All MIBs › HP-ICF-SNMP-USM-MIB
Organization: HP Networking
Last Updated: 2020-08-28
Category: Device Management, Domain: Security, SNMP Framework, Vendor: HP/HPE
Description: HP ICF SNMP MIB for SNMPv3 User Security Model (USM) user and authentication/privacy configuration on HP ProCurve switches.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is HP-ICF-SNMP-USM-MIB?
HP-ICF-SNMP-USM-MIB is an HP (Hewlett-Packard ProCurve/ICF - Internetworking Common Firmware) vendor extension to the standard SNMP-USM-MIB (RFC 3414/3826) that adds support for additional privacy-protocol algorithms, specifically 256-bit key AES, for SNMPv3 User-based Security Model configuration. It exposes a privacy-protocols identification object and a specific OID value (usmAESCfb256PrivProtocol) that can be used as a value for the standard usmUserPrivProtocol object when configuring an SNMPv3 user's encryption algorithm. Its role is entirely configuration/security-management oriented rather than hardware/software status monitoring: it lets administrators select and confirm which SNMPv3 privacy algorithm (128-bit vs. 256-bit AES) is configured for a given management user, which is important for meeting encryption-strength security policy requirements. It explicitly extends and depends on the standard SNMP-USM-MIB (RFC 3414) and complements RFC 3826's 128-bit AES definition. It is deployed on HP ProCurve managed switches where administrators require SNMPv3 encrypted management access with AES-256 privacy. Engineers can download the HP-ICF-SNMP-USM-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in HP-ICF-SNMP-USM-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- HP ProCurve managed switch
Monitoring Examples
An administrator configuring an SNMPv3 user sets that user's usmUserPrivProtocol (from SNMP-USM-MIB) to the value usmAESCfb256PrivProtocol defined in this module to require AES-256 encryption for that management session, rather than the standard 128-bit AES. hpicfSnmpPrivProtocols can be checked to confirm which privacy protocols, including this 256-bit option, the switch supports before attempting that configuration.
What Can Be Monitored
- supported SNMPv3 privacy protocols
- configured privacy protocol (AES-128 vs AES-256) per user
Imported Objects
From HP-ICF-OID
| hpSwitch | OBJECT-IDENTITY |
From SNMPv2-SMI
| MODULE-IDENTITY |
OIDs
RFC description
Extends SNMPv3 User Security Model with 256-bit AES encryption privacy protocol support for HP switches.
Start monitoring HP ProCurve managed switch (SNMPv3 USM AES-256 privacy) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.