IPSEC-SA-MON-MIB
199 objects
The MIB module to describe generic IPsec objects, and entity level objects and events for those types.
Imported Objects
| IF-MIB | ifIndex |
| IPSEC-ISAKMP-IKE-DOI-TC | IpsecDoiAhTransform IpsecDoiAuthAlgorithm IpsecDoiEncapsulationMode IpsecDoiEspTransform IpsecDoiIdentType IpsecDoiIpcompTransform IpsecDoiSecProtocolId |
| RFC1213-MIB | -- mib-2 |
| SNMPv2-CONF | MODULE-COMPLIANCE NOTIFICATION-GROUP OBJECT-GROUP |
| SNMPv2-SMI | Counter32 Counter64 -- remove this and next line before release experimental Gauge32 Integer32 MODULE-IDENTITY NOTIFICATION-TYPE OBJECT-IDENTITY OBJECT-TYPE Unsigned32 |
| SNMPv2-TC | TEXTUAL-CONVENTION TruthValue |
| OID | Name | Access | Status | Description |
|---|---|---|---|---|
| 1.3.6.1.3.98 | IdentityipsecSaMonModule | The MIB module to describe generic IPsec objects, and entity level objects and events for those types. | ||
| 1.3.6.1.3.98.1 | IdentityipsecSaMonitorMIB | current | This is the base object identifier for all IPsec branches. | |
| 1.3.6.1.3.98.1.1 | IdentitysaTables | current | This is the base object identifier for all SA tables. | |
| 1.3.6.1.3.98.1.1.1 | TableipsecSaEspInTable | not-accessible | current | The (conceptual) table containing information on IPsec inbound ESP SAs. There should be one row for every inbound ESP security association that exists in the e… |
| 1.3.6.1.3.98.1.1.1.1 | RowipsecSaEspInEntry | not-accessible | current | An entry (conceptual row) containing the information on a particular IPsec inbound ESP SA. A row in this table cannot be created or deleted by SNMP operations … |
| 1.3.6.1.3.98.1.1.1.1.1 | ColumnipsecSaEspInAddress | read-only | current | The destination address of the SA. IPv4 entities will prefix the IP address with '0000:0000:0000:0000:0000:FFFF::'. |
| 1.3.6.1.3.98.1.1.1.1.2 | ColumnipsecSaEspInSpi | read-only | current | The security parameters index of the SA. |
| 1.3.6.1.3.98.1.1.1.1.3 | ColumnipsecSaEspInDestId | read-only | current | The destination identifier of the SA. It may be 0 if unknown or if the SA uses transport mode encapsulation. This value is taken directly from the optional ID … |
| 1.3.6.1.3.98.1.1.1.1.4 | ColumnipsecSaEspInDestIdType | read-only | current | The type of identifier presented by 'ipsecSaEspInDestId'. It may be 0 if unknown or if the SA uses transport mode encapsulation. |
| 1.3.6.1.3.98.1.1.1.1.5 | ColumnipsecSaEspInSourceId | read-only | current | The source identifier of the SA. It may be 0 if unknown or if the SA uses transport mode encapsulation. This value is taken directly from the optional ID paylo… |
| 1.3.6.1.3.98.1.1.1.1.6 | ColumnipsecSaEspInSourceIdType | read-only | current | The type of identifier presented by 'ipsecSaEspInSourceId'. It may be 0 if unknown or if the SA uses transport mode encapsulation. |
| 1.3.6.1.3.98.1.1.1.1.7 | ColumnipsecSaEspInProtocol | read-only | current | The transport-layer protocol number that this SA carries, or 0 if it carries any protocol. |
| 1.3.6.1.3.98.1.1.1.1.8 | ColumnipsecSaEspInDestPort | read-only | current | The destination port number of the protocol that this SA carries, or 0 if it carries any port number. |
| 1.3.6.1.3.98.1.1.1.1.9 | ColumnipsecSaEspInSourcePort | read-only | current | The source port number of the protocol that this SA carries, or 0 if it carries any port number. |
| 1.3.6.1.3.98.1.1.1.1.10 | ColumnipsecSaEspInCreator | read-only | current | The creator of this SA. This MIB makes no assumptions about how the SAs are created. They may be created statically, or by a key exchange protocol such as IKE,… |
| 1.3.6.1.3.98.1.1.1.1.11 | ColumnipsecSaEspInEncapsulation | read-only | current | The type of encapsulation used by this SA. |
| 1.3.6.1.3.98.1.1.1.1.12 | ColumnipsecSaEspInEncAlg | read-only | current | A unique value representing the encryption algorithm applied to traffic or 0 if there is no encryption used. |
| 1.3.6.1.3.98.1.1.1.1.13 | ColumnipsecSaEspInEncKeyLength | read-only | current | The length of the encryption key in bits used for the algorithm specified in the 'ipsecSaEspInEncAlg' object. It may be 0 if the key length is implicit in the … |
| 1.3.6.1.3.98.1.1.1.1.14 | ColumnipsecSaEspInAuthAlg | read-only | current | A unique value representing the hash algorithm applied to traffic or 0 if there is no authentication used. |
| 1.3.6.1.3.98.1.1.1.1.15 | ColumnipsecSaEspInAuthKeyLength | read-only | current | The length of the authentication key in bits used for the algorithm specified in the 'ipsecSaEspInAuthAlg'. It may be 0 if the key length is implicit in the sp… |
| 1.3.6.1.3.98.1.1.1.1.16 | ColumnipsecSaEspInRepWinSize | read-only | current | The size of the anti-replay window used by this SA, or 0 if anti-replay checking is not being done. |
| 1.3.6.1.3.98.1.1.1.1.17 | ColumnipsecSaEspInLimitSeconds | read-only | current | The maximum lifetime in seconds of the SA, or 0 if there is no time constraint on its expiration. The display value is limited to 4294967295 seconds (more than… |
| 1.3.6.1.3.98.1.1.1.1.18 | ColumnipsecSaEspInLimitKbytes | read-only | current | The maximum traffic in kilobytes that the SA is allowed to process, or 0 if there is no traffic constraint on its expiration. The display value is limited to 4… |
