Home/Catalog/JUNIPER-IPSEC-FLOW-MON-MIB

JUNIPER-IPSEC-FLOW-MON-MIB

Updated Mar 15, 2021
AI MIB Summary

The JUNIPER-IPSEC-FLOW-MON-MIB monitors Juniper Networks IPsec VPN infrastructure by exposing tables for IKE tunnels, IPSec tunnels, and IPSec security associations to track tunnel states, association parameters, and flow statistics. This module facilitates the management of IPsec security policies and the operational status of encrypted traffic flows within the device's security architecture.

This module defines the object used to monitor the entries pertaining to IPSec objects and the management of the IPSEC VPN functionalities. tables: - IKE tunnel table - IPSec tunnel table - IPSec security associations table. This mib module is based on JNX-IPSEC-MONITOR-MIB. Building on the existing IKE infrastruature, the security IKE implementation integrates the value-added features for the security products
Main OID:
jnxIpSecFlowMonMIB.1.3.6.1.4.1.2636.3.52.1
432
Objects
Active
Status
4
Dependencies

Imported Objects

SNMPv2-SMI
INET-ADDRESS-MIB
SNMPv2-TC
JUNIPER-SMI

Objects

432 total
Object Name
jnxIpSecFlowMonMIBThis module defines the object used to monitor the entries pertaining to IPSec objects and the management of the IPSEC VPN functionalities. tables: - IKE tunnel table - IPSec tunnel table - IPSec security associations table. This mib module is based on JNX-IPSEC-MONITOR-MIB. Building on the existing IKE infrastruature, the security IKE implementation integrates the value-added features for the security products
MODULE-IDENTITY
.1.3.6.1.4.1.2636.3.52.1
jnxIpSecFlowMonNotifications
OBJECT IDENTIFIER
.1.3.6.1.4.1.2636.3.52.1.0
jnxIkeNotificationType
OBJECT IDENTIFIER
.1.3.6.1.4.1.2636.3.52.1.0.0
jnxIkePeerDownTo provide notification for the event when Peer goes down.
NOTIFICATION-TYPE
.1.3.6.1.4.1.2636.3.52.1.0.0.1
jnxIkePeerIPSecTunnelDownTo provide notification for the event of IPSec Tunnels going down for a peer. These traps are not generated if the corresponding peer has gone down.
NOTIFICATION-TYPE
.1.3.6.1.4.1.2636.3.52.1.0.0.2
jnxIkeNotificationObj
OBJECT IDENTIFIER
.1.3.6.1.4.1.2636.3.52.1.0.1
jnxIkeTrapPeerRemoteGwAddrTypeThe IP address type of the remote gateway (endpoint) for the IKE SA negotiaton.ro
InetAddressType (INET-ADDRESS-MIB)
.1.3.6.1.4.1.2636.3.52.1.0.1.1
jnxIkeTrapPeerRemoteGwAddrThe IP address of the remote gateway (endpoint) for the IKE SA negotiation.ro
InetAddress (INET-ADDRESS-MIB)
.1.3.6.1.4.1.2636.3.52.1.0.1.2
jnxIkeTrapPeerRemotePortThe port number of the remote gateway (endpoint) for the IKE SA negotiation. The port number zero means the input value is ignored for this object and the default port is considered.ro
InetPortNumber (INET-ADDRESS-MIB)
.1.3.6.1.4.1.2636.3.52.1.0.1.3
jnxIkeTrapPeerLocalGwAddrTypeThe IP address type of the local endpoint (gateway) for the IKE SA negotiation.ro
InetAddressType (INET-ADDRESS-MIB)
.1.3.6.1.4.1.2636.3.52.1.0.1.4
jnxIkeTrapPeerLocalGwAddrThe IP address of the local endpoint (gateway) for the IKE SA negotiation.ro
InetAddress (INET-ADDRESS-MIB)
.1.3.6.1.4.1.2636.3.52.1.0.1.5
jnxIkeTrapPeerLocalPortThe port number of the local gateway (endpoint) for the IKE SA negotiation. The port number zero means the input value is ignored for this object and the default port is considered.ro
InetPortNumber (INET-ADDRESS-MIB)
.1.3.6.1.4.1.2636.3.52.1.0.1.6
jnxIkeTrapPeerRoutingInstanceName of the routing instance.ro
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.0.1.7
jnxIkeTrapPeerLocalIdTypeThe type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name string. 3. or a distinguished name string.ro
JnxIkePeerType
.1.3.6.1.4.1.2636.3.52.1.0.1.8
jnxIkeTrapPeerLocalIdValueThe value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is id_fqdn, then this is the FQDN of the remote peer. If the local peer type is a id_dn, then this is the distinguished name string of the local peer.ro
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.0.1.9
jnxIkeTrapPeerRemoteIdTypeThe type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name string. 3. or a distinguished name string.ro
JnxIkePeerType
.1.3.6.1.4.1.2636.3.52.1.0.1.10
jnxIkeTrapPeerRemoteIdValueThe value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is id_fqdn, then this is the FQDN of the remote peer. If the remote peer type is a id_dn, then this is the distinguished named string of the remote peer.ro
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.0.1.11
jnxIkeTrapPeerAAAUserNameIdentifies the user with the specified authentication, authorization and accounting (AAA) username, associated with the IKE SA negotiation.ro
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.0.1.12
jnxIkeTrapPeerGwNameName of the IKE gateway.ro
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.0.1.13
jnxIkeTrapIpSecTunVpnNameIPsec tunnel VPN name.ro
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.0.1.14
jnxIkeTrapIpSecTunTsNameIPsec tunnel Traffic Selector name.ro
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.0.1.15
jnxIkeTrapIpSecTunLocalTSIdentifier for the local end of IPsec tunnel.ro
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.0.1.16
jnxIkeTrapIpSecTunRemoteTSIdentifier for the remote end of IPsec tunnel.ro
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.0.1.17
jnxIpSecFlowMonPhaseOne
OBJECT IDENTIFIER
.1.3.6.1.4.1.2636.3.52.1.1
jnxIkeNumOfTunnelsNumber of IKE Tunnels (phase-1) actively negotiating between peers. The SA can be in either the up or down state. This attribute should detail the number of IKE tunnels in jnxIkeTunnelMonTable.ro
INTEGER
.1.3.6.1.4.1.2636.3.52.1.1.1
jnxIkeTunnelMonTableThe IPsec Phase-1 Internet Key Exchange Tunnel Table. There is one entry in this table for each active IPsec Phase-1 IKE Tunnel.
SEQUENCE OF JnxIkeTunnelMonEntry
.1.3.6.1.4.1.2636.3.52.1.1.2
jnxIkeTunnelMonEntryEach entry contains the attributes associated with an active IPsec Phase-1 IKE Tunnel.
JnxIkeTunnelMonEntry
.1.3.6.1.4.1.2636.3.52.1.1.2.1
jnxIkeTunMonRemoteGwAddrTypeThe IP address type of the remote gateway (endpoint) for the IPsec Phase-1 IKE Tunnel.
InetAddressType (INET-ADDRESS-MIB)
.1.3.6.1.4.1.2636.3.52.1.1.2.1.1
jnxIkeTunMonRemoteGwAddrThe IP address of the remote gateway (endpoint) for the IPsec Phase-1 IKE Tunnel.
InetAddress (INET-ADDRESS-MIB)
.1.3.6.1.4.1.2636.3.52.1.1.2.1.2
jnxIkeTunMonIndexThe index of the IPsec Phase-1 IKE Tunnel Table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The value of this object will wrap at 2,147,483,647.
