HUAWEI-AAA-MIB

1.3.6.1.4.1.2011.5.2.1.1.1.1

hwAuthenSchemeName

DisplayString (SIZE (1..32))

read-only

This object indicates the name of an authentication scheme.

current

1.3.6.1.4.1.2011.5.2.1.1.1.2

hwAuthenMethod

INTEGER

read-create

This object indicates the authentication method. The values and meanings are as follows:

• 1 (local): local authentication (the default value)
• 2 (no-auth): non-authentication
• 3 (radius): RADIUS authentication
• 4 (localRadius): local authentication, and then RADIUS authentication if the user name used for local authentication does not exist.
• 5 (radiusLocal): RADIUS authentication, and then local authentication if RADIUS authentication is unavailable.
• 6 (radiusNoauth): RADIUS authentication, and then non-authentication if RADIUS authentication is unavailable.
• 7 (tacacs): HWTACACS authentication
• 8 (tacacsLocal): HWTACACS authentication, and then local authentication if HWTACACS authentication is unavailable.
• 9 (localTacacs): local authentication, and then HWTACACS authentication if the user name used for local authentication does not exist.
• 10 (tacacsNoauth): HWTACACS authentication, and then non-authentication if HWTACACS authentication is unavailable.
• 11 (localNoauth): local authentication, and then non-authentication if the user name used for local authentication does not exist.
• 12 (radiusTacacs): RADIUS authentication, and then HWTACACS authentication if RADIUS authentication is unavailable.
• 13 (tacacsRadius): HWTACACS authentication, and then RADIUS authentication if HWTACACS authentication is unavailable.
• 14 (localRadiusNoauth): local authentication, and then RADIUS authentication if the user name used for local authentication does not exist, and then non-authentication if RADIUS authentication is unavailable.
• 15 (localTacacsNoauth): local authentication, and then HWTACACS authentication if the user name used for local authentication does not exist, and then non-authentication if HWTACACS authentication is unavailable.
• 16 (radiusLocalNoauth): RADIUS authentication, and then local authentication if RADIUS authentication is unavailable, and then non-authentication if the user name used for local authentication does not exist.
• 17 (radiusTacacsNoauth): RADIUS authentication, and then HWTACACS authentication if RADIUS authentication is unavailable, and then non-authentication if HWTACACS authentication is unavailable.
• 18 (tacacsLocalNoauth): HWTACACS authentication, and then local authentication if HWTACACS authentication is unavailable, and then non-authentication if the user name used for local authentication does not exist.
• 19 (tacacsRadiusNoauth): HWTACACS authentication, and then RADIUS authentication if HWTACACS authentication is unavailable, and then non-authentication if RADIUS authentication is unavailable.
• 20 (localRadiusTacacs): local authentication, and then RADIUS authentication if the user name used for local authentication does not exist, and then HWTACACS authentication if RADIUS authentication is unavailable.
• 21 (radiusLocalTacacs): RADIUS authentication, and then local authentication if RADIUS authentication is unavailable, and then HWTACACS authentication if the user name used for local authentication does not exist.
• 22 (localTacacsRadius): local authentication, and then HWTACACS authentication if the user name used for local authentication does not exist, and then RADIUS authentication if HWTACACS authentication is unavailable.
• 23 (radiusTacacsLocal): RADIUS authentication, and then HWTACACS authentication if RADIUS authentication is unavailable, and then local authentication if HWTACACS authentication is unavailable.
• 24 (tacacsLocalRadius): HWTACACS authentication, and then local authentication if HWTACACS authentication is unavailable, and then RADIUS authentication if the user name used for local authentication does not exist.
• 25 (tacacsRadiusLocal): HWTACACS authentication, and then RADIUS authentication if HWTACACS authentication is unavailable, and then local authentication if RADIUS authentication is unavailable.
• 26 (localRadiusTacacsNoauth): local authentication, and then RADIUS authentication if the user name used for local authentication does not exist, and then HWTACACS authentication if RADIUS authentication is unavailable, and then non-authentication if HWTACACS authentication is unavailable.
• 27 (localTacacsRadiusNoauth): local authentication, and then HWTACACS authentication if the user name used for local authentication does not exist, and then RADIUS authentication if HWTACACS authentication is unavailable, and then no authentication if RADIUS authentication is unavailable.
• 28 (radiusLocalTacacsNoauth): RADIUS authentication, and then local authentication if RADIUS authentication is unavailable, and then HWTACACS authentication if the user name used for local authentication is unavailable, and then non-authentication if HWTACACS authentication is unavailable.
• 29 (radiusTacacsLocalNoauth): RADIUS authentication, and then HWTACACS authentication if RADIUS authentication is unavailable, and then local authentication if HWTACACS authentication is unavailable, and then no authentication if the user name used for local authentication does not exist.
• 30 (tacacsLocalRadiusNoauth): HWTACACS authentication, and then local authentication if HWTACACS authentication is unavailable, and then RADIUS authentication if the user name used for local authentication is unavailable, and then no authentication if RADIUS authentication is unavailable.
• 31 (tacacsRadiusLocalNoauth): HWTACACS authentication, and then RADIUS authentication if HWTACACS authentication is unavailable, and then local authentication if RADIUS authentication is unavailable, and then no authentication if the user name used for local authentication does not exist.
• 33 (localcaseRadius): local authentication, and then RADIUS remote authentication if the user name used for local authentication does not exist.
• 34 (localcaseTacacs): local authentication, and then HWTACACS authentication if the user name for local authentication does not exist.
• 35 (localcaseNoauth): local authentication, and then no authentication if the user name used for local authentication does not exist.
• 36 (radiuslocalcase): RADIUS remote authentication, and then local authentication if RADIUS remote authentication fails.
• 37 (tacacslocalcase): HWTACACS remote authentication, and then local authentication if HWTACACS remote authentication fails.
• 38 (localcaseRadiusNoauth): local authentication, and then RADIUS remote authentication if the user name used for local authentication does not exist, and then no authentication if RADIUS remote authentication fails.
• 39 (localcaseTacacsNoauth): local authentication, and then HWTACACS remote authentication if the user name used for local authentication does not exist, and then no authentication if HWTACACS remote authentication fails.
• 40 (localcaseRadiusTacacs): local authentication, and then RADIUS remote authentication if the user name used for local authentication does not exist, and HWTACACS authentication if RADIUS remote authentication fails.
• 41 (localcaseTacacsRadius): local authentication, and then HWTACACS authentication if the user name used for local authentication does not exist, and then RADIUS remote authentication if HWTACACS authentication fails.
• 42 (radiuslocalcaseNoauth): RADIUS remote authentication, and then local authentication if RADIUS remote authentication fails, and then no authentication if the user name used for local authentication does not exist.
• 43 (radiuslocalcaseTacacs): RADIUS remote authentication, and then local authentication if RADIUS remote authentication fails, and then HWTACACS authentication if the user name used for local authentication does not exist.
• 44 (radiusTacacslocalcase): RADIUS remote authentication, and then HWTACACS authentication if RADIUS remote authentication fails, and then local authentication if HWTACACS authentication fails.
• 45 (tacacslocalcaseNoauth): HWTACACS authentication, and then local authentication if HWTACACS authentication fails, and then no authentication if the user name used for local authentication does not exist.
• 46 (tacacslocalcaseRadius): HWTACACS authentication, and then local authentication if HWTACACS authentication fails, and then RADIUS remote authentication if the user name used for local authentication does not exist.
• 47 (tacacsRadiuslocalcase): HWTACACS authentication, and then local authentication if HWTACACS authentication fails, and then RADIUS remote authentication if the user name used for local authentication does not exist.
• 48 (localcaseTacacsRadiusNoauth): local authentication, and then HWTACACS authentication if the user name used for local authentication does not exist, and then RADIUS remote authentication if HWTACACS authentication fails, and then no authentication if RADIUS remote authentication fails.
• 49 (localcaseRadiusTacacsNoauth): local authentication, and then RADIUS remote authentication if the user name used for local authentication does not exist, and then HWTACACS authentication if RADIUS remote authentication fails, and then no authentication if HWTACACS authentication fails.
• 50 (radiuslocalcaseTacacsNoauth): RADIUS remote authentication, and then local authentication if RADIUS remote authentication fails, and then HWTACACS authentication if the user name used for local authentication does not exist, and then no authentication if HWTACACS authentication fails.
• 51 (radiusTacacslocalcaseNoauth): RADIUS remote authentication, and then HWTACACS authentication if RADIUS remote authentication fails, and then local authentication if HWTACACS authentication fails, and then no authentication if the user name used for local authentication does not exist.
• 52 (tacacslocalcaseRadiusNoauth): HWTACACS authentication, and then local authentication if HWTACACS authentication fails, and then RADIUS remote authentication if the user name used for local authentication does not exist, and then no authentication if RADIUS remote authentication fails.
• 53 (tacacsRadiuslocalcaseNoauth): HWTACACS authentication, and then RADIUS remote authentication if HWTACACS authentication fails, and then local authentication if RADIUS remote authentication fails, and then no authentication if the user name used for local authentication does not exist.
• 54 (localcase): local authentication.

current

1.3.6.1.4.1.2011.5.2.1.1.1.3

hwAuthenRowStatus

INTEGER{active(1),notInService(2),notReady(3),createAndGo(4),createAndWait(5),destroy(6)}

read-create

This object indicates the row status.

current

1.3.6.1.4.1.2011.5.2.1.1.1.6

hwAuthenMethodNew

DisplayString (SIZE (1..16))

read-write

This object indicates the authentication mode.

For example, if the authentication mode is RADIUS+HWTACACS+Local, the value of the object is 4520000000000000.

current

1.3.6.1.4.1.2011.5.2.1.1.1.7

hwAuthenTypeAdminChap

Unsigned32 (0..4294967295)

read-write

If multiple values are specified, all the access modes specified by the values are supported.

current

1.3.6.1.4.1.2011.5.2.1.1.1.8

hwServerNoRespAcct

INTEGER {true(1), false(2)}

read-write

current

1.3.6.1.4.1.2011.5.2.1.2.1.1

hwAcctSchemeName

DisplayString (SIZE (1..32))

read-only

This object indicates the name of an accounting scheme.

current

1.3.6.1.4.1.2011.5.2.1.2.1.2

hwAccMethod

INTEGER{noacct(2),radius(3),hwtacacs(5),haca(6)}

read-create

This object indicates the accounting method:

• 2 (noacct): no accounting
• 3 (radius): remote RADIUS accounting
• 5 (hwtacacs): remote TACACS accounting
• 6(haca): remote HACA accounting

current

1.3.6.1.4.1.2011.5.2.1.2.1.3

hwAcctStartFail

INTEGER {none(1),offline(2)}

read-create

This object indicates the policy for accounting-start failures:

• 1 none: indicates that users are kept online.
• 2 (offline): indicates that users are forced offline.

current

1.3.6.1.4.1.2011.5.2.1.2.1.4

hwAcctOnlineFail

INTEGER {none(1),offline(2)}

read-create

This object indicates the policy for other abnormalities after a user gets online:

• 1 none: indicates that users are kept online.
• 2 (offline): indicates that users are forced offline.

current

1.3.6.1.4.1.2011.5.2.1.2.1.5

hwAccRealTimeInter

Integer32

read-create

This object indicates the real-time accounting interval. The value is an integer ranging from 0 to 65535, in seconds. The default value is 0, indicating that real-time accounting is not performed.

current

1.3.6.1.4.1.2011.5.2.1.2.1.6

hwAcctRowStatus

INTEGER{active(1),notInService(2),notReady(3),createAndGo(4),createAndWait(5),destroy(6)}

read-create

This object indicates the row status, which can be added or deleted.

current

1.3.6.1.4.1.2011.5.2.1.19.1.1

hwIfRealtimeAcct

INTEGER{true(1),false(2)}

read-write

This object indicates whether real-time accounting is required. The values and meanings are as follows:

• 1: performing real-time accounting
• 2: no real-time accounting

current

1.3.6.1.4.1.2011.5.2.1.19.1.2

hwRealtimeFailMaxnum

Integer(32)

read-write

This object indicates the maximum number of real-time accounting failures. The value ranges from 1 to 255 The default value is 3.

current

1.3.6.1.4.1.2011.5.2.1.52.1.1

hwAAAOfflineIndex

Integer32

read-only

Indicates the sequence in which a user who goes offline.

current

1.3.6.1.4.1.2011.5.2.1.52.1.2

hwOfflineRecordUserName

DisplayString (SIZE(1..253))

read-only

This object indicates the name of the offline user. The value is a string of 1 to 253 characters.

current

1.3.6.1.4.1.2011.5.2.1.52.1.3

hwOfflineRecordDomainName

OCTET STRING (SIZE (1..64))

read-only

This object indicates a domain name. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.52.1.4

hwOfflineRecordUserMAC

OCTET STRING (SIZE (6))

read-only

This object indicates the MAC address of the offline user.

current

1.3.6.1.4.1.2011.5.2.1.52.1.5

hwOfflineRecordAccessType

OCTET STRING (SIZE (1..64))

read-only

This object indicates the access type of the offline user. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.52.1.6

hwOfflineRecordInterface

DisplayString (SIZE(1..63))

read-only

This object indicates the interface on which the user goes offline. The value is a string of 1 to 63 characters.

current

1.3.6.1.4.1.2011.5.2.1.52.1.7

hwOfflineRecordAccessPeVlan

Integer32

read-only

This object indicates information about the outer VLAN of the offline user.

current

1.3.6.1.4.1.2011.5.2.1.52.1.8

hwOfflineRecordAccessCeVlan

Integer32

read-only

This object indicates information about the inner VLAN of the offline user

current

1.3.6.1.4.1.2011.5.2.1.52.1.9

hwOfflineRecordIPAddress

IpAddress

read-only

This object indicates the IP address of the offline user.

current

1.3.6.1.4.1.2011.5.2.1.52.1.10

hwOfflineRecordUserID

Integer32

read-only

This object indicates the ID of the offline user.

current

1.3.6.1.4.1.2011.5.2.1.52.1.11

hwOfflineRecordUserLoginTime

OCTET STRING (SIZE (8 | 11))

read-only

This object indicates the time when the user goes online.

current

1.3.6.1.4.1.2011.5.2.1.52.1.12

hwOfflineRecordUserLogoutTime

OCTET STRING (SIZE (8 | 11))

read-only

This object indicates the time when the user goes offline.

current

1.3.6.1.4.1.2011.5.2.1.52.1.13

hwOfflineRecordOfflineReason

DisplayString (SIZE(1..80))

read-only

This object indicates the reason why the user goes offline.

current

1.3.6.1.4.1.2011.5.2.1.13.1.7

hwDomainNameParseDirection

INTEGER{lefttoright(0),righttoleft(1)}

read-write

This object indicates the parsing direction of a domain name. A domain name can be parsed from the left to right or from the right to left.

• 0: A domain name is parsed from the left to right.
• 1: A domain name is parsed from the right to left.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.8

hwDomainNameLocation

INTEGER{beforedelimiter(0),afterdelimiter(1)}

read-write

This object indicates the location of a domain name. A domain name can be placed behind or before the domain name delimiter.

• 0: The domain name is placed before the domain name delimiter.
• 1: The domain name is placed behind the domain name delimiter.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.35

hwDomainNameDelimiter

DisplayString (SIZE (1..1))

read-write

This object indicates a domain name delimiter. The value can be one of the following: \ / : < > | @ ' %

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.36

hwDomainNameSecurityDelimiter

DisplayString (SIZE (1..1))

read-write

This object indicates a delimiter between the domain name and security code. The value can be one of the following: \ / : < > | @ ' %

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.37

hwGlobalAuthEventAuthFailResponseFail

INTEGER {enable(1), disable(2)}

read-write

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.38

hwGlobalAuthEventAuthFailVlan

Integer32 (0..4094)

read-write

This object indicates that a user failing in authentication is added to the corresponding VLAN.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.39

hwGlobalAuthEventAuthenServerDownResponseFail

INTEGER {enable(1), disable(2)}

read-write

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.40

hwGlobalAuthEventAuthenServerDownVlan

Integer32 (0..4094)

read-write

This object indicates that the device adds a user to the corresponding VLAN if the authentication server does not respond.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.41

hwGlobalAuthEventClientNoResponseVlan

Integer32 (0..4094)

read-write

This object indicates that the device adds a user to the corresponding VLAN if the client does not respond.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.42

hwGlobalAuthEventPreAuthVlan

Integer32 (0..4094)

read-write

This object indicates that the device adds a user to the corresponding VLAN before the client is authenticated.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.43

hwGlobalAuthEventAuthFailUserGroup

OCTET STRING (SIZE (0..64))

read-write

This object indicates that a user failing in authentication is added to the corresponding user group.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.44

hwGlobalAuthEventAuthenServerDownUserGroup

OCTET STRING (SIZE (0..64))

read-write

This object indicates that the device adds a user to the corresponding user group if the authentication server does not respond.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.45

hwGlobalAuthEventClientNoResponseUserGroup

OCTET STRING (SIZE (0..64))

read-write

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.46

hwGlobalAuthEventPreAuthUserGroup

OCTET STRING (SIZE (0..64))

read-write

This object indicates that the device adds a user to the corresponding user group before the client is authenticated.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.47

hwAuthorModifyMode

INTEGER {overlay(0), modify(1)}

read-write

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.48

hwLocalRetryInterval

Integer32 (5..65535)

read-write

This object indicates the authentication retry interval of a local account.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.49

hwLocalRetryTime

Integer32 (3..65535)

read-write

This object indicates the maximum number of consecutive incorrect attempts of a local user.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.50

hwLocalBlockTime

Integer32 (5..65535)

read-write

This object indicates the locking time of a local account.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.54

hwBlockDisable

INTEGER {localuser(0), remoteuser(1), localremoteuser(2)}

read-write

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.55

hwTotalAuthReqNumPortal

INTEGER (0..4294967295)

read-write

This object indicates the number of Portal authentication users.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.56

hwTotalAuthReqNumMac

INTEGER (0..4294967295)

read-write

This object indicates the number of MAC address authentication users.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.57

hwTotalAuthReqNumDot1x

INTEGER (0..4294967295)

read-write

This object indicates the number of 802.1X authentication users.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.58

hwChgPswVertifyFlag

INTEGER {enable(1), disable(2)}

read-write

This object indicates whether the function of verifying the original password when local administrators change their own passwords is enabled.

• 1: enable (1): This function is enabled.
• 2: disable (2): This function is disabled.

By default, this function is enabled.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.59

hwLamPswComplexityCheckMethod

INTEGER {standard(0), threeofkinds(1), nocheck(2)}

read-write

This object indicates whether password complexity check is enabled for local accounts.

• 0: standard(0), indicating that the password must contain at least two of the following: uppercase letters, lowercase letters, digits, and special characters.
• 1: threeofkinds(1), indicating that the password must contain at least three of the following: uppercase letters, lowercase letters, digits, and special characters.
• 2: nocheck(2), indicating that password complexity check is not performed.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.60

hwRemoteAccessRetryInterval

Integer32 (5..65535)

read-write

This object indicates the authentication retry interval after access users fail remote authentication.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.61

hwRemoteAccessRetryTime

Integer32 (3..65535)

read-write

This object indicates the maximum number of consecutive remote authentication failures for access users.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.62

hwRemoteAccessBlockTime

Integer32 (5..65535)

read-write

This object indicates the account locking period of access users.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.63

hwRemoteAdminRetryInterval

Integer32 (5..65535)

read-write

This object indicates the authentication retry interval after administrators fail remote authentication.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.64

hwRemoteAdminRetryTime

Integer32 (3..65535)

read-write

This object indicates the maximum number of consecutive remote authentication failures for administrators.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.13.1.65

hwRemoteAdminBlockTime

Integer32 (5..65535)

read-write

This object indicates the account locking period of administrators.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.1.14.1.32

hwTotalWlsOnlineNum

INTEGER (0..4294967295)

read-only

This object indicates the total number of online wireless users.

current

1.3.6.1.4.1.2011.5.2.1.14.1.33

hwTotalWrdOnlineNum

INTEGER (0..4294967295)

read-only

This object indicates the total number of online wired users.

current

1.3.6.1.4.1.2011.5.2.1.4.1.1

hwDomainName

OCTET STRING (SIZE (1..64))

read-only

This object indicates the domain name. The value is a string of 1 to 64 characters. No asterisk (*), question mark (?) and quotation mark (") are contained. The character string is case-insensitive.

current

1.3.6.1.4.1.2011.5.2.1.4.1.2

hwDomainAuthenSchemeName

DisplayString (SIZE (1..32))

read-create

This object indicates the name of the authentication scheme used by the domain. The value is a string of 1 to 32 characters. The default authentication scheme used by a domain is default.

current

1.3.6.1.4.1.2011.5.2.1.4.1.3

hwDomainAcctSchemeName

DisplayString (SIZE (1..32))

read-create

This object indicates the name of the accounting scheme used by the domain. The value is a string of 1 to 32 characters. The default accounting scheme used by a domain is default.

current

1.3.6.1.4.1.2011.5.2.1.4.1.4

hwDomainRadiusGroupName

DisplayString (SIZE (0..32))

read-create

This object indicates the name of the RADIUS server group used by the domain. The value is a string of 1 to 32 characters. The RADIUS server group must already exist.

current

1.3.6.1.4.1.2011.5.2.1.4.1.11

hwDomainRowStatus

INTEGER{active(1),notInService(2),notReady(3),createAndGo(4),createAndWait(5),destroy(6)}

read-create

This object indicates the row status, which can be created or deleted.

current

1.3.6.1.4.1.2011.5.2.1.4.1.13

hwDomainServiceSchemeName

DisplayString (SIZE (1..32))

read-create

This object indicates the name of the service scheme used by the domain. The value is a string of 1 to 32 characters. The service scheme must already exist.

current

1.3.6.1.4.1.2011.5.2.1.4.1.16

hwDomainForcePushUrl

DisplayString (SIZE (1..200))

read-create

This object indicates the forcibly pushed URL in the domain.

current

1.3.6.1.4.1.2011.5.2.1.4.1.17

hwDomainForcePushUrlTemplate

DisplayString (SIZE (1..31))

read-create

This object indicates the name of the forcibly pushed URL template in the domain.

current

1.3.6.1.4.1.2011.5.2.1.4.1.18

hwStateBlockFirstTimeRangeName

DisplayString (SIZE (1..32))

read-create

This object indicates the first blocking time segment in the domain.

current

1.3.6.1.4.1.2011.5.2.1.4.1.19

hwStateBlockSecondTimeRangeName

DisplayString (SIZE (1..32))

read-create

This object indicates the second blocking time segment in the domain.

current

1.3.6.1.4.1.2011.5.2.1.4.1.20

hwStateBlockThirdTimeRangeName

DisplayString (SIZE (1..32))

read-create

This object indicates the third blocking time segment in the domain.

current

1.3.6.1.4.1.2011.5.2.1.4.1.21

hwStateBlockForthTimeRangeName

DisplayString (SIZE (1..32))

read-create

This object indicates the fourth blocking time segment in the domain.

current

1.3.6.1.4.1.2011.5.2.1.4.1.23

hwDomainAcctCopyRdsServerName

DisplayString (SIZE (1..32))

read-create

This object indicates the name of the RADIUS server template for level-2 accounting in the domain.

current

1.3.6.1.4.1.2011.5.2.1.5.1.2

hwIfDomainActive

INTEGER{true(1),false(2)}

read-write

This object indicates the status of a domain. The values are as follows:

• 1: active (default)
• 2: blocked

current

1.3.6.1.4.1.2011.5.2.1.5.1.26

hwTacGroupName

OCTET STRING (SIZE (1..64))

read-create

This object indicates the name of the TACACS server group used by the domain.