| 1.3.6.1.3.98.1.1.1.1.19 | ColumnipsecSaEspInAccSeconds | read-only | current | The number of seconds accumulated against the SA's expiration by time. This is also the number of seconds that the SA has existed. |
| 1.3.6.1.3.98.1.1.1.1.20 | ColumnipsecSaEspInAccKbytes | read-only | current | The amount of traffic accumulated that counts against the SA's expiration by traffic limitation, measured in kilobytes. This value may be 0 if the SA does not … |
| 1.3.6.1.3.98.1.1.1.1.21 | ColumnipsecSaEspInUserOctets | read-only | current | The amount of user level traffic measured in bytes handled by the SA. This is the number of bytes of the decrypted IP packet, including the original IP header … |
| 1.3.6.1.3.98.1.1.1.1.22 | ColumnipsecSaEspInPackets | read-only | current | The number of packets handled by the SA. |
| 1.3.6.1.3.98.1.1.1.1.23 | ColumnipsecSaEspInDecryptErrors | read-only | current | The number of packets discarded by the SA due to detectable decryption errors. Not all decryption errors are detectable within SA processing, so this count sho… |
| 1.3.6.1.3.98.1.1.1.1.24 | ColumnipsecSaEspInAuthErrors | read-only | current | The number of packets discarded by the SA due to authentication errors. |
| 1.3.6.1.3.98.1.1.1.1.25 | ColumnipsecSaEspInReplayErrors | read-only | current | The number of packets discarded by the SA due to replay errors. |
| 1.3.6.1.3.98.1.1.1.1.26 | ColumnipsecSaEspInPolicyErrors | read-only | current | The number of packets discarded by the SA due to policy errors. This includes packets where the next protocol is invalid. |
| 1.3.6.1.3.98.1.1.1.1.27 | ColumnipsecSaEspInPadErrors | read-only | current | The number of packets discarded by the SA due to pad value errors. Implementations that do not check this must not support this object. |
| 1.3.6.1.3.98.1.1.1.1.28 | ColumnipsecSaEspInOtherReceiveErrors | read-only | current | The number of packets discarded by the SA due to errors other than decryption, authentication, replay errors or, when supported, invalid padding errors. This m… |
| 1.3.6.1.3.98.1.1.2 | TableipsecSaAhInTable | not-accessible | current | The (conceptual) table containing information on IPsec inbound AH SAs. There should be one row for every inbound AH security association that exists in the ent… |
| 1.3.6.1.3.98.1.1.2.1 | RowipsecSaAhInEntry | not-accessible | current | An entry (conceptual row) containing the information on a particular IPsec inbound AH SA. A row in this table cannot be created or deleted by SNMP operations o… |
| 1.3.6.1.3.98.1.1.2.1.1 | ColumnipsecSaAhInAddress | read-only | current | The destination address of the SA. IPv4 entities will prefix the IP address with '0000:0000:0000:0000:0000:FFFF::'. |
| 1.3.6.1.3.98.1.1.2.1.2 | ColumnipsecSaAhInSpi | read-only | current | The security parameters index of the SA. |
| 1.3.6.1.3.98.1.1.2.1.3 | ColumnipsecSaAhInDestId | read-only | current | The destination identifier of the SA. It may be 0 if unknown or if the SA uses transport mode encapsulation. This value is taken directly from the optional ID … |
| 1.3.6.1.3.98.1.1.2.1.4 | ColumnipsecSaAhInDestIdType | read-only | current | The type of identifier presented by 'ipsecSaAhInDestId'. It may be 0 if unknown or if the SA uses transport mode encapsulation. |
| 1.3.6.1.3.98.1.1.2.1.5 | ColumnipsecSaAhInSourceId | read-only | current | The source identifier of the SA. It may be 0 if unknown or if the SA uses transport mode encapsulation. This value is taken directly from the optional ID paylo… |
| 1.3.6.1.3.98.1.1.2.1.6 | ColumnipsecSaAhInSourceIdType | read-only | current | The type of identifier presented by 'ipsecSaAhInSourceId'. It may be 0 if unknown or if the SA uses transport mode encapsulation. |
| 1.3.6.1.3.98.1.1.2.1.7 | ColumnipsecSaAhInProtocol | read-only | current | The transport-layer protocol number that this SA carries, or 0 if it carries any protocol. |
| 1.3.6.1.3.98.1.1.2.1.8 | ColumnipsecSaAhInDestPort | read-only | current | The destination port number of the protocol that this SA carries, or 0 if it carries any port number. |
| 1.3.6.1.3.98.1.1.2.1.9 | ColumnipsecSaAhInSourcePort | read-only | current | The source port number of the protocol that this SA carries, or 0 if it carries any port number. |
| 1.3.6.1.3.98.1.1.2.1.10 | ColumnipsecSaAhInCreator | read-only | current | The creator of this SA. This MIB makes no assumptions about how the SAs are created. They may be created statically, or by a key exchange protocol such as IKE,… |
| 1.3.6.1.3.98.1.1.2.1.11 | ColumnipsecSaAhInEncapsulation | read-only | current | The type of encapsulation used by this SA. |
| 1.3.6.1.3.98.1.1.2.1.12 | ColumnipsecSaAhInAuthAlg | read-only | current | A unique value representing the hash algorithm applied to traffic carried by this SA. |
| 1.3.6.1.3.98.1.1.2.1.13 | ColumnipsecSaAhInAuthKeyLength | read-only | current | The length of the authentication key in bits used for the algorithm specified in the 'ipsecSaAhInAuthAlg' object. It may be 0 if the key length is implicit in … |