Integer32
.1.3.6.1.4.1.2636.3.52.1.1.2.1.3
jnxIkeTunMonLocalGwAddrThe IP address of the local endpoint (gateway) for the IPsec Phase-1 IKE Tunnel.ro
InetAddress (INET-ADDRESS-MIB)
.1.3.6.1.4.1.2636.3.52.1.1.2.1.4
jnxIkeTunMonLocalGwAddrTypeThe IP address type of the local endpoint (gateway) for the IPsec Phase-1 IKE Tunnel.ro
InetAddressType (INET-ADDRESS-MIB)
.1.3.6.1.4.1.2636.3.52.1.1.2.1.5
jnxIkeTunMonStateThe state of the IKE tunnel, It can be: 1. up - negotiation completed 2. down- being negotiatedro
JnxIkeTunStateType
.1.3.6.1.4.1.2636.3.52.1.1.2.1.6
jnxIkeTunMonInitiatorCookieCookie as generated by the peer that initiated the IKE Phase-1 negotiation. This cookie is carried in the ISAKMP header.ro
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.1.2.1.7
jnxIkeTunMonResponderCookieCookie as generated by the peer responding to the IKE Phase-1 negotiation initiated by the remote peer. This cookie is carried in the ISAKMP header.ro
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.1.2.1.8
jnxIkeTunMonLocalRoleThe role of local peer identity. The Role of the local peer can be: 1. initiator. 2. or responder.ro
JnxIkePeerRole
.1.3.6.1.4.1.2636.3.52.1.1.2.1.9
jnxIkeTunMonLocalIdTypeThe type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name string. 3. or a distinguished name string.ro
JnxIkePeerType
.1.3.6.1.4.1.2636.3.52.1.1.2.1.10
jnxIkeTunMonLocalIdValueThe value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is id_fqdn, then this is the FQDN of the remote peer. If the local peer type is a id_dn, then this is the distinguished name string of the local peer.ro
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.1.2.1.11
jnxIkeTunMonLocalCertNameName of the certificate used for authentication of the local tunnel endpoint. This object will have some valid value only if negotiated IKE authentication method is other than pre-saherd key. If the IKE negotiation do not use certificate based authentication method, then the value of this object will be a NULL string.ro
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.1.2.1.12
jnxIkeTunMonRemoteIdTypeThe type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name string. 3. or a distinguished name string.ro
JnxIkePeerType
.1.3.6.1.4.1.2636.3.52.1.1.2.1.13
jnxIkeTunMonRemoteIdValueThe value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is id_fqdn, then this is the FQDN of the remote peer. If the remote peer type is a id_dn, then this is the distinguished named string of the remote peer.ro
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.1.2.1.14
jnxIkeTunMonNegoModeThe negotiation mode of the IPsec Phase-1 IKE Tunnel.ro
JnxIkeNegoMode
.1.3.6.1.4.1.2636.3.52.1.1.2.1.15
jnxIkeTunMonDiffHellmanGrpThe Diffie Hellman Group used in IPsec Phase-1 IKE negotiations.ro
JnxDiffHellmanGrp
.1.3.6.1.4.1.2636.3.52.1.1.2.1.16
jnxIkeTunMonEncryptAlgoThe encryption algorithm used in IPsec Phase-1 IKE negotiations.ro
JnxEncryptAlgo
.1.3.6.1.4.1.2636.3.52.1.1.2.1.17
jnxIkeTunMonHashAlgoThe hash algorithm used in IPsec Phase-1 IKE negotiations.ro
JnxIkeHashAlgo
.1.3.6.1.4.1.2636.3.52.1.1.2.1.18
jnxIkeTunMonAuthMethodThe authentication method used in IPsec Phase-1 IKE negotiations.ro
JnxIkeAuthMethod
.1.3.6.1.4.1.2636.3.52.1.1.2.1.19
jnxIkeTunMonLifeTimeThe negotiated LifeTime of the IPsec Phase-1 IKE Tunnel in seconds.ro
Integer32
.1.3.6.1.4.1.2636.3.52.1.1.2.1.20
jnxIkeTunMonActiveTimeThe length of time the IPsec Phase-1 IKE tunnel has been active in hundredths of seconds.ro
TimeInterval (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.1.2.1.21
jnxIkeTunMonInOctetsThe total number of octets received by this IPsec Phase-1 IKE security association.ro
Counter64 UNITS "Octets"
.1.3.6.1.4.1.2636.3.52.1.1.2.1.22
jnxIkeTunMonInPktsThe total number of packets received by this IPsec Phase-1 IKE security association.ro
Counter32 UNITS "Packets"
.1.3.6.1.4.1.2636.3.52.1.1.2.1.23
jnxIkeTunMonOutOctetsThe total number of octets sent by this IPsec Phase-1 IKE security association.ro
Counter64 UNITS "Octets"
.1.3.6.1.4.1.2636.3.52.1.1.2.1.24
jnxIkeTunMonOutPktsThe total number of packets sent by this IPsec Phase-1 IKE security association.ro
Counter32 UNITS "Packets"
.1.3.6.1.4.1.2636.3.52.1.1.2.1.25
jnxIkeTunMonXAuthUserIdThe extended Authentication (XAuth) User Identifier, identifies the user associated with this IPSec Phase negotiation.ro
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.1.2.1.26
jnxIkeTunMonDPDDownCountThe number of times that the remote peer is detected in a dead (or down) state. This attribute is obsoleteroobsolete
Counter32 UNITS "Packets"
.1.3.6.1.4.1.2636.3.52.1.1.2.1.27
jnxIkeTunMonInitiatorIkev2IPSecSaRekeyRequestOutThe number of IPSec SA rekey CREATE_CHILD_SA request message sent by Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.2.1.28
jnxIkeTunMonInitiatorIkev2IPSecSaRekeyResponseInThe number of IPSec SA rekey CREATE_CHILD_SA response message received by Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.2.1.29
jnxIkeTunMonInitiatorIkev2IPSecSaRekeyNoProposalChosenInThe number of IPSec SA rekey CREATE_CHILD_SA NO_PROPSAL_CHOSEN Notification received by Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.2.1.30
jnxIkeTunMonInitiatorIkev2IPSecSaRekeyInvalidKeInThe number of IPSec SA rekey CREATE_CHILD_SA INVALID_KE_PAYLOAD received by Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.2.1.31
jnxIkeTunMonInitiatorIkev2IPSecSaRekeyTsUnacceptableInThe number of IPSec SA rekey CREATE_CHILD_SA TS_UNACCEPTABLE notification received by Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.2.1.32
jnxIkeTunMonInitiatorIkev2IPSecSaRekeyResVerifySaFailThe number of IPSec SA rekey CREATE_CHILD_SA response message verification of peer SA failed at Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.2.1.33
jnxIkeTunMonInitiatorIkev2IPSecSaRekeyResVerifyDhGroupFailThe number of IPSec SA rekey CREATE_CHILD_SA response message verification of DH group failed at Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.2.1.34
jnxIkeTunMonInitiatorIkev2IPSecSaRekeyResVerifyTsFailThe number of IPSec SA rekey CREATE_CHILD_SA response message verification of TS failed at Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.2.1.35
jnxIkeTunMonInitiatorIkev2IPSecSaRekeyResDhComputeKeyFailThe number of IPSec SA rekey CREATE_CHILD_SA response message Diffie-Hellman compute key failed at Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.2.1.36
jnxIkeTunMonResponderIkev2IPSecSaRekeyRequestInThe number of IPSec SA rekey CREATE_CHILD_SA request message received by Responder.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.2.1.37
jnxIkeTunMonResponderIkev2IPSecSaRekeyResponseOutThe number of IPSec SA rekey CREATE_CHILD_SA response message sent by Responder.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.2.1.38
jnxIkeTunMonResponderIkev2IPSecSaRekeyNoProposalChosenOutThe number of IPSec SA rekey CREATE_CHILD_SA NO_PROPSAL_CHOSEN Notification sent by Responder.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.2.1.39
jnxIkeTunMonResponderIkev2IPSecSaRekeyInvalidKeOutThe number of IPSec SA rekey CREATE_CHILD_SA INVALID_KE_PAYLOAD Notification sent by Responder.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.2.1.40
jnxIkeTunMonResponderIkev2IPSecSaRekeyTsUnacceptableOutThe number of IPSec SA rekey CREATE_CHILD_SA TS_UNACCEPTABLE notification sent by Responder.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.2.1.41
jnxIkeTunMonResponderIkev2IPSecSaRekeyResDhComputeKeyFailThe number of IPSec SA rekey CREATE_CHILD_SA response message Diffie-Hellman compute key failed at Responder.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.2.1.42
jnxIkeTunMonGwNameThe gateway namero
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.1.2.1.43
jnxIkeTunMonTunTypeThe Tunnel type. It can be regular (1) or ha-link (2)ro
JnxIkeTunType
.1.3.6.1.4.1.2636.3.52.1.1.2.1.44
jnxIkeTunMonLocalSignatureHashAlgoThe signature hash algorithm used locally in IPsec Phase-1 IKE negotiations.ro
JnxIkeLocalSignatureHashAlgo
.1.3.6.1.4.1.2636.3.52.1.1.2.1.45
jnxIkeTunMonRemoteSignatureHashAlgoThe signature hash algorithm used by remote peer in IPsec Phase-1 IKE negotiations.ro
JnxIkeRemoteSignatureHashAlgo
.1.3.6.1.4.1.2636.3.52.1.1.2.1.46
jnxIkeTunMonDigitalSignAuthKeySignature key RSA/DSA/ECDSA used for digital-signature auth method.ro
JnxIkeDigitalSignAuthKey
.1.3.6.1.4.1.2636.3.52.1.1.2.1.47
jnxIkeGlobalStats
OBJECT IDENTIFIER
.1.3.6.1.4.1.2636.3.52.1.1.3
jnxIkeGlobalInitiatorIkev2SaInitStats
OBJECT IDENTIFIER
.1.3.6.1.4.1.2636.3.52.1.1.3.1
jnxIkeGlobalInitiatorIkev2SaInitRequestOutNumber of IKE_SA_INIT request message sent by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.1.1
jnxIkeGlobalInitiatorIkev2SaInitResponseInNumber of IKE_SA_INIT response message received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.1.2
jnxIkeGlobalInitiatorIkev2SaInitResInvalidIkeSpiNumber of IKE_SA_INIT response message containing invalid SPI received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.1.3
jnxIkeGlobalInitiatorIkev2SaInitInvalidKePayloadInNumber of IKE_SA_INIT INVALID_KE_PAYLOAD received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.1.4
jnxIkeGlobalInitiatorIkev2SaInitNoProposalChosenInNumber of IKE_SA_INIT NO_PROPSAL_CHOSEN received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.1.5
jnxIkeGlobalInitiatorIkev2SaInitResVerifySaFailNumber of IKE_SA_INIT response message verification of peer SA failed at Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.1.6
jnxIkeGlobalInitiatorIkev2SaInitResIkeSaFillFailNumber of IKE_SA_INIT response message IKE SA fill operation failed at Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.1.7
jnxIkeGlobalInitiatorIkev2SaInitResVerifyDhGroupFailNumber of IKE_SA_INIT response message verification of DH group failed at Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.1.8
jnxIkeGlobalInitiatorIkev2SaInitCookieRequestInNumber of IKE_SA_INIT COOKIE notification request message received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.1.9
jnxIkeGlobalInitiatorIkev2SaInitCookieResponseOutNumber of IKE_SA_INIT COOKIE notification response message sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.1.10
jnxIkeGlobalInitiatorIkev2SaInitResDhComputeKeyFailNumber of IKE_SA_INIT response message Diffie-Hellman compute key failed at Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.1.11
jnxIkeGlobalResponderIkev2SaInitStats
OBJECT IDENTIFIER
.1.3.6.1.4.1.2636.3.52.1.1.3.2
jnxIkeGlobalResponderIkev2SaInitRequestInNumber of IKE_SA_INIT request message received by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.2.1
