All MIBs › HUAWEI-SECURITY-MIB
Organization: Huawei Technologies Co.,Ltd.
Last Updated: 2015-10-14
Category: Domain: Security, VPN and Security, Vendor: Huawei
Description: Huawei security MIB providing comprehensive firewall policy management, zone definitions, and security service configuration.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is HUAWEI-SECURITY-MIB?
HUAWEI-SECURITY-MIB is a broad Huawei enterprise MIB for the security/firewall functional area of Huawei datacomm (router and switch) products. It exposes configuration-oriented data covering firewall policies, security zones, and security service settings, describing how the device is configured to inspect and control traffic rather than raw performance counters. Its monitoring value lies mainly in verifying software/configuration state -- confirming that intended security policies and zone assignments are actually active on the device -- and, where present, in surfacing policy hit or violation counts that hint at ongoing security events. It is closely tied to companion Huawei modules such as HUAWEI-SECSTAT-MIB (statistics) and zone/interface MIBs that define the objects security policies reference. Typical deployment is on Huawei routers and firewalls at enterprise or carrier network edges where security policy compliance must be continuously verified. Network engineers evaluating or troubleshooting this functionality can download the HUAWEI-SECURITY-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in HUAWEI-SECURITY-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Huawei router
- Huawei firewall
Monitoring Examples
Without a concrete object list, the practical use is inferred from the module description: an administrator would poll zone-definition and policy-configuration tables to confirm that a security zone and its associated access rules are correctly provisioned, and would watch for configuration drift or policy misapplication that could open an unintended traffic path.
What Can Be Monitored
- security zone configuration
- firewall policy status
- security service settings
This MIB depends on
Related MIBs
Imported Objects
From HUAWEI-MIB
| hwDatacomm | OBJECT-IDENTITY |
From P-BRIDGE-MIB
| EnabledStatus |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| NOTIFICATION-GROUP | |
| OBJECT-GROUP |
From SNMPv2-SMI
| Integer32 | |
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE | |
| Unsigned32 |
From SNMPv2-TC
| DateAndTime | |
| DisplayString | |
| TEXTUAL-CONVENTION |
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| hwSecurityMIB | 1.3.6.1.4.1.2011.5.25.165 | The private mib file includes the general extent information of the device.hwDatacomm(165).hwSecurityMIB. | ||
| hwBaseSecurityMIBObjects | 1.3.6.1.4.1.2011.5.25.165.1 | |||
| hwLocalUrpf | 1.3.6.1.4.1.2011.5.25.165.1.2 | |||
| hwLocalUrpfTable | 1.3.6.1.4.1.2011.5.25.165.1.2.1 | not-accessible | The table lists the information about local URPF Packets. | |
| hwLocalUrpfEntry | 1.3.6.1.4.1.2011.5.25.165.1.2.1.1 | not-accessible | The table lists the information about local URPF protection. | |
| INT hwLocalUrpfChassisId | 1.3.6.1.4.1.2011.5.25.165.1.2.1.1.1 | INTEGER | accessible-for-notify | The Data index of local URPF,the chassis ID indicates the slot on which chassis is configured with URPF. |
| I32 hwLocalUrpfSlotId | 1.3.6.1.4.1.2011.5.25.165.1.2.1.1.2 | Integer32 | accessible-for-notify | The Data index of local URPF,the slot configured with URPF. |
| I32 hwLocalUrpfCurrentRateLow | 1.3.6.1.4.1.2011.5.25.165.1.2.1.1.11 | Integer32 | read-only | The lower 32 bits discard number during the interval of local URPF.unit(packet). |
| I32 hwLocalUrpfCurrentRateHigh | 1.3.6.1.4.1.2011.5.25.165.1.2.1.1.12 | Integer32 | read-only | The upper 32 bits discard number during the interval of local URPF.unit(packet). |
