HP-ICF-SERVICE-TUNNEL-MIB

All MIBs › HP-ICF-SERVICE-TUNNEL-MIB

Organization: HP Networking

Last Updated: 2014-06-17

Category: VPN and Security, Vendor: HP/HPE

Description: HP ICF SNMP MIB for service tunnel configuration supporting remote service delivery over encrypted tunnels on HP ProCurve switches.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HP-ICF-SERVICE-TUNNEL-MIB?

HP-ICF-SERVICE-TUNNEL-MIB is an HP proprietary (Intelligent Chassis Framework) MIB for HP ProCurve switches, defining objects to manage "service tunnels" that allow HP support/services to be delivered remotely over an encrypted tunnel. It exposes configuration objects controlling whether the service tunnel feature is enabled and its connection parameters, rather than general interface or performance data. Its monitoring value centers on the software/feature status of the remote-service tunnel -- confirming whether the service tunnel is enabled/connected -- which is a security-relevant configuration item rather than a hardware health indicator. No sample objects were provided so specific table/object names cannot be confirmed, but it is an HP ICF proprietary module without a stated dependency on external standard MIBs. It is typically deployed on HP ProCurve-managed switches where HP remote support connectivity needs to be monitored or audited for security compliance. Engineers can download the HP-ICF-SERVICE-TUNNEL-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HP-ICF-SERVICE-TUNNEL-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

HP ProCurve switch

Monitoring Examples

Since sample_objects is empty for this MIB, no concrete HP-ICF-SERVICE-TUNNEL-MIB object names are available to ground a specific polling example, though based on the module description an operator would generally be expected to poll objects indicating whether the service tunnel feature is enabled and currently connected, useful for security audits of remote-support access.

What Can Be Monitored

service tunnel enabled/connected status
service tunnel configuration

Imported Objects

From HP-ICF-OID

hpSwitch

OBJECT-IDENTITY

From IF-MIB

ifAlias	OBJECT-TYPE
ifIndex	OBJECT-TYPE

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter64
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
TimeTicks
Unsigned32

From SNMPv2-TC

TruthValue

From TUNNEL-MIB

tunnelIfEntry	OBJECT-TYPE
tunnelInetConfigEntry	OBJECT-TYPE

How to Use in IPNetwork Monitor

Example using hpicfServiceTunnelStatsRxInvalidKey OID:

