IPSEC-MIB
The MIB module to describe generic IPSec objects, and entity level IPSec objects and events.
Main OID:
ipsecMIB.1.3.6.1.3.500
125
Objects
Active
Status
2
Dependencies
Imported Objects
Objects
125 total| Object Name |
|---|
ipsecMIBThe MIB module to describe generic IPSec objects, and entity level IPSec objects and events. MODULE-IDENTITY .1.3.6.1.3.500 |
ipsecMIBObjects OBJECT IDENTIFIER .1.3.6.1.3.500.1 |
ipsec OBJECT IDENTIFIER .1.3.6.1.3.500.1.1 |
ipsecProtSuiteTableThe (conceptual) table containing information on IPSec protection suites. SEQUENCE OF IpsecProtSuiteEntry .1.3.6.1.3.500.1.1.1 |
ipsecProtSuiteEntryAn entry (conceptual row) containing the information on a particular IPSec protection suite. IpsecProtSuiteEntry .1.3.6.1.3.500.1.1.1.1 |
ipsecProtSuiteIndexA unique value, greater than zero, for each IPSec protection suite. It is recommended that values are assigned contiguously starting from 1.ro Integer32 .1.3.6.1.3.500.1.1.1.1.1 |
ipsecProtSuiteLocalAddressThe local IP address used by the protection suite. The size of this object is 4 if the address is an IPv4 address, or 16 if the address is an IPv6 address.ro OCTET STRING ( SIZE( 4 | 16 ) ) .1.3.6.1.3.500.1.1.1.1.2 |
ipsecProtSuiteRemoteAddressThe peer IP address used by the protection suite. The size of this object is 4 if the address is an IPv4 address, or 16 if the address is an IPv6 address.ro OCTET STRING ( SIZE( 4 | 16 ) ) .1.3.6.1.3.500.1.1.1.1.3 |
ipsecProtSuiteInboundEspSpiThe value of the SPI for the inbound protection suite that provides the ESP security service, or zero if ESP is not used.ro Unsigned32 .1.3.6.1.3.500.1.1.1.1.4 |
ipsecProtSuiteOutboundEspSpiThe value of the SPI for the outbound protection suite that provides the ESP security service, or zero if ESP is not used.ro Unsigned32 .1.3.6.1.3.500.1.1.1.1.5 |
ipsecProtSuiteInboundAhSpiThe value of the SPI for the inbound protection suite that provides the AH security service, or zero if AH is not used.ro Unsigned32 .1.3.6.1.3.500.1.1.1.1.6 |
ipsecProtSuiteOutboundAhSpiThe value of the SPI for the outbound protection suite that provides the AH security service, or zero if AH is not used.ro Unsigned32 .1.3.6.1.3.500.1.1.1.1.7 |
ipsecProtSuiteInboundCompCpiThe value of the CPI for the inbound protection suite that provides IP compression, or zero if IPCOMP is not used.ro INTEGER .1.3.6.1.3.500.1.1.1.1.8 |
ipsecProtSuiteOutboundCompCpiThe value of the CPI for the outbound protection suite that provides IP compression, or zero if IPCOMP is not used.ro INTEGER .1.3.6.1.3.500.1.1.1.1.9 |
ipsecProtSuiteLocalIdThe local identifier of the protection suite, or 0 if unknown or if the protection suite uses transport mode encapsulation. This value is taken directly from the optional ID payloads that are exchange during phase 2 negotiations.ro OCTET STRING .1.3.6.1.3.500.1.1.1.1.10 |
ipsecProtSuiteLocalIdTypeThe type of identifier presented by 'ipsecTunnelLocalId', or 0 if unknown or if the protection suite uses transport mode encapsulation. This value is taken directly from the optional ID payloads that are exchange during phase 2 negotiations.ro Unsigned32 .1.3.6.1.3.500.1.1.1.1.11 |
ipsecProtSuiteRemoteIdThe remote identifier of the protection suite, or 0 if unknown or if the protection suite uses transport mode encapsulation. This value is taken directly from the optional ID payloads that are exchange during phase 2 negotiations.ro OCTET STRING .1.3.6.1.3.500.1.1.1.1.12 |
