MIBs Depot

CISCO-IPSEC-FLOW-MONITOR-MIB

Registered at
1.3.6.1.4.1.9.9.171
Last updated
2007-10-24 00:00
Organization
Tivoli Systems and Cisco Systems
Revisions
2007-10-24 00:00, 2004-10-12 00:00, 2000-10-13 18:00, 2000-08-17 12:59
Namespace
cisco
Source file
CISCO-IPSEC-FLOW-MONITOR-MIB
Digest
sha256:6c9d8e41e46136ca897a56dcb7023c989f1158d7a6aa541e8f44a995456b10d5

Description

This is a MIB Module for monitoring the structures in IPSec-based Virtual Private Networks. The MIB has been designed to be adopted as an IETF standard. Hence Cisco-specific features of IPSec protocol are excluded from this MIB. Acronyms The following acronyms are used in this document: IPSec: Secure IP Protocol VPN: Virtual Private Network ISAKMP: Internet Security Association and Key Exchange Protocol IKE: Internet Key Exchange Protocol SA: Security Association MM: Main Mode - the process of setting up a Phase 1 SA to secure the exchanges required to setup Phase 2 SAs QM: Quick Mode - the process of setting up Phase 2 Security Associations using a Phase 1 SA. Overview of IPsec MIB The MIB contains six major groups of objects which are used to manage the IPSec Protocol. These groups include a Levels Group, a Phase-1 Group, a Phase-2 Group, a History Group, a Failure Group and a TRAP Control Group. The following table illustrates the structure of the IPSec MIB. The Phase 1 group models objects pertaining to IKE negotiations and tunnels. The Phase 2 group models objects pertaining to IPSec data tunnels. The History group is to aid applications that do trending analysis. The Failure group is to enable an operator to do troubleshooting and debugging of the VPN Router. Further, counters are supported to aid Intrusion Detection. In addition to the five major MIB Groups, there are a number of Notifications. The following table illustrates the name and description of the IPSec TRAPs. For a detailed discussion, please refer to the IETF draft draft-ietf-ipsec-flow-monitoring-mib-00.txt.

Contact

Tivoli Systems Research Triangle Park, NC Cisco Systems 170 W Tasman Drive San Jose, CA 95134 USA Tel: +1 800 553-NETS E-mail: cs-ipsecurity@cisco.com

Imports

FromSymbols
CISCO-MEDIA-GATEWAY-MIBcmgwIndex
CISCO-SMIciscoMgmt
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP
SNMPv2-SMICounter32, Counter64, Gauge32, Integer32, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso
SNMPv2-TCDisplayString, TEXTUAL-CONVENTION, TimeInterval, TimeStamp, TruthValue

Imported by

Nothing in this corpus imports this module.

Load order

Every file a consumer needs in order to load this module, dependencies first.

CISCO-IPSEC-FLOW-MONITOR-MIB
CISCO-MEDIA-GATEWAY-MIB
CISCO-SMI
CISCO-TC
IANAifType-MIB
IF-MIB
INET-ADDRESS-MIB
SNMP-FRAMEWORK-MIB
SNMPv2-CONF
SNMPv2-MIB
SNMPv2-SMI
SNMPv2-TC

Textual conventions

NameOIDSyntaxAccessStatus
AuthAlgo
TEXTUAL-CONVENTION
The authentication algorithm used by a security association of an IPsec Phase-2 Tunnel.
current
CompAlgo
TEXTUAL-CONVENTION
The compression algorithm used by a security association of an IPsec Phase-2 Tunnel.
current
DiffHellmanGrp
TEXTUAL-CONVENTION
The Diffie Hellman Group used in negotiations.
current
EncapMode
TEXTUAL-CONVENTION
The encapsulation mode used by an IPsec Phase-2 Tunnel.
current
EncryptAlgo
TEXTUAL-CONVENTION
The encryption algorithm used in negotiations.
current
EndPtType
TEXTUAL-CONVENTION
The type of identity use to specify an IPsec End Point.
current
IPSIpAddress
TEXTUAL-CONVENTION
An IP V4 or V6 Address.
current
IkeAuthMethod
TEXTUAL-CONVENTION
The authentication method used in IPsec Phase-1 IKE negotiations.
current
IkeHashAlgo
TEXTUAL-CONVENTION
The hash algorithm used in IPsec Phase-1 IKE negotiations.
current
IkeNegoMode
TEXTUAL-CONVENTION
The IPsec Phase-1 IKE negotiation mode.
current
IkePeerType
TEXTUAL-CONVENTION
The type of IPsec Phase-1 IKE peer identity. The IKE peer may be identified by: 1. an IP address, or 2. a host name.
current
KeyType
TEXTUAL-CONVENTION
The type of key used by an IPsec Phase-2 Tunnel.
current
TrapStatus
TEXTUAL-CONVENTION
The administrative status for sending a TRAP.
current
TunnelStatus
TEXTUAL-CONVENTION
The status of a Tunnel. Objects of this type may be used to bring the tunnel down by setting value of this object to destroy(2). Objects of this type cannot be used to create a Tunnel.
current

