HP-ICF-SECURITY
- Registered at
- 1.3.6.1.4.1.11.2.14.4.41.3.6.1.4.1.11.2.14.10.2.1
- Last updated
- 2007-10-01 09:03
- Organization
- Hewlett Packard Company, Network Infrastructure Solutions
- Revisions
- 2007-10-01 09:03, 2003-01-09 01:12, 2000-11-03 07:56, 1996-09-10 02:00, 1996-01-25 03:56, 1993-07-09 00:00
- Namespace
- hp
- Source file
HP-ICF-SECURITY- Digest
sha256:0cfecca80765d36e40e6e9c730f850d4cafed7e299e40344ffd4146c50530c0d
Description
This MIB module describes objects for managing the SNMPv1 authorization configuration for devices in the HP Integrated Communication Facility product line.
Contact
Hewlett Packard Company 8000 Foothills Blvd. Roseville, CA 95747
Imports
| From | Symbols |
|---|---|
| HP-ICF-OID | hpicfObjectModules, icfSecurity |
| INET-ADDRESS-MIB | InetAddress, InetAddressPrefixLength, InetAddressType |
| SNMPv2-CONF | MODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP |
| SNMPv2-SMI | Integer32, IpAddress, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, TimeTicks, iso |
| SNMPv2-TC | DisplayString, RowStatus, TEXTUAL-CONVENTION |
Imported by
Nothing in this corpus imports this module.
Load order
Every file a consumer needs in order to load this module, dependencies first.
HP-ICF-OID HP-ICF-SECURITY INET-ADDRESS-MIB SNMPv2-CONF SNMPv2-SMI SNMPv2-TC
Objects
| Name | OID | Syntax | Access | Status |
|---|---|---|---|---|
| icfSecurPassword OBJECT-TYPE ********* THIS OBJECT IS DEPRECATED ********* This variable contains a string which is used both as the community name for the password community, and as the login password for the console port. This community name is needed for most SET operations. In addition, the variables in the ICF security group are only visible within the password community, and must use the value of this variable as the community name for GET operations. If the value of this variable is equal to the null string, the community name 'public' or the null string will be treated the same as the password community. This object has been deprecated. Its functionality has been replaced by the icfCommunityTable. | 1.3.6.1.4.1.11.2.14.4.1 | DisplayString (SIZE(0..63)) | read-write | deprecated |
| icfSecurAuthAnyMgr OBJECT-TYPE ********* THIS OBJECT IS DEPRECATED ********* When this variable is set to enabled, any manager with a valid community name may perform SET operations on this device. In this configuration, entries in the icfSecurAuthMgrTable are used only for trap destinations. If this variable is set to disabled, a manager must be in the icfSecurAuthMgrTable and have a valid community name in order to perform SET operations. This object has been deprecated. Its functionality has been replaced by the icfAuthMgrTable. | 1.3.6.1.4.1.11.2.14.4.2 | INTEGER {enabled(1), disabled(2)} | read-write | deprecated |
| icfSecurAuthMgrTable OBJECT-TYPE ********* THIS OBJECT IS DEPRECATED ********* This table contains a list of addresses of managers that are allowed to perform SET operations on this device, and controls the destination addresses for traps. If icfSecurAuthAnyMgr is set to disabled, a manager must be in this table and use the correct community name for the password community in order to perform a GET operation on this table. This table has been deprecated. It is replaced by the icfAuthMgrTable. The trap destination functionality has been replaced by the hpicfTrapDestTable. | 1.3.6.1.4.1.11.2.14.4.3 | not-accessible | deprecated | |
| icfSecurAuthMgrEntry OBJECT-TYPE ********* THIS OBJECT IS DEPRECATED ********* An entry in the icfSecurAuthMgrTable containing information about a single manager. This table has been deprecated. It is replaced by the icfAuthMgrTable. The trap destination functionality has been replaced by the hpicfTrapDestTable. | 1.3.6.1.4.1.11.2.14.4.3.1 | not-accessible | deprecated | |
| icfAuthMgrIndex OBJECT-TYPE ********* THIS OBJECT IS DEPRECATED ********* This object contains the index which uniquely identifies this entry in the icfSecurAuthMgrTable. This table has been deprecated. It is replaced by the icfAuthMgrTable. The trap destination functionality has been replaced by the hpicfTrapDestTable. | 1.3.6.1.4.1.11.2.14.4.3.1.1 | Integer32 (1..10) | read-only | deprecated |
