MIBs Depot

JUNIPER-IPSEC-FLOW-MON-MIB

Registered at
1.3.6.1.4.1.2636.3.52.1
Last updated
2020-04-29 00:00
Organization
Juniper Networks, Inc.
Revisions
2020-04-29 00:00, 2020-04-28 00:00, 2020-04-19 00:00, 2019-09-10 00:00, 2019-08-22 00:00, 2016-06-22 00:00, 2007-05-16 00:00, 2016-05-31 00:00
Namespace
juniper
Source file
JUNIPER-IPSEC-FLOW-MON-MIB
Digest
sha256:41bc6b662e10dbf7a33583b9baed01d75b982026bc102db20902dcdbcfefe042

Description

This module defines the object used to monitor the entries pertaining to IPSec objects and the management of the IPSEC VPN functionalities. tables: - IKE tunnel table - IPSec tunnel table - IPSec security associations table. This mib module is based on JNX-IPSEC-MONITOR-MIB. Building on the existing IKE infrastruature, the security IKE implementation integrates the value-added features for the security products

Contact

Juniper Technical Assistance Center Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, CA 94089 E-mail: support@juniper.net

Imports

FromSymbols
INET-ADDRESS-MIBInetAddress, InetAddressType, InetPortNumber
JUNIPER-SMIjnxIpSecMibRoot
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP
SNMPv2-SMICounter32, Counter64, Integer32, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso
SNMPv2-TCDisplayString, TEXTUAL-CONVENTION, TimeInterval

Imported by

2 module(s) in this corpus import this one.

Load order

Every file a consumer needs in order to load this module, dependencies first.

INET-ADDRESS-MIB
JUNIPER-IPSEC-FLOW-MON-MIB
JUNIPER-SMI
SNMPv2-CONF
SNMPv2-SMI
SNMPv2-TC

Textual conventions

NameOIDSyntaxAccessStatus
JnxAuthAlgo
TEXTUAL-CONVENTION
The authentication algorithm used by a security association of an IPsec Phase-2 Tunnel.
current
JnxDiffHellmanGrp
TEXTUAL-CONVENTION
The Diffie Hellman Group used in negotiations. modp768 -- 768-bit MODP modp1024 -- 1024-bit MODP modp1536 -- 1536-bit MODP modp2048 -- 2048-bit MODP modp3072 -- 3072-bit MODP modp4096 -- 4096-bit MODP ec-modp256 -- 256-bit EC-MODP ec-modp384 -- 384-bit EC-MODP ec-modp521 -- 521-bit EC-MODP modp2048s256 -- 2048-bit MODP group with 256 bit subgroup
current
JnxEncapMode
TEXTUAL-CONVENTION
The encapsulation mode used by an IPsec Phase-2 Tunnel.
current
JnxEncryptAlgo
TEXTUAL-CONVENTION
The encryption algorithm used in negotiations.
current
JnxEsnMode
TEXTUAL-CONVENTION
ESN mode Enable or Disable
current
JnxIkeAuthMethod
TEXTUAL-CONVENTION
The authentication method used in IPsec Phase-1 IKE negotiations.
current
JnxIkeHashAlgo
TEXTUAL-CONVENTION
The hash algorithm used in IPsec Phase-1 IKE negotiations.
current
JnxIkeNegoMode
TEXTUAL-CONVENTION
The IPsec Phase-1 IKE negotiation mode. Main Mode: A six-message Phase 1 exchange that provides identity protection. Aggressive mode: a three-message phase 1 exchange that does not provide identity protection
current
JnxIkePeerRole
TEXTUAL-CONVENTION
Role of the local endpoint in negotiating the IPsec Phase-1 IKE security association. It can be either Initiator or Responder.
current
JnxIkePeerType
TEXTUAL-CONVENTION
The type of IPsec Phase-1 IKE peer identity. It is the local IKE identify to send in the exchange. The IKE peer may be identified by one of the ID types defined in IPSEC DOI. idIpv4Addr - IPv4 Address. idIpv6Addr - IPv6 Address. idUfqdn - user fully qualified domain name (user@hostname). idFqdn - full qualified domain name idDn - distinquished name
current
JnxIkeTunStateType
TEXTUAL-CONVENTION
State of the Phase-1 IKE negotiation.
current
JnxIkeTunType
TEXTUAL-CONVENTION
Type of the tunnel.
current
JnxKeyType
TEXTUAL-CONVENTION
The type of key used by an IPsec Phase-2 Tunnel.
current
JnxPeerStateType
TEXTUAL-CONVENTION
State of the IKE peer with which the managed entity is currently associated.
current
JnxRemotePeerType
TEXTUAL-CONVENTION
The type of the remote peer gateway (endpoint). It can be one of the following two types: - static (Remote peer whose IP address is known beforehand) - dynamic (Remote peer whose IP address is not known beforehand).
current
JnxSAType
TEXTUAL-CONVENTION
SA Type manual or dynamic
current
JnxSpiType
TEXTUAL-CONVENTION
The type of the SPI associated with IPsec Phase-2 security associations.
current

