HP-AUTZ-MIB Table View

The (conceptual) table listing the authorization
service types.

hpSwitchAutzServiceEntry row .1.3.6.1.4.1.11.2.14.11.5.1.32.1.1.1

An entry (conceptual row) in the hpSwitchAutzServiceTable.

Indexes

hpSwitchAutzServiceType

Column	Syntax	OID
hpSwitchAutzServiceType Signifies the authorization service type for which this entry contains configuration information.	Enumeration Enumerated Values: 1 commands 2 exec 3 network 4 restUri	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.1.1.1
hpSwitchAutzServicePrimaryMethod The primary method used for authorization. This object can be set only when the authorization service type is command. A value of local (1) indicates that authorization is performed locally. A value of ta…	Enumerationr/w Enumerated Values: 1 local 2 tacacs 3 radius 4 none 5 auto	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.1.1.2
hpSwitchAutzServiceSecondaryMethod Specifies the secondary (backup) method used for authorization.	Enumerationr/w Enumerated Values: 1 local 2 none	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.1.1.3
hpSwitchAutzServiceCommandsLevel This object specifies the command level that requires authorization. A value of all (1) indicates that authorization is required for all commands. A value of managerLevelOnly (2) indicates that the author…	Enumerationr/w Enumerated Values: 1 all 2 managerlevelonly	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.1.1.4

This table lists the local management
privilege group names.

hpSwitchLocalMgmtPrivGroupsEntry row .1.3.6.1.4.1.11.2.14.11.5.1.32.1.4.1.1

Local Management Groups entry.

Indexes

hpSwitchLocalMgmtPrivGroupIndex

Column	Syntax	OID
hpSwitchLocalMgmtPrivGroupIndex The index value which uniquely identifies a row in the group table. The values, One (1) is reserved for a predefined manager group, Two (2) is reserved for usernames that are not assigned to a group. The privileges for…	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.4.1.1.1
hpSwitchLocalMgmtPrivGroupName The name of a given Local Management server group.	OctetStringr/w Constraints: range: 1-255	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.4.1.1.2
hpSwitchLocalMgmtPrivGroupStatus The status of the local management privilege group row.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.4.1.1.3

This table lists the local management
Privilege Command Match strings.

hpSwitchLocalMgmtPrivCommandsEntry row .1.3.6.1.4.1.11.2.14.11.5.1.32.1.4.2.1

Local Management Commands entry.

Indexes

hpSwitchLocalMgmtPrivGroupIndex hpSwitchLocalMgmtPrivCmdSequenceIndex

Column	Syntax	OID
hpSwitchLocalMgmtPrivCmdSequenceIndex The index value which uniquely identifies a row in the command table. See the documentation for the number of sequences allowed.	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.4.2.1.1
hpSwitchLocalMgmtPrivCmdMatchStr The syntax of a command within a group. See the documentation for the maximum length of the command name.	OctetStringr/w Constraints: range: 0-65535	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.4.2.1.2
hpSwitchLocalMgmtPrivCmdPriv The privilege associated with commands that match the command string.	Enumerationr/w Enumerated Values: 1 permit 2 deny	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.4.2.1.3
hpSwitchLocalMgmtPrivCmdSendLog Determines if a log message is generated when commands matching this command string are attempted.	Enumerationr/w Enumerated Values: 1 enable 2 disable	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.4.2.1.4
hpSwitchLocalMgmtPrivCmdStatus The status of the local management privilege command row.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.4.2.1.5

A table of configured user roles.  The maximum
number of entries is implementation dependent.

hpSwitchAutzUserRoleEntry row .1.3.6.1.4.1.11.2.14.11.5.1.32.1.5.3.1

A user role table entry.

