IPSEC-FLOW-MONITOR-MIB
This is a MIB Module for monitoring the structure and status of IPSec-based networks. The MIB has bee designed to be adopted as an IETF standard. Henc vendor-specific features of IPSec protocol are exclude from this MIB. Acronyms The following acronyms are used in this document: IPSec: Secure IP Protocol VPN: Virtual Private Network ISAKMP: Internet Security Association and Key Exchange Protocol IKE: Internet Key Exchange Protocol SA: Security Association MM: Main Mode - the process of setting up a Phase 1 SA to secure the exchanges required to setup Phase 2 SAs QM: Quick Mode - the process of setting up Phase 2 Security Associations using a Phase 1 SA. Phase 1 Tunnel: An ISAKMP SA can be regarded as representing a flow of ISAKMP/IKE traffic. Hence an ISAKMP is referred to as a 'Phase 1 Tunnel' in this document Control Tunnel: Another term for a Phase 1 Tunnel. Phase 2 Tunnel: AN instance of a non-ISAKMP SA bundle in which all the SA share the same proxy identifiers (IDii,IDir) protect the same stream of application traffic. Such an SA bundle is termed a 'Phase 2 Tunnel'. Note that a Phase 2 tunnel may comprise different SA bundles and different number of SA bundles at different times (due to key refresh). Overview of IPsec MIB The MIB contains six major groups of objects which are used to manage the IPSec Protocol. These groups include a Levels Group, a Phase-1 Group, a Phase-2 Group, a History Group, a Failure Group and a TRAP Control Group. The following table illustrates the structure of the IPSec MIB. The Phase 1 group models objects pertaining to IKE negotiations and Phase 1 tunnels. The Phase 2 group models objects pertaining to IPSec data tunnels. The History group is to aid applications that do trending analysis. The Failure group is to enable an operator to do troubleshooting and debugging of the VPN Router. Further, counters are supported to aid detection of potential security violations. In addition to the five major MIB Groups, there are a number of Notifications. The following table illustrates the name and description of the IPSec TRAPs. For a detailed discussion, please refer to the IETF draft draft-ietf-ipsec-flow-monitoring-mib-01.txt.
Main OID:
ipSecFlowMonitorMIB.1.3.6.1.3.171
463
Objects
Active
Status
4
Dependencies
Imported Objects
Objects
463 total| Object Name |
|---|
ipSecFlowMonitorMIBThis is a MIB Module for monitoring the structure and status of IPSec-based networks. The MIB has bee designed to be adopted as an IETF standard. Henc vendor-specific features of IPSec protocol are exclude from this MIB. Acronyms The following acronyms are used in this document: IPSec: Secure IP Protocol VPN: Virtual Private Network ISAKMP: Internet Security Association and Key Exchange Protocol IKE: Internet Key Exchange Protocol SA: Security Association MM: Main Mode - the process of setting up a Phase 1 SA to secure the exchanges required to setup Phase 2 SAs QM: Quick Mode - the process of setting up Phase 2 Security Associations using a Phase 1 SA. Phase 1 Tunnel: An ISAKMP SA can be regarded as representing a flow of ISAKMP/IKE traffic. Hence an ISAKMP is referred to as a 'Phase 1 Tunnel' in this document Control Tunnel: Another term for a Phase 1 Tunnel. Phase 2 Tunnel: AN instance of a non-ISAKMP SA bundle in which all the SA share the same proxy identifiers (IDii,IDir) protect the same stream of application traffic. Such an SA bundle is termed a 'Phase 2 Tunnel'. Note that a Phase 2 tunnel may comprise different SA bundles and different number of SA bundles at different times (due to key refresh). Overview of IPsec MIB The MIB contains six major groups of objects which are used to manage the IPSec Protocol. These groups include a Levels Group, a Phase-1 Group, a Phase-2 Group, a History Group, a Failure Group and a TRAP Control Group. The following table illustrates the structure of the IPSec MIB. The Phase 1 group models objects pertaining to IKE negotiations and Phase 1 tunnels. The Phase 2 group models objects pertaining to IPSec data tunnels. The History group is to aid applications that do trending analysis. The Failure group is to enable an operator to do troubleshooting and debugging of the VPN Router. Further, counters are supported to aid detection of potential security violations. In addition to the five major MIB Groups, there are a number of Notifications. The following table illustrates the name and description of the IPSec TRAPs. For a detailed discussion, please refer to the IETF draft draft-ietf-ipsec-flow-monitoring-mib-01.txt. MODULE-IDENTITY .1.3.6.1.3.171 |
ipSecMIBObjects OBJECT IDENTIFIER .1.3.6.1.3.171.1 |
ipSecLevels OBJECT IDENTIFIER .1.3.6.1.3.171.1.1 |
ipSecMibLevelThe version of the IPsec MIB.ro Integer32 .1.3.6.1.3.171.1.1.1 |
ipSecPhaseOne OBJECT IDENTIFIER .1.3.6.1.3.171.1.2 |
ikeGroup OBJECT IDENTIFIER .1.3.6.1.3.171.1.2.1 |
ikeGlobalStats OBJECT IDENTIFIER .1.3.6.1.3.171.1.2.1.1 |
ikeGlobalActiveTunnelsThe number of currently active IPsec Phase-1 IKE Tunnels. This is equal to the number of ISAKMP SAs currently active.ro Gauge32 .1.3.6.1.3.171.1.2.1.1.1 |
ikeGlobalPreviousTunnelsThe total number of previously active IPsec Phase-1 IKE Tunnels. This is equal to the total number of ISAKMP SAs that were active since the bootup of the device but which have since expired.ro Counter32 UNITS "SAs" .1.3.6.1.3.171.1.2.1.1.2 |
ikeGlobalInOctetsThe total number of octets received by all currently and previously active IPsec Phase-1 IKE Tunnels.ro Counter32 UNITS "Octets" .1.3.6.1.3.171.1.2.1.1.3 |
ikeGlobalInPktsThe total number of packets received by all currently and previously active IPsec Phase-1 IKE Tunnels.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.2.1.1.4 |
ikeGlobalInDropPktsThe total number of packets which were dropped during receive processing by all currently and previously active IPsec Phase-1 IKE Tunnels.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.2.1.1.5 |
ikeGlobalInNotifysThe total number of notifys received by all currently and previously active IPsec Phase-1 IKE Tunnels.ro Counter32 UNITS "Notification Payloads" .1.3.6.1.3.171.1.2.1.1.6 |
ikeGlobalInP2ExchgsThe total number of IPsec Phase-2 exchanges received by all currently and previously active IPsec Phase-1 IKE Tunnels.ro Counter32 UNITS "SA Payloads" .1.3.6.1.3.171.1.2.1.1.7 |
ikeGlobalInP2ExchgInvalidsThe total number of IPsec Phase-2 exchanges which were received and found to be contain references to unrecognized security parameters. This value is accumulated across all currently and previously active IPsec ISAKMP SAs.ro Counter32 UNITS "SA Payloads" .1.3.6.1.3.171.1.2.1.1.8 |
ikeGlobalInP2ExchgRejectsThe total number of IPsec Phase-2 exchanges which were received and validated but were rejected by the local policy. This value is accumulated across all currently and previously active IPsec ISAKMP SAs.ro Counter32 UNITS "SA Payloads" .1.3.6.1.3.171.1.2.1.1.9 |
ikeGlobalInP2SaDelRequestsThe total number of IPsec Phase-2 security association delete requests received by all currently and previously active and IPsec Phase-1 IKE Tunnels.ro Counter32 UNITS "Notification Payloads" .1.3.6.1.3.171.1.2.1.1.10 |
ikeGlobalOutOctetsThe total number of octets sent by all currently and previously active and IPsec Phase-1 IKE Tunnels.ro Counter32 UNITS "Octets" .1.3.6.1.3.171.1.2.1.1.11 |
ikeGlobalOutPktsThe total number of packets sent by all currently and previously active and IPsec Phase-1 Tunnels.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.2.1.1.12 |
ikeGlobalOutDropPktsThe total number of packets which were dropped during send processing by all currently and previously active IPsec Phase-1 IKE Tunnels.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.2.1.1.13 |
ikeGlobalOutNotifysThe total number of notifys sent by all currently and previously active IPsec Phase-1 IKE Tunnels.ro Counter32 UNITS "Notification Payloads" .1.3.6.1.3.171.1.2.1.1.14 |
ikeGlobalOutP2ExchgsThe total number of IPsec Phase-2 exchanges which were sent by all currently and previously active IPsec Phase-1 IKE Tunnels.ro Counter32 UNITS "SA Payloads" .1.3.6.1.3.171.1.2.1.1.15 |
ikeGlobalOutP2ExchgInvalidsThe total number of IPsec Phase-2 exchanges which were sent and were flagged by the peer to contain references to unrecognized security parameters. This value is accumulated across all currently and previously active IPsec ISAKMP SAs.ro Counter32 UNITS "SA Payloads" .1.3.6.1.3.171.1.2.1.1.16 |
ikeGlobalOutP2ExchgRejectsThe total number of IPsec Phase-2 exchanges which were sent, validated by the peer but were rejected by the peer's policy. This value is accumulated across all currently and previously active IPsec ISAKMP SAs.ro Counter32 UNITS "SA Payloads" .1.3.6.1.3.171.1.2.1.1.17 |
ikeGlobalOutP2SaDelRequestsThe total number of IPsec Phase-2 SA delete requests sent by all currently and previously active IPsec Phase-1 IKE Tunnels.ro Counter32 UNITS "Notification Payloads" .1.3.6.1.3.171.1.2.1.1.18 |
ikeGlobalInitTunnelsThe total number of IPsec Phase-1 IKE Tunnels which were locally initiated.ro Counter32 UNITS "SAs" .1.3.6.1.3.171.1.2.1.1.19 |
ikeGlobalInitTunnelFailsThe total number of IPsec Phase-1 IKE Tunnels which were locally initiated and failed to activate.ro Counter32 UNITS "SAs" .1.3.6.1.3.171.1.2.1.1.20 |
ikeGlobalRespTunnelFailsThe total number of IPsec Phase-1 IKE Tunnels which were remotely initiated and failed to activate.ro Counter32 UNITS "SAs" .1.3.6.1.3.171.1.2.1.1.21 |
ikeGlobalSysCapFailsThe total number of system capcity failures which occurred during processing of all current and previously active IPsec Phase-1 IKE Tunnels.ro Counter32 UNITS "Failures" .1.3.6.1.3.171.1.2.1.1.22 |
ikeGlobalAuthFailsThe total number of authentications which ended in failure by all current and previous IPsec Phase-1 IKE Tunnels.ro Counter32 UNITS "Failures" .1.3.6.1.3.171.1.2.1.1.23 |
ikeGlobalDecryptFailsThe total number of decryptions which ended in failure by all current and previous IPsec Phase-1 IKE Tunnels.ro Counter32 UNITS "Failures" .1.3.6.1.3.171.1.2.1.1.24 |
ikeGlobalHashValidFailsThe total number of hash validations which ended in failure by all current and previous IPsec Phase-1 IKE Tunnels.ro Counter32 UNITS "Failures" .1.3.6.1.3.171.1.2.1.1.25 |
ikeGlobalNoSaFailsThe total number of non-existent Security Association in failures which occurred during processing of all current and previous IPsec Phase-1 IKE Tunnels.ro Counter32 UNITS "Failures" .1.3.6.1.3.171.1.2.1.1.26 |
ikeGlobalRespTunnelsThe total number of IPsec Phase-1 IKE Tunnels which were remotely initiated.ro Counter32 UNITS "SAs" .1.3.6.1.3.171.1.2.1.1.27 |
ikeGlobalInXauthFailuresThe number of times the extended authentication information supplied by an IKE peer was found to be invalid by the local entity.ro Counter32 UNITS "Failures" .1.3.6.1.3.171.1.2.1.1.28 |
ikeGlobalOutXauthFailuresThe number of times the extended authentication information supplied by the managed entity to an IKE peer was found to be invalid by the remote peer.ro Counter32 UNITS "Failures" .1.3.6.1.3.171.1.2.1.1.29 |
ikeGlobalInP1SaDelRequestsThe total number of ISAKMP security association delete requests received by all currently and previously active and ISAKMP security associations.ro Counter32 UNITS "Notification Payloads" .1.3.6.1.3.171.1.2.1.1.30 |
ikeGlobalOutP1SaDelRequestsThe total number of ISAKMP security association delete requests sent by all currently and previously active and ISAKMP security associations.ro Counter32 UNITS "Notification Payloads" .1.3.6.1.3.171.1.2.1.1.31 |
ikeGlobalInConfigsThe total number of Mode Configuration settings received (either CFG-REPLY or CFG-SET payloads) by this entity.ro Counter32 UNITS "Mode Configuration Setting Payloads" .1.3.6.1.3.171.1.2.1.1.32 |
ikeGlobalOutConfigsThe total number of Mode Configuration settings dispatched (either CFG-REPLY or CFG-SET payloads) by this entity.ro Counter32 UNITS "Mode Configuration Setting Payloads" .1.3.6.1.3.171.1.2.1.1.33 |
ikeGlobalInConfigsRejectsThe total number of Mode Configuration settings which were received (either CFG-REPLY or CFG-SET payloads) by this entity and which were rejected by the local entity.ro Counter32 UNITS "Mode Configuration Setting Acknowledgements" .1.3.6.1.3.171.1.2.1.1.34 |
