IPSEC-FLOW-MONITOR-MIB
469 objects
This is a MIB Module for monitoring the structure and status of IPSec-based networks. The MIB has bee designed to be adopted as an IETF standard. Henc vendor-specific features of IPSec protocol are exclude from this MIB. Acronyms The following acronyms are used in this document: IPSec: Secure IP Protocol VPN: Virtual Private Network ISAKMP: Internet Security Association and Key Exchange Protocol IKE: Internet Key Exchange Protocol SA: Security Association MM: Main Mode - the process of setting up a Phase 1 SA to secure the exchanges required to setup Phase 2 SAs QM: Quick Mode - the process of setting up Phase 2 Security Associations using a Phase 1 SA. Phase 1 Tunnel: An ISAKMP SA can be regarded as representing a flow of ISAKMP/IKE traffic. Hence an ISAKMP is referred to as a 'Phase 1 Tunnel' in this document Control Tunnel: Another term for a Phase 1 Tunnel. Phase 2 Tunnel: AN instance of a non-ISAKMP SA bundle in which all the SA share the same proxy identifiers (IDii,IDir) protect the same stream of application traffic. Such an SA bundle is termed a 'Phase 2 Tunnel'. Note that a Phase 2 tunnel may comprise different SA bundles and different number of SA bundles at different times (due to key refresh). Overview of IPsec MIB The MIB contains six major groups of objects which are used to manage the IPSec Protocol. These groups include a Levels Group, a Phase-1 Group, a Phase-2 Group, a History Group, a Failure Group and a TRAP Control Group. The following table illustrates the structure of the IPSec MIB. The Phase 1 group models objects pertaining to IKE negotiations and Phase 1 tunnels. The Phase 2 group models objects pertaining to IPSec data tunnels. The History group is to aid applications that do trending analysis. The Failure group is to enable an operator to do troubleshooting and debugging of the VPN Router. Further, counters are supported to aid detection of potential security violations. In addition to the five major MIB Groups, there are a number of Notifications. The following table illustrates the name and description of the IPSec TRAPs. For a detailed discussion, please refer to the IETF draft draft-ietf-ipsec-flow-monitoring-mib-01.txt.
Imported Objects
| IPSEC-FLOW-MIB-TC | AuthAlgo CompAlgo ControlProtocol DiffHellmanGrp EncapMode EncryptAlgo EndPtType IkeAuthMethod IkeHashAlgo IkeNegoMode Phase1PeerIdentityType Spi |
| SNMPv2-CONF | MODULE-COMPLIANCE NOTIFICATION-GROUP OBJECT-GROUP |
| SNMPv2-SMI | Counter32 Counter64 experimental Gauge32 Integer32 MODULE-IDENTITY NOTIFICATION-TYPE OBJECT-TYPE |
| SNMPv2-TC | DisplayString TEXTUAL-CONVENTION TimeInterval TimeStamp TruthValue |
| OID | Name | Access | Status | Description |
|---|---|---|---|---|
| 1.3.6.1.3.171 | IdentityipSecFlowMonitorMIB | This is a MIB Module for monitoring the structure and status of IPSec-based networks. The MIB has bee designed to be adopted as an IETF standard. Henc vendor-s… | ||
| 1.3.6.1.3.171.1 | NodeipSecMIBObjects | |||
| 1.3.6.1.3.171.1.1 | NodeipSecLevels | |||
| 1.3.6.1.3.171.1.1.1 | ScalaripSecMibLevel | read-only | current | The version of the IPsec MIB. |
| 1.3.6.1.3.171.1.2 | NodeipSecPhaseOne | |||
| 1.3.6.1.3.171.1.2.1 | NodeikeGroup | |||
| 1.3.6.1.3.171.1.2.1.1 | NodeikeGlobalStats | |||
| 1.3.6.1.3.171.1.2.1.1.1 | ScalarikeGlobalActiveTunnels | read-only | current | The number of currently active IPsec Phase-1 IKE Tunnels. This is equal to the number of ISAKMP SAs currently active. |
| 1.3.6.1.3.171.1.2.1.1.2 | ScalarikeGlobalPreviousTunnels | read-only | current | The total number of previously active IPsec Phase-1 IKE Tunnels. This is equal to the total number of ISAKMP SAs that were active since the bootup of the devic… |
| 1.3.6.1.3.171.1.2.1.1.3 | ScalarikeGlobalInOctets | read-only | current | The total number of octets received by all currently and previously active IPsec Phase-1 IKE Tunnels. |
| 1.3.6.1.3.171.1.2.1.1.4 | ScalarikeGlobalInPkts | read-only | current | The total number of packets received by all currently and previously active IPsec Phase-1 IKE Tunnels. |
| 1.3.6.1.3.171.1.2.1.1.5 | ScalarikeGlobalInDropPkts | read-only | current | The total number of packets which were dropped during receive processing by all currently and previously active IPsec Phase-1 IKE Tunnels. |
| 1.3.6.1.3.171.1.2.1.1.6 | ScalarikeGlobalInNotifys | read-only | current | The total number of notifys received by all currently and previously active IPsec Phase-1 IKE Tunnels. |
| 1.3.6.1.3.171.1.2.1.1.7 | ScalarikeGlobalInP2Exchgs | read-only | current | The total number of IPsec Phase-2 exchanges received by all currently and previously active IPsec Phase-1 IKE Tunnels. |
| 1.3.6.1.3.171.1.2.1.1.8 | ScalarikeGlobalInP2ExchgInvalids | read-only | current | The total number of IPsec Phase-2 exchanges which were received and found to be contain references to unrecognized security parameters. This value is accumulat… |
| 1.3.6.1.3.171.1.2.1.1.9 | ScalarikeGlobalInP2ExchgRejects | read-only | current | The total number of IPsec Phase-2 exchanges which were received and validated but were rejected by the local policy. This value is accumulated across all curre… |
| 1.3.6.1.3.171.1.2.1.1.10 | ScalarikeGlobalInP2SaDelRequests | read-only | current | The total number of IPsec Phase-2 security association delete requests received by all currently and previously active and IPsec Phase-1 IKE Tunnels. |
| 1.3.6.1.3.171.1.2.1.1.11 | ScalarikeGlobalOutOctets | read-only | current | The total number of octets sent by all currently and previously active and IPsec Phase-1 IKE Tunnels. |
| 1.3.6.1.3.171.1.2.1.1.12 | ScalarikeGlobalOutPkts | read-only | current | The total number of packets sent by all currently and previously active and IPsec Phase-1 Tunnels. |
| 1.3.6.1.3.171.1.2.1.1.13 | ScalarikeGlobalOutDropPkts | read-only | current | The total number of packets which were dropped during send processing by all currently and previously active IPsec Phase-1 IKE Tunnels. |
| 1.3.6.1.3.171.1.2.1.1.14 | ScalarikeGlobalOutNotifys | read-only | current | The total number of notifys sent by all currently and previously active IPsec Phase-1 IKE Tunnels. |
| 1.3.6.1.3.171.1.2.1.1.15 | ScalarikeGlobalOutP2Exchgs | read-only | current | The total number of IPsec Phase-2 exchanges which were sent by all currently and previously active IPsec Phase-1 IKE Tunnels. |
| 1.3.6.1.3.171.1.2.1.1.16 | ScalarikeGlobalOutP2ExchgInvalids | read-only | current | The total number of IPsec Phase-2 exchanges which were sent and were flagged by the peer to contain references to unrecognized security parameters. This value … |
| 1.3.6.1.3.171.1.2.1.1.17 | ScalarikeGlobalOutP2ExchgRejects | read-only | current | The total number of IPsec Phase-2 exchanges which were sent, validated by the peer but were rejected by the peer's policy. This value is accumulated across all… |
| 1.3.6.1.3.171.1.2.1.1.18 | ScalarikeGlobalOutP2SaDelRequests | read-only | current | The total number of IPsec Phase-2 SA delete requests sent by all currently and previously active IPsec Phase-1 IKE Tunnels. |
| 1.3.6.1.3.171.1.2.1.1.19 | ScalarikeGlobalInitTunnels | read-only | current | The total number of IPsec Phase-1 IKE Tunnels which were locally initiated. |
| 1.3.6.1.3.171.1.2.1.1.20 | ScalarikeGlobalInitTunnelFails | read-only | current | The total number of IPsec Phase-1 IKE Tunnels which were locally initiated and failed to activate. |
| 1.3.6.1.3.171.1.2.1.1.21 | ScalarikeGlobalRespTunnelFails | read-only | current | The total number of IPsec Phase-1 IKE Tunnels which were remotely initiated and failed to activate. |
| 1.3.6.1.3.171.1.2.1.1.22 | ScalarikeGlobalSysCapFails | read-only | current | The total number of system capcity failures which occurred during processing of all current and previously active IPsec Phase-1 IKE Tunnels. |
| 1.3.6.1.3.171.1.2.1.1.23 | ScalarikeGlobalAuthFails | read-only | current | The total number of authentications which ended in failure by all current and previous IPsec Phase-1 IKE Tunnels. |
| 1.3.6.1.3.171.1.2.1.1.24 | ScalarikeGlobalDecryptFails | read-only | current | The total number of decryptions which ended in failure by all current and previous IPsec Phase-1 IKE Tunnels. |
| 1.3.6.1.3.171.1.2.1.1.25 | ScalarikeGlobalHashValidFails | read-only | current | The total number of hash validations which ended in failure by all current and previous IPsec Phase-1 IKE Tunnels. |
| 1.3.6.1.3.171.1.2.1.1.26 | ScalarikeGlobalNoSaFails | read-only | current | The total number of non-existent Security Association in failures which occurred during processing of all current and previous IPsec Phase-1 IKE Tunnels. |
| 1.3.6.1.3.171.1.2.1.1.27 | ScalarikeGlobalRespTunnels | read-only | current | The total number of IPsec Phase-1 IKE Tunnels which were remotely initiated. |
| 1.3.6.1.3.171.1.2.1.1.28 | ScalarikeGlobalInXauthFailures | read-only | current | The number of times the extended authentication information supplied by an IKE peer was found to be invalid by the local entity. |
| 1.3.6.1.3.171.1.2.1.1.29 | ScalarikeGlobalOutXauthFailures | read-only | current | The number of times the extended authentication information supplied by the managed entity to an IKE peer was found to be invalid by the remote peer. |
| 1.3.6.1.3.171.1.2.1.1.30 | ScalarikeGlobalInP1SaDelRequests | read-only | current | The total number of ISAKMP security association delete requests received by all currently and previously active and ISAKMP security associations. |
| 1.3.6.1.3.171.1.2.1.1.31 | ScalarikeGlobalOutP1SaDelRequests | read-only | current | The total number of ISAKMP security association delete requests sent by all currently and previously active and ISAKMP security associations. |
| 1.3.6.1.3.171.1.2.1.1.32 | ScalarikeGlobalInConfigs | read-only | current | The total number of Mode Configuration settings received (either CFG_REPLY or CFG_SET payloads) by this entity. |
| 1.3.6.1.3.171.1.2.1.1.33 | ScalarikeGlobalOutConfigs | read-only | current | The total number of Mode Configuration settings dispatched (either CFG_REPLY or CFG_SET payloads) by this entity. |
| 1.3.6.1.3.171.1.2.1.1.34 | ScalarikeGlobalInConfigsRejects | read-only | current | The total number of Mode Configuration settings which were received (either CFG_REPLY or CFG_SET payloads) by this entity and which were rejected by the local … |
| 1.3.6.1.3.171.1.2.1.1.35 | ScalarikeGlobalOutConfigsRejects | read-only | current | The total number of Mode Configuration settings which were dispatched (either CFG_REPLY or CFG_SET payloads) by this entity and which were rejected by the clie… |
| 1.3.6.1.3.171.1.2.1.1.36 | ScalarikeGlobalHcPreviousTunnels | read-only | current | A high capacity count of the total number of previously active IPsec Phase-1 IKE Tunnels. This i equal to the total number of ISAKMP SAs that were active since… |
| 1.3.6.1.3.171.1.2.1.1.37 | ScalarikeGlobalPreviousTunnelsWraps | read-only | current | The number of times the quantit `ikeGlobalPreviousTunnels' (previously active IPse Phase-1 IKE tunnels) has wrapped. |
| 1.3.6.1.3.171.1.2.1.2 | TableikeTunnelTable | not-accessible | current | The IPsec Phase-1 Internet Key Exchange Tunnel Table. There is one entry in this table for each active IPsec Phase-1 IKE Tunnel. |
