Home/Catalog/HUAWEI-FIREWALL-MIB

HUAWEI-FIREWALL-MIB

AI MIB Summary

The HUAWEI-FIREWALL-MIB module provides SNMP access to monitor and manage security policies, session states, and traffic statistics on Huawei firewall appliances. It enables the retrieval of interface counters, connection table entries, and rule hit counts to facilitate real-time security posture assessment and troubleshooting.

The MIB contains objects of firewall , referencing the draft-grall-firewall-mib-01.
Main OID:
hwFirewallMIB.1.3.6.1.4.1.2011.5.25.222
93
Objects
Active
Status
7
Dependencies

Imported Objects

Objects

93 total
Object Name
hwFirewallMIBThe MIB contains objects of firewall , referencing the draft-grall-firewall-mib-01.
MODULE-IDENTITY
.1.3.6.1.4.1.2011.5.25.222
hwFirewallMIBObjects
OBJECT IDENTIFIER
.1.3.6.1.4.1.2011.5.25.222.1
hwFwEvents
OBJECT IDENTIFIER
.1.3.6.1.4.1.2011.5.25.222.1.1
hwFwNetEvents
OBJECT IDENTIFIER
.1.3.6.1.4.1.2011.5.25.222.1.1.2
hwFwNetEventsTableLastRowThe index value of the last row in the hwFwNetEventsTable. This number starts at 1 and increase by one with each new log entry. When this number wraps, all events are deleted.ro
Unsigned32
.1.3.6.1.4.1.2011.5.25.222.1.1.2.1
hwFwBasicEvents
OBJECT IDENTIFIER
.1.3.6.1.4.1.2011.5.25.222.1.1.2.3
hwFwBasicEventsTableLastRowThe index value of the most recently created row in the cfwBasicEventsTable. This number starts at 1 and increase by one with each new log entry. When this number wraps, all events are deleted.ro
Unsigned32
.1.3.6.1.4.1.2011.5.25.222.1.1.2.3.1
hwFwBasicEventsTableTable of basic data for firewall events. The agent may choose to delete the instances of cfwBasicEventsEntry as required because of lack of memory. The oldest Events will be selected first for deletion.
SEQUENCE OF HwFwBasicEventsEntry
.1.3.6.1.4.1.2011.5.25.222.1.1.2.3.2
hwFwBasicEventsEntryAn entry in the table, containing general information about an event. This table will always be sparse, i.e., each row will instanciate only a subet of the columnar objects.
HwFwBasicEventsEntry
.1.3.6.1.4.1.2011.5.25.222.1.1.2.3.2.1
hwFwBasicEventIndexAn index that uniquely identifies an entry in the log table. These indices are assigned beginning with 1 and increase by one with each new event logged.
Unsigned32
.1.3.6.1.4.1.2011.5.25.222.1.1.2.3.2.1.1
hwFwBasicEventTimeThe time that the event occurred.ro
SnmpAdminString (SNMP-FRAMEWORK-MIB)
.1.3.6.1.4.1.2011.5.25.222.1.1.2.3.2.1.2
hwFwBasicSecurityEventTypeThe type of security-related event that this row contains. If the event is not security-related this object will not be instantiated.ro
SecurityEvent
.1.3.6.1.4.1.2011.5.25.222.1.1.2.3.2.1.3
hwFwBasicEventDescriptionA description of the event. The value of the object may be a zero-length string.ro
SnmpAdminString (SNMP-FRAMEWORK-MIB)
.1.3.6.1.4.1.2011.5.25.222.1.1.2.3.2.1.4
hwFwBasicEventDetailsTableRowA pointer to a row in the table containing details about this event. Generally, the table will be the cfwNetEventsTable but a Cisco-defined table may also appear here. If there there is no more detailed information for this event the value of this object will have the value {0 0}.ro
Unsigned32
.1.3.6.1.4.1.2011.5.25.222.1.1.2.3.2.1.5
hwFwNetEventsTableTable of detailed data for network events. The agent may choose to delete the instances of hwFwBasicEventsEntry as required because of lack of memory. It is an implementation-specific matter as to when this deletion may occur. It is recommended that the oldest log instances are deleted first.