ikeGlobalOutConfigsRejectsThe total number of Mode Configuration settings which were dispatched (either CFG-REPLY or CFG-SET payloads) by this entity and which were rejected by the client peer.ro Counter32 UNITS "Mode Configuration Setting Acknowledgements" .1.3.6.1.3.171.1.2.1.1.35 |
ikeGlobalHcPreviousTunnelsA high capacity count of the total number of previously active IPsec Phase-1 IKE Tunnels. This i equal to the total number of ISAKMP SAs that were active since the bootup of the device but which have since expired.ro Counter64 UNITS "Integral units" .1.3.6.1.3.171.1.2.1.1.36 |
ikeGlobalPreviousTunnelsWrapsThe number of times the quantit `ikeGlobalPreviousTunnels' (previously active IPse Phase-1 IKE tunnels) has wrapped.ro Counter32 UNITS "Integral units" .1.3.6.1.3.171.1.2.1.1.37 |
ikeTunnelTableThe IPsec Phase-1 Internet Key Exchange Tunnel Table. There is one entry in this table for each active IPsec Phase-1 IKE Tunnel. SEQUENCE OF IkeTunnelEntry .1.3.6.1.3.171.1.2.1.2 |
ikeTunnelEntryEach entry contains the attributes associated with an active IPsec Phase-1 IKE Tunnel. IkeTunnelEntry .1.3.6.1.3.171.1.2.1.2.1 |
ikeTunIndexThe index of the IPsec Phase-1 IKE Tunnel Table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The value of this object will wrap at 2,147,483,647. Integer32 .1.3.6.1.3.171.1.2.1.2.1.1 |
ikeTunLocalTypeThe type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name string. 3. or a distinguished name string.ro Phase1PeerIdentityType (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.2.1.2.1.2 |
ikeTunLocalValueThe value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is id-fqdn, then this is the FQDN of the remote peer. If the local peer type is a id-dn, then this is the distinguished name string of the local peer.ro DisplayString (SNMPv2-TC) .1.3.6.1.3.171.1.2.1.2.1.3 |
ikeTunLocalAddrThe IP address of the local endpoint for the IPsec Phase-1 IKE Tunnel.ro IPSIpAddress .1.3.6.1.3.171.1.2.1.2.1.4 |
ikeTunLocalNameThe DNS name of the local IP address for the IPsec Phase-1 IKE Tunnel. If the DNS name associated with the local tunnel endpoint is not known, then the value of this object will be a NULL string.ro DisplayString (SNMPv2-TC) .1.3.6.1.3.171.1.2.1.2.1.5 |
ikeTunRemoteTypeThe type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name string. 3. or a distinguished name string.ro Phase1PeerIdentityType (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.2.1.2.1.6 |
ikeTunRemoteValueThe value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is id-fqdn, then this is the FQDN of the remote peer. If the remote peer type is a id-dn, then this is the distinguished named string of the remote peer.ro DisplayString (SNMPv2-TC) .1.3.6.1.3.171.1.2.1.2.1.7 |
ikeTunRemoteAddrThe IP address of the remote endpoint for the IPsec Phase-1 IKE Tunnel.ro IPSIpAddress .1.3.6.1.3.171.1.2.1.2.1.8 |
ikeTunRemoteNameThe DNS name of the remote IP address of IPsec Phase-1 IKE Tunnel. If the DNS name associated with the remote tunnel endpoint is not known, then the value of this object will be a NULL string.ro DisplayString (SNMPv2-TC) .1.3.6.1.3.171.1.2.1.2.1.9 |
ikeTunNegoModeThe negotiation mode of the IPsec Phase-1 IKE Tunnel.ro IkeNegoMode (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.2.1.2.1.10 |
ikeTunDiffHellmanGrpThe Diffie Hellman Group used in IPsec Phase-1 IKE negotiations.ro DiffHellmanGrp (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.2.1.2.1.11 |
ikeTunEncryptAlgoThe encryption algorithm used in IPsec Phase-1 IKE negotiations.ro EncryptAlgo (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.2.1.2.1.12 |
ikeTunHashAlgoThe hash algorithm used in IPsec Phase-1 IKE negotiations.ro IkeHashAlgo (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.2.1.2.1.13 |
ikeTunAuthMethodThe authentication method used in IPsec Phase-1 IKE negotiations.ro IkeAuthMethod (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.2.1.2.1.14 |
ikeTunLifeTimeThe negotiated LifeTime of the IPsec Phase-1 IKE Tunnel in seconds.ro Integer32 .1.3.6.1.3.171.1.2.1.2.1.15 |
ikeTunActiveTimeThe length of time the IPsec Phase-1 IKE tunnel has been active in hundredths of seconds.ro TimeInterval (SNMPv2-TC) .1.3.6.1.3.171.1.2.1.2.1.16 |
ikeTunSaRefreshThresholdThe security assoication refresh threshold in seconds.ro Integer32 .1.3.6.1.3.171.1.2.1.2.1.17 |
ikeTunTotalRefreshesThe total number of security associations refreshes performed.ro Counter32 UNITS "QM Exchanges" .1.3.6.1.3.171.1.2.1.2.1.18 |
ikeTunInOctetsThe total number of octets received by this IPsec Phase-1 IKE Tunnel.ro Counter32 UNITS "Octets" .1.3.6.1.3.171.1.2.1.2.1.19 |
ikeTunInPktsThe total number of packets received by this IPsec Phase-1 IKE Tunnel.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.2.1.2.1.20 |
ikeTunInDropPktsThe total number of packets dropped by this IPsec Phase-1 IKE Tunnel during receive processing.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.2.1.2.1.21 |
ikeTunInNotifysThe total number of notifys received by this IPsec Phase-1 IKE Tunnel.ro Counter32 UNITS "Notification Payloads" .1.3.6.1.3.171.1.2.1.2.1.22 |
ikeTunInP2ExchgsThe total number of IPsec Phase-2 exchanges received by this IPsec Phase-1 IKE Tunnel.ro Counter32 UNITS "SA Payloads" .1.3.6.1.3.171.1.2.1.2.1.23 |
ikeTunInP2ExchgInvalidsThe total number of IPsec Phase-2 exchanges received on this tunnel that were found to contain references to unrecognized security parameters.ro Counter32 UNITS "SA Payloads" .1.3.6.1.3.171.1.2.1.2.1.24 |
ikeTunInP2ExchgRejectsThe total number of IPsec Phase-2 exchanges received on this tunnel that were validated but were rejected by the local policy.ro Counter32 UNITS "SA Payloads" .1.3.6.1.3.171.1.2.1.2.1.25 |
ikeTunInP2SaDelRequestsThe total number of IPsec Phase-2 security association delete requests received by this IPsec Phase-1 IKE Tunnel.ro Counter32 UNITS "Notification Payloads" .1.3.6.1.3.171.1.2.1.2.1.26 |
ikeTunOutOctetsThe total number of octets sent by this IPsec Phase-1 IKE Tunnel.ro Counter32 UNITS "Octets" .1.3.6.1.3.171.1.2.1.2.1.27 |
ikeTunOutPktsThe total number of packets sent by this IPsec Phase-1 IKE Tunnel.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.2.1.2.1.28 |
ikeTunOutDropPktsThe total number of packets dropped by this IPsec Phase-1 IKE Tunnel during send processing.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.2.1.2.1.29 |
ikeTunOutNotifysThe total number of notifys sent by this IPsec Phase-1 Tunnel.ro Counter32 UNITS "Notification Payloads" .1.3.6.1.3.171.1.2.1.2.1.30 |
ikeTunOutP2ExchgsThe total number of IPsec Phase-2 exchanges sent by this IPsec Phase-1 IKE Tunnel.ro Counter32 UNITS "SA Payloads" .1.3.6.1.3.171.1.2.1.2.1.31 |
ikeTunOutP2ExchgInvalidsThe total number of IPsec Phase-2 exchanges sent on this tunnel that were found by the peer to contain references to security parameters not recognized by the peer.ro Counter32 UNITS "SA Payloads" .1.3.6.1.3.171.1.2.1.2.1.32 |
ikeTunOutP2ExchgRejectsThe total number of IPsec Phase-2 exchanges sent on this tunnel that were validated by the peer but were rejected by the peer's policy.ro Counter32 UNITS "SA Payloads" .1.3.6.1.3.171.1.2.1.2.1.33 |
ikeTunOutP2SaDelRequestsThe total number of IPsec Phase-2 security association delete requests sent by this IPsec Phase-1 IKE Tunnel.ro Counter32 UNITS "Notification Payloads" .1.3.6.1.3.171.1.2.1.2.1.34 |
ikeTunStatusThe status of the MIB table row. This object can be used to bring the tunnel down by setting value of this object to destroy(2). This object cannot be used to create a MIB table row.rw TunnelStatus .1.3.6.1.3.171.1.2.1.2.1.35 |
ikeTunInNewGrpReqsThe total number of New Group exchanges initiated remotely using this IKE tunnel.ro Counter32 UNITS "Negotiations" .1.3.6.1.3.171.1.2.1.2.1.36 |
ikeTunOutNewGrpReqsThe total number of New Group exchanges initiated locally using this IKE tunnel.ro Counter32 UNITS "Negotiations" .1.3.6.1.3.171.1.2.1.2.1.37 |
ikeTunInNewGrpReqsRejectedThe total number of New Group exchanges initiated remotely using this IKE tunnel that ended in a failure.ro Counter32 UNITS "Negotiations" .1.3.6.1.3.171.1.2.1.2.1.38 |
ikeTunOutNewGrpReqsRejectedThe total number of New Group exchanges initiated locally using this IKE tunnel that ended in a failure.ro Counter32 UNITS "Negotiations" .1.3.6.1.3.171.1.2.1.2.1.39 |
ikeTunInConfigsThe total number of Mode Configuration settings received (either CFG-REPLY or CFG-SET payloads) by the local entity on the ISAKMP SA represented by this IKE tunnel.ro Counter32 UNITS "Mode Configuration Setting Payloads" .1.3.6.1.3.171.1.2.1.2.1.40 |
ikeTunOutConfigsThe total number of Mode Configuration settings dispatched (either CFG-REPLY or CFG-SET payloads) by the local entity on the ISAKMP SA represented by this IKE tunnel.ro Counter32 UNITS "Mode Configuration Setting Payloads" .1.3.6.1.3.171.1.2.1.2.1.41 |
ikeTunInConfigsRejectsThe total number of Mode Configuration settings which were received (either CFG-REPLY or CFG-SET payloads) and rejected by this entity using the ISAKMP SA represented by this IKE tunnel.ro Counter32 UNITS "Mode Configuration Setting Payloads" .1.3.6.1.3.171.1.2.1.2.1.42 |
ikeTunOutConfigsRejectsThe total number of Mode Configuration settings which were dispatched (either CFG-REPLY or CFG-SET payloads) by this entity and were rejected by the peer (client) using the ISAKMP SA represented by this IKE tunnel.ro Counter32 UNITS "Mode Configuration Setting Payloads" .1.3.6.1.3.171.1.2.1.2.1.43 |
ikeTunEncryptKeySizeThe key size in bits of the negotiated key to be used with the algorithm denoted by the column 'ikeTunEncryptAlgo'. For DES and 3DES the key size i respectively 56 and 168. For AES, this will denote th negotiated key size.ro Integer32 UNITS "Bits" .1.3.6.1.3.171.1.2.1.2.1.44 |
phase1PeerTableThe IPsec Phase-1 Key Exchange Peer Table. Ther is one entry in this table for each IPsec Phase-1 pee with which the managed entity is currently associate by virtue of an active IPsec Phase-1 Control Tunnel. peer has an entry in this table, if and only if ther is at least one Phase-1 or Phase-2 tunnel terminatin on the managed entity from the peer. When all Phase- and Phase-2 tunnels to a peer have expired, the entr for the peer is deleted off this table. SEQUENCE OF Phase1PeerEntry .1.3.6.1.3.171.1.2.2 |
phase1PeerEntryEach entry contains the attributes associated with an IPsec Phase-1 IKE peer association. Phase1PeerEntry .1.3.6.1.3.171.1.2.2.1 |
phase1PeerLocalTypeThe type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name. 3. or a distinguished name. Phase1PeerIdentityType (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.2.2.1.1 |
phase1PeerLocalValueThe value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is a id-fqdn, then this is the FQDN of the local peer. If the local peer type is id-dn, then this is the DN string of the local peer. Value of this object could be arbitrarily large making this object unsuitable to be used for indexing this table (please refer to the definition of 'phase1PeerHLocalValue'.ro DisplayString (SNMPv2-TC) .1.3.6.1.3.171.1.2.2.1.2 |
phase1PeerHLocalValueThe 128-bit MD5 hash output of the value represente by the element phase1PeerLocalValue. The hashing is required to restrict the length of the SNMP index to a legal size: phase1PeerHRemoteValue = MD5(phase1PeerLocalValue). HashedString .1.3.6.1.3.171.1.2.2.1.3 |
phase1PeerRemoteTypeThe type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name. 3. or a distinguished name. Phase1PeerIdentityType (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.2.2.1.4 |
phase1PeerRemoteValueThe value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is id-fqdn, then this is the FQDN of the remote peer. If the remote peer type is a id-dn, then this is the DN string of the remote peer. Value of this object could be arbitrarily large making this object unsuitable to be used for indexing this table (please refer to the definition of 'phase1PeerHRemoteValue'.ro DisplayString (SNMPv2-TC) .1.3.6.1.3.171.1.2.2.1.5 |
phase1PeerHRemoteValueThe 128-bit MD5 hash output of the value represente by the element phase1PeerRemoteValue. The hashing is required to restrict the length of the SNMP index to a legal size: phase1PeerHRemoteValue = MD5(phase1PeerRemoteValue). HashedString .1.3.6.1.3.171.1.2.2.1.6 |
