- Table of Contents
-
- 17-User Access and Authentication
- 01-HH3C-8021X-EXT2-MIB
- 02-HH3C-AAA-MIB
- 03-HH3C-DOMAIN-MIB
- 04-HH3C-LOCAL-AAA-SERVER-MIB
- 05-HH3C-PORT-SECURITY-MIB
- 06-HH3C-PORTAL-MIB
- 07-HH3C-RADIUS-MIB
- 08-HH3C-USER-MIB
- 09-IEEE8021-PAE-MIB
- 10-IEEE8021-SECY-MIB
- 11-IEEE8021X-PAE-MIB
- 12-RADIUS-ACC-CLIENT-MIB
- 13-RADIUS-AUTH-CLIENT-MIB
- Related Documents
-
Title | Size | Download |
---|---|---|
08-HH3C-USER-MIB | 108.52 KB |
Contents
hh3cUserIndexIndicator (1.3.6.1.4.1.25506.2.12.1.5)
hh3cUserIPAddressType (1.3.6.1.4.1.25506.2.12.3.1.1.1)
hh3cUserIPAddress (1.3.6.1.4.1.25506.2.12.3.1.1.2)
hh3cUserGroupUsedNum (1.3.6.1.4.1.25506.2.12.4.1.1)
hh3cUserGroupNumThreshold (1.3.6.1.4.1.25506.2.12.4.1.2)
HH3C-USER-MIB
About this MIB
Use this MIB to manage local users.
MIB file name
hh3c-user.mib
Root object
iso(1).org(3).dod(6).internet(1).private(4).enterprises(1).hh3c(25506).hh3cCommon(2).hh3cUser(12)
Scalar objects
hh3cUserIndexIndicator (1.3.6.1.4.1.25506.2.12.1.5)
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
hh3cUserIndexIndicator (1.3.6.1.4.1.25506.2.12.1.5) |
read-only |
Integer32 |
Standard MIB values. |
Index to be used for the next local user. |
As per the MIB. |
hh3cUserIPAddressType (1.3.6.1.4.1.25506.2.12.3.1.1.1)
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
hh3cUserIPAddressType (1.3.6.1.4.1.25506.2.12.3.1.1.1) |
accessible-for-notify |
InetAddressType |
Standard MIB values. |
User IP address type. |
As per the MIB. |
hh3cUserIPAddress (1.3.6.1.4.1.25506.2.12.3.1.1.2)
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
hh3cUserIPAddress (1.3.6.1.4.1.25506.2.12.3.1.1.2) |
accessible-for-notify |
InetAddress |
Standard MIB values. |
User IP address. |
As per the MIB. |
hh3cUserGroupUsedNum (1.3.6.1.4.1.25506.2.12.4.1.1)
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
hh3cUserGroupUsedNum (1.3.6.1.4.1.25506.2.12.4.1.1) |
accessible-for-notify |
Unsigned32 |
Standard MIB values. |
Number of existing user groups. |
As per the MIB. |
hh3cUserGroupNumThreshold (1.3.6.1.4.1.25506.2.12.4.1.2)
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
hh3cUserGroupNumThreshold (1.3.6.1.4.1.25506.2.12.4.1.2) |
accessible-for-notify |
Integer32 |
Standard MIB values. |
User group quantity threshold. |
As per the MIB. |
Tabular objects
hh3cUserInfoTable
About this table
Use this table to configure or obtain basic information of a local user.
Support for operations
Create:Supported
Edit/Modify:Supported
Delete:Supported
Read:Supported
Columns
The table index is hh3cUserIndex.