Objects

NameOIDSyntaxAccessStatus
cipSecMIBObjects
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.171.1
cipSecLevels
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.171.1.1
cipSecMibLevel
OBJECT-TYPE
The level of the IPsec MIB.
1.3.6.1.4.1.9.9.171.1.1.1Integer32 (1..4096)read-onlycurrent
cipSecPhaseOne
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.171.1.2
cikeGlobalStats
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.171.1.2.1
cikeGlobalActiveTunnels
OBJECT-TYPE
The number of currently active IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.1.1Gauge32read-onlycurrent
cikeGlobalPreviousTunnels
OBJECT-TYPE
The total number of previously active IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.1.2Counter32read-onlycurrent
cikeGlobalInOctets
OBJECT-TYPE
The total number of octets received by all currently and previously active IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.1.3Counter32read-onlycurrent
cikeGlobalInPkts
OBJECT-TYPE
The total number of packets received by all currently and previously active IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.1.4Counter32read-onlycurrent
cikeGlobalInDropPkts
OBJECT-TYPE
The total number of packets which were dropped during receive processing by all currently and previously active IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.1.5Counter32read-onlycurrent
cikeGlobalInNotifys
OBJECT-TYPE
The total number of notifys received by all currently and previously active IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.1.6Counter32read-onlycurrent
cikeGlobalInP2Exchgs
OBJECT-TYPE
The total number of IPsec Phase-2 exchanges received by all currently and previously active IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.1.7Counter32read-onlycurrent
cikeGlobalInP2ExchgInvalids
OBJECT-TYPE
The total number of IPsec Phase-2 exchanges which were received and found to be invalid by all currently and previously active IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.1.8Counter32read-onlycurrent
cikeGlobalInP2ExchgRejects
OBJECT-TYPE
The total number of IPsec Phase-2 exchanges which were received and rejected by all currently and previously active IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.1.9Counter32read-onlycurrent
cikeGlobalInP2SaDelRequests
OBJECT-TYPE
The total number of IPsec Phase-2 security association delete requests received by all currently and previously active and IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.1.10Counter32read-onlycurrent
cikeGlobalOutOctets
OBJECT-TYPE
The total number of octets sent by all currently and previously active and IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.1.11Counter32read-onlycurrent
cikeGlobalOutPkts
OBJECT-TYPE
The total number of packets sent by all currently and previously active and IPsec Phase-1 Tunnels.
1.3.6.1.4.1.9.9.171.1.2.1.12Counter32read-onlycurrent
cikeGlobalOutDropPkts
OBJECT-TYPE
The total number of packets which were dropped during send processing by all currently and previously active IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.1.13Counter32read-onlycurrent
cikeGlobalOutNotifys
OBJECT-TYPE
The total number of notifys sent by all currently and previously active IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.1.14Counter32read-onlycurrent
cikeGlobalOutP2Exchgs
OBJECT-TYPE
The total number of IPsec Phase-2 exchanges which were sent by all currently and previously active IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.1.15Counter32read-onlycurrent
cikeGlobalOutP2ExchgInvalids
OBJECT-TYPE
The total number of IPsec Phase-2 exchanges which were sent and found to be invalid by all currently and previously active IPsec Phase-1 Tunnels.
1.3.6.1.4.1.9.9.171.1.2.1.16Counter32read-onlycurrent
cikeGlobalOutP2ExchgRejects
OBJECT-TYPE
The total number of IPsec Phase-2 exchanges which were sent and rejected by all currently and previously active IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.1.17Counter32read-onlycurrent
cikeGlobalOutP2SaDelRequests
OBJECT-TYPE
The total number of IPsec Phase-2 SA delete requests sent by all currently and previously active IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.1.18Counter32read-onlycurrent
cikeGlobalInitTunnels
OBJECT-TYPE
The total number of IPsec Phase-1 IKE Tunnels which were locally initiated.
1.3.6.1.4.1.9.9.171.1.2.1.19Counter32read-onlycurrent
cikeGlobalInitTunnelFails
OBJECT-TYPE
The total number of IPsec Phase-1 IKE Tunnels which were locally initiated and failed to activate.
1.3.6.1.4.1.9.9.171.1.2.1.20Counter32read-onlycurrent
cikeGlobalRespTunnelFails
OBJECT-TYPE
The total number of IPsec Phase-1 IKE Tunnels which were remotely initiated and failed to activate.
1.3.6.1.4.1.9.9.171.1.2.1.21Counter32read-onlycurrent
cikeGlobalSysCapFails
OBJECT-TYPE
The total number of system capacity failures which occurred during processing of all current and previously active IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.1.22Counter32read-onlycurrent
cikeGlobalAuthFails
OBJECT-TYPE
The total number of authentications which ended in failure by all current and previous IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.1.23Counter32read-onlycurrent
cikeGlobalDecryptFails
OBJECT-TYPE
The total number of decryptions which ended in failure by all current and previous IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.1.24Counter32read-onlycurrent
cikeGlobalHashValidFails
OBJECT-TYPE
The total number of hash validations which ended in failure by all current and previous IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.1.25Counter32read-onlycurrent
cikeGlobalNoSaFails
OBJECT-TYPE
The total number of non-existent Security Association in failures which occurred during processing of all current and previous IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.1.26Counter32read-onlycurrent
cikePeerTable
OBJECT-TYPE
The IPsec Phase-1 Internet Key Exchange Peer Table. There is one entry in this table for each IPsec Phase-1 IKE peer association which is currently associated with an active IPsec Phase-1 Tunnel. The IPsec Phase-1 IKE Tunnel associated with this IPsec Phase-1 IKE peer association may or may not be currently active.
1.3.6.1.4.1.9.9.171.1.2.2not-accessiblecurrent
cikePeerEntry
OBJECT-TYPE
Each entry contains the attributes associated with an IPsec Phase-1 IKE peer association.
1.3.6.1.4.1.9.9.171.1.2.2.1not-accessiblecurrent
cikePeerLocalType
OBJECT-TYPE
The type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. a host name.
1.3.6.1.4.1.9.9.171.1.2.2.1.1IkePeerTypenot-accessiblecurrent
cikePeerLocalValue
OBJECT-TYPE
The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is a host name, then this is the host name used to identify the local peer.
1.3.6.1.4.1.9.9.171.1.2.2.1.2DisplayStringnot-accessiblecurrent
cikePeerRemoteType
OBJECT-TYPE
The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. a host name.
1.3.6.1.4.1.9.9.171.1.2.2.1.3IkePeerTypenot-accessiblecurrent
cikePeerRemoteValue
OBJECT-TYPE
The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is a host name, then this is the host name used to identify the remote peer.
1.3.6.1.4.1.9.9.171.1.2.2.1.4DisplayStringnot-accessiblecurrent
cikePeerIntIndex
OBJECT-TYPE
The internal index of the local-remote peer association. This internal index is used to uniquely identify multiple associations between the local and remote peer.
1.3.6.1.4.1.9.9.171.1.2.2.1.5Integer32 (1..2147483647)not-accessiblecurrent
cikePeerLocalAddr
OBJECT-TYPE
The IP address of the local peer.
1.3.6.1.4.1.9.9.171.1.2.2.1.6IPSIpAddressread-onlycurrent
cikePeerRemoteAddr
OBJECT-TYPE
The IP address of the remote peer.
1.3.6.1.4.1.9.9.171.1.2.2.1.7IPSIpAddressread-onlycurrent
cikePeerActiveTime
OBJECT-TYPE
The length of time that the peer association has existed in hundredths of a second.
1.3.6.1.4.1.9.9.171.1.2.2.1.8TimeIntervalread-onlycurrent
cikePeerActiveTunnelIndex
OBJECT-TYPE
The index of the active IPsec Phase-1 IKE Tunnel (cikeTunIndex in the cikeTunnelTable) for this peer association. If an IPsec Phase-1 IKE Tunnel is not currently active, then the value of this object will be zero.
1.3.6.1.4.1.9.9.171.1.2.2.1.9Integer32 (1..2147483647)read-onlycurrent
cikeTunnelTable
OBJECT-TYPE
The IPsec Phase-1 Internet Key Exchange Tunnel Table. There is one entry in this table for each active IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.2.3not-accessiblecurrent
cikeTunnelEntry
OBJECT-TYPE
Each entry contains the attributes associated with an active IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.2.3.1not-accessiblecurrent
cikeTunIndex
OBJECT-TYPE
The index of the IPsec Phase-1 IKE Tunnel Table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The value of this object will wrap at 2,147,483,647.
1.3.6.1.4.1.9.9.171.1.2.3.1.1Integer32 (1..2147483647)not-accessiblecurrent
cikeTunLocalType
OBJECT-TYPE
The type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. a host name.
1.3.6.1.4.1.9.9.171.1.2.3.1.2IkePeerTyperead-onlycurrent
cikeTunLocalValue
OBJECT-TYPE
The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is a host name, then this is the host name used to identify the local peer.
1.3.6.1.4.1.9.9.171.1.2.3.1.3DisplayStringread-onlycurrent
cikeTunLocalAddr
OBJECT-TYPE
The IP address of the local endpoint for the IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.2.3.1.4IPSIpAddressread-onlycurrent
cikeTunLocalName
OBJECT-TYPE
The DNS name of the local IP address for the IPsec Phase-1 IKE Tunnel. If the DNS name associated with the local tunnel endpoint is not known, then the value of this object will be a NULL string.
1.3.6.1.4.1.9.9.171.1.2.3.1.5DisplayStringread-onlycurrent
cikeTunRemoteType
OBJECT-TYPE
The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. a host name.
1.3.6.1.4.1.9.9.171.1.2.3.1.6IkePeerTyperead-onlycurrent
cikeTunRemoteValue
OBJECT-TYPE
The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is a host name, then this is the host name used to identify the remote peer.
1.3.6.1.4.1.9.9.171.1.2.3.1.7DisplayStringread-onlycurrent
cikeTunRemoteAddr
OBJECT-TYPE
The IP address of the remote endpoint for the IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.2.3.1.8IPSIpAddressread-onlycurrent
cikeTunRemoteName
OBJECT-TYPE
The DNS name of the remote IP address of IPsec Phase-1 IKE Tunnel. If the DNS name associated with the remote tunnel endpoint is not known, then the value of this object will be a NULL string.
1.3.6.1.4.1.9.9.171.1.2.3.1.9DisplayStringread-onlycurrent
cikeTunNegoMode
OBJECT-TYPE
The negotiation mode of the IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.2.3.1.10IkeNegoModeread-onlycurrent
cikeTunDiffHellmanGrp
OBJECT-TYPE
The Diffie Hellman Group used in IPsec Phase-1 IKE negotiations.
1.3.6.1.4.1.9.9.171.1.2.3.1.11DiffHellmanGrpread-onlycurrent
cikeTunEncryptAlgo
OBJECT-TYPE
The encryption algorithm used in IPsec Phase-1 IKE negotiations.
1.3.6.1.4.1.9.9.171.1.2.3.1.12EncryptAlgoread-onlycurrent
cikeTunHashAlgo
OBJECT-TYPE
The hash algorithm used in IPsec Phase-1 IKE negotiations.
1.3.6.1.4.1.9.9.171.1.2.3.1.13IkeHashAlgoread-onlycurrent
cikeTunAuthMethod
OBJECT-TYPE
The authentication method used in IPsec Phase-1 IKE negotiations.
1.3.6.1.4.1.9.9.171.1.2.3.1.14IkeAuthMethodread-onlycurrent
cikeTunLifeTime
OBJECT-TYPE
The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel in seconds.
1.3.6.1.4.1.9.9.171.1.2.3.1.15Integer32 (1..2147483647)read-onlycurrent
cikeTunActiveTime
OBJECT-TYPE
The length of time the IPsec Phase-1 IKE tunnel has been active in hundredths of seconds.
1.3.6.1.4.1.9.9.171.1.2.3.1.16TimeIntervalread-onlycurrent
cikeTunSaRefreshThreshold
OBJECT-TYPE
The security association refresh threshold in seconds.
1.3.6.1.4.1.9.9.171.1.2.3.1.17Integer32 (1..2147483647)read-onlycurrent
cikeTunTotalRefreshes
OBJECT-TYPE
The total number of security associations refreshes performed.
1.3.6.1.4.1.9.9.171.1.2.3.1.18Counter32read-onlycurrent
cikeTunInOctets
OBJECT-TYPE
The total number of octets received by this IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.2.3.1.19Counter32read-onlycurrent
cikeTunInPkts
OBJECT-TYPE
The total number of packets received by this IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.2.3.1.20Counter32read-onlycurrent
cikeTunInDropPkts
OBJECT-TYPE
The total number of packets dropped by this IPsec Phase-1 IKE Tunnel during receive processing.
1.3.6.1.4.1.9.9.171.1.2.3.1.21Counter32read-onlycurrent
cikeTunInNotifys
OBJECT-TYPE
The total number of notifys received by this IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.2.3.1.22Counter32read-onlycurrent
cikeTunInP2Exchgs
OBJECT-TYPE
The total number of IPsec Phase-2 exchanges received by this IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.2.3.1.23Counter32read-onlycurrent
cikeTunInP2ExchgInvalids
OBJECT-TYPE
The total number of IPsec Phase-2 exchanges received and found to be invalid by this IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.2.3.1.24Counter32read-onlycurrent
cikeTunInP2ExchgRejects
OBJECT-TYPE
The total number of IPsec Phase-2 exchanges received and rejected by this IPsec Phase-1 Tunnel.
1.3.6.1.4.1.9.9.171.1.2.3.1.25Counter32read-onlycurrent
cikeTunInP2SaDelRequests
OBJECT-TYPE
The total number of IPsec Phase-2 security association delete requests received by this IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.2.3.1.26Counter32read-onlycurrent
cikeTunOutOctets
OBJECT-TYPE
The total number of octets sent by this IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.2.3.1.27Counter32read-onlycurrent
cikeTunOutPkts
OBJECT-TYPE
The total number of packets sent by this IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.2.3.1.28Counter32read-onlycurrent
cikeTunOutDropPkts
OBJECT-TYPE
The total number of packets dropped by this IPsec Phase-1 IKE Tunnel during send processing.
1.3.6.1.4.1.9.9.171.1.2.3.1.29Counter32read-onlycurrent
cikeTunOutNotifys
OBJECT-TYPE
The total number of notifys sent by this IPsec Phase-1 Tunnel.
1.3.6.1.4.1.9.9.171.1.2.3.1.30Counter32read-onlycurrent
cikeTunOutP2Exchgs
OBJECT-TYPE
The total number of IPsec Phase-2 exchanges sent by this IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.2.3.1.31Counter32read-onlycurrent
cikeTunOutP2ExchgInvalids
OBJECT-TYPE
The total number of IPsec Phase-2 exchanges sent and found to be invalid by this IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.2.3.1.32Counter32read-onlycurrent
