HUAWEI-ATK-EUDM-MIB

All MIBs › HUAWEI-ATK-EUDM-MIB

Organization: Huawei Technologies co.,Ltd.

Last Updated: 2003-03-19

Category: Domain: Security, VPN and Security, Vendor: Huawei

Description: Huawei attack defense extended user data management MIB providing per-user attack detection statistics and defense policy counters.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HUAWEI-ATK-EUDM-MIB?

HUAWEI-ATK-EUDM-MIB is a Huawei enterprise MIB for the Attack Defense Extended User Data Management (ATCKDF-EUDM) subsystem on Huawei firewall products, managing per-user attack detection configuration and statistics. It is designed to expose attack-defense policy configuration and counters tracking detected malicious traffic patterns attributable to individual users or user groups on the firewall. Its monitoring value is oriented toward security-software status rather than physical hardware: it would reveal whether attack-defense policies are active per user and how many attack events have been detected/blocked, serving as a fault/security-event indicator for the firewall's software defenses. No sample objects were extracted for this module in this batch, so specific object names cannot be confirmed. It is deployed on Huawei firewall/UTM appliances as part of a broader attack-defense (ATCKDF) MIB family alongside global attack-defense MIBs. Network engineers evaluating or troubleshooting this functionality can download the HUAWEI-ATK-EUDM-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HUAWEI-ATK-EUDM-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Huawei firewall/UTM appliance

Monitoring Examples

No sample objects were provided for this module, so a concrete polling example with real object names cannot be responsibly given. Based on the module description, monitoring would generally involve per-user attack detection counts and defense policy state on the firewall, but this batch lacks the specific object names needed to ground that scenario.

