XEDIA-IPSEC-MIB
98 objects
This module defines objects for management of Xedia's IP security (IPsec) Virtual Private Network (VPN) component.
Imported Objects
| IF-MIB | ifIndex |
| SNMPv2-CONF | MODULE-COMPLIANCE OBJECT-GROUP |
| SNMPv2-SMI | Counter32 Gauge32 Integer32 IpAddress MODULE-IDENTITY OBJECT-TYPE TimeTicks -- Unsigned32 |
| SNMPv2-TC | DisplayString RowStatus TEXTUAL-CONVENTION TruthValue |
| XEDIA-REG | xediaMibs |
| OID | Name | Access | Status | Description |
|---|---|---|---|---|
| 1.3.6.1.4.1.838.3.14 | IdentityxediaIpsecMIB | This module defines objects for management of Xedia's IP security (IPsec) Virtual Private Network (VPN) component. | ||
| 1.3.6.1.4.1.838.3.14.1 | NodeipsecObjects | |||
| 1.3.6.1.4.1.838.3.14.1.1 | NodeipsecSubsystemGroup | |||
| 1.3.6.1.4.1.838.3.14.1.1.1 | ScalaripsecTransformLayerType | read-only | current | The type of IPSec Transform Layer currently active (i.e., software only, hardware assisted). |
| 1.3.6.1.4.1.838.3.14.1.1.2 | ScalaripsecAlgorithms | read-only | current | The IPSec algorithms currently available. |
| 1.3.6.1.4.1.838.3.14.1.2 | TableipsecSecurityProfileTable | not-accessible | current | This table defines a set of security attributes that will be used to describe a security association (SA). There may be many SAs that use the same security pro… |
| 1.3.6.1.4.1.838.3.14.1.2.1 | RowipsecSecurityProfileEntry | not-accessible | current | The attributes that make up a single security profile. New entries are created using the ipsecSecurityProfileRowStatus object. |
| 1.3.6.1.4.1.838.3.14.1.2.1.1 | ColumnipsecSecurityProfileName | not-accessible | current | The name of the security profile. For example 'Medium-Security' or 'Maximum-Security'. |
| 1.3.6.1.4.1.838.3.14.1.2.1.2 | ColumnipsecSecurityProfileProtocol | read-create | current | The IPsec security protocol(s). When the combination of 'ah(1)' and 'esp(0)' is used, the authentication protocol specified in ipsecSecurityProfileAuthenticati… |
| 1.3.6.1.4.1.838.3.14.1.2.1.3 | ColumnipsecSecurityProfileEncryption | read-create | current | The encryption protocol. In the first release we support 'des(3)', 'des3(4)', and null(12)' only. |
| 1.3.6.1.4.1.838.3.14.1.2.1.4 | ColumnipsecSecurityProfileAuthentication | read-create | current | The authentication protocol. Used for ESP or AH only. Note that when ipsecSecurityProfileAuthentication is not 'null(1)', anti-replay services are also impleme… |
| 1.3.6.1.4.1.838.3.14.1.2.1.5 | ColumnipsecSecurityProfileCompression | read-create | current | The compression method. This is used when ipsecSecurityProfileProtocol is set to 'ipcomp(2)' or both 'esp(0)' and 'ipcomp(2)'. The default is 'lzs(3)'. |
| 1.3.6.1.4.1.838.3.14.1.2.1.6 | ColumnipsecSecurityProfileExpirationTimer | read-create | current | The number of seconds before the SA expires. When 0, the SA expiration timer is disabled. The default is 24*3600 = 86400 seconds (i.e., 24 hours). The minimum … |
| 1.3.6.1.4.1.838.3.14.1.2.1.7 | ColumnipsecSecurityProfileExpirationVolume | read-create | current | The number of KBytes before re-keying. When 0, SA expiration volume is disabled. The default is 0. The minimum allowed expiration volume value is 100 KBytes. T… |
| 1.3.6.1.4.1.838.3.14.1.2.1.8 | ColumnipsecSecurityProfileInactivityTimer | read-create | current | The number of seconds of inactivity before the SA is removed. When 0, SA inactivity timer is disabled. The minimum allowed expiration timer value is 10*60 = 60… |
| 1.3.6.1.4.1.838.3.14.1.2.1.9 | ColumnipsecSecurityProfileEnablePfs | read-create | current | When enabled PFS is enforced. This requires generation on new key material for each protocol SA (i.e., non ISAKMP SA). The default is 'false(2)'. |
| 1.3.6.1.4.1.838.3.14.1.2.1.10 | ColumnipsecSecurityProfileOakleyGroup | read-create | current | Defines 1st or 2nd Oakley group used by ISAKMP. The default is 'first(1)'. |
