HP-ICF-USER-PROFILE-MIB

All MIBs › HP-ICF-USER-PROFILE-MIB

Organization: HP Networking

Last Updated: 2013-06-12

Category: Domain: Security, Vendor: HP/HPE

Description: HP ICF SNMP MIB for user profile policy management assigning access rights and QoS to authenticated users on HP ProCurve switches.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HP-ICF-USER-PROFILE-MIB?

HP-ICF-USER-PROFILE-MIB is an HP proprietary SNMP module for managing user access profiles on HP ProCurve switches, assigning access-control rights and QoS treatment to authenticated users. It exposes configuration objects for per-port and per-user profile assignments, filter lists, and filter rules used to shape or restrict a user's network access, plus statistics on profile usage. For monitoring purposes, this MIB reveals the software/policy status of the authentication and access-control subsystem, letting an administrator confirm which profile is applied to a given port or user and check hpicfUsrProfileStats for counts of profile applications, which can flag misapplied or failed policy assignments. It works alongside the switch's underlying 802.1X/authentication mechanisms, on which user-profile assignment depends. It is typically deployed in enterprise networks using identity-based networking (e.g., 802.1X with RADIUS-assigned profiles) to enforce differentiated access and QoS per authenticated user. Engineers can download the HP-ICF-USER-PROFILE-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HP-ICF-USER-PROFILE-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

HP ProCurve switch

Monitoring Examples

The module exposes hpicfUsrProfileCapabilityByPortMap and hpicfUsrProfileCapabilityByUserMap to show which profile capabilities are mapped to a port or a user, along with hpicfUsrProfileConfigFilterListTable/Entry and hpicfUsrProfileConfigFilterRuleTable/Entry defining the actual filter lists and rules (indexed by hpicfUsrProfileFilterListIndex and hpicfUsrProfileFilterRuleIndex) applied to those users. An administrator would poll hpicfUsrProfileStats after a policy change to confirm the expected number of filter rules are active, and check the by-port/by-user maps to verify a specific user was assigned the intended profile rather than a default one. A mismatch between expected and actual profile mapping would indicate a RADIUS or configuration error in the access-control chain.

What Can Be Monitored

user profile assignment per port/user
filter list and filter rule configuration
profile application statistics
access-control policy status

Imported Objects

From CONFIG-MIB

HpicfUsrProfilePortSpeed

From HP-ICF-OID

hpicfCommonSecurity

OBJECT-IDENTITY

From IF-MIB

InterfaceIndex

From Q-BRIDGE-MIB

VlanIndex

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter64
Integer32
MODULE-IDENTITY
OBJECT-TYPE
TimeTicks
Unsigned32

From SNMPv2-TC

MacAddress
RowStatus
TruthValue

How to Use in IPNetwork Monitor

Example using hpicfUsrProfileStatsFilterRuleHitCount OID:

Select an HP ProCurve switch (802.1X user access-profile assignment) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hpicfUsrProfileStatsFilterRuleHitCount into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. Specifies the number of times (hit count) the user's traffic has matched this rule. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
hpicfUsrProfileMIB	1.3.6.1.4.1.11.2.14.11.1.12.1			This MIB module contains the definitions of Managed Objects for user access profiles.
hpicfUsrProfileCapability	1.3.6.1.4.1.11.2.14.11.1.12.1.0
OCT hpicfUsrProfileCapabilityByPortMap	1.3.6.1.4.1.11.2.14.11.1.12.1.0.1	OCTET STRING	read-only	A string of octets containing on bit per access profile primitive as follows: bit 0 - PVID/native/untagged ingress VLAN bit 1 - Tagged Egress VLAN bit 2 - Ingress VLAN Filter bit 3 - Priority Regeneration bit 4 - Max. Ingress Bandwidth bit 5 - Max. Egress Bandwidth bit 6 - Filter List bit 7 - Hitcount Support bit 8 - through 64 - reserved When a bit is set to one, it indicates that device supports the selected access profile primitive only on a per port ('hpicfUsrProfileUserPortNumber') basis. The consequence is that the device can only enforce the same access primitive setting for all users ('hpicfUsrProfileUserMacAddr') on a given port.
OCT hpicfUsrProfileCapabilityByUserMap	1.3.6.1.4.1.11.2.14.11.1.12.1.0.2	OCTET STRING	read-only	A string of octets containing one bit per access profile primitive as follows: bit 0 - PVID/native/untagged ingress VLAN bit 1 - Tagged Egress VLAN bit 2 - Ingress VLAN Filter bit 3 - Priority Regeneration bit 4 - Max. Ingress Bandwidth bit 5 - Max. Egress Bandwidth bit 6 - Filter List bit 7 - Hitcount Support bit 8 - through 64 - reserved When a bit is set to one, it indicates that device supports the selected access profile primitive on a per 'hpicfUsrProfileUserMacAddr' basis. The consequence is that the device can enforce unique per user access profile primitives for each user on a given port ('hpicfUsrProfileUserPortNumber').
hpicfUsrProfileConfig	1.3.6.1.4.1.11.2.14.11.1.12.1.1
hpicfUsrProfileConfigFilterListTable	1.3.6.1.4.1.11.2.14.11.1.12.1.1.1		not-accessible	A table that contains configuration objects for filter lists.
hpicfUsrProfileConfigFilterListEntry	1.3.6.1.4.1.11.2.14.11.1.12.1.1.1.1		not-accessible	The configuration information for a user's filtering profile.
I32 hpicfUsrProfileFilterListIndex	1.3.6.1.4.1.11.2.14.11.1.12.1.1.1.1.1	Integer32	not-accessible	The identifier used to select a list of filter rules. A filter list entry must be created before a filter rule entry can be added.
ROW hpicfUsrProfileConfigFilterListRowStatus	1.3.6.1.4.1.11.2.14.11.1.12.1.1.1.1.2	RowStatus	read-create	This object indicates the status of this entry. Must NOT be active in order to modify an hpicfUsrProfileConfigFilterRuleEntry that is indexed on this entry's hpicfUsrProfileListIndex. This object must be in the notReady or notInService states in order for an hpicfUsrProfileConfigFilterRuleEntry to be added, removed, or modified. In order to be changed to an active rowStatus, at least one rule sharing the list index must have an active hpicfUsrProfileConfigFilterRuleRowStatus.
INT hpicfUsrProfileConfigNasRulesIpv6	1.3.6.1.4.1.11.2.14.11.1.12.1.1.1.1.3	INTEGER	read-create	Setting this attribute to enabled(1) enables the usage of IPv6 destinations in ACEs. When set to disabled(2) any implicit IP destinations will be translated as IPv4 only.
hpicfUsrProfileConfigFilterRuleTable	1.3.6.1.4.1.11.2.14.11.1.12.1.1.2		not-accessible	A table that contains configuration objects for filter lists.
hpicfUsrProfileConfigFilterRuleEntry	1.3.6.1.4.1.11.2.14.11.1.12.1.1.2.1		not-accessible	The configuration information for a user's filtering profile.