jnxIkeGlobalResponderIkev2SaInitResponseOutNumber of IKE_SA_INIT response message sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.2.2
jnxIkeGlobalResponderIkev2SaInitNoProposalChosenOutNumber of IKE_SA_INIT NO_PROPSAL_CHOSEN notification sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.2.3
jnxIkeGlobalResponderIkev2SaInitInvalidKePayloadOutNumber of IKE_SA_INIT INVALID_KE_PAYLOAD notification sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.2.4
jnxIkeGlobalResponderIkev2SaInitResInvalidDhGroupConfNumber of IKE_SA_INIT response message invalid DH group configured at Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.2.5
jnxIkeGlobalResponderIkev2SaInitResDhGenKeyFailNumber of IKE_SA_INIT response message Diffie-Hellman generate key failed at Responderro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.2.6
jnxIkeGlobalResponderIkev2SaInitResGetCAsFailNumber of IKE_SA_INIT response message get CAs failed at Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.2.7
jnxIkeGlobalResponderIkev2SaInitResGetVidFailNumber of IKE_SA_INIT response message get vendor ID request failed at Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.2.8
jnxIkeGlobalResponderIkev2SaInitResDhComputeKeyFailNumber of IKE_SA_INIT response message Diffie-Hellman compute key failed at Responderro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.2.9
jnxIkeGlobalResponderIkev2SaInitCookieRequestOutNumber of IKE_SA_INIT COOKIE notification request message sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.2.10
jnxIkeGlobalResponderIkev2SaInitCookieResponseInNumber of IKE_SA_INIT COOKIE notification response message received by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.2.11
jnxIkeGlobalInitiatorIkev2AuthStats
OBJECT IDENTIFIER
.1.3.6.1.4.1.2636.3.52.1.1.3.3
jnxIkeGlobalInitiatorIkev2AuthRequestOutNumber of IKE_AUTH request message sent by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.3.1
jnxIkeGlobalInitiatorIkev2AuthResponseInNumber of IKE_AUTH response message received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.3.2
jnxIkeGlobalInitiatorIkev2AuthNoProposalChosenInNumber of IKE_AUTH NO_PROPSAL_CHOSEN notification received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.3.3
jnxIkeGlobalInitiatorIkev2AuthTsUnacceptableInNumber of IKE_AUTH TS_UNACCEPTABLE notification received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.3.4
jnxIkeGlobalInitiatorIkev2AuthAuthenticationFailedInNumber of IKE_AUTH AUTHENTICATION_FAILED notification received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.3.5
jnxIkeGlobalResponderIkev2AuthStats
OBJECT IDENTIFIER
.1.3.6.1.4.1.2636.3.52.1.1.3.4
jnxIkeGlobalResponderIkev2AuthRequestInNumber of IKE_AUTH request message received by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.4.1
jnxIkeGlobalResponderIkev2AuthResponseOutNumber of IKE_AUTH response message sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.4.2
jnxIkeGlobalResponderIkev2AuthNoProposalChosenOutNumber of IKE_AUTH NO_PROPSAL_CHOSEN notification sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.4.3
jnxIkeGlobalResponderIkev2AuthTsUnacceptableOutNumber of IKE_AUTH TS_UNACCEPTABLE notification sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.4.4
jnxIkeGlobalResponderIkev2AuthAuthenticationFailedOutNumber of IKE_AUTH request message AUTHENTICATION_FAILED notification sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.4.5
jnxIkeGlobalInitiatorIkev2IkeSaRekeyStats
OBJECT IDENTIFIER
.1.3.6.1.4.1.2636.3.52.1.1.3.5
jnxIkeGlobalInitiatorIkev2IkeSaRekeyRequestOutNumber of IKE SA rekey CREATE_CHILD_SA request message sent by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.5.1
jnxIkeGlobalInitiatorIkev2IkeSaRekeyResponseInNumber of IKE SA rekey CREATE_CHILD_SA response message received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.5.2
jnxIkeGlobalInitiatorIkev2IkeSaRekeyNoProposalChosenInNumber of IKE SA rekey NO_PROPSAL_CHOSEN notification received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.5.3
jnxIkeGlobalInitiatorIkev2IkeSaRekeyInvalidKeInNumber of IKE SA rekey INVALID_KE_PAYLOAD notification received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.5.4
jnxIkeGlobalInitiatorIkev2IkeSaRekeyResDhComputeKeyFailNumber of IKE SA rekey response message Diffie-Hellman compute key failed at Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.5.5
jnxIkeGlobalInitiatorIkev2IkeSaRekeyResVerifySaFailNumber of IKE SA rekey response message verification of peer SA failed at Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.5.6
jnxIkeGlobalInitiatorIkev2IkeSaRekeyResFillIkeSaFailNumber of IKE SA rekey response message fill IKE SA failed at Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.5.7
jnxIkeGlobalInitiatorIkev2IkeSaRekeyResVerifyDhGroupFailNumber of IKE SA rekey response message verification of DH group failed at Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.5.8
jnxIkeGlobalResponderIkev2IkeSaRekeyStats
OBJECT IDENTIFIER
.1.3.6.1.4.1.2636.3.52.1.1.3.6
jnxIkeGlobalResponderIkev2IkeSaRekeyRequestInNumber of IKE SA rekey request message received by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.6.1
jnxIkeGlobalResponderIkev2IkeSaRekeyResponseOutNumber of IKE SA rekey response message sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.6.2
jnxIkeGlobalResponderIkev2IkeSaRekeyNoProposalChosenOutNumber of IKE SA rekey NO_PROPSAL_CHOSEN notification sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.6.3
jnxIkeGlobalResponderIkev2IkeSaRekeyInvalidKeOutNumber of IKE SA rekey INVALID_KE_PAYLOAD notification sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.6.4
jnxIkeGlobalResponderIkev2IkeSaRekeyResDhComputeKeyFailNumber of IKE SA rekey response message Diffie-Hellman compute key failed at Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.6.5
jnxIkeGlobalInitiatorIkev2IpsecSaRekeyStats
OBJECT IDENTIFIER
.1.3.6.1.4.1.2636.3.52.1.1.3.7
jnxIkeGlobalInitiatorIkev2IpsecSaRekeyRequestOutNumber of IPSec SA rekey request message sent by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.7.1
jnxIkeGlobalInitiatorIkev2IpsecSaRekeyResponseInNumber of IPSec SA rekey response message received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.7.2
jnxIkeGlobalInitiatorIkev2IpsecSaRekeyNoProposalChosenInNumber of IPSec SA rekey NO_PROPSAL_CHOSEN notification received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.7.3
jnxIkeGlobalInitiatorIkev2IpsecSaRekeyInvalidKeInNumber of IPSec SA rekey INVALID_KE_PAYLOAD notification received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.7.4
jnxIkeGlobalInitiatorIkev2IpsecSaRekeyTsUnacceptableInNumber of IPSec SA rekey TS_UNACCEPTABLE notification received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.7.5
jnxIkeGlobalInitiatorIkev2IpsecSaRekeyResVerifySaFailNumber of IPSec SA rekey response message verification of peer SA failed at Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.7.6
jnxIkeGlobalInitiatorIkev2IpsecSaRekeyResDhComputeKeyFailNumber of IPSec SA rekey response message Diffie-Hellman compute key failed at Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.7.7
jnxIkeGlobalInitiatorIkev2IpsecSaRekeyResVerifyDhGroupFailNumber of IPSec SA rekey response message verification of DH group failed at Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.7.8
jnxIkeGlobalInitiatorIkev2IpsecSaRekeyResVerifyTsFailNumber of IPSec SA rekey response message verification of TS failed at Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.7.9
jnxIkeGlobalResponderIkev2IpsecSaRekeyStats
OBJECT IDENTIFIER
.1.3.6.1.4.1.2636.3.52.1.1.3.8
jnxIkeGlobalResponderIkev2IpsecSaRekeyRequestInNumber of IPSec SA rekey request message received by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.8.1
jnxIkeGlobalResponderIkev2IpsecSaRekeyResponseOutNumber of IPSec SA rekey response message sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.8.2
jnxIkeGlobalResponderIkev2IpsecSaRekeyNoProposalChosenOutNumber of IPSec SA rekey NO_PROPSAL_CHOSEN notification sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.8.3
jnxIkeGlobalResponderIkev2IpsecSaRekeyInvalidKeOutNumber of IPSec SA rekey INVALID_KE_PAYLOAD notification sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.8.4
jnxIkeGlobalResponderIkev2IpsecSaRekeyTsUnacceptableOutNumber of IPSec SA rekey TS_UNACCEPTABLE notification sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.8.5
jnxIkeGlobalResponderIkev2IpsecSaRekeyResDhComputeKeyFailNumber of IPSec SA rekey response message Diffie-Hellman compute key failed at Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.8.6
jnxIkeGlobalIkev2MsgFailStats
OBJECT IDENTIFIER
.1.3.6.1.4.1.2636.3.52.1.1.3.9
jnxIkeGlobalIkev2TotalDiscardedTotal number of discarded messages. Includes the failures encountered during decode of IKEv2 packets that is failures before the IKEv2 exchange payload processing. Also this counter encompasses all the other message failure counters.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.9.1
jnxIkeGlobalIkev2TotalIdErrorTotal number of messages with ID error. Message ID is not compliant with what is expected. For ex. IKE_SA_INIT message with message ID larger than zero is encountered.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.9.2
jnxIkeGlobalIkev2TotalIntegrityFailTotal number of messages with Integrity check failure.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.9.3
jnxIkeGlobalIkev2TotalInvalidSPITotal number of messages with Invalid SPI failure. Used one of the SPIs to find the SA, but the other SPI is not matching. Invalid IKE SPIs in IKE_SA_INIT response message at Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.9.4
jnxIkeGlobalIkev2TotalInvalidExchgTypeTotal number of messages with unknown / unexpected exchange type encountered during message exchange.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.9.5
jnxIkeGlobalIkev2TotalInvalidLengthTotal number of messages with Invalid length failure. During decode a malformed message where length is inconsistent with that indicated in header is encountered.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.9.6
jnxIkeGlobalIkev2TotalDisorderTotal number of messages failure due to disorder. Packet message ID is out of window. For a response packet the corresponding request with given message ID is not found.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.3.9.7
jnxIkePeerAddrTableThe IKE Key Exchange Peer Address Table. There is one entry in this table for each IKE peer with which the managed entity is currently associated.
SEQUENCE OF JnxIkePeerAddrEntry
.1.3.6.1.4.1.2636.3.52.1.1.4
jnxIkePeerAddrEntryEach entry contains the attributes associated with an IKE Peer.