| 1.3.6.1.4.1.838.3.14.1.2.1.11 | ColumnipsecSecurityProfileAssignmentStatus | read-only | current | When status is 'assigned(1)', the security profile is referenced by one or more SAs. Modifications and deletions are allowed for unassigned security profiles o… |
| 1.3.6.1.4.1.838.3.14.1.2.1.12 | ColumnipsecSecurityProfileRowStatus | read-create | current | This object allows entries to be created and deleted in this table. Note that entries with ipsecSecurityProfileAssignmentStatus of 'assigned(1)' cannot be dele… |
| 1.3.6.1.4.1.838.3.14.1.3 | TableipsecIfTable | not-accessible | current | Information associated with an IPSec Interface. |
| 1.3.6.1.4.1.838.3.14.1.3.1 | RowipsecIfEntry | not-accessible | current | Information about a single IPSec Interface. |
| 1.3.6.1.4.1.838.3.14.1.3.1.1 | ColumnipsecIfType | read-only | current | The type of IPSec interface. |
| 1.3.6.1.4.1.838.3.14.1.3.1.2 | ColumnipsecIfRemoteGateway | read-write | current | The IP address of the remote security gateway. |
| 1.3.6.1.4.1.838.3.14.1.3.1.3 | ColumnipsecIfPresharedKey | read-write | current | Specifies pre-shared key to be used by ISAKMP for authentication. |
| 1.3.6.1.4.1.838.3.14.1.3.1.4 | ColumnipsecIfCurTunnels | read-only | current | The number of tunnels currently configured on the interface. |
| 1.3.6.1.4.1.838.3.14.1.3.1.5 | ColumnipsecIfTotTunnels | read-only | current | The total number of tunnels created on the interface since the interface was created. |
| 1.3.6.1.4.1.838.3.14.1.3.1.6 | ColumnipsecIfUpTunnels | read-only | current | The number of tunnels in the 'Up' state on the interface. |
| 1.3.6.1.4.1.838.3.14.1.3.1.7 | ColumnipsecIfLastTunnelChange | read-only | current | The value of sysUpTime the last time a tunnel on the interface changed status (ipsecTunnelOperStatus). This object indicates to the manager when it needs to re… |
| 1.3.6.1.4.1.838.3.14.1.3.1.8 | ColumnipsecIfCurSAs | read-only | current | The current number of security associations (SAs) for all the tunnels on this interface. Typically there will be 2 SAs (1 inbound and 1 outbound) for each tunn… |
| 1.3.6.1.4.1.838.3.14.1.3.1.9 | ColumnipsecIfTotSAs | read-only | current | The total number of security associations (SAs) for all tunnels created on the interface since the interface was configured. For interfaces with dynamic tunnel… |
| 1.3.6.1.4.1.838.3.14.1.3.1.10 | ColumnipsecIfInErrsInvalidSpi | read-only | current | The total number of IPSec packets received which contained an invalid SPI (Security Parameter Index) and therefore could not be associated with a tunnel nor a … |
| 1.3.6.1.4.1.838.3.14.1.3.1.11 | ColumnipsecIfOutDiscardsNoTunnel | read-only | current | The number of packets that could not be send out a tunnel because the tunnel lookup failed. |
| 1.3.6.1.4.1.838.3.14.1.3.1.12 | ColumnipsecIfInCompressedPkts | read-only | current | The total number of compressed packets received. |
| 1.3.6.1.4.1.838.3.14.1.3.1.13 | ColumnipsecIfInCompressedOctets | read-only | current | The total number of bytes after decompression in compressed packets received. |
| 1.3.6.1.4.1.838.3.14.1.3.1.14 | ColumnipsecIfOutCompressedPkts | read-only | current | The total number of compressed packets transmitted. |
| 1.3.6.1.4.1.838.3.14.1.3.1.15 | ColumnipsecIfOutCompressedOctets | read-only | current | The total number of bytes prior to compression in compressed packets transmitted. |
| 1.3.6.1.4.1.838.3.14.1.3.1.16 | ColumnipsecIfIkeAuthentMethod | read-write | current | Specifies the authentication method which will be used by this gateway to establish dynamic IKE tunnel connections. Note that the ipsecTunnelAuthentMethod repr… |
| 1.3.6.1.4.1.838.3.14.1.3.1.17 | ColumnipsecIfIkeInitiate | read-write | current | Specifies when IKE will initiate dynamic, site to site tunnel establishment with the remote gateway. If 'automatic(1)', the gateway attempts to negotiate tunne… |
