1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
|
-- ============================================================================
-- Copyright (C) 2003 New H3C Tech. Co., Ltd. All rights reserved.
--
-- Description: This MIB is designed for IP Accounting Software
-- Reference:
-- Version: V1.0
-- History:
-- V1.0 created by kongfanhua.
-- ============================================================================
HH3C-IPA-MIB DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY, OBJECT-TYPE, Counter32, Counter64,
Integer32, IpAddress
FROM SNMPv2-SMI
RowStatus, TEXTUAL-CONVENTION
FROM SNMPv2-TC
hh3cCommon
FROM HH3C-OID-MIB;
hh3cIpa MODULE-IDENTITY
LAST-UPDATED "200411010000Z"
ORGANIZATION
"New H3C Tech. Co., Ltd."
CONTACT-INFO
"Platform Team New H3C Tech. Co., Ltd.
Hai-Dian District Beijing P.R. China
http://www.h3c.com
Zip:100085
"
DESCRIPTION
"
This MIB is used to acquire ip accounting information.
The hh3cIpaAccountListTable is set by user to define the group of ip address
which they want to account.
This module can be enabled in each port,
which was defined in the hh3cIpaIfConfigTable.
If this module has been enabled, the packets will be accounted
when crossing the router from the ports having been enabled by user,
according to whether the source/destination ip address is in hh3cIpaAccountListTable
and what kinds of function(in/out/both/fw) are enabled
and also whether it is denied by the firewall.
If it is denied by the firewall, it will be accounted in hh3cIpaFWListTable
If it is accepted by the firewall, and ip source or ip destination is in hh3cIpaAccountListTable,
it will be accounted in hh3cIpaIntListTable, otherwise it will be accounted
in hh3cIpaExtListTable.
And IP Accounting function also differentiates the packets by direction.
If the packet is inbound, the accounting information can be seen as
hh3cIpaIntListInPackets/hh3cIpaIntListInBytes in hh3cIpaIntListTable,
hh3cIpaExtListInPackets/hh3cIpaExtListInBytes in hh3cIpaExtListTable,
hh3cIpaFWListInPackets/hh3cIpaFWListInBytes in hh3cIpaFWListTable.
or else the accounting information can be seen as
hh3cIpaIntListOutPackets/hh3cIpaIntListOutBytes in hh3cIpaIntListTable,
hh3cIpaExtListOutPackets/hh3cIpaExtListOutBytes in hh3cIpaExtListTable,
hh3cIpaFWListOutPackets/hh3cIpaFWListOutBytes in hh3cIpaFWListTable.
"
::= { hh3cCommon 25 }
InterfaceIndex ::= TEXTUAL-CONVENTION
DISPLAY-HINT "d"
STATUS current
DESCRIPTION
"A unique value, greater than zero, for each interface
or interface sub-layer in the managed system. It is
recommended that values are assigned contiguously
starting from 1. The value for each interface sub-
layer must remain constant at least from one re-
initialization of the entity's network management
system to the next re-initialization."
SYNTAX Integer32 (1..2147483647)
-- =============================================================================
-- hh3cIpaGlobalConfigTable
-- The Global Data Set By User of IPA
hh3cIpaGlobalStats OBJECT IDENTIFIER ::= { hh3cIpa 1 }
hh3cIpaGlobalEnable OBJECT-TYPE
SYNTAX INTEGER {
disabled(1), -- the IPA function is disabled
enabled(2) -- the IPA function is enabled
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"
The indication of whether Ip Accounting function is enabled.
If it is disabled, ip packets will not be accounted.
"
DEFVAL { disabled }
::= { hh3cIpaGlobalStats 1 }
hh3cIpaTimeOutSeconds OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"
The value of List aging timeout.
The unit is second.
If exceeding the interval, the item in hh3cIpaIntListTable, hh3cIpaExtListTable
and hh3cIpaFWListTable will be removed automaticlly.
The range is (3600..604800).
"
DEFVAL { 43200 }
::= { hh3cIpaGlobalStats 2 }
hh3cIpaIntListMaxItemNum OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"
The max number of items in hh3cIpaIntListTable.
The range is (0..16384).
"
DEFVAL { 512 }
::= { hh3cIpaGlobalStats 3 }
hh3cIpaExtListMaxItemNum OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"
The max number of items in hh3cIpaExtListTable.