SEQUENCE OF HwFwNetEventsEntry
.1.3.6.1.4.1.2011.5.25.222.1.1.2.4
hwFwNetEventsEntryAn entry in the table, containing detailed information about an event. Note that this table may be sparse. If Network Address Translation is not enabled hwFwNetEventInsideSrcIpAddress and hwFwNetEventInsideDstIpAddress will not be instantiated in the row. If Port Address Translation is not enabled hwFwNetEventInsideSrcIpPort and hwFwNetEventInsideDstIpPort will not be instantiated in the row. Entries are added to this table at the same time that events are added to the hwFwBasicEventsTable. These two tables may be configured to be different sizes so there may not be a one-to-one correspondence between rows in the two tables.
HwFwNetEventsEntry
.1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1
hwFwNetEventIndexAn index that uniquely identifies an entry in the log table. These indices are assigned beginning with one and increase by one with each new log entry. When this number wraps, all events are deleted in order to allow the NMS to differentiate between old and new events.
Unsigned32
.1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.1
hwFwNetEventInterfaceThe interface most closely associated with this event. For example, for an event that relates to the receipt of a packet, this object identifies the interface on which the packet was received. If there are multiple interfaces associated with an event, the interface most closely associated with the cause of the event will be used. For example, for an event for the setup of a TCP connection, the interface on the initiator's side of the connection would be preferred. If there is no associated interface, then this object has the value zero.ro
InterfaceIndexOrZero (IF-MIB)
.1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.2
hwFwNetEventSrcVrfNameThis object indicates the VRF's name.ro
DisplayString
.1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.3
hwFwNetEventSrcIpAddressSource IP address in the IP packet that caused the event. If there is no packet associated with the event this object has the value of zero. If the event is the result of multiple packets with different source addresses, this value may be zero or an address taken from an arbitrarily chosen packet in the sequence of packets causing the event.ro
IpAddress
.1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.4
hwFwNetEventInsideSrcIpAddressSource IP address after Network Address Translation has been applied. If NAT has not been applied to the source address in this packet this object will not be instantiated, resulting in a sparse table. If the event is the result of multiple packets with different source addresses, this value may be zero or an address taken from an arbitrarily chosen packet in the sequence of packets causing the event.ro
IpAddress
.1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.5
hwFwNetEventDstVrfNameThis object indicates the VRF's name.ro
DisplayString
.1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.6
hwFwNetEventDstIpAddressDestination IP address in the IP packet that caused the event. If there is no packet associated with the event this object has the value of zero. If the event is the result of multiple packets with different destination addresses, this value may be zero or an address taken from an arbitrarily chosen packet in the sequence of packets causing the event.ro
IpAddress
.1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.7
hwFwNetEventInsideDstIpAddressDestination IP address after Network Address Translation has been applied. If NAT has not been applied to the destination address in this packet this object will not be instantiated, resulting in a sparse table. If the event is the result of multiple packets with different destination addresses, this value may be zero or an address taken from an arbitrarily chosen packet in the sequence of packets causing the event.ro
IpAddress
.1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.8
hwFwNetEventSrcIpPortSource UDP/TCP port in the IP packet that caused the event. If there is no packet associated with the event this object has the value of zero. If the event is the result of multiple packets with different source ports, this value may be zero or a port taken from an arbitrarily chosen packet in the sequence of packets causing the event.ro
Integer32
.1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.9
hwFwNetEventInsideSrcIpPortSource UDP/TCP port after Port Address Translation has been applied. If PAT has not been applied to the source port in this packet this object will not be instantiated, resulting in a sparse table. If the event is the result of multiple packets with different source ports, this value may be zero or a port taken from an arbitrarily chosen packet in the sequence of packets causing the event.ro
