HH3C-RBAC-MIB
AI MIB Summary
The HH3C-RBAC-MIB module enables the monitoring and management of Role-Based Access Control configurations, including user-role assignments, role definitions, and privilege mappings, on H3C network devices via SNMP. This MIB facilitates the verification of access control policies and the auditing of administrative permissions to ensure compliance with security architectures.
This MIB is to provide the definition of the RBAC (Role Based Access Control) system.
Main OID:
hh3cRbac.1.3.6.1.4.1.25506.2.158
40
Objects
Active
Status
3
Dependencies
Imported Objects
Objects
40 total| Object Name |
|---|
hh3cRbacThis MIB is to provide the definition of the RBAC (Role Based Access Control) system. MODULE-IDENTITY .1.3.6.1.4.1.25506.2.158 |
hh3cRbacNotifications OBJECT IDENTIFIER .1.3.6.1.4.1.25506.2.158.0 |
hh3cRbacObjects OBJECT IDENTIFIER .1.3.6.1.4.1.25506.2.158.1 |
hh3cRbacInfo OBJECT IDENTIFIER .1.3.6.1.4.1.25506.2.158.1.1 |
hh3cRbacFeatureTableThis table shows the information about features on a device. SEQUENCE OF Hh3cRbacFeatureEntry .1.3.6.1.4.1.25506.2.158.1.1.1 |
hh3cRbacFeatureEntryAn entry in the hh3cRbacFeatureTable. One entry indicates information about a feature on a device. Hh3cRbacFeatureEntry .1.3.6.1.4.1.25506.2.158.1.1.1.1 |
hh3cRbacFeatureNameThis object indicates the name of a feature. OCTET STRING .1.3.6.1.4.1.25506.2.158.1.1.1.1.1 |
hh3cRbacFeatureDescriptionThis object indicates the introduction of the feature.ro OCTET STRING .1.3.6.1.4.1.25506.2.158.1.1.1.1.2 |
hh3cRbacConfig OBJECT IDENTIFIER .1.3.6.1.4.1.25506.2.158.1.2 |
hh3cRbacRoleDefaultEnableThis object controls if an authenticated user can access the system when he or she isn't authorized any user roles. The default value is false.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.25506.2.158.1.2.1 |
hh3cRbacRoleDefaultRoleNameIf hh3cRbacRoleDefaultEnable is true, this object specifies the user role applied to the user when he or she accesses the system without any authorized user roles. If this object is not configured, the default user role applied is listed as below: network-operator - When login to the default MDC or default Context. mdc-operator - When login to the non-default MDC. context-operator - When login to a non-default Context.rw OCTET STRING .1.3.6.1.4.1.25506.2.158.1.2.2 |
hh3cRbacRoleTableThis table shows the basic configuration information about all user roles. SEQUENCE OF Hh3cRbacRoleEntry .1.3.6.1.4.1.25506.2.158.1.2.3 |
hh3cRbacRoleEntryAn entry in the hh3cRbacRoleTable. One entry per role defined on the device. Hh3cRbacRoleEntry .1.3.6.1.4.1.25506.2.158.1.2.3.1 |
hh3cRbacRoleNameThe name of a role. OCTET STRING .1.3.6.1.4.1.25506.2.158.1.2.3.1.1 |
hh3cRbacRoleDescriptionDescription of the role.rw OCTET STRING .1.3.6.1.4.1.25506.2.158.1.2.3.1.2 |
hh3cRbacRoleResourceAccessDefines the default access to the resources to which access can be controlled. For example a role which has access to all VLANs, all Interfaces, no VRF and no security zone will be 0011.rw Hh3cResourceType .1.3.6.1.4.1.25506.2.158.1.2.3.1.3 |
hh3cRbacRoleStorageTypeStorage type of this row.ro StorageType (SNMPv2-TC) .1.3.6.1.4.1.25506.2.158.1.2.3.1.4 |
hh3cRbacRoleRowStatusStatus of this row.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.25506.2.158.1.2.3.1.5 |
hh3cRbacRuleTableThis table shows the configuration information about rules in all user roles. SEQUENCE OF Hh3cRbacRuleEntry .1.3.6.1.4.1.25506.2.158.1.2.4 |
hh3cRbacRuleEntryAn entry in the hh3cRbacRuleTable. One entry indicates one rule in a role. Hh3cRbacRuleEntry .1.3.6.1.4.1.25506.2.158.1.2.4.1 |
hh3cRbacRuleTypeThe type of a rule. Hh3cRuleType .1.3.6.1.4.1.25506.2.158.1.2.4.1.1 |
hh3cRbacRuleNumberThe index of rules in one role. There are two kinds of rules in a role. One is system defined, the other is user defined. The total numbers of user defined rules is 1024. In one role, the user defined rules will be applied first and then the system defined rules. For the rules of same type, the following guidelines will be applied: Non-OID: If two rules of the same entity type conflict, the rule with the higher index takes effect. OID: If the MIB node specified in a rule is a child node of the MIB nodes specified in other rules, only this rule takes effect. If the same OID is specified in multiple rules, the rule with the higher index takes effect. Unsigned32 .1.3.6.1.4.1.25506.2.158.1.2.4.1.2 |