| 1.3.6.1.4.1.838.3.14.1.3.1.18 | ColumnipsecIfIkeKeepaliveUpdate | read-write | current | IKE keepalive protocol update timeout value. When set to 0, the IKE keepalive protocol is disabled. Default is set to disabled. Minimum value is 10 sec, maximu… |
| 1.3.6.1.4.1.838.3.14.1.3.1.19 | ColumnipsecIfIkeKeepaliveExpire | read-write | current | IKE keepalive protocol expire retry counter value. Default is set to 4. Minimum value is 2, maximum value is 10. This value specifies a number of IKE keepalive… |
| 1.3.6.1.4.1.838.3.14.1.3.1.20 | ColumnipsecIfIkeKeepaliveCancel | read-write | current | IKE keepalive protocol cancel retry counter value. Default is set to 6. Minimum value is 2, maximum value is 10. This value specifies a number of IKE keepalive… |
| 1.3.6.1.4.1.838.3.14.1.3.1.21 | ColumnipsecIfIkeKeepaliveState | read-only | current | IKE keepalive state. |
| 1.3.6.1.4.1.838.3.14.1.3.1.22 | ColumnipsecIfPacketsQueued | read-only | current | The total number of packets that are currently queued for all dynamic site-to-site tunnels created on the interface. These packets will remained queued for a p… |
| 1.3.6.1.4.1.838.3.14.1.4 | TableipsecTunnelTable | not-accessible | current | The tunnel table is used to configure and monitor VPN tunnels. There two cases here: site-to-site and remote dial-in. For site-to-site VPN the entry in the tun… |
| 1.3.6.1.4.1.838.3.14.1.4.1 | RowipsecTunnelEntry | not-accessible | current | Information about a tunnel. Tunnels are manually created using the ipsecTunnelRowStatus object. |
| 1.3.6.1.4.1.838.3.14.1.4.1.1 | ColumnipsecTunnelName | not-accessible | current | Name of the tunnel. For example, Boston-to-LA (site-to-site), XediaEnginnering (remote client dial-in group), etc. The name must be unique in the system and it… |
| 1.3.6.1.4.1.838.3.14.1.4.1.2 | ColumnipsecTunnelType | read-create | current | The tunnel type. When 'dialinGroup(1)', 'dialinClient(2)' or 'siteToSiteDynamic(4)' is specified, ISAKMP is responsible for SA creation. Otherwise, when 'siteT… |
| 1.3.6.1.4.1.838.3.14.1.4.1.3 | ColumnipsecTunnelAdminStatus | read-create | current | This object is the desired state of the tunnel and is similar to interface administrative state. The default is 'up(1)'. When the ipsecTunnelAdminStatus is set… |
| 1.3.6.1.4.1.838.3.14.1.4.1.4 | ColumnipsecTunnelOperStatus | read-only | current | This is the operational state (the actual state of the tunnel. This object is similar to interface operational state. |
| 1.3.6.1.4.1.838.3.14.1.4.1.5 | ColumnipsecTunnelLastChange | read-only | current | The value of sysUpTime the last time the ipsecTunnelOperStatus changed. On re-initialization of the system, this object contains a zero value. When a new tunne… |
| 1.3.6.1.4.1.838.3.14.1.4.1.6 | ColumnipsecTunnelLocalAddress | read-create | current | The local address and mask define the local trusted subnet (or single host if mask is all 1's) for the tunnel. The local trusted subnet or host identifies 'sou… |
| 1.3.6.1.4.1.838.3.14.1.4.1.7 | ColumnipsecTunnelLocalAddressMask | read-create | current | The local trusted address mask of the tunnel. Refer to ipsecTunnelLocalAddress. |
| 1.3.6.1.4.1.838.3.14.1.4.1.8 | ColumnipsecTunnelRemoteAddress | read-create | current | The remote address and mask define the remote trusted subnet (or single host if mask is all 1's) for the tunnel. The remote trusted subnet or host identifies '… |
| 1.3.6.1.4.1.838.3.14.1.4.1.9 | ColumnipsecTunnelRemoteAddressMask | read-create | current | The remote trusted address mask of the tunnel. Refer to ipsecTunnelRemoteAddress. For dialin client tunnels, the ipsecTunnelRemoteAddress and ipsecTunnelRemote… |
| 1.3.6.1.4.1.838.3.14.1.4.1.10 | ColumnipsecTunnelRemoteGateway | read-only | current | The IP address of the remote security gateway. For 'siteToSite' tunnels, this object is a copy of the associated ipsecIfRemoteGateway. For 'dialinClient' tunne… |