Integer32
.1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.10
hwFwNetEventDstIpPortDestination UDP/TCP port in the IP packet that caused the event. If there is no packet associated with the event this object has the value of zero. If the event is the result of multiple packets with different destination ports, this value may be zero or a port taken from an arbitrarily chosen packet in the sequence of packets causing the event.ro
Integer32
.1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.11
hwFwNetEventInsideDstIpPortDestination UDP/TCP port after Port Address Translation has been applied. If PAT has not been applied to the Destination port in this packet this object will not be instantiated, resulting in a sparse table. If the event is the result of multiple packets with different destination ports, this value may be zero or a port taken from an arbitrarily chosen packet in the sequence of packets causing the event.ro
Integer32
.1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.12
hwFwNetEventServiceThe identification of the type of service involved with this event.ro
Services
.1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.13
hwFwNetEventServiceInformationSpecific service information. This can be used to describe the particular service indentified by hwFwNetEventService and can reflect whether the service is a local service or a gateway service. For example, if the value for hwFwNetEventService is loginTelnet then the string provided might be 'local telnet'.ro
SnmpAdminString (SNMP-FRAMEWORK-MIB)
.1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.14
hwFwNetEventIdentityThis object will contain a description of the entity that caused the event. The entity could be a userid, username, processid or other identifier for the entity using the service. If there is no such information then this object will contain a zero-length string.ro
SnmpAdminString (SNMP-FRAMEWORK-MIB)
.1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.15
hwFwNetEventDescriptionA detailed description of the event.ro
SnmpAdminString (SNMP-FRAMEWORK-MIB)
.1.3.6.1.4.1.2011.5.25.222.1.1.2.4.1.16
hwFwSystem
OBJECT IDENTIFIER
.1.3.6.1.4.1.2011.5.25.222.1.2
hwFwStatistics
OBJECT IDENTIFIER
.1.3.6.1.4.1.2011.5.25.222.1.2.2
hwFwConnectionStatTableTable of firewall statistic instances.
SEQUENCE OF HwFwConnectionStatEntry
.1.3.6.1.4.1.2011.5.25.222.1.2.2.2
hwFwConnectionStatEntryAn entry in the table, containing information about a firewall statistic.
HwFwConnectionStatEntry
.1.3.6.1.4.1.2011.5.25.222.1.2.2.2.1
hwFwConnectionStatServiceThe identification of the type of connection providing statistics.
Services
.1.3.6.1.4.1.2011.5.25.222.1.2.2.2.1.1
hwFwConnectionStatTypeThe state of the connections that this row contains statistics for.
ConnectionStat
.1.3.6.1.4.1.2011.5.25.222.1.2.2.2.1.2
hwFwConnectionStatDescriptionA detailed textual description of this statistic.ro
SnmpAdminString (SNMP-FRAMEWORK-MIB)
.1.3.6.1.4.1.2011.5.25.222.1.2.2.2.1.3
hwFwConnectionStatCountThis is an integer that contains the value of the resource statistic. If a type of 'gauge' is more appropriate this object will be omitted resulting in a sparse table.ro
Counter32
.1.3.6.1.4.1.2011.5.25.222.1.2.2.2.1.4
hwFwZone
OBJECT IDENTIFIER
.1.3.6.1.4.1.2011.5.25.222.1.2.3
hwFwZoneNumOfEntriesThis object maintains a count of the number of entries that currently exist in the hwFwZoneTable.ro
Gauge32
.1.3.6.1.4.1.2011.5.25.222.1.2.3.1
hwFwZoneTableTable of firewall zone instances.
SEQUENCE OF HwFwZoneEntry
.1.3.6.1.4.1.2011.5.25.222.1.2.3.2
hwFwZoneEntryAn entry in the table, containing information about a firewall zone.
HwFwZoneEntry
.1.3.6.1.4.1.2011.5.25.222.1.2.3.2.1
hwFwZoneIndexThis object represents the name of a firewall zone.
Unsigned32
.1.3.6.1.4.1.2011.5.25.222.1.2.3.2.1.1
hwFwZoneNameThis object represents the name of a firewall zone.ro
OCTET STRING
.1.3.6.1.4.1.2011.5.25.222.1.2.3.2.1.2
hwFwZonePriorityThis object represents the priority of a firewall zone.ro
Unsigned32
.1.3.6.1.4.1.2011.5.25.222.1.2.3.2.1.3
hwFwZoneIfListThe set of interface which belong to the firewall zone.ro
OCTET STRING
.1.3.6.1.4.1.2011.5.25.222.1.2.3.2.1.4
hwFwZoneIfNumThe number of interface in this firewall zone.ro
Gauge32
.1.3.6.1.4.1.2011.5.25.222.1.2.3.2.1.5
hwFwInterZone
OBJECT IDENTIFIER
.1.3.6.1.4.1.2011.5.25.222.1.2.4
hwFwInterZoneNumOfEntriesThis object maintains a count of the number of entries that currently exist in the hwFwInterZoneTable.ro
Gauge32
.1.3.6.1.4.1.2011.5.25.222.1.2.4.1
hwFwInterZoneTableTable of firewall Interzone instances.
