HPN-ICF-UI-MAN-MIB

All MIBs › HPN-ICF-UI-MAN-MIB

Last Updated: 2004-04-08

Category: Device Management, Vendor: H3C/HH3C, Vendor: HP/HPE

Description: Manages user interface (UI) login sessions including console, VTY, and SSH lines on HP/Comware devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HPN-ICF-UI-MAN-MIB?

HPN-ICF-UI-MAN-MIB is an HP Networking/H3C Comware ICF MIB that manages user-interface (UI) login sessions on the device, covering console, VTY (Telnet/SSH), and other terminal line types. It exposes per-session data such as the logged-in terminal user name, connection source, and authentication failure reason, along with VTY access-control configuration (connection type, ACL number, row status) and console session status. This MIB is a software-status monitoring tool for administrative access: it lets an operator see who is currently logged into the device, from where, whether recent login attempts failed and why, and how VTY lines are access-controlled, valuable for security auditing and detecting unauthorized access attempts. It is a Comware/HPN-specific extension and does not appear to build on a shared IETF terminal-session MIB standard. It is deployed on HP/H3C Comware switches and routers where administrators rely on HPN-ICF-UI-MAN-MIB SNMP monitoring for visibility into management-plane login activity.

IPNetwork Monitor allows you to monitor SNMP objects defined in HPN-ICF-UI-MAN-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

HP/H3C Comware switches and routers

Monitoring Examples

An admin would walk hpnicfVtyAccTable/hpnicfVtyAccEntry to review configured VTY access controls (hpnicfVtyAccConnway, hpnicfVtyAccAclNum) per user index, and check hpnicfConStatusTable/hpnicfConStatusEntry for currently active console sessions (hpnicfConUserIndex). Monitoring hpnicfTerminalUserAuthFailureReason across sessions would reveal repeated failed login attempts, and hpnicfTerminalSource shows the originating address of a login, useful for spotting unauthorized management access.

What Can Be Monitored

active console/VTY/SSH sessions
login user name and source
authentication failure reasons
VTY access-control configuration
session row status

