HUAWEI-LI-MIB

All MIBs › HUAWEI-LI-MIB

Organization: hw Technologies co.,Ltd.

Last Updated: 2007-06-27

Category: Domain: Security, VPN and Security, Vendor: Huawei

Description: Huawei LI (Lawful Intercept) MIB providing management objects for configuring lawful intercept taps and monitoring mediation device communication.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HUAWEI-LI-MIB?

HUAWEI-LI-MIB is a Huawei proprietary MIB that manages the Lawful Intercept (LI) feature on Huawei network equipment, used by carriers to configure intercept taps in compliance with legal requirements. It exposes configuration objects for intercept targets/filters and status objects reflecting the communication state between the network element and the mediation device that collects intercepted traffic. In monitoring terms it is used less for general hardware/software health and more to confirm that the LI subsystem itself is operational, e.g. whether the mediation-device link is up and whether intercept configurations have been successfully applied, since a failure here has compliance implications rather than service-affecting ones. It is a Huawei-specific implementation of lawful intercept concepts found in standards bodies (e.g. ETSI/3GPP LI architectures) but is not a direct IETF standard MIB. It is deployed on carrier-grade Huawei routers, switches, and mobile packet-core equipment subject to lawful intercept regulations. Engineers can download the HUAWEI-LI-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HUAWEI-LI-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Huawei carrier routers
Huawei mobile packet-core equipment

Monitoring Examples

No sample objects were provided, so exact table names cannot be cited, but a typical check would involve polling the mediation-device connection status object to confirm the LI feature has an active, healthy session with the collection system. Loss of that connection would be flagged as a compliance-relevant fault requiring immediate attention.

What Can Be Monitored

lawful intercept configuration status
mediation device connectivity
intercept tap state

Imported Objects

From HUAWEI-MIB

hwDatacomm

OBJECT-IDENTITY

From INET-ADDRESS-MIB

InetAddress
InetAddressPrefixLength
InetAddressType
InetPortNumber

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

BITS
Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DateAndTime
MacAddress
RowStatus
TEXTUAL-CONVENTION