SEQUENCE OF HwFwInterZoneEntry
.1.3.6.1.4.1.2011.5.25.222.1.2.4.2
hwFwInterZoneEntryAn entry in the table, containing information about a firewall Interzone.
HwFwInterZoneEntry
.1.3.6.1.4.1.2011.5.25.222.1.2.4.2.1
hwFwInterZoneIndexIndex of the firewall interzone.
Unsigned32
.1.3.6.1.4.1.2011.5.25.222.1.2.4.2.1.1
hwFwInterZoneNameThis object represents the name of a firewall Interzone.ro
OCTET STRING
.1.3.6.1.4.1.2011.5.25.222.1.2.4.2.1.2
hwFwInterZoneEnableEnable or disable firewall on interzone, and show firewall status on interzone.rw
TruthValue (SNMPv2-TC)
.1.3.6.1.4.1.2011.5.25.222.1.2.4.2.1.3
hwFwInterZonePktFltInDefaultRuleDefault rule of the packet filtering that the direction is inbound.ro
PktFltDefaultRule
.1.3.6.1.4.1.2011.5.25.222.1.2.4.2.1.4
hwFwInterZonePktFltInAclBasic or advanced acl number of the packet filtering that the direction is inbound.ro
Unsigned32
.1.3.6.1.4.1.2011.5.25.222.1.2.4.2.1.5
hwFwInterZonePktFltInMacAclLayer 2 acl number of the packet filtering that the direction is inbound.ro
Unsigned32
.1.3.6.1.4.1.2011.5.25.222.1.2.4.2.1.6
hwFwInterZonePktFltOutDefaultRuleDefault rule of the packet filtering that the direction is outbound.ro
PktFltDefaultRule
.1.3.6.1.4.1.2011.5.25.222.1.2.4.2.1.7
hwFwInterZonePktFltOutAclBasic or advanced acl number of the packet filtering that the direction is outbound.ro
Unsigned32
.1.3.6.1.4.1.2011.5.25.222.1.2.4.2.1.8
hwFwInterZonePktFltOutMacAclLayer 2 acl number of the packet filtering that the direction is outbound.ro
Unsigned32
.1.3.6.1.4.1.2011.5.25.222.1.2.4.2.1.9
hwFwInterZoneAspfType of protocol enabled aspf in this Interzone.ro
AspfProto
.1.3.6.1.4.1.2011.5.25.222.1.2.4.2.1.10
hwFwInterZoneSessLogInAclAcl number of interzone session log for inbound.ro
Unsigned32
.1.3.6.1.4.1.2011.5.25.222.1.2.4.2.1.11
hwFwInterZoneSessLogOutAclAcl number of interzone session log for outbound.ro
Unsigned32
.1.3.6.1.4.1.2011.5.25.222.1.2.4.2.1.12
hwFwLog
OBJECT IDENTIFIER
.1.3.6.1.4.1.2011.5.25.222.1.2.5
hwFwBlackListLogStatusWhether blacklist log is enabled.ro
TruthValue (SNMPv2-TC)
.1.3.6.1.4.1.2011.5.25.222.1.2.5.1
hwFwBlackListLogIntervalInterval of blacklist log.ro
TimeTicks (SNMPv2-SMI)
.1.3.6.1.4.1.2011.5.25.222.1.2.5.2
hwFwDefendLogStatusWhether defend log is enabled.ro
TruthValue (SNMPv2-TC)
.1.3.6.1.4.1.2011.5.25.222.1.2.5.3
hwFwDefendLogIntervalInterval of defend log.ro
TimeTicks (SNMPv2-SMI)
.1.3.6.1.4.1.2011.5.25.222.1.2.5.4
hwFwStatisticLogStatusWhether statistic log is enabled.ro
TruthValue (SNMPv2-TC)
.1.3.6.1.4.1.2011.5.25.222.1.2.5.5