current

1.3.6.1.4.1.2011.5.2.1.5.1.29

hwDomainAuthorSchemeName

OCTET STRING (SIZE (1..64))

read-create

This object indicates the authorization template bound to the domain.

current

1.3.6.1.4.1.2011.5.2.1.8.1.1

hwAuthorSchemeName

OCTET STRING (SIZE (1..64))

read-only

This object indicates the name of an authorization scheme.

current

1.3.6.1.4.1.2011.5.2.1.8.1.2

hwAuthorMethod

Integer

read-create

This object indicates the authorization method. The value is an integer. The values are as follows:

• 1: none(1): direct authorization
• 2: local(2): local authorization (the default value)
• 3: hwtacacs(3): HWTACACS authorization
• 4: if-authenticated(4): if-authenticated authorization. If the user passes authentication and the authentication mode is not none, the user is authorized; otherwise, the user cannot be authorized.
• 5: hwtacacs-none(5): HWTACACS authorization, and then direct authorization if HWTACACS authorization fails.
• 6: hwtacacs-local(6): HWTACACS authorization, and then local authorization if HWTACACS authorization fails.
• 7: hwtacacs-ifauthenticated(7): HWTACACS authorization, and then if-authenticated authorization if HWTACACS authorization fails.
• 8: localnone(8): local authorization, and then direct authorization if the user name used for local authorization does not exist.
• 9: localhwtacacs(9): local authorization, and then HWTACACS authorization if the user name used for local authorization does not exist.
• 10: localifauthenticated(10): local authorization, and then if-authenticated authorization if the user name used for local authorization does not exist.
• 11: ifauthenticatednone(11): if-authenticated authorization, and then direct authorization if if-authenticated authorization fails.
• 12: ifauthenticatedlocal(12): if-authenticated authorization, and then local authorization if if-authenticated authorization fails.
• 13: ifauthenticatedhwtacacs(13): if-authenticated authorization, and then HWTACACS authorization if if-authenticated authorization fails.
• 14: localhwtacacsnone(14): local authorization, and then HWTACACS authorization if the user name used for local authorization does not exist, and then direct authorization if HWTACACS authorization fails.
• 15: localifauthenticatednone(15): local authorization, and then if-authenticated authorization if the user name used for local authorization does not exist, and then direct authorization if if-authenticated authorization fails.
• 16: hwtacacslocalnone(16): HWTACACS authorization, and then local authorization if HWTACACS authorization fails, and then direct authorization if the user name used for local authorization does not exist.
• 17: hwtacacsifauthenticatednone(17): HWTACACS authorization, and then if-authenticated authorization if HWTACACS authorization fails, and then direct authorization if if-authenticated authorization fails.
• 18: ifauthenticatedlocalnone(18): if-authenticated authorization, and then local authorization if if-authenticated authorization fails, and then direct authorization if the user name used for local authorization does not exist.
• 19: ifauthenticatedhwtacacsnone(19): if-authenticated authorization, and then HWTACACS authorization if if-authenticated authorization fails, and then direct authorization if HWTACACS authorization fails.
• 20: localhwtacacsifauthenticated(20): local authorization, and then HWTACACS authorization if the user name used for local authorization does not exist, and then if-authenticated authorization if HWTACACS authorization fails.
• 21: localifauthenticatedhwtacacs(21): local authorization, and then if-authenticated authorization if the user name used for local authorization does not exist, and then HWTACACS authorization if if-authenticated authorization fails.
• 22: hwtacaslocalifauthenticated(22): HWTACACS authorization, and then local authorization if HWTACACS authorization fails, and then if-authenticated authorization if the user name used for local authorization does not exist.
• 23: hwtacacsifauthenticatedlocal(23): HWTACACS authorization, and then if-authenticated authorization if HWTACACS authorization fails, and then local authorization if if-authenticated authorization fails.
• 24: ifauthenticatedlocalhwtacacs(24): if-authenticated authorization, and then local authorization if if-authenticated authorization fails, and then HWTACACS authorization if the user name used for local authorization does not exist.
• 25: ifauthenticatedhwtacacslocal(25): if-authenticated authorization, and then HWTACACS authorization if if-authenticated authorization fails, and then local authorization if HWTACACS authorization fails.
• 26: localhwtacacsifauthenticatednone(26): local authorization, and then HWTACACS authorization if the user name used for local authorization does not exist, and then if-authenticated authorization if HWTACACS authorization fails, and then direct authorization if if-authenticated authorization fails.
• 27: localifauthenticatedhwtacacsnone(27): local authorization, and then if-authenticated authorization if the user name used for local authorization does not exist, and then HWTACACS authorization if if-authenticated authorization fails, and then direct authorization if HWTACACS authorization fails.
• 28: hwtacaslocalifauthenticatednone(28): HWTACACS authorization, and then local authorization if HWTACACS authorization fails, and then if-authenticated authorization if the user name used for local authorization does not exist, and then direct authorization if if-authenticated authorization fails.
• 29: hwtacacsifauthenticatedlocalnone(29): HWTACACS authorization, and then if-authenticated authorization if HWTACACS authorization fails, and then local authorization if if-authenticated authorization fails, and then direct authorization if the user name used for local authorization does not exist.
• 30: ifauthenticatedlocalhwtacacsnone(30): if-authenticated authorization, and then local authorization if if-authenticated authorization fails, and then HWTACACS authorization if the user name used for local authorization does not exist, and then direct authorization if HWTACACS authorization fails.
• 31: ifauthenticatedhwtacacslocalnone(31): if-authenticated authorization, and then HWTACACS authorization if if-authenticated authorization fails, and then local authorization if HWTACACS authorization fails, and then direct authorization if the user name used for local authorization does not exist.
• 32: localcase(32): local authorization.
• 33: hwtacacsLocalcase(33): HWTACACS authorization, and then local authorization if HWTACACS authorization fails.
• 34: localcasenone(34): local authorization, and then direct authorization if the user name used for local authorization does not exist.
• 35: localcasehwtacacs(35): local authorization, and then HWTACACS authorization if the user name used for local authorization does not exist.
• 36: localcaseifauthenticated(36): local authorization, and then if-authenticated authorization if the user name used for local authorization does not exist.
• 37: ifauthenticatedLocalcase(37): if-authenticated authorization, and then local authorization if if-authenticated authorization fails.
• 38: localcasehwtacacsnone(38): local authorization, and then HWTACACS authorization if the user name used for local authorization does not exist, and then direct authorization if HWTACACS authorization fails.
• 39: localcaseifauthenticatednone(39): local authorization, and then if-authenticated authorization if the user name used for local authorization does not exist, and then direct authorization if if-authenticated authorization fails.
• 40: hwtacacsLocalcasenone(40): HWTACACS authorization, and then local authorization if HWTACACS authorization fails, and then direct authorization if the user name used for local authorization does not exist.
• 41: ifauthenticatedLocalcasenone(41): if-authenticated authorization, and then local authorization if if-authenticated authorization fails, and then direct authorization if the user name used for local authorization does not exist.
• 42: localcasehwtacacsifauthenticated(42): local authorization, and then HWTACACS authorization if the user name used for local authorization does not exist, and then if-authenticated authorization if HWTACACS authorization fails.
• 43: localcaseifauthenticatedhwtacacs(43): local authorization, and then if-authenticated authorization if the user name used for local authorization does not exist, and then HWTACACS authorization if if-authenticated authorization fails.
• 44: hwtacacsLocalcaseifauthenticated(44): HWTACACS authorization, and then local authorization if HWTACACS authorization fails, and then if-authenticated authorization if the user name used for local authorization does not exist.
• 45: hwtacacsifauthenticatedLocalcase(45): HWTACACS authorization, and then if-authenticated authorization if HWTACACS authorization fails, and then local authorization if if-authenticated authorization fails.
• 46: ifauthenticatedLocalcasehwtacacs(46): if-authenticated authorization, and then local authorization if if-authenticated authorization fails, and then HWTACACS authorization if the user name used for local authorization does not exist.
• 47: ifauthenticatedhwtacacsLocalcase(47): if-authenticated authorization, and then HWTACACS authorization if if-authenticated authorization fails, and then local authorization if HWTACACS authorization fails.
• 48: localcasehwtacacsifauthenticatednone(48): local authorization, and then HWTACACS authorization if the user name used for local authorization does not exist, and then if-authenticated authorization if HWTACACS authorization fails, and then direct authorization if if-authenticated authorization fails.
• 49: localcaseifauthenticatedhwtacacsnone(49): local authorization, and then if-authenticated authorization if the user name used for local authorization does not exist, and then HWTACACS authorization if if-authenticated authorization fails, and then direct authorization if HWTACACS authorization fails.
• 50: hwtacacsLocalcaseifauthenticatednone(50): HWTACACS authorization, and then local authorization if HWTACACS authorization fails, and then if-authenticated authorization if the user name used for local authorization does not exist, and then direct authorization if if-authenticated authorization fails.
• 51: hwtacacsifauthenticatedLocalcasenone(51): HWTACACS authorization, and then if-authenticated authorization if HWTACACS authorization fails, and then local authorization if if-authenticated authorization fails, and then direct authorization if the user name used for local authorization does not exist.
• 52: ifauthenticatedLocalcasehwtacacsnone(52): if-authenticated authorization, and then local authorization if if-authenticated authorization fails, and then HWTACACS authorization if the user name used for local authorization does not exist, and then direct authorization if HWTACACS authorization fails.
• 53: ifauthenticatedhwtacacsLocalcasenone(53): if-authenticated authorization, and then HWTACACS authorization if if-authenticated authorization fails, and then local authorization if HWTACACS authorization fails, and then direct authorization if the user name used for local authorization does not exist.

current

1.3.6.1.4.1.2011.5.2.1.8.1.3

hwAuthorRowStatus

INTEGER{active(1),notInService(2),notReady(3),createAndGo(4),createAndWait(5),destroy(6)}

read-create

This object indicates the row status, which can be added or deleted.

current

1.3.6.1.4.1.2011.5.2.1.8.1.4

hwAuthorMethodNew

OCTET STRING (SIZE (1..64))

read-write

This object indicates the authorization mode.

For example, if the authorization mode is HWTACACS+Local, the value of the object is 5200000000000000.

current

1.3.6.1.4.1.2011.5.2.1.10.1.1

hwLocalUserName

OCTET STRING (SIZE (1..64))

read-only

This object indicates the name of a local user. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.10.1.2

hwLocalUserPassword

OCTET STRING

read-create

This object indicates the password of a local user.

Only the Get operation is supported, but Set operation is not supported. The return value of Get operation is ******.