Objects

NameOIDSyntaxAccessStatus
jnxIpSecFlowMonNotifications
OBJECT-IDENTITY
1.3.6.1.4.1.2636.3.52.1.0
jnxIkeNotificationType
OBJECT-IDENTITY
1.3.6.1.4.1.2636.3.52.1.0.0
jnxIkeNotificationObj
OBJECT-IDENTITY
1.3.6.1.4.1.2636.3.52.1.0.1
jnxIkeTrapPeerRemoteGwAddrType
OBJECT-TYPE
The IP address type of the remote gateway (endpoint) for the IKE SA negotiaton.
1.3.6.1.4.1.2636.3.52.1.0.1.1InetAddressTyperead-onlycurrent
jnxIkeTrapPeerRemoteGwAddr
OBJECT-TYPE
The IP address of the remote gateway (endpoint) for the IKE SA negotiation.
1.3.6.1.4.1.2636.3.52.1.0.1.2InetAddressread-onlycurrent
jnxIkeTrapPeerRemotePort
OBJECT-TYPE
The port number of the remote gateway (endpoint) for the IKE SA negotiation. The port number zero means the input value is ignored for this object and the default port is considered.
1.3.6.1.4.1.2636.3.52.1.0.1.3InetPortNumberread-onlycurrent
jnxIkeTrapPeerLocalGwAddrType
OBJECT-TYPE
The IP address type of the local endpoint (gateway) for the IKE SA negotiation.
1.3.6.1.4.1.2636.3.52.1.0.1.4InetAddressTyperead-onlycurrent
jnxIkeTrapPeerLocalGwAddr
OBJECT-TYPE
The IP address of the local endpoint (gateway) for the IKE SA negotiation.
1.3.6.1.4.1.2636.3.52.1.0.1.5InetAddressread-onlycurrent
jnxIkeTrapPeerLocalPort
OBJECT-TYPE
The port number of the local gateway (endpoint) for the IKE SA negotiation. The port number zero means the input value is ignored for this object and the default port is considered.
1.3.6.1.4.1.2636.3.52.1.0.1.6InetPortNumberread-onlycurrent
jnxIkeTrapPeerRoutingInstance
OBJECT-TYPE
Name of the routing instance.
1.3.6.1.4.1.2636.3.52.1.0.1.7DisplayStringread-onlycurrent
jnxIkeTrapPeerLocalIdType
OBJECT-TYPE
The type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name string. 3. or a distinguished name string.
1.3.6.1.4.1.2636.3.52.1.0.1.8JnxIkePeerTyperead-onlycurrent
jnxIkeTrapPeerLocalIdValue
OBJECT-TYPE
The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is id_fqdn, then this is the FQDN of the remote peer. If the local peer type is a id_dn, then this is the distinguished name string of the local peer.
1.3.6.1.4.1.2636.3.52.1.0.1.9DisplayStringread-onlycurrent
jnxIkeTrapPeerRemoteIdType
OBJECT-TYPE
The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name string. 3. or a distinguished name string.
1.3.6.1.4.1.2636.3.52.1.0.1.10JnxIkePeerTyperead-onlycurrent
jnxIkeTrapPeerRemoteIdValue
OBJECT-TYPE
The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is id_fqdn, then this is the FQDN of the remote peer. If the remote peer type is a id_dn, then this is the distinguished named string of the remote peer.
1.3.6.1.4.1.2636.3.52.1.0.1.11DisplayStringread-onlycurrent
jnxIkeTrapPeerAAAUserName
OBJECT-TYPE
Identifies the user with the specified authentication, authorization and accounting (AAA) username, associated with the IKE SA negotiation.
1.3.6.1.4.1.2636.3.52.1.0.1.12DisplayStringread-onlycurrent
jnxIkeTrapPeerGwName
OBJECT-TYPE
Name of the IKE gateway.
1.3.6.1.4.1.2636.3.52.1.0.1.13DisplayStringread-onlycurrent
jnxIkeTrapIpSecTunVpnName
OBJECT-TYPE
IPsec tunnel VPN name.
1.3.6.1.4.1.2636.3.52.1.0.1.14DisplayStringread-onlycurrent
jnxIkeTrapIpSecTunTsName
OBJECT-TYPE
IPsec tunnel Traffic Selector name.
1.3.6.1.4.1.2636.3.52.1.0.1.15DisplayStringread-onlycurrent
jnxIkeTrapIpSecTunLocalTS
OBJECT-TYPE
Identifier for the local end of IPsec tunnel.
1.3.6.1.4.1.2636.3.52.1.0.1.16DisplayStringread-onlycurrent
jnxIkeTrapIpSecTunRemoteTS
OBJECT-TYPE
Identifier for the remote end of IPsec tunnel.
1.3.6.1.4.1.2636.3.52.1.0.1.17DisplayStringread-onlycurrent
jnxIpSecFlowMonPhaseOne
OBJECT-IDENTITY
1.3.6.1.4.1.2636.3.52.1.1
jnxIkeNumOfTunnels
OBJECT-TYPE
Number of IKE Tunnels (phase-1) actively negotiating between peers. The SA can be in either the up or down state. This attribute should detail the number of IKE tunnels in jnxIkeTunnelMonTable.
1.3.6.1.4.1.2636.3.52.1.1.1INTEGERread-onlycurrent
jnxIkeTunnelMonTable
OBJECT-TYPE
The IPsec Phase-1 Internet Key Exchange Tunnel Table. There is one entry in this table for each active IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.2636.3.52.1.1.2not-accessiblecurrent
jnxIkeTunnelMonEntry
OBJECT-TYPE
Each entry contains the attributes associated with an active IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.2636.3.52.1.1.2.1not-accessiblecurrent
jnxIkeTunMonRemoteGwAddrType
OBJECT-TYPE
The IP address type of the remote gateway (endpoint) for the IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.2636.3.52.1.1.2.1.1InetAddressTypenot-accessiblecurrent
jnxIkeTunMonRemoteGwAddr
OBJECT-TYPE
The IP address of the remote gateway (endpoint) for the IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.2636.3.52.1.1.2.1.2InetAddressnot-accessiblecurrent
jnxIkeTunMonIndex
OBJECT-TYPE
The index of the IPsec Phase-1 IKE Tunnel Table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The value of this object will wrap at 2,147,483,647.
1.3.6.1.4.1.2636.3.52.1.1.2.1.3Integer32 (1..2147483647)not-accessiblecurrent
jnxIkeTunMonLocalGwAddr
OBJECT-TYPE
The IP address of the local endpoint (gateway) for the IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.2636.3.52.1.1.2.1.4InetAddressread-onlycurrent
jnxIkeTunMonLocalGwAddrType
OBJECT-TYPE
The IP address type of the local endpoint (gateway) for the IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.2636.3.52.1.1.2.1.5InetAddressTyperead-onlycurrent
jnxIkeTunMonState
OBJECT-TYPE
The state of the IKE tunnel, It can be: 1. up - negotiation completed 2. down- being negotiated
1.3.6.1.4.1.2636.3.52.1.1.2.1.6JnxIkeTunStateTyperead-onlycurrent
jnxIkeTunMonInitiatorCookie
OBJECT-TYPE
Cookie as generated by the peer that initiated the IKE Phase-1 negotiation. This cookie is carried in the ISAKMP header.
1.3.6.1.4.1.2636.3.52.1.1.2.1.7DisplayStringread-onlycurrent
jnxIkeTunMonResponderCookie
OBJECT-TYPE
Cookie as generated by the peer responding to the IKE Phase-1 negotiation initiated by the remote peer. This cookie is carried in the ISAKMP header.
1.3.6.1.4.1.2636.3.52.1.1.2.1.8DisplayStringread-onlycurrent
jnxIkeTunMonLocalRole
OBJECT-TYPE
The role of local peer identity. The Role of the local peer can be: 1. initiator. 2. or responder.
1.3.6.1.4.1.2636.3.52.1.1.2.1.9JnxIkePeerRoleread-onlycurrent
jnxIkeTunMonLocalIdType
OBJECT-TYPE
The type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name string. 3. or a distinguished name string.
1.3.6.1.4.1.2636.3.52.1.1.2.1.10JnxIkePeerTyperead-onlycurrent
jnxIkeTunMonLocalIdValue
OBJECT-TYPE
The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is id_fqdn, then this is the FQDN of the remote peer. If the local peer type is a id_dn, then this is the distinguished name string of the local peer.
1.3.6.1.4.1.2636.3.52.1.1.2.1.11DisplayStringread-onlycurrent
jnxIkeTunMonLocalCertName
OBJECT-TYPE
Name of the certificate used for authentication of the local tunnel endpoint. This object will have some valid value only if negotiated IKE authentication method is other than pre-saherd key. If the IKE negotiation do not use certificate based authentication method, then the value of this object will be a NULL string.
1.3.6.1.4.1.2636.3.52.1.1.2.1.12DisplayStringread-onlycurrent
jnxIkeTunMonRemoteIdType
OBJECT-TYPE
The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name string. 3. or a distinguished name string.
1.3.6.1.4.1.2636.3.52.1.1.2.1.13JnxIkePeerTyperead-onlycurrent
jnxIkeTunMonRemoteIdValue
OBJECT-TYPE
The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is id_fqdn, then this is the FQDN of the remote peer. If the remote peer type is a id_dn, then this is the distinguished named string of the remote peer.
1.3.6.1.4.1.2636.3.52.1.1.2.1.14DisplayStringread-onlycurrent
jnxIkeTunMonNegoMode
OBJECT-TYPE
The negotiation mode of the IPsec Phase-1 IKE Tunnel.
1.3.6.1.4.1.2636.3.52.1.1.2.1.15JnxIkeNegoModeread-onlycurrent
jnxIkeTunMonDiffHellmanGrp
OBJECT-TYPE
The Diffie Hellman Group used in IPsec Phase-1 IKE negotiations.
1.3.6.1.4.1.2636.3.52.1.1.2.1.16JnxDiffHellmanGrpread-onlycurrent
jnxIkeTunMonEncryptAlgo
OBJECT-TYPE
The encryption algorithm used in IPsec Phase-1 IKE negotiations.
1.3.6.1.4.1.2636.3.52.1.1.2.1.17JnxEncryptAlgoread-onlycurrent
jnxIkeTunMonHashAlgo
OBJECT-TYPE
The hash algorithm used in IPsec Phase-1 IKE negotiations.
1.3.6.1.4.1.2636.3.52.1.1.2.1.18JnxIkeHashAlgoread-onlycurrent
jnxIkeTunMonAuthMethod
OBJECT-TYPE
The authentication method used in IPsec Phase-1 IKE negotiations.
1.3.6.1.4.1.2636.3.52.1.1.2.1.19JnxIkeAuthMethodread-onlycurrent
jnxIkeTunMonLifeTime
OBJECT-TYPE
The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel in seconds.
1.3.6.1.4.1.2636.3.52.1.1.2.1.20Integer32 (1..2147483647)read-onlycurrent
jnxIkeTunMonActiveTime
OBJECT-TYPE
The length of time the IPsec Phase-1 IKE tunnel has been active in hundredths of seconds.
1.3.6.1.4.1.2636.3.52.1.1.2.1.21TimeIntervalread-onlycurrent
jnxIkeTunMonInOctets
OBJECT-TYPE
The total number of octets received by this IPsec Phase-1 IKE security association.
1.3.6.1.4.1.2636.3.52.1.1.2.1.22Counter64read-onlycurrent
jnxIkeTunMonInPkts
OBJECT-TYPE
The total number of packets received by this IPsec Phase-1 IKE security association.
1.3.6.1.4.1.2636.3.52.1.1.2.1.23Counter32read-onlycurrent
jnxIkeTunMonOutOctets
OBJECT-TYPE
The total number of octets sent by this IPsec Phase-1 IKE security association.
1.3.6.1.4.1.2636.3.52.1.1.2.1.24Counter64read-onlycurrent
jnxIkeTunMonOutPkts
OBJECT-TYPE
The total number of packets sent by this IPsec Phase-1 IKE security association.
1.3.6.1.4.1.2636.3.52.1.1.2.1.25Counter32read-onlycurrent
jnxIkeTunMonXAuthUserId
OBJECT-TYPE
The extended Authentication (XAuth) User Identifier, identifies the user associated with this IPSec Phase negotiation.
1.3.6.1.4.1.2636.3.52.1.1.2.1.26DisplayStringread-onlycurrent
jnxIkeTunMonDPDDownCount
OBJECT-TYPE
The number of times that the remote peer is detected in a dead (or down) state. This attribute is obsolete
1.3.6.1.4.1.2636.3.52.1.1.2.1.27Counter32read-onlyobsolete
jnxIkeTunMonInitiatorIkev2IPSecSaRekeyRequestOut
OBJECT-TYPE
The number of IPSec SA rekey CREATE_CHILD_SA request message sent by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.2.1.28Counter64read-onlycurrent
jnxIkeTunMonInitiatorIkev2IPSecSaRekeyResponseIn
OBJECT-TYPE
The number of IPSec SA rekey CREATE_CHILD_SA response message received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.2.1.29Counter64read-onlycurrent
jnxIkeTunMonInitiatorIkev2IPSecSaRekeyNoProposalChosenIn
OBJECT-TYPE
The number of IPSec SA rekey CREATE_CHILD_SA NO_PROPSAL_CHOSEN Notification received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.2.1.30Counter64read-onlycurrent
jnxIkeTunMonInitiatorIkev2IPSecSaRekeyInvalidKeIn
OBJECT-TYPE
The number of IPSec SA rekey CREATE_CHILD_SA INVALID_KE_PAYLOAD received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.2.1.31Counter64read-onlycurrent
jnxIkeTunMonInitiatorIkev2IPSecSaRekeyTsUnacceptableIn
OBJECT-TYPE
The number of IPSec SA rekey CREATE_CHILD_SA TS_UNACCEPTABLE notification received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.2.1.32Counter64read-onlycurrent
jnxIkeTunMonInitiatorIkev2IPSecSaRekeyResVerifySaFail
OBJECT-TYPE
The number of IPSec SA rekey CREATE_CHILD_SA response message verification of peer SA failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.2.1.33Counter64read-onlycurrent
jnxIkeTunMonInitiatorIkev2IPSecSaRekeyResVerifyDhGroupFail
OBJECT-TYPE
The number of IPSec SA rekey CREATE_CHILD_SA response message verification of DH group failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.2.1.34Counter64read-onlycurrent
jnxIkeTunMonInitiatorIkev2IPSecSaRekeyResVerifyTsFail
OBJECT-TYPE
The number of IPSec SA rekey CREATE_CHILD_SA response message verification of TS failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.2.1.35Counter64read-onlycurrent
jnxIkeTunMonInitiatorIkev2IPSecSaRekeyResDhComputeKeyFail
OBJECT-TYPE
The number of IPSec SA rekey CREATE_CHILD_SA response message Diffie-Hellman compute key failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.2.1.36Counter64read-onlycurrent
