USERGROUP-MIB
- Registered at
- 1.3.6.1.4.1.248.14.3
- Last updated
- 2007-09-13 12:00
- Organization
- Hirschmann Automation and Control GmbH
- Revisions
- 2007-09-13 12:00
- Namespace
- hirschmann
- Source file
USERGROUP-MIB- Digest
sha256:f73d20d8f5638ec462ea528105ff64c74609240aa11f4ce33069d5aab8764dde
Description
The Hirschmann Private Usergroup MIB definitions for Platform devices.
Contact
Customer Support Postal: Hirschmann Automation and Control GmbH Stuttgarter Str. 45-51 72654 Neckartenzlingen Germany Tel: +49 7127 14 1981 Web: http://www.hicomcenter.com/ E-Mail: hicomcenter@hirschmann.com
Imports
| From | Symbols |
|---|---|
| HMPRIV-MGMT-SNMP-MIB | hmConfiguration |
| SNMPv2-CONF | MODULE-COMPLIANCE, NOTIFICATION-GROUP |
| SNMPv2-SMI | Integer32, IpAddress, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, TEXTUAL-CONVENTION, iso |
| SNMPv2-TC | DisplayString, TEXTUAL-CONVENTION |
Imported by
Nothing in this corpus imports this module.
Load order
Every file a consumer needs in order to load this module, dependencies first.
BRIDGE-MIB HMPRIV-MGMT-SNMP-MIB IANA-ADDRESS-FAMILY-NUMBERS-MIB IANAifType-MIB IF-MIB INET-ADDRESS-MIB RFC1158-MIB RFC1271-MIB RMON-MIB RMON2-MIB SNMP-FRAMEWORK-MIB SNMPv2-CONF SNMPv2-MIB SNMPv2-SMI SNMPv2-TC TOKEN-RING-RMON-MIB USERGROUP-MIB
Textual conventions
| Name | OID | Syntax | Access | Status |
|---|---|---|---|---|
| MemberID TEXTUAL-CONVENTION mac address in canonical byte order. | current |
Objects
| Name | OID | Syntax | Access | Status |
|---|---|---|---|---|
| hmUserGroupEvent OBJECT-IDENTITY The events of hmUserGroup. | 1.3.6.1.4.1.248.14.3.0 | current | ||
| hmUserGroupTable OBJECT-TYPE A list of user group definitions. | 1.3.6.1.4.1.248.14.3.1 | not-accessible | current | |
| hmUserGroupEntry OBJECT-TYPE user group definition | 1.3.6.1.4.1.248.14.3.1.1 | not-accessible | current | |
| hmUserGroupID OBJECT-TYPE The user group number identifying this instance. | 1.3.6.1.4.1.248.14.3.1.1.1 | Integer32 | read-only | current |
| hmUserGroupDescription OBJECT-TYPE A textual description of the user group instance. | 1.3.6.1.4.1.248.14.3.1.1.2 | DisplayString | read-write | current |
| hmUserGroupRestricted OBJECT-TYPE If set to true(1) any member of this group is restricted to ports - which have hmPortSecPermission set to group(2) and - the group is in hmPortSecAllowedGroupIDs. If set to false(2) the user may also connect to a port if permitted by other hmPortSecPermission settings, e.g. known(3) or world(4). The following access restrictions apply: UserRestr. UserGroupRestr. PortSecPermission access allowed -------------------------------------------------------------------- false false user hmPortSecAllowedUserID false false group hmPortSecAllowedGroupIDs false false known any user group member false false world yes true false/true user hmPortSecAllowedUserID true false/true group no true false/true known no true false/true world no false true user hmPortSecAllowedUserID false true group hmPortSecAllowedGroupIDs false true known no false true world no | 1.3.6.1.4.1.248.14.3.1.1.3 | INTEGER {true(1), false(2)} | read-write | current |
| hmUserGroupSecAction OBJECT-TYPE This variable specifies the action which is taken if a user tries to connect to the given port when he is not allowed to do so. Setting the variable to none(1) disables any action. A value of trapOnly(2) generates a trap. Setting the value to portDisable(3) will send a trap, and additionally disable the port until it is re-enabled by management. | 1.3.6.1.4.1.248.14.3.1.1.4 | INTEGER {none(1), trapOnly(2), portDisable(3)} | read-write | current |
