H3C-IPSEC-MONITOR-V2-MIB

File: H3C-IPSEC-MONITOR-V2-MIB.mib (72045 bytes)

Imported modules

RFC1213-MIB IF-MIB SNMPv2-TC
SNMPv2-SMI INET-ADDRESS-MIB SNMPv2-CONF
HUAWEI-3COM-OID-MIB

Imported symbols

ifIndex InterfaceIndex DisplayString
TEXTUAL-CONVENTION TruthValue Integer32
Counter32 Counter64 OBJECT-TYPE
MODULE-IDENTITY Gauge32 NOTIFICATION-TYPE
Unsigned32 InetAddressType InetAddress
MODULE-COMPLIANCE OBJECT-GROUP NOTIFICATION-GROUP
h3cCommon

Defined Types

H3cIPsecDiffHellmanGrpV2  
The Diffie Hellman Group used in the IKE and IPsec negotiations. invalidGroup(2147483647) is defined as invalid value.
TEXTUAL-CONVENTION    
  INTEGER none(0), dhGroup1(1), dhGroup2(2), dhGroup5(5), dhGroup14(14), dhGroup24(24), invalidGroup(2147483647)  

H3cIPsecEncapModeV2  
The encapsulation mode used by an IPsec Phase-2 Tunnel. invalidMode(2147483647) is defined as invalid value.
TEXTUAL-CONVENTION    
  INTEGER tunnel(1), transport(2), invalidMode(2147483647)  

H3cIPsecEncryptAlgoV2  
The encryption algorithm used in the IKE and IPsec negotiations. invalidAlg(2147483647) is defined as invalid value.
TEXTUAL-CONVENTION    
  INTEGER none(0), desCbc(1), ideaCbc(2), blowfishCbc(3), rc5R16B64Cbc(4), tripleDesCbc(5), castCbc(6), aesCbc(7), nsaCbc(8), aesCbc128(9), aesCbc192(10), aesCbc256(11), aesCtr(12), aesCamelliaCbc(13), rc4(14), invalidAlg(2147483647)  

H3cIPsecAuthAlgoV2  
The authentication algorithm used in the IKE negotiations. invalidAlg(2147483647) is defined as invalid value.
TEXTUAL-CONVENTION    
  INTEGER none(0), md5(1), sha1(2), sha256(3), sha384(4), sha512(5), invalidAlg(2147483647)  

H3cIPsecSaProtocolV2  
The protocol of security association.
TEXTUAL-CONVENTION    
  INTEGER reserved(0), ah(2), esp(3), ipcomp(4)  

H3cIPsecIDTypeV2  
The type of IPsec Identity.
TEXTUAL-CONVENTION    
  INTEGER reserved(0), ipv4Addr(1), fqdn(2), userFqdn(3), ipv4AddrSubnet(4), ipv6Addr(5), ipv6AddrSubnet(6), ipv4AddrRange(7), ipv6AddrRange(8), derAsn1Dn(9), derAsn1Gn(10), keyId(11)  

H3cIPsecTrafficTypeV2  
The type of the data flow.
TEXTUAL-CONVENTION    
  INTEGER ipv4Addr(1), ipv4AddrSubnet(4), ipv6Addr(5), ipv6AddrSubnet(6), ipv4AddrRange(7), ipv6AddrRange(8)  

H3cIPsecNegoTypeV2  
The type of key used by an IPsec Phase-2 Tunnel. invalidType(2147483647) is defined as invalid value.
TEXTUAL-CONVENTION    
  INTEGER ike(1), manual(2), invalidType(2147483647)  

H3cIPsecTunnelStateV2  
The state of IPsec tunnel.
TEXTUAL-CONVENTION    
  INTEGER active(1), timeout(2)  