| icfAuthMgrIpAddress OBJECT-TYPE ********* THIS OBJECT IS DEPRECATED ********* The IP address of a manager that is allowed to manage this device. Setting this variable to a nonzero value will clear the corresponding instance of the icfAuthMgrIpxAddress variable. This table has been deprecated. It is replaced by the icfAuthMgrTable. The trap destination functionality has been replaced by the hpicfTrapDestTable. | 1.3.6.1.4.1.11.2.14.4.3.1.2 | IpAddress | read-write | deprecated |
| icfAuthMgrIpxAddress OBJECT-TYPE ********* THIS OBJECT IS DEPRECATED ********* The IPX address of a manager that is allowed to manage this device. Setting this variable to a valid IPX address will clear the corresponding instance of the icfAuthMgrIpAddress variable. This table has been deprecated. It is replaced by the icfAuthMgrTable. The trap destination functionality has been replaced by the hpicfTrapDestTable. | 1.3.6.1.4.1.11.2.14.4.3.1.3 | OCTET STRING (SIZE(10)) | read-write | deprecated |
| icfAuthMgrRcvTraps OBJECT-TYPE ********* THIS OBJECT IS DEPRECATED ********* If this variable is set to enabled, any traps generated by this device will be sent to the manager indicated by the corresponding instance of either icfAuthMgrIpAddress or icfAuthMgrIpxAddress, whichever is valid. This table has been deprecated. It is replaced by the icfAuthMgrTable. The trap destination functionality has been replaced by the hpicfTrapDestTable. | 1.3.6.1.4.1.11.2.14.4.3.1.4 | INTEGER {enabled(1), disabled(2)} | read-write | deprecated |
| icfSecurIntruder OBJECT-IDENTITY | 1.3.6.1.4.1.11.2.14.4.4 | |||
| icfSecurIntruderFlag OBJECT-TYPE If this object is set to 'valid', the remainder of the intruder objects contain information about an authentication failure. The Security LED on the device will blink if this flag is set to 'valid'. The intruder objects will not be overwritten as long as this flag is set to 'valid'. Setting this flag to 'invalid' will turn off the Security LED if there are no other current violations, and will allow the intruder objects to be overwritten by subsequent authentication failures. | 1.3.6.1.4.1.11.2.14.4.4.1 | INTEGER {valid(1), invalid(2)} | read-write | current |
| icfSecurIntruderIpAddress OBJECT-TYPE The IP address of the manager that caused the authentication failure. Only one of icfSecurIntruderIpAddress and icfSecurIntruderIPXAddress will be valid. | 1.3.6.1.4.1.11.2.14.4.4.2 | IpAddress | read-only | current |
| icfSecurIntruderIpxAddress OBJECT-TYPE The IPX address of the manager that caused the authentication failure. Only one of icfSecurIntruderIpAddress and icfSecurIntruderIPXAddress will be valid. | 1.3.6.1.4.1.11.2.14.4.4.3 | OCTET STRING (SIZE(10)) | read-only | current |
| icfSecurIntruderTime OBJECT-TYPE The value of sysUpTime when the authentication failure occurred. A value of 0 indicates that the agent has been reset since this authentication failure occurred. | 1.3.6.1.4.1.11.2.14.4.4.4 | TimeTicks | read-only | current |
| icfCommunityTable OBJECT-TYPE ******************DEPRECATED******************* This table contains information about community names known by this agent. | 1.3.6.1.4.1.11.2.14.4.5 | not-accessible | deprecated | |
| icfCommunityEntry OBJECT-TYPE ******************DEPRECATED******************* An entry in the table, containing information about a single community name. | 1.3.6.1.4.1.11.2.14.4.5.1 | not-accessible | deprecated | |
| icfCommunityIndex OBJECT-TYPE ******************DEPRECATED******************* Uniquely identifies this community name entry. | 1.3.6.1.4.1.11.2.14.4.5.1.1 | Integer32 (1..65535) | not-accessible | deprecated |
| icfCommunityName OBJECT-TYPE ******************DEPRECATED******************* Community name this entry is about. Not allowed to have two active rows with the same community name. | 1.3.6.1.4.1.11.2.14.4.5.1.2 | OCTET STRING (SIZE(1..32)) | read-create | deprecated |
| icfCommunityReadView OBJECT-TYPE ******************DEPRECATED******************* The MIB view used for read requests using this community name. One of the following: 'none' is the empty MIB view. 'discovery' has access to discovery objects, which will be enough to do an address search, send announce packets, and do a link test. This view also includes objects under the samplingProbe subtree. This view is typically used as a writeView for a community used by autodiscovery and autotopology applications. 'restricted' has access to a limited subset of the MIB, which includes monitoring objects and limited set of configuration objects. 'user' has access to everything except objects under the icfSecurity subtree. 'root' has access to everything, including the icfSecurity subtree. | 1.3.6.1.4.1.11.2.14.4.5.1.3 | INTEGER {none(1), discovery(2), restricted(3), user(4), root(5)} | read-create | deprecated |
