MIBs Depot

TIMETRA-IPSEC-MIB

Registered at
1.3.6.1.4.1.6527.1.1.3.48
1.3.6.1.4.1.6527.3.1.1.48
1.3.6.1.4.1.6527.3.1.2.48
1.3.6.1.4.1.6527.3.1.3.48
Last updated
2011-02-01 00:00
Organization
Alcatel-Lucent
Revisions
1911-02-01 00:00, 1909-02-28 00:00, 1908-07-01 00:00, 1908-01-01 00:00
Namespace
nokia
Source file
TIMETRA-IPSEC-MIB
Digest
sha256:0ae9027a5e4e3fefc7856f7b63cf6e87e9d1c77a38055ca01bb0f8c90f7892e7

Description

This document is the SNMP MIB module to manage and provision the Alcatel-Lucent SROS device with IPsec tunneling, encryption and other related features. Copyright 2008-2012 Alcatel-Lucent. All rights reserved. Reproduction of this document is authorized on the condition that the foregoing copyright notice is included. This SNMP MIB module (Specification) embodies Alcatel-Lucent's proprietary intellectual property. Alcatel-Lucent retains all title and ownership in the Specification, including any revisions. Alcatel-Lucent grants all interested parties a non-exclusive license to use and distribute an unmodified copy of this Specification in connection with management of Alcatel-Lucent products, and without fee, provided this copyright notice and license appear on all copies. This Specification is supplied `as is', and Alcatel-Lucent makes no warranty, either express or implied, as to the use, operation, condition, or performance of the Specification.

Contact

Alcatel-Lucent SROS Support Web: http://support.alcatel-lucent.com

Imports

FromSymbols
IF-MIBInterfaceIndex
INET-ADDRESS-MIBInetAddress, InetAddressPrefixLength, InetAddressType
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP
SNMPv2-SMICounter32, Counter64, Gauge32, Integer32, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso
SNMPv2-TCDisplayString, RowStatus, StorageType, TEXTUAL-CONVENTION, TimeStamp, TruthValue
TIMETRA-CHASSIS-MIBTmnxHwIndexOrZero, tmnxCardSlotNum, tmnxChassisIndex, tmnxMDASlotNum
TIMETRA-GLOBAL-MIBtimetraSRMIBModules, tmnxSRConfs, tmnxSRNotifyPrefix, tmnxSRObjs
TIMETRA-SAP-MIBsapEncapValue, sapPortId
TIMETRA-SERV-MIBsvcId
TIMETRA-TC-MIBTItemDescription, TNamedItem, TNamedItemOrEmpty, TTcpUdpPort, TmnxAdminState, TmnxBfdSessOperState, TmnxIPsecTunnelTemplateId, TmnxIPsecTunnelTemplateIdOrZero, TmnxIkePolicyAuthMethod, TmnxIkePolicyOwnAuthMethod, TmnxOperState, TmnxServId

Imported by

Nothing in this corpus imports this module.

Load order

Every file a consumer needs in order to load this module, dependencies first.

ATM-TC-MIB
IANAifType-MIB
IEEE8021-PAE-MIB
IF-MIB
INET-ADDRESS-MIB
SNMP-FRAMEWORK-MIB
SNMPv2-CONF
SNMPv2-MIB
SNMPv2-SMI
SNMPv2-TC
TIMETRA-CHASSIS-MIB
TIMETRA-FILTER-MIB
TIMETRA-GLOBAL-MIB
TIMETRA-IPSEC-MIB
TIMETRA-PORT-MIB
TIMETRA-QOS-MIB
TIMETRA-SAP-MIB
TIMETRA-SERV-MIB
TIMETRA-TC-MIB

Textual conventions

NameOIDSyntaxAccessStatus
TmnxAuthAlgorithm
TEXTUAL-CONVENTION
TmnxAuthAlgorithm data type is an enumerated integer that describes the values used to identify the hashing algorithm. Value Descriptions: null - Choosing this value configures the high-speed null algorithm, which does nothing. This is same as not having authentication turned on, same as turning the protocol off. md5 - Choosing this value configures the use of hmac-md5 algorithm for authentication. sha1 - Choosing this valule configures the use of hmac-sha1 algorithm for authentication. sha256 - Choosing this valule configures the use of hmac-sha256 algorithm for authentication. sha384 - Choosing this valule configures the use of hmac-sha384 algorithm for authentication. sha512 - Choosing this valule configures the use of hmac-sha512 algorithm for authentication.
current
TmnxEncrAlgorithm
TEXTUAL-CONVENTION
TmnxEncrAlgorithm data type is an enumerated integer that describes the values used to identify the encryption algorithm. Value Descriptions: null - Choosing this value configures the high-speed null algorithm, which does nothing. This is same as not having encryption turned on. des - Choosing this value configures the 56-bit des algorithm for encryption. This is an older algorithm with relatively weak security. While better than nothing, it should only be used where a strong algorithm is not available on both ends at an acceptable performance level. des3 - Choosing this value configures the 3-des algorithm for encryption. This is a modified application of the des algorithm which uses multiple des operations to make things more secure. aes128 - Choosing this value configures the aes algorithm with a block size of 128 bits. This is a mandatory implementation size for aes. As of today, this is a very strong algorithm choice. aes192 - Choosing this value configures the aes algorithm with a block size of 192 bits. This is a stronger version of aes. aes256 - Choosing this value configures the aes algorithm with a block size of 256 bits. This is the strongest available version of aes.
current
TmnxIPsecDirection
TEXTUAL-CONVENTION
TmnxIPsecDirection data type is an enumerated integer that describes the values used to identify the direction of an IPsec tunnel.
current
TmnxIPsecDirection2
TEXTUAL-CONVENTION
TmnxIPsecDirection data type is an enumerated integer that describes the values used to identify the direction of an IPsec tunnel.
current
TmnxIPsecKeyingType
TEXTUAL-CONVENTION
TmnxIPsecKeyingType data type is an enumerated integer that describes the values used to identify the IPsec keying type.
current
TmnxIPsecLocalIdType
TEXTUAL-CONVENTION
TmnxIPsecLocalIdType data type is an enumerated integer that describes the local identifier type used for IDi or IDr for IKEv2.
current
TmnxIPsecPolicyId
TEXTUAL-CONVENTION
A number used to identify an entry in the tmnxIPsecPolicyTable.
current
TmnxIPsecPolicyIdOrZero
TEXTUAL-CONVENTION
A number used to identify an entry in the tmnxIPsecPolicyTable or zero.
current
TmnxIPsecProtocol
TEXTUAL-CONVENTION
TmnxIPsecProtocol data type is an enumerated integer that describes the values used to identify the used IPsec protocol.
current
TmnxIPsecTransformId
TEXTUAL-CONVENTION
A number used to identify an entry in the tmnxIPsecTransformTable.
current
TmnxIPsecTransformIdOrZero
TEXTUAL-CONVENTION
A number used to identify an entry in the tmnxIPsecTransformTable or zero.
current
TmnxIkePolicyDHGroup
TEXTUAL-CONVENTION
TmnxIkePolicyDHGroup data type is an enumerated integer that describes the values used to identify the diffie-hellman group for calculating the session keys. Value Descriptions: group1 - 768 bits group2 - 1024 bits group5 - 1536 bits group14 - 2048 bits group15 - 3072 bits More bits provide a higher level of security, but require more processing.
current
TmnxIkePolicyDHGroupOrZero
TEXTUAL-CONVENTION
TmnxIkePolicyDHGroupOrZero data type is similar to TmnxIkePolicyDHGroup but allows the value 'unspecified (0)'.
current
TmnxIkePolicyId
TEXTUAL-CONVENTION
A number used to identify an entry in the tmnxIkePolicyTable.
current
TmnxIkePolicyIdOrZero
TEXTUAL-CONVENTION
A number used to identify an entry in the tmnxIkePolicyTable or zero.
current
TmnxIkePolicyIkeMode
TEXTUAL-CONVENTION
TmnxIkePolicyIkeMode data type is an enumerated integer that describes the values used to identify the IKE mode of operation. This determines the number of messages used to establish the session.
current
TmnxIkeVersion
TEXTUAL-CONVENTION
TmnxIkeVersion data type is an integer that indicates the version of IKE supported by the entry.
current

