HPN-ICF-UNICAST-MIB

All MIBs › HPN-ICF-UNICAST-MIB

Last Updated: 2005-01-31

Category: IP and Core Protocols, Technology: Routing, Vendor: H3C/HH3C, Vendor: HP/HPE

Description: Manages unicast routing policy, ECMP load sharing, and route table parameters on HP/Comware routers.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HPN-ICF-UNICAST-MIB?

HPN-ICF-UNICAST-MIB is an H3C/HPE Networking (ICF) framework MIB for unicast-related features, currently implementing uRPF (Unicast Reverse Path Forwarding) statistics. Its table, keyed by interface, records uRPF enabled flag, slot ID, total received packets, dropped packets, and a clear-statistics action. As a security/performance MIB it lets an administrator confirm uRPF is enabled on an interface and watch its dropped-packet count to gauge spoofed-source-address traffic volume. It is deployed on H3C/HPE Networking (ICF-based) routers running uRPF. Engineers can download the HPN-ICF-UNICAST-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HPN-ICF-UNICAST-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

H3C/HPE Networking (ICF-based) routers (uRPF)

Monitoring Examples

An administrator monitors hpnicfURPFDroppedPacket to gauge how much spoofed-source traffic uRPF is filtering on an H3C/HPE ICF router interface.

What Can Be Monitored

uRPF enabled state and dropped-packet count

Imported Objects

From HPN-ICF-OID-MIB

hpnicfCommon

OBJECT-IDENTITY

From SNMPv2-SMI

Counter64
Integer32
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

TruthValue

How to Use in IPNetwork Monitor

Example using hpnicfURPFTotalReceivedPacket OID:

Select an H3C/HPE Networking (ICF-based) router running uRPF as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hpnicfURPFTotalReceivedPacket into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. This object provides total received packets number. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
hpnicfUnicast	1.3.6.1.4.1.11.2.14.11.15.2.44			This MIB is a framework MIB for unicast related features.
hpnicfURPFTable	1.3.6.1.4.1.11.2.14.11.15.2.44.1		not-accessible	Unicast Reverse Path Forwarding (URPF) is used to prevent the network attacks caused by source address spoofing. This table is used to configure URPF on specific interfaces.
hpnicfURPFEntry	1.3.6.1.4.1.11.2.14.11.15.2.44.1.1		not-accessible	The entry of hpnicfURPFTable, indexed by vlan interface index.
I32 hpnicfURPFIfIndex	1.3.6.1.4.1.11.2.14.11.15.2.44.1.1.1	Integer32	not-accessible	The ifIndex of vlan interface.
T/F hpnicfURPFEnabled	1.3.6.1.4.1.11.2.14.11.15.2.44.1.1.2	TruthValue	read-write	This object is used to enable or disable URPF on certain vlan interfaces.
I32 hpnicfURPFSlotID	1.3.6.1.4.1.11.2.14.11.15.2.44.1.1.3	Integer32	read-write	This object specifies to which slot packets are redirected in order to perform URPF check.
C64 hpnicfURPFTotalReceivedPacketEx	1.3.6.1.4.1.11.2.14.11.15.2.44.1.1.4	Counter64	read-only	This object provides total received packets number.
C64 hpnicfURPFDroppedPacket	1.3.6.1.4.1.11.2.14.11.15.2.44.1.1.5	Counter64	read-only	This object provides total dropped invalid packets number.
INT hpnicfURPFClearStat	1.3.6.1.4.1.11.2.14.11.15.2.44.1.1.6	INTEGER	read-write	This object is used to clear the URPF statistics on certain vlan interfaces. This object is actually a write-only object. When read, it always returns 0. When set to 1, the objects hpnicfURPFTotalReceivedPacket and hpnicfURPFDroppedPacket are reset to 0.

RFC description

Configures unicast reverse path forwarding (URPF) to prevent source address spoofing attacks.

Start monitoring H3C/HPE Networking (ICF-based) router running uRPF with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HPN-ICF-UNICAST-MIB