The range is (0..8192).
"
DEFVAL { 0 }
::= { hh3cIpaGlobalStats 4 }
hh3cIpaFWListMaxItemNum OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"
The max number of items in hh3cIpaFWListTable.
"
::= { hh3cIpaGlobalStats 5 }
hh3cIpaAccountListMaxItemNum OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"
The max number of items in hh3cIpaAccountListTable.
"
::= { hh3cIpaGlobalStats 6 }
hh3cIpaAccountListNextIndex OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"
The next available index for creating rows of hh3cIpaAccountListTable.
If the value is zero, it means the table is full and no available index
can be used.
"
::= { hh3cIpaGlobalStats 7 }
hh3cIpaListCleaningFlag OBJECT-TYPE
SYNTAX INTEGER {
idle(1), -- idling
cleaningAll(2), -- clearing all of the tables below.
cleaningIntList(3), -- clearing hh3cIpaIntListTable
cleaningExtList(4), -- clearing hh3cIpaExtListTable
cleaningFWList(5) -- clearing hh3cIpaFWListTable
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"
Cleaning List in this module.
The default value is idle. If user wants to clean some lists, he
can set the value to 2, 3, 4 and 5 to clean the corresponding list.
After the operation, the value will return to idle.
"
DEFVAL { idle }
::= { hh3cIpaGlobalStats 8 }
-- =============================================================================
-- hh3cIpaIfConfigTable
-- enable or disable and show ip accounting function under interface
hh3cIpaIfConfigTable OBJECT-TYPE
SYNTAX SEQUENCE OF Hh3cIpaIfConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"
Enable or disable the ip accounting inbound/outbound
function under a particular interface.
"
::= { hh3cIpa 2 }
hh3cIpaIfConfigEntry OBJECT-TYPE
SYNTAX Hh3cIpaIfConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"
Entry of the table.
"
INDEX { hh3cIpaIfConfigIfIndex }
::= { hh3cIpaIfConfigTable 1 }
Hh3cIpaIfConfigEntry ::=
SEQUENCE {
hh3cIpaIfConfigIfIndex
InterfaceIndex,
hh3cIpaIfConfigInEnable
INTEGER,
hh3cIpaIfConfigOutEnable
INTEGER,
hh3cIpaIfConfigFWEnable
INTEGER
}
hh3cIpaIfConfigIfIndex OBJECT-TYPE
SYNTAX InterfaceIndex
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"It equals to ifIndex"
::= { hh3cIpaIfConfigEntry 1 }
hh3cIpaIfConfigInEnable OBJECT-TYPE
SYNTAX INTEGER {
disabled(1), -- inbound packets are not accounted in this interface
enabled(2) -- inbound packets are accounted in this interface
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"
This object is applicable to hh3cIpaIntListTable and hh3cIpaExtListTable.
If the value is disabled, inbound ip packets are not accounted.
"
DEFVAL { disabled }
::= { hh3cIpaIfConfigEntry 2 }
hh3cIpaIfConfigOutEnable OBJECT-TYPE
SYNTAX INTEGER {
disabled(1), -- outbound packets are not accounted in this interface
enabled(2) -- outbound packets are accounted in this interface
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"
This object is applicable to hh3cIpaIntListTable and hh3cIpaExtListTable.
If the value is disabled, outbound ip packets are not accounted.
"
DEFVAL { disabled }
::= { hh3cIpaIfConfigEntry 3 }
hh3cIpaIfConfigFWEnable OBJECT-TYPE
SYNTAX INTEGER {
nodirection(1),
inbound(2),
outbound(3),
bidirection(4)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"
This object is applicable to hh3cIpaFWListTable only.
If the value is 'inbound', then inbound ip packets which are denied by firewall
are accounted.
If the value is 'outbound', then outbound ip packets which were denied by firewall
are accounted.
If the value is 'nodirection', neither inbound nor outbound ip packets
which were denied by firewall are accounted.
If the value is 'bidirection', both inbound and outbound ip packets which
were denied by firewall are accounted.
"
DEFVAL { nodirection }
::= { hh3cIpaIfConfigEntry 4 }
-- =============================================================================
-- hh3cIpaAccountListTable
-- The function of hh3cIpaAccountListTable is to classify the ip packets
-- hh3cIpaAccountListTable is set and deleted by user
hh3cIpaAccountListTable OBJECT-TYPE
SYNTAX SEQUENCE OF Hh3cIpaAccountListEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"
The List is used by user to sort packets into two groups
by source or destination ip address.
