1.3.6.1.4.1.2011.5.2.1.1.1.1

hwAuthenSchemeName

DisplayString

read-only

This object indicates the name of an authentication scheme.

current

1.3.6.1.4.1.2011.5.2.1.1.1.2

hwAuthenMethod

Integer

read-create

This object indicates the authentication method. The values and meanings are as follows:

• 1 (local): local authentication (the default value)
• 2 (no-auth): non-authentication
• 3 (radius): RADIUS authentication
• 4 (localRadius): local authentication, and then RADIUS authentication if the user name used for local authentication does not exist.
• 5 (radiusLocal): RADIUS authentication, and then local authentication if RADIUS authentication is unavailable.
• 6 (radiusNoauth): RADIUS authentication, and then non-authentication if RADIUS authentication is unavailable.
• 7 (tacacs): HWTACACS authentication
• 8 (tacacsLocal): HWTACACS authentication, and then local authentication if HWTACACS authentication is unavailable.
• 9 (localTacacs): local authentication, and then HWTACACS authentication if the user name used for local authentication does not exist.
• 10 (tacacsNoauth): HWTACACS authentication, and then non-authentication if HWTACACS authentication is unavailable.
• 11 (localNoauth): local authentication, and then non-authentication if the user name used for local authentication does not exist.
• 12 (radiusTacacs): RADIUS authentication, and then HWTACACS authentication if RADIUS authentication is unavailable.
• 13 (tacacsRadius): HWTACACS authentication, and then RADIUS authentication if HWTACACS authentication is unavailable.
• 14 (localRadiusNoauth): local authentication, and then RADIUS authentication if the user name used for local authentication does not exist, and then non-authentication if RADIUS authentication is unavailable.
• 15 (localTacacsNoauth): local authentication, and then HWTACACS authentication if the user name used for local authentication does not exist, and then non-authentication if HWTACACS authentication is unavailable.
• 16 (radiusLocalNoauth): RADIUS authentication, and then local authentication if RADIUS authentication is unavailable, and then non-authentication if the user name used for local authentication does not exist.
• 17 (radiusTacacsNoauth): RADIUS authentication, and then HWTACACS authentication if RADIUS authentication is unavailable, and then non-authentication if HWTACACS authentication is unavailable.
• 18 (tacacsLocalNoauth): HWTACACS authentication, and then local authentication if HWTACACS authentication is unavailable, and then non-authentication if the user name used for local authentication does not exist.
• 19 (tacacsRadiusNoauth): HWTACACS authentication, and then RADIUS authentication if HWTACACS authentication is unavailable, and then non-authentication if RADIUS authentication is unavailable.
• 20 (localRadiusTacacs): local authentication, and then RADIUS authentication if the user name used for local authentication does not exist, and then HWTACACS authentication if RADIUS authentication is unavailable.
• 21 (radiusLocalTacacs): RADIUS authentication, and then local authentication if RADIUS authentication is unavailable, and then HWTACACS authentication if the user name used for local authentication does not exist.
• 22 (localTacacsRadius): local authentication, and then HWTACACS authentication if the user name used for local authentication does not exist, and then RADIUS authentication if HWTACACS authentication is unavailable.
• 23 (radiusTacacsLocal): RADIUS authentication, and then HWTACACS authentication if RADIUS authentication is unavailable, and then local authentication if HWTACACS authentication is unavailable.
• 24 (tacacsLocalRadius): HWTACACS authentication, and then local authentication if HWTACACS authentication is unavailable, and then RADIUS authentication if the user name used for local authentication does not exist.
• 25 (tacacsRadiusLocal): HWTACACS authentication, and then RADIUS authentication if HWTACACS authentication is unavailable, and then local authentication if RADIUS authentication is unavailable.
• 26 (localRadiusTacacsNoauth): local authentication, and then RADIUS authentication if the user name used for local authentication does not exist, and then HWTACACS authentication if RADIUS authentication is unavailable, and then non-authentication if HWTACACS authentication is unavailable.
• 27 (localTacacsRadiusNoauth): local authentication, and then HWTACACS authentication if the user name used for local authentication does not exist, and then RADIUS authentication if HWTACACS authentication is unavailable, and then no authentication if RADIUS authentication is unavailable.
• 28 (radiusLocalTacacsNoauth): RADIUS authentication, and then local authentication if RADIUS authentication is unavailable, and then HWTACACS authentication if the user name used for local authentication is unavailable, and then non-authentication if HWTACACS authentication is unavailable.
• 29 (radiusTacacsLocalNoauth): RADIUS authentication, and then HWTACACS authentication if RADIUS authentication is unavailable, and then local authentication if HWTACACS authentication is unavailable, and then no authentication if the user name used for local authentication does not exist.
• 30 (tacacsLocalRadiusNoauth): HWTACACS authentication, and then local authentication if HWTACACS authentication is unavailable, and then RADIUS authentication if the user name used for local authentication is unavailable, and then no authentication if RADIUS authentication is unavailable.
• 31 (tacacsRadiusLocalNoauth): HWTACACS authentication, and then RADIUS authentication if HWTACACS authentication is unavailable, and then local authentication if RADIUS authentication is unavailable, and then no authentication if the user name used for local authentication does not exist.

current

1.3.6.1.4.1.2011.5.2.1.1.1.3

hwAuthenRowStatus

RowStatus

read-create

This object indicates the row status.

current

1.3.6.1.4.1.2011.5.2.1.2.1.1

hwAcctSchemeName

DisplayString

read-only

This object indicates the name of an accounting scheme.

current

1.3.6.1.4.1.2011.5.2.1.2.1.2

hwAccMethod

Integer

read-create

This object indicates the accounting method. The values and meanings are as follows:

• 2 (noacct): no accounting
• 3 (radius): RADIUS accounting
• 5 (hwtacacs): TACACS accounting

current

1.3.6.1.4.1.2011.5.2.1.2.1.3

hwAcctStartFail

Integer

read-create

This object indicates the policy for accounting start failures. The values and meanings are as follows:

• 1 (none): ignoring the failure, and users are still online.
• 2 (offline): forcing the user offline

current

1.3.6.1.4.1.2011.5.2.1.2.1.4

hwAcctOnlineFail

Integer

read-create

This object indicates the policy for other abnormalities after a user gets online. The values and meanings are as follows:

• 1 (none): ignoring the failure, and users are still online.
• 2 (offline): forcing the user offline

current

1.3.6.1.4.1.2011.5.2.1.2.1.5

hwAccRealTimeInter

Integer32

read-create

This object indicates the interval for real-time accounting. The value ranges from 0 to 65535, in minutes. 0 indicates no real-time accounting.

current

1.3.6.1.4.1.2011.5.2.1.2.1.6

hwAcctRowStatus

RowStatus

read-create

This object indicates the row status, which can be added or deleted.

current

1.3.6.1.4.1.2011.5.2.1.19.1.1

hwIfRealtimeAcct

TruthValue

read-write

This object indicates whether real-time accounting is required. The values and meanings are as follows:

• 1: performing real-time accounting
• 2: no real-time accounting

current

1.3.6.1.4.1.2011.5.2.1.19.1.2

hwRealtimeFailMaxnum

Integer(32)

read-write

This object indicates the maximum number of real-time accounting failures. The value ranges from 1 to 255 The default value is 3.

current

1.3.6.1.4.1.2011.5.2.1.52.1.1

hwAAAOfflineIndex

Integer32

read-only

Indicates the sequence in which a user who goes offline.

current

1.3.6.1.4.1.2011.5.2.1.52.1.2

hwOfflineRecordUserName

DisplayString

read-only

This object indicates the name of the offline user. The value is a string of 1 to 253 characters.

current

1.3.6.1.4.1.2011.5.2.1.52.1.3

hwOfflineRecordDomainName

DisplayString

read-only

This object indicates a domain name. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.52.1.4

hwOfflineRecordUserMAC

MacAddress

read-only

This object indicates the MAC address of the offline user.

current

1.3.6.1.4.1.2011.5.2.1.52.1.5

hwOfflineRecordAccessType

DisplayString

read-only

This object indicates the access type of the offline user. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.52.1.6

hwOfflineRecordInterface

DisplayString

read-only

This object indicates the interface on which the user goes offline. The value is a string of 1 to 63 characters.

current

1.3.6.1.4.1.2011.5.2.1.52.1.7

hwOfflineRecordAccessPeVlan

Integer32

read-only

This object indicates information about the outer VLAN of the offline user.

current

1.3.6.1.4.1.2011.5.2.1.52.1.8

hwOfflineRecordAccessCeVlan

Integer32

read-only

This object indicates information about the inner VLAN of the offline user

current

1.3.6.1.4.1.2011.5.2.1.52.1.9

hwOfflineRecordIPAddress

IpAddress

read-only

This object indicates the IP address of the offline user.

current

1.3.6.1.4.1.2011.5.2.1.52.1.10

hwOfflineRecordUserID

Integer32

read-only

This object indicates the ID of the offline user.

current

1.3.6.1.4.1.2011.5.2.1.52.1.11

hwOfflineRecordUserLoginTime

DateAndTime

read-only

This object indicates the time when the user goes online.

current

1.3.6.1.4.1.2011.5.2.1.52.1.12

hwOfflineRecordUserLogoutTime

DateAndTime

read-only

This object indicates the time when the user goes offline.

current

1.3.6.1.4.1.2011.5.2.1.52.1.13

hwOfflineRecordOfflineReason

DisplayString

read-only

This object indicates the reason why the user goes offline.

current

1.3.6.1.4.1.2011.5.2.1.13.1.7

hwDomainNameParseDirection

INTEGER

read-write

This object indicates the parsing direction of a domain name. A domain name can be parsed from the left to right or from the right to left.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.8

hwDomainNameLocation

Integer

read-write

This object indicates the location of a domain name. A domain name can be placed behind or before the domain name delimiter.