| 1.3.6.1.3.171.1.2.1.2.1 | RowikeTunnelEntry | not-accessible | current | Each entry contains the attributes associated with an active IPsec Phase-1 IKE Tunnel. |
| 1.3.6.1.3.171.1.2.1.2.1.1 | ColumnikeTunIndex | not-accessible | current | The index of the IPsec Phase-1 IKE Tunnel Table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. Th… |
| 1.3.6.1.3.171.1.2.1.2.1.2 | ColumnikeTunLocalType | read-only | current | The type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name string. 3. or a distinguished na… |
| 1.3.6.1.3.171.1.2.1.2.1.3 | ColumnikeTunLocalValue | read-only | current | The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer t… |
| 1.3.6.1.3.171.1.2.1.2.1.4 | ColumnikeTunLocalAddr | read-only | current | The IP address of the local endpoint for the IPsec Phase-1 IKE Tunnel. |
| 1.3.6.1.3.171.1.2.1.2.1.5 | ColumnikeTunLocalName | read-only | current | The DNS name of the local IP address for the IPsec Phase-1 IKE Tunnel. If the DNS name associated with the local tunnel endpoint is not known, then the value o… |
| 1.3.6.1.3.171.1.2.1.2.1.6 | ColumnikeTunRemoteType | read-only | current | The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name string. 3. or a distinguished … |
| 1.3.6.1.3.171.1.2.1.2.1.7 | ColumnikeTunRemoteValue | read-only | current | The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote pe… |
| 1.3.6.1.3.171.1.2.1.2.1.8 | ColumnikeTunRemoteAddr | read-only | current | The IP address of the remote endpoint for the IPsec Phase-1 IKE Tunnel. |
| 1.3.6.1.3.171.1.2.1.2.1.9 | ColumnikeTunRemoteName | read-only | current | The DNS name of the remote IP address of IPsec Phase-1 IKE Tunnel. If the DNS name associated with the remote tunnel endpoint is not known, then the value of t… |
| 1.3.6.1.3.171.1.2.1.2.1.10 | ColumnikeTunNegoMode | read-only | current | The negotiation mode of the IPsec Phase-1 IKE Tunnel. |
| 1.3.6.1.3.171.1.2.1.2.1.11 | ColumnikeTunDiffHellmanGrp | read-only | current | The Diffie Hellman Group used in IPsec Phase-1 IKE negotiations. |
| 1.3.6.1.3.171.1.2.1.2.1.12 | ColumnikeTunEncryptAlgo | read-only | current | The encryption algorithm used in IPsec Phase-1 IKE negotiations. |
| 1.3.6.1.3.171.1.2.1.2.1.13 | ColumnikeTunHashAlgo | read-only | current | The hash algorithm used in IPsec Phase-1 IKE negotiations. |
| 1.3.6.1.3.171.1.2.1.2.1.14 | ColumnikeTunAuthMethod | read-only | current | The authentication method used in IPsec Phase-1 IKE negotiations. |
| 1.3.6.1.3.171.1.2.1.2.1.15 | ColumnikeTunLifeTime | read-only | current | The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel in seconds. |
| 1.3.6.1.3.171.1.2.1.2.1.16 | ColumnikeTunActiveTime | read-only | current | The length of time the IPsec Phase-1 IKE tunnel has been active in hundredths of seconds. |
| 1.3.6.1.3.171.1.2.1.2.1.17 | ColumnikeTunSaRefreshThreshold | read-only | current | The security assoication refresh threshold in seconds. |
| 1.3.6.1.3.171.1.2.1.2.1.18 | ColumnikeTunTotalRefreshes | read-only | current | The total number of security associations refreshes performed. |
| 1.3.6.1.3.171.1.2.1.2.1.19 | ColumnikeTunInOctets | read-only | current | The total number of octets received by this IPsec Phase-1 IKE Tunnel. |
| 1.3.6.1.3.171.1.2.1.2.1.20 | ColumnikeTunInPkts | read-only | current | The total number of packets received by this IPsec Phase-1 IKE Tunnel. |
| 1.3.6.1.3.171.1.2.1.2.1.21 | ColumnikeTunInDropPkts | read-only | current | The total number of packets dropped by this IPsec Phase-1 IKE Tunnel during receive processing. |
| 1.3.6.1.3.171.1.2.1.2.1.22 | ColumnikeTunInNotifys | read-only | current | The total number of notifys received by this IPsec Phase-1 IKE Tunnel. |
| 1.3.6.1.3.171.1.2.1.2.1.23 | ColumnikeTunInP2Exchgs | read-only | current | The total number of IPsec Phase-2 exchanges received by this IPsec Phase-1 IKE Tunnel. |
| 1.3.6.1.3.171.1.2.1.2.1.24 | ColumnikeTunInP2ExchgInvalids | read-only | current | The total number of IPsec Phase-2 exchanges received on this tunnel that were found to contain references to unrecognized security parameters. |
| 1.3.6.1.3.171.1.2.1.2.1.25 | ColumnikeTunInP2ExchgRejects | read-only | current | The total number of IPsec Phase-2 exchanges received on this tunnel that were validated but were rejected by the local policy. |
| 1.3.6.1.3.171.1.2.1.2.1.26 | ColumnikeTunInP2SaDelRequests | read-only | current | The total number of IPsec Phase-2 security association delete requests received by this IPsec Phase-1 IKE Tunnel. |
| 1.3.6.1.3.171.1.2.1.2.1.27 | ColumnikeTunOutOctets | read-only | current | The total number of octets sent by this IPsec Phase-1 IKE Tunnel. |
| 1.3.6.1.3.171.1.2.1.2.1.28 | ColumnikeTunOutPkts | read-only | current | The total number of packets sent by this IPsec Phase-1 IKE Tunnel. |
| 1.3.6.1.3.171.1.2.1.2.1.29 | ColumnikeTunOutDropPkts | read-only | current | The total number of packets dropped by this IPsec Phase-1 IKE Tunnel during send processing. |
| 1.3.6.1.3.171.1.2.1.2.1.30 | ColumnikeTunOutNotifys | read-only | current | The total number of notifys sent by this IPsec Phase-1 Tunnel. |
| 1.3.6.1.3.171.1.2.1.2.1.31 | ColumnikeTunOutP2Exchgs | read-only | current | The total number of IPsec Phase-2 exchanges sent by this IPsec Phase-1 IKE Tunnel. |
| 1.3.6.1.3.171.1.2.1.2.1.32 | ColumnikeTunOutP2ExchgInvalids | read-only | current | The total number of IPsec Phase-2 exchanges sent on this tunnel that were found by the peer to contain references to security parameters not recognized by the … |
| 1.3.6.1.3.171.1.2.1.2.1.33 | ColumnikeTunOutP2ExchgRejects | read-only | current | The total number of IPsec Phase-2 exchanges sent on this tunnel that were validated by the peer but were rejected by the peer's policy. |
| 1.3.6.1.3.171.1.2.1.2.1.34 | ColumnikeTunOutP2SaDelRequests | read-only | current | The total number of IPsec Phase-2 security association delete requests sent by this IPsec Phase-1 IKE Tunnel. |
| 1.3.6.1.3.171.1.2.1.2.1.35 | ColumnikeTunStatus | read-write | current | The status of the MIB table row. This object can be used to bring the tunnel down by setting value of this object to destroy(2). This object cannot be used to … |
| 1.3.6.1.3.171.1.2.1.2.1.36 | ColumnikeTunInNewGrpReqs | read-only | current | The total number of New Group exchanges initiated remotely using this IKE tunnel. |
| 1.3.6.1.3.171.1.2.1.2.1.37 | ColumnikeTunOutNewGrpReqs | read-only | current | The total number of New Group exchanges initiated locally using this IKE tunnel. |
| 1.3.6.1.3.171.1.2.1.2.1.38 | ColumnikeTunInNewGrpReqsRejected | read-only | current | The total number of New Group exchanges initiated remotely using this IKE tunnel that ended in a failure. |
| 1.3.6.1.3.171.1.2.1.2.1.39 | ColumnikeTunOutNewGrpReqsRejected | read-only | current | The total number of New Group exchanges initiated locally using this IKE tunnel that ended in a failure. |
| 1.3.6.1.3.171.1.2.1.2.1.40 | ColumnikeTunInConfigs | read-only | current | The total number of Mode Configuration settings received (either CFG_REPLY or CFG_SET payloads) by the local entity on the ISAKMP SA represented by this IKE tu… |
| 1.3.6.1.3.171.1.2.1.2.1.41 | ColumnikeTunOutConfigs | read-only | current | The total number of Mode Configuration settings dispatched (either CFG_REPLY or CFG_SET payloads) by the local entity on the ISAKMP SA represented by this IKE … |
| 1.3.6.1.3.171.1.2.1.2.1.42 | ColumnikeTunInConfigsRejects | read-only | current | The total number of Mode Configuration settings which were received (either CFG_REPLY or CFG_SET payloads) and rejected by this entity using the ISAKMP SA repr… |
| 1.3.6.1.3.171.1.2.1.2.1.43 | ColumnikeTunOutConfigsRejects | read-only | current | The total number of Mode Configuration settings which were dispatched (either CFG_REPLY or CFG_SET payloads) by this entity and were rejected by the peer (clie… |
| 1.3.6.1.3.171.1.2.1.2.1.44 | ColumnikeTunEncryptKeySize | read-only | current | The key size in bits of the negotiated key to be used with the algorithm denoted by the column 'ikeTunEncryptAlgo'. For DES and 3DES the key size i respectivel… |
| 1.3.6.1.3.171.1.2.2 | Tablephase1PeerTable | not-accessible | current | The IPsec Phase-1 Key Exchange Peer Table. Ther is one entry in this table for each IPsec Phase-1 pee with which the managed entity is currently associate by v… |
| 1.3.6.1.3.171.1.2.2.1 | Rowphase1PeerEntry | not-accessible | current | Each entry contains the attributes associated with an IPsec Phase-1 IKE peer association. |
| 1.3.6.1.3.171.1.2.2.1.1 | Columnphase1PeerLocalType | not-accessible | current | The type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name. 3. or a distinguished name. |
| 1.3.6.1.3.171.1.2.2.1.2 | Columnphase1PeerLocalValue | read-only | current | The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer t… |
| 1.3.6.1.3.171.1.2.2.1.3 | Columnphase1PeerHLocalValue | not-accessible | current | The 128-bit MD5 hash output of the value represente by the element phase1PeerLocalValue. The hashing is required to restrict the length of the SNMP index to a … |
| 1.3.6.1.3.171.1.2.2.1.4 | Columnphase1PeerRemoteType | not-accessible | current | The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name. 3. or a distinguished name. |
| 1.3.6.1.3.171.1.2.2.1.5 | Columnphase1PeerRemoteValue | read-only | current | The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote pe… |
| 1.3.6.1.3.171.1.2.2.1.6 | Columnphase1PeerHRemoteValue | not-accessible | current | The 128-bit MD5 hash output of the value represente by the element phase1PeerRemoteValue. The hashing is required to restrict the length of the SNMP index to a… |
| 1.3.6.1.3.171.1.2.2.1.7 | Columnphase1PeerIntIndex | not-accessible | current | The internal index of the local-remote peer association. This internal index is used to uniquely identify multiple associations between the local and remote pe… |
| 1.3.6.1.3.171.1.2.2.1.8 | Columnphase1PeerLocalAddr | read-only | current | The IP address of the local peer. |
| 1.3.6.1.3.171.1.2.2.1.9 | Columnphase1PeerRemoteAddr | read-only | current | The IP address of the remote peer. |
| 1.3.6.1.3.171.1.2.2.1.10 | Columnphase1PeerActiveTime | read-only | current | The length of time that the peer association has existed in hundredths of a second. |
| 1.3.6.1.3.171.1.2.2.1.11 | Columnphase1PeerActiveTunnelIndex | read-only | current | The index of the active IPsec Phase-1 IKE Tunnel (ikeTunIndex in the ikeTunnelTable) for this peer association. If an IPsec Phase-1 IKE Tunnel is not currently… |
| 1.3.6.1.3.171.1.2.2.1.12 | Columnphase1PeerConfigAppVersion | read-only | current | The NULL terminated printable application version of the peer. If the peer did not issue the APPLICATION_VERSION attribute, this field is NULL. |
| 1.3.6.1.3.171.1.2.2.1.13 | Columnphase1PeerConfigAddress | read-only | current | The IP address configured by the peer on this entity. If the local entity did not receive either INTERNAL_IP4_ADDRESS or INTERNAL_IP6_ADDRESS from the peer, th… |