jnxIkeTunMonResponderIkev2IPSecSaRekeyRequestIn
OBJECT-TYPE
The number of IPSec SA rekey CREATE_CHILD_SA request message received by Responder.
1.3.6.1.4.1.2636.3.52.1.1.2.1.37Counter64read-onlycurrent
jnxIkeTunMonResponderIkev2IPSecSaRekeyResponseOut
OBJECT-TYPE
The number of IPSec SA rekey CREATE_CHILD_SA response message sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.2.1.38Counter64read-onlycurrent
jnxIkeTunMonResponderIkev2IPSecSaRekeyNoProposalChosenOut
OBJECT-TYPE
The number of IPSec SA rekey CREATE_CHILD_SA NO_PROPSAL_CHOSEN Notification sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.2.1.39Counter64read-onlycurrent
jnxIkeTunMonResponderIkev2IPSecSaRekeyInvalidKeOut
OBJECT-TYPE
The number of IPSec SA rekey CREATE_CHILD_SA INVALID_KE_PAYLOAD Notification sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.2.1.40Counter64read-onlycurrent
jnxIkeTunMonResponderIkev2IPSecSaRekeyTsUnacceptableOut
OBJECT-TYPE
The number of IPSec SA rekey CREATE_CHILD_SA TS_UNACCEPTABLE notification sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.2.1.41Counter64read-onlycurrent
jnxIkeTunMonResponderIkev2IPSecSaRekeyResDhComputeKeyFail
OBJECT-TYPE
The number of IPSec SA rekey CREATE_CHILD_SA response message Diffie-Hellman compute key failed at Responder.
1.3.6.1.4.1.2636.3.52.1.1.2.1.42Counter64read-onlycurrent
jnxIkeTunMonGwName
OBJECT-TYPE
The gateway name
1.3.6.1.4.1.2636.3.52.1.1.2.1.43DisplayStringread-onlycurrent
jnxIkeTunMonTunType
OBJECT-TYPE
The Tunnel type. It can be regular (1) or ha-link (2)
1.3.6.1.4.1.2636.3.52.1.1.2.1.44JnxIkeTunTyperead-onlycurrent
jnxIkeGlobalStats
OBJECT-IDENTITY
1.3.6.1.4.1.2636.3.52.1.1.3
jnxIkeGlobalInitiatorIkev2SaInitStats
OBJECT-IDENTITY
1.3.6.1.4.1.2636.3.52.1.1.3.1
jnxIkeGlobalInitiatorIkev2SaInitRequestOut
OBJECT-TYPE
Number of IKE_SA_INIT request message sent by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.1.1Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2SaInitResponseIn
OBJECT-TYPE
Number of IKE_SA_INIT response message received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.1.2Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2SaInitResInvalidIkeSpi
OBJECT-TYPE
Number of IKE_SA_INIT response message containing invalid SPI received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.1.3Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2SaInitInvalidKePayloadIn
OBJECT-TYPE
Number of IKE_SA_INIT INVALID_KE_PAYLOAD received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.1.4Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2SaInitNoProposalChosenIn
OBJECT-TYPE
Number of IKE_SA_INIT NO_PROPSAL_CHOSEN received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.1.5Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2SaInitResVerifySaFail
OBJECT-TYPE
Number of IKE_SA_INIT response message verification of peer SA failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.1.6Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2SaInitResIkeSaFillFail
OBJECT-TYPE
Number of IKE_SA_INIT response message IKE SA fill operation failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.1.7Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2SaInitResVerifyDhGroupFail
OBJECT-TYPE
Number of IKE_SA_INIT response message verification of DH group failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.1.8Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2SaInitCookieRequestIn
OBJECT-TYPE
Number of IKE_SA_INIT COOKIE notification request message received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.1.9Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2SaInitCookieResponseOut
OBJECT-TYPE
Number of IKE_SA_INIT COOKIE notification response message sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.3.1.10Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2SaInitResDhComputeKeyFail
OBJECT-TYPE
Number of IKE_SA_INIT response message Diffie-Hellman compute key failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.1.11Counter64read-onlycurrent
jnxIkeGlobalResponderIkev2SaInitStats
OBJECT-IDENTITY
1.3.6.1.4.1.2636.3.52.1.1.3.2
jnxIkeGlobalResponderIkev2SaInitRequestIn
OBJECT-TYPE
Number of IKE_SA_INIT request message received by Responder.
1.3.6.1.4.1.2636.3.52.1.1.3.2.1Counter64read-onlycurrent
jnxIkeGlobalResponderIkev2SaInitResponseOut
OBJECT-TYPE
Number of IKE_SA_INIT response message sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.3.2.2Counter64read-onlycurrent
jnxIkeGlobalResponderIkev2SaInitNoProposalChosenOut
OBJECT-TYPE
Number of IKE_SA_INIT NO_PROPSAL_CHOSEN notification sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.3.2.3Counter64read-onlycurrent
jnxIkeGlobalResponderIkev2SaInitInvalidKePayloadOut
OBJECT-TYPE
Number of IKE_SA_INIT INVALID_KE_PAYLOAD notification sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.3.2.4Counter64read-onlycurrent
jnxIkeGlobalResponderIkev2SaInitResInvalidDhGroupConf
OBJECT-TYPE
Number of IKE_SA_INIT response message invalid DH group configured at Responder.
1.3.6.1.4.1.2636.3.52.1.1.3.2.5Counter64read-onlycurrent
jnxIkeGlobalResponderIkev2SaInitResDhGenKeyFail
OBJECT-TYPE
Number of IKE_SA_INIT response message Diffie-Hellman generate key failed at Responder
1.3.6.1.4.1.2636.3.52.1.1.3.2.6Counter64read-onlycurrent
jnxIkeGlobalResponderIkev2SaInitResGetCAsFail
OBJECT-TYPE
Number of IKE_SA_INIT response message get CAs failed at Responder.
1.3.6.1.4.1.2636.3.52.1.1.3.2.7Counter64read-onlycurrent
jnxIkeGlobalResponderIkev2SaInitResGetVidFail
OBJECT-TYPE
Number of IKE_SA_INIT response message get vendor ID request failed at Responder.
1.3.6.1.4.1.2636.3.52.1.1.3.2.8Counter64read-onlycurrent
jnxIkeGlobalResponderIkev2SaInitResDhComputeKeyFail
OBJECT-TYPE
Number of IKE_SA_INIT response message Diffie-Hellman compute key failed at Responder
1.3.6.1.4.1.2636.3.52.1.1.3.2.9Counter64read-onlycurrent
jnxIkeGlobalResponderIkev2SaInitCookieRequestOut
OBJECT-TYPE
Number of IKE_SA_INIT COOKIE notification request message sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.3.2.10Counter64read-onlycurrent
jnxIkeGlobalResponderIkev2SaInitCookieResponseIn
OBJECT-TYPE
Number of IKE_SA_INIT COOKIE notification response message received by Responder.
1.3.6.1.4.1.2636.3.52.1.1.3.2.11Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2AuthStats
OBJECT-IDENTITY
1.3.6.1.4.1.2636.3.52.1.1.3.3
jnxIkeGlobalInitiatorIkev2AuthRequestOut
OBJECT-TYPE
Number of IKE_AUTH request message sent by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.3.1Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2AuthResponseIn
OBJECT-TYPE
Number of IKE_AUTH response message received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.3.2Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2AuthNoProposalChosenIn
OBJECT-TYPE
Number of IKE_AUTH NO_PROPSAL_CHOSEN notification received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.3.3Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2AuthTsUnacceptableIn
OBJECT-TYPE
Number of IKE_AUTH TS_UNACCEPTABLE notification received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.3.4Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2AuthAuthenticationFailedIn
OBJECT-TYPE
Number of IKE_AUTH AUTHENTICATION_FAILED notification received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.3.5Counter64read-onlycurrent
jnxIkeGlobalResponderIkev2AuthStats
OBJECT-IDENTITY
1.3.6.1.4.1.2636.3.52.1.1.3.4
jnxIkeGlobalResponderIkev2AuthRequestIn
OBJECT-TYPE
Number of IKE_AUTH request message received by Responder.
1.3.6.1.4.1.2636.3.52.1.1.3.4.1Counter64read-onlycurrent
jnxIkeGlobalResponderIkev2AuthResponseOut
OBJECT-TYPE
Number of IKE_AUTH response message sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.3.4.2Counter64read-onlycurrent
jnxIkeGlobalResponderIkev2AuthNoProposalChosenOut
OBJECT-TYPE
Number of IKE_AUTH NO_PROPSAL_CHOSEN notification sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.3.4.3Counter64read-onlycurrent
jnxIkeGlobalResponderIkev2AuthTsUnacceptableOut
OBJECT-TYPE
Number of IKE_AUTH TS_UNACCEPTABLE notification sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.3.4.4Counter64read-onlycurrent
jnxIkeGlobalResponderIkev2AuthAuthenticationFailedOut
OBJECT-TYPE
Number of IKE_AUTH request message AUTHENTICATION_FAILED notification sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.3.4.5Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2IkeSaRekeyStats
OBJECT-IDENTITY
1.3.6.1.4.1.2636.3.52.1.1.3.5
jnxIkeGlobalInitiatorIkev2IkeSaRekeyRequestOut
OBJECT-TYPE
Number of IKE SA rekey CREATE_CHILD_SA request message sent by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.5.1Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2IkeSaRekeyResponseIn
OBJECT-TYPE
Number of IKE SA rekey CREATE_CHILD_SA response message received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.5.2Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2IkeSaRekeyNoProposalChosenIn
OBJECT-TYPE
Number of IKE SA rekey NO_PROPSAL_CHOSEN notification received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.5.3Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2IkeSaRekeyInvalidKeIn
OBJECT-TYPE
Number of IKE SA rekey INVALID_KE_PAYLOAD notification received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.5.4Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2IkeSaRekeyResDhComputeKeyFail
OBJECT-TYPE
Number of IKE SA rekey response message Diffie-Hellman compute key failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.5.5Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2IkeSaRekeyResVerifySaFail
OBJECT-TYPE
Number of IKE SA rekey response message verification of peer SA failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.5.6Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2IkeSaRekeyResFillIkeSaFail
OBJECT-TYPE
Number of IKE SA rekey response message fill IKE SA failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.5.7Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2IkeSaRekeyResVerifyDhGroupFail
OBJECT-TYPE
Number of IKE SA rekey response message verification of DH group failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.5.8Counter64read-onlycurrent
jnxIkeGlobalResponderIkev2IkeSaRekeyStats
OBJECT-IDENTITY
1.3.6.1.4.1.2636.3.52.1.1.3.6
jnxIkeGlobalResponderIkev2IkeSaRekeyRequestIn
OBJECT-TYPE
Number of IKE SA rekey request message received by Responder.
1.3.6.1.4.1.2636.3.52.1.1.3.6.1Counter64read-onlycurrent
jnxIkeGlobalResponderIkev2IkeSaRekeyResponseOut
OBJECT-TYPE
Number of IKE SA rekey response message sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.3.6.2Counter64read-onlycurrent
jnxIkeGlobalResponderIkev2IkeSaRekeyNoProposalChosenOut
OBJECT-TYPE
Number of IKE SA rekey NO_PROPSAL_CHOSEN notification sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.3.6.3Counter64read-onlycurrent
jnxIkeGlobalResponderIkev2IkeSaRekeyInvalidKeOut
OBJECT-TYPE
Number of IKE SA rekey INVALID_KE_PAYLOAD notification sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.3.6.4Counter64read-onlycurrent
jnxIkeGlobalResponderIkev2IkeSaRekeyResDhComputeKeyFail
OBJECT-TYPE
Number of IKE SA rekey response message Diffie-Hellman compute key failed at Responder.
1.3.6.1.4.1.2636.3.52.1.1.3.6.5Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2IpsecSaRekeyStats
OBJECT-IDENTITY
1.3.6.1.4.1.2636.3.52.1.1.3.7
jnxIkeGlobalInitiatorIkev2IpsecSaRekeyRequestOut
OBJECT-TYPE
Number of IPSec SA rekey request message sent by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.7.1Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2IpsecSaRekeyResponseIn
OBJECT-TYPE
Number of IPSec SA rekey response message received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.7.2Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2IpsecSaRekeyNoProposalChosenIn
OBJECT-TYPE
Number of IPSec SA rekey NO_PROPSAL_CHOSEN notification received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.7.3Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2IpsecSaRekeyInvalidKeIn
OBJECT-TYPE