• 0: before the domain name delimiter.
• 1: behind the domain name delimiter.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.35

hwDomainNameDelimiter

DisplayString

read-write

This object indicates a domain name delimiter. The value can be one of the following: \ / : < > | @ ' %

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.36

hwDomainNameSecurityDelimiter

DisplayString

read-write

This object indicates a delimiter between the domain name and security code. The value can be one of the following: \ / : < > | @ ' %

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.37

hwGlobalAuthEventAuthFailResponseFail

INTEGER

read-write

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.38

hwGlobalAuthEventAuthFailVlan

Integer32

read-write

This object indicates that a user failing in authentication is added to the corresponding VLAN.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.39

hwGlobalAuthEventAuthenServerDownResponseFail

INTEGER

read-write

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.40

hwGlobalAuthEventAuthenServerDownVlan

Integer32

read-write

This object indicates that the device adds a user to the corresponding VLAN if the authentication server does not respond.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.41

hwGlobalAuthEventClientNoResponseVlan

Integer32

read-write

This object indicates that the device adds a user to the corresponding VLAN if the client does not respond.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.42

hwGlobalAuthEventPreAuthVlan

Integer32

read-write

This object indicates that the device adds a user to the corresponding VLAN before the client is authenticated.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.43

hwGlobalAuthEventAuthFailUserGroup

OCTET STRING

read-write

This object indicates that a user failing in authentication is added to a user group.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.44

hwGlobalAuthEventAuthenServerDownUserGroup

OCTET STRING

read-write

This object indicates that the device adds a user to a user group if the authentication server does not respond.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.45

hwGlobalAuthEventClientNoResponseUserGroup

OCTET STRING

read-write

This object indicates that the device adds a user to a user group if the client does not respond.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.46

hwGlobalAuthEventPreAuthUserGroup

OCTET STRING

read-write

This object indicates that the device adds a client to a user group before the client is authenticated.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.47

hwAuthorModifyMode

INTEGER

read-write

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.48

hwLocalRetryInterval

Integer32

read-write

This object indicates the authentication retry interval of a local account.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.49

hwLocalRetryTime

Integer32

read-write

This object indicates the maximum number of unsuccessful password attempts of a local user.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.50

hwLocalBlockTime

Integer32

read-write

This object indicates the locking time of a local account.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.51

hwRemoteRetryInterval

Integer32

read-write

This object indicates the authentication retry interval after a remote AAA authentication failure.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.52

hwRemoteRetryTime

Integer32

read-write

This object indicates the maximum number of consecutive authentication failures.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.53

hwRemoteBlockTime

Integer32

read-write

This object indicates the locking time of a remote AAA account.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.54

hwBlockDisable

INTEGER

read-write

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.55

hwTotalAuthReqNumPortal

Unsigned32

read-write

This object indicates the number of Portal authentication users.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.56

hwTotalAuthReqNumMac

Unsigned32

read-write

This object indicates the number of MAC address authentication users.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.57

hwTotalAuthReqNumDot1x

Unsigned32

read-write

This object indicates the number of 802.1X authentication users.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.14.1.32

hwTotalWlsOnlineNum

Unsigned32

read-only

This object indicates the total number of online wireless users.

current

1.3.6.1.4.1.2011.5.2.1.14.1.33

hwTotalWrdOnlineNum

Unsigned32

read-only

This object indicates the total number of online wired users.

current

1.3.6.1.4.1.2011.5.2.1.4.1.1

hwDomainName

DisplayString

read-only

This object indicates the domain name. The value is a string of 1 to 64 characters. No asterisk (*), question mark (?) and quotation mark (") are contained. The character string is case insensitive.

current

1.3.6.1.4.1.2011.5.2.1.4.1.2

hwDomainAuthenSchemeName

DisplayString

read-create

This object indicates the name of the authentication scheme used by the domain. The value is a string of 1 to 32 characters. The default authentication scheme of domains is default.

current

1.3.6.1.4.1.2011.5.2.1.4.1.3

hwDomainAcctSchemeName

DisplayString

read-create

This object indicates the name of the accounting scheme used by the domain. The value is a string of 1 to 32 characters. The default accounting scheme of domains is default.

current

1.3.6.1.4.1.2011.5.2.1.4.1.4

hwDomainRadiusGroupName

DisplayString

read-create

This object indicates the name of the RADIUS server group used by the domain. The value is a string of 1 to 32 characters. The RADIUS group must already exist.

current

1.3.6.1.4.1.2011.5.2.1.4.1.11

hwDomainRowStatus

RowStatus

read-create

This object indicates the row status, which can be created or deleted.

current

1.3.6.1.4.1.2011.5.2.1.4.1.13

hwDomainServiceSchemeName

DisplayString

read-create

This object indicates the name of the service scheme used by the domain. The value is a string of 1 to 32 characters. The service scheme must already exist.

current

1.3.6.1.4.1.2011.5.2.1.4.1.16

hwDomainForcePushUrl

DisplayString

read-create

Indicates the forcibly pushed URL in domain.

current

1.3.6.1.4.1.2011.5.2.1.4.1.17

hwDomainForcePushUrlTemplate

DisplayString

read-create

Indicates the name of the forcibly pushed URL template in domain.

current

1.3.6.1.4.1.2011.5.2.1.4.1.18

hwStateBlockFirstTimeRangeName

DisplayString

read-create

Indicates the first blocking time segment in domain.

current

1.3.6.1.4.1.2011.5.2.1.4.1.19

hwStateBlockSecondTimeRangeName

DisplayString

read-create

Indicates the second blocking time segment in domain.

current

1.3.6.1.4.1.2011.5.2.1.4.1.20

hwStateBlockThirdTimeRangeName

DisplayString

read-create

Indicates the third blocking time segment in domain.

current

1.3.6.1.4.1.2011.5.2.1.4.1.21

hwStateBlockForthTimeRangeName

DisplayString

read-create

Indicates the fourth blocking time segment in domain.

current

1.3.6.1.4.1.2011.5.2.1.5.1.2

hwIfDomainActive

TruthValue

read-write

This object indicates the status of a domain. The values are as follows:

• 1: active (default)
• 2: blocked

current

1.3.6.1.4.1.2011.5.2.1.5.1.26

hwTacGroupName

DisplayString

read-create

This object indicates the name of the TACACS server group used by the domain.

current

1.3.6.1.4.1.2011.5.2.1.5.1.29

hwDomainAuthorSchemeName

DisplayString

read-create

This object indicates the authorization template bound to the domain.

current

1.3.6.1.4.1.2011.5.2.1.8.1.1

hwAuthorSchemeName

DisplayString

read-only

This object indicates the name of an authorization scheme.

current

1.3.6.1.4.1.2011.5.2.1.8.1.2

hwAuthorMethod

Integer

read-create

This object indicates the authorization method. The value is an integer. The values are as follows:

• 1: none(1): direct authorization
• 2: local(2): local authorization (the default value)
• 3: hwtacacs(3): HWTACACS authorization
• 4: if-authenticated(4): if-authenticated authorization. If the user passes authentication and the authentication mode is not none, the user is authorized; otherwise, the user cannot be authorized.
• 5: hwtacacs-none(5): HWTACACS authorization, and then direct authorization if HWTACACS authorization fails.
• 6: hwtacacs-local(6): HWTACACS authorization, and then local authorization if HWTACACS authorization fails.
• 7: hwtacacs-ifauthenticated(7): HWTACACS authorization, and then if-authenticated authorization if HWTACACS authorization fails.
• 8: localnone(8): local authorization, and then direct authorization if the user name used for local authorization does not exist.
• 9: localhwtacacs(9): local authorization, and then HWTACACS authorization if the user name used for local authorization does not exist.
• 10: localifauthenticated(10): local authorization, and then if-authenticated authorization if the user name used for local authorization does not exist.
• 11: ifauthenticatednone(11): if-authenticated authorization, and then direct authorization if if-authenticated authorization fails.
• 12: ifauthenticatedlocal(12): if-authenticated authorization, and then local authorization if if-authenticated authorization fails.
• 13: ifauthenticatedhwtacacs(13): if-authenticated authorization, and then HWTACACS authorization if if-authenticated authorization fails.
• 14: localhwtacacsnone(14): local authorization, and then HWTACACS authorization if the user name used for local authorization does not exist, and then direct authorization if HWTACACS authorization fails.
• 15: localifauthenticatednone(15): local authorization, and then if-authenticated authorization if the user name used for local authorization does not exist, and then direct authorization if if-authenticated authorization fails.
• 16: hwtacacslocalnone(16): HWTACACS authorization, and then local authorization if HWTACACS authorization fails, and then direct authorization if the user name used for local authorization does not exist.
• 17: hwtacacsifauthenticatednone(17): HWTACACS authorization, and then if-authenticated authorization if HWTACACS authorization fails, and then direct authorization if if-authenticated authorization fails.
• 18: ifauthenticatedlocalnone(18): if-authenticated authorization, and then local authorization if if-authenticated authorization fails, and then direct authorization if the user name used for local authorization does not exist.
• 19: ifauthenticatedhwtacacsnone(19): if-authenticated authorization, and then HWTACACS authorization if if-authenticated authorization fails, and then direct authorization if HWTACACS authorization fails.
• 20: localhwtacacsifauthenticated(20): local authorization, and then HWTACACS authorization if the user name used for local authorization does not exist, and then if-authenticated authorization if HWTACACS authorization fails.
• 21: localifauthenticatedhwtacacs(21): local authorization, and then if-authenticated authorization if the user name used for local authorization does not exist, and then HWTACACS authorization if if-authenticated authorization fails.
• 22: hwtacaslocalifauthenticated(22): HWTACACS authorization, and then local authorization if HWTACACS authorization fails, and then if-authenticated authorization if the user name used for local authorization does not exist.
• 23: hwtacacsifauthenticatedlocal(23): HWTACACS authorization, and then if-authenticated authorization if HWTACACS authorization fails, and then local authorization if if-authenticated authorization fails.
• 24: ifauthenticatedlocalhwtacacs(24): if-authenticated authorization, and then local authorization if if-authenticated authorization fails, and then HWTACACS authorization if the user name used for local authorization does not exist.
• 25: ifauthenticatedhwtacacslocal(25): if-authenticated authorization, and then HWTACACS authorization if if-authenticated authorization fails, and then local authorization if HWTACACS authorization fails.
• 26: localhwtacacsifauthenticatednone(26): local authorization, and then HWTACACS authorization if the user name used for local authorization does not exist, and then if-authenticated authorization if HWTACACS authorization fails, and then direct authorization if if-authenticated authorization fails.
• 27: localifauthenticatedhwtacacsnone(27): local authorization, and then if-authenticated authorization if the user name used for local authorization does not exist, and then HWTACACS authorization if if-authenticated authorization fails, and then direct authorization if HWTACACS authorization fails.
• 28: hwtacaslocalifauthenticatednone(28): HWTACACS authorization, and then local authorization if HWTACACS authorization fails, and then if-authenticated authorization if the user name used for local authorization does not exist, and then direct authorization if if-authenticated authorization fails.
• 29: hwtacacsifauthenticatedlocalnone(29): HWTACACS authorization, and then if-authenticated authorization if HWTACACS authorization fails, and then local authorization if if-authenticated authorization fails, and then direct authorization if the user name used for local authorization does not exist.
• 30: ifauthenticatedlocalhwtacacsnone(30): if-authenticated authorization, and then local authorization if if-authenticated authorization fails, and then HWTACACS authorization if the user name used for local authorization does not exist, and then direct authorization if HWTACACS authorization fails.
• 31: ifauthenticatedhwtacacslocalnone(31): if-authenticated authorization, and then HWTACACS authorization if if-authenticated authorization fails, and then local authorization if HWTACACS authorization fails, and then direct authorization if the user name used for local authorization does not exist.

current

1.3.6.1.4.1.2011.5.2.1.8.1.3

hwAuthorRowStatus

RowStatus

read-create

This object indicates the row status, which can be added or deleted.

current

1.3.6.1.4.1.2011.5.2.1.10.1.1

hwLocalUserName

DisplayString

read-only

This object indicates the name of a local user. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.10.1.2

hwLocalUserPassword

OCTET STRING

read-create

This object indicates the password of a local user.

Only the Get operation is supported, but Set operation is not supported. The return value of Get operation is ******.

1.3.6.1.4.1.2011.5.2.1.10.1.3

hwLocalUserAccessType

Unsigned32

read-create

This object indicates the access type of a local user. The values and meanings are as follows:

This object indicates the access type allowed by a local user. The values and meanings are as follows:

• 0x00000040: The user type is Telnet. The user is usually a network administrator.
• 0x00000080: The user type is terminal.
• 0x00000200: The user type is SSH.
• 0x00000001: The user type is PPP.
• 0x00000002: The user type is WEB.
• 0x00000100: The user type is FTP.
• 0x00000400: The user type is X25-PAD.
• 0x00000008: The user type is IP session.
• 0x00000020: The user type is 802.1X.
• 0x00000800: The user type is HTTP, which is usually used for web system login.
• 0x00002000: The user type is API.

current

1.3.6.1.4.1.2011.5.2.1.10.1.4

hwLocalUserPriority

Integer32

read-create

This object indicates the priority of a local user. The value is an integer ranges from 0 to 16. The value 16 indicates that the user priority is deleted.

current

1.3.6.1.4.1.2011.5.2.1.10.1.5

hwftpDirction

DisplayString

read-create

This object indicates the FTP directory. The value is a string of 1 to 64 characters. This object is valid only FTP users.

current

1.3.6.1.4.1.2011.5.2.1.10.1.12

hwLocalUserRowStatus

RowStatus

read-create

This object indicates the row status.A local user can be created and deleted.

current

1.3.6.1.4.1.2011.5.2.1.10.1.15

HwLocalUserAccessLimitNum

Integer32

read-create

This object indicates the maximum number of access users.

current

1.3.6.1.4.1.2011.5.2.1.10.1.19

hwLocalUserPasswordSetTime

OCTET STRING

read-only

This object indicates when the password of a local user is created.

current

1.3.6.1.4.1.2011.5.2.1.10.1.20

hwLocalUserPasswordExpireTime

OCTET STRING

read-only

This object indicates the validity period of a local user's password.

current

1.3.6.1.4.1.2011.5.2.1.10.1.21

hwLocalUserPasswordIsExpired

INTEGER

read-only

current

1.3.6.1.4.1.2011.5.2.1.10.1.22

hwLocalUserPasswordIsOrginal

INTEGER

read-only

current

1.3.6.1.4.1.2011.5.2.1.10.1.23

hwhttpdirectory

DisplayString

read-create

This object indicates the directory that HTTP users can access.

current

1.3.6.1.4.1.2011.5.2.1.11.1.2

hwLocalUserState

INTEGER

read-write

This object indicates the status of a local user.

current

1.3.6.1.4.1.2011.5.2.1.11.1.7

hwLocalUserUserGroup

DisplayString

read-write

This object indicates information about the user group to which the local user belongs. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.11.1.8

hwLocalUserDeviceType

DisplayString

read-write

This object indicates the type of the local user's device. The value is a string of 1 to 256 characters.

current

1.3.6.1.4.1.2011.5.2.1.11.1.9

hwLocalUserExpireDate

DisplayString

read-write

Indicates the expiry date of a local account.

