USERGROUP-MIB

File: USERGROUP-MIB.mib (28098 bytes)

Imported modules

SNMPv2-SMI SNMPv2-TC HMPRIV-MGMT-SNMP-MIB

Imported symbols

MODULE-IDENTITY OBJECT-TYPE NOTIFICATION-TYPE
OBJECT-IDENTITY TEXTUAL-CONVENTION IpAddress
Integer32 DisplayString hmConfiguration

Defined Types

MemberID  
mac address in canonical byte order.
TEXTUAL-CONVENTION    
  OCTET STRING Size(6)  

HmUserGroupEntry  
SEQUENCE    
  hmUserGroupID Integer32
  hmUserGroupDescription DisplayString
  hmUserGroupRestricted INTEGER
  hmUserGroupSecAction INTEGER

HmUserGroupMemberEntry  
SEQUENCE    
  hmUserGroupMemberGroupID Integer32
  hmUserGroupMemberUserID MemberID

HmUserEntry  
SEQUENCE    
  hmUserID MemberID
  hmUserRestricted INTEGER

HmPortSecurityEntry  
SEQUENCE    
  hmPortSecSlotID Integer32
  hmPortSecPortID Integer32
  hmPortSecPermission INTEGER
  hmPortSecAllowedUserID MemberID
  hmPortSecAllowedGroupIDs OCTET STRING
  hmPortSecConnectedUserID MemberID
  hmPortSecAction INTEGER
  hmPortSecAutoReconfigure INTEGER
  hmPortSecPortStatus INTEGER
  hmPortSecAllowedUserIPID IpAddress
  hmPortSecDynamicLimit Integer32
  hmPortSecDynamicCount Integer32

HmPortSecExtendedEntry  
SEQUENCE    
  hmPortSecExtSlotID Integer32
  hmPortSecExtPortID Integer32
  hmPortSecExtAction INTEGER
  hmPortSecExtPortStatus INTEGER

HmPortSecMultipleAdressesEntry  
SEQUENCE    
  hmPortSecMASlotID Integer32
  hmPortSecMAPortID Integer32
  hmPortSecMAExtendedIndex Integer32
  hmPortSecMAAllowedUserIDs MemberID
  hmPortSecMAAllowedUserIPIDs IpAddress
  hmPortSecMAAllowedUserIDMask Integer32

Defined Values

hmUserGroup 1.3.6.1.4.1.248.14.3
The Hirschmann Private Usergroup MIB definitions for Platform devices.
MODULE-IDENTITY    

hmUserGroupTable 1.3.6.1.4.1.248.14.3.1
A list of user group definitions.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    HmUserGroupEntry

hmUserGroupEntry 1.3.6.1.4.1.248.14.3.1.1
user group definition
Status: current Access: not-accessible
OBJECT-TYPE    
  HmUserGroupEntry  

hmUserGroupID 1.3.6.1.4.1.248.14.3.1.1.1
The user group number identifying this instance.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32  

hmUserGroupDescription 1.3.6.1.4.1.248.14.3.1.1.2
A textual description of the user group instance.
Status: current Access: read-write
OBJECT-TYPE    
  DisplayString  

hmUserGroupRestricted 1.3.6.1.4.1.248.14.3.1.1.3
If set to true(1) any member of this group is restricted to ports - which have hmPortSecPermission set to group(2) and - the group is in hmPortSecAllowedGroupIDs. If set to false(2) the user may also connect to a port if permitted by other hmPortSecPermission settings, e.g. known(3) or world(4). The following access restrictions apply: UserRestr. UserGroupRestr. PortSecPermission access allowed -------------------------------------------------------------------- false false user hmPortSecAllowedUserID false false group hmPortSecAllowedGroupIDs false false known any user group member false false world yes true false/true user hmPortSecAllowedUserID true false/true group no true false/true known no true false/true world no false true user hmPortSecAllowedUserID false true group hmPortSecAllowedGroupIDs false true known no false true world no
Status: current Access: read-write
OBJECT-TYPE    
  INTEGER true(1), false(2)  