Number of IPSec SA rekey INVALID_KE_PAYLOAD notification received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.7.4Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2IpsecSaRekeyTsUnacceptableIn
OBJECT-TYPE
Number of IPSec SA rekey TS_UNACCEPTABLE notification received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.7.5Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2IpsecSaRekeyResVerifySaFail
OBJECT-TYPE
Number of IPSec SA rekey response message verification of peer SA failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.7.6Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2IpsecSaRekeyResDhComputeKeyFail
OBJECT-TYPE
Number of IPSec SA rekey response message Diffie-Hellman compute key failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.7.7Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2IpsecSaRekeyResVerifyDhGroupFail
OBJECT-TYPE
Number of IPSec SA rekey response message verification of DH group failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.7.8Counter64read-onlycurrent
jnxIkeGlobalInitiatorIkev2IpsecSaRekeyResVerifyTsFail
OBJECT-TYPE
Number of IPSec SA rekey response message verification of TS failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.7.9Counter64read-onlycurrent
jnxIkeGlobalResponderIkev2IpsecSaRekeyStats
OBJECT-IDENTITY
1.3.6.1.4.1.2636.3.52.1.1.3.8
jnxIkeGlobalResponderIkev2IpsecSaRekeyRequestIn
OBJECT-TYPE
Number of IPSec SA rekey request message received by Responder.
1.3.6.1.4.1.2636.3.52.1.1.3.8.1Counter64read-onlycurrent
jnxIkeGlobalResponderIkev2IpsecSaRekeyResponseOut
OBJECT-TYPE
Number of IPSec SA rekey response message sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.3.8.2Counter64read-onlycurrent
jnxIkeGlobalResponderIkev2IpsecSaRekeyNoProposalChosenOut
OBJECT-TYPE
Number of IPSec SA rekey NO_PROPSAL_CHOSEN notification sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.3.8.3Counter64read-onlycurrent
jnxIkeGlobalResponderIkev2IpsecSaRekeyInvalidKeOut
OBJECT-TYPE
Number of IPSec SA rekey INVALID_KE_PAYLOAD notification sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.3.8.4Counter64read-onlycurrent
jnxIkeGlobalResponderIkev2IpsecSaRekeyTsUnacceptableOut
OBJECT-TYPE
Number of IPSec SA rekey TS_UNACCEPTABLE notification sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.3.8.5Counter64read-onlycurrent
jnxIkeGlobalResponderIkev2IpsecSaRekeyResDhComputeKeyFail
OBJECT-TYPE
Number of IPSec SA rekey response message Diffie-Hellman compute key failed at Responder.
1.3.6.1.4.1.2636.3.52.1.1.3.8.6Counter64read-onlycurrent
jnxIkeGlobalIkev2MsgFailStats
OBJECT-IDENTITY
1.3.6.1.4.1.2636.3.52.1.1.3.9
jnxIkeGlobalIkev2TotalDiscarded
OBJECT-TYPE
Total number of discarded messages. Includes the failures encountered during decode of IKEv2 packets that is failures before the IKEv2 exchange payload processing. Also this counter encompasses all the other message failure counters.
1.3.6.1.4.1.2636.3.52.1.1.3.9.1Counter64read-onlycurrent
jnxIkeGlobalIkev2TotalIdError
OBJECT-TYPE
Total number of messages with ID error. Message ID is not compliant with what is expected. For ex. IKE_SA_INIT message with message ID larger than zero is encountered.
1.3.6.1.4.1.2636.3.52.1.1.3.9.2Counter64read-onlycurrent
jnxIkeGlobalIkev2TotalIntegrityFail
OBJECT-TYPE
Total number of messages with Integrity check failure.
1.3.6.1.4.1.2636.3.52.1.1.3.9.3Counter64read-onlycurrent
jnxIkeGlobalIkev2TotalInvalidSPI
OBJECT-TYPE
Total number of messages with Invalid SPI failure. Used one of the SPIs to find the SA, but the other SPI is not matching. Invalid IKE SPIs in IKE_SA_INIT response message at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.3.9.4Counter64read-onlycurrent
jnxIkeGlobalIkev2TotalInvalidExchgType
OBJECT-TYPE
Total number of messages with unknown / unexpected exchange type encountered during message exchange.
1.3.6.1.4.1.2636.3.52.1.1.3.9.5Counter64read-onlycurrent
jnxIkeGlobalIkev2TotalInvalidLength
OBJECT-TYPE
Total number of messages with Invalid length failure. During decode a malformed message where length is inconsistent with that indicated in header is encountered.
1.3.6.1.4.1.2636.3.52.1.1.3.9.6Counter64read-onlycurrent
jnxIkeGlobalIkev2TotalDisorder
OBJECT-TYPE
Total number of messages failure due to disorder. Packet message ID is out of window. For a response packet the corresponding request with given message ID is not found.
1.3.6.1.4.1.2636.3.52.1.1.3.9.7Counter64read-onlycurrent
jnxIkePeerAddrTable
OBJECT-TYPE
The IKE Key Exchange Peer Address Table. There is one entry in this table for each IKE peer with which the managed entity is currently associated.
1.3.6.1.4.1.2636.3.52.1.1.4not-accessiblecurrent
jnxIkePeerAddrEntry
OBJECT-TYPE
Each entry contains the attributes associated with an IKE Peer.
1.3.6.1.4.1.2636.3.52.1.1.4.1not-accessiblecurrent
jnxIkePeerAddrState
OBJECT-TYPE
The state of the peer, it can be: 1. active - The IKE peer is currently associated by an active IKE SA. There is at least one active IKE SA or Tunnel termination on the managed entity from the peer. 2. down - The IKE peer was associated with a previously active IKE SA.
1.3.6.1.4.1.2636.3.52.1.1.4.1.1JnxPeerStateTyperead-onlycurrent
jnxIkePeerAddrRemoteGwAddrType
OBJECT-TYPE
The IP address type of the remote gateway (endpoint) for the IPSec Phase-1 IKE Tunnel.
1.3.6.1.4.1.2636.3.52.1.1.4.1.2InetAddressTyperead-onlycurrent
jnxIkePeerAddrRemoteGwAddr
OBJECT-TYPE
The IP address of the remote gateway (endpoint) for the IPSec Phase-1 IKE Tunnel.
1.3.6.1.4.1.2636.3.52.1.1.4.1.3InetAddressread-onlycurrent
jnxIkePeerAddrRemotePort
OBJECT-TYPE
The port number of the remote gateway (endpoint) for the IKE SA negotiation. The port number zero means the input value is ignored for this object and the default port is considered.
1.3.6.1.4.1.2636.3.52.1.1.4.1.4InetPortNumberread-onlycurrent
jnxIkePeerAddrLocalGwAddrType
OBJECT-TYPE
The IP address type of the local endpoint (gateway) for the IPSec Phase-1 IKE Tunnel.
1.3.6.1.4.1.2636.3.52.1.1.4.1.5InetAddressTyperead-onlycurrent
jnxIkePeerAddrLocalGwAddr
OBJECT-TYPE
The IP address of the local endpoint (gateway) for the IPSec Phase-1 IKE Tunnel.
1.3.6.1.4.1.2636.3.52.1.1.4.1.6InetAddressread-onlycurrent
jnxIkePeerAddrLocalPort
OBJECT-TYPE
The port number of the local gateway (endpoint) for the IKE SA negotiation. The port number zero means the input value is ignored for this object and the default port is considered.
1.3.6.1.4.1.2636.3.52.1.1.4.1.7InetPortNumberread-onlycurrent
jnxIkePeerAddrRoutingInstance
OBJECT-TYPE
The VR ID.
1.3.6.1.4.1.2636.3.52.1.1.4.1.8DisplayStringread-onlycurrent
jnxIkePeerAddrIndex
OBJECT-TYPE
The index of the IPSec Phase-1 key exchange Peer Table. The value of the index is a number which begins at one and is incremented with each peer that is created due to an association. The value of this object will wrap at 2,147,483,647.
1.3.6.1.4.1.2636.3.52.1.1.4.1.9Integer32 (1..2147483647)read-onlycurrent
jnxIkePeerIdTable
OBJECT-TYPE
The IKE Key Exchange Peer ID Table. There is one entry in this table for each IKE peer with which the managed entity is currently associated. In the index truncated value for Remote ID value, Local ID value and AAA username is used to restrict the length of the SNMP index to a legal size. In the index, for jnxIkePeerIdRemoteId and jnxIkePeerIdLocalId, any string longer than 41 bytes will be truncated and only 41 bytes would be considered. Similarly in the index, for jnxIkePeerIdAAAUserName, any string longer than 25 bytes will be truncated and only 25 bytes would be considered. Because of the truncation, the index may become same for different peers, to keep the index unique, jnxIkePeerInternalIndex is used to uniquely identify each peer.
1.3.6.1.4.1.2636.3.52.1.1.5not-accessiblecurrent
jnxIkePeerIdEntry
OBJECT-TYPE
Each entry contains the attributes associated with an IKE Peer.
1.3.6.1.4.1.2636.3.52.1.1.5.1not-accessiblecurrent
jnxIkePeerIdState
OBJECT-TYPE
The state of the peer, it can be: 1. active - The IKE peer is currently associated by an active IKE SA. There is at least one active IKE SA or Tunnel termination on the managed entity from the peer. 2. down - The IKE peer was associated with a previously active IKE SA.
1.3.6.1.4.1.2636.3.52.1.1.5.1.1JnxPeerStateTyperead-onlycurrent
jnxIkePeerIdRemoteIdType
OBJECT-TYPE
The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name string. 3. or a distinguished name string.
1.3.6.1.4.1.2636.3.52.1.1.5.1.2JnxIkePeerTyperead-onlycurrent
jnxIkePeerIdRemoteIdValue
OBJECT-TYPE
The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is id_fqdn, then this is the FQDN of the remote peer. If the remote peer type is a id_dn, then this is the distinguished named string of the remote peer.
1.3.6.1.4.1.2636.3.52.1.1.5.1.3DisplayStringread-onlycurrent
jnxIkePeerIdLocalIdType
OBJECT-TYPE
The type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name string. 3. or a distinguished name string.
1.3.6.1.4.1.2636.3.52.1.1.5.1.4JnxIkePeerTyperead-onlycurrent
jnxIkePeerIdLocalIdValue
OBJECT-TYPE
The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is id_fqdn, then this is the FQDN of the remote peer. If the local peer type is a id_dn, then this is the distinguished name string of the local peer.
1.3.6.1.4.1.2636.3.52.1.1.5.1.5DisplayStringread-onlycurrent
jnxIkePeerIdAAAUserName
OBJECT-TYPE
Identifies the user with the specified authentication, authorization and accounting (AAA) username, associated with the IKE SA negotiation.
1.3.6.1.4.1.2636.3.52.1.1.5.1.6DisplayStringread-onlycurrent
jnxIkePeerInternalIndex
OBJECT-TYPE
The internal index of the Peer Id table. This index is used to uniquely identify multiple entry for the same truncated ids.
1.3.6.1.4.1.2636.3.52.1.1.5.1.7Integer32 (1..2147483647)not-accessiblecurrent
jnxIkePeerIdIndex
OBJECT-TYPE
The index of the IPSec Phase-1 key exchange Peer Table. The value of the index is a number which begins at one and is incremented with each peer that is created due to an association. The value of this object will wrap at 2,147,483,647.
1.3.6.1.4.1.2636.3.52.1.1.5.1.8Integer32 (1..2147483647)read-onlycurrent
jnxIkePeerStatsTable
OBJECT-TYPE
The IKE Key Exchange Peer Stats Table. There is one entry in this table for each IKE peer with which the managed entity is currently associated.
1.3.6.1.4.1.2636.3.52.1.1.6not-accessiblecurrent
jnxIkePeerStatsEntry
OBJECT-TYPE
Each entry contains the attributes associated with an IKE Peer.
1.3.6.1.4.1.2636.3.52.1.1.6.1not-accessiblecurrent
jnxIkePeerStatsState
OBJECT-TYPE
The state of the peer, it can be: 1. active - The IKE peer is currently associated by an active IKE SA. There is at least one active IKE SA or Tunnel termination on the managed entity from the peer. 2. down - The IKE peer was associated with a previously active IKE SA.
1.3.6.1.4.1.2636.3.52.1.1.6.1.1JnxPeerStateTyperead-onlycurrent
jnxIkePeerStatsIndex
OBJECT-TYPE
The index of the IPSec Phase-1 key exchange Peer Table. The value of the index is a number which begins at one and is incremented with each peer that is created due to an association. The value of this object will wrap at 2,147,483,647.
1.3.6.1.4.1.2636.3.52.1.1.6.1.2Integer32 (1..2147483647)read-onlycurrent
jnxIkePeerStatsRemoteGwAddrType
OBJECT-TYPE
The IP address type of the remote gateway (endpoint) for the IPSec Phase-1 IKE Tunnel.
1.3.6.1.4.1.2636.3.52.1.1.6.1.3InetAddressTyperead-onlycurrent
jnxIkePeerStatsRemoteGwAddr
OBJECT-TYPE
The IP address of the remote gateway (endpoint) for the IPSec Phase-1 IKE Tunnel.
1.3.6.1.4.1.2636.3.52.1.1.6.1.4InetAddressread-onlycurrent
jnxIkePeerStatsRemotePort
OBJECT-TYPE
The value specifying a port associated with the remote gateway (endpoint) for the IKE Tunnel. A value of zero means that the port should be ignored.
1.3.6.1.4.1.2636.3.52.1.1.6.1.5InetPortNumberread-onlycurrent
jnxIkePeerStatsLocalGwAddrType
OBJECT-TYPE
The IP address type of the local endpoint (gateway) for the IPSec Phase-1 IKE Tunnel.
1.3.6.1.4.1.2636.3.52.1.1.6.1.6InetAddressTyperead-onlycurrent
jnxIkePeerStatsLocalGwAddr
OBJECT-TYPE
