SHIVA-VPN-TUNNEL-MIB
AI MIB Summary
Standard SNMP MIB module defining data structures for SHIVA-VPN-TUNNEL-MIB.
39
Objects
Active
Status
4
Dependencies
Imported Objects
Objects
39 total| Object Name |
|---|
tunnelConfig OBJECT IDENTIFIER .1.3.6.1.4.1.166.6.1.1.7.1 |
RFC1155-SMI Unknown .1.3.6.1.4.1.166.6.1.1.7.1 |
tunnNumberSiteToSiteThe number of site-to-site tunnels configured
on this system.ro INTEGER .1.3.6.1.4.1.166.6.1.1.7.1.1 |
tunnNumberRemoteUserThe number of single remote user tunnels configured
on this system.ro INTEGER .1.3.6.1.4.1.166.6.1.1.7.1.2 |
tunnNumberGroupUserThe number of multiple remote user (group) tunnels
configured on this system.ro INTEGER .1.3.6.1.4.1.166.6.1.1.7.1.3 |
tunnelStatus OBJECT IDENTIFIER .1.3.6.1.4.1.166.6.1.1.7.2 |
tunnCurrentSiteToSiteThe number of site-to-site tunnels currently
operational on this system.ro Gauge -- .1.3.6.1.4.1.166.6.1.1.7.2.1 |
tunnCurrentRemoteUserThe number of single remote user tunnels currently
operational on this system.ro Gauge -- .1.3.6.1.4.1.166.6.1.1.7.2.2 |
tunnCurrentGroupUserThe number of multiple remote user (group) tunnels
currently operational on this system.ro Gauge -- .1.3.6.1.4.1.166.6.1.1.7.2.3 |
tunnNoProfileErrorsThe number of times a tunnel could not be negotiated
because a profile did not exist.ro Counter .1.3.6.1.4.1.166.6.1.1.7.2.4 |
tunnBadSigsThe number of times the authentication of a peer
failed due to an invalid signature.ro Counter .1.3.6.1.4.1.166.6.1.1.7.2.5 |
tunnBadCertsThe number of times tunnel authentication failed
becasue the peer provided an invalid certificate.ro Counter .1.3.6.1.4.1.166.6.1.1.7.2.6 |
tunnOtherFailuresThe number of times tunnel authentication failed
due to errors other than an invalid signature, an invalid
certificate, or no profile.ro Counter .1.3.6.1.4.1.166.6.1.1.7.2.7 |
tunnelsLandedThe number of remote user tunnels formed since the
VPN Gateway was last configured.ro Counter .1.3.6.1.4.1.166.6.1.1.7.2.8 |
tunnelIfExtTableThe (conceptual) table containing information
on configured tunnels. This table augments the
tunnelIfTable in TUNNEL-MIB, there will be a row
for each row in that table. In turn, tunnelIfTable
has a row for each entry in ifTable in IF-MIB
whose ifType is tunnel(131). Note that entries in
the tunnelIfTable and tunnelIfExtTable are ephemeral,
so will be reset whenever the corresponding interface
transitions to line state up from line state down.
The MIB guarantees that, if the physical interfaces
are numbered 1 to N, the site-to-site entries
in the tunnelIfExtTable are numbered consecutively
beginning at N+1, the tunnels for remote users
appear after that, and the tunnels for remote
groups appear last. SEQUENCE OF TunnelIfExtEntry .1.3.6.1.4.1.166.6.1.1.7.2.50 |
tunnelIfExtEntryAn entry (conceptual row) containing the information
on a particular configured tunnel. TunnelIfExtEntry .1.3.6.1.4.1.166.6.1.1.7.2.50.1 |
tunnelIfExtTypeThis object indicates whether this entry represents
a site-to-site, a remote user, or a group tunnel. The
value of this object does not change from one tunnel
instantiation to another.ro Enumeration .1.3.6.1.4.1.166.6.1.1.7.2.50.1.1 |
tunnelIfExtAuthenticationThis object indicates the authentication
mechanism used to identify the peer. The value
x509Sig(2) means that signatures based on public
key cryptography were used. The value sharedSecret(3)
means that a pre-shared secret was used to
authenticate. The value securId(4) means SecurID was
used. The value other(1) indicates another currently
unsupported mechanism was used to authenticate the peer,
and is provided for forward compatibility.ro Enumeration .1.3.6.1.4.1.166.6.1.1.7.2.50.1.2 |
tunnelIfExtNameThis object gives the distinguished name of the
peer associated with this tunnel. If the peer's
name has not yet been established, this object's value
is the distinguished string <not established>.