I32 hpicfUsrProfileFilterRuleListIndex	1.3.6.1.4.1.11.2.14.11.1.12.1.1.2.1.1	Integer32	not-accessible	The identifier used to select a list of filter rules. This filter rule list index must correspond to a created but not active filter list index in order for a rule entry to be created.
I32 hpicfUsrProfileFilterRuleIndex	1.3.6.1.4.1.11.2.14.11.1.12.1.1.2.1.2	Integer32	not-accessible	A numeric value assigned to each rule within a list belong to the same hpicfUsrProfileFilterListIndex. Rules within a given list will be evaluated in ascending order.
OCT hpicfUsrProfileConfigFilterRule	1.3.6.1.4.1.11.2.14.11.1.12.1.1.2.1.3	OCTET STRING	read-create	Specifies a single filter rule using the same syntax used for the hp-nas-filter-rule RADIUS attribute.
ROW hpicfUsrProfileConfigFilterRuleRowStatus	1.3.6.1.4.1.11.2.14.11.1.12.1.1.2.1.4	RowStatus	read-create	This object indicates the status of this entry. Must NOT be active in order to modify an hpicfUsrProfileConfigFilterRuleEntry. However, if an hpicfUsrProfileConfigFilterListRowStatus is set to destroy, all HpicfUsrProfileConfigFilterRuleEntry entries sharing the common hpicfUsrProfileFilterListIndex will also be destroyed regardless of the value of hpicfUsrProfileConfigFilterRuleRowStatus.
hpicfUsrProfileConfigTable	1.3.6.1.4.1.11.2.14.11.1.12.1.1.3		not-accessible	A table that contains configuration objects for access profiles.
hpicfUsrProfileConfigEntry	1.3.6.1.4.1.11.2.14.11.1.12.1.1.3.1		not-accessible	The configuration information for an access profile.
I32 hpicfUsrProfileConfigIndex	1.3.6.1.4.1.11.2.14.11.1.12.1.1.3.1.1	Integer32	not-accessible	A unique numeric value assigned to each access profile in this table.
VLA hpicfUsrProfileConfigPvid	1.3.6.1.4.1.11.2.14.11.1.12.1.1.3.1.2	VlanIndex	read-create	Specifies the port VID (PVID), also known, as native VLAN to be used with this access profile. To specify no pvid, set value to 4095, not 0.
T/F hpicfUsrProfileConfigPvidEnable	1.3.6.1.4.1.11.2.14.11.1.12.1.1.3.1.3	TruthValue	read-create	Setting this attribute TRUE enables the usage of 'hpicfUsrProfilePvid' when this access profile is active.
OCT hpicfUsrProfileConfigTaggedEgressVlanMap1k	1.3.6.1.4.1.11.2.14.11.1.12.1.1.3.1.4	OCTET STRING	read-create	A string of octets containing one bit per VLAN for VLANS with 'VlanIndex' values of 0 through 1023. The first octet corresponds to VLANs with 'VlanIndex' values of 0 through 7, the second octet to VLANs 8 through 15, etc. The most significant bit of each octet corresponds to the lowest 'VlanIndex' value in that octet. Bit 0 in the 1K map is ignored/discarded. If variable hpicfUsrProfileConfigPvidEnable is TRUE, some bit other than bit 0 in the 1K map must be set. To specify an empty tagged vlan map, vlanIndex value 4095 in the 4K map must be set. Setting a bit to '1' specifies the usage the corresponding VLAN with this access profile.
OCT hpicfUsrProfileConfigTaggedEgressVlanMap2k	1.3.6.1.4.1.11.2.14.11.1.12.1.1.3.1.5	OCTET STRING	read-create	A string of octets containing one bit per VLAN for VLANS with 'VlanIndex' values of 1024 through 2047. The first octet corresponds to VLANs with 'VlanIndex' values of 1024 through 1031, the second octet to VLANs 1032 through 1039, etc. The most significant bit of each octet corresponds to the lowest 'VlanIndex' value in that octet. Setting a bit to '1' specifies the usage the corresponding VLAN with this access profile.
OCT hpicfUsrProfileConfigTaggedEgressVlanMap3k	1.3.6.1.4.1.11.2.14.11.1.12.1.1.3.1.6	OCTET STRING	read-create	A string of octets containing one bit per VLAN for VLANS with 'VlanIndex' values of 2048 through 3071. The first octet corresponds to VLANs with 'VlanIndex' values of 2048 through 3071, the second octet to VLANs 2056 through 2063, etc. The most significant bit of each octet corresponds to the lowest 'VlanIndex' value in that octet. Setting a bit to '1' specifies the usage the corresponding VLAN with this access profile.
