Huawei devices that are not certified in Spectrum are receiving the incorrect model class, even when it is specified through Device Certification Tool

Products

• Network Observability
• Spectrum

Issue/Introduction

 HuaweiVRP router devices (specifically the Huawei AR5710 router family) with sysOID 1.3.6.1.4.1.2011.2.224.391 are consistently assigned the Firewall ModelClass in Spectrum. This occurs even if "Router" is manually configured in the DeviceCertification Tool. The ModelClass attribute also appears "locked" in the Modeling Information View.

Environment

• DX NetOps Spectrum (24.3.x / 25.4.x)
• HUAWEI AR5710 router family
• System OID: 1.3.6.1.4.1.2011.2.224.391

Cause

1. The VHM catalog incorrectly maps this sysOID to the HUAWEIVRP_SECURITY_APP_MTYPE sub-model intended for firewalls.
2. The IHHuaweiVRPSecurityApp inference handler automatically assigns and locks the FIREWALL (27) model class when this sub-model is present.

Resolution

A certification request to certify the  Huawei AR5710 family has been submitted.

 

 

Workaround: To correctly model these devices as routers, follow these steps:

1. Update Model Attributes: Use vnmsh or the OneClick Attribute Editor to modify the lock_model_class(No) and model_class ( Router) attributes to required values on existing models or delete the problematic device models 

2. Modify Configuration: Edit \$SPECROOT/SS/.vnmrc to include: auto_lock_model_class=false.

3. Restart SpectroSERVER: This ensures future discoveries use the device certification instead of the firewall stamp.

4. Rediscover Devices: Run a new discovery for the affected devices.

5. Verify: Confirm the device status using vnmsh or the OneClick UI.