| hmUserGroupMemberTable OBJECT-TYPE A list of users which are members of a given user group. | 1.3.6.1.4.1.248.14.3.2 | not-accessible | current | |
| hmUserGroupMemberEntry OBJECT-TYPE An user group member entry. | 1.3.6.1.4.1.248.14.3.2.1 | not-accessible | current | |
| hmUserGroupMemberGroupID OBJECT-TYPE user group id of this member. | 1.3.6.1.4.1.248.14.3.2.1.1 | Integer32 | read-only | current |
| hmUserGroupMemberUserID OBJECT-TYPE user ID of this member. | 1.3.6.1.4.1.248.14.3.2.1.2 | MemberID | read-only | current |
| hmUserTable OBJECT-TYPE List of all user group members. | 1.3.6.1.4.1.248.14.3.3 | not-accessible | current | |
| hmUserEntry OBJECT-TYPE An user entry. | 1.3.6.1.4.1.248.14.3.3.1 | not-accessible | current | |
| hmUserID OBJECT-TYPE User ID. | 1.3.6.1.4.1.248.14.3.3.1.1 | MemberID | read-only | current |
| hmUserRestricted OBJECT-TYPE If set to true(1) the user may only connect to ports which have hmPortSecPermission set to user(1) and hmPortSecAllowedUserID set to hmUserID. If set to false(2) the user may also connect to a port if permitted by other hmPortSecPermission settings, e.g. group(2), known(3) or world(4). The following access restrictions apply: UserRestr. UserGroupRestr. PortSecPermission access allowed --------------------------------------------------------------------- false false user hmPortSecAllowedUserID false false group hmPortSecAllowedGroupIDs false false known any user group member false false world yes true false/true user hmPortSecAllowedUserID true false/true group no true false/true known no true false/true world no false true user hmPortSecAllowedUserID false true group hmPortSecAllowedGroupIDs false true known no false true world no | 1.3.6.1.4.1.248.14.3.3.1.2 | INTEGER {true(1), false(2)} | read-write | current |
| hmPortSecurityTable OBJECT-TYPE List of port security entries. | 1.3.6.1.4.1.248.14.3.4 | not-accessible | current | |
| hmPortSecurityEntry OBJECT-TYPE A single port security entry. | 1.3.6.1.4.1.248.14.3.4.1 | not-accessible | current | |
| hmPortSecSlotID OBJECT-TYPE Slot number the switch unit is plugged in. | 1.3.6.1.4.1.248.14.3.4.1.1 | Integer32 (1) | read-only | current |
| hmPortSecPortID OBJECT-TYPE Port number within the group. | 1.3.6.1.4.1.248.14.3.4.1.2 | Integer32 (1..32) | read-only | current |
| hmPortSecPermission OBJECT-TYPE This variable specifies the security level of the port. If set to user(1) only the user defined by hmPortSecAllowedUserID may connect to this port. In group(2) mode only members of the user group specified by hmPortSecAllowedGroupIDs are allowed. known(3) means that all users belonging to any user group (all known users) are accepted. Setting the value to world(4) disables the security features, i.e. any user is permitted. For backbone ports the value uplink(5) should be used. If a user does not match the allowed permission he is not able to connect to the network over this port, additionally the actions configured through hmPortSecAction are taken. | 1.3.6.1.4.1.248.14.3.4.1.3 | INTEGER {user(1), group(2), known(3), world(4), uplink(5)} | read-write | current |
| hmPortSecAllowedUserID OBJECT-TYPE This variable specifies the allowed user ID if hmPortSecPermission has been set to user(1). | 1.3.6.1.4.1.248.14.3.4.1.4 | MemberID | read-write | current |