Objects

NameOIDSyntaxAccessStatus
tmnxIPsecConformance
OBJECT-IDENTITY
1.3.6.1.4.1.6527.3.1.1.48
tmnxIPsecCompliances
OBJECT-IDENTITY
1.3.6.1.4.1.6527.3.1.1.48.1
tmnxIPsecGroups
OBJECT-IDENTITY
1.3.6.1.4.1.6527.3.1.1.48.2
tmnxIPsecNotifGroups
OBJECT-IDENTITY
1.3.6.1.4.1.6527.3.1.1.48.3
tmnxIPsecObjects
OBJECT-IDENTITY
1.3.6.1.4.1.6527.3.1.2.48
tmnxIPsecTransformTblLastChanged
OBJECT-TYPE
The value of tmnxIPsecTransformTblLastChanged indicates the sysUpTime at the time of the last modification to tmnxIPsecTransformTable by adding, deleting an entry or change to a writable object in the table. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value.
1.3.6.1.4.1.6527.3.1.2.48.1TimeStampread-onlycurrent
tmnxIPsecTransformTable
OBJECT-TYPE
Table to store the IPsec transform entries.
1.3.6.1.4.1.6527.3.1.2.48.2not-accessiblecurrent
tmnxIPsecTransformEntry
OBJECT-TYPE
Information about a single IPsec transform entry.
1.3.6.1.4.1.6527.3.1.2.48.2.1not-accessiblecurrent
tmnxIPsecTransformId
OBJECT-TYPE
The value of tmnxIPsecTransformId specifies the id of a transform entry and is the primary index for the table tmnxIPsecTransformTable.
1.3.6.1.4.1.6527.3.1.2.48.2.1.1TmnxIPsecTransformIdnot-accessiblecurrent
tmnxIPsecTransformRowStatus
OBJECT-TYPE
The tmnxIPsecTransformRowStatus object is used to create and delete rows in the tmnxIPsecTransformTable.
1.3.6.1.4.1.6527.3.1.2.48.2.1.2RowStatusread-createcurrent
tmnxIPsecTransformLastChanged
OBJECT-TYPE
The value of tmnxIPsecTransformLastChanged indicates the sysUpTime at the time of the last modification of this entry. If no changes were made to the entry since the last re-initialization of the local network management subsystem, then this object contains a zero value.
1.3.6.1.4.1.6527.3.1.2.48.2.1.3TimeStampread-onlycurrent
tmnxIPsecTransformAuthAlgorithm
OBJECT-TYPE
The value of tmnxIPsecTransformAuthAlgorithm specifies the Hashing algorithm used for the AH (Authentication Header) protocol's authentication function. If 'none' is used then AH protocol will not be used.
1.3.6.1.4.1.6527.3.1.2.48.2.1.4TmnxAuthAlgorithmread-createcurrent
tmnxIPsecTransformEncrAlgorithm
OBJECT-TYPE
The value of tmnxIPsecTransformEncrAlgorithm specifies the Encryption algorithm to be used for the IPsec session. Encryption only applies to ESP(Encapsulating Security Payload) configurations. If encryption is 'null', then ESP will not be used.
1.3.6.1.4.1.6527.3.1.2.48.2.1.5TmnxEncrAlgorithmread-createcurrent
tmnxIkePolicyTableLastChanged
OBJECT-TYPE
The value of tmnxIkePolicyTableLastChanged indicates the sysUpTime at the time of the last modification to tmnxIkePolicyTable by adding, deleting an entry or change to a writable object in the table. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value.
1.3.6.1.4.1.6527.3.1.2.48.3TimeStampread-onlycurrent
tmnxIkePolicyTable
OBJECT-TYPE
Table to store the Ike policy entries.
1.3.6.1.4.1.6527.3.1.2.48.4not-accessiblecurrent
tmnxIkePolicyEntry
OBJECT-TYPE
Information about a single Ike policy entry.
1.3.6.1.4.1.6527.3.1.2.48.4.1not-accessiblecurrent
tmnxIkePolicyId
OBJECT-TYPE
The value of tmnxIkePolicyId specifies the id of a policy entry and is the primary index for the table tmnxIkePolicyTable.
1.3.6.1.4.1.6527.3.1.2.48.4.1.1TmnxIkePolicyIdnot-accessiblecurrent
tmnxIkePolicyRowStatus
OBJECT-TYPE
The tmnxIkePolicyRowStatus object is used to create and delete rows in the tmnxIkePolicyTable.
1.3.6.1.4.1.6527.3.1.2.48.4.1.2RowStatusread-createcurrent
tmnxIkePolicyLastChanged
OBJECT-TYPE
The value of tmnxIkePolicyLastChanged indicates the sysUpTime at the time of the last modification of this entry. If no changes were made to the entry since the last re-initialization of the local network management subsystem, then this object contains a zero value.
1.3.6.1.4.1.6527.3.1.2.48.4.1.3TimeStampread-onlycurrent
tmnxIkePolicyDescription
OBJECT-TYPE
The value of tmnxIkePolicyDescription specifies the user-provided description for each tmnxIkePolicyEntry in the table tmnxIkePolicyTable.
1.3.6.1.4.1.6527.3.1.2.48.4.1.4TItemDescriptionread-createcurrent
tmnxIkePolicyIkeMode
OBJECT-TYPE
The value of tmnxIkePolicyIkeMode specifies the mode of operation, which determines the number of messages used to establish the session.
1.3.6.1.4.1.6527.3.1.2.48.4.1.5TmnxIkePolicyIkeModeread-createcurrent
tmnxIkePolicyDHGroup
OBJECT-TYPE
The value of tmnxIkePolicyDHGroup specifes the Diffie-Hellman group to be used for calculating session keys which will be used in the Ike proposal.
1.3.6.1.4.1.6527.3.1.2.48.4.1.6TmnxIkePolicyDHGroupread-createcurrent
tmnxIkePolicyPFSEnabled
OBJECT-TYPE
The value of tmnxIkePolicyPFSEnabled specifies whether PFS(perfect forward secrecy) on the tunnel using this policy is enabled or not. When tmnxIkePolicyPFSDHGroup has a value of 'true', PFS is enabled.
1.3.6.1.4.1.6527.3.1.2.48.4.1.7TruthValueread-createcurrent
tmnxIkePolicyPFSDHGroup
OBJECT-TYPE
The value of tmnxIkePolicyPFSDHGroup is used only if the value of the tmnxIkePolicyPFSEnabled is 'true'. The value of tmnxIkePolicyPFSDHGroup specifies the new Diffie-hellman key exchange each time the SA(Security Association) key is renegotiated. After the SA expires, the key is forgotten and another key is generated (if the SA remains up). This means that an attacker who cracks part of the exchange can only read the part that used the key before the key changed. There is no advantage of cracking the other parts if the attacker has already cracked one.
1.3.6.1.4.1.6527.3.1.2.48.4.1.8TmnxIkePolicyDHGroupread-createcurrent
tmnxIkePolicyAuthAlgorithm
OBJECT-TYPE
The value of tmnxIkePolicyAuthAlgorithm specifies the Hashing algorithm used in the phase 1 SA.
1.3.6.1.4.1.6527.3.1.2.48.4.1.9TmnxAuthAlgorithmread-createcurrent
tmnxIkePolicyEncrAlgorithm
OBJECT-TYPE
The value of tmnxIkePolicyEncrAlgorithm specifies the Encryption algorithm to be used in the phase 1 SA.
1.3.6.1.4.1.6527.3.1.2.48.4.1.10TmnxEncrAlgorithmread-createcurrent
tmnxIkePolicyIsakmpLifeTime
OBJECT-TYPE
The value of tmnxIkePolicyIsakmpLifeTime specifies the lifetime of the phase 1 Ike key. ISAKMP stands for Internet Security Association and Key Management Protocol
1.3.6.1.4.1.6527.3.1.2.48.4.1.11Unsigned32 (1200..172800)read-createcurrent
tmnxIkePolicyIPsecLifeTime
OBJECT-TYPE
The value of tmnxIkePolicyIPsecLifeTime specifies the lifetime of the phase 2 Ike key.
1.3.6.1.4.1.6527.3.1.2.48.4.1.12Unsigned32 (1200..172800)read-createcurrent
tmnxIkePolicyNatTraversal
OBJECT-TYPE
The value of tmnxIkePolicyNatTraversal specifies whether NAT-T(network address translation traversal) is 'enabled', 'disabled' or in 'forced' mode.
1.3.6.1.4.1.6527.3.1.2.48.4.1.13INTEGER {enable(1), disable(2), force(3)}read-createcurrent
tmnxIkePolicyNatTKeepAliveIntvl
OBJECT-TYPE
The value of tmnxIkePolicyNatTKeepAliveIntvl specifies the keep alive interval for NAT-T. If the value of tmnxIkePolicyNatTKeepAliveIntvl is '0', then keep alives are disabled.
1.3.6.1.4.1.6527.3.1.2.48.4.1.14Unsigned32 (0 | 120..600)read-createcurrent
tmnxIkePolicyNatTBehindNatOnly
OBJECT-TYPE
The value of tmnxIkePolicyNatTBehindNatOnly specifies whether the keep alive packets should be sent only when behind a NAT.
1.3.6.1.4.1.6527.3.1.2.48.4.1.15TruthValueread-createcurrent
tmnxIkePolicyDpd
OBJECT-TYPE
The value of tmnxIkePolicyDpd specifies whether DPD (dead peer detection) is 'enable', 'disable' or in 'replyOnly' mode. The DPD vendor ID is always advertised to the peer. To the extent that the peer advertises DPD support as well, the service-router will always reply to the peer's 'Are-You-There' messages. If tmnxIkePolicyDpd object is set to 'enable' the service-router will also send its own 'Are-You-There' message to the peer at the interval specified by tmnxIkePolicyDpdInterval. If tmnxIkePolicyDpd object is set to 'disable' the service-router will never send its own 'Are-You-There' message to the peer. If tmnxIkePolicyDpd object is set to 'replyOnly' the service-router will take the peer's 'Are-You-There' message as proof of 'liveliness' and will suppress the sending of its own 'Are-You-There' messages. Once it stops receiving 'Are-You-There' messages from the peer, it will start sending its own to determine if the peer is dead. The service-router will only send an 'Are-You-There' message when the other side has been idle (no traffic was forwarded through it) since the last tmnxIkePolicyDpdInterval. If the other side is active (as determined by its traffic counters) it is assumed the peer is alive and the 'Are-You-There' message is suppressed.
1.3.6.1.4.1.6527.3.1.2.48.4.1.16INTEGER {enable(1), disable(2), replyOnly(3)}read-createcurrent
tmnxIkePolicyDpdInterval
OBJECT-TYPE
The value of tmnxIkePolicyDpdInterval specifies the dead peer detection interval.
1.3.6.1.4.1.6527.3.1.2.48.4.1.17Unsigned32 (10..300)read-createcurrent
tmnxIkePolicyDpdMaxRetries
OBJECT-TYPE
The value of tmnxIkePolicyDpdMaxRetries specifies the number of retries done before the peer is determined dead.
1.3.6.1.4.1.6527.3.1.2.48.4.1.18Unsigned32 (2..5)read-createcurrent
tmnxIkePolicyAuthMethod
OBJECT-TYPE
The value of tmnxIkePolicyAuthMethod specifies the authentication method used with this IKE policy for the remote-peer.
1.3.6.1.4.1.6527.3.1.2.48.4.1.19TmnxIkePolicyAuthMethodread-createcurrent
tmnxIkePolicyIkeVersion
OBJECT-TYPE
The value of tmnxIkePolicyIkeVersion specifies the IKE version to be used with this IKE policy.
1.3.6.1.4.1.6527.3.1.2.48.4.1.20TmnxIkeVersionread-createcurrent
tmnxIkePolicyOwnAuthMethod
OBJECT-TYPE
The value of tmnxIkePolicyOwnAuthMethod specifies the authentication method used with this IKE policy on its own side.
1.3.6.1.4.1.6527.3.1.2.48.4.1.21TmnxIkePolicyOwnAuthMethodread-createcurrent
tmnxIPsecTunnelTableLastChanged
OBJECT-TYPE
The value of tmnxIPsecTunnelTableLastChanged indicates the sysUpTime at the time of the last modification to tmnxIPsecTunnelTable by adding, deleting an entry or change to a writable object in the table. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value.
1.3.6.1.4.1.6527.3.1.2.48.5TimeStampread-onlycurrent
tmnxIPsecTunnelTable
OBJECT-TYPE
Table to store the IPsec Tunnel entries.
1.3.6.1.4.1.6527.3.1.2.48.6not-accessiblecurrent
tmnxIPsecTunnelEntry
OBJECT-TYPE
Information about a single IPsec Tunnel entry.
1.3.6.1.4.1.6527.3.1.2.48.6.1not-accessiblecurrent
tmnxIPsecTunnelName
OBJECT-TYPE
The value of tmnxIPsecTunnelName specifies the name of the tunnel and is part of the index for the table tmnxIPsecTunnelTable.
1.3.6.1.4.1.6527.3.1.2.48.6.1.1TNamedItemnot-accessiblecurrent
tmnxIPsecTunnelRowStatus
OBJECT-TYPE
The tmnxIPsecTunnelRowStatus object is used to create and delete rows in the tmnxIPsecTunnelTable.
1.3.6.1.4.1.6527.3.1.2.48.6.1.2RowStatusread-createcurrent
tmnxIPsecTunnelLastChanged
OBJECT-TYPE
The value of tmnxIPsecTunnelLastChanged indicates the sysUpTime at the time of the last modification of this entry. If no changes were made to the entry since the last re-initialization of the local network management subsystem, then this object contains a zero value.
1.3.6.1.4.1.6527.3.1.2.48.6.1.3TimeStampread-onlycurrent
tmnxIPsecTunnelDescription
OBJECT-TYPE
The value of tmnxIPsecTunnelDescription specifies the user-provided description for each tmnxIPsecTunnelEntry in the table tmnxIPsecTunnelTable.
1.3.6.1.4.1.6527.3.1.2.48.6.1.4TItemDescriptionread-createcurrent
tmnxIPsecTunnelLclGwAddrType
OBJECT-TYPE
The value of tmnxIPsecTunnelLclGwAddrType specifies the address type of address in tmnxIPsecTunnelLclGwAddr.
1.3.6.1.4.1.6527.3.1.2.48.6.1.5InetAddressTyperead-createcurrent
tmnxIPsecTunnelLclGwAddr
OBJECT-TYPE
The value of tmnxIPsecTunnelLclGwAddr specifies the address of the interface on the local node of this IPsec tunnel.
1.3.6.1.4.1.6527.3.1.2.48.6.1.6InetAddress (SIZE(0 | 4 | 16 | 20))read-createcurrent
tmnxIPsecTunnelRemGwAddrType
OBJECT-TYPE
The value of tmnxIPsecTunnelRemGwAddrType specifies the address type of address in tmnxIPsecTunnelRemGwAddr.
1.3.6.1.4.1.6527.3.1.2.48.6.1.7InetAddressTyperead-createcurrent
tmnxIPsecTunnelRemGwAddr
OBJECT-TYPE
The value of tmnxIPsecTunnelRemGwAddr specifies the address of the interface on the remote node of this IPsec tunnel.
1.3.6.1.4.1.6527.3.1.2.48.6.1.8InetAddress (SIZE(0 | 4 | 16 | 20))read-createcurrent
tmnxIPsecTunnelPublicSvcId
OBJECT-TYPE
The value of tmnxIPsecTunnelPublicSvcId specifies the service-id of the tunnel delivery service. The TIMETRA-SERV-MIB::svcType of the delivery service must be 'ies (5)' or 'vprn (4)', otherwise the set request will fail with an 'inconsistentValue' error.
1.3.6.1.4.1.6527.3.1.2.48.6.1.9TmnxServIdread-createcurrent
tmnxIPsecTunnelSecurityPolicyId
OBJECT-TYPE
The value of tmnxIPsecTunnelSecurityPolicyId specifies the IPsec security policy entry in the tmnxIPsecPolicyTable that this tunnel will use.
1.3.6.1.4.1.6527.3.1.2.48.6.1.10TmnxIPsecPolicyIdOrZeroread-createcurrent
tmnxIPsecTunnelKeyingType
OBJECT-TYPE
The value of tmnxIPsecTunnelKeyingType specifies the keying type that this tunnel will use.
1.3.6.1.4.1.6527.3.1.2.48.6.1.11TmnxIPsecKeyingTyperead-createcurrent
tmnxIPsecTunnelDynTransformId1
OBJECT-TYPE
The value of tmnxIPsecTunnelDynTransformId1 specifies the first IPsec transform entry in the table tmnxIPsecTransformTable that this tunnel will use.
1.3.6.1.4.1.6527.3.1.2.48.6.1.12TmnxIPsecTransformIdOrZeroread-createcurrent
tmnxIPsecTunnelDynTransformId2
OBJECT-TYPE