| icfCommunityWriteView OBJECT-TYPE ******************DEPRECATED******************* The MIB view used for write requests using this community name. One of the following: 'none' is the empty MIB view. 'discovery' has access to discovery objects, which will be enough to do an address search, send announce packets, and do a link test. This view also includes objects under the samplingProbe subtree. This view is typically used as a writeView for a community used by autodiscovery and autotopology applications. 'restricted' has access to a limited subset of the MIB, which includes monitoring objects and limited set of configuration objects. 'user' has access to everything except objects under the icfSecurity subtree. 'root' has access to everything, including the icfSecurity subtree. | 1.3.6.1.4.1.11.2.14.4.5.1.4 | INTEGER {none(1), discovery(2), restricted(3), user(4), root(5)} | read-create | deprecated |
| icfCommunityStatus OBJECT-TYPE ******************DEPRECATED******************* Status of this entry. | 1.3.6.1.4.1.11.2.14.4.5.1.5 | RowStatus | read-create | deprecated |
| icfAuthMgrTable OBJECT-TYPE ******************DEPRECATED******************* This table contains a list of manager addresses. Entries in this table are grouped by using a common value for icfCommunityIndex, that identifies the community name that the group of manager addresses has access to. A community name entry which has a set of entries in this table can only be used by requests originating from one of the addresses in the set. A community name entry which has no entries in this table can be used by requests originating from any address. | 1.3.6.1.4.1.11.2.14.4.6 | not-accessible | deprecated | |
| icfAuthMgrEntry OBJECT-TYPE ******************DEPRECATED******************* An entry in the table, containing a single authorized manager address. | 1.3.6.1.4.1.11.2.14.4.6.1 | not-accessible | deprecated | |
| icfAuthMgrSubIndex OBJECT-TYPE ******************DEPRECATED******************* An index which uniquely identifies an address within a group. | 1.3.6.1.4.1.11.2.14.4.6.1.1 | Integer32 (1..65535) | not-accessible | deprecated |
| icfAuthMgrAddrType OBJECT-TYPE ******************DEPRECATED******************* The network type for this entry. | 1.3.6.1.4.1.11.2.14.4.6.1.2 | INTEGER {ip(1), ipx(2)} | read-create | deprecated |
| icfAuthMgrAddress OBJECT-TYPE ******************DEPRECATED******************* The manager address for this entry, formatted according to the value of icfAuthMgrAddrType. When icfAuthMgrAddrType is 'ip', this value will consist of four octets, containing the IP address of the manager in network byte order. When icfAuthMgrAddrType is 'ipx', this value will consist of ten octets. The first four octets will contain the IPX network number in network byte order, and the remaining six octets will contain the IPX node number in network byte order. | 1.3.6.1.4.1.11.2.14.4.6.1.3 | OCTET STRING (SIZE(4 | 10)) | read-create | deprecated |
| icfAuthMgrMask OBJECT-TYPE ******************DEPRECATED******************* This object is used to qualify the value of the corresponding instance of icfAuthMgrAddress. The semantics of this object depend on the corresponding value of icfAuthMgrAddrType. When icfAuthMgrType is 'ip', this object can be used to allow access by all managers on a particular IP subnet. When icfAuthMgrType is 'ipx', this object can be used to allow access by all managers with a particular IPX network number. | 1.3.6.1.4.1.11.2.14.4.6.1.4 | OCTET STRING (SIZE(4 | 10)) | read-create | deprecated |
| icfAuthMgrStatus OBJECT-TYPE ******************DEPRECATED******************* Status of this entry. | 1.3.6.1.4.1.11.2.14.4.6.1.5 | RowStatus | read-create | deprecated |
| icfAuthIPMgrTable OBJECT-TYPE This table contains a list of IP manager addresses. This list is used grant or deny access to HTTP, telnet, and TFTP. | 1.3.6.1.4.1.11.2.14.4.7 | not-accessible | current | |