| ENA hwLocalUrpfNotifyEnabledStatus | 1.3.6.1.4.1.2011.5.25.165.1.2.1.1.13 | EnabledStatus | read-only | The alarm state of local URPF. |
| I32 hwLocalUrpfRateThreshold | 1.3.6.1.4.1.2011.5.25.165.1.2.1.1.14 | Integer32 | read-only | Local URPF's discard threshold during the configured interval.unit(packet). |
| I32 hwLocalUrpfRateInterval | 1.3.6.1.4.1.2011.5.25.165.1.2.1.1.15 | Integer32 | read-only | The detection interval of the local URPF.unit(s). |
| hwTcpIpDefend | 1.3.6.1.4.1.2011.5.25.165.1.3 | |||
| hwTcpIpDefendTable | 1.3.6.1.4.1.2011.5.25.165.1.3.1 | not-accessible | This table list the information about TCPIP protection. | |
| hwTcpIpDefendEntry | 1.3.6.1.4.1.2011.5.25.165.1.3.1.1 | not-accessible | This table list the information about TCPIP protection. | |
| INT hwTcpIpDefendChassisId | 1.3.6.1.4.1.2011.5.25.165.1.3.1.1.1 | INTEGER | accessible-for-notify | The Data index of TCPIP protection,the chassis ID indicates the slot on which chassis is configured with TCPIP protection. |
| I32 hwTcpIpDefendSlotId | 1.3.6.1.4.1.2011.5.25.165.1.3.1.1.2 | Integer32 | accessible-for-notify | The Data index of TCPIP protection,the slot configured with TCPIP protection. |
| INT hwTcpIpDefendType | 1.3.6.1.4.1.2011.5.25.165.1.3.1.1.3 | INTEGER | accessible-for-notify | The Data index of TCPIP protection,the type of TCPIP protection. |
| I32 hwTcpIpDefendCurrentRateLow | 1.3.6.1.4.1.2011.5.25.165.1.3.1.1.11 | Integer32 | read-only | The lower 32 bits discard number during the interval of TCPIP protection.unit(packet). |
| I32 hwTcpIpDefendCurrentRateHigh | 1.3.6.1.4.1.2011.5.25.165.1.3.1.1.12 | Integer32 | read-only | The upper 32 bits discard number during the interval of TCPIP protection.unit(packet). |
| ENA hwTcpIpDefendNotifyEnabledStatus | 1.3.6.1.4.1.2011.5.25.165.1.3.1.1.13 | EnabledStatus | read-only | The alarm state of TCPIP protection. |
| I32 hwTcpIpDefendRateThreshold | 1.3.6.1.4.1.2011.5.25.165.1.3.1.1.14 | Integer32 | read-only | TCPIP protection's discard threshold during the configured interval.unit(packet). |
| I32 hwTcpIpDefendRateInterval | 1.3.6.1.4.1.2011.5.25.165.1.3.1.1.15 | Integer32 | read-only | The detection interval of TCPIP protection.unit(s). |
| OCT hwTcpIpDefendProtocolDescirption | 1.3.6.1.4.1.2011.5.25.165.1.3.1.1.16 | OCTET STRING | read-only | The descirption of Protocol. |
| hwMaDefend | 1.3.6.1.4.1.2011.5.25.165.1.4 | |||
| hwMaDefendTable | 1.3.6.1.4.1.2011.5.25.165.1.4.1 | not-accessible | This table list the information about management and application protection. | |
| hwMaDefendEntry | 1.3.6.1.4.1.2011.5.25.165.1.4.1.1 | not-accessible | This table list the information about management and application protection. | |
| INT hwMaDefendChassisId | 1.3.6.1.4.1.2011.5.25.165.1.4.1.1.1 | INTEGER | accessible-for-notify | The Data index of management and application protection,the chassis ID indicates the slot on which chassis is configured with management and application protection. |
| I32 hwMaDefendSlotId | 1.3.6.1.4.1.2011.5.25.165.1.4.1.1.2 | Integer32 | accessible-for-notify | The Data index of management and application protection,the slots configured with management and application protection. |
| INT hwMaDefendProtocol | 1.3.6.1.4.1.2011.5.25.165.1.4.1.1.3 | INTEGER | accessible-for-notify | The Data index of management and application protection,the protocols configured in management and application protection. |
| I32 hwMaDefendCurrentRateLow | 1.3.6.1.4.1.2011.5.25.165.1.4.1.1.11 | Integer32 | read-only | The lower 32 bits discard number during the interval of management and application protection.unit(packet). |
| I32 hwMaDefendCurrentRateHigh | 1.3.6.1.4.1.2011.5.25.165.1.4.1.1.12 | Integer32 | read-only | The upper 32 bits discard number during the interval of management and application protection.unit(packet). |