hmUserGroupSecAction 1.3.6.1.4.1.248.14.3.1.1.4
This variable specifies the action which is taken if a user tries to connect to the given port when he is not allowed to do so. Setting the variable to none(1) disables any action. A value of trapOnly(2) generates a trap. Setting the value to portDisable(3) will send a trap, and additionally disable the port until it is re-enabled by management.
Status: current Access: read-write
OBJECT-TYPE    
  INTEGER none(1), trapOnly(2), portDisable(3)  

hmUserGroupMemberTable 1.3.6.1.4.1.248.14.3.2
A list of users which are members of a given user group.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    HmUserGroupMemberEntry

hmUserGroupMemberEntry 1.3.6.1.4.1.248.14.3.2.1
An user group member entry.
Status: current Access: not-accessible
OBJECT-TYPE    
  HmUserGroupMemberEntry  

hmUserGroupMemberGroupID 1.3.6.1.4.1.248.14.3.2.1.1
user group id of this member.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32  

hmUserGroupMemberUserID 1.3.6.1.4.1.248.14.3.2.1.2
user ID of this member.
Status: current Access: read-only
OBJECT-TYPE    
  MemberID  

hmUserTable 1.3.6.1.4.1.248.14.3.3
List of all user group members.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    HmUserEntry

hmUserEntry 1.3.6.1.4.1.248.14.3.3.1
An user entry.
Status: current Access: not-accessible
OBJECT-TYPE    
  HmUserEntry  

hmUserID 1.3.6.1.4.1.248.14.3.3.1.1
User ID.
Status: current Access: read-only
OBJECT-TYPE    
  MemberID  

hmUserRestricted 1.3.6.1.4.1.248.14.3.3.1.2
If set to true(1) the user may only connect to ports which have hmPortSecPermission set to user(1) and hmPortSecAllowedUserID set to hmUserID. If set to false(2) the user may also connect to a port if permitted by other hmPortSecPermission settings, e.g. group(2), known(3) or world(4). The following access restrictions apply: UserRestr. UserGroupRestr. PortSecPermission access allowed --------------------------------------------------------------------- false false user hmPortSecAllowedUserID false false group hmPortSecAllowedGroupIDs false false known any user group member false false world yes true false/true user hmPortSecAllowedUserID true false/true group no true false/true known no true false/true world no false true user hmPortSecAllowedUserID false true group hmPortSecAllowedGroupIDs false true known no false true world no
Status: current Access: read-write
OBJECT-TYPE    
  INTEGER true(1), false(2)  

hmPortSecurityTable 1.3.6.1.4.1.248.14.3.4
List of port security entries.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    HmPortSecurityEntry

hmPortSecurityEntry 1.3.6.1.4.1.248.14.3.4.1
A single port security entry.
Status: current Access: not-accessible
OBJECT-TYPE    
  HmPortSecurityEntry  

hmPortSecSlotID 1.3.6.1.4.1.248.14.3.4.1.1
Slot number the switch unit is plugged in.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 1..1  

hmPortSecPortID 1.3.6.1.4.1.248.14.3.4.1.2
Port number within the group.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 1..32  

hmPortSecPermission 1.3.6.1.4.1.248.14.3.4.1.3
This variable specifies the security level of the port. If set to user(1) only the user defined by hmPortSecAllowedUserID may connect to this port. In group(2) mode only members of the user group specified by hmPortSecAllowedGroupIDs are allowed. known(3) means that all users belonging to any user group (all known users) are accepted. Setting the value to world(4) disables the security features, i.e. any user is permitted. For backbone ports the value uplink(5) should be used. If a user does not match the allowed permission he is not able to connect to the network over this port, additionally the actions configured through hmPortSecAction are taken.
Status: current Access: read-write
OBJECT-TYPE    
  INTEGER user(1), group(2), known(3), world(4), uplink(5)  

hmPortSecAllowedUserID 1.3.6.1.4.1.248.14.3.4.1.4
This variable specifies the allowed user ID if hmPortSecPermission has been set to user(1).
Status: current Access: read-write
OBJECT-TYPE    
  MemberID  