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
hh3cUserName (1.3.6.1.4.1.25506.2.12.1.1.1.1) |
read-create |
DisplayString |
OCTET STRING (1..255) |
Name of a local user. |
The username cannot contain any of the following characters: backslash (\), forward slash (/), colon (:), asterisk (*), question mark (?), quotation mark ("), left angle bracket (<), right angle bracket (>), or vertical bar (|). It cannot be a, al, or all and cannot begin with or end with at sign (@). A username that contains a domain name is in the format of localusername@domain. The localusername part in the username cannot contain any of the following characters: backslash (\), forward slash (/), colon (:), asterisk (*), question mark (?), quotation mark ("), left angle bracket (<), right angle bracket (>), or vertical bar (|).. The maximum length of this part varies by device model. The username of each local user is unique. You cannot edit an existing username. |
hh3cUserPassword (1.3.6.1.4.1.25506.2.12.1.1.1.2) |
read-create |
DisplayString |
OCTET STRING (0..255) |
Password of the local user. |
When read, this object returns a zero-length string. |
hh3cAuthMode (1.3.6.1.4.1.25506.2.12.1.1.1.3) |
read-create |
Integer32 |
Standard MIB values. |
Encrypting type of the user password. |
Value range: 0 or 7. |
hh3cUserState (1.3.6.1.4.1.25506.2.12.1.1.1.5) |
read-create |
INTEGER |
active(0), block(1) |
Status of the local user. |
As per the MIB. |
hh3cUserInfoRowStatus (1.3.6.1.4.1.25506.2.12.1.1.1.6) |
read-create |
RowStatus |
active(1), createAndGo(4), destroy(6) |
Row status. |
As per the MIB. |
hh3cUserIndex (1.3.6.1.4.1.25506.2.12.1.1.1.7) |
not-accessible |
Integer32 |
Integer32 (1..2147483646) |
Index of the local user. |
Value range: 1 to 1024. |
hh3cUserAttributeTable
About this table
This table contains attributes of a local user.
Support for operations
Create:Not supported
Edit/Modify:Supported
Delete:Not supported
Read:Supported
Columns
The table index is hh3cUserIndex.
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
hh3cAccessLimit (1.3.6.1.4.1.25506.2.12.1.2.1.1) |
read-write |
Integer32 |
Standard MIB values. |
Maximum number of concurrent users that can use a username to access the device. |
Default: No limit is placed on the maximum number of concurrent users that can use a username to access the device. Value range: 0 to 1024. |
hh3cIdleCut (1.3.6.1.4.1.25506.2.12.1.2.1.2) |
read-write |
Integer32 |
Standard MIB values. |
Idle timeout period, in seconds. |
This object will round the specified value to the nearest multiple of 60. |
hh3cIPAddress (1.3.6.1.4.1.25506.2.12.1.2.1.3) |
read-write |
IpAddress |
Standard MIB values. |
IP address of a user. |
Default: 0.0.0.0. |
hh3cNasIPAddress (1.3.6.1.4.1.25506.2.12.1.2.1.4) |
read-write |
IpAddress |
Standard MIB values. |
IP address of the NAS for the user. |
Not supported. |
hh3cSlotNum (1.3.6.1.4.1.25506.2.12.1.2.1.5) |
read-write |
Integer32 |
Standard MIB values. |
Slot number of the user. |
Not supported. |
hh3cSubSlotNum (1.3.6.1.4.1.25506.2.12.1.2.1.6) |
read-write |
Integer32 |
Standard MIB values. |
Subslot number of the user. |
Not supported. |
hh3cPortNum (1.3.6.1.4.1.25506.2.12.1.2.1.7) |
read-write |
Integer32 |
Standard MIB values. |
Port number of the user. |
Not supported. |
hh3cMacAddress (1.3.6.1.4.1.25506.2.12.1.2.1.8) |
read-write |
MacAddress |
OCTET STRING (6) |
MAC address of the user. |
As per the MIB. |
hh3cVlan (1.3.6.1.4.1.25506.2.12.1.2.1.9) |
read-write |
Integer32 |
Integer32 (0..4094) |
ID of the VLAN to which the user belongs. |
As per the MIB. |
hh3cFtpService (1.3.6.1.4.1.25506.2.12.1.2.1.10) |
read-write |
ServiceType |
enable(1), disable(2) |
FTP service. |
Not supported. |