The IP address of the local endpoint (gateway) for the IPSec Phase-1 IKE Tunnel.
1.3.6.1.4.1.2636.3.52.1.1.6.1.7InetAddressread-onlycurrent
jnxIkePeerStatsLocalPort
OBJECT-TYPE
The value specifying a port associated with the local endpoint (gateway) for the IKE Tunnel. A value of zero means that the port should be ignored.
1.3.6.1.4.1.2636.3.52.1.1.6.1.8InetPortNumberread-onlycurrent
jnxIkePeerStatsRoutingInstance
OBJECT-TYPE
The VR ID.
1.3.6.1.4.1.2636.3.52.1.1.6.1.9DisplayStringread-onlycurrent
jnxIkePeerStatsRemoteIdType
OBJECT-TYPE
The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name string. 3. or a distinguished name string.
1.3.6.1.4.1.2636.3.52.1.1.6.1.10JnxIkePeerTyperead-onlycurrent
jnxIkePeerStatsRemoteIdValue
OBJECT-TYPE
The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is id_fqdn, then this is the FQDN of the remote peer. If the remote peer type is a id_dn, then this is the distinguished named string of the remote peer.
1.3.6.1.4.1.2636.3.52.1.1.6.1.11DisplayStringread-onlycurrent
jnxIkePeerStatsLocalIdType
OBJECT-TYPE
The type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name string. 3. or a distinguished name string.
1.3.6.1.4.1.2636.3.52.1.1.6.1.12JnxIkePeerTyperead-onlycurrent
jnxIkePeerStatsLocalIdValue
OBJECT-TYPE
The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is id_fqdn, then this is the FQDN of the remote peer. If the local peer type is a id_dn, then this is the distinguished name string of the local peer.
1.3.6.1.4.1.2636.3.52.1.1.6.1.13DisplayStringread-onlycurrent
jnxIkePeerStatsAAAUserName
OBJECT-TYPE
The extended authentication User Name, identifies the user associated with the IKE SA negotiation.
1.3.6.1.4.1.2636.3.52.1.1.6.1.14DisplayStringread-onlycurrent
jnxIkePeerStatsGwName
OBJECT-TYPE
The gateway name
1.3.6.1.4.1.2636.3.52.1.1.6.1.15DisplayStringread-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitRequestOut
OBJECT-TYPE
The number of IKE_SA_INIT request message sent by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.16Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitResponseIn
OBJECT-TYPE
The number of IKE_SA_INIT response message received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.17Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitResInvalidIkeSpi
OBJECT-TYPE
The number of IKE_SA_INIT response message containing invalid SPI received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.18Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitInvalidKePayloadIn
OBJECT-TYPE
The total number of IKE_SA_INIT INVALID_KE_PAYLOAD received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.19Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitNoProposalChosenIn
OBJECT-TYPE
The number of IKE_SA_INIT NO_PROPSAL_CHOSEN received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.20Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitResVerifySaFail
OBJECT-TYPE
The number of IKE_SA_INIT response message verification of peer SA failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.21Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitResIkeSaFillFail
OBJECT-TYPE
The number of IKE_SA_INIT response message IKE_SA fill operation failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.22Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitResVerifyDhGroupFail
OBJECT-TYPE
The number of IKE_SA_INIT response message verification of DH group failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.23Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitCookieRequestIn
OBJECT-TYPE
The total number of IKE_SA_INIT COOKIE notification request message received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.24Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitCookieResponseOut
OBJECT-TYPE
The total number of IKE_SA_INIT COOKIE notification response message sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.6.1.25Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitResDhComputeKeyFail
OBJECT-TYPE
Number of IKE SA rekey response message Diffie-Hellman compute key failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.26Counter64read-onlycurrent
jnxIkePeerStatsIkeSaResponderIkev2SaInitRequestIn
OBJECT-TYPE
The number of IKE_SA_INIT request message received by Responder.
1.3.6.1.4.1.2636.3.52.1.1.6.1.27Counter64read-onlycurrent
jnxIkePeerStatsIkeSaResponderIkev2SaInitResponseOut
OBJECT-TYPE
The number of IKE_SA_INIT response message sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.6.1.28Counter64read-onlycurrent
jnxIkePeerStatsIkeSaResponderIkev2SaInitNoProposalChosenOut
OBJECT-TYPE
The number of IKE_SA_INIT NO_PROPSAL_CHOSEN notification sent by Responder
1.3.6.1.4.1.2636.3.52.1.1.6.1.29Counter64read-onlycurrent
jnxIkePeerStatsIkeSaResponderIkev2SaInitInvalidKePayloadOut
OBJECT-TYPE
The number of IKE_SA_INIT INVALID_KE_PAYLOAD notification sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.6.1.30Counter64read-onlycurrent
jnxIkePeerStatsIkeSaResponderIkev2SaInitResInvalidDhGroupConf
OBJECT-TYPE
The number of IKE_SA_INIT response message invalid DH group configured at Responder.
1.3.6.1.4.1.2636.3.52.1.1.6.1.31Counter64read-onlycurrent
jnxIkePeerStatsIkeSaResponderIkev2SaInitResDhGenKeyFail
OBJECT-TYPE
The number of IKE_SA_INIT response message Diffie-Hellman generate key failed at Responder
1.3.6.1.4.1.2636.3.52.1.1.6.1.32Counter64read-onlycurrent
jnxIkePeerStatsIkeSaResponderIkev2SaInitResGetCAsFail
OBJECT-TYPE
The number of IKE_SA_INIT response message get CAs failed at Responder.
1.3.6.1.4.1.2636.3.52.1.1.6.1.33Counter64read-onlycurrent
jnxIkePeerStatsIkeSaResponderIkev2SaInitResGetVidFail
OBJECT-TYPE
The number of IKE_SA_INIT response message get vendor ID request failed at Responder.
1.3.6.1.4.1.2636.3.52.1.1.6.1.34Counter64read-onlycurrent
jnxIkePeerStatsIkeSaResponderIkev2SaInitResDhComputeKeyFail
OBJECT-TYPE
The number of IKE_SA_INIT response message Diffie-Hellman compute key failed at Responder
1.3.6.1.4.1.2636.3.52.1.1.6.1.35Counter64read-onlycurrent
jnxIkePeerStatsIkeSaResponderIkev2SaInitCookieRequestOut
OBJECT-TYPE
The number of IKE_SA_INIT COOKIE notification request sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.6.1.36Counter64read-onlycurrent
jnxIkePeerStatsIkeSaResponderIkev2SaInitCookieResponseIn
OBJECT-TYPE
The number of IKE_SA_INIT COOKIE notification response message received by Responder.
1.3.6.1.4.1.2636.3.52.1.1.6.1.37Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2AuthRequestOut
OBJECT-TYPE
The total number of IKE_AUTH request message sent by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.38Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2AuthResponseIn
OBJECT-TYPE
The total number of IKE_AUTH response message received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.39Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2AuthNoProposalChosenIn
OBJECT-TYPE
The number of IKE_AUTH NO_PROPSAL_CHOSEN notification received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.40Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2AuthTsUnacceptableIn
OBJECT-TYPE
The number of IKE_AUTH TS_UNACCEPTABLE notification received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.41Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2AuthAuthenticationFailedIn
OBJECT-TYPE
The number of IKE_AUTH AUTHENTICATION_FAILED notification received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.42Counter64read-onlycurrent
jnxIkePeerStatsIkeSaResponderIkev2AuthRequestIn
OBJECT-TYPE
The number of IKE_AUTH request message received by Responder.
1.3.6.1.4.1.2636.3.52.1.1.6.1.43Counter64read-onlycurrent
jnxIkePeerStatsIkeSaResponderIkev2AuthResponseOut
OBJECT-TYPE
The number of IKE_AUTH response message sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.6.1.44Counter64read-onlycurrent
jnxIkePeerStatsIkeSaResponderIkev2AuthAuthenticationFailedOut
OBJECT-TYPE
The number of IKE_AUTH request message AUTHENTICATION_FAILED notification sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.6.1.45Counter64read-onlycurrent
jnxIkePeerStatsIkeSaResponderIkev2AuthNoProposalChosenOut
OBJECT-TYPE
The number of IKE_AUTH NO_PROPSAL_CHOSEN notification sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.6.1.46Counter64read-onlycurrent
jnxIkePeerStatsIkeSaResponderIkev2AuthTsUnacceptableOut
OBJECT-TYPE
The number of IKE_AUTH TS_UNACCEPTABLE notification sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.6.1.47Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2IkeSaRekeyRequestOut
OBJECT-TYPE
The number of IKE_SA rekey CREATE_CHILD_SA request message sent by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.48Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2IkeSaRekeyResponseIn
OBJECT-TYPE
The number of IKE_SA rekey CREATE_CHILD_SA response message received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.49Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2IkeSaRekeyNoProposalChosenIn
OBJECT-TYPE
The number of CREATE_CHILD_SA IKE SA rekey NO_PROPSAL_CHOSEN notification received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.50Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2IkeSaRekeyInvalidKeIn
OBJECT-TYPE
The number of CREATE_CHILD_SA IKE SA rekey INVALID_KE_PAYLOAD received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.51Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2IkeSaRekeyResVerifySaFail
OBJECT-TYPE
The number of CREATE_CHILD_SA IKE SA rekey response message verification of peer SA failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.52Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2IkeSaRekeyResFillIkeSaFail
OBJECT-TYPE
The number of IKE_SA rekey CREATE_CHILD_SA response message fill IKE_SA failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.53Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2IkeSaRekeyResVerifyDhGroupFail
OBJECT-TYPE
The number of CREATE_CHILD_SA IKE SA rekey response message verification of DH group failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.54Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2IkeSaRekeyResDhComputeKeyFail
OBJECT-TYPE
The number of CREATE_CHILD_SA IKE SA rekey response message Diffie-Hellman compute key failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.55Counter64read-onlycurrent
jnxIkePeerStatsIkeSaResponderIkev2IkeSaRekeyRequestIn
OBJECT-TYPE
The number of IKE_SA rekey CREATE_CHILD_SA request message received by Responder.
1.3.6.1.4.1.2636.3.52.1.1.6.1.56Counter64read-onlycurrent
jnxIkePeerStatsIkeSaResponderIkev2IkeSaRekeyResponseOut
OBJECT-TYPE
The number of IKE_SA rekey CREATE_CHILD_SA response message sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.6.1.57Counter64read-onlycurrent
jnxIkePeerStatsIkeSaResponderIkev2IkeSaRekeyNoProposalChosenOut
OBJECT-TYPE
The number of CREATE_CHILD_SA IKE rekey NO_PROPSAL_CHOSEN notification sent by Responder
1.3.6.1.4.1.2636.3.52.1.1.6.1.58Counter64read-onlycurrent
jnxIkePeerStatsIkeSaResponderIkev2IkeSaRekeyInvalidKeOut
OBJECT-TYPE
The number of IKE_SA rekey CREATE_CHILD_SA INVALID_KE_PAYLOAD sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.6.1.59Counter64read-onlycurrent
jnxIkePeerStatsIkeSaResponderIkev2IkeSaRekeyResDhComputeKeyFail
OBJECT-TYPE
The number of CREATE_CHILD_SA IKE rekey response message Diffie-Hellman compute key failed at Responder.
1.3.6.1.4.1.2636.3.52.1.1.6.1.60Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2IPSecSaRekeyRequestOut
OBJECT-TYPE
The number of IPSec SA rekey CREATE_CHILD_SA request message sent by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.61Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2IPSecSaRekeyResponseIn
OBJECT-TYPE
The number of IPSec SA rekey CREATE_CHILD_SA response message received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.62Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2IPSecSaRekeyNoProposalChosenIn
OBJECT-TYPE
The number of IPSec SA rekey CREATE_CHILD_SA NO_PROPSAL_CHOSEN notification received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.63Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2IPSecSaRekeyInvalidKeIn