| 1.3.6.1.4.1.838.3.14.1.4.1.11 | ColumnipsecTunnelSecurityProfile | read-create | current | Defines which Security Profile to use for this tunnel. This is a name of Security Profile entry in the Security Profile table. |
| 1.3.6.1.4.1.838.3.14.1.4.1.12 | ColumnipsecTunnelIkeAuthentMethod | read-only | current | Defines authentication method which was used to establish the current IKE tunnel connection. Not applicable for static tunnels. Note that ipsecIfIkeAuthentMeth… |
| 1.3.6.1.4.1.838.3.14.1.4.1.13 | ColumnipsecTunnelClientAddressAssign | read-create | current | Address assignment method is configured for dialin group tunnels and determines how clients within the group will be assigned an enterprise IP address and subn… |
| 1.3.6.1.4.1.838.3.14.1.4.1.14 | ColumnipsecTunnelCurSAs | read-only | current | The current number of security associations (SAs) for this tunnel. Typically there will be 2 SAs (1 inbound and 1 outbound) for a tunnel in the 'up' state. Dur… |
| 1.3.6.1.4.1.838.3.14.1.4.1.15 | ColumnipsecTunnelTotSAs | read-only | current | The total number of security associations (SAs) created for this tunnel since the tunnel was configured. For dynamic tunnels, this object gives an indication o… |
| 1.3.6.1.4.1.838.3.14.1.4.1.16 | ColumnipsecTunnelInPkts | read-only | current | The total number of packets received on the tunnel since it was created. |
| 1.3.6.1.4.1.838.3.14.1.4.1.17 | ColumnipsecTunnelInOctets | read-only | current | The total number of bytes received on the tunnel since it was created. |
| 1.3.6.1.4.1.838.3.14.1.4.1.18 | ColumnipsecTunnelInDiscardsQueFull | read-only | current | The total number of packets received on the tunnel which had to be dropped because of a full queue. |
| 1.3.6.1.4.1.838.3.14.1.4.1.19 | ColumnipsecTunnelInErrsInvalidMac | read-only | current | The total number of packets received on the tunnel with invalid authentication data. |
| 1.3.6.1.4.1.838.3.14.1.4.1.20 | ColumnipsecTunnelInErrsInvalidSeq | read-only | current | The total number of packets received on the tunnel with an invalid sequence number. |
| 1.3.6.1.4.1.838.3.14.1.4.1.21 | ColumnipsecTunnelInErrsInvalidFormat | read-only | current | The total number of packets received on the tunnel with a valid sequence number and authentication data (if applicable), but an invalid packet format. For inst… |
| 1.3.6.1.4.1.838.3.14.1.4.1.22 | ColumnipsecTunnelOutPkts | read-only | current | The total number of packets transmitted out the tunnel since it was created. |
| 1.3.6.1.4.1.838.3.14.1.4.1.23 | ColumnipsecTunnelOutOctets | read-only | current | The total number of bytes transmitted out the tunnel since it was created. |
| 1.3.6.1.4.1.838.3.14.1.4.1.24 | ColumnipsecTunnelOutDiscardsStateNotUp | read-only | current | The total number of packets that could not be sent out the tunnel because the tunnel state was not up. |
| 1.3.6.1.4.1.838.3.14.1.4.1.25 | ColumnipsecTunnelOutDiscardsNoSA | read-only | current | The total number of packets that could not be sent out the tunnel because there was no security association (SA). |
| 1.3.6.1.4.1.838.3.14.1.4.1.26 | ColumnipsecTunnelOutDiscardsQueFull | read-only | current | The total number of packets that could not be sent out the tunnel because the transform engine's queue was full. |
| 1.3.6.1.4.1.838.3.14.1.4.1.27 | ColumnipsecTunnelRowStatus | read-create | current | This object allows entries to be created and deleted in this table. |
| 1.3.6.1.4.1.838.3.14.1.4.1.28 | ColumnipsecTunnelInCompressedPkts | read-only | current | The total number of compressed packets received on the tunnel since it was created. |
| 1.3.6.1.4.1.838.3.14.1.4.1.29 | ColumnipsecTunnelInCompressedOctets | read-only | current | The total number of bytes after decompression in compressed packets received on the tunnel since it was created. |
| 1.3.6.1.4.1.838.3.14.1.4.1.30 | ColumnipsecTunnelOutCompressedPkts | read-only | current | The total number of compressed packets transmitted out the tunnel since it was created. |
