17-User Access and Authentication

HomeSupportRoutersCR16000-M SeriesReference GuidesMIB CompanionH3C CR16000-M Routers MIB Reference-R838x-6W10017-User Access and Authentication
08-HH3C-USER-MIB
Title Size Download
08-HH3C-USER-MIB 108.52 KB

HH3C-USER-MIB

About this MIB

Use this MIB to manage local users.

MIB file name

hh3c-user.mib

Root object

iso(1).org(3).dod(6).internet(1).private(4).enterprises(1).hh3c(25506).hh3cCommon(2).hh3cUser(12)

Scalar objects

hh3cUserIndexIndicator (1.3.6.1.4.1.25506.2.12.1.5)

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cUserIndexIndicator (1.3.6.1.4.1.25506.2.12.1.5)

read-only

Integer32

Standard MIB values.

Index to be used for the next local user.

As per the MIB.

 

hh3cUserIPAddressType (1.3.6.1.4.1.25506.2.12.3.1.1.1)

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cUserIPAddressType (1.3.6.1.4.1.25506.2.12.3.1.1.1)

accessible-for-notify

InetAddressType

Standard MIB values.

User IP address type.

As per the MIB.

 

hh3cUserIPAddress (1.3.6.1.4.1.25506.2.12.3.1.1.2)

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cUserIPAddress (1.3.6.1.4.1.25506.2.12.3.1.1.2)

accessible-for-notify

InetAddress

Standard MIB values.

User IP address.

As per the MIB.

 

hh3cUserGroupUsedNum (1.3.6.1.4.1.25506.2.12.4.1.1)

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cUserGroupUsedNum (1.3.6.1.4.1.25506.2.12.4.1.1)

accessible-for-notify

Unsigned32

Standard MIB values.

Number of existing user groups.

As per the MIB.

 

hh3cUserGroupNumThreshold (1.3.6.1.4.1.25506.2.12.4.1.2)

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cUserGroupNumThreshold (1.3.6.1.4.1.25506.2.12.4.1.2)

accessible-for-notify

Integer32

Standard MIB values.

User group quantity threshold.

As per the MIB.

 

Tabular objects

hh3cUserInfoTable

About this table

Use this table to configure or obtain basic information of a local user.

Support for operations

CreateSupported

Edit/ModifySupported

DeleteSupported

ReadSupported

Columns

The table index is hh3cUserIndex.

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cUserName (1.3.6.1.4.1.25506.2.12.1.1.1.1)

read-create

DisplayString

OCTET STRING (1..255)

Name of a local user.

The username cannot contain any of the following characters: backslash (\), forward slash (/), colon (:), asterisk (*), question mark (?), quotation mark ("), left angle bracket (<), right angle bracket (>), or vertical bar (|). It cannot be a, al, or all and cannot begin with or end with at sign (@).

A username that contains a domain name is in the format of localusername@domain. The localusername part in the username cannot contain any of the following characters: backslash (\), forward slash (/), colon (:), asterisk (*), question mark (?), quotation mark ("), left angle bracket (<), right angle bracket (>), or vertical bar (|).. The maximum length of this part varies by device model.

The username of each local user is unique. You cannot edit an existing username.

hh3cUserPassword (1.3.6.1.4.1.25506.2.12.1.1.1.2)

read-create

DisplayString

OCTET STRING (0..255)

Password of the local user.

When read, this object returns a zero-length string.

hh3cAuthMode (1.3.6.1.4.1.25506.2.12.1.1.1.3)

read-create

Integer32

Standard MIB values.

Encrypting type of the user password.

Value range: 0 or 7.

hh3cUserState (1.3.6.1.4.1.25506.2.12.1.1.1.5)

read-create

INTEGER

active(0),

block(1)

Status of the local user.

As per the MIB.

hh3cUserInfoRowStatus (1.3.6.1.4.1.25506.2.12.1.1.1.6)

read-create

RowStatus

active(1),

createAndGo(4),

destroy(6)

Row status.

