HPN-ICF-DOMAIN-MIB

All MIBs › HPN-ICF-DOMAIN-MIB

Last Updated: 2012-10-15

Category: RADIUS and AAA, Vendor: H3C/HH3C, Vendor: HP/HPE

Description: HP Networking ICF SNMP MIB for AAA domain management and ISP authentication domain configuration on HP networking devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HPN-ICF-DOMAIN-MIB?

HPN-ICF-DOMAIN-MIB is an HP Networking (H3C-derived ICF platform) proprietary MIB managing AAA domains, which group authentication/accounting scheme and access-policy settings for dial-in/portal users. Its objects cover a default-domain name and a domain-info table (name, state, max access count, VLAN-assignment mode, idle-cut enable/max-time/min-flow, messenger enable/limit-time/span-time, self-service enable/URL, access-failure action, row status, current access count, idle-cut time), alongside a scheme table (index, mode, auth/accounting scheme name). As a configuration/status MIB it lets an administrator confirm which authentication scheme and access limits apply to a given AAA domain on an HP Networking device. It is deployed on HP Networking (H3C-derived) equipment (AAA domain management). Engineers can download the HPN-ICF-DOMAIN-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HPN-ICF-DOMAIN-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

HP Networking (H3C-derived) equipment (AAA domain management)

Monitoring Examples

An administrator checks hpnicfDomainCurrentAccessNum and hpnicfDomainMaxAccessNum to confirm a domain hasn't hit its access-count limit on an HP Networking device.

What Can Be Monitored

AAA domain access-scheme and access-count configuration

Imported Objects

From HPN-ICF-OID-MIB

hpnicfCommon

OBJECT-IDENTITY

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
OBJECT-TYPE
TimeTicks

From SNMPv2-TC

RowStatus
TEXTUAL-CONVENTION
TruthValue

How to Use in IPNetwork Monitor

Example using hpnicfDomainState OID:

Select an HP Networking (H3C-derived) equipment (AAA domain management) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hpnicfDomainState into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The state of the domain, which reflects whether the domain is active. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is an INTEGER-type OID, Value bounds is the most useful condition here — trigger an alert if the value is anything other than 'active', since that indicates the condition this object reports has changed to one worth investigating. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
hpnicfDomain	1.3.6.1.4.1.11.2.14.11.15.2.46			The MIB module is used for managing domain.
hpnicfDomainControl	1.3.6.1.4.1.11.2.14.11.15.2.46.1
OCT hpnicfDomainDefault	1.3.6.1.4.1.11.2.14.11.15.2.46.1.1	OCTET STRING	read-write	Specifies default domain on the equipment. Default value is 'system'.
hpnicfDomainTables	1.3.6.1.4.1.11.2.14.11.15.2.46.2
hpnicfDomainInfoTable	1.3.6.1.4.1.11.2.14.11.15.2.46.2.1		not-accessible	The (conceptual) table listing the domains.
hpnicfDomainInfoEntry	1.3.6.1.4.1.11.2.14.11.15.2.46.2.1.1		not-accessible	An entry (conceptual row) representing a domain.
OCT hpnicfDomainName	1.3.6.1.4.1.11.2.14.11.15.2.46.2.1.1.1	OCTET STRING	not-accessible	An index uniquely identifies a domain.
INT hpnicfDomainStateEx	1.3.6.1.4.1.11.2.14.11.15.2.46.2.1.1.2	INTEGER	read-create	The state of the domain, which reflects whether the domain is active. Default value is active.
I32 hpnicfDomainMaxAccessNum	1.3.6.1.4.1.11.2.14.11.15.2.46.2.1.1.3	Integer32	read-create	The maximum number which the domain allows to access. If the value is set to 0, the access limit will be disabled.
INT hpnicfDomainVlanAssignMode	1.3.6.1.4.1.11.2.14.11.15.2.46.2.1.1.4	INTEGER	read-create	The vlan assignment mode. The mode SHOULD be the same as the mode of corresponding server. 1 (integer) - Integer Vlan assignment mode. 2 (string) - String Vlan assignment mode. 3 (vlanlist) - VLAN-List Vlan assignment mode. The default value is integer.
T/F hpnicfDomainIdleCutEnable	1.3.6.1.4.1.11.2.14.11.15.2.46.2.1.1.5	TruthValue	read-create	The idle cut control. Setting this attribute to true, the connection will be cut when the flow is less than hpnicfDomainIdleCutMinFlow and lasts hpnicfDomainIdleCutMaxTime. Default value is false.
I32 hpnicfDomainIdleCutMaxTime	1.3.6.1.4.1.11.2.14.11.15.2.46.2.1.1.6	Integer32	read-create	The maximal time of idle-cut. The unit is minute. If the value of hpnicfDomainIdleCutEnable is false, the value of hpnicfDomainIdleCutMaxTime is meaningless.
I32 hpnicfDomainIdleCutMinFlow	1.3.6.1.4.1.11.2.14.11.15.2.46.2.1.1.7	Integer32	read-create	The minimal flow of idle-cut. The unit is byte. If the value of hpnicfDomainIdleCutEnable is false, the value of hpnicfDomainIdleCutMinFlow is meaningless.
T/F hpnicfDomainMessengerEnable	1.3.6.1.4.1.11.2.14.11.15.2.46.2.1.1.8	TruthValue	read-create	The messenger service control. If set hpnicfDomainMessengerEnable to true, hpnicfDomainMessengerLimitTime and hpnicfDomainMessengerSpanTime must be set to valid values. Default value is false.
I32 hpnicfDomainMessengerLimitTime	1.3.6.1.4.1.11.2.14.11.15.2.46.2.1.1.9	Integer32	read-create	The messenger service limit time. The unit is minute. If the value of hpnicfDomainMessengerEnable is false, the value of hpnicfDomainMessengerLimitTime is meaningless.
I32 hpnicfDomainMessengerSpanTime	1.3.6.1.4.1.11.2.14.11.15.2.46.2.1.1.10	Integer32	read-create	The messenger service span time. The unit is minute. It must be a multiple of 5. If the value of hpnicfDomainMessengerEnable is false, the value of hpnicfDomainMessengerSpanTime is meaningless.
T/F hpnicfDomainSelfServiceEnable	1.3.6.1.4.1.11.2.14.11.15.2.46.2.1.1.11	TruthValue	read-create	The self service control. If set hpnicfDomainSelfServiceEnable to true, hpnicfDomainSelfServiceURL must be set to a valid value. Default value is FALSE.
OCT hpnicfDomainSelfServiceURL	1.3.6.1.4.1.11.2.14.11.15.2.46.2.1.1.12	OCTET STRING	read-create	Self-service URL(Uniform Resource Locator) of the domain.
INT hpnicfDomainAccFailureAction	1.3.6.1.4.1.11.2.14.11.15.2.46.2.1.1.13	INTEGER	read-create	Defines the action that authentication should be taken if authentication succeeds but the associated accounting start fails. 1 (ignore) - treat as authentication success; ignore accounting start failure. 2 (reject) - treat as authentication failed if corresponding accounting start fails. Default value is reject.
ROW hpnicfDomainRowStatus	1.3.6.1.4.1.11.2.14.11.15.2.46.2.1.1.14	RowStatus	read-create	This object is responsible for managing the creation, deletion and modification of rows, which supports active status and CreateAndGo, Destroy operation. To destroy an existent row, the domain of the row MUST NOT be used by user.
