hpicfSwitchOperatorPasswordEncrypted may be set in any transaction. This object should only be written with an encrypted password previously read from a compatible HP Networking device. |
| OCT hpicfSwitchPortAccessPasswordEncrypted | 1.3.6.1.4.1.11.2.14.11.5.1.16.19.1.14 | OCTET STRING | read-create | An encrypted form of the port-access password. The exact size of this object is implementation dependent; consult the product documentation to determine the supported size for a specific product. This object may only be read or written when hpSwitchAuthenticationEncryptCredentialsMethod is set to a value other than none(0). At most one of hpicfSwitchPortAccessPassword and hpicfSwitchPortAccessPasswordEncrypted may be set in any transaction. This object should only be written with an encrypted password previously read from a compatible HP Networking device. |
| INT hpicfSwitchBypassUsername | 1.3.6.1.4.1.11.2.14.11.5.1.16.19.1.15 | INTEGER | read-create | This object controls bypassing of the username while accessing the switch to get Operator or Manager access. When enabled, the Manager level and Operator level usernames are bypassed and authentication based on password takes place. If custom usernames are configured, this configuration is ignored and authentication based on both username and password takes place. The default value is 'disable' and user is authenticated based on both username and password. |
| I32 hpicfSwitchUserPwdAgingInterval | 1.3.6.1.4.1.11.2.14.11.5.1.16.19.1.16 | Integer32 | read-create | This object holds the manager password aging value. |
| I32 hpicfSwitchOperatorPwdAgingInterval | 1.3.6.1.4.1.11.2.14.11.5.1.16.19.1.17 | Integer32 | read-create | This object holds the operator password aging value. |
| I32 hpicfSwitchUserPwdLengthValue | 1.3.6.1.4.1.11.2.14.11.5.1.16.19.1.18 | Integer32 | read-create | This object holds length of the manager password. |
| I32 hpicfSwitchOperatorPwdLengthValue | 1.3.6.1.4.1.11.2.14.11.5.1.16.19.1.19 | Integer32 | read-create | This object holds length of the operator password. |
| INT hpicfSwitchNonPlaintextSha256 | 1.3.6.1.4.1.11.2.14.11.5.1.16.19.1.20 | INTEGER | read-create | This object enables storing the password in SHA-256 form. |
| OCT hpicfSwitchUserPasswordHashSha256 | 1.3.6.1.4.1.11.2.14.11.5.1.16.19.1.21 | OCTET STRING | read-create | The SHA256 hash-type of the Manager Password. |
| OCT hpicfSwitchOperatorPasswordHashSha256 | 1.3.6.1.4.1.11.2.14.11.5.1.16.19.1.22 | OCTET STRING | read-create | The SHA256 hash-type of the Operator Password. |
| hpSwitchAAAServerGroupTable | 1.3.6.1.4.1.11.2.14.11.5.1.16.20 | not-accessible | This table lists the RADIUS server groups. | |
| hpSwitchAAAServerGroupEntry | 1.3.6.1.4.1.11.2.14.11.5.1.16.20.1 | not-accessible | RADIUS server group entry. | |
| INT hpSwitchAAAServerGroupProtocolType | 1.3.6.1.4.1.11.2.14.11.5.1.16.20.1.1 | INTEGER | not-accessible | This part of the index indicates which protocol server the server group is for. See the documentation protocols supported. |
| I32 hpSwitchAAAServerGroupIndex | 1.3.6.1.4.1.11.2.14.11.5.1.16.20.1.2 | Integer32 | not-accessible | This index indicates the server group in the AAA server group table. |
| I32 hpSwitchAAAServerGroupServerIndex | 1.3.6.1.4.1.11.2.14.11.5.1.16.20.1.3 | Integer32 | not-accessible | The index value which identifies the server in the server group. |
| STR hpSwitchAAAServerGroupName | 1.3.6.1.4.1.11.2.14.11.5.1.16.20.1.4 | DisplayString | read-create | The name of a given AAA server group. The current maximum length is 12. |
| IPt hpSwitchAAAServerGroupServerInetType | 1.3.6.1.4.1.11.2.14.11.5.1.16.20.1.5 | InetAddressType | read-create | The IP Address type of the server. Currently only Ipv4 is supported. |
| IP hpSwitchAAAServerGroupServerInetAddr | 1.3.6.1.4.1.11.2.14.11.5.1.16.20.1.6 | InetAddress | read-create | The IP Address of the server. |