OCT hpicfUsrProfileConfigTaggedEgressVlanMap4k	1.3.6.1.4.1.11.2.14.11.1.12.1.1.3.1.7	OCTET STRING	read-create	A string of octets containing one bit per VLAN for VLANS with 'VlanIndex' values of 3072 through 4095. The first octet corresponds to VLANs with 'VlanIndex' values of 3072 through 3079, the second octet to VLANs 3080 through 3087, etc. The most significant bit of each octet corresponds to the lowest 'VlanIndex' value in that octet. Setting a bit to '1' specifies the usage the corresponding VLAN with this access profile.
T/F hpicfUsrProfileConfigTaggedEgressVlanEnable	1.3.6.1.4.1.11.2.14.11.1.12.1.1.3.1.8	TruthValue	read-create	Setting this attribute TRUE enables the usage of 'hpicfUsrProfileTaggedVlanMapXXX' when this access profile is being enforced.
T/F hpicfUsrProfileConfigIngressVlanFilterEnable	1.3.6.1.4.1.11.2.14.11.1.12.1.1.3.1.9	TruthValue	read-create	Setting this attribute TRUE causes the system to only allow ingress traffic from those VLANs on which egress traffic is permitted.
OCT hpicfUsrProfileConfigPriorityRegenTable	1.3.6.1.4.1.11.2.14.11.1.12.1.1.3.1.10	OCTET STRING	read-create	Specifies the IEEE 802 priority regeneration table for this access profile. Syntax of octet string is same as for 'User-Priority-Table' RADIUS attribute as defined in RFC4675.
T/F hpicfUsrProfileConfigPriorityRegenTableEnable	1.3.6.1.4.1.11.2.14.11.1.12.1.1.3.1.11	TruthValue	read-create	Setting this attribute TRUE enables the usage of the 'hpicfUsrProfilePriorityRegenTable' when this access profile is active.
U32 hpicfUsrProfileConfigMaxIngressBandwidth	1.3.6.1.4.1.11.2.14.11.1.12.1.1.3.1.12	Unsigned32	read-create	Specifies the maximum ingress bandwidth for this access profile. Bandwidth value is specified in Kbps.
T/F hpicfUsrProfileConfigMaxIngressBandwidthEnable	1.3.6.1.4.1.11.2.14.11.1.12.1.1.3.1.13	TruthValue	read-create	Setting this attribute TRUE enables the usage of the 'hpicfUsrProfileMaxIngressBandwidth' when this access profile is active.
U32 hpicfUsrProfileConfigMaxEgressBandwidth	1.3.6.1.4.1.11.2.14.11.1.12.1.1.3.1.14	Unsigned32	read-create	Specifies the maximum egress bandwidth for this access profile. Bandwidth value is specified in Kbps.
T/F hpicfUsrProfileConfigMaxEgressBandwidthEnable	1.3.6.1.4.1.11.2.14.11.1.12.1.1.3.1.15	TruthValue	read-create	Setting this attribute TRUE enables the usage of 'hpicfUsrProfileMaxEgressBandwidth' when this access profile is active.
I32 hpicfUsrProfileConfigFilterListIndex	1.3.6.1.4.1.11.2.14.11.1.12.1.1.3.1.16	Integer32	read-create	Selects the filter from 'hpicfUsrProfileConfigFilterTable' to associate with this access profile. The rowStatus of the filter must be in an active state.
T/F hpicfUsrProfileConfigFilterListEnable	1.3.6.1.4.1.11.2.14.11.1.12.1.1.3.1.17	TruthValue	read-create	Setting this attribute TRUE enables the usage of 'hpicfUsrProfileConfigFilterListIndex' when this access profile is active.
ROW hpicfUsrProfileConfigEntryRowStatus	1.3.6.1.4.1.11.2.14.11.1.12.1.1.3.1.18	RowStatus	read-create	This object indicates the status of this entry. Must NOT be active in order to change some other column of this config entry.
hpicfUsrProfileConfigBindTable	1.3.6.1.4.1.11.2.14.11.1.12.1.1.4		not-accessible	A table that contains configuration objects for the access profile-to-user bindings.
hpicfUsrProfileConfigBindEntry	1.3.6.1.4.1.11.2.14.11.1.12.1.1.4.1		not-accessible	The configuration information for a access profile-to-user binding.
NUM hpicfUsrProfileUserPortNumber	1.3.6.1.4.1.11.2.14.11.1.12.1.1.4.1.1	InterfaceIndex	not-accessible	The interface index associated with this user. On wired HP products, the interface index is the physical port. On wireless products it is the instance (whether real or virtual) of an AP.
