HP-ICF-USER-PROFILE-MIB: View SNMP OID List / Download MIB

This MIB module contains the definitions of Managed Objects for user access profiles.

A string of octets containing on bit per access profile primitive as follows: bit 0 - PVID/native/untagged ingress VLAN bit 1 - Tagged Egress VLAN bit 2 - Ingress VLAN Filter bit 3 - Priority Regeneration bit 4 - Max. Ingress Bandwidth bit 5 - Max. Egress Bandwidth bit 6 - Filter List bit 7 - Hitcount Support bit 8 - through 64 - reserved When a bit is set to one, it indicates that device supports the selected access profile primitive only on a per port ('hpicfUsrProfileUserPortNumber') basis. The consequence is that the device can only enforce the same access primitive setting for all users ('hpicfUsrProfileUserMacAddr') on a given port.

A string of octets containing one bit per access profile primitive as follows: bit 0 - PVID/native/untagged ingress VLAN bit 1 - Tagged Egress VLAN bit 2 - Ingress VLAN Filter bit 3 - Priority Regeneration bit 4 - Max. Ingress Bandwidth bit 5 - Max. Egress Bandwidth bit 6 - Filter List bit 7 - Hitcount Support bit 8 - through 64 - reserved When a bit is set to one, it indicates that device supports the selected access profile primitive on a per 'hpicfUsrProfileUserMacAddr' basis. The consequence is that the device can enforce unique per user access profile primitives for each user on a given port ('hpicfUsrProfileUserPortNumber').

A table that contains configuration objects for filter lists.

The configuration information for a user's filtering profile.

The identifier used to select a list of filter rules. A filter list entry must be created before a filter rule entry can be added.

This object indicates the status of this entry. Must NOT be active in order to modify an hpicfUsrProfileConfigFilterRuleEntry that is indexed on this entry's hpicfUsrProfileListIndex. This object must be in the notReady or notInService states in order for an hpicfUsrProfileConfigFilterRuleEntry to be added, removed, or modified. In order to be changed to an active rowStatus, at least one rule sharing the list index must have an active hpicfUsrProfileConfigFilterRuleRowStatus.

Setting this attribute to enabled(1) enables the usage of IPv6 destinations in ACEs. When set to disabled(2) any implicit IP destinations will be translated as IPv4 only. Enumeration: 'disabled': 2, 'enabled': 1.

A table that contains configuration objects for filter lists.

The configuration information for a user's filtering profile.

The identifier used to select a list of filter rules. This filter rule list index must correspond to a created but not active filter list index in order for a rule entry to be created.

A numeric value assigned to each rule within a list belong to the same hpicfUsrProfileFilterListIndex. Rules within a given list will be evaluated in ascending order.

Specifies a single filter rule using the same syntax used for the hp-nas-filter-rule RADIUS attribute.

This object indicates the status of this entry. Must NOT be active in order to modify an hpicfUsrProfileConfigFilterRuleEntry. However, if an hpicfUsrProfileConfigFilterListRowStatus is set to destroy, all HpicfUsrProfileConfigFilterRuleEntry entries sharing the common hpicfUsrProfileFilterListIndex will also be destroyed regardless of the value of hpicfUsrProfileConfigFilterRuleRowStatus.

A table that contains configuration objects for access profiles.

The configuration information for an access profile.

A unique numeric value assigned to each access profile in this table.

Specifies the port VID (PVID), also known, as native VLAN to be used with this access profile. To specify no pvid, set value to 4095, not 0.

Setting this attribute TRUE enables the usage of 'hpicfUsrProfilePvid' when this access profile is active.

A string of octets containing one bit per VLAN for VLANS with 'VlanIndex' values of 0 through 1023. The first octet corresponds to VLANs with 'VlanIndex' values of 0 through 7, the second octet to VLANs 8 through 15, etc. The most significant bit of each octet corresponds to the lowest 'VlanIndex' value in that octet. Bit 0 in the 1K map is ignored/discarded. If variable hpicfUsrProfileConfigPvidEnable is TRUE, some bit other than bit 0 in the 1K map must be set. To specify an empty tagged vlan map, vlanIndex value 4095 in the 4K map must be set. Setting a bit to '1' specifies the usage the corresponding VLAN with this access profile.

A string of octets containing one bit per VLAN for VLANS with 'VlanIndex' values of 1024 through 2047. The first octet corresponds to VLANs with 'VlanIndex' values of 1024 through 1031, the second octet to VLANs 1032 through 1039, etc. The most significant bit of each octet corresponds to the lowest 'VlanIndex' value in that octet. Setting a bit to '1' specifies the usage the corresponding VLAN with this access profile.

