HUAWEI-FIREWALL-MIB
AI MIB Summary
The HUAWEI-FIREWALL-MIB module provides SNMP access to monitor and manage security policies, session states, and traffic statistics on Huawei firewall appliances. It enables the retrieval of interface counters, connection table entries, and rule hit counts to facilitate real-time security posture assessment and troubleshooting.
The MIB contains objects of firewall , referencing the draft-grall-firewall-mib-01.
Main OID:
hwFirewallMIB.1.3.6.1.4.1.2011.5.25.222
93
Objects
Active
Status
7
Dependencies
Imported Objects
Objects
93 total| Object Name |
|---|
hwFirewallMIBThe MIB contains objects of firewall , referencing the draft-grall-firewall-mib-01. MODULE-IDENTITY .1.3.6.1.4.1.2011.5.25.222 |
hwFirewallMIBObjects OBJECT IDENTIFIER .1.3.6.1.4.1.2011.5.25.222.1 |
hwFwEvents OBJECT IDENTIFIER .1.3.6.1.4.1.2011.5.25.222.1.1 |
hwFwNetEvents OBJECT IDENTIFIER .1.3.6.1.4.1.2011.5.25.222.1.1.2 |
hwFwNetEventsTableLastRowThe index value of the last row in the
hwFwNetEventsTable. This number starts at 1 and
increase by one with each new log entry. When this
number wraps, all events are deleted.ro Unsigned32 .1.3.6.1.4.1.2011.5.25.222.1.1.2.1 |
hwFwBasicEvents OBJECT IDENTIFIER .1.3.6.1.4.1.2011.5.25.222.1.1.2.3 |
hwFwBasicEventsTableLastRowThe index value of the most recently created row
in the cfwBasicEventsTable. This number starts at
1 and increase by one with each new log entry. When
this number wraps, all events are deleted.ro Unsigned32 .1.3.6.1.4.1.2011.5.25.222.1.1.2.3.1 |
hwFwBasicEventsTableTable of basic data for firewall events. The agent
may choose to delete the instances of cfwBasicEventsEntry
as required because of lack of memory. The oldest Events
will be selected first for deletion. SEQUENCE OF HwFwBasicEventsEntry .1.3.6.1.4.1.2011.5.25.222.1.1.2.3.2 |
hwFwBasicEventsEntryAn entry in the table, containing general information
about an event. This table will always be sparse, i.e.,
each row will instanciate only a subet of the columnar
objects. HwFwBasicEventsEntry .1.3.6.1.4.1.2011.5.25.222.1.1.2.3.2.1 |
hwFwBasicEventIndexAn index that uniquely identifies an entry in the
log table. These indices are assigned beginning
with 1 and increase by one with each new event logged. Unsigned32 .1.3.6.1.4.1.2011.5.25.222.1.1.2.3.2.1.1 |
hwFwBasicEventTimeThe time that the event occurred.ro SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.6.1.4.1.2011.5.25.222.1.1.2.3.2.1.2 |
hwFwBasicSecurityEventTypeThe type of security-related event that this row contains.
If the event is not security-related this object will not
be instantiated.ro SecurityEvent .1.3.6.1.4.1.2011.5.25.222.1.1.2.3.2.1.3 |
hwFwBasicEventDescriptionA description of the event. The value of the object may
be a zero-length string.ro SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.6.1.4.1.2011.5.25.222.1.1.2.3.2.1.4 |
hwFwBasicEventDetailsTableRowA pointer to a row in the table containing details
about this event. Generally, the table will be the
cfwNetEventsTable but a Cisco-defined table may also
appear here. If there there is no more detailed
information for this event the value of this object
will have the value {0 0}.ro Unsigned32 .1.3.6.1.4.1.2011.5.25.222.1.1.2.3.2.1.5 |
hwFwNetEventsTableTable of detailed data for network events. The
agent may choose to delete the instances of
hwFwBasicEventsEntry as required because of lack of
memory. It is an implementation-specific matter as
to when this deletion may occur. It is recommended
that the oldest log instances are deleted first. SEQUENCE OF HwFwNetEventsEntry .1.3.6.1.4.1.2011.5.25.222.1.1.2.4 |
hwFwNetEventsEntryAn entry in the table, containing detailed information
about an event. Note that this table may be sparse.