| hmPortSecAllowedGroupIDs OBJECT-TYPE This variable specifies the allowed user groups if hmPortSecPermission has been set to group(2). Each group is represented by a single bit. If a group does not exist the value of the bit is ignored. | 1.3.6.1.4.1.248.14.3.4.1.5 | OCTET STRING (SIZE(128)) | read-write | current |
| hmPortSecConnectedUserID OBJECT-TYPE This variable reflects the user ID of a connected user actually seen on this port. If there is no user connected the value will be 0x00:00:00:00:00:00. | 1.3.6.1.4.1.248.14.3.4.1.6 | MemberID | read-only | current |
| hmPortSecAction OBJECT-TYPE This variable specifies the action which is taken if a user tries to connect to the given port when he is not allowed to do so. Setting the variable to none(1) disables any action. A value of trapOnly(2) generates a trap. Setting the value to portDisable(3) will send a trap, and additionally disable the port until it is re-enabled by management. Setting the value to autoDisable(3) will send a trap, and additionally auto-disable the port for the amount of time specified per port. | 1.3.6.1.4.1.248.14.3.4.1.7 | INTEGER {none(1), trapOnly(2), portDisable(3), autoDisable(4)} | read-write | current |
| hmPortSecAutoReconfigure OBJECT-TYPE This variable controls whether the agent should re-configure the port when another user with an incompatible user group setting has been detected. The default setting, true(1), should be used if a single user is connected to the port. The value false(2) might be useful if more than one user is connected to the port (workgroup mode). | 1.3.6.1.4.1.248.14.3.4.1.8 | INTEGER {true(1), false(2)} | read-write | current |
| hmPortSecPortStatus OBJECT-TYPE This variable shows the current status of the port with respect to port security. If the address seen on the port is allowed, the status is enabled(1), if it is not allowed, the status is disabled(2) if hmUserGroupSecurityAction is portDisable(3), or enabledWithWrongAddr(3) if hmUserGroupSecurityAction is none(1) or trapOnly(2). | 1.3.6.1.4.1.248.14.3.4.1.9 | INTEGER {enabled(1), disabled(2), enabledWithWrongAddr(3)} | read-only | current |
| hmPortSecAllowedUserIPID OBJECT-TYPE This variable specifies the allowed user IP ID if hmPortSecPermission has been set to user(1). | 1.3.6.1.4.1.248.14.3.4.1.10 | IpAddress | read-write | current |
| hmPortSecDynamicLimit OBJECT-TYPE This variable signifies the limit of dynamically learned allowed MAC addresses for a specific port. | 1.3.6.1.4.1.248.14.3.4.1.11 | Integer32 (0..50) | read-write | current |
| hmPortSecDynamicCount OBJECT-TYPE The current number of dynamically learned allowed MAC addresses on this port. | 1.3.6.1.4.1.248.14.3.4.1.12 | Integer32 | read-only | current |
| hmUserGroupSecurityAction OBJECT-TYPE This variable specifies the action which is taken if a user tries to connect to the given port when he is not allowed to do so. Setting the variable to none(1) disables any action. A value of trapOnly(2) generates a trap. Setting the value to portDisable(3) will send a trap, and additionally disable the port until it is re-enabled by management. | 1.3.6.1.4.1.248.14.3.5 | INTEGER {none(1), trapOnly(2), portDisable(3)} | read-write | current |
| hmUserGroupPortSecurityMode OBJECT-TYPE This variable specifies the mode of the hmPortSecurityTable. | 1.3.6.1.4.1.248.14.3.8 | INTEGER {macAddressBased(1), ipAddressBased(2)} | read-write | current |
| hmPortSecExtendedGroup OBJECT-IDENTITY | 1.3.6.1.4.1.248.14.3.10 | |||
| hmPortSecExtendedTable OBJECT-TYPE List of extended port security entries. | 1.3.6.1.4.1.248.14.3.10.1 | not-accessible | current | |