A string of octets containing one bit per VLAN for VLANS with 'VlanIndex' values of 2048 through 3071. The first octet corresponds to VLANs with 'VlanIndex' values of 2048 through 3071, the second octet to VLANs 2056 through 2063, etc. The most significant bit of each octet corresponds to the lowest 'VlanIndex' value in that octet. Setting a bit to '1' specifies the usage the corresponding VLAN with this access profile.

A string of octets containing one bit per VLAN for VLANS with 'VlanIndex' values of 3072 through 4095. The first octet corresponds to VLANs with 'VlanIndex' values of 3072 through 3079, the second octet to VLANs 3080 through 3087, etc. The most significant bit of each octet corresponds to the lowest 'VlanIndex' value in that octet. Setting a bit to '1' specifies the usage the corresponding VLAN with this access profile.

Setting this attribute TRUE enables the usage of 'hpicfUsrProfileTaggedVlanMapXXX' when this access profile is being enforced.

Setting this attribute TRUE causes the system to only allow ingress traffic from those VLANs on which egress traffic is permitted.

Specifies the IEEE 802 priority regeneration table for this access profile. Syntax of octet string is same as for 'User-Priority-Table' RADIUS attribute as defined in RFC4675.

Setting this attribute TRUE enables the usage of the 'hpicfUsrProfilePriorityRegenTable' when this access profile is active.

Specifies the maximum ingress bandwidth for this access profile. Bandwidth value is specified in Kbps.

Setting this attribute TRUE enables the usage of the 'hpicfUsrProfileMaxIngressBandwidth' when this access profile is active.

Specifies the maximum egress bandwidth for this access profile. Bandwidth value is specified in Kbps.

Setting this attribute TRUE enables the usage of 'hpicfUsrProfileMaxEgressBandwidth' when this access profile is active.

Selects the filter from 'hpicfUsrProfileConfigFilterTable' to associate with this access profile. The rowStatus of the filter must be in an active state.

Setting this attribute TRUE enables the usage of 'hpicfUsrProfileConfigFilterListIndex' when this access profile is active.

This object indicates the status of this entry. Must NOT be active in order to change some other column of this config entry.

A table that contains configuration objects for the access profile-to-user bindings.

The configuration information for a access profile-to-user binding.

The interface index associated with this user. On wired HP products, the interface index is the physical port. On wireless products it is the instance (whether real or virtual) of an AP.

The 48-bit IEEE media access control address of the user.

Setting this attribute to a value between 1 and 16384 selects an access profile from 'hpicfUsrProfileConfigTable' to apply to the user.

This object indicates the status of this entry. Must NOT be active in order to change some other column of this bind entry.

This object controls how a device behaves when QoS conflicts arise. A conflict can arise if a device only supports the QoS access primitive on a per-port basis, but device is being configured with profiles that have per-user unique setting. Applying these profiles to the same port will cause the conflict to arise because the device cannot enforce a per-user unique QoS setting. This object specifies two alternatives, as follows: 'non-strict' - Device does not signal errors when multiple access profiles are applied to a port. The device will apply the QoS settings specified in the last profile applied to the port. 'strict' - Device does signal an error when an attempt to apply an access profile to a port that already has an active access profile with a different QoS setting. Device will not activate the access profile in question after error is signaled. Enumeration: 'strict': 1, 'non-strict': 0.

This object controls how a device behaves when ingress BW conflicts arise. A conflict can arise if a device only supports the ingress BW access primitive on a per-port basis, but device is being configured with profiles that have per-user unique setting. Applying these profiles to the same port will cause the conflict to arise because the device cannot enforce a per-user unique ingress BW setting. This object specifies two alternatives, as follows: 'non-strict' - Device does not signal errors when multiple access profiles are applied to a port. The device will apply the ingress BW settings specified in the last profile applied to the port. 'strict' - Device does signal an error when an attempt to apply an access profile to a port that already has an active access profile with a different ingress BW setting. Device will not activate the access profile in question after error is signaled. Enumeration: 'strict': 1, 'non-strict': 0.

This object controls how a device behaves when egress BW conflicts arise. A conflict can arise if a device only supports the egress BW access primitive on a per-port basis, but device is being configured with profiles that have per-user unique setting. Applying these profiles to the same port will cause the conflict to arise because the device cannot enforce a per-user egress BW setting. This object specifies two alternatives, as follows: 'non-strict' - Device does not signal errors when multiple access profiles are applied to a port. The device will apply the egress BW settings specified in the last profile applied to the port. 'strict' - Device does signal an error when an attempt to apply an access profile to a port that already has an active access profile with a different egress BW setting. Device will not activate the access profile in question after error is signaled. Enumeration: 'strict': 1, 'non-strict': 0.