hwFwStatisticLogIntervalInterval of statistic log.ro
TimeTicks (SNMPv2-SMI)
.1.3.6.1.4.1.2011.5.25.222.1.2.5.6
hwFwSessionLogStatusWhether session log is enabled.ro
TruthValue (SNMPv2-TC)
.1.3.6.1.4.1.2011.5.25.222.1.2.5.7
hwFwSessionLogIntervalInterval of session log.ro
TimeTicks (SNMPv2-SMI)
.1.3.6.1.4.1.2011.5.25.222.1.2.5.8
hwFwSessionNatLogStatusWhether session nat log is enabled.ro
TruthValue (SNMPv2-TC)
.1.3.6.1.4.1.2011.5.25.222.1.2.5.9
hwFwSessionOutBandLogStatusWhether the out-of-band mode of sending log is enabled.ro
TruthValue (SNMPv2-TC)
.1.3.6.1.4.1.2011.5.25.222.1.2.5.10
hwFwBinaryLogStatusWhether binary log is enabled.ro
TruthValue (SNMPv2-TC)
.1.3.6.1.4.1.2011.5.25.222.1.2.5.11
hwFwBinaryLogHostAddrIP address of log server.ro
IpAddress
.1.3.6.1.4.1.2011.5.25.222.1.2.5.12
hwFwBinaryLogHostPortPort number of log server.ro
Unsigned32
.1.3.6.1.4.1.2011.5.25.222.1.2.5.13
hwFwBinaryLogSrcAddrIP address used by the device to communicate with the log server.ro
IpAddress
.1.3.6.1.4.1.2011.5.25.222.1.2.5.14
hwFwBinaryLogSrcPortPort number used by the device to communicate with the log server.ro
Unsigned32
.1.3.6.1.4.1.2011.5.25.222.1.2.5.15
hwFwBinaryLogVpnNameName of vpn-instance.ro
OCTET STRING
.1.3.6.1.4.1.2011.5.25.222.1.2.5.16
hwFwProtoAgingTime
OBJECT IDENTIFIER
.1.3.6.1.4.1.2011.5.25.222.1.2.7
hwFwSipAgingTimeAging time for Sip stream.ro
TimeTicks (SNMPv2-SMI)
.1.3.6.1.4.1.2011.5.25.222.1.2.7.1
hwFwSipMediaAgingTimeAging time for Sip media stream.ro
TimeTicks (SNMPv2-SMI)
.1.3.6.1.4.1.2011.5.25.222.1.2.7.2
hwFwRtspAgingTimeAging time for Rtsp stream.ro
TimeTicks (SNMPv2-SMI)
.1.3.6.1.4.1.2011.5.25.222.1.2.7.3
hwFwRtspMediaAgingTimeAging time for Rtsp media stream.ro
TimeTicks (SNMPv2-SMI)
.1.3.6.1.4.1.2011.5.25.222.1.2.7.4
hwFirewallMIBNotifications
OBJECT IDENTIFIER
.1.3.6.1.4.1.2011.5.25.222.1.3
hwFwSecurityNotificationThis notification is used for events involving security events. The included objects provide more detailed information about the event.
NOTIFICATION-TYPE
.1.3.6.1.4.1.2011.5.25.222.1.3.2
hwFwInterzoneStatusNotificationThis notification is used for events involving security events. Send out firewall enable or disable event in Interzone.
NOTIFICATION-TYPE
.1.3.6.1.4.1.2011.5.25.222.1.3.3
hwFirewallMIBConformance
OBJECT IDENTIFIER
.1.3.6.1.4.1.2011.5.25.222.3
hwFirewallMIBCompliances
OBJECT IDENTIFIER
.1.3.6.1.4.1.2011.5.25.222.3.1
hwFirewallMIBGroups
OBJECT IDENTIFIER
.1.3.6.1.4.1.2011.5.25.222.3.2
HUAWEI-FIREWALL-MIB - SNMP MIB Reference | MIBs Explorer