| 1.3.6.1.4.1.838.3.14.1.4.1.31 | ColumnipsecTunnelOutCompressedOctets | read-only | current | The total number of bytes prior to compression in compressed packets transmitted out the tunnel since it was created. |
| 1.3.6.1.4.1.838.3.14.1.5 | TableipsecSaTable | not-accessible | current | Security Association (SA) table. Each entry in the table is a Security Association. SA's are associated with a single IPSec tunnel or transport and indexed acc… |
| 1.3.6.1.4.1.838.3.14.1.5.1 | RowipsecSaEntry | not-accessible | current | Information about a specific Security Association. |
| 1.3.6.1.4.1.838.3.14.1.5.1.1 | ColumnipsecSaName | not-accessible | current | The name of the tunnel or transport that this Security Association is associated with. |
| 1.3.6.1.4.1.838.3.14.1.5.1.2 | ColumnipsecSaIndex | not-accessible | current | A numeric index to allow multiple Security Associations per tunnel or transport. |
| 1.3.6.1.4.1.838.3.14.1.5.1.3 | ColumnipsecSaSpi | read-create | current | Security profile index. For static or dynamic inbound SAs, SPI is selected by us. For dynamic outbound SAs, SPI is selected by peer. For static outbound SAs, S… |
| 1.3.6.1.4.1.838.3.14.1.5.1.4 | ColumnipsecSaCreation | read-only | current | Specifies how SA was created. Manually configured SAs will have the value static(1). Dynamical SAs such as those created by key management protocols such as IS… |
| 1.3.6.1.4.1.838.3.14.1.5.1.5 | ColumnipsecSaDirection | read-create | current | SA direction. Traffic SAs are unidirectional whereas key management protocol SAs such as ISA-KMP are bidirectional. |
| 1.3.6.1.4.1.838.3.14.1.5.1.6 | ColumnipsecSaProtocol | read-create | current | Specifies the SA protocol type. |
| 1.3.6.1.4.1.838.3.14.1.5.1.7 | ColumnipsecSaEncryptionKey | read-create | current | The SAs encryption key. For a dynamic SA, the encryption key is negotiated by the key management protocol such as ISAKMP and is not writeable. For static SAs, … |
| 1.3.6.1.4.1.838.3.14.1.5.1.8 | ColumnipsecSaAuthenticationKey | read-create | current | For dynamic SAs, the authentication keys have been negotiated by ISAKMP. For static SA, the keys have been configured. For static SA this is read-create object… |
| 1.3.6.1.4.1.838.3.14.1.5.1.9 | ColumnipsecSaInOutPkts | read-only | current | It counts a total number of frames since the SA was created. For inbound SA it represents received frames. For outbound SA it represent transmitted frames. For… |
| 1.3.6.1.4.1.838.3.14.1.5.1.10 | ColumnipsecSaInOutOctets | read-only | current | It counts a total number of bytes since the SA was created. For inbound SA it represents received bytes. For outbound SA it represent transmitted bytes. For is… |
| 1.3.6.1.4.1.838.3.14.1.5.1.11 | ColumnipsecSaRowStatus | read-create | current | This object allows entries to be created and deleted in this table. The only supported values supported are active(1), createAndGo(4), and destroy(4). |
| 1.3.6.1.4.1.838.3.14.2 | NodeipsecConformance | |||
| 1.3.6.1.4.1.838.3.14.2.1 | NodeipsecCompliances | |||
| 1.3.6.1.4.1.838.3.14.2.1.1 | ComplianceipsecCompliance | current | The compliance statement for all agents that support this MIB. A compliant agent implements all objects defined in this MIB. | |
| 1.3.6.1.4.1.838.3.14.2.2 | NodeipsecGroups | |||
| 1.3.6.1.4.1.838.3.14.2.2.1 | GroupipsecAllGroup | current | The set of all accessible objects in this MIB. |
Type Definitions
| Name | Syntax | Status | Description |
|---|---|---|---|
| IkeAuthentMethod | INTEGER { none(0), presharedKey(1), dsaSig(2), rsaSig(3), rsaEncrypt(4) } | current | ISAKMP Authentication Method. |
| IpsecKeyValue | OCTET STRING (SIZE (16 | 24)) | current | Cryptographic variable length keys. |
| IpsecSecurityProfileName | DisplayString (SIZE (1..32)) | current | A name for a security profile. |
| IpsecTunnelName | DisplayString (SIZE (1..32)) | current | An administrative name for a tunnel. |