ipsecProtSuiteRemoteIdTypeThe type of identifier presented by 'ipsecTunnelRemoteId', or 0 if unknown or if the protection suite uses transport mode encapsulation. This value is taken directly from the optional ID payloads that are exchange during phase 2 negotiations.ro Unsigned32 .1.3.6.1.3.500.1.1.1.1.13 |
ipsecProtSuiteProtocolThe IP protocol number that this protection suite carries, or 0 if it carries any protocol.ro Integer32 .1.3.6.1.3.500.1.1.1.1.14 |
ipsecProtSuiteLocalPortThe local UDP or TCP port number that this protection suite carries, or 0 if it carries any port number.ro Integer32 (0.. 65535) .1.3.6.1.3.500.1.1.1.1.15 |
ipsecProtSuiteRemotePortThe remote UDP or TCP port number that this protection suite carries, or 0 if it carries any port number.ro Integer32 (0.. 65535) .1.3.6.1.3.500.1.1.1.1.16 |
ipsecProtSuiteDifHelGroupDescA unique value representing the Diffie-Hellman group description used to set up this protection suite, or 0 if the description is unknown. Specific values are used as described in the ISAKMP Class Values of Group Description from Appendix A of [IKE].ro Integer32 .1.3.6.1.3.500.1.1.1.1.17 |
ipsecProtSuiteDifHelGroupTypeA unique value representing the Diffie-Hellman group type used to set up this protection suite, or 0 if the type is unknown. Specific values are used as described in the ISAKMP Class Values of Group Type from Appendix A of [IKE].ro Integer32 .1.3.6.1.3.500.1.1.1.1.18 |
ipsecProtSuitePFS'true' if the protection suite was created using perfect forward secrect.ro TruthValue (SNMPv2-TC) .1.3.6.1.3.500.1.1.1.1.19 |
ipsecProtSuiteEncapsulationThe type of encapsulation used by this protection suite.ro Enumeration .1.3.6.1.3.500.1.1.1.1.20 |
ipsecProtSuiteEspEncAlgA unique value representing the encryption algorithm applied to traffic carried by this protection suite if it uses ESP or 0 if there is no encryption applied by ESP or if ESP is not used. Specific values are taken from section 4.4.4 of [IPDOI].ro Integer32 .1.3.6.1.3.500.1.1.1.1.21 |
ipsecProtSuiteEspEncKeyLengthThe length of the encryption key in bits used for the algorithm specified in the 'ipsecTunnelEspEncAlg' object, or 0 if the key length is implicit in the specified algorithm or there is no encryption specified.ro Unsigned32 .1.3.6.1.3.500.1.1.1.1.22 |
ipsecProtSuiteEspAuthAlgA unique value representing the hash algorithm applied to traffic carried by this protection suite if it uses ESP or 0 if there is no authentication applied by ESP or if ESP is not used. Specific values are taken from the Authentication Algorithm attribute values of Section 4.5 of [IPDOI].ro Integer32 .1.3.6.1.3.500.1.1.1.1.23 |
ipsecProtSuiteAhAuthAlgA unique value representing the hash algorithm applied to traffic carried by this protection suite if it uses AH or 0 if AH is not used. Specific values are taken from Section 4.4.3 of [IPDOI].ro Integer32 .1.3.6.1.3.500.1.1.1.1.24 |
ipsecProtSuiteCompAlgA unique value representing the compression algorithm applied to traffic carried by this protection suite if it uses IPCOMP. Specific values are taken from Section 4.4.5 of [IPDOI].ro Integer32 .1.3.6.1.3.500.1.1.1.1.25 |
ipsecProtSuiteCreationTimeThe date and time that the current protection suite was set up.ro DateAndTime (SNMPv2-TC) .1.3.6.1.3.500.1.1.1.1.26 |
ipsecProtSuiteTimeLimitThe maximum lifetime in seconds of the protection suite, or 0 if there is no time constraint on its expiration.ro OCTET STRING .1.3.6.1.3.500.1.1.1.1.27 |
ipsecProtSuiteTrafficLimitThe maximum traffic in 1024-byte blocks that the protection suite is allowed to support, or 0 if there is no traffic constraint on its expiration.ro OCTET STRING .1.3.6.1.3.500.1.1.1.1.28 |
