LEFTHAND-NETWORKS-NSM-SECURITY-MIB

All MIBs › LEFTHAND-NETWORKS-NSM-SECURITY-MIB

Organization: Hewlett Packard Company, StorageWorks Division

Last Updated: 2010-06-23

Category: Domain: Security, Domain: Storage, Vendor: HP/HPE

Description: HP StorageWorks LeftHand Networks MIB for managing security settings and access control on HP P4000 SAN storage systems.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is LEFTHAND-NETWORKS-NSM-SECURITY-MIB?

LEFTHAND-NETWORKS-NSM-SECURITY-MIB is an HP (StorageWorks Division, LeftHand Networks heritage) proprietary MIB reporting user/group security configuration on HP StorageWorks P4000 SAN storage nodes. Its objects cover a user table (name, description, password, row status), a group table (name, description, member-user count, row status) with a group-membership sub-table, and an administrator-user table. As a configuration/security MIB it lets an administrator audit which users and groups have access to a P4000 storage node. It is deployed on HP StorageWorks P4000 SAN storage nodes. Engineers can download the LEFTHAND-NETWORKS-NSM-SECURITY-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in LEFTHAND-NETWORKS-NSM-SECURITY-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

HP StorageWorks P4000 SAN storage nodes

Monitoring Examples

An administrator reviews secUserTable and secGroupTable to audit which accounts have administrative access to an HP StorageWorks P4000 SAN node.

What Can Be Monitored

user/group security configuration

Imported Objects

From LEFTHAND-NETWORKS-GLOBAL-REG-MIB

lhnModules	OBJECT-IDENTITY
lhnNsm	OBJECT-IDENTITY

From LEFTHAND-NETWORKS-NSM-MIB

lhnNsmSecurity

OBJECT-IDENTITY

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DisplayString
RowStatus
TEXTUAL-CONVENTION

How to Use in IPNetwork Monitor

Example using secAdminUserCount OID:

Select an HP StorageWorks P4000 SAN storage node (user/group security config) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type secAdminUserCount into the Find box to locate it in the OID tree, then select it and click OK. The number of users. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is an Integer32-type OID, Value bounds is the most useful condition here — trigger an alert if the count changes from its expected baseline, since that would indicate the underlying set of items changed unexpectedly. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
lhnNsmSecurityModule	1.3.6.1.4.1.9804.2.1.11			HP StorageWorks P4000 Security Information
lhnNsmSecurityModuleConformance	1.3.6.1.4.1.9804.2.1.11.1
lhnNsmSecurityModuleCompliances	1.3.6.1.4.1.9804.2.1.11.1.1
lefthandNetworksNsmSecurityMibCompliance	1.3.6.1.4.1.9804.2.1.11.1.1.1			The compliance statement.
lhnNsmSecurityModuleGroups	1.3.6.1.4.1.9804.2.1.11.1.2
lefthandNetworksNsmSecurityGroup	1.3.6.1.4.1.9804.2.1.11.1.2.1			The default group for all NSM Info objects.
lefthandNetworksNsmSecurityGroupObsolete	1.3.6.1.4.1.9804.2.1.11.1.2.2			The group for obsolete NSM Info objects.
I32 secUserCount	1.3.6.1.4.1.9804.3.1.1.2.11.1	Integer32	read-only	The number of Linux users. Obsolete in SAN/iQ 8.
secUserTable	1.3.6.1.4.1.9804.3.1.1.2.11.2		not-accessible	A table of Linux users. The number of entries is given by secUserCount. Obsolete in SAN/iQ 8.
secUserEntry	1.3.6.1.4.1.9804.3.1.1.2.11.2.1		not-accessible	A row of Linux user information. Obsolete in SAN/iQ 8.
U32 secUserIndex	1.3.6.1.4.1.9804.3.1.1.2.11.2.1.1	Unsigned32	not-accessible	The index for the secUserTable table. Obsolete in SAN/iQ 8.
STR secUserName	1.3.6.1.4.1.9804.3.1.1.2.11.2.1.2	DisplayString	read-only	The Linux username. Obsolete in SAN/iQ 8.
STR secUserDesc	1.3.6.1.4.1.9804.3.1.1.2.11.2.1.3	DisplayString	read-only	The Linux user description. Obsolete in SAN/iQ 8.
STR secUserPassword	1.3.6.1.4.1.9804.3.1.1.2.11.2.1.4	DisplayString	read-write	The Linux user password. Obsolete in SAN/iQ 8.
ROW secUserRowStatus	1.3.6.1.4.1.9804.3.1.1.2.11.2.1.5	RowStatus	read-only	The table row status. Obsolete in SAN/iQ 8.
I32 secGroupCount	1.3.6.1.4.1.9804.3.1.1.2.11.3	Integer32	read-only	The number of Linux groups. Obsolete in SAN/iQ 8.
secGroupTable	1.3.6.1.4.1.9804.3.1.1.2.11.4		not-accessible	A table of Linux groups. The number of entries is given by secGroupCount. Obsolete in SAN/iQ 8.
secGroupEntry	1.3.6.1.4.1.9804.3.1.1.2.11.4.1		not-accessible	A row of Linux group information. Obsolete in SAN/iQ 8.
U32 secGroupIndex	1.3.6.1.4.1.9804.3.1.1.2.11.4.1.1	Unsigned32	not-accessible	The index for the secGroupTable table. Obsolete in SAN/iQ 8.
STR secGroupName	1.3.6.1.4.1.9804.3.1.1.2.11.4.1.2	DisplayString	read-only	The Linux group name.
STR secGroupDesc	1.3.6.1.4.1.9804.3.1.1.2.11.4.1.3	DisplayString	read-only	The Linux group description.
I32 secGroupUserCount	1.3.6.1.4.1.9804.3.1.1.2.11.4.1.4	Integer32	read-only	The number of users in the Linux group. Obsolete in SAN/iQ 8.
ROW secGroupRowStatus	1.3.6.1.4.1.9804.3.1.1.2.11.4.1.5	RowStatus	read-only	The table row status.
secGroupUserTable	1.3.6.1.4.1.9804.3.1.1.2.11.5		not-accessible	A table of Linux security group users. The number of entries is given by secGroupUserCount. Obsolete in SAN/iQ 8.
secGroupUserEntry	1.3.6.1.4.1.9804.3.1.1.2.11.5.1		not-accessible	A row of Linux security group user information. Obsolete in SAN/iQ 8.
U32 secGroupUserIndex	1.3.6.1.4.1.9804.3.1.1.2.11.5.1.1	Unsigned32	not-accessible	The index for the secGroupUserTable table. Obsolete in SAN/iQ 8.
