All MIBs › HUAWEI-TCP-MIB
Organization: Huawei Technologies co.,Ltd.
Last Updated: 2004-06-26
Category: IP and Core Protocols, Vendor: Huawei
Description: Huawei TCP MIB for managing TCP connection limits, timers, performance counters, and connection state monitoring.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is HUAWEI-TCP-MIB?
HUAWEI-TCP-MIB is a Huawei-proprietary extension MIB that supplements the standard TCP MIB with vendor-specific management of TCP connection limits, timers, and performance counters on Huawei routers and switches. Its primary documented data is around TCP session security: it defines a notification for MD5 authentication failures, including the local/remote address and port of the offending connection, alongside general TCP connection state and counters. This is chiefly a software/protocol-health monitoring MIB, used to detect misconfigured or attacked TCP sessions (e.g., BGP/LDP sessions secured with MD5) rather than hardware sensors. It extends and depends on the standard TCP-MIB (RFC 4022) for base TCP object semantics. It is deployed in Huawei carrier and enterprise networks wherever TCP-based routing protocols use MD5 authentication and administrators need alerting on authentication failures. Engineers can download the HUAWEI-TCP-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in HUAWEI-TCP-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Huawei routers
- Huawei switches
Monitoring Examples
An operator would subscribe to the MD5-authentication-failure trap defined in this MIB, which reports the local address/port and remote address/port of the failing TCP connection, to catch misconfigured BGP or LDP peers using mismatched MD5 keys. Repeated traps referencing the same remote address could indicate either a configuration mismatch or an attempted session hijack attempt. Because detailed sample_objects were not provided, the object names above are drawn directly from the module description rather than a full object list.
What Can Be Monitored
- TCP MD5 authentication failures
- TCP connection local/remote address and port
- TCP connection limits and timers
- TCP performance counters
Imported Objects
From HUAWEI-MIB
| hwDatacomm | OBJECT-IDENTITY |
From RFC1213-MIB
| tcpConnLocalAddress | |
| tcpConnLocalPort | |
| tcpConnRemAddress | |
| tcpConnRemPort |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| NOTIFICATION-GROUP | |
| OBJECT-GROUP |
From SNMPv2-SMI
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE |
From SNMPv2-TC
| DisplayString |
OIDs
RFC description
Huawei TCP protocol monitoring with MD5 authentication failure traps for routing protocols.
Start monitoring Huawei router or switch (TCP MD5 authentication-failure traps) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.