cikeTunOutP2ExchgRejects
OBJECT-TYPE
The total number of IPsec Phase-2 exchanges sent and rejected by this IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.2.3.1.33Counter32read-onlycurrent
cikeTunOutP2SaDelRequests
OBJECT-TYPE
The total number of IPsec Phase-2 security association delete requests sent by this IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.2.3.1.34Counter32read-onlycurrent
cikeTunStatus
OBJECT-TYPE
The status of the MIB table row. This object can be used to bring the tunnel down by setting value of this object to destroy(2). This object cannot be used to create a MIB table row.
1.3.6.1.4.1.9.9.171.1.2.3.1.35TunnelStatusread-writecurrent
cikePeerCorrTable
OBJECT-TYPE
The IPsec Phase-1 Internet Key Exchange Peer Association to IPsec Phase-2 Tunnel Correlation Table. There is one entry in this table for each active IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.2.4not-accessiblecurrent
cikePeerCorrEntry
OBJECT-TYPE
Each entry contains the attributes of an IPsec Phase-1 IKE Peer Association to IPsec Phase-2 Tunnel Correlation.
1.3.6.1.4.1.9.9.171.1.2.4.1not-accessiblecurrent
cikePeerCorrLocalType
OBJECT-TYPE
The type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. a host name.
1.3.6.1.4.1.9.9.171.1.2.4.1.1IkePeerTypenot-accessiblecurrent
cikePeerCorrLocalValue
OBJECT-TYPE
The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is a host name, then this is the host name used to identify the local peer.
1.3.6.1.4.1.9.9.171.1.2.4.1.2DisplayStringnot-accessiblecurrent
cikePeerCorrRemoteType
OBJECT-TYPE
The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. a host name.
1.3.6.1.4.1.9.9.171.1.2.4.1.3IkePeerTypenot-accessiblecurrent
cikePeerCorrRemoteValue
OBJECT-TYPE
The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is a host name, then this is the host name used to identify the remote peer.
1.3.6.1.4.1.9.9.171.1.2.4.1.4DisplayStringnot-accessiblecurrent
cikePeerCorrIntIndex
OBJECT-TYPE
The internal index of the local-remote peer association. This internal index is used to uniquely identify multiple associations between the local and remote peer.
1.3.6.1.4.1.9.9.171.1.2.4.1.5Integer32 (1..2147483647)not-accessiblecurrent
cikePeerCorrSeqNum
OBJECT-TYPE
The sequence number of the local-remote peer association. This sequence number is used to uniquely identify multiple instances of an unique association between the local and remote peer.
1.3.6.1.4.1.9.9.171.1.2.4.1.6Integer32 (1..2147483647)not-accessiblecurrent
cikePeerCorrIpSecTunIndex
OBJECT-TYPE
The index of the active IPsec Phase-2 Tunnel (cipSecTunIndex in the cipSecTunnelTable) for this IPsec Phase-1 IKE Peer Association.
1.3.6.1.4.1.9.9.171.1.2.4.1.7Integer32 (1..2147483647)read-onlycurrent
cikePhase1GWStatsTable
OBJECT-TYPE
Phase-1 IKE stats information is included in this table. Each entry is related to a specific gateway which is identified by 'cmgwIndex'.
1.3.6.1.4.1.9.9.171.1.2.5not-accessiblecurrent
cikePhase1GWStatsEntry
OBJECT-TYPE
Each entry contains the attributes of an Phase-1 IKE stats information for the related gateway. There is only one entry for each gateway. The entry is created when a gateway up and cannot be deleted.
1.3.6.1.4.1.9.9.171.1.2.5.1not-accessiblecurrent
cikePhase1GWActiveTunnels
OBJECT-TYPE
The number of currently active IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.5.1.1Gauge32read-onlycurrent
cikePhase1GWPreviousTunnels
OBJECT-TYPE
The total number of previously active IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.5.1.2Counter32read-onlycurrent
cikePhase1GWInOctets
OBJECT-TYPE
The total number of octets received by all currently and previously active IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.5.1.3Counter32read-onlycurrent
cikePhase1GWInPkts
OBJECT-TYPE
The total number of packets received by all currently and previously active IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.5.1.4Counter32read-onlycurrent
cikePhase1GWInDropPkts
OBJECT-TYPE
The total number of packets which were dropped during receive processing by all currently and previously active IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.5.1.5Counter32read-onlycurrent
cikePhase1GWInNotifys
OBJECT-TYPE
The total number of notifys received by all currently and previously active IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.5.1.6Counter32read-onlycurrent
cikePhase1GWInP2Exchgs
OBJECT-TYPE
The total number of IPsec Phase-2 exchanges received by all currently and previously active IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.5.1.7Counter32read-onlycurrent
cikePhase1GWInP2ExchgInvalids
OBJECT-TYPE
The total number of IPsec Phase-2 exchanges which were received and found to be invalid by all currently and previously active IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.5.1.8Counter32read-onlycurrent
cikePhase1GWInP2ExchgRejects
OBJECT-TYPE
The total number of IPsec Phase-2 exchanges which were received and rejected by all currently and previously active IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.5.1.9Counter32read-onlycurrent
cikePhase1GWInP2SaDelRequests
OBJECT-TYPE
The total number of IPsec Phase-2 'Security Association' delete requests received by all currently and previously active and IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.5.1.10Counter32read-onlycurrent
cikePhase1GWOutOctets
OBJECT-TYPE
The total number of octets sent by all currently and previously active and IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.5.1.11Counter32read-onlycurrent
cikePhase1GWOutPkts
OBJECT-TYPE
The total number of packets sent by all currently and previously active and IPsec Phase-1 Tunnels.
1.3.6.1.4.1.9.9.171.1.2.5.1.12Counter32read-onlycurrent
cikePhase1GWOutDropPkts
OBJECT-TYPE
The total number of packets which were dropped during send processing by all currently and previously active IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.5.1.13Counter32read-onlycurrent
cikePhase1GWOutNotifys
OBJECT-TYPE
The total number of notifys sent by all currently and previously active IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.5.1.14Counter32read-onlycurrent
cikePhase1GWOutP2Exchgs
OBJECT-TYPE
The total number of IPsec Phase-2 exchanges which were sent by all currently and previously active IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.5.1.15Counter32read-onlycurrent
cikePhase1GWOutP2ExchgInvalids
OBJECT-TYPE
The total number of IPsec Phase-2 exchanges which were sent and found to be invalid by all currently and previously active IPsec Phase-1 Tunnels.
1.3.6.1.4.1.9.9.171.1.2.5.1.16Counter32read-onlycurrent
cikePhase1GWOutP2ExchgRejects
OBJECT-TYPE
The total number of IPsec Phase-2 exchanges which were sent and rejected by all currently and previously active IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.5.1.17Counter32read-onlycurrent
cikePhase1GWOutP2SaDelRequests
OBJECT-TYPE
The total number of IPsec Phase-2 SA delete requests sent by all currently and previously active IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.5.1.18Counter32read-onlycurrent
cikePhase1GWInitTunnels
OBJECT-TYPE
The total number of IPsec Phase-1 IKE Tunnels which were locally initiated.
1.3.6.1.4.1.9.9.171.1.2.5.1.19Counter32read-onlycurrent
cikePhase1GWInitTunnelFails
OBJECT-TYPE
The total number of IPsec Phase-1 IKE Tunnels which were locally initiated and failed to activate.
1.3.6.1.4.1.9.9.171.1.2.5.1.20Counter32read-onlycurrent
cikePhase1GWRespTunnelFails
OBJECT-TYPE
The total number of IPsec Phase-1 IKE Tunnels which were remotely initiated and failed to activate.
1.3.6.1.4.1.9.9.171.1.2.5.1.21Counter32read-onlycurrent
cikePhase1GWSysCapFails
OBJECT-TYPE
The total number of system capacity failures which occurred during processing of all current and previously active IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.5.1.22Counter32read-onlycurrent
cikePhase1GWAuthFails
OBJECT-TYPE
The total number of authentications which ended in failure by all current and previous IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.5.1.23Counter32read-onlycurrent
cikePhase1GWDecryptFails
OBJECT-TYPE
The total number of decryptions which ended in failure by all current and previous IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.5.1.24Counter32read-onlycurrent
cikePhase1GWHashValidFails
OBJECT-TYPE
The total number of hash validations which ended in failure by all current and previous IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.5.1.25Counter32read-onlycurrent
cikePhase1GWNoSaFails
OBJECT-TYPE
The total number of non-existent 'Security Association' failures occurred during processing of current and previous IPsec Phase-1 IKE Tunnels.
1.3.6.1.4.1.9.9.171.1.2.5.1.26Counter32read-onlycurrent
cipSecPhaseTwo
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.171.1.3
cipSecGlobalStats
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.171.1.3.1
cipSecGlobalActiveTunnels
OBJECT-TYPE
The total number of currently active IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.1.1Gauge32read-onlycurrent
cipSecGlobalPreviousTunnels
OBJECT-TYPE
The total number of previously active IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.1.2Counter32read-onlycurrent
cipSecGlobalInOctets
OBJECT-TYPE
The total number of octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE determining whether or not the packet should be decompressed. See also cipSecGlobalInOctWraps for the number of times this counter has wrapped.
1.3.6.1.4.1.9.9.171.1.3.1.3Counter32read-onlycurrent
cipSecGlobalHcInOctets
OBJECT-TYPE
A high capacity count of the total number of octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE determining whether or not the packet should be decompressed.
1.3.6.1.4.1.9.9.171.1.3.1.4Counter64read-onlycurrent
cipSecGlobalInOctWraps
OBJECT-TYPE
The number of times the global octets received counter (cipSecGlobalInOctets) has wrapped.
1.3.6.1.4.1.9.9.171.1.3.1.5Counter32read-onlycurrent
cipSecGlobalInDecompOctets
OBJECT-TYPE
The total number of decompressed octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of cipSecGlobalInOctets. See also cipSecGlobalInDecompOctWraps for the number of times this counter has wrapped.
1.3.6.1.4.1.9.9.171.1.3.1.6Counter32read-onlycurrent
cipSecGlobalHcInDecompOctets
OBJECT-TYPE
A high capacity count of the total number of decompressed octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of cipSecGlobalHcInOctets.
1.3.6.1.4.1.9.9.171.1.3.1.7Counter64read-onlycurrent
cipSecGlobalInDecompOctWraps
OBJECT-TYPE
The number of times the global decompressed octets received counter (cipSecGlobalInDecompOctets) has wrapped.
1.3.6.1.4.1.9.9.171.1.3.1.8Counter32read-onlycurrent
cipSecGlobalInPkts
OBJECT-TYPE
The total number of packets received by all current and previous IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.1.9Counter32read-onlycurrent
cipSecGlobalInDrops
OBJECT-TYPE
The total number of packets dropped during receive processing by all current and previous IPsec Phase-2 Tunnels. This count does NOT include packets dropped due to Anti-Replay processing.
1.3.6.1.4.1.9.9.171.1.3.1.10Counter32read-onlycurrent
cipSecGlobalInReplayDrops
OBJECT-TYPE
The total number of packets dropped during receive processing due to Anti-Replay processing by all current and previous IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.1.11Counter32read-onlycurrent
cipSecGlobalInAuths
OBJECT-TYPE
The total number of inbound authentication's performed by all current and previous IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.1.12Counter32read-onlycurrent
cipSecGlobalInAuthFails
OBJECT-TYPE
The total number of inbound authentication's which ended in failure by all current and previous IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.1.13Counter32read-onlycurrent
cipSecGlobalInDecrypts
OBJECT-TYPE
The total number of inbound decryption's performed by all current and previous IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.1.14Counter32read-onlycurrent
cipSecGlobalInDecryptFails
OBJECT-TYPE
The total number of inbound decryption's which ended in failure by all current and previous IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.1.15Counter32read-onlycurrent
cipSecGlobalOutOctets
OBJECT-TYPE
The total number of octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER determining whether or not the packet should be compressed. See also cipSecGlobalOutOctWraps for the number of times this counter has wrapped.
1.3.6.1.4.1.9.9.171.1.3.1.16Counter32read-onlycurrent
cipSecGlobalHcOutOctets
OBJECT-TYPE
A high capacity count of the total number of octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER determining whether or not the packet should be compressed.
1.3.6.1.4.1.9.9.171.1.3.1.17Counter64read-onlycurrent
cipSecGlobalOutOctWraps
OBJECT-TYPE
The number of times the global octets sent counter (cipSecGlobalOutOctets) has wrapped.
1.3.6.1.4.1.9.9.171.1.3.1.18Counter32read-onlycurrent
cipSecGlobalOutUncompOctets
OBJECT-TYPE
The total number of uncompressed octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of cipSecGlobalOutOctets. See also cipSecGlobalOutDecompOctWraps for the number of times this counter has wrapped.
1.3.6.1.4.1.9.9.171.1.3.1.19Counter32read-onlycurrent
cipSecGlobalHcOutUncompOctets
OBJECT-TYPE
A high capacity count of the total number of uncompressed octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of cipSecGlobalHcOutOctets.
1.3.6.1.4.1.9.9.171.1.3.1.20Counter64read-onlycurrent
cipSecGlobalOutUncompOctWraps
OBJECT-TYPE
The number of times the global uncompressed octets sent counter (cipSecGlobalOutUncompOctets) has wrapped.
1.3.6.1.4.1.9.9.171.1.3.1.21Counter32read-onlycurrent
cipSecGlobalOutPkts
OBJECT-TYPE
The total number of packets sent by all current and previous IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.1.22Counter32read-onlycurrent
cipSecGlobalOutDrops
OBJECT-TYPE
The total number of packets dropped during send processing by all current and previous IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.1.23Counter32read-onlycurrent
cipSecGlobalOutAuths
OBJECT-TYPE
The total number of outbound authentication's performed by all current and previous IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.1.24Counter32read-onlycurrent
cipSecGlobalOutAuthFails
OBJECT-TYPE
The total number of outbound authentication's which ended in failure by all current and previous IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.1.25Counter32read-onlycurrent