phase1PeerIntIndexThe internal index of the local-remote peer association. This internal index is used to uniquely identify multiple associations between the local and remote peer. Integer32 .1.3.6.1.3.171.1.2.2.1.7 |
phase1PeerLocalAddrThe IP address of the local peer.ro IPSIpAddress .1.3.6.1.3.171.1.2.2.1.8 |
phase1PeerRemoteAddrThe IP address of the remote peer.ro IPSIpAddress .1.3.6.1.3.171.1.2.2.1.9 |
phase1PeerActiveTimeThe length of time that the peer association has existed in hundredths of a second.ro TimeInterval (SNMPv2-TC) .1.3.6.1.3.171.1.2.2.1.10 |
phase1PeerActiveTunnelIndexThe index of the active IPsec Phase-1 IKE Tunnel (ikeTunIndex in the ikeTunnelTable) for this peer association. If an IPsec Phase-1 IKE Tunnel is not currently active, then the value of this object will be zero.ro Integer32 .1.3.6.1.3.171.1.2.2.1.11 |
phase1PeerConfigAppVersionThe NULL terminated printable application version of the peer. If the peer did not issue the APPLICATION-VERSION attribute, this field is NULL.ro DisplayString (SNMPv2-TC) .1.3.6.1.3.171.1.2.2.1.12 |
phase1PeerConfigAddressThe IP address configured by the peer on this entity. If the local entity did not receive either INTERNAL-IP4-ADDRESS or INTERNAL-IP6-ADDRESS from the peer, this field should have the NULL IP address.ro IPSIpAddress .1.3.6.1.3.171.1.2.2.1.13 |
phase1PeerConfigNetmaskThe netmask configured by the peer on this entity. If the local entity did not receive either INTERNAL-V4-MASK or INTERNAL-IP6-MASK from the peer, this field should have the NULL IP address.ro IPSIpAddress .1.3.6.1.3.171.1.2.2.1.14 |
phase1PeerConfigDnsThe address of the DNS server configured by the peer on the local entity using CFG-SET or CFG-REPLY. If the local entity did not receive either INTERNAL-V4-DNS or INTERNAL-IP6-DNS from the peer, this field should have the NULL IP address.ro IPSIpAddress .1.3.6.1.3.171.1.2.2.1.15 |
phase1PeerConfigNbnsThe address of the NetBios Name Server configured by the peer on the local entity using CFG-SET or CFG-REPLY. If the local entity did not receive either INTERNAL-V4-NBNS INTERNAL-IP6-NBNS from the peer, this field should have the NULL IP address.ro IPSIpAddress .1.3.6.1.3.171.1.2.2.1.16 |
phase1PeerConfigDhcpThe address of the DHCP Server configured by the peer on the local entity using CFG-SET or CFG-REPLY. If the local entity did not receive either INTERNAL-V4-DHCP INTERNAL-IP6-DHCP from the peer, this field should have the NULL IP address.ro IPSIpAddress .1.3.6.1.3.171.1.2.2.1.17 |
phase1ProtocolThe keying and control protocol used to setup and administer Phase-1 and Phase-2 tunnels to this peer.ro ControlProtocol (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.2.2.1.18 |
phase1PeerCorrTableThe IPsec Phase-1 Peer Association to IPsec Phase- Tunnel Correlation Table. There is one entry in this tabl for each active IPsec Phase-2 Tunnel. SEQUENCE OF Phase1PeerCorrEntry .1.3.6.1.3.171.1.2.3 |
phase1PeerCorrEntryEach entry contains the attributes of an IPsec Phase-1 Peer Association to IPsec Phase- Tunnel Correlation. Phase1PeerCorrEntry .1.3.6.1.3.171.1.2.3.1 |
phase1PeerCorrLocalTypeThe type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name. 3. or a distinguished name. Phase1PeerIdentityType (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.2.3.1.1 |
phase1PeerCorrLocalValueThe value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is id-fqdn, then this is the FQDN of the local entity. If the local peer type is a id-dn, then this is the distinguished named string of the local peer. DisplayString (SNMPv2-TC) .1.3.6.1.3.171.1.2.3.1.2 |
phase1PeerCorrRemoteTypeThe type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name. 3. or a distinguished name. Phase1PeerIdentityType (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.2.3.1.3 |
phase1PeerCorrRemoteValueThe value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is id-fqdn, then this is the FQDN of the remote peer. If the remote peer type is a id-dn, then this is the distinguished named string of the remote peer. DisplayString (SNMPv2-TC) .1.3.6.1.3.171.1.2.3.1.4 |
phase1PeerCorrIntIndexThe internal index of the local-remote peer association. This internal index is used to uniquely identify multiple associations between the local and remote peer. Integer32 .1.3.6.1.3.171.1.2.3.1.5 |
phase1PeerCorrSeqNumThe sequence number of the local-remote peer association. This sequence number is used to uniquely identify multiple instances of an unique association between the local and remote peer. Integer32 .1.3.6.1.3.171.1.2.3.1.6 |
phase1PeerCorrIpSecTunIndexThe index of the active IPsec Phase-2 Tunnel (ipSecTunIndex in the ipSecTunnelTable) for this IPsec Phase-1 IKE Peer Association.ro Integer32 .1.3.6.1.3.171.1.2.3.1.7 |
phase1PeerCorrControlProtocolThe keying and control protocol used to setup and administer the Phase-1 and Phase-2 tunnels thi table entry refers to.ro ControlProtocol (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.2.3.1.8 |
ipSecPhaseTwo OBJECT IDENTIFIER .1.3.6.1.3.171.1.3 |
ipSecGlobalStats OBJECT IDENTIFIER .1.3.6.1.3.171.1.3.1 |
ipSecGlobalActiveTunnelsThe total number of currently active IPsec Phase-2 Tunnels.ro Gauge32 UNITS "Integral units" .1.3.6.1.3.171.1.3.1.1 |
ipSecGlobalPreviousTunnelsThe total number of previously active IPsec Phase-2 Tunnels.ro Counter32 UNITS "Phase-2 Tunnels" .1.3.6.1.3.171.1.3.1.2 |
ipSecGlobalInOctetsThe total number of octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE determining whether or not the packet should be decompressed. See also ipSecGlobalInOctWraps for the number of times this counter has wrapped.ro Counter32 UNITS "Octets" .1.3.6.1.3.171.1.3.1.3 |
ipSecGlobalHcInOctetsA high capacity count of the total number of octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE determining whether or not the packet should be decompressed.ro Counter64 .1.3.6.1.3.171.1.3.1.4 |
ipSecGlobalInOctWrapsThe number of times the global octets received counter (ipSecGlobalInOctets) has wrapped.ro Counter32 UNITS "Integral units" .1.3.6.1.3.171.1.3.1.5 |
ipSecGlobalInDecompOctetsThe total number of decompressed octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of ipSecGlobalInOctets. See also ipSecGlobalInDecompOctWraps for the number of times this counter has wrapped.ro Counter32 UNITS "Octets" .1.3.6.1.3.171.1.3.1.6 |
ipSecGlobalHcInDecompOctetsA high capacity count of the total number of decompressed octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of ipSecGlobalHcInOctets.ro Counter64 .1.3.6.1.3.171.1.3.1.7 |
ipSecGlobalInDecompOctWrapsThe number of times the global decompressed octets received counter (ipSecGlobalInDecompOctets) has wrapped.ro Counter32 UNITS "Integral units" .1.3.6.1.3.171.1.3.1.8 |
ipSecGlobalInPktsThe total number of packets received by all current and previous IPsec Phase-2 Tunnels.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.3.1.9 |
ipSecGlobalInDropsThe total number of packets dropped during receive processing by all current and previous IPsec Phase-2 Tunnels. This count does NOT include packets dropped due to Anti-Replay processing.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.3.1.10 |
ipSecGlobalInReplayDropsThe total number of packets dropped during receive processing due to Anti-Replay processing by all current and previous IPsec Phase-2 Tunnels.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.3.1.11 |
ipSecGlobalInAuthsThe total number of inbound authentication's performed by all current and previous IPsec Phase-2 Tunnels.ro Counter32 UNITS "Events" .1.3.6.1.3.171.1.3.1.12 |
ipSecGlobalInAuthFailsThe total number of inbound authentication's which ended in failure by all current and previous IPsec Phase-2 Tunnels.ro Counter32 UNITS "Failures" .1.3.6.1.3.171.1.3.1.13 |
ipSecGlobalInDecryptsThe total number of inbound decryption's performed by all current and previous IPsec Phase-2 Tunnels.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.3.1.14 |
ipSecGlobalInDecryptFailsThe total number of inbound decryption's which ended in failure by all current and previous IPsec Phase-2 Tunnels.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.3.1.15 |
ipSecGlobalOutOctetsThe total number of octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER determining whether or not the packet should be compressed. See also ipSecGlobalOutOctWraps for the number of times this counter has wrapped.ro Counter32 UNITS "Octets" .1.3.6.1.3.171.1.3.1.16 |
ipSecGlobalHcOutOctetsA high capacity count of the total number of octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER determining whether or not the packet should be compressed.ro Counter64 .1.3.6.1.3.171.1.3.1.17 |
ipSecGlobalOutOctWrapsThe number of times the global octets sent counter (ipSecGlobalOutOctets) has wrapped.ro Counter32 UNITS "Integral units" .1.3.6.1.3.171.1.3.1.18 |
ipSecGlobalOutUncompOctetsThe total number of uncompressed octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of ipSecGlobalOutOctets. See also ipSecGlobalOutDecompOctWraps for the number of times this counter has wrapped.ro Counter32 UNITS "Octets" .1.3.6.1.3.171.1.3.1.19 |
ipSecGlobalHcOutUncompOctetsA high capacity count of the total number of uncompressed octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of ipSecGlobalHcOutOctets.ro Counter64 UNITS "Octets" .1.3.6.1.3.171.1.3.1.20 |
ipSecGlobalOutUncompOctWrapsThe number of times the global uncompressed octets sent counter (ipSecGlobalOutUncompOctets) has wrapped.ro Counter32 UNITS "Integral units" .1.3.6.1.3.171.1.3.1.21 |
ipSecGlobalOutPktsThe total number of packets sent by all current and previous IPsec Phase-2 Tunnels.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.3.1.22 |
ipSecGlobalOutDropsThe total number of packets dropped during send processing by all current and previous IPsec Phase-2 Tunnels.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.3.1.23 |
ipSecGlobalOutAuthsThe total number of outbound authentication's performed by all current and previous IPsec Phase-2 Tunnels.ro Counter32 UNITS "Events" .1.3.6.1.3.171.1.3.1.24 |
ipSecGlobalOutAuthFailsThe total number of outbound authentication's which ended in failure by all current and previous IPsec Phase-2 Tunnels.ro Counter32 UNITS "Failures" .1.3.6.1.3.171.1.3.1.25 |
ipSecGlobalOutEncryptsThe total number of outbound encryption's performed by all current and previous IPsec Phase-2 Tunnels.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.3.1.26 |
ipSecGlobalOutEncryptFailsThe total number of outbound encryption's which ended in failure by all current and previous IPsec Phase-2 Tunnels.ro Counter32 UNITS "Failures" .1.3.6.1.3.171.1.3.1.27 |
ipSecGlobalOutCompressedPktsThe cumulative number of outbound packets across all IPsec flows terminating at this device which were successfully compressed. This number is cumulative since the last system start.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.3.1.28 |
ipSecGlobalOutCompSkippedPktsThe total number of outbound packets across all IPsec flows terminating at this devices that were to be compressed but which were skipped due to the compression hysteresis. This number is cumulative since the last system start.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.3.1.29 |
ipSecGlobalOutCompFailPktsThe total number of outbound packets across all IPsec flows terminating at this device that failed compression because they grew in size after compression. This number is cumulative since the last system start.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.3.1.30 |
ipSecGlobalOutCompTooSmallPktsThe total number of outbound packets across all IPsec flows terminating at this device that were to be compressed but were smaller than the compression threshold size. This number is cumulative since the last system start.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.3.1.31 |
ipSecGlobalProtocolUseFailsThe total number of protocol use failures which occurred during processing of all current and previously active IPsec Phase-2 Tunnels.ro Counter32 UNITS "Failures" .1.3.6.1.3.171.1.3.1.32 |
ipSecGlobalNoSaFailsThe total number of non-existent Security Assocication in failures which occurred during processing of all current and previous IPsec Phase-2 Tunnels.ro Counter32 UNITS "Failures" .1.3.6.1.3.171.1.3.1.33 |