Imported Objects

From HUAWEI-MIB

hwDatacomm

OBJECT-IDENTITY

From MPLS-VPN-MIB

mplsVpnVrfName

OBJECT-TYPE

From SNMPv2-CONF

OBJECT-GROUP

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

RowStatus

OIDs

OID symbolic	OID numeric	Type	Access	Description
hwATK	1.3.6.1.4.1.2011.5.25.10
hwATKEudm	1.3.6.1.4.1.2011.5.25.10.2			The HUAWEI-ATCKDF_EUDM-MIB contains objects to manage the ATCKDF(Attack Defence) configuration for firewall.
hwAtkZoneMibObjects	1.3.6.1.4.1.2011.5.25.10.2.1
hwAtkSynFloodZoneTable	1.3.6.1.4.1.2011.5.25.10.2.1.1		not-accessible	SYN Flood configuration table for a security zone. which consists of a sequence of hwAtckDfSynFloodZoneEntry items.
hwAtkSynFloodZoneEntry	1.3.6.1.4.1.2011.5.25.10.2.1.1.1		not-accessible	An entry in the hwAtckDfSynFloodZoneTable containing the parameters of SYN flood defence for all hosts behind a security zone. this table is for firewall only.
I32 hwAtkSynFloodZoneID	1.3.6.1.4.1.2011.5.25.10.2.1.1.1.1	Integer32	not-accessible	The internal ID of security zone to be protected.
I32 hwAtkZoneSynFloodSynSpeed	1.3.6.1.4.1.2011.5.25.10.2.1.1.1.2	Integer32	read-create	The threshold value of SYN packets speed. when the speed of SYN packets to one host in this zone readch this value, the firewall will startup TCP proxy.
I32 hwAtkZoneSynFloodHalfMax	1.3.6.1.4.1.2011.5.25.10.2.1.1.1.3	Integer32	read-create	This is the maximum half connection for each host in the zone.
I32 hwAtkZoneSynFloodHalfAge	1.3.6.1.4.1.2011.5.25.10.2.1.1.1.4	Integer32	read-create	The age of TCP half connection.
INT hwAtkZoneSynFloodProxy	1.3.6.1.4.1.2011.5.25.10.2.1.1.1.5	INTEGER	read-create	The switch of TCP proxy, this switch decides the action of proxy. The switch has three status: auto, on, off.
ROW hwAtkZoneSynFloodStatus	1.3.6.1.4.1.2011.5.25.10.2.1.1.1.6	RowStatus	read-create	The row status variable, current support CreateAndGo and Destroy.
hwAtkUdpFloodZoneTable	1.3.6.1.4.1.2011.5.25.10.2.1.2		not-accessible	UDP Flood configuration table for a security zone. which consists of a sequence of hwAtckDfUdpFloodZoneEntry items.
hwAtkUdpFloodZoneEntry	1.3.6.1.4.1.2011.5.25.10.2.1.2.1		not-accessible	An entry in the hwAtckDfUdpFloodZoneTable containing the parameters of UDP flood defence for all hosts behind a security zone. this table is for firewall only.
I32 hwAtkUdpFloodZoneID	1.3.6.1.4.1.2011.5.25.10.2.1.2.1.1	Integer32	not-accessible	The ID of security zone to be protected.
I32 hwAtkZoneUdpFloodSpeed	1.3.6.1.4.1.2011.5.25.10.2.1.2.1.2	Integer32	read-create	The threshold value of UDP packets speed. when the speed of UDP packets to one host in this zone reach this value, the firewall will drops the subsequence UDP packets to this host.
ROW hwAtkZoneUdpFloodStatus	1.3.6.1.4.1.2011.5.25.10.2.1.2.1.3	RowStatus	read-create	The row status variable, current support CreateAndGo and Destroy.
hwAtkIcmpFloodZoneTable	1.3.6.1.4.1.2011.5.25.10.2.1.3		not-accessible	ICMP Flood configuration table for a security zone. which consists of a sequence of hwAtckDfIcmpFloodZoneEntry items.
hwAtkIcmpFloodZoneEntry	1.3.6.1.4.1.2011.5.25.10.2.1.3.1		not-accessible	An entry in the hwAtckDfIcmpFloodZoneTable containing the parameters of ICMP flood defence for all hosts behind a security zone. this table is for firewall only.
I32 hwAtkIcmpFloodZoneID	1.3.6.1.4.1.2011.5.25.10.2.1.3.1.1	Integer32	not-accessible	The ID of security zone to be protected.
I32 hwAtkZoneIcmpFloodSpeed	1.3.6.1.4.1.2011.5.25.10.2.1.3.1.2	Integer32	read-create	The threshold value of ICMP packets speed. when the speed of ICMP packets to one host in this zone reach this value, the firewall will drops the subsequence ICMP packets to this host.
ROW hwAtkZoneIcmpFloodStatus	1.3.6.1.4.1.2011.5.25.10.2.1.3.1.3	RowStatus	read-create	The row status variable, current support CreateAndGo and Destroy.
hwAtkEudmConformance	1.3.6.1.4.1.2011.5.25.10.2.2
hwAtkEudmCompliance	1.3.6.1.4.1.2011.5.25.10.2.2.1
hwAtkEudmMibGroups	1.3.6.1.4.1.2011.5.25.10.2.2.2
hwAtkEudmSynFloodGroup	1.3.6.1.4.1.2011.5.25.10.2.2.2.1			The MIB objects need for SYN flood defence
hwAtkEudmUdpFloodGroup	1.3.6.1.4.1.2011.5.25.10.2.2.2.2			The MIB objects need for UDP flood defence
hwAtkEudmIcmpFloodGroup	1.3.6.1.4.1.2011.5.25.10.2.2.2.3			The MIB objects need for ICMP flood defence

RFC description

Manages Huawei attack defense (ATK) configuration for firewall including SYN flood and UDP flood protection.

Start monitoring Huawei firewall/UTM appliance (per-user attack defense) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HUAWEI-ATK-EUDM-MIB

What Is HUAWEI-ATK-EUDM-MIB?

Supported Devices

Monitoring Examples

This MIB depends on

Related MIBs

RFC description