Select an HP ProCurve switch (remote HP service tunnel) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hpicfServiceTunnelStatsRxInvalidKey into the Find box to locate it in the OID tree, then select it and click OK. It reports the number of encapsulated packets to un-configured tunnel interfaces of type Intercept. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
hpicfServiceTunnel	1.3.6.1.4.1.11.2.14.11.5.1.100			This MIB module contains HP proprietary objects for managing service tunnels.
hpicfServiceTunnelNotifications	1.3.6.1.4.1.11.2.14.11.5.1.100.0
NTF hpicfServiceTunnelIfUp	1.3.6.1.4.1.11.2.14.11.5.1.100.0.1			An hpicfServiceTunnelIfUp trap is sent when the the hpicfServiceTunnelInterfaceStatus object for a tunnel changes from DOWN to UP.
NTF hpicfServiceTunnelIfDown	1.3.6.1.4.1.11.2.14.11.5.1.100.0.2			An hpicfServiceTunnelIfDown trap is sent when the hpicfServiceTunnelInterfaceStatus object for a tunnel changes from UP to DOWN state.
hpicfServiceTunnelConfigurationObjects	1.3.6.1.4.1.11.2.14.11.5.1.100.1
hpicfServiceTunnelScalars	1.3.6.1.4.1.11.2.14.11.5.1.100.1.1
U32 hpicfMaxIPv4ServiceTunnels	1.3.6.1.4.1.11.2.14.11.5.1.100.1.1.1	Unsigned32	read-only	Maximum number of IPv4 service tunnels supported on the device which is a sum of maximum Inspect and Tap tunnels.
U32 hpicfTotalIPv4ServiceTunnels	1.3.6.1.4.1.11.2.14.11.5.1.100.1.1.2	Unsigned32	read-only	Total number of IPv4 service tunnels configured on the device.This includes both Inspect and Tap tunnels
U32 hpicfMaxInterceptServiceTunnels	1.3.6.1.4.1.11.2.14.11.5.1.100.1.1.3	Unsigned32	read-only	Maximum number of Inspect service tunnels supported on the device.
U32 hpicfTotalIPv4InterceptServiceTunnels	1.3.6.1.4.1.11.2.14.11.5.1.100.1.1.4	Unsigned32	read-only	Total number of IPv4 service tunnels of type Inspect configured on the device.
U32 hpicfMaxIPv4TapServiceTunnels	1.3.6.1.4.1.11.2.14.11.5.1.100.1.1.5	Unsigned32	read-only	Maximum number of IPv4 service tunnels of type Tap supported on the device.
U32 hpicfTotalIPv4TapServiceTunnels	1.3.6.1.4.1.11.2.14.11.5.1.100.1.1.6	Unsigned32	read-only	Total number of IPv4 service tunnels of type Tap configured on the device.
hpicfServiceTunnelTable	1.3.6.1.4.1.11.2.14.11.5.1.100.1.2		not-accessible	Table containing information on service tunnels. These are class of IP tunnels that can be used to encapsulate Ethernet frames along with the MAC and VLAN headers.
hpicfServiceTunnelEntry	1.3.6.1.4.1.11.2.14.11.5.1.100.1.2.1		not-accessible	An entry containing the information on a particular service tunnel.
INT hpicfServiceTunnelType	1.3.6.1.4.1.11.2.14.11.5.1.100.1.2.1.1	INTEGER	read-create	This object is used to configure the service tunnel type. A value of none(0) indicates that this is not a service tunnel. A value of intercept(1) indicates that the service tunnel type is intercept. Intercept tunnels are to be used by applications that want to intercept and inspect traffic flowing through a device and re-insert traffic back to the device for forwarding after inspection. A value of tap(2) indicates that the service tunnel is of type Tap. Tap tunnels are used by applications that want to mirror traffic flowing through the device.
STR hpicfServiceTunnelName	1.3.6.1.4.1.11.2.14.11.5.1.100.1.2.1.2	SnmpAdminString	read-create	This object is used to assign a textual name to the tunnel interface.
hpicfServiceTunnelIfTable	1.3.6.1.4.1.11.2.14.11.5.1.100.1.3		not-accessible	Table containing information on service tunnels. These are IP tunnels that can be used to encapsulate Ethernet frames along with the MAC and VLAN headers.
hpicfServiceTunnelIfEntry	1.3.6.1.4.1.11.2.14.11.5.1.100.1.3.1		not-accessible	An entry containing the information on a particular service tunnel.
U32 hpicfServiceTunnelIfMTU	1.3.6.1.4.1.11.2.14.11.5.1.100.1.3.1.1	Unsigned32	read-create	The size of the largest packet which can be sent or received on the interface, specified in octets. For interfaces that are used for transmitting network datagrams, this is the size of the largest network datagram that can be sent on the interface.
INT hpicfServiceTunnelInterfaceStatus	1.3.6.1.4.1.11.2.14.11.5.1.100.1.3.1.2	INTEGER	read-only	This object indicates the operational state of the tunnel interface.
INT hpicfServiceTunnelInterfaceDownReason	1.3.6.1.4.1.11.2.14.11.5.1.100.1.3.1.3	INTEGER	read-only	If the tunnelinterface state is DOWN, this object indicates the reason for which it is down.