JnxIkePeerAddrEntry
.1.3.6.1.4.1.2636.3.52.1.1.4.1
jnxIkePeerAddrStateThe state of the peer, it can be: 1. active - The IKE peer is currently associated by an active IKE SA. There is at least one active IKE SA or Tunnel termination on the managed entity from the peer. 2. down - The IKE peer was associated with a previously active IKE SA.ro
JnxPeerStateType
.1.3.6.1.4.1.2636.3.52.1.1.4.1.1
jnxIkePeerAddrRemoteGwAddrTypeThe IP address type of the remote gateway (endpoint) for the IPSec Phase-1 IKE Tunnel.ro
InetAddressType (INET-ADDRESS-MIB)
.1.3.6.1.4.1.2636.3.52.1.1.4.1.2
jnxIkePeerAddrRemoteGwAddrThe IP address of the remote gateway (endpoint) for the IPSec Phase-1 IKE Tunnel.ro
InetAddress (INET-ADDRESS-MIB)
.1.3.6.1.4.1.2636.3.52.1.1.4.1.3
jnxIkePeerAddrRemotePortThe port number of the remote gateway (endpoint) for the IKE SA negotiation. The port number zero means the input value is ignored for this object and the default port is considered.ro
InetPortNumber (INET-ADDRESS-MIB)
.1.3.6.1.4.1.2636.3.52.1.1.4.1.4
jnxIkePeerAddrLocalGwAddrTypeThe IP address type of the local endpoint (gateway) for the IPSec Phase-1 IKE Tunnel.ro
InetAddressType (INET-ADDRESS-MIB)
.1.3.6.1.4.1.2636.3.52.1.1.4.1.5
jnxIkePeerAddrLocalGwAddrThe IP address of the local endpoint (gateway) for the IPSec Phase-1 IKE Tunnel.ro
InetAddress (INET-ADDRESS-MIB)
.1.3.6.1.4.1.2636.3.52.1.1.4.1.6
jnxIkePeerAddrLocalPortThe port number of the local gateway (endpoint) for the IKE SA negotiation. The port number zero means the input value is ignored for this object and the default port is considered.ro
InetPortNumber (INET-ADDRESS-MIB)
.1.3.6.1.4.1.2636.3.52.1.1.4.1.7
jnxIkePeerAddrRoutingInstanceThe VR ID.ro
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.1.4.1.8
jnxIkePeerAddrIndexThe index of the IPSec Phase-1 key exchange Peer Table. The value of the index is a number which begins at one and is incremented with each peer that is created due to an association. The value of this object will wrap at 2,147,483,647.ro
Unsigned32
.1.3.6.1.4.1.2636.3.52.1.1.4.1.9
jnxIkePeerIdTableThe IKE Key Exchange Peer ID Table. There is one entry in this table for each IKE peer with which the managed entity is currently associated. In the index truncated value for Remote ID value, Local ID value and AAA username is used to restrict the length of the SNMP index to a legal size. In the index, for jnxIkePeerIdRemoteId and jnxIkePeerIdLocalId, any string longer than 41 bytes will be truncated and only 41 bytes would be considered. Similarly in the index, for jnxIkePeerIdAAAUserName, any string longer than 25 bytes will be truncated and only 25 bytes would be considered. Because of the truncation, the index may become same for different peers, to keep the index unique, jnxIkePeerInternalIndex is used to uniquely identify each peer.
SEQUENCE OF JnxIkePeerIdEntry
.1.3.6.1.4.1.2636.3.52.1.1.5
jnxIkePeerIdEntryEach entry contains the attributes associated with an IKE Peer.
JnxIkePeerIdEntry
.1.3.6.1.4.1.2636.3.52.1.1.5.1
jnxIkePeerIdStateThe state of the peer, it can be: 1. active - The IKE peer is currently associated by an active IKE SA. There is at least one active IKE SA or Tunnel termination on the managed entity from the peer. 2. down - The IKE peer was associated with a previously active IKE SA.ro
JnxPeerStateType
.1.3.6.1.4.1.2636.3.52.1.1.5.1.1
jnxIkePeerIdRemoteIdTypeThe type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name string. 3. or a distinguished name string.ro
JnxIkePeerType
.1.3.6.1.4.1.2636.3.52.1.1.5.1.2
jnxIkePeerIdRemoteIdValueThe value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is id_fqdn, then this is the FQDN of the remote peer. If the remote peer type is a id_dn, then this is the distinguished named string of the remote peer.ro
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.1.5.1.3
jnxIkePeerIdLocalIdTypeThe type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name string. 3. or a distinguished name string.ro
JnxIkePeerType
.1.3.6.1.4.1.2636.3.52.1.1.5.1.4
jnxIkePeerIdLocalIdValueThe value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is id_fqdn, then this is the FQDN of the remote peer. If the local peer type is a id_dn, then this is the distinguished name string of the local peer.ro
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.1.5.1.5
jnxIkePeerIdAAAUserNameIdentifies the user with the specified authentication, authorization and accounting (AAA) username, associated with the IKE SA negotiation.ro
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.1.5.1.6
jnxIkePeerInternalIndexThe internal index of the Peer Id table. This index is used to uniquely identify multiple entry for the same truncated ids.
Integer32
.1.3.6.1.4.1.2636.3.52.1.1.5.1.7
jnxIkePeerIdIndexThe index of the IPSec Phase-1 key exchange Peer Table. The value of the index is a number which begins at one and is incremented with each peer that is created due to an association. The value of this object will wrap at 2,147,483,647.ro
Unsigned32
.1.3.6.1.4.1.2636.3.52.1.1.5.1.8
jnxIkePeerStatsTableThe IKE Key Exchange Peer Stats Table. There is one entry in this table for each IKE peer with which the managed entity is currently associated.
SEQUENCE OF JnxIkePeerStatsEntry
.1.3.6.1.4.1.2636.3.52.1.1.6
jnxIkePeerStatsEntryEach entry contains the attributes associated with an IKE Peer.
JnxIkePeerStatsEntry
.1.3.6.1.4.1.2636.3.52.1.1.6.1
jnxIkePeerStatsStateThe state of the peer, it can be: 1. active - The IKE peer is currently associated by an active IKE SA. There is at least one active IKE SA or Tunnel termination on the managed entity from the peer. 2. down - The IKE peer was associated with a previously active IKE SA.ro
JnxPeerStateType
.1.3.6.1.4.1.2636.3.52.1.1.6.1.1
jnxIkePeerStatsIndexThe index of the IPSec Phase-1 key exchange Peer Table. The value of the index is a number which begins at one and is incremented with each peer that is created due to an association. The value of this object will wrap at 2,147,483,647.ro
Unsigned32
.1.3.6.1.4.1.2636.3.52.1.1.6.1.2
jnxIkePeerStatsRemoteGwAddrTypeThe IP address type of the remote gateway (endpoint) for the IPSec Phase-1 IKE Tunnel.ro
InetAddressType (INET-ADDRESS-MIB)
.1.3.6.1.4.1.2636.3.52.1.1.6.1.3
jnxIkePeerStatsRemoteGwAddrThe IP address of the remote gateway (endpoint) for the IPSec Phase-1 IKE Tunnel.ro
InetAddress (INET-ADDRESS-MIB)
.1.3.6.1.4.1.2636.3.52.1.1.6.1.4
jnxIkePeerStatsRemotePortThe value specifying a port associated with the remote gateway (endpoint) for the IKE Tunnel. A value of zero means that the port should be ignored.ro
InetPortNumber (INET-ADDRESS-MIB)
.1.3.6.1.4.1.2636.3.52.1.1.6.1.5
jnxIkePeerStatsLocalGwAddrTypeThe IP address type of the local endpoint (gateway) for the IPSec Phase-1 IKE Tunnel.ro
InetAddressType (INET-ADDRESS-MIB)
.1.3.6.1.4.1.2636.3.52.1.1.6.1.6
jnxIkePeerStatsLocalGwAddrThe IP address of the local endpoint (gateway) for the IPSec Phase-1 IKE Tunnel.ro
InetAddress (INET-ADDRESS-MIB)
.1.3.6.1.4.1.2636.3.52.1.1.6.1.7
jnxIkePeerStatsLocalPortThe value specifying a port associated with the local endpoint (gateway) for the IKE Tunnel. A value of zero means that the port should be ignored.ro
InetPortNumber (INET-ADDRESS-MIB)
.1.3.6.1.4.1.2636.3.52.1.1.6.1.8
jnxIkePeerStatsRoutingInstanceThe VR ID.ro
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.1.6.1.9
jnxIkePeerStatsRemoteIdTypeThe type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name string. 3. or a distinguished name string.ro
JnxIkePeerType
.1.3.6.1.4.1.2636.3.52.1.1.6.1.10
jnxIkePeerStatsRemoteIdValueThe value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is id_fqdn, then this is the FQDN of the remote peer. If the remote peer type is a id_dn, then this is the distinguished named string of the remote peer.ro
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.1.6.1.11
jnxIkePeerStatsLocalIdTypeThe type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name string. 3. or a distinguished name string.ro
JnxIkePeerType
.1.3.6.1.4.1.2636.3.52.1.1.6.1.12
jnxIkePeerStatsLocalIdValueThe value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is id_fqdn, then this is the FQDN of the remote peer. If the local peer type is a id_dn, then this is the distinguished name string of the local peer.ro
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.1.6.1.13
jnxIkePeerStatsAAAUserNameThe extended authentication User Name, identifies the user associated with the IKE SA negotiation.ro
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.1.6.1.14
jnxIkePeerStatsGwNameThe gateway namero
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.1.6.1.15
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitRequestOutThe number of IKE_SA_INIT request message sent by Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.16
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitResponseInThe number of IKE_SA_INIT response message received by Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.17
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitResInvalidIkeSpiThe number of IKE_SA_INIT response message containing invalid SPI received by Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.18
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitInvalidKePayloadInThe total number of IKE_SA_INIT INVALID_KE_PAYLOAD received by Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.19
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitNoProposalChosenInThe number of IKE_SA_INIT NO_PROPSAL_CHOSEN received by Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.20
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitResVerifySaFailThe number of IKE_SA_INIT response message verification of peer SA failed at Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.21
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitResIkeSaFillFailThe number of IKE_SA_INIT response message IKE_SA fill operation failed at Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.22
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitResVerifyDhGroupFailThe number of IKE_SA_INIT response message verification of DH group failed at Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.23
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitCookieRequestInThe total number of IKE_SA_INIT COOKIE notification request message received by Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.24
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitCookieResponseOutThe total number of IKE_SA_INIT COOKIE notification response message sent by Responder.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.25
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitResDhComputeKeyFailNumber of IKE SA rekey response message Diffie-Hellman compute key failed at Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.26
jnxIkePeerStatsIkeSaResponderIkev2SaInitRequestInThe number of IKE_SA_INIT request message received by Responder.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.27