ipsecProtSuiteInTrafficCountThe amount of inbound traffic accumulated that counts against the protection suite's expiration by traffic limitation, measured in 1024-byte blocks. This value may be 0 if the protection suite does not expire based on traffic. In the case of multiple SAs within a protection suite, this value is the maximum of any traffic accumulation values applied to any of the individual SAs within the protection suite.ro OCTET STRING .1.3.6.1.3.500.1.1.1.1.29 |
ipsecProtSuiteOutTrafficCountThe amount of outbound traffic accumulated that counts against the protection suite's expiration by traffic limitation, measured in 1024-byte blocks. This value may be 0 if the protection suite does not expire based on traffic. In the case of multiple SAs within a protection suite, this value is the maximum of any traffic accumulation values applied to any of the individual SAs within the protection suite.ro OCTET STRING .1.3.6.1.3.500.1.1.1.1.30 |
ipsecProtSuiteInboundTrafficThe amount of user level traffic measured in bytes handled by the protection suite in the inbound direction. This is not necessarily the same as the amount of traffic applied against the traffic expiration limit.ro Counter64 UNITS "bytes" .1.3.6.1.3.500.1.1.1.1.31 |
ipsecProtSuiteOutboundTrafficThe amount of user level traffic measured in bytes handled by the protection suite in the outbound direction. This is not necessarily the same as the amount of traffic applied against the traffic expiration limit.ro Counter64 UNITS "bytes" .1.3.6.1.3.500.1.1.1.1.32 |
ipsecProtSuiteInboundPacketsThe number of packets handled by the protection suite in the inbound direction.ro Counter64 .1.3.6.1.3.500.1.1.1.1.33 |
ipsecProtSuiteOutboundPacketsThe number of packets handled by the protection suite in the outbound direction.ro Counter64 .1.3.6.1.3.500.1.1.1.1.34 |
ipsecProtSuiteDecryptErrorsThe number of inbound packets discarded by the protection suite due to decryption errors.ro Counter32 .1.3.6.1.3.500.1.1.1.1.35 |
ipsecProtSuiteAuthErrorsThe number of inbound packets discarded by the protection suite due to authentication errors. This includes hash failures in both ESP and AH.ro Counter32 .1.3.6.1.3.500.1.1.1.1.36 |
ipsecProtSuiteReplayErrorsThe number of inbound packets discarded by the protection suite due to replay errors. This includes replay failures both ESP and AH.ro Counter32 .1.3.6.1.3.500.1.1.1.1.37 |
ipsecProtSuitePolicyErrorsThe number of inbound packets discarded by the protection suite due to policy errors.ro Counter32 .1.3.6.1.3.500.1.1.1.1.38 |
ipsecProtSuiteOtherReceiveErrorsThe number of inbound packets discarded by the protection suite due to errors other than decryption, authentication or replay errors. This may include decompression errors or errors due to a lack of receive buffers.ro Counter32 .1.3.6.1.3.500.1.1.1.1.39 |
ipsecProtSuiteSendErrorsThe number of outbound packets discarded by the protection suite due to any error. This may include compression errors or errors due to a lack of transmit buffers.ro Counter32 .1.3.6.1.3.500.1.1.1.1.40 |
ipsecIkeSaTableThe (conceptual) table containing information on IPSec's IKE SAs. SEQUENCE OF IpsecIkeSaEntry .1.3.6.1.3.500.1.1.2 |
ipsecIkeSaEntryAn entry (conceptual row) containing the information on a particular IKE SA. IpsecIkeSaEntry .1.3.6.1.3.500.1.1.2.1 |
ipsecIkeSaIndexA unique value, greater than zero, for each phase 1 SA. It is recommended that values are assigned contiguously starting from 1. The value for each entry must remain constant at least from one re-initialization of entity's network management system to the next re-initialization.ro Integer32 .1.3.6.1.3.500.1.1.2.1.1 |