The value of tmnxIPsecTunnelDynTransformId2 specifies the second IPsec transform entry in the table tmnxIPsecTransformTable that this tunnel will use. The value of tmnxIPsecTunnelDynTransformId2 is valid and greater than 0, only if the value of tmnxIPsecTunnelKeyingType is 'dynamic'.
1.3.6.1.4.1.6527.3.1.2.48.6.1.13TmnxIPsecTransformIdOrZeroread-createcurrent
tmnxIPsecTunnelDynTransformId3
OBJECT-TYPE
The value of tmnxIPsecTunnelDynTransformId3 specifies the third IPsec transform entry in the table tmnxIPsecTransformTable that this tunnel will use. The value of tmnxIPsecTunnelDynTransformId3 is valid and greater than 0, only if the value of tmnxIPsecTunnelKeyingType is 'dynamic'.
1.3.6.1.4.1.6527.3.1.2.48.6.1.14TmnxIPsecTransformIdOrZeroread-createcurrent
tmnxIPsecTunnelDynTransformId4
OBJECT-TYPE
The value of tmnxIPsecTunnelDynTransformId4 specifies the fourth IPsec transform entry in the table tmnxIPsecTransformTable that this tunnel will use. The value of tmnxIPsecTunnelDynTransformId3 is valid and greater than 0, only if the value of tmnxIPsecTunnelKeyingType is 'dynamic'.
1.3.6.1.4.1.6527.3.1.2.48.6.1.15TmnxIPsecTransformIdOrZeroread-createcurrent
tmnxIPsecTunnelIkePolicyId
OBJECT-TYPE
The object tmnxIPsecTunnelIkePolicyId specifies the IKE policy entry that this tunnel will use. The value of tmnxIPsecTunnelIkePolicyId is valid and greater than 0, only if the value of tmnxIPsecTunnelKeyingType is 'dynamic'.
1.3.6.1.4.1.6527.3.1.2.48.6.1.16TmnxIkePolicyIdOrZeroread-createcurrent
tmnxIPsecTunnelIkePreSharedKey
OBJECT-TYPE
The value of tmnxIPsecTunnelIkePreSharedKey specifies the shared secret between the two peers forming the tunnel. The value of tmnxIPsecTunnelIkePreSharedKey is a valid and non null string only if the value of tmnxIPsecTunnelKeyingType is 'dynamic'.
1.3.6.1.4.1.6527.3.1.2.48.6.1.17OCTET STRING (SIZE(0..64))read-createcurrent
tmnxIPsecTunnelAdminState
OBJECT-TYPE
The value of tmnxIPsecTunnelAdminState specifies the administrative state of the tmnxIPsecTunnelEntry.
1.3.6.1.4.1.6527.3.1.2.48.6.1.18TmnxAdminStateread-createcurrent
tmnxIPsecTunnelOperState
OBJECT-TYPE
The value of tmnxIPsecTunnelOperState indicates the operational status of tmnxIPsecTunnelEntry.
1.3.6.1.4.1.6527.3.1.2.48.6.1.19TmnxOperStateread-onlycurrent
tmnxIPsecTunnelOperFlags
OBJECT-TYPE
The value of tmnxIPsecTunnelOperFlags indicates the reason why the tunnel is operationally down.
1.3.6.1.4.1.6527.3.1.2.48.6.1.20Bits {unresolvedLocalIp(0), tunnelAdminDown(1), sapDown(2), unresolvedPublicSvc(3), bfdSessionDown(4), reserved1(5), reserved2(6), invalidCertFile(7), invalidKeyFile(8)}read-onlycurrent
tmnxIPsecTunnelReplayWindow
OBJECT-TYPE
The value of tmnxIPsecTunnelReplayWindow specifies the size of the anti-replay window. If the value of tmnxIPsecTunnelReplayWindow is set to 0, then the anti-replay feature is disabled.
1.3.6.1.4.1.6527.3.1.2.48.6.1.21Unsigned32 (0 | 32 | 64 | 128 | 256 | 512)read-createcurrent
tmnxIPsecTunnelAutoEstablish
OBJECT-TYPE
The value of tmnxIPsecTunnelAutoEstablish specifies whether to attempt to establish a phase 1 exchange automatically.
1.3.6.1.4.1.6527.3.1.2.48.6.1.22TruthValueread-createcurrent
tmnxIPsecTunnelBfdDesignate
OBJECT-TYPE
The value of tmnxIPsecTunnelBfdDesignate specifies whether this IPSec tunnel is the BFD designated tunnel.
1.3.6.1.4.1.6527.3.1.2.48.6.1.23TruthValueread-createcurrent
tmnxIPsecTunnelCertTrustAnchor
OBJECT-TYPE
The value of tmnxIPsecTunnelCertTrustAnchor specifies the name for Certificate-Authority Profile name associated with this SAP IPSec tunnel certificate. An 'inconsistentValue' error is returned if this object is modified when tmnxIPsecTunnelAdminState is in 'inService' state.
1.3.6.1.4.1.6527.3.1.2.48.6.1.24TNamedItemOrEmptyread-createcurrent
tmnxIPsecTunnelCertFile
OBJECT-TYPE
The value of tmnxIPsecTunnelCertFile specifies the local file URL of the certifiate to be used with this SAP IPSec tunnel.
1.3.6.1.4.1.6527.3.1.2.48.6.1.25DisplayStringread-createcurrent
tmnxIPsecTunnelKeyFile
OBJECT-TYPE
The value of tmnxIPsecTunnelKeyFile specifies the key-pair file to be used for X.509 certificate authentication with this SAP IPSec tunnel.
1.3.6.1.4.1.6527.3.1.2.48.6.1.26DisplayStringread-createcurrent
tmnxIPsecTunnelLocalIdType
OBJECT-TYPE
The value of tmnxIPsecTunnelLocalIdType specifies the local-identifier type used for IDi or IDr for IKEv2. An 'inconsistentValue' error is returned if this object is modified when tmnxIPsecTunnelAdminState is in 'inService' state.
1.3.6.1.4.1.6527.3.1.2.48.6.1.27TmnxIPsecLocalIdTyperead-createcurrent
tmnxIPsecTunnelLocalIdValue
OBJECT-TYPE
The value of tmnxIPsecTunnelLocalIdValue specifies the value associated with tmnxIPsecTunnelLocalIdType object. Value is extracted from the configured certificate when tmnxIPsecTunnelLocalIdType is set to 'dn'.
1.3.6.1.4.1.6527.3.1.2.48.6.1.28DisplayStringread-createcurrent
tmnxIPsecTunnelClearDfBit
OBJECT-TYPE
The value of tmnxIPsecTunnelClearDfBit specifies whether to clear Do not Fragment (DF) bit in the outgoing packets in this tunnel.
1.3.6.1.4.1.6527.3.1.2.48.6.1.29TruthValueread-createcurrent
tmnxIPsecTunnelIpMtu
OBJECT-TYPE
The value of tmnxIPsecTunnelIpMtu specifies the MTU size for IP packets for this tunnel. A value set to zero indicates maximum supported MTU size on the SAP for this tunnel.
1.3.6.1.4.1.6527.3.1.2.48.6.1.30Unsigned32 (0 | 512..9000)read-createcurrent
tmnxIPsecTunnelHostISA
OBJECT-TYPE
The value of tmnxIPsecTunnelHostISA indicates the active ISA that is being used to host this IPsec tunnel. This object will have a value of zero when this tunnel is operationally down.
1.3.6.1.4.1.6527.3.1.2.48.6.1.31TmnxHwIndexOrZeroread-onlycurrent
tmnxIPsecTunnelStatsTable
OBJECT-TYPE
Table to store IPsec Tunnel statistics
1.3.6.1.4.1.6527.3.1.2.48.7not-accessiblecurrent
tmnxIPsecTunnelStatsEntry
OBJECT-TYPE
Statistics for a single IPsec Tunnel.
1.3.6.1.4.1.6527.3.1.2.48.7.1not-accessiblecurrent
tmnxIPsecTunnelIsakmpState
OBJECT-TYPE
The value of tmnxIPsecTunnelIsakmpState indicates the state of phase 1 IPsec negotiation.
1.3.6.1.4.1.6527.3.1.2.48.7.1.1INTEGER {up(1), down(2)}read-onlycurrent
tmnxIPsecTunnelIsakmpEstabTime
OBJECT-TYPE
The value of tmnxIPsecTunnelIsakmpEstabTime indicates the sysUpTime at the time the IPsec phase 1 negotiation completed.
1.3.6.1.4.1.6527.3.1.2.48.7.1.2TimeStampread-onlycurrent
tmnxIPsecTunnelIsakmpNegLifeTime
OBJECT-TYPE
The value of tmnxIPsecTunnelIsakmpNegLifeTime indicates the lifetime negotiated for phase1 Ike key.
1.3.6.1.4.1.6527.3.1.2.48.7.1.3Unsigned32read-onlycurrent
tmnxIPsecTunnelNumDpdTx
OBJECT-TYPE
The value of tmnxIPsecTunnelNumDpdTx indicates the number of Dead-Peer-Detection packets transmitted.
1.3.6.1.4.1.6527.3.1.2.48.7.1.4Counter32read-onlycurrent
tmnxIPsecTunnelNumDpdRx
OBJECT-TYPE
The value of tmnxIPsecTunnelNumDpdRx indicates the number of Dead-Peer-Detection packets received.
1.3.6.1.4.1.6527.3.1.2.48.7.1.5Counter32read-onlycurrent
tmnxIPsecTunnelNumDpdAckTx
OBJECT-TYPE
The value of tmnxIPsecTunnelNumDpdAckTx indicates the number of Dead-Peer-Detection acknowledgement packets transmitted.
1.3.6.1.4.1.6527.3.1.2.48.7.1.6Counter32read-onlycurrent
tmnxIPsecTunnelNumDpdAckRx
OBJECT-TYPE
The value of tmnxIPsecTunnelNumDpdAckRx indicates the number of Dead-Peer-Detection acknowledgement packets received.
1.3.6.1.4.1.6527.3.1.2.48.7.1.7Counter32read-onlycurrent
tmnxIPsecTunnelNumExpRx
OBJECT-TYPE
The value of tmnxIPsecTunnelNumExpRx indicates the number of DPD R-U-THERE packets that have not been acknowledged.
1.3.6.1.4.1.6527.3.1.2.48.7.1.8Counter32read-onlycurrent
tmnxIPsecTunnelNumInvalidDpdRx
OBJECT-TYPE
The value of tmnxIPsecTunnelNumInvalidDpdRx indicates the number of malformed DPD R-U-THERE acknowledgement packets received.
1.3.6.1.4.1.6527.3.1.2.48.7.1.9Counter32read-onlycurrent
tmnxIPsecTunnelNumCtrlPktsTx
OBJECT-TYPE
The value of tmnxIPsecTunnelNumCtrlPktsTx indicates the number of control packets this IPsec Tunnel has sent.
1.3.6.1.4.1.6527.3.1.2.48.7.1.10Counter32read-onlycurrent
tmnxIPsecTunnelNumCtrlPktsRx
OBJECT-TYPE
The value of tmnxIPsecTunnelNumCtrlPktsRx indicates the number of control packets this IPsec Tunnel has received.
1.3.6.1.4.1.6527.3.1.2.48.7.1.11Counter32read-onlycurrent
tmnxIPsecTunnelNumCtrlTxErrors
OBJECT-TYPE
The value of tmnxIPsecTunnelNumCtrlTxErrors indicates the number of control packet transmit errors.
1.3.6.1.4.1.6527.3.1.2.48.7.1.12Counter32read-onlycurrent
tmnxIPsecTunnelNumCtrlRxErrors
OBJECT-TYPE
The value of tmnxIPsecTunnelNumCtrlRxErrors indicates the number of control packet receive errors.
1.3.6.1.4.1.6527.3.1.2.48.7.1.13Counter32read-onlycurrent
tmnxIPsecPolicyTableLastChanged
OBJECT-TYPE
The value of tmnxIPsecPolicyTableLastChanged indicates the sysUpTime at the time of the last modification to tmnxIPsecPolicyTable by adding, deleting an entry or change to a writable object in the table. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value.
1.3.6.1.4.1.6527.3.1.2.48.8TimeStampread-onlycurrent
tmnxIPsecPolicyTable
OBJECT-TYPE
Table to store the IPsec Security Policy entries.
1.3.6.1.4.1.6527.3.1.2.48.9not-accessiblecurrent
tmnxIPsecPolicyEntry
OBJECT-TYPE
Information about a single IPsec Security Policy entry.
1.3.6.1.4.1.6527.3.1.2.48.9.1not-accessiblecurrent
tmnxIPsecPolicyId
OBJECT-TYPE
The value of tmnxIPsecPolicyId specifies the id of a Security Policy entry and is the primary index for the table.
1.3.6.1.4.1.6527.3.1.2.48.9.1.1TmnxIPsecPolicyIdnot-accessiblecurrent
tmnxIPsecPolicyRowStatus
OBJECT-TYPE
The tmnxIPsecPolicyRowStatus object is used to create and delete rows in the tmnxIPsecPolicyTable.
1.3.6.1.4.1.6527.3.1.2.48.9.1.2RowStatusread-createcurrent
tmnxIPsecPolicyLastChanged
OBJECT-TYPE
The value of tmnxIPsecPolicyLastChanged indicates the sysUpTime at the time of the last modification of this entry. If no changes were made to the entry since the last re-initialization of the local network management subsystem, then this object contains a zero value.
1.3.6.1.4.1.6527.3.1.2.48.9.1.3TimeStampread-onlycurrent
tmnxIPsecPlcyParamsTblLastChangd
OBJECT-TYPE
The value of tmnxIPsecPlcyParamsTblLastChangd indicates the sysUpTime at the time of the last modification to tmnxIPsecPolicyParamsTable by adding, deleting an entry or change to a writable object in the table. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value.
1.3.6.1.4.1.6527.3.1.2.48.10TimeStampread-onlycurrent
tmnxIPsecPolicyParamsTable
OBJECT-TYPE
Table to store the IPsec Security Policy Params entries.
1.3.6.1.4.1.6527.3.1.2.48.11not-accessiblecurrent
tmnxIPsecPolicyParamsEntry
OBJECT-TYPE
Information about a single IPsec Security policy params entry.
1.3.6.1.4.1.6527.3.1.2.48.11.1not-accessiblecurrent
tmnxIPsecPolicyParamsId
OBJECT-TYPE
The value of tmnxIPsecPolicyParamsId specifies the id of an IPsec policy params entry and is part of the index for the tmnxIPsecPolicyParamsTable.
1.3.6.1.4.1.6527.3.1.2.48.11.1.1Unsigned32 (1..16)not-accessiblecurrent
tmnxIPsecPolicyParamsRowStatus
OBJECT-TYPE
The tmnxIPsecPolicyParamsRowStatus object is used to create and delete rows in the tmnxIPsecPolicyParamsTable.
1.3.6.1.4.1.6527.3.1.2.48.11.1.2RowStatusread-createcurrent
tmnxIPsecPolicyParamsLastChanged
OBJECT-TYPE
The value of tmnxIPsecPolicyParamsLastChanged indicates the sysUpTime at the time of the last modification of this entry. If no changes were made to the entry since the last re-initialization of the local network management subsystem, then this object contains a zero value.
1.3.6.1.4.1.6527.3.1.2.48.11.1.3TimeStampread-onlycurrent
tmnxIPsecPolicyParamsLclAddrAny
OBJECT-TYPE
The value of tmnxIPsecPolicyParamsLclAddrAny specifies whether the ip address on the vpn side can be any ip address. If the value is 'true' then local ip address can be any ip address. Please look at the following chart for more details: tmnxIPsecPolicyParamsLclAddrAny true false ----------------------------------------------------------------- tmnxIPsecPolicyParamsLclAddrType unknown unknown or ipv4 tmnxIPsecPolicyParamsLclAddr ''H ''H or valid ipv4 tmnxIPsecPolicyParamsLclAPrefLen 0 0 to 32
1.3.6.1.4.1.6527.3.1.2.48.11.1.4TruthValueread-createcurrent
tmnxIPsecPolicyParamsLclAddrType
OBJECT-TYPE
The value of tmnxIPsecPolicyParamsLclAddrType specifies the address type of address in tmnxIPsecPolicyParamsLclAddr. If the value of tmnxIPsecPolicyParamsLclAddrAny is 'true' then the value of tmnxIPsecPolicyParamsLclAddrType will be 'unknown'.
1.3.6.1.4.1.6527.3.1.2.48.11.1.5InetAddressTyperead-createcurrent
tmnxIPsecPolicyParamsLclAddr
OBJECT-TYPE
The value of tmnxIPsecPolicyParamsLclAddr specifies the ip address on the vpn side. If the value of tmnxIPsecPolicyParamsLclAddrAny is 'true' then the value of tmnxIPsecPolicyParamsLclAddr will be empty(''H).
1.3.6.1.4.1.6527.3.1.2.48.11.1.6InetAddress (SIZE(0 | 4 | 16 | 20))read-createcurrent
tmnxIPsecPolicyParamsLclAPrefLen
OBJECT-TYPE
The value of tmnxIPsecPolicyParamsLclAPrefLen specifies the number of bits to match of the tmnxIPsecPolicyParamsLclAddr. If the value of tmnxIPsecPolicyParamsLclAddrAny is 'true' then the value of tmnxIPsecPolicyParamsLclAPrefLen will be 0.
1.3.6.1.4.1.6527.3.1.2.48.11.1.7InetAddressPrefixLengthread-createcurrent
tmnxIPsecPolicyParamsRemAddrAny
OBJECT-TYPE
The value of tmnxIPsecPolicyParamsRemAddrAny specifies whether the ip address on the tunnel side can be any ip address. If the value is 'true' then remote ip address can be any ip address. Please look at the following chart for more details: tmnxIPsecPolicyParamsLclAddrAny true false ----------------------------------------------------------------- tmnxIPsecPolicyParamsRemAddrType unknown unknown or ipv4 tmnxIPsecPolicyParamsRemAddr ''H ''H or valid ipv4 tmnxIPsecPolicyParamsRemAPrefLen 0 0 to 32