1.3.6.1.4.1.2011.5.2.1.10.1.3

hwLocalUserAccessType

INTEGER (0..4294967295)

read-create

This object indicates the access type of a local user. The values and meanings are as follows:

This object indicates the access type allowed by a local user. The values and meanings are as follows:

• 0x00000040: The user type is Telnet. The user is usually a network administrator.
• 0x00000080: The user type is terminal.
• 0x00000200: The user type is SSH.
• 0x00000001: The user type is PPP.
• 0x00000002: The user type is WEB.
• 0x00000100: The user type is FTP.
• 0x00000400: The user type is X25-PAD.
• 0x00000008: The user type is IP session.
• 0x00000020: The user type is 802.1X.
• 0x00000800: The user type is HTTP, which is usually used for web system login.
• 0x00002000: The user type is API.

current

1.3.6.1.4.1.2011.5.2.1.10.1.4

hwLocalUserPriority

Integer32

read-create

This object indicates the priority of a local user. The value is an integer ranges from 0 to 16. The value 16 indicates that the user priority is deleted.

current

1.3.6.1.4.1.2011.5.2.1.10.1.5

hwftpDirction

OCTET STRING (SIZE (1..64))

read-create

This object indicates the FTP directory. The value is a string of 1 to 64 characters. This object is valid only FTP users.

current

1.3.6.1.4.1.2011.5.2.1.10.1.12

hwLocalUserRowStatus

INTEGER{active(1),notInService(2),notReady(3),createAndGo(4),createAndWait(5),destroy(6)}

read-create

This object indicates the row status. A local user can be created and deleted.

current

1.3.6.1.4.1.2011.5.2.1.10.1.15

HwLocalUserAccessLimitNum

Integer32

read-create

This object indicates the maximum number of access users.

current

1.3.6.1.4.1.2011.5.2.1.10.1.19

hwLocalUserPasswordSetTime

OCTET STRING

read-only

This object indicates when the password of a local user is created.

current

1.3.6.1.4.1.2011.5.2.1.10.1.20

hwLocalUserPasswordExpireTime

OCTET STRING

read-only

This object indicates the validity period of a local user's password.

current

1.3.6.1.4.1.2011.5.2.1.10.1.21

hwLocalUserPasswordIsExpired

INTEGER

read-only

current

1.3.6.1.4.1.2011.5.2.1.10.1.22

hwLocalUserPasswordIsOrginal

INTEGER

read-only

current

1.3.6.1.4.1.2011.5.2.1.10.1.23

hwhttpdirectory

OCTET STRING (SIZE (1..64))

read-create

This object indicates the directory that HTTP users can access.

current

1.3.6.1.4.1.2011.5.2.1.11.1.2

hwLocalUserState

INTEGER

read-write

This object indicates the status of a local user.

current

1.3.6.1.4.1.2011.5.2.1.11.1.7

hwLocalUserUserGroup

OCTET STRING (SIZE (1..64))

read-write

This object indicates information about the user group to which the local user belongs. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.11.1.8

hwLocalUserDeviceType

OCTET STRING (SIZE (1..64))

read-write

This object indicates the type of the local user's device. The value is a string of 1 to 256 characters.

current

1.3.6.1.4.1.2011.5.2.1.11.1.9

hwLocalUserExpireDate

OCTET STRING (SIZE (1..64))

read-write

Indicates the expiry date of a local account.

The value is in YYYY/MM/DD format. YYYY specifies the year, MM specifies the month, and DD specifies the day. The value ranges from 2000/1/1 to 2099/12/31.

current

1.3.6.1.4.1.2011.5.2.1.11.1.10

hwLocalUserIdleTimeoutSecond

INTEGER (0..4294967295)

read-write

Indicates the idle timeout interval of a local account.

current

1.3.6.1.4.1.2011.5.2.1.11.1.11

hwLocalUserTimeRange

OCTET STRING (SIZE (1..64))

read-write

Indicates the period at which access of the local account is allowed.

current

1.3.6.1.4.1.2011.5.2.1.11.1.12

hwLocalUserIsExpired

INTEGER

read-only

Indicates the local account is expired.

current

1.3.6.1.4.1.2011.5.2.1.11.1.15

hwLocalUserBlockTimestamp

DisplayString

read-only

Remaining time of locked local users. (Local users are locked because the entered password is incorrect consecutively.)

current

1.3.6.1.4.1.2011.5.2.1.30.1.1

hwRecordSchemeName

OCTET STRING (SIZE (1..64))

read-only

This object specifies the name of the recording scheme.

current

1.3.6.1.4.1.2011.5.2.1.30.1.2

hwRecordTacGroupName

OCTET STRING (SIZE (1..64))

read-create

This object indicates the name of the HWTACACS group referenced in the recording scheme.

current

1.3.6.1.4.1.2011.5.2.1.30.1.3

hwRecordRowStatus

INTEGER{active(1),notInService(2),notReady(3),createAndGo(4),createAndWait(5),destroy(6)}

read-create

This object indicates the row status.

current

1.3.6.1.4.1.2011.5.2.1.38.1.1

hwServiceSchemeName

OCTET STRING (SIZE (1..64))

read-only

This object indicates the name of a service scheme.

current

1.3.6.1.4.1.2011.5.2.1.38.1.13

hwServiceSchemeIdleCutTime

Integer32

read-write

This object specifies the period in which an idle user can stay online.

current

1.3.6.1.4.1.2011.5.2.1.38.1.14

hwServiceSchemeIdleCutFlow

INTEGER (0..4294967295)

read-write

This object specifies the traffic threshold for idle-cut function.

current

1.3.6.1.4.1.2011.5.2.1.38.1.15

hwServiceSchemeDnsFirst

OCTET STRING (SIZE (4))

read-write

This object indicates the IP address of the primary DNS server in a service scheme.

current

1.3.6.1.4.1.2011.5.2.1.38.1.16

hwServiceSchemeDnsSecond

OCTET STRING (SIZE (4))

read-write

This object indicates the IP address of the secondary DNS server in a service scheme.

current

1.3.6.1.4.1.2011.5.2.1.38.1.17

hwSrvSchemeAdminUserPriority

Integer32

read-write

This object indicates the privilege level of the administrator. The value ranges from -1 to 15. The value -1 is invalid.

current

1.3.6.1.4.1.2011.5.2.1.38.1.18

hwSrvSchemeIpPoolOneName

OCTET STRING (SIZE (1..64))

read-write

This object indicates the name of the first IP address pool bound to a service scheme. The value is a string of 0 to 255 characters. The specified IP address pool must exist on the device.

current

1.3.6.1.4.1.2011.5.2.1.38.1.19

hwSrvSchemeIpPoolTwoName

OCTET STRING (SIZE (1..64))

read-write

This object indicates the name of the second IP address pool bound to a service scheme. The value is a string of 0 to 255 characters. The specified IP address pool must exist on the device.

current

1.3.6.1.4.1.2011.5.2.1.38.1.20

hwSrvSchemeIpPoolThreeName

OCTET STRING (SIZE (1..64))

read-write

This object indicates the name of the third IP address pool bound to a service scheme. The value is a string of 0 to 255 characters. The specified IP address pool must exist on the device.

current

1.3.6.1.4.1.2011.5.2.1.38.1.51

hwServiceSchemeRowStatus

INTEGER{active(1),notInService(2),notReady(3),createAndGo(4),createAndWait(5),destroy(6)}

read-create

This object indicates the status of a service scheme, which can be added and deleted.

current

1.3.6.1.4.1.2011.5.2.1.38.1.52

hwServiceSchemeIdleCutType

INTEGER

read-write

current

1.3.6.1.4.1.2011.5.2.1.38.1.53

hwServiceSchemeIdleCutFlowValue

INTEGER (0..4294967295)

read-write

This object indicates the traffic volume threshold for idle-cut function. When the traffic volume of a user is below this threshold, the device considers that the user is in idle state.

current

1.3.6.1.4.1.2011.5.2.1.38.1.54

hwLocalAuthorize

OCTET STRING (SIZE (1..64))

read-write

This object indicates the user authorization information to be delivered to a control device.

current

1.3.6.1.4.1.2011.5.2.1.38.1.55

hwRemoteAuthorize

OCTET STRING (SIZE (1..64))

read-write

This object indicates the user authorization information to be delivered to an access device.

current

1.3.6.1.4.1.2011.5.2.1.38.1.56

hwServiceSchemeRedirectACL

OCTET STRING (SIZE (1..64))

read-write

This object indicates the IPv4 ACL used for redirection in a service scheme.

current

1.3.6.1.4.1.2011.5.2.1.38.1.57

hwServiceSchemePriority

Integer32

read-write

This object indicates the user priority configured in the service scheme.

current

1.3.6.1.4.1.2011.5.2.1.38.1.58

hwServiceSchemeRedirectIPv6ACL

OCTET STRING (SIZE (1..64))

read-write

This object indicates the IPv6 ACL used for redirection in a service scheme.

current

1.3.6.1.4.1.2011.5.2.1.51.1.1

hwUserGroupIndex

Integer32

read-only

This object indicates the user group index. The value ranges from 1 to 128.

current

1.3.6.1.4.1.2011.5.2.1.51.1.2

hwUserGroupName

OCTET STRING (SIZE (1..64))

read-create

This object indicates the user group name. The value ranges from 1 to 64.

current

1.3.6.1.4.1.2011.5.2.1.51.1.3

hwAclId

OCTET STRING (SIZE (1..64))

read-create

This object indicates the ID of an ACL configured in a user group. A maximum of eight ACLs can be configured. Two ACLs are separated by a space and each ACL must exist on the device. When this table takes effect, ACLs in the original user group are deleted.

current

1.3.6.1.4.1.2011.5.2.1.51.1.7

hwUserGroupRowStatus

Integer32

read-create

This object indicates the row status of a user group. The row status can be created and deleted.

current

1.3.6.1.4.1.2011.5.2.1.51.1.8

hwUserVlan

Integer32

read-create

This object indicates the VLAN to which the user group belongs to. The value ranges from 1 to 4094.

current

1.3.6.1.4.1.2011.5.2.1.51.1.9

hw8021pRemark

Integer32

read-create

This object indicates the priority for processing Ethernet Layer 2 packets. The value ranges from 0 to 7.

current

1.3.6.1.4.1.2011.5.2.1.51.1.10

hwDscpRemark

Integer32

read-create

This object indicates the priority for processing IP packets. The value ranges from 0 to 63.

current

1.3.6.1.4.1.2011.5.2.1.51.1.13

hwUserGroupCarCir

INTEGER (0..4294967295)

read-write

This object indicates the CIR of the user group. The value is 0 or ranges from 64 to 4294967295. The default value is 0. 0 indicates that the CIR is not configured for the user group.

current

1.3.6.1.4.1.2011.5.2.1.51.1.14

hwUserGroupCarPir

INTEGER (0..4294967295)

read-write

This object indicates the PIR of the user group. The value is 0 or ranges from 64 to 4294967295. The default value is 0. 0 indicates that the PIR is not configured for the user group.

current

1.3.6.1.4.1.2011.5.2.1.51.1.15

hwUserGroupCarCbs

INTEGER (0..4294967295)

read-write

This object indicates the CBS of the user group. The value is 0 or ranges from 10000 to 4294967295. The default value is 0. 0 indicates that the CBS is not configured for the user group.

current

1.3.6.1.4.1.2011.5.2.1.51.1.16

hwUserGroupCarPbs

INTEGER (0..4294967295)

read-write

This object indicates the PBS of the user group. The value is 0 or ranges from 10000 to 4294967295. The default value is 0. 0 indicates that the PBS is not configured for the user group.

current

1.3.6.1.4.1.2011.5.2.1.51.1.17

hwUserGroupEnable

INTEGER

read-write

current

1.3.6.1.4.1.2011.5.2.1.51.1.18

hwUserGroupCarInBoundCir

INTEGER (0..4294967295)

read-write

This object indicates the CIR value of incoming packets in the user group. The value is 0 or ranges from 64 to 4294967295. The default value is 0. 0 indicates that the CIR is not configured for the user group.

current

1.3.6.1.4.1.2011.5.2.1.51.1.19

hwUserGroupCarInBoundPir

INTEGER (0..4294967295)

read-write

This object indicates the PIR value of incoming packets in the user group. The value is 0 or ranges from 64 to 4294967295. The default value is 0. 0 indicates that the PIR is not configured for the user group.

current

1.3.6.1.4.1.2011.5.2.1.51.1.20

hwUserGroupCarInBoundCbs

INTEGER (0..4294967295)

read-write

This object indicates the CBS value of incoming packets in the user group. The value is 0 or ranges from 10000 to 4294967295. The default value is 0. 0 indicates that the CBS is not configured for the user group.

current

1.3.6.1.4.1.2011.5.2.1.51.1.21

hwUserGroupCarInBoundPbs

INTEGER (0..4294967295)

read-write

This object indicates the PBS value of incoming packets in the user group. The value is 0 or ranges from 10000 to 4294967295. The default value is 0. 0 indicates that the PBS is not configured for the user group.

current

1.3.6.1.4.1.2011.5.2.1.51.1.22

hwUserGroupUserVlanPool

OCTET STRING

read-create

This object indicates the VLAN pool bound to the user group.