If Network Address Translation is not enabled
hwFwNetEventInsideSrcIpAddress and
hwFwNetEventInsideDstIpAddress will not be instantiated
in the row. If Port Address Translation is not enabled
hwFwNetEventInsideSrcIpPort and
hwFwNetEventInsideDstIpPort will not be instantiated
in the row. Entries are added to this table at the
same time that events are added to the hwFwBasicEventsTable.
These two tables may be configured to be different
sizes so there may not be a one-to-one correspondence
between rows in the two tables. HwFwNetEventsEntry .1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1 |
hwFwNetEventIndexAn index that uniquely identifies an entry in the
log table. These indices are assigned beginning with
one and increase by one with each new log entry. When
this number wraps, all events are deleted in order to
allow the NMS to differentiate between old and new
events. Unsigned32 .1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.1 |
hwFwNetEventInterfaceThe interface most closely associated with this event.
For example, for an event that relates to the receipt of
a packet, this object identifies the interface on which
the packet was received. If there are multiple interfaces
associated with an event, the interface most closely
associated with the cause of the event will be used.
For example, for an event for the setup of a TCP
connection, the interface on the initiator's side
of the connection would be preferred. If there is no
associated interface, then this object has the value zero.ro InterfaceIndexOrZero (IF-MIB) .1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.2 |
hwFwNetEventSrcVrfNameThis object indicates the VRF's name.ro DisplayString .1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.3 |
hwFwNetEventSrcIpAddressSource IP address in the IP packet that caused the
event. If there is no packet associated with the
event this object has the value of zero. If the event is
the result of multiple packets with different source
addresses, this value may be zero or an address taken
from an arbitrarily chosen packet in the sequence of
packets causing the event.ro IpAddress .1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.4 |
hwFwNetEventInsideSrcIpAddressSource IP address after Network Address Translation
has been applied. If NAT has not been applied to the
source address in this packet this object will not
be instantiated, resulting in a sparse table. If the
event is the result of multiple packets with different
source addresses, this value may be zero or an address
taken from an arbitrarily chosen packet in the sequence
of packets causing the event.ro IpAddress .1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.5 |
hwFwNetEventDstVrfNameThis object indicates the VRF's name.ro DisplayString .1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.6 |
hwFwNetEventDstIpAddressDestination IP address in the IP packet that caused
the event. If there is no packet associated with
the event this object has the value of zero. If the event
is the result of multiple packets with different destination
addresses, this value may be zero or an address taken
from an arbitrarily chosen packet in the sequence of
packets causing the event.ro IpAddress .1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.7 |
hwFwNetEventInsideDstIpAddressDestination IP address after Network Address Translation
has been applied. If NAT has not been applied to the
destination address in this packet this object will not
be instantiated, resulting in a sparse table. If the event
is the result of multiple packets with different destination