As per the MIB.

hh3cUserIndex (1.3.6.1.4.1.25506.2.12.1.1.1.7)

not-accessible

Integer32

Integer32 (1..2147483646)

Index of the local user.

Value range: 1 to 1024.

 

hh3cUserAttributeTable

About this table

This table contains attributes of a local user.

Support for operations

CreateNot supported

Edit/ModifySupported

DeleteNot supported

ReadSupported

Columns

The table index is hh3cUserIndex.

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cAccessLimit (1.3.6.1.4.1.25506.2.12.1.2.1.1)

read-write

Integer32

Standard MIB values.

Maximum number of concurrent users that can use a username to access the device.

Default: No limit is placed on the maximum number of concurrent users that can use a username to access the device.

Value range: 0 to 1024.

hh3cIdleCut (1.3.6.1.4.1.25506.2.12.1.2.1.2)

read-write

Integer32

Standard MIB values.

Idle timeout period, in seconds.

This object will round the specified value to the nearest multiple of 60.

hh3cIPAddress (1.3.6.1.4.1.25506.2.12.1.2.1.3)

read-write

IpAddress

Standard MIB values.

IP address of a user.

Default: 0.0.0.0.

hh3cNasIPAddress (1.3.6.1.4.1.25506.2.12.1.2.1.4)

read-write

IpAddress

Standard MIB values.

IP address of the NAS for the user.

Not supported.

hh3cSlotNum (1.3.6.1.4.1.25506.2.12.1.2.1.5)

read-write

Integer32

Standard MIB values.

Slot number of the user.

Not supported.

hh3cSubSlotNum (1.3.6.1.4.1.25506.2.12.1.2.1.6)

read-write

Integer32

Standard MIB values.

Subslot number of the user.

Not supported.

hh3cPortNum (1.3.6.1.4.1.25506.2.12.1.2.1.7)

read-write

Integer32

Standard MIB values.

Port number of the user.

Not supported.

hh3cMacAddress (1.3.6.1.4.1.25506.2.12.1.2.1.8)

read-write

MacAddress

OCTET STRING (6)

MAC address of the user.

As per the MIB.

hh3cVlan (1.3.6.1.4.1.25506.2.12.1.2.1.9)

read-write

Integer32

Integer32 (0..4094)

ID of the VLAN to which the user belongs.

As per the MIB.

hh3cFtpService (1.3.6.1.4.1.25506.2.12.1.2.1.10)

read-write

ServiceType

enable(1),

disable(2)

FTP service.

Not supported.

hh3cFtpDirectory (1.3.6.1.4.1.25506.2.12.1.2.1.11)

read-write

OCTET STRING

Standard MIB values.

FTP directory.

Not supported.

hh3cLanAccessService (1.3.6.1.4.1.25506.2.12.1.2.1.12)

read-write

ServiceType

enable(1),

disable(2)

LAN access service.

As per the MIB.

hh3cSshService (1.3.6.1.4.1.25506.2.12.1.2.1.13)

read-write

ServiceType

enable(1),

disable(2)

SSH service.

Not supported.

hh3cTelnetService (1.3.6.1.4.1.25506.2.12.1.2.1.14)

read-write

ServiceType

enable(1),

disable(2)

Telnet service.

Not supported.

hh3cTerminalService (1.3.6.1.4.1.25506.2.12.1.2.1.15)

read-write

ServiceType

enable(1),

disable(2)

Terminal service.

Not supported.

hh3cExpirationDate (1.3.6.1.4.1.25506.2.12.1.2.1.16)

read-write

DateAndTime

OCTET STRING (8)

Expired date of the user.

Not supported.

hh3cUserGroup (1.3.6.1.4.1.25506.2.12.1.2.1.17)

read-write

DisplayString

OCTET STRING (0..255)

User group of the user.

A user group name cannot exceed 32 characters.

hh3cPortalService (1.3.6.1.4.1.25506.2.12.1.2.1.18)

read-write

ServiceType

enable(1),

disable(2)

Portal service.

