HPN-ICF-IPA-MIB

All MIBs › HPN-ICF-IPA-MIB

Last Updated: 2004-11-01

Category: IP and Core Protocols, Vendor: H3C/HH3C, Vendor: HP/HPE

Description: Manages IP accounting (IPA) statistics for traffic measurement per source/destination on HP/Comware routers.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HPN-ICF-IPA-MIB?

HPN-ICF-IPA-MIB is a vendor-specific HP (Comware) MIB that provides IP Accounting (IPA) functionality, tracking packet and byte counts for IP traffic crossing a router's interfaces. It's built around a global enable object and per-interface hpnicfIpaIfConfigTable (in/out/firewall accounting flags), a user-defined hpnicfIpaAccountListTable of IP address/mask ranges used to classify traffic, and three result tables — hpnicfIpaIntListTable for packets matching the account list, hpnicfIpaExtListTable for packets that don't match, and hpnicfIpaFWListTable for packets denied by the firewall — each exposing inbound/outbound packet and byte counters keyed by source/destination IP and protocol. It also provides list-aging and max-item-count controls plus a cleaning-flag object to clear accounting tables on demand. Monitoring it lets operators see per-flow traffic volumes and firewall-denied traffic without deploying separate flow-export tooling, useful for traffic profiling and capacity planning on Comware-based routers, and administrators can download the HPN-ICF-IPA-MIB file to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HPN-ICF-IPA-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

HP Comware-based routers and switches

Monitoring Examples

An operator polls hpnicfIpaFWListTable (indexed by hpnicfIpaFWListIpSrc/IpDst) to check hpnicfIpaFWListInPackets/InBytes for traffic denied by the firewall; a fast-rising counter for a specific source/destination pair would indicate a persistent, blocked traffic flow worth investigating, such as a misconfigured host or an ongoing scan.

What Can Be Monitored

global/per-interface IP accounting enable state
account list IP address/mask classification entries
internal traffic list packet/byte counters (matched flows)
external traffic list packet/byte counters (unmatched flows)
firewall-denied traffic packet/byte counters
list aging timeout and max-item limits

Imported Objects

From HPN-ICF-OID-MIB

hpnicfCommon

OBJECT-IDENTITY

From SNMPv2-SMI

Counter32
Counter64
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

RowStatus
TEXTUAL-CONVENTION

How to Use in IPNetwork Monitor

Example using hpnicfIpaIntListInPackets OID:

Select an HP Comware router/switch (IP accounting) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hpnicfIpaIntListInPackets into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The number of inbound packets in hpnicfIpaIntListTable. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
hpnicfIpa	1.3.6.1.4.1.11.2.14.11.15.2.25			This MIB is used to acquire ip accounting information. The hpnicfIpaAccountListTable is set by user to define the group of ip address which they want to account. This module can be enabled in each port, which was defined in the hpnicfIpaIfConfigTable. If this module has been enabled, the packets will be accounted when crossing the router from the ports having been enabled by user, according to whether the source/destination ip address is in hpnicfIpaAccountListTable and what kinds of function(in/out/both/fw) are enabled and also whether it is denied by the firewall. If it is denied by the firewall, it will be accounted in hpnicfIpaFWListTable If it is accepted by the firewall, and ip source or ip destination is in hpnicfIpaAccountListTable, it will be accounted in hpnicfIpaIntListTable, otherwise it will be accounted in hpnicfIpaExtListTable. And IP Accounting function also differentiates the packets by direction. If the packet is inbound, the accounting information can be seen as hpnicfIpaIntListInPackets/hpnicfIpaIntListInBytes in hpnicfIpaIntListTable, hpnicfIpaExtListInPackets/hpnicfIpaExtListInBytes in hpnicfIpaExtListTable, hpnicfIpaFWListInPackets/hpnicfIpaFWListInBytes in hpnicfIpaFWListTable. or else the accounting information can be seen as hpnicfIpaIntListOutPackets/hpnicfIpaIntListOutBytes in hpnicfIpaIntListTable, hpnicfIpaExtListOutPackets/hpnicfIpaExtListOutBytes in hpnicfIpaExtListTable, hpnicfIpaFWListOutPackets/hpnicfIpaFWListOutBytes in hpnicfIpaFWListTable.
hpnicfIpaGlobalStats	1.3.6.1.4.1.11.2.14.11.15.2.25.1
INT hpnicfIpaGlobalEnable	1.3.6.1.4.1.11.2.14.11.15.2.25.1.1	INTEGER	read-write	The indication of whether Ip Accounting function is enabled. If it is disabled, ip packets will not be accounted.
I32 hpnicfIpaTimeOutSeconds	1.3.6.1.4.1.11.2.14.11.15.2.25.1.2	Integer32	read-write	The value of List aging timeout. The unit is second. If exceeding the interval, the item in hpnicfIpaIntListTable, hpnicfIpaExtListTable and hpnicfIpaFWListTable will be removed automaticlly. The range is (3600..604800).
I32 hpnicfIpaIntListMaxItemNum	1.3.6.1.4.1.11.2.14.11.15.2.25.1.3	Integer32	read-write	The max number of items in hpnicfIpaIntListTable. The range is (0..16384).
I32 hpnicfIpaExtListMaxItemNum	1.3.6.1.4.1.11.2.14.11.15.2.25.1.4	Integer32	read-write	The max number of items in hpnicfIpaExtListTable. The range is (0..8192).
I32 hpnicfIpaFWListMaxItemNum	1.3.6.1.4.1.11.2.14.11.15.2.25.1.5	Integer32	read-only	The max number of items in hpnicfIpaFWListTable.
I32 hpnicfIpaAccountListMaxItemNum	1.3.6.1.4.1.11.2.14.11.15.2.25.1.6	Integer32	read-only	The max number of items in hpnicfIpaAccountListTable.
I32 hpnicfIpaAccountListNextIndex	1.3.6.1.4.1.11.2.14.11.15.2.25.1.7	Integer32	read-only	The next available index for creating rows of hpnicfIpaAccountListTable. If the value is zero, it means the table is full and no available index can be used.
INT hpnicfIpaListCleaningFlag	1.3.6.1.4.1.11.2.14.11.15.2.25.1.8	INTEGER	read-write	Cleaning List in this module. The default value is idle. If user wants to clean some lists, he can set the value to 2, 3, 4 and 5 to clean the corresponding list. After the operation, the value will return to idle.
hpnicfIpaIfConfigTable	1.3.6.1.4.1.11.2.14.11.15.2.25.2		not-accessible	Enable or disable the ip accounting inbound/outbound function under a particular interface.
hpnicfIpaIfConfigEntry	1.3.6.1.4.1.11.2.14.11.15.2.25.2.1		not-accessible	Entry of the table.
NUM hpnicfIpaIfConfigIfIndex	1.3.6.1.4.1.11.2.14.11.15.2.25.2.1.1	InterfaceIndex	not-accessible	It equals to ifIndex
INT hpnicfIpaIfConfigInEnable	1.3.6.1.4.1.11.2.14.11.15.2.25.2.1.2	INTEGER	read-write	This object is applicable to hpnicfIpaIntListTable and hpnicfIpaExtListTable. If the value is disabled, inbound ip packets are not accounted.
INT hpnicfIpaIfConfigOutEnable	1.3.6.1.4.1.11.2.14.11.15.2.25.2.1.3	INTEGER	read-write	This object is applicable to hpnicfIpaIntListTable and hpnicfIpaExtListTable. If the value is disabled, outbound ip packets are not accounted.
INT hpnicfIpaIfConfigFWEnable	1.3.6.1.4.1.11.2.14.11.15.2.25.2.1.4	INTEGER	read-write	This object is applicable to hpnicfIpaFWListTable only. If the value is 'inbound', then inbound ip packets which are denied by firewall are accounted. If the value is 'outbound', then outbound ip packets which were denied by firewall are accounted. If the value is 'nodirection', neither inbound nor outbound ip packets which were denied by firewall are accounted. If the value is 'bidirection', both inbound and outbound ip packets which were denied by firewall are accounted.
