HH3C-RBAC-MIB

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cRbacRoleDefaultEnable (1.3.6.1.4.1.25506.2.158.1.2.1)

read-write

INTEGER

true(1),

false(2),

Status of the default user role feature.

As per the MIB.

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cRbacRoleDefaultRoleName (1.3.6.1.4.1.25506.2.158.1.2.2)

read-write

DisplayString

OCTET STRING (1..63)

Default user role name.

As per the MIB.

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cRbacFeatureName (1.3.6.1.4.1.25506.2.158.1.1.1.1.1)

not-accessible

OCTET STRING

(SIZE(1..15))

Feature name.

As per the MIB.

hh3cRbacFeatureDescription (1.3.6.1.4.1.25506.2.158.1.1.1.1.2)

read-only

OCTET STRING

(SIZE(1..63))

Basic introduction of the feature.

As per the MIB.

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cRbacRoleName (1.3.6.1.4.1.25506.2.158.1.2.3.1.1)

not-accessible

OCTET STRING

(SIZE(1.. 63))

User role name.

As per the MIB.

hh3cRbacRoleDescription (1.3.6.1.4.1.25506.2.158.1.2.3.1.2)

read-create

OCTET STRING

(SIZE(1.. 128))

User role description.

As per the MIB.

hh3cRbacRoleResourceAccess (1.3.6.1.4.1.25506.2.158.1.2.3.1.3)

read-create

Hh3cResourceType

Standard MIB values.

Default access permissions defined for resources that can be controlled by RBAC.

For example, you can define 0011 for a user role if that user role can access all VLANs and all interfaces, but cannot access any VPN instances or security zones.

As per the MIB.

hh3cRbacRoleStorageType (1.3.6.1.4.1.25506.2.158.1.2.3.1.4)

read-only

StorageType

Standard MIB values.

Storage type of the role.

As per the MIB.

hh3cRbacRoleRowStatus (1.3.6.1.4.1.25506.2.158.1.2.3.1.5)

read-create

RowStatus

Standard MIB values.

Role status.

As per the MIB.

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cRbacRuleType (1.3.6.1.4.1.25506.2.158.1.2.4.1.1)

not-accessible

Hh3cRuleType

Standard MIB values.

Rule type.

As per the MIB.

hh3cRbacRuleNumber (1.3.6.1.4.1.25506.2.158.1.2.4.1.2)

not-accessible

Unsigned32

Unsigned32(1..256)

Rule number.

The system supports predefined user role rules and user-defined user role rules for a user role. The total number of user-defined user role rules cannot exceed 1024.

If a predefined user role rule and a user-defined user role rule conflict, the user-defined user role rule takes effect.

If user role rules of the same type conflict, the following guidelines apply:

For non-OID rules, if two rules of the same entity type conflict, the rule with the higher rule number takes effect.

For OID rules, if the MIB node specified in one rule is a subnode to the MIB nodes specified in other rules, only this rule can take effect. If the same OID is specified in multiple rules, only the rule with the highest rule number takes effect.

As per the MIB.

hh3cRbacRuleAction (1.3.6.1.4.1.25506.2.158.1.2.4.1.3)

read-create

Hh3cRuleAction

Standard MIB values.

Rule action.

As per the MIB.

hh3cRbacRuleOperation (1.3.6.1.4.1.25506.2.158.1.2.4.1.4)

read-create

Hh3cRuleOperation

Standard MIB values.

Operation type restricted by the rule.

As per the MIB.

hh3cRbacRuleEntityType (1.3.6.1.4.1.25506.2.158.1.2.4.1.5)

read-create

Hh3cEntityType

Standard MIB values.

Entity type restricted by the rule.

The following entity types are supported:

unknown—Invalid type.

command—A command or a group of commands that match with a regular expression.

feature—A feature that contains a group of commands.

featuregroup—A group of features.

webmenu—Web menus.

xmlelement—XML elements.

oid—A MIB node and its child nodes

As per the MIB.

hh3cRbacRuleEntity (1.3.6.1.4.1.25506.2.158.1.2.4.1.5)

read-create

OCTET STRING

(SIZE (0..255))

Entity restricted by the rule.

The value is a regular expression that might match commands, features, feature groups, Web menus, XML elements, or MIB nodes.

If the entity type is feature, webmenu, or xmlelement, and the entity is an empty string, this rule applies to all features, Web menus, or XML elements.

As per the MIB.

hh3cRbacRuleRowStatus (1.3.6.1.4.1.25506.2.158.1.2.4.1.5)

read-create

RowStatus

Standard MIB values.

Row status of the rule.

As per the MIB.

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cRbacPolicyType (1.3.6.1.4.1.25506.2.158.1.1.5.1.1)

not-accessible

INTEGER

vlan(1),       interface(2),

vrf(3),

seczone(4)

Type of a resource access policy.

As per the MIB.

hh3cRbacPolicyValue (1.3.6.1.4.1.25506.2.158.1.1.5.1.2)

not-accessible

OCTET STRING

(SIZE(1..64))

Resources accessible to a user role.

If the value for the hh3cRbacPolicyType object is vlan or interface,  the value for the hh3cRbacPolicyValue object must be four eight-bit octets that represent VLAN IDs or interface indexes.

If the value for the hh3cRbacPolicyType object is vrf or seczone, the value for the hh3cRbacPolicyValue object represents a string of VPN instance names or security zone names.

As per the MIB.

hh3cRbacPolicyRowStatus (1.3.6.1.4.1.25506.2.158.1.1.5.1.2)

read-create

RowStatus

Standard MIB values.

Row status.

As per the MIB.

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cRbacFeatureGroupName (1.3.6.1.4.1.25506.2.158.1.2.6.1.1)

not-accessible

OCTET STRING

(SIZE(1..31))

Name of a feature group.

As per the MIB.

hh3cRbacFeatureGroupRowStatus (1.3.6.1.4.1.25506.2.158.1.2.6.1.2)

read-create

RowStatus

Standard MIB values.

Row status of the feature group.

As per the MIB.

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cRbacFeatureNameInGroup (1.3.6.1.4.1.25506.2.158.1.2.7.1.1)

not-accessible

OCTET STRING

(SIZE(1..15))

Name of a feature in a feature group.

As per the MIB.

hh3cRbacFeatureInGroupRowStatus (1.3.6.1.4.1.25506.2.158.1.2.7.1.2)

read-create

RowStatus

Standard MIB values.

Row status of the feature.

As per the MIB.