| 1.3.6.1.3.171.1.2.2.1.14 | Columnphase1PeerConfigNetmask | read-only | current | The netmask configured by the peer on this entity. If the local entity did not receive either INTERNAL_V4_MASK or INTERNAL_IP6_MASK from the peer, this field s… |
| 1.3.6.1.3.171.1.2.2.1.15 | Columnphase1PeerConfigDns | read-only | current | The address of the DNS server configured by the peer on the local entity using CFG_SET or CFG_REPLY. If the local entity did not receive either INTERNAL_V4_DNS… |
| 1.3.6.1.3.171.1.2.2.1.16 | Columnphase1PeerConfigNbns | read-only | current | The address of the NetBios Name Server configured by the peer on the local entity using CFG_SET or CFG_REPLY. If the local entity did not receive either INTERN… |
| 1.3.6.1.3.171.1.2.2.1.17 | Columnphase1PeerConfigDhcp | read-only | current | The address of the DHCP Server configured by the peer on the local entity using CFG_SET or CFG_REPLY. If the local entity did not receive either INTERNAL_V4_DH… |
| 1.3.6.1.3.171.1.2.2.1.18 | Columnphase1Protocol | read-only | current | The keying and control protocol used to setup and administer Phase-1 and Phase-2 tunnels to this peer. |
| 1.3.6.1.3.171.1.2.3 | Tablephase1PeerCorrTable | not-accessible | current | The IPsec Phase-1 Peer Association to IPsec Phase- Tunnel Correlation Table. There is one entry in this tabl for each active IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.2.3.1 | Rowphase1PeerCorrEntry | not-accessible | current | Each entry contains the attributes of an IPsec Phase-1 Peer Association to IPsec Phase- Tunnel Correlation. |
| 1.3.6.1.3.171.1.2.3.1.1 | Columnphase1PeerCorrLocalType | not-accessible | current | The type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name. 3. or a distinguished name. |
| 1.3.6.1.3.171.1.2.3.1.2 | Columnphase1PeerCorrLocalValue | not-accessible | current | The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer t… |
| 1.3.6.1.3.171.1.2.3.1.3 | Columnphase1PeerCorrRemoteType | not-accessible | current | The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name. 3. or a distinguished name. |
| 1.3.6.1.3.171.1.2.3.1.4 | Columnphase1PeerCorrRemoteValue | not-accessible | current | The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote pe… |
| 1.3.6.1.3.171.1.2.3.1.5 | Columnphase1PeerCorrIntIndex | not-accessible | current | The internal index of the local-remote peer association. This internal index is used to uniquely identify multiple associations between the local and remote pe… |
| 1.3.6.1.3.171.1.2.3.1.6 | Columnphase1PeerCorrSeqNum | not-accessible | current | The sequence number of the local-remote peer association. This sequence number is used to uniquely identify multiple instances of an unique association between… |
| 1.3.6.1.3.171.1.2.3.1.7 | Columnphase1PeerCorrIpSecTunIndex | read-only | current | The index of the active IPsec Phase-2 Tunnel (ipSecTunIndex in the ipSecTunnelTable) for this IPsec Phase-1 IKE Peer Association. |
| 1.3.6.1.3.171.1.2.3.1.8 | Columnphase1PeerCorrControlProtocol | read-only | current | The keying and control protocol used to setup and administer the Phase-1 and Phase-2 tunnels thi table entry refers to. |
| 1.3.6.1.3.171.1.3 | NodeipSecPhaseTwo | |||
| 1.3.6.1.3.171.1.3.1 | NodeipSecGlobalStats | |||
| 1.3.6.1.3.171.1.3.1.1 | ScalaripSecGlobalActiveTunnels | read-only | current | The total number of currently active IPsec Phase-2 Tunnels. |
| 1.3.6.1.3.171.1.3.1.2 | ScalaripSecGlobalPreviousTunnels | read-only | current | The total number of previously active IPsec Phase-2 Tunnels. |
| 1.3.6.1.3.171.1.3.1.3 | ScalaripSecGlobalInOctets | read-only | current | The total number of octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE determining whether or not the packet s… |
| 1.3.6.1.3.171.1.3.1.4 | ScalaripSecGlobalHcInOctets | read-only | current | A high capacity count of the total number of octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE determining wh… |
| 1.3.6.1.3.171.1.3.1.5 | ScalaripSecGlobalInOctWraps | read-only | current | The number of times the global octets received counter (ipSecGlobalInOctets) has wrapped. |
| 1.3.6.1.3.171.1.3.1.6 | ScalaripSecGlobalInDecompOctets | read-only | current | The total number of decompressed octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER the packet is decompressed.… |
| 1.3.6.1.3.171.1.3.1.7 | ScalaripSecGlobalHcInDecompOctets | read-only | current | A high capacity count of the total number of decompressed octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER th… |
| 1.3.6.1.3.171.1.3.1.8 | ScalaripSecGlobalInDecompOctWraps | read-only | current | The number of times the global decompressed octets received counter (ipSecGlobalInDecompOctets) has wrapped. |
| 1.3.6.1.3.171.1.3.1.9 | ScalaripSecGlobalInPkts | read-only | current | The total number of packets received by all current and previous IPsec Phase-2 Tunnels. |
| 1.3.6.1.3.171.1.3.1.10 | ScalaripSecGlobalInDrops | read-only | current | The total number of packets dropped during receive processing by all current and previous IPsec Phase-2 Tunnels. This count does NOT include packets dropped du… |
| 1.3.6.1.3.171.1.3.1.11 | ScalaripSecGlobalInReplayDrops | read-only | current | The total number of packets dropped during receive processing due to Anti-Replay processing by all current and previous IPsec Phase-2 Tunnels. |
| 1.3.6.1.3.171.1.3.1.12 | ScalaripSecGlobalInAuths | read-only | current | The total number of inbound authentication's performed by all current and previous IPsec Phase-2 Tunnels. |
| 1.3.6.1.3.171.1.3.1.13 | ScalaripSecGlobalInAuthFails | read-only | current | The total number of inbound authentication's which ended in failure by all current and previous IPsec Phase-2 Tunnels. |
| 1.3.6.1.3.171.1.3.1.14 | ScalaripSecGlobalInDecrypts | read-only | current | The total number of inbound decryption's performed by all current and previous IPsec Phase-2 Tunnels. |
| 1.3.6.1.3.171.1.3.1.15 | ScalaripSecGlobalInDecryptFails | read-only | current | The total number of inbound decryption's which ended in failure by all current and previous IPsec Phase-2 Tunnels. |
| 1.3.6.1.3.171.1.3.1.16 | ScalaripSecGlobalOutOctets | read-only | current | The total number of octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER determining whether or not the packet should… |
| 1.3.6.1.3.171.1.3.1.17 | ScalaripSecGlobalHcOutOctets | read-only | current | A high capacity count of the total number of octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER determining whether… |
| 1.3.6.1.3.171.1.3.1.18 | ScalaripSecGlobalOutOctWraps | read-only | current | The number of times the global octets sent counter (ipSecGlobalOutOctets) has wrapped. |
| 1.3.6.1.3.171.1.3.1.19 | ScalaripSecGlobalOutUncompOctets | read-only | current | The total number of uncompressed octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE the packet is compressed. If c… |
| 1.3.6.1.3.171.1.3.1.20 | ScalaripSecGlobalHcOutUncompOctets | read-only | current | A high capacity count of the total number of uncompressed octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE the p… |
| 1.3.6.1.3.171.1.3.1.21 | ScalaripSecGlobalOutUncompOctWraps | read-only | current | The number of times the global uncompressed octets sent counter (ipSecGlobalOutUncompOctets) has wrapped. |
| 1.3.6.1.3.171.1.3.1.22 | ScalaripSecGlobalOutPkts | read-only | current | The total number of packets sent by all current and previous IPsec Phase-2 Tunnels. |
| 1.3.6.1.3.171.1.3.1.23 | ScalaripSecGlobalOutDrops | read-only | current | The total number of packets dropped during send processing by all current and previous IPsec Phase-2 Tunnels. |
| 1.3.6.1.3.171.1.3.1.24 | ScalaripSecGlobalOutAuths | read-only | current | The total number of outbound authentication's performed by all current and previous IPsec Phase-2 Tunnels. |
| 1.3.6.1.3.171.1.3.1.25 | ScalaripSecGlobalOutAuthFails | read-only | current | The total number of outbound authentication's which ended in failure by all current and previous IPsec Phase-2 Tunnels. |
| 1.3.6.1.3.171.1.3.1.26 | ScalaripSecGlobalOutEncrypts | read-only | current | The total number of outbound encryption's performed by all current and previous IPsec Phase-2 Tunnels. |
| 1.3.6.1.3.171.1.3.1.27 | ScalaripSecGlobalOutEncryptFails | read-only | current | The total number of outbound encryption's which ended in failure by all current and previous IPsec Phase-2 Tunnels. |
| 1.3.6.1.3.171.1.3.1.28 | ScalaripSecGlobalOutCompressedPkts | read-only | current | The cumulative number of outbound packets across all IPsec flows terminating at this device which were successfully compressed. This number is cumulative since… |
| 1.3.6.1.3.171.1.3.1.29 | ScalaripSecGlobalOutCompSkippedPkts | read-only | current | The total number of outbound packets across all IPsec flows terminating at this devices that were to be compressed but which were skipped due to the compressio… |
| 1.3.6.1.3.171.1.3.1.30 | ScalaripSecGlobalOutCompFailPkts | read-only | current | The total number of outbound packets across all IPsec flows terminating at this device that failed compression because they grew in size after compression. Thi… |
| 1.3.6.1.3.171.1.3.1.31 | ScalaripSecGlobalOutCompTooSmallPkts | read-only | current | The total number of outbound packets across all IPsec flows terminating at this device that were to be compressed but were smaller than the compression thresho… |
| 1.3.6.1.3.171.1.3.1.32 | ScalaripSecGlobalProtocolUseFails | read-only | current | The total number of protocol use failures which occurred during processing of all current and previously active IPsec Phase-2 Tunnels. |
| 1.3.6.1.3.171.1.3.1.33 | ScalaripSecGlobalNoSaFails | read-only | current | The total number of non-existent Security Assocication in failures which occurred during processing of all current and previous IPsec Phase-2 Tunnels. |
| 1.3.6.1.3.171.1.3.1.34 | ScalaripSecGlobalSysCapFails | read-only | current | The total number of system capacity failures which occurred during processing of all current and previously active IPsec Phase-2 Tunnels. |
| 1.3.6.1.3.171.1.3.1.35 | ScalaripSecGlobalHcPreviousTunnels | read-only | current | A high capacity count of the total number of previously active IPsec Phase-2 Tunnels. |
| 1.3.6.1.3.171.1.3.1.36 | ScalaripSecGlobalPreviousTunnelsWraps | read-only | current | The number of times the quantit `ipSecGlobalPreviousTunnels' (previously active IPse Phase-2 tunnels) has wrapped. |
| 1.3.6.1.3.171.1.3.2 | TableipSecTunnelTable | not-accessible | current | The IPsec Phase-2 Tunnel Table. There is one entry in this table for each active IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.3.2.1 | RowipSecTunnelEntry | not-accessible | current | Each entry contains the attributes associated with an active IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.3.2.1.1 | ColumnipSecTunIndex | not-accessible | current | The index of the IPsec Phase-2 Tunnel Table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The va… |
| 1.3.6.1.3.171.1.3.2.1.2 | ColumnipSecTunIkeTunnelIndex | read-only | deprecated | The index of the associated IPsec Phase-1 IKE Tunnel. (ikeTunIndex in the ikeTunnelTable) |