hh3cRbacRuleActionThe action of a rule.rw Hh3cRuleAction .1.3.6.1.4.1.25506.2.158.1.2.4.1.3 |
hh3cRbacRuleOperationPrivileges of a rule.rw Hh3cRuleOperation .1.3.6.1.4.1.25506.2.158.1.2.4.1.4 |
hh3cRbacRuleEntityTypeThis indicates the type of the entity in a rule. There are seven types of entity as below: unknown: invalid. command: a command or a set of commands that match a regular expression. feature: a feature which contains a set of commands. featuregroup: a group of features. webmenu: web menus. xmlelement: XML elements. oid: the specified MIB node and its child nodes.rw Hh3cEntityType .1.3.6.1.4.1.25506.2.158.1.2.4.1.5 |
hh3cRbacRuleEntityThis indicates the entity that the privileges of rule apply to. It is may be a regular expression of commands, feature name, feature group name, web menu, xml element or oid. If the type of entity is feature or webmenu or xmlelement and the entity is a zero length string, then this rules applies to all the features or web menus or xml elements.rw OCTET STRING .1.3.6.1.4.1.25506.2.158.1.2.4.1.6 |
hh3cRbacRuleRowStatusStatus of this rule.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.25506.2.158.1.2.4.1.7 |
hh3cRbacPolicyTableThis table shows the configuration information about resource access policies in all user roles. A role may be restricted from accessing various resources of a device. This table lists the resources that a role can access. SEQUENCE OF Hh3cRbacPolicyEntry .1.3.6.1.4.1.25506.2.158.1.2.5 |
hh3cRbacPolicyEntryAn entry in the hh3cRbacPolicyTable. One entry indicates an accessible resource. If a role named 'R' can access VLAN1 to VLAN10, then there will be 10 entries in this table. There are two objects to specify the resource in this table. If the value of 'hh3cRbacPolicyType' is 'vlan' or 'interface', the column 'hh3cRbacPolicyValue' is a four octets value which means vlan ID or IfIndex. If the value of 'hh3cRbacPolicyType' is 'vrf' or 'seczone', the column 'hh3cRbacPolicyValue' is a string indicating the name of the VRF or security zone. Hh3cRbacPolicyEntry .1.3.6.1.4.1.25506.2.158.1.2.5.1 |
hh3cRbacPolicyTypeThis object indicates the type of the resource access policy of this entry. Enumeration .1.3.6.1.4.1.25506.2.158.1.2.5.1.1 |
hh3cRbacPolicyValueThis object identifies the resource this role can access. If the value of 'hh3cRbacPolicyType' is 'vlan' or 'interface', the column 'hh3cRbacPolicyValue' is a four-octet-value which means vlan ID or IfIndex. If the value of 'hh3cRbacPolicyType' is 'vrf' or 'seczone', the column 'hh3cRbacPolicyValue' is a string indicating the name of the VRF or security zone. OCTET STRING .1.3.6.1.4.1.25506.2.158.1.2.5.1.2 |
hh3cRbacPolicyRowStatusStatus of this row.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.25506.2.158.1.2.5.1.3 |
hh3cRbacFeatureGroupTableThis table shows the configuration information about feature groups on a device. SEQUENCE OF Hh3cRbacFeatureGroupEntry .1.3.6.1.4.1.25506.2.158.1.2.6 |
hh3cRbacFeatureGroupEntryAn entry in the hh3cRbacFeatureGroupTable. One entry indicates a feature in particular group. Hh3cRbacFeatureGroupEntry .1.3.6.1.4.1.25506.2.158.1.2.6.1 |
hh3cRbacFeatureGroupNameThis object indicates the name of a feature group. OCTET STRING .1.3.6.1.4.1.25506.2.158.1.2.6.1.1 |
hh3cRbacFeatureGroupRowStatusStatus of this row.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.25506.2.158.1.2.6.1.2 |
hh3cRbacFeatureInGroupTableThis table shows the configuration information about features in feature groups on a device. SEQUENCE OF Hh3cRbacFeatureInGroupEntry .1.3.6.1.4.1.25506.2.158.1.2.7 |
hh3cRbacFeatureInGroupEntryAn entry in the hh3cRbacFeaturesInGroupTable. One entry indicates a feature in a particular group. If a newly created feature group doesn't contain any feature, there's no entry appearing in this table. Hh3cRbacFeatureInGroupEntry .1.3.6.1.4.1.25506.2.158.1.2.7.1 |
hh3cRbacFeatureNameInGroupThis object indicates the name of a feature in the feature group. OCTET STRING .1.3.6.1.4.1.25506.2.158.1.2.7.1.1 |
hh3cRbacFeatureInGroupRowStatusStatus of this row.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.25506.2.158.1.2.7.1.2 |