MIB Viewer

TELDAT-MON-PROTOCOL-IPSEC-MIB

99 objects
This module defines a MIB for monitoring Internet Protocol Security (IPSec). IPSec is a security platform on network level, which lets securing IP communications by authenticating and encrypting each IP data flow. The MIB is made up of three major groups: Advanced, SA and Statistics. Advanced group shows the counter values of use of SA and cypher queue. In SA group is visualized the state of every Security Association (SA). Statistics group contains statistics of IPSec performance.
Imported Objects
SNMPv2-SMIIpAddress MODULE-IDENTITY OBJECT-TYPE Unsigned32
SNMPv2-TCDisplayString TEXTUAL-CONVENTION
TELDAT-SW-STRUCTURE-MIBtelProdNpMonProtocols
OIDNameAccessStatusDescription
1.3.6.1.4.1.2007.4.1.2.3.15IdentitytelProdNpMonProtIpsecThis module defines a MIB for monitoring Internet Protocol Security (IPSec). IPSec is a security platform on network level, which lets securing IP communicatio…
1.3.6.1.4.1.2007.4.1.2.3.15.1NodeteldatIPSecAdvancedGroup
1.3.6.1.4.1.2007.4.1.2.3.15.1.1ScalariPSecClearread-writecurrentReset the counter values of cypher queue and SA use. This variable just can take the values 1 (reset counters) or 0 (no effects) on SET operation.
1.3.6.1.4.1.2007.4.1.2.3.15.1.2ScalariPSecActiveread-writecurrentClose every Security Association and disable IPSec. This variable just can take the values 1 (enabling IPSec) or 0 (disabling IPSec). GET operation returns the…
1.3.6.1.4.1.2007.4.1.2.3.15.1.3ScalarcypherQueueSizeread-onlycurrentSize of cypher queue.
1.3.6.1.4.1.2007.4.1.2.3.15.1.4ScalarcypherQueueWaterMarkread-onlycurrentMaximum number of messages which have been in the cypher queue.
1.3.6.1.4.1.2007.4.1.2.3.15.1.5ScalarcurrentQueueLevelread-onlycurrentCurrent number of messages in the cypher queue.
1.3.6.1.4.1.2007.4.1.2.3.15.1.6ScalarmaxSASimultaneousread-onlycurrentMaximum number of IPSec SA which have been simultaneously active.
1.3.6.1.4.1.2007.4.1.2.3.15.1.7ScalarcurrentNumberIPSecSaread-onlycurrentCurrent number of active IPSec SA.
1.3.6.1.4.1.2007.4.1.2.3.15.1.8ScalarmaxNegotiationDurationread-onlycurrentMaximum time that has lasted an IKE negotiation phase, in miliseconds.
1.3.6.1.4.1.2007.4.1.2.3.15.1.9ScalarmaxTunnelSupportedread-onlycurrentMaximum number of supported tunnels.
1.3.6.1.4.1.2007.4.1.2.3.15.1.10ScalaraccessListHashSizeread-onlycurrentSize of access list hash.
1.3.6.1.4.1.2007.4.1.2.3.15.2NodeteldatIPSecSaGroup
1.3.6.1.4.1.2007.4.1.2.3.15.2.1TableteldatIPSecIkeSaTablenot-accessiblecurrentThis table shows information of active ISAKMP SA.
1.3.6.1.4.1.2007.4.1.2.3.15.2.1.1RowteldatIPSecIkeSaEntrynot-accessiblecurrentEach entry identifies an active ISAKMP SA.
1.3.6.1.4.1.2007.4.1.2.3.15.2.1.1.1ColumnikeSaIndexread-onlycurrentTable index.
1.3.6.1.4.1.2007.4.1.2.3.15.2.1.1.2ColumnikeSaClearread-writecurrentClose this active ISAKMP SA. This variable just can take the value 1 on SET operation.
1.3.6.1.4.1.2007.4.1.2.3.15.2.1.1.3ColumnsaConnectionread-onlycurrentNumber of SA connection. This variable internally identifies an active SA in the router.
1.3.6.1.4.1.2007.4.1.2.3.15.2.1.1.4ColumninitiatorCookieread-onlycurrentCookie of the negotiation initiator.
1.3.6.1.4.1.2007.4.1.2.3.15.2.1.1.5ColumnresponderCookieread-onlycurrentCookie of the negotiation responder.
1.3.6.1.4.1.2007.4.1.2.3.15.2.1.1.6ColumnnegotiationInitiatorread-onlycurrentIP address or hostname of the negotiation initiator.
1.3.6.1.4.1.2007.4.1.2.3.15.2.1.1.7ColumnnegotiationResponderread-onlycurrentIP address or hostname of the negotiation responder.