1.3.6.1.4.1.6527.3.1.2.48.11.1.8TruthValueread-createcurrent
tmnxIPsecPolicyParamsRemAddrType
OBJECT-TYPE
The value of tmnxIPsecPolicyParamsRemAddrType specifies the address type of address in tmnxIPsecPolicyParamsRemAddr. If the value of tmnxIPsecPolicyParamsRemAddrAny is 'true' then the value of tmnxIPsecPolicyParamsRemAddrType will be 'unknown'.
1.3.6.1.4.1.6527.3.1.2.48.11.1.9InetAddressTyperead-createcurrent
tmnxIPsecPolicyParamsRemAddr
OBJECT-TYPE
The value of tmnxIPsecPolicyParamsRemAddr specifies the ip address on the tunnel side. If the value of tmnxIPsecPolicyParamsRemAddrAny is 'true' then the value of tmnxIPsecPolicyParamsRemAddr will be empty(''H).
1.3.6.1.4.1.6527.3.1.2.48.11.1.10InetAddress (SIZE(0 | 4 | 16 | 20))read-createcurrent
tmnxIPsecPolicyParamsRemAPrefLen
OBJECT-TYPE
The value of tmnxIPsecPolicyParamsRemAPrefLen specifies the number of bits to match of the tmnxIPsecPolicyParamsRemAddr. If the value of tmnxIPsecPolicyParamsRemAddrAny is 'true' then the value of tmnxIPsecPolicyParamsRemAPrefLen will be 0.
1.3.6.1.4.1.6527.3.1.2.48.11.1.11InetAddressPrefixLengthread-createcurrent
tmnxIPsecSATableLastChanged
OBJECT-TYPE
The value of tmnxIPsecSATableLastChanged indicates the sysUpTime at the time of the last modification to tmnxIPsecSATable by adding, deleting an entry or change to a writable object in the table. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value.
1.3.6.1.4.1.6527.3.1.2.48.12TimeStampread-onlycurrent
tmnxIPsecSATable
OBJECT-TYPE
Table to store the IPsec manual and dynamic SA entries.
1.3.6.1.4.1.6527.3.1.2.48.13not-accessiblecurrent
tmnxIPsecSAEntry
OBJECT-TYPE
Information about a single IPsec SA entry.
1.3.6.1.4.1.6527.3.1.2.48.13.1not-accessiblecurrent
tmnxIPsecSAId
OBJECT-TYPE
The value of tmnxIPsecSAId specifies the id of an SA entry and is part of the index for the tmnxIPsecSATable.
1.3.6.1.4.1.6527.3.1.2.48.13.1.1Unsigned32 (1..16)not-accessiblecurrent
tmnxIPsecSAIndex
OBJECT-TYPE
The value of tmnxIPsecSAIndex specifies an additional index to uniquely indentify the SA entry in the tmnxIPsecSATable. The value of tmnxIPsecSAIndex is limited to a value of '1' when tmnxIPsecTunnelKeyingType corresponding to the tunnel specified tmnxIPsecTunnelName is set to 'static'.
1.3.6.1.4.1.6527.3.1.2.48.13.1.2Unsigned32 (1..2)not-accessiblecurrent
tmnxIPsecSADirection
OBJECT-TYPE
The value of tmnxIPsecSADirection specifies the direction on the IPsec tunnel to which this SA entry can be applied. The value of tmnxIPsecSADirection is also part of the index for the table tmnxIPsecSATable
1.3.6.1.4.1.6527.3.1.2.48.13.1.3TmnxIPsecDirectionnot-accessiblecurrent
tmnxIPsecSARowStatus
OBJECT-TYPE
The tmnxIPsecSARowStatus object is used to create and delete rows in the tmnxIPsecSATable. When creating an entry in tmnxIPsecSATable, the value of tmnxIPsecSARowStatus must be 'createAndGo' and the objects tmnxIPsecSAEncryptionKey, tmnxIPsecSAAuthenticationKey, tmnxIPsecSASpi, tmnxIPsecSAManualTransformId are required to be set in the same request.
1.3.6.1.4.1.6527.3.1.2.48.13.1.4RowStatusread-createcurrent
tmnxIPsecSALastChanged
OBJECT-TYPE
The value of tmnxIPsecSALastChanged indicates the sysUpTime at the time of the last modification of this entry. If no changes were made to the entry since the last re-initialization of the local network management subsystem, then this object contains a zero value.
1.3.6.1.4.1.6527.3.1.2.48.13.1.5TimeStampread-onlycurrent
tmnxIPsecSAType
OBJECT-TYPE
The value of tmnxIPsecSAType indicates whether this SA entry is created manually by the user or dynamically by the IPsec sub-system.
1.3.6.1.4.1.6527.3.1.2.48.13.1.6TmnxIPsecKeyingTyperead-onlycurrent
tmnxIPsecSAEncryptionKey
OBJECT-TYPE
The value of tmnxIPsecSAEncryptionKey specifies the key used for the encryption algorithm defined by the tmnxIPsecTransformEncrAlgorithm in the IPsec transform indexed by tmnxIPsecSAManualTransformId. The length of the key must match the length required by the encryption algorithm. If a key of another length is set, the request will fail with an 'inconsistentValue' error. There is no default value for tmnxIPsecSAEncryptionKey and this is a required object when creating an entry in tmnxIPsecSATable. If tmnxIPsecSAEncryptionKey is not specified when creating an entry, the request will fail with an 'inconsistentValue' error.
1.3.6.1.4.1.6527.3.1.2.48.13.1.7OCTET STRING (SIZE(0..32))read-createcurrent
tmnxIPsecSAAuthenticationKey
OBJECT-TYPE
The value of tmnxIPsecSAAuthenticationKey specifies the key used for the authentication algorithm defined by the tmnxIPsecTransformAuthAlgorithm in the IPsec transform indexed by tmnxIPsecSAManualTransformId. The length of the key must match the length required by the authentication algorithm. If a key of another length is set, the request will fail with an 'inconsistentValue' error. There is no default value for tmnxIPsecSAAuthenticationKey and this is a required object when creating an entry in tmnxIPsecSATable. If tmnxIPsecSAAuthenticationKey is not specified when creating an entry, the request will fail with an 'inconsistentValue' error.
1.3.6.1.4.1.6527.3.1.2.48.13.1.8OCTET STRING (SIZE(0..64))read-createcurrent
tmnxIPsecSASpi
OBJECT-TYPE
The value of tmnxIPsecSASpi specifies the SPI (Security Parameter Index) used to lookup the instruction to verify and decrypt the incoming IPsec packets when the value of tmnxIPsecSADirection is 'inbound'. The value of tmnxIPsecSASpi specifies the SPI that will be used in the encoding of the outgoing packets when the value of tmnxIPsecSADirection is 'outbound'. The remote node can use this SPI to lookup the instruction to verify and decrypt the packet. There is no default value for tmnxIPsecSASpi and this is a required object when creating an entry in tmnxIPsecSATable. If tmnxIPsecSAAuthenticationKey is not specified when creating an entry, the request will fail with an 'inconsistentValue' error.
1.3.6.1.4.1.6527.3.1.2.48.13.1.9Unsigned32 (256..16383)read-createcurrent
tmnxIPsecSAManualTransformId
OBJECT-TYPE
The value of tmnxIPsecSAManualTransformId specifies the transform entry that will be used by this SA entry. This object should be specified for all the entries created by the user which are manual SAs. If the value of tmnxIPsecSAType is 'dynamic', then the value of tmnxIPsecSAManualTransformId is irrelevant and will be zero. There is no default value for tmnxIPsecSAManualTransformId and this is a required object when creating an entry in tmnxIPsecSATable. If tmnxIPsecSAManualTransformId is not specified when creating an entry, the request will fail with an 'inconsistentValue' error.
1.3.6.1.4.1.6527.3.1.2.48.13.1.10TmnxIPsecTransformIdOrZeroread-createcurrent
tmnxIPsecSAAuthAlgorithm
OBJECT-TYPE
The value of tmnxIPsecSAAuthAlgorithm indicates the authentication algorithm used with this SA.
1.3.6.1.4.1.6527.3.1.2.48.13.1.11TmnxAuthAlgorithmread-onlycurrent
tmnxIPsecSAEncrAlgorithm
OBJECT-TYPE
The value of tmnxIPsecSAEncrAlgorithm indicates the encryption algorithm used with this SA.
1.3.6.1.4.1.6527.3.1.2.48.13.1.12TmnxEncrAlgorithmread-onlycurrent
tmnxIPsecSAStorageType
OBJECT-TYPE
The value of tmnxIPsecSAStorageType indicates how the row is stored. Entries with tmnxIPsecSAStorageType of 'read-only' are dynamic SAs and are created by the IPsec sub-system and cannot be modified or destroyed. All the entries created by the user are manual SAs and will have the tmnxIPsecSAStorageType as 'nonVolatile'.
1.3.6.1.4.1.6527.3.1.2.48.13.1.13StorageTyperead-onlycurrent
tmnxIPsecSAEstablishedTime
OBJECT-TYPE
The value of tmnxIPsecSAEstablishedTime indicates the sysUpTime at the time the IPsec phase 2 negotiation completed.
1.3.6.1.4.1.6527.3.1.2.48.13.1.14TimeStampread-onlycurrent
tmnxIPsecSANegotiatedLifeTime
OBJECT-TYPE
The value of tmnxIPsecSANegotiatedLifeTime indicates the lifetime negotiated for phase2 Ike key.
1.3.6.1.4.1.6527.3.1.2.48.13.1.15Unsigned32read-onlycurrent
tmnxIPsecSAStatsTable
OBJECT-TYPE
Table to retrieve the IPsec SA Statistics entries.
1.3.6.1.4.1.6527.3.1.2.48.14not-accessiblecurrent
tmnxIPsecSAStatsEntry
OBJECT-TYPE
Information about a single IPsec SA Statistics entry.
1.3.6.1.4.1.6527.3.1.2.48.14.1not-accessiblecurrent
tmnxIPsecSAStatsBytesProcessed
OBJECT-TYPE
The value of tmnxIPsecSAStatsBytesProcessed indicates the number of bytes successfully processed for this SA.
1.3.6.1.4.1.6527.3.1.2.48.14.1.1Counter64read-onlycurrent
tmnxIPsecSAStatsBytesProcLow32
OBJECT-TYPE
The value of tmnxIPsecSAStatsBytesProcLow32 indicates the lower 32 bits of the value of tmnxIPsecSAStatsBytesProcessed.
1.3.6.1.4.1.6527.3.1.2.48.14.1.2Counter32read-onlycurrent
tmnxIPsecSAStatsBytesProcHigh32
OBJECT-TYPE
The value of tmnxIPsecSAStatsBytesProcHigh32 indicates the higher 32 bits of the value of tmnxIPsecSAStatsBytesProcessed.
1.3.6.1.4.1.6527.3.1.2.48.14.1.3Counter32read-onlycurrent
tmnxIPsecSAStatsPktsProcessed
OBJECT-TYPE
The value of tmnxIPsecSAStatsPktsProcessed indicates the number of packets successfully processed for this SA.
1.3.6.1.4.1.6527.3.1.2.48.14.1.4Counter64read-onlycurrent
tmnxIPsecSAStatsPktsProcLow32
OBJECT-TYPE
The value of tmnxIPsecSAStatsPktsProcLow32 indicates the lower 32 bits of the value of tmnxIPsecSAStatsPktsProcessed.
1.3.6.1.4.1.6527.3.1.2.48.14.1.5Counter32read-onlycurrent
tmnxIPsecSAStatsPktsProcHigh32
OBJECT-TYPE
The value of tmnxIPsecSAStatsPktsProcHigh32 indicates the higher 32 bits of the value of tmnxIPsecSAStatsPktsProcessed.
1.3.6.1.4.1.6527.3.1.2.48.14.1.6Counter32read-onlycurrent
tmnxIPsecSAStatsCryptoErrors
OBJECT-TYPE
The value of tmnxIPsecSAStatsCryptoErrors indicates the number of crypto errors encountered on this SA. The crypto errors include errors on packets where protocol does not match or if the check on authentication header length failed.
1.3.6.1.4.1.6527.3.1.2.48.14.1.7Counter32read-onlycurrent
tmnxIPsecSAStatsReplayErrors
OBJECT-TYPE
The value of tmnxIPsecSAStatsReplayErrors indicates the number of replay errors encountered on this SA.
1.3.6.1.4.1.6527.3.1.2.48.14.1.8Counter32read-onlycurrent
tmnxIPsecSAStatsSAErrors
OBJECT-TYPE
The value of tmnxIPsecSAStatsSAErrors indicates the number of SA errors encountered on this SA. The SA errors include sequence number failure, invalid SA, ploicy version mismatch, illegal authentication algorithm, expanded packet too big, illegal configured algorithm and ttl decrement error.
1.3.6.1.4.1.6527.3.1.2.48.14.1.9Counter32read-onlycurrent
tmnxIPsecSAStatsPolicyErrors
OBJECT-TYPE
The value of tmnxIPsecSAStatsPolicyErrors indicates the number of policy errors encountered on this SA. The policy errors include bundled SA, selector check and policy direction error.
1.3.6.1.4.1.6527.3.1.2.48.14.1.10Counter32read-onlycurrent
tmnxIPsecMdaDpStatsTable
OBJECT-TYPE
Table to retrieve the IPsec Mda Data Path Statistics entries.
1.3.6.1.4.1.6527.3.1.2.48.15not-accessiblecurrent
tmnxIPsecMdaDpStatsEntry
OBJECT-TYPE
Information about a single IPsec Mda Data Path Statistics entry.
1.3.6.1.4.1.6527.3.1.2.48.15.1not-accessiblecurrent
tmnxIPsecMdaDpStatsEncryptPkts
OBJECT-TYPE
The value of tmnxIPsecMdaDpStatsEncryptPkts indicates the number of packets encrypted by the IPsec data path.
1.3.6.1.4.1.6527.3.1.2.48.15.1.1Counter64read-onlycurrent
tmnxIPsecMdaDpStatsEncryptPktsLow32
OBJECT-TYPE
The value of tmnxIPsecMdaDpStatsEncryptPktsLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpStatsEncryptPkts.
1.3.6.1.4.1.6527.3.1.2.48.15.1.2Counter32read-onlycurrent
tmnxIPsecMdaDpStatsEncryptPktsHigh32
OBJECT-TYPE
The value of tmnxIPsecMdaDpStatsEncryptPktsHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpStatsEncryptPkts.
1.3.6.1.4.1.6527.3.1.2.48.15.1.3Counter32read-onlycurrent
tmnxIPsecMdaDpStatsEncryptBytes
OBJECT-TYPE
The value of tmnxIPsecMdaDpStatsEncryptBytes indicates the number of bytes encrypted by the IPsec data path.
1.3.6.1.4.1.6527.3.1.2.48.15.1.4Counter64read-onlycurrent
tmnxIPsecMdaDpStatsEncryptBytesLow32
OBJECT-TYPE
The value of tmnxIPsecMdaDpStatsEncryptBytesLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpStatsEncryptBytes.
1.3.6.1.4.1.6527.3.1.2.48.15.1.5Counter32read-onlycurrent
tmnxIPsecMdaDpStatsEncryptBytesHigh32
OBJECT-TYPE
The value of tmnxIPsecMdaDpStatsEncryptBytesHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpStatsEncryptBytes.
1.3.6.1.4.1.6527.3.1.2.48.15.1.6Counter32read-onlycurrent
tmnxIPsecMdaDpStatsDecryptPkts
OBJECT-TYPE
The value of tmnxIPsecMdaDpStatsDecryptPkts indicates the number of packets encrypted by the IPsec data path.
1.3.6.1.4.1.6527.3.1.2.48.15.1.7Counter64read-onlycurrent
tmnxIPsecMdaDpStatsDecryptPktsLow32
OBJECT-TYPE
The value of tmnxIPsecMdaDpStatsDecryptPktsLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpStatsDecryptPkts.
1.3.6.1.4.1.6527.3.1.2.48.15.1.8Counter32read-onlycurrent
tmnxIPsecMdaDpStatsDecryptPktsHigh32
OBJECT-TYPE
The value of tmnxIPsecMdaDpStatsDecryptPktsHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpStatsDecryptPkts.
1.3.6.1.4.1.6527.3.1.2.48.15.1.9Counter32read-onlycurrent
tmnxIPsecMdaDpStatsDecryptBytes
OBJECT-TYPE
The value of tmnxIPsecMdaDpStatsDecryptBytes indicates the number of bytes encrypted by the IPsec data path.
1.3.6.1.4.1.6527.3.1.2.48.15.1.10Counter64read-onlycurrent
tmnxIPsecMdaDpStatsDecryptBytesLow32
OBJECT-TYPE