ipsecIkeSaInitiatorCookieThe value of the cookie used by the initiator for the phase 1 SA.ro OCTET STRING .1.3.6.1.3.500.1.1.2.1.2 |
ipsecIkeSaResponderCookieThe value of the cookie used by the responder for the phase 1 SA.ro OCTET STRING .1.3.6.1.3.500.1.1.2.1.3 |
ipsecIkeSaLocalIpAddressThe local IP address used to negotiated the SA. The size of the object is 4 if the address is an IPv4 address and 16 if an IPv6 address.ro OCTET STRING ( SIZE( 4 | 16 ) ) .1.3.6.1.3.500.1.1.2.1.4 |
ipsecIkeSaLocalPortNumberThe local UDP port number that this SA was negotiated with.ro INTEGER .1.3.6.1.3.500.1.1.2.1.5 |
ipsecIkeSaLocalIdTypeThe type of ID used by the local end of this SA. Specific values are used as described in Section 4.6.2.1 of [IPDOI].ro Integer32 .1.3.6.1.3.500.1.1.2.1.8 |
ipsecIkeSaLocalIdThe ID of the local host that negotiated this SA. The length may require truncation under some conditions.ro OCTET STRING .1.3.6.1.3.500.1.1.2.1.9 |
ipsecIkeSaPeerIpAddressThe IP address of the peer that this SA was negotiated with. The size of the object is 4 if the address is an IPv4 address and 16 if it is an IPv6 address.ro OCTET STRING ( SIZE( 4 | 16 ) ) .1.3.6.1.3.500.1.1.2.1.10 |
ipsecIkeSaPeerPortNumberThe UDP port number of the peer that this SA was negotiated with.ro INTEGER .1.3.6.1.3.500.1.1.2.1.11 |
ipsecIkeSaAuthMethodThe authentication method used to authenticate the peer. Note that this does not include the specific method of authentication if extended authenticated is used. Specific values are used as described in the ISAKMP Class Values of Authentication Method from Appendix A of [IKE].ro Integer32 .1.3.6.1.3.500.1.1.2.1.12 |
ipsecIkeSaPeerIdTypeThe type of ID used by the peer. Specific values are used as described in Section 4.6.2.1 of [IPDOI].ro Integer32 .1.3.6.1.3.500.1.1.2.1.13 |
ipsecIkeSaPeerIdThe ID of the peer this SA was negotiated with. The length may require truncation under some conditions.ro OCTET STRING .1.3.6.1.3.500.1.1.2.1.14 |
ipsecIkeSaPeerCertSerialNumThe serial number of the certificate of the peer this SA was negotiated with. This object has no meaning if a certificate was not used in authenticating the peer.ro OCTET STRING .1.3.6.1.3.500.1.1.2.1.15 |
ipsecIkeSaPeerCertIssuerThe issuer of the certificate of the peer this SA was negotiated with. This object has no meaning if a certificate was not used in authenticating the peer.ro OCTET STRING .1.3.6.1.3.500.1.1.2.1.16 |
ipsecIkeSaEncAlgA unique value representing the encryption algorithm applied to traffic carried by this SA. Specific values are used as described in the ISAKMP Class Values of Encryption Algorithms from Appendix A of [IKE].ro INTEGER .1.3.6.1.3.500.1.1.2.1.17 |
ipsecIkeSaEncKeyLengthThe length of the encryption key in bits used for algorithm specified in the ipsecIkeSaEncAlg object or 0 if the key length is implicit in the specified algorithm.ro Integer32 .1.3.6.1.3.500.1.1.2.1.18 |
ipsecIkeSaHashAlgA unique value representing the hash algorithm applied to traffic carried by this SA. Specific values are used as described in the ISAKMP Class Values of Hash Algorithms from Appendix A of [IKE].ro Integer32 .1.3.6.1.3.500.1.1.2.1.19 |
ipsecIkeSaDifHelGroupDescA unique value representing the Diffie-Hellman group description used or 0 if the group is unknown. Specific values are used as described in the ISAKMP Class Values of Group Description from Appendix A of [IKE].ro Integer32 .1.3.6.1.3.500.1.1.2.1.20 |