| 1.3.6.1.3.98.1.1.2.1.14 | ColumnipsecSaAhInRepWinSize | read-only | current | The size of the anti-replay window used by this SA, or 0 if anti-replay checking is not being done. |
| 1.3.6.1.3.98.1.1.2.1.15 | ColumnipsecSaAhInLimitSeconds | read-only | current | The maximum lifetime in seconds of the SA, or 0 if there is no time constraint on its expiration. The display value is limited to 4294967295 seconds (more than… |
| 1.3.6.1.3.98.1.1.2.1.16 | ColumnipsecSaAhInLimitKbytes | read-only | current | The maximum traffic in bytes that the SA is allowed to process, or 0 if there is no traffic constraint on its expiration. The display value is limited to 42949… |
| 1.3.6.1.3.98.1.1.2.1.17 | ColumnipsecSaAhInAccSeconds | read-only | current | The number of seconds accumulated against the SA's expiration by time. This is also the number of seconds that the SA has existed. |
| 1.3.6.1.3.98.1.1.2.1.18 | ColumnipsecSaAhInAccKbytes | read-only | current | The amount of traffic accumulated that counts against the SA's expiration by traffic limitation, measured in kilobytes. This value may be 0 if the SA does not … |
| 1.3.6.1.3.98.1.1.2.1.19 | ColumnipsecSaAhInUserOctets | read-only | current | The amount of user level traffic measured in bytes handled by the SA. This is the number of bytes of the de-processed IP packet, including the original IP head… |
| 1.3.6.1.3.98.1.1.2.1.20 | ColumnipsecSaAhInPackets | read-only | current | The number of packets handled by the SA. |
| 1.3.6.1.3.98.1.1.2.1.21 | ColumnipsecSaAhInAuthErrors | read-only | current | The number of packets discarded by the SA due to authentication errors. |
| 1.3.6.1.3.98.1.1.2.1.22 | ColumnipsecSaAhInReplayErrors | read-only | current | The number of packets discarded by the SA due to replay errors. |
| 1.3.6.1.3.98.1.1.2.1.23 | ColumnipsecSaAhInPolicyErrors | read-only | current | The number of packets discarded by the SA due to policy errors. This includes packets where the next protocol is invalid. |
| 1.3.6.1.3.98.1.1.2.1.24 | ColumnipsecSaAhInOtherReceiveErrors | read-only | current | The number of packets discarded by the SA due to errors other than decryption, authentication or replay errors. This may include packets dropped due to a lack … |
| 1.3.6.1.3.98.1.1.3 | TableipsecSaIpcompInTable | not-accessible | current | The (conceptual) table containing information on IPsec inbound IPcomp SAs. There should be one row for every inbound IPcomp (security) association that exists … |
| 1.3.6.1.3.98.1.1.3.1 | RowipsecSaIpcompInEntry | not-accessible | current | An entry (conceptual row) containing the information on a particular IPsec inbound IPcomp SA. A row in this table cannot be created or deleted by SNMP operatio… |
| 1.3.6.1.3.98.1.1.3.1.1 | ColumnipsecSaIpcompInAddress | read-only | current | The destination address of the SA. IPv4 entities will prefix the IP address with '0000:0000:0000:0000:0000:FFFF::'. |
| 1.3.6.1.3.98.1.1.3.1.2 | ColumnipsecSaIpcompInCpi | read-only | current | The CPI of the SA. Since the lower values of CPIs are reserved to be the same as the algorithm, the syntax for this object is the same as the transform. |
| 1.3.6.1.3.98.1.1.3.1.3 | ColumnipsecSaIpcompInDestId | read-only | current | The destination identifier of the SA. It may be 0 if unknown or if the SA uses transport mode, or 0 if this SA is used with multiple SAs in security associatio… |
| 1.3.6.1.3.98.1.1.3.1.4 | ColumnipsecSaIpcompInDestIdType | read-only | current | The type of identifier presented by 'ipsecSaIpcompInDestId'. It may be 0 if unknown or if the SA uses transport mode, or if this SA is used with multiple SAs i… |
| 1.3.6.1.3.98.1.1.3.1.5 | ColumnipsecSaIpcompInSourceId | read-only | current | The source identifier of the SA. It may be 0 if unknown or if the SA uses transport mode encapsulation, or 0 if this SA is used with multiple SAs in security a… |
| 1.3.6.1.3.98.1.1.3.1.6 | ColumnipsecSaIpcompInSourceIdType | read-only | current | The type of identifier presented by 'ipsecSaIpcompInSourceId'. It may be 0 if unknown or if the SA uses transport mode encapsulation, or if this SA is used wit… |
| 1.3.6.1.3.98.1.1.3.1.7 | ColumnipsecSaIpcompInProtocol | read-only | current | The transport-layer protocol number that this SA carries, or 0 if it carries any protocol. |
| 1.3.6.1.3.98.1.1.3.1.8 | ColumnipsecSaIpcompInDestPort | read-only | current | The destination port number of the protocol that this SA carries, or 0 if it carries any port number. |
| 1.3.6.1.3.98.1.1.3.1.9 | ColumnipsecSaIpcompInSourcePort | read-only | current | The source port number of the protocol that this SA carries, or 0 if it carries any port number. |
| 1.3.6.1.3.98.1.1.3.1.10 | ColumnipsecSaIpcompInCreator | read-only | current | The creator of this SA. This MIB makes no assumptions about how the SAs are created. They may be created statically, or by a key exchange protocol such as IKE,… |
| 1.3.6.1.3.98.1.1.3.1.11 | ColumnipsecSaIpcompInEncapsulation | read-only | current | The type of encapsulation used by this SA. |
| 1.3.6.1.3.98.1.1.3.1.12 | ColumnipsecSaIpcompInDecompAlg | read-only | current | A unique value representing the decompression algorithm applied to traffic. |