MAC hpicfUsrProfileUserMacAddr	1.3.6.1.4.1.11.2.14.11.1.12.1.1.4.1.2	MacAddress	not-accessible	The 48-bit IEEE media access control address of the user.
I32 hpicfUsrProfileSelector	1.3.6.1.4.1.11.2.14.11.1.12.1.1.4.1.3	Integer32	read-create	Setting this attribute to a value between 1 and 16384 selects an access profile from 'hpicfUsrProfileConfigTable' to apply to the user.
ROW hpicfUsrProfileConfigBindEntryRowStatus	1.3.6.1.4.1.11.2.14.11.1.12.1.1.4.1.4	RowStatus	read-create	This object indicates the status of this entry. Must NOT be active in order to change some other column of this bind entry.
INT hpicfUsrProfileConfigConflictResolveQoS	1.3.6.1.4.1.11.2.14.11.1.12.1.1.5	INTEGER	read-write	This object controls how a device behaves when QoS conflicts arise. A conflict can arise if a device only supports the QoS access primitive on a per-port basis, but device is being configured with profiles that have per-user unique setting. Applying these profiles to the same port will cause the conflict to arise because the device cannot enforce a per-user unique QoS setting. This object specifies two alternatives, as follows: 'non-strict' - Device does not signal errors when multiple access profiles are applied to a port. The device will apply the QoS settings specified in the last profile applied to the port. 'strict' - Device does signal an error when an attempt to apply an access profile to a port that already has an active access profile with a different QoS setting. Device will not activate the access profile in question after error is signaled.
INT hpicfUsrProfileConfigConflictResolveMaxIngressBandwidth	1.3.6.1.4.1.11.2.14.11.1.12.1.1.6	INTEGER	read-write	This object controls how a device behaves when ingress BW conflicts arise. A conflict can arise if a device only supports the ingress BW access primitive on a per-port basis, but device is being configured with profiles that have per-user unique setting. Applying these profiles to the same port will cause the conflict to arise because the device cannot enforce a per-user unique ingress BW setting. This object specifies two alternatives, as follows: 'non-strict' - Device does not signal errors when multiple access profiles are applied to a port. The device will apply the ingress BW settings specified in the last profile applied to the port. 'strict' - Device does signal an error when an attempt to apply an access profile to a port that already has an active access profile with a different ingress BW setting. Device will not activate the access profile in question after error is signaled.
INT hpicfUsrProfileConfigConflictResolveMaxEgressBandwidth	1.3.6.1.4.1.11.2.14.11.1.12.1.1.7	INTEGER	read-write	This object controls how a device behaves when egress BW conflicts arise. A conflict can arise if a device only supports the egress BW access primitive on a per-port basis, but device is being configured with profiles that have per-user unique setting. Applying these profiles to the same port will cause the conflict to arise because the device cannot enforce a per-user egress BW setting. This object specifies two alternatives, as follows: 'non-strict' - Device does not signal errors when multiple access profiles are applied to a port. The device will apply the egress BW settings specified in the last profile applied to the port. 'strict' - Device does signal an error when an attempt to apply an access profile to a port that already has an active access profile with a different egress BW setting. Device will not activate the access profile in question after error is signaled.
hpicfUsrProfileStats	1.3.6.1.4.1.11.2.14.11.1.12.1.2