ipsecIkeSaDifHelGroupTypeA unique value representing the Diffie-Hellman group type used or 0 if the group is unknown. Specific values are used as described in the ISAKMP Class Values of Group Type from Appendix A of [IKE].ro Integer32 .1.3.6.1.3.500.1.1.2.1.21 |
ipsecIkeSaDifHelFieldSizeThe field size, in bits, of the Diffie-Hellman group used to generate the key-pair, or 0 if unknown.ro Integer32 .1.3.6.1.3.500.1.1.2.1.22 |
ipsecIkeSaPRFThe pseudo-random functions used, or 0 if not used or if unknown. Specific values are used as described in the ISAKMP Class Values of PRF from Appendix A of [IKE] (which specifies none at the present time).ro Integer32 .1.3.6.1.3.500.1.1.2.1.23 |
ipsecIkeSaPFSA value that indicates that perfect forward secrecy is used for all IPSec SAs created by this IKE SA.ro TruthValue (SNMPv2-TC) .1.3.6.1.3.500.1.1.2.1.24 |
ipsecIkeSaTimeStartThe date and time that the SA was set up.ro DateAndTime (SNMPv2-TC) .1.3.6.1.3.500.1.1.2.1.25 |
ipsecIkeSaTimeLimitThe maximum lifetime in seconds of the SA, or 0 if there is no time constraint on its expiration.ro OCTET STRING UNITS "seconds" .1.3.6.1.3.500.1.1.2.1.26 |
ipsecIkeSaTrafficLimitThe maximum traffic in 1024-byte blocks that the SA is allowed to carry, or 0 if there is no traffic constraint on its expiration.ro OCTET STRING UNITS "Kbytes" .1.3.6.1.3.500.1.1.2.1.27 |
ipsecIkeSaInboundTrafficThe amount traffic measured in bytes handled in the SA in the inbound direction.ro Counter64 UNITS "bytes" .1.3.6.1.3.500.1.1.2.1.28 |
ipsecIkeSaOutboundTrafficThe amount traffic measured in bytes handled in the SA in the outbound direction.ro Counter64 UNITS "bytes" .1.3.6.1.3.500.1.1.2.1.29 |
ipsecIkeSaInboundPacketsThe number of packets handled in the SA in the inbound direction.ro Counter32 .1.3.6.1.3.500.1.1.2.1.30 |
ipsecIkeSaOutboundPacketsThe number of packets handled in the SA in the outbound direction.ro Counter32 .1.3.6.1.3.500.1.1.2.1.31 |
ipsecIkeProtSuitesCreatedThe total number of phase 2 protection suites created by the SA.ro Counter32 .1.3.6.1.3.500.1.1.2.1.32 |
ipsecIkeProtSuitesDeletedThe total number of phase 2 protection suites deleted by the SA.ro Counter32 .1.3.6.1.3.500.1.1.2.1.33 |
ipsecIkeSaDecryptErrorsThe number of inbound packets discarded by the phase1 SA due to decryption errors.ro Counter32 .1.3.6.1.3.500.1.1.2.1.34 |
ipsecIkeSaAuthErrorsThe number of inbound packets discarded by the phase 1 SA due to authentication errors.ro Counter32 .1.3.6.1.3.500.1.1.2.1.35 |
ipsecIkeSaOtherReceiveErrorsThe number of inbound packets discarded by the phase 1 SA due to errors other than decryption or authentication errors. This may include errors due to a lack of receive buffers.ro Counter32 .1.3.6.1.3.500.1.1.2.1.36 |
ipsecIkeSaSendErrorsThe number of outbound packets discarded by the phase 1 SA due to any error. This may include errors due to a lack of transmit buffers.ro Counter32 .1.3.6.1.3.500.1.1.2.1.37 |
ipsecTrapsA OBJECT IDENTIFIER .1.3.6.1.3.500.1.1.3 |
ipsecTraps OBJECT IDENTIFIER .1.3.6.1.3.500.1.1.3.0 |
ipsecTrapIkeNegFailureAn attempt to negotiate a phase 1 SA failed. NOTIFICATION-TYPE .1.3.6.1.3.500.1.1.3.0.1 |
ipsecTrapInvalidCookieIKE packets with invalid cookies were detected from the specified peer. Implementations SHOULD send one trap per peer (within a reasonable time period, rather than sending one trap per packet. NOTIFICATION-TYPE .1.3.6.1.3.500.1.1.3.0.2 |
ipsecTrapIpsecNegFailureAn attempt to negotiate a phase 2 protection suite within the specified IKE SA failed. NOTIFICATION-TYPE .1.3.6.1.3.500.1.1.3.0.3 |