The value of tmnxIPsecMdaDpStatsDecryptBytesLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpStatsDecryptBytes.
1.3.6.1.4.1.6527.3.1.2.48.15.1.11Counter32read-onlycurrent
tmnxIPsecMdaDpStatsDecryptBytesHigh32
OBJECT-TYPE
The value of tmnxIPsecMdaDpStatsDecryptBytesHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpStatsDecryptBytes.
1.3.6.1.4.1.6527.3.1.2.48.15.1.12Counter32read-onlycurrent
tmnxIPsecMdaDpStatsTxPktErrs
OBJECT-TYPE
The value of tmnxIPsecMdaDpStatsTxPktErrs indicates the number of packets transmit failures by the IPsec data path.
1.3.6.1.4.1.6527.3.1.2.48.15.1.13Counter32read-onlycurrent
tmnxIPsecMdaDpStatsOutBDropPkts
OBJECT-TYPE
The value of tmnxIPsecMdaDpStatsOutBDropPkts indicates the number of packets dropped before and during outbound (encryption) processing by the IPsec data path.
1.3.6.1.4.1.6527.3.1.2.48.15.1.14Counter64read-onlycurrent
tmnxIPsecMdaDpStatsOutBDropPktsLow32
OBJECT-TYPE
The value of tmnxIPsecMdaDpStatsOutBDropPktsLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpStatsOutBDropPkts.
1.3.6.1.4.1.6527.3.1.2.48.15.1.15Counter32read-onlycurrent
tmnxIPsecMdaDpStatsOutBDropPktsHigh32
OBJECT-TYPE
The value of tmnxIPsecMdaDpStatsOutBDropPktsHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpStatsOutBDropPkts.
1.3.6.1.4.1.6527.3.1.2.48.15.1.16Counter32read-onlycurrent
tmnxIPsecMdaDpStatsOutBSAMisses
OBJECT-TYPE
The value of tmnxIPsecMdaDpStatsOutBSAMisses indicates the number of packets dropped before outbound (encryption) processing by the IPsec data path due to no SA (security association) present.
1.3.6.1.4.1.6527.3.1.2.48.15.1.17Counter64read-onlycurrent
tmnxIPsecMdaDpStatsOutBSAMissesLow32
OBJECT-TYPE
The value of tmnxIPsecMdaDpStatsOutBSAMissesLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpStatsOutBSAMisses.
1.3.6.1.4.1.6527.3.1.2.48.15.1.18Counter32read-onlycurrent
tmnxIPsecMdaDpStatsOutBSAMissesHigh32
OBJECT-TYPE
The value of tmnxIPsecMdaDpStatsOutBSAMissesHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpStatsOutBSAMisses.
1.3.6.1.4.1.6527.3.1.2.48.15.1.19Counter32read-onlycurrent
tmnxIPsecMdaDpStatsOutBPolicyEntryMisses
OBJECT-TYPE
The value of tmnxIPsecMdaDpStatsOutBPolicyEntryMisses indicates the number of packets dropped before outbound (encryption) processing by the IPsec data path due to no matching Policy Entry.
1.3.6.1.4.1.6527.3.1.2.48.15.1.20Counter32read-onlycurrent
tmnxIPsecMdaDpStatsInBDropPkts
OBJECT-TYPE
The value of tmnxIPsecMdaDpStatsInBDropPkts indicates the number of packets dropped before and during inbound (decryption) processing by the IPsec data path.
1.3.6.1.4.1.6527.3.1.2.48.15.1.21Counter64read-onlycurrent
tmnxIPsecMdaDpStatsInBDropPktsLow32
OBJECT-TYPE
The value of tmnxIPsecMdaDpStatsInBDropPktsLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpStatsInBDropPkts.
1.3.6.1.4.1.6527.3.1.2.48.15.1.22Counter32read-onlycurrent
tmnxIPsecMdaDpStatsInBDropPktsHigh32
OBJECT-TYPE
The value of tmnxIPsecMdaDpStatsInBDropPktsHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpStatsInBDropPkts.
1.3.6.1.4.1.6527.3.1.2.48.15.1.23Counter32read-onlycurrent
tmnxIPsecMdaDpStatsInBSAMisses
OBJECT-TYPE
The value of tmnxIPsecMdaDpStatsInBSAMisses indicates the number of packets dropped before inbound (decryption) processing by the IPsec data path due to no SA (security association) present.
1.3.6.1.4.1.6527.3.1.2.48.15.1.24Counter64read-onlycurrent
tmnxIPsecMdaDpStatsInBSAMissesLow32
OBJECT-TYPE
The value of tmnxIPsecMdaDpStatsInBSAMissesLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpStatsInBSAMisses.
1.3.6.1.4.1.6527.3.1.2.48.15.1.25Counter32read-onlycurrent
tmnxIPsecMdaDpStatsInBSAMissesHigh32
OBJECT-TYPE
The value of tmnxIPsecMdaDpStatsInBSAMissesHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpStatsInBSAMisses.
1.3.6.1.4.1.6527.3.1.2.48.15.1.26Counter32read-onlycurrent
tmnxIPsecMdaDpStatsInBIPDstSrcMismatches
OBJECT-TYPE
The value of tmnxIPsecMdaDpStatsInBIPDstSrcMismatches indicates the number of packets dropped before inbound (decryption) processing by the IPsec data path due to the received packet's outer IP destination or source address does not match the Tunnel's local or peer gateway address.
1.3.6.1.4.1.6527.3.1.2.48.15.1.27Counter32read-onlycurrent
tmnxIPsecMdaDpInFragments
OBJECT-TYPE
The value of tmnxIPsecMdaDpInFragments indicates the number of fragments received by the IPsec data path.
1.3.6.1.4.1.6527.3.1.2.48.15.1.28Counter64read-onlycurrent
tmnxIPsecMdaDpInFragmentsLow32
OBJECT-TYPE
The value of tmnxIPsecMdaDpInFragmentsLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpInFragments.
1.3.6.1.4.1.6527.3.1.2.48.15.1.29Counter32read-onlycurrent
tmnxIPsecMdaDpInFragmentsHigh32
OBJECT-TYPE
The value of tmnxIPsecMdaDpInFragmentsHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpInFragments.
1.3.6.1.4.1.6527.3.1.2.48.15.1.30Counter32read-onlycurrent
tmnxIPsecMdaDpPktsReassem
OBJECT-TYPE
The value of tmnxIPsecMdaDpPktsReassem indicates the number of packets reassembled by the IPsec data path.
1.3.6.1.4.1.6527.3.1.2.48.15.1.31Counter64read-onlycurrent
tmnxIPsecMdaDpPktsReassemLow32
OBJECT-TYPE
The value of tmnxIPsecMdaDpPktsReassemLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpPktsReassem.
1.3.6.1.4.1.6527.3.1.2.48.15.1.32Counter32read-onlycurrent
tmnxIPsecMdaDpPktsReassemHigh32
OBJECT-TYPE
The value of tmnxIPsecMdaDpPktsReassemHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpPktsReassem.
1.3.6.1.4.1.6527.3.1.2.48.15.1.33Counter32read-onlycurrent
tmnxIPsecMdaDpFragDropTime
OBJECT-TYPE
The value of tmnxIPsecMdaDpFragDropTime indicates the number of fragments dropped due to time-out by the IPsec data path.
1.3.6.1.4.1.6527.3.1.2.48.15.1.34Counter64read-onlycurrent
tmnxIPsecMdaDpFragDropTimeLow32
OBJECT-TYPE
The value of tmnxIPsecMdaDpFragDropTimeLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpFragDropTime.
1.3.6.1.4.1.6527.3.1.2.48.15.1.35Counter32read-onlycurrent
tmnxIPsecMdaDpFragDropTimeHigh32
OBJECT-TYPE
The value of tmnxIPsecMdaDpFragDropTimeHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpFragDropTime.
1.3.6.1.4.1.6527.3.1.2.48.15.1.36Counter32read-onlycurrent
tmnxIPsecMdaDpFragDropped
OBJECT-TYPE
The value of tmnxIPsecMdaDpFragDropped indicates the number of total fragments dropped by the IPsec data path.
1.3.6.1.4.1.6527.3.1.2.48.15.1.37Counter64read-onlycurrent
tmnxIPsecMdaDpFragDroppedLow32
OBJECT-TYPE
The value of tmnxIPsecMdaDpFragDroppedLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpFragDropped.
1.3.6.1.4.1.6527.3.1.2.48.15.1.38Counter32read-onlycurrent
tmnxIPsecMdaDpFragDroppedHigh32
OBJECT-TYPE
The value of tmnxIPsecMdaDpFragDroppedHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpFragDropped.
1.3.6.1.4.1.6527.3.1.2.48.15.1.39Counter32read-onlycurrent
tmnxIPsecMdaDpGreTnlInPkts
OBJECT-TYPE
The value of tmnxIPsecMdaDpGreTnlInPkts indicates the number of packets received by the GRE tunnel data path.
1.3.6.1.4.1.6527.3.1.2.48.15.1.40Counter64read-onlycurrent
tmnxIPsecMdaDpGreTnlInPktsLo
OBJECT-TYPE
The value of tmnxIPsecMdaDpGreTnlInPktsLo indicates the lower 32 bits of the number of packets received by the GRE tunnel data path.
1.3.6.1.4.1.6527.3.1.2.48.15.1.41Counter32read-onlycurrent
tmnxIPsecMdaDpGreTnlInPktsHi
OBJECT-TYPE
The value of tmnxIPsecMdaDpGreTnlInPktsHi indicates the higher 32 bits of the number of packets received by the GRE tunnel data path.
1.3.6.1.4.1.6527.3.1.2.48.15.1.42Counter32read-onlycurrent
tmnxIPsecMdaDpGreTnlInBytes
OBJECT-TYPE
The value of tmnxIPsecMdaDpGreTnlInBytes indicates the number of packets received by the GRE tunnel data path.
1.3.6.1.4.1.6527.3.1.2.48.15.1.43Counter64read-onlycurrent
tmnxIPsecMdaDpGreTnlInBytesLo
OBJECT-TYPE
The value of tmnxIPsecMdaDpGreTnlInBytesLo indicates the lower 32 bits of the number of packets received by the GRE tunnel data path.
1.3.6.1.4.1.6527.3.1.2.48.15.1.44Counter32read-onlycurrent
tmnxIPsecMdaDpGreTnlInBytesHi
OBJECT-TYPE
The value of tmnxIPsecMdaDpGreTnlInBytesHi indicates the higher 32 bits of the number of packets received by the GRE tunnel data path.
1.3.6.1.4.1.6527.3.1.2.48.15.1.45Counter32read-onlycurrent
tmnxIPsecMdaDpGreTnlInErrs
OBJECT-TYPE
The value of tmnxIPsecMdaDpGreTnlInErrs indicates the number of packets received by the GRE tunnel data path.
1.3.6.1.4.1.6527.3.1.2.48.15.1.46Counter64read-onlycurrent
tmnxIPsecMdaDpGreTnlInErrsLo
OBJECT-TYPE
The value of tmnxIPsecMdaDpGreTnlInErrsLo indicates the lower 32 bits of the number of packets received by the GRE tunnel data path.
1.3.6.1.4.1.6527.3.1.2.48.15.1.47Counter32read-onlycurrent
tmnxIPsecMdaDpGreTnlInErrsHi
OBJECT-TYPE
The value of tmnxIPsecMdaDpGreTnlInErrsHi indicates the higher 32 bits of the number of packets received by the GRE tunnel data path.
1.3.6.1.4.1.6527.3.1.2.48.15.1.48Counter32read-onlycurrent
tmnxIPsecMdaDpGreTnlOutPkts
OBJECT-TYPE
The value of tmnxIPsecMdaDpGreTnlOutPkts indicates the number of packets received by the GRE tunnel data path.
1.3.6.1.4.1.6527.3.1.2.48.15.1.49Counter64read-onlycurrent
tmnxIPsecMdaDpGreTnlOutPktsLo
OBJECT-TYPE
The value of tmnxIPsecMdaDpGreTnlOutPktsLo indicates the lower 32 bits of the number of packets received by the GRE tunnel data path.
1.3.6.1.4.1.6527.3.1.2.48.15.1.50Counter32read-onlycurrent
tmnxIPsecMdaDpGreTnlOutPktsHi
OBJECT-TYPE
The value of tmnxIPsecMdaDpGreTnlOutPktsHi indicates the higher 32 bits of the number of packets received by the GRE tunnel data path.
1.3.6.1.4.1.6527.3.1.2.48.15.1.51Counter32read-onlycurrent
tmnxIPsecMdaDpGreTnlOutBytes
OBJECT-TYPE
The value of tmnxIPsecMdaDpGreTnlOutBytes indicates the number of packets received by the GRE tunnel data path.
1.3.6.1.4.1.6527.3.1.2.48.15.1.52Counter64read-onlycurrent
tmnxIPsecMdaDpGreTnlOutBytesLo
OBJECT-TYPE
The value of tmnxIPsecMdaDpGreTnlOutBytesLo indicates the lower 32 bits of the number of packets received by the GRE tunnel data path.
1.3.6.1.4.1.6527.3.1.2.48.15.1.53Counter32read-onlycurrent
tmnxIPsecMdaDpGreTnlOutBytesHi
OBJECT-TYPE
The value of tmnxIPsecMdaDpGreTnlOutBytesHi indicates the higher 32 bits of the number of packets received by the GRE tunnel data path.
1.3.6.1.4.1.6527.3.1.2.48.15.1.54Counter32read-onlycurrent
tmnxIPsecMdaDpGreTnlOutErrs
OBJECT-TYPE
The value of tmnxIPsecMdaDpGreTnlOutErrs indicates the number of packets received by the GRE tunnel data path.
1.3.6.1.4.1.6527.3.1.2.48.15.1.55Counter64read-onlycurrent
tmnxIPsecMdaDpGreTnlOutErrsLo
OBJECT-TYPE
The value of tmnxIPsecMdaDpGreTnlOutErrsLo indicates the lower 32 bits of the number of packets received by the GRE tunnel data path.
1.3.6.1.4.1.6527.3.1.2.48.15.1.56Counter32read-onlycurrent
tmnxIPsecMdaDpGreTnlOutErrsHi
OBJECT-TYPE
The value of tmnxIPsecMdaDpGreTnlOutErrsHi indicates the higher 32 bits of the number of packets received by the GRE tunnel data path.
1.3.6.1.4.1.6527.3.1.2.48.15.1.57Counter32read-onlycurrent
tmnxIPsecMdaDpPktsDropDfSet
OBJECT-TYPE
The value of tmnxIPsecMdaDpPktsDropDfSet indicates the number of packets with DF bit set dropped in this Tunnel exceeding MTU size and with clear tunnel DF bit not set.
1.3.6.1.4.1.6527.3.1.2.48.15.1.58Counter64read-onlycurrent
tmnxIPsecMdaDpPktsDropDfSetLo
OBJECT-TYPE
The value of tmnxIPsecMdaDpPktsDropDfSetLo indicates lower 32 bits of the value of tmnxIPsecMdaDpPktsDropDfSet object.
1.3.6.1.4.1.6527.3.1.2.48.15.1.59Counter32read-onlycurrent
tmnxIPsecMdaDpPktsDropDfSetHi
OBJECT-TYPE
The value of tmnxIPsecMdaDpPktsDropDfSetHi indicates higher 32 bits of the value of tmnxIPsecMdaDpPktsDropDfSet object.
1.3.6.1.4.1.6527.3.1.2.48.15.1.60Counter32read-onlycurrent
tmnxIPsecMdaDpStaticIPsecTnls
OBJECT-TYPE
The value of tmnxIPsecMdaDpStaticIPsecTnls indicates number of configured static IPsec tunnels on the MDA.
1.3.6.1.4.1.6527.3.1.2.48.15.1.61Counter32read-onlycurrent
tmnxIPsecMdaDpDynIPsecTnls
OBJECT-TYPE
The value of tmnxIPsecMdaDpDynIPsecTnls indicates number of dynamic IPsec tunnels in use on the MDA.
1.3.6.1.4.1.6527.3.1.2.48.15.1.62Counter32read-onlycurrent
tmnxIPsecMdaDpIpGreTnls
OBJECT-TYPE
The value of tmnxIPsecMdaDpIpGreTnls indicates number of configured IP tunnels (with GRE headers) on the MDA.
1.3.6.1.4.1.6527.3.1.2.48.15.1.63Counter32read-onlycurrent
tmnxIPsecMdaDpIpv4Tnls
OBJECT-TYPE
The value of tmnxIPsecMdaDpIpv4Tnls indicates number of configured IPv4 tunnels on the MDA.
1.3.6.1.4.1.6527.3.1.2.48.15.1.64Counter32read-onlycurrent
tIPsecTnlTempTblLastChanged
OBJECT-TYPE
The value of tIPsecTnlTempTblLastChanged indicates the sysUpTime at the time of the last modification to tIPsecTnlTempTable by adding, deleting an entry or change to a writable object in the table. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value.
1.3.6.1.4.1.6527.3.1.2.48.16TimeStampread-onlycurrent
tIPsecTnlTempTable
OBJECT-TYPE
Table to store the IPsec tunnel template entries.
1.3.6.1.4.1.6527.3.1.2.48.17not-accessiblecurrent
tIPsecTnlTempEntry
OBJECT-TYPE
Information about a single IPsec tunnel template entry.
1.3.6.1.4.1.6527.3.1.2.48.17.1not-accessiblecurrent
tIPsecTnlTempId
OBJECT-TYPE
The value of tIPsecTnlTempId specifies the id of a tunnel template entry and is the primary index for the table tIPsecTnlTempTable.
1.3.6.1.4.1.6527.3.1.2.48.17.1.1TmnxIPsecTunnelTemplateIdnot-accessiblecurrent
tIPsecTnlTempRowStatus
OBJECT-TYPE
The tIPsecTnlTempRowStatus object is used to create and delete rows in the tIPsecTnlTempTable.
1.3.6.1.4.1.6527.3.1.2.48.17.1.2RowStatusread-createcurrent
tIPsecTnlTempLastChanged
OBJECT-TYPE