hpnicfIpaAccountListTable	1.3.6.1.4.1.11.2.14.11.15.2.25.3		not-accessible	The List is used by user to sort packets into two groups by source or destination ip address. When source/destination ip address of a packet matches a item in this table, the packet is accounted in hpnicfIpaIntListTable. When source/destination ip address of a packet does not match any item in this table, the packet is accounted in hpnicfIpaExtListTable.
hpnicfIpaAccountListEntry	1.3.6.1.4.1.11.2.14.11.15.2.25.3.1		not-accessible	Entry of the table.
I32 hpnicfIpaAccountListIndex	1.3.6.1.4.1.11.2.14.11.15.2.25.3.1.1	Integer32	not-accessible	The Index of the table.
IP hpnicfIpaAccountListIpAddr	1.3.6.1.4.1.11.2.14.11.15.2.25.3.1.2	IpAddress	read-create	The IP address to which this entry's addressing information pertains.
IP hpnicfIpaAccountListIpMask	1.3.6.1.4.1.11.2.14.11.15.2.25.3.1.3	IpAddress	read-create	The subnet mask associated with the IP address of this entry. The value of the mask is an IP address with all the network bits set to 1 and all the hosts bits set to 0.
ROW hpnicfIpaAccountListRowStatus	1.3.6.1.4.1.11.2.14.11.15.2.25.3.1.4	RowStatus	read-create	The row status of the entry, Supporting CreateAndGo and Destroy operation.
hpnicfIpaIntListTable	1.3.6.1.4.1.11.2.14.11.15.2.25.4		not-accessible	If matching the ip address recorded in hpnicfIpaAccountListTable and not denied by the firewall, the packets will be accounted in this list.
hpnicfIpaIntListEntry	1.3.6.1.4.1.11.2.14.11.15.2.25.4.1		not-accessible	Entry of the table.
IP hpnicfIpaIntListIpSrc	1.3.6.1.4.1.11.2.14.11.15.2.25.4.1.1	IpAddress	not-accessible	Source IP-address of these accounted packets.
IP hpnicfIpaIntListIpDst	1.3.6.1.4.1.11.2.14.11.15.2.25.4.1.2	IpAddress	not-accessible	Destination IP-address of these accounted packets.
I32 hpnicfIpaIntListProtocol	1.3.6.1.4.1.11.2.14.11.15.2.25.4.1.3	Integer32	not-accessible	The type of these accounted IP packets defined in RFC 1700.
C32 hpnicfIpaIntListInPacketsEx	1.3.6.1.4.1.11.2.14.11.15.2.25.4.1.4	Counter32	read-only	The number of inbound packets in hpnicfIpaIntListTable.
C64 hpnicfIpaIntListInBytes	1.3.6.1.4.1.11.2.14.11.15.2.25.4.1.5	Counter64	read-only	The number of inbound bytes in hpnicfIpaIntListTable.
C32 hpnicfIpaIntListOutPackets	1.3.6.1.4.1.11.2.14.11.15.2.25.4.1.6	Counter32	read-only	The number of outbound Packets in hpnicfIpaIntListTable.
C64 hpnicfIpaIntListOutBytes	1.3.6.1.4.1.11.2.14.11.15.2.25.4.1.7	Counter64	read-only	The number of outbound bytes in hpnicfIpaIntListTable.
hpnicfIpaExtListTable	1.3.6.1.4.1.11.2.14.11.15.2.25.5		not-accessible	If mismatching the ip address recorded in the hpnicfIpaAccountListTable and not denied by the firewall, the packets will be accounted in this list.
hpnicfIpaExtListEntry	1.3.6.1.4.1.11.2.14.11.15.2.25.5.1		not-accessible	Entry of the table.
IP hpnicfIpaExtListIpSrc	1.3.6.1.4.1.11.2.14.11.15.2.25.5.1.1	IpAddress	not-accessible	Source IP-address of these accounted packets.
IP hpnicfIpaExtListIpDst	1.3.6.1.4.1.11.2.14.11.15.2.25.5.1.2	IpAddress	not-accessible	Destination IP-address of these accounted packets.
I32 hpnicfIpaExtListProtocol	1.3.6.1.4.1.11.2.14.11.15.2.25.5.1.3	Integer32	not-accessible	The value indicates the value of the 'protocol' field which is part of ip packet header.
C32 hpnicfIpaExtListInPackets	1.3.6.1.4.1.11.2.14.11.15.2.25.5.1.4	Counter32	read-only	The number of inbound packets in hpnicfIpaExtListTable.
C64 hpnicfIpaExtListInBytes	1.3.6.1.4.1.11.2.14.11.15.2.25.5.1.5	Counter64	read-only	The number of inbound bytes in hpnicfIpaExtListTable.
C32 hpnicfIpaExtListOutPackets	1.3.6.1.4.1.11.2.14.11.15.2.25.5.1.6	Counter32	read-only	The number of outbound packets in hpnicfIpaExtListTable.
C64 hpnicfIpaExtListOutBytes	1.3.6.1.4.1.11.2.14.11.15.2.25.5.1.7	Counter64	read-only	The number of outbound bytes in hpnicfIpaExtListTable.
hpnicfIpaFWListTable	1.3.6.1.4.1.11.2.14.11.15.2.25.6		not-accessible	If the packet is denied by the firewall, it will be accounted in this list.
hpnicfIpaFWListEntry	1.3.6.1.4.1.11.2.14.11.15.2.25.6.1		not-accessible	Entry of the table.
IP hpnicfIpaFWListIpSrc	1.3.6.1.4.1.11.2.14.11.15.2.25.6.1.1	IpAddress	not-accessible	Source IP-address of these accounted packets.
IP hpnicfIpaFWListIpDst	1.3.6.1.4.1.11.2.14.11.15.2.25.6.1.2	IpAddress	not-accessible	Destination IP-address of these accounted packets.
C32 hpnicfIpaFWListInPackets	1.3.6.1.4.1.11.2.14.11.15.2.25.6.1.3	Counter32	read-only	The number of outbound packets in hpnicfIpaFWListTable.
C64 hpnicfIpaFWListInBytes	1.3.6.1.4.1.11.2.14.11.15.2.25.6.1.4	Counter64	read-only	The number of inbound bytes in hpnicfIpaFWListTable.
C32 hpnicfIpaFWListOutPackets	1.3.6.1.4.1.11.2.14.11.15.2.25.6.1.5	Counter32	read-only	The number of outbound packets in hpnicfIpaFWListTable.
C64 hpnicfIpaFWListOutBytes	1.3.6.1.4.1.11.2.14.11.15.2.25.6.1.6	Counter64	read-only	The number of outbound bytes in hpnicfIpaFWListTable.

RFC description

IP Accounting MIB for tracking and accounting of IP traffic crossing network interfaces based on source/destination addresses and firewall rules.

Start monitoring HP Comware router/switch (IP accounting) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HPN-ICF-IPA-MIB