ipsecTrapIpsecAuthFailureIPSec packets with invalid hashes were found in the specified protection suite. Implementations SHOULD send one trap per protection suite (within a reasonable time period), rather than sending one trap per packet. NOTIFICATION-TYPE .1.3.6.1.3.500.1.1.3.0.4 |
ipsecTrapIpsecReplayFailureIPSec packets with invalid sequence numbers were found in the specified protection suite. Implementations SHOULD send one trap per protection suite (within a reasonable time period), rather than sending one trap per packet. NOTIFICATION-TYPE .1.3.6.1.3.500.1.1.3.0.5 |
ipsecTrapIpsecPolicyFailureIPSec packets carrying packets with invalid selectors for the specified protection suite were found. Implementations SHOULD send one trap per protection suite (within a reasonable time period), rather than sending one trap per packet. NOTIFICATION-TYPE .1.3.6.1.3.500.1.1.3.0.6 |
ipsecTrapInvalidSpiESP, AH or IPCOMP packets with unknown SPIs (or CPIs) were detected from the specified peer. Implementations SHOULD send one trap per peer (within a reasonable time period), rather than sending one trap per packet. NOTIFICATION-TYPE .1.3.6.1.3.500.1.1.3.0.7 |
ipsecIpsecStats OBJECT IDENTIFIER .1.3.6.1.3.500.1.1.4 |
ipsecIpsecTotalProtSuitesThe total number of phase 2 protection suites established by the entity since boot time.ro Counter64 .1.3.6.1.3.500.1.1.4.1 |
ipsecIpsecNegFailuresThe total number of phase 2 protection suite negotiations that failed that occurred in the entity since boot time.ro Counter64 .1.3.6.1.3.500.1.1.4.2 |
ipsecIpsecTotalInboundPacketsThe total number of inbound packets carried on IPSec protection suites since boot time.ro Counter64 .1.3.6.1.3.500.1.1.4.3 |
ipsecIpsecTotalTransOutboundPacketsThe total number of outbound packets carried on IPSec protection suites since boot time.ro Counter64 .1.3.6.1.3.500.1.1.4.4 |
ipsecIpsecTotalTransInboundTrafficThe total amount of inbound traffic carried on IPSec protection suites since boot time, measured in 1024-octet blocks.ro Counter64 UNITS "Kbytes" .1.3.6.1.3.500.1.1.4.5 |
ipsecIpsecTotalTransOutboundTrafficThe total amount of outbound traffic carried on IPSec protection suites since boot time, measured in 1024-octet blocks.ro Counter64 UNITS "Kbytes" .1.3.6.1.3.500.1.1.4.6 |
ipsecIpsecErrorStats OBJECT IDENTIFIER .1.3.6.1.3.500.1.1.5 |
ipsecIpsecDecryptionErrorsThe total number of packets received by the entity in the IPSec protection suites since boot time with decryption errors.ro Counter32 .1.3.6.1.3.500.1.1.5.1 |
ipsecIpsecAuthenticationErrorsThe total number of packets received by the entity in the IPSec protection suites since boot time with authentication errors. This includes all packets in which the hash value is determined to be invalid.ro Counter32 .1.3.6.1.3.500.1.1.5.2 |
ipsecIpsecReplayErrorsThe total number of packets received by the entity in the IPSec protection suites since boot time with replay errors.ro Counter32 .1.3.6.1.3.500.1.1.5.3 |
ipsecIpsecPolicyErrorsThe total number of packets received by the entity in the IPSec protection suites since boot time and discarded due to policy errors. This includes packets that had selectors that were invalid for the SA or protection suite that carried them.ro Counter32 .1.3.6.1.3.500.1.1.5.4 |
ipsecIpsecOtherReceiveErrorsThe total number of packets received by the entity in the IPSec protection suites since boot time and discarded due to errors not due to decryption, authentication, replay or policy.ro Counter32 .1.3.6.1.3.500.1.1.5.5 |
ipsecIpsecSendErrorsThe total number of packets to be sent by the entity in the IPSec protection suites since boot time and discarded due to errors.ro Counter32 .1.3.6.1.3.500.1.1.5.6 |