A snapshot of the module sysUpTime at the time of the last update to the access profiles in effect. A value of 0 indicates that the hpicfUsrProfileLastUpdate object is not supported by the device and a fresh copy of the hpicfUsrProfileTable will always need to be obtained by the management application.

A table that contains statistic objects for filter lists.

Statistic information for a user's filtering profile.

Specifies a single filter rule using the same syntax used for the hp-nas-filter-rule RADIUS attribute.

Specifies the number of times (hit count) the user's traffic has matched this rule.

When this attribute is TRUE it signifies the 'hpicfUsrProfileStatsFilterRuleHitCount' contains a valid value. A FALSE value signifies it does not contain a valid value.

This table describes the access profiles currently in effect.

An entry in the user access profile table.

Active port VID (PVID) for this user.

A string of octets containing one bit per VLAN for VLANS with 'VlanIndex' values of 0 through 1023. The first octet corresponds to VLANs with 'VlanIndex' values of 0 through 7, the second octet to VLANs 8 through 15, etc. The most significant bit of each octet corresponds to the lowest 'VlanIndex' value in that octet. When a bit is set to '1', it means the corresponding tagged VLAN as active for this user.

A string of octets containing one bit per VLAN for VLANS with 'VlanIndex' values of 1024 through 2047. The first octet corresponds to VLANs with 'VlanIndex' values of 1024 through 1031, the second octet to VLANs 1032 through 1039, etc. The most significant bit of each octet corresponds to the lowest 'VlanIndex' value in that octet. When a bit is set to '1', it indicates the corresponding tagged VLAN as active for this user.

A string of octets containing one bit per VLAN for VLANS with 'VlanIndex' values of 2048 through 3071. The first octet corresponds to VLANs with 'VlanIndex' values of 2048 through 2055, the second octet to VLANs 2056 through 2063, etc. The most significant bit of each octet corresponds to the lowest 'VlanIndex' value in that octet. When a bit is set to '1', it indicates the corresponding tagged VLAN as active for this user.

A string of octets containing one bit per VLAN for VLANS with 'VlanIndex' values of 3072 through 4095. The first octet corresponds to VLANs with 'VlanIndex' values of 3072 through 3079, the second octet to VLANs 3080 through 3087, etc. The most significant bit of each octet corresponds to the lowest 'VlanIndex' value in that octet. When a bit is set to '1', it indicates the corresponding tagged VLAN as active for this user.

When this attribute is TRUE causes the system is only allowing ingress traffic from those VLANs on which egress traffic is permitted.

Specifies the IEEE 802 priority regeneration table active for this access profile. Syntax of octet string is same as for 'User-Priority-Table' RADIUS attribute as defined in RFC4675.

Specifies the maximum ingress bandwidth for this access profile. Bandwidth value is specified in Kbps.

Specifies the maximum egress bandwidth for this access profile. Bandwidth value is specified in Kbps.

A value of 0 indicates that no filter rule set is active for the user. A value between 1 and 16384 selects the active filter rule set from 'hpicfUsrProfileStatsFilterTable'.

Indicates whether profile was applied via SNMP or via RADIUS. Application by SNMP has precedence over RADIUS. Where there are no attribute conflicts, profile attributes may be a combination of those applied by both SNMP and RADIUS. In such case, the variable value will still be SNMP. Enumeration: 'macauth': 4, 'dot8021x': 2, 'webauth': 3, 'snmp': 1, 'webmacauth': 5.

When this attribute is TRUE it signifies the 'hpicfUsrProfileStatsPortSpeedVSA' is a RADIUS over-ridden. A FALSE value signifies it is not RADIUS over-ridden value.

This attribute signifies at what speed the port is operating at.

A collection of objects providing device capability information for user access profiles.

A collection of objects providing configuration of user access profiles.

A collection of objects providing statistics of user access profiles.

A collection of objects providing configuration of user access profiles.

A collection of objects providing statistics of user access profiles.

The compliance statement for devices support of HP-USER-PROFILE-MIB.

The compliance statement for devices support of HP-USER-PROFILE-MIB.

The compliance statement for devices support of HP-USER-PROFILE-MIB.

The compliance statement for devices support of HP-USER-PROFILE-MIB.