HUAWEI-SECURITY-GTP-MIB

All MIBs › HUAWEI-SECURITY-GTP-MIB

Organization: Huawei Symantec Technologies Co., Ltd.

Last Updated: 2010-02-02

Category: Domain: Security, Vendor: Huawei

Description: Huawei security GTP (GPRS Tunneling Protocol) firewall MIB for managing GTP inspection policies and mobile traffic filtering.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HUAWEI-SECURITY-GTP-MIB?

HUAWEI-SECURITY-GTP-MIB is a Huawei enterprise MIB for managing GTP (GPRS Tunneling Protocol) inspection and firewall policies on Huawei's Eudemon and USG series security gateways, used to filter and inspect mobile-network tunneling traffic. It exposes configuration objects for GTP inspection policies and traffic-filtering rules applied to mobile operator traffic passing through the firewall. Its monitoring relevance is mainly around software/policy status -- confirming GTP inspection rules are correctly configured and active -- rather than classic hardware health metrics like temperature or fan speed. It builds on Huawei's broader security-MIB framework used across its Eudemon/USG firewall product lines. It is deployed at mobile operator network edges and GRX/IPX interconnection points where GTP traffic inspection is required for security compliance. Engineers can download the HUAWEI-SECURITY-GTP-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HUAWEI-SECURITY-GTP-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Huawei Eudemon firewall
Huawei USG security gateway

Monitoring Examples

No sample_objects are provided for this MIB, so specific object names cannot be cited; one would expect a policy table associating GTP inspection rules with interfaces or traffic profiles, plus enable/disable status flags. An admin would typically poll such objects to confirm GTP inspection is active on the correct interfaces before auditing mobile traffic filtering compliance. This remains a general characterization based on the short description rather than confirmed object names.

What Can Be Monitored

GTP inspection policy configuration
GTP traffic filtering status

Imported Objects

From RFC1155-SMI

enterprises

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Counter64
Gauge32
MODULE-IDENTITY
OBJECT-TYPE

How to Use in IPNetwork Monitor

Example using hwGTPRcvV0GtpC OID:

Select a Huawei Eudemon firewall/USG security gateway (GTP mobile-tunnel inspection) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hwGTPRcvV0GtpC into the Find box to locate it in the OID tree, then select it and click OK. It reports the number of received v0 gtpc packets. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
huawei	1.3.6.1.4.1.2011
huaweiUtility	1.3.6.1.4.1.2011.6
hwSecurity	1.3.6.1.4.1.2011.6.122
hwGTP	1.3.6.1.4.1.2011.6.122.35			V1.00 The GTP mib is for Eudemon and USG product series.
hwGTPNotification	1.3.6.1.4.1.2011.6.122.35.0
hwGTPTrapObject	1.3.6.1.4.1.2011.6.122.35.0.1
G32 hwGTPCtrMsgRate	1.3.6.1.4.1.2011.6.122.35.0.1.1	Gauge32	accessible-for-notify	The GTP control rate.
G32 hwGTPActualRate	1.3.6.1.4.1.2011.6.122.35.0.1.2	Gauge32	accessible-for-notify	The rate for receiving packets on the management plane.
hwGTPTraps	1.3.6.1.4.1.2011.6.122.35.0.2
NTF hwGTPOverCtrMsgRate	1.3.6.1.4.1.2011.6.122.35.0.2.1			Send the message when the rate for receiving packets on the management plane exceeds the threshold of the GTP control rate.
hwGTPStats	1.3.6.1.4.1.2011.6.122.35.1
C32 hwGTPRcvV0GtpCEx	1.3.6.1.4.1.2011.6.122.35.1.1	Counter32	read-only	Number of received v0 gtpc packets.
C32 hwGTPDiscardV0GtpC	1.3.6.1.4.1.2011.6.122.35.1.2	Counter32	read-only	Number of discarded v0 gtpc packets.
C32 hwGTPRcvV1GtpC	1.3.6.1.4.1.2011.6.122.35.1.3	Counter32	read-only	Number of received v1 gtpc packets.
C32 hwGTPDiscardV1GtpC	1.3.6.1.4.1.2011.6.122.35.1.4	Counter32	read-only	Number of discarded v1 gtpc packets.
C32 hwGTPRcvV0GtpU	1.3.6.1.4.1.2011.6.122.35.1.5	Counter32	read-only	Number of received v0 gtpu packets.
C32 hwGTPDiscardV0GtpU	1.3.6.1.4.1.2011.6.122.35.1.6	Counter32	read-only	Number of discarded v0 gtpu packets.
C32 hwGTPRcvV1GtpU	1.3.6.1.4.1.2011.6.122.35.1.7	Counter32	read-only	Number of received v1 gtpu packets.
C32 hwGTPDiscardV1GtpU	1.3.6.1.4.1.2011.6.122.35.1.8	Counter32	read-only	Number of discarded v1 gtpu packets.
C32 hwGTPRcvGtpV0	1.3.6.1.4.1.2011.6.122.35.1.9	Counter32	read-only	Number of received v0 gtp packets.
C32 hwGTPDiscardGtpV0	1.3.6.1.4.1.2011.6.122.35.1.10	Counter32	read-only	Number of discarded v0 gtp packets.
C32 hwGTPRcvGtpV1	1.3.6.1.4.1.2011.6.122.35.1.11	Counter32	read-only	Number of received v1 gtp packets .
C32 hwGTPDiscardGtpV1	1.3.6.1.4.1.2011.6.122.35.1.12	Counter32	read-only	Number of discarded v1 gtp packets.
C32 hwGTPRcvGtpCharge	1.3.6.1.4.1.2011.6.122.35.1.13	Counter32	read-only	Number of received gtp' packets.
C32 hwGTPDiscardGtpCharge	1.3.6.1.4.1.2011.6.122.35.1.14	Counter32	read-only	Number of discarded gtp' packets.
C32 hwGTPRcvUnknownVersion	1.3.6.1.4.1.2011.6.122.35.1.15	Counter32	read-only	Number of received unknown version packets.
C32 hwGTPDiscardUnknownVersion	1.3.6.1.4.1.2011.6.122.35.1.16	Counter32	read-only	Number of discarded unknown version packets.
C32 hwGTPRcvUnknownMessage	1.3.6.1.4.1.2011.6.122.35.1.17	Counter32	read-only	Number of received unknown message packets.
C32 hwGTPDiscardUnknownMessage	1.3.6.1.4.1.2011.6.122.35.1.18	Counter32	read-only	Number of discarded unknown message packets.
C32 hwGTPRcvGtpCPackets	1.3.6.1.4.1.2011.6.122.35.1.19	Counter32	read-only	Number of received gtpc packets.
C32 hwGTPDiscardGtpCPackets	1.3.6.1.4.1.2011.6.122.35.1.20	Counter32	read-only	Number of discarded gtpc packets.
C32 hwGTPRcvGtpUPackets	1.3.6.1.4.1.2011.6.122.35.1.21	Counter32	read-only	Number of received gtpu packets.
C32 hwGTPDiscardGtpUPackets	1.3.6.1.4.1.2011.6.122.35.1.22	Counter32	read-only	Number of discarded gtpu packets.
C32 hwGTPDropGtpTurnnelPackets	1.3.6.1.4.1.2011.6.122.35.1.23	Counter32	read-only	Number of discarded packets according to gtp tunnel speed.
C32 hwGTPExchangesNotAcceptedByPeerGsnPackets	1.3.6.1.4.1.2011.6.122.35.1.24	Counter32	read-only	Number of packets that GTP exchanges not accepted by peer GSN.
C32 hwGTPTunnelNum	1.3.6.1.4.1.2011.6.122.35.1.25	Counter32	read-only	Number of GTP tunnels.
hwGTPMibConformance	1.3.6.1.4.1.2011.6.122.35.2
hwGTPMibCompliances	1.3.6.1.4.1.2011.6.122.35.2.1
hwGTPMibCompliance	1.3.6.1.4.1.2011.6.122.35.2.1.1
hwGTPMibGroups	1.3.6.1.4.1.2011.6.122.35.2.2
hwGTPTrapObjectGroup	1.3.6.1.4.1.2011.6.122.35.2.2.1			This table specifies the objects used for traps.
hwGTPTrapsGroup	1.3.6.1.4.1.2011.6.122.35.2.2.2			GTP traps.
hwIPSecGlobalStatsGroup	1.3.6.1.4.1.2011.6.122.35.2.2.3			This table specifies the statistics information for GTP.

RFC description

Monitors GTP (GPRS Tunneling Protocol) statistics for mobile gateway security and packet processing.

Start monitoring Huawei Eudemon firewall/USG security gateway (GTP mobile-tunnel inspection) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HUAWEI-SECURITY-GTP-MIB