ipsecUnknownSpiErrorsThe total number of packets received by the entity since boot time with SPIs or CPIs that were not valid.ro Counter32 .1.3.6.1.3.500.1.1.5.7 |
ipsecIkeStats OBJECT IDENTIFIER .1.3.6.1.3.500.1.1.6 |
ipsecIkeTotalSAsThe total number of phase 1 SAs successfully established by the entity since boot time.ro Counter64 .1.3.6.1.3.500.1.1.6.1 |
ipsecIkeNegFailuresThe total number of phase 1 SA negotiations that failed that occurred in the entity since boot time.ro Counter64 .1.3.6.1.3.500.1.1.6.2 |
ipsecIkeTotalInboundPacketsThe total number of inbound packets carried on phase 1 SAs since boot time.ro Counter64 .1.3.6.1.3.500.1.1.6.3 |
ipsecIkeTotalTransOutboundPacketsThe total number of outbound packets carried on phase 1 SAs since boot time.ro Counter64 .1.3.6.1.3.500.1.1.6.4 |
ipsecIkeTotalTransInboundTrafficThe total amount of inbound traffic carried on phase 1 SAs since boot time, measured in 1024-octet blocks.ro Counter64 UNITS "Kbytes" .1.3.6.1.3.500.1.1.6.5 |
ipsecIkeTotalTransOutboundTrafficThe total amount of outbound traffic carried on phase 1 SAs since boot time, measured in 1024-octet blocks.ro Counter64 UNITS "Kbytes" .1.3.6.1.3.500.1.1.6.6 |
ipsecIkeErrorStats OBJECT IDENTIFIER .1.3.6.1.3.500.1.1.7 |
ipsecIkeProtocolErrorsThe total number of packets received by the entity since boot time with IKE protocol errors. This includes packets with invalid cookies, but does not include errors that are associated with specific IKE SAs.ro Counter32 .1.3.6.1.3.500.1.1.7.1 |
ipsecIkeDecryptionErrorsThe total number of packets received by the entity in the IPSec protection suites since boot time with decryption errors.ro Counter32 .1.3.6.1.3.500.1.1.7.2 |
ipsecIkeAuthenticationErrorsThe total number of packets received by the entity in the IPSec protection suites since boot time with authentication errors. This includes all packets in which the hash value is determined to be invalid.ro Counter32 .1.3.6.1.3.500.1.1.7.3 |
ipsecIkeOtherReceiveErrorsThe total number of packets received by the entity in phase 1 SAs since boot time and discarded due to errors not due to decryption or authentication.ro Counter32 .1.3.6.1.3.500.1.1.7.4 |
ipsecIkeSendErrorsThe total number of packets to be sent by the entity in phase 1 SAs since boot time and discarded due to errors.ro Counter32 .1.3.6.1.3.500.1.1.7.5 |
ipsecNotifications OBJECT IDENTIFIER .1.3.6.1.3.500.1.1.8 |
ipsecNotifyMessageTotalCountThe total number of all types of notify messages sent or received by the entity since boot time. It is the sum of all occurrences in the 'ipsecNotifyCountTable'.ro Counter64 .1.3.6.1.3.500.1.1.8.1 |
ipsecNotifyCountTableThe (conceptual) table containing information on IPSec notify message counts. This table MAY be sparsely populated; that is, rows for which the count is 0 may be absent. SEQUENCE OF IpsecNotifyCountEntry .1.3.6.1.3.500.1.1.8.2 |
ipsecNotifyCountEntryAn entry (conceptual row) containing the total number of occurrences of a notify message. IpsecNotifyCountEntry .1.3.6.1.3.500.1.1.8.2.1 |
ipsecNotifyMessageThe value representing a specific IPSec notify message, or 0 if unknown. Values are assigned from the set of notify message types as defined in Section 3.14.1 of [ISAKMP]. In addition, the value 0 may be used for this object when the object is used as a trap cause, and the cause is unknown.ro INTEGER .1.3.6.1.3.500.1.1.8.2.1.1 |
ipsecNotifyMessageCountThe total number of times the specific notify message has been received or sent by the entity since system boot.ro Counter32 .1.3.6.1.3.500.1.1.8.2.1.2 |