ipSecGlobalSysCapFailsThe total number of system capacity failures which occurred during processing of all current and previously active IPsec Phase-2 Tunnels.ro Counter32 UNITS "Failures" .1.3.6.1.3.171.1.3.1.34 |
ipSecGlobalHcPreviousTunnelsA high capacity count of the total number of previously active IPsec Phase-2 Tunnels.ro Counter64 UNITS "Integral units" .1.3.6.1.3.171.1.3.1.35 |
ipSecGlobalPreviousTunnelsWrapsThe number of times the quantit `ipSecGlobalPreviousTunnels' (previously active IPse Phase-2 tunnels) has wrapped.ro Counter32 UNITS "Integral units" .1.3.6.1.3.171.1.3.1.36 |
ipSecTunnelTableThe IPsec Phase-2 Tunnel Table. There is one entry in this table for each active IPsec Phase-2 Tunnel. SEQUENCE OF IpSecTunnelEntry .1.3.6.1.3.171.1.3.2 |
ipSecTunnelEntryEach entry contains the attributes associated with an active IPsec Phase-2 Tunnel. IpSecTunnelEntry .1.3.6.1.3.171.1.3.2.1 |
ipSecTunIndexThe index of the IPsec Phase-2 Tunnel Table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The value of this object will wrap at 2,147,483,647. Integer32 .1.3.6.1.3.171.1.3.2.1.1 |
ipSecTunIkeTunnelIndexThe index of the associated IPsec Phase-1 IKE Tunnel. (ikeTunIndex in the ikeTunnelTable)rodeprecated Integer32 .1.3.6.1.3.171.1.3.2.1.2 |
ipSecTunIkeTunnelAliveAn indicator which specifies whether or not the IPsec Phase-1 IKE Tunnel currently exists. This object has been deprecated in favour of more generic pointers to the control tunnel (ipSecTunControlTunnelIndex).rodeprecated TruthValue (SNMPv2-TC) .1.3.6.1.3.171.1.3.2.1.3 |
ipSecTunLocalAddrThe IP address of the local endpoint for the IPsec Phase-2 Tunnel.ro IPSIpAddress .1.3.6.1.3.171.1.3.2.1.4 |
ipSecTunRemoteAddrThe IP address of the remote endpoint for the IPsec Phase-2 Tunnel.ro IPSIpAddress .1.3.6.1.3.171.1.3.2.1.5 |
ipSecTunKeyTypeThe type of key used by the IPsec Phase-2 Tunnel. This object has been deprecated in favour o ipSecTunControlProtocol.rodeprecated KeyType .1.3.6.1.3.171.1.3.2.1.6 |
ipSecTunEncapModeThe encapsulation mode used by the IPsec Phase-2 Tunnel.ro EncapMode (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.3.2.1.7 |
ipSecTunLifeSizeThe negotiated LifeSize of the IPsec Phase-2 Tunnel in kilobytes.ro Integer32 .1.3.6.1.3.171.1.3.2.1.8 |
ipSecTunLifeTimeThe negotiated LifeTime of the IPsec Phase- Tunnel in seconds. If the tunnel was setup manually, the value of this MIB element should be 0.ro Integer32 .1.3.6.1.3.171.1.3.2.1.9 |
ipSecTunActiveTimeThe length of time the IPsec Phase-2 Tunnel has been active in hundredths of seconds.ro TimeInterval (SNMPv2-TC) .1.3.6.1.3.171.1.3.2.1.10 |
ipSecTunSaLifeSizeThresholdThe security association LifeSize refresh threshold in kilobytes. If the tunnel was setup manually, the value of this MIB element should be 0.ro Integer32 .1.3.6.1.3.171.1.3.2.1.11 |
ipSecTunSaLifeTimeThresholdThe security association LifeTime refresh threshold in seconds. If the tunnel was setup manually, the value of this MIB element should be 0.ro Integer32 .1.3.6.1.3.171.1.3.2.1.12 |
ipSecTunTotalRefreshesThe total number of security association refreshes performed.ro Counter32 UNITS "QM Exchanges" .1.3.6.1.3.171.1.3.2.1.13 |
ipSecTunExpiredSaInstancesThe total number of security associations which have expired. If the tunnel was setup manually, the value of this MIB element should be 0.ro Counter32 UNITS "SAs" .1.3.6.1.3.171.1.3.2.1.14 |
ipSecTunCurrentSaInstancesThe number of security associations which are currently active or expiring.ro Gauge32 .1.3.6.1.3.171.1.3.2.1.15 |
ipSecTunInSaDiffHellmanGrpThe Diffie Hellman Group used by the inbound security association of the IPsec Phase-2 Tunnel. If the tunnel was setup manually, the value of this MIB element would be `none'.ro DiffHellmanGrp (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.3.2.1.16 |
ipSecTunInSaEncryptAlgoThe encryption algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.ro EncryptAlgo (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.3.2.1.17 |
ipSecTunInSaAhAuthAlgoThe authentication algorithm used by the inbound authentication header (AH) security association of the IPsec Phase-2 Tunnel.ro AuthAlgo (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.3.2.1.18 |
ipSecTunInSaEspAuthAlgoThe authentication algorithm used by the inbound ecapsulation security protocol (ESP) security association of the IPsec Phase-2 Tunnel.ro AuthAlgo (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.3.2.1.19 |
ipSecTunInSaDecompAlgoThe decompression algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.ro CompAlgo (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.3.2.1.20 |
ipSecTunOutSaDiffHellmanGrpThe Diffie Hellman Group used by the outbound security association of the IPsec Phase-2 Tunnel. If the tunnel was setup manually, the value of this MIB element would be 'none'.ro DiffHellmanGrp (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.3.2.1.21 |
ipSecTunOutSaEncryptAlgoThe encryption algorithm used by the outbound security association of the IPsec Phase-2 Tunnel.ro EncryptAlgo (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.3.2.1.22 |
ipSecTunOutSaAhAuthAlgoThe authentication algorithm used by the outbound authentication header (AH) security association of the IPsec Phase-2 Tunnel.ro AuthAlgo (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.3.2.1.23 |
ipSecTunOutSaEspAuthAlgoThe authentication algorithm used by the inbound encapsulation security protocol (ESP) security association of the IPsec Phase-2 Tunnel.ro AuthAlgo (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.3.2.1.24 |
ipSecTunOutSaCompAlgoThe compression algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.ro CompAlgo (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.3.2.1.25 |
ipSecTunPmtuThe Path MTU for this IPsec Phase-2 tunnel, which ha been either learnt from the network or which has been specified by the administrator. The lower end of the range is 68 which is the minimum MTU for IPv4.ro Integer32 .1.3.6.1.3.171.1.3.2.1.26 |
ipSecTunInOctetsThe total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed. See also ipSecTunInOctWraps for the number of times this counter has wrapped.ro Counter32 UNITS "Octets" .1.3.6.1.3.171.1.3.2.1.27 |
ipSecTunHcInOctetsA high capacity count of the total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed.ro Counter64 UNITS "Octets" .1.3.6.1.3.171.1.3.2.1.28 |
ipSecTunInOctWrapsThe number of times the octets received counter (ipSecTunInOctets) has wrapped.ro Counter32 UNITS "Integral units" .1.3.6.1.3.171.1.3.2.1.29 |
ipSecTunInDecompOctetsThe total number of decompressed octets received by this IPsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of ipSecTunInOctets. See also ipSecTunInDecompOctWraps for the number of times this counter has wrapped.ro Counter32 UNITS "Octets" .1.3.6.1.3.171.1.3.2.1.30 |
ipSecTunHcInDecompOctetsA high capacity count of the total number of decompressed octets received by this IPsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of ipSecTunHcInOctets.ro Counter64 .1.3.6.1.3.171.1.3.2.1.31 |
ipSecTunInDecompOctWrapsThe number of times the decompressed octets received counter (ipSecTunInDecompOctets) has wrapped.ro Counter32 UNITS "Integral units" .1.3.6.1.3.171.1.3.2.1.32 |
ipSecTunInPktsThe total number of packets received by this IPsec Phase-2 Tunnel.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.3.2.1.33 |
ipSecTunInDropPktsThe total number of packets dropped during receive processing by this IPsec Phase-2 Tunnel. This count does NOT include packets dropped due to Anti-Replay processing.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.3.2.1.34 |
ipSecTunInReplayDropPktsThe total number of packets dropped during receive processing due to Anti-Replay processing by this IPsec Phase-2 Tunnel.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.3.2.1.35 |
ipSecTunInAuthsThe total number of inbound authentication's performed by this IPsec Phase-2 Tunnel.ro Counter32 UNITS "Events" .1.3.6.1.3.171.1.3.2.1.36 |
ipSecTunInAuthFailsThe total number of inbound authentication's which ended in failure by this IPsec Phase-2 Tunnel .ro Counter32 UNITS "Failures" .1.3.6.1.3.171.1.3.2.1.37 |
ipSecTunInDecryptsThe total number of inbound decryption's performed by this IPsec Phase-2 Tunnel.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.3.2.1.38 |
ipSecTunInDecryptFailsThe total number of inbound decryption's which ended in failure by this IPsec Phase-2 Tunnel.ro Counter32 UNITS "Failures" .1.3.6.1.3.171.1.3.2.1.39 |
ipSecTunOutOctetsThe total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed. See also ipSecTunOutOctWraps for the number of times this counter has wrapped.ro Counter32 UNITS "Octets" .1.3.6.1.3.171.1.3.2.1.40 |
ipSecTunHcOutOctetsA high capacity count of the total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed.ro Counter64 .1.3.6.1.3.171.1.3.2.1.41 |
ipSecTunOutOctWrapsThe number of times the out octets counter (ipSecTunOutOctets) has wrapped.ro Counter32 UNITS "Integral units" .1.3.6.1.3.171.1.3.2.1.42 |
ipSecTunOutUncompOctetsThe total number of uncompressed octets sent by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of ipSecTunOutOctets. See also ipSecTunOutDecompOctWraps for the number of times this counter has wrapped.ro Counter32 UNITS "Octets" .1.3.6.1.3.171.1.3.2.1.43 |
ipSecTunHcOutUncompOctetsA high capacity count of the total number of uncompressed octets sent by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of ipSecTunHcOutOctets.ro Counter64 .1.3.6.1.3.171.1.3.2.1.44 |
ipSecTunOutUncompOctWrapsThe number of times the uncompressed octets sent counter (ipSecTunOutUncompOctets) has wrapped.ro Counter32 UNITS "Integral units" .1.3.6.1.3.171.1.3.2.1.45 |
ipSecTunOutPktsThe total number of packets sent by this IPsec Phase-2 Tunnel.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.3.2.1.46 |
ipSecTunOutDropPktsThe total number of packets dropped during send processing by this IPsec Phase-2 Tunnel.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.3.2.1.47 |
ipSecTunOutAuthsThe total number of outbound authentication's performed by this IPsec Phase-2 Tunnel.ro Counter32 UNITS "Events" .1.3.6.1.3.171.1.3.2.1.48 |
ipSecTunOutAuthFailsThe total number of outbound authentication's which ended in failure by this IPsec Phase-2 Tunnel.ro Counter32 UNITS "Failures" .1.3.6.1.3.171.1.3.2.1.49 |
ipSecTunOutEncryptsThe total number of outbound encryption's performed by this IPsec Phase-2 Tunnel.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.3.2.1.50 |
ipSecTunOutEncryptFailsThe total number of outbound encryption's which ended in failure by this IPsec Phase-2 Tunnel.ro Counter32 UNITS "Failures" .1.3.6.1.3.171.1.3.2.1.51 |
ipSecTunOutCompressedPktsThe total number of outbound packets which were successfully compressed.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.3.2.1.52 |
ipSecTunOutCompSkippedPktsThe total number of outbound packets that were to be compressed but which were skipped due to the compression hysteresis.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.3.2.1.53 |
ipSecTunOutCompFailPktsThe total number of outbound packets that failed compression because they grew in size after compression.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.3.2.1.54 |
ipSecTunOutCompTooSmallPktsThe total number of outbound packets that were to be compressed but were smaller than the compression threshold size.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.3.2.1.55 |
ipSecTunStatusThe status of the MIB table row. This object can be used to bring the tunnel down by setting value of this object to destroy(2). When the value is set to destroy(2), the SA bundle is destroyed and this row is deleted from this table. When this MIB value is queried, the value of active(1) is always returned, if the instance exists. This object cannot be used to create a MIB table row.rw TunnelStatus .1.3.6.1.3.171.1.3.2.1.56 |
ipSecTunControlProtocolIdentifies the protocol used to setup and administer this Phase-2 Ipsec tunnel. If IKE was used to setup this tunnel, then this value of this column would be `cp-ike'. A value of cp-none is indicative of a manually installed and administered Phase-2 tunnel.ro ControlProtocol (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.3.2.1.57 |