OBJECT-TYPE
The number of IPSec SA rekey CREATE_CHILD_SA INVALID_KE_PAYLOAD received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.64Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2IPSecSaRekeyTsUnacceptableIn
OBJECT-TYPE
The number of IPSec SA rekey CREATE_CHILD_SA TS_UNACCEPTABLE notification received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.65Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2IPSecSaRekeyResVerifySaFail
OBJECT-TYPE
The number of IPSec SA rekey CREATE_CHILD_SA response message verification of peer SA failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.66Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2IPSecSaRekeyResVerifyDhGrpFail
OBJECT-TYPE
The number of IPSec SA rekey CREATE_CHILD_SA response message verification of DH group failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.67Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2IPSecSaRekeyResVerifyTsFail
OBJECT-TYPE
The number of IPSec SA rekey CREATE_CHILD_SA response message verification of TS failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.68Counter64read-onlycurrent
jnxIkePeerStatsIkeSaInitiatorIkev2IPSecSaRekeyResDhCompKeyFail
OBJECT-TYPE
The number of IPSec SA rekey CREATE_CHILD_SA response message Diffie-Hellman compute key failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.6.1.69Counter64read-onlycurrent
jnxIkePeerStatsIkeSaResponderIkev2IPSecSaRekeyRequestIn
OBJECT-TYPE
The total number of IPSec SA rekey CREATE_CHILD_SA request message received by Responder.
1.3.6.1.4.1.2636.3.52.1.1.6.1.70Counter64read-onlycurrent
jnxIkePeerStatsIkeSaResponderIkev2IPSecSaRekeyResponseOut
OBJECT-TYPE
The total number of IPSec SA rekey CREATE_CHILD_SA response message sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.6.1.71Counter64read-onlycurrent
jnxIkePeerStatsIkeSaResponderIkev2IPSecSaRekeyNoPropChosenOut
OBJECT-TYPE
The number of IPSec SA rekey CREATE_CHILD_SA NO_PROPSAL_CHOSEN Notification sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.6.1.72Counter64read-onlycurrent
jnxIkePeerStatsIkeSaResponderIkev2IPSecSaRekeyInvalidKeOut
OBJECT-TYPE
The number of IPSec SA rekey CREATE_CHILD_SA INVALID_KE_PAYLOAD Notification sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.6.1.73Counter64read-onlycurrent
jnxIkePeerStatsIkeSaResponderIkev2IPSecSaRekeyTsUnacceptableOut
OBJECT-TYPE
The number of IPSec SA rekey CREATE_CHILD_SA TS_UNACCEPTABLE notification sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.6.1.74Counter64read-onlycurrent
jnxIkePeerStatsIkeSaResponderIkev2IPSecSaRekeyResDhCompKeyFail
OBJECT-TYPE
The number of IPSec SA rekey CREATE_CHILD_SA response message Diffie-Hellman compute key failed at Responder.
1.3.6.1.4.1.2636.3.52.1.1.6.1.75Counter64read-onlycurrent
jnxIkePeerStatsTunType
OBJECT-TYPE
The Tunnel type. It can be regular (1) or ha-link (2).
1.3.6.1.4.1.2636.3.52.1.1.6.1.76JnxIkeTunTyperead-onlycurrent
jnxPeerIkeSaCorrTable
OBJECT-TYPE
The Peer Association to active IKE SA - Correlation Table. There is one entry in this table for each active IKE SA.
1.3.6.1.4.1.2636.3.52.1.1.7not-accessiblecurrent
jnxPeerIkeSaCorrEntry
OBJECT-TYPE
Each entry contains the attributes of an Peer Association to active IKE SA Correlation.
1.3.6.1.4.1.2636.3.52.1.1.7.1not-accessiblecurrent
jnxPeerIkeSaCorrPeerIndex
OBJECT-TYPE
The index of the Peer (jnxPeerIndex in the jnxIkePeerTable).
1.3.6.1.4.1.2636.3.52.1.1.7.1.1Integer32 (1..2147483647)not-accessiblecurrent
jnxPeerIkeSaCorrIntIndex
OBJECT-TYPE
The internal index of the Peer and IKE SA association. This internal index is used to uniquely identify multiple Instances of a unique association between the peer and IKE SA.
1.3.6.1.4.1.2636.3.52.1.1.7.1.2Integer32 (1..2147483647)not-accessiblecurrent
jnxPeerIkeSaCorrIkeTunMonIndex
OBJECT-TYPE
The index of the active IKE SA (jnxIkeTunMonIndex in the jnxIkeTunnelMonTable) for this Peer association.
1.3.6.1.4.1.2636.3.52.1.1.7.1.3Integer32 (1..2147483647)read-onlycurrent
jnxPeerIPSecTunnelCorrTable
OBJECT-TYPE
The Peer Association to IPSec Tunnel Correlation Table. There is one entry in this table for each active IPSec Tunnel.
1.3.6.1.4.1.2636.3.52.1.1.8not-accessiblecurrent
jnxPeerIPSecTunnelCorrEntry
OBJECT-TYPE
Each entry contains the attributes of an Peer Association to active IPSec Tunnel Correlation.
1.3.6.1.4.1.2636.3.52.1.1.8.1not-accessiblecurrent
jnxPeerIPSecTunnelCorrPeerIndex
OBJECT-TYPE
The index of the Peer (jnxPeerIndex in the jnxIkePeerTable).
1.3.6.1.4.1.2636.3.52.1.1.8.1.1Integer32 (1..2147483647)not-accessiblecurrent
jnxPeerIPSecTunnelCorrIntIndex
OBJECT-TYPE
The internal index of the Peer and IPSec Tunnel association. This index is used to uniquely identify multiple association between the peer and IPSec Tunnel.
1.3.6.1.4.1.2636.3.52.1.1.8.1.2Integer32 (1..2147483647)not-accessiblecurrent
jnxPeerIPSecTunnelCorrIPSecTunMonIndex
OBJECT-TYPE
The index of the active IPSec Tunnel (jnxIpSecTunMonIndex in the jnxIpSecTunnelMonTable) for this association between Peer and IPSec Tunnel.
1.3.6.1.4.1.2636.3.52.1.1.8.1.3Integer32 (1..2147483647)read-onlycurrent
jnxIkeHaLinkGlobalStats
OBJECT-IDENTITY
1.3.6.1.4.1.2636.3.52.1.1.9
jnxIkeHaLinkGlobalInitiatorIkev2SaInitStats
OBJECT-IDENTITY
1.3.6.1.4.1.2636.3.52.1.1.9.1
jnxIkeHaLinkGlobalInitiatorIkev2SaInitRequestOut
OBJECT-TYPE
Number of IKE_SA_INIT request message sent by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.1.1Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2SaInitResponseIn
OBJECT-TYPE
Number of IKE_SA_INIT response message received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.1.2Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2SaInitResInvalidIkeSpi
OBJECT-TYPE
Number of IKE_SA_INIT response message containing invalid SPI received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.1.3Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2SaInitInvalidKePayloadIn
OBJECT-TYPE
Number of IKE_SA_INIT INVALID_KE_PAYLOAD received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.1.4Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2SaInitNoProposalChosenIn
OBJECT-TYPE
Number of IKE_SA_INIT NO_PROPSAL_CHOSEN received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.1.5Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2SaInitResVerifySaFail
OBJECT-TYPE
Number of IKE_SA_INIT response message verification of peer SA failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.1.6Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2SaInitResIkeSaFillFail
OBJECT-TYPE
Number of IKE_SA_INIT response message IKE SA fill operation failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.1.7Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2SaInitResVerifyDhGroupFail
OBJECT-TYPE
Number of IKE_SA_INIT response message verification of DH group failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.1.8Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2SaInitCookieRequestIn
OBJECT-TYPE
Number of IKE_SA_INIT COOKIE notification request message received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.1.9Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2SaInitCookieResponseOut
OBJECT-TYPE
Number of IKE_SA_INIT COOKIE notification response message sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.9.1.10Counter64read-onlycurrent
jnxIkeHaLinkGlobalResponderIkev2SaInitStats
OBJECT-IDENTITY
1.3.6.1.4.1.2636.3.52.1.1.9.2
jnxIkeHaLinkGlobalResponderIkev2SaInitRequestIn
OBJECT-TYPE
Number of IKE_SA_INIT request message received by Responder.
1.3.6.1.4.1.2636.3.52.1.1.9.2.1Counter64read-onlycurrent
jnxIkeHaLinkGlobalResponderIkev2SaInitResponseOut
OBJECT-TYPE
Number of IKE_SA_INIT response message sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.9.2.2Counter64read-onlycurrent
jnxIkeHaLinkGlobalResponderIkev2SaInitNoProposalChosenOut
OBJECT-TYPE
Number of IKE_SA_INIT NO_PROPSAL_CHOSEN notification sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.9.2.3Counter64read-onlycurrent
jnxIkeHaLinkGlobalResponderIkev2SaInitInvalidKePayloadOut
OBJECT-TYPE
Number of IKE_SA_INIT INVALID_KE_PAYLOAD notification sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.9.2.4Counter64read-onlycurrent
jnxIkeHaLinkGlobalResponderIkev2SaInitResInvalidDhGroupConf
OBJECT-TYPE
Number of IKE_SA_INIT response message invalid DH group configured at Responder.
1.3.6.1.4.1.2636.3.52.1.1.9.2.5Counter64read-onlycurrent
jnxIkeHaLinkGlobalResponderIkev2SaInitResDhGenKeyFail
OBJECT-TYPE
Number of IKE_SA_INIT response message Diffie-Hellman generate key failed at Responder
1.3.6.1.4.1.2636.3.52.1.1.9.2.6Counter64read-onlycurrent
jnxIkeHaLinkGlobalResponderIkev2SaInitResGetCAsFail
OBJECT-TYPE
Number of IKE_SA_INIT response message get CAs failed at Responder.
1.3.6.1.4.1.2636.3.52.1.1.9.2.7Counter64read-onlycurrent
jnxIkeHaLinkGlobalResponderIkev2SaInitResGetVidFail
OBJECT-TYPE
Number of IKE_SA_INIT response message get vendor ID request failed at Responder.
1.3.6.1.4.1.2636.3.52.1.1.9.2.8Counter64read-onlycurrent
jnxIkeHaLinkGlobalResponderIkev2SaInitResDhComputeKeyFail
OBJECT-TYPE
Number of IKE_SA_INIT response message Diffie-Hellman compute key failed at Responder
1.3.6.1.4.1.2636.3.52.1.1.9.2.9Counter64read-onlycurrent
jnxIkeHaLinkGlobalResponderIkev2SaInitCookieRequestOut
OBJECT-TYPE
Number of IKE_SA_INIT COOKIE notification request message sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.9.2.10Counter64read-onlycurrent
jnxIkeHaLinkGlobalResponderIkev2SaInitCookieResponseIn
OBJECT-TYPE
Number of IKE_SA_INIT COOKIE notification response message received by Responder.
1.3.6.1.4.1.2636.3.52.1.1.9.2.11Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2AuthStats
OBJECT-IDENTITY
1.3.6.1.4.1.2636.3.52.1.1.9.3
jnxIkeHaLinkGlobalInitiatorIkev2AuthRequestOut
OBJECT-TYPE
Number of IKE_AUTH request message sent by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.3.1Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2AuthResponseIn
OBJECT-TYPE
Number of IKE_AUTH response message received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.3.2Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2AuthNoProposalChosenIn
OBJECT-TYPE
Number of IKE_AUTH NO_PROPSAL_CHOSEN notification received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.3.3Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2AuthTsUnacceptableIn
OBJECT-TYPE
Number of IKE_AUTH TS_UNACCEPTABLE notification received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.3.4Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2AuthAuthenticationFailedIn
OBJECT-TYPE
Number of IKE_AUTH AUTHENTICATION_FAILED notification received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.3.5Counter64read-onlycurrent
jnxIkeHaLinkGlobalResponderIkev2AuthStats
OBJECT-IDENTITY
1.3.6.1.4.1.2636.3.52.1.1.9.4
jnxIkeHaLinkGlobalResponderIkev2AuthRequestIn
OBJECT-TYPE
Number of IKE_AUTH request message received by Responder.
1.3.6.1.4.1.2636.3.52.1.1.9.4.1Counter64read-onlycurrent
jnxIkeHaLinkGlobalResponderIkev2AuthResponseOut
OBJECT-TYPE
Number of IKE_AUTH response message sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.9.4.2Counter64read-onlycurrent
jnxIkeHaLinkGlobalResponderIkev2AuthNoProposalChosenOut
OBJECT-TYPE
Number of IKE_AUTH NO_PROPSAL_CHOSEN notification sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.9.4.3Counter64read-onlycurrent
jnxIkeHaLinkGlobalResponderIkev2AuthTsUnacceptableOut
OBJECT-TYPE
Number of IKE_AUTH TS_UNACCEPTABLE notification sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.9.4.4Counter64read-onlycurrent
jnxIkeHaLinkGlobalResponderIkev2AuthAuthenticationFailedOut
OBJECT-TYPE
Number of IKE_AUTH request message AUTHENTICATION_FAILED notification sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.9.4.5Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2IkeSaRekeyStats
OBJECT-IDENTITY
1.3.6.1.4.1.2636.3.52.1.1.9.5
jnxIkeHaLinkGlobalInitiatorIkev2IkeSaRekeyRequestOut
OBJECT-TYPE
Number of IKE SA rekey CREATE_CHILD_SA request message sent by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.5.1Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2IkeSaRekeyResponseIn