| 1.3.6.1.3.98.1.1.3.1.13 | ColumnipsecSaIpcompInSeconds | read-only | current | The number of seconds that the SA has existed. |
| 1.3.6.1.3.98.1.1.3.1.14 | ColumnipsecSaIpcompInUserOctets | read-only | current | The amount of user level traffic measured in bytes handled by the SA. This is the number of bytes of the uncompressed IP packet, including the original IP head… |
| 1.3.6.1.3.98.1.1.3.1.15 | ColumnipsecSaIpcompInPackets | read-only | current | The number of packets handled by the SA. |
| 1.3.6.1.3.98.1.1.3.1.16 | ColumnipsecSaIpcompInDecompErrors | read-only | current | The number of packets discarded by the SA due to decompression errors. |
| 1.3.6.1.3.98.1.1.3.1.17 | ColumnipsecSaIpcompInOtherReceiveErrors | read-only | current | The number of packets discarded by the SA due to errors other than decompression errors. This may include packets dropped due to a lack of receive buffers, and… |
| 1.3.6.1.3.98.1.1.4 | TableipsecSaEspOutTable | not-accessible | current | The (conceptual) table containing information on IPsec Outbound ESP SAs. There should be one row for every outbound ESP security association that exists in the… |
| 1.3.6.1.3.98.1.1.4.1 | RowipsecSaEspOutEntry | not-accessible | current | An entry (conceptual row) containing the information on a particular IPsec Outbound ESP SA. A row in this table cannot be created or deleted by SNMP operations… |
| 1.3.6.1.3.98.1.1.4.1.1 | ColumnipsecSaEspOutAddress | read-only | current | The destination address of the SA. IPv4 entities will prefix the IP address with '0000:0000:0000:0000:0000:FFFF::'. |
| 1.3.6.1.3.98.1.1.4.1.2 | ColumnipsecSaEspOutSpi | read-only | current | The security parameters index of the SA. |
| 1.3.6.1.3.98.1.1.4.1.3 | ColumnipsecSaEspOutSourceId | read-only | current | The source identifier of the SA. It may be 0 if unknown or if the SA uses transport mode encapsulation. This value is taken directly from the optional ID paylo… |
| 1.3.6.1.3.98.1.1.4.1.4 | ColumnipsecSaEspOutSourceIdType | read-only | current | The type of identifier presented by 'ipsecSaEspOutSourceId'. It may be 0 if unknown or if the SA uses transport mode encapsulation. |
| 1.3.6.1.3.98.1.1.4.1.5 | ColumnipsecSaEspOutDestId | read-only | current | The destination identifier of the SA. It may be 0 if unknown or if the SA uses transport mode encapsulation. This value is taken directly from the optional ID … |
| 1.3.6.1.3.98.1.1.4.1.6 | ColumnipsecSaEspOutDestIdType | read-only | current | The type of identifier presented by 'ipsecSaEspOutDestId'. It may be 0 if unknown or if the SA uses transport mode encapsulation. |
| 1.3.6.1.3.98.1.1.4.1.7 | ColumnipsecSaEspOutProtocol | read-only | current | The transport-layer protocol number that this SA carries, or 0 if it carries any protocol. |
| 1.3.6.1.3.98.1.1.4.1.8 | ColumnipsecSaEspOutSourcePort | read-only | current | The source port number of the protocol that this SA carries, or 0 if it carries any port number. |
| 1.3.6.1.3.98.1.1.4.1.9 | ColumnipsecSaEspOutDestPort | read-only | current | The destination port number of the protocol that this SA carries, or 0 if it carries any port number. |
| 1.3.6.1.3.98.1.1.4.1.10 | ColumnipsecSaEspOutCreator | read-only | current | The creator of this SA. This MIB makes no assumptions about how the SAs are created. They may be created statically, or by a key exchange protocol such as IKE,… |
| 1.3.6.1.3.98.1.1.4.1.11 | ColumnipsecSaEspOutEncapsulation | read-only | current | The type of encapsulation used by this SA. |
| 1.3.6.1.3.98.1.1.4.1.12 | ColumnipsecSaEspOutEncAlg | read-only | current | A unique value representing the encryption algorithm applied to traffic or 0 if there is no encryption used. |
| 1.3.6.1.3.98.1.1.4.1.13 | ColumnipsecSaEspOutEncKeyLength | read-only | current | The length of the encryption key in bits used for the algorithm specified in the 'ipsecSaEspOutEncAlg' object. It may be 0 if the key length is implicit in the… |
| 1.3.6.1.3.98.1.1.4.1.14 | ColumnipsecSaEspOutAuthAlg | read-only | current | A unique value representing the hash algorithm applied to traffic or 0 if there is no authentication used. |
| 1.3.6.1.3.98.1.1.4.1.15 | ColumnipsecSaEspOutAuthKeyLength | read-only | current | The length of the authentication key in bits used for the algorithm specified in the 'ipsecSaEspOutAuthAlg' object. It may be 0 if the key length is implicit i… |
| 1.3.6.1.3.98.1.1.4.1.16 | ColumnipsecSaEspOutLimitSeconds | read-only | current | The maximum lifetime in seconds of the SA, or 0 if there is no time constraint on its expiration. The display value is limited to 4294967295 seconds (more than… |
| 1.3.6.1.3.98.1.1.4.1.17 | ColumnipsecSaEspOutLimitKbytes | read-only | current | The maximum traffic in bytes that the SA is allowed to process, or 0 if there is no traffic constraint on its expiration. The display value is limited to 42949… |
| 1.3.6.1.3.98.1.1.4.1.18 | ColumnipsecSaEspOutAccSeconds | read-only | current | The number of seconds accumulated against the SA's expiration by time. This is also the number of seconds that the SA has existed. |