The value of tIPsecTnlTempLastChanged indicates the sysUpTime at the time of the last modification of this entry. If no changes were made to the entry since the last re-initialization of the local network management subsystem, then this object contains a zero value.
1.3.6.1.4.1.6527.3.1.2.48.17.1.3TimeStampread-onlycurrent
tIPsecTnlTempDescr
OBJECT-TYPE
The value of tIPsecTnlTempDescr specifies the user-provided description for the template.
1.3.6.1.4.1.6527.3.1.2.48.17.1.4TItemDescriptionread-createcurrent
tIPsecTnlTempReverseRoute
OBJECT-TYPE
The value of tIPsecTnlTempReverseRoute specifies whether node using this template will accept framed-routes sent by radius server and install them for the lifetime of the tunnel as managed routes. If this object is set to 'useSecurityPolicy' then the node using this template will add a route to every client-side-protected-subnet as signaled by the client.
1.3.6.1.4.1.6527.3.1.2.48.17.1.5INTEGER {none(0), reverseRoute(1), useSecurityPolicy(2)}read-createcurrent
tIPsecTnlTempDynKeyTransformId1
OBJECT-TYPE
The value of tIPsecTnlTempDynKeyTransformId1 specifies the first transform-id for this IPSec Tunnel template to use.
1.3.6.1.4.1.6527.3.1.2.48.17.1.6TmnxIPsecTransformIdOrZeroread-createcurrent
tIPsecTnlTempDynKeyTransformId2
OBJECT-TYPE
The value of tIPsecTnlTempDynKeyTransformId2 specifies the second transform-id for this IPSec Tunnel template to use.
1.3.6.1.4.1.6527.3.1.2.48.17.1.7TmnxIPsecTransformIdOrZeroread-createcurrent
tIPsecTnlTempDynKeyTransformId3
OBJECT-TYPE
The value of tIPsecTnlTempDynKeyTransformId3 specifies the third transform-id for this IPSec Tunnel template to use.
1.3.6.1.4.1.6527.3.1.2.48.17.1.8TmnxIPsecTransformIdOrZeroread-createcurrent
tIPsecTnlTempDynKeyTransformId4
OBJECT-TYPE
The value of tIPsecTnlTempDynKeyTransformId4 specifies the fourth transform-id for this IPSec Tunnel template to use.
1.3.6.1.4.1.6527.3.1.2.48.17.1.9TmnxIPsecTransformIdOrZeroread-createcurrent
tIPsecTnlTempReplayWindow
OBJECT-TYPE
The value of tIPsecTnlTempReplayWindow specifies the size of the anti-replay window for the template. If the value of tmnxIPsecTunnelReplayWindow is set to 0, then the anti-replay feature is disabled.
1.3.6.1.4.1.6527.3.1.2.48.17.1.10Unsigned32 (0 | 32 | 64 | 128 | 256 | 512)read-createcurrent
tmnxIPsecGWTblLastChgd
OBJECT-TYPE
The value of tmnxIPsecGWTblLastChgd indicates the sysUpTime at the time of the last modification of tmnxIPsecGWTable. If no changes were made to the entry since the last re-initialization of the local network management subsystem, then this object contains a zero value.
1.3.6.1.4.1.6527.3.1.2.48.18TimeStampread-onlycurrent
tmnxIPsecGWTable
OBJECT-TYPE
A table that contains SAP IPSec gateway information.
1.3.6.1.4.1.6527.3.1.2.48.19not-accessiblecurrent
tmnxIPsecGWEntry
OBJECT-TYPE
Information about a SAP IPSec gateway.
1.3.6.1.4.1.6527.3.1.2.48.19.1not-accessiblecurrent
tmnxIPsecGWRowStatus
OBJECT-TYPE
The value of tmnxIPsecGWRowStatus controls the creation and deletion of rows in this table.
1.3.6.1.4.1.6527.3.1.2.48.19.1.1RowStatusread-createcurrent
tmnxIPsecGWLastMgmtChange
OBJECT-TYPE
The value of tmnxIPsecGWLastMgmtChange indicates the value of sysUpTime at the time of the last management change of any writable object of this row.
1.3.6.1.4.1.6527.3.1.2.48.19.1.2TimeStampread-onlycurrent
tmnxIPsecGWAdminState
OBJECT-TYPE
The value of the object tmnxIPsecGWAdminState specifies the administrative state of SAP IPSec gateway entry.
1.3.6.1.4.1.6527.3.1.2.48.19.1.3TmnxAdminStateread-createcurrent
tmnxIPsecGWOperState
OBJECT-TYPE
The value of the object tmnxIPsecGWOperState indicates the operating state of the SAP IPSec gateway.
1.3.6.1.4.1.6527.3.1.2.48.19.1.4TmnxOperStateread-onlycurrent
tmnxIPsecGWTunnelPolicyTemp
OBJECT-TYPE
The value of the object tmnxIPsecGWTunnelPolicyTemp specifies the TIMETRA-IPSEC-MIB::tIPsecTnlTempId used by this SAP IPSec gateway.
1.3.6.1.4.1.6527.3.1.2.48.19.1.5TmnxIPsecTunnelTemplateIdOrZeroread-createcurrent
tmnxIPsecGWSecureService
OBJECT-TYPE
The value of the object tmnxIPsecGWSecureService specifies the service-id of the default security service used by this SAP IPSec gateway.
1.3.6.1.4.1.6527.3.1.2.48.19.1.6TmnxServIdread-createcurrent
tmnxIPsecGWIfName
OBJECT-TYPE
The value of the object tmnxIPsecGWIfName specifies the IPSec interface used by the SAP.
1.3.6.1.4.1.6527.3.1.2.48.19.1.7TNamedItemOrEmptyread-createcurrent
tmnxIPsecGWInetAddrType
OBJECT-TYPE
The value of the object tmnxIPsecGWInetAddrType specifies the address type of the SAP IPSec gateway.
1.3.6.1.4.1.6527.3.1.2.48.19.1.8InetAddressTyperead-createcurrent
tmnxIPsecGWInetAddress
OBJECT-TYPE
This value of tmnxIPsecGWInetAddress specifies the IPv4 address of the SAP IPSec gateway.
1.3.6.1.4.1.6527.3.1.2.48.19.1.9InetAddress (SIZE(0 | 4))read-createcurrent
tmnxIPsecGWIkePolicyId
OBJECT-TYPE
The value of tmnxIPsecGWIkePolicyId specifies the policy id for this SAP IPSec gateway.
1.3.6.1.4.1.6527.3.1.2.48.19.1.10TmnxIkePolicyIdOrZeroread-createcurrent
tmnxIPsecGWIkePreShared
OBJECT-TYPE
The value of tmnxIPsecGWIkePreShared specifies the shared secret between the two peers forming the tunnel for the SAP IPSec gateway.
1.3.6.1.4.1.6527.3.1.2.48.19.1.11OCTET STRING (SIZE(0..64))read-createcurrent
tmnxIPsecGWLclX509Cert
OBJECT-TYPE
The value of tmnxIPsecGWLclX509Cert specifies the path-name of the local X509 Certificate to be used with this SAP IPSec gateway.
1.3.6.1.4.1.6527.3.1.2.48.19.1.12DisplayString (SIZE(0..180))read-createcurrent
tmnxIPsecGWLclPrivateKey
OBJECT-TYPE
The value of tmnxIPsecGWLclPrivateKey specifies the path-name of the local private key to be used with this SAP IPSec gateway.
1.3.6.1.4.1.6527.3.1.2.48.19.1.13DisplayString (SIZE(0..180))read-createcurrent
tmnxIPsecGWOperFlags
OBJECT-TYPE
The value of tmnxIPsecGWOperFlags indicates the reason why the gateway is operationally down.
1.3.6.1.4.1.6527.3.1.2.48.19.1.14Bits {localIpUnreachable(0), gatewayAdminDown(1), x509CertUnavailable(2), privateKeyUnavailable(3), caCertUnavailable(4), caCRLUnavailable(5)}read-onlycurrent
tmnxIPsecGWCACert
OBJECT-TYPE
The value of tmnxIPsecGWCACert specifies the path-name of the Certificate from the Certificate-Authority to be used with this SAP IPSec gateway.
1.3.6.1.4.1.6527.3.1.2.48.19.1.15DisplayString (SIZE(0..180))read-createobsolete
tmnxIPsecGWCACertRevocList
OBJECT-TYPE
The value of tmnxIPsecGWCACertRevocList specifies the path-name of the Certificate Revocation List (CRL) from Certificate-Authority to be used with this SAP IPSec gateway.
1.3.6.1.4.1.6527.3.1.2.48.19.1.16DisplayString (SIZE(0..180))read-createobsolete
tmnxIPsecGWName
OBJECT-TYPE
The value of the object tmnxIPsecGWIfName specifies the name for this IPSec gateway. An 'inconsistentValue' error is returned if value of this object is not set to unique value at the time of creation.
1.3.6.1.4.1.6527.3.1.2.48.19.1.17TNamedItemread-createcurrent
tmnxIPsecGWCertTrustAnchor
OBJECT-TYPE
The value of tmnxIPsecGWCertTrustAnchor specifies the name for Certificate-Authority Profile name associated with this SAP IPSec gateway certificate. An 'inconsistentValue' error is returned if this object is modified when tmnxIPsecGWAdminState is in 'inService' state.
1.3.6.1.4.1.6527.3.1.2.48.19.1.18TNamedItemOrEmptyread-createcurrent
tmnxIPsecGWLocalIdType
OBJECT-TYPE
The value of tmnxIPsecGWLocalIdType specifies the local-identifier of 7750 used for IDi or IDr for IKEv2. An 'inconsistentValue' error is returned if this object is modified when tmnxIPsecGWAdminState is in 'inService' state.
1.3.6.1.4.1.6527.3.1.2.48.19.1.19TmnxIPsecLocalIdTyperead-createcurrent
tmnxIPsecGWLocalIdValue
OBJECT-TYPE
The value of tmnxIPsecGWLocalIdValue specifies the value associated with tmnxIPsecGWLocalIdType object. Value is extracted from the configured certificate when tmnxIPsecGWLocalIdType is set to 'dn'.
1.3.6.1.4.1.6527.3.1.2.48.19.1.20DisplayStringread-createcurrent
tIPsecRUTnlTable
OBJECT-TYPE
Table to store dynamic IPsec Remote-User Tunnel entries.
1.3.6.1.4.1.6527.3.1.2.48.20not-accessiblecurrent
tIPsecRUTnlEntry
OBJECT-TYPE
Information about a single dynamic IPsec Remote-User Tunnel entry.
1.3.6.1.4.1.6527.3.1.2.48.20.1not-accessiblecurrent
tIPsecRUTnlInetAddrType
OBJECT-TYPE
The value of the object tIPsecRUTnlInetAddrType indicates the address type of the SAP IPsec gateway to the tunnel.
1.3.6.1.4.1.6527.3.1.2.48.20.1.1InetAddressTypenot-accessiblecurrent
tIPsecRUTnlInetAddress
OBJECT-TYPE
This value of tIPsecRUTnlInetAddress indicates the address of of the SAP IPsec gateway to the tunnel.
1.3.6.1.4.1.6527.3.1.2.48.20.1.2InetAddress (SIZE(4 | 16 | 20))not-accessiblecurrent
tIPsecRUTnlPort
OBJECT-TYPE
The value of tIPsecRUTnlPort indicates the UDP port of the SAP IPsec gateway to the tunnel.
1.3.6.1.4.1.6527.3.1.2.48.20.1.3TTcpUdpPortnot-accessiblecurrent
tIPsecRUTnlPrivateIpAddrType
OBJECT-TYPE
The value of the object tIPsecRUTnlPrivateIpAddrType indicates the address type of the private IP Address in the tunnel.
1.3.6.1.4.1.6527.3.1.2.48.20.1.4InetAddressTyperead-onlycurrent
tIPsecRUTnlPrivateIpAddr
OBJECT-TYPE
The value of tIPsecRUTnlPrivateIpAddr indicates the private ip address on the IPsec gateway tunnel.
1.3.6.1.4.1.6527.3.1.2.48.20.1.5InetAddress (SIZE(0 | 4 | 16 | 20))read-onlycurrent
tIPsecRUTnlPrivateIpPrefixLen
OBJECT-TYPE
The value of tIPsecRUTnlPrivateIpPrefixLen indicates the number of bits to match on the tIPsecRUTnlPrivateIpAddr.
1.3.6.1.4.1.6527.3.1.2.48.20.1.6InetAddressPrefixLengthread-onlycurrent
tIPsecRUTnlTempId
OBJECT-TYPE
The value of tIPsecRUTnlTempId indicates the id of a tunnel template entry used for the tunnel.
1.3.6.1.4.1.6527.3.1.2.48.20.1.7TmnxIPsecTunnelTemplateIdread-onlycurrent
tIPsecRUTnlIPsecSALifeTime
OBJECT-TYPE
The value of tIPsecRUTnlIPsecSALifeTime indicates the lifetime of the phase 2 Ike key.
1.3.6.1.4.1.6527.3.1.2.48.20.1.8Unsigned32 (1200..172800)read-onlycurrent
tIPsecRUTnlPfsDHGroup
OBJECT-TYPE
The value of tIPsecRUTnlPfsDHGroup indicates the new Diffie-hellman key exchange each time the SA(Security Association) key is renegotiated. After the SA expires, the key is forgotten and another key is generated (if the SA remains up). This means that an attacker who cracks part of the exchange can only read the part that used the key before the key changed. There is no advantage of cracking the other parts if the attacker has already cracked one.
1.3.6.1.4.1.6527.3.1.2.48.20.1.9TmnxIkePolicyDHGroupOrZeroread-onlycurrent
tIPsecRUTnlReplayWindow
OBJECT-TYPE
The value of tIPsecRUTnlReplayWindow indicates the size of the anti-replay window.
1.3.6.1.4.1.6527.3.1.2.48.20.1.10Unsigned32 (0 | 32 | 64 | 128 | 256 | 512)read-onlycurrent
tIPsecRUTnlPrivateSvcId
OBJECT-TYPE
The value of tIPsecRUTnlPrivateSvcId indicates the service-id of the Tunnel delivery service.
1.3.6.1.4.1.6527.3.1.2.48.20.1.11TmnxServIdread-onlycurrent
tIPsecRUTnlPrivateIfIndex
OBJECT-TYPE
The value of tIPsecRUTnlPrivateIfIndex indicates the private interface index used by the tunnel.
1.3.6.1.4.1.6527.3.1.2.48.20.1.12InterfaceIndexread-onlycurrent
tIPsecRUTnlHasBiDirectionalSA
OBJECT-TYPE
The value of tIPsecRUTnlHasBiDirectionalSA indicates whether this tunnel has bi-directional Security-Association entries.
1.3.6.1.4.1.6527.3.1.2.48.20.1.13TruthValueread-onlycurrent
tIPsecRUTnlHostISA
OBJECT-TYPE
The value of tIPsecRUTnlHostISA indicates the active ISA that is being used to host this tunnel. This object will have a value of zero when this tunnel is operationally down.
1.3.6.1.4.1.6527.3.1.2.48.20.1.14TmnxHwIndexOrZeroread-onlycurrent
tIPsecRUTnlStatsTable
OBJECT-TYPE
Table to store IPsec Remote User Tunnel statistics
1.3.6.1.4.1.6527.3.1.2.48.21not-accessiblecurrent
tIPsecRUTnlStatsEntry
OBJECT-TYPE
Statistics for a single IPsec Remote User Tunnel.
1.3.6.1.4.1.6527.3.1.2.48.21.1not-accessiblecurrent
tIPsecRUTnlIsakmpState
OBJECT-TYPE
The value of tIPsecRUTnlIsakmpState indicates the state of phase 1 IPsec negotiation.
1.3.6.1.4.1.6527.3.1.2.48.21.1.1INTEGER {up(1), down(2)}read-onlycurrent
tIPsecRUTnlIsakmpEstabTime
OBJECT-TYPE
The value of tIPsecRUTnlIsakmpEstabTime indicates the sysUpTime at the time the IPsec phase 1 negotiation completed.
1.3.6.1.4.1.6527.3.1.2.48.21.1.2TimeStampread-onlycurrent
tIPsecRUTnlIsakmpNegLifeTime
OBJECT-TYPE
The value of tIPsecRUTnlIsakmpNegLifeTime indicates the lifetime negotiated for phase1 Ike key.
1.3.6.1.4.1.6527.3.1.2.48.21.1.3Unsigned32read-onlycurrent
tIPsecRUTnlNumDpdTx
OBJECT-TYPE
The value of tIPsecRUTnlNumDpdTx indicates the number of Dead-Peer-Detection packets transmitted.
1.3.6.1.4.1.6527.3.1.2.48.21.1.4Counter32read-onlycurrent
tIPsecRUTnlNumDpdRx
OBJECT-TYPE
The value of tIPsecRUTnlNumDpdRx indicates the number of Dead-Peer-Detection packets received.
1.3.6.1.4.1.6527.3.1.2.48.21.1.5Counter32read-onlycurrent
tIPsecRUTnlNumDpdAckTx
OBJECT-TYPE
The value of tIPsecRUTnlNumDpdAckTx indicates the number of Dead-Peer-Detection acknowledgement packets transmitted.
1.3.6.1.4.1.6527.3.1.2.48.21.1.6Counter32read-onlycurrent
tIPsecRUTnlNumDpdAckRx
OBJECT-TYPE
The value of tIPsecRUTnlNumDpdAckRx indicates the number of Dead-Peer-Detection acknowledgement packets received.
1.3.6.1.4.1.6527.3.1.2.48.21.1.7Counter32read-onlycurrent
tIPsecRUTnlNumExpRx
OBJECT-TYPE
The value of tIPsecRUTnlNumExpRx indicates the number of DPD R-U-THERE packets that have not been acknowledged.
1.3.6.1.4.1.6527.3.1.2.48.21.1.8Counter32read-onlycurrent
tIPsecRUTnlNumInvalidDpdRx
OBJECT-TYPE