When source/destination ip address of a packet matches a item in this table,
the packet is accounted in hh3cIpaIntListTable.
When source/destination ip address of a packet does not match any item
in this table, the packet is accounted in hh3cIpaExtListTable.
"
::= { hh3cIpa 3 }
hh3cIpaAccountListEntry OBJECT-TYPE
SYNTAX Hh3cIpaAccountListEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"
Entry of the table.
"
INDEX { hh3cIpaAccountListIndex }
::= { hh3cIpaAccountListTable 1 }
Hh3cIpaAccountListEntry ::=
SEQUENCE {
hh3cIpaAccountListIndex
Integer32,
hh3cIpaAccountListIpAddr
IpAddress,
hh3cIpaAccountListIpMask
IpAddress,
hh3cIpaAccountListRowStatus
RowStatus
}
hh3cIpaAccountListIndex OBJECT-TYPE
SYNTAX Integer32(1..2147483647)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"
The Index of the table.
"
::= { hh3cIpaAccountListEntry 1 }
hh3cIpaAccountListIpAddr OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"
The IP address to which this entry's addressing information
pertains.
"
::= { hh3cIpaAccountListEntry 2 }
hh3cIpaAccountListIpMask OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"
The subnet mask associated with the IP address of this
entry. The value of the mask is an IP address with all the
network bits set to 1 and all the hosts bits set to 0.
"
::= { hh3cIpaAccountListEntry 3 }
hh3cIpaAccountListRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"
The row status of the entry,
Supporting CreateAndGo and Destroy operation.
"
::= { hh3cIpaAccountListEntry 4 }
-- =============================================================================
-- hh3cIpaIntListTable
-- for showing accounting information of packet not match hh3cIpaAccountListTable
hh3cIpaIntListTable OBJECT-TYPE
SYNTAX SEQUENCE OF Hh3cIpaIntListEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"
If matching the ip address recorded in hh3cIpaAccountListTable
and not denied by the firewall, the packets will be accounted
in this list.
"
::= { hh3cIpa 4 }
hh3cIpaIntListEntry OBJECT-TYPE
SYNTAX Hh3cIpaIntListEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"
Entry of the table.
"
INDEX { hh3cIpaIntListIpSrc,
hh3cIpaIntListIpDst,
hh3cIpaIntListProtocol
}
::= { hh3cIpaIntListTable 1 }
Hh3cIpaIntListEntry ::=
SEQUENCE {
hh3cIpaIntListIpSrc
IpAddress,
hh3cIpaIntListIpDst
IpAddress,
hh3cIpaIntListProtocol
Integer32,
hh3cIpaIntListInPackets
Counter32,
hh3cIpaIntListInBytes
Counter64,
hh3cIpaIntListOutPackets
Counter32,
hh3cIpaIntListOutBytes
Counter64
}
hh3cIpaIntListIpSrc OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"
Source IP-address of these accounted packets.
"
::= { hh3cIpaIntListEntry 1 }
hh3cIpaIntListIpDst OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"
Destination IP-address of these accounted packets.
"
::= { hh3cIpaIntListEntry 2 }
hh3cIpaIntListProtocol OBJECT-TYPE
SYNTAX Integer32(0..2147483647)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"
The type of these accounted IP packets defined in RFC 1700.
"
::= { hh3cIpaIntListEntry 3 }
hh3cIpaIntListInPackets OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"
The number of inbound packets in hh3cIpaIntListTable.
"
::= { hh3cIpaIntListEntry 4 }
hh3cIpaIntListInBytes OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"
The number of inbound bytes in hh3cIpaIntListTable.
"
::= { hh3cIpaIntListEntry 5 }
hh3cIpaIntListOutPackets OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"
The number of outbound Packets in hh3cIpaIntListTable.
"
::= { hh3cIpaIntListEntry 6 }
hh3cIpaIntListOutBytes OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"
The number of outbound bytes in hh3cIpaIntListTable.