OBJECT-TYPE
Number of IKE SA rekey CREATE_CHILD_SA response message received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.5.2Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2IkeSaRekeyNoProposalChosenIn
OBJECT-TYPE
Number of IKE SA rekey NO_PROPSAL_CHOSEN notification received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.5.3Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2IkeSaRekeyInvalidKeIn
OBJECT-TYPE
Number of IKE SA rekey INVALID_KE_PAYLOAD notification received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.5.4Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2IkeSaRekeyResDhComputeKeyFail
OBJECT-TYPE
Number of IKE SA rekey response message Diffie-Hellman compute key failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.5.5Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2IkeSaRekeyResVerifySaFail
OBJECT-TYPE
Number of IKE SA rekey response message verification of peer SA failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.5.6Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2IkeSaRekeyResFillIkeSaFail
OBJECT-TYPE
Number of IKE SA rekey response message fill IKE SA failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.5.7Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2IkeSaRekeyResVerifyDhGroupFail
OBJECT-TYPE
Number of IKE SA rekey response message verification of DH group failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.5.8Counter64read-onlycurrent
jnxIkeHaLinkGlobalResponderIkev2IkeSaRekeyStats
OBJECT-IDENTITY
1.3.6.1.4.1.2636.3.52.1.1.9.6
jnxIkeHaLinkGlobalResponderIkev2IkeSaRekeyRequestIn
OBJECT-TYPE
Number of IKE SA rekey request message received by Responder.
1.3.6.1.4.1.2636.3.52.1.1.9.6.1Counter64read-onlycurrent
jnxIkeHaLinkGlobalResponderIkev2IkeSaRekeyResponseOut
OBJECT-TYPE
Number of IKE SA rekey response message sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.9.6.2Counter64read-onlycurrent
jnxIkeHaLinkGlobalResponderIkev2IkeSaRekeyNoProposalChosenOut
OBJECT-TYPE
Number of IKE SA rekey NO_PROPSAL_CHOSEN notification sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.9.6.3Counter64read-onlycurrent
jnxIkeHaLinkGlobalResponderIkev2IkeSaRekeyInvalidKeOut
OBJECT-TYPE
Number of IKE SA rekey INVALID_KE_PAYLOAD notification sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.9.6.4Counter64read-onlycurrent
jnxIkeHaLinkGlobalResponderIkev2IkeSaRekeyResDhComputeKeyFail
OBJECT-TYPE
Number of IKE SA rekey response message Diffie-Hellman compute key failed at Responder.
1.3.6.1.4.1.2636.3.52.1.1.9.6.5Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2IpsecSaRekeyStats
OBJECT-IDENTITY
1.3.6.1.4.1.2636.3.52.1.1.9.7
jnxIkeHaLinkGlobalInitiatorIkev2IpsecSaRekeyRequestOut
OBJECT-TYPE
Number of IPSec SA rekey request message sent by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.7.1Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2IpsecSaRekeyResponseIn
OBJECT-TYPE
Number of IPSec SA rekey response message received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.7.2Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2IpsecSaRekeyNoProposalChosenIn
OBJECT-TYPE
Number of IPSec SA rekey NO_PROPSAL_CHOSEN notification received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.7.3Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2IpsecSaRekeyInvalidKeIn
OBJECT-TYPE
Number of IPSec SA rekey INVALID_KE_PAYLOAD notification received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.7.4Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2IpsecSaRekeyTsUnacceptableIn
OBJECT-TYPE
Number of IPSec SA rekey TS_UNACCEPTABLE notification received by Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.7.5Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2IpsecSaRekeyResVerifySaFail
OBJECT-TYPE
Number of IPSec SA rekey response message verification of peer SA failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.7.6Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2IpsecSaRekeyResDhComputeKeyFail
OBJECT-TYPE
Number of IPSec SA rekey response message Diffie-Hellman compute key failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.7.7Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2IpsecSaRekeyResVerifyDhGroupFail
OBJECT-TYPE
Number of IPSec SA rekey response message verification of DH group failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.7.8Counter64read-onlycurrent
jnxIkeHaLinkGlobalInitiatorIkev2IpsecSaRekeyResVerifyTsFail
OBJECT-TYPE
Number of IPSec SA rekey response message verification of TS failed at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.7.9Counter64read-onlycurrent
jnxIkeHaLinkGlobalResponderIkev2IpsecSaRekeyStats
OBJECT-IDENTITY
1.3.6.1.4.1.2636.3.52.1.1.9.8
jnxIkeHaLinkGlobalResponderIkev2IpsecSaRekeyRequestIn
OBJECT-TYPE
Number of IPSec SA rekey request message received by Responder.
1.3.6.1.4.1.2636.3.52.1.1.9.8.1Counter64read-onlycurrent
jnxIkeHaLinkGlobalResponderIkev2IpsecSaRekeyResponseOut
OBJECT-TYPE
Number of IPSec SA rekey response message sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.9.8.2Counter64read-onlycurrent
jnxIkeHaLinkGlobalResponderIkev2IpsecSaRekeyNoProposalChosenOut
OBJECT-TYPE
Number of IPSec SA rekey NO_PROPSAL_CHOSEN notification sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.9.8.3Counter64read-onlycurrent
jnxIkeHaLinkGlobalResponderIkev2IpsecSaRekeyInvalidKeOut
OBJECT-TYPE
Number of IPSec SA rekey INVALID_KE_PAYLOAD notification sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.9.8.4Counter64read-onlycurrent
jnxIkeHaLinkGlobalResponderIkev2IpsecSaRekeyTsUnacceptableOut
OBJECT-TYPE
Number of IPSec SA rekey TS_UNACCEPTABLE notification sent by Responder.
1.3.6.1.4.1.2636.3.52.1.1.9.8.5Counter64read-onlycurrent
jnxIkeHaLinkGlobalResponderIkev2IpsecSaRekeyResDhComputeKeyFail
OBJECT-TYPE
Number of IPSec SA rekey response message Diffie-Hellman compute key failed at Responder.
1.3.6.1.4.1.2636.3.52.1.1.9.8.6Counter64read-onlycurrent
jnxIkeHaLinkGlobalIkev2MsgFailStats
OBJECT-IDENTITY
1.3.6.1.4.1.2636.3.52.1.1.9.9
jnxIkeHaLinkGlobalIkev2TotalDiscarded
OBJECT-TYPE
Total number of discarded messages. Includes the failures encountered during decode of IKEv2 packets that is failures before the IKEv2 exchange payload processing. Also this counter encompasses all the other message failure counters.
1.3.6.1.4.1.2636.3.52.1.1.9.9.1Counter64read-onlycurrent
jnxIkeHaLinkGlobalIkev2TotalIdError
OBJECT-TYPE
Total number of messages with ID error. Message ID is not compliant with what is expected. For ex. IKE_SA_INIT message with message ID larger than zero is encountered.
1.3.6.1.4.1.2636.3.52.1.1.9.9.2Counter64read-onlycurrent
jnxIkeHaLinkGlobalIkev2TotalIntegrityFail
OBJECT-TYPE
Total number of messages with Integrity check failure.
1.3.6.1.4.1.2636.3.52.1.1.9.9.3Counter64read-onlycurrent
jnxIkeHaLinkGlobalIkev2TotalInvalidSPI
OBJECT-TYPE
Total number of messages with Invalid SPI failure. Used one of the SPIs to find the SA, but the other SPI is not matching. Invalid IKE SPIs in IKE_SA_INIT response message at Initiator.
1.3.6.1.4.1.2636.3.52.1.1.9.9.4Counter64read-onlycurrent
jnxIkeHaLinkGlobalIkev2TotalInvalidExchgType
OBJECT-TYPE
Total number of messages with unknown / unexpected exchange type encountered during message exchange.
1.3.6.1.4.1.2636.3.52.1.1.9.9.5Counter64read-onlycurrent
jnxIkeHaLinkGlobalIkev2TotalInvalidLength
OBJECT-TYPE
Total number of messages with Invalid length failure. During decode a malformed message where length is inconsistent with that indicated in header is encountered.
1.3.6.1.4.1.2636.3.52.1.1.9.9.6Counter64read-onlycurrent
jnxIkeHaLinkGlobalIkev2TotalDisorder
OBJECT-TYPE
Total number of messages failure due to disorder. Packet message ID is out of window. For a response packet the corresponding request with given message ID is not found.
1.3.6.1.4.1.2636.3.52.1.1.9.9.7Counter64read-onlycurrent
jnxIpSecFlowMonPhaseTwo
OBJECT-IDENTITY
1.3.6.1.4.1.2636.3.52.1.2
jnxIpSecNumOfTunnels
OBJECT-TYPE
Number of IPSEC VPN Tunnels. This attribute should detail the number of IPSEC VPN tunnel in jnxIpSecTunnelTable.
1.3.6.1.4.1.2636.3.52.1.2.1INTEGERread-onlycurrent
jnxIpSecTunnelMonTable
OBJECT-TYPE
The IPsec Phase-2 Tunnel Table. There is one entry in this table for each active IPsec Phase-2 Tunnel. If the tunnel is terminated, then the entry is no longer available after the table has been refreshed.
1.3.6.1.4.1.2636.3.52.1.2.2not-accessiblecurrent
jnxIpSecTunnelMonEntry
OBJECT-TYPE
Each entry contains the attributes associated with an active IPsec Phase-2 Tunnel.
1.3.6.1.4.1.2636.3.52.1.2.2.1not-accessiblecurrent
jnxIpSecTunMonRemoteGwAddrType
OBJECT-TYPE
The IP address type of the remote gateway (endpoint) for the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.2636.3.52.1.2.2.1.1InetAddressTypenot-accessiblecurrent
jnxIpSecTunMonRemoteGwAddr
OBJECT-TYPE
The IP address of the remote gateway (endpoint) for the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.2636.3.52.1.2.2.1.2InetAddressnot-accessiblecurrent
jnxIpSecTunMonIndex
OBJECT-TYPE
The index of the IPsec Phase-2 Tunnel Table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The value of this object will wrap at 2,147,483,647.
1.3.6.1.4.1.2636.3.52.1.2.2.1.3Integer32 (1..2147483647)not-accessiblecurrent
jnxIpSecTunMonLocalGwAddrType
OBJECT-TYPE
The IP address type of the local gateway (endpoint) for the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.2636.3.52.1.2.2.1.4InetAddressTyperead-onlycurrent
jnxIpSecTunMonLocalGwAddr
OBJECT-TYPE
The IP address of the local gateway (endpoint) for the IPsec Phase-2 Tunnel.
1.3.6.1.4.1.2636.3.52.1.2.2.1.5InetAddressread-onlycurrent
jnxIpSecTunMonLocalProxyId
OBJECT-TYPE
Identifier for the local end.
1.3.6.1.4.1.2636.3.52.1.2.2.1.6DisplayStringread-onlycurrent
jnxIpSecTunMonRemoteProxyId
OBJECT-TYPE
Identifier for the remote end.
1.3.6.1.4.1.2636.3.52.1.2.2.1.7DisplayStringread-onlycurrent
jnxIpSecTunMonKeyType
OBJECT-TYPE
The type of key used by the IPsec Phase-2 Tunnel. It can be one of the following two types: - IKE negotiated - Manually installed
1.3.6.1.4.1.2636.3.52.1.2.2.1.8JnxKeyTyperead-onlycurrent
jnxIpSecTunMonRemotePeerType
OBJECT-TYPE
The type of the remote peer gateway (endpoint). It can be one of the following two types: - static (Remote peer whose IP address is known beforehand) - dynamic (Remote peer whose IP address is not known beforehand)
1.3.6.1.4.1.2636.3.52.1.2.2.1.9JnxRemotePeerTyperead-onlycurrent
jnxIpSecTunMonOutEncryptedBytes
OBJECT-TYPE
Number of bytes encrypted by this Phase-2 tunnel.
1.3.6.1.4.1.2636.3.52.1.2.2.1.10Counter64read-onlycurrent
jnxIpSecTunMonOutEncryptedPkts
OBJECT-TYPE
Number of packets encrypted by this Phase-2 tunnel.
1.3.6.1.4.1.2636.3.52.1.2.2.1.11Counter64read-onlycurrent
jnxIpSecTunMonInDecryptedBytes
OBJECT-TYPE
Number of bytes decrypted by this Phase-2 tunnel.
1.3.6.1.4.1.2636.3.52.1.2.2.1.12Counter64read-onlycurrent
jnxIpSecTunMonInDecryptedPkts
OBJECT-TYPE
Number of packets decrypted by this Phase-2 tunnel.
1.3.6.1.4.1.2636.3.52.1.2.2.1.13Counter64read-onlycurrent
jnxIpSecTunMonAHInBytes
OBJECT-TYPE
Number of incoming bytes authenticated using AH by this Phase-2 tunnel.
1.3.6.1.4.1.2636.3.52.1.2.2.1.14Counter64read-onlycurrent
jnxIpSecTunMonAHInPkts
OBJECT-TYPE
Number of incoming packets authenticated using AH by this Phase-2 tunnel.
1.3.6.1.4.1.2636.3.52.1.2.2.1.15Counter64read-onlycurrent
jnxIpSecTunMonAHOutBytes
OBJECT-TYPE
Number of outgoing bytes applied AH by this Phase-2 tunnel.
1.3.6.1.4.1.2636.3.52.1.2.2.1.16Counter64read-onlycurrent
jnxIpSecTunMonAHOutPkts
OBJECT-TYPE
Number of outgoing packets applied AH by this Phase-2 tunnel.
1.3.6.1.4.1.2636.3.52.1.2.2.1.17Counter64read-onlycurrent
jnxIpSecTunMonReplayDropPkts
OBJECT-TYPE
Number of packets dropped by this Phase-2 tunnel due to anti replay check failure.
1.3.6.1.4.1.2636.3.52.1.2.2.1.18Counter64read-onlycurrent
jnxIpSecTunMonAhAuthFails
OBJECT-TYPE
Number of packets received by this Phase-2 tunnel that failed AH authentication.