| ENA hwMaDefendNotifyEnabledStatus | 1.3.6.1.4.1.2011.5.25.165.1.4.1.1.13 | EnabledStatus | read-only | The alarm state of management and application protection. |
| I32 hwMaDefendRateThreshold | 1.3.6.1.4.1.2011.5.25.165.1.4.1.1.14 | Integer32 | read-only | The discard threshold of management and application protection during the configured interval.unit(packet). |
| I32 hwMaDefendRateInterval | 1.3.6.1.4.1.2011.5.25.165.1.4.1.1.15 | Integer32 | read-only | The detection interval of management and application protection. unit(s). |
| hwApplicationApperceive | 1.3.6.1.4.1.2011.5.25.165.1.5 | |||
| hwApplicationApperceiveTable | 1.3.6.1.4.1.2011.5.25.165.1.5.1 | not-accessible | This table list the information about Application-Apperceive protection. | |
| hwApplicationApperceiveEntry | 1.3.6.1.4.1.2011.5.25.165.1.5.1.1 | not-accessible | This table list the information about Application-Apperceive protection. | |
| INT hwAppliApperChassisId | 1.3.6.1.4.1.2011.5.25.165.1.5.1.1.1 | INTEGER | accessible-for-notify | The Data index of Application-Apperceive protection,the chassis ID indicates the slot on which chassis is configured with Application-Apperceive protection. |
| I32 hwAppliApperSlotId | 1.3.6.1.4.1.2011.5.25.165.1.5.1.1.2 | Integer32 | accessible-for-notify | The Data index of Application-Apperceive protection,the slots configured with Application-Apperceive protection. |
| INT hwAppliApperProtocol | 1.3.6.1.4.1.2011.5.25.165.1.5.1.1.3 | INTEGER | accessible-for-notify | The Data index of Application-Apperceive protection,the protocol configured in Application-Apperceive protection. |
| I32 hwAppliApperCurrentRateLow | 1.3.6.1.4.1.2011.5.25.165.1.5.1.1.11 | Integer32 | read-only | The lower 32 bits discard number during the interval of Application-Apperceive protection.unit(packet). |
| I32 hwAppliApperCurrentRateHigh | 1.3.6.1.4.1.2011.5.25.165.1.5.1.1.12 | Integer32 | read-only | The upper 32 bits discard number during the interval of Application-Apperceive protection.unit(packet). |
| ENA hwAppliApperNotifyEnabledStatus | 1.3.6.1.4.1.2011.5.25.165.1.5.1.1.13 | EnabledStatus | read-only | The alarm state of Application-Apperceive protection. |
| I32 hwAppliApperRateThreshold | 1.3.6.1.4.1.2011.5.25.165.1.5.1.1.14 | Integer32 | read-only | The discard threshold of Application-Apperceive protection during the configured interval.unit(packet). |
| I32 hwAppliApperRateInterval | 1.3.6.1.4.1.2011.5.25.165.1.5.1.1.15 | Integer32 | read-only | The detect interval of Application-Apperceive protection. unit(s). |
| OCT hwAppliApperProtocolDescirption | 1.3.6.1.4.1.2011.5.25.165.1.5.1.1.16 | OCTET STRING | read-only | The descirption of Protocol. |
| hwDefdPortVlan | 1.3.6.1.4.1.2011.5.25.165.1.6 | |||
| hwDefdPortVlanTable | 1.3.6.1.4.1.2011.5.25.165.1.6.1 | not-accessible | The table lists the information about defend port vlan packet. | |
| hwDefdPortVlanEntry | 1.3.6.1.4.1.2011.5.25.165.1.6.1.1 | not-accessible | This table list the information about defend port vlan . | |
| I32 hwDefdPortVlanIfIndex | 1.3.6.1.4.1.2011.5.25.165.1.6.1.1.1 | Integer32 | accessible-for-notify | Interface Index, equal to ifIndex. |
| OCT hwDefdPortVlanIfName | 1.3.6.1.4.1.2011.5.25.165.1.6.1.1.2 | OCTET STRING | read-only | The name of the interface. |
| I32 hwDefdPortVlanId | 1.3.6.1.4.1.2011.5.25.165.1.6.1.1.3 | Integer32 | read-only | The Data index of defend port vlan. |
| OCT hwDefdPortVlanCheckProtocol | 1.3.6.1.4.1.2011.5.25.165.1.6.1.1.4 | OCTET STRING | read-only | Check protocol name. |
| hwSocAttackTrapObject | 1.3.6.1.4.1.2011.5.25.165.1.7 | |||
| hwSocAttackInfoTable | 1.3.6.1.4.1.2011.5.25.165.1.7.1 | not-accessible | The table lists the information about Security Operation Center. | |