| 1.3.6.1.3.98.1.1.4.1.19 | ColumnipsecSaEspOutAccKbytes | read-only | current | The amount of traffic accumulated that counts against the SA's expiration by traffic limitation, measured in kilobytes. This value may be 0 if the SA does not … |
| 1.3.6.1.3.98.1.1.4.1.20 | ColumnipsecSaEspOutUserOctets | read-only | current | The amount of user level traffic measured in bytes handled by the SA. This is the number of bytes of the unencrypted IP packet, including the original IP heade… |
| 1.3.6.1.3.98.1.1.4.1.21 | ColumnipsecSaEspOutPackets | read-only | current | The number of packets handled by the SA. |
| 1.3.6.1.3.98.1.1.4.1.22 | ColumnipsecSaEspOutSendErrors | read-only | current | The number of packets discarded by the SA due to any error. This may include errors due to a lack of transmit buffers. |
| 1.3.6.1.3.98.1.1.5 | TableipsecSaAhOutTable | not-accessible | current | The (conceptual) table containing information on IPsec Outbound AH SAs. There should be one row for every outbound AH security association that exists in the e… |
| 1.3.6.1.3.98.1.1.5.1 | RowipsecSaAhOutEntry | not-accessible | current | An entry (conceptual row) containing the information on a particular IPsec Outbound AH SA. A row in this table cannot be created or deleted by SNMP operations … |
| 1.3.6.1.3.98.1.1.5.1.1 | ColumnipsecSaAhOutAddress | read-only | current | The destination address of the SA. IPv4 entities will prefix the IP address with '0000:0000:0000:0000:0000:FFFF::'. |
| 1.3.6.1.3.98.1.1.5.1.2 | ColumnipsecSaAhOutSpi | read-only | current | The security parameters index of the SA. |
| 1.3.6.1.3.98.1.1.5.1.3 | ColumnipsecSaAhOutSourceId | read-only | current | The source identifier of the SA. It may be 0 if unknown or if the SA uses transport mode encapsulation. This value is taken directly from the optional ID paylo… |
| 1.3.6.1.3.98.1.1.5.1.4 | ColumnipsecSaAhOutSourceIdType | read-only | current | The type of identifier presented by 'ipsecSaAhOutSourceId'. It may be 0 if unknown or if the SA uses transport mode encapsulation. |
| 1.3.6.1.3.98.1.1.5.1.5 | ColumnipsecSaAhOutDestId | read-only | current | The destination identifier of the SA. It may be 0 if unknown or if the SA uses transport mode encapsulation. This value is taken directly from the optional ID … |
| 1.3.6.1.3.98.1.1.5.1.6 | ColumnipsecSaAhOutDestIdType | read-only | current | The type of identifier presented by 'ipsecSaAhOutDestId'. It may be 0 if unknown or if the SA uses transport mode encapsulation. |
| 1.3.6.1.3.98.1.1.5.1.7 | ColumnipsecSaAhOutProtocol | read-only | current | The transport-layer protocol number that this SA carries, or 0 if it carries any protocol. |
| 1.3.6.1.3.98.1.1.5.1.8 | ColumnipsecSaAhOutSourcePort | read-only | current | The source port number of the protocol that this SA carries, or 0 if it carries any port number. |
| 1.3.6.1.3.98.1.1.5.1.9 | ColumnipsecSaAhOutDestPort | read-only | current | The destination port number of the protocol that this SA carries, or 0 if it carries any port number. |
| 1.3.6.1.3.98.1.1.5.1.10 | ColumnipsecSaAhOutCreator | read-only | current | The creator of this SA. This MIB makes no assumptions about how the SAs are created. They may be created statically, or by a key exchange protocol such as IKE,… |
| 1.3.6.1.3.98.1.1.5.1.11 | ColumnipsecSaAhOutEncapsulation | read-only | current | The type of encapsulation used by this SA. |
| 1.3.6.1.3.98.1.1.5.1.12 | ColumnipsecSaAhOutAuthAlg | read-only | current | A unique value representing the hash algorithm applied to traffic carried by this SA. |
| 1.3.6.1.3.98.1.1.5.1.13 | ColumnipsecSaAhOutAuthKeyLength | read-only | current | The length of the authentication key in bits used for the algorithm specified in the 'ipsecSaAhOutAuthAlg' object. It may be 0 if the key length is implicit in… |
| 1.3.6.1.3.98.1.1.5.1.14 | ColumnipsecSaAhOutLimitSeconds | read-only | current | The maximum lifetime in seconds of the SA, or 0 if there is no time constraint on its expiration. The display value is limited to 4294967295 seconds (more than… |
| 1.3.6.1.3.98.1.1.5.1.15 | ColumnipsecSaAhOutLimitKbytes | read-only | current | The maximum traffic in bytes that the SA is allowed to process, or 0 if there is no traffic constraint on its expiration. The display value is limited to 42949… |
| 1.3.6.1.3.98.1.1.5.1.16 | ColumnipsecSaAhOutAccSeconds | read-only | current | The number of seconds accumulated against the SA's expiration by time. This is also the number of seconds that the SA has existed. |
| 1.3.6.1.3.98.1.1.5.1.17 | ColumnipsecSaAhOutAccKbytes | read-only | current | The amount of traffic accumulated that counts against the SA's expiration by traffic limitation, measured in kilobytes. This value may be 0 if the SA does not … |
| 1.3.6.1.3.98.1.1.5.1.18 | ColumnipsecSaAhOutUserOctets | read-only | current | The amount of user level traffic measured in bytes handled by the SA. This is the number of bytes of the unprocessed IP packet, including the original IP heade… |
| 1.3.6.1.3.98.1.1.5.1.19 | ColumnipsecSaAhOutPackets | read-only | current | The number of packets handled by the SA. |
| 1.3.6.1.3.98.1.1.5.1.20 | ColumnipsecSaAhOutSendErrors | read-only | current | The number of packets discarded by the SA due to any error. This may include errors due to a lack of transmit buffers. |