hh3cFtpDirectory (1.3.6.1.4.1.25506.2.12.1.2.1.11) |
read-write |
OCTET STRING |
Standard MIB values. |
FTP directory. |
Not supported. |
hh3cLanAccessService (1.3.6.1.4.1.25506.2.12.1.2.1.12) |
read-write |
ServiceType |
enable(1), disable(2) |
LAN access service. |
As per the MIB. |
hh3cSshService (1.3.6.1.4.1.25506.2.12.1.2.1.13) |
read-write |
ServiceType |
enable(1), disable(2) |
SSH service. |
Not supported. |
hh3cTelnetService (1.3.6.1.4.1.25506.2.12.1.2.1.14) |
read-write |
ServiceType |
enable(1), disable(2) |
Telnet service. |
Not supported. |
hh3cTerminalService (1.3.6.1.4.1.25506.2.12.1.2.1.15) |
read-write |
ServiceType |
enable(1), disable(2) |
Terminal service. |
Not supported. |
hh3cExpirationDate (1.3.6.1.4.1.25506.2.12.1.2.1.16) |
read-write |
DateAndTime |
OCTET STRING (8) |
Expired date of the user. |
Not supported. |
hh3cUserGroup (1.3.6.1.4.1.25506.2.12.1.2.1.17) |
read-write |
DisplayString |
OCTET STRING (0..255) |
User group of the user. |
A user group name cannot exceed 32 characters. |
hh3cPortalService (1.3.6.1.4.1.25506.2.12.1.2.1.18) |
read-write |
ServiceType |
enable(1), disable(2) |
Portal service. |
As per the MIB. |
hh3cPPPService (1.3.6.1.4.1.25506.2.12.1.2.1.19) |
read-write |
ServiceType |
enable(1), disable(2) |
PPP service. |
As per the MIB. |
hh3cHttpService (1.3.6.1.4.1.25506.2.12.1.2.1.20) |
read-write |
ServiceType |
enable(1), disable(2) |
HTTP service. |
Not supported |
hh3cHttpsService (1.3.6.1.4.1.25506.2.12.1.2.1.21) |
read-write |
ServiceType |
enable(1), disable(2) |
HTTPS service. |
Not supported |
hh3cUserIfIndex (1.3.6.1.4.1.25506.2.12.1.2.1.22) |
read-write |
Integer32 |
Standard MIB values. |
Index of the user's access interface. |
As per the MIB. |
hh3cUserRoleTable
About this table
Use this table to configure or obtain basis information of a local user.
Support for operations
Create:Supported
Edit/Modify:Not supported
Delete:Supported
Read:Supported
Columns
The table indexes are hh3cUserIndex and hh3cUserRole.
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
hh3cUserRole (1.3.6.1.4.1.25506.2.12.1.6.1.1) |
not-accessible |
DisplayString |
OCTET STRING (1..63)) |
User role. |
In MDCs, the default user role is mdc-operator. In non-MDCs, the default user role is network-operator. |
hh3cUserRoleStatus (1.3.6.1.4.1.25506.2.12.1.6.1.2) |
read-create |
RowStatus |
active(1), createAndGo(4), destroy(6) |
Row status. |
You must specify hh3cUserIndex when you create a local user. |
hh3cUserGroupInfoTable
About this table
Use this table to configure or obtain basic information of a user group.
Support for operations
Create:Supported
Edit/Modify:Supported
Delete:Supported
Read:Supported
Columns
The table index is hh3cUserGroupName.
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
hh3cUserGroupName (1.3.6.1.4.1.25506.2.12.2.1.1.1) |
not-accessible |
DisplayString |
OCTET STRING (1..255) |
Name of a user group. |
As per the MIB. |
hh3cUserGroupInfoRowStatus (1.3.6.1.4.1.25506.2.12.2.1.1.2) |
read-create |
RowStatus |
active(1), createAndGo(4), destroy(6) |
Row status. |
As per the MIB. |
Notifications
hh3cUserBlacklistLock
Basic information
OID |
Event |
Type |
Severity |
Recovery notification |
Default status |
1.3.6.1.4.1.25506.2.12.3.1.0.1 |
A user was locked to the password control blacklist. |
Informational |
Warning |
N/A (N/A) |
OFF |
Notification triggers
This notification is generated when the number of login failures of a user reaches the upper limit. The user is added to the password control blacklist.
System impact
The system may be under login attacks.
Status control
ON
CLI: Use the snmp-agent trap enable password-control user-lock command.
OFF
CLI: Use the undo snmp-agent trap enable password-control user-lock command.