The value is in YYYY/MM/DD format. YYYY specifies the year, MM specifies the month, and DD specifies the day. The value ranges from 2000/1/1 to 2099/12/31.

current

1.3.6.1.4.1.2011.5.2.1.11.1.10

hwLocalUserIdleTimeoutSecond

Unsigned32

read-write

Indicates the idle timeout interval of a local account.

current

1.3.6.1.4.1.2011.5.2.1.11.1.11

hwLocalUserTimeRange

DisplayString

read-write

Indicates the period at which access of the local account is allowed.

current

1.3.6.1.4.1.2011.5.2.1.11.1.12

hwLocalUserIsExpired

INTEGER

read-only

Indicates the local account is expired.

current

1.3.6.1.4.1.2011.5.2.1.30.1

hwRecordSchemeName

read-only

DisplayString

This object specifies the name of the recording scheme.

current

1.3.6.1.4.1.2011.5.2.1.30.2

hwRecordTacGroupName

read-create

DisplayString

This object indicates the name of the HWTACACS group referenced in the recording scheme.

current

1.3.6.1.4.1.2011.5.2.1.30.3

hwRecordRowStatus

read-create

RowStatus

This object indicates the row status.

current

1.3.6.1.4.1.2011.5.2.1.38.1.1

hwServiceSchemeName

DisplayString

read-only

This object indicates the name of a service scheme.

current

1.3.6.1.4.1.2011.5.2.1.38.1.15

hwServiceSchemeDnsFirst

IpAddress

read-write

This object indicates the IP address of the primary DNS server in a service scheme.

current

1.3.6.1.4.1.2011.5.2.1.38.1.16

hwServiceSchemeDnsSecond

IpAddress

read-write

This object indicates the IP address of the secondary DNS server in a service scheme.

current

1.3.6.1.4.1.2011.5.2.1.38.1.17

hwSrvSchemeAdminUserPriority

Integer32

read-write

This object indicates the privilege level of the administrator. The value ranges from -1 to 15. The value -1 is invalid.

current

1.3.6.1.4.1.2011.5.2.1.38.1.18

hwSrvSchemeIpPoolOneName

DisplayString

read-write

This object indicates the name of the first IP address pool bound to a service scheme. The value is a string of 0 to 255 characters. The specified IP address pool must exist on the device.

current

1.3.6.1.4.1.2011.5.2.1.38.1.19

hwSrvSchemeIpPoolTwoName

DisplayString

read-write

This object indicates the name of the second IP address pool bound to a service scheme. The value is a string of 0 to 255 characters. The specified IP address pool must exist on the device.

current

1.3.6.1.4.1.2011.5.2.1.38.1.20

hwSrvSchemeIpPoolThreeName

DisplayString

read-write

This object indicates the name of the third IP address pool bound to a service scheme. The value is a string of 0 to 255 characters. The specified IP address pool must exist on the device.

current

1.3.6.1.4.1.2011.5.2.1.38.1.51

hwServiceSchemeRowStatus

RowStatus

read-create

This object indicates the status of a service scheme, which can be added and deleted.

current

1.3.6.1.4.1.2011.5.2.1.38.1.52

hwServiceSchemeIdleCutType

INTEGER

read-write

current

1.3.6.1.4.1.2011.5.2.1.38.1.53

hwServiceSchemeIdleCutFlowValue

Unsigned32

read-write

This object indicates the traffic volume threshold for idle-cut function. When the traffic volume of a user is below this threshold, the device considers that the user is in idle state.

current

1.3.6.1.4.1.2011.5.2.1.38.1.54

hwLocalAuthorize

DisplayString

read-write

This object indicates the user authorization information to be delivered to a control device.

current

1.3.6.1.4.1.2011.5.2.1.38.1.55

hwRemoteAuthorize

DisplayString

read-write

This object indicates the user authorization information to be delivered to an access device.

current

1.3.6.1.4.1.2011.5.2.1.38.1.56

hwServiceSchemeRedirectACL

DisplayString

read-write

This object indicates the ACL used for redirection in a service scheme.

current

1.3.6.1.4.1.2011.5.2.1.51.1.1

hwUserGroupIndex

Integer32

read-only

This object indicates the user group index. The value ranges from 1 to 128.

current

1.3.6.1.4.1.2011.5.2.1.51.1.2

hwUserGroupName

DisplayString

read-create

This object indicates the user group name. The value ranges from 1 to 64.

current

1.3.6.1.4.1.2011.5.2.1.51.1.3

hwAclId

DisplayString

read-create

This object indicates the ID of an ACL configured in a user group. A maximum of eight ACLs can be configured. Two ACLs are separated by a space and each ACL must exist on the device. When this table takes effect, ACLs in the original user group are deleted.

current

1.3.6.1.4.1.2011.5.2.1.51.1.7

hwUserGroupRowStatus

Integer32

read-create

This object indicates the row status of a user group. The row status can be created and deleted.

current

1.3.6.1.4.1.2011.5.2.1.51.1.8

hwUserVlan

Integer32

read-create

This object indicates the VLAN to which the user group belongs to. The value ranges from 1 to 4094.

current

1.3.6.1.4.1.2011.5.2.1.51.1.9

hw8021pRemark

Integer32

read-create

This object indicates the priority for processing Ethernet Layer 2 packets. The value ranges from 0 to 7.

current

1.3.6.1.4.1.2011.5.2.1.51.1.10

hwDscpRemark

Integer32

read-create

This object indicates the priority for processing IP packets. The value ranges from 0 to 63.

current

1.3.6.1.4.1.2011.5.2.1.51.1.13

hwUserGroupCarCir

Unsigned32

read-write

This object indicates the CIR of the user group. The value is 0 or ranges from 64 to 4294967295. The default value is 0. 0 indicates that the CIR is not configured for the user group.

current

1.3.6.1.4.1.2011.5.2.1.51.1.14

hwUserGroupCarPir

Unsigned32

read-write

This object indicates the PIR of the user group. The value is 0 or ranges from 64 to 4294967295. The default value is 0. 0 indicates that the PIR is not configured for the user group.

current

1.3.6.1.4.1.2011.5.2.1.51.1.15

hwUserGroupCarCbs

Unsigned32

read-write

This object indicates the CBS of the user group. The value is 0 or ranges from 10000 to 4294967295. The default value is 0. 0 indicates that the CBS is not configured for the user group.

current

1.3.6.1.4.1.2011.5.2.1.51.1.16

hwUserGroupCarPbs

Unsigned32

read-write

This object indicates the PBS of the user group. The value is 0 or ranges from 10000 to 4294967295. The default value is 0. 0 indicates that the PBS is not configured for the user group.

current

1.3.6.1.4.1.2011.5.2.1.51.1.17

hwUserGroupEnable

INTEGER

read-write

current

1.3.6.1.4.1.2011.5.2.1.51.1.18

hwUserGroupCarInBoundCir

Unsigned32

read-write

This object indicates the CIR value of incoming packets in the user group. The value is 0 or ranges from 64 to 4294967295. The default value is 0. 0 indicates that the CIR is not configured for the user group.

current

1.3.6.1.4.1.2011.5.2.1.51.1.19

hwUserGroupCarInBoundPir

Unsigned32

read-write

This object indicates the PIR value of incoming packets in the user group. The value is 0 or ranges from 64 to 4294967295. The default value is 0. 0 indicates that the PIR is not configured for the user group.

current

1.3.6.1.4.1.2011.5.2.1.51.1.20

hwUserGroupCarInBoundCbs

Unsigned32

read-write

This object indicates the CBS value of incoming packets in the user group. The value is 0 or ranges from 10000 to 4294967295. The default value is 0. 0 indicates that the CBS is not configured for the user group.

current

1.3.6.1.4.1.2011.5.2.1.51.1.21

hwUserGroupCarInBoundPbs

Unsigned32

read-write

This object indicates the PBS value of incoming packets in the user group. The value is 0 or ranges from 10000 to 4294967295. The default value is 0. 0 indicates that the PBS is not configured for the user group.

current

1.3.6.1.4.1.2011.5.2.1.51.1.22

hwUserGroupUserVlanPool

OCTET STRING

read-create

This object indicates the VLAN pool bound to the user group.

current

1.3.6.1.4.1.2011.5.2.1.15.1.1

hwAccessIndex

Integer32

read-only

This object indicates the CIB index.

current

1.3.6.1.4.1.2011.5.2.1.15.1.3

hwAccessUserName

DisplayString

read-only

This object indicates the access user name. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.15.1.8

hwAccessSlotNo

Integer32

read-only

This object indicates the number of the slot where the user connected to the device. The value of this object is meaningless for management users.

current

1.3.6.1.4.1.2011.5.2.1.15.1.11

hwAccessVLANID

Integer32

read-only

This object indicates the VLAN that access users belong to. The value is an integer that ranges from 1 to 4094. The value 0 indicates no VLAN ID exists.

current

1.3.6.1.4.1.2011.5.2.1.15.1.13

hwAccessAuthenMethod

INTEGER

read-only

current

1.3.6.1.4.1.2011.5.2.1.15.1.15

hwAccessIPAddress

IpAddress

read-only

This object indicates the IP address of an access user.

current

1.3.6.1.4.1.2011.5.2.1.15.1.17

hwAccessMACAddress

MacAddress

read-only

This object indicates the MAC address of an access user.

current

1.3.6.1.4.1.2011.5.2.1.15.1.25

hwAccessStartTime

DateAndTime

read-only

This object indicates the user access time. For example, 2012-12-13,22:8:39.0,+0:0.

current

1.3.6.1.4.1.2011.5.2.1.15.1.36

hwAccessUpFlow64

Counter64

read-only

This object indicates data traffic (number of bytes) from users to the device.

current

1.3.6.1.4.1.2011.5.2.1.15.1.37

hwAccessDnFlow64

Counter64

read-only

This object indicates data traffic (number of bytes) from the device to users.