The value of tIPsecRUTnlNumInvalidDpdRx indicates the number of malformed DPD R-U-THERE acknowledgement packets received.
1.3.6.1.4.1.6527.3.1.2.48.21.1.9Counter32read-onlycurrent
tIPsecRUTnlNumCtrlPktsTx
OBJECT-TYPE
The value of tIPsecRUTnlNumCtrlPktsTx indicates the number of control packets this IPsec Tunnel has sent.
1.3.6.1.4.1.6527.3.1.2.48.21.1.10Counter32read-onlycurrent
tIPsecRUTnlNumCtrlPktsRx
OBJECT-TYPE
The value of tIPsecRUTnlNumCtrlPktsRx indicates the number of control packets this IPsec Tunnel has received.
1.3.6.1.4.1.6527.3.1.2.48.21.1.11Counter32read-onlycurrent
tIPsecRUTnlNumCtrlTxErrors
OBJECT-TYPE
The value of tIPsecRUTnlNumCtrlTxErrors indicates the number of control packet transmit errors.
1.3.6.1.4.1.6527.3.1.2.48.21.1.12Counter32read-onlycurrent
tIPsecRUTnlNumCtrlRxErrors
OBJECT-TYPE
The value of tIPsecRUTnlNumCtrlRxErrors indicates the number of control packet receive errors.
1.3.6.1.4.1.6527.3.1.2.48.21.1.13Counter32read-onlycurrent
tIPsecRUSATable
OBJECT-TYPE
Table to store the IPsec remote-user dynamic SA entries.
1.3.6.1.4.1.6527.3.1.2.48.22not-accessiblecurrent
tIPsecRUSAEntry
OBJECT-TYPE
Information about a single IPsec remote-user SA entry.
1.3.6.1.4.1.6527.3.1.2.48.22.1not-accessiblecurrent
tIPsecRUSAId
OBJECT-TYPE
The value of tIPsecRUSAId indicates the id of an SA entry and is part of the index for the tIPsecRUSATable.
1.3.6.1.4.1.6527.3.1.2.48.22.1.1Unsigned32 (1..16)not-accessiblecurrent
tIPsecRUSAIndex
OBJECT-TYPE
The value of tIPsecRUSAIndex indicates an additional index to uniquely indentify the SA entry in the tIPsecRUSATable.
1.3.6.1.4.1.6527.3.1.2.48.22.1.2Unsigned32 (1..2)not-accessiblecurrent
tIPsecRUSADirection
OBJECT-TYPE
The value of tIPsecRUSADirection indicates the direction on the IPsec Tunnel to which this SA entry can be applied. The value of tIPsecRUSADirection is also part of the index for the table tIPsecRUSATable
1.3.6.1.4.1.6527.3.1.2.48.22.1.3TmnxIPsecDirectionnot-accessiblecurrent
tIPsecRUSAEncryptionKey
OBJECT-TYPE
The value of tIPsecRUSAEncryptionKey indicates the key used for the encryption algorithm defined by the tIPsecRUSAEncrAlgorithm in the IPsec transform.
1.3.6.1.4.1.6527.3.1.2.48.22.1.4OCTET STRING (SIZE(0..32))read-onlycurrent
tIPsecRUSAAuthenticationKey
OBJECT-TYPE
The value of tIPsecRUSAAuthenticationKey indicates the key used for the authentication algorithm defined by the tIPsecRUSAAuthAlgorithm in the IPsec transform.
1.3.6.1.4.1.6527.3.1.2.48.22.1.5OCTET STRING (SIZE(0..64))read-onlycurrent
tIPsecRUSASpi
OBJECT-TYPE
The value of tIPsecRUSASpi indicates the SPI (Security Parameter Index) used to lookup the instruction to verify and decrypt the incoming IPsec packets when the value of tIPsecRUSADirection is 'inbound'.
1.3.6.1.4.1.6527.3.1.2.48.22.1.6Unsigned32 (256..16383)read-onlycurrent
tIPsecRUSAAuthAlgorithm
OBJECT-TYPE
The value of tIPsecRUSAAuthAlgorithm indicates the authentication algorithm used with this SA.
1.3.6.1.4.1.6527.3.1.2.48.22.1.7TmnxAuthAlgorithmread-onlycurrent
tIPsecRUSAEncrAlgorithm
OBJECT-TYPE
The value of tIPsecRUSAEncrAlgorithm indicates the encryption algorithm used with this SA.
1.3.6.1.4.1.6527.3.1.2.48.22.1.8TmnxEncrAlgorithmread-onlycurrent
tIPsecRUSAEstablishedTime
OBJECT-TYPE
The value of tIPsecRUSAEstablishedTime indicates the sysUpTime at the time the IPsec phase 2 negotiation completed.
1.3.6.1.4.1.6527.3.1.2.48.22.1.9TimeStampread-onlycurrent
tIPsecRUSANegotiatedLifeTime
OBJECT-TYPE
The value of tIPsecRUSANegotiatedLifeTime indicates the lifetime negotiated for phase2 Ike key.
1.3.6.1.4.1.6527.3.1.2.48.22.1.10Unsigned32read-onlycurrent
tIPsecRUSALclAddrType
OBJECT-TYPE
The value of tIPsecRUSALclAddrType indicates the address type of address in tIPsecRUSALclAddr.
1.3.6.1.4.1.6527.3.1.2.48.22.1.11InetAddressTyperead-onlycurrent
tIPsecRUSALclAddr
OBJECT-TYPE
The value of tIPsecRUSALclAddr indicates the ip address on the vpn side.
1.3.6.1.4.1.6527.3.1.2.48.22.1.12InetAddress (SIZE(0 | 4 | 16 | 20))read-onlycurrent
tIPsecRUSALclAPrefLen
OBJECT-TYPE
The value of tIPsecRUSALclAPrefLen indicates the number of bits to match of the tIPsecRUSALclAddr.
1.3.6.1.4.1.6527.3.1.2.48.22.1.13InetAddressPrefixLengthread-onlycurrent
tIPsecRUSARemAddrType
OBJECT-TYPE
The value of tIPsecRUSARemAddrType indicates the address type of address in tIPsecRUSARemAddr.
1.3.6.1.4.1.6527.3.1.2.48.22.1.14InetAddressTyperead-onlycurrent
tIPsecRUSARemAddr
OBJECT-TYPE
The value of tIPsecRUSARemAddr indicates the ip address on the tunnel side.
1.3.6.1.4.1.6527.3.1.2.48.22.1.15InetAddress (SIZE(0 | 4 | 16 | 20))read-onlycurrent
tIPsecRUSARemAPrefLen
OBJECT-TYPE
The value of tIPsecRUSARemAPrefLen indicates the number of bits to match of the tIPsecRUSARemAddr.
1.3.6.1.4.1.6527.3.1.2.48.22.1.16InetAddressPrefixLengthread-onlycurrent
tIPsecRUSAStatsTable
OBJECT-TYPE
Table to retrieve the IPsec Remote-User SA Statistics entries.
1.3.6.1.4.1.6527.3.1.2.48.23not-accessiblecurrent
tIPsecRUSAStatsEntry
OBJECT-TYPE
Information about a single IPsec Remote-User SA Statistics entry.
1.3.6.1.4.1.6527.3.1.2.48.23.1not-accessiblecurrent
tIPsecRUSAStatsBytesProcessed
OBJECT-TYPE
The value of tIPsecRUSAStatsBytesProcessed indicates the number of bytes successfully processed for this SA.
1.3.6.1.4.1.6527.3.1.2.48.23.1.1Counter64read-onlycurrent
tIPsecRUSAStatsBytesProcLow32
OBJECT-TYPE
The value of tIPsecRUSAStatsBytesProcLow32 indicates the lower 32 bits of the value of tIPsecRUSAStatsBytesProcessed.
1.3.6.1.4.1.6527.3.1.2.48.23.1.2Counter32read-onlycurrent
tIPsecRUSAStatsBytesProcHigh32
OBJECT-TYPE
The value of tIPsecRUSAStatsBytesProcHigh32 indicates the higher 32 bits of the value of tIPsecRUSAStatsBytesProcessed.
1.3.6.1.4.1.6527.3.1.2.48.23.1.3Counter32read-onlycurrent
tIPsecRUSAStatsPktsProcessed
OBJECT-TYPE
The value of tIPsecRUSAStatsPktsProcessed indicates the number of packets successfully processed for this SA.
1.3.6.1.4.1.6527.3.1.2.48.23.1.4Counter64read-onlycurrent
tIPsecRUSAStatsPktsProcLow32
OBJECT-TYPE
The value of tIPsecRUSAStatsPktsProcLow32 indicates the lower 32 bits of the value of tIPsecRUSAStatsPktsProcessed.
1.3.6.1.4.1.6527.3.1.2.48.23.1.5Counter32read-onlycurrent
tIPsecRUSAStatsPktsProcHigh32
OBJECT-TYPE
The value of tIPsecRUSAStatsPktsProcHigh32 indicates the higher 32 bits of the value of tIPsecRUSAStatsPktsProcessed.
1.3.6.1.4.1.6527.3.1.2.48.23.1.6Counter32read-onlycurrent
tIPsecRUSAStatsCryptoErrors
OBJECT-TYPE
The value of tIPsecRUSAStatsCryptoErrors indicates the number of crypto errors encountered on this SA. The crypto errors include errors on packets where protocol does not match or if the check on authentication header length failed.
1.3.6.1.4.1.6527.3.1.2.48.23.1.7Counter32read-onlycurrent
tIPsecRUSAStatsReplayErrors
OBJECT-TYPE
The value of tIPsecRUSAStatsReplayErrors indicates the number of replay errors encountered on this SA.
1.3.6.1.4.1.6527.3.1.2.48.23.1.8Counter32read-onlycurrent
tIPsecRUSAStatsSAErrors
OBJECT-TYPE
The value of tIPsecRUSAStatsSAErrors indicates the number of SA errors encountered on this SA. The SA errors include sequence number failure, invalid SA, policy version mismatch, illegal authentication algorithm, expanded packet too big, illegal configured algorithm and ttl decrement error.
1.3.6.1.4.1.6527.3.1.2.48.23.1.9Counter32read-onlycurrent
tIPsecRUSAStatsPolicyErrors
OBJECT-TYPE
The value of tIPsecRUSAStatsPolicyErrors indicates the number of policy errors encountered on this SA. The policy errors include bundled SA, selector check and policy direction error.
1.3.6.1.4.1.6527.3.1.2.48.23.1.10Counter32read-onlycurrent
tmnxIPsecTunnelCountObjs
OBJECT-IDENTITY
1.3.6.1.4.1.6527.3.1.2.48.24
tmnxIPsecPskTunnels
OBJECT-TYPE
The value of tmnxIPsecPskTunnels indicates the number of IPSec tunnels with tmnxIkePolicyAuthMethod set to 'psk'.
1.3.6.1.4.1.6527.3.1.2.48.24.1Gauge32read-onlycurrent
tmnxIPsecGWPskTunnels
OBJECT-TYPE
The value of tmnxIPsecGWPskTunnels indicates the number of IPSec gateway tunnels with tmnxIkePolicyAuthMethod set to 'psk'.
1.3.6.1.4.1.6527.3.1.2.48.24.2Gauge32read-onlycurrent
tmnxIPsecGWPskXAuthTunnels
OBJECT-TYPE
The value of tmnxIPsecGWPskXAuthTunnels indicates the number of IPSec gateway tunnels with tmnxIkePolicyAuthMethod set to 'plainPskXAuth'.
1.3.6.1.4.1.6527.3.1.2.48.24.3Gauge32read-onlycurrent
tmnxIPsecGWCertTunnels
OBJECT-TYPE
The value of tmnxIPsecGWCertTunnels indicates the number of IPSec gateway tunnels with tmnxIkePolicyAuthMethod set to 'cert'.
1.3.6.1.4.1.6527.3.1.2.48.24.4Gauge32read-onlycurrent
tmnxIPsecTunnelBfdTableLastChgd
OBJECT-TYPE
The value of tmnxIPsecTunnelBfdTableLastChgd indicates the sysUpTime at the time of the last modification to tmnxIPsecTunnelBfdTable by adding, deleting an entry or change to a writable object in the table. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value.
1.3.6.1.4.1.6527.3.1.2.48.25TimeStampread-onlycurrent
tmnxIPsecTunnelBfdTable
OBJECT-TYPE
Table to store the IPsec Tunnel BFD session entries.
1.3.6.1.4.1.6527.3.1.2.48.26not-accessiblecurrent
tmnxIPsecTunnelBfdEntry
OBJECT-TYPE
Information about a single IPsec Tunnel BFD session entry.
1.3.6.1.4.1.6527.3.1.2.48.26.1not-accessiblecurrent
tmnxIPsecTunnelBfdSvcId
OBJECT-TYPE
The value of the object tmnxIPsecTunnelBfdSvcId specifies the service-id of the interface running BFD.
1.3.6.1.4.1.6527.3.1.2.48.26.1.1TmnxServIdnot-accessiblecurrent
tmnxIPsecTunnelBfdIfName
OBJECT-TYPE
The value of the object tmnxIPsecTunnelBfdIfName specifies the IPSec interface used by the BFD session.
1.3.6.1.4.1.6527.3.1.2.48.26.1.2TNamedItemnot-accessiblecurrent
tmnxIPsecTunnelBfdDstAddrType
OBJECT-TYPE
The value of tmnxIPsecTunnelBfdDstAddrType specifies the address type of address in tmnxIPsecTunnelBfdDstAddr.
1.3.6.1.4.1.6527.3.1.2.48.26.1.3InetAddressTypenot-accessiblecurrent
tmnxIPsecTunnelBfdDstAddr
OBJECT-TYPE
The value of tmnxIPsecTunnelBfdDstAddr specifies the destination ipaddress to be used for the BFD session.
1.3.6.1.4.1.6527.3.1.2.48.26.1.4InetAddress (SIZE(4 | 16 | 20))not-accessiblecurrent
tmnxIPsecTunnelBfdRowStatus
OBJECT-TYPE
The tmnxIPsecTunnelBfdRowStatus object is used to create and delete rows in the tmnxIPsecTunnelBfdTable.
1.3.6.1.4.1.6527.3.1.2.48.26.1.5RowStatusread-createcurrent
tmnxIPsecTunnelBfdLastChanged
OBJECT-TYPE
The value of tmnxIPsecTunnelBfdLastChanged indicates the sysUpTime at the time of the last modification of this entry. If no changes were made to the entry since the last re-initialization of the local network management subsystem, then this object contains a zero value.
1.3.6.1.4.1.6527.3.1.2.48.26.1.6TimeStampread-onlycurrent
tmnxIPsecTunnelBfdSrcAddrType
OBJECT-TYPE
The value of tmnxIPsecTunnelBfdSrcAddrType indicates the address type of tmnxIPsecTunnelBfdSrcAddr object.
1.3.6.1.4.1.6527.3.1.2.48.26.1.7InetAddressTyperead-onlycurrent
tmnxIPsecTunnelBfdSrcAddr
OBJECT-TYPE
The value of tmnxIPsecTunnelBfdSrcAddr indicates the source IP address on the interface running BFD.
1.3.6.1.4.1.6527.3.1.2.48.26.1.8InetAddress (SIZE(0 | 4 | 16 | 20))read-onlycurrent
tmnxIPsecTunnelBfdSessOperState
OBJECT-TYPE
The value of tmnxIPsecTunnelBfdSessOperState indicates the operational state of the BFD session the IPsec tunnel is relying upon for its fast triggering mechanism.
1.3.6.1.4.1.6527.3.1.2.48.26.1.9TmnxBfdSessOperStateread-onlycurrent
tmnxIPsecNotifyObjs
OBJECT-IDENTITY
1.3.6.1.4.1.6527.3.1.2.48.100
tIPsecNotifRUTnlInetAddrType
OBJECT-TYPE
The value of the object tIPsecNotifRUTnlInetAddrType indicates address type of tIPsecNotifRUTnlInetAddress object.
1.3.6.1.4.1.6527.3.1.2.48.100.1InetAddressTypeaccessible-for-notifycurrent
tIPsecNotifRUTnlInetAddress
OBJECT-TYPE
This value of tIPsecNotifRUTnlInetAddress indicates the address of of the SAP IPsec gateway to the tunnel.
1.3.6.1.4.1.6527.3.1.2.48.100.2InetAddress (SIZE(4 | 16 | 20))accessible-for-notifycurrent
tIPsecNotifRUTnlPort
OBJECT-TYPE
The value of tIPsecNotifRUTnlPort indicates the UDP port of the SAP IPsec gateway to the tunnel.
1.3.6.1.4.1.6527.3.1.2.48.100.3TTcpUdpPortaccessible-for-notifycurrent
tIPsecNotifReason
OBJECT-TYPE
The value of tIPsecNotifReason indicates the reason for the IPsec notification.
1.3.6.1.4.1.6527.3.1.2.48.100.4DisplayStringaccessible-for-notifycurrent
tIPsecNotifBfdIntfSvcId
OBJECT-TYPE
The value of tIPsecNotifBfdIntfSvcId specifies the service ID of the interface running BFD in the notification.
1.3.6.1.4.1.6527.3.1.2.48.100.5TmnxServIdaccessible-for-notifycurrent
tIPsecNotifBfdIntfIfName
OBJECT-TYPE
The value of tIPsecNotifBfdIntfIfName specifies the name of the interface running BFD in the notification.
1.3.6.1.4.1.6527.3.1.2.48.100.6TNamedItemaccessible-for-notifycurrent
tIPsecNotifBfdIntfDestIpType
OBJECT-TYPE
The value of tIPsecNotifBfdIntfDestIpType specifies the address type of tIPsecNotifBfdIntfDestIp object.
1.3.6.1.4.1.6527.3.1.2.48.100.7InetAddressTypeaccessible-for-notifycurrent
tIPsecNotifBfdIntfDestIp
OBJECT-TYPE
The value of tIPsecNotifBfdIntfDestIp specifies the destination IP address on the interface running BFD in the notification.
1.3.6.1.4.1.6527.3.1.2.48.100.8InetAddress (SIZE(0 | 4 | 16 | 20))accessible-for-notifycurrent
tIPsecNotifBfdIntfSessState
OBJECT-TYPE
The value of tIPsecNotifBfdIntfSessState indicates the operational state of BFD session on the interface in the notification.
1.3.6.1.4.1.6527.3.1.2.48.100.9TmnxBfdSessOperStateaccessible-for-notifycurrent
tmnxIPsecNotifyPrefix
OBJECT-IDENTITY
1.3.6.1.4.1.6527.3.1.3.48
tmnxIPsecNotifications
OBJECT-IDENTITY
1.3.6.1.4.1.6527.3.1.3.48.0