| hwSocAttackInfoEntry | 1.3.6.1.4.1.2011.5.25.165.1.7.1.1 | not-accessible | This table list the information about Securty Operation Center detected one attack. | |
| I32 hwSocAttackSeqNo | 1.3.6.1.4.1.2011.5.25.165.1.7.1.1.1 | Integer32 | read-only | The sequence number of attack infomation. |
| OCT hwSocAttackPossib | 1.3.6.1.4.1.2011.5.25.165.1.7.1.1.2 | OCTET STRING | read-only | The prabability of the attack . |
| OCT hwSocAttackReason | 1.3.6.1.4.1.2011.5.25.165.1.7.1.1.3 | OCTET STRING | read-only | The reason of the attack . |
| OCT hwSocAttackIfName | 1.3.6.1.4.1.2011.5.25.165.1.7.1.1.4 | OCTET STRING | read-only | The interface of the attack |
| OCT hwSocAttackSubIfName | 1.3.6.1.4.1.2011.5.25.165.1.7.1.1.5 | OCTET STRING | read-only | The sub-interface of the attack |
| OCT hwSocAttackVlanIndex | 1.3.6.1.4.1.2011.5.25.165.1.7.1.1.6 | OCTET STRING | read-only | The vlan of the attack |
| OCT hwSocAttackUserQinQIndex | 1.3.6.1.4.1.2011.5.25.165.1.7.1.1.7 | OCTET STRING | read-only | The UserQinQ of the attack |
| OCT hwSocAttackMacAddr | 1.3.6.1.4.1.2011.5.25.165.1.7.1.1.8 | OCTET STRING | read-only | The MAC of the attack |
| OCT hwSocAttackIPAddr | 1.3.6.1.4.1.2011.5.25.165.1.7.1.1.9 | OCTET STRING | read-only | The IP of the attack |
| OCT hwSocAttackIPv6Addr | 1.3.6.1.4.1.2011.5.25.165.1.7.1.1.10 | OCTET STRING | read-only | The IPv6 of the attack |
| hwBaseSecurityNotifications | 1.3.6.1.4.1.2011.5.25.165.1.11 | |||
| NTF hwBaseSecurityUrpfDiscardedRateRising | 1.3.6.1.4.1.2011.5.25.165.1.11.1 | The discard packets exceed the threshold of local URPF protection. | ||
| NTF hwBaseSecurityUrpfDiscardedRateResume | 1.3.6.1.4.1.2011.5.25.165.1.11.2 | The alarm of local URPF is resumed. | ||
| NTF hwBaseSecurityTcpIpAttackDiscardedRateRising | 1.3.6.1.4.1.2011.5.25.165.1.11.3 | The discard packets exceed the threshold of TCPIP protection. | ||
| NTF hwBaseSecurityTcpIpAttackDiscardedRateResume | 1.3.6.1.4.1.2011.5.25.165.1.11.4 | The alarm of TCPIP protection is resumed. | ||
| NTF hwBaseSecurityMaDiscardedRateRising | 1.3.6.1.4.1.2011.5.25.165.1.11.5 | The discard packets exceed the threshold of management and application protection. | ||
| NTF hwBaseSecurityMaDiscardedRateResume | 1.3.6.1.4.1.2011.5.25.165.1.11.6 | The alarm of management and application protection is resumed. | ||
| NTF hwBaseSecurityApplicationApperceiveDiscardedRateRising | 1.3.6.1.4.1.2011.5.25.165.1.11.7 | The discard packets exceed the threshold of Application-Apperceive protection. | ||
| NTF hwBaseSecurityApplicationApperceiveDiscardedRateResume | 1.3.6.1.4.1.2011.5.25.165.1.11.8 | The alarm of Application-Apperceive protection is resumed. | ||
| NTF hwBaseSecurityStormControlInterface | 1.3.6.1.4.1.2011.5.25.165.1.11.9 | The alarm of storm-control detection. | ||
| NTF hwBaseSocAttackTrap | 1.3.6.1.4.1.2011.5.25.165.1.11.12 | An attack occur on the Network. | ||
| NTF hwBaseSocAttackResumeTrap | 1.3.6.1.4.1.2011.5.25.165.1.11.13 | An attack cancels on the Network. | ||
| NTF hwBaseSecurityStormControlInterfaceResume | 1.3.6.1.4.1.2011.5.25.165.1.11.14 | L2 loop detect alarm cleared. | ||
| NTF hwBaseSecurityTtlExpiredLoop | 1.3.6.1.4.1.2011.5.25.165.1.11.15 | The alarm of ttl-expired loop detection. | ||
| NTF hwBaseSecurityTtlExpiredLoopResume | 1.3.6.1.4.1.2011.5.25.165.1.11.16 | TTL-Expired loop alarm cleared. | ||
| NTF hwBaseArpVlanCarTrap | 1.3.6.1.4.1.2011.5.25.165.1.11.17 | ARP VLAN CAR took effect on an interface, which may be because a loop occurred on the interface. | ||
| NTF hwBaseArpVlanCarResumeTrap | 1.3.6.1.4.1.2011.5.25.165.1.11.18 | ARP VLAN CAR become ineffective on an interface. | ||
| NTF hwBaseSecurityAntiAttackRateRising | 1.3.6.1.4.1.2011.5.25.165.1.11.19 | The rate of packets exceed the threshold of anti-attack alarm. | ||