hmPortSecAllowedGroupIDs 1.3.6.1.4.1.248.14.3.4.1.5
This variable specifies the allowed user groups if hmPortSecPermission has been set to group(2). Each group is represented by a single bit. If a group does not exist the value of the bit is ignored.
Status: current Access: read-write
OBJECT-TYPE    
  OCTET STRING Size(128)  

hmPortSecConnectedUserID 1.3.6.1.4.1.248.14.3.4.1.6
This variable reflects the user ID of a connected user actually seen on this port. If there is no user connected the value will be 0x00:00:00:00:00:00.
Status: current Access: read-only
OBJECT-TYPE    
  MemberID  

hmPortSecAction 1.3.6.1.4.1.248.14.3.4.1.7
This variable specifies the action which is taken if a user tries to connect to the given port when he is not allowed to do so. Setting the variable to none(1) disables any action. A value of trapOnly(2) generates a trap. Setting the value to portDisable(3) will send a trap, and additionally disable the port until it is re-enabled by management. Setting the value to autoDisable(3) will send a trap, and additionally auto-disable the port for the amount of time specified per port.
Status: current Access: read-write
OBJECT-TYPE    
  INTEGER none(1), trapOnly(2), portDisable(3), autoDisable(4)  

hmPortSecAutoReconfigure 1.3.6.1.4.1.248.14.3.4.1.8
This variable controls whether the agent should re-configure the port when another user with an incompatible user group setting has been detected. The default setting, true(1), should be used if a single user is connected to the port. The value false(2) might be useful if more than one user is connected to the port (workgroup mode).
Status: current Access: read-write
OBJECT-TYPE    
  INTEGER true(1), false(2)  

hmPortSecPortStatus 1.3.6.1.4.1.248.14.3.4.1.9
This variable shows the current status of the port with respect to port security. If the address seen on the port is allowed, the status is enabled(1), if it is not allowed, the status is disabled(2) if hmUserGroupSecurityAction is portDisable(3), or enabledWithWrongAddr(3) if hmUserGroupSecurityAction is none(1) or trapOnly(2).
Status: current Access: read-only
OBJECT-TYPE    
  INTEGER enabled(1), disabled(2), enabledWithWrongAddr(3)  

hmPortSecAllowedUserIPID 1.3.6.1.4.1.248.14.3.4.1.10
This variable specifies the allowed user IP ID if hmPortSecPermission has been set to user(1).
Status: current Access: read-write
OBJECT-TYPE    
  IpAddress  

hmPortSecDynamicLimit 1.3.6.1.4.1.248.14.3.4.1.11
This variable signifies the limit of dynamically learned allowed MAC addresses for a specific port.
Status: current Access: read-write
OBJECT-TYPE    
  Integer32 0..50  

hmPortSecDynamicCount 1.3.6.1.4.1.248.14.3.4.1.12
The current number of dynamically learned allowed MAC addresses on this port.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32  

hmUserGroupSecurityAction 1.3.6.1.4.1.248.14.3.5
This variable specifies the action which is taken if a user tries to connect to the given port when he is not allowed to do so. Setting the variable to none(1) disables any action. A value of trapOnly(2) generates a trap. Setting the value to portDisable(3) will send a trap, and additionally disable the port until it is re-enabled by management.
Status: current Access: read-write
OBJECT-TYPE    
  INTEGER none(1), trapOnly(2), portDisable(3)  

hmUserGroupPortSecurityMode 1.3.6.1.4.1.248.14.3.8
This variable specifies the mode of the hmPortSecurityTable.
Status: current Access: read-write
OBJECT-TYPE    
  INTEGER macAddressBased(1), ipAddressBased(2)  

hmPortSecExtendedGroup 1.3.6.1.4.1.248.14.3.10
OBJECT IDENTIFIER    

hmPortSecExtendedTable 1.3.6.1.4.1.248.14.3.10.1
List of extended port security entries.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    HmPortSecExtendedEntry

hmPortSecExtendedEntry 1.3.6.1.4.1.248.14.3.10.1.1
A single extended port security entry.
Status: current Access: not-accessible
OBJECT-TYPE    
  HmPortSecExtendedEntry  

hmPortSecExtSlotID 1.3.6.1.4.1.248.14.3.10.1.1.1
Slot number the switch unit is plugged in.
Status: current Access: not-accessible
OBJECT-TYPE    
  Integer32 1..1  