ipSecTunControlTunnelIndexThe index of the associated IPsec Phase-1 Tunnel (in case of IKE, this value would refer t ikeTunIndex in the ikeTunnelTable). A value of 0 identifies that this Phase-2 tunne was setup manually.ro Integer32 .1.3.6.1.3.171.1.3.2.1.58 |
ipSecTunControlTunnelAliveAn indicator which specifies whether or not the IPsec Phase-1 Tunnel that spawned this Phase-2 tunnel currently exists.ro TruthValue (SNMPv2-TC) .1.3.6.1.3.171.1.3.2.1.59 |
ipSecTunInSaEncryptKeySizeThe key size in bits of the negotiated key to be used with the algorithm denoted by ipSecTunInSaEncryptAlgo. For DES and 3DES the key size is respectively 56 and 168. For AES, this will denote the negotiated key size.ro Integer32 UNITS "Bits" .1.3.6.1.3.171.1.3.2.1.60 |
ipSecTunOutSaEncryptKeySizeThe key size in bits of the negotiated key to be used with the algorithm denoted by ipSecTunOutSaEncryptAlgo. For DES and 3DES the key size is respectively 56 and 168. For AES, this will denote the negotiated key size.ro Integer32 UNITS "Bits" .1.3.6.1.3.171.1.3.2.1.61 |
ipSecEndPtTableThe IPsec Phase-2 Tunnel Endpoint Table. This table contains an entry for each active endpoint associated with an IPsec Phase-2 Tunnel. SEQUENCE OF IpSecEndPtEntry .1.3.6.1.3.171.1.3.3 |
ipSecEndPtEntryAn IPsec Phase-2 Tunnel Endpoint entry. IpSecEndPtEntry .1.3.6.1.3.171.1.3.3.1 |
ipSecEndPtIndexThe number of the Endpoint associated with the IPsec Phase-2 Tunnel Table. The value of this index is a number which begins at one and is incremented with each Endpoint associated with an IPsec Phase-2 Tunnel. The value of this object will wrap at 2,147,483,647. Integer32 .1.3.6.1.3.171.1.3.3.1.1 |
ipSecEndPtLocalNameThe DNS name of the local Endpoint.ro DisplayString (SNMPv2-TC) .1.3.6.1.3.171.1.3.3.1.2 |
ipSecEndPtLocalTypeThe type of identity for the local Endpoint. Possible values are: 1) a single IP address, or 2) an IP address range, or 3) an IP subnet.ro EndPtType (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.3.3.1.3 |
ipSecEndPtLocalAddr1The local Endpoint's first IP address specification. If the local Endpoint type is single IP address, then this is the value of the IP address. If the local Endpoint type is IP subnet, then this is the value of the subnet. If the local Endpoint type is IP address range, then this is the value of beginning IP address of the range.ro IPSIpAddress .1.3.6.1.3.171.1.3.3.1.4 |
ipSecEndPtLocalAddr2The local Endpoint's second IP address specification. If the local Endpoint type is single IP address, then this is the value of the IP address. If the local Endpoint type is IP subnet, then this is the value of the subnet mask. If the local Endpoint type is IP address range, then this is the value of ending IP address of the range.ro IPSIpAddress .1.3.6.1.3.171.1.3.3.1.5 |
ipSecEndPtLocalProtocolThe protocol number of the local Endpoint's traffic.ro Integer32 .1.3.6.1.3.171.1.3.3.1.6 |
ipSecEndPtLocalPortThe port number of the local Endpoint's traffic.ro Integer32 .1.3.6.1.3.171.1.3.3.1.7 |
ipSecEndPtRemoteNameThe DNS name of the remote Endpoint.ro DisplayString (SNMPv2-TC) .1.3.6.1.3.171.1.3.3.1.8 |
ipSecEndPtRemoteTypeThe type of identity for the remote Endpoint. Possible values are: 1) a single IP address, or 2) an IP address range, or 3) an IP subnet.ro EndPtType (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.3.3.1.9 |
ipSecEndPtRemoteAddr1The remote Endpoint's first IP address specification. If the remote Endpoint type is single IP address, then this is the value of the IP address. If the remote Endpoint type is IP subnet, then this is the value of the subnet. If the remote Endpoint type is IP address range, then this is the value of beginning IP address of the range.ro IPSIpAddress .1.3.6.1.3.171.1.3.3.1.10 |
ipSecEndPtRemoteAddr2The remote Endpoint's second IP address specification. If the remote Endpoint type is single IP address, then this is the value of the IP address. If the remote Endpoint type is IP subnet, then this is the value of the subnet mask. If the remote Endpoint type is IP address range, then this is the value of ending IP address of the range.ro IPSIpAddress .1.3.6.1.3.171.1.3.3.1.11 |
ipSecEndPtRemoteProtocolThe protocol number of the remote Endpoint's traffic.ro Integer32 .1.3.6.1.3.171.1.3.3.1.12 |
ipSecEndPtRemotePortThe port number of the remote Endpoint's traffic.ro Integer32 .1.3.6.1.3.171.1.3.3.1.13 |
ipSecSpiTableThe IPsec Phase-2 Security Protection Index Table. This table contains an entry for each active and expiring security association.deprecated SEQUENCE OF IpSecSpiEntry .1.3.6.1.3.171.1.3.4 |
ipSecSpiEntryEach entry contains the attributes associated with active and expiring IPsec Phase-2 security associations.deprecated IpSecSpiEntry .1.3.6.1.3.171.1.3.4.1 |
ipSecSpiIndexThe number of the SPI associated with the Phase-2 Tunnel Table. The value of this index is a number which begins at one and is incremented with each SPI associated with an IPsec Phase-2 Tunnel. The value of this object will wrap at 2,147,483,647.deprecated Integer32 .1.3.6.1.3.171.1.3.4.1.1 |
ipSecSpiDirectionThe direction of the SPI.rodeprecated Enumeration .1.3.6.1.3.171.1.3.4.1.2 |
ipSecSpiValueThe value of the SPI.rodeprecated Spi (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.3.4.1.3 |
ipSecSpiProtocolThe protocol of the SPI.rodeprecated Enumeration .1.3.6.1.3.171.1.3.4.1.4 |
ipSecSpiStatusThe status of the SPI.rodeprecated Enumeration .1.3.6.1.3.171.1.3.4.1.5 |
ipSecGlobalNewGrpStats OBJECT IDENTIFIER .1.3.6.1.3.171.1.3.5 |
ipSecGlobalInNewGrpReqsThe total number of New Group exchanges initiated remotely.ro Counter32 UNITS "Negotiations" .1.3.6.1.3.171.1.3.5.1 |
ipSecGlobalOutNewGrpReqsThe total number of New Group exchanges initiated locally.ro Counter32 UNITS "Negotiations" .1.3.6.1.3.171.1.3.5.2 |
ipSecGlobalInNewGrpReqsRejectedThe total number of New Group exchanges initiated remotely that ended in a failure.ro Counter32 UNITS "Negotiations" .1.3.6.1.3.171.1.3.5.3 |
ipSecGlobalOutNewGrpReqsRejectedThe total number of New Group exchanges initiated locally that ended in a failure.ro Counter32 UNITS "Negotiations" .1.3.6.1.3.171.1.3.5.4 |
ipSecSaTableThe IPsec Phase-2 Security Association Table. This table identifies the structure (in terms of component SAs) of each active Phase-2 IPsec tunnel. This table contains an entry for each active and expiring security association and maps each entry in the active Phase-2 tunnel table (ipSecTunTable) into a number of entries in this table. The index of this table reflects the <destination-address, protocol, spi> rule for identifying Security Associations. SEQUENCE OF IpSecSaEntry .1.3.6.1.3.171.1.3.6 |
ipSecSaEntryEach entry contains the attributes associated with active and expiring IPsec Phase-2 security associations. IpSecSaEntry .1.3.6.1.3.171.1.3.6.1 |
ipSecSaIndexThe index, in the context of the IPsec tunnel ipSecTunIndex, of the security association represented by this table entry. The value of this index is a number which begins at one and is incremented with each SPI associated with an IPsec Phase-2 Tunnel. The value of this object will wrap at 2,147,483,647. Integer32 .1.3.6.1.3.171.1.3.6.1.1 |
ipSecSaDirectionPhase-2 IPsec security associations are simplex. Hence a particular security association is used either for securing outgoing traffic or decoding incoming traffic. This column identifies the direction of the security association represented by this entry.ro Enumeration .1.3.6.1.3.171.1.3.6.1.2 |
ipSecSaValueThis is the value of the Security Protection Index (SPI) assigned by the system to the security association represented by this entry.ro Spi (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.3.6.1.3 |
ipSecSaProtocolThis column represents the security protocol (AH, ESP or IPComp) for which this security association was setup.ro Enumeration .1.3.6.1.3.171.1.3.6.1.4 |
ipSecSaStatusThis column represents the status of the security association represented by this tabel entry. If the status of the SA is 'active', the SA is ready for active use. The status 'expiring' represents any of the various states that the security association transitions through before being purged.ro Enumeration .1.3.6.1.3.171.1.3.6.1.5 |
ipSecHistory OBJECT IDENTIFIER .1.3.6.1.3.171.1.4 |
ipSecHistGlobal OBJECT IDENTIFIER .1.3.6.1.3.171.1.4.1 |
ipSecHistGlobalCntl OBJECT IDENTIFIER .1.3.6.1.3.171.1.4.1.1 |
ipSecHistTableSizeThe window size of the IPsec Phase-1 and Phase-2 History Tables. The IPsec Phase-1 and Phase-2 History Tables are implemented as a sliding window in which only the last n entries are maintained. This object is used specify the number of entries which will be maintained in the IPsec Phase-1 and Phase-2 History Tables. An implementation may choose suitable minimum and maximum values for this element based on the local policy and available resources. If an SNMP SET request specifies a value outside this window for this element, a BAD VALUE may be returned.rw Integer32 .1.3.6.1.3.171.1.4.1.1.1 |
ipSecHistCheckPointThe current state of check point processing. This object will return ready when the agent is ready to create on-demand history entries for active IPsec Tunnels or checkPoint when the agent is currently creating on-demand history entries for active IPsec Tunnels. By setting this value to checkPoint, the agent will create: a) an entry in the IPsec Phase-1 Tunnel History for each active IPsec Phase-1 Tunnel and b) an entry in the IPsec Phase-2 Tunnel History Table and an entry in the IPsec Phase-2 Tunnel EndPoint History Table for each active IPsec Phase-2 Tunnel.rw Enumeration .1.3.6.1.3.171.1.4.1.1.2 |
ipSecHistPhaseOne OBJECT IDENTIFIER .1.3.6.1.3.171.1.4.2 |
ikeTunnelHistTableThe IPsec Phase-1 Internet Key Exchange Tunnel History Table. This table is implemented as a sliding window in which only the last n entries are maintained. The maximum number of entries is specified by the ipSecHistTableSize object. SEQUENCE OF IkeTunnelHistEntry .1.3.6.1.3.171.1.4.2.1 |
ikeTunnelHistEntryEach entry contains the attributes associated with a previously active IPsec Phase-1 IKE Tunnel. IkeTunnelHistEntry .1.3.6.1.3.171.1.4.2.1.1 |
ikeTunHistIndexThe index of the IPsec Phase-1 IKE Tunnel History Table. The value of the index is a number which begins at one and is incremented with each tunnel that ends. The value of this object will wrap at 2,147,483,647. Integer32 .1.3.6.1.3.171.1.4.2.1.1.1 |
ikeTunHistTermReasonThe reason the IPsec Phase-1 IKE Tunnel was terminated. Possible reasons include: 1 = other 2 = normal termination 3 = operator request 4 = peer delete request was received 5 = contact with peer was lost 6 = applicationInitiated (eg: L2TP requesting the termination) 7 = failure of extended authentication 8 = local failure occurred. 9 = operator initiated check point requestro Enumeration .1.3.6.1.3.171.1.4.2.1.1.2 |
ikeTunHistActiveIndexThe index of the previously active IPsec Phase-1 IKE Tunnel.ro Integer32 .1.3.6.1.3.171.1.4.2.1.1.3 |
ikeTunHistPeerLocalTypeThe type of local peer identity. The local peer may be indentified by: 1. an IP address, or 2. or a fully qualified domain name. 3. or a distinguished name.ro Phase1PeerIdentityType (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.4.2.1.1.4 |
ikeTunHistPeerLocalValueThe value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is id-fqdn, then this is the FQDN of the local entity. If the local peer type is a id-dn, then this is the distinguished named string of the local entity.ro DisplayString (SNMPv2-TC) .1.3.6.1.3.171.1.4.2.1.1.5 |
ikeTunHistPeerIntIndexThe internal index of the local-remote peer association. This internal index is used to uniquely identify multiple associations between the local and remote peer.ro Integer32 .1.3.6.1.3.171.1.4.2.1.1.6 |
ikeTunHistPeerRemoteTypeThe type of remote peer identity. The remote peer may be indentified by: 1. an IP address, or 2. or a fully qualified domain name. 3. or a distinguished name.ro Phase1PeerIdentityType (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.4.2.1.1.7 |