addresses, this value may be zero or an address taken
from an arbitrarily chosen packet in the sequence of
packets causing the event.ro IpAddress .1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.8 |
hwFwNetEventSrcIpPortSource UDP/TCP port in the IP packet that caused
the event. If there is no packet associated with the
event this object has the value of zero. If the event
is the result of multiple packets with different source
ports, this value may be zero or a port taken from an
arbitrarily chosen packet in the sequence of packets
causing the event.ro Integer32 .1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.9 |
hwFwNetEventInsideSrcIpPortSource UDP/TCP port after Port Address Translation
has been applied. If PAT has not been applied to the
source port in this packet this object will not be
instantiated, resulting in a sparse table. If the
event is the result of multiple packets with different
source ports, this value may be zero or a port taken
from an arbitrarily chosen packet in the sequence of
packets causing the event.ro Integer32 .1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.10 |
hwFwNetEventDstIpPortDestination UDP/TCP port in the IP packet that caused
the event. If there is no packet associated with the
event this object has the value of zero. If the event is
the result of multiple packets with different destination
ports, this value may be zero or a port taken from an
arbitrarily chosen packet in the sequence of packets
causing the event.ro Integer32 .1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.11 |
hwFwNetEventInsideDstIpPortDestination UDP/TCP port after Port Address Translation
has been applied. If PAT has not been applied to the
Destination port in this packet this object will not be
instantiated, resulting in a sparse table. If the event
is the result of multiple packets with different
destination ports, this value may be zero or a port
taken from an arbitrarily chosen packet in the sequence
of packets causing the event.ro Integer32 .1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.12 |
hwFwNetEventServiceThe identification of the type of service involved
with this event.ro Services .1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.13 |
hwFwNetEventServiceInformationSpecific service information. This can be used to
describe the particular service indentified by
hwFwNetEventService and can reflect whether the service
is a local service or a gateway service. For example,
if the value for hwFwNetEventService is loginTelnet
then the string provided might be 'local telnet'.ro SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.14 |
hwFwNetEventIdentityThis object will contain a description of the entity that
caused the event. The entity could be a userid, username,
processid or other identifier for the entity using the service.
If there is no such information then this object will contain
a zero-length string.ro SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.15 |
hwFwNetEventDescriptionA detailed description of the event.ro SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.16 |
hwFwSystem OBJECT IDENTIFIER .1.3.6.1.4.1.2011.5.25.222.1.2 |
hwFwStatistics OBJECT IDENTIFIER .1.3.6.1.4.1.2011.5.25.222.1.2.2 |
hwFwConnectionStatTableTable of firewall statistic instances. SEQUENCE OF HwFwConnectionStatEntry .1.3.6.1.4.1.2011.5.25.222.1.2.2.2 |
hwFwConnectionStatEntryAn entry in the table, containing information about a
firewall statistic. HwFwConnectionStatEntry .1.3.6.1.4.1.2011.5.25.222.1.2.2.2.1 |
hwFwConnectionStatServiceThe identification of the type of connection providing