current

1.3.6.1.4.1.2011.5.2.1.15.1.38

hwAccessUpPacket64

Counter64

read-only

This object indicates data traffic (number of packets) from users to the device.

current

1.3.6.1.4.1.2011.5.2.1.15.1.39

hwAccessDnPacket64

Counter64

read-only

This object indicates data traffic (number of packets) from the device to users.

current

1.3.6.1.4.1.2011.5.2.1.15.1.45

hwAccessCARUpCIR

Unsigned32

read-only

This object indicates the CIR value of incoming packets.

current

1.3.6.1.4.1.2011.5.2.1.15.1.46

hwAccessCARUpPIR

Unsigned32

read-only

This object indicates the PIR value of incoming packets.

current

1.3.6.1.4.1.2011.5.2.1.15.1.47

hwAccessCARUpCBS

Unsigned32

read-only

This object indicates the CBS value of incoming packets.

current

1.3.6.1.4.1.2011.5.2.1.15.1.48

hwAccessCARUpPBS

Unsigned32

read-only

This object indicates the PBS value of incoming packets.

current

1.3.6.1.4.1.2011.5.2.1.15.1.49

hwAccessCARDnCIR

Unsigned32

read-only

This object indicates the CIR value of outbound packets.

current

1.3.6.1.4.1.2011.5.2.1.15.1.50

hwAccessCARDnPIR

Unsigned32

read-only

This object indicates the PIR value of outbound packets.

current

1.3.6.1.4.1.2011.5.2.1.15.1.51

hwAccessCARDnCBS

Unsigned32

read-only

This object indicates the CBS value of outbound packets.

current

1.3.6.1.4.1.2011.5.2.1.15.1.52

hwAccessCARDnPBS

Unsigned32

read-only

This object indicates the PBS value of outbound packets.

current

1.3.6.1.4.1.2011.5.2.1.15.1.57

hwAccessInterface

DisplayString

read-only

This object indicates the access interface. The value is a string of 1 to 63 characters.

current

1.3.6.1.4.1.2011.5.2.1.15.1.74

hwAccessDeviceName

OCTET STRING

read-only

This object indicates the AP name for a wireless user or indicates the name of the device to which an access user connects in a policy association scenario.

current

1.3.6.1.4.1.2011.5.2.1.15.1.75

hwAccessDeviceMACAddress

MacAddress

read-only

This object displays an invalid MAC address that is all 0s for a wireless user or displays the MAC address of the device to which an access user connects in a policy association scenario.

current

1.3.6.1.4.1.2011.5.2.1.15.1.76

hwAccessDevicePortName

OCTET STRING

read-only

This object indicates the port name of the device to which an access user connects in a policy association scenario.

current

1.3.6.1.4.1.2011.5.2.1.15.1.77

hwAccessAPID

Unsigned32

read-only

This object displays the AP ID for a wireless user or 0x0FFFF for a wired user.

current

1.3.6.1.4.1.2011.5.2.1.15.1.78

hwAccessQinQVLANID

Integer32

read-only

This object indicates the outer VLAN ID of QinQ packets. The value is an integer that ranges from 1 to 4094. The value 0 indicates no VLAN ID.

current

1.3.6.1.4.1.2011.5.2.1.15.1.79

hwAccessOption82CircuitID

OCTET STRING

read-only

This object indicates the circuit ID of Option 82.

current

1.3.6.1.4.1.2011.5.2.1.15.1.80

hwAccessOption82RemoteID

OCTET STRING

read-only

This object indicates the remote ID of Option 82.

current

1.3.6.1.4.1.2011.5.2.1.15.1.81

hwAccessSessionTimeout

Integer32

read-only

This object indicates the session timeout interval.

current

1.3.6.1.4.1.2011.5.2.1.15.1.82

hwAccessISPVLAN

Integer32

read-only

This object indicates the ISP VLAN of access users.

current

1.3.6.1.4.1.2011.5.2.1.15.1.83

hwAccessISPInterface

Integer32

read-only

This object indicates the ISP interface of access users.

current

1.3.6.1.4.1.2011.5.2.1.16.1.14

hwAccessCurAuthenPlace

INTEGER

read-only

This object indicates the authentication mode. The value can be none(0), local(1), radius(2), or tacacs(3).

current

1.3.6.1.4.1.2011.5.2.1.16.1.17

hwAccessType

INTEGER

read-only

This object indicates the access type. The value can be telnet(1), 2:terminal(2), 3:ssh(3), 4:ftp(4), 5:x25pad(5), 6:ppp(6), 7:pppoe(7), 8:pppoeovlan(8), 9:pppoa(9), 10:pppoeoa(10), 11:pppolns(11), 12:ordinaryvlan(12), 13:eap(13), 14:pnp(14), 15:ip(15), 16:staticvlan(16), 17:layer2leasedline(17), 18:layer2leasedlineuser(18), 19:layer3leasedline(19), 20:pppoeleasedline(20), 21:nmsleasedline(21), 22:proxyleasedline(22), 23:relayleasedline(23), 24:e1pos(24), 25:lactunnel(25), 26:lnstunnel(26), 27:mip(27), 28:deviceuser(28), 29:pppoeor(29), 30:pppoeovlanor(30), 31:ordinaryvlanor(31), 32:http(32), 33:web(33), 34:wlan(34), 35:mac(35), or 36:vm(36).

current

1.3.6.1.4.1.2011.5.2.1.16.1.18

hwAccessOnlineTime

Unsigned32

read-only

This object indicates the online duration, in seconds.

current

1.3.6.1.4.1.2011.5.2.1.16.1.19

hwAccessDomain

DisplayString

read-write

This object indicates the domain that an access user belongs to. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.16.1.20

hwAccessGateway

IpAddress

read-only

This object indicates the gateway IP address.

current

1.3.6.1.4.1.2011.5.2.1.16.1.21

hwAccessSSID

DisplayString

read-write

This object indicates the SSID of an access user. The value is a string of 1 to 32 characters.

current

1.3.6.1.4.1.2011.5.2.1.16.1.22

hwAccessAPMAC

MacAddress

read-only

This object indicates the MAC address of an AP.

current

1.3.6.1.4.1.2011.5.2.1.16.1.23

hwAccessCurAccountingPlace

INTEGER

read-only

This object indicates the accounting mode. The value can be none(1), radius(2), or tacacs(3).

current

1.3.6.1.4.1.2011.5.2.1.16.1.24

hwAccessCurAuthorPlace

INTEGER

read-only

This object indicates the authorization mode. The value can be none(1), local(2), ifauthen(3), or tacacs(4).

current

1.3.6.1.4.1.2011.5.2.1.16.1.25

hwAccessUserGroup

DisplayString

read-write

This object indicates the name of a user group. The value is a string of 1to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.28.1

hwCutStartUserID

Integer32

read-write

This object indicates the user ID.

current

1.3.6.1.4.1.2011.5.2.1.28.3

hwCutIPaddress

IpAddress

read-write

This object indicates the IP address of a user who is to be disconnected.

current

1.3.6.1.4.1.2011.5.2.1.28.4

hwCutMacAddres

MacAddress

read-write

This object indicates the MAC address of a user who is to be disconnected. If the MAC address is XX:XX:XX:XX:XX:XX, enter it in the format # 0xXX 0xXX 0xXX 0xXX 0xXX 0xXX.

current

1.3.6.1.4.1.2011.5.2.1.28.7

hwCutDomain

DisplayString

read-write

This object indicates the domain that a user who is to be disconnected belongs to. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.28.14

hwCutAccessInterface

DisplayString

read-write

This object indicates the access interface of a user who is to be disconnected. The value is a string of 1 to 63 characters.

current

1.3.6.1.4.1.2011.5.2.1.28.15

hwCutUserSSID

Octet String

read-write

This object indicates the SSID of a user who is to be disconnected. The value is a string of 1 to 32 characters.

current

1.3.6.1.4.1.2011.5.2.1.28.16

hwCutAccessSlot

Integer32

read-write

This object indicates the access slot of a user who is to be disconnected. The value is an integer.

current

1.3.6.1.4.1.2011.5.2.1.28.17

hwCutUserGroup

DisplayString

read-write

This object indicates the user group that a user who is to be disconnected belongs to. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.55.1.1

hwAuthEventPortIndex

Unsigned32

read-only

This object specifies the user interface index.

current

1.3.6.1.4.1.2011.5.2.1.55.1.2

hwAuthEventAuthFailResponseFail

DisplayString

read-write

current

1.3.6.1.4.1.2011.5.2.1.55.1.3

hwAuthEventAuthFailVlan

DisplayString

read-write

This object indicates that a user failing in authentication is added to the corresponding VLAN.

