HPN-ICF-RSA-MIB

All MIBs › HPN-ICF-RSA-MIB

Last Updated: 2004-10-10

Category: Domain: Security, Protocol: SSH, Vendor: H3C/HH3C, Vendor: HP/HPE

Description: Manages RSA key pair generation, storage, and certificate enrollment for SSH/TLS on HP/Comware devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HPN-ICF-RSA-MIB?

HPN-ICF-RSA-MIB is an HP/H3C Comware proprietary MIB managing RSA key pairs used for SSH/secure-management authentication. Its peer-public-key table records a peer's key name, IP address/FQDN, key code, and status, while a local-key-pair table records host and server key names/codes, creation time, key length, and status, alongside failure-reason objects for both peer-key configuration and local-key generation. As a configuration/status MIB it lets an administrator confirm a local SSH host key was generated successfully and diagnose why a peer public-key configuration failed. It is deployed on HP/H3C Comware switches/routers using RSA-based SSH authentication. Engineers can download the HPN-ICF-RSA-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HPN-ICF-RSA-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

HP/H3C Comware switches/routers (RSA/SSH authentication)

Monitoring Examples

An administrator checks hpnicfRSALocalKeyFailReason after a failed attempt to generate a new SSH host key pair on an HP/H3C Comware device.

What Can Be Monitored

RSA key pair generation and configuration status

Imported Objects

From HPN-ICF-OID-MIB

hpnicfCommon

OBJECT-IDENTITY

From SNMPv2-SMI

Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

From SNMPv2-TC

DateAndTime
DisplayString
RowStatus
TEXTUAL-CONVENTION

OIDs

OID symbolic	OID numeric	Type	Access	Description
hpnicfRSA	1.3.6.1.4.1.11.2.14.11.15.2.23			The HPN-ICF-RSA-MIB contains objects to Manage RSA configuration.
hpnicfRSAMIBObjects	1.3.6.1.4.1.11.2.14.11.15.2.23.1
hpnicfRSAPeerPublicKeyTable	1.3.6.1.4.1.11.2.14.11.15.2.23.1.1		not-accessible	The (conceptual) RSA Peer Public Key Table
hpnicfRSAPeerPublicKeyEntry	1.3.6.1.4.1.11.2.14.11.15.2.23.1.1.1		not-accessible	An entry (conceptual row) in the RSA Peer Public Key Table.
OCT hpnicfRSAPeerPublicKeyName	1.3.6.1.4.1.11.2.14.11.15.2.23.1.1.1.1	OCTET STRING	not-accessible	The RSA peer public key name.
IP hpnicfRSAPeerIpAddress	1.3.6.1.4.1.11.2.14.11.15.2.23.1.1.1.2	IpAddress	read-write	Indicates the IP Address of RSA Peer machine.
STR hpnicfRSAPeerFQDN	1.3.6.1.4.1.11.2.14.11.15.2.23.1.1.1.3	DisplayString	read-write	The Full Qualified Domain Name of RSA Peer Machine
OCT hpnicfRSAPeerPublicKeyCode	1.3.6.1.4.1.11.2.14.11.15.2.23.1.1.1.4	OCTET STRING	read-create	The code of RSA peer public key.
ROW hpnicfRSAPeerPublicKeyStatus	1.3.6.1.4.1.11.2.14.11.15.2.23.1.1.1.5	RowStatus	read-create	The status of this RSA peer public key entry. Support Active Status and CreateAndGo and Destroy Operation
hpnicfRSALocalKeyPairTable	1.3.6.1.4.1.11.2.14.11.15.2.23.1.2		not-accessible	The (conceptual)RSA local Key Pair Table.
hpnicfRSALocalKeyPairEntry	1.3.6.1.4.1.11.2.14.11.15.2.23.1.2.1		not-accessible	An entry (conceptual row) in the RSA local Key Pair Table.
INT hpnicfRSALocalKeyIndex	1.3.6.1.4.1.11.2.14.11.15.2.23.1.2.1.1	INTEGER	not-accessible	The hpnicfRSALocalKeyPairTable Table can only exist one entry at most.
STR hpnicfRSALocalHostKeyName	1.3.6.1.4.1.11.2.14.11.15.2.23.1.2.1.2	DisplayString	read-only	Indicates RSA Host local public key name.Its value is composed of systemname, a underscore and the string of 'Host'
OCT hpnicfRSALocalHostKeyCode	1.3.6.1.4.1.11.2.14.11.15.2.23.1.2.1.3	OCTET STRING	read-only	Indicates the code of RSA Host local pkey that the length is between 512 and 2048 bits.
DAT hpnicfRSALocalHostKeyCreatedTime	1.3.6.1.4.1.11.2.14.11.15.2.23.1.2.1.4	DateAndTime	read-only	Indicates the created time of RSA local Host key.
STR hpnicfRSALocalServerKeyName	1.3.6.1.4.1.11.2.14.11.15.2.23.1.2.1.5	DisplayString	read-only	Indicates RSA Host local public key name.Its value is composed of systemname, a underscore and the string of 'Server'
OCT hpnicfRSALocalServerKeyCode	1.3.6.1.4.1.11.2.14.11.15.2.23.1.2.1.6	OCTET STRING	read-only	Indicates the code of RSA Host local pkey that the length is between 512 and 2048 bits.
DAT hpnicfRSALocalServerKeyCreatedTime	1.3.6.1.4.1.11.2.14.11.15.2.23.1.2.1.7	DateAndTime	read-only	Indicates the created time of RSA local Host key.
I32 hpnicfRSALocalKeyPairBits	1.3.6.1.4.1.11.2.14.11.15.2.23.1.2.1.8	Integer32	read-create	The bits of RSA local key pair, ranging between 512 and 2048. By default, the value is 512.
ROW hpnicfRSALocalKeyStatus	1.3.6.1.4.1.11.2.14.11.15.2.23.1.2.1.9	RowStatus	read-create	The status column used for creating, deleting instances of the columnar objects in the hpnicfRSALocalKeyPairTable table.
RSA hpnicfRSAPeerKeyConfigFailReason	1.3.6.1.4.1.11.2.14.11.15.2.23.1.3	RSAKeyErrorCode	accessible-for-notify	The reason that RSA peer public key fails to config.
RSA hpnicfRSALocalKeyFailReason	1.3.6.1.4.1.11.2.14.11.15.2.23.1.4	RSAKeyErrorCode	accessible-for-notify	The reason that RSA local key pair fails to create, refresh and destroy.
hpnicfRSANotifications	1.3.6.1.4.1.11.2.14.11.15.2.23.2
NTF hpnicfRSALocalKeyPairOpeFail	1.3.6.1.4.1.11.2.14.11.15.2.23.2.1			The trap is generated while the RSA local key pair fails to create, refresh and destory.
NTF hpnicfRSAPeerKeyConfigFail	1.3.6.1.4.1.11.2.14.11.15.2.23.2.2			The trap is generated while the RSA peer public key fails to configure.

RFC description

HPE RSA SSH public key and cryptographic key pair management for network devices.

Start monitoring HP/H3C Comware switch/router (RSA key management for SSH) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HPN-ICF-RSA-MIB

What Is HPN-ICF-RSA-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description