statistics. Services .1.3.6.1.4.1.2011.5.25.222.1.2.2.2.1.1 |
hwFwConnectionStatTypeThe state of the connections that this row contains
statistics for. ConnectionStat .1.3.6.1.4.1.2011.5.25.222.1.2.2.2.1.2 |
hwFwConnectionStatDescriptionA detailed textual description of this statistic.ro SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.6.1.4.1.2011.5.25.222.1.2.2.2.1.3 |
hwFwConnectionStatCountThis is an integer that contains the value of the
resource statistic. If a type of 'gauge' is more
appropriate this object will be omitted resulting
in a sparse table.ro Counter32 .1.3.6.1.4.1.2011.5.25.222.1.2.2.2.1.4 |
hwFwZone OBJECT IDENTIFIER .1.3.6.1.4.1.2011.5.25.222.1.2.3 |
hwFwZoneNumOfEntriesThis object maintains a count of the number of entries
that currently exist in the hwFwZoneTable.ro Gauge32 .1.3.6.1.4.1.2011.5.25.222.1.2.3.1 |
hwFwZoneTableTable of firewall zone instances. SEQUENCE OF HwFwZoneEntry .1.3.6.1.4.1.2011.5.25.222.1.2.3.2 |
hwFwZoneEntryAn entry in the table, containing information about a
firewall zone. HwFwZoneEntry .1.3.6.1.4.1.2011.5.25.222.1.2.3.2.1 |
hwFwZoneIndexThis object represents the name of a firewall zone. Unsigned32 .1.3.6.1.4.1.2011.5.25.222.1.2.3.2.1.1 |
hwFwZoneNameThis object represents the name of a firewall zone.ro OCTET STRING .1.3.6.1.4.1.2011.5.25.222.1.2.3.2.1.2 |
hwFwZonePriorityThis object represents the priority of a firewall zone.ro Unsigned32 .1.3.6.1.4.1.2011.5.25.222.1.2.3.2.1.3 |
hwFwZoneIfListThe set of interface which belong to the firewall zone.ro OCTET STRING .1.3.6.1.4.1.2011.5.25.222.1.2.3.2.1.4 |
hwFwZoneIfNumThe number of interface in this firewall zone.ro Gauge32 .1.3.6.1.4.1.2011.5.25.222.1.2.3.2.1.5 |
hwFwInterZone OBJECT IDENTIFIER .1.3.6.1.4.1.2011.5.25.222.1.2.4 |
hwFwInterZoneNumOfEntriesThis object maintains a count of the number of entries
that currently exist in the hwFwInterZoneTable.ro Gauge32 .1.3.6.1.4.1.2011.5.25.222.1.2.4.1 |
hwFwInterZoneTableTable of firewall Interzone instances. SEQUENCE OF HwFwInterZoneEntry .1.3.6.1.4.1.2011.5.25.222.1.2.4.2 |
hwFwInterZoneEntryAn entry in the table, containing information about a
firewall Interzone. HwFwInterZoneEntry .1.3.6.1.4.1.2011.5.25.222.1.2.4.2.1 |
hwFwInterZoneIndexIndex of the firewall interzone. Unsigned32 .1.3.6.1.4.1.2011.5.25.222.1.2.4.2.1.1 |
hwFwInterZoneNameThis object represents the name of a firewall Interzone.ro OCTET STRING .1.3.6.1.4.1.2011.5.25.222.1.2.4.2.1.2 |
hwFwInterZoneEnableEnable or disable firewall on interzone, and show firewall
status on interzone.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2011.5.25.222.1.2.4.2.1.3 |
hwFwInterZonePktFltInDefaultRuleDefault rule of the packet filtering that the direction
is inbound.ro PktFltDefaultRule .1.3.6.1.4.1.2011.5.25.222.1.2.4.2.1.4 |
hwFwInterZonePktFltInAclBasic or advanced acl number of the packet filtering
that the direction is inbound.ro Unsigned32 .1.3.6.1.4.1.2011.5.25.222.1.2.4.2.1.5 |
hwFwInterZonePktFltInMacAclLayer 2 acl number of the packet filtering that the
direction is inbound.ro Unsigned32 .1.3.6.1.4.1.2011.5.25.222.1.2.4.2.1.6 |
hwFwInterZonePktFltOutDefaultRuleDefault rule of the packet filtering that the direction
is outbound.ro PktFltDefaultRule .1.3.6.1.4.1.2011.5.25.222.1.2.4.2.1.7 |
hwFwInterZonePktFltOutAclBasic or advanced acl number of the packet filtering
that the direction is outbound.ro Unsigned32 .1.3.6.1.4.1.2011.5.25.222.1.2.4.2.1.8 |
hwFwInterZonePktFltOutMacAclLayer 2 acl number of the packet filtering that the
direction is outbound.ro Unsigned32 .1.3.6.1.4.1.2011.5.25.222.1.2.4.2.1.9 |