1.3.6.1.4.1.2007.4.1.2.3.15.2.1.1.8ColumnikeSaSrcread-onlycurrentLocal endpoint IP address of the tunnel.
1.3.6.1.4.1.2007.4.1.2.3.15.2.1.1.9ColumnikeSaDesread-onlycurrentRemote endpoint IP address of the tunnel.
1.3.6.1.4.1.2007.4.1.2.3.15.2.1.1.10ColumnikeSaStateread-onlycurrentState of negotiation SA. This variable just can take three values: ESTABLISH, DYING and ALIVE.
1.3.6.1.4.1.2007.4.1.2.3.15.2.1.1.11ColumnsaOakleyGroupread-onlycurrentType of Oakley group.
1.3.6.1.4.1.2007.4.1.2.3.15.2.1.1.12ColumnikeSaLifeTimeread-onlycurrentLife time of this ISAKMP SA.
1.3.6.1.4.1.2007.4.1.2.3.15.2.1.1.13ColumnikeSaRemLifeTimeread-onlycurrentRemaining life time of this ISAKMP SA.
1.3.6.1.4.1.2007.4.1.2.3.15.2.1.1.14ColumnikeSaPurgeTimeread-onlycurrentTime (seconds) for clearing this ISAKMP SA if destinity does not response during negotiation. This variable shows '-' if purge time is not configured.
1.3.6.1.4.1.2007.4.1.2.3.15.2.2TableteldatIPSecInSaTablenot-accessiblecurrentTable of manual or dinamic active input SA. In this table each SA represents a input IPSec data flow.
1.3.6.1.4.1.2007.4.1.2.3.15.2.2.1RowteldatIPSecInSaEntrynot-accessiblecurrentEach entry identifies an input IPSec SA.
1.3.6.1.4.1.2007.4.1.2.3.15.2.2.1.1ColumninSaIndexread-onlycurrentTable index.
1.3.6.1.4.1.2007.4.1.2.3.15.2.2.1.2ColumninSaClearread-writecurrentClose this SA if it is dinamic. This variable just can take the values 1 (clear SA) or 0 (not clear) on SET operation. For manual SA it does not effect.
1.3.6.1.4.1.2007.4.1.2.3.15.2.2.1.3ColumninSaConnectionread-onlycurrentNumber of SA connection. This variable internally identifies an active SA in the router.
1.3.6.1.4.1.2007.4.1.2.3.15.2.2.1.4ColumninSaSpiread-onlycurrentIdentification number of the security configuration of the SA.
1.3.6.1.4.1.2007.4.1.2.3.15.2.2.1.5ColumninSaKeyTyperead-onlycurrentType of keys used by the IPSec tunnel. This variable only can take two values: 'manual-keying' if the keys have been setted by user, and 'IKE' if the keys have…
1.3.6.1.4.1.2007.4.1.2.3.15.2.2.1.6ColumninSaStatusread-onlycurrentState of the SA. It just can take two values: UP: the SA is active. DOWN: the SA is not active.
1.3.6.1.4.1.2007.4.1.2.3.15.2.2.1.7ColumninSaEncryptionread-onlycurrentSA encryption protocol.
1.3.6.1.4.1.2007.4.1.2.3.15.2.2.1.8ColumninSaAuthenticationread-onlycurrentSA authentication protocol.
1.3.6.1.4.1.2007.4.1.2.3.15.2.2.1.9ColumninSaSrcread-onlycurrentLocal endpoint IP address of the tunnel.
1.3.6.1.4.1.2007.4.1.2.3.15.2.2.1.10ColumninSaDesread-onlycurrentRemote endpoint IP address of the tunnel.
1.3.6.1.4.1.2007.4.1.2.3.15.2.2.1.11ColumninSaLifeTimeread-onlycurrentLife time of the input SA.
1.3.6.1.4.1.2007.4.1.2.3.15.2.2.1.12ColumninSaRemLifeTimeread-onlycurrentRemaining life time of the input SA.
1.3.6.1.4.1.2007.4.1.2.3.15.2.2.1.13ColumninSaEncodePktsread-onlycurrentNumber of packets sent by this tunnel.
1.3.6.1.4.1.2007.4.1.2.3.15.2.2.1.14ColumninSaEncodePktsErrread-onlycurrentNumber of errors in sent packets.
1.3.6.1.4.1.2007.4.1.2.3.15.2.2.1.15ColumninSaDecodePktsread-onlycurrentNumber of packets received by this tunnel.
1.3.6.1.4.1.2007.4.1.2.3.15.2.2.1.16ColumninSaDecodePktsErrread-onlycurrentNumber of errors in received packets.
1.3.6.1.4.1.2007.4.1.2.3.15.2.2.1.17ColumninSaDpdread-onlycurrentThis variable indicates if the Dead Peer Detection is enabled. It just can take two possible values: ON (enabled) and OFF (disabled).