OIDs

OID symbolic	OID numeric	Type	Access	Description
hwLiMib	1.3.6.1.4.1.2011.5.25.131			This module manages huawei's Lawful interception feature.
hwLiMibNotifs	1.3.6.1.4.1.2011.5.25.131.1
NTF hwLiMibActive	1.3.6.1.4.1.2011.5.25.131.1.1			This notification is sent when an intercepting router or switch is first capable of intercepting a packet corresponding to a configured data stream.
NTF hwLiX3HeartBeatAlarm	1.3.6.1.4.1.2011.5.25.131.1.2			This notification is sent when an LIG is lost connection to the device which intercepting packet corresponding to a configured data stream.
NTF hwLiX3HeartBeatRecover	1.3.6.1.4.1.2011.5.25.131.1.3			This notification is sent when an LIG is recover connection to the device which intercepting packet corresponding to a configured data stream.
hwLiMibObjects	1.3.6.1.4.1.2011.5.25.131.2
hwLiAgentObjects	1.3.6.1.4.1.2011.5.25.131.2.1
DAT hwLiAgentTime	1.3.6.1.4.1.2011.5.25.131.2.1.1	DateAndTime	read-only	The time of the LI agent.Read-only.
INT hwLiAgentEnable	1.3.6.1.4.1.2011.5.25.131.2.1.2	INTEGER	read-only	The status of the LI agent.Read-only.
IP hwLiAgentX2IpAddress	1.3.6.1.4.1.2011.5.25.131.2.1.3	InetAddress	read-only	The IP address of the X2 interface in LI agent.Just can be read by server and can be set in command line.
INE hwLiAgentX2Port	1.3.6.1.4.1.2011.5.25.131.2.1.4	InetPortNumber	read-only	The Port of the X2 interface in LI agent.Just can be read by server and can be set in command line.
IP hwLiAgentX3IpAddress	1.3.6.1.4.1.2011.5.25.131.2.1.5	InetAddress	read-only	The IP address of the X3 interface in LI agent.Just can be read by server and can be set in command line.
INE hwLiAgentX3Port	1.3.6.1.4.1.2011.5.25.131.2.1.6	InetPortNumber	read-only	The Port of the X3 interface in LI agent.Just can be read by server and can be set in command line.
hwLiGatewayGroup	1.3.6.1.4.1.2011.5.25.131.2.3
I32 hwLiGatewayNewIndex	1.3.6.1.4.1.2011.5.25.131.2.3.1	Integer32	read-only	This object contains a value which may be used as an index value for a new HwLiGatewayEntry. This is to reduce the probability of errors during creation of new hwLiGatewayTable entries.0 means no free resource.
hwLiGatewayTable	1.3.6.1.4.1.2011.5.25.131.2.3.2		not-accessible	This table lists the LI Gateway Devices with which the intercepting device communicates. This table is written by the LI Gateway Device, and is always volatile. This is because intercepts may disappear during a restart of the intercepting equipment. Entries are added to this table via hwLiGatewayStatus in accordance with the RowStatus convention.
hwLiGatewayEntry	1.3.6.1.4.1.2011.5.25.131.2.3.2.1		not-accessible	The entry describes a single session maintained with an application on a LI Gateway Device.
I32 hwLiGatewayIndex	1.3.6.1.4.1.2011.5.25.131.2.3.2.1.1	Integer32	not-accessible	The index of the LIG itself.
IPt hwLiGatewayAddressType	1.3.6.1.4.1.2011.5.25.131.2.3.2.1.2	InetAddressType	read-create	The type of address in LIG
INT hwLiGatewayX2Protocol	1.3.6.1.4.1.2011.5.25.131.2.3.2.1.3	INTEGER	read-create	The protocol used in transferring intercepted data to the Gateway Device.
IP hwLiGatewayX2Address	1.3.6.1.4.1.2011.5.25.131.2.3.2.1.4	InetAddress	read-create	The IP Address of the Gateway Device's network interface to which to direct IRI.
INE hwLiGatewayX2Port	1.3.6.1.4.1.2011.5.25.131.2.3.2.1.5	InetPortNumber	read-create	The port number on the Gateway Device's network interface to which to direct IRI.
INT hwLiGatewayX3Protocol	1.3.6.1.4.1.2011.5.25.131.2.3.2.1.6	INTEGER	read-create	The protocol used in transferring intercepted data to the Gateway Device.
IP hwLiGatewayX3Address	1.3.6.1.4.1.2011.5.25.131.2.3.2.1.7	InetAddress	read-create	The IP Address of the Gateway Device's network interface to which to direct CC.
INE hwLiGatewayX3Port	1.3.6.1.4.1.2011.5.25.131.2.3.2.1.8	InetPortNumber	read-create	The port number on the Gateway Device's network interface to which to direct intercepted traffic.
I32 hwLiGatewayX3HeartBeatTimer	1.3.6.1.4.1.2011.5.25.131.2.3.2.1.9	Integer32	read-create	The timer for sending HeartBeat to LIG,In seconds