| ROW hpSwitchAAAServerGroupStatus | 1.3.6.1.4.1.11.2.14.11.5.1.16.20.1.7 | RowStatus | read-create | The status of the AAA server group row. Supported values are createAndGo, destroy, and active. |
| hpSwitchLocalMgmtPrivUsernamesTable | 1.3.6.1.4.1.11.2.14.11.5.1.16.21 | not-accessible | This table lists the Local Management Privilege user names. | |
| hpSwitchLocalMgmtPrivUsernamesEntry | 1.3.6.1.4.1.11.2.14.11.5.1.16.21.1 | not-accessible | Local Management Usernames entry. | |
| I32 hpSwitchLocalMgmtPrivUsernameIndex | 1.3.6.1.4.1.11.2.14.11.5.1.16.21.1.1 | Integer32 | not-accessible | The index value uniquely identifies a row in the command table. |
| OCT hpSwitchLocalMgmtPrivUsernameStr | 1.3.6.1.4.1.11.2.14.11.5.1.16.21.1.2 | OCTET STRING | read-create | The username . |
| INT hpSwitchLocalMgmtPrivUsernamePasswdType | 1.3.6.1.4.1.11.2.14.11.5.1.16.21.1.3 | INTEGER | read-create | The type of encryption used for this Conceptual row password object. |
| OCT hpSwitchLocalMgmtPrivUsernamePasswd | 1.3.6.1.4.1.11.2.14.11.5.1.16.21.1.4 | OCTET STRING | read-create | Storage location for the password associated with this Username. Always returns a NULL string. |
| I32 hpSwitchLocalMgmtPrivUsernameGrpIndex | 1.3.6.1.4.1.11.2.14.11.5.1.16.21.1.5 | Integer32 | read-create | The index that represents which group this user is a member of. |
| ROW hpSwitchLocalMgmtPrivUsernameStatus | 1.3.6.1.4.1.11.2.14.11.5.1.16.21.1.6 | RowStatus | read-create | The status of the Local Management Privilege username row. |
| I32 hpSwitchLocalMgmtPwdUserAgingInterval | 1.3.6.1.4.1.11.2.14.11.5.1.16.21.1.7 | Integer32 | read-create | This object holds the user password aging value. |
| I32 hpSwitchLocalMgmtPwdUserPasswdLengthValue | 1.3.6.1.4.1.11.2.14.11.5.1.16.21.1.8 | Integer32 | read-create | This object holds length of local user password. |
| OCT hpSwitchLocalMgmtPrivUsernamePasswdSha256 | 1.3.6.1.4.1.11.2.14.11.5.1.16.21.1.9 | OCTET STRING | read-create | Storage location for the sha256 password associated with this Username. Always returns a NULL string. |
| hpSwitchRipIfAuthTable | 1.3.6.1.4.1.11.2.14.11.5.1.16.23 | not-accessible | This table supplements the RIP interface configuration table. | |
| hpSwitchRipIfAuthEntry | 1.3.6.1.4.1.11.2.14.11.5.1.16.23.1 | not-accessible | RIP interface authentication configuration table entry. | |
| STR hpSwitchRipIfAuthChain | 1.3.6.1.4.1.11.2.14.11.5.1.16.23.1.1 | DisplayString | read-create | This object configures the KMS chain name for RIP interfaces. |
| OCT hpSwitchRip2IfConfAuthKeyEncrypted | 1.3.6.1.4.1.11.2.14.11.5.1.16.23.1.2 | OCTET STRING | read-create | This object represents the encrypted format of the authentication key stored in the object rip2IfConfAuthKey. This object may only be read or written when hpSwitchAuthenticationEncryptCredentialsMethod is set to a value other than none(0). This object should only be written with an encrypted key. |
| hpSwitchAuthenPwdCompositionTable | 1.3.6.1.4.1.11.2.14.11.5.1.16.24 | not-accessible | This table lists different type of charaters required to create a password as per UCR guidelines. | |
| hpSwitchAuthenPwdCompositionEntry | 1.3.6.1.4.1.11.2.14.11.5.1.16.24.1 | not-accessible | An Authentication Method Table Entry. | |
| INT hpSwitchAuthenCompositionIndex | 1.3.6.1.4.1.11.2.14.11.5.1.16.24.1.1 | INTEGER | not-accessible | This object indicates the different types of charaters required to create a password. |
| I32 hpSwitchAuthenCompositionValue | 1.3.6.1.4.1.11.2.14.11.5.1.16.24.1.2 | Integer32 | read-write | This object indicates number of characters allow for password compostion |
| hpSwitchAuthenticationPasswordConfig | 1.3.6.1.4.1.11.2.14.11.5.1.16.25 | |||
| INT hpSwitchAuthPwdControlCheck | 1.3.6.1.4.1.11.2.14.11.5.1.16.25.1 | INTEGER | read-write | This object enables the password configuration feature. |