hwFwInterZoneAspfType of protocol enabled aspf in this Interzone.ro AspfProto .1.3.6.1.4.1.2011.5.25.222.1.2.4.2.1.10 |
hwFwInterZoneSessLogInAclAcl number of interzone session log for inbound.ro Unsigned32 .1.3.6.1.4.1.2011.5.25.222.1.2.4.2.1.11 |
hwFwInterZoneSessLogOutAclAcl number of interzone session log for outbound.ro Unsigned32 .1.3.6.1.4.1.2011.5.25.222.1.2.4.2.1.12 |
hwFwLog OBJECT IDENTIFIER .1.3.6.1.4.1.2011.5.25.222.1.2.5 |
hwFwBlackListLogStatusWhether blacklist log is enabled.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2011.5.25.222.1.2.5.1 |
hwFwBlackListLogIntervalInterval of blacklist log.ro TimeTicks (SNMPv2-SMI) .1.3.6.1.4.1.2011.5.25.222.1.2.5.2 |
hwFwDefendLogStatusWhether defend log is enabled.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2011.5.25.222.1.2.5.3 |
hwFwDefendLogIntervalInterval of defend log.ro TimeTicks (SNMPv2-SMI) .1.3.6.1.4.1.2011.5.25.222.1.2.5.4 |
hwFwStatisticLogStatusWhether statistic log is enabled.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2011.5.25.222.1.2.5.5 |
hwFwStatisticLogIntervalInterval of statistic log.ro TimeTicks (SNMPv2-SMI) .1.3.6.1.4.1.2011.5.25.222.1.2.5.6 |
hwFwSessionLogStatusWhether session log is enabled.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2011.5.25.222.1.2.5.7 |
hwFwSessionLogIntervalInterval of session log.ro TimeTicks (SNMPv2-SMI) .1.3.6.1.4.1.2011.5.25.222.1.2.5.8 |
hwFwSessionNatLogStatusWhether session nat log is enabled.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2011.5.25.222.1.2.5.9 |
hwFwSessionOutBandLogStatusWhether the out-of-band mode of sending log is enabled.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2011.5.25.222.1.2.5.10 |
hwFwBinaryLogStatusWhether binary log is enabled.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2011.5.25.222.1.2.5.11 |
hwFwBinaryLogHostAddrIP address of log server.ro IpAddress .1.3.6.1.4.1.2011.5.25.222.1.2.5.12 |
hwFwBinaryLogHostPortPort number of log server.ro Unsigned32 .1.3.6.1.4.1.2011.5.25.222.1.2.5.13 |
hwFwBinaryLogSrcAddrIP address used by the device to communicate with the log server.ro IpAddress .1.3.6.1.4.1.2011.5.25.222.1.2.5.14 |
hwFwBinaryLogSrcPortPort number used by the device to communicate with the log server.ro Unsigned32 .1.3.6.1.4.1.2011.5.25.222.1.2.5.15 |
hwFwBinaryLogVpnNameName of vpn-instance.ro OCTET STRING .1.3.6.1.4.1.2011.5.25.222.1.2.5.16 |
hwFwProtoAgingTime OBJECT IDENTIFIER .1.3.6.1.4.1.2011.5.25.222.1.2.7 |
hwFwSipAgingTimeAging time for Sip stream.ro TimeTicks (SNMPv2-SMI) .1.3.6.1.4.1.2011.5.25.222.1.2.7.1 |
hwFwSipMediaAgingTimeAging time for Sip media stream.ro TimeTicks (SNMPv2-SMI) .1.3.6.1.4.1.2011.5.25.222.1.2.7.2 |
hwFwRtspAgingTimeAging time for Rtsp stream.ro TimeTicks (SNMPv2-SMI) .1.3.6.1.4.1.2011.5.25.222.1.2.7.3 |
hwFwRtspMediaAgingTimeAging time for Rtsp media stream.ro TimeTicks (SNMPv2-SMI) .1.3.6.1.4.1.2011.5.25.222.1.2.7.4 |
hwFirewallMIBNotifications OBJECT IDENTIFIER .1.3.6.1.4.1.2011.5.25.222.1.3 |
hwFwSecurityNotificationThis notification is used for events involving security
events. The included objects provide more detailed
information about the event. NOTIFICATION-TYPE .1.3.6.1.4.1.2011.5.25.222.1.3.2 |
hwFwInterzoneStatusNotificationThis notification is used for events involving security
events. Send out firewall enable or disable event in
Interzone. NOTIFICATION-TYPE .1.3.6.1.4.1.2011.5.25.222.1.3.3 |
hwFirewallMIBConformance OBJECT IDENTIFIER .1.3.6.1.4.1.2011.5.25.222.3 |
hwFirewallMIBCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.2011.5.25.222.3.1 |
hwFirewallMIBGroups OBJECT IDENTIFIER .1.3.6.1.4.1.2011.5.25.222.3.2 |