1.3.6.1.4.1.2636.3.52.1.2.2.1.19Counter64read-onlycurrent
jnxIpSecTunMonEspAuthFails
OBJECT-TYPE
Number of packets received by this Phase-2 tunnel that failed ESP authentication.
1.3.6.1.4.1.2636.3.52.1.2.2.1.20Counter64read-onlycurrent
jnxIpSecTunMonDecryptFails
OBJECT-TYPE
Number of packets received by this Phase-2 tunnel that failed decryption.
1.3.6.1.4.1.2636.3.52.1.2.2.1.21Counter64read-onlycurrent
jnxIpSecTunMonBadHeaders
OBJECT-TYPE
Number of packets received by this Phase-2 tunnel that failed due to bad headers.
1.3.6.1.4.1.2636.3.52.1.2.2.1.22Counter64read-onlycurrent
jnxIpSecTunMonBadTrailers
OBJECT-TYPE
Number of packets received by this Phase-2 tunnel that failed due to bad ESP trailers.
1.3.6.1.4.1.2636.3.52.1.2.2.1.23Counter64read-onlycurrent
jnxIpSecTunMonDroppedPkts
OBJECT-TYPE
Total number of dropped packets for this Phase-2 tunnel. This attribute is obsolete.
1.3.6.1.4.1.2636.3.52.1.2.2.1.26Counter64read-onlyobsolete
jnxIpSecTunMonVpnName
OBJECT-TYPE
VPN tunnel name.
1.3.6.1.4.1.2636.3.52.1.2.2.1.27DisplayStringread-onlycurrent
jnxIpSecTunMonTsName
OBJECT-TYPE
Traffic selector name.
1.3.6.1.4.1.2636.3.52.1.2.2.1.28DisplayStringread-onlycurrent
jnxIpSecTunMonMultiSa
OBJECT-TYPE
Multi-SA Configuration Status.
1.3.6.1.4.1.2636.3.52.1.2.2.1.29INTEGER {disable(0), enable(1)}read-onlycurrent
jnxIpSecTunMonInvalidSpi
OBJECT-TYPE
Total number of Invalid SPI for this IPSec tunnel.
1.3.6.1.4.1.2636.3.52.1.2.2.1.30Counter64read-onlycurrent
jnxIpSecTunMonTsCheckFail
OBJECT-TYPE
Total number of TS check fail for this IPSec tunnel.
1.3.6.1.4.1.2636.3.52.1.2.2.1.31Counter64read-onlycurrent
jnxIpSecTunMonDiscarded
OBJECT-TYPE
Total number of discarded packets for this IPSec tunnel.
1.3.6.1.4.1.2636.3.52.1.2.2.1.32Counter64read-onlycurrent
jnxIpSecTunMonTunType
OBJECT-TYPE
The Tunnel type. It can be regular (1) or ha-link (2).
1.3.6.1.4.1.2636.3.52.1.2.2.1.33JnxIkeTunTyperead-onlycurrent
jnxIpSecSaMonTable
OBJECT-TYPE
The IPsec Phase-2 Security Association Table. This table identifies the structure (in terms of component SAs) of each active Phase-2 IPsec tunnel. This table contains an entry for each active and expiring security association and maps each entry in the active Phase-2 tunnel table (ipSecTunTable) into a number of entries in this table. SA contains the information negotiated by IKE. The SA is like a contract laying out the rules of the VPN connection for the duration of the SA. An SA is assigned a 32-bit number that, when used in conjunction with the destination IP address, uniquely identifies the SA. This number is called the Security Parameters Index or SPI. IPSec SAs area unidirectional and they are unique in each security protocol. A set of SAs are needed for a protected data pipe, one per direction per protocol.
1.3.6.1.4.1.2636.3.52.1.2.3not-accessiblecurrent
jnxIpSecSaMonEntry
OBJECT-TYPE
Each entry contains the attributes associated with active and expiring IPsec Phase-2 security associations.
1.3.6.1.4.1.2636.3.52.1.2.3.1not-accessiblecurrent
jnxIpSecSaMonIndex
OBJECT-TYPE
The index, in the context of the IPsec tunnel ipSecTunIndex, of the security association represented by this table entry. The value of this index is a number which begins at one and is incremented with each SPI associated with an IPsec Phase-2 Tunnel. The value of this object will wrap at 65535.
1.3.6.1.4.1.2636.3.52.1.2.3.1.1Integer32 (1..65535)not-accessiblecurrent
jnxIpSecSaMonProtocol
OBJECT-TYPE
The index, represents the security protocol (AH, ESP or IPComp) for which this security association was setup.
1.3.6.1.4.1.2636.3.52.1.2.3.1.2INTEGER {ah(1), esp(2)}read-onlycurrent
jnxIpSecSaMonInSpi
OBJECT-TYPE
The value of the incoming SPI.
1.3.6.1.4.1.2636.3.52.1.2.3.1.3JnxSpiTyperead-onlycurrent
jnxIpSecSaMonOutSpi
OBJECT-TYPE
The value of the outgoing SPI.
1.3.6.1.4.1.2636.3.52.1.2.3.1.4JnxSpiTyperead-onlycurrent
jnxIpSecSaMonType
OBJECT-TYPE
This field represents the type of security associations which can be either manual or dynamic
1.3.6.1.4.1.2636.3.52.1.2.3.1.5JnxSATyperead-onlycurrent
jnxIpSecSaMonEncapMode
OBJECT-TYPE
The encapsulation mode used by an IPsec Phase-2 Tunnel.
1.3.6.1.4.1.2636.3.52.1.2.3.1.6JnxEncapModeread-onlycurrent
jnxIpSecSaMonLifeSize
OBJECT-TYPE
The negotiated LifeSize of the IPsec Phase-2 Tunnel in kilobytes.
1.3.6.1.4.1.2636.3.52.1.2.3.1.7Integer32read-onlycurrent
jnxIpSecSaMonLifeTime
OBJECT-TYPE
The negotiated LifeTime of the IPsec Phase-2 Tunnel in seconds.
1.3.6.1.4.1.2636.3.52.1.2.3.1.8Integer32read-onlycurrent
jnxIpSecSaMonActiveTime
OBJECT-TYPE
The length of time the IPsec Phase-2 Tunnel has been active in hundredths of seconds.
1.3.6.1.4.1.2636.3.52.1.2.3.1.9TimeIntervalread-onlycurrent
jnxIpSecSaMonLifeSizeThreshold
OBJECT-TYPE
The security association LifeSize refresh threshold in kilobytes.
1.3.6.1.4.1.2636.3.52.1.2.3.1.10Integer32read-onlycurrent
jnxIpSecSaMonLifeTimeThreshold
OBJECT-TYPE
The security association LifeTime refresh threshold in seconds.
1.3.6.1.4.1.2636.3.52.1.2.3.1.11Integer32read-onlycurrent
jnxIpSecSaMonEncryptAlgo
OBJECT-TYPE
The Encryption algorithm used to encrypt the packets.
1.3.6.1.4.1.2636.3.52.1.2.3.1.12JnxEncryptAlgoread-onlycurrent
jnxIpSecSaMonAuthAlgo
OBJECT-TYPE
The algorithm used for authentication of packets which can be hmac-md5-96 or hmac-sha1-96 or hmac-sha-256-128
1.3.6.1.4.1.2636.3.52.1.2.3.1.13JnxAuthAlgoread-onlycurrent
jnxIpSecSaMonState
OBJECT-TYPE
This column represents the status of the security association represented by this table entry. If the status of the SA is 'active', the SA is ready for active use. The status 'expiring' represents any of the various states that the security association transitions through before being purged.
1.3.6.1.4.1.2636.3.52.1.2.3.1.14INTEGER {unknown(0), active(1), expiring(2)}read-onlycurrent
jnxIpSecSaMonFcName
OBJECT-TYPE
Class-Of-Service Forwarding Class name.
1.3.6.1.4.1.2636.3.52.1.2.3.1.15DisplayStringread-onlycurrent
jnxIpSecSaMonEsnMode
OBJECT-TYPE
This field represents whether IPSec extended sequence number support is enabled or disabled
1.3.6.1.4.1.2636.3.52.1.2.3.1.16JnxEsnModeread-onlycurrent
jnxIpSecGlobalStats
OBJECT-IDENTITY
1.3.6.1.4.1.2636.3.52.1.2.4
jnxIpSecGlobalOutEncryptedBytes
OBJECT-TYPE
Number of bytes encrypted by all Phase-2 tunnel.
1.3.6.1.4.1.2636.3.52.1.2.4.1Counter64read-onlycurrent
jnxIpSecGlobalOutEncryptedPkts
OBJECT-TYPE
Number of packets encrypted by all Phase-2 tunnel.
1.3.6.1.4.1.2636.3.52.1.2.4.2Counter64read-onlycurrent
jnxIpSecGlobalInDecryptedBytes
OBJECT-TYPE
Number of bytes decrypted by all Phase-2 tunnel.
1.3.6.1.4.1.2636.3.52.1.2.4.3Counter64read-onlycurrent
jnxIpSecGlobalInDecryptedPkts
OBJECT-TYPE
Number of packets decrypted by all Phase-2 tunnel.
1.3.6.1.4.1.2636.3.52.1.2.4.4Counter64read-onlycurrent
jnxIpSecGlobalAHInBytes
OBJECT-TYPE
Number of incoming bytes authenticated using AH by all Phase-2 tunnel.
1.3.6.1.4.1.2636.3.52.1.2.4.5Counter64read-onlycurrent
jnxIpSecGlobalAHInPkts
OBJECT-TYPE
Number of incoming packets authenticated using AH by all Phase-2 tunnel.
1.3.6.1.4.1.2636.3.52.1.2.4.6Counter64read-onlycurrent
jnxIpSecGlobalAHOutBytes
OBJECT-TYPE
Number of outgoing bytes applied AH by all Phase-2 tunnel.
1.3.6.1.4.1.2636.3.52.1.2.4.7Counter64read-onlycurrent
jnxIpSecGlobalAHOutPkts
OBJECT-TYPE
Number of outgoing packets applied AH by all Phase-2 tunnel.
1.3.6.1.4.1.2636.3.52.1.2.4.8Counter64read-onlycurrent
jnxIpSecGlobalReplayDropPkts
OBJECT-TYPE
Number of packets dropped by all Phase-2 tunnel due to anti-replay check failure.
1.3.6.1.4.1.2636.3.52.1.2.4.9Counter64read-onlycurrent
jnxIpSecGlobalAhAuthFails
OBJECT-TYPE
Number of packets received by all Phase-2 tunnel that failed AH authentication.
1.3.6.1.4.1.2636.3.52.1.2.4.10Counter64read-onlycurrent
jnxIpSecGlobalEspAuthFails
OBJECT-TYPE
Number of packets received by all Phase-2 tunnel that failed ESP authentication.
1.3.6.1.4.1.2636.3.52.1.2.4.11Counter64read-onlycurrent
jnxIpSecGlobalDecryptFails
OBJECT-TYPE
Number of packets received by all Phase-2 tunnel that failed decryption.
1.3.6.1.4.1.2636.3.52.1.2.4.12Counter64read-onlycurrent
jnxIpSecGlobalBadHeaders
OBJECT-TYPE
Number of packets received by all Phase-2 tunnel that failed due to bad headers.
1.3.6.1.4.1.2636.3.52.1.2.4.13Counter64read-onlycurrent
jnxIpSecGlobalBadTrailers
OBJECT-TYPE
Number of packets received by all Phase-2 tunnel that failed due to bad ESP trailers.
1.3.6.1.4.1.2636.3.52.1.2.4.14Counter64read-onlycurrent
jnxIpSecGlobalInvalidSpi
OBJECT-TYPE
Total number of Invalid SPI.
1.3.6.1.4.1.2636.3.52.1.2.4.15Counter64read-onlycurrent
jnxIpSecGlobalTsCheckFail
OBJECT-TYPE
Total number of TS check fail.
1.3.6.1.4.1.2636.3.52.1.2.4.16Counter64read-onlycurrent
jnxIpSecGlobalDiscarded
OBJECT-TYPE
Total number of discarded packets.
1.3.6.1.4.1.2636.3.52.1.2.4.17Counter64read-onlycurrent
jnxIpSecHaLinkGlobalStats
OBJECT-IDENTITY
1.3.6.1.4.1.2636.3.52.1.2.5
jnxIpSecHaLinkGlobalOutEncryptedBytes
OBJECT-TYPE
Number of bytes encrypted by all Phase-2 tunnel.
1.3.6.1.4.1.2636.3.52.1.2.5.1Counter64read-onlycurrent
jnxIpSecHaLinkGlobalOutEncryptedPkts
OBJECT-TYPE
Number of packets encrypted by all Phase-2 tunnel.
1.3.6.1.4.1.2636.3.52.1.2.5.2Counter64read-onlycurrent
jnxIpSecHaLinkGlobalInDecryptedBytes
OBJECT-TYPE
Number of bytes decrypted by all Phase-2 tunnel.
1.3.6.1.4.1.2636.3.52.1.2.5.3Counter64read-onlycurrent
jnxIpSecHaLinkGlobalInDecryptedPkts
OBJECT-TYPE
Number of packets decrypted by all Phase-2 tunnel.
1.3.6.1.4.1.2636.3.52.1.2.5.4Counter64read-onlycurrent
jnxIpSecHaLinkGlobalAHInBytes
OBJECT-TYPE
Number of incoming bytes authenticated using AH by all Phase-2 tunnel.
1.3.6.1.4.1.2636.3.52.1.2.5.5Counter64read-onlycurrent
jnxIpSecHaLinkGlobalAHInPkts
OBJECT-TYPE
Number of incoming packets authenticated using AH by all Phase-2 tunnel.
1.3.6.1.4.1.2636.3.52.1.2.5.6Counter64read-onlycurrent
jnxIpSecHaLinkGlobalAHOutBytes
OBJECT-TYPE
Number of outgoing bytes applied AH by all Phase-2 tunnel.
1.3.6.1.4.1.2636.3.52.1.2.5.7Counter64read-onlycurrent
jnxIpSecHaLinkGlobalAHOutPkts
OBJECT-TYPE
Number of outgoing packets applied AH by all Phase-2 tunnel.
1.3.6.1.4.1.2636.3.52.1.2.5.8Counter64read-onlycurrent
jnxIpSecHaLinkGlobalReplayDropPkts
OBJECT-TYPE
Number of packets dropped by all Phase-2 tunnel due to anti-replay check failure.
1.3.6.1.4.1.2636.3.52.1.2.5.9Counter64read-onlycurrent
jnxIpSecHaLinkGlobalAhAuthFails
OBJECT-TYPE
Number of packets received by all Phase-2 tunnel that failed AH authentication.
1.3.6.1.4.1.2636.3.52.1.2.5.10Counter64read-onlycurrent
jnxIpSecHaLinkGlobalEspAuthFails
OBJECT-TYPE
Number of packets received by all Phase-2 tunnel that failed ESP authentication.
1.3.6.1.4.1.2636.3.52.1.2.5.11Counter64read-onlycurrent
jnxIpSecHaLinkGlobalDecryptFails
OBJECT-TYPE
Number of packets received by all Phase-2 tunnel that failed decryption.
1.3.6.1.4.1.2636.3.52.1.2.5.12Counter64read-onlycurrent
jnxIpSecHaLinkGlobalBadHeaders
OBJECT-TYPE
Number of packets received by all Phase-2 tunnel that failed due to bad headers.
1.3.6.1.4.1.2636.3.52.1.2.5.13Counter64read-onlycurrent
jnxIpSecHaLinkGlobalBadTrailers
OBJECT-TYPE
Number of packets received by all Phase-2 tunnel that failed due to bad ESP trailers.
1.3.6.1.4.1.2636.3.52.1.2.5.14Counter64read-onlycurrent
jnxIpSecHaLinkGlobalInvalidSpi
OBJECT-TYPE
Total number of Invalid SPI.
1.3.6.1.4.1.2636.3.52.1.2.5.15Counter64read-onlycurrent
jnxIpSecHaLinkGlobalTsCheckFail
OBJECT-TYPE
Total number of TS check fail.
1.3.6.1.4.1.2636.3.52.1.2.5.16Counter64read-onlycurrent
jnxIpSecHaLinkGlobalDiscarded
OBJECT-TYPE
Total number of discarded packets.
1.3.6.1.4.1.2636.3.52.1.2.5.17Counter64read-onlycurrent

Notifications

NameOIDStatus
jnxIkePeerDown
NOTIFICATION-TYPE
To provide notification for the event when Peer goes down.
1.3.6.1.4.1.2636.3.52.1.0.0.1current
jnxIkePeerIPSecTunnelDown
NOTIFICATION-TYPE
To provide notification for the event of IPSec Tunnels going down for a peer. These traps are not generated if the corresponding peer has gone down.
1.3.6.1.4.1.2636.3.52.1.0.0.2current