current

1.3.6.1.4.1.2011.5.2.1.15.1.1

hwAccessIndex

Integer32

read-only

This object indicates the CIB index.

current

1.3.6.1.4.1.2011.5.2.1.15.1.3

hwAccessUserName

OCTET STRING (SIZE (1..64))

read-only

This object indicates the access user name. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.15.1.8

hwAccessSlotNo

Integer32

read-only

This object indicates the number of the slot where the user connected to the device. The value of this object is meaningless for management users.

current

1.3.6.1.4.1.2011.5.2.1.15.1.11

hwAccessVLANID

Integer32

read-only

This object indicates the VLAN that access users belong to. The value is an integer that ranges from 1 to 4094. The value 0 indicates no VLAN ID exists.

current

1.3.6.1.4.1.2011.5.2.1.15.1.13

hwAccessAuthenMethod

INTEGER

read-only

current

1.3.6.1.4.1.2011.5.2.1.15.1.15

hwAccessIPAddress

OCTET STRING (SIZE (4))

read-only

This object indicates the IP address of an access user.

current

1.3.6.1.4.1.2011.5.2.1.15.1.17

hwAccessMACAddress

OCTET STRING (SIZE (6))

read-only

This object indicates the MAC address of an access user.

current

1.3.6.1.4.1.2011.5.2.1.15.1.25

hwAccessStartTime

OCTET STRING (SIZE (8 | 11))

read-only

This object indicates the user access time. For example, 2012-12-13,22:8:39.0,+0:0.

current

1.3.6.1.4.1.2011.5.2.1.15.1.36

hwAccessUpFlow64

INTEGER (0..18446744073709551615)

read-only

This object indicates data traffic (number of bytes) from users to the device.

current

1.3.6.1.4.1.2011.5.2.1.15.1.37

hwAccessDnFlow64

INTEGER (0..18446744073709551615)

read-only

This object indicates data traffic (number of bytes) from the device to users.

current

1.3.6.1.4.1.2011.5.2.1.15.1.38

hwAccessUpPacket64

INTEGER (0..18446744073709551615)

read-only

This object indicates data traffic (number of packets) from users to the device.

current

1.3.6.1.4.1.2011.5.2.1.15.1.39

hwAccessDnPacket64

INTEGER (0..18446744073709551615)

read-only

This object indicates data traffic (number of packets) from the device to users.

current

1.3.6.1.4.1.2011.5.2.1.15.1.45

hwAccessCARUpCIR

INTEGER (0..4294967295)

read-only

This object indicates the CIR value of incoming packets.

current

1.3.6.1.4.1.2011.5.2.1.15.1.46

hwAccessCARUpPIR

INTEGER (0..4294967295)

read-only

This object indicates the PIR value of incoming packets.

current

1.3.6.1.4.1.2011.5.2.1.15.1.47

hwAccessCARUpCBS

INTEGER (0..4294967295)

read-only

This object indicates the CBS value of incoming packets.

current

1.3.6.1.4.1.2011.5.2.1.15.1.48

hwAccessCARUpPBS

INTEGER (0..4294967295)

read-only

This object indicates the PBS value of incoming packets.

current

1.3.6.1.4.1.2011.5.2.1.15.1.49

hwAccessCARDnCIR

INTEGER (0..4294967295)

read-only

This object indicates the CIR value of outbound packets.

current

1.3.6.1.4.1.2011.5.2.1.15.1.50

hwAccessCARDnPIR

INTEGER (0..4294967295)

read-only

This object indicates the PIR value of outbound packets.

current

1.3.6.1.4.1.2011.5.2.1.15.1.51

hwAccessCARDnCBS

INTEGER (0..4294967295)

read-only

This object indicates the CBS value of outbound packets.

current

1.3.6.1.4.1.2011.5.2.1.15.1.52

hwAccessCARDnPBS

INTEGER (0..4294967295)

read-only

This object indicates the PBS value of outbound packets.

current

1.3.6.1.4.1.2011.5.2.1.15.1.57

hwAccessInterface

OCTET STRING (SIZE (1..64))

read-only

This object indicates the access interface. The value is a string of 1 to 63 characters.

current

1.3.6.1.4.1.2011.5.2.1.15.1.74

hwAccessDeviceName

OCTET STRING

read-only

This object indicates the AP name for a wireless user or indicates the name of the device to which an access user connects in a policy association scenario.

current

1.3.6.1.4.1.2011.5.2.1.15.1.75

hwAccessDeviceMACAddress

OCTET STRING (SIZE (6))

read-only

This object displays an invalid MAC address that is all 0s for a wireless user or displays the MAC address of the device to which an access user connects in a policy association scenario.

current

1.3.6.1.4.1.2011.5.2.1.15.1.76

hwAccessDevicePortName

OCTET STRING

read-only

This object indicates the port name of the device to which an access user connects in a policy association scenario.

current

1.3.6.1.4.1.2011.5.2.1.15.1.77

hwAccessAPID

INTEGER (0..4294967295)

read-only

This object displays the AP ID for a wireless user or 0x0FFFF for a wired user.

current

1.3.6.1.4.1.2011.5.2.1.15.1.78

hwAccessQinQVLANID

Integer32

read-only

This object indicates the outer VLAN ID of QinQ packets. The value is an integer that ranges from 1 to 4094. The value 0 indicates no VLAN ID.

current

1.3.6.1.4.1.2011.5.2.1.15.1.79

hwAccessOption82CircuitID

OCTET STRING

read-only

This object indicates the circuit ID of Option 82.

current

1.3.6.1.4.1.2011.5.2.1.15.1.80

hwAccessOption82RemoteID

OCTET STRING

read-only

This object indicates the remote ID of Option 82.

current

1.3.6.1.4.1.2011.5.2.1.15.1.81

hwAccessSessionTimeout

Integer32

read-only

This object indicates the session timeout interval.

current

1.3.6.1.4.1.2011.5.2.1.15.1.82

hwAccessISPVLAN

Integer32

read-only

This object indicates the ISP VLAN of access users.

current

1.3.6.1.4.1.2011.5.2.1.15.1.83

hwAccessISPInterface

Integer32

read-only

This object indicates the ISP interface of access users.

current

1.3.6.1.4.1.2011.5.2.1.16.1.14

hwAccessCurAuthenPlace

INTEGER

read-only

This object indicates the authentication mode. The value can be none(0), local(1), radius(2), or tacacs(3).

current

1.3.6.1.4.1.2011.5.2.1.16.1.16

hwAccessAuthtype

INTEGER

read-only

This object indicates the authentication type. The value can be none(0), ppp(1), dot1x(2), web(3), wlan(6), or admin(7).

current

1.3.6.1.4.1.2011.5.2.1.16.1.17

hwAccessType

INTEGER

read-only

This object indicates the access type. The value can be telnet(1), 2:terminal(2), 3:ssh(3), 4:ftp(4), 5:x25pad(5), 6:ppp(6), 7:pppoe(7), 8:pppoeovlan(8), 9:pppoa(9), 10:pppoeoa(10), 11:pppolns(11), 12:ordinaryvlan(12), 13:eap(13), 14:pnp(14), 15:ip(15), 16:staticvlan(16), 17:layer2leasedline(17), 18:layer2leasedlineuser(18), 19:layer3leasedline(19), 20:pppoeleasedline(20), 21:nmsleasedline(21), 22:proxyleasedline(22), 23:relayleasedline(23), 24:e1pos(24), 25:lactunnel(25), 26:lnstunnel(26), 27:mip(27), 28:deviceuser(28), 29:pppoeor(29), 30:pppoeovlanor(30), 31:ordinaryvlanor(31), 32:http(32), 33:web(33), 34:wlan(34), 35:mac(35), or 36:vm(36).

current

1.3.6.1.4.1.2011.5.2.1.16.1.18

hwAccessOnlineTime

INTEGER (0..4294967295)

read-only

This object indicates the online duration, in seconds.

current

1.3.6.1.4.1.2011.5.2.1.16.1.19

hwAccessDomain

OCTET STRING (SIZE (1..64))

read-write

This object indicates the domain that an access user belongs to. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.16.1.20

hwAccessGateway

OCTET STRING (SIZE (4))

read-only

This object indicates the gateway IP address.

current

1.3.6.1.4.1.2011.5.2.1.16.1.21

hwAccessSSID

OCTET STRING (SIZE (1..64))

read-write

This object indicates the SSID of an access user. The value is a string of 1 to 32 characters.

current

1.3.6.1.4.1.2011.5.2.1.16.1.22

hwAccessAPMAC

OCTET STRING (SIZE (6))

read-only

This object indicates the MAC address of an AP.

current

1.3.6.1.4.1.2011.5.2.1.16.1.23

hwAccessCurAccountingPlace

INTEGER

read-only

This object indicates the accounting mode. The value can be none(1), radius(2), or tacacs(3).

current

1.3.6.1.4.1.2011.5.2.1.16.1.24

hwAccessCurAuthorPlace

INTEGER

read-only

This object indicates the authorization mode. The value can be none(1), local(2), ifauthen(3), or tacacs(4).

current

1.3.6.1.4.1.2011.5.2.1.16.1.25

hwAccessUserGroup

OCTET STRING (SIZE (1..64))

read-write

This object indicates the name of a user group. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.16.1.28

hwAccessAuthorizetype

INTEGER

read-only

This object indicates the authorization status of an access user.

• 0: The user is being authorized.
• 1: The user is pre-connected.
• 2: The client does not respond.
• 3: Authorization fails.
• 4: The Portal authentication server is Down.
• 5: The AAA server is Down.
• 6: Authentication succeeds.
• 7: Open authentication

current

1.3.6.1.4.1.2011.5.2.1.16.1.30

hwAccessDeviceType

OCTET STRING (SIZE (1..64))

read-only

This object indicates the access terminal type.

current

1.3.6.1.4.1.2011.5.2.1.16.1.30

hwAccessDeviceType

OCTET STRING (SIZE (1..64))

read-only

This object indicates the access terminal type.

current

1.3.6.1.4.1.2011.5.2.1.28.1

hwCutStartUserID

Integer32

read-write

This object indicates the user ID.

current

1.3.6.1.4.1.2011.5.2.1.28.3

hwCutIPaddress

OCTET STRING (SIZE (4))

read-write

This object indicates the IP address of a user who is to be disconnected.

current

1.3.6.1.4.1.2011.5.2.1.28.4

hwCutMacAddres

OCTET STRING (SIZE (6))

read-write

This object indicates the MAC address of a user who is to be disconnected. If the MAC address is XX:XX:XX:XX:XX:XX, enter it in the format # 0xXX 0xXX 0xXX 0xXX 0xXX 0xXX.

current

1.3.6.1.4.1.2011.5.2.1.28.7

hwCutDomain

OCTET STRING (SIZE (1..64))

read-write

This object indicates the domain that a user who is to be disconnected belongs to. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.28.14

hwCutAccessInterface

OCTET STRING (SIZE (1..64))

read-write

This object indicates the access interface of a user who is to be disconnected. The value is a string of 1 to 63 characters.

current

1.3.6.1.4.1.2011.5.2.1.28.15

hwCutUserSSID

Octet String

read-write

This object indicates the SSID of a user who is to be disconnected. The value is a string of 1 to 32 characters.

current

1.3.6.1.4.1.2011.5.2.1.28.16

hwCutAccessSlot

Integer32

read-write

This object indicates the access slot of a user who is to be disconnected. The value is an integer.

current

1.3.6.1.4.1.2011.5.2.1.28.17

hwCutUserGroup

OCTET STRING (SIZE (1..64))

read-write

This object indicates the user group that a user who is to be disconnected belongs to. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.55.1.1

hwAuthEventPortIndex

INTEGER (0..4294967295)

read-only

This object specifies the user interface index.

current

1.3.6.1.4.1.2011.5.2.1.55.1.2

hwAuthEventAuthFailResponseFail

OCTET STRING (SIZE (1..64))

read-write

current

1.3.6.1.4.1.2011.5.2.1.55.1.3

hwAuthEventAuthFailVlan

OCTET STRING (SIZE (1..64))

read-write

This object indicates that a user failing in authentication is added to the corresponding VLAN.