1.3.6.1.4.1.2007.4.1.2.3.15.2.3TableteldatIPSecOutSaTablenot-accessiblecurrentTable of manual or dinamic active output SA. In this table each SA represents a output IPSec data flow.
1.3.6.1.4.1.2007.4.1.2.3.15.2.3.1RowteldatIPSecOutSaEntrynot-accessiblecurrentEach entry identifies an output IPSec SA.
1.3.6.1.4.1.2007.4.1.2.3.15.2.3.1.1ColumnoutSaIndexread-onlycurrentTable index.
1.3.6.1.4.1.2007.4.1.2.3.15.2.3.1.2ColumnoutSaClearread-writecurrentClose this SA if it is dinamic. This variable just can take the values 1 (clear SA) or 0 (not clear) on SET operation. For manual SA it does not effect.
1.3.6.1.4.1.2007.4.1.2.3.15.2.3.1.3ColumnoutSaConnectionread-onlycurrentNumber of SA connection. This variable internally identifies an active SA in the router.
1.3.6.1.4.1.2007.4.1.2.3.15.2.3.1.4ColumnoutSaSpiread-onlycurrentIdentification number of the security configuration of the SA.
1.3.6.1.4.1.2007.4.1.2.3.15.2.3.1.5ColumnoutSaKeyTyperead-onlycurrentType of keys used by the IPSec tunnel. This variable only can take two values: 'manual-keying' if the keys have been setted by the user, and 'IKE' if the keys …
1.3.6.1.4.1.2007.4.1.2.3.15.2.3.1.6ColumnoutSaStatusread-onlycurrentState of the SA. It just can take two values: UP: the SA is active. DOWN: the SA is not active.
1.3.6.1.4.1.2007.4.1.2.3.15.2.3.1.7ColumnoutSaEncryptionread-onlycurrentSA encryption protocol.
1.3.6.1.4.1.2007.4.1.2.3.15.2.3.1.8ColumnoutSaAuthenticationread-onlycurrentSA authentication protocol.
1.3.6.1.4.1.2007.4.1.2.3.15.2.3.1.9ColumnoutSaSrcread-onlycurrentLocal endpoint IP address of the tunnel.
1.3.6.1.4.1.2007.4.1.2.3.15.2.3.1.10ColumnoutSaDesread-onlycurrentRemote endpoint IP address of the tunnel.
1.3.6.1.4.1.2007.4.1.2.3.15.2.3.1.11ColumnoutSaLifeTimeread-onlycurrentLife time of the output SA.
1.3.6.1.4.1.2007.4.1.2.3.15.2.3.1.12ColumnoutSaRemLifeTimeread-onlycurrentRemaining life time of the output SA.
1.3.6.1.4.1.2007.4.1.2.3.15.2.3.1.13ColumnoutSaEncodePktsread-onlycurrentNumber of packets sent by this tunnel.
1.3.6.1.4.1.2007.4.1.2.3.15.2.3.1.14ColumnoutSaEncodePktsErrread-onlycurrentNumber of errors in sent packets.
1.3.6.1.4.1.2007.4.1.2.3.15.2.3.1.15ColumnoutSaDecodePktsread-onlycurrentNumber of packets received by this tunnel.
1.3.6.1.4.1.2007.4.1.2.3.15.2.3.1.16ColumnoutSaDecodePktsErrread-onlycurrentNumber of errors in received packets.
1.3.6.1.4.1.2007.4.1.2.3.15.2.3.1.17ColumnoutSaDpdread-onlycurrentThis variable indicates if the Dead Peer Detection is enabled. It just can take two possible values: ON (enabled) and OFF (disabled).
1.3.6.1.4.1.2007.4.1.2.3.15.3NodeteldatIPSecStatisticsGroup
1.3.6.1.4.1.2007.4.1.2.3.15.3.1ScalarstatisticsClearread-writecurrentReset the statistics of IPSec use. This variable just can take the value 1 on SET operation. If reset was successfully, GET operation returns 0 (OK) and otherw…
1.3.6.1.4.1.2007.4.1.2.3.15.3.2NodeteldatIPSecESPAHGroup
1.3.6.1.4.1.2007.4.1.2.3.15.3.2.1ScalarinFramesOkread-onlycurrentCorrectly decapsulated and received frames on IPSec data tunnels.
1.3.6.1.4.1.2007.4.1.2.3.15.3.2.2ScalarinFramesErrorread-onlycurrentNumber of received erroneous frames on IPSec data tunnels. That is the sum of three parameters: - Out order received frames. - Discarded frames by unknown payl…
1.3.6.1.4.1.2007.4.1.2.3.15.3.2.3ScalarinFramesErrOutOfOrderread-onlycurrentNumber of out order received frames on IPSec data tunnels.