I32 hwLiGatewayX3NoResponseNum	1.3.6.1.4.1.2011.5.25.131.2.3.2.1.10	Integer32	read-create	The times of heartbeats that allowed to missed from LIG
INT hwLiGatewayX3OperateStatus	1.3.6.1.4.1.2011.5.25.131.2.3.2.1.11	INTEGER	read-only	The operate status of X3 interface
HWL hwLiGatewayX3Dscp	1.3.6.1.4.1.2011.5.25.131.2.3.2.1.12	HWLiDscp	read-create	The Differentiated Services Code Point the intercepting device applies to the IP packets encapsulating the intercepted traffic.
ROW hwLiGatewayRowStatus	1.3.6.1.4.1.2011.5.25.131.2.3.2.1.14	RowStatus	read-create	The status of this conceptual row. This object is used to manage creation, modification and deletion of rows in this table.
IPt hwLiGatewayX3AddressType	1.3.6.1.4.1.2011.5.25.131.2.3.2.1.15	InetAddressType	read-create	The type of address in LIG
IPt hwLiGatewayX2AddressType	1.3.6.1.4.1.2011.5.25.131.2.3.2.1.16	InetAddressType	read-create	The type of address in LIG
BIT hwLiGatewayCapabilities	1.3.6.1.4.1.2011.5.25.131.2.3.3	Bits	read-only	This object displays the device capabilities with respect to certain fields in Gateway Device table. This may be dependent on hardware capabilities, software capabilities. The following values may be supported: ipv4SrcInterface: SNMP ifIndex Value may be used to select the interface (denoted by hwLiGatewaySrcInterface) on the intercepting device from which to transmit intercepted data to an IPv4 address Gateway Device. ipv6SrcInterface: SNMP ifIndex Value may be used to select the interface (denoted by hwLiGatewaySrcInterface) on the intercepting device from which to transmit intercepted data to an IPv6 address Gateway Device. udp: UDP may be used as transport protocol (denoted by hwLiGatewayTransport) in transferring intercepted data to the Gateway Device. tcp: TCP may be used as transport protocol (denoted by hwLiGatewayTransport) in transferring intercepted data to the Gateway Device.
hwLiStreamGroup	1.3.6.1.4.1.2011.5.25.131.2.4
hwLiStreamTable	1.3.6.1.4.1.2011.5.25.131.2.4.2		not-accessible	The Intercept Stream Table lists the IPv4 and IPv6 streams to be intercepted. The same data stream must be used by one LIG. The first index indicates which LIG the intercepted traffic will be diverted to. The second index permits multiple classifiers to be used together, such as having an IP address as source or destination.
hwLiStreamEntry	1.3.6.1.4.1.2011.5.25.131.2.4.2.1		not-accessible	A stream entry indicates a single data stream to be intercepted to a Mediation Device. Many selected data streams may go to the same application interface, and many application interfaces are supported.
I32 hwLiStreamIndex	1.3.6.1.4.1.2011.5.25.131.2.4.2.1.1	Integer32	not-accessible	The index of the stream itself.
U32 hwLiStreamLiId	1.3.6.1.4.1.2011.5.25.131.2.4.2.1.2	Unsigned32	read-create	The ID indicate a independency stream in a LIG .
INT hwLiStreamActivationType	1.3.6.1.4.1.2011.5.25.131.2.4.2.1.3	INTEGER	read-create	Intercepted IRI or CC or BOTH.
I32 hwLiStreamSessionId	1.3.6.1.4.1.2011.5.25.131.2.4.2.1.4	Integer32	read-create	The index of the stream itself.0 means no session ID will be specified
INT hwLiStreamTargetIdType	1.3.6.1.4.1.2011.5.25.131.2.4.2.1.5	INTEGER	read-create	Target ID type specifies the type of packets. 1 means one direction traffic is intercept, 2 means bidirectional traffic is intercept. for bidirectional interception, if the source IP or destination IP in a packet is equal with the configured hwLiStreamSrcIpAddress If other condition is satisfied then the packet is intercepted. for one-directional interception, if the sourceIP and DestinationIP in a packet is equal with the configured hwLiStreamSrcIpAddress and hwLiStreamDstIPAddressIf other condition is satisfied then the packet is intercepted
MAC hwLiStreamSrcMacAddress	1.3.6.1.4.1.2011.5.25.131.2.4.2.1.7	MacAddress	read-create	Source Mac address of the packets which will be intercepted.0000-0000-0000 means no MAC address will be specified
MAC hwLiStreamDstMacAddress	1.3.6.1.4.1.2011.5.25.131.2.4.2.1.8	MacAddress	read-create	Destination Mac address of the packets which will be intercepted.