current

1.3.6.1.4.1.2011.5.2.1.55.1.4

hwAuthEventAuthenServerDownResponseFail

DisplayString

read-write

current

1.3.6.1.4.1.2011.5.2.1.55.1.5

hwAuthEventAuthenServerDownVlan

Integer32

read-write

This object indicates that the device adds a user to the corresponding VLAN if the authentication server does not respond.

current

1.3.6.1.4.1.2011.5.2.1.55.1.6

hwAuthEventClientNoResponseVlan

Integer32

read-write

This object indicates that the device adds a user to the corresponding VLAN if the client does not respond.

current

1.3.6.1.4.1.2011.5.2.1.55.1.7

hwAuthEventPreAuthVlan

Integer32

read-write

This object indicates that the device adds a user to the corresponding VLAN before the client is authenticated.

current

1.3.6.1.4.1.2011.5.2.1.55.1.8

hwAuthEventAuthFailUserGroup

OCTET STRING

read-write

This object indicates that a user failing in authentication is added to a user group.

current

1.3.6.1.4.1.2011.5.2.1.55.1.9

hwAuthEventAuthenServerDownUserGroup

OCTET STRING

read-write

This object indicates that the device adds a user to a user group if the authentication server does not respond.

current

1.3.6.1.4.1.2011.5.2.1.55.1.10

hwAuthEventClientNoResponseUserGroup

OCTET STRING

read-write

This object indicates that the device adds a user to a user group if the client does not respond.

current

1.3.6.1.4.1.2011.5.2.1.55.1.11

hwAuthEventPreAuthUserGroup

OCTET STRING

read-write

This object indicates that the device adds a client to a user group before the client is authenticated.

current

1.3.6.1.4.1.2011.5.2.1.57.1.1

hwAuthorCmdLevel

Integer32

read-only

This object indicates the user level of commands with command line authorization enabled.

This object is implemented as defined in the corresponding MIB file.

1.3.6.1.4.1.2011.5.2.1.57.1.2

hwAuthorCmdMode

INTEGER

read-create

This object is implemented as defined in the corresponding MIB file.

1.3.6.1.4.1.2011.5.2.1.57.1.3

hwAuthorCmdRowStatus

RowStatus

read-create

This object indicates the row status.

This object is implemented as defined in the corresponding MIB file.

1.3.6.1.4.1.2011.5.2.1.34.1.1

hwOfflineReason

Integer32

read-only

This object indicates reasons why a user goes offline.

current

1.3.6.1.4.1.2011.5.2.1.34.1.2

hwOfflineReasonStatistic

Integer32

read-only

This object indicates statistics on user offline reasons.

current

1.3.6.1.4.1.2011.5.2.1.34.1.3

hwOnlineFailReasonStatistic

Integer32

read-only

This object indicates statistics on user login failure reasons.

current

1.3.6.1.4.1.2011.5.2.1.59.1.1

hwAdminEnable

INTEGER

read-write

current

1.3.6.1.4.1.2011.5.2.1.59.1.2

hwAdminExpire

Integer32

read-write

Indicates the number of days after which the password expires.

current

1.3.6.1.4.1.2011.5.2.1.59.1.3

hwAdminPwHistoryRecordNum

Integer32

read-write

Indicates the maximum number of historical passwords recorded on the device.

current

1.3.6.1.4.1.2011.5.2.1.59.1.4

hwAdminAlertBefore

Integer32

read-write

Indicates how long the system displays a prompt before the password expires.

current

1.3.6.1.4.1.2011.5.2.1.59.1.5

hwAdminAlertOrginal

INTEGER

read-write

current

1.3.6.1.4.1.2011.5.2.1.60.1.1

hwAccEnable

INTEGER

read-write

current

1.3.6.1.4.1.2011.5.2.1.60.1.2

hwAccPwHistoryRecordNum

Integer32

read-write

Indicates the maximum number of historical passwords recorded on the device.

current

1.3.6.1.4.1.2011.5.2.1.62.1.1

userAuthenProfileName

OCTET STRING

read-only

This object indicates the name of a user authentication profile. The value is a string of 1 to 31 characters.

current

1.3.6.1.4.1.2011.5.2.1.62.1.2

userAuthenProfileDot1xAccessProfileName

OCTET STRING

read-create

This object indicates the name of the 802.1X access profile bound to the user authentication profile. The value is a string of 1 to 31 characters.

current

1.3.6.1.4.1.2011.5.2.1.62.1.3

userAuthenProfileMacAuthenAccessProfileName

OCTET STRING

read-create

This object indicates the name of the MAC access profile bound to the user authentication profile. The value is a string of 1 to 31 characters.

current

1.3.6.1.4.1.2011.5.2.1.62.1.4

userAuthenProfilePortalAccessProfileName

OCTET STRING

read-create

This object indicates the name of the Portal access profile bound to the user authentication profile. The value is a string of 1 to 31 characters.

current

1.3.6.1.4.1.2011.5.2.1.62.1.5

userAuthenProfileSingleAccess

TruthValue

read-create

This object indicates the single-user access mode.

current

1.3.6.1.4.1.2011.5.2.1.62.1.6

OCTET STRING

read-create

This object indicates the name of the service scheme based on which the device assigns network access rights to pre-connection users. The value is a string of 1 to 32 characters.

current

1.3.6.1.4.1.2011.5.2.1.62.1.8

userAuthenProfilePreAuthenVLAN

Integer32

read-create

This object indicates the VLAN assigned to pre-authenticated users. The value is an integer that ranges from 1 to 4094.

current

1.3.6.1.4.1.2011.5.2.1.62.1.9

OCTET STRING

read-create

This object indicates the name of the service scheme based on which the device assigns network access rights to users who fail to be authenticated. The value is a string of 1 to 32 characters.

current

1.3.6.1.4.1.2011.5.2.1.62.1.11

userAuthenProfileAuthenFailAuthorVLAN

Integer32

read-create

This object indicates the VLAN assigned to users who fail the authentication. The value is an integer that ranges from 1 to 4094.

current

1.3.6.1.4.1.2011.5.2.1.62.1.12

OCTET STRING

read-create

This object indicates the name of the service scheme based on which the device assigns network access rights to users when the authentication server is Down. The value is a string of 1 to 32 characters.

current

1.3.6.1.4.1.2011.5.2.1.62.1.14

Integer32

read-create

This object indicates the VLAN based on which the device assigns network access rights to users when the authentication server is Down. The value is an integer that ranges from 1 to 4094.

current

1.3.6.1.4.1.2011.5.2.1.62.1.15

TruthValue

read-create

current

1.3.6.1.4.1.2011.5.2.1.62.1.16

TruthValue

read-create

This object indicates that the device re-authenticates users when the authentication server changes from Down to Up.

current

1.3.6.1.4.1.2011.5.2.1.62.1.18

userAuthenProfileMACBypass

TruthValue

read-create

This object indicates MAC address bypass authentication.

current

1.3.6.1.4.1.2011.5.2.1.62.1.19

userAuthenProfileDot1xForceDomain

OCTET STRING

read-create

This object indicates a forcible 802.1X authentication domain. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.62.1.20

userAuthenProfileMACAuthenForceDomain

OCTET STRING

read-create

This object indicates a forcible MAC address authentication domain. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.62.1.21

userAuthenProfilePortalForceDomain

OCTET STRING

read-create

This object indicates a forcible Portal authentication domain. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.62.1.22

userAuthenProfileDot1xDefaultDomain

OCTET STRING

read-create

This object indicates a default 802.1X authentication domain. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.62.1.23

userAuthenProfileMACAuthenDefaultDomain

OCTET STRING

read-create

This object indicates a default MAC address authentication domain. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.62.1.24

userAuthenProfilePortalDefaultDomain

OCTET STRING

read-create

This object indicates a default Portal authentication domain. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.62.1.25

userAuthenProfileDefaultDomain

OCTET STRING

read-create

This object indicates a default user domain that is valid for all access authentication users. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.62.1.26

userAuthenProfileForceDomain

OCTET STRING

read-create

This object indicates a forcible user domain that is valid for all access authentication users. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.62.1.27

userAuthenProfileDomainNameDelimiter

OCTET STRING

read-create

This object indicates a domain name delimiter.

current

1.3.6.1.4.1.2011.5.2.1.62.1.28

userAuthenProfileDomainNameLocation

INTEGER

read-create

current

1.3.6.1.4.1.2011.5.2.1.62.1.29

userAuthenProfileDomainNameParseDirection

INTEGER

read-create

current

1.3.6.1.4.1.2011.5.2.1.62.1.30

userAuthenProfileSecurityNameDelimiter

OCTET STRING

read-create

This object indicates the security name character delimiter.

current

1.3.6.1.4.1.2011.5.2.1.62.1.31

userAuthenProfilePreAuthenReAuthenTimer

Integer32

read-create

This object indicates the interval for re-authenticating pre-connection users.