cipSecGlobalOutEncrypts
OBJECT-TYPE
The total number of outbound encryption's performed by all current and previous IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.1.26Counter32read-onlycurrent
cipSecGlobalOutEncryptFails
OBJECT-TYPE
The total number of outbound encryption's which ended in failure by all current and previous IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.1.27Counter32read-onlycurrent
cipSecGlobalProtocolUseFails
OBJECT-TYPE
The total number of protocol use failures which occurred during processing of all current and previously active IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.1.28Counter32read-onlycurrent
cipSecGlobalNoSaFails
OBJECT-TYPE
The total number of non-existent Security Association in failures which occurred during processing of all current and previous IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.1.29Counter32read-onlycurrent
cipSecGlobalSysCapFails
OBJECT-TYPE
The total number of system capacity failures which occurred during processing of all current and previously active IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.1.30Counter32read-onlycurrent
cipSecTunnelTable
OBJECT-TYPE
The IPsec Phase-2 Tunnel Table. There is one entry in this table for each active IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.3.2not-accessiblecurrent
cipSecTunnelEntry
OBJECT-TYPE
Each entry contains the attributes associated with an active IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.3.2.1not-accessiblecurrent
cipSecTunIndex
OBJECT-TYPE
The index of the IPsec Phase-2 Tunnel Table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The value of this object will wrap at 2,147,483,647.
1.3.6.1.4.1.9.9.171.1.3.2.1.1Integer32 (1..2147483647)not-accessiblecurrent
cipSecTunIkeTunnelIndex
OBJECT-TYPE
The index of the associated IPsec Phase-1 IKE Tunnel. (cikeTunIndex in the cikeTunnelTable)
1.3.6.1.4.1.9.9.171.1.3.2.1.2Integer32 (1..2147483647)read-onlycurrent
cipSecTunIkeTunnelAlive
OBJECT-TYPE
An indicator which specifies whether or not the IPsec Phase-1 IKE Tunnel currently exists.
1.3.6.1.4.1.9.9.171.1.3.2.1.3TruthValueread-onlycurrent
cipSecTunLocalAddr
OBJECT-TYPE
The IP address of the local endpoint for the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.3.2.1.4IPSIpAddressread-onlycurrent
cipSecTunRemoteAddr
OBJECT-TYPE
The IP address of the remote endpoint for the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.3.2.1.5IPSIpAddressread-onlycurrent
cipSecTunKeyType
OBJECT-TYPE
The type of key used by the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.3.2.1.6KeyTyperead-onlycurrent
cipSecTunEncapMode
OBJECT-TYPE
The encapsulation mode used by the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.3.2.1.7EncapModeread-onlycurrent
cipSecTunLifeSize
OBJECT-TYPE
The negotiated LifeSize of the IPsec Phase-2 Tunnel in kilobytes.
1.3.6.1.4.1.9.9.171.1.3.2.1.8Integer32 (1..2147483647)read-onlycurrent
cipSecTunLifeTime
OBJECT-TYPE
The negotiated LifeTime of the IPsec Phase-2 Tunnel in seconds.
1.3.6.1.4.1.9.9.171.1.3.2.1.9Integer32 (1..2147483647)read-onlycurrent
cipSecTunActiveTime
OBJECT-TYPE
The length of time the IPsec Phase-2 Tunnel has been active in hundredths of seconds.
1.3.6.1.4.1.9.9.171.1.3.2.1.10TimeIntervalread-onlycurrent
cipSecTunSaLifeSizeThreshold
OBJECT-TYPE
The security association LifeSize refresh threshold in kilobytes.
1.3.6.1.4.1.9.9.171.1.3.2.1.11Integer32 (1..2147483647)read-onlycurrent
cipSecTunSaLifeTimeThreshold
OBJECT-TYPE
The security association LifeTime refresh threshold in seconds.
1.3.6.1.4.1.9.9.171.1.3.2.1.12Integer32 (1..2147483647)read-onlycurrent
cipSecTunTotalRefreshes
OBJECT-TYPE
The total number of security association refreshes performed.
1.3.6.1.4.1.9.9.171.1.3.2.1.13Counter32read-onlycurrent
cipSecTunExpiredSaInstances
OBJECT-TYPE
The total number of security associations which have expired.
1.3.6.1.4.1.9.9.171.1.3.2.1.14Counter32read-onlycurrent
cipSecTunCurrentSaInstances
OBJECT-TYPE
The number of security associations which are currently active or expiring.
1.3.6.1.4.1.9.9.171.1.3.2.1.15Gauge32read-onlycurrent
cipSecTunInSaDiffHellmanGrp
OBJECT-TYPE
The Diffie Hellman Group used by the inbound security association of the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.3.2.1.16DiffHellmanGrpread-onlycurrent
cipSecTunInSaEncryptAlgo
OBJECT-TYPE
The encryption algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.3.2.1.17EncryptAlgoread-onlycurrent
cipSecTunInSaAhAuthAlgo
OBJECT-TYPE
The authentication algorithm used by the inbound authentication header (AH) security association of the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.3.2.1.18AuthAlgoread-onlycurrent
cipSecTunInSaEspAuthAlgo
OBJECT-TYPE
The authentication algorithm used by the inbound encapsulation security protocol (ESP) security association of the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.3.2.1.19AuthAlgoread-onlycurrent
cipSecTunInSaDecompAlgo
OBJECT-TYPE
The decompression algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.3.2.1.20CompAlgoread-onlycurrent
cipSecTunOutSaDiffHellmanGrp
OBJECT-TYPE
The Diffie Hellman Group used by the outbound security association of the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.3.2.1.21DiffHellmanGrpread-onlycurrent
cipSecTunOutSaEncryptAlgo
OBJECT-TYPE
The encryption algorithm used by the outbound security association of the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.3.2.1.22EncryptAlgoread-onlycurrent
cipSecTunOutSaAhAuthAlgo
OBJECT-TYPE
The authentication algorithm used by the outbound authentication header (AH) security association of the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.3.2.1.23AuthAlgoread-onlycurrent
cipSecTunOutSaEspAuthAlgo
OBJECT-TYPE
The authentication algorithm used by the inbound encapsulation security protocol (ESP) security association of the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.3.2.1.24AuthAlgoread-onlycurrent
cipSecTunOutSaCompAlgo
OBJECT-TYPE
The compression algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.3.2.1.25CompAlgoread-onlycurrent
cipSecTunInOctets
OBJECT-TYPE
The total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed. See also cipSecTunInOctWraps for the number of times this counter has wrapped.
1.3.6.1.4.1.9.9.171.1.3.2.1.26Counter32read-onlycurrent
cipSecTunHcInOctets
OBJECT-TYPE
A high capacity count of the total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed.
1.3.6.1.4.1.9.9.171.1.3.2.1.27Counter64read-onlycurrent
cipSecTunInOctWraps
OBJECT-TYPE
The number of times the octets received counter (cipSecTunInOctets) has wrapped.
1.3.6.1.4.1.9.9.171.1.3.2.1.28Counter32read-onlycurrent
cipSecTunInDecompOctets
OBJECT-TYPE
The total number of decompressed octets received by this IPsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of cipSecTunInOctets. See also cipSecTunInDecompOctWraps for the number of times this counter has wrapped.
1.3.6.1.4.1.9.9.171.1.3.2.1.29Counter32read-onlycurrent
cipSecTunHcInDecompOctets
OBJECT-TYPE
A high capacity count of the total number of decompressed octets received by this IPsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of cipSecTunHcInOctets.
1.3.6.1.4.1.9.9.171.1.3.2.1.30Counter64read-onlycurrent
cipSecTunInDecompOctWraps
OBJECT-TYPE
The number of times the decompressed octets received counter (cipSecTunInDecompOctets) has wrapped.
1.3.6.1.4.1.9.9.171.1.3.2.1.31Counter32read-onlycurrent
cipSecTunInPkts
OBJECT-TYPE
The total number of packets received by this IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.3.2.1.32Counter32read-onlycurrent
cipSecTunInDropPkts
OBJECT-TYPE
The total number of packets dropped during receive processing by this IPsec Phase-2 Tunnel. This count does NOT include packets dropped due to Anti-Replay processing.
1.3.6.1.4.1.9.9.171.1.3.2.1.33Counter32read-onlycurrent
cipSecTunInReplayDropPkts
OBJECT-TYPE
The total number of packets dropped during receive processing due to Anti-Replay processing by this IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.3.2.1.34Counter32read-onlycurrent
cipSecTunInAuths
OBJECT-TYPE
The total number of inbound authentication's performed by this IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.3.2.1.35Counter32read-onlycurrent
cipSecTunInAuthFails
OBJECT-TYPE
The total number of inbound authentication's which ended in failure by this IPsec Phase-2 Tunnel .
1.3.6.1.4.1.9.9.171.1.3.2.1.36Counter32read-onlycurrent
cipSecTunInDecrypts
OBJECT-TYPE
The total number of inbound decryption's performed by this IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.3.2.1.37Counter32read-onlycurrent
cipSecTunInDecryptFails
OBJECT-TYPE
The total number of inbound decryption's which ended in failure by this IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.3.2.1.38Counter32read-onlycurrent
cipSecTunOutOctets
OBJECT-TYPE
The total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed. See also cipSecTunOutOctWraps for the number of times this counter has wrapped.
1.3.6.1.4.1.9.9.171.1.3.2.1.39Counter32read-onlycurrent
cipSecTunHcOutOctets
OBJECT-TYPE
A high capacity count of the total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed.
1.3.6.1.4.1.9.9.171.1.3.2.1.40Counter64read-onlycurrent
cipSecTunOutOctWraps
OBJECT-TYPE
The number of times the out octets counter (cipSecTunOutOctets) has wrapped.
1.3.6.1.4.1.9.9.171.1.3.2.1.41Counter32read-onlycurrent
cipSecTunOutUncompOctets
OBJECT-TYPE
The total number of uncompressed octets sent by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of cipSecTunOutOctets. See also cipSecTunOutDecompOctWraps for the number of times this counter has wrapped.
1.3.6.1.4.1.9.9.171.1.3.2.1.42Counter32read-onlycurrent
cipSecTunHcOutUncompOctets
OBJECT-TYPE
A high capacity count of the total number of uncompressed octets sent by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of cipSecTunHcOutOctets.
1.3.6.1.4.1.9.9.171.1.3.2.1.43Counter64read-onlycurrent
cipSecTunOutUncompOctWraps
OBJECT-TYPE
The number of times the uncompressed octets sent counter (cipSecTunOutUncompOctets) has wrapped.
1.3.6.1.4.1.9.9.171.1.3.2.1.44Counter32read-onlycurrent
cipSecTunOutPkts
OBJECT-TYPE
The total number of packets sent by this IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.3.2.1.45Counter32read-onlycurrent
cipSecTunOutDropPkts
OBJECT-TYPE
The total number of packets dropped during send processing by this IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.3.2.1.46Counter32read-onlycurrent
cipSecTunOutAuths
OBJECT-TYPE
The total number of outbound authentication's performed by this IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.3.2.1.47Counter32read-onlycurrent
cipSecTunOutAuthFails
OBJECT-TYPE
The total number of outbound authentication's which ended in failure by this IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.3.2.1.48Counter32read-onlycurrent
cipSecTunOutEncrypts
OBJECT-TYPE
The total number of outbound encryption's performed by this IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.3.2.1.49Counter32read-onlycurrent
cipSecTunOutEncryptFails
OBJECT-TYPE
The total number of outbound encryption's which ended in failure by this IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.3.2.1.50Counter32read-onlycurrent
cipSecTunStatus
OBJECT-TYPE
The status of the MIB table row. This object can be used to bring the tunnel down by setting value of this object to destroy(2). When the value is set to destroy(2), the SA bundle is destroyed and this row is deleted from this table. When this MIB value is queried, the value of active(1) is always returned, if the instance exists. This object cannot be used to create a MIB table row.
1.3.6.1.4.1.9.9.171.1.3.2.1.51TunnelStatusread-writecurrent
cipSecEndPtTable
OBJECT-TYPE
The IPsec Phase-2 Tunnel Endpoint Table. This table contains an entry for each active endpoint associated with an IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.3.3not-accessiblecurrent
cipSecEndPtEntry
OBJECT-TYPE
An IPsec Phase-2 Tunnel Endpoint entry.
1.3.6.1.4.1.9.9.171.1.3.3.1not-accessiblecurrent
cipSecEndPtIndex
OBJECT-TYPE
The number of the Endpoint associated with the IPsec Phase-2 Tunnel Table. The value of this index is a number which begins at one and is incremented with each Endpoint associated with an IPsec Phase-2 Tunnel. The value of this object will wrap at 2,147,483,647.
1.3.6.1.4.1.9.9.171.1.3.3.1.1Integer32 (1..2147483647)not-accessiblecurrent
cipSecEndPtLocalName
OBJECT-TYPE
The DNS name of the local Endpoint.
1.3.6.1.4.1.9.9.171.1.3.3.1.2DisplayStringread-onlycurrent
cipSecEndPtLocalType
OBJECT-TYPE
The type of identity for the local Endpoint. Possible values are: 1) a single IP address, or 2) an IP address range, or 3) an IP subnet.
1.3.6.1.4.1.9.9.171.1.3.3.1.3EndPtTyperead-onlycurrent
cipSecEndPtLocalAddr1
OBJECT-TYPE
The local Endpoint's first IP address specification. If the local Endpoint type is single IP address, then this is the value of the IP address. If the local Endpoint type is IP subnet, then this is the value of the subnet. If the local Endpoint type is IP address range, then this is the value of beginning IP address of the range.
1.3.6.1.4.1.9.9.171.1.3.3.1.4IPSIpAddressread-onlycurrent
cipSecEndPtLocalAddr2
OBJECT-TYPE
The local Endpoint's second IP address specification. If the local Endpoint type is single IP address, then this is the value of the IP address. If the local Endpoint type is IP subnet, then this is the value of the subnet mask. If the local Endpoint type is IP address range, then this is the value of ending IP address of the range.
1.3.6.1.4.1.9.9.171.1.3.3.1.5IPSIpAddressread-onlycurrent
cipSecEndPtLocalProtocol
OBJECT-TYPE
The protocol number of the local Endpoint's traffic.
1.3.6.1.4.1.9.9.171.1.3.3.1.6Integer32 (0..255)read-onlycurrent
cipSecEndPtLocalPort
OBJECT-TYPE
The port number of the local Endpoint's traffic.
1.3.6.1.4.1.9.9.171.1.3.3.1.7Integer32 (0..65535)read-onlycurrent
cipSecEndPtRemoteName
OBJECT-TYPE
The DNS name of the remote Endpoint.
1.3.6.1.4.1.9.9.171.1.3.3.1.8DisplayStringread-onlycurrent
cipSecEndPtRemoteType
OBJECT-TYPE
The type of identity for the remote Endpoint. Possible values are: 1) a single IP address, or 2) an IP address range, or 3) an IP subnet.
1.3.6.1.4.1.9.9.171.1.3.3.1.9EndPtTyperead-onlycurrent
cipSecEndPtRemoteAddr1
OBJECT-TYPE
