All MIBs › HPN-ICF-AFC-MIB
Last Updated: 2008-07-23
Category: Vendor: H3C/HH3C, Vendor: HP/HPE
Description: SNMP MIB from HP Networking's ICF line covering configuration of Automated Fault Correction (AFC), also referred to as access flow control, on HP Networking devices.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is HPN-ICF-AFC-MIB?
HPN-ICF-AFC-MIB is an HP Networking (Intelligent Configuration Framework, ICF) MIB implementing the Abnormal Flow Clean (AFC) subsystem, which detects and mitigates DDoS-style abnormal traffic flows on HP networking switches and routers. It exposes security-related configuration and status data covering DDoS attack detection policy, thresholds, and attack event notification rather than general hardware environmental data. Its primary monitoring value is in fault/security event monitoring: it tracks detected attack targets, attack types, configured thresholds, and traffic speed so operators can identify active attacks and confirm mitigation policy is engaged. It complements standard HP ICF architecture MIBs and vendor-specific notification frameworks used across the HPN device family. It is typically deployed on HP Networking (H3C-derived) switches/routers at network edges where DDoS mitigation and abnormal traffic detection are required. Network engineers evaluating or troubleshooting this functionality can download the HPN-ICF-AFC-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in HPN-ICF-AFC-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- HP Networking (H3C-based) switches and routers
Monitoring Examples
Sample objects include hpnicfDDosAttackTargetIP, hpnicfDDosAttackType, hpnicfDDosAttackPolicy, hpnicfDDosAttackThreshold, and hpnicfDDosAttackSpeed, showing that the MIB reports on the target IP and type of a detected DDoS attack along with the traffic speed observed. An administrator would monitor hpnicfAFCNotify traps carrying hpnicfDDosAttackTargetIP and hpnicfDDosAttackSpeed to be alerted in real time when attack traffic exceeds hpnicfDDosAttackThreshold. Sustained high values in hpnicfDDosAttackSpeed for a given target would indicate an ongoing volumetric attack requiring policy escalation.
What Can Be Monitored
- detected DDoS attack target IP
- DDoS attack type
- configured attack policy
- attack detection threshold
- observed attack traffic speed
Imported Objects
From HPN-ICF-OID-MIB
| hpnicfCommon | OBJECT-IDENTITY |
From SNMPv2-SMI
| Integer32 | |
| IpAddress | |
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE |
OIDs
RFC description
HP Networking ICF SNMP MIB for Automated Fault Correction (AFC) or access flow control configuration on HP Networking devices.
Start monitoring HP Networking (H3C-based) switch/router (Abnormal Flow Clean, DDoS mitigation) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.