| 1.3.6.1.3.171.1.3.2.1.3 | ColumnipSecTunIkeTunnelAlive | read-only | deprecated | An indicator which specifies whether or not the IPsec Phase-1 IKE Tunnel currently exists. This object has been deprecated in favour of more generic pointers t… |
| 1.3.6.1.3.171.1.3.2.1.4 | ColumnipSecTunLocalAddr | read-only | current | The IP address of the local endpoint for the IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.3.2.1.5 | ColumnipSecTunRemoteAddr | read-only | current | The IP address of the remote endpoint for the IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.3.2.1.6 | ColumnipSecTunKeyType | read-only | deprecated | The type of key used by the IPsec Phase-2 Tunnel. This object has been deprecated in favour o ipSecTunControlProtocol. |
| 1.3.6.1.3.171.1.3.2.1.7 | ColumnipSecTunEncapMode | read-only | current | The encapsulation mode used by the IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.3.2.1.8 | ColumnipSecTunLifeSize | read-only | current | The negotiated LifeSize of the IPsec Phase-2 Tunnel in kilobytes. |
| 1.3.6.1.3.171.1.3.2.1.9 | ColumnipSecTunLifeTime | read-only | current | The negotiated LifeTime of the IPsec Phase- Tunnel in seconds. If the tunnel was setup manually, the value of this MIB element should be 0. |
| 1.3.6.1.3.171.1.3.2.1.10 | ColumnipSecTunActiveTime | read-only | current | The length of time the IPsec Phase-2 Tunnel has been active in hundredths of seconds. |
| 1.3.6.1.3.171.1.3.2.1.11 | ColumnipSecTunSaLifeSizeThreshold | read-only | current | The security association LifeSize refresh threshold in kilobytes. If the tunnel was setup manually, the value of this MIB element should be 0. |
| 1.3.6.1.3.171.1.3.2.1.12 | ColumnipSecTunSaLifeTimeThreshold | read-only | current | The security association LifeTime refresh threshold in seconds. If the tunnel was setup manually, the value of this MIB element should be 0. |
| 1.3.6.1.3.171.1.3.2.1.13 | ColumnipSecTunTotalRefreshes | read-only | current | The total number of security association refreshes performed. |
| 1.3.6.1.3.171.1.3.2.1.14 | ColumnipSecTunExpiredSaInstances | read-only | current | The total number of security associations which have expired. If the tunnel was setup manually, the value of this MIB element should be 0. |
| 1.3.6.1.3.171.1.3.2.1.15 | ColumnipSecTunCurrentSaInstances | read-only | current | The number of security associations which are currently active or expiring. |
| 1.3.6.1.3.171.1.3.2.1.16 | ColumnipSecTunInSaDiffHellmanGrp | read-only | current | The Diffie Hellman Group used by the inbound security association of the IPsec Phase-2 Tunnel. If the tunnel was setup manually, the value of this MIB element … |
| 1.3.6.1.3.171.1.3.2.1.17 | ColumnipSecTunInSaEncryptAlgo | read-only | current | The encryption algorithm used by the inbound security association of the IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.3.2.1.18 | ColumnipSecTunInSaAhAuthAlgo | read-only | current | The authentication algorithm used by the inbound authentication header (AH) security association of the IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.3.2.1.19 | ColumnipSecTunInSaEspAuthAlgo | read-only | current | The authentication algorithm used by the inbound ecapsulation security protocol (ESP) security association of the IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.3.2.1.20 | ColumnipSecTunInSaDecompAlgo | read-only | current | The decompression algorithm used by the inbound security association of the IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.3.2.1.21 | ColumnipSecTunOutSaDiffHellmanGrp | read-only | current | The Diffie Hellman Group used by the outbound security association of the IPsec Phase-2 Tunnel. If the tunnel was setup manually, the value of this MIB element… |
| 1.3.6.1.3.171.1.3.2.1.22 | ColumnipSecTunOutSaEncryptAlgo | read-only | current | The encryption algorithm used by the outbound security association of the IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.3.2.1.23 | ColumnipSecTunOutSaAhAuthAlgo | read-only | current | The authentication algorithm used by the outbound authentication header (AH) security association of the IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.3.2.1.24 | ColumnipSecTunOutSaEspAuthAlgo | read-only | current | The authentication algorithm used by the inbound encapsulation security protocol (ESP) security association of the IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.3.2.1.25 | ColumnipSecTunOutSaCompAlgo | read-only | current | The compression algorithm used by the inbound security association of the IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.3.2.1.26 | ColumnipSecTunPmtu | read-only | current | The Path MTU for this IPsec Phase-2 tunnel, which ha been either learnt from the network or which has been specified by the administrator. The lower end of the… |
| 1.3.6.1.3.171.1.3.2.1.27 | ColumnipSecTunInOctets | read-only | current | The total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed… |
| 1.3.6.1.3.171.1.3.2.1.28 | ColumnipSecTunHcInOctets | read-only | current | A high capacity count of the total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the pack… |
| 1.3.6.1.3.171.1.3.2.1.29 | ColumnipSecTunInOctWraps | read-only | current | The number of times the octets received counter (ipSecTunInOctets) has wrapped. |
| 1.3.6.1.3.171.1.3.2.1.30 | ColumnipSecTunInDecompOctets | read-only | current | The total number of decompressed octets received by this IPsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed. If compression is no… |
| 1.3.6.1.3.171.1.3.2.1.31 | ColumnipSecTunHcInDecompOctets | read-only | current | A high capacity count of the total number of decompressed octets received by this IPsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompres… |
| 1.3.6.1.3.171.1.3.2.1.32 | ColumnipSecTunInDecompOctWraps | read-only | current | The number of times the decompressed octets received counter (ipSecTunInDecompOctets) has wrapped. |
| 1.3.6.1.3.171.1.3.2.1.33 | ColumnipSecTunInPkts | read-only | current | The total number of packets received by this IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.3.2.1.34 | ColumnipSecTunInDropPkts | read-only | current | The total number of packets dropped during receive processing by this IPsec Phase-2 Tunnel. This count does NOT include packets dropped due to Anti-Replay proc… |
| 1.3.6.1.3.171.1.3.2.1.35 | ColumnipSecTunInReplayDropPkts | read-only | current | The total number of packets dropped during receive processing due to Anti-Replay processing by this IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.3.2.1.36 | ColumnipSecTunInAuths | read-only | current | The total number of inbound authentication's performed by this IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.3.2.1.37 | ColumnipSecTunInAuthFails | read-only | current | The total number of inbound authentication's which ended in failure by this IPsec Phase-2 Tunnel . |
| 1.3.6.1.3.171.1.3.2.1.38 | ColumnipSecTunInDecrypts | read-only | current | The total number of inbound decryption's performed by this IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.3.2.1.39 | ColumnipSecTunInDecryptFails | read-only | current | The total number of inbound decryption's which ended in failure by this IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.3.2.1.40 | ColumnipSecTunOutOctets | read-only | current | The total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed. See a… |
| 1.3.6.1.3.171.1.3.2.1.41 | ColumnipSecTunHcOutOctets | read-only | current | A high capacity count of the total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet sh… |
| 1.3.6.1.3.171.1.3.2.1.42 | ColumnipSecTunOutOctWraps | read-only | current | The number of times the out octets counter (ipSecTunOutOctets) has wrapped. |
| 1.3.6.1.3.171.1.3.2.1.43 | ColumnipSecTunOutUncompOctets | read-only | current | The total number of uncompressed octets sent by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed. If compression is not bei… |
| 1.3.6.1.3.171.1.3.2.1.44 | ColumnipSecTunHcOutUncompOctets | read-only | current | A high capacity count of the total number of uncompressed octets sent by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed. … |
| 1.3.6.1.3.171.1.3.2.1.45 | ColumnipSecTunOutUncompOctWraps | read-only | current | The number of times the uncompressed octets sent counter (ipSecTunOutUncompOctets) has wrapped. |
| 1.3.6.1.3.171.1.3.2.1.46 | ColumnipSecTunOutPkts | read-only | current | The total number of packets sent by this IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.3.2.1.47 | ColumnipSecTunOutDropPkts | read-only | current | The total number of packets dropped during send processing by this IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.3.2.1.48 | ColumnipSecTunOutAuths | read-only | current | The total number of outbound authentication's performed by this IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.3.2.1.49 | ColumnipSecTunOutAuthFails | read-only | current | The total number of outbound authentication's which ended in failure by this IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.3.2.1.50 | ColumnipSecTunOutEncrypts | read-only | current | The total number of outbound encryption's performed by this IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.3.2.1.51 | ColumnipSecTunOutEncryptFails | read-only | current | The total number of outbound encryption's which ended in failure by this IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.3.2.1.52 | ColumnipSecTunOutCompressedPkts | read-only | current | The total number of outbound packets which were successfully compressed. |
| 1.3.6.1.3.171.1.3.2.1.53 | ColumnipSecTunOutCompSkippedPkts | read-only | current | The total number of outbound packets that were to be compressed but which were skipped due to the compression hysteresis. |
| 1.3.6.1.3.171.1.3.2.1.54 | ColumnipSecTunOutCompFailPkts | read-only | current | The total number of outbound packets that failed compression because they grew in size after compression. |
| 1.3.6.1.3.171.1.3.2.1.55 | ColumnipSecTunOutCompTooSmallPkts | read-only | current | The total number of outbound packets that were to be compressed but were smaller than the compression threshold size. |
| 1.3.6.1.3.171.1.3.2.1.56 | ColumnipSecTunStatus | read-write | current | The status of the MIB table row. This object can be used to bring the tunnel down by setting value of this object to destroy(2). When the value is set to destr… |
| 1.3.6.1.3.171.1.3.2.1.57 | ColumnipSecTunControlProtocol | read-only | current | Identifies the protocol used to setup and administer this Phase-2 Ipsec tunnel. If IKE was used to setup this tunnel, then this value of this column would be `… |
| 1.3.6.1.3.171.1.3.2.1.58 | ColumnipSecTunControlTunnelIndex | read-only | current | The index of the associated IPsec Phase-1 Tunnel (in case of IKE, this value would refer t ikeTunIndex in the ikeTunnelTable). A value of 0 identifies that thi… |
| 1.3.6.1.3.171.1.3.2.1.59 | ColumnipSecTunControlTunnelAlive | read-only | current | An indicator which specifies whether or not the IPsec Phase-1 Tunnel that spawned this Phase-2 tunnel currently exists. |