| 1.3.6.1.3.98.1.1.6 | TableipsecSaIpcompOutTable | not-accessible | current | The (conceptual) table containing information on IPsec Outbound IPcomp SAs. There should be one row for every outbound IPcomp (security) association that exist… |
| 1.3.6.1.3.98.1.1.6.1 | RowipsecSaIpcompOutEntry | not-accessible | current | An entry (conceptual row) containing the information on a particular IPsec Outbound IPcomp SA. A row in this table cannot be created or deleted by SNMP operati… |
| 1.3.6.1.3.98.1.1.6.1.1 | ColumnipsecSaIpcompOutAddress | read-only | current | The destination address of the SA. If the IPcomp SA is shared across multiple SAs in security association suites, this value may be 0. IPv4 entities will prefi… |
| 1.3.6.1.3.98.1.1.6.1.2 | ColumnipsecSaIpcompOutCpi | read-only | current | The CPI of the SA. Since the lower values of CPIs are reserved to be the same as the algorithm, the syntax for this object is the same as the transform. |
| 1.3.6.1.3.98.1.1.6.1.3 | ColumnipsecSaIpcompOutSourceId | read-only | current | The source identifier of the SA. It may be 0 if unknown or if the SA uses transport mode encapsulation, or if this SA is used with multiple SAs in security ass… |
| 1.3.6.1.3.98.1.1.6.1.4 | ColumnipsecSaIpcompOutSourceIdType | read-only | current | The type of identifier presented by 'ipsecSaIpcompOutSourceId'. It may be 0 if unknown or if the SA uses transport mode encapsulation, or if this SA is used wi… |
| 1.3.6.1.3.98.1.1.6.1.5 | ColumnipsecSaIpcompOutDestId | read-only | current | The destination identifier of the SA. It may be 0 if unknown or if the SA uses transport mode encapsulation, or if this SA is used with multiple SAs in securit… |
| 1.3.6.1.3.98.1.1.6.1.6 | ColumnipsecSaIpcompOutDestIdType | read-only | current | The type of identifier presented by 'ipsecSaIpcompOutDestId', or 0 if unknown or if the SA uses transport mode encapsulation, or 0 if this SA is used with mult… |
| 1.3.6.1.3.98.1.1.6.1.7 | ColumnipsecSaIpcompOutProtocol | read-only | current | The transport-layer protocol number that this SA carries, or 0 if it carries any protocol. |
| 1.3.6.1.3.98.1.1.6.1.8 | ColumnipsecSaIpcompOutSourcePort | read-only | current | The source port number of the protocol that this SA carries, or 0 if it carries any port number. |
| 1.3.6.1.3.98.1.1.6.1.9 | ColumnipsecSaIpcompOutDestPort | read-only | current | The destination port number of the protocol that this SA carries, or 0 if it carries any port number. |
| 1.3.6.1.3.98.1.1.6.1.10 | ColumnipsecSaIpcompOutCreator | read-only | current | The creator of this SA. This MIB makes no assumptions about how the SAs are created. They may be created statically, or by a key exchange protocol such as IKE,… |
| 1.3.6.1.3.98.1.1.6.1.11 | ColumnipsecSaIpcompOutEncapsulation | read-only | current | The type of encapsulation used by this SA. |
| 1.3.6.1.3.98.1.1.6.1.12 | ColumnipsecSaIpcompOutCompAlg | read-only | current | A unique value representing the compression algorithm applied to traffic. |
| 1.3.6.1.3.98.1.1.6.1.13 | ColumnipsecSaIpcompOutSeconds | read-only | current | The number of seconds that the SA has existed. |
| 1.3.6.1.3.98.1.1.6.1.14 | ColumnipsecSaIpcompOutUserOctets | read-only | current | The amount of user level traffic measured in bytes handled by the SA. This is the number of bytes of the decompressed IP packet, including the original IP head… |
| 1.3.6.1.3.98.1.1.6.1.15 | ColumnipsecSaIpcompOutOutputOctets | read-only | current | The amount of traffic measured in bytes output by the SA. This includes byte counts from packets compressed by the SA and also packets not modified by the SA. … |
| 1.3.6.1.3.98.1.1.6.1.16 | ColumnipsecSaIpcompOutPackets | read-only | current | The number of packets handled by the SA. This includes packets that were both compressed and not compressed. |
| 1.3.6.1.3.98.1.2 | IdentitysaStatistics | current | This is the base object identifier for all objects which are global counters for IPsec security associations. | |
| 1.3.6.1.3.98.1.2.1 | ScalaripsecEspCurrentInboundSAs | read-only | current | The current number of inbound ESP SAs in the entity. |
| 1.3.6.1.3.98.1.2.2 | ScalaripsecEspTotalInboundSAs | read-only | current | The total number of inbound ESP SAs created in the entity since boot time. |
| 1.3.6.1.3.98.1.2.3 | ScalaripsecEspCurrentOutboundSAs | read-only | current | The current number of outbound ESP SAs in the entity. |
| 1.3.6.1.3.98.1.2.4 | ScalaripsecEspTotalOutboundSAs | read-only | current | The total number of outbound ESP SAs created in the entity since boot time. |
| 1.3.6.1.3.98.1.2.5 | ScalaripsecAhCurrentInboundSAs | read-only | current | The current number of inbound AH SAs in the entity. |
| 1.3.6.1.3.98.1.2.6 | ScalaripsecAhTotalInboundSAs | read-only | current | The total number of inbound AH SAs created in the entity since boot time. |
| 1.3.6.1.3.98.1.2.7 | ScalaripsecAhCurrentOutboundSAs | read-only | current | The current number of outbound AH SAs in the entity. |
| 1.3.6.1.3.98.1.2.8 | ScalaripsecAhTotalOutboundSAs | read-only | current | The total number of outbound AH SAs created in the entity since boot time. |