Notifications

NameOIDStatus
tIPsecRUTnlFailToCreate
NOTIFICATION-TYPE
The trap tIPsecRUTnlFailToCreate is sent when creation of a remote-user tunnel fails with reason indicated by tIPsecNotifReason.
1.3.6.1.4.1.6527.3.1.3.48.0.1current
tIPsecRUSAFailToAddRoute
NOTIFICATION-TYPE
The trap tIPsecRUSAFailToAddRoute is sent when adding route to tIPsecRUSARemAddr for the remote-user tunnel fails with reason indicated by tIPsecNotifReason.
1.3.6.1.4.1.6527.3.1.3.48.0.2current
tIPsecBfdIntfSessStateChgd
NOTIFICATION-TYPE
The notification tIPsecBfdIntfSessStateChgd is generated when the operational state of BFD session of the IPSec instance changes.
1.3.6.1.4.1.6527.3.1.3.48.0.3current

Conformance

NameOIDStatus
tmnxIPsecCompliance
MODULE-COMPLIANCE
The compliance statement for management of IPsec features on Alcatel-Lucent SROS series systems.
1.3.6.1.4.1.6527.3.1.1.48.1.1obsolete
tmnxIPsecV6v1Compliance
MODULE-COMPLIANCE
The compliance statement for management of IPsec features on Alcatel-Lucent SROS series systems.
1.3.6.1.4.1.6527.3.1.1.48.1.2obsolete
tmnxIPsecV7v0Compliance
MODULE-COMPLIANCE
The compliance statement for management of IPsec features on Alcatel-Lucent SROS series systems.
1.3.6.1.4.1.6527.3.1.1.48.1.3obsolete
tmnxIPsecV8v0Compliance
MODULE-COMPLIANCE
The compliance statement for management of IPsec features on Alcatel-Lucent SROS series systems.
1.3.6.1.4.1.6527.3.1.1.48.1.4obsolete
tmnxIPsecV9v0Compliance
MODULE-COMPLIANCE
The compliance statement for management of IPsec features on Alcatel-Lucent SROS series systems.
1.3.6.1.4.1.6527.3.1.1.48.1.5obsolete
tmnxIPsecV10v0Compliance
MODULE-COMPLIANCE
The compliance statement for management of IPsec features on Alcatel-Lucent SROS series systems.
1.3.6.1.4.1.6527.3.1.1.48.1.6current
tmnxIPsecV6v0Group
OBJECT-GROUP
The group of objects supporting the IPsec Feature capabilities on Alcatel-Lucent SROS series systems.
1.3.6.1.4.1.6527.3.1.1.48.2.1current
tmnxIPsecMdaDpStatsV6v1Group
OBJECT-GROUP
The group of objects for IPsec Mda Data Path Statistics on Alcatel-Lucent SROS series systems.
1.3.6.1.4.1.6527.3.1.1.48.2.2current
tIPsecTnlTempGroup
OBJECT-GROUP
The group of objects for IPsec tunnel template on Alcatel-Lucent SROS series systems.
1.3.6.1.4.1.6527.3.1.1.48.2.3current
tmnxIPsecGWGroup
OBJECT-GROUP
The group of objects supporting management of IPSec gateway capabilities for SAP's on Alcatel-Lucnet SROS series systems.
1.3.6.1.4.1.6527.3.1.1.48.2.4obsolete
tmnxIPsecNotifyObjsGroup
OBJECT-GROUP
The group of objects supporting management of IPsec notification objects on Alcatel-Lucent SROS series systems.
1.3.6.1.4.1.6527.3.1.1.48.2.5current
tmnxIPsecTnlBfdGroup
OBJECT-GROUP
The group of objects for IPsec Tunnel BFD service on Alcatel-Lucent SROS series systems.
1.3.6.1.4.1.6527.3.1.1.48.2.6current
tmnxIPsecIkeGroup
OBJECT-GROUP
The group of objects supporting management of IPSec IKE specific capabilities on Alcatel-Lucent SROS series systems.
1.3.6.1.4.1.6527.3.1.1.48.2.7current
tmnxIPsecCertGroup
OBJECT-GROUP
The group of objects supporting management of IPSec X.509 certificate specific capabilities on Alcatel-Lucent SROS series systems.
1.3.6.1.4.1.6527.3.1.1.48.2.8current
tmnxIpsecObsoletedV10v0Group
OBJECT-GROUP
The group of objects obsoleted related to management of IPSec specific capabilities on Alcatel-Lucent SROS series systems.
1.3.6.1.4.1.6527.3.1.1.48.2.9current
tmnxIPsecGWV10v0Group
OBJECT-GROUP
The group of objects supporting management of IPSec gateway capabilities for SAP's on Alcatel-Lucnet SROS series systems.
1.3.6.1.4.1.6527.3.1.1.48.2.10current
tmnxIPsecMdaDpStatsV10v0Group
OBJECT-GROUP
The group of objects for IPsec Mda Data Path Statistics on Alcatel-Lucent SROS series systems.
1.3.6.1.4.1.6527.3.1.1.48.2.11current
tmnxIPsecMdaDpGroup
OBJECT-GROUP
The group of objects for IPsec Mda Data Path Statistics on Alcatel-Lucent SROS series systems.
1.3.6.1.4.1.6527.3.1.1.48.2.12current
tmnxIPsecV10v0Group
OBJECT-GROUP
The group of additional objects for IPsec feature on Alcatel-Lucent SROS series systems in 10.0 release.
1.3.6.1.4.1.6527.3.1.1.48.2.13current
tmnxIPsecNotifGroup
NOTIFICATION-GROUP
The group of notifications supporting IPsec on the Alcatel-Lucent SROS series systems.
1.3.6.1.4.1.6527.3.1.1.48.3.1current