jnxIkePeerStatsIkeSaResponderIkev2SaInitResponseOutThe number of IKE_SA_INIT response message sent by Responder.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.28
jnxIkePeerStatsIkeSaResponderIkev2SaInitNoProposalChosenOutThe number of IKE_SA_INIT NO_PROPSAL_CHOSEN notification sent by Responderro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.29
jnxIkePeerStatsIkeSaResponderIkev2SaInitInvalidKePayloadOutThe number of IKE_SA_INIT INVALID_KE_PAYLOAD notification sent by Responder.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.30
jnxIkePeerStatsIkeSaResponderIkev2SaInitResInvalidDhGroupConfThe number of IKE_SA_INIT response message invalid DH group configured at Responder.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.31
jnxIkePeerStatsIkeSaResponderIkev2SaInitResDhGenKeyFailThe number of IKE_SA_INIT response message Diffie-Hellman generate key failed at Responderro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.32
jnxIkePeerStatsIkeSaResponderIkev2SaInitResGetCAsFailThe number of IKE_SA_INIT response message get CAs failed at Responder.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.33
jnxIkePeerStatsIkeSaResponderIkev2SaInitResGetVidFailThe number of IKE_SA_INIT response message get vendor ID request failed at Responder.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.34
jnxIkePeerStatsIkeSaResponderIkev2SaInitResDhComputeKeyFailThe number of IKE_SA_INIT response message Diffie-Hellman compute key failed at Responderro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.35
jnxIkePeerStatsIkeSaResponderIkev2SaInitCookieRequestOutThe number of IKE_SA_INIT COOKIE notification request sent by Responder.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.36
jnxIkePeerStatsIkeSaResponderIkev2SaInitCookieResponseInThe number of IKE_SA_INIT COOKIE notification response message received by Responder.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.37
jnxIkePeerStatsIkeSaInitiatorIkev2AuthRequestOutThe total number of IKE_AUTH request message sent by Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.38
jnxIkePeerStatsIkeSaInitiatorIkev2AuthResponseInThe total number of IKE_AUTH response message received by Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.39
jnxIkePeerStatsIkeSaInitiatorIkev2AuthNoProposalChosenInThe number of IKE_AUTH NO_PROPSAL_CHOSEN notification received by Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.40
jnxIkePeerStatsIkeSaInitiatorIkev2AuthTsUnacceptableInThe number of IKE_AUTH TS_UNACCEPTABLE notification received by Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.41
jnxIkePeerStatsIkeSaInitiatorIkev2AuthAuthenticationFailedInThe number of IKE_AUTH AUTHENTICATION_FAILED notification received by Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.42
jnxIkePeerStatsIkeSaResponderIkev2AuthRequestInThe number of IKE_AUTH request message received by Responder.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.43
jnxIkePeerStatsIkeSaResponderIkev2AuthResponseOutThe number of IKE_AUTH response message sent by Responder.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.44
jnxIkePeerStatsIkeSaResponderIkev2AuthAuthenticationFailedOutThe number of IKE_AUTH request message AUTHENTICATION_FAILED notification sent by Responder.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.45
jnxIkePeerStatsIkeSaResponderIkev2AuthNoProposalChosenOutThe number of IKE_AUTH NO_PROPSAL_CHOSEN notification sent by Responder.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.46
jnxIkePeerStatsIkeSaResponderIkev2AuthTsUnacceptableOutThe number of IKE_AUTH TS_UNACCEPTABLE notification sent by Responder.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.47
jnxIkePeerStatsIkeSaInitiatorIkev2IkeSaRekeyRequestOutThe number of IKE_SA rekey CREATE_CHILD_SA request message sent by Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.48
jnxIkePeerStatsIkeSaInitiatorIkev2IkeSaRekeyResponseInThe number of IKE_SA rekey CREATE_CHILD_SA response message received by Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.49
jnxIkePeerStatsIkeSaInitiatorIkev2IkeSaRekeyNoProposalChosenInThe number of CREATE_CHILD_SA IKE SA rekey NO_PROPSAL_CHOSEN notification received by Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.50
jnxIkePeerStatsIkeSaInitiatorIkev2IkeSaRekeyInvalidKeInThe number of CREATE_CHILD_SA IKE SA rekey INVALID_KE_PAYLOAD received by Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.51
jnxIkePeerStatsIkeSaInitiatorIkev2IkeSaRekeyResVerifySaFailThe number of CREATE_CHILD_SA IKE SA rekey response message verification of peer SA failed at Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.52
jnxIkePeerStatsIkeSaInitiatorIkev2IkeSaRekeyResFillIkeSaFailThe number of IKE_SA rekey CREATE_CHILD_SA response message fill IKE_SA failed at Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.53
jnxIkePeerStatsIkeSaInitiatorIkev2IkeSaRekeyResVerifyDhGroupFailThe number of CREATE_CHILD_SA IKE SA rekey response message verification of DH group failed at Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.54
jnxIkePeerStatsIkeSaInitiatorIkev2IkeSaRekeyResDhComputeKeyFailThe number of CREATE_CHILD_SA IKE SA rekey response message Diffie-Hellman compute key failed at Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.55
jnxIkePeerStatsIkeSaResponderIkev2IkeSaRekeyRequestInThe number of IKE_SA rekey CREATE_CHILD_SA request message received by Responder.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.56
jnxIkePeerStatsIkeSaResponderIkev2IkeSaRekeyResponseOutThe number of IKE_SA rekey CREATE_CHILD_SA response message sent by Responder.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.57
jnxIkePeerStatsIkeSaResponderIkev2IkeSaRekeyNoProposalChosenOutThe number of CREATE_CHILD_SA IKE rekey NO_PROPSAL_CHOSEN notification sent by Responderro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.58
jnxIkePeerStatsIkeSaResponderIkev2IkeSaRekeyInvalidKeOutThe number of IKE_SA rekey CREATE_CHILD_SA INVALID_KE_PAYLOAD sent by Responder.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.59
jnxIkePeerStatsIkeSaResponderIkev2IkeSaRekeyResDhComputeKeyFailThe number of CREATE_CHILD_SA IKE rekey response message Diffie-Hellman compute key failed at Responder.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.60
jnxIkePeerStatsIkeSaInitiatorIkev2IPSecSaRekeyRequestOutThe number of IPSec SA rekey CREATE_CHILD_SA request message sent by Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.61
jnxIkePeerStatsIkeSaInitiatorIkev2IPSecSaRekeyResponseInThe number of IPSec SA rekey CREATE_CHILD_SA response message received by Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.62
jnxIkePeerStatsIkeSaInitiatorIkev2IPSecSaRekeyNoProposalChosenInThe number of IPSec SA rekey CREATE_CHILD_SA NO_PROPSAL_CHOSEN notification received by Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.63
jnxIkePeerStatsIkeSaInitiatorIkev2IPSecSaRekeyInvalidKeInThe number of IPSec SA rekey CREATE_CHILD_SA INVALID_KE_PAYLOAD received by Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.64
jnxIkePeerStatsIkeSaInitiatorIkev2IPSecSaRekeyTsUnacceptableInThe number of IPSec SA rekey CREATE_CHILD_SA TS_UNACCEPTABLE notification received by Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.65
jnxIkePeerStatsIkeSaInitiatorIkev2IPSecSaRekeyResVerifySaFailThe number of IPSec SA rekey CREATE_CHILD_SA response message verification of peer SA failed at Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.66
jnxIkePeerStatsIkeSaInitiatorIkev2IPSecSaRekeyResVerifyDhGrpFailThe number of IPSec SA rekey CREATE_CHILD_SA response message verification of DH group failed at Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.67
jnxIkePeerStatsIkeSaInitiatorIkev2IPSecSaRekeyResVerifyTsFailThe number of IPSec SA rekey CREATE_CHILD_SA response message verification of TS failed at Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.68
jnxIkePeerStatsIkeSaInitiatorIkev2IPSecSaRekeyResDhCompKeyFailThe number of IPSec SA rekey CREATE_CHILD_SA response message Diffie-Hellman compute key failed at Initiator.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.69
jnxIkePeerStatsIkeSaResponderIkev2IPSecSaRekeyRequestInThe total number of IPSec SA rekey CREATE_CHILD_SA request message received by Responder.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.70
jnxIkePeerStatsIkeSaResponderIkev2IPSecSaRekeyResponseOutThe total number of IPSec SA rekey CREATE_CHILD_SA response message sent by Responder.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.71
jnxIkePeerStatsIkeSaResponderIkev2IPSecSaRekeyNoPropChosenOutThe number of IPSec SA rekey CREATE_CHILD_SA NO_PROPSAL_CHOSEN Notification sent by Responder.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.72
jnxIkePeerStatsIkeSaResponderIkev2IPSecSaRekeyInvalidKeOutThe number of IPSec SA rekey CREATE_CHILD_SA INVALID_KE_PAYLOAD Notification sent by Responder.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.73
jnxIkePeerStatsIkeSaResponderIkev2IPSecSaRekeyTsUnacceptableOutThe number of IPSec SA rekey CREATE_CHILD_SA TS_UNACCEPTABLE notification sent by Responder.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.74
jnxIkePeerStatsIkeSaResponderIkev2IPSecSaRekeyResDhCompKeyFailThe number of IPSec SA rekey CREATE_CHILD_SA response message Diffie-Hellman compute key failed at Responder.ro
Counter64 UNITS "Messages"
.1.3.6.1.4.1.2636.3.52.1.1.6.1.75
jnxIkePeerStatsTunTypeThe Tunnel type. It can be regular (1) or ha-link (2).ro
JnxIkeTunType
.1.3.6.1.4.1.2636.3.52.1.1.6.1.76
jnxPeerIkeSaCorrTableThe Peer Association to active IKE SA - Correlation Table. There is one entry in this table for each active IKE SA.
SEQUENCE OF JnxPeerIkeSaCorrEntry
.1.3.6.1.4.1.2636.3.52.1.1.7
jnxPeerIkeSaCorrEntryEach entry contains the attributes of an Peer Association to active IKE SA Correlation.
JnxPeerIkeSaCorrEntry
.1.3.6.1.4.1.2636.3.52.1.1.7.1
jnxPeerIkeSaCorrPeerIndexThe index of the Peer (jnxPeerIndex in the jnxIkePeerTable).
Integer32
.1.3.6.1.4.1.2636.3.52.1.1.7.1.1
jnxPeerIkeSaCorrIntIndexThe internal index of the Peer and IKE SA association. This internal index is used to uniquely identify multiple Instances of a unique association between the peer and IKE SA.
Integer32
.1.3.6.1.4.1.2636.3.52.1.1.7.1.2
jnxPeerIkeSaCorrIkeTunMonIndexThe index of the active IKE SA (jnxIkeTunMonIndex in the jnxIkeTunnelMonTable) for this Peer association.ro
Unsigned32
.1.3.6.1.4.1.2636.3.52.1.1.7.1.3
jnxPeerIPSecTunnelCorrTableThe Peer Association to IPSec Tunnel Correlation Table. There is one entry in this table for each active IPSec Tunnel.
SEQUENCE OF JnxPeerIPSecTunnelCorrEntry
.1.3.6.1.4.1.2636.3.52.1.1.8
jnxPeerIPSecTunnelCorrEntryEach entry contains the attributes of an Peer Association to active IPSec Tunnel Correlation.
JnxPeerIPSecTunnelCorrEntry
.1.3.6.1.4.1.2636.3.52.1.1.8.1
jnxPeerIPSecTunnelCorrPeerIndexThe index of the Peer (jnxPeerIndex in the jnxIkePeerTable).
Integer32
.1.3.6.1.4.1.2636.3.52.1.1.8.1.1
jnxPeerIPSecTunnelCorrIntIndexThe internal index of the Peer and IPSec Tunnel association. This index is used to uniquely identify multiple association between the peer and IPSec Tunnel.