The value is an integer that ranges from 0 or 30 to 7200, in seconds. The value 0 indicates that the re-authentication function is disabled for pre-connection users.

current

1.3.6.1.4.1.2011.5.2.1.62.1.32

userAuthenProfileAuthenFailReAuthenTimer

Integer32

read-create

This object indicates the interval for re-authenticating users who fail to be authenticated.

The value is an integer that ranges from 0 or 30 to 7200, in seconds. The value 0 indicates that the re-authentication function is disabled for pre-connection users.

current

1.3.6.1.4.1.2011.5.2.1.62.1.33

Integer32

read-create

The value is an integer that ranges from 0 or 60 to 4294860, in seconds. The value 0 indicates that the entry is not aged.

current

1.3.6.1.4.1.2011.5.2.1.62.1.34

Integer32

read-create

The value is an integer that ranges from 0 or 60 to 4294860, in seconds. The value 0 indicates that the entry is not aged.

current

1.3.6.1.4.1.2011.5.2.1.62.1.35

userAuthenProfileFreeRuleName

OCTET STRING

read-create

This object indicates the name of an authentication-free rule.

Currently, the device supports only one authentication-free rule profile, that is, the built-in profile default_free_rule.

current

1.3.6.1.4.1.2011.5.2.1.62.1.43

INTEGER

read-create

current

1.3.6.1.4.1.2011.5.2.1.62.1.44

Integer32

read-create

current

1.3.6.1.4.1.2011.5.2.1.62.1.45

TruthValue

read-create

current

1.3.6.1.4.1.2011.5.2.1.62.1.46

Integer32

read-create

The value is an integer that ranges from 5 to 7200, in seconds.

current

1.3.6.1.4.1.2011.5.2.1.62.1.47

userAuthenProfileRowStatus

RowStatus

read-create

This object indicates the row status.

current

1.3.6.1.4.1.2011.5.2.1.62.1.48

userAuthenProfilePermitDomain

OCTET STRING

read-create

This object indicates the domain that allows users to access.

current

1.3.6.1.4.1.2011.5.2.1.62.1.49

userAuthenProfileAuthenticationMaxUser

Integer32

read-create

This object indicates the maximum number of authenticated users allowed in a VAP profile.

current

1.3.6.1.4.1.2011.5.2.1.62.1.50

TruthValue

read-create

current

1.3.6.1.4.1.2011.5.2.1.63.1.1

userAuthenticationFreeRuleName

DisplayString

read-only

This object indicates the name of an authentication-free rule profile.

current

1.3.6.1.4.1.2011.5.2.1.63.1.2

userAuthenticationFreeRuleACLNumber

Integer32

read-create

This object indicates the ID of an IPv4 authentication-free rule.

current

1.3.6.1.4.1.2011.5.2.1.63.1.4

userAuthenticationFreeRuleRowStatus

RowStatus

read-create

This object indicates the row status.

current

1.3.6.1.4.1.2011.5.2.1.64.1.1

hwDot1xAccessProfileName

DisplayString

read-only

This object indicates the name of an 802.1X access profile.

current

1.3.6.1.4.1.2011.5.2.1.64.1.2

hwDot1xAccessProfileGuestAuthorServiceSchemeName

DisplayString

read-create

This object indicates the name of the service scheme based on which the device assigns network access rights to users when 802.1X clients do not respond.

current

1.3.6.1.4.1.2011.5.2.1.64.1.3

hwDot1xAccessProfileGuestAuthorUserGroupName

DisplayString

read-create

This object indicates the name of the UCL group based on which the device assigns network access rights to users when 802.1X clients do not respond.

current

1.3.6.1.4.1.2011.5.2.1.64.1.4

hwDot1xAccessProfileGuestAuthorVLAN

Integer32

read-create

This object indicates the VLAN based on which the device assigns network access rights to users when 802.1X clients do not respond.

current

1.3.6.1.4.1.2011.5.2.1.64.1.5

hwDot1xAccessProfileHandshakeSwitch

TruthValue

read-create

This object indicates whether handshake with online 802.1X users is enabled.

• 1: enabled
• 2: disabled

The default value is 2.

current

1.3.6.1.4.1.2011.5.2.1.64.1.6

hwDot1xAccessProfileHandShakePktType

INTEGER

read-create

This object indicates the type of 802.1X authentication handshake packets.

current

1.3.6.1.4.1.2011.5.2.1.64.1.7

hwDot1xAccessProfileHandshakeInterval

Integer32

read-create

This object indicates the interval at which the device handshakes with an 802.1X authentication user on a non-Eth-Trunk interface.

current

1.3.6.1.4.1.2011.5.2.1.64.1.8

hwDot1xAccessProfileIfEAPEnd

TruthValue

read-only

This object indicates whether EAP termination authentication is enabled.

• 1: enabled
• 2: disabled

The default value is 2.

current

1.3.6.1.4.1.2011.5.2.1.64.1.9

hwDot1xAccessProfileEAPEndMethod

INTEGER

read-create

current

1.3.6.1.4.1.2011.5.2.1.64.1.10

hwDot1xAccessProfileEAPNotifyPktEAPCode

Integer32

read-create

This object indicates the code number in EAP packets sent in response to user requests.

current

1.3.6.1.4.1.2011.5.2.1.64.1.11

hwDot1xAccessProfileEAPNotifyPktEAPType

Integer32

read-create

This object indicates the data type in EAP packets sent in response to user requests.

current

1.3.6.1.4.1.2011.5.2.1.64.1.12

hwDot1xAccessProfileReAuthenEnable

TruthValue

read-create

This object indicates whether re-authentication of online 802.1X users is enabled.

• 1: enabled
• 2: disabled

The default value is 2.

current

1.3.6.1.4.1.2011.5.2.1.64.1.13

hwDot1xAccessProfileReauthenticationTimeout

Integer32

read-create

This object indicates the interval for re-authenticating online 802.1X authentication users.

current

1.3.6.1.4.1.2011.5.2.1.64.1.14

hwDot1xAccessProfileClientTimeout

Integer32

read-create

This object indicates the client authentication timeout timer.

current

1.3.6.1.4.1.2011.5.2.1.64.1.15

hwDot1xAccessProfileServerTimeout

Integer32

read-create

This object indicates the server authentication timeout timer.

current

1.3.6.1.4.1.2011.5.2.1.64.1.17

hwDot1xAccessProfileMaxRetryValue

Integer32

read-create

This object indicates the maximum number of times that an authentication request packet can be sent.

current

1.3.6.1.4.1.2011.5.2.1.64.1.18

hwDot1xAccessProfileSpeedLimitAuto

TruthValue

read-create

This object indicates whether the function of dynamically adjusting the packet processing rate is enabled.

• 1: enabled
• 2: disabled

The default value is 2.

current

1.3.6.1.4.1.2011.5.2.1.64.1.19

hwDot1xAccessProfileTriggerPktType

INTEGER

read-create

This object indicates the packet type that can trigger 802.1X authentication.

• 0: default
• 1: arp
• 2: dhcp

The default value is 0.

current

1.3.6.1.4.1.2011.5.2.1.64.1.20

hwDot1xAccessProfileUnicastTrigger

TruthValue

read-create

This object indicates whether the function 802.1X authentication triggered by unicast packets is enabled.

• 1: enabled
• 2: disabled

The default value is 2.

current

1.3.6.1.4.1.2011.5.2.1.64.1.22

hwDot1xAccessProfileEthTrunkHandShakePeriod

Integer32

read-create

This object indicates the interval at which the device handshakes with an 802.1X authentication user on an Eth-Trunk.

current

1.3.6.1.4.1.2011.5.2.1.64.1.23

hwDot1xAccessProfileRowStatus

RowStatus

read-create

This object indicates the row status.

current

1.3.6.1.4.1.2011.5.2.1.65.1.1

hwMACAuthenAccessProfileName

DisplayString

read-only

This object indicates the name of a MAC access profile.

current

1.3.6.1.4.1.2011.5.2.1.65.1.2

hwMACAuthenAccessProfileReAuthenEnable

TruthValue

read-create

This object indicates that MAC address re-authentication is enabled.

current

1.3.6.1.4.1.2011.5.2.1.65.1.3

hwMACAuthenAccessProfileReauthenticationTimeout

Integer32

read-create

This object indicates the MAC address re-authentication interval.

current

1.3.6.1.4.1.2011.5.2.1.65.1.5

hwMACAuthenAccessProfileUserNameFixedUserName

OCTET STRING

read-create

This object indicates the fixed user name format for MAC address authentication.

current

1.3.6.1.4.1.2011.5.2.1.65.1.6

hwMACAuthenAccessProfileFixedPassword

OCTET STRING

read-create

This object indicates the fixed password for MAC address authentication.