| 1.3.6.1.3.171.1.3.2.1.60 | ColumnipSecTunInSaEncryptKeySize | read-only | current | The key size in bits of the negotiated key to be used with the algorithm denoted by ipSecTunInSaEncryptAlgo. For DES and 3DES the key size is respectively 56 a… |
| 1.3.6.1.3.171.1.3.2.1.61 | ColumnipSecTunOutSaEncryptKeySize | read-only | current | The key size in bits of the negotiated key to be used with the algorithm denoted by ipSecTunOutSaEncryptAlgo. For DES and 3DES the key size is respectively 56 … |
| 1.3.6.1.3.171.1.3.3 | TableipSecEndPtTable | not-accessible | current | The IPsec Phase-2 Tunnel Endpoint Table. This table contains an entry for each active endpoint associated with an IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.3.3.1 | RowipSecEndPtEntry | not-accessible | current | An IPsec Phase-2 Tunnel Endpoint entry. |
| 1.3.6.1.3.171.1.3.3.1.1 | ColumnipSecEndPtIndex | not-accessible | current | The number of the Endpoint associated with the IPsec Phase-2 Tunnel Table. The value of this index is a number which begins at one and is incremented with each… |
| 1.3.6.1.3.171.1.3.3.1.2 | ColumnipSecEndPtLocalName | read-only | current | The DNS name of the local Endpoint. |
| 1.3.6.1.3.171.1.3.3.1.3 | ColumnipSecEndPtLocalType | read-only | current | The type of identity for the local Endpoint. Possible values are: 1) a single IP address, or 2) an IP address range, or 3) an IP subnet. |
| 1.3.6.1.3.171.1.3.3.1.4 | ColumnipSecEndPtLocalAddr1 | read-only | current | The local Endpoint's first IP address specification. If the local Endpoint type is single IP address, then this is the value of the IP address. If the local En… |
| 1.3.6.1.3.171.1.3.3.1.5 | ColumnipSecEndPtLocalAddr2 | read-only | current | The local Endpoint's second IP address specification. If the local Endpoint type is single IP address, then this is the value of the IP address. If the local E… |
| 1.3.6.1.3.171.1.3.3.1.6 | ColumnipSecEndPtLocalProtocol | read-only | current | The protocol number of the local Endpoint's traffic. |
| 1.3.6.1.3.171.1.3.3.1.7 | ColumnipSecEndPtLocalPort | read-only | current | The port number of the local Endpoint's traffic. |
| 1.3.6.1.3.171.1.3.3.1.8 | ColumnipSecEndPtRemoteName | read-only | current | The DNS name of the remote Endpoint. |
| 1.3.6.1.3.171.1.3.3.1.9 | ColumnipSecEndPtRemoteType | read-only | current | The type of identity for the remote Endpoint. Possible values are: 1) a single IP address, or 2) an IP address range, or 3) an IP subnet. |
| 1.3.6.1.3.171.1.3.3.1.10 | ColumnipSecEndPtRemoteAddr1 | read-only | current | The remote Endpoint's first IP address specification. If the remote Endpoint type is single IP address, then this is the value of the IP address. If the remote… |
| 1.3.6.1.3.171.1.3.3.1.11 | ColumnipSecEndPtRemoteAddr2 | read-only | current | The remote Endpoint's second IP address specification. If the remote Endpoint type is single IP address, then this is the value of the IP address. If the remot… |
| 1.3.6.1.3.171.1.3.3.1.12 | ColumnipSecEndPtRemoteProtocol | read-only | current | The protocol number of the remote Endpoint's traffic. |
| 1.3.6.1.3.171.1.3.3.1.13 | ColumnipSecEndPtRemotePort | read-only | current | The port number of the remote Endpoint's traffic. |
| 1.3.6.1.3.171.1.3.4 | TableipSecSpiTable | not-accessible | deprecated | The IPsec Phase-2 Security Protection Index Table. This table contains an entry for each active and expiring security association. |
| 1.3.6.1.3.171.1.3.4.1 | RowipSecSpiEntry | not-accessible | deprecated | Each entry contains the attributes associated with active and expiring IPsec Phase-2 security associations. |
| 1.3.6.1.3.171.1.3.4.1.1 | ColumnipSecSpiIndex | not-accessible | deprecated | The number of the SPI associated with the Phase-2 Tunnel Table. The value of this index is a number which begins at one and is incremented with each SPI associ… |
| 1.3.6.1.3.171.1.3.4.1.2 | ColumnipSecSpiDirection | read-only | deprecated | The direction of the SPI. |
| 1.3.6.1.3.171.1.3.4.1.3 | ColumnipSecSpiValue | read-only | deprecated | The value of the SPI. |
| 1.3.6.1.3.171.1.3.4.1.4 | ColumnipSecSpiProtocol | read-only | deprecated | The protocol of the SPI. |
| 1.3.6.1.3.171.1.3.4.1.5 | ColumnipSecSpiStatus | read-only | deprecated | The status of the SPI. |
| 1.3.6.1.3.171.1.3.5 | NodeipSecGlobalNewGrpStats | |||
| 1.3.6.1.3.171.1.3.5.1 | ScalaripSecGlobalInNewGrpReqs | read-only | current | The total number of New Group exchanges initiated remotely. |
| 1.3.6.1.3.171.1.3.5.2 | ScalaripSecGlobalOutNewGrpReqs | read-only | current | The total number of New Group exchanges initiated locally. |
| 1.3.6.1.3.171.1.3.5.3 | ScalaripSecGlobalInNewGrpReqsRejected | read-only | current | The total number of New Group exchanges initiated remotely that ended in a failure. |
| 1.3.6.1.3.171.1.3.5.4 | ScalaripSecGlobalOutNewGrpReqsRejected | read-only | current | The total number of New Group exchanges initiated locally that ended in a failure. |
| 1.3.6.1.3.171.1.3.6 | TableipSecSaTable | not-accessible | current | The IPsec Phase-2 Security Association Table. This table identifies the structure (in terms of component SAs) of each active Phase-2 IPsec tunnel. This table c… |
| 1.3.6.1.3.171.1.3.6.1 | RowipSecSaEntry | not-accessible | current | Each entry contains the attributes associated with active and expiring IPsec Phase-2 security associations. |
| 1.3.6.1.3.171.1.3.6.1.1 | ColumnipSecSaIndex | not-accessible | current | The index, in the context of the IPsec tunnel ipSecTunIndex, of the security association represented by this table entry. The value of this index is a number w… |
| 1.3.6.1.3.171.1.3.6.1.2 | ColumnipSecSaDirection | read-only | current | Phase-2 IPsec security associations are simplex. Hence a particular security association is used either for securing outgoing traffic or decoding incoming traf… |
| 1.3.6.1.3.171.1.3.6.1.3 | ColumnipSecSaValue | read-only | current | This is the value of the Security Protection Index (SPI) assigned by the system to the security association represented by this entry. |
| 1.3.6.1.3.171.1.3.6.1.4 | ColumnipSecSaProtocol | read-only | current | This column represents the security protocol (AH, ESP or IPComp) for which this security association was setup. |
| 1.3.6.1.3.171.1.3.6.1.5 | ColumnipSecSaStatus | read-only | current | This column represents the status of the security association represented by this tabel entry. If the status of the SA is 'active', the SA is ready for active … |
| 1.3.6.1.3.171.1.4 | NodeipSecHistory | |||
| 1.3.6.1.3.171.1.4.1 | NodeipSecHistGlobal | |||
| 1.3.6.1.3.171.1.4.1.1 | NodeipSecHistGlobalCntl | |||
| 1.3.6.1.3.171.1.4.1.1.1 | ScalaripSecHistTableSize | read-write | current | The window size of the IPsec Phase-1 and Phase-2 History Tables. The IPsec Phase-1 and Phase-2 History Tables are implemented as a sliding window in which only… |
| 1.3.6.1.3.171.1.4.1.1.2 | ScalaripSecHistCheckPoint | read-write | current | The current state of check point processing. This object will return ready when the agent is ready to create on-demand history entries for active IPsec Tunnels… |
| 1.3.6.1.3.171.1.4.2 | NodeipSecHistPhaseOne | |||
| 1.3.6.1.3.171.1.4.2.1 | TableikeTunnelHistTable | not-accessible | current | The IPsec Phase-1 Internet Key Exchange Tunnel History Table. This table is implemented as a sliding window in which only the last n entries are maintained. Th… |
| 1.3.6.1.3.171.1.4.2.1.1 | RowikeTunnelHistEntry | not-accessible | current | Each entry contains the attributes associated with a previously active IPsec Phase-1 IKE Tunnel. |
| 1.3.6.1.3.171.1.4.2.1.1.1 | ColumnikeTunHistIndex | not-accessible | current | The index of the IPsec Phase-1 IKE Tunnel History Table. The value of the index is a number which begins at one and is incremented with each tunnel that ends. … |
| 1.3.6.1.3.171.1.4.2.1.1.2 | ColumnikeTunHistTermReason | read-only | current | The reason the IPsec Phase-1 IKE Tunnel was terminated. Possible reasons include: 1 = other 2 = normal termination 3 = operator request 4 = peer delete request… |
| 1.3.6.1.3.171.1.4.2.1.1.3 | ColumnikeTunHistActiveIndex | read-only | current | The index of the previously active IPsec Phase-1 IKE Tunnel. |
| 1.3.6.1.3.171.1.4.2.1.1.4 | ColumnikeTunHistPeerLocalType | read-only | current | The type of local peer identity. The local peer may be indentified by: 1. an IP address, or 2. or a fully qualified domain name. 3. or a distinguished name. |
| 1.3.6.1.3.171.1.4.2.1.1.5 | ColumnikeTunHistPeerLocalValue | read-only | current | The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer t… |
| 1.3.6.1.3.171.1.4.2.1.1.6 | ColumnikeTunHistPeerIntIndex | read-only | current | The internal index of the local-remote peer association. This internal index is used to uniquely identify multiple associations between the local and remote pe… |
| 1.3.6.1.3.171.1.4.2.1.1.7 | ColumnikeTunHistPeerRemoteType | read-only | current | The type of remote peer identity. The remote peer may be indentified by: 1. an IP address, or 2. or a fully qualified domain name. 3. or a distinguished name. |
| 1.3.6.1.3.171.1.4.2.1.1.8 | ColumnikeTunHistPeerRemoteValue | read-only | current | The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote pe… |
| 1.3.6.1.3.171.1.4.2.1.1.9 | ColumnikeTunHistLocalAddr | read-only | current | The IP address of the local endpoint for the IPsec Phase-1 IKE Tunnel. |
| 1.3.6.1.3.171.1.4.2.1.1.10 | ColumnikeTunHistLocalName | read-only | current | The DNS name of the local IP address for the IPsec Phase-1 IKE Tunnel. If the DNS name associated with the local tunnel endpoint is not known, then the value o… |
| 1.3.6.1.3.171.1.4.2.1.1.11 | ColumnikeTunHistRemoteAddr | read-only | current | The IP address of the remote endpoint for the IPsec Phase-1 IKE Tunnel. |
| 1.3.6.1.3.171.1.4.2.1.1.12 | ColumnikeTunHistRemoteName | read-only | current | The DNS name of the remote IP address of IPsec Phase-1 IKE Tunnel. If the DNS name associated with the remote tunnel endpoint is not known, then the value of t… |
| 1.3.6.1.3.171.1.4.2.1.1.13 | ColumnikeTunHistNegoMode | read-only | current | The negotiation mode of the IPsec Phase-1 IKE Tunnel. |
| 1.3.6.1.3.171.1.4.2.1.1.14 | ColumnikeTunHistDiffHellmanGrp | read-only | current | The Diffie Hellman Group used in IPsec Phase-1 IKE negotiations. |
| 1.3.6.1.3.171.1.4.2.1.1.15 | ColumnikeTunHistEncryptAlgo | read-only | current | The encryption algorithm used in IPsec Phase-1 IKE negotiations. |
| 1.3.6.1.3.171.1.4.2.1.1.16 | ColumnikeTunHistHashAlgo | read-only | current | The hash algorithm used in IPsec Phase-1 IKE negotiations. |
| 1.3.6.1.3.171.1.4.2.1.1.17 | ColumnikeTunHistAuthMethod | read-only | current | The authentication method used in IPsec Phase-1 IKE negotiations. |
| 1.3.6.1.3.171.1.4.2.1.1.18 | ColumnikeTunHistLifeTime | read-only | current | The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel in seconds. |
| 1.3.6.1.3.171.1.4.2.1.1.19 | ColumnikeTunHistStartTime | read-only | current | The value of sysUpTime in hundredths of seconds when the IPsec Phase-1 IKE tunnel was started. |
| 1.3.6.1.3.171.1.4.2.1.1.20 | ColumnikeTunHistActiveTime | read-only | current | The length of time the IPsec Phase-1 IKE tunnel was been active in hundredths of seconds. |