Object
OID (object name) |
Description |
Index |
Type |
Value range |
1.3.6.1.4.1.25506.2.12.1.1.1.1 (hh3cUserName) |
Username. |
hh3cUserIndex |
DisplayString |
OCTET STRING (1..255) |
1.3.6.1.4.1.25506.2.12.3.1.1.1 (hh3cUserIPAddressType) |
Address type of the user. |
hh3cUserIndex |
INTEGER |
unknown(0),, ipv4(1), , ipv6(2) |
1.3.6.1.4.1.25506.2.12.3.1.1.2 (hh3cUserIPAddress) |
IP address of the user. |
hh3cUserIndex |
InetAddress |
OCTET STRING(0..255) |
Recommended action
Use the display password-control blacklist command to view users in the password control blacklist and analyze whether login user attacks exist. If login user attacks exist, contact the administrator.
hh3cUserBlacklistUnlock
Basic information
OID |
Event |
Type |
Severity |
Recovery notification |
Default status |
1.3.6.1.4.1.25506.2.12.3.1.0.2 |
A user was unlocked from the password control blacklist. |
Informational |
Warning |
N/A (N/A) |
OFF |
Notification triggers
This notification is generated when a user blacklisted due to login failures is removed from the blacklist because the administrator executed the reset password-control blacklist command or the user lockout timer expires.
System impact
No negative impact on the system.
Status control
ON
CLI: Use the snmp-agent trap enable password-control user-unlock command.
OFF
CLI: Use the undo snmp-agent trap enable password-control user-unlock command.
Object
OID (object name) |
Description |
Index |
Type |
Value range |
1.3.6.1.4.1.25506.2.12.1.1.1.1 (hh3cUserName) |
Username. |
hh3cUserIndex |
DisplayString |
OCTET STRING (1.. 255) |
1.3.6.1.4.1.25506.2.12.3.1.1.1 (hh3cUserIPAddressType) |
User address type. |
hh3cUserIndex |
INTEGER |
unknown(0),, ipv4(1), , ipv6(2) |
1.3.6.1.4.1.25506.2.12.3.1.1.2 (hh3cUserIPAddress) |
User IP address. |
hh3cUserIndex |
InetAddress |
OCTET STRING (0..255) |
Recommended action
No action is required.
hh3cUserGroupThresholdAlarm
Basic information
OID |
Event |
Type |
Severity |
Recovery notification |
Default status |
1.3.6.1.4.1.25506.2.12.4.0.1 |
Maximum number of user groups already reached. |
Error |
Major |
1.3.6.1.4.1.25506.2.12.4.0.2 (hh3cUserGroupThresholdResume) |
OFF |
Notification triggers
This notification is generated when the number of user groups configured on the device reaches the upper limit.
System impact
New user groups cannot be created.
Status control
ON
CLI: Use the snmp-agent trap enable user-group max-count-threshold command.
OFF
CLI: Use the undo snmp-agent trap enable user-group max-count-threshold command.
Object
OID (object name) |
Description |
Index |
Type |
Value range |
1.3.6.1.4.1.25506.2.12.4.1.1 (hh3cUserGroupUsedNum) |
Current number of user groups. |
N/A |
Unsigned32 |
Standard MIB values. |
1.3.6.1.4.1.25506.2.12.4.1.2 (hh3cUserGroupNumThreshold) |
Maximum number of user groups. |
N/A |
Integer32 |
Standard MIB values. |
Recommended action
1.Use the display user-group command in any view to view local user group information and analyze whether unused user groups exist.
- If unused user groups exist, proceed to step 2.
- If no unused user group exists, proceed to step 3.
2.Use the undo user-group command in system view to deleted unused user groups.
3.Collect alarm, log, and configuration information, and contact Technical Support.
hh3cUserGroupThresholdResume
Basic information
OID |
Event |
Type |
Severity |
Recovery notification |
Default status |
1.3.6.1.4.1.25506.2.12.4.0.2 |
Number of user groups dropped to 90% of the maximum number. |
Recovery |
Warning |
N/A (N/A) |
OFF |
Notification triggers
This notification is generated when the number of user groups configured on the device drops below 90% of the maximum value.
System impact
No negative impact on the system.
Status control
ON
CLI: Use the snmp-agent trap enable user-group max-count-threshold command.
OFF
CLI: Use the undo snmp-agent trap enable user-group max-count-threshold command.
Object
OID (object name) |
Description |
Index |
Type |
Value range |
1.3.6.1.4.1.25506.2.12.4.1.1 (hh3cUserGroupUsedNum) |
Current number of user groups. |
N/A |
Unsigned32 |
Standard MIB values. |
1.3.6.1.4.1.25506.2.12.4.1.2 (hh3cUserGroupNumThreshold) |
Maximum number of user groups. |
N/A |
Integer32 |
Standard MIB values. |
Recommended action
No action is required.