If the peer used a certificate to authenticate
itself, this object provides the distinguished name
from the certificate. Otherwise it gives the
name the peer provided to identify itself during
authentication.ro DisplayString (SNMPv2-TC) .1.3.6.1.4.1.166.6.1.1.7.2.50.1.3 |
tunnelIfExtCertificateAuthorityWhen signatures were used to authenticate this
entry's tunnel, this object provides the issuer name
of the peer's X.509 certificate. When signatures were
not used to authenticate this entry's tunnel, this
object's value is NULL.ro DisplayString (SNMPv2-TC) .1.3.6.1.4.1.166.6.1.1.7.2.50.1.4 |
tunnelIfExtCertificateSerialNumberWhen signatures were used to authenticate this
entry's tunnel, this object provides the serial
number from the peer's X.509 certificate. When
signatures were not used to authenticate this entry's
tunnel, this object's value is NULL.ro DisplayString (SNMPv2-TC) .1.3.6.1.4.1.166.6.1.1.7.2.50.1.5 |
tunnelIfExtSessionKeyValidityThis object provides the number of centiseconds remaining
until the key for this tunnel expires, i.e., the
time remaining for this tunnel's security association.ro TimeTicks (SNMPv2-SMI) .1.3.6.1.4.1.166.6.1.1.7.2.50.1.6 |
tunnelIfExtEncryptionErrorsThis object counts the number of datagrams this
tunnel has discarded due to encryption errors.ro Counter .1.3.6.1.4.1.166.6.1.1.7.2.50.1.7 |
tunnelIfExtDecryptionErrorsThis object counts the number of objects discarded
due to decryption errors. The total does not include
pad or checksum errors detected after decryption.ro Counter .1.3.6.1.4.1.166.6.1.1.7.2.50.1.8 |
tunnelIfExtPadErrorsThis object counts the number of pad errors detected
after decryption.ro Counter .1.3.6.1.4.1.166.6.1.1.7.2.50.1.9 |
tunnelIfExtChecksumErrorsThis object counts the number of checksum errors
detected while decapsulating a datagram emerging from
this entry's interface's tunnel. Note this total can
include AH failures, ESP data integrity failures, and
SST checksum failures.ro Counter .1.3.6.1.4.1.166.6.1.1.7.2.50.1.10 |
tunnelIfExtReplayErrorsThis object counts the number of datagrams discarded
because they failed to pass the replay screening
algorithm.ro Counter .1.3.6.1.4.1.166.6.1.1.7.2.50.1.11 |
tunnelIfExtLocalIpThis object provides the IP address used to address
datagrams sent from this tunnel's interface.ro IpAddress .1.3.6.1.4.1.166.6.1.1.7.2.50.1.12 |
tunnelIfExtRemoteIpThis object provides the IP address used to address
datagrams sent to this tunnel's peer.ro IpAddress .1.3.6.1.4.1.166.6.1.1.7.2.50.1.13 |
tunnelBytesPerSecInThis is the number of bytes per second received and
decrypted by this tunnel, averaged over approximately
the last minute.ro Gauge .1.3.6.1.4.1.166.6.1.1.7.2.50.1.14 |
tunnelBytesPerSecOutThis is the number of bytes per second transmitted and
encrypted by this tunnel, averaged over approximately
the last minute.ro Gauge .1.3.6.1.4.1.166.6.1.1.7.2.50.1.15 |
securityAssociationTableThe (conceptual) table mapping half-duplex security
associations to tunnel interface indexes. Entries in
this table are ephemeral, appearing and disappearing
as security associations are formed and dropped. Note
this table does not include IKE security associations,
as these require a different indexing structure. SEQUENCE OF SecurityAssociationEntry .1.3.6.1.4.1.166.6.1.1.7.2.51 |
securityAssociationEntryThe (conceptual) table entry mapping a particular
security association to its tunnel interface. SecurityAssociationEntry .1.3.6.1.4.1.166.6.1.1.7.2.51.1 |
securityAssociationIpAddressThis is the IP address identifying this security
association. IpAddress .1.3.6.1.4.1.166.6.1.1.7.2.51.1.1 |
securityAssociationSPIThis is the SPI identifying this security
association. The bytes of the SPI are in
network byte order. OCTET STRING .1.3.6.1.4.1.166.6.1.1.7.2.51.1.2 |
securityAssociationProtocolThis is the protocol id identifying this security
association. The value esp(50) indicates this
entry corresponds to an ESP security association.
The value ah(51) indicates this entry represents
an AH security association. The value sst(2233) means
this entry corresponds to an SST security association.
The value other(1) is used for all other kinds of
security associations; this value exists to support
future protocols that might use security associations. Enumeration .1.3.6.1.4.1.166.6.1.1.7.2.51.1.3 |
securityAssociationLocalThis object indicates the direction of the security
association. The value local(1) means the security
association is from the peer system to the local
system, i.e., this entry's securityAssociationIpAddress
is an IP address for the local system. The value
remote(2) means this entry represents a security
association from the local system to the peer, and
its securityAssociationIpAddress is that of the peer
system. Although the distinction between local and
remote security associations is artificial for IKE
and SST, the securityAssociationTable includes both
to provide a uniform management interface for all
possible security associations.ro Enumeration .1.3.6.1.4.1.166.6.1.1.7.2.51.1.4 |
securityAssociationIfIndexThis object provides the ifIndex of the tunnel
interface implementing this entry's security
association.ro INTEGER .1.3.6.1.4.1.166.6.1.1.7.2.51.1.5 |
tunnelActions OBJECT IDENTIFIER .1.3.6.1.4.1.166.6.1.1.7.3 |