| NTF hwBaseSecurityAntiAttackRateResume | 1.3.6.1.4.1.2011.5.25.165.1.11.20 | The alarm of anti-attack alarm is resumed. | ||
| hwMacFilter | 1.3.6.1.4.1.2011.5.25.165.1.12 | |||
| hwMacFilterModeTable | 1.3.6.1.4.1.2011.5.25.165.1.12.1 | not-accessible | This table list the information about mac-filter statistics. | |
| hwMacFilterModeEntry | 1.3.6.1.4.1.2011.5.25.165.1.12.1.1 | not-accessible | This table list the information about mac-filter statistics. | |
| STR hwMacFilterInterface | 1.3.6.1.4.1.2011.5.25.165.1.12.1.1.2 | DisplayString | read-only | Mac-filter interface name. |
| INT hwMacFilterEnableMode | 1.3.6.1.4.1.2011.5.25.165.1.12.1.1.3 | INTEGER | read-only | Mac-filter enable mode. |
| I32 hwMacFilterMatchNum | 1.3.6.1.4.1.2011.5.25.165.1.12.1.1.4 | Integer32 | read-only | Mac-filter if-match number. |
| hwMacFilterMacAddrTable | 1.3.6.1.4.1.2011.5.25.165.1.12.2 | not-accessible | This table list the information about mac-filter if-match mac-address. | |
| hwMacFilterMacAddrEntry | 1.3.6.1.4.1.2011.5.25.165.1.12.2.1 | not-accessible | This table list the information about mac-filter if-match mac-address. | |
| I32 hwMacFilterIfIndex | 1.3.6.1.4.1.2011.5.25.165.1.12.2.1.1 | Integer32 | not-accessible | Mac-filter interface index. |
| STR hwMacFilterInterfaceBuf | 1.3.6.1.4.1.2011.5.25.165.1.12.2.1.2 | DisplayString | read-only | Mac-filter interface name. |
| STR hwMacFilterMacAddr | 1.3.6.1.4.1.2011.5.25.165.1.12.2.1.3 | DisplayString | not-accessible | Mac-filter if-match mac-address. |
| hwBaseSecurityStormControlInterfaceObjects | 1.3.6.1.4.1.2011.5.25.165.1.13 | |||
| hwBaseSecurityStormControlInterfaceTable | 1.3.6.1.4.1.2011.5.25.165.1.13.1 | not-accessible | A Table about storm-control interface information. | |
| hwBaseSecurityStormControlInterfaceEntry | 1.3.6.1.4.1.2011.5.25.165.1.13.1.1 | not-accessible | Description. | |
| I32 hwBaseSecurityStormControlInterfaceChassisId | 1.3.6.1.4.1.2011.5.25.165.1.13.1.1.1 | Integer32 | accessible-for-notify | The chassis ID indicates the slot on which chassis is configured with storm control. |
| I32 hwBaseSecurityStormControlInterfaceSlotId | 1.3.6.1.4.1.2011.5.25.165.1.13.1.1.2 | Integer32 | accessible-for-notify | The slot configured with storm control. |
| OCT hwBaseSecurityStormControlInterfaceName | 1.3.6.1.4.1.2011.5.25.165.1.13.1.1.3 | OCTET STRING | read-only | The interface name. |
| I32 hwBaseSecurityStormControlInterfaceVlanID | 1.3.6.1.4.1.2011.5.25.165.1.13.1.1.4 | Integer32 | accessible-for-notify | The VlanID of VlanIF which the interface join in. |
| hwBaseArpVlanCarTrapObject | 1.3.6.1.4.1.2011.5.25.165.1.14 | |||
| hwBaseArpVlanCarInfoTable | 1.3.6.1.4.1.2011.5.25.165.1.14.1 | not-accessible | A Table about arp vlan car information. | |
| hwBaseArpVlanCarInfoEntry | 1.3.6.1.4.1.2011.5.25.165.1.14.1.1 | not-accessible | Description. | |
| OCT hwBaseArpVlanCarLogIfName | 1.3.6.1.4.1.2011.5.25.165.1.14.1.1.1 | OCTET STRING | read-only | The logic interface name. |
| OCT hwBaseArpVlanCarPhyIfName | 1.3.6.1.4.1.2011.5.25.165.1.14.1.1.2 | OCTET STRING | read-only | The physical interface name. |
| I32 hwBaseArpVlanCarVlanId | 1.3.6.1.4.1.2011.5.25.165.1.14.1.1.3 | Integer32 | read-only | The VlanId of arp vlan car. |
| hwTtlExpiredLoop | 1.3.6.1.4.1.2011.5.25.165.1.15 | |||
| hwTtlExpiredLoopTable | 1.3.6.1.4.1.2011.5.25.165.1.15.1 | not-accessible | A Table about TTL-expired loop information. | |
| hwTtlExpiredLoopEntry | 1.3.6.1.4.1.2011.5.25.165.1.15.1.1 | not-accessible | Description. | |
| U32 hwTtlExpiredLoopChassisId | 1.3.6.1.4.1.2011.5.25.165.1.15.1.1.1 | Unsigned32 | accessible-for-notify | The chassis ID indicates the chassis ttl-expired loop occur. |
| U32 hwTtlExpiredLoopSlotId | 1.3.6.1.4.1.2011.5.25.165.1.15.1.1.2 | Unsigned32 | accessible-for-notify | The slot ID indicates the slot ttl-expired loop occur. |