current

1.3.6.1.4.1.2011.5.2.1.55.1.4

hwAuthEventAuthenServerDownResponseFail

OCTET STRING (SIZE (1..64))

read-write

current

1.3.6.1.4.1.2011.5.2.1.55.1.5

hwAuthEventAuthenServerDownVlan

Integer32

read-write

This object indicates that the device adds a user to the corresponding VLAN if the authentication server does not respond.

current

1.3.6.1.4.1.2011.5.2.1.55.1.6

hwAuthEventClientNoResponseVlan

Integer32

read-write

This object indicates that the device adds a user to the corresponding VLAN if the client does not respond.

current

1.3.6.1.4.1.2011.5.2.1.55.1.7

hwAuthEventPreAuthVlan

Integer32

read-write

This object indicates that the device adds a user to the corresponding VLAN before the client is authenticated.

current

1.3.6.1.4.1.2011.5.2.1.55.1.8

hwAuthEventAuthFailUserGroup

OCTET STRING

read-write

This object indicates that a user failing in authentication is added to a user group.

current

1.3.6.1.4.1.2011.5.2.1.55.1.9

hwAuthEventAuthenServerDownUserGroup

OCTET STRING

read-write

This object indicates that the device adds a user to a user group if the authentication server does not respond.

current

1.3.6.1.4.1.2011.5.2.1.55.1.10

hwAuthEventClientNoResponseUserGroup

OCTET STRING

read-write

This object indicates that the device adds a user to a user group if the client does not respond.

current

1.3.6.1.4.1.2011.5.2.1.55.1.11

hwAuthEventPreAuthUserGroup

OCTET STRING

read-write

This object indicates that the device adds a client to a user group before the client is authenticated.

current

1.3.6.1.4.1.2011.5.2.1.57.1.1

hwAuthorCmdLevel

Integer32

read-only

This object indicates the user level of commands with command line authorization enabled.

This object is implemented as defined in the corresponding MIB file.

1.3.6.1.4.1.2011.5.2.1.57.1.2

hwAuthorCmdMode

INTEGER

read-create

This object is implemented as defined in the corresponding MIB file.

1.3.6.1.4.1.2011.5.2.1.57.1.3

hwAuthorCmdRowStatus

INTEGER{active(1),notInService(2),notReady(3),createAndGo(4),createAndWait(5),destroy(6)}

read-create

This object indicates the row status.

This object is implemented as defined in the corresponding MIB file.

1.3.6.1.4.1.2011.5.2.1.34.1.1

hwOfflineReason

Integer32

read-only

This object indicates reasons why a user goes offline.

current

1.3.6.1.4.1.2011.5.2.1.34.1.2

hwOfflineReasonStatistic

Integer32

read-only

This object indicates statistics on user offline reasons.

current

1.3.6.1.4.1.2011.5.2.1.34.1.3

hwOnlineFailReasonStatistic

Integer32

read-only

This object indicates statistics on user login failure reasons.

current

1.3.6.1.4.1.2011.5.2.1.59.1.1

hwAdminEnable

INTEGER

read-write

current

1.3.6.1.4.1.2011.5.2.1.59.1.2

hwAdminExpire

Integer32

read-write

Indicates the number of days after which the password expires.

current

1.3.6.1.4.1.2011.5.2.1.59.1.3

hwAdminPwHistoryRecordNum

Integer32

read-write

Indicates the maximum number of historical passwords recorded on the device.

current

1.3.6.1.4.1.2011.5.2.1.59.1.4

hwAdminAlertBefore

Integer32

read-write

Indicates how long the system displays a prompt before the password expires.

current

1.3.6.1.4.1.2011.5.2.1.59.1.5

hwAdminAlertOrginal

INTEGER

read-write

current

1.3.6.1.4.1.2011.5.2.1.60.1.1

hwAccEnable

INTEGER

read-write

current

1.3.6.1.4.1.2011.5.2.1.60.1.2

hwAccPwHistoryRecordNum

Integer32

read-write

Indicates the maximum number of historical passwords recorded on the device.

current

1.3.6.1.4.1.2011.5.2.1.62.1.1

userAuthenProfileName

OCTET STRING

read-only

This object indicates the name of a user authentication profile. The value is a string of 1 to 31 characters.

current

1.3.6.1.4.1.2011.5.2.1.62.1.2

userAuthenProfileDot1xAccessProfileName

OCTET STRING

read-create

This object indicates the name of the 802.1X access profile bound to the user authentication profile. The value is a string of 1 to 31 characters.

current

1.3.6.1.4.1.2011.5.2.1.62.1.3

userAuthenProfileMacAuthenAccessProfileName

OCTET STRING

read-create

This object indicates the name of the MAC access profile bound to the user authentication profile. The value is a string of 1 to 31 characters.

current

1.3.6.1.4.1.2011.5.2.1.62.1.4

userAuthenProfilePortalAccessProfileName

OCTET STRING

read-create

This object indicates the name of the Portal access profile bound to the user authentication profile. The value is a string of 1 to 31 characters.

current

1.3.6.1.4.1.2011.5.2.1.62.1.5

userAuthenProfileSingleAccess

INTEGER{true(1),false(2)}

read-create

This object indicates the single-user access mode.

current

1.3.6.1.4.1.2011.5.2.1.62.1.6

userAuthenProfilePreAuthenServiceSchemeName

OCTET STRING

read-create

This object indicates the name of the service scheme based on which the device assigns network access rights to pre-connection users. The value is a string of 1 to 32 characters.

current

1.3.6.1.4.1.2011.5.2.1.62.1.8

userAuthenProfilePreAuthenVLAN

Integer32

read-create

This object indicates the VLAN based on which the device assigns network access rights to pre-authenticated users. The value is an integer ranging from 1 to 4094.

current

1.3.6.1.4.1.2011.5.2.1.62.1.9

userAuthenProfileAuthenFailAuthorServiceSchemeName

OCTET STRING

read-create

This object indicates the name of the service scheme based on which the device assigns network access rights to users who fail to be authenticated. The value is a string of 1 to 32 characters.

current

1.3.6.1.4.1.2011.5.2.1.62.1.11

userAuthenProfileAuthenFailAuthorVLAN

Integer32

read-create

This object indicates the VLAN based on which the device assigns network access rights to users who fail to be authenticated. The value is an integer ranging from 1 to 4094.

current

1.3.6.1.4.1.2011.5.2.1.62.1.12

userAuthenProfileAuthenServerDownServiceSchemeName

OCTET STRING

read-create

This object indicates the name of the service scheme based on which the device assigns network access rights to users when the authentication server is Down. The value is a string of 1 to 32 characters.

current

1.3.6.1.4.1.2011.5.2.1.62.1.14

userAuthenProfileAuthenServerDownVLAN

Integer32

read-create

This object indicates the VLAN based on which the device assigns network access rights to users when the authentication server is Down. The value is an integer ranging from 1 to 4094.

current

1.3.6.1.4.1.2011.5.2.1.62.1.15

userAuthenProfileAuthenServerDownResponseSuccess

INTEGER{true(1),false(2)}

read-create

This object indicates that the device sends authentication failure packets to users when the authentication server is Down.

current

1.3.6.1.4.1.2011.5.2.1.62.1.16

userAuthenProfileAuthenServerUpReauthen

INTEGER{true(1),false(2)}

read-create

This object indicates that the device re-authenticates users when the authentication server changes from Down to Up.

current

1.3.6.1.4.1.2011.5.2.1.62.1.18

userAuthenProfileMACBypass

INTEGER{true(1),false(2)}

read-create

This object indicates MAC address bypass authentication.

current

1.3.6.1.4.1.2011.5.2.1.62.1.19

userAuthenProfileDot1xForceDomain

OCTET STRING

read-create

This object indicates a forcible 802.1X authentication domain. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.62.1.20

userAuthenProfileMACAuthenForceDomain

OCTET STRING

read-create

This object indicates a forcible MAC address authentication domain. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.62.1.21

userAuthenProfilePortalForceDomain

OCTET STRING

read-create

This object indicates a forcible Portal authentication domain. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.62.1.22

userAuthenProfileDot1xDefaultDomain

OCTET STRING

read-create

This object indicates a default 802.1X authentication domain. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.62.1.23

userAuthenProfileMACAuthenDefaultDomain

OCTET STRING

read-create

This object indicates a default MAC address authentication domain. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.62.1.24

userAuthenProfilePortalDefaultDomain

OCTET STRING

read-create

This object indicates a default Portal authentication domain. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.62.1.25

userAuthenProfileDefaultDomain

OCTET STRING

read-create

This object indicates a default user domain that is valid for all access authentication users. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.62.1.26

userAuthenProfileForceDomain

OCTET STRING

read-create

This object indicates a forcible user domain that is valid for all access authentication users. The value is a string of 1 to 64 characters.

current

1.3.6.1.4.1.2011.5.2.1.62.1.27

userAuthenProfileDomainNameDelimiter

OCTET STRING

read-create

This object indicates a domain name delimiter.

current

1.3.6.1.4.1.2011.5.2.1.62.1.28

userAuthenProfileDomainNameLocation

INTEGER

read-create

current

1.3.6.1.4.1.2011.5.2.1.62.1.29

userAuthenProfileDomainNameParseDirection

INTEGER

read-create

current

1.3.6.1.4.1.2011.5.2.1.62.1.30

userAuthenProfileSecurityNameDelimiter

OCTET STRING

read-create

This object indicates the security string delimiter.

current

1.3.6.1.4.1.2011.5.2.1.62.1.31

userAuthenProfilePreAuthenReAuthenTimer

Integer32

read-create

This object indicates the interval for re-authenticating pre-connection users.

The value can be 0 or any integer in the range from 30 to 7200, in seconds. The value 0 indicates that the re-authentication function is disabled for pre-connection users.

current

1.3.6.1.4.1.2011.5.2.1.62.1.32

userAuthenProfileAuthenFailReAuthenTimer

Integer32

read-create

This object indicates the interval for re-authenticating users who fail to be authenticated.

The value can be 0 or any integer in the range from 30 to 7200, in seconds. The value 0 indicates that the re-authentication function is disabled for who fail to be authenticated.

current

1.3.6.1.4.1.2011.5.2.1.62.1.33

userAuthenProfilePreAuthenAgingTime

Integer32

read-create

This object indicates the aging time for pre-connection user entries.

The value can be 0 or any integer in the range from 60 to 4294860, in seconds. The value 0 indicates that the entry is not aged.

current

1.3.6.1.4.1.2011.5.2.1.62.1.34

userAuthenProfileAuthenFailAgingTime

Integer32

read-create

This object indicates the aging time for entries of the users who fail to be authenticated.

The value can be 0 or any integer in the range from 60 to 4294860, in seconds. The value 0 indicates that the entry is not aged.

current

1.3.6.1.4.1.2011.5.2.1.62.1.35

userAuthenProfileFreeRuleName

OCTET STRING

read-create

This object indicates the name of an authentication-free rule.

Currently, the device supports only one authentication-free rule profile, that is, the built-in profile default_free_rule.

current

1.3.6.1.4.1.2011.5.2.1.62.1.43

userAuthenProfileAuthenticationMode

INTEGER

read-create

This object indicates the user access mode.

current

1.3.6.1.4.1.2011.5.2.1.62.1.44

userAuthenProfileMaxUser

Integer32

read-create

This object indicates the maximum number of access users.

current

1.3.6.1.4.1.2011.5.2.1.62.1.45

userAuthenProfileArpDetect

INTEGER{true(1),false(2)}

read-create

This object indicates that the device handshakes with pre-connection users and authorized users.

current

1.3.6.1.4.1.2011.5.2.1.62.1.46

userAuthenProfileArpDetectTimer

Integer32

read-create

This object indicates the interval at which the device handshakes with pre-connection users and authorized users.