Integer32
.1.3.6.1.4.1.2636.3.52.1.1.8.1.2
jnxPeerIPSecTunnelCorrIPSecTunMonIndexThe index of the active IPSec Tunnel (jnxIpSecTunMonIndex in the jnxIpSecTunnelMonTable) for this association between Peer and IPSec Tunnel.ro
Integer32
.1.3.6.1.4.1.2636.3.52.1.1.8.1.3
jnxIkeHaLinkGlobalStats
OBJECT IDENTIFIER
.1.3.6.1.4.1.2636.3.52.1.1.9
jnxIkeHaLinkGlobalInitiatorIkev2SaInitStats
OBJECT IDENTIFIER
.1.3.6.1.4.1.2636.3.52.1.1.9.1
jnxIkeHaLinkGlobalInitiatorIkev2SaInitRequestOutNumber of IKE_SA_INIT request message sent by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.1.1
jnxIkeHaLinkGlobalInitiatorIkev2SaInitResponseInNumber of IKE_SA_INIT response message received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.1.2
jnxIkeHaLinkGlobalInitiatorIkev2SaInitResInvalidIkeSpiNumber of IKE_SA_INIT response message containing invalid SPI received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.1.3
jnxIkeHaLinkGlobalInitiatorIkev2SaInitInvalidKePayloadInNumber of IKE_SA_INIT INVALID_KE_PAYLOAD received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.1.4
jnxIkeHaLinkGlobalInitiatorIkev2SaInitNoProposalChosenInNumber of IKE_SA_INIT NO_PROPSAL_CHOSEN received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.1.5
jnxIkeHaLinkGlobalInitiatorIkev2SaInitResVerifySaFailNumber of IKE_SA_INIT response message verification of peer SA failed at Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.1.6
jnxIkeHaLinkGlobalInitiatorIkev2SaInitResIkeSaFillFailNumber of IKE_SA_INIT response message IKE SA fill operation failed at Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.1.7
jnxIkeHaLinkGlobalInitiatorIkev2SaInitResVerifyDhGroupFailNumber of IKE_SA_INIT response message verification of DH group failed at Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.1.8
jnxIkeHaLinkGlobalInitiatorIkev2SaInitCookieRequestInNumber of IKE_SA_INIT COOKIE notification request message received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.1.9
jnxIkeHaLinkGlobalInitiatorIkev2SaInitCookieResponseOutNumber of IKE_SA_INIT COOKIE notification response message sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.1.10
jnxIkeHaLinkGlobalResponderIkev2SaInitStats
OBJECT IDENTIFIER
.1.3.6.1.4.1.2636.3.52.1.1.9.2
jnxIkeHaLinkGlobalResponderIkev2SaInitRequestInNumber of IKE_SA_INIT request message received by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.2.1
jnxIkeHaLinkGlobalResponderIkev2SaInitResponseOutNumber of IKE_SA_INIT response message sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.2.2
jnxIkeHaLinkGlobalResponderIkev2SaInitNoProposalChosenOutNumber of IKE_SA_INIT NO_PROPSAL_CHOSEN notification sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.2.3
jnxIkeHaLinkGlobalResponderIkev2SaInitInvalidKePayloadOutNumber of IKE_SA_INIT INVALID_KE_PAYLOAD notification sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.2.4
jnxIkeHaLinkGlobalResponderIkev2SaInitResInvalidDhGroupConfNumber of IKE_SA_INIT response message invalid DH group configured at Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.2.5
jnxIkeHaLinkGlobalResponderIkev2SaInitResDhGenKeyFailNumber of IKE_SA_INIT response message Diffie-Hellman generate key failed at Responderro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.2.6
jnxIkeHaLinkGlobalResponderIkev2SaInitResGetCAsFailNumber of IKE_SA_INIT response message get CAs failed at Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.2.7
jnxIkeHaLinkGlobalResponderIkev2SaInitResGetVidFailNumber of IKE_SA_INIT response message get vendor ID request failed at Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.2.8
jnxIkeHaLinkGlobalResponderIkev2SaInitResDhComputeKeyFailNumber of IKE_SA_INIT response message Diffie-Hellman compute key failed at Responderro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.2.9
jnxIkeHaLinkGlobalResponderIkev2SaInitCookieRequestOutNumber of IKE_SA_INIT COOKIE notification request message sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.2.10
jnxIkeHaLinkGlobalResponderIkev2SaInitCookieResponseInNumber of IKE_SA_INIT COOKIE notification response message received by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.2.11
jnxIkeHaLinkGlobalInitiatorIkev2AuthStats
OBJECT IDENTIFIER
.1.3.6.1.4.1.2636.3.52.1.1.9.3
jnxIkeHaLinkGlobalInitiatorIkev2AuthRequestOutNumber of IKE_AUTH request message sent by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.3.1
jnxIkeHaLinkGlobalInitiatorIkev2AuthResponseInNumber of IKE_AUTH response message received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.3.2
jnxIkeHaLinkGlobalInitiatorIkev2AuthNoProposalChosenInNumber of IKE_AUTH NO_PROPSAL_CHOSEN notification received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.3.3
jnxIkeHaLinkGlobalInitiatorIkev2AuthTsUnacceptableInNumber of IKE_AUTH TS_UNACCEPTABLE notification received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.3.4
jnxIkeHaLinkGlobalInitiatorIkev2AuthAuthenticationFailedInNumber of IKE_AUTH AUTHENTICATION_FAILED notification received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.3.5
jnxIkeHaLinkGlobalResponderIkev2AuthStats
OBJECT IDENTIFIER
.1.3.6.1.4.1.2636.3.52.1.1.9.4
jnxIkeHaLinkGlobalResponderIkev2AuthRequestInNumber of IKE_AUTH request message received by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.4.1
jnxIkeHaLinkGlobalResponderIkev2AuthResponseOutNumber of IKE_AUTH response message sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.4.2
jnxIkeHaLinkGlobalResponderIkev2AuthNoProposalChosenOutNumber of IKE_AUTH NO_PROPSAL_CHOSEN notification sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.4.3
jnxIkeHaLinkGlobalResponderIkev2AuthTsUnacceptableOutNumber of IKE_AUTH TS_UNACCEPTABLE notification sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.4.4
jnxIkeHaLinkGlobalResponderIkev2AuthAuthenticationFailedOutNumber of IKE_AUTH request message AUTHENTICATION_FAILED notification sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.4.5
jnxIkeHaLinkGlobalInitiatorIkev2IkeSaRekeyStats
OBJECT IDENTIFIER
.1.3.6.1.4.1.2636.3.52.1.1.9.5
jnxIkeHaLinkGlobalInitiatorIkev2IkeSaRekeyRequestOutNumber of IKE SA rekey CREATE_CHILD_SA request message sent by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.5.1
jnxIkeHaLinkGlobalInitiatorIkev2IkeSaRekeyResponseInNumber of IKE SA rekey CREATE_CHILD_SA response message received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.5.2
jnxIkeHaLinkGlobalInitiatorIkev2IkeSaRekeyNoProposalChosenInNumber of IKE SA rekey NO_PROPSAL_CHOSEN notification received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.5.3
jnxIkeHaLinkGlobalInitiatorIkev2IkeSaRekeyInvalidKeInNumber of IKE SA rekey INVALID_KE_PAYLOAD notification received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.5.4
jnxIkeHaLinkGlobalInitiatorIkev2IkeSaRekeyResDhComputeKeyFailNumber of IKE SA rekey response message Diffie-Hellman compute key failed at Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.5.5
jnxIkeHaLinkGlobalInitiatorIkev2IkeSaRekeyResVerifySaFailNumber of IKE SA rekey response message verification of peer SA failed at Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.5.6
jnxIkeHaLinkGlobalInitiatorIkev2IkeSaRekeyResFillIkeSaFailNumber of IKE SA rekey response message fill IKE SA failed at Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.5.7
jnxIkeHaLinkGlobalInitiatorIkev2IkeSaRekeyResVerifyDhGroupFailNumber of IKE SA rekey response message verification of DH group failed at Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.5.8
jnxIkeHaLinkGlobalResponderIkev2IkeSaRekeyStats
OBJECT IDENTIFIER
.1.3.6.1.4.1.2636.3.52.1.1.9.6
jnxIkeHaLinkGlobalResponderIkev2IkeSaRekeyRequestInNumber of IKE SA rekey request message received by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.6.1
jnxIkeHaLinkGlobalResponderIkev2IkeSaRekeyResponseOutNumber of IKE SA rekey response message sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.6.2
jnxIkeHaLinkGlobalResponderIkev2IkeSaRekeyNoProposalChosenOutNumber of IKE SA rekey NO_PROPSAL_CHOSEN notification sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.6.3
jnxIkeHaLinkGlobalResponderIkev2IkeSaRekeyInvalidKeOutNumber of IKE SA rekey INVALID_KE_PAYLOAD notification sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.6.4
jnxIkeHaLinkGlobalResponderIkev2IkeSaRekeyResDhComputeKeyFailNumber of IKE SA rekey response message Diffie-Hellman compute key failed at Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.6.5
jnxIkeHaLinkGlobalInitiatorIkev2IpsecSaRekeyStats
OBJECT IDENTIFIER
.1.3.6.1.4.1.2636.3.52.1.1.9.7
jnxIkeHaLinkGlobalInitiatorIkev2IpsecSaRekeyRequestOutNumber of IPSec SA rekey request message sent by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.7.1
jnxIkeHaLinkGlobalInitiatorIkev2IpsecSaRekeyResponseInNumber of IPSec SA rekey response message received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.7.2
jnxIkeHaLinkGlobalInitiatorIkev2IpsecSaRekeyNoProposalChosenInNumber of IPSec SA rekey NO_PROPSAL_CHOSEN notification received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.7.3
jnxIkeHaLinkGlobalInitiatorIkev2IpsecSaRekeyInvalidKeInNumber of IPSec SA rekey INVALID_KE_PAYLOAD notification received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.7.4
jnxIkeHaLinkGlobalInitiatorIkev2IpsecSaRekeyTsUnacceptableInNumber of IPSec SA rekey TS_UNACCEPTABLE notification received by Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.7.5
jnxIkeHaLinkGlobalInitiatorIkev2IpsecSaRekeyResVerifySaFailNumber of IPSec SA rekey response message verification of peer SA failed at Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.7.6
jnxIkeHaLinkGlobalInitiatorIkev2IpsecSaRekeyResDhComputeKeyFailNumber of IPSec SA rekey response message Diffie-Hellman compute key failed at Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.7.7
jnxIkeHaLinkGlobalInitiatorIkev2IpsecSaRekeyResVerifyDhGroupFailNumber of IPSec SA rekey response message verification of DH group failed at Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.7.8
jnxIkeHaLinkGlobalInitiatorIkev2IpsecSaRekeyResVerifyTsFailNumber of IPSec SA rekey response message verification of TS failed at Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.7.9