INT hpicfServiceTunnelInterfaceTruncate	1.3.6.1.4.1.11.2.14.11.5.1.100.1.3.1.4	INTEGER	read-write	Enables partial payloads to be sent on the Tap tunnels in case of MTU violations.
hpicfServiceTunnelStatisticsObjects	1.3.6.1.4.1.11.2.14.11.5.1.100.2
hpicfServiceTunnelScalarStats	1.3.6.1.4.1.11.2.14.11.5.1.100.2.1
C64 hpicfServiceTunnelStatsRxInvalidKeyEx	1.3.6.1.4.1.11.2.14.11.5.1.100.2.1.1	Counter64	read-only	Number of encapsulated packets to un-configured tunnel interfaces of type Intercept. This is not applicable to Tap tunnels.
C64 hpicfServiceTunnelStatsRxFragmentDrops	1.3.6.1.4.1.11.2.14.11.5.1.100.2.1.2	Counter64	read-only	Number of fragmented packets received and dropped on tunnel interface. This is not applicable to Tap tunnels.
C64 hpicfServiceTunnelStatsTxMTUViolationDrop	1.3.6.1.4.1.11.2.14.11.5.1.100.2.1.3	Counter64	read-only	Number of packets not transmitted on the tunnel interface for MTU violation reasons. This is common to all service tunnel types.
C64 hpicfServiceTunnelStatsUnknownSrcMac	1.3.6.1.4.1.11.2.14.11.5.1.100.2.1.4	Counter64	read-only	Number of packets received on tunnel interfaces but dropped because the source MAC address of the frame is not present in the FDB. This is not applicable to Tap tunnels.
T/F hpicfServiceTunnelStatsScalarClear	1.3.6.1.4.1.11.2.14.11.5.1.100.2.1.5	TruthValue	read-write	This object clears tunnel statistics when set to TRUE. A GET request for this object always returns FALSE.
hpicfServiceTunnelStatsIfTable	1.3.6.1.4.1.11.2.14.11.5.1.100.2.2		not-accessible	Table containing statistics information on service tunnels. Service Tap tunnels are uni-directional and will not receive packets. Hence the MIB objects for Rx Statistics are not applicable for Tap tunnels and will always be 0.
hpicfServiceTunnelStatsIfEntry	1.3.6.1.4.1.11.2.14.11.5.1.100.2.2.1		not-accessible	An entry containing statistics information on a particular service tunnel.
C64 hpicfServiceTunnelStatsRxPackets	1.3.6.1.4.1.11.2.14.11.5.1.100.2.2.1.1	Counter64	read-only	Number of packets received on the tunnel interface.
C64 hpicfServiceTunnelStatsTxPackets	1.3.6.1.4.1.11.2.14.11.5.1.100.2.2.1.2	Counter64	read-only	Number of packets transmitted out of the tunnel interface.
C64 hpicfServiceTunnelStatsRxHeartbeat	1.3.6.1.4.1.11.2.14.11.5.1.100.2.2.1.3	Counter64	read-only	Number of heartbeat packets received on the tunnel interface.
C64 hpicfServiceTunnelStatsTxHeartbeat	1.3.6.1.4.1.11.2.14.11.5.1.100.2.2.1.4	Counter64	read-only	Number of heartbeat packets transmitted out of the tunnel interface.
TIK hpicfServiceTunnelLastHeartbeatPacketTimestamp	1.3.6.1.4.1.11.2.14.11.5.1.100.2.2.1.5	TimeTicks	read-only	The value of 'SysUpTime' correspondign to last heartbeat packet that was received on this tunnel.
T/F hpicfServiceTunnelStatsClear	1.3.6.1.4.1.11.2.14.11.5.1.100.2.2.1.6	TruthValue	read-create	This object clears tunnel interface statistics when set to TRUE. A GET request for this object always returns FALSE.
hpicfServiceTunnelConformance	1.3.6.1.4.1.11.2.14.11.5.1.100.3
hpicfServiceTunnelCompliances	1.3.6.1.4.1.11.2.14.11.5.1.100.3.1
hpicfServiceTunnelCompliance	1.3.6.1.4.1.11.2.14.11.5.1.100.3.1.1			The compliance statement for the service tunnel MIB.
hpicfServiceTunnelGroups	1.3.6.1.4.1.11.2.14.11.5.1.100.3.2
hpicfServiceScalarsGroup	1.3.6.1.4.1.11.2.14.11.5.1.100.3.2.1			The collection of objects providing information about the service tunnel.
hpicfServiceScalarsStatsGroup	1.3.6.1.4.1.11.2.14.11.5.1.100.3.2.2			The collection of objects providing information about the service tunnel statistics.
hpicfServiceTunnelGroup	1.3.6.1.4.1.11.2.14.11.5.1.100.3.2.3			The collection of objects providing information about the service tunnel.
hpicfServiceTunnelStatsGroup	1.3.6.1.4.1.11.2.14.11.5.1.100.3.2.4			The collection of objects providing information about the service tunnel statistics.
hpicfServiceTunnelNotificationGroup	1.3.6.1.4.1.11.2.14.11.5.1.100.3.2.5			Group of notifications.
hpicfServiceScalarsGroup1	1.3.6.1.4.1.11.2.14.11.5.1.100.3.2.6			The collection of objects providing information about the service tunnel.
hpicfServiceTunnelGroup1	1.3.6.1.4.1.11.2.14.11.5.1.100.3.2.7			The collection of objects providing information about the service tunnel.

RFC description

HP proprietary MIB for managing service tunnels including tap tunnel support on HP networking devices.

Start monitoring HP ProCurve switch (remote HP service tunnel) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HP-ICF-SERVICE-TUNNEL-MIB