| icfAuthIPMgrEntry OBJECT-TYPE An entry in the table containing a single IP authorized manager address. | 1.3.6.1.4.1.11.2.14.4.7.1 | not-accessible | current | |
| icfAuthIPMgrIndex OBJECT-TYPE An index which uniquely identifies an address within the group. | 1.3.6.1.4.1.11.2.14.4.7.1.1 | Integer32 (1..65535) | not-accessible | current |
| icfAuthIPMgrAddress OBJECT-TYPE **************deprecated********************* The IP address of the authorized manager for this entry. This object is deprecated new object icfAuthIPMgr InetAddress has been defined to hold version neutral address type. | 1.3.6.1.4.1.11.2.14.4.7.1.2 | IpAddress | read-create | deprecated |
| icfAuthIPMgrMask OBJECT-TYPE **************deprecated********************** This object qualifies the value of the corresponding instance of icfAuthIPMgrAddress. This object can be used to allow access by all managers on a particular IP subnet. This object is deprecated the new objects which are defined to hold this is value are icfAuthIPMgrInetAddrMaskType and icfAuthIPMgrInetAddrMask. | 1.3.6.1.4.1.11.2.14.4.7.1.3 | IpAddress | read-create | deprecated |
| icfAuthIPMgrAccess OBJECT-TYPE This object defines the access level for a given manager. Operator allows for read only access, and Manager allows for read/write access. | 1.3.6.1.4.1.11.2.14.4.7.1.4 | INTEGER {operator(1), manager(2)} | read-create | current |
| icfAuthIPMgrStatus OBJECT-TYPE Status of this entry. | 1.3.6.1.4.1.11.2.14.4.7.1.5 | RowStatus | read-create | current |
| icfAuthIPMgrInetAddrType OBJECT-TYPE Specifies the type of address stored in icfAuthIPMgrInetAddress object. | 1.3.6.1.4.1.11.2.14.4.7.1.6 | InetAddressType | read-create | current |
| icfAuthIPMgrInetAddress OBJECT-TYPE The IP address of the authorized manager for this entry.This object can hold the version neutral IP address. | 1.3.6.1.4.1.11.2.14.4.7.1.7 | InetAddress | read-create | current |
| icfAuthIPMgrInetAddrMaskType OBJECT-TYPE Specifies the type of IP Mask stored in icfAuthIPMgrInetAddrMask object. | 1.3.6.1.4.1.11.2.14.4.7.1.8 | InetAddressType | read-create | current |
| icfAuthIPMgrInetAddrMask OBJECT-TYPE This object qualifies the value of the corresponding instance of icfAuthIPMgrInetAddress. This object can be used to allow access by all managers on a particular IP subnet.This object can hold the version neutral IP address Mask. | 1.3.6.1.4.1.11.2.14.4.7.1.9 | InetAddress | read-create | current |
| icfSecurityConformance OBJECT-IDENTITY | 1.3.6.1.4.1.11.2.14.10.2.1.1 | |||
| icfSecurityCompliances OBJECT-IDENTITY | 1.3.6.1.4.1.11.2.14.10.2.1.1.1 | |||
| icfSecurityGroups OBJECT-IDENTITY | 1.3.6.1.4.1.11.2.14.10.2.1.1.2 |
Conformance
| Name | OID | Status |
|---|---|---|
| icfSecurCompliance MODULE-COMPLIANCE ********* THIS COMPLIANCE IS DEPRECATED *********/ A compliance statement for agents implementing the original version of this module. | 1.3.6.1.4.1.11.2.14.10.2.1.1.1.1 | obsolete |
| icfV1CommunityCompliance MODULE-COMPLIANCE ********* THIS GROUP IS DEPRECATED ********* A compliance statement for HP ICF agents implementing SNMPv1 community name management. | 1.3.6.1.4.1.11.2.14.10.2.1.1.1.2 | deprecated |
| icfSnmpSecurityGroup OBJECT-GROUP ********* THIS GROUP IS DEPRECATED ********* A collection of objects for managing the SNMPv1 (non-)security configuration on HP networking devices. | 1.3.6.1.4.1.11.2.14.10.2.1.1.2.1 | obsolete |
| icfSecIntruderGroup OBJECT-GROUP A collection of objects for tracking authentication failures. | 1.3.6.1.4.1.11.2.14.10.2.1.1.2.2 | current |
| icfV1CommunityGroup OBJECT-GROUP ********* THIS GROUP IS DEPRECATED ********* A collection of objects for managing SNMPv1 community strings. | 1.3.6.1.4.1.11.2.14.10.2.1.1.2.13 | deprecated |
| icfAuthIPMgrGroup OBJECT-GROUP ***************** deprecated ****************** A collection of objects for granting or denying access to specific IP addresses for HTTP, telnet, and TFTP. This Group object has been deprecated and a new group object has been defined with name icfAuthIPMgrInetGroup. | 1.3.6.1.4.1.11.2.14.10.2.1.1.2.14 | deprecated |
| icfAuthIPMgrInetGroup OBJECT-GROUP A collection of objects for granting or denying access to specific IP addresses for HTTP, telnet, and TFTP. | 1.3.6.1.4.1.11.2.14.10.2.1.1.2.15 | current |