| INT hpSwitchAuthPwdUserNameCheck | 1.3.6.1.4.1.11.2.14.11.5.1.16.25.2 | INTEGER | read-write | This object enables the check to ensure that the password does not contain repeat or reverse characters of the associated username. |
| INT hpSwitchAuthPwdRepeatCharactersCheck | 1.3.6.1.4.1.11.2.14.11.5.1.16.25.3 | INTEGER | read-write | This object enables the check that the password does not contain at least three of the same characters used consecutively. |
| INT hpSwitchAuthPwdRepeatPasswordCheck | 1.3.6.1.4.1.11.2.14.11.5.1.16.25.4 | INTEGER | read-write | This object enables the check that the new password differs from the previous password by at least four characters. |
| INT hpSwitchAuthPwdAgingCheck | 1.3.6.1.4.1.11.2.14.11.5.1.16.25.5 | INTEGER | read-write | This object enables the check for the password expiry check. |
| INT hpSwitchAuthPwdLogonDetailsCheck | 1.3.6.1.4.1.11.2.14.11.5.1.16.25.6 | INTEGER | read-write | This object enables the previous login details. |
| I32 hpSwitchAuthPwdAgingValue | 1.3.6.1.4.1.11.2.14.11.5.1.16.25.7 | Integer32 | read-write | This object provides the global aging value. |
| INT hpSwitchAuthPwdHistoryCheck | 1.3.6.1.4.1.11.2.14.11.5.1.16.25.8 | INTEGER | read-write | This object enables the password history check. |
| I32 hpSwitchAuthPwdHistoryRecordsRange | 1.3.6.1.4.1.11.2.14.11.5.1.16.25.9 | Integer32 | read-write | This object indicates the number of password history records. |
| I32 hpSwitchAuthPwdAlertBeforeExpiry | 1.3.6.1.4.1.11.2.14.11.5.1.16.25.10 | Integer32 | read-write | This object indicates the period, in days, by which the user needs to be alerted before the password expiry. |
| I32 hpSwitchAuthPwdExpiredUserLoginDays | 1.3.6.1.4.1.11.2.14.11.5.1.16.25.11 | Integer32 | read-write | This object indicates the period, in days, for which the user will be allowed to login after password expiry. |
| I32 hpSwitchAuthPwdExpiredUserLoginAttempts | 1.3.6.1.4.1.11.2.14.11.5.1.16.25.12 | Integer32 | read-write | This object indicates the number of times the user will be allowed to login to the switch after the expiry of the password. |
| I32 hpSwitchAuthPwdUpdateInterval | 1.3.6.1.4.1.11.2.14.11.5.1.16.25.13 | Integer32 | read-write | This object indicates the minimum time, in hours, before which the user is not allowed to change the password. |
| hpSwitchFrontPanelSecurity | 1.3.6.1.4.1.11.2.14.11.5.1.16.26 | |||
| INT hpSwitchFpsPasswordClear | 1.3.6.1.4.1.11.2.14.11.5.1.16.26.1 | INTEGER | read-write | This object enables or disables the front panel security password clear command. |
| INT hpSwitchFpsFactoryReset | 1.3.6.1.4.1.11.2.14.11.5.1.16.26.2 | INTEGER | read-write | This object enables or disables the front panel security factory reset command. |
| INT hpSwitchFpsPasswordRecovery | 1.3.6.1.4.1.11.2.14.11.5.1.16.26.3 | INTEGER | read-write | This object enables or disables the front panel security password recovery command. |
| INT hpSwitchFpsDiagnosticResetClearButton | 1.3.6.1.4.1.11.2.14.11.5.1.16.26.4 | INTEGER | read-write | This object enables or disables the front panel security diagnostic reset clear button command. |
| INT hpSwitchFpsDiagnosticResetSerialConsole | 1.3.6.1.4.1.11.2.14.11.5.1.16.26.5 | INTEGER | read-write | This object enables or disables the front panel security diagnostic reset serial console command. |
| INT hpSwitchFpsDisplayInConfig | 1.3.6.1.4.1.11.2.14.11.5.1.16.26.6 | INTEGER | read-write | This object enables or disables the front panel security display in config command. |
RFC description
Authentication features management including RADIUS, TACACS+, and front-panel security on HP switches.
Start monitoring HP ProCurve/Aruba (ICF-based) switch (802.1X/MAC authentication) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.