| 1.3.6.1.3.171.1.4.2.1.1.21 | ColumnikeTunHistTotalRefreshes | read-only | current | The total number of security associations refreshes performed. |
| 1.3.6.1.3.171.1.4.2.1.1.22 | ColumnikeTunHistTotalSas | read-only | current | The total number of security associations used during the life of the IPsec Phase-1 IKE Tunnel. |
| 1.3.6.1.3.171.1.4.2.1.1.23 | ColumnikeTunHistInOctets | read-only | current | The total number of octets received by this IPsec Phase-1 IKE Tunnel. |
| 1.3.6.1.3.171.1.4.2.1.1.24 | ColumnikeTunHistInPkts | read-only | current | The total number of packets received by this IPsec Phase-1 IKE Tunnel. |
| 1.3.6.1.3.171.1.4.2.1.1.25 | ColumnikeTunHistInDropPkts | read-only | current | The total number of packets dropped by this IPsec Phase-1 IKE Tunnel during receive processing. |
| 1.3.6.1.3.171.1.4.2.1.1.26 | ColumnikeTunHistInNotifys | read-only | current | The total number of notifys received by this IPsec Phase-1 IKE Tunnel. |
| 1.3.6.1.3.171.1.4.2.1.1.27 | ColumnikeTunHistInP2Exchgs | read-only | current | The total number of IPsec Phase-2 exchanges received by this IPsec Phase-1 IKE Tunnel. |
| 1.3.6.1.3.171.1.4.2.1.1.28 | ColumnikeTunHistInP2ExchgInvalids | read-only | current | The total number of IPsec Phase-2 exchanges received on this tunnel that were found to contain references to unrecognized security parameters. |
| 1.3.6.1.3.171.1.4.2.1.1.29 | ColumnikeTunHistInP2ExchgRejects | read-only | current | The total number of IPsec Phase-2 exchanges received on this tunnel that were validated but were rejected by the local policy. |
| 1.3.6.1.3.171.1.4.2.1.1.30 | ColumnikeTunHistInP2SaDelRequests | read-only | current | The total number of IPsec Phase-2 security association delete requests received by this IPsec Phase-1 IKE Tunnel. |
| 1.3.6.1.3.171.1.4.2.1.1.31 | ColumnikeTunHistOutOctets | read-only | current | The total number of octets sent by this IPsec Phase-1 IKE Tunnel. |
| 1.3.6.1.3.171.1.4.2.1.1.32 | ColumnikeTunHistOutPkts | read-only | current | The total number of packets sent by this IPsec Phase-1 IKE Tunnel. |
| 1.3.6.1.3.171.1.4.2.1.1.33 | ColumnikeTunHistOutDropPkts | read-only | current | The total number of packets dropped by this IPsec Phase-1 IKE Tunnel during send processing. |
| 1.3.6.1.3.171.1.4.2.1.1.34 | ColumnikeTunHistOutNotifys | read-only | current | The total number of notifys sent by this IPsec Phase-1 IKE Tunnel. |
| 1.3.6.1.3.171.1.4.2.1.1.35 | ColumnikeTunHistOutP2Exchgs | read-only | current | The total number of IPsec Phase-2 exchanges sent by this IPsec Phase-1 IKE Tunnel. |
| 1.3.6.1.3.171.1.4.2.1.1.36 | ColumnikeTunHistOutP2ExchgInvalids | read-only | current | The total number of IPsec Phase-2 exchanges sent on this tunnel that were found by the peer to contain references to security parameters not recognized by the … |
| 1.3.6.1.3.171.1.4.2.1.1.37 | ColumnikeTunHistOutP2ExchgRejects | read-only | current | The total number of IPsec Phase-2 exchanges sent on this tunnel that were validated by the peer but were rejected by the peer's policy. |
| 1.3.6.1.3.171.1.4.2.1.1.38 | ColumnikeTunHistOutP2SaDelRequests | read-only | current | The total number of IPsec Phase-2 security association delete requests sent by this IPsec Phase-1 IKE Tunnel. |
| 1.3.6.1.3.171.1.4.2.1.1.39 | ColumnikeTunHistInNewGrpReqs | read-only | current | The total number of New Group exchanges initiated remotely using this IKE tunnel during its lifetime. |
| 1.3.6.1.3.171.1.4.2.1.1.40 | ColumnikeTunHistOutNewGrpReqs | read-only | current | The total number of New Group exchanges initiated locally using this IKE tunnel during its lifetime. |
| 1.3.6.1.3.171.1.4.2.1.1.41 | ColumnikeTunHistInNewGrpReqsRejected | read-only | current | The total number of New Group exchanges initiated remotely using this IKE tunnel during its lifetime that ended in a failure. |
| 1.3.6.1.3.171.1.4.2.1.1.42 | ColumnikeTunHistOutNewGrpReqsRejected | read-only | current | The total number of New Group exchanges initiated locally using this IKE tunnel during its lifetime that ended in a failure. |
| 1.3.6.1.3.171.1.4.2.1.1.43 | ColumnikeTunHistInConfigs | read-only | current | The total number of Mode Configuration settings received (either CFG_REPLY or CFG_SET payloads) by the local entity on the ISAKMP SA represented by this IKE tu… |
| 1.3.6.1.3.171.1.4.2.1.1.44 | ColumnikeTunHistOutConfigs | read-only | current | The total number of Mode Configuration settings dispatched (either CFG_REPLY or CFG_SET payloads) by the local entity on the ISAKMP SA represented by this IKE … |
| 1.3.6.1.3.171.1.4.2.1.1.45 | ColumnikeTunHistInConfigsRejects | read-only | current | The total number of Mode Configuration settings which were received (either CFG_REPLY or CFG_SET payloads) and rejected by this entity using the ISAKMP SA repr… |
| 1.3.6.1.3.171.1.4.2.1.1.46 | ColumnikeTunHistOutConfigsRejects | read-only | current | The total number of Mode Configuration settings which were dispatched (either CFG_REPLY or CFG_SET payloads) by this entity and were rejected by the peer (clie… |
| 1.3.6.1.3.171.1.4.2.1.1.47 | ColumnikeTunHistEncryptKeySize | read-only | current | The size in bits of the key which was negotiated for the IKE tunnel to be used with the algorithm denote by the column 'ikeTunEncryptAlgo'. For DES and 3DES th… |
| 1.3.6.1.3.171.1.4.3 | NodeipSecHistPhaseTwo | |||
| 1.3.6.1.3.171.1.4.3.1 | TableipSecTunnelHistTable | not-accessible | current | The IPsec Phase-2 Tunnel History Table. This table is implemented as a sliding window in which only the last n entries are maintained. The maximum number of en… |
| 1.3.6.1.3.171.1.4.3.1.1 | RowipSecTunnelHistEntry | not-accessible | current | Each entry contains the attributes associated with a previously active IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.4.3.1.1.1 | ColumnipSecTunHistIndex | not-accessible | current | The index of the IPsec Phase-2 Tunnel History Table. The value of the index is a number which begins at one and is incremented with each tunnel that ends. The … |
| 1.3.6.1.3.171.1.4.3.1.1.2 | ColumnipSecTunHistTermReason | read-only | current | The reason the IPsec Phase-2 Tunnel was terminated. Possible reasons include: 1 = other 2 = normal termination 3 = operator request 4 = peer delete request was… |
| 1.3.6.1.3.171.1.4.3.1.1.3 | ColumnipSecTunHistActiveIndex | read-only | current | The index of the previously active IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.4.3.1.1.4 | ColumnipSecTunHistIkeTunnelIndex | read-only | deprecated | The index of the associated IPsec Phase-1 Tunnel (ikeTunIndex in the ikeTunnelTable). |
| 1.3.6.1.3.171.1.4.3.1.1.5 | ColumnipSecTunHistLocalAddr | read-only | current | The IP address of the local endpoint for the IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.4.3.1.1.6 | ColumnipSecTunHistRemoteAddr | read-only | current | The IP address of the remote endpoint for the IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.4.3.1.1.7 | ColumnipSecTunHistKeyType | read-only | deprecated | The type of key used by the IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.4.3.1.1.8 | ColumnipSecTunHistEncapMode | read-only | current | The encapsulation mode used by the IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.4.3.1.1.9 | ColumnipSecTunHistLifeSize | read-only | current | The negotiated LifeSize of the IPsec Phase-2 Tunnel in kilobytes. |
| 1.3.6.1.3.171.1.4.3.1.1.10 | ColumnipSecTunHistLifeTime | read-only | current | The negotiated LifeTime of the IPsec Phase-2 Tunnel in seconds. |
| 1.3.6.1.3.171.1.4.3.1.1.11 | ColumnipSecTunHistStartTime | read-only | current | The value of sysUpTime in hundredths of seconds when the IPsec Phase-2 Tunnel was started. |
| 1.3.6.1.3.171.1.4.3.1.1.12 | ColumnipSecTunHistActiveTime | read-only | current | The length of time the IPsec Phase-2 Tunnel has been active in hundredths of seconds. |
| 1.3.6.1.3.171.1.4.3.1.1.13 | ColumnipSecTunHistTotalRefreshes | read-only | current | The total number of security association refreshes performed. |
| 1.3.6.1.3.171.1.4.3.1.1.14 | ColumnipSecTunHistTotalSas | read-only | current | The total number of security associations used during the life of the IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.4.3.1.1.15 | ColumnipSecTunHistInSaDiffHellmanGrp | read-only | current | The Diffie Hellman Group used by the inbound security association of the IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.4.3.1.1.16 | ColumnipSecTunHistInSaEncryptAlgo | read-only | current | The encryption algorithm used by the inbound security association of the IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.4.3.1.1.17 | ColumnipSecTunHistInSaAhAuthAlgo | read-only | current | The authentication algorithm used by the inbound authentication header (AH) security association of the IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.4.3.1.1.18 | ColumnipSecTunHistInSaEspAuthAlgo | read-only | current | The authentication algorithm used by the inbound encapsulation security protocol (ESP) security association of the IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.4.3.1.1.19 | ColumnipSecTunHistInSaDecompAlgo | read-only | current | The decompression algorithm used by the inbound security association of the IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.4.3.1.1.20 | ColumnipSecTunHistOutSaDiffHellmanGrp | read-only | current | The Diffie Hellman Group used by the outbound security association of the IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.4.3.1.1.21 | ColumnipSecTunHistOutSaEncryptAlgo | read-only | current | The encryption algorithm used by the outbound security association of the IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.4.3.1.1.22 | ColumnipSecTunHistOutSaAhAuthAlgo | read-only | current | The authentication algorithm used by the outbound authentication header (AH) security association of the IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.4.3.1.1.23 | ColumnipSecTunHistOutSaEspAuthAlgo | read-only | current | The authentication algorithm used by the inbound ecapsulation security protocol (ESP) security association of the IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.4.3.1.1.24 | ColumnipSecTunHistOutSaCompAlgo | read-only | current | The compression algorithm used by the inbound security association of the IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.4.3.1.1.25 | ColumnipSecTunHistPmtu | read-only | current | The Path MTU that was determined for this IPsec Phase-2 tunnel. |
| 1.3.6.1.3.171.1.4.3.1.1.26 | ColumnipSecTunHistInOctets | read-only | current | The total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed… |
| 1.3.6.1.3.171.1.4.3.1.1.27 | ColumnipSecTunHistHcInOctets | read-only | current | A high capacity count of the total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the pack… |
| 1.3.6.1.3.171.1.4.3.1.1.28 | ColumnipSecTunHistInOctWraps | read-only | current | The number of times the octets received counter (ipSecTunInOctets) has wrapped. |