The remote Endpoint's first IP address specification. If the remote Endpoint type is single IP address, then this is the value of the IP address. If the remote Endpoint type is IP subnet, then this is the value of the subnet. If the remote Endpoint type is IP address range, then this is the value of beginning IP address of the range.
1.3.6.1.4.1.9.9.171.1.3.3.1.10IPSIpAddressread-onlycurrent
cipSecEndPtRemoteAddr2
OBJECT-TYPE
The remote Endpoint's second IP address specification. If the remote Endpoint type is single IP address, then this is the value of the IP address. If the remote Endpoint type is IP subnet, then this is the value of the subnet mask. If the remote Endpoint type is IP address range, then this is the value of ending IP address of the range.
1.3.6.1.4.1.9.9.171.1.3.3.1.11IPSIpAddressread-onlycurrent
cipSecEndPtRemoteProtocol
OBJECT-TYPE
The protocol number of the remote Endpoint's traffic.
1.3.6.1.4.1.9.9.171.1.3.3.1.12Integer32 (0..255)read-onlycurrent
cipSecEndPtRemotePort
OBJECT-TYPE
The port number of the remote Endpoint's traffic.
1.3.6.1.4.1.9.9.171.1.3.3.1.13Integer32 (0..65535)read-onlycurrent
cipSecSpiTable
OBJECT-TYPE
The IPsec Phase-2 Security Protection Index Table. This table contains an entry for each active and expiring security association.
1.3.6.1.4.1.9.9.171.1.3.4not-accessiblecurrent
cipSecSpiEntry
OBJECT-TYPE
Each entry contains the attributes associated with active and expiring IPsec Phase-2 security associations.
1.3.6.1.4.1.9.9.171.1.3.4.1not-accessiblecurrent
cipSecSpiIndex
OBJECT-TYPE
The number of the SPI associated with the Phase-2 Tunnel Table. The value of this index is a number which begins at one and is incremented with each SPI associated with an IPsec Phase-2 Tunnel. The value of this object will wrap at 2,147,483,647.
1.3.6.1.4.1.9.9.171.1.3.4.1.1Integer32 (1..2147483647)not-accessiblecurrent
cipSecSpiDirection
OBJECT-TYPE
The direction of the SPI.
1.3.6.1.4.1.9.9.171.1.3.4.1.2INTEGER {in(1), out(2)}read-onlycurrent
cipSecSpiValue
OBJECT-TYPE
The value of the SPI.
1.3.6.1.4.1.9.9.171.1.3.4.1.3Unsigned32 (1..4294967295)read-onlycurrent
cipSecSpiProtocol
OBJECT-TYPE
The protocol of the SPI.
1.3.6.1.4.1.9.9.171.1.3.4.1.4INTEGER {ah(1), esp(2), ipcomp(3)}read-onlycurrent
cipSecSpiStatus
OBJECT-TYPE
The status of the SPI.
1.3.6.1.4.1.9.9.171.1.3.4.1.5INTEGER {active(1), expiring(2)}read-onlycurrent
cipSecPhase2GWStatsTable
OBJECT-TYPE
Phase-2 IPsec stats information is included in this table. Each entry is related to a specific gateway which is identified by 'cmgwIndex'
1.3.6.1.4.1.9.9.171.1.3.5not-accessiblecurrent
cipSecPhase2GWStatsEntry
OBJECT-TYPE
Each entry contains the attributes of an Phase-2 IPsec stats information for the related gateway. There is only one entry for each gateway. The entry is created when a gateway up and cannot be deleted.
1.3.6.1.4.1.9.9.171.1.3.5.1not-accessiblecurrent
cipSecPhase2GWActiveTunnels
OBJECT-TYPE
The total number of currently active IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.5.1.1Gauge32read-onlycurrent
cipSecPhase2GWPreviousTunnels
OBJECT-TYPE
The total number of previously active IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.5.1.2Counter32read-onlycurrent
cipSecPhase2GWInOctets
OBJECT-TYPE
The total number of octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE determining whether or not the packet should be decompressed. See also cipSecGlobalInOctWraps for the number of times this counter has wrapped.
1.3.6.1.4.1.9.9.171.1.3.5.1.3Counter32read-onlycurrent
cipSecPhase2GWInOctWraps
OBJECT-TYPE
The number of times the global octets received counter (cipSecGlobalInOctets) has wrapped.
1.3.6.1.4.1.9.9.171.1.3.5.1.4Counter32read-onlycurrent
cipSecPhase2GWInDecompOctets
OBJECT-TYPE
The total number of decompressed octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of cipSecGlobalInOctets. See also cipSecGlobalInDecompOctWraps for the number of times this counter has wrapped.
1.3.6.1.4.1.9.9.171.1.3.5.1.5Counter32read-onlycurrent
cipSecPhase2GWInDecompOctWraps
OBJECT-TYPE
The number of times the global decompressed octets received counter (cipSecGlobalInDecompOctets) has wrapped.
1.3.6.1.4.1.9.9.171.1.3.5.1.6Counter32read-onlycurrent
cipSecPhase2GWInPkts
OBJECT-TYPE
The total number of packets received by all current and previous IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.5.1.7Counter32read-onlycurrent
cipSecPhase2GWInDrops
OBJECT-TYPE
The total number of packets dropped during receive processing by all current and previous IPsec Phase-2 Tunnels. This count does NOT include packets dropped due to Anti-Replay processing.
1.3.6.1.4.1.9.9.171.1.3.5.1.8Counter32read-onlycurrent
cipSecPhase2GWInReplayDrops
OBJECT-TYPE
The total number of packets dropped during receive processing due to Anti-Replay processing by all current and previous IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.5.1.9Counter32read-onlycurrent
cipSecPhase2GWInAuths
OBJECT-TYPE
The total number of inbound authentication's performed by all current and previous IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.5.1.10Counter32read-onlycurrent
cipSecPhase2GWInAuthFails
OBJECT-TYPE
The total number of inbound authentication's which ended in failure by all current and previous IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.5.1.11Counter32read-onlycurrent
cipSecPhase2GWInDecrypts
OBJECT-TYPE
The total number of inbound decryption's performed by all current and previous IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.5.1.12Counter32read-onlycurrent
cipSecPhase2GWInDecryptFails
OBJECT-TYPE
The total number of inbound decryption's which ended in failure by all current and previous IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.5.1.13Counter32read-onlycurrent
cipSecPhase2GWOutOctets
OBJECT-TYPE
The total number of octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER determining whether or not the packet should be compressed. See also cipSecGlobalOutOctWraps for the number of times this counter has wrapped.
1.3.6.1.4.1.9.9.171.1.3.5.1.14Counter32read-onlycurrent
cipSecPhase2GWOutOctWraps
OBJECT-TYPE
The number of times the global octets sent counter (cipSecGlobalOutOctets) has wrapped.
1.3.6.1.4.1.9.9.171.1.3.5.1.15Counter32read-onlycurrent
cipSecPhase2GWOutUncompOctets
OBJECT-TYPE
The total number of uncompressed octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of cipSecGlobalOutOctets. See also cipSecGlobalOutDecompOctWraps for the number of times this counter has wrapped.
1.3.6.1.4.1.9.9.171.1.3.5.1.16Counter32read-onlycurrent
cipSecPhase2GWOutUncompOctWraps
OBJECT-TYPE
The number of times the global uncompressed octets sent counter (cipSecGlobalOutUncompOctets) has wrapped.
1.3.6.1.4.1.9.9.171.1.3.5.1.17Counter32read-onlycurrent
cipSecPhase2GWOutPkts
OBJECT-TYPE
The total number of packets sent by all current and previous IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.5.1.18Counter32read-onlycurrent
cipSecPhase2GWOutDrops
OBJECT-TYPE
The total number of packets dropped during send processing by all current and previous IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.5.1.19Counter32read-onlycurrent
cipSecPhase2GWOutAuths
OBJECT-TYPE
The total number of outbound authentication's performed by all current and previous IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.5.1.20Counter32read-onlycurrent
cipSecPhase2GWOutAuthFails
OBJECT-TYPE
The total number of outbound authentication's which ended in failure by all current and previous IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.5.1.21Counter32read-onlycurrent
cipSecPhase2GWOutEncrypts
OBJECT-TYPE
The total number of outbound encryption's performed by all current and previous IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.5.1.22Counter32read-onlycurrent
cipSecPhase2GWOutEncryptFails
OBJECT-TYPE
The total number of outbound encryption's which ended in failure by all current and previous IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.5.1.23Counter32read-onlycurrent
cipSecPhase2GWProtocolUseFails
OBJECT-TYPE
The total number of protocol use failures which occurred during processing of all current and previously active IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.5.1.24Counter32read-onlycurrent
cipSecPhase2GWNoSaFails
OBJECT-TYPE
The total number of non-existent Security Association in failures which occurred during processing of all current and previous IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.5.1.25Counter32read-onlycurrent
cipSecPhase2GWSysCapFails
OBJECT-TYPE
The total number of system capacity failures which occurred during processing of all current and previously active IPsec Phase-2 Tunnels.
1.3.6.1.4.1.9.9.171.1.3.5.1.26Counter32read-onlycurrent
cipSecHistory
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.171.1.4
cipSecHistGlobal
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.171.1.4.1
cipSecHistGlobalCntl
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.171.1.4.1.1
cipSecHistTableSize
OBJECT-TYPE
The window size of the IPsec Phase-1 and Phase-2 History Tables. The IPsec Phase-1 and Phase-2 History Tables are implemented as a sliding window in which only the last n entries are maintained. This object is used specify the number of entries which will be maintained in the IPsec Phase-1 and Phase-2 History Tables. An implementation may choose suitable minimum and maximum values for this element based on the local policy and available resources. If an SNMP SET request specifies a value outside this window for this element, a BAD VALUE may be returned.
1.3.6.1.4.1.9.9.171.1.4.1.1.1Integer32 (1..2147483647)read-writecurrent
cipSecHistCheckPoint
OBJECT-TYPE
The current state of check point processing. This object will return ready when the agent is ready to create on-demand history entries for active IPsec Tunnels or checkPoint when the agent is currently creating on-demand history entries for active IPsec Tunnels. By setting this value to checkPoint, the agent will create: a) an entry in the IPsec Phase-1 Tunnel History for each active IPsec Phase-1 Tunnel and b) an entry in the IPsec Phase-2 Tunnel History Table and an entry in the IPsec Phase-2 Tunnel EndPoint History Table for each active IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.4.1.1.2INTEGER {ready(1), checkPoint(2)}read-writecurrent
cipSecHistPhaseOne
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.171.1.4.2
cikeTunnelHistTable
OBJECT-TYPE
The IPsec Phase-1 Internet Key Exchange Tunnel History Table. This table is implemented as a sliding window in which only the last n entries are maintained. The maximum number of entries is specified by the cipSecHistTableSize object.
1.3.6.1.4.1.9.9.171.1.4.2.1not-accessiblecurrent
cikeTunnelHistEntry
OBJECT-TYPE
Each entry contains the attributes associated with a previously active IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.4.2.1.1not-accessiblecurrent
cikeTunHistIndex
OBJECT-TYPE
The index of the IPsec Phase-1 IKE Tunnel History Table. The value of the index is a number which begins at one and is incremented with each tunnel that ends. The value of this object will wrap at 2,147,483,647.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.1Integer32 (1..2147483647)not-accessiblecurrent
cikeTunHistTermReason
OBJECT-TYPE
The reason the IPsec Phase-1 IKE Tunnel was terminated. Possible reasons include: 1 = other 2 = normal termination 3 = operator request 4 = peer delete request was received 5 = contact with peer was lost 6 = local failure occurred. 7 = operator initiated check point request
1.3.6.1.4.1.9.9.171.1.4.2.1.1.2INTEGER {other(1), normal(2), operRequest(3), peerDelRequest(4), peerLost(5), localFailure(6), checkPointReg(7)}read-onlycurrent
cikeTunHistActiveIndex
OBJECT-TYPE
The index of the previously active IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.3Integer32 (1..2147483647)read-onlycurrent
cikeTunHistPeerLocalType
OBJECT-TYPE
The type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. a host name.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.4IkePeerTyperead-onlycurrent
cikeTunHistPeerLocalValue
OBJECT-TYPE
The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is a host name, then this is the host name used to identify the local peer.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.5DisplayStringread-onlycurrent
cikeTunHistPeerIntIndex
OBJECT-TYPE
The internal index of the local-remote peer association. This internal index is used to uniquely identify multiple associations between the local and remote peer.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.6Integer32 (1..2147483647)read-onlycurrent
cikeTunHistPeerRemoteType
OBJECT-TYPE
The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. a host name.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.7IkePeerTyperead-onlycurrent
cikeTunHistPeerRemoteValue
OBJECT-TYPE
The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is a host name, then this is the host name used to identify the remote peer.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.8DisplayStringread-onlycurrent
cikeTunHistLocalAddr
OBJECT-TYPE
The IP address of the local endpoint for the IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.9IPSIpAddressread-onlycurrent
cikeTunHistLocalName
OBJECT-TYPE
The DNS name of the local IP address for the IPsec Phase-1 IKE Tunnel. If the DNS name associated with the local tunnel endpoint is not known, then the value of this object will be a NULL string.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.10DisplayStringread-onlycurrent
cikeTunHistRemoteAddr
OBJECT-TYPE
The IP address of the remote endpoint for the IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.11IPSIpAddressread-onlycurrent
cikeTunHistRemoteName
OBJECT-TYPE
The DNS name of the remote IP address of IPsec Phase-1 IKE Tunnel. If the DNS name associated with the remote tunnel endpoint is not known, then the value of this object will be a NULL string.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.12DisplayStringread-onlycurrent
cikeTunHistNegoMode
OBJECT-TYPE
The negotiation mode of the IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.13IkeNegoModeread-onlycurrent
cikeTunHistDiffHellmanGrp
OBJECT-TYPE
The Diffie Hellman Group used in IPsec Phase-1 IKE negotiations.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.14DiffHellmanGrpread-onlycurrent
cikeTunHistEncryptAlgo
OBJECT-TYPE
The encryption algorithm used in IPsec Phase-1 IKE negotiations.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.15EncryptAlgoread-onlycurrent