hmPortSecExtPortID 1.3.6.1.4.1.248.14.3.10.1.1.2
Port number within the group.
Status: current Access: not-accessible
OBJECT-TYPE    
  Integer32 1..32  

hmPortSecExtAction 1.3.6.1.4.1.248.14.3.10.1.1.3
This variable specifies the action which is taken if a user tries to connect to the given port when he is not allowed to do so. Setting the variable to none(1) disables any action. A value of trapOnly(2) generates a trap. Setting the value to portDisable(3) will send a trap, and additionally disable the port until it is re-enabled by management.
Status: current Access: read-write
OBJECT-TYPE    
  INTEGER none(1), trapOnly(2), portDisable(3)  

hmPortSecExtPortStatus 1.3.6.1.4.1.248.14.3.10.1.1.4
This variable shows the current status of the port with respect to port security. If the address seen on the port is allowed, the status is enabled(1), if it is not allowed, the status is disabled(2) if hmUserGroupSecurityAction is portDisable(3), or enabledWithWrongAddr(3) if hmUserGroupSecurityAction is none(1) or trapOnly(2).
Status: current Access: read-only
OBJECT-TYPE    
  INTEGER enabled(1), disabled(2), enabledWithWrongAddr(3)  

hmPortSecMultipleAdressesTable 1.3.6.1.4.1.248.14.3.10.2
List of port security entries with multiple allowed addresses.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    HmPortSecMultipleAdressesEntry

hmPortSecMultipleAdressesEntry 1.3.6.1.4.1.248.14.3.10.2.1
A single port security entry with multiple allowed addresses.
Status: current Access: not-accessible
OBJECT-TYPE    
  HmPortSecMultipleAdressesEntry  

hmPortSecMASlotID 1.3.6.1.4.1.248.14.3.10.2.1.1
Slot number the switch unit is plugged in.
Status: current Access: not-accessible
OBJECT-TYPE    
  Integer32 1..1  

hmPortSecMAPortID 1.3.6.1.4.1.248.14.3.10.2.1.2
Port number within the group.
Status: current Access: not-accessible
OBJECT-TYPE    
  Integer32 1..32  

hmPortSecMAExtendedIndex 1.3.6.1.4.1.248.14.3.10.2.1.3
Number of adresses.
Status: current Access: not-accessible
OBJECT-TYPE    
  Integer32 1..50  

hmPortSecMAAllowedUserIDs 1.3.6.1.4.1.248.14.3.10.2.1.4
This variable specifies the allowed user ID if hmPortSecPermission has been set to user(1).
Status: current Access: read-write
OBJECT-TYPE    
  MemberID  

hmPortSecMAAllowedUserIPIDs 1.3.6.1.4.1.248.14.3.10.2.1.5
This variable specifies the allowed user IP ID if hmPortSecPermission has been set to user(1).
Status: current Access: read-write
OBJECT-TYPE    
  IpAddress  

hmPortSecMAAllowedUserIDMask 1.3.6.1.4.1.248.14.3.10.2.1.6
The number of bits from left ro right, that are used from the MAC address.
Status: current Access: read-write
OBJECT-TYPE    
  Integer32 1..48  

hmUserGroupEvent 1.3.6.1.4.1.248.14.3.0
The events of hmUserGroup.
Status: current Access: read-write
OBJECT-IDENTITY    

hmNewUserTrap 1.3.6.1.4.1.248.14.3.0.1
This trap is sent if an unknown MAC address is detected on a port.
Status: current Access: read-write
NOTIFICATION-TYPE    

hmPortSecurityTrap 1.3.6.1.4.1.248.14.3.0.2
This trap is sent if a MAC address / IP address is detected on a port which is not acceptable for the current setting of hmPortSecPermission AND ...SecAction is either set to trapOnly(2) or portDisable(3).
Status: current Access: read-write
NOTIFICATION-TYPE    

hmPortSecConfigErrorTrap 1.3.6.1.4.1.248.14.3.0.3
This trap is sent when two or more users with incompatible user group settings have been detected at the port.
Status: current Access: read-write
NOTIFICATION-TYPE