| hmPortSecExtendedEntry OBJECT-TYPE A single extended port security entry. | 1.3.6.1.4.1.248.14.3.10.1.1 | not-accessible | current | |
| hmPortSecExtSlotID OBJECT-TYPE Slot number the switch unit is plugged in. | 1.3.6.1.4.1.248.14.3.10.1.1.1 | Integer32 (1) | not-accessible | current |
| hmPortSecExtPortID OBJECT-TYPE Port number within the group. | 1.3.6.1.4.1.248.14.3.10.1.1.2 | Integer32 (1..32) | not-accessible | current |
| hmPortSecExtAction OBJECT-TYPE This variable specifies the action which is taken if a user tries to connect to the given port when he is not allowed to do so. Setting the variable to none(1) disables any action. A value of trapOnly(2) generates a trap. Setting the value to portDisable(3) will send a trap, and additionally disable the port until it is re-enabled by management. | 1.3.6.1.4.1.248.14.3.10.1.1.3 | INTEGER {none(1), trapOnly(2), portDisable(3)} | read-write | current |
| hmPortSecExtPortStatus OBJECT-TYPE This variable shows the current status of the port with respect to port security. If the address seen on the port is allowed, the status is enabled(1), if it is not allowed, the status is disabled(2) if hmUserGroupSecurityAction is portDisable(3), or enabledWithWrongAddr(3) if hmUserGroupSecurityAction is none(1) or trapOnly(2). | 1.3.6.1.4.1.248.14.3.10.1.1.4 | INTEGER {enabled(1), disabled(2), enabledWithWrongAddr(3)} | read-only | current |
| hmPortSecMultipleAdressesTable OBJECT-TYPE List of port security entries with multiple allowed addresses. | 1.3.6.1.4.1.248.14.3.10.2 | not-accessible | current | |
| hmPortSecMultipleAdressesEntry OBJECT-TYPE A single port security entry with multiple allowed addresses. | 1.3.6.1.4.1.248.14.3.10.2.1 | not-accessible | current | |
| hmPortSecMASlotID OBJECT-TYPE Slot number the switch unit is plugged in. | 1.3.6.1.4.1.248.14.3.10.2.1.1 | Integer32 (1) | not-accessible | current |
| hmPortSecMAPortID OBJECT-TYPE Port number within the group. | 1.3.6.1.4.1.248.14.3.10.2.1.2 | Integer32 (1..32) | not-accessible | current |
| hmPortSecMAExtendedIndex OBJECT-TYPE Number of adresses. | 1.3.6.1.4.1.248.14.3.10.2.1.3 | Integer32 (1..50) | not-accessible | current |
| hmPortSecMAAllowedUserIDs OBJECT-TYPE This variable specifies the allowed user ID if hmPortSecPermission has been set to user(1). | 1.3.6.1.4.1.248.14.3.10.2.1.4 | MemberID | read-write | current |
| hmPortSecMAAllowedUserIPIDs OBJECT-TYPE This variable specifies the allowed user IP ID if hmPortSecPermission has been set to user(1). | 1.3.6.1.4.1.248.14.3.10.2.1.5 | IpAddress | read-write | current |
| hmPortSecMAAllowedUserIDMask OBJECT-TYPE The number of bits from left ro right, that are used from the MAC address. | 1.3.6.1.4.1.248.14.3.10.2.1.6 | Integer32 (1..48) | read-write | current |
Notifications
| Name | OID | Status |
|---|---|---|
| hmNewUserTrap NOTIFICATION-TYPE This trap is sent if an unknown MAC address is detected on a port. | 1.3.6.1.4.1.248.14.3.0.1 | current |
| hmPortSecurityTrap NOTIFICATION-TYPE This trap is sent if a MAC address / IP address is detected on a port which is not acceptable for the current setting of hmPortSecPermission AND ...SecAction is either set to trapOnly(2) or portDisable(3). | 1.3.6.1.4.1.248.14.3.0.2 | current |
| hmPortSecConfigErrorTrap NOTIFICATION-TYPE This trap is sent when two or more users with incompatible user group settings have been detected at the port. | 1.3.6.1.4.1.248.14.3.0.3 | current |