ikeTunHistPeerRemoteValueThe value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is id-fqdn, then this is the FQDN of the remote peer. If the remote peer type is a id-dn, then this is the distinguished named string of the remote peer.ro DisplayString (SNMPv2-TC) .1.3.6.1.3.171.1.4.2.1.1.8 |
ikeTunHistLocalAddrThe IP address of the local endpoint for the IPsec Phase-1 IKE Tunnel.ro IPSIpAddress .1.3.6.1.3.171.1.4.2.1.1.9 |
ikeTunHistLocalNameThe DNS name of the local IP address for the IPsec Phase-1 IKE Tunnel. If the DNS name associated with the local tunnel endpoint is not known, then the value of this object will be a NULL string.ro DisplayString (SNMPv2-TC) .1.3.6.1.3.171.1.4.2.1.1.10 |
ikeTunHistRemoteAddrThe IP address of the remote endpoint for the IPsec Phase-1 IKE Tunnel.ro IPSIpAddress .1.3.6.1.3.171.1.4.2.1.1.11 |
ikeTunHistRemoteNameThe DNS name of the remote IP address of IPsec Phase-1 IKE Tunnel. If the DNS name associated with the remote tunnel endpoint is not known, then the value of this object will be a NULL string.ro DisplayString (SNMPv2-TC) .1.3.6.1.3.171.1.4.2.1.1.12 |
ikeTunHistNegoModeThe negotiation mode of the IPsec Phase-1 IKE Tunnel.ro IkeNegoMode (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.4.2.1.1.13 |
ikeTunHistDiffHellmanGrpThe Diffie Hellman Group used in IPsec Phase-1 IKE negotiations.ro DiffHellmanGrp (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.4.2.1.1.14 |
ikeTunHistEncryptAlgoThe encryption algorithm used in IPsec Phase-1 IKE negotiations.ro EncryptAlgo (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.4.2.1.1.15 |
ikeTunHistHashAlgoThe hash algorithm used in IPsec Phase-1 IKE negotiations.ro IkeHashAlgo (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.4.2.1.1.16 |
ikeTunHistAuthMethodThe authentication method used in IPsec Phase-1 IKE negotiations.ro IkeAuthMethod (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.4.2.1.1.17 |
ikeTunHistLifeTimeThe negotiated LifeTime of the IPsec Phase-1 IKE Tunnel in seconds.ro Integer32 .1.3.6.1.3.171.1.4.2.1.1.18 |
ikeTunHistStartTimeThe value of sysUpTime in hundredths of seconds when the IPsec Phase-1 IKE tunnel was started.ro TimeStamp (SNMPv2-TC) .1.3.6.1.3.171.1.4.2.1.1.19 |
ikeTunHistActiveTimeThe length of time the IPsec Phase-1 IKE tunnel was been active in hundredths of seconds.ro TimeInterval (SNMPv2-TC) .1.3.6.1.3.171.1.4.2.1.1.20 |
ikeTunHistTotalRefreshesThe total number of security associations refreshes performed.ro Counter32 UNITS "QM Exchanges" .1.3.6.1.3.171.1.4.2.1.1.21 |
ikeTunHistTotalSasThe total number of security associations used during the life of the IPsec Phase-1 IKE Tunnel.ro Counter32 UNITS "SAs" .1.3.6.1.3.171.1.4.2.1.1.22 |
ikeTunHistInOctetsThe total number of octets received by this IPsec Phase-1 IKE Tunnel.ro Counter32 UNITS "Octets" .1.3.6.1.3.171.1.4.2.1.1.23 |
ikeTunHistInPktsThe total number of packets received by this IPsec Phase-1 IKE Tunnel.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.4.2.1.1.24 |
ikeTunHistInDropPktsThe total number of packets dropped by this IPsec Phase-1 IKE Tunnel during receive processing.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.4.2.1.1.25 |
ikeTunHistInNotifysThe total number of notifys received by this IPsec Phase-1 IKE Tunnel.ro Counter32 UNITS "Notification Payloads" .1.3.6.1.3.171.1.4.2.1.1.26 |
ikeTunHistInP2ExchgsThe total number of IPsec Phase-2 exchanges received by this IPsec Phase-1 IKE Tunnel.ro Counter32 UNITS "SA Payloads" .1.3.6.1.3.171.1.4.2.1.1.27 |
ikeTunHistInP2ExchgInvalidsThe total number of IPsec Phase-2 exchanges received on this tunnel that were found to contain references to unrecognized security parameters.ro Counter32 UNITS "SA Payloads" .1.3.6.1.3.171.1.4.2.1.1.28 |
ikeTunHistInP2ExchgRejectsThe total number of IPsec Phase-2 exchanges received on this tunnel that were validated but were rejected by the local policy.ro Counter32 UNITS "SA Payloads" .1.3.6.1.3.171.1.4.2.1.1.29 |
ikeTunHistInP2SaDelRequestsThe total number of IPsec Phase-2 security association delete requests received by this IPsec Phase-1 IKE Tunnel.ro Counter32 UNITS "Notification Payloads" .1.3.6.1.3.171.1.4.2.1.1.30 |
ikeTunHistOutOctetsThe total number of octets sent by this IPsec Phase-1 IKE Tunnel.ro Counter32 UNITS "Octets" .1.3.6.1.3.171.1.4.2.1.1.31 |
ikeTunHistOutPktsThe total number of packets sent by this IPsec Phase-1 IKE Tunnel.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.4.2.1.1.32 |
ikeTunHistOutDropPktsThe total number of packets dropped by this IPsec Phase-1 IKE Tunnel during send processing.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.4.2.1.1.33 |
ikeTunHistOutNotifysThe total number of notifys sent by this IPsec Phase-1 IKE Tunnel.ro Counter32 UNITS "Notification Payloads" .1.3.6.1.3.171.1.4.2.1.1.34 |
ikeTunHistOutP2ExchgsThe total number of IPsec Phase-2 exchanges sent by this IPsec Phase-1 IKE Tunnel.ro Counter32 UNITS "SA Payloads" .1.3.6.1.3.171.1.4.2.1.1.35 |
ikeTunHistOutP2ExchgInvalidsThe total number of IPsec Phase-2 exchanges sent on this tunnel that were found by the peer to contain references to security parameters not recognized by the peer.ro Counter32 UNITS "SA Payloads" .1.3.6.1.3.171.1.4.2.1.1.36 |
ikeTunHistOutP2ExchgRejectsThe total number of IPsec Phase-2 exchanges sent on this tunnel that were validated by the peer but were rejected by the peer's policy.ro Counter32 UNITS "SA Payloads" .1.3.6.1.3.171.1.4.2.1.1.37 |
ikeTunHistOutP2SaDelRequestsThe total number of IPsec Phase-2 security association delete requests sent by this IPsec Phase-1 IKE Tunnel.ro Counter32 UNITS "Notification Payloads" .1.3.6.1.3.171.1.4.2.1.1.38 |
ikeTunHistInNewGrpReqsThe total number of New Group exchanges initiated remotely using this IKE tunnel during its lifetime.ro Counter32 UNITS "Negotiations" .1.3.6.1.3.171.1.4.2.1.1.39 |
ikeTunHistOutNewGrpReqsThe total number of New Group exchanges initiated locally using this IKE tunnel during its lifetime.ro Counter32 UNITS "Negotiations" .1.3.6.1.3.171.1.4.2.1.1.40 |
ikeTunHistInNewGrpReqsRejectedThe total number of New Group exchanges initiated remotely using this IKE tunnel during its lifetime that ended in a failure.ro Counter32 UNITS "Negotiations" .1.3.6.1.3.171.1.4.2.1.1.41 |
ikeTunHistOutNewGrpReqsRejectedThe total number of New Group exchanges initiated locally using this IKE tunnel during its lifetime that ended in a failure.ro Counter32 UNITS "Negotiations" .1.3.6.1.3.171.1.4.2.1.1.42 |
ikeTunHistInConfigsThe total number of Mode Configuration settings received (either CFG-REPLY or CFG-SET payloads) by the local entity on the ISAKMP SA represented by this IKE tunnel.ro Counter32 UNITS "Mode Configuration Setting Payloads" .1.3.6.1.3.171.1.4.2.1.1.43 |
ikeTunHistOutConfigsThe total number of Mode Configuration settings dispatched (either CFG-REPLY or CFG-SET payloads) by the local entity on the ISAKMP SA represented by this IKE tunnel.ro Counter32 UNITS "Mode Configuration Setting Payloads" .1.3.6.1.3.171.1.4.2.1.1.44 |
ikeTunHistInConfigsRejectsThe total number of Mode Configuration settings which were received (either CFG-REPLY or CFG-SET payloads) and rejected by this entity using the ISAKMP SA represented by this IKE tunnel.ro Counter32 UNITS "Mode Configuration Setting Payloads" .1.3.6.1.3.171.1.4.2.1.1.45 |
ikeTunHistOutConfigsRejectsThe total number of Mode Configuration settings which were dispatched (either CFG-REPLY or CFG-SET payloads) by this entity and were rejected by the peer (client) using the ISAKMP SA represented by this IKE tunnel.ro Counter32 UNITS "Mode Configuration Setting Payloads" .1.3.6.1.3.171.1.4.2.1.1.46 |
ikeTunHistEncryptKeySizeThe size in bits of the key which was negotiated for the IKE tunnel to be used with the algorithm denote by the column 'ikeTunEncryptAlgo'. For DES and 3DES the ke size is respectively 56 and 168. For AES, this will denot the negotiated key size.ro Integer32 UNITS "Bits" .1.3.6.1.3.171.1.4.2.1.1.47 |
ipSecHistPhaseTwo OBJECT IDENTIFIER .1.3.6.1.3.171.1.4.3 |
ipSecTunnelHistTableThe IPsec Phase-2 Tunnel History Table. This table is implemented as a sliding window in which only the last n entries are maintained. The maximum number of entries is specified by the ipSecHistTableSize object. SEQUENCE OF IpSecTunnelHistEntry .1.3.6.1.3.171.1.4.3.1 |
ipSecTunnelHistEntryEach entry contains the attributes associated with a previously active IPsec Phase-2 Tunnel. IpSecTunnelHistEntry .1.3.6.1.3.171.1.4.3.1.1 |
ipSecTunHistIndexThe index of the IPsec Phase-2 Tunnel History Table. The value of the index is a number which begins at one and is incremented with each tunnel that ends. The value of this object will wrap at 2,147,483,647. Integer32 .1.3.6.1.3.171.1.4.3.1.1.1 |
ipSecTunHistTermReasonThe reason the IPsec Phase-2 Tunnel was terminated. Possible reasons include: 1 = other 2 = normal termination 3 = operator request 4 = peer delete request was received 5 = contact with peer was lost 6 = applicationInitiated (eg: L2TP requesting the termination) 7 = failure of extended authentication 8 = local failure occurred 9 = operator initiated check point requestro Enumeration .1.3.6.1.3.171.1.4.3.1.1.2 |
ipSecTunHistActiveIndexThe index of the previously active IPsec Phase-2 Tunnel.ro Integer32 .1.3.6.1.3.171.1.4.3.1.1.3 |
ipSecTunHistIkeTunnelIndexThe index of the associated IPsec Phase-1 Tunnel (ikeTunIndex in the ikeTunnelTable).rodeprecated Integer32 .1.3.6.1.3.171.1.4.3.1.1.4 |
ipSecTunHistLocalAddrThe IP address of the local endpoint for the IPsec Phase-2 Tunnel.ro IPSIpAddress .1.3.6.1.3.171.1.4.3.1.1.5 |
ipSecTunHistRemoteAddrThe IP address of the remote endpoint for the IPsec Phase-2 Tunnel.ro IPSIpAddress .1.3.6.1.3.171.1.4.3.1.1.6 |
ipSecTunHistKeyTypeThe type of key used by the IPsec Phase-2 Tunnel.rodeprecated KeyType .1.3.6.1.3.171.1.4.3.1.1.7 |
ipSecTunHistEncapModeThe encapsulation mode used by the IPsec Phase-2 Tunnel.ro EncapMode (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.4.3.1.1.8 |
ipSecTunHistLifeSizeThe negotiated LifeSize of the IPsec Phase-2 Tunnel in kilobytes.ro Integer32 .1.3.6.1.3.171.1.4.3.1.1.9 |
ipSecTunHistLifeTimeThe negotiated LifeTime of the IPsec Phase-2 Tunnel in seconds.ro Integer32 .1.3.6.1.3.171.1.4.3.1.1.10 |
ipSecTunHistStartTimeThe value of sysUpTime in hundredths of seconds when the IPsec Phase-2 Tunnel was started.ro TimeStamp (SNMPv2-TC) .1.3.6.1.3.171.1.4.3.1.1.11 |
ipSecTunHistActiveTimeThe length of time the IPsec Phase-2 Tunnel has been active in hundredths of seconds.ro TimeInterval (SNMPv2-TC) .1.3.6.1.3.171.1.4.3.1.1.12 |
ipSecTunHistTotalRefreshesThe total number of security association refreshes performed.ro Counter32 UNITS "QM Exchanges" .1.3.6.1.3.171.1.4.3.1.1.13 |
ipSecTunHistTotalSasThe total number of security associations used during the life of the IPsec Phase-2 Tunnel.ro Counter32 UNITS "SAs" .1.3.6.1.3.171.1.4.3.1.1.14 |
ipSecTunHistInSaDiffHellmanGrpThe Diffie Hellman Group used by the inbound security association of the IPsec Phase-2 Tunnel.ro DiffHellmanGrp (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.4.3.1.1.15 |
ipSecTunHistInSaEncryptAlgoThe encryption algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.ro EncryptAlgo (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.4.3.1.1.16 |
ipSecTunHistInSaAhAuthAlgoThe authentication algorithm used by the inbound authentication header (AH) security association of the IPsec Phase-2 Tunnel.ro AuthAlgo (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.4.3.1.1.17 |
ipSecTunHistInSaEspAuthAlgoThe authentication algorithm used by the inbound encapsulation security protocol (ESP) security association of the IPsec Phase-2 Tunnel.ro AuthAlgo (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.4.3.1.1.18 |
ipSecTunHistInSaDecompAlgoThe decompression algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.ro CompAlgo (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.4.3.1.1.19 |
ipSecTunHistOutSaDiffHellmanGrpThe Diffie Hellman Group used by the outbound security association of the IPsec Phase-2 Tunnel.ro DiffHellmanGrp (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.4.3.1.1.20 |
ipSecTunHistOutSaEncryptAlgoThe encryption algorithm used by the outbound security association of the IPsec Phase-2 Tunnel.ro EncryptAlgo (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.4.3.1.1.21 |