I32 hpnicfDomainCurrentAccessNum	1.3.6.1.4.1.11.2.14.11.15.2.46.2.1.1.15	Integer32	read-only	The current access number of the domain.
TIK hpnicfDomainIdleCutTime	1.3.6.1.4.1.11.2.14.11.15.2.46.2.1.1.16	TimeTicks	read-only	Authentication aging time. If no packet is transmitted during the aging time, the authentication is aged out.
hpnicfDomainSchemeTable	1.3.6.1.4.1.11.2.14.11.15.2.46.2.2		not-accessible	The (conceptual) table listing schemes of all domains.
hpnicfDomainSchemeEntry	1.3.6.1.4.1.11.2.14.11.15.2.46.2.2.1		not-accessible	An entry (conceptual row) representing an IP pool of a domain
I32 hpnicfDomainSchemeIndex	1.3.6.1.4.1.11.2.14.11.15.2.46.2.2.1.1	Integer32	not-accessible	The scheme index of domain, which is an identifier of a domain scheme.
HPN hpnicfDomainSchemeMode	1.3.6.1.4.1.11.2.14.11.15.2.46.2.2.1.2	HpnicfModeOfDomainScheme	read-create	The scheme mode of the domain. Setting hpnicfDomainSchemeMode to none(1) indicates the domain has none scheme. Setting hpnicfDomainSchemeMode to local(2) indicates the domain will use local-server as a scheme. Setting hpnicfDomainSchemeMode to radius(3), tacacs(4) or ldap(5) indicates the domain will use radius, tacacs or ldap scheme. If set hpnicfDomainSchemeMode to radius(3), tacacs(4) or ldap(5), hpnicfDomainAuthSchemeName and hpnicfDomainAcctSchemeName must be set to valid values. And if hpnicfDomainSchemeMode is set to none(1) or local(2), the value of hpnicfDomainAuthSchemeName and hpnicfDomainAcctSchemeName will be ignored.
OCT hpnicfDomainAuthSchemeName	1.3.6.1.4.1.11.2.14.11.15.2.46.2.2.1.3	OCTET STRING	read-create	The authentication scheme name of domain. If hpnicfDomainSchemeMode is set to radius, tacacs or ldap, the hpnicfDomainAuthSchemeName must be configured with a valid value.
OCT hpnicfDomainAcctSchemeName	1.3.6.1.4.1.11.2.14.11.15.2.46.2.2.1.4	OCTET STRING	read-create	The accounting scheme name of the domain. If hpnicfDomainSchemeMode is set to radius or tacacs, the hpnicfDomainAcctSchemeName must be configured with a valid value.
ROW hpnicfDomainSchemeRowStatus	1.3.6.1.4.1.11.2.14.11.15.2.46.2.2.1.5	RowStatus	read-create	This object is responsible for managing the creation, deletion and modification of rows, which supports active status and createAndGo, destroy operation. To create a new row, hpnicfDomainSchemeMode must be specified. To destroy an existent row, the scheme of the row MUST NOT be used by user.
HPN hpnicfDomainSchemeAAAType	1.3.6.1.4.1.11.2.14.11.15.2.46.2.2.1.6	HpnicfAAATypeDomainScheme	read-create	Service Type of the server.
OCT hpnicfDomainSchemeAAAName	1.3.6.1.4.1.11.2.14.11.15.2.46.2.2.1.7	OCTET STRING	read-create	The scheme name of the domain, whether the scheme represents accounting, authentication or authorization references the object hpnicfDomainSchemeAAAType. The value of the object must be valid if the value of hpnicfDomainSchemeMode is radius or tacacs, the value of the object will be ignored if the value of hpnicfDomainSchemeMode is none or local. If the domain has no scheme, there will be a null string. If this object is supported, the objects hpnicfDomainAuthSchemeName and hpnicfDomainAcctSchemeName will be ignored.
HPN hpnicfDomainSchemeAccessMode	1.3.6.1.4.1.11.2.14.11.15.2.46.2.2.1.8	HpnicfAccessModeofDomainScheme	read-create	The access mode of the domain scheme.
hpnicfDomainIpPoolTable	1.3.6.1.4.1.11.2.14.11.15.2.46.2.3		not-accessible	The (conceptual) table listing IP pools of all domains.
hpnicfDomainIpPoolEntry	1.3.6.1.4.1.11.2.14.11.15.2.46.2.3.1		not-accessible	An entry (conceptual row) representing an IP pool of a domain.
I32 hpnicfDomainIpPoolNum	1.3.6.1.4.1.11.2.14.11.15.2.46.2.3.1.1	Integer32	not-accessible	The number of IP pool, which is an identifier of an IP pool.
IPt hpnicfDomainIpPoolLowIpAddrType	1.3.6.1.4.1.11.2.14.11.15.2.46.2.3.1.2	InetAddressType	read-create	The low IP addresses type (IPv4 or IPv6) of IP pool.
IP hpnicfDomainIpPoolLowIpAddr	1.3.6.1.4.1.11.2.14.11.15.2.46.2.3.1.3	InetAddress	read-create	The low IP address of IP pool.
I32 hpnicfDomainIpPoolLen	1.3.6.1.4.1.11.2.14.11.15.2.46.2.3.1.4	Integer32	read-create	The length of IP pool. Default value is 1.
ROW hpnicfDomainIpPoolRowStatus	1.3.6.1.4.1.11.2.14.11.15.2.46.2.3.1.5	RowStatus	read-create	This object is responsible for managing the creation, deletion and modification of rows, which supports active status and CreateAndGo, Destroy operation. To create a new row, hpnicfDomainIpPoolNum and hpnicfDomainIpPoolLowIpAddr must be specified. To destroy an existent row, the IP pool of this row MUST NOT be used by user.

RFC description

Hewlett-Packard domain management MIB for authentication, authorization, and accounting (AAA) configuration.

Start monitoring HP Networking (H3C-derived) equipment (AAA domain management) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HPN-ICF-DOMAIN-MIB