Imported Objects

From HPN-ICF-OID-MIB

hpnicfCommon

OBJECT-IDENTITY

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

From SNMPv2-TC

DisplayString
RowStatus

OIDs

OID symbolic	OID numeric	Type	Access	Description
hpnicfUIMgt	1.3.6.1.4.1.11.2.14.11.15.2.2			User interfaces management MIB
hpnicfUIMgtObjects	1.3.6.1.4.1.11.2.14.11.15.2.2.1
hpnicfUIBasicInfo	1.3.6.1.4.1.11.2.14.11.15.2.2.1.1
hpnicfUIScalarObjects	1.3.6.1.4.1.11.2.14.11.15.2.2.1.1.1
hpnicfUITrapBindObjects	1.3.6.1.4.1.11.2.14.11.15.2.2.1.1.2
STR hpnicfTerminalUserName	1.3.6.1.4.1.11.2.14.11.15.2.2.1.1.2.1	DisplayString	accessible-for-notify	It represents the name of the logging user when login with authentication, otherwise login mode, such as Console, AUX, TTY, VTY etc.
STR hpnicfTerminalSource	1.3.6.1.4.1.11.2.14.11.15.2.2.1.1.2.2	DisplayString	accessible-for-notify	Login mode, such as Console, AUX, TTY, VTY etc.
INT hpnicfTerminalUserAuthFailureReason	1.3.6.1.4.1.11.2.14.11.15.2.2.1.1.2.3	INTEGER	accessible-for-notify	The reason why a user failed to log in.
hpnicfUINotifications	1.3.6.1.4.1.11.2.14.11.15.2.2.1.1.3
hpnicfUINotificationsPrefix	1.3.6.1.4.1.11.2.14.11.15.2.2.1.1.3.0
NTF hpnicfLogIn	1.3.6.1.4.1.11.2.14.11.15.2.2.1.1.3.0.1			This notification is generated when a user logs in.
NTF hpnicfLogOut	1.3.6.1.4.1.11.2.14.11.15.2.2.1.1.3.0.2			This notification is generated when a user logs out.
NTF hpnicfLogInAuthenFailure	1.3.6.1.4.1.11.2.14.11.15.2.2.1.1.3.0.3			This notification is generated when a user fails to log in because of authentication.
hpnicfVtyMan	1.3.6.1.4.1.11.2.14.11.15.2.2.1.2
hpnicfVtyAccTable	1.3.6.1.4.1.11.2.14.11.15.2.2.1.2.1		not-accessible	Description.
hpnicfVtyAccEntry	1.3.6.1.4.1.11.2.14.11.15.2.2.1.2.1.1		not-accessible	Description.
I32 hpnicfVtyAccUserIndex	1.3.6.1.4.1.11.2.14.11.15.2.2.1.2.1.1.1	Integer32	not-accessible	The relative index of the user interface of vty.
INT hpnicfVtyAccConnway	1.3.6.1.4.1.11.2.14.11.15.2.2.1.2.1.1.2	INTEGER	not-accessible	inbound(1):Filter login connections from current UI with ipv4 layer acl. outbound(2):Filter logout connections from current UI with ipv4 layer acl. linkinbound(3):Filter login connections from current UI with link layer acl. acl6inbound(11):Filter login connections from current UI with ipv6 layer acl. acl6outbound(12):Filter logout connections from current UI with ipv6 layer acl.
I32 hpnicfVtyAccAclNum	1.3.6.1.4.1.11.2.14.11.15.2.2.1.2.1.1.3	Integer32	read-create	The filter rule number of ACL.
ROW hpnicfVtyAccEntryRowStatus	1.3.6.1.4.1.11.2.14.11.15.2.2.1.2.1.1.4	RowStatus	read-create	The status of this conceptual row. Now only support CreateAndGo and Destroy and Active.
hpnicfConStatus	1.3.6.1.4.1.11.2.14.11.15.2.2.1.3
hpnicfConStatusTable	1.3.6.1.4.1.11.2.14.11.15.2.2.1.3.1		not-accessible	The current status of CONSOLE user interface. A group of attributes are used to describe the current status.
hpnicfConStatusEntry	1.3.6.1.4.1.11.2.14.11.15.2.2.1.3.1.1		not-accessible	An entry of hpnicfConStatusTable.
I32 hpnicfConUserIndex	1.3.6.1.4.1.11.2.14.11.15.2.2.1.3.1.1.1	Integer32	not-accessible	The index of the user interface of CONSOLE. It's equal to current UserID.
INT hpnicfConReAuth	1.3.6.1.4.1.11.2.14.11.15.2.2.1.3.1.1.2	INTEGER	read-write	The re-authentication attribute of current user interface. After disconnection of current user interface, connection is rebuilt, at the moment disable(1): re-authentication is not need. enable(2): re-authentication is need.
hpnicfUIMgtMIBConformance18	1.3.6.1.4.1.11.2.14.11.15.2.2.2
hpnicfUIMgtMIBCompliances	1.3.6.1.4.1.11.2.14.11.15.2.2.2.1
hpnicfUIMgtMIBCompliance	1.3.6.1.4.1.11.2.14.11.15.2.2.2.1.1			The compliance statement
hpnicfUIMgtManMIBGroups	1.3.6.1.4.1.11.2.14.11.15.2.2.2.2
hpnicfUIMgtBasicGroup	1.3.6.1.4.1.11.2.14.11.15.2.2.2.2.1			A collection of objects for a basic implement.
hpnicfConStatusGroup	1.3.6.1.4.1.11.2.14.11.15.2.2.2.2.2			A collection of current user interface status.

RFC description

Manages user interface access control and authentication for Hewlett-Packard network devices, including console, VTY, and AUX terminal configuration.

Start monitoring HP/H3C Comware switch or router (console/VTY user-interface session management) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HPN-ICF-UI-MAN-MIB

What Is HPN-ICF-UI-MAN-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description