cikeTunHistHashAlgo
OBJECT-TYPE
The hash algorithm used in IPsec Phase-1 IKE negotiations.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.16IkeHashAlgoread-onlycurrent
cikeTunHistAuthMethod
OBJECT-TYPE
The authentication method used in IPsec Phase-1 IKE negotiations.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.17IkeAuthMethodread-onlycurrent
cikeTunHistLifeTime
OBJECT-TYPE
The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel in seconds.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.18Integer32 (1..2147483647)read-onlycurrent
cikeTunHistStartTime
OBJECT-TYPE
The value of sysUpTime in hundredths of seconds when the IPsec Phase-1 IKE tunnel was started.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.19TimeStampread-onlycurrent
cikeTunHistActiveTime
OBJECT-TYPE
The length of time the IPsec Phase-1 IKE tunnel was been active in hundredths of seconds.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.20TimeIntervalread-onlycurrent
cikeTunHistTotalRefreshes
OBJECT-TYPE
The total number of security associations refreshes performed.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.21Counter32read-onlycurrent
cikeTunHistTotalSas
OBJECT-TYPE
The total number of security associations used during the life of the IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.22Counter32read-onlycurrent
cikeTunHistInOctets
OBJECT-TYPE
The total number of octets received by this IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.23Counter32read-onlycurrent
cikeTunHistInPkts
OBJECT-TYPE
The total number of packets received by this IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.24Counter32read-onlycurrent
cikeTunHistInDropPkts
OBJECT-TYPE
The total number of packets dropped by this IPsec Phase-1 IKE Tunnel during receive processing.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.25Counter32read-onlycurrent
cikeTunHistInNotifys
OBJECT-TYPE
The total number of notifys received by this IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.26Counter32read-onlycurrent
cikeTunHistInP2Exchgs
OBJECT-TYPE
The total number of IPsec Phase-2 exchanges received by this IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.27Counter32read-onlycurrent
cikeTunHistInP2ExchgInvalids
OBJECT-TYPE
The total number of IPsec Phase-2 exchanges received and found to be invalid by this IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.28Counter32read-onlycurrent
cikeTunHistInP2ExchgRejects
OBJECT-TYPE
The total number of IPsec Phase-2 exchanges received and rejected by this IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.29Counter32read-onlycurrent
cikeTunHistInP2SaDelRequests
OBJECT-TYPE
The total number of IPsec Phase-2 security association delete requests received by this IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.30Counter32read-onlycurrent
cikeTunHistOutOctets
OBJECT-TYPE
The total number of octets sent by this IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.31Counter32read-onlycurrent
cikeTunHistOutPkts
OBJECT-TYPE
The total number of packets sent by this IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.32Counter32read-onlycurrent
cikeTunHistOutDropPkts
OBJECT-TYPE
The total number of packets dropped by this IPsec Phase-1 IKE Tunnel during send processing.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.33Counter32read-onlycurrent
cikeTunHistOutNotifys
OBJECT-TYPE
The total number of notifys sent by this IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.34Counter32read-onlycurrent
cikeTunHistOutP2Exchgs
OBJECT-TYPE
The total number of IPsec Phase-2 exchanges sent by this IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.35Counter32read-onlycurrent
cikeTunHistOutP2ExchgInvalids
OBJECT-TYPE
The total number of IPsec Phase-2 exchanges sent and found to be invalid by this IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.36Counter32read-onlycurrent
cikeTunHistOutP2ExchgRejects
OBJECT-TYPE
The total number of IPsec Phase-2 exchanges sent and rejected by this IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.37Counter32read-onlycurrent
cikeTunHistOutP2SaDelRequests
OBJECT-TYPE
The total number of IPsec Phase-2 security association delete requests sent by this IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.9.9.171.1.4.2.1.1.38Counter32read-onlycurrent
cipSecHistPhaseTwo
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.171.1.4.3
cipSecTunnelHistTable
OBJECT-TYPE
The IPsec Phase-2 Tunnel History Table. This table is implemented as a sliding window in which only the last n entries are maintained. The maximum number of entries is specified by the cipSecHistTableSize object.
1.3.6.1.4.1.9.9.171.1.4.3.1not-accessiblecurrent
cipSecTunnelHistEntry
OBJECT-TYPE
Each entry contains the attributes associated with a previously active IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.4.3.1.1not-accessiblecurrent
cipSecTunHistIndex
OBJECT-TYPE
The index of the IPsec Phase-2 Tunnel History Table. The value of the index is a number which begins at one and is incremented with each tunnel that ends. The value of this object will wrap at 2,147,483,647.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.1Integer32 (1..2147483647)not-accessiblecurrent
cipSecTunHistTermReason
OBJECT-TYPE
The reason the IPsec Phase-2 Tunnel was terminated. Possible reasons include: 1 = other 2 = normal termination 3 = operator request 4 = peer delete request was received 5 = contact with peer was lost 6 = local failure occurred 7 = operator initiated check point request
1.3.6.1.4.1.9.9.171.1.4.3.1.1.2INTEGER {other(1), normal(2), operRequest(3), peerDelRequest(4), peerLost(5), seqNumRollOver(6), checkPointReq(7)}read-onlycurrent
cipSecTunHistActiveIndex
OBJECT-TYPE
The index of the previously active IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.3Integer32 (1..2147483647)read-onlycurrent
cipSecTunHistIkeTunnelIndex
OBJECT-TYPE
The index of the associated IPsec Phase-1 Tunnel (cikeTunIndex in the cikeTunnelTable).
1.3.6.1.4.1.9.9.171.1.4.3.1.1.4Integer32 (1..2147483647)read-onlycurrent
cipSecTunHistLocalAddr
OBJECT-TYPE
The IP address of the local endpoint for the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.5IPSIpAddressread-onlycurrent
cipSecTunHistRemoteAddr
OBJECT-TYPE
The IP address of the remote endpoint for the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.6IPSIpAddressread-onlycurrent
cipSecTunHistKeyType
OBJECT-TYPE
The type of key used by the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.7KeyTyperead-onlycurrent
cipSecTunHistEncapMode
OBJECT-TYPE
The encapsulation mode used by the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.8EncapModeread-onlycurrent
cipSecTunHistLifeSize
OBJECT-TYPE
The negotiated LifeSize of the IPsec Phase-2 Tunnel in kilobytes.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.9Integer32 (1..2147483647)read-onlycurrent
cipSecTunHistLifeTime
OBJECT-TYPE
The negotiated LifeTime of the IPsec Phase-2 Tunnel in seconds.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.10Integer32 (1..2147483647)read-onlycurrent
cipSecTunHistStartTime
OBJECT-TYPE
The value of sysUpTime in hundredths of seconds when the IPsec Phase-2 Tunnel was started.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.11TimeStampread-onlycurrent
cipSecTunHistActiveTime
OBJECT-TYPE
The length of time the IPsec Phase-2 Tunnel has been active in hundredths of seconds.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.12TimeIntervalread-onlycurrent
cipSecTunHistTotalRefreshes
OBJECT-TYPE
The total number of security association refreshes performed.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.13Counter32read-onlycurrent
cipSecTunHistTotalSas
OBJECT-TYPE
The total number of security associations used during the life of the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.14Counter32read-onlycurrent
cipSecTunHistInSaDiffHellmanGrp
OBJECT-TYPE
The Diffie Hellman Group used by the inbound security association of the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.15DiffHellmanGrpread-onlycurrent
cipSecTunHistInSaEncryptAlgo
OBJECT-TYPE
The encryption algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.16EncryptAlgoread-onlycurrent
cipSecTunHistInSaAhAuthAlgo
OBJECT-TYPE
The authentication algorithm used by the inbound authentication header (AH) security association of the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.17AuthAlgoread-onlycurrent
cipSecTunHistInSaEspAuthAlgo
OBJECT-TYPE
The authentication algorithm used by the inbound encapsulation security protocol (ESP) security association of the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.18AuthAlgoread-onlycurrent
cipSecTunHistInSaDecompAlgo
OBJECT-TYPE
The decompression algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.19CompAlgoread-onlycurrent
cipSecTunHistOutSaDiffHellmanGrp
OBJECT-TYPE
The Diffie Hellman Group used by the outbound security association of the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.20DiffHellmanGrpread-onlycurrent
cipSecTunHistOutSaEncryptAlgo
OBJECT-TYPE
The encryption algorithm used by the outbound security association of the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.21EncryptAlgoread-onlycurrent
cipSecTunHistOutSaAhAuthAlgo
OBJECT-TYPE
The authentication algorithm used by the outbound authentication header (AH) security association of the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.22AuthAlgoread-onlycurrent
cipSecTunHistOutSaEspAuthAlgo
OBJECT-TYPE
The authentication algorithm used by the inbound encapsulation security protocol (ESP) security association of the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.23AuthAlgoread-onlycurrent
cipSecTunHistOutSaCompAlgo
OBJECT-TYPE
The compression algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.24CompAlgoread-onlycurrent
cipSecTunHistInOctets
OBJECT-TYPE
The total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed. See also cipSecTunInOctWraps for the number of times this counter has wrapped.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.25Counter32read-onlycurrent
cipSecTunHistHcInOctets
OBJECT-TYPE
A high capacity count of the total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.26Counter64read-onlycurrent
cipSecTunHistInOctWraps
OBJECT-TYPE
The number of times the octets received counter (cipSecTunInOctets) has wrapped.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.27Counter32read-onlycurrent
cipSecTunHistInDecompOctets
OBJECT-TYPE
The total number of decompressed octets received by this IPsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of cipSecTunHistInOctets. See also cipSecTunInDecompOctWraps for the number of times this counter has wrapped.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.28Counter32read-onlycurrent
cipSecTunHistHcInDecompOctets
OBJECT-TYPE
A high capacity count of the total number of decompressed octets received by this IPsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of cipSecTunHistHcInOctets.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.29Counter64read-onlycurrent
cipSecTunHistInDecompOctWraps
OBJECT-TYPE
The number of times the decompressed octets received counter (cipSecTunInDecompOctets) has wrapped.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.30Counter32read-onlycurrent
cipSecTunHistInPkts
OBJECT-TYPE
The total number of packets received by this IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.31Counter32read-onlycurrent
cipSecTunHistInDropPkts
OBJECT-TYPE
The total number of packets dropped during receive processing by this IPsec Phase-2 Tunnel. This count does NOT include packets dropped due to Anti-Replay processing.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.32Counter32read-onlycurrent
cipSecTunHistInReplayDropPkts
OBJECT-TYPE
The total number of packets dropped during receive processing due to Anti-Replay processing by this IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.33Counter32read-onlycurrent
cipSecTunHistInAuths
OBJECT-TYPE
The total number of inbound authentication's performed by this IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.34Counter32read-onlycurrent
cipSecTunHistInAuthFails
OBJECT-TYPE
The total number of inbound authentication's which ended in failure by this IPsec Phase-2 Tunnel .
1.3.6.1.4.1.9.9.171.1.4.3.1.1.35Counter32read-onlycurrent
cipSecTunHistInDecrypts
OBJECT-TYPE
The total number of inbound decryption's performed by this IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.36Counter32read-onlycurrent
cipSecTunHistInDecryptFails
OBJECT-TYPE
The total number of inbound decryption's which ended in failure by this IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.37Counter32read-onlycurrent
cipSecTunHistOutOctets
OBJECT-TYPE
The total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed. See also cipSecTunOutOctWraps for the number of times this counter has wrapped.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.38Counter32read-onlycurrent
cipSecTunHistHcOutOctets
OBJECT-TYPE
A high capacity count of the total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.39Counter64read-onlycurrent
cipSecTunHistOutOctWraps
OBJECT-TYPE
The number of times the octets sent counter (cipSecTunOutOctets) has wrapped.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.40Counter32read-onlycurrent
cipSecTunHistOutUncompOctets
OBJECT-TYPE
The total number of uncompressed octets sent by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of cipSecTunHistOutOctets. See also cipSecTunOutDecompOctWraps for the number of times this counter has wrapped.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.41Counter32read-onlycurrent
cipSecTunHistHcOutUncompOctets
OBJECT-TYPE
A high capacity count of the total number of uncompressed octets sent by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of cipSecTunHistHcOutOctets.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.42Counter64read-onlycurrent
cipSecTunHistOutUncompOctWraps
OBJECT-TYPE
The number of times the uncompressed octets sent counter (cipSecTunOutUncompOctets) has wrapped.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.43Counter32read-onlycurrent
cipSecTunHistOutPkts
OBJECT-TYPE
The total number of packets sent by this IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.44Counter32read-onlycurrent
cipSecTunHistOutDropPkts
OBJECT-TYPE