1.3.6.1.4.1.2007.4.1.2.3.15.3.2.4ScalarinFramesErrUnkPayloadProtread-onlycurrentNumber of discarded frames by unknown payload protocol on IPSec data tunnels.
1.3.6.1.4.1.2007.4.1.2.3.15.3.2.5ScalarinFramesInternalErrorsread-onlycurrentNumber of discarded frames by ESP authentication error on IPSec data tunnels.
1.3.6.1.4.1.2007.4.1.2.3.15.3.2.6ScalarinFramesPerSecread-onlycurrentReceived traffic (frames/second) on IPSec data tunnels.
1.3.6.1.4.1.2007.4.1.2.3.15.3.2.7ScalarinFramesPerSecMaxread-onlycurrentMaximum received traffic (frames/second) on IPSec data tunnels.
1.3.6.1.4.1.2007.4.1.2.3.15.3.2.8ScalarinKbitsPerSecread-onlycurrentDecoded traffic (kbytes/second) on IPSec data tunnels.
1.3.6.1.4.1.2007.4.1.2.3.15.3.2.9ScalarinKbitsPerSecMaxread-onlycurrentMaximum decoded traffic (kbytes/second) on IPSec data tunnels.
1.3.6.1.4.1.2007.4.1.2.3.15.3.2.10ScalaroutFramesOkread-onlycurrentCorrectly encapsulated and transmitted frames on IPSec data tunnels.
1.3.6.1.4.1.2007.4.1.2.3.15.3.2.11ScalaroutFramesUnkAuthAlgread-onlycurrentNumber of frames with unknown authentication algorithm on IPSec data tunnels.
1.3.6.1.4.1.2007.4.1.2.3.15.3.2.12ScalaroutFramesPerSecread-onlycurrentTransmitted traffic (frames/second) on IPSec data tunnels.
1.3.6.1.4.1.2007.4.1.2.3.15.3.2.13ScalaroutFramesPerSecMaxread-onlycurrentMaximum transmitted traffic (frames/second) on IPSec data tunnels.
1.3.6.1.4.1.2007.4.1.2.3.15.3.2.14ScalaroutKbitsPerSecread-onlycurrentEncoded traffic (kbytes/second) on IPSec data tunnels.
1.3.6.1.4.1.2007.4.1.2.3.15.3.2.15ScalaroutKbitsPerSecMaxread-onlycurrentMaximum encoded traffic (kbytes/second) on IPSec data tunnels.
1.3.6.1.4.1.2007.4.1.2.3.15.3.3NodeteldatIPSecForwardingGroup
1.3.6.1.4.1.2007.4.1.2.3.15.3.3.1ScalarinSaNotFoundread-onlycurrentNumber of input SA not found.
1.3.6.1.4.1.2007.4.1.2.3.15.3.3.2ScalaroutSaTemplateNotFoundread-onlycurrentNumber of output SA templates not found.
1.3.6.1.4.1.2007.4.1.2.3.15.3.3.3ScalaroutSaNotFoundread-onlycurrentNumber of output SA not found.
1.3.6.1.4.1.2007.4.1.2.3.15.3.4NodeteldatIPSecIKEGroup
1.3.6.1.4.1.2007.4.1.2.3.15.3.4.1ScalarikeNegotiationsPhaseIread-onlycurrentNumber of phase I negotiations.
1.3.6.1.4.1.2007.4.1.2.3.15.3.4.2ScalarikeNegotiationsPhaseIIread-onlycurrentNumber of phase II negotiations.
1.3.6.1.4.1.2007.4.1.2.3.15.3.4.3ScalarikeCheckHashErrorPhaseIread-onlycurrentNumber of check hash errors on phase I.
1.3.6.1.4.1.2007.4.1.2.3.15.3.4.4ScalarikeCheckHashErrorPhaseIIread-onlycurrentNumber of check hash errors on phase II.
1.3.6.1.4.1.2007.4.1.2.3.15.3.4.5ScalardropsCollisionsIKEMessageread-onlycurrentNumber of packets dropped by collision of IKE messages.
1.3.6.1.4.1.2007.4.1.2.3.15.3.4.6ScalardropsWaittingIKEMessageread-onlycurrentNumber of packets dropped waiting for IKE processing.
1.3.6.1.4.1.2007.4.1.2.3.15.3.5ScalarcypherQueueEmptyread-onlycurrentAttempts of getting a free message from the empty queue of free generic cypher messages.
1.3.6.1.4.1.2007.4.1.2.3.15.3.6ScalarjobQueueEmptyread-onlycurrentAttempts of getting a job from the empty queue of pending jobs.
1.3.6.1.4.1.2007.4.1.2.3.15.3.7ScalaropenConnectNotNotifiedread-onlycurrentNumber of open connections not notified during last connevent-period.