| 1.3.6.1.3.98.1.2.9 | ScalaripsecIpcompCurrentInboundSAs | read-only | current | The current number of inbound IPcomp SAs in the entity. |
| 1.3.6.1.3.98.1.2.10 | ScalaripsecIpcompTotalInboundSAs | read-only | current | The total number of inbound IPcomp SAs created in the entity since boot time. |
| 1.3.6.1.3.98.1.2.11 | ScalaripsecIpcompCurrentOutboundSAs | read-only | current | The current number of outbound IPcomp SAs in the entity. |
| 1.3.6.1.3.98.1.2.12 | ScalaripsecIpcompTotalOutboundSAs | read-only | current | The total number of outbound IPcomp SAs created in the entity since boot time. |
| 1.3.6.1.3.98.1.3 | IdentitysaErrors | current | This is the base object identifier for all objects which are global error counters for IPsec security associations. | |
| 1.3.6.1.3.98.1.3.1 | ScalaripsecDecryptionErrors | read-only | current | The total number of packets received by the entity in SAs since boot time with detectable decryption errors. Not all decryption errors are detectable within SA… |
| 1.3.6.1.3.98.1.3.2 | ScalaripsecAuthenticationErrors | read-only | current | The total number of packets received by the entity in SAs since boot time with authentication errors. This includes all packets in which the hash value is dete… |
| 1.3.6.1.3.98.1.3.3 | ScalaripsecReplayErrors | read-only | current | The total number of packets received by the entity in SAs since boot time with replay errors. |
| 1.3.6.1.3.98.1.3.4 | ScalaripsecPolicyErrors | read-only | current | The total number of packets received by the entity in SAs since boot time and discarded due to policy errors. This includes packets that had selectors that wer… |
| 1.3.6.1.3.98.1.3.5 | ScalaripsecOtherReceiveErrors | read-only | current | The total number of packets received by the entity in SAs since boot time and discarded due to errors not due to decryption, authentication, replay or policy. |
| 1.3.6.1.3.98.1.3.6 | ScalaripsecSendErrors | read-only | current | The total number of packets to be sent by the entity in SAs since boot time and discarded due to errors. |
| 1.3.6.1.3.98.1.3.7 | ScalaripsecUnknownSpiErrors | read-only | current | The total number of packets received by the entity since boot time with SPIs or CPIs that were not valid. |
| 1.3.6.1.3.98.1.4 | IdentitysaTraps | current | This is the base object identifier for all objects which are traps for IPsec security associations. | |
| 1.3.6.1.3.98.1.4.0.1 | NotificationespAuthFailureTrap | current | IPsec packets with invalid hashes were found in an inbound ESP SA. The total number of authentication errors accumulated is sent for the specific row of the 'i… | |
| 1.3.6.1.3.98.1.4.0.2 | NotificationahAuthFailureTrap | current | IPsec packets with invalid hashes were found in an inbound AH SA. The total number of authentication errors accumulated is sent for the specific row of the 'ip… | |
| 1.3.6.1.3.98.1.4.0.3 | NotificationespReplayFailureTrap | current | IPsec packets with invalid sequence numbers were found in an inbound ESP SA. The total number of replay errors accumulated is sent for the specific row of the … | |
| 1.3.6.1.3.98.1.4.0.4 | NotificationahReplayFailureTrap | current | IPsec packets with invalid sequence numbers were found in the specified AH SA. The total number of replay errors accumulated is sent for the specific row of th… | |
| 1.3.6.1.3.98.1.4.0.5 | NotificationespPolicyFailureTrap | current | IPsec packets carrying packets with invalid selectors for the specified ESP SA were found. The total number of policy errors accumulated is sent for the specif… | |
| 1.3.6.1.3.98.1.4.0.6 | NotificationahPolicyFailureTrap | current | IPsec packets carrying packets with invalid selectors for the specified AH SA were found. The total number of policy errors accumulated is sent for the specifi… | |
| 1.3.6.1.3.98.1.4.0.7 | NotificationespInvalidSpiTrap | current | A packet with an unknown SPI was detected from the specified peer with the specified SPI using the specified protocol. The destination address of the received … | |
| 1.3.6.1.3.98.1.4.0.8 | NotificationotherPolicyFailureTrap | current | Clear packets were found that should not have been sent to the entity in the clear. The total number of policy errors accumulated by the entity is sent, along … | |
| 1.3.6.1.3.98.1.5 | IdentitysaTrapObjects | current | This is the base object identifier for objects which are used as part of traps. | |
| 1.3.6.1.3.98.1.5.1 | ScalaripsecSecurityProtocol | accessible-for-notify | current | A security protocol associated with the trap. |
| 1.3.6.1.3.98.1.5.2 | ScalaripsecSPI | accessible-for-notify | current | An SPI associated with a trap. Where the security protocol associated with the trap is IPcomp, this value has a maximum of 65535. |
| 1.3.6.1.3.98.1.5.3 | ScalaripsecLocalAddress | accessible-for-notify | current | A local IP address associated with the trap. IPv4 entities will prefix the IP address with '0000:0000:0000:0000:0000:FFFF::'. |
| 1.3.6.1.3.98.1.5.4 | ScalaripsecPeerAddress | accessible-for-notify | current | A peer IP address associated with the trap. IPv4 entities will prefix the IP address with '0000:0000:0000:0000:0000:FFFF::'. |