H3cIPsecTunnelV2Entry  
SEQUENCE    
  h3cIPsecTunIndexV2 Integer32
  h3cIPsecTunIfIndexV2 InterfaceIndex
  h3cIPsecTunIKETunnelIndexV2 Integer32
  h3cIPsecTunIKETunLocalIDTypeV2 H3cIPsecIDTypeV2
  h3cIPsecTunIKETunLocalIDVal1V2 DisplayString
  h3cIPsecTunIKETunLocalIDVal2V2 DisplayString
  h3cIPsecTunIKETunRemoteIDTypeV2 H3cIPsecIDTypeV2
  h3cIPsecTunIKETunRemoteIDVal1V2 DisplayString
  h3cIPsecTunIKETunRemoteIDVal2V2 DisplayString
  h3cIPsecTunLocalAddrTypeV2 InetAddressType
  h3cIPsecTunLocalAddrV2 InetAddress
  h3cIPsecTunRemoteAddrTypeV2 InetAddressType
  h3cIPsecTunRemoteAddrV2 InetAddress
  h3cIPsecTunKeyTypeV2 H3cIPsecNegoTypeV2
  h3cIPsecTunEncapModeV2 H3cIPsecEncapModeV2
  h3cIPsecTunInitiatorV2 INTEGER
  h3cIPsecTunLifeSizeV2 Gauge32
  h3cIPsecTunLifeTimeV2 Integer32
  h3cIPsecTunRemainTimeV2 Integer32
  h3cIPsecTunActiveTimeV2 Integer32
  h3cIPsecTunRemainSizeV2 Gauge32
  h3cIPsecTunTotalRefreshesV2 Counter32
  h3cIPsecTunCurrentSaInstancesV2 Gauge32
  h3cIPsecTunInSaEncryptAlgoV2 H3cIPsecEncryptAlgoV2
  h3cIPsecTunInSaAhAuthAlgoV2 H3cIPsecAuthAlgoV2
  h3cIPsecTunInSaEspAuthAlgoV2 H3cIPsecAuthAlgoV2
  h3cIPsecTunDiffHellmanGrpV2 H3cIPsecDiffHellmanGrpV2
  h3cIPsecTunOutSaEncryptAlgoV2 H3cIPsecEncryptAlgoV2
  h3cIPsecTunOutSaAhAuthAlgoV2 H3cIPsecAuthAlgoV2
  h3cIPsecTunOutSaEspAuthAlgoV2 H3cIPsecAuthAlgoV2
  h3cIPsecTunPolicyNameV2 DisplayString
  h3cIPsecTunPolicyNumV2 Integer32
  h3cIPsecTunStatusV2 INTEGER

H3cIPsecTunnelStatV2Entry  
SEQUENCE    
  h3cIPsecTunInOctetsV2 Counter64
  h3cIPsecTunInDecompOctetsV2 Counter64
  h3cIPsecTunInPktsV2 Counter64
  h3cIPsecTunInDropPktsV2 Counter64
  h3cIPsecTunInReplayDropPktsV2 Counter64
  h3cIPsecTunInAuthFailsV2 Counter64
  h3cIPsecTunInDecryptFailsV2 Counter64
  h3cIPsecTunOutOctetsV2 Counter64
  h3cIPsecTunOutUncompOctetsV2 Counter64
  h3cIPsecTunOutPktsV2 Counter64
  h3cIPsecTunOutDropPktsV2 Counter64
  h3cIPsecTunOutEncryptFailsV2 Counter64
  h3cIPsecTunNoMemoryDropPktsV2 Counter64
  h3cIPsecTunQueueFullDropPktsV2 Counter64
  h3cIPsecTunInvalidLenDropPktsV2 Counter64
  h3cIPsecTunTooLongDropPktsV2 Counter64
  h3cIPsecTunInvalidSaDropPktsV2 Counter64

H3cIPsecSaV2Entry  
SEQUENCE    
  h3cIPsecSaIndexV2 Integer32
  h3cIPsecSaDirectionV2 INTEGER
  h3cIPsecSaSpiValueV2 Unsigned32
  h3cIPsecSaSecProtocolV2 H3cIPsecSaProtocolV2
  h3cIPsecSaEncryptAlgoV2 H3cIPsecEncryptAlgoV2
  h3cIPsecSaAuthAlgoV2 H3cIPsecAuthAlgoV2
  h3cIPsecSaStatusV2 INTEGER

H3cIPsecTrafficV2Entry  
SEQUENCE    
  h3cIPsecTrafficLocalTypeV2 H3cIPsecTrafficTypeV2
  h3cIPsecTrafficLocalAddr1TypeV2 InetAddressType
  h3cIPsecTrafficLocalAddr1V2 InetAddress
  h3cIPsecTrafficLocalAddr2TypeV2 InetAddressType
  h3cIPsecTrafficLocalAddr2V2 InetAddress
  h3cIPsecTrafficLocalProtocol1V2 Integer32
  h3cIPsecTrafficLocalProtocol2V2 Integer32
  h3cIPsecTrafficLocalPort1V2 Integer32
  h3cIPsecTrafficLocalPort2V2 Integer32
  h3cIPsecTrafficRemoteTypeV2 H3cIPsecTrafficTypeV2
  h3cIPsecTrafficRemAddr1TypeV2 InetAddressType
  h3cIPsecTrafficRemAddr1V2 InetAddress
  h3cIPsecTrafficRemAddr2TypeV2 InetAddressType
  h3cIPsecTrafficRemAddr2V2 InetAddress
  h3cIPsecTrafficRemoPro1V2 Integer32
  h3cIPsecTrafficRemoPro2V2 Integer32
  h3cIPsecTrafficRemPort1V2 Integer32
  h3cIPsecTrafficRemPort2V2 Integer32