The total number of packets dropped during send processing by this IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.45Counter32read-onlycurrent
cipSecTunHistOutAuths
OBJECT-TYPE
The total number of outbound authentication's performed by this IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.46Counter32read-onlycurrent
cipSecTunHistOutAuthFails
OBJECT-TYPE
The total number of outbound authentication's which ended in failure by this IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.47Counter32read-onlycurrent
cipSecTunHistOutEncrypts
OBJECT-TYPE
The total number of outbound encryption's performed by this IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.48Counter32read-onlycurrent
cipSecTunHistOutEncryptFails
OBJECT-TYPE
The total number of outbound encryption's which ended in failure by this IPsec Phase-2 Tunnel.
1.3.6.1.4.1.9.9.171.1.4.3.1.1.49Counter32read-onlycurrent
cipSecEndPtHistTable
OBJECT-TYPE
The IPsec Phase-2 Tunnel Endpoint History Table. This table is implemented as a sliding window in which only the last n entries are maintained. The maximum number of entries is specified by the cipSecHistTableSize object.
1.3.6.1.4.1.9.9.171.1.4.3.2not-accessiblecurrent
cipSecEndPtHistEntry
OBJECT-TYPE
Each entry contains the attributes associated with a previously active IPsec Phase-2 Tunnel Endpoint.
1.3.6.1.4.1.9.9.171.1.4.3.2.1not-accessiblecurrent
cipSecEndPtHistIndex
OBJECT-TYPE
The number of the previously active Endpoint associated with a IPsec Phase-2 Tunnel Table. The value of this index is a number which begins at one and is incremented with each Endpoint associated with an IPsec Phase-2 Tunnel. The value of this object will wrap at 2,147,483,647.
1.3.6.1.4.1.9.9.171.1.4.3.2.1.1Integer32 (1..2147483647)not-accessiblecurrent
cipSecEndPtHistTunIndex
OBJECT-TYPE
The index of the previously active IPsec Phase-2 Tunnel Table.
1.3.6.1.4.1.9.9.171.1.4.3.2.1.2Integer32 (1..2147483647)read-onlycurrent
cipSecEndPtHistActiveIndex
OBJECT-TYPE
The index of the previously active Endpoint.
1.3.6.1.4.1.9.9.171.1.4.3.2.1.3Integer32 (1..2147483647)read-onlycurrent
cipSecEndPtHistLocalName
OBJECT-TYPE
The DNS name of the local Endpoint.
1.3.6.1.4.1.9.9.171.1.4.3.2.1.4DisplayStringread-onlycurrent
cipSecEndPtHistLocalType
OBJECT-TYPE
The type of identity for the local Endpoint. Possible values are: 1) a single IP address, or 2) an IP address range, or 3) an IP subnet.
1.3.6.1.4.1.9.9.171.1.4.3.2.1.5EndPtTyperead-onlycurrent
cipSecEndPtHistLocalAddr1
OBJECT-TYPE
The local Endpoint's first IP address specification. If the local Endpoint type is single IP address, then this is the value of the IP address. If the local Endpoint type is IP subnet, then this is the value of the subnet. If the local Endpoint type is IP address range, then this is the value of beginning IP address of the range.
1.3.6.1.4.1.9.9.171.1.4.3.2.1.6IPSIpAddressread-onlycurrent
cipSecEndPtHistLocalAddr2
OBJECT-TYPE
The local Endpoint's second IP address specification. If the local Endpoint type is single IP address, then this is the value of the IP address. If the local Endpoint type is IP subnet, then this is the value of the subnet mask. If the local Endpoint type is IP address range, then this is the value of ending IP address of the range.
1.3.6.1.4.1.9.9.171.1.4.3.2.1.7IPSIpAddressread-onlycurrent
cipSecEndPtHistLocalProtocol
OBJECT-TYPE
The protocol number of the local Endpoint's traffic.
1.3.6.1.4.1.9.9.171.1.4.3.2.1.8Integer32 (0..255)read-onlycurrent
cipSecEndPtHistLocalPort
OBJECT-TYPE
The port number of the local Endpoint's traffic.
1.3.6.1.4.1.9.9.171.1.4.3.2.1.9Integer32 (0..65535)read-onlycurrent
cipSecEndPtHistRemoteName
OBJECT-TYPE
The DNS name of the remote Endpoint.
1.3.6.1.4.1.9.9.171.1.4.3.2.1.10DisplayStringread-onlycurrent
cipSecEndPtHistRemoteType
OBJECT-TYPE
The type of identity for the remote Endpoint. Possible values are: 1) a single IP address, or 2) an IP address range, or 3) an IP subnet.
1.3.6.1.4.1.9.9.171.1.4.3.2.1.11EndPtTyperead-onlycurrent
cipSecEndPtHistRemoteAddr1
OBJECT-TYPE
The remote Endpoint's first IP address specification. If the remote Endpoint type is single IP address, then this is the value of the IP address. If the remote Endpoint type is IP subnet, then this is the value of the subnet. If the remote Endpoint type is IP address range, then this is the value of beginning IP address of the range.
1.3.6.1.4.1.9.9.171.1.4.3.2.1.12IPSIpAddressread-onlycurrent
cipSecEndPtHistRemoteAddr2
OBJECT-TYPE
The remote Endpoint's second IP address specification. If the remote Endpoint type is single IP address, then this is the value of the IP address. If the remote Endpoint type is IP subnet, then this is the value of the subnet mask. If the remote Endpoint type is IP address range, then this is the value of ending IP address of the range.
1.3.6.1.4.1.9.9.171.1.4.3.2.1.13IPSIpAddressread-onlycurrent
cipSecEndPtHistRemoteProtocol
OBJECT-TYPE
The protocol number of the remote Endpoint's traffic.
1.3.6.1.4.1.9.9.171.1.4.3.2.1.14Integer32 (0..255)read-onlycurrent
cipSecEndPtHistRemotePort
OBJECT-TYPE
The port number of the remote Endpoint's traffic.
1.3.6.1.4.1.9.9.171.1.4.3.2.1.15Integer32 (0..65535)read-onlycurrent
cipSecFailures
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.171.1.5
cipSecFailGlobal
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.171.1.5.1
cipSecFailGlobalCntl
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.171.1.5.1.1
cipSecFailTableSize
OBJECT-TYPE
The window size of the IPsec Phase-1 and Phase-2 Failure Tables. The IPsec Phase-1 and Phase-2 Failure Tables are implemented as a sliding window in which only the last n entries are maintained. This object is used specify the number of entries which will be maintained in the IPsec Phase-1 and Phase-2 Failure Tables. An implementation may choose suitable minimum and maximum values for this element based on the local policy and available resources. If an SNMP SET request specifies a value outside this window for this element, a BAD VALUE may be returned.
1.3.6.1.4.1.9.9.171.1.5.1.1.1Integer32 (1..2147483647)read-writecurrent
cipSecFailPhaseOne
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.171.1.5.2
cikeFailTable
OBJECT-TYPE
The IPsec Phase-1 Failure Table. This table is implemented as a sliding window in which only the last n entries are maintained. The maximum number of entries is specified by the cipSecFailTableSize object.
1.3.6.1.4.1.9.9.171.1.5.2.1not-accessiblecurrent
cikeFailEntry
OBJECT-TYPE
Each entry contains the attributes associated with an IPsec Phase-1 failure.
1.3.6.1.4.1.9.9.171.1.5.2.1.1not-accessiblecurrent
cikeFailIndex
OBJECT-TYPE
The IPsec Phase-1 Failure Table index. The value of the index is a number which begins at one and is incremented with each IPsec Phase-1 failure. The value of this object will wrap at 2,147,483,647.
1.3.6.1.4.1.9.9.171.1.5.2.1.1.1Integer32 (1..2147483647)not-accessiblecurrent
cikeFailReason
OBJECT-TYPE
The reason for the failure. Possible reasons include: 1 = other 2 = peer delete request was received 3 = contact with peer was lost 4 = local failure occurred 5 = authentication failure 6 = hash validation failure 7 = encryption failure 8 = internal error occurred 9 = system capacity failure 10 = proposal failure 11 = peer's certificate is unavailable 12 = peer's certificate was found invalid 13 = local certificate expired 14 = certificate revoke list (crl) failure 15 = peer encoding error 16 = non-existent security association 17 = operator requested termination.
1.3.6.1.4.1.9.9.171.1.5.2.1.1.2INTEGER {other(1), peerDelRequest(2), peerLost(3), localFailure(4), authFailure(5), hashValidation(6), encryptFailure(7), internalError(8), sysCapExceeded(9), proposalFailure(10), peerCertUnavailable(11), peerCertNotValid(12), localCertExpired(13), crlFailure(14), peerEncodingError(15), nonExistentSa(16), operRequest(17)}read-onlycurrent
cikeFailTime
OBJECT-TYPE
The value of sysUpTime in hundredths of seconds at the time of the failure.
1.3.6.1.4.1.9.9.171.1.5.2.1.1.3TimeStampread-onlycurrent
cikeFailLocalType
OBJECT-TYPE
The type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. a host name.
1.3.6.1.4.1.9.9.171.1.5.2.1.1.4IkePeerTyperead-onlycurrent
cikeFailLocalValue
OBJECT-TYPE
The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is a host name, then this is the host name used to identify the local peer.
1.3.6.1.4.1.9.9.171.1.5.2.1.1.5DisplayStringread-onlycurrent
cikeFailRemoteType
OBJECT-TYPE
The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. a host name.
1.3.6.1.4.1.9.9.171.1.5.2.1.1.6IkePeerTyperead-onlycurrent
cikeFailRemoteValue
OBJECT-TYPE
The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is a host name, then this is the host name used to identify the remote peer.
1.3.6.1.4.1.9.9.171.1.5.2.1.1.7DisplayStringread-onlycurrent
cikeFailLocalAddr
OBJECT-TYPE
The IP address of the local peer.
1.3.6.1.4.1.9.9.171.1.5.2.1.1.8IPSIpAddressread-onlycurrent
cikeFailRemoteAddr
OBJECT-TYPE
The IP address of the remote peer.
1.3.6.1.4.1.9.9.171.1.5.2.1.1.9IPSIpAddressread-onlycurrent
cipSecFailPhaseTwo
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.171.1.5.3
cipSecFailTable
OBJECT-TYPE
The IPsec Phase-2 Failure Table. This table is implemented as a sliding window in which only the last n entries are maintained. The maximum number of entries is specified by the cipSecFailTableSize object.
1.3.6.1.4.1.9.9.171.1.5.3.1not-accessiblecurrent
cipSecFailEntry
OBJECT-TYPE
Each entry contains the attributes associated with an IPsec Phase-1 failure.
1.3.6.1.4.1.9.9.171.1.5.3.1.1not-accessiblecurrent
cipSecFailIndex
OBJECT-TYPE
The IPsec Phase-2 Failure Table index. The value of the index is a number which begins at one and is incremented with each IPsec Phase-1 failure. The value of this object will wrap at 2,147,483,647.
1.3.6.1.4.1.9.9.171.1.5.3.1.1.1Integer32 (1..2147483647)not-accessiblecurrent
cipSecFailReason
OBJECT-TYPE
The reason for the failure. Possible reasons include: 1 = other 2 = internal error occurred 3 = peer encoding error 4 = proposal failure 5 = protocol use failure 6 = non-existent security association 7 = decryption failure 8 = encryption failure 9 = inbound authentication failure 10 = outbound authentication failure 11 = compression failure 12 = system capacity failure 13 = peer delete request was received 14 = contact with peer was lost 15 = sequence number rolled over 16 = operator requested termination.
1.3.6.1.4.1.9.9.171.1.5.3.1.1.2INTEGER {other(1), internalError(2), peerEncodingError(3), proposalFailure(4), protocolUseFail(5), nonExistentSa(6), decryptFailure(7), encryptFailure(8), inAuthFailure(9), outAuthFailure(10), compression(11), sysCapExceeded(12), peerDelRequest(13), peerLost(14), seqNumRollOver(15), operRequest(16)}read-onlycurrent
cipSecFailTime
OBJECT-TYPE
The value of sysUpTime in hundredths of seconds at the time of the failure.
1.3.6.1.4.1.9.9.171.1.5.3.1.1.3TimeStampread-onlycurrent
cipSecFailTunnelIndex
OBJECT-TYPE
The Phase-2 Tunnel index (cipSecTunIndex).
1.3.6.1.4.1.9.9.171.1.5.3.1.1.4Integer32 (1..2147483647)read-onlycurrent
cipSecFailSaSpi
OBJECT-TYPE
The security association SPI value.
1.3.6.1.4.1.9.9.171.1.5.3.1.1.5Integer32 (0..2147483647)read-onlycurrent
cipSecFailPktSrcAddr
OBJECT-TYPE
The packet's source IP address.
1.3.6.1.4.1.9.9.171.1.5.3.1.1.6IPSIpAddressread-onlycurrent
cipSecFailPktDstAddr
OBJECT-TYPE
The packet's destination IP address.
1.3.6.1.4.1.9.9.171.1.5.3.1.1.7IPSIpAddressread-onlycurrent
cipSecTrapCntl
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.171.1.6
cipSecTrapCntlIkeTunnelStart
OBJECT-TYPE
This object defines the administrative state of sending the IPsec IKE Phase-1 Tunnel Start TRAP
1.3.6.1.4.1.9.9.171.1.6.1TrapStatusread-writecurrent
cipSecTrapCntlIkeTunnelStop
OBJECT-TYPE
This object defines the administrative state of sending the IPsec IKE Phase-1 Tunnel Stop TRAP
1.3.6.1.4.1.9.9.171.1.6.2TrapStatusread-writecurrent
cipSecTrapCntlIkeSysFailure
OBJECT-TYPE
This object defines the administrative state of sending the IPsec IKE Phase-1 System Failure TRAP
1.3.6.1.4.1.9.9.171.1.6.3TrapStatusread-writecurrent
cipSecTrapCntlIkeCertCrlFailure
OBJECT-TYPE
This object defines the administrative state of sending the IPsec IKE Phase-1 Certificate/CRL Failure TRAP
1.3.6.1.4.1.9.9.171.1.6.4TrapStatusread-writecurrent
cipSecTrapCntlIkeProtocolFail
OBJECT-TYPE
This object defines the administrative state of sending the IPsec IKE Phase-1 Protocol Failure TRAP
1.3.6.1.4.1.9.9.171.1.6.5TrapStatusread-writecurrent
cipSecTrapCntlIkeNoSa
OBJECT-TYPE
This object defines the administrative state of sending the IPsec IKE Phase-1 No Security Association TRAP
1.3.6.1.4.1.9.9.171.1.6.6TrapStatusread-writecurrent
cipSecTrapCntlIpSecTunnelStart
OBJECT-TYPE
This object defines the administrative state of sending the IPsec Phase-2 Tunnel Start TRAP
1.3.6.1.4.1.9.9.171.1.6.7TrapStatusread-writecurrent
cipSecTrapCntlIpSecTunnelStop
OBJECT-TYPE
This object defines the administrative state of sending the IPsec Phase-2 Tunnel Stop TRAP
1.3.6.1.4.1.9.9.171.1.6.8TrapStatusread-writecurrent
cipSecTrapCntlIpSecSysFailure
OBJECT-TYPE
This object defines the administrative state of sending the IPsec Phase-2 System Failure TRAP
1.3.6.1.4.1.9.9.171.1.6.9TrapStatusread-writecurrent
cipSecTrapCntlIpSecSetUpFailure
OBJECT-TYPE
This object defines the administrative state of sending the IPsec Phase-2 Set Up Failure TRAP
1.3.6.1.4.1.9.9.171.1.6.10TrapStatusread-writecurrent
cipSecTrapCntlIpSecEarlyTunTerm
OBJECT-TYPE
This object defines the administrative state of sending the IPsec Phase-2 Early Tunnel Termination TRAP
1.3.6.1.4.1.9.9.171.1.6.11TrapStatusread-writecurrent
cipSecTrapCntlIpSecProtocolFail
OBJECT-TYPE
This object defines the administrative state of sending the IPsec Phase-2 Protocol Failure TRAP
1.3.6.1.4.1.9.9.171.1.6.12TrapStatusread-writecurrent
cipSecTrapCntlIpSecNoSa
OBJECT-TYPE
This object defines the administrative state of sending the IPsec Phase-2 No Security Association TRAP
1.3.6.1.4.1.9.9.171.1.6.13TrapStatusread-writecurrent
cipSecMIBNotificationPrefix
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.171.2
cipSecMIBNotifications
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.171.2.0
cipSecMIBConformance
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.171.3
cipSecMIBGroups
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.171.3.1
cipSecMIBCompliances
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.171.3.2