| U32 hwTtlExpiredLoopLastRateLow | 1.3.6.1.4.1.2011.5.25.165.1.15.1.1.3 | Unsigned32 | read-only | The lower 32 bits of last discard bytes. |
| U32 hwTtlExpiredLoopLastRateHigh | 1.3.6.1.4.1.2011.5.25.165.1.15.1.1.4 | Unsigned32 | read-only | The high 32 bits of last discard bytes. |
| U32 hwTtlExpiredLoopCurrentRateLow | 1.3.6.1.4.1.2011.5.25.165.1.15.1.1.5 | Unsigned32 | read-only | The lower 32 bits of current discard bytes. |
| U32 hwTtlExpiredLoopCurrentRateHigh | 1.3.6.1.4.1.2011.5.25.165.1.15.1.1.6 | Unsigned32 | read-only | The high 32 bits of current discard bytes. |
| U32 hwTtlExpiredLoopRateInterval | 1.3.6.1.4.1.2011.5.25.165.1.15.1.1.7 | Unsigned32 | read-only | Interval. |
| U32 hwTtlExpiredLoopRateThreshold | 1.3.6.1.4.1.2011.5.25.165.1.15.1.1.8 | Unsigned32 | read-only | Threshold. |
| hwAntiAttack | 1.3.6.1.4.1.2011.5.25.165.1.16 | |||
| hwAntiAttackTable | 1.3.6.1.4.1.2011.5.25.165.1.16.1 | not-accessible | This table list the information about anti-attack alarm. | |
| hwAntiAttackEntry | 1.3.6.1.4.1.2011.5.25.165.1.16.1.1 | not-accessible | This table list the information about anti-attack alarm. | |
| INT hwAntiAttackType | 1.3.6.1.4.1.2011.5.25.165.1.16.1.1.1 | INTEGER | read-only | The data index of anti-attack, attack type configured in anti-attack alarm. |
| I32 hwAntiAttackRateThreshold | 1.3.6.1.4.1.2011.5.25.165.1.16.1.1.2 | Integer32 | read-only | The alarm threshold of anti-attack alarm during the processing of pkt-flooding.unit(bps). |
| I32 hwAntiAttackCurrentRate | 1.3.6.1.4.1.2011.5.25.165.1.16.1.1.3 | Integer32 | read-only | The current rate of anti-attack alarm. unit(bps). |
| hwMeSecurityMIBObjects | 1.3.6.1.4.1.2011.5.25.165.2 | |||
| hwSecurityTrapObject | 1.3.6.1.4.1.2011.5.25.165.2.1 | |||
| hwStrackTrapObject | 1.3.6.1.4.1.2011.5.25.165.2.1.1 | |||
| I32 hwStrackTotalPacket | 1.3.6.1.4.1.2011.5.25.165.2.1.1.1 | Integer32 | accessible-for-notify | The total packets of strack during the configured interval.unit(packet). |
| DAT hwStrackEndTime | 1.3.6.1.4.1.2011.5.25.165.2.1.1.2 | DateAndTime | accessible-for-notify | The data of strack. |
| OCT hwStrackSourceMac | 1.3.6.1.4.1.2011.5.25.165.2.1.1.3 | OCTET STRING | accessible-for-notify | The data of strack. |
| I32 hwStrackPacketPVlan | 1.3.6.1.4.1.2011.5.25.165.2.1.1.4 | Integer32 | accessible-for-notify | The data of strack. |
| I32 hwStrackPacketCVlan | 1.3.6.1.4.1.2011.5.25.165.2.1.1.5 | Integer32 | accessible-for-notify | The data of strack. |
| OCT hwStrackPacketIfName | 1.3.6.1.4.1.2011.5.25.165.2.1.1.6 | OCTET STRING | accessible-for-notify | The data of strack. |
| OCT hwStrackSourceIp | 1.3.6.1.4.1.2011.5.25.165.2.1.1.7 | OCTET STRING | accessible-for-notify | The data of strack. |
| hwArpsTrapObject | 1.3.6.1.4.1.2011.5.25.165.2.1.2 | |||
| OCT hwArpsSourceInterface | 1.3.6.1.4.1.2011.5.25.165.2.1.2.1 | OCTET STRING | accessible-for-notify | The data of arp security. |
| OCT hwArpsSourceIp | 1.3.6.1.4.1.2011.5.25.165.2.1.2.2 | OCTET STRING | accessible-for-notify | TThe data of arp security. |
| OCT hwArpsSourceMac | 1.3.6.1.4.1.2011.5.25.165.2.1.2.3 | OCTET STRING | accessible-for-notify | The data of arp security. |
| I32 hwArpsPVlan | 1.3.6.1.4.1.2011.5.25.165.2.1.2.4 | Integer32 | accessible-for-notify | The data of arp security. |
| I32 hwArpsCVlan | 1.3.6.1.4.1.2011.5.25.165.2.1.2.5 | Integer32 | accessible-for-notify | The data of arp security. |
| I32 hwArpsPacketDropNum | 1.3.6.1.4.1.2011.5.25.165.2.1.2.6 | Integer32 | accessible-for-notify | The number of packets discarded by arp inspection .unit(packet). |
| I32 hwArpsAlarmThreshold | 1.3.6.1.4.1.2011.5.25.165.2.1.2.7 | Integer32 | accessible-for-notify | The alarm threshold of dynamic arp inspection during the configured interval.unit(packet). |
| I32 hwArpsBlockTime | 1.3.6.1.4.1.2011.5.25.165.2.1.2.8 | Integer32 | accessible-for-notify | The data of time which ARP Packet will be blocked. unit(second). |
| hwIpsgTrapObject | 1.3.6.1.4.1.2011.5.25.165.2.1.3 | |||
| I32 hwIpsgPacketDropNum | 1.3.6.1.4.1.2011.5.25.165.2.1.3.1 | Integer32 | accessible-for-notify | The data of ip source check . |
| I32 hwIpsgAlarmThreshold | 1.3.6.1.4.1.2011.5.25.165.2.1.3.2 | Integer32 | accessible-for-notify | The alarm threshold of ip source check during the configured interval.unit(packet). |
| OCT hwIpsgSourceInterface | 1.3.6.1.4.1.2011.5.25.165.2.1.3.3 | OCTET STRING | accessible-for-notify | The data of ip souce check. |
| hwIcmpTrapObject | 1.3.6.1.4.1.2011.5.25.165.2.1.4 | |||
| I32 hwIcmpPacketDropNum | 1.3.6.1.4.1.2011.5.25.165.2.1.4.1 | Integer32 | accessible-for-notify | The number of packets discarded by ip source check .unit(packet). |
| I32 hwIcmpAlarmThreshold | 1.3.6.1.4.1.2011.5.25.165.2.1.4.2 | Integer32 | accessible-for-notify | The alarm threshold of icmp defend during the configured interval.unit(packet). |
| OCT hwIcmpSourceInterface | 1.3.6.1.4.1.2011.5.25.165.2.1.4.3 | OCTET STRING | accessible-for-notify | The data of icmp security. |
| hwDapTrapObject | 1.3.6.1.4.1.2011.5.25.165.2.1.5 | |||
| I32 hwDapPortChange | 1.3.6.1.4.1.2011.5.25.165.2.1.5.1 | Integer32 | accessible-for-notify | The alarm of dap port changed |
| hwCfgApTrapObject | 1.3.6.1.4.1.2011.5.25.165.2.1.6 | |||
| OCT hwCfgApUserName | 1.3.6.1.4.1.2011.5.25.165.2.1.6.1 | OCTET STRING | accessible-for-notify | The name of user failed to configure access point. |
| OCT hwCfgApIPAddress | 1.3.6.1.4.1.2011.5.25.165.2.1.6.2 | OCTET STRING | accessible-for-notify | The IP-address of user failed to configure access point. |
| I32 hwCfgApApID | 1.3.6.1.4.1.2011.5.25.165.2.1.6.3 | Integer32 | accessible-for-notify | The ID of access point failed to be configured. |
| OCT hwCfgApOperation | 1.3.6.1.4.1.2011.5.25.165.2.1.6.4 | OCTET STRING | accessible-for-notify | The operation of confiuration to access point. |
| OCT hwCfgApReason | 1.3.6.1.4.1.2011.5.25.165.2.1.6.5 | OCTET STRING | accessible-for-notify | The reason of failed to configure access point. |
| hwSecurityTraps | 1.3.6.1.4.1.2011.5.25.165.2.2 | |||
| hwStrackTrap | 1.3.6.1.4.1.2011.5.25.165.2.2.1 | |||
| NTF hwStrackUserInfo | 1.3.6.1.4.1.2011.5.25.165.2.2.1.1 | The user data of strack. | ||
| NTF hwStrackIfVlanInfo | 1.3.6.1.4.1.2011.5.25.165.2.2.1.2 | The data of strack. | ||
| NTF hwStrackDenyPacket | 1.3.6.1.4.1.2011.5.25.165.2.2.1.3 | The infomation of the packets discarded by strack. | ||
| NTF hwStrackErrorDown | 1.3.6.1.4.1.2011.5.25.165.2.2.1.4 | The interface that is shutdown by strack. | ||
| NTF hwStrackIpInfo | 1.3.6.1.4.1.2011.5.25.165.2.2.1.5 | The user data of strack. | ||
| hwArpsTrap | 1.3.6.1.4.1.2011.5.25.165.2.2.2 | |||
| NTF hwArpsGatewayConflict | 1.3.6.1.4.1.2011.5.25.165.2.2.2.1 | The gateway conflict alarm is resumed. | ||
| NTF hwArpsEntryCheck | 1.3.6.1.4.1.2011.5.25.165.2.2.2.2 | The arp talbe chekc alarm is resumed. | ||
| NTF hwArpsPacketCheck | 1.3.6.1.4.1.2011.5.25.165.2.2.2.3 | The arp packet check alarm is resumed. | ||
| NTF hwArpsDaiDropALarm | 1.3.6.1.4.1.2011.5.25.165.2.2.2.4 | The DAI alarm is resumed. | ||
| NTF hwArpGlobleSpeedLimitALarm | 1.3.6.1.4.1.2011.5.25.165.2.2.2.5 | The arp rate limit alarm is resumed. | ||
| NTF hwArpIfSpeedLimitALarm | 1.3.6.1.4.1.2011.5.25.165.2.2.2.6 | TThe arp rate limit alarm is resumed. | ||
| NTF hwArpVlanSpeedLimitALarm | 1.3.6.1.4.1.2011.5.25.165.2.2.2.7 | The arp rate limit alarm is resumed. | ||
| NTF hwArpMissGlobleSpeedLimitALarm | 1.3.6.1.4.1.2011.5.25.165.2.2.2.8 | The arp miss rate limit alarm is resumed. | ||
| NTF hwArpMissIfSpeedLimitALarm | 1.3.6.1.4.1.2011.5.25.165.2.2.2.9 | The arp miss rate limit alarm is resumed. | ||
| NTF hwArpMissVlanSpeedLimitALarm | 1.3.6.1.4.1.2011.5.25.165.2.2.2.10 | The arp miss rate limit alarm is resumed. | ||
| NTF hwArpSourceIpSpeedLimitALarm | 1.3.6.1.4.1.2011.5.25.165.2.2.2.11 | The alarm of arp speed limit. | ||
| NTF hwArpMissSourceIpSpeedLimitALarm | 1.3.6.1.4.1.2011.5.25.165.2.2.2.12 | The alarm of arp miss speed limit. | ||
| NTF hwArpIfRateLimitBlockALarm | 1.3.6.1.4.1.2011.5.25.165.2.2.2.13 | The arp rate limit block alarm is resumed. | ||
| NTF hwArpsLearnStrictCheck | 1.3.6.1.4.1.2011.5.25.165.2.2.2.14 | The alarm of arp learn strict check. | ||
| hwIpsgTrap | 1.3.6.1.4.1.2011.5.25.165.2.2.3 | |||
| NTF hwIpsgDropALarm | 1.3.6.1.4.1.2011.5.25.165.2.2.3.1 | The ipsg alarm is resumed. | ||
| hwIcmpTrap | 1.3.6.1.4.1.2011.5.25.165.2.2.4 | |||
| NTF hwIcmpGlobleDropALarm | 1.3.6.1.4.1.2011.5.25.165.2.2.4.1 | The icmp rate limit alarm is resumed. | ||
| NTF hwIcmpIfDropALarm | 1.3.6.1.4.1.2011.5.25.165.2.2.4.2 | The icmp rate limit alarm is resumed. | ||
| hwDapTrap | 1.3.6.1.4.1.2011.5.25.165.2.2.5 | |||
| NTF hwDapMibPortChange | 1.3.6.1.4.1.2011.5.25.165.2.2.5.1 | The dap port is changed. | ||
| hwCfgApTrap | 1.3.6.1.4.1.2011.5.25.165.2.2.6 | |||
| NTF hwCfgApTrapFailAlarm | 1.3.6.1.4.1.2011.5.25.165.2.2.6.1 | The operation failed to config access point. | ||
| hwTrafficSuppression | 1.3.6.1.4.1.2011.5.25.165.2.3 | |||
| hwTrafficSuppressionTable | 1.3.6.1.4.1.2011.5.25.165.2.3.1 | not-accessible | The table lists the information about the configuration of traffic suppression on an interface. | |
| hwTrafficSuppressionEntry | 1.3.6.1.4.1.2011.5.25.165.2.3.1.1 | not-accessible | The table lists the information about traffic suppression protection. | |
| I32 hwTrafficSuppressionIfIndex | 1.3.6.1.4.1.2011.5.25.165.2.3.1.1.1 | Integer32 | not-accessible | The port index. |
| I32 hwTrafficSuppressionBcastRatio | 1.3.6.1.4.1.2011.5.25.165.2.3.1.1.2 | Integer32 | read-write | Broadcast-suppression ratio. Default is 100% . 100% indicates that the broadcast isn't suppressed. |
| hwSecurityConformance | 1.3.6.1.4.1.2011.5.25.165.11 | |||
| hwSecurityCompliances | 1.3.6.1.4.1.2011.5.25.165.11.1 | |||
| hwSecurityCompliance | 1.3.6.1.4.1.2011.5.25.165.11.1.1 | The compliance statement for systems supporting the HUAWEI-SECURITY-MIB. | ||
| hwBaseSecurityGroups | 1.3.6.1.4.1.2011.5.25.165.11.2 | |||
| hwLocalUrpfObjectGroup | 1.3.6.1.4.1.2011.5.25.165.11.2.2 | The alarm parameter of URPF. | ||
| hwTcpIpDefendObjectGroup | 1.3.6.1.4.1.2011.5.25.165.11.2.3 | The alarm parameter of TCPIP protection. | ||
| hwMaDefendObjectGroup | 1.3.6.1.4.1.2011.5.25.165.11.2.4 | The alarm parameter of management and application protection. | ||
| hwApplicationApperceiveObjectGroup | 1.3.6.1.4.1.2011.5.25.165.11.2.5 | The alarm parameter of Application-Apperceive protection. | ||
| hwBaseSecurityNotificationsObjectGroup | 1.3.6.1.4.1.2011.5.25.165.11.2.6 | Total alarm of protection are resumed. | ||
| hwMeSecurityObjectGroup | 1.3.6.1.4.1.2011.5.25.165.11.2.7 | The alarm parameter of huawei base security group. | ||
| hwMeSecurityTrapGroup | 1.3.6.1.4.1.2011.5.25.165.11.2.8 | Total alarm of protection are resumed. | ||
| hwDefdPortVlanObjectGroup | 1.3.6.1.4.1.2011.5.25.165.11.2.9 | The alarm parameter of l2 ring-route . | ||
| hwSocAttackTrapGroup | 1.3.6.1.4.1.2011.5.25.165.11.2.11 | The alarm parameter of Security Operation Center | ||
| hwAntiAttackObjectGroup | 1.3.6.1.4.1.2011.5.25.165.11.2.12 | The alarm parameter of anti-attack alarm. |
RFC description
A Huawei Technologies SNMP MIB providing security-related management objects for access control, authentication, and encryption configuration on Huawei network devices.
Start monitoring Huawei router or firewall (security zones/policy configuration) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.