ipSecTunHistOutSaAhAuthAlgoThe authentication algorithm used by the outbound authentication header (AH) security association of the IPsec Phase-2 Tunnel.ro AuthAlgo (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.4.3.1.1.22 |
ipSecTunHistOutSaEspAuthAlgoThe authentication algorithm used by the inbound ecapsulation security protocol (ESP) security association of the IPsec Phase-2 Tunnel.ro AuthAlgo (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.4.3.1.1.23 |
ipSecTunHistOutSaCompAlgoThe compression algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.ro CompAlgo (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.4.3.1.1.24 |
ipSecTunHistPmtuThe Path MTU that was determined for this IPsec Phase-2 tunnel.ro Integer32 .1.3.6.1.3.171.1.4.3.1.1.25 |
ipSecTunHistInOctetsThe total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed. See also ipSecTunInOctWraps for the number of times this counter has wrapped.ro Counter32 UNITS "Octets" .1.3.6.1.3.171.1.4.3.1.1.26 |
ipSecTunHistHcInOctetsA high capacity count of the total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed.ro Counter64 .1.3.6.1.3.171.1.4.3.1.1.27 |
ipSecTunHistInOctWrapsThe number of times the octets received counter (ipSecTunInOctets) has wrapped.ro Counter32 UNITS "Integral units" .1.3.6.1.3.171.1.4.3.1.1.28 |
ipSecTunHistInDecompOctetsThe total number of decompressed octets received by this IPsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of ipSecTunInOctets. See also ipSecTunInDecompOctWraps for the number of times this counter has wrapped.ro Counter32 UNITS "Octets" .1.3.6.1.3.171.1.4.3.1.1.29 |
ipSecTunHistHcInDecompOctetsA high capacity count of the total number of decompressed octets received by this IPsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of ipSecTunHcInOctets.ro Counter64 .1.3.6.1.3.171.1.4.3.1.1.30 |
ipSecTunHistInDecompOctWrapsThe number of times the decompressed octets received counter (ipSecTunInDecompOctets) has wrapped.ro Counter32 UNITS "Integral units" .1.3.6.1.3.171.1.4.3.1.1.31 |
ipSecTunHistInPktsThe total number of packets received by this IPsec Phase-2 Tunnel.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.4.3.1.1.32 |
ipSecTunHistInDropPktsThe total number of packets dropped during receive processing by this IPsec Phase-2 Tunnel. This count does NOT include packets dropped due to Anti-Replay processing.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.4.3.1.1.33 |
ipSecTunHistInReplayDropPktsThe total number of packets dropped during receive processing due to Anti-Replay processing by this IPsec Phase-2 Tunnel.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.4.3.1.1.34 |
ipSecTunHistInAuthsThe total number of inbound authentication's performed by this IPsec Phase-2 Tunnel.ro Counter32 UNITS "Events" .1.3.6.1.3.171.1.4.3.1.1.35 |
ipSecTunHistInAuthFailsThe total number of inbound authentication's which ended in failure by this IPsec Phase-2 Tunnel .ro Counter32 UNITS "Failures" .1.3.6.1.3.171.1.4.3.1.1.36 |
ipSecTunHistInDecryptsThe total number of inbound decryption's performed by this IPsec Phase-2 Tunnel.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.4.3.1.1.37 |
ipSecTunHistInDecryptFailsThe total number of inbound decryption's which ended in failure by this IPsec Phase-2 Tunnel.ro Counter32 UNITS "Failures" .1.3.6.1.3.171.1.4.3.1.1.38 |
ipSecTunHistOutOctetsThe total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed. See also ipSecTunOutOctWraps for the number of times this counter has wrapped.ro Counter32 UNITS "Octets" .1.3.6.1.3.171.1.4.3.1.1.39 |
ipSecTunHistHcOutOctetsA high capacity count of the total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed.ro Counter64 .1.3.6.1.3.171.1.4.3.1.1.40 |
ipSecTunHistOutOctWrapsThe number of times the octets sent counter (ipSecTunOutOctets) has wrapped.ro Counter32 UNITS "Integral units" .1.3.6.1.3.171.1.4.3.1.1.41 |
ipSecTunHistOutUncompOctetsThe total number of uncompressed octets sent by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of ipSecTunOutOctets. See also ipSecTunOutDecompOctWraps for the number of times this counter has wrapped.ro Counter32 UNITS "Octets" .1.3.6.1.3.171.1.4.3.1.1.42 |
ipSecTunHistHcOutUncompOctetsA high capacity count of the total number of uncompressed octets sent by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of ipSecTunHcOutOctets.ro Counter64 UNITS "Octets" .1.3.6.1.3.171.1.4.3.1.1.43 |
ipSecTunHistOutUncompOctWrapsThe number of times the uncompressed octets sent counter (ipSecTunOutUncompOctets) has wrapped.ro Counter32 UNITS "Integral units" .1.3.6.1.3.171.1.4.3.1.1.44 |
ipSecTunHistOutPktsThe total number of packets sent by this IPsec Phase-2 Tunnel.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.4.3.1.1.45 |
ipSecTunHistOutDropPktsThe total number of packets dropped during send processing by this IPsec Phase-2 Tunnel.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.4.3.1.1.46 |
ipSecTunHistOutAuthsThe total number of outbound authentication's performed by this IPsec Phase-2 Tunnel.ro Counter32 UNITS "Events" .1.3.6.1.3.171.1.4.3.1.1.47 |
ipSecTunHistOutAuthFailsThe total number of outbound authentication's which ended in failure by this IPsec Phase-2 Tunnel.ro Counter32 UNITS "Failures" .1.3.6.1.3.171.1.4.3.1.1.48 |
ipSecTunHistOutEncryptsThe total number of outbound encryption's performed by this IPsec Phase-2 Tunnel.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.4.3.1.1.49 |
ipSecTunHistOutEncryptFailsThe total number of outbound encryption's which ended in failure by this IPsec Phase-2 Tunnel.ro Counter32 UNITS "Failures" .1.3.6.1.3.171.1.4.3.1.1.50 |
ipSecTunHistOutCompressedPktsThe total number of outbound packets which were successfully compressed.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.4.3.1.1.51 |
ipSecTunHistOutCompSkippedPktsThe total number of outbound packets that were to be compressed but which were skipped due to the compression hysteresis.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.4.3.1.1.52 |
ipSecTunHistOutCompFailPktsThe total number of outbound packets that failed compression because they grew in size after compression.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.4.3.1.1.53 |
ipSecTunHistOutCompTooSmallPktsThe total number of outbound packets that were to be compressed but were smaller than the compression threshold size.ro Counter32 UNITS "Packets" .1.3.6.1.3.171.1.4.3.1.1.54 |
ipSecTunHistControlProtocolIdentifies the protocol that was used to setup and administer Phase-2 IPsec tunnel. If IKE was used to setup this tunnel, then this value of this column would be `cp-ike'.ro ControlProtocol (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.4.3.1.1.55 |
ipSecTunHistControlTunnelIndexThe index of the IPsec Phase-1 Tunnel that spawned this Phase-2 tunnel (in case of IKE, this value would refer t ikeTunIndex in the ikeTunnelTable)ro Integer32 .1.3.6.1.3.171.1.4.3.1.1.56 |
ipSecTunHistInSaEncryptKeySizeThe size in bits of the key which was negotiated to be use with the encryption transform used with this tunnel denote by ipSecTunHistInSaEncryptAlgo. For DES and 3DES the key size is respectively 56 and 168. For AES, this will denote the negotiated key size.ro Integer32 UNITS "Bits" .1.3.6.1.3.171.1.4.3.1.1.57 |
ipSecTunHistOutSaEncryptKeySizeThe size in bits of the key which was negotiated to be use with the encryption transform used with this tunnel denote by ipSecTunHistOutSaEncryptAlgo. For DES and 3DES the key size is respectively 56 and 168. For AES, this will denote the negotiated key size.ro Integer32 UNITS "Bits" .1.3.6.1.3.171.1.4.3.1.1.58 |
ipSecEndPtHistTableThe IPsec Phase-2 Tunnel Endpoint History Table. This table is implemented as a sliding window in which only the last n entries are maintained. The maximum number of entries is specified by the ipSecHistTableSize object. SEQUENCE OF IpSecEndPtHistEntry .1.3.6.1.3.171.1.4.3.2 |
ipSecEndPtHistEntryEach entry contains the attributes associated with a previously active IPsec Phase-2 Tunnel Endpoint. IpSecEndPtHistEntry .1.3.6.1.3.171.1.4.3.2.1 |
ipSecEndPtHistIndexThe number of the previously active Endpoint associated with a IPsec Phase-2 Tunnel Table. The value of this index is a number which begins at one and is incremented with each Endpoint associated with an IPsec Phase-2 Tunnel. The value of this object will wrap at 2,147,483,647. Integer32 .1.3.6.1.3.171.1.4.3.2.1.1 |
ipSecEndPtHistTunIndexThe index of the previously active IPsec Phase-2 Tunnel Table.ro Integer32 .1.3.6.1.3.171.1.4.3.2.1.2 |
ipSecEndPtHistActiveIndexThe index of the previously active Endpoint.ro Integer32 .1.3.6.1.3.171.1.4.3.2.1.3 |
ipSecEndPtHistLocalNameThe DNS name of the local Endpoint.ro DisplayString (SNMPv2-TC) .1.3.6.1.3.171.1.4.3.2.1.4 |
ipSecEndPtHistLocalTypeThe type of identity for the local Endpoint. Possible values are: 1) a single IP address, or 2) an IP address range, or 3) an IP subnet.ro EndPtType --INTEGER { --singleIpAddr(1), --ipAddrRange(2), --ipSubnet(3) --} .1.3.6.1.3.171.1.4.3.2.1.5 |
ipSecEndPtHistLocalAddr1The local Endpoint's first IP address specification. If the local Endpoint type is single IP address, then this is the value of the IP address. If the local Endpoint type is IP subnet, then this is the value of the subnet. If the local Endpoint type is IP address range, then this is the value of beginning IP address of the range.ro IPSIpAddress .1.3.6.1.3.171.1.4.3.2.1.6 |
ipSecEndPtHistLocalAddr2The local Endpoint's second IP address specification. If the local Endpoint type is single IP address, then this is the value of the IP address. If the local Endpoint type is IP subnet, then this is the value of the subnet mask. If the local Endpoint type is IP address range, then this is the value of ending IP address of the range.ro IPSIpAddress .1.3.6.1.3.171.1.4.3.2.1.7 |
ipSecEndPtHistLocalProtocolThe protocol number of the local Endpoint's traffic.ro Integer32 .1.3.6.1.3.171.1.4.3.2.1.8 |
ipSecEndPtHistLocalPortThe port number of the local Endpoint's traffic.ro Integer32 .1.3.6.1.3.171.1.4.3.2.1.9 |
ipSecEndPtHistRemoteNameThe DNS name of the remote Endpoint.ro DisplayString (SNMPv2-TC) .1.3.6.1.3.171.1.4.3.2.1.10 |
ipSecEndPtHistRemoteTypeThe type of identity for the remote Endpoint. Possible values are: 1) a single IP address, or 2) an IP address range, or 3) an IP subnet.ro EndPtType --INTEGER { --singleIpAddr(1), --ipAddrRange(2), --ipSubnet(3) --} .1.3.6.1.3.171.1.4.3.2.1.11 |
ipSecEndPtHistRemoteAddr1The remote Endpoint's first IP address specification. If the remote Endpoint type is single IP address, then this is the value of the IP address. If the remote Endpoint type is IP subnet, then this is the value of the subnet. If the remote Endpoint type is IP address range, then this is the value of beginning IP address of the range.ro IPSIpAddress .1.3.6.1.3.171.1.4.3.2.1.12 |
ipSecEndPtHistRemoteAddr2The remote Endpoint's second IP address specification. If the remote Endpoint type is single IP address, then this is the value of the IP address. If the remote Endpoint type is IP subnet, then this is the value of the subnet mask. If the remote Endpoint type is IP address range, then this is the value of ending IP address of the range.ro IPSIpAddress .1.3.6.1.3.171.1.4.3.2.1.13 |
ipSecEndPtHistRemoteProtocolThe protocol number of the remote Endpoint's traffic.ro Integer32 .1.3.6.1.3.171.1.4.3.2.1.14 |
ipSecEndPtHistRemotePortThe port number of the remote Endpoint's traffic.ro Integer32 .1.3.6.1.3.171.1.4.3.2.1.15 |
ipSecFailures OBJECT IDENTIFIER .1.3.6.1.3.171.1.5 |
ipSecFailGlobal OBJECT IDENTIFIER .1.3.6.1.3.171.1.5.1 |
ipSecFailGlobalCntl OBJECT IDENTIFIER .1.3.6.1.3.171.1.5.1.1 |
ipSecFailTableSizeThe window size of the IPsec Phase-1 and Phase-2 Failure Tables. The IPsec Phase-1 and Phase-2 Failure Tables are implemented as a sliding window in which only the last N entries are maintained. This object is used specify the number of entries which will be maintained in the IPsec Phase-1 and Phase-2 Failure Tables. An implementation may choose suitable minimum and maximum values for this element based on the local policy and available resources. If an SNMP SET request specifies a value outside this window for this element, a BAD VALUE may be returned.rw Integer32 .1.3.6.1.3.171.1.5.1.1.1 |