The value is an integer in the range from 5 to 7200, in seconds.

current

1.3.6.1.4.1.2011.5.2.1.62.1.47

userAuthenProfileRowStatus

INTEGER{active(1),notInService(2),notReady(3),createAndGo(4),createAndWait(5),destroy(6)}

read-create

This object indicates the row status.

current

1.3.6.1.4.1.2011.5.2.1.62.1.48

userAuthenProfilePermitDomain

OCTET STRING

read-create

This object indicates the domain that allows users to access.

current

1.3.6.1.4.1.2011.5.2.1.62.1.49

userAuthenProfileAuthenticationMaxUser

Integer32

read-create

This object indicates the maximum number of authenticated users allowed in a VAP profile.

current

1.3.6.1.4.1.2011.5.2.1.62.1.50

userAuthenProfileAuthenFailAuthorResponseSuccess

INTEGER{true(1),false(2)}

read-create

This object indicates that the device sends authentication failure packets to users when the authentication fails.

current

1.3.6.1.4.1.2011.5.2.1.62.1.51

userAuthenProfileIpAddrInAcctStart

INTEGER{true(1),false(2)}

read-create

This object indicates that Accounting-Start packets carry users' IP addresses.

current

1.3.6.1.4.1.2011.5.2.1.62.1.58

userAuthenProfileAccountingOfUpdateIP

INTEGER{true(1),false(2)}

read-create

This object indicates whether a device sends an accounting packet immediately when the IP address of a user is updated. The value can be:

• 1: The device sends an accounting packet immediately when the IP address of a user is updated.
• 2: The device does not send an accounting packet immediately. Instead, it sends an accounting packet when the real-time accounting timer times out.

The default value is 1.

current

1.3.6.1.4.1.2011.5.2.1.62.1.59

userAuthenProfileAccountingOfUpdateInfo

INTEGER{true(1),false(2)}

read-create

This object indicates whether a device sends an accounting packet immediately when terminal information of a user is updated. The value can be:

• 1: The device sends an accounting packet immediately when terminal information of a user is updated.
• 2: The device does not send an accounting packet immediately. Instead, it sends an accounting packet when the real-time accounting timer times out.

The default value is 1.

current

1.3.6.1.4.1.2011.5.2.1.62.1.64

userAuthenProfileMacFirstForce

INTEGER{true(1),false(2)}

read-create

This object indicates whether the function of performing forcible MAC address authentication before 802.1X authentication is enabled.

• TRUE
• FALSE

current

1.3.6.1.4.1.2011.5.2.1.63.1.1

userAuthenticationFreeRuleName

OCTET STRING (SIZE (1..64))

read-only

This object indicates the name of an authentication-free rule profile.

current

1.3.6.1.4.1.2011.5.2.1.63.1.2

userAuthenticationFreeRuleACLNumber

Integer32

read-create

This object indicates the ID of an IPv4 authentication-free rule.

current

1.3.6.1.4.1.2011.5.2.1.63.1.4

userAuthenticationFreeRuleRowStatus

INTEGER{active(1),notInService(2),notReady(3),createAndGo(4),createAndWait(5),destroy(6)}

read-create

This object indicates the row status.

current

1.3.6.1.4.1.2011.5.2.1.64.1.1

hwDot1xAccessProfileName

OCTET STRING (SIZE (1..64))

read-only

This object indicates the name of an 802.1X access profile.

current

1.3.6.1.4.1.2011.5.2.1.64.1.2

hwDot1xAccessProfileGuestAuthorServiceSchemeName

OCTET STRING (SIZE (1..64))

read-create

This object indicates the name of the service scheme based on which the device assigns network access rights to users when 802.1X clients do not respond.

current

1.3.6.1.4.1.2011.5.2.1.64.1.3

hwDot1xAccessProfileGuestAuthorUserGroupName

OCTET STRING (SIZE (1..64))

read-create

This object indicates the name of the UCL group based on which the device assigns network access rights to users when 802.1X clients do not respond.

current

1.3.6.1.4.1.2011.5.2.1.64.1.4

hwDot1xAccessProfileGuestAuthorVLAN

Integer32

read-create

This object indicates the VLAN based on which the device assigns network access rights to users when 802.1X clients do not respond.

current

1.3.6.1.4.1.2011.5.2.1.64.1.5

hwDot1xAccessProfileHandshakeSwitch

INTEGER{true(1),false(2)}

read-create

This object indicates whether handshake with online 802.1X users is enabled.

• 1: enabled
• 2: disabled

The default value is 2.

current

1.3.6.1.4.1.2011.5.2.1.64.1.6

hwDot1xAccessProfileHandShakePktType

INTEGER

read-create

This object indicates the type of 802.1X authentication handshake packets.

current

1.3.6.1.4.1.2011.5.2.1.64.1.7

hwDot1xAccessProfileHandshakeInterval

Integer32

read-create

This object indicates the interval at which the device handshakes with an 802.1X authentication user on a non-Eth-Trunk interface.

current

1.3.6.1.4.1.2011.5.2.1.64.1.8

hwDot1xAccessProfileIfEAPEnd

INTEGER{true(1),false(2)}

read-only

This object indicates whether EAP termination authentication is enabled.

• 1: enabled
• 2: disabled

The default value is 2.

current

1.3.6.1.4.1.2011.5.2.1.64.1.9

hwDot1xAccessProfileEAPEndMethod

INTEGER

read-create

current

1.3.6.1.4.1.2011.5.2.1.64.1.10

hwDot1xAccessProfileEAPNotifyPktEAPCode

Integer32

read-create

This object indicates the code number in EAP packets sent in response to user requests.

current

1.3.6.1.4.1.2011.5.2.1.64.1.11

hwDot1xAccessProfileEAPNotifyPktEAPType

Integer32

read-create

This object indicates the data type in EAP packets sent in response to user requests.

current

1.3.6.1.4.1.2011.5.2.1.64.1.12

hwDot1xAccessProfileReAuthenEnable

INTEGER{true(1),false(2)}

read-create

This object indicates whether re-authentication of online 802.1X users is enabled.

• 1: enabled
• 2: disabled

The default value is 2.

current

1.3.6.1.4.1.2011.5.2.1.64.1.13

hwDot1xAccessProfileReauthenticationTimeout

Integer32

read-create

This object indicates the interval for re-authenticating online 802.1X authentication users.

current

1.3.6.1.4.1.2011.5.2.1.64.1.14

hwDot1xAccessProfileClientTimeout

Integer32

read-create

This object indicates the client authentication timeout timer.

current

1.3.6.1.4.1.2011.5.2.1.64.1.15

hwDot1xAccessProfileServerTimeout

Integer32

read-create

This object indicates the server authentication timeout timer.

current

1.3.6.1.4.1.2011.5.2.1.64.1.17

hwDot1xAccessProfileMaxRetryValue

Integer32

read-create

This object indicates the maximum number of times that an authentication request packet can be sent.

current

1.3.6.1.4.1.2011.5.2.1.64.1.18

hwDot1xAccessProfileSpeedLimitAuto

INTEGER{true(1),false(2)}

read-create

This object indicates whether the function of dynamically adjusting the packet processing rate is enabled.

• 1: enabled
• 2: disabled

The default value is 2.

current

1.3.6.1.4.1.2011.5.2.1.64.1.19

hwDot1xAccessProfileTriggerPktType

INTEGER

read-create

This object indicates the packet type that can trigger 802.1X authentication.

• 0: default
• 1: arp
• 2: dhcp

The default value is 0.

current

1.3.6.1.4.1.2011.5.2.1.64.1.20

hwDot1xAccessProfileUnicastTrigger

INTEGER{true(1),false(2)}

read-create

This object indicates whether the function 802.1X authentication triggered by unicast packets is enabled.

• 1: enabled
• 2: disabled

The default value is 2.

current

1.3.6.1.4.1.2011.5.2.1.64.1.22

hwDot1xAccessProfileEthTrunkHandShakePeriod

Integer32

read-create

This object indicates the interval at which the device handshakes with an 802.1X authentication user on an Eth-Trunk.

current

1.3.6.1.4.1.2011.5.2.1.64.1.23

hwDot1xAccessProfileRowStatus

INTEGER{active(1),notInService(2),notReady(3),createAndGo(4),createAndWait(5),destroy(6)}

read-create

This object indicates the row status.

current

1.3.6.1.4.1.2011.5.2.1.64.1.24

hwDot1xAccessProfileDot1xNoResponse

INTEGER{true(1),false(2)}

read-create

This object indicates whether the function of not responding to the EAPoL-Start packets sent by clients when the AAA server is Down is enabled.

• 1: enabled
• 2: disabled

The default value is 2.

current

1.3.6.1.4.1.2011.5.2.1.65.1.1

hwMACAuthenAccessProfileName

OCTET STRING (SIZE (1..64))

read-only

This object indicates the name of a MAC access profile.

current

1.3.6.1.4.1.2011.5.2.1.65.1.2

hwMACAuthenAccessProfileReAuthenEnable

INTEGER{true(1),false(2)}

read-create

This object indicates that MAC address re-authentication is enabled.

current

1.3.6.1.4.1.2011.5.2.1.65.1.3

hwMACAuthenAccessProfileReauthenticationTimeout

Integer32

read-create

This object indicates the MAC address re-authentication interval.

current

1.3.6.1.4.1.2011.5.2.1.65.1.5

hwMACAuthenAccessProfileUserNameFixedUserName

OCTET STRING

read-create

This object indicates the fixed user name format for MAC address authentication.

current

1.3.6.1.4.1.2011.5.2.1.65.1.6

hwMACAuthenAccessProfileFixedPassword

OCTET STRING

read-create

This object indicates the fixed password for MAC address authentication.

current

1.3.6.1.4.1.2011.5.2.1.65.1.7

hwMACAuthenAccessProfileMACAddressFormat

INTEGER

read-create

This object indicates the MAC address format for MAC address authentication.

current

1.3.6.1.4.1.2011.5.2.1.65.1.8

hwMACAuthenAccessProfileMACAddressPassword

OCTET STRING

read-create

This object indicates the MAC address password for MAC address authentication.

current

1.3.6.1.4.1.2011.5.2.1.65.1.11

hwMACAuthenAccessProfileTriggerPktType

Integer32

read-create

This object indicates the packet type that can trigger MAC address authentication.

current

1.3.6.1.4.1.2011.5.2.1.65.1.12

hwMACAuthenAccessProfileTriggerDHCPOptionType

INTEGER

read-create

This object indicates that the device sends DHCP option information to the authentication server when receiving DHCP packets that trigger MAC address authentication.

current

1.3.6.1.4.1.2011.5.2.1.65.1.13

hwMACAuthenAccessProfileDHCPRelaseOffline

INTEGER{true(1),false(2)}

read-create

This object indicates that the device clears user entries when receiving DHCP release packets from MAC address authentication users.

current

1.3.6.1.4.1.2011.5.2.1.65.1.14

hwMACAuthenAccessProfileDHCPRenewReAuthen

INTEGER{true(1),false(2)}

read-create

This object indicates that the device re-authenticates MAC address authentication users when receiving DHCP lease renewal packets from the users.

current

1.3.6.1.4.1.2011.5.2.1.65.1.15

hwMACAuthenAccessProfilePermitAuthenMAC

OCTET STRING

read-create

This object indicates the MAC address allowed for MAC address authentication.

Different MAC addresses are separated by ?.

current

1.3.6.1.4.1.2011.5.2.1.65.1.16

hwMACAuthenAccessProfilePermitAuthenMACMask

OCTET STRING

read-create

This object indicates the MAC address mask allowed for MAC address authentication.