Defined Values

h3cIPsecMonitorV2 1.3.6.1.4.1.2011.10.2.126
The MIB is designed to get statistic information of IPsec tunnels. With this MIB, we can get information of a certain tunnel or all tunnels.
MODULE-IDENTITY    

h3cIPsecObjectsV2 1.3.6.1.4.1.2011.10.2.126.1
OBJECT IDENTIFIER    

h3cIPsecScalarObjectsV2 1.3.6.1.4.1.2011.10.2.126.1.1
OBJECT IDENTIFIER    

h3cIPsecMIBVersion 1.3.6.1.4.1.2011.10.2.126.1.1.1
Version string of this MIB.
OBJECT-TYPE    
  DisplayString  

h3cIPsecTunnelV2Table 1.3.6.1.4.1.2011.10.2.126.1.2
The IPsec Phase-2 Tunnel Table. There is one entry in this table for each active IPsec Phase-2 Tunnel.
OBJECT-TYPE    
  SEQUENCE OF  
    H3cIPsecTunnelV2Entry

h3cIPsecTunnelV2Entry 1.3.6.1.4.1.2011.10.2.126.1.2.1
Information about h3cIPsecTunnelV2Table.
OBJECT-TYPE    
  H3cIPsecTunnelV2Entry  

h3cIPsecTunIndexV2 1.3.6.1.4.1.2011.10.2.126.1.2.1.1
The index of IPsec Phase-2 Tunnel Table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The value of this object will wrap at 2147483647.
OBJECT-TYPE    
  Integer32 1..2147483647  

h3cIPsecTunIfIndexV2 1.3.6.1.4.1.2011.10.2.126.1.2.1.2
The interface index( the ifIndex of ifTable ).
OBJECT-TYPE    
  InterfaceIndex  

h3cIPsecTunIKETunnelIndexV2 1.3.6.1.4.1.2011.10.2.126.1.2.1.3
The index of the associated IPsec Phase-1 IKE Tunnel (IKETunIndex in the IKETunnelTable). 2147483647 is defined as invalid value.
OBJECT-TYPE    
  Integer32 1..2147483647  

h3cIPsecTunIKETunLocalIDTypeV2 1.3.6.1.4.1.2011.10.2.126.1.2.1.4
The type of the local peer identity for the associated IPsec Phase-1 IKE Tunnel (IKETunLocalType in the IKETunnelTable).
OBJECT-TYPE    
  H3cIPsecIDTypeV2  

h3cIPsecTunIKETunLocalIDVal1V2 1.3.6.1.4.1.2011.10.2.126.1.2.1.5
The value of the local peer identity for the associated IPsec Phase-1 IKE Tunnel (IKETunLocalValue1 in the IKETunnelTable). If the local peer type is ipv4Addr/ipv6Addr, this is the IP address used to identify the local peer. If the local peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is the subnet address. If the local peer type is ipv4AddrRange/ipv6AddrRange, this is the beginning IP address of the range. If the local peer type is fqdn/userFqdn, this is the host name used to identify the local peer. If the local peer type is derAsn1Dn, this is the binary DER encoding of an ASN.1 X.500 Distinguished Name [X.501] of the principal whose certificates are being exchanged to establish the SA. If the local peer type is derAsn1Gn, this is the binary DER encoding of an ASN.1 X.500 GeneralName [X.509] of the principal whose certificates are being exchanged to establish the SA. If the local peer type is keyId, this is an opaque byte stream which may be used to pass vendor-specific information necessary to identify which pre-shared key should be used to authenticate Aggressive mode negotiations.
OBJECT-TYPE    
  DisplayString  

h3cIPsecTunIKETunLocalIDVal2V2 1.3.6.1.4.1.2011.10.2.126.1.2.1.6
The second specification of the local peer's IP address for the associated IPsec Phase-1 IKE Tunnel (IKETunLocalValue2 in the IKETunnelTable). If the local peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is the subnet mask. If the local peer type is ipv4AddrRange/ipv6AddrRange, this is the ending IP address of the range. If the local peer type is others, this is a zero-length string.
OBJECT-TYPE    
  DisplayString  

h3cIPsecTunIKETunRemoteIDTypeV2 1.3.6.1.4.1.2011.10.2.126.1.2.1.7
The type of the remote peer identity for the associated IPsec Phase-1 IKE Tunnel (IKETunRemoteType in the IKETunnelTable).
OBJECT-TYPE    
  H3cIPsecIDTypeV2  

h3cIPsecTunIKETunRemoteIDVal1V2 1.3.6.1.4.1.2011.10.2.126.1.2.1.8
The value of the remote peer identity for the associated IPsec Phase-1 IKE Tunnel (IKETunRemoteValue1 in the IKETunnelTable). If the remote peer type is ipv4Addr/ipv6Addr, this is the IP address used to identify the remote peer. If the remote peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is the subnet address. If the remote peer type is ipv4AddrRange/ipv6AddrRange, this is the beginning IP address of the range. If the remote peer type is fqdn/userFqdn, this is the host name used to identify the remote peer. If the remote peer type is derAsn1Dn, this is the binary DER encoding of an ASN.1 X.500 Distinguished Name [X.501] of the principal whose certificates are being exchanged to establish the SA. If the remote peer type is derAsn1Gn, this is the binary DER encoding of an ASN.1 X.500 GeneralName [X.509] of the principal whose certificates are being exchanged to establish the SA. If the remote peer type is keyId, this is an opaque byte stream which may be used to pass vendor-specific information necessary to identify which pre-shared key should be used to