jnxIkeHaLinkGlobalResponderIkev2IpsecSaRekeyStats
OBJECT IDENTIFIER
.1.3.6.1.4.1.2636.3.52.1.1.9.8
jnxIkeHaLinkGlobalResponderIkev2IpsecSaRekeyRequestInNumber of IPSec SA rekey request message received by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.8.1
jnxIkeHaLinkGlobalResponderIkev2IpsecSaRekeyResponseOutNumber of IPSec SA rekey response message sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.8.2
jnxIkeHaLinkGlobalResponderIkev2IpsecSaRekeyNoProposalChosenOutNumber of IPSec SA rekey NO_PROPSAL_CHOSEN notification sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.8.3
jnxIkeHaLinkGlobalResponderIkev2IpsecSaRekeyInvalidKeOutNumber of IPSec SA rekey INVALID_KE_PAYLOAD notification sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.8.4
jnxIkeHaLinkGlobalResponderIkev2IpsecSaRekeyTsUnacceptableOutNumber of IPSec SA rekey TS_UNACCEPTABLE notification sent by Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.8.5
jnxIkeHaLinkGlobalResponderIkev2IpsecSaRekeyResDhComputeKeyFailNumber of IPSec SA rekey response message Diffie-Hellman compute key failed at Responder.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.8.6
jnxIkeHaLinkGlobalIkev2MsgFailStats
OBJECT IDENTIFIER
.1.3.6.1.4.1.2636.3.52.1.1.9.9
jnxIkeHaLinkGlobalIkev2TotalDiscardedTotal number of discarded messages. Includes the failures encountered during decode of IKEv2 packets that is failures before the IKEv2 exchange payload processing. Also this counter encompasses all the other message failure counters.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.9.1
jnxIkeHaLinkGlobalIkev2TotalIdErrorTotal number of messages with ID error. Message ID is not compliant with what is expected. For ex. IKE_SA_INIT message with message ID larger than zero is encountered.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.9.2
jnxIkeHaLinkGlobalIkev2TotalIntegrityFailTotal number of messages with Integrity check failure.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.9.3
jnxIkeHaLinkGlobalIkev2TotalInvalidSPITotal number of messages with Invalid SPI failure. Used one of the SPIs to find the SA, but the other SPI is not matching. Invalid IKE SPIs in IKE_SA_INIT response message at Initiator.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.9.4
jnxIkeHaLinkGlobalIkev2TotalInvalidExchgTypeTotal number of messages with unknown / unexpected exchange type encountered during message exchange.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.9.5
jnxIkeHaLinkGlobalIkev2TotalInvalidLengthTotal number of messages with Invalid length failure. During decode a malformed message where length is inconsistent with that indicated in header is encountered.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.9.6
jnxIkeHaLinkGlobalIkev2TotalDisorderTotal number of messages failure due to disorder. Packet message ID is out of window. For a response packet the corresponding request with given message ID is not found.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.1.9.9.7
jnxIpSecFlowMonPhaseTwo
OBJECT IDENTIFIER
.1.3.6.1.4.1.2636.3.52.1.2
jnxIpSecNumOfTunnelsNumber of IPSEC VPN Tunnels. This attribute should detail the number of IPSEC VPN tunnel in jnxIpSecTunnelTable.ro
INTEGER
.1.3.6.1.4.1.2636.3.52.1.2.1
jnxIpSecTunnelMonTableThe IPsec Phase-2 Tunnel Table. There is one entry in this table for each active IPsec Phase-2 Tunnel. If the tunnel is terminated, then the entry is no longer available after the table has been refreshed.
SEQUENCE OF JnxIpSecTunnelMonEntry
.1.3.6.1.4.1.2636.3.52.1.2.2
jnxIpSecTunnelMonEntryEach entry contains the attributes associated with an active IPsec Phase-2 Tunnel.
JnxIpSecTunnelMonEntry
.1.3.6.1.4.1.2636.3.52.1.2.2.1
jnxIpSecTunMonRemoteGwAddrTypeThe IP address type of the remote gateway (endpoint) for the IPsec Phase-2 Tunnel.
InetAddressType (INET-ADDRESS-MIB)
.1.3.6.1.4.1.2636.3.52.1.2.2.1.1
jnxIpSecTunMonRemoteGwAddrThe IP address of the remote gateway (endpoint) for the IPsec Phase-2 Tunnel.
InetAddress (INET-ADDRESS-MIB)
.1.3.6.1.4.1.2636.3.52.1.2.2.1.2
jnxIpSecTunMonIndexThe index of the IPsec Phase-2 Tunnel Table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The value of this object will wrap at 2,147,483,647.
Integer32
.1.3.6.1.4.1.2636.3.52.1.2.2.1.3
jnxIpSecTunMonLocalGwAddrTypeThe IP address type of the local gateway (endpoint) for the IPsec Phase-2 Tunnel.ro
InetAddressType (INET-ADDRESS-MIB)
.1.3.6.1.4.1.2636.3.52.1.2.2.1.4
jnxIpSecTunMonLocalGwAddrThe IP address of the local gateway (endpoint) for the IPsec Phase-2 Tunnel.ro
InetAddress (INET-ADDRESS-MIB)
.1.3.6.1.4.1.2636.3.52.1.2.2.1.5
jnxIpSecTunMonLocalProxyIdIdentifier for the local end.rodeprecated
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.2.2.1.6
jnxIpSecTunMonRemoteProxyIdIdentifier for the remote end.rodeprecated
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.2.2.1.7
jnxIpSecTunMonKeyTypeThe type of key used by the IPsec Phase-2 Tunnel. It can be one of the following two types: - IKE negotiated - Manually installedro
JnxKeyType
.1.3.6.1.4.1.2636.3.52.1.2.2.1.8
jnxIpSecTunMonRemotePeerTypeThe type of the remote peer gateway (endpoint). It can be one of the following two types: - static (Remote peer whose IP address is known beforehand) - dynamic (Remote peer whose IP address is not known beforehand)ro
JnxRemotePeerType
.1.3.6.1.4.1.2636.3.52.1.2.2.1.9
jnxIpSecTunMonOutEncryptedBytesNumber of bytes encrypted by this Phase-2 tunnel.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.2.1.10
jnxIpSecTunMonOutEncryptedPktsNumber of packets encrypted by this Phase-2 tunnel.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.2.1.11
jnxIpSecTunMonInDecryptedBytesNumber of bytes decrypted by this Phase-2 tunnel.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.2.1.12
jnxIpSecTunMonInDecryptedPktsNumber of packets decrypted by this Phase-2 tunnel.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.2.1.13
jnxIpSecTunMonAHInBytesNumber of incoming bytes authenticated using AH by this Phase-2 tunnel.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.2.1.14
jnxIpSecTunMonAHInPktsNumber of incoming packets authenticated using AH by this Phase-2 tunnel.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.2.1.15
jnxIpSecTunMonAHOutBytesNumber of outgoing bytes applied AH by this Phase-2 tunnel.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.2.1.16
jnxIpSecTunMonAHOutPktsNumber of outgoing packets applied AH by this Phase-2 tunnel.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.2.1.17
jnxIpSecTunMonReplayDropPktsNumber of packets dropped by this Phase-2 tunnel due to anti replay check failure.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.2.1.18
jnxIpSecTunMonAhAuthFailsNumber of packets received by this Phase-2 tunnel that failed AH authentication.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.2.1.19
jnxIpSecTunMonEspAuthFailsNumber of packets received by this Phase-2 tunnel that failed ESP authentication.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.2.1.20
jnxIpSecTunMonDecryptFailsNumber of packets received by this Phase-2 tunnel that failed decryption.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.2.1.21
jnxIpSecTunMonBadHeadersNumber of packets received by this Phase-2 tunnel that failed due to bad headers.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.2.1.22
jnxIpSecTunMonBadTrailersNumber of packets received by this Phase-2 tunnel that failed due to bad ESP trailers.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.2.1.23
jnxIpSecTunMonDroppedPktsTotal number of dropped packets for this Phase-2 tunnel. This attribute is obsolete.roobsolete
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.2.1.26
jnxIpSecTunMonVpnNameVPN tunnel name.ro
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.2.2.1.27
jnxIpSecTunMonTsNameTraffic selector name.ro
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.2.2.1.28
jnxIpSecTunMonMultiSaMulti-SA Configuration Status.ro
Enumeration
.1.3.6.1.4.1.2636.3.52.1.2.2.1.29
jnxIpSecTunMonInvalidSpiTotal number of Invalid SPI for this IPSec tunnel.ro
Counter64 UNITS "Packets"
.1.3.6.1.4.1.2636.3.52.1.2.2.1.30
jnxIpSecTunMonTsCheckFailTotal number of TS check fail for this IPSec tunnel.ro
Counter64 UNITS "Packets"
.1.3.6.1.4.1.2636.3.52.1.2.2.1.31
jnxIpSecTunMonDiscardedTotal number of discarded packets for this IPSec tunnel.ro
Counter64 UNITS "Packets"
.1.3.6.1.4.1.2636.3.52.1.2.2.1.32
jnxIpSecTunMonTunTypeThe Tunnel type. It can be regular (1) or ha-link (2).ro
JnxIkeTunType
.1.3.6.1.4.1.2636.3.52.1.2.2.1.33
jnxIpSecTunMonTsTypeThe TS type. It can be proxyId (1) or trafficSelector (2).ro
JnxIpSecTsType
.1.3.6.1.4.1.2636.3.52.1.2.2.1.34
jnxIpSecTunMonTSiNegotiated Traffic Selector or Proxy ID for the local end.ro
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.2.2.1.35
jnxIpSecTunMonTSrNegotiated Traffic Selector or Proxy ID for the remote end.ro
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.2.2.1.36
jnxIpSecTunMonTunMtuThe maximum transmit packet size (256..9192) for IPSec tunnels. The value of this object will be 0, if tunnel MTU is not configured.ro
Integer32
.1.3.6.1.4.1.2636.3.52.1.2.2.1.37
jnxIpSecTunMonExceedsTunMtuNumber of packets received by this Phase-2 tunnel that failed due to Exceeding Tunnel MTU.ro
Counter64 UNITS "Packets"
.1.3.6.1.4.1.2636.3.52.1.2.2.1.38
jnxIpSecSaMonTableThe IPsec Phase-2 Security Association Table. This table identifies the structure (in terms of component SAs) of each active Phase-2 IPsec tunnel. This table contains an entry for each active and expiring security association and maps each entry in the active Phase-2 tunnel table (ipSecTunTable) into a number of entries in this table. SA contains the information negotiated by IKE. The SA is like a contract laying out the rules of the VPN connection for the duration of the SA. An SA is assigned a 32-bit number that, when used in conjunction with the destination IP address, uniquely identifies the SA. This number is called the Security Parameters Index or SPI. IPSec SAs area unidirectional and they are unique in each security protocol. A set of SAs are needed for a protected data pipe, one per direction per protocol.