ipSecFailPhaseOne OBJECT IDENTIFIER .1.3.6.1.3.171.1.5.2 |
ikeFailTableThe IPsec Phase-1 Failure Table. This table is implemented as a sliding window in which only the last n entries are maintained. The maximum number of entries is specified by the ipSecFailTableSize object. SEQUENCE OF IkeFailEntry .1.3.6.1.3.171.1.5.2.1 |
ikeFailEntryEach entry contains the attributes associated with an IPsec Phase-1 failure. IkeFailEntry .1.3.6.1.3.171.1.5.2.1.1 |
ikeFailIndexThe IPsec Phase-1 Failure Table index. The value of the index is a number which begins at one and is incremented with each IPsec Phase-1 failure. The value of this object will wrap at 2,147,483,647. Integer32 .1.3.6.1.3.171.1.5.2.1.1.1 |
ikeFailReasonThe reason for the failure. Possible reasons include: 1 = other 2 = peer delete request was received 3 = contact with peer was lost 4 = local failure occurred 5 = authentication failure 6 = hash validation failure 7 = encryption failure 8 = internal error occurred 9 = system capacity failure 10 = proposal failure 11 = peer's certificate is unavailable 12 = peer's certificate was found invalid 13 = local certificate expired 14 = certificate revoke list (crl) failure 15 = peer encoding error 16 = ISAKMP PDU has pointer to non-existent cookie 17 = operator requested termination.ro Enumeration .1.3.6.1.3.171.1.5.2.1.1.2 |
ikeFailTimeThe value of sysUpTime in hundredths of seconds at the time of the failure.ro TimeStamp (SNMPv2-TC) .1.3.6.1.3.171.1.5.2.1.1.3 |
ikeFailLocalTypeThe type of local peer identity. The local peer may be indentified by: 1. an IP address, or 2. or a fully qualified domain name. 3. or a distinguished name.ro Phase1PeerIdentityType (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.5.2.1.1.4 |
ikeFailLocalValueThe value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is id-fqdn, then this is the FQDN of the local entity. If the local peer type is a id-dn, then this is the distinguished named string of the local entity.ro DisplayString (SNMPv2-TC) .1.3.6.1.3.171.1.5.2.1.1.5 |
ikeFailRemoteTypeThe type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name. 3. or a distinguished name.ro Phase1PeerIdentityType (IPSEC-FLOW-MIB-TC) .1.3.6.1.3.171.1.5.2.1.1.6 |
ikeFailRemoteValueThe value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is id-fqdn, then this is the FQDN of the remote peer. If the remote peer type is a id-dn, then this is the distinguished named string of the remote peer.ro DisplayString (SNMPv2-TC) .1.3.6.1.3.171.1.5.2.1.1.7 |
ikeFailLocalAddrThe IP address of the local peer.ro IPSIpAddress .1.3.6.1.3.171.1.5.2.1.1.8 |
ikeFailRemoteAddrThe IP address of the remote peer.ro IPSIpAddress .1.3.6.1.3.171.1.5.2.1.1.9 |
ipSecFailPhaseTwo OBJECT IDENTIFIER .1.3.6.1.3.171.1.5.3 |
ipSecFailTableThe IPsec Phase-2 Failure Table. This table is implemented as a sliding window in which only the last n entries are maintained. The maximum number of entries is specified by the ipSecFailTableSize object. SEQUENCE OF IpSecFailEntry .1.3.6.1.3.171.1.5.3.1 |
ipSecFailEntryEach entry contains the attributes associated with an IPsec Phase-1 failure. IpSecFailEntry .1.3.6.1.3.171.1.5.3.1.1 |
ipSecFailIndexThe IPsec Phase-2 Failure Table index. The value of the index is a number which begins at one and is incremented with each IPsec Phase-1 failure. The value of this object will wrap at 2,147,483,647. Integer32 .1.3.6.1.3.171.1.5.3.1.1.1 |
ipSecFailReasonThe reason for the failure. Possible reasons include: 1 = other 2 = internal error occurred 3 = peer encoding error 4 = proposal failure 5 = protocol use failure 6 = non-existent security association 7 = decryption failure 8 = encryption failure 9 = inbound authentication failure 10 = outbound authentication failure 11 = compression failure 12 = system capacity failure 13 = peer delete request was received 14 = contact with peer was lost 15 = sequence number rolled over 16 = operator requested termination.ro Enumeration .1.3.6.1.3.171.1.5.3.1.1.2 |
ipSecFailTimeThe value of sysUpTime in hundredths of seconds at the time of the failure.ro TimeStamp (SNMPv2-TC) .1.3.6.1.3.171.1.5.3.1.1.3 |
ipSecFailTunnelIndexThe Phase-2 Tunnel index (ipSecTunIndex).ro Integer32 .1.3.6.1.3.171.1.5.3.1.1.4 |
ipSecFailSaSpiThe security association SPI value.ro Integer32 .1.3.6.1.3.171.1.5.3.1.1.5 |
ipSecFailPktSrcAddrThe packet's source IP address.ro IPSIpAddress .1.3.6.1.3.171.1.5.3.1.1.6 |
ipSecFailPktDstAddrThe packet's destination IP address.ro IPSIpAddress .1.3.6.1.3.171.1.5.3.1.1.7 |
ipSecTrapCntl OBJECT IDENTIFIER .1.3.6.1.3.171.1.6 |
ipSecTrapCntlIkeTunnelStartThis object defines the administrative state of sending the IPsec IKE Phase-1 Tunnel Start TRAPrw TrapStatus .1.3.6.1.3.171.1.6.1 |
ipSecTrapCntlIkeTunnelStopThis object defines the administrative state of sending the IPsec IKE Phase-1 Tunnel Stop TRAPrw TrapStatus .1.3.6.1.3.171.1.6.2 |
ipSecTrapCntlIkeSysFailureThis object defines the administrative state of sending the IPsec IKE Phase-1 System Failure TRAPrw TrapStatus .1.3.6.1.3.171.1.6.3 |
ipSecTrapCntlIkeCertCrlFailureThis object defines the administrative state of sending the IPsec IKE Phase-1 Certificate/CRL Failure TRAPrw TrapStatus .1.3.6.1.3.171.1.6.4 |
ipSecTrapCntlIkeProtocolFailThis object defines the administrative state of sending the IPsec IKE Phase-1 Protocol Failure TRAPrw TrapStatus .1.3.6.1.3.171.1.6.5 |
ipSecTrapCntlIkeNoSaThis object defines the administrative state of sending the IPsec IKE Phase-1 No Security Association TRAP.rw TrapStatus .1.3.6.1.3.171.1.6.6 |
ipSecTrapCntlIpSecTunnelStartThis object defines the administrative state of sending the IPsec Phase-2 Tunnel Start TRAPrw TrapStatus .1.3.6.1.3.171.1.6.7 |
ipSecTrapCntlIpSecTunnelStopThis object defines the administrative state of sending the IPsec Phase-2 Tunnel Stop TRAPrw TrapStatus .1.3.6.1.3.171.1.6.8 |
ipSecTrapCntlIpSecSysFailureThis object defines the administrative state of sending the IPsec Phase-2 System Failure TRAPrw TrapStatus .1.3.6.1.3.171.1.6.9 |
ipSecTrapCntlIpSecSetUpFailureThis object defines the administrative state of sending the IPsec Phase-2 Set Up Failure TRAPrw TrapStatus .1.3.6.1.3.171.1.6.10 |
ipSecTrapCntlIpSecEarlyTunTermThis object defines the administrative state of sending the IPsec Phase-2 Early Tunnel Termination TRAPrw TrapStatus .1.3.6.1.3.171.1.6.11 |
ipSecTrapCntlIpSecProtocolFailThis object defines the administrative state of sending the IPsec Phase-2 Protocol Failure TRAPrw TrapStatus .1.3.6.1.3.171.1.6.12 |
ipSecTrapCntlIpSecNoSaThis object defines the administrative state of sending the IPsec Phase-2 No Security Association TRAPrw TrapStatus .1.3.6.1.3.171.1.6.13 |
ipSecTrapCntlInNewGrpRejectedThis object defines the administrative state of sending the IPsec Phase-2 No Security Association TRAPrw TrapStatus .1.3.6.1.3.171.1.6.14 |
ipSecTrapCntlOutNewGrpRejectedThis object defines the administrative state of sending the IPsec Phase-2 No Security Association TRAPrw TrapStatus .1.3.6.1.3.171.1.6.15 |
ipSecMIBNotificationPrefix OBJECT IDENTIFIER .1.3.6.1.3.171.2 |
ipSecMIBNotifications OBJECT IDENTIFIER .1.3.6.1.3.171.2.0 |
ikeTunnelStartThis notification is generated when an IPsec Phase-1 IKE Tunnel becomes active. NOTIFICATION-TYPE .1.3.6.1.3.171.2.0.1 |
ikeTunnelStopThis notification is generated when an IPsec Phase-1 IKE Tunnel becomes inactive. NOTIFICATION-TYPE .1.3.6.1.3.171.2.0.2 |
ikeSysFailureThis notification is generated when the processing for an IPsec Phase-1 IKE Tunnel experiences an internal or system capacity error. NOTIFICATION-TYPE .1.3.6.1.3.171.2.0.3 |
ikeCertCrlFailureThis notification is generated when the processing for an IPsec Phase-1 IKE Tunnel experiences a Certificate or a Certificate Revoke List (CRL) related error. NOTIFICATION-TYPE .1.3.6.1.3.171.2.0.4 |
ikeProtocolFailureThis notification is generated when the processing for an IPsec Phase-1 IKE Tunnel experiences a protocol related error. NOTIFICATION-TYPE .1.3.6.1.3.171.2.0.5 |
ikeNoSaThis notification is generated when the IKE entity recieves an ISAKMP PDU with a reference to a non-existent cookie. NOTIFICATION-TYPE .1.3.6.1.3.171.2.0.6 |
ipSecTunnelStartThis notification is generated when an IPsec Phase-2 Tunnel becomes active. NOTIFICATION-TYPE .1.3.6.1.3.171.2.0.7 |
ipSecTunnelStopThis notification is generated when an IPsec Phase-2 Tunnel becomes inactive. NOTIFICATION-TYPE .1.3.6.1.3.171.2.0.8 |
ipSecSysFailureThis notification is generated when the processing for an IPsec Phase-2 Tunnel experiences an internal or system capacity error. NOTIFICATION-TYPE .1.3.6.1.3.171.2.0.9 |
ipSecSetUpFailureThis notification is generated when the setup for an IPsec Phase-2 Tunnel fails. NOTIFICATION-TYPE .1.3.6.1.3.171.2.0.10 |
ipSecEarlyTunTermThis notification is generated when an an IPsec Phase-2 Tunnel is terminated earily or before expected. NOTIFICATION-TYPE .1.3.6.1.3.171.2.0.11 |
ipSecProtocolFailureThis notification is generated when the processing for an IPsec Phase-2 Tunnel experiences a protocol related error. NOTIFICATION-TYPE .1.3.6.1.3.171.2.0.12 |
ipSecNoSaThis notification is generated when the managed entity receives an IPsec packet with a non-existent SPI. NOTIFICATION-TYPE .1.3.6.1.3.171.2.0.13 |
ipSecInNewGrpRejectedThis notification is generated when the managed entity receives and rejects an incoming new group proposal from an IKE peer (ikePeerRemoteAddr). The ISAKMP context of the exchange can be obtained from the IKE tunnel index which is contained in the index of the varbind objects of this trap. NOTIFICATION-TYPE .1.3.6.1.3.171.2.0.14 |
ipSecOutNewGrpRejectedThis notification is generated when the managed entity issues a new group proposal to the peer (ikePeerRemoteAddr) and the peer rejects the proposal. The ISAKMP context of the exchange can be obtained from the IKE tunnel index which is contained in the index of the varbind objects of this trap. NOTIFICATION-TYPE .1.3.6.1.3.171.2.0.15 |
ipSecMIBConformance OBJECT IDENTIFIER .1.3.6.1.3.171.3 |
ipSecMIBGroups OBJECT IDENTIFIER .1.3.6.1.3.171.3.1 |
ipSecLevelsGroupThis group consists of a: 1) IPsec MIB Level Unknown .1.3.6.1.3.171.3.1.1 |
ipSecIkeGroupThis group consists of: 1) IKE Global Objects 2) IKE Tunnel table. Unknown .1.3.6.1.3.171.3.1.2 |
ipSecPeerAssociationGroupThis group consists of: 1) IPsec Phase-1 Peer Association table. 2) IPsec Phase-1 Correlation Table Unknown .1.3.6.1.3.171.3.1.3 |
ipSecXauthGroupThis group consists of metrics pertaining to IKE extended authentication. Devices that do not support Xauth need not implement this group. Unknown .1.3.6.1.3.171.3.1.4 |
ipSecPhaseTwoGroupThis group consists of: 1) IPsec Phase-2 Global Statistics 2) IPsec Phase-2 Tunnel Table 3) IPsec Phase-2 Endpoint Table 4) IPsec Phase-2 Security Protection Index Table Unknown .1.3.6.1.3.171.3.1.5 |
ipSecHistoryGroupThis group consists of: 1) IPsec History Global Objects 2) IPsec Phase-1 History Objects 3) IPsec Phase-2 History Objects Unknown .1.3.6.1.3.171.3.1.6 |
ipSecFailuresGroupThis group consists of: 1) IPsec Failure Global Objects 2) IPsec Phase-1 Tunnel Failure Table 3) IPsec Phase-2 Tunnel Failure Table Unknown .1.3.6.1.3.171.3.1.7 |
ipSecTrapCntlGroupThis group of objects controls the sending of IPsec TRAPs. Unknown .1.3.6.1.3.171.3.1.8 |
ipSecNotificationGroupThis group contains the notifications for the IPsec MIB. Unknown .1.3.6.1.3.171.3.1.9 |
ipSecModeConfigGroupThis group consists of: 1) Global metrics about IKE Mode Configuration activity 2) Phase-1 IKE Tunnel-wise Mode Configuration metrics 3) Historical IKE Mode Configuration metrics on a per expired tunnel basis. Unknown .1.3.6.1.3.171.3.1.10 |
ipSecNewGrpGroupThis group consists of: 1) Global metrics about new group negotiations 2) Phase-1 IKE Tunnel-wise new group metrics 3) Historical new group metrics on a per tunnel basis. 4) Notifications pertaining to new grp failures. Unknown .1.3.6.1.3.171.3.1.11 |
deprecatedObjectGroupA collection of objects that have bee deprecated.deprecated Unknown .1.3.6.1.3.171.3.1.12 |
ipSecMIBCompliances OBJECT IDENTIFIER .1.3.6.1.3.171.3.2 |
ipSecMIBComplianceThe compliance statement for SNMP entities the IP Security Protocol. Unknown .1.3.6.1.3.171.3.2.1 |