IP hwLiStreamSrcIpAddress	1.3.6.1.4.1.2011.5.25.131.2.4.2.1.9	InetAddress	read-create	The Source Address used in packet selection. This address will be of the type specified in hwLiStreamIpAddrType.0.0.0.0 means no IP address will be specified
ADR hwLiStreamSrcIpLength	1.3.6.1.4.1.2011.5.25.131.2.4.2.1.10	InetAddressPrefixLength	read-create	The length of the Source Prefix. A value of 32 causes all addresses to match. This prefix length will be consistent with the type specified in hwLiStreamIpAddrType.
IP hwLiStreamDstIpAddress	1.3.6.1.4.1.2011.5.25.131.2.4.2.1.11	InetAddress	read-create	The Destination address or prefix used in packet selection. This address will be of the type specified in hwLiStreamIpAddrType.0.0.0.0 means no IP address will be specified
ADR hwLiStreamDstIpLength	1.3.6.1.4.1.2011.5.25.131.2.4.2.1.12	InetAddressPrefixLength	read-create	The length of the Destination Prefix. A value of 32 causes all addresses to match. This prefix length will be consistent with the type specified in hwLiStreamIpAddrType.
I32 hwLiStreamProtocol	1.3.6.1.4.1.2011.5.25.131.2.4.2.1.13	Integer32	read-create	Protocol type of the packets which will be intercepted.0 means no Protocol type will be specified
INE hwLiStreamSrcPort	1.3.6.1.4.1.2011.5.25.131.2.4.2.1.14	InetPortNumber	read-create	The fourth layer source port.0 means no Port will be specified
INE hwLiStreamDstPort	1.3.6.1.4.1.2011.5.25.131.2.4.2.1.15	InetPortNumber	read-create	The fourth layer Destination port.0 means no Port will be specified
I32 hwLiStreamIfIndex	1.3.6.1.4.1.2011.5.25.131.2.4.2.1.16	Integer32	read-create	The interface switch carrying the intercepted taffic.0 means no interface will be specified
OCT hwLiStreamUserName	1.3.6.1.4.1.2011.5.25.131.2.4.2.1.17	OCTET STRING	read-create	The username whose traffic will be intercepted.zero-length means no user will be specified
ROW hwLiStreamRowStatus	1.3.6.1.4.1.2011.5.25.131.2.4.2.1.18	RowStatus	read-create	The status of this conceptual row. This object is used to manage creation, modification and deletion of rows in this table.
IPt hwLiStreamSrcIpAddressType	1.3.6.1.4.1.2011.5.25.131.2.4.2.1.19	InetAddressType	read-create	The source IP address of the interception stream
IPt hwLiStreamDstIpAddressType	1.3.6.1.4.1.2011.5.25.131.2.4.2.1.20	InetAddressType	read-create	The destination IP address of the interception stream
OCT hwLiStreamSrcVpnName	1.3.6.1.4.1.2011.5.25.131.2.4.2.1.21	OCTET STRING	read-create	The source VPN instance name whose traffic will be intercepted.zero-length means no VPN will be specified
OCT hwLiStreamDstVpnName	1.3.6.1.4.1.2011.5.25.131.2.4.2.1.22	OCTET STRING	read-create	The destination VPN instance name whose traffic will be intercepted. zero-length means no VPN will be specified
I32 hwLiStreamL2tpIfIndex	1.3.6.1.4.1.2011.5.25.131.2.4.2.1.23	Integer32	read-create	The L2TP ifindex of intercepting stream.0 means no l2tpIfindex will be specified
I32 hwLiStreamL2tpVlanId	1.3.6.1.4.1.2011.5.25.131.2.4.2.1.24	Integer32	read-create	The L2TP VLAN ID of intercepting stream.0 means no Vlan will be specified
OCT hwLiStreamAcctSessionId	1.3.6.1.4.1.2011.5.25.131.2.4.2.1.25	OCTET STRING	read-create	The accounting session ID of intercepting stream.zero-length means no accouting session ID will be specified
hwLiMibConform	1.3.6.1.4.1.2011.5.25.131.3
hwLiMibCompliances	1.3.6.1.4.1.2011.5.25.131.3.2
hwLiMibCompliance	1.3.6.1.4.1.2011.5.25.131.3.2.1			Description.
hwLiMibGroups	1.3.6.1.4.1.2011.5.25.131.3.3
hwLiAgentComplianceGroup	1.3.6.1.4.1.2011.5.25.131.3.3.1			Description.
hwLiGatewayComplianceGroup	1.3.6.1.4.1.2011.5.25.131.3.3.2			Description.
hwLiStreamComplianceGroup	1.3.6.1.4.1.2011.5.25.131.3.3.3			Description.
hwLiNotificationGroup	1.3.6.1.4.1.2011.5.25.131.3.3.4			Description.
hwLiGatewayCpbComplianceGroup	1.3.6.1.4.1.2011.5.25.131.3.3.5			Description.

RFC description

Lawful interception management for Huawei routers and switches.

Start monitoring Huawei carrier router or mobile packet-core equipment (Lawful Intercept) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HUAWEI-LI-MIB

What Is HUAWEI-LI-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description