Notifications

NameOIDStatus
cikeTunnelStart
NOTIFICATION-TYPE
This notification is generated when an IPsec Phase-1 IKE Tunnel becomes active.
1.3.6.1.4.1.9.9.171.2.0.1current
cikeTunnelStop
NOTIFICATION-TYPE
This notification is generated when an IPsec Phase-1 IKE Tunnel becomes inactive.
1.3.6.1.4.1.9.9.171.2.0.2current
cikeSysFailure
NOTIFICATION-TYPE
This notification is generated when the processing for an IPsec Phase-1 IKE Tunnel experiences an internal or system capacity error.
1.3.6.1.4.1.9.9.171.2.0.3current
cikeCertCrlFailure
NOTIFICATION-TYPE
This notification is generated when the processing for an IPsec Phase-1 IKE Tunnel experiences a Certificate or a Certificate Revoke List (CRL) related error.
1.3.6.1.4.1.9.9.171.2.0.4current
cikeProtocolFailure
NOTIFICATION-TYPE
This notification is generated when the processing for an IPsec Phase-1 IKE Tunnel experiences a protocol related error.
1.3.6.1.4.1.9.9.171.2.0.5current
cikeNoSa
NOTIFICATION-TYPE
This notification is generated when the processing for an IPsec Phase-1 IKE Tunnel experiences a non-existent security association error.
1.3.6.1.4.1.9.9.171.2.0.6current
cipSecTunnelStart
NOTIFICATION-TYPE
This notification is generated when an IPsec Phase-2 Tunnel becomes active.
1.3.6.1.4.1.9.9.171.2.0.7current
cipSecTunnelStop
NOTIFICATION-TYPE
This notification is generated when an IPsec Phase-2 Tunnel becomes inactive.
1.3.6.1.4.1.9.9.171.2.0.8current
cipSecSysFailure
NOTIFICATION-TYPE
This notification is generated when the processing for an IPsec Phase-2 Tunnel experiences an internal or system capacity error.
1.3.6.1.4.1.9.9.171.2.0.9current
cipSecSetUpFailure
NOTIFICATION-TYPE
This notification is generated when the setup for an IPsec Phase-2 Tunnel fails.
1.3.6.1.4.1.9.9.171.2.0.10current
cipSecEarlyTunTerm
NOTIFICATION-TYPE
This notification is generated when an an IPsec Phase-2 Tunnel is terminated earily or before expected.
1.3.6.1.4.1.9.9.171.2.0.11current
cipSecProtocolFailure
NOTIFICATION-TYPE
This notification is generated when the processing for an IPsec Phase-2 Tunnel experiences a protocol related error.
1.3.6.1.4.1.9.9.171.2.0.12current
cipSecNoSa
NOTIFICATION-TYPE
This notification is generated when the processing for an IPsec Phase-2 Tunnel experiences a non-existent security association error.
1.3.6.1.4.1.9.9.171.2.0.13current

Conformance

NameOIDStatus
cipSecLevelsGroup
OBJECT-GROUP
This group consists of a: 1) IPsec MIB Level
1.3.6.1.4.1.9.9.171.3.1.1current
cipSecPhaseOneGroup
OBJECT-GROUP
This group consists of: 1) IPsec Phase-1 Global Objects 2) IPsec Phase-1 Peer Table 3) IPsec Phase-1 Tunnel Table 4) IPsec Phase-1 Correlation Table
1.3.6.1.4.1.9.9.171.3.1.2current
cipSecPhaseTwoGroup
OBJECT-GROUP
This group consists of: 1) IPsec Phase-2 Global Statistics 2) IPsec Phase-2 Tunnel Table 3) IPsec Phase-2 Endpoint Table 4) IPsec Phase-2 Security Protection Index Table
1.3.6.1.4.1.9.9.171.3.1.3current
cipSecHistoryGroup
OBJECT-GROUP
This group consists of: 1) IPsec History Global Objects 2) IPsec Phase-1 History Objects 3) IPsec Phase-2 History Objects
1.3.6.1.4.1.9.9.171.3.1.4current
cipSecFailuresGroup
OBJECT-GROUP
This group consists of: 1) IPsec Failure Global Objects 2) IPsec Phase-1 Tunnel Failure Table 3) IPsec Phase-2 Tunnel Failure Table
1.3.6.1.4.1.9.9.171.3.1.5current
cipSecTrapCntlGroup
OBJECT-GROUP
This group of objects controls the sending of IPsec TRAPs.
1.3.6.1.4.1.9.9.171.3.1.6current
cipSecNotificationGroup
NOTIFICATION-GROUP
This group contains the notifications for the IPsec MIB.
1.3.6.1.4.1.9.9.171.3.1.7current
cipSecGWStatsGroup
OBJECT-GROUP
1.3.6.1.4.1.9.9.171.3.1.8current
cipSecMIBCompliance
MODULE-COMPLIANCE
The compliance statement for SNMP entities the IP Security Protocol. This has been replaced by cipSecMIBComplianceRev1.
1.3.6.1.4.1.9.9.171.3.2.1deprecated
cipSecMIBComplianceRev1
MODULE-COMPLIANCE
The compliance statement for SNMP entities the IP Security Protocol.
1.3.6.1.4.1.9.9.171.3.2.2current