TIK hpicfUsrProfileLastUpdate	1.3.6.1.4.1.11.2.14.11.1.12.1.2.1	TimeTicks	read-only	A snapshot of the module sysUpTime at the time of the last update to the access profiles in effect. A value of 0 indicates that the hpicfUsrProfileLastUpdate object is not supported by the device and a fresh copy of the hpicfUsrProfileTable will always need to be obtained by the management application.
hpicfUsrProfileStatsFilterTable	1.3.6.1.4.1.11.2.14.11.1.12.1.2.2		not-accessible	A table that contains statistic objects for filter lists.
hpicfUsrProfileStatsFilterEntry	1.3.6.1.4.1.11.2.14.11.1.12.1.2.2.1		not-accessible	Statistic information for a user's filtering profile.
OCT hpicfUsrProfileStatsFilterRule	1.3.6.1.4.1.11.2.14.11.1.12.1.2.2.1.1	OCTET STRING	read-only	Specifies a single filter rule using the same syntax used for the hp-nas-filter-rule RADIUS attribute.
C64 hpicfUsrProfileStatsFilterRuleHitCountEx	1.3.6.1.4.1.11.2.14.11.1.12.1.2.2.1.2	Counter64	read-only	Specifies the number of times (hit count) the user's traffic has matched this rule.
T/F hpicfUsrProfileStatsFilterRuleHitCountEnabled	1.3.6.1.4.1.11.2.14.11.1.12.1.2.2.1.3	TruthValue	read-only	When this attribute is TRUE it signifies the 'hpicfUsrProfileStatsFilterRuleHitCount' contains a valid value. A FALSE value signifies it does not contain a valid value.
hpicfUsrProfileStatsTable	1.3.6.1.4.1.11.2.14.11.1.12.1.2.3		not-accessible	This table describes the access profiles currently in effect.
hpicfUsrProfileStatsEntry	1.3.6.1.4.1.11.2.14.11.1.12.1.2.3.1		not-accessible	An entry in the user access profile table.
VLA hpicfUsrProfileStatsPvid	1.3.6.1.4.1.11.2.14.11.1.12.1.2.3.1.1	VlanIndex	read-only	Active port VID (PVID) for this user.
OCT hpicfUsrProfileStatsTaggedEgressVlanMap1k	1.3.6.1.4.1.11.2.14.11.1.12.1.2.3.1.2	OCTET STRING	read-only	A string of octets containing one bit per VLAN for VLANS with 'VlanIndex' values of 0 through 1023. The first octet corresponds to VLANs with 'VlanIndex' values of 0 through 7, the second octet to VLANs 8 through 15, etc. The most significant bit of each octet corresponds to the lowest 'VlanIndex' value in that octet. When a bit is set to '1', it means the corresponding tagged VLAN as active for this user.
OCT hpicfUsrProfileStatsTaggedEgressVlanMap2k	1.3.6.1.4.1.11.2.14.11.1.12.1.2.3.1.3	OCTET STRING	read-only	A string of octets containing one bit per VLAN for VLANS with 'VlanIndex' values of 1024 through 2047. The first octet corresponds to VLANs with 'VlanIndex' values of 1024 through 1031, the second octet to VLANs 1032 through 1039, etc. The most significant bit of each octet corresponds to the lowest 'VlanIndex' value in that octet. When a bit is set to '1', it indicates the corresponding tagged VLAN as active for this user.
OCT hpicfUsrProfileStatsTaggedEgressVlanMap3k	1.3.6.1.4.1.11.2.14.11.1.12.1.2.3.1.4	OCTET STRING	read-only	A string of octets containing one bit per VLAN for VLANS with 'VlanIndex' values of 2048 through 3071. The first octet corresponds to VLANs with 'VlanIndex' values of 2048 through 2055, the second octet to VLANs 2056 through 2063, etc. The most significant bit of each octet corresponds to the lowest 'VlanIndex' value in that octet. When a bit is set to '1', it indicates the corresponding tagged VLAN as active for this user.
OCT hpicfUsrProfileStatsTaggedEgressVlanMap4k	1.3.6.1.4.1.11.2.14.11.1.12.1.2.3.1.5	OCTET STRING	read-only	A string of octets containing one bit per VLAN for VLANS with 'VlanIndex' values of 3072 through 4095. The first octet corresponds to VLANs with 'VlanIndex' values of 3072 through 3079, the second octet to VLANs 3080 through 3087, etc. The most significant bit of each octet corresponds to the lowest 'VlanIndex' value in that octet. When a bit is set to '1', it indicates the corresponding tagged VLAN as active for this user.