Different masks are separated by ?.

current

1.3.6.1.4.1.2011.5.2.1.65.1.17

hwMACAuthenAccessProfileRowStatus

INTEGER{active(1),notInService(2),notReady(3),createAndGo(4),createAndWait(5),destroy(6)}

read-create

This object indicates the row status.

current

read-create

This object indicates the authentication mode for MAC address authentication.

current

1.3.6.1.4.1.2011.5.2.1.66.1.1

hwPortalAccessProfileName

OCTET STRING (SIZE (1..64))

read-only

This object indicates the name of a Portal access profile.

current

1.3.6.1.4.1.2011.5.2.1.66.1.2

hwPortalAccessProfileDetectPeriod

Integer32

read-create

This object indicates the offline detection interval for Portal authentication users. The value is an integer that ranges from 0 or 30 to 7200, in seconds.

current

1.3.6.1.4.1.2011.5.2.1.66.1.3

hwPortalAccessProfilePortalServerDownServiceSchemeName

OCTET STRING

read-create

This object indicates the name of the service scheme based on which the device assigns network access rights to users when the Portal server is Down.

current

1.3.6.1.4.1.2011.5.2.1.66.1.4

hwPortalAccessProfilePortalServerDownUserGroupName

OCTET STRING

read-create

This object indicates the name of the UCL group based on which the device assigns network access rights to users when the Portal server is Down.

current

1.3.6.1.4.1.2011.5.2.1.66.1.5

hwPortalAccessProfilePortalServerUpReAuthen

INTEGER{true(1),false(2)}

read-create

This object indicates that the device sets the status of users who fail to be authenticated to pre-connection when the Portal server changes from Down to Up.

current

1.3.6.1.4.1.2011.5.2.1.66.1.8

hwPortalAccessProfileAuthenNetWork

OCTET STRING

read-create

This object indicates the source subnet for Portal authentication.

When multiple network segments exist, different network segments are divided using ?. For example, 10.1.2.0?10.1.3.0?10.1.5.0.

current

1.3.6.1.4.1.2011.5.2.1.66.1.9

hwPortalAccessProfileAuthenNetWorkMask

OCTET STRING

read-create

This object indicates the source subnet mask for Portal authentication.

current

1.3.6.1.4.1.2011.5.2.1.66.1.10

hwPortalAccessProfilePortalServerName

OCTET STRING (SIZE (1..64))

read-create

This object indicates the name of a Portal server template.

current

1.3.6.1.4.1.2011.5.2.1.66.1.11

hwPortalAccessProfilePortalAccessDirect

INTEGER

read-create

current

1.3.6.1.4.1.2011.5.2.1.66.1.14

hwPortalAccessProfileRowStatus

INTEGER{active(1),notInService(2),notReady(3),createAndGo(4),createAndWait(5),destroy(6)}

read-create

This object indicates the row status.

current

1.3.6.1.4.1.2011.5.2.1.68.1.1

userAuthenticationFreeRuleNumber

Integer32

read-only

This object indicates the ID of an authentication-free rule.

current

1.3.6.1.4.1.2011.5.2.1.68.1.2

userAuthenticationFreeRuleSourceMode

Integer32

read-only

This object indicates the source mode in an authentication-free rule.

current

1.3.6.1.4.1.2011.5.2.1.68.1.3

userAuthenticationFreeRuleSourceVlan

Integer32

read-only

This object indicates the VLAN ID of source packets in an authentication-free rule.

current

1.3.6.1.4.1.2011.5.2.1.68.1.4

userAuthenticationFreeRuleSourceInterface

OCTET STRING

read-only

This object indicates the interface of source packets in an authentication-free rule.

current

1.3.6.1.4.1.2011.5.2.1.68.1.5

userAuthenticationFreeRuleSourceIP

OCTET STRING (SIZE (4))

read-only

This object indicates the source IP address in an authentication-free rule.

current

1.3.6.1.4.1.2011.5.2.1.68.1.6

userAuthenticationFreeRuleSourceIPMask

OCTET STRING (SIZE (4))

read-only

This object indicates the source IP address mask in an authentication-free rule.

current

1.3.6.1.4.1.2011.5.2.1.68.1.7

userAuthenticationFreeRuleSourceMac

OCTET STRING (SIZE (6))

read-only

This object indicates the source MAC address in an authentication-free rule.

current

1.3.6.1.4.1.2011.5.2.1.68.1.8

userAuthenticationFreeRuleDestinationMode

Integer32

read-only

This object indicates the destination mode in an authentication-free rule.

current

1.3.6.1.4.1.2011.5.2.1.68.1.9

userAuthenticationFreeRuleDestinationIP

OCTET STRING (SIZE (4))

read-only

This object indicates the destination IP address in an authentication-free rule.

current

1.3.6.1.4.1.2011.5.2.1.68.1.10

userAuthenticationFreeRuleDestinationIPMask

OCTET STRING (SIZE (4))

read-only

This object indicates the destination IP address mask in an authentication-free rule.

current

1.3.6.1.4.1.2011.5.2.1.68.1.11

userAuthenticationFreeRuleDestinationProtocol

INTEGER

read-only

current

1.3.6.1.4.1.2011.5.2.1.68.1.12

userAuthenticationFreeRuleDestinationPort

Integer32

read-only

This object indicates the destination port number in an authentication-free rule.

current

1.3.6.1.4.1.2011.5.2.1.68.1.14

userAuthenticationFreeRuleExtRowStatus

INTEGER{active(1),notInService(2),notReady(3),createAndGo(4),createAndWait(5),destroy(6)}

read-only

This object indicates the status of an authentication-free rule expansion table.

current

1.3.6.1.4.1.2011.5.2.1.73.1

hwReAuthenMacAddress

OCTET STRING (SIZE (6))

read-write

This object indicates the MAC address of a MAC user or 802.1X user who is re-authenticated.

If the MAC address is XX:XX:XX:XX:XX:XX, enter it in the format # 0xXX 0xXX 0xXX 0xXX 0xXX 0xXX.

current

1.3.6.1.4.1.2011.5.2.1.74.1.1

hwAccessUserNumberDot1x

Integer32

read-only

This object indicates the number of 802.1X authentication users.

current

1.3.6.1.4.1.2011.5.2.1.74.1.2

hwAccessUserNumberMAC

Integer32

read-only

This object indicates the number of MAC authentication users.

current

1.3.6.1.4.1.2011.5.2.1.74.1.3

hwAccessUserNumberPortal

Integer32

read-only

This object indicates the number of Portal authentication users.

current

1.3.6.1.4.1.2011.5.2.1.74.1.4

hwAccessUserNumberPPP

Integer32

read-only

This object indicates the number of PPP authentication users.

current

1.3.6.1.4.1.2011.5.2.1.74.1.5

Integer32

read-only

This object indicates the number of pre-connection users.

current

1.3.6.1.4.1.2011.5.2.1.74.1.6

hwAccessUserNumberStatic

Integer32

read-only

This object indicates the number of static users.

current

1.3.6.1.4.1.2011.5.2.1.74.1.7

hwAccessUserNumberAdmin

Integer32

read-only

This object indicates the number of management users.

current

1.3.6.1.4.1.2011.6.139.11.1.25.1.1

hwVlanPoolName

OCTET STRING(1–31)

not-accessible

This object indicates the VLAN pool name. It is the index of the table.

This object is implemented as defined in the corresponding MIB file.

1.3.6.1.4.1.2011.6.139.11.1.25.1.2

hwVlanPoolVlanlist

OCTET STRING(1–640)

read-write

VLAN list in a VLAN pool.

This object is implemented as defined in the corresponding MIB file.

1.3.6.1.4.1.2011.6.139.11.1.25.1.3

hwVlanPoolAssignMethod

INTEGER{hash(1),even(2)}

read-write

VLAN assignment algorithm in a VLAN pool. The default value is 1.

This object is implemented as defined in the corresponding MIB file.

1.3.6.1.4.1.2011.6.139.11.1.25.1.4

hwVlanPoolRowStatus

RowStatus{active(1),notInService(2),notReady(3),createAndGo(4),createAndWait(5),destroy(6)}

read-write

This object indicates the row status. createAndGo(4) and destroy(6) are mainly used.

This object is implemented as defined in the corresponding MIB file.

1.3.6.1.4.1.2011.5.2.2.2.0.53

hwMacMovedQuietMaxUserAlarm

The percentage of MAC address migration users in quiet state against the maximum number of users reaches the upper alarm threshold.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.2.2.0.54

hwMacMovedQuietUserClearAlarm

The percentage of MAC address migration users in quiet state against the maximum number of users decreases to be equal to or smaller than the lower alarm threshold.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.2.2.0.99

hwIpStaticUserMixedInsertAlarm

An alarm is generated when the Eth-Trunk of IP static users contains member ports on different types of cards.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.2.2.0.106

hwNacUserClearAlarm

The percentage of successfully authenticated NAC users reached or falls below the lower alarm threshold.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.2.2.0.107

hwNacMaxUserAlarm

The percentage of successfully authenticated NAC users reaches the upper alarm threshold.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.2.2.0.112

hwChangePasswordAlarm

• hwOperatorName
• hwAAAUserName

This object indicates that the password of a local user is changed.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.2.2.0.116

hwPPPMaxUserAlarm

• hwPPPMaxUserSlot
• hwPPPMaxUserNum
• hwPPPMaxPercentage

The number of PPP users reaches the upper alarm threshold.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.2.2.0.117

hwPPPMaxUserClearAlarm

• hwPPPMaxUserSlot
• hwPPPMaxUserNum
• hwPPPMaxPercentage

The number of PPP users falls below the lower alarm threshold.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.2.2.0.118

hwMacQuietMaxUserAlarm

• hwMacQuietUserSpec
• hwMacUserPercentage
• hwLowerMacUserPercentage
• hwUpperMacUserPercentage

The number of MAC address migration users in quiet state reaches the upper alarm threshold.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.2.2.0.119

hwMacQuietUserClearAlarm

• hwMacQuietUserSpec
• hwMacUserPercentage
• hwLowerMacUserPercentage
• hwUpperMacUserPercentage

The number of MAC address users in quiet state falls below the lower alarm threshold.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.2.2.0.120

hwQuietUserClearAlarm

• hwQuietUserType
• hwQuietUserCurrentThreshold
• hwQuietUserCurrentNum
• hwQuietUserLowerLimitThreshold
• hwQuietUserUpperLimitThreshold

The number of 802.1X or Portal authentication users in quiet state falls below the lower alarm threshold.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.2.2.0.121

hwQuietUserMaxAlarm

• hwQuietUserType
• hwQuietUserCurrentThreshold
• hwQuietUserCurrentNum
• hwQuietUserLowerLimitThreshold
• hwQuietUserUpperLimitThreshold

The number of 802.1X or Portal authentication users in quiet state reaches the upper alarm threshold.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.2.2.0.122

hwQuietPortClearAlarm

• hwQuietUserType
• hwQuietPortIfName
• hwQuietPortCurrentThreshold
• hwQuietPortUserNum
• hwQuietPortLowerLimitThreshold
• hwQuietPortUpperLimitThreshold

The number of authentication users in quiet state on an interface falls below the lower alarm threshold.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.2.2.0.123

hwQuietPortMaxAlarm

• hwQuietUserType
• hwQuietPortIfName
• hwQuietPortCurrentThreshold
• hwQuietPortUserNum
• hwQuietPortLowerLimitThreshold
• hwQuietPortUpperLimitThreshold

The number of authentication users in quiet state on an interface reaches the upper alarm threshold.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.2.2.0.124

hwMaxUclGroupIpNumAlarm

• hwGroupNum
• hwMaxUclGroupIpNumAlarmRate

The number of UCL groups reaches the upper alarm threshold.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.2.2.0.125

hwMaxUclGroupIpNumClearAlarm

• hwGroupNum
• hwMaxUclGroupIpNumAlarmRate

The number of UCL groups falls equal to or below the lower alarm threshold.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.2.2.0.126

hwIPGroupChannelUp

• hwIPGroupServiceIPAddress
• hwIPGroupServicePortName
• hwPkiDomain

IP-Group channel state is Up.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.2.2.2.0.127

hwIPGroupChannelDown

• hwIPGroupServiceIPAddress
• hwIPGroupServicePortName
• hwPkiDomain

IP-Group channel state is Down.

This object is implemented as defined in the corresponding MIB files.