current

1.3.6.1.4.1.2011.5.2.1.65.1.7

hwMACAuthenAccessProfileMACAddressFormat

INTEGER

read-create

This object indicates the MAC address format for MAC address authentication.

current

1.3.6.1.4.1.2011.5.2.1.65.1.8

hwMACAuthenAccessProfileMACAddressPassword

OCTET STRING

read-create

This object indicates the MAC address password for MAC address authentication.

current

1.3.6.1.4.1.2011.5.2.1.65.1.11

hwMACAuthenAccessProfileTriggerPktType

Integer32

read-create

This object indicates the packet type that can trigger MAC address authentication.

current

1.3.6.1.4.1.2011.5.2.1.65.1.12

hwMACAuthenAccessProfileTriggerDHCPOptionType

INTEGER

read-create

This object indicates that the device sends DHCP option information to the authentication server when receiving DHCP packets that trigger MAC address authentication.

current

1.3.6.1.4.1.2011.5.2.1.65.1.13

hwMACAuthenAccessProfileDHCPRelaseOffline

TruthValue

read-create

This object indicates that the device clears user entries when receiving DHCP release packets from MAC address authentication users.

current

1.3.6.1.4.1.2011.5.2.1.65.1.14

hwMACAuthenAccessProfileDHCPRenewReAuthen

TruthValue

read-create

This object indicates that the device re-authenticates MAC address authentication users when receiving DHCP lease renewal packets from the users.

current

1.3.6.1.4.1.2011.5.2.1.65.1.15

hwMACAuthenAccessProfilePermitAuthenMAC

MacAddress

read-create

This object indicates the MAC address allowed for MAC address authentication.

current

1.3.6.1.4.1.2011.5.2.1.65.1.16

hwMACAuthenAccessProfilePermitAuthenMACMask

MacAddress

read-create

This object indicates the MAC address mask allowed for MAC address authentication.

current

1.3.6.1.4.1.2011.5.2.1.65.1.17

hwMACAuthenAccessProfileRowStatus

RowStatus

read-create

This object indicates the row status.

current

1.3.6.1.4.1.2011.5.2.1.66.1.1

hwPortalAccessProfileName

DisplayString

read-only

This object indicates the name of a Portal access profile.

current

1.3.6.1.4.1.2011.5.2.1.66.1.2

hwPortalAccessProfileDetectPeriod

Integer32

read-create

This object indicates the offline detection interval for Portal authentication users. The value is an integer that ranges from 0 or 30 to 7200, in seconds.

current

1.3.6.1.4.1.2011.5.2.1.66.1.3

hwPortalAccessProfilePortalServerDownServiceSchemeName

OCTET STRING

read-create

This object indicates the name of the service scheme based on which the device assigns network access rights to users when the Portal server is Down.

current

1.3.6.1.4.1.2011.5.2.1.66.1.4

hwPortalAccessProfilePortalServerDownUserGroupName

OCTET STRING

read-create

This object indicates the name of the UCL group based on which the device assigns network access rights to users when the Portal server is Down.

current

1.3.6.1.4.1.2011.5.2.1.66.1.5

hwPortalAccessProfilePortalServerUpReAuthen

TruthValue

read-create

This object indicates that the device sets the status of users who fail to be authenticated to pre-connection when the Portal server changes from Down to Up.

current

1.3.6.1.4.1.2011.5.2.1.66.1.8

hwPortalAccessProfileAuthenNetWork

OCTET STRING

read-create

This object indicates the source subnet for Portal authentication.

When multiple network segments exist, different network segments are divided using ?. For example, 10.1.2.0?10.1.3.0?10.1.5.0.

current

1.3.6.1.4.1.2011.5.2.1.66.1.9

hwPortalAccessProfileAuthenNetWorkMask

OCTET STRING

read-create

This object indicates the source subnet mask for Portal authentication.

current

1.3.6.1.4.1.2011.5.2.1.66.1.10

hwPortalAccessProfilePortalServerName

DisplayString

read-create

This object indicates the name of a Portal server profile.

current

1.3.6.1.4.1.2011.5.2.1.66.1.11

hwPortalAccessProfilePortalAccessDirect

INTEGER

read-create

current

1.3.6.1.4.1.2011.5.2.1.66.1.14

hwPortalAccessProfileRowStatus

RowStatus

read-create

This object indicates the row status.

current

1.3.6.1.4.1.2011.5.2.1.68.1.1

userAuthenticationFreeRuleNumber

Integer32

read-only

This object indicates the ID of an authentication-free rule.

current

1.3.6.1.4.1.2011.5.2.1.68.1.2

userAuthenticationFreeRuleSourceMode

Integer32

read-only

This object indicates the source mode in an authentication-free rule.

current

1.3.6.1.4.1.2011.5.2.1.68.1.3

userAuthenticationFreeRuleSourceVlan

Integer32

read-only

This object indicates the VLAN ID of source packets in an authentication-free rule.

current

1.3.6.1.4.1.2011.5.2.1.68.1.4

userAuthenticationFreeRuleSourceInterface

OCTET STRING

read-only

This object indicates the interface of source packets in an authentication-free rule.

current

1.3.6.1.4.1.2011.5.2.1.68.1.5

userAuthenticationFreeRuleSourceIP

IpAddress

read-only

This object indicates the source IP address in an authentication-free rule.

current

1.3.6.1.4.1.2011.5.2.1.68.1.6

userAuthenticationFreeRuleSourceIPMask

IpAddress

read-only

This object indicates the source IP address mask in an authentication-free rule.

current

1.3.6.1.4.1.2011.5.2.1.68.1.7

userAuthenticationFreeRuleSourceMac

MacAddress

read-only

This object indicates the source MAC address in an authentication-free rule.

current

1.3.6.1.4.1.2011.5.2.1.68.1.8

userAuthenticationFreeRuleDestinationMode

Integer32

read-only

This object indicates the destination mode in an authentication-free rule.

current

1.3.6.1.4.1.2011.5.2.1.68.1.9

userAuthenticationFreeRuleDestinationIP

IpAddress

read-only

This object indicates the destination IP address in an authentication-free rule.

current

1.3.6.1.4.1.2011.5.2.1.68.1.10

userAuthenticationFreeRuleDestinationIPMask

IpAddress

read-only

This object indicates the destination IP address mask in an authentication-free rule.

current

1.3.6.1.4.1.2011.5.2.1.68.1.11

userAuthenticationFreeRuleDestinationProtocol

INTEGER

read-only

current

1.3.6.1.4.1.2011.5.2.1.68.1.12

userAuthenticationFreeRuleDestinationPort

Integer32

read-only

This object indicates the destination port number in an authentication-free rule.

current

1.3.6.1.4.1.2011.5.2.1.68.1.14

userAuthenticationFreeRuleExtRowStatus

RowStatus

read-only

This object indicates the status of an authentication-free rule expansion table.

current

1.3.6.1.4.1.2011.5.2.1.73.1

hwReAuthenMacAddress

MacAddress

read-write

This object indicates the MAC address of a MAC user or 802.1X user who is re-authenticated.

If the MAC address is XX:XX:XX:XX:XX:XX, enter it in the format # 0xXX 0xXX 0xXX 0xXX 0xXX 0xXX.

current

1.3.6.1.4.1.2011.5.2.1.74.1.1

hwAccessUserNumberDot1x

Integer32

read-only

This object indicates the number of 802.1X authentication users.

current

1.3.6.1.4.1.2011.5.2.1.74.1.2

hwAccessUserNumberMAC

Integer32

read-only

This object indicates the number of MAC authentication users.

current

1.3.6.1.4.1.2011.5.2.1.74.1.3

hwAccessUserNumberPortal

Integer32

read-only

This object indicates the number of Portal authentication users.

current

1.3.6.1.4.1.2011.5.2.1.74.1.4

hwAccessUserNumberPPP

Integer32

read-only

This object indicates the number of PPP authentication users.

current

1.3.6.1.4.1.2011.5.2.1.74.1.5

Integer32

read-only

This object indicates the number of pre-connection users.

current

1.3.6.1.4.1.2011.5.2.1.74.1.6

hwAccessUserNumberStatic

Integer32

read-only

This object indicates the number of static users.

current

1.3.6.1.4.1.2011.5.2.1.74.1.7

hwAccessUserNumberAdmin

Integer32

read-only

This object indicates the number of management users.

current

1.3.6.1.4.1.2011.5.2.2.2.0.53

hwMacMovedQuietMaxUserAlarm

The percentage of MAC address migration users in quiet state against the maximum number of users reaches the upper alarm threshold.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.2.2.0.54

hwMacMovedQuietUserClearAlarm

The percentage of MAC address migration users in quiet state against the maximum number of users decreases to be equal to or smaller than the lower alarm threshold.

This object is implemented as defined in the corresponding MIB files.