T/F hpicfUsrProfileStatsIngressVlanFilterEnable	1.3.6.1.4.1.11.2.14.11.1.12.1.2.3.1.6	TruthValue	read-only	When this attribute is TRUE causes the system is only allowing ingress traffic from those VLANs on which egress traffic is permitted.
OCT hpicfUsrProfileStatsPriorityRegenTable	1.3.6.1.4.1.11.2.14.11.1.12.1.2.3.1.7	OCTET STRING	read-only	Specifies the IEEE 802 priority regeneration table active for this access profile. Syntax of octet string is same as for 'User-Priority-Table' RADIUS attribute as defined in RFC4675.
U32 hpicfUsrProfileStatsMaxIngressBandwidth	1.3.6.1.4.1.11.2.14.11.1.12.1.2.3.1.8	Unsigned32	read-only	Specifies the maximum ingress bandwidth for this access profile. Bandwidth value is specified in Kbps.
U32 hpicfUsrProfileStatsMaxEgressBandwidth	1.3.6.1.4.1.11.2.14.11.1.12.1.2.3.1.9	Unsigned32	read-only	Specifies the maximum egress bandwidth for this access profile. Bandwidth value is specified in Kbps.
I32 hpicfUsrProfileStatsFilterListIndex	1.3.6.1.4.1.11.2.14.11.1.12.1.2.3.1.10	Integer32	read-only	A value of 0 indicates that no filter rule set is active for the user. A value between 1 and 16384 selects the active filter rule set from 'hpicfUsrProfileStatsFilterTable'.
INT hpicfUsrProfileStatsAccessMode	1.3.6.1.4.1.11.2.14.11.1.12.1.2.3.1.11	INTEGER	read-only	Indicates whether profile was applied via SNMP or via RADIUS. Application by SNMP has precedence over RADIUS. Where there are no attribute conflicts, profile attributes may be a combination of those applied by both SNMP and RADIUS. In such case, the variable value will still be SNMP.
T/F hpicfUsrProfilePortSpeedOverRidden	1.3.6.1.4.1.11.2.14.11.1.12.1.2.3.1.12	TruthValue	read-only	When this attribute is TRUE it signifies the 'hpicfUsrProfileStatsPortSpeedVSA' is a RADIUS over-ridden. A FALSE value signifies it is not RADIUS over-ridden value.
HPI hpicfUsrProfileStatsPortSpeedVSA	1.3.6.1.4.1.11.2.14.11.1.12.1.2.3.1.13	HpicfUsrProfilePortSpeed	read-only	This attribute signifies at what speed the port is operating at.
hpicfUsrProfileConformance	1.3.6.1.4.1.11.2.14.11.1.12.1.3
hpicfUsrProfileGroup	1.3.6.1.4.1.11.2.14.11.1.12.1.3.1
hpicfUsrProfileCapabilityGroup	1.3.6.1.4.1.11.2.14.11.1.12.1.3.1.1			A collection of objects providing device capability information for user access profiles.
hpicfUsrProfileConfigGroup	1.3.6.1.4.1.11.2.14.11.1.12.1.3.1.2			A collection of objects providing configuration of user access profiles.
hpicfUsrProfileStatsGroup	1.3.6.1.4.1.11.2.14.11.1.12.1.3.1.3			A collection of objects providing statistics of user access profiles.
hpicfUsrProfileConfigGroup2	1.3.6.1.4.1.11.2.14.11.1.12.1.3.1.4			A collection of objects providing configuration of user access profiles.
hpicfUsrProfileStatsGroup1	1.3.6.1.4.1.11.2.14.11.1.12.1.3.1.5			A collection of objects providing statistics of user access profiles.
hpicfUsrProfileCompliances	1.3.6.1.4.1.11.2.14.11.1.12.1.3.2
hpicfUsrProfileCompliance	1.3.6.1.4.1.11.2.14.11.1.12.1.3.2.1			The compliance statement for devices support of HP-USER-PROFILE-MIB.
hpicfUsrProfileCompliance2	1.3.6.1.4.1.11.2.14.11.1.12.1.3.2.2			The compliance statement for devices support of HP-USER-PROFILE-MIB.
hpicfUsrProfileCompliance3	1.3.6.1.4.1.11.2.14.11.1.12.1.3.2.3			The compliance statement for devices support of HP-USER-PROFILE-MIB.
hpicfUsrProfileCompliance4	1.3.6.1.4.1.11.2.14.11.1.12.1.3.2.4			The compliance statement for devices support of HP-USER-PROFILE-MIB.

RFC description

Manages user access profiles including configuration of VLAN, port speed, and filter rules on HP network switches.

Start monitoring HP ProCurve switch (802.1X user access-profile assignment) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HP-ICF-USER-PROFILE-MIB