STR secGroupUserName	1.3.6.1.4.1.9804.3.1.1.2.11.5.1.2	DisplayString	read-only	The Linux security group name. Obsolete in SAN/iQ 8.
ROW secGroupUserRowStatus	1.3.6.1.4.1.9804.3.1.1.2.11.5.1.3	RowStatus	read-only	The table row status. Obsolete in SAN/iQ 8.
I32 secAdminUserCountEx	1.3.6.1.4.1.9804.3.1.1.2.11.6	Integer32	read-only	The number of users.
secAdminUserTable	1.3.6.1.4.1.9804.3.1.1.2.11.7		not-accessible	A table of users for the NSM. The number of entries is given by secAdminUserCount.
secAdminUserEntry	1.3.6.1.4.1.9804.3.1.1.2.11.7.1		not-accessible	A row of user information.
U32 secAdminUserIndex	1.3.6.1.4.1.9804.3.1.1.2.11.7.1.1	Unsigned32	not-accessible	The index for the secAdminUserTable table.
STR secAdminUserName	1.3.6.1.4.1.9804.3.1.1.2.11.7.1.2	DisplayString	read-only	The user's username.
STR secAdminUserDesc	1.3.6.1.4.1.9804.3.1.1.2.11.7.1.3	DisplayString	read-only	The user description.
STR secAdminUserPassword	1.3.6.1.4.1.9804.3.1.1.2.11.7.1.4	DisplayString	read-write	The user's password. Obsolete in SAN/iQ 8.
ROW secAdminUserRowStatus	1.3.6.1.4.1.9804.3.1.1.2.11.7.1.5	RowStatus	read-only	The table row status. Obsolete in SAN/iQ 8.5.
I32 secAdminGroupCount	1.3.6.1.4.1.9804.3.1.1.2.11.8	Integer32	read-only	The number of user groups.
secAdminGroupTable	1.3.6.1.4.1.9804.3.1.1.2.11.9		not-accessible	A table of groups on the NSM. The number of entries is given by secAdminGroupCount.
secAdminGroupEntry	1.3.6.1.4.1.9804.3.1.1.2.11.9.1		not-accessible	A row of group information.
U32 secAdminGroupIndex	1.3.6.1.4.1.9804.3.1.1.2.11.9.1.1	Unsigned32	not-accessible	The index for the secAdminGroupTable table.
STR secAdminGroupName	1.3.6.1.4.1.9804.3.1.1.2.11.9.1.2	DisplayString	read-only	The group name.
STR secAdminGroupDesc	1.3.6.1.4.1.9804.3.1.1.2.11.9.1.3	DisplayString	read-only	The group description.
I32 secAdminGroupUserCount	1.3.6.1.4.1.9804.3.1.1.2.11.9.1.4	Integer32	read-only	The number of users in the group.
ROW secAdminGroupRowStatus	1.3.6.1.4.1.9804.3.1.1.2.11.9.1.5	RowStatus	read-only	The table row status. Obsolete in SAN/iQ 8.5.
secAdminGroupUserTable	1.3.6.1.4.1.9804.3.1.1.2.11.10		not-accessible	A table of administrators on the NSM. The number of entries is given by secAdminGroupCount for the 'full_administrator' group.
secAdminGroupUserEntry	1.3.6.1.4.1.9804.3.1.1.2.11.10.1		not-accessible	A row of administrator group information.
U32 secAdminGroupUserIndex	1.3.6.1.4.1.9804.3.1.1.2.11.10.1.1	Unsigned32	not-accessible	The index for the secAdminGroupUserTable table.
STR secAdminGroupUserName	1.3.6.1.4.1.9804.3.1.1.2.11.10.1.2	DisplayString	read-only	The user's username.
ROW secAdminGroupUserRowStatus	1.3.6.1.4.1.9804.3.1.1.2.11.10.1.3	RowStatus	read-only	The table row status. Obsolete in SAN/iQ 8.5.
secAdminGroupAccessTable	1.3.6.1.4.1.9804.3.1.1.2.11.11		not-accessible	The group access permissions table.
secAdminGroupAccessEntry	1.3.6.1.4.1.9804.3.1.1.2.11.11.1		not-accessible	A row of group access permissions.
U32 secAdminGroupAccessIndex	1.3.6.1.4.1.9804.3.1.1.2.11.11.1.1	Unsigned32	not-accessible	The index for the secAdminGroupAccessTable table.
STR secAdminGroupAccessKey	1.3.6.1.4.1.9804.3.1.1.2.11.11.1.2	DisplayString	read-only	The key.
BIT secAdminGroupAccessMode	1.3.6.1.4.1.9804.3.1.1.2.11.11.1.3	Bits	read-only	The access mode.
ROW secAdminGroupAccessRowStatus	1.3.6.1.4.1.9804.3.1.1.2.11.11.1.4	RowStatus	read-only	The table row status.

RFC description

HP StorageWorks P4000 security information MIB for user and group management on storage nodes.

Start monitoring HP StorageWorks P4000 SAN storage node (user/group security config) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download LEFTHAND-NETWORKS-NSM-SECURITY-MIB