SEQUENCE OF JnxIpSecSaMonEntry
.1.3.6.1.4.1.2636.3.52.1.2.3
jnxIpSecSaMonEntryEach entry contains the attributes associated with active and expiring IPsec Phase-2 security associations.
JnxIpSecSaMonEntry
.1.3.6.1.4.1.2636.3.52.1.2.3.1
jnxIpSecSaMonIndexThe index, in the context of the IPsec tunnel ipSecTunIndex, of the security association represented by this table entry. The value of this index is a number which begins at one and is incremented with each SPI associated with an IPsec Phase-2 Tunnel. The value of this object will wrap at 65535.
Integer32
.1.3.6.1.4.1.2636.3.52.1.2.3.1.1
jnxIpSecSaMonProtocolThe index, represents the security protocol (AH, ESP or IPComp) for which this security association was setup.ro
Enumeration
.1.3.6.1.4.1.2636.3.52.1.2.3.1.2
jnxIpSecSaMonInSpiThe value of the incoming SPI.ro
JnxSpiType
.1.3.6.1.4.1.2636.3.52.1.2.3.1.3
jnxIpSecSaMonOutSpiThe value of the outgoing SPI.ro
JnxSpiType
.1.3.6.1.4.1.2636.3.52.1.2.3.1.4
jnxIpSecSaMonTypeThis field represents the type of security associations which can be either manual or dynamicro
JnxSAType
.1.3.6.1.4.1.2636.3.52.1.2.3.1.5
jnxIpSecSaMonEncapModeThe encapsulation mode used by an IPsec Phase-2 Tunnel.ro
JnxEncapMode
.1.3.6.1.4.1.2636.3.52.1.2.3.1.6
jnxIpSecSaMonLifeSizeThe negotiated LifeSize of the IPsec Phase-2 Tunnel in kilobytes.ro
Integer32
.1.3.6.1.4.1.2636.3.52.1.2.3.1.7
jnxIpSecSaMonLifeTimeThe negotiated LifeTime of the IPsec Phase-2 Tunnel in seconds.ro
Integer32
.1.3.6.1.4.1.2636.3.52.1.2.3.1.8
jnxIpSecSaMonActiveTimeThe length of time the IPsec Phase-2 Tunnel has been active in hundredths of seconds.ro
TimeInterval (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.2.3.1.9
jnxIpSecSaMonLifeSizeThresholdThe security association LifeSize refresh threshold in kilobytes.ro
Integer32
.1.3.6.1.4.1.2636.3.52.1.2.3.1.10
jnxIpSecSaMonLifeTimeThresholdThe security association LifeTime refresh threshold in seconds.ro
Integer32
.1.3.6.1.4.1.2636.3.52.1.2.3.1.11
jnxIpSecSaMonEncryptAlgoThe Encryption algorithm used to encrypt the packets.ro
JnxEncryptAlgo
.1.3.6.1.4.1.2636.3.52.1.2.3.1.12
jnxIpSecSaMonAuthAlgoThe algorithm used for authentication of packets which can be hmac-md5-96 or hmac-sha1-96 or hmac-sha-256-128ro
JnxAuthAlgo
.1.3.6.1.4.1.2636.3.52.1.2.3.1.13
jnxIpSecSaMonStateThis column represents the status of the security association represented by this table entry. If the status of the SA is 'active', the SA is ready for active use. The status 'expiring' represents any of the various states that the security association transitions through before being purged.ro
Enumeration
.1.3.6.1.4.1.2636.3.52.1.2.3.1.14
jnxIpSecSaMonFcNameClass-Of-Service Forwarding Class name.ro
DisplayString (SNMPv2-TC)
.1.3.6.1.4.1.2636.3.52.1.2.3.1.15
jnxIpSecSaMonEsnModeThis field represents whether IPSec extended sequence number support is enabled or disabledro
JnxEsnMode
.1.3.6.1.4.1.2636.3.52.1.2.3.1.16
jnxIpSecGlobalStats
OBJECT IDENTIFIER
.1.3.6.1.4.1.2636.3.52.1.2.4
jnxIpSecGlobalOutEncryptedBytesNumber of bytes encrypted by all Phase-2 tunnel.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.4.1
jnxIpSecGlobalOutEncryptedPktsNumber of packets encrypted by all Phase-2 tunnel.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.4.2
jnxIpSecGlobalInDecryptedBytesNumber of bytes decrypted by all Phase-2 tunnel.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.4.3
jnxIpSecGlobalInDecryptedPktsNumber of packets decrypted by all Phase-2 tunnel.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.4.4
jnxIpSecGlobalAHInBytesNumber of incoming bytes authenticated using AH by all Phase-2 tunnel.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.4.5
jnxIpSecGlobalAHInPktsNumber of incoming packets authenticated using AH by all Phase-2 tunnel.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.4.6
jnxIpSecGlobalAHOutBytesNumber of outgoing bytes applied AH by all Phase-2 tunnel.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.4.7
jnxIpSecGlobalAHOutPktsNumber of outgoing packets applied AH by all Phase-2 tunnel.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.4.8
jnxIpSecGlobalReplayDropPktsNumber of packets dropped by all Phase-2 tunnel due to anti-replay check failure.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.4.9
jnxIpSecGlobalAhAuthFailsNumber of packets received by all Phase-2 tunnel that failed AH authentication.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.4.10
jnxIpSecGlobalEspAuthFailsNumber of packets received by all Phase-2 tunnel that failed ESP authentication.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.4.11
jnxIpSecGlobalDecryptFailsNumber of packets received by all Phase-2 tunnel that failed decryption.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.4.12
jnxIpSecGlobalBadHeadersNumber of packets received by all Phase-2 tunnel that failed due to bad headers.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.4.13
jnxIpSecGlobalBadTrailersNumber of packets received by all Phase-2 tunnel that failed due to bad ESP trailers.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.4.14
jnxIpSecGlobalInvalidSpiTotal number of Invalid SPI.ro
Counter64 UNITS "Packets"
.1.3.6.1.4.1.2636.3.52.1.2.4.15
jnxIpSecGlobalTsCheckFailTotal number of TS check fail.ro
Counter64 UNITS "Packets"
.1.3.6.1.4.1.2636.3.52.1.2.4.16
jnxIpSecGlobalDiscardedTotal number of discarded packets.ro
Counter64 UNITS "Packets"
.1.3.6.1.4.1.2636.3.52.1.2.4.17
jnxIpSecGlobalExceedsTunMtuNumber of packets received by all Phase-2 tunnel that failed due to Exceeding Tunnel MTU.ro
Counter64 UNITS "Packets"
.1.3.6.1.4.1.2636.3.52.1.2.4.18
jnxIpSecHaLinkGlobalStats
OBJECT IDENTIFIER
.1.3.6.1.4.1.2636.3.52.1.2.5
jnxIpSecHaLinkGlobalOutEncryptedBytesNumber of bytes encrypted by all Phase-2 tunnel.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.5.1
jnxIpSecHaLinkGlobalOutEncryptedPktsNumber of packets encrypted by all Phase-2 tunnel.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.5.2
jnxIpSecHaLinkGlobalInDecryptedBytesNumber of bytes decrypted by all Phase-2 tunnel.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.5.3
jnxIpSecHaLinkGlobalInDecryptedPktsNumber of packets decrypted by all Phase-2 tunnel.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.5.4
jnxIpSecHaLinkGlobalAHInBytesNumber of incoming bytes authenticated using AH by all Phase-2 tunnel.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.5.5
jnxIpSecHaLinkGlobalAHInPktsNumber of incoming packets authenticated using AH by all Phase-2 tunnel.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.5.6
jnxIpSecHaLinkGlobalAHOutBytesNumber of outgoing bytes applied AH by all Phase-2 tunnel.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.5.7
jnxIpSecHaLinkGlobalAHOutPktsNumber of outgoing packets applied AH by all Phase-2 tunnel.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.5.8
jnxIpSecHaLinkGlobalReplayDropPktsNumber of packets dropped by all Phase-2 tunnel due to anti-replay check failure.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.5.9
jnxIpSecHaLinkGlobalAhAuthFailsNumber of packets received by all Phase-2 tunnel that failed AH authentication.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.5.10
jnxIpSecHaLinkGlobalEspAuthFailsNumber of packets received by all Phase-2 tunnel that failed ESP authentication.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.5.11
jnxIpSecHaLinkGlobalDecryptFailsNumber of packets received by all Phase-2 tunnel that failed decryption.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.5.12
jnxIpSecHaLinkGlobalBadHeadersNumber of packets received by all Phase-2 tunnel that failed due to bad headers.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.5.13
jnxIpSecHaLinkGlobalBadTrailersNumber of packets received by all Phase-2 tunnel that failed due to bad ESP trailers.ro
Counter64
.1.3.6.1.4.1.2636.3.52.1.2.5.14
jnxIpSecHaLinkGlobalInvalidSpiTotal number of Invalid SPI.ro
Counter64 UNITS "Packets"
.1.3.6.1.4.1.2636.3.52.1.2.5.15
jnxIpSecHaLinkGlobalTsCheckFailTotal number of TS check fail.ro
Counter64 UNITS "Packets"
.1.3.6.1.4.1.2636.3.52.1.2.5.16
jnxIpSecHaLinkGlobalDiscardedTotal number of discarded packets.ro
Counter64 UNITS "Packets"
.1.3.6.1.4.1.2636.3.52.1.2.5.17
jnxIpSecHaLinkGlobalExceedsTunMtuNumber of packets received by all Phase-2 tunnel that failed due to Exceeding Tunnel MTU.ro
Counter64 UNITS "Packets"
.1.3.6.1.4.1.2636.3.52.1.2.5.18
JUNIPER-IPSEC-FLOW-MON-MIB - SNMP MIB Reference | MIBs Explorer