"
::= { hh3cIpaIntListEntry 7 }
-- =============================================================================
-- hh3cIpaExtListTable
-- for showing accounting information of packet not match hh3cIpaAccountListTable
hh3cIpaExtListTable OBJECT-TYPE
SYNTAX SEQUENCE OF Hh3cIpaExtListEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"
If mismatching the ip address recorded in the hh3cIpaAccountListTable
and not denied by the firewall, the packets will be accounted
in this list.
"
::= { hh3cIpa 5 }
hh3cIpaExtListEntry OBJECT-TYPE
SYNTAX Hh3cIpaExtListEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"
Entry of the table.
"
INDEX { hh3cIpaExtListIpSrc,
hh3cIpaExtListIpDst,
hh3cIpaExtListProtocol
}
::= { hh3cIpaExtListTable 1 }
Hh3cIpaExtListEntry ::=
SEQUENCE {
hh3cIpaExtListIpSrc
IpAddress,
hh3cIpaExtListIpDst
IpAddress,
hh3cIpaExtListProtocol
Integer32,
hh3cIpaExtListInPackets
Counter32,
hh3cIpaExtListInBytes
Counter64,
hh3cIpaExtListOutPackets
Counter32,
hh3cIpaExtListOutBytes
Counter64
}
hh3cIpaExtListIpSrc OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"
Source IP-address of these accounted packets.
"
::= { hh3cIpaExtListEntry 1 }
hh3cIpaExtListIpDst OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"
Destination IP-address of these accounted packets.
"
::= { hh3cIpaExtListEntry 2 }
hh3cIpaExtListProtocol OBJECT-TYPE
SYNTAX Integer32(0..2147483647)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"
The value indicates the value of the 'protocol' field
which is part of ip packet header.
"
::= { hh3cIpaExtListEntry 3 }
hh3cIpaExtListInPackets OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"
The number of inbound packets in hh3cIpaExtListTable.
"
::= { hh3cIpaExtListEntry 4 }
hh3cIpaExtListInBytes OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"
The number of inbound bytes in hh3cIpaExtListTable.
"
::= { hh3cIpaExtListEntry 5 }
hh3cIpaExtListOutPackets OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"
The number of outbound packets in hh3cIpaExtListTable.
"
::= { hh3cIpaExtListEntry 6 }
hh3cIpaExtListOutBytes OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"
The number of outbound bytes in hh3cIpaExtListTable.
"
::= { hh3cIpaExtListEntry 7 }
-- =============================================================================
-- hh3cIpaFWListTable
-- for showing accounting information of packet denied by the firewall
hh3cIpaFWListTable OBJECT-TYPE
SYNTAX SEQUENCE OF Hh3cIpaFWListEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"
If the packet is denied by the firewall,
it will be accounted in this list.
"
::= { hh3cIpa 6 }
hh3cIpaFWListEntry OBJECT-TYPE
SYNTAX Hh3cIpaFWListEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"
Entry of the table.
"
INDEX { hh3cIpaFWListIpSrc,
hh3cIpaFWListIpDst
}
::= { hh3cIpaFWListTable 1 }
Hh3cIpaFWListEntry ::=
SEQUENCE {
hh3cIpaFWListIpSrc
IpAddress,
hh3cIpaFWListIpDst
IpAddress,
hh3cIpaFWListInPackets
Counter32,
hh3cIpaFWListInBytes
Counter64,
hh3cIpaFWListOutPackets
Counter32,
hh3cIpaFWListOutBytes
Counter64
}
hh3cIpaFWListIpSrc OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"
Source IP-address of these accounted packets.
"
::= { hh3cIpaFWListEntry 1 }
hh3cIpaFWListIpDst OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"
Destination IP-address of these accounted packets.
"
::= { hh3cIpaFWListEntry 2 }
hh3cIpaFWListInPackets OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"
The number of outbound packets in hh3cIpaFWListTable.
"
::= { hh3cIpaFWListEntry 3 }
hh3cIpaFWListInBytes OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"
The number of inbound bytes in hh3cIpaFWListTable.
"
::= { hh3cIpaFWListEntry 4 }
hh3cIpaFWListOutPackets OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"
The number of outbound packets in hh3cIpaFWListTable.
"
::= { hh3cIpaFWListEntry 5 }
hh3cIpaFWListOutBytes OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"
The number of outbound bytes in hh3cIpaFWListTable.
"
::= { hh3cIpaFWListEntry 6 }
END
|