| 1.3.6.1.3.171.1.4.3.1.1.29 | ColumnipSecTunHistInDecompOctets | read-only | current | The total number of decompressed octets received by this IPsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed. If compression is no… |
| 1.3.6.1.3.171.1.4.3.1.1.30 | ColumnipSecTunHistHcInDecompOctets | read-only | current | A high capacity count of the total number of decompressed octets received by this IPsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompres… |
| 1.3.6.1.3.171.1.4.3.1.1.31 | ColumnipSecTunHistInDecompOctWraps | read-only | current | The number of times the decompressed octets received counter (ipSecTunInDecompOctets) has wrapped. |
| 1.3.6.1.3.171.1.4.3.1.1.32 | ColumnipSecTunHistInPkts | read-only | current | The total number of packets received by this IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.4.3.1.1.33 | ColumnipSecTunHistInDropPkts | read-only | current | The total number of packets dropped during receive processing by this IPsec Phase-2 Tunnel. This count does NOT include packets dropped due to Anti-Replay proc… |
| 1.3.6.1.3.171.1.4.3.1.1.34 | ColumnipSecTunHistInReplayDropPkts | read-only | current | The total number of packets dropped during receive processing due to Anti-Replay processing by this IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.4.3.1.1.35 | ColumnipSecTunHistInAuths | read-only | current | The total number of inbound authentication's performed by this IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.4.3.1.1.36 | ColumnipSecTunHistInAuthFails | read-only | current | The total number of inbound authentication's which ended in failure by this IPsec Phase-2 Tunnel . |
| 1.3.6.1.3.171.1.4.3.1.1.37 | ColumnipSecTunHistInDecrypts | read-only | current | The total number of inbound decryption's performed by this IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.4.3.1.1.38 | ColumnipSecTunHistInDecryptFails | read-only | current | The total number of inbound decryption's which ended in failure by this IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.4.3.1.1.39 | ColumnipSecTunHistOutOctets | read-only | current | The total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed. See a… |
| 1.3.6.1.3.171.1.4.3.1.1.40 | ColumnipSecTunHistHcOutOctets | read-only | current | A high capacity count of the total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet sh… |
| 1.3.6.1.3.171.1.4.3.1.1.41 | ColumnipSecTunHistOutOctWraps | read-only | current | The number of times the octets sent counter (ipSecTunOutOctets) has wrapped. |
| 1.3.6.1.3.171.1.4.3.1.1.42 | ColumnipSecTunHistOutUncompOctets | read-only | current | The total number of uncompressed octets sent by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed. If compression is not bei… |
| 1.3.6.1.3.171.1.4.3.1.1.43 | ColumnipSecTunHistHcOutUncompOctets | read-only | current | A high capacity count of the total number of uncompressed octets sent by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed. … |
| 1.3.6.1.3.171.1.4.3.1.1.44 | ColumnipSecTunHistOutUncompOctWraps | read-only | current | The number of times the uncompressed octets sent counter (ipSecTunOutUncompOctets) has wrapped. |
| 1.3.6.1.3.171.1.4.3.1.1.45 | ColumnipSecTunHistOutPkts | read-only | current | The total number of packets sent by this IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.4.3.1.1.46 | ColumnipSecTunHistOutDropPkts | read-only | current | The total number of packets dropped during send processing by this IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.4.3.1.1.47 | ColumnipSecTunHistOutAuths | read-only | current | The total number of outbound authentication's performed by this IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.4.3.1.1.48 | ColumnipSecTunHistOutAuthFails | read-only | current | The total number of outbound authentication's which ended in failure by this IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.4.3.1.1.49 | ColumnipSecTunHistOutEncrypts | read-only | current | The total number of outbound encryption's performed by this IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.4.3.1.1.50 | ColumnipSecTunHistOutEncryptFails | read-only | current | The total number of outbound encryption's which ended in failure by this IPsec Phase-2 Tunnel. |
| 1.3.6.1.3.171.1.4.3.1.1.51 | ColumnipSecTunHistOutCompressedPkts | read-only | current | The total number of outbound packets which were successfully compressed. |
| 1.3.6.1.3.171.1.4.3.1.1.52 | ColumnipSecTunHistOutCompSkippedPkts | read-only | current | The total number of outbound packets that were to be compressed but which were skipped due to the compression hysteresis. |
| 1.3.6.1.3.171.1.4.3.1.1.53 | ColumnipSecTunHistOutCompFailPkts | read-only | current | The total number of outbound packets that failed compression because they grew in size after compression. |
| 1.3.6.1.3.171.1.4.3.1.1.54 | ColumnipSecTunHistOutCompTooSmallPkts | read-only | current | The total number of outbound packets that were to be compressed but were smaller than the compression threshold size. |
| 1.3.6.1.3.171.1.4.3.1.1.55 | ColumnipSecTunHistControlProtocol | read-only | current | Identifies the protocol that was used to setup and administer Phase-2 IPsec tunnel. If IKE was used to setup this tunnel, then this value of this column would … |
| 1.3.6.1.3.171.1.4.3.1.1.56 | ColumnipSecTunHistControlTunnelIndex | read-only | current | The index of the IPsec Phase-1 Tunnel that spawned this Phase-2 tunnel (in case of IKE, this value would refer t ikeTunIndex in the ikeTunnelTable) |
| 1.3.6.1.3.171.1.4.3.1.1.57 | ColumnipSecTunHistInSaEncryptKeySize | read-only | current | The size in bits of the key which was negotiated to be use with the encryption transform used with this tunnel denote by ipSecTunHistInSaEncryptAlgo. For DES a… |
| 1.3.6.1.3.171.1.4.3.1.1.58 | ColumnipSecTunHistOutSaEncryptKeySize | read-only | current | The size in bits of the key which was negotiated to be use with the encryption transform used with this tunnel denote by ipSecTunHistOutSaEncryptAlgo. For DES … |
| 1.3.6.1.3.171.1.4.3.2 | TableipSecEndPtHistTable | not-accessible | current | The IPsec Phase-2 Tunnel Endpoint History Table. This table is implemented as a sliding window in which only the last n entries are maintained. The maximum num… |
| 1.3.6.1.3.171.1.4.3.2.1 | RowipSecEndPtHistEntry | not-accessible | current | Each entry contains the attributes associated with a previously active IPsec Phase-2 Tunnel Endpoint. |
| 1.3.6.1.3.171.1.4.3.2.1.1 | ColumnipSecEndPtHistIndex | not-accessible | current | The number of the previously active Endpoint associated with a IPsec Phase-2 Tunnel Table. The value of this index is a number which begins at one and is incre… |
| 1.3.6.1.3.171.1.4.3.2.1.2 | ColumnipSecEndPtHistTunIndex | read-only | current | The index of the previously active IPsec Phase-2 Tunnel Table. |
| 1.3.6.1.3.171.1.4.3.2.1.3 | ColumnipSecEndPtHistActiveIndex | read-only | current | The index of the previously active Endpoint. |
| 1.3.6.1.3.171.1.4.3.2.1.4 | ColumnipSecEndPtHistLocalName | read-only | current | The DNS name of the local Endpoint. |
| 1.3.6.1.3.171.1.4.3.2.1.5 | ColumnipSecEndPtHistLocalType | read-only | current | The type of identity for the local Endpoint. Possible values are: 1) a single IP address, or 2) an IP address range, or 3) an IP subnet. |
| 1.3.6.1.3.171.1.4.3.2.1.6 | ColumnipSecEndPtHistLocalAddr1 | read-only | current | The local Endpoint's first IP address specification. If the local Endpoint type is single IP address, then this is the value of the IP address. If the local En… |
| 1.3.6.1.3.171.1.4.3.2.1.7 | ColumnipSecEndPtHistLocalAddr2 | read-only | current | The local Endpoint's second IP address specification. If the local Endpoint type is single IP address, then this is the value of the IP address. If the local E… |
| 1.3.6.1.3.171.1.4.3.2.1.8 | ColumnipSecEndPtHistLocalProtocol | read-only | current | The protocol number of the local Endpoint's traffic. |
| 1.3.6.1.3.171.1.4.3.2.1.9 | ColumnipSecEndPtHistLocalPort | read-only | current | The port number of the local Endpoint's traffic. |
| 1.3.6.1.3.171.1.4.3.2.1.10 | ColumnipSecEndPtHistRemoteName | read-only | current | The DNS name of the remote Endpoint. |
| 1.3.6.1.3.171.1.4.3.2.1.11 | ColumnipSecEndPtHistRemoteType | read-only | current | The type of identity for the remote Endpoint. Possible values are: 1) a single IP address, or 2) an IP address range, or 3) an IP subnet. |
| 1.3.6.1.3.171.1.4.3.2.1.12 | ColumnipSecEndPtHistRemoteAddr1 | read-only | current | The remote Endpoint's first IP address specification. If the remote Endpoint type is single IP address, then this is the value of the IP address. If the remote… |
| 1.3.6.1.3.171.1.4.3.2.1.13 | ColumnipSecEndPtHistRemoteAddr2 | read-only | current | The remote Endpoint's second IP address specification. If the remote Endpoint type is single IP address, then this is the value of the IP address. If the remot… |
| 1.3.6.1.3.171.1.4.3.2.1.14 | ColumnipSecEndPtHistRemoteProtocol | read-only | current | The protocol number of the remote Endpoint's traffic. |
| 1.3.6.1.3.171.1.4.3.2.1.15 | ColumnipSecEndPtHistRemotePort | read-only | current | The port number of the remote Endpoint's traffic. |
| 1.3.6.1.3.171.1.5 | NodeipSecFailures | |||
| 1.3.6.1.3.171.1.5.1 | NodeipSecFailGlobal | |||
| 1.3.6.1.3.171.1.5.1.1 | NodeipSecFailGlobalCntl | |||
| 1.3.6.1.3.171.1.5.1.1.1 | ScalaripSecFailTableSize | read-write | current | The window size of the IPsec Phase-1 and Phase-2 Failure Tables. The IPsec Phase-1 and Phase-2 Failure Tables are implemented as a sliding window in which only… |
| 1.3.6.1.3.171.1.5.2 | NodeipSecFailPhaseOne | |||
| 1.3.6.1.3.171.1.5.2.1 | TableikeFailTable | not-accessible | current | The IPsec Phase-1 Failure Table. This table is implemented as a sliding window in which only the last n entries are maintained. The maximum number of entries i… |
| 1.3.6.1.3.171.1.5.2.1.1 | RowikeFailEntry | not-accessible | current | Each entry contains the attributes associated with an IPsec Phase-1 failure. |
| 1.3.6.1.3.171.1.5.2.1.1.1 | ColumnikeFailIndex | not-accessible | current | The IPsec Phase-1 Failure Table index. The value of the index is a number which begins at one and is incremented with each IPsec Phase-1 failure. The value of … |
| 1.3.6.1.3.171.1.5.2.1.1.2 | ColumnikeFailReason | read-only | current | The reason for the failure. Possible reasons include: 1 = other 2 = peer delete request was received 3 = contact with peer was lost 4 = local failure occurred … |
| 1.3.6.1.3.171.1.5.2.1.1.3 | ColumnikeFailTime | read-only | current | The value of sysUpTime in hundredths of seconds at the time of the failure. |
| 1.3.6.1.3.171.1.5.2.1.1.4 | ColumnikeFailLocalType | read-only | current | The type of local peer identity. The local peer may be indentified by: 1. an IP address, or 2. or a fully qualified domain name. 3. or a distinguished name. |
| 1.3.6.1.3.171.1.5.2.1.1.5 | ColumnikeFailLocalValue | read-only | current | The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer t… |
| 1.3.6.1.3.171.1.5.2.1.1.6 | ColumnikeFailRemoteType | read-only | current | The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name. 3. or a distinguished name. |