| 1.3.6.1.3.98.1.6 | IdentitysaTrapControl | current | This is the base object identifier for all objects which are trap controls for IPsec security associations. | |
| 1.3.6.1.3.98.1.6.1 | ScalarespAuthFailureTrapEnable | read-write | current | Indicates whether espAuthFailureTrap traps should be generated. |
| 1.3.6.1.3.98.1.6.2 | ScalarahAuthFailureTrapEnable | read-write | current | Indicates whether ahAuthFailureTrap traps should be generated. |
| 1.3.6.1.3.98.1.6.3 | ScalarespReplayFailureTrapEnable | read-write | current | Indicates whether espReplayFailureTrap traps should be generated. |
| 1.3.6.1.3.98.1.6.4 | ScalarahReplayFailureTrapEnable | read-write | current | Indicates whether ahReplayFailureTrap traps should be generated. |
| 1.3.6.1.3.98.1.6.5 | ScalarespPolicyFailureTrapEnable | read-write | current | Indicates whether espPolicyFailureTrap traps should be generated. |
| 1.3.6.1.3.98.1.6.6 | ScalarahPolicyFailureTrapEnable | read-write | current | Indicates whether ahPolicyFailureTrap traps should be generated. |
| 1.3.6.1.3.98.1.6.7 | ScalarinvalidSpiTrapEnable | read-write | current | Indicates whether invalidSpiTrap traps should be generated. |
| 1.3.6.1.3.98.1.6.8 | ScalarotherPolicyFailureTrapEnable | read-write | current | Indicates whether otherPolicyFailureTrap traps should be generated. |
| 1.3.6.1.3.98.1.7 | IdentitysaGroups | current | This is the base object identifier for all objects which describe the groups in this MIB. | |
| 1.3.6.1.3.98.1.7.1 | GroupipsecSaEspGroup | current | A collection of objects that describe the state of the security associations of the ESP protocol. | |
| 1.3.6.1.3.98.1.7.2 | GroupipsecSaAhGroup | current | A collection of objects that describe the state of the security associations of the AH protocol. | |
| 1.3.6.1.3.98.1.7.3 | GroupipsecSaIpcompGroup | current | A collection of objects that describe the state of the security associations of the IPComp protocol. | |
| 1.3.6.1.3.98.1.7.4 | GroupipsecSaErrorsGroup | current | A collection of objects providing global IPsec error counters. | |
| 1.3.6.1.3.98.1.7.5 | GroupipsecSaFailureTrapEnableGroup | current | A collection of objects providing control over trap generation. | |
| 1.3.6.1.3.98.1.7.6 | GroupipsecSaTrapArgumentGroup | current | A collection of objects used only as arguments in traps. | |
| 1.3.6.1.3.98.1.7.7 | GroupipsecSaFailureTrapGroup | current | A collection of traps. | |
| 1.3.6.1.3.98.1.8 | IdentitysaConformance | current | This is the base object identifier for all objects which describe the conformance for this MIB. | |
| 1.3.6.1.3.98.1.8.1 | ComplianceipsecSaMonitorCompliance | read-only | current | The compliance statement for SNMPv2 entities which implement the IPsec Monitoring MIB. |
Type Definitions
| Name | Syntax | Status | Description |
|---|---|---|---|
| IpsecIpv6Address | OCTET STRING (SIZE (16)) | current | This data type is used to model IPv6 addresses. This is a binary string of 16 octets in network byte-order. For implementations that do not support IPv6, this address should appear as the 'IPv4-mapped IPv6 address' as d… |
| IpsecRawId | OCTET STRING (SIZE (0..255)) ipsecSaMonitorMIB OBJECT-IDENTITY STATUS current DESCRIPTION "This is the base object identifier for all IPsec branches." ::= { ipsecSaMonModule 1 } saTables OBJECT-IDENTITY STATUS current DESCRIPTION "This is the base object identifier for all SA tables." ::= { ipsecSaMonitorMIB 1 } saStatistics OBJECT-IDENTITY STATUS current DESCRIPTION "This is the base object identifier for all objects which are global counters for IPsec security associations." ::= { ipsecSaMonitorMIB 2 } saErrors OBJECT-IDENTITY STATUS current DESCRIPTION "This is the base object identifier for all objects which are global error counters for IPsec security associations." ::= { ipsecSaMonitorMIB 3 } saTraps OBJECT-IDENTITY STATUS current DESCRIPTION "This is the base object identifier for all objects which are traps for IPsec security associations." ::= { ipsecSaMonitorMIB 4 } saTrapObjects OBJECT-IDENTITY STATUS current DESCRIPTION "This is the base object identifier for objects which are used as part of traps." ::= { ipsecSaMonitorMIB 5 } saTrapControl OBJECT-IDENTITY STATUS current DESCRIPTION "This is the base object identifier for all objects which are trap controls for IPsec security associations." ::= { ipsecSaMonitorMIB 6 } saGroups OBJECT-IDENTITY STATUS current DESCRIPTION "This is the base object identifier for all objects which describe the groups in this MIB." ::= { ipsecSaMonitorMIB 7 } saConformance OBJECT-IDENTITY STATUS current DESCRIPTION "This is the base object identifier for all objects which describe the conformance for this MIB." ::= { ipsecSaMonitorMIB 8 } | current | This data type is used to model the ID values used by entities that have negotiated and created SAs. The values are taken directly from any payloads exchanged, independent of the type of ID transmitted. In some cases, t… |
| IpsecSaCreatorIdent | INTEGER { unknown(0), static(1), ike(2), other(3) } | current | A value indicating how an SA was created. |