Indexes

hpSwitchAutzUserRoleName

Column	Syntax	OID
hpSwitchAutzUserRoleName The name of this user role.	HpAutzUserRoleName Type Constraints: range: 1..63 Description: User role name type. All printable ASCII characters are allowed except '.', ' ', and '~'.	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.5.3.1.1
hpSwitchAutzUserRoleRowStatus The Row Status of this entry. To create a new entry, send an SNMP SET request with a RowStatus of 'createAndGo'. active - the entry is ready to use. notInService - not valid …	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.5.3.1.2
hpSwitchAutzUserRoleType This object defines different user role types supported. Predefined user roles cannot be modified or deleted. Downloaded user roles cannot be modified or created.	Enumeration Enumerated Values: 1 predefined 2 local 3 downloaded	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.5.3.1.3
hpSwitchAutzUserRoleCaptivePortalProfileName The name of the captive portal profile (hpicfUsrAuthCaptivePortalProfileName) associated with this role. All printable ASCII characters are allowed except '.', ' ', and '~'.	OctetStringr/w Constraints: range: 0-63	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.5.3.1.4
hpSwitchAutzUserRoleIngressUserPolicyName The name associated with hpicfGppcv2NpPolicyName of hpicfGppcv2NpSubType 'policyUser' assigned to this role.	OctetStringr/w Constraints: range: 0-64	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.5.3.1.5
hpSwitchAutzUserRoleReauthPeriod Specifies the period, in seconds, at which an authenticated client must re-authenticate. A value of 0 signifies that an authenticated client will never have to re-authenticate.	secondsInteger32r/w Constraints: range: 0-999999999	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.5.3.1.6
hpSwitchAutzUserRoleVlanId The untagged VLAN ID for this role. A value of 0 indicates unset. This column is mutually exclusive with hpSwitchAutzUserRoleVlanName.	Q-BRIDGE-MIBVlanIndexr/w	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.5.3.1.7
hpSwitchAutzUserRoleVlanName The untagged VLAN name for this role. This column is mutually exclusive with hpSwitchAutzUserRoleVlanId.	SNMP-FRAMEWORK-MIBSnmpAdminStringr/w Constraints: range: 0-32	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.5.3.1.8
hpSwitchAutzUserRoleTunneledNodeServerRedirect Enables or disables the traffic redirection to the tunnel. If the MIB object 'hpSwitchAutzUserRoleCaptivePortalProfileName' is already enabled and an attempt is made to enable this object, it will result in an error. Th…	Enumerationr/w Enumerated Values: 1 enable 2 disable	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.5.3.1.9
hpSwitchAutzUserRoleTunneledNodeServerSecondaryRole The secondary role associated with this user role. This will be applied to user traffic at tunnel-node server end. All printable ASCII characters are allowed except '.', ' ' and '~'. This object returns an error if the …	OctetStringr/w Constraints: range: 0-63	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.5.3.1.10
hpSwitchAutzUserRoleTaggedVlanIddeprecated The tagged VLAN ID for this role. A value of 0 indicates unset. This column is mutually exclusive with hpSwitchAutzUserRoleTaggedVlanName,.	Q-BRIDGE-MIBVlanIndexr/w	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.5.3.1.11
hpSwitchAutzUserRoleTaggedVlanName The tagged VLAN name for this role. This column is mutually exclusive with hpSwitchAutzUserRoleTaggedVlanId.	SNMP-FRAMEWORK-MIBSnmpAdminStringr/w Constraints: range: 0-32	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.5.3.1.12
hpSwitchAutzUserRoleTunneledNodeServerDownloadableRole This object indicates if the secondary roles is downloadable user role or not.The hpSwitchAutzUserRoleTunneledNodeServerRedirectobject should be enabled before configuring this object.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.5.3.1.13
hpSwitchAutzUserRoleLogOffPeriod Specifies the period, in seconds, at which an authenticated client must automatically log-off. A value of 0 signifies that an authenticated client will never have to automatically log-off.	secondsInteger32r/w Constraints: range: 0-0 range: 60-9999999	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.5.3.1.14
hpSwitchAutzUserRoleCachedReauthPeriod The value indicates the period in seconds, during which cached reauthentication is allowed on the port. A value of 0 signifies cached reauthentication period is not set.	secondsUnsigned32r/w Constraints: range: 0-0 range: 60-2147483647	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.5.3.1.15
hpSwitchAutzUserRoleTaggedVlanList The set of tagged VLANs associated with this user-role.	HP-ICF-TCVidListr/w Type Constraints: range: 512	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.5.3.1.16

A table of configured sub user roles attributes. The maximum
number of entries is implementation dependent.

hpSwitchAutzUserRoleSubEntry row .1.3.6.1.4.1.11.2.14.11.5.1.32.1.5.5.1

A user role sub table entry.

Indexes

hpSwitchAutzUserRoleName hpSwitchAutzUserRoleSubType

Column	Syntax	OID
hpSwitchAutzUserRoleSubType This object specifies the sub type of user-role attributes. Device or other specific type.	Enumeration Enumerated Values: 1 device	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.5.5.1.1
hpSwitchAutzUserRoleAdminEdgePort The administrative value of the Edge Port parameter. A value of true(1) indicates that the port associated with this user-role should be assumed as an edge-port, and a value of false(2) indicates that the port associa…	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.5.5.1.2
hpSwitchAutzUserRolePoePriority This object controls the priority of the port from the point of view of a power management algorithm. The priority that is set by this variable could be used by a control mechanism that prevents over current situations …	Enumerationr/w Enumerated Values: 0 default 1 critical 2 high 3 low	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.5.5.1.3
hpSwitchAutzUserRolePoeAllocBy This object indicates the power allocation method for this port. The default value is usage.	Enumerationr/w Enumerated Values: 1 usage 2 class	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.5.5.1.4
hpSwitchAutzUserRoleSubTypeRowStatus The Row Status of this entry. To create a new entry, send an SNMP SET request with a RowStatus of 'createAndGo'. active - the entry is ready to use. notInService - not valid …	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.5.5.1.5
hpSwitchAutzUserRolePortMode This object indicates if the auth method on a port will be operating on a port mode or not.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.5.5.1.7
hpSwitchAutzUserRoleClientLimitMac Specifies the maximum number of number of mac-auth clients that can be authenticated on the port where the user-role is applied.	Integer32r/w Constraints: range: 0-256	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.5.5.1.8
hpSwitchAutzUserRoleClientLimitdot1x Specifies the maximum number of 802.1x clients that can be authenticated on the port where the user-role is applied.	Integer32r/w Constraints: range: 0-32	.1.3.6.1.4.1.11.2.14.11.5.1.32.1.5.5.1.9