| 1.3.6.1.3.171.1.5.2.1.1.7 | ColumnikeFailRemoteValue | read-only | current | The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote pe… |
| 1.3.6.1.3.171.1.5.2.1.1.8 | ColumnikeFailLocalAddr | read-only | current | The IP address of the local peer. |
| 1.3.6.1.3.171.1.5.2.1.1.9 | ColumnikeFailRemoteAddr | read-only | current | The IP address of the remote peer. |
| 1.3.6.1.3.171.1.5.3 | NodeipSecFailPhaseTwo | |||
| 1.3.6.1.3.171.1.5.3.1 | TableipSecFailTable | not-accessible | current | The IPsec Phase-2 Failure Table. This table is implemented as a sliding window in which only the last n entries are maintained. The maximum number of entries i… |
| 1.3.6.1.3.171.1.5.3.1.1 | RowipSecFailEntry | not-accessible | current | Each entry contains the attributes associated with an IPsec Phase-1 failure. |
| 1.3.6.1.3.171.1.5.3.1.1.1 | ColumnipSecFailIndex | not-accessible | current | The IPsec Phase-2 Failure Table index. The value of the index is a number which begins at one and is incremented with each IPsec Phase-1 failure. The value of … |
| 1.3.6.1.3.171.1.5.3.1.1.2 | ColumnipSecFailReason | read-only | current | The reason for the failure. Possible reasons include: 1 = other 2 = internal error occurred 3 = peer encoding error 4 = proposal failure 5 = protocol use failu… |
| 1.3.6.1.3.171.1.5.3.1.1.3 | ColumnipSecFailTime | read-only | current | The value of sysUpTime in hundredths of seconds at the time of the failure. |
| 1.3.6.1.3.171.1.5.3.1.1.4 | ColumnipSecFailTunnelIndex | read-only | current | The Phase-2 Tunnel index (ipSecTunIndex). |
| 1.3.6.1.3.171.1.5.3.1.1.5 | ColumnipSecFailSaSpi | read-only | current | The security association SPI value. |
| 1.3.6.1.3.171.1.5.3.1.1.6 | ColumnipSecFailPktSrcAddr | read-only | current | The packet's source IP address. |
| 1.3.6.1.3.171.1.5.3.1.1.7 | ColumnipSecFailPktDstAddr | read-only | current | The packet's destination IP address. |
| 1.3.6.1.3.171.1.6 | NodeipSecTrapCntl | |||
| 1.3.6.1.3.171.1.6.1 | ScalaripSecTrapCntlIkeTunnelStart | read-write | current | This object defines the administrative state of sending the IPsec IKE Phase-1 Tunnel Start TRAP |
| 1.3.6.1.3.171.1.6.2 | ScalaripSecTrapCntlIkeTunnelStop | read-write | current | This object defines the administrative state of sending the IPsec IKE Phase-1 Tunnel Stop TRAP |
| 1.3.6.1.3.171.1.6.3 | ScalaripSecTrapCntlIkeSysFailure | read-write | current | This object defines the administrative state of sending the IPsec IKE Phase-1 System Failure TRAP |
| 1.3.6.1.3.171.1.6.4 | ScalaripSecTrapCntlIkeCertCrlFailure | read-write | current | This object defines the administrative state of sending the IPsec IKE Phase-1 Certificate/CRL Failure TRAP |
| 1.3.6.1.3.171.1.6.5 | ScalaripSecTrapCntlIkeProtocolFail | read-write | current | This object defines the administrative state of sending the IPsec IKE Phase-1 Protocol Failure TRAP |
| 1.3.6.1.3.171.1.6.6 | ScalaripSecTrapCntlIkeNoSa | read-write | current | This object defines the administrative state of sending the IPsec IKE Phase-1 No Security Association TRAP. |
| 1.3.6.1.3.171.1.6.7 | ScalaripSecTrapCntlIpSecTunnelStart | read-write | current | This object defines the administrative state of sending the IPsec Phase-2 Tunnel Start TRAP |
| 1.3.6.1.3.171.1.6.8 | ScalaripSecTrapCntlIpSecTunnelStop | read-write | current | This object defines the administrative state of sending the IPsec Phase-2 Tunnel Stop TRAP |
| 1.3.6.1.3.171.1.6.9 | ScalaripSecTrapCntlIpSecSysFailure | read-write | current | This object defines the administrative state of sending the IPsec Phase-2 System Failure TRAP |
| 1.3.6.1.3.171.1.6.10 | ScalaripSecTrapCntlIpSecSetUpFailure | read-write | current | This object defines the administrative state of sending the IPsec Phase-2 Set Up Failure TRAP |
| 1.3.6.1.3.171.1.6.11 | ScalaripSecTrapCntlIpSecEarlyTunTerm | read-write | current | This object defines the administrative state of sending the IPsec Phase-2 Early Tunnel Termination TRAP |
| 1.3.6.1.3.171.1.6.12 | ScalaripSecTrapCntlIpSecProtocolFail | read-write | current | This object defines the administrative state of sending the IPsec Phase-2 Protocol Failure TRAP |
| 1.3.6.1.3.171.1.6.13 | ScalaripSecTrapCntlIpSecNoSa | read-write | current | This object defines the administrative state of sending the IPsec Phase-2 No Security Association TRAP |
| 1.3.6.1.3.171.1.6.14 | ScalaripSecTrapCntlInNewGrpRejected | read-write | current | This object defines the administrative state of sending the IPsec Phase-2 No Security Association TRAP |
| 1.3.6.1.3.171.1.6.15 | ScalaripSecTrapCntlOutNewGrpRejected | read-write | current | This object defines the administrative state of sending the IPsec Phase-2 No Security Association TRAP |
| 1.3.6.1.3.171.2 | NodeipSecMIBNotificationPrefix | |||
| 1.3.6.1.3.171.2.0 | NodeipSecMIBNotifications | |||
| 1.3.6.1.3.171.2.0.1 | NotificationikeTunnelStart | current | This notification is generated when an IPsec Phase-1 IKE Tunnel becomes active. | |
| 1.3.6.1.3.171.2.0.2 | NotificationikeTunnelStop | current | This notification is generated when an IPsec Phase-1 IKE Tunnel becomes inactive. | |
| 1.3.6.1.3.171.2.0.3 | NotificationikeSysFailure | current | This notification is generated when the processing for an IPsec Phase-1 IKE Tunnel experiences an internal or system capacity error. | |
| 1.3.6.1.3.171.2.0.4 | NotificationikeCertCrlFailure | current | This notification is generated when the processing for an IPsec Phase-1 IKE Tunnel experiences a Certificate or a Certificate Revoke List (CRL) related error. | |
| 1.3.6.1.3.171.2.0.5 | NotificationikeProtocolFailure | current | This notification is generated when the processing for an IPsec Phase-1 IKE Tunnel experiences a protocol related error. | |
| 1.3.6.1.3.171.2.0.6 | NotificationikeNoSa | current | This notification is generated when the IKE entity recieves an ISAKMP PDU with a reference to a non-existent cookie. | |
| 1.3.6.1.3.171.2.0.7 | NotificationipSecTunnelStart | current | This notification is generated when an IPsec Phase-2 Tunnel becomes active. | |
| 1.3.6.1.3.171.2.0.8 | NotificationipSecTunnelStop | current | This notification is generated when an IPsec Phase-2 Tunnel becomes inactive. | |
| 1.3.6.1.3.171.2.0.9 | NotificationipSecSysFailure | current | This notification is generated when the processing for an IPsec Phase-2 Tunnel experiences an internal or system capacity error. | |
| 1.3.6.1.3.171.2.0.10 | NotificationipSecSetUpFailure | current | This notification is generated when the setup for an IPsec Phase-2 Tunnel fails. | |
| 1.3.6.1.3.171.2.0.11 | NotificationipSecEarlyTunTerm | current | This notification is generated when an an IPsec Phase-2 Tunnel is terminated earily or before expected. | |
| 1.3.6.1.3.171.2.0.12 | NotificationipSecProtocolFailure | current | This notification is generated when the processing for an IPsec Phase-2 Tunnel experiences a protocol related error. | |
| 1.3.6.1.3.171.2.0.13 | NotificationipSecNoSa | current | This notification is generated when the managed entity receives an IPsec packet with a non-existent SPI. | |
| 1.3.6.1.3.171.2.0.14 | NotificationipSecInNewGrpRejected | current | This notification is generated when the managed entity receives and rejects an incoming new group proposal from an IKE peer (ikePeerRemoteAddr). The ISAKMP con… | |
| 1.3.6.1.3.171.2.0.15 | NotificationipSecOutNewGrpRejected | current | This notification is generated when the managed entity issues a new group proposal to the peer (ikePeerRemoteAddr) and the peer rejects the proposal. The ISAKM… | |
| 1.3.6.1.3.171.3 | NodeipSecMIBConformance | |||
| 1.3.6.1.3.171.3.1 | NodeipSecMIBGroups | |||
| 1.3.6.1.3.171.3.1.1 | GroupipSecLevelsGroup | current | This group consists of a: 1) IPsec MIB Level | |
| 1.3.6.1.3.171.3.1.2 | GroupipSecIkeGroup | current | This group consists of: 1) IKE Global Objects 2) IKE Tunnel table. | |
| 1.3.6.1.3.171.3.1.3 | GroupipSecPeerAssociationGroup | current | This group consists of: 1) IPsec Phase-1 Peer Association table. 2) IPsec Phase-1 Correlation Table | |
| 1.3.6.1.3.171.3.1.4 | GroupipSecXauthGroup | current | This group consists of metrics pertaining to IKE extended authentication. Devices that do not support Xauth need not implement this group. | |
| 1.3.6.1.3.171.3.1.5 | GroupipSecPhaseTwoGroup | current | This group consists of: 1) IPsec Phase-2 Global Statistics 2) IPsec Phase-2 Tunnel Table 3) IPsec Phase-2 Endpoint Table 4) IPsec Phase-2 Security Protection I… | |
| 1.3.6.1.3.171.3.1.6 | GroupipSecHistoryGroup | current | This group consists of: 1) IPsec History Global Objects 2) IPsec Phase-1 History Objects 3) IPsec Phase-2 History Objects | |
| 1.3.6.1.3.171.3.1.7 | GroupipSecFailuresGroup | current | This group consists of: 1) IPsec Failure Global Objects 2) IPsec Phase-1 Tunnel Failure Table 3) IPsec Phase-2 Tunnel Failure Table | |
| 1.3.6.1.3.171.3.1.8 | GroupipSecTrapCntlGroup | current | This group of objects controls the sending of IPsec TRAPs. | |
| 1.3.6.1.3.171.3.1.9 | GroupipSecNotificationGroup | current | This group contains the notifications for the IPsec MIB. | |
| 1.3.6.1.3.171.3.1.10 | GroupipSecModeConfigGroup | current | This group consists of: 1) Global metrics about IKE Mode Configuration activity 2) Phase-1 IKE Tunnel-wise Mode Configuration metrics 3) Historical IKE Mode Co… | |
| 1.3.6.1.3.171.3.1.11 | GroupipSecNewGrpGroup | current | This group consists of: 1) Global metrics about new group negotiations 2) Phase-1 IKE Tunnel-wise new group metrics 3) Historical new group metrics on a per tu… | |
| 1.3.6.1.3.171.3.1.12 | GroupdeprecatedObjectGroup | deprecated | A collection of objects that have bee deprecated. | |
| 1.3.6.1.3.171.3.2 | NodeipSecMIBCompliances | |||
| 1.3.6.1.3.171.3.2.1 | ComplianceipSecMIBCompliance | read-only | current | The compliance statement for SNMP entities the IP Security Protocol. |
Type Definitions
| Name | Syntax | Status | Description |
|---|---|---|---|
| HashedString | OCTET STRING(SIZE(16)) | current | 128-bit MD5 output string of an input string |
| IkePeerType | INTEGER { reserved(0), id_ipv4_addr(1), id_fqdn(2), id_dn(3), id_ipv6_addr(4) } | deprecated | The type of IPsec Phase-1 IKE peer identity. The IKE peer may be identified by one of the ID types defined in IPSEC DOI. This textual convention has been deprecated in favour of the more generic `Phase1PeerType'. (defin… |
| IPSIpAddress | OCTET STRING(SIZE(4 | 16)) | current | An IP V4 or V6 Address. |
| KeyType | INTEGER{ reserved(0), key_ike(1), key_manual(2), key_kink(3), key_ikev2(4) } | deprecated | The type of key used by an IPsec Phase-2 Tunnel. This textual convention has been deprecated and has been repaced by the standard textual convention ControlProtocol (defined in module IPSEC-FLOW-MIB-TC). |
| TrapStatus | INTEGER { reserved(0), enabled(1), disabled(2) } | current | The administrative status for sending a TRAP. |
| TunnelStatus | INTEGER { reserved(0), awaitXauth(1), awaitCommit(2), active(3), destroy(4) } | current | The status of a Tunnel. Objects of this type may be used to bring the tunnel down by setting value of this object to destroy(4). Objects of this type cannot be used to create a Tunnel. |