As per the MIB.

hh3cPPPService (1.3.6.1.4.1.25506.2.12.1.2.1.19)

read-write

ServiceType

enable(1),

disable(2)

PPP service.

As per the MIB.

hh3cHttpService (1.3.6.1.4.1.25506.2.12.1.2.1.20)

read-write

ServiceType

enable(1),

disable(2)

HTTP service.

Not supported

hh3cHttpsService (1.3.6.1.4.1.25506.2.12.1.2.1.21)

read-write

ServiceType

enable(1),

disable(2)

HTTPS service.

Not supported

hh3cUserIfIndex (1.3.6.1.4.1.25506.2.12.1.2.1.22)

read-write

Integer32

Standard MIB values.

Index of the user's access interface.

As per the MIB.

 

hh3cUserRoleTable

About this table

Use this table to configure or obtain basis information of a local user.

Support for operations

CreateSupported

Edit/ModifyNot supported

DeleteSupported

ReadSupported

Columns

The table indexes are hh3cUserIndex and hh3cUserRole.

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cUserRole (1.3.6.1.4.1.25506.2.12.1.6.1.1)

not-accessible

DisplayString

OCTET STRING  (1..63))

User role.

In MDCs, the default user role is mdc-operator.

In non-MDCs, the default user role is network-operator.

hh3cUserRoleStatus (1.3.6.1.4.1.25506.2.12.1.6.1.2)

read-create

RowStatus

active(1),

createAndGo(4),

destroy(6)

Row status.

You must specify hh3cUserIndex when you create a local user.

 

hh3cUserGroupInfoTable

About this table

Use this table to configure or obtain basic information of a user group.

Support for operations

CreateSupported

Edit/ModifySupported

DeleteSupported

ReadSupported

Columns

The table index is hh3cUserGroupName.

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cUserGroupName (1.3.6.1.4.1.25506.2.12.2.1.1.1)

not-accessible

DisplayString

OCTET STRING (1..255)

Name of a user group.

As per the MIB.

hh3cUserGroupInfoRowStatus (1.3.6.1.4.1.25506.2.12.2.1.1.2)

read-create

RowStatus

active(1),

createAndGo(4),

destroy(6)

Row status.

As per the MIB.

 

Notifications

hh3cUserBlacklistLock

Basic information

OID

Event

Type

Severity

Recovery notification

Default status

1.3.6.1.4.1.25506.2.12.3.1.0.1

A user was locked to the password control blacklist.

Informational

Warning

N/A (N/A)

OFF

 

Notification triggers

This notification is generated when the number of login failures of a user reaches the upper limit. The user is added to the password control blacklist.

System impact

The system may be under login attacks.

Status control

ON

CLI: Use the snmp-agent trap enable password-control user-lock command.

OFF

CLI: Use the undo snmp-agent trap enable password-control user-lock command.

Object

OID (object name)

Description

Index

Type

Value range

1.3.6.1.4.1.25506.2.12.1.1.1.1 (hh3cUserName)

Username.

hh3cUserIndex

DisplayString

OCTET STRING (1..255)

1.3.6.1.4.1.25506.2.12.3.1.1.1 (hh3cUserIPAddressType)

Address type of the user.

hh3cUserIndex

INTEGER

unknown(0),, ipv4(1), , ipv6(2)

1.3.6.1.4.1.25506.2.12.3.1.1.2 (hh3cUserIPAddress)

IP address of the user.

hh3cUserIndex

InetAddress

OCTET STRING(0..255)

 

Recommended action

Use the display password-control blacklist command to view users in the password control blacklist and analyze whether login user attacks exist. If login user attacks exist, contact the administrator.

hh3cUserBlacklistUnlock

Basic information

OID

Event

Type

Severity

Recovery notification

Default status

1.3.6.1.4.1.25506.2.12.3.1.0.2

A user was unlocked from the password control blacklist.

Informational

Warning

N/A (N/A)

OFF

 

Notification triggers

This notification is generated when a user blacklisted due to login failures is removed from the blacklist because the administrator executed the reset password-control blacklist command or the user lockout timer expires.

System impact

No negative impact on the system.

Status control

ON

CLI: Use the snmp-agent trap enable password-control user-unlock command.

OFF

CLI: Use the undo snmp-agent trap enable password-control user-unlock command.

Object

OID (object name)

Description

Index

Type

Value range

1.3.6.1.4.1.25506.2.12.1.1.1.1 (hh3cUserName)

Username.

hh3cUserIndex

DisplayString

OCTET STRING (1.. 255)

1.3.6.1.4.1.25506.2.12.3.1.1.1 (hh3cUserIPAddressType)

User address type.

hh3cUserIndex

INTEGER

unknown(0),, ipv4(1), , ipv6(2)

1.3.6.1.4.1.25506.2.12.3.1.1.2 (hh3cUserIPAddress)

User IP address.

hh3cUserIndex

InetAddress

OCTET STRING (0..255)

 

Recommended action

No action is required.

hh3cUserGroupThresholdAlarm

Basic information

OID

Event

Type

Severity

Recovery notification

Default status

1.3.6.1.4.1.25506.2.12.4.0.1

Maximum number of user groups already reached.

Error

Major

1.3.6.1.4.1.25506.2.12.4.0.2 (hh3cUserGroupThresholdResume)

OFF

 

Notification triggers

This notification is generated when the number of user groups configured on the device reaches the upper limit.

System impact

New user groups cannot be created.

Status control

ON

CLI: Use the snmp-agent trap enable user-group max-count-threshold command.

OFF

CLI: Use the undo snmp-agent trap enable user-group max-count-threshold command.

Object

OID (object name)

Description

Index

Type

Value range

1.3.6.1.4.1.25506.2.12.4.1.1 (hh3cUserGroupUsedNum)

Current number of user groups.

N/A

Unsigned32

Standard MIB values.

1.3.6.1.4.1.25506.2.12.4.1.2 (hh3cUserGroupNumThreshold)

Maximum number of user groups.

N/A

Integer32

Standard MIB values.

 

Recommended action

1.Use the display user-group command in any view to view local user group information and analyze whether unused user groups exist.

  - If unused user groups exist, proceed to step 2.

  - If no unused user group exists, proceed to step 3.

2.Use the undo user-group command in system view to deleted unused user groups.

3.Collect alarm, log, and configuration information, and contact Technical Support.

hh3cUserGroupThresholdResume

Basic information

OID

Event

Type

Severity

Recovery notification

Default status

1.3.6.1.4.1.25506.2.12.4.0.2

Number of user groups dropped to 90% of the maximum number.

Recovery

Warning

N/A (N/A)

OFF

 

Notification triggers

This notification is generated when the number of user groups configured on the device drops below 90% of the maximum value.

System impact

No negative impact on the system.

Status control

ON

CLI: Use the snmp-agent trap enable user-group max-count-threshold command.

OFF

CLI: Use the undo snmp-agent trap enable user-group max-count-threshold command.

Object

OID (object name)

Description

Index

Type

Value range

1.3.6.1.4.1.25506.2.12.4.1.1 (hh3cUserGroupUsedNum)

Current number of user groups.

N/A

Unsigned32

Standard MIB values.

1.3.6.1.4.1.25506.2.12.4.1.2 (hh3cUserGroupNumThreshold)

Maximum number of user groups.

N/A

Integer32

Standard MIB values.

 

Recommended action

No action is required.

 

  • Cloud & AI
  • InterConnect
  • Intelligent Computing
  • Intelligent Storage
  • Security
  • SMB Products
  • Intelligent Terminal Products
  • Product Support Services
  • Technical Service Solutions
All Services
  • Resource Center
  • Policy
  • Online Help
  • Technical Blogs
All Support
  • Become A Partner
  • Partner Policy & Program
  • Global Learning
  • Partner Sales Resources
  • Partner Business Management
  • Service Business
All Partners
  • Profile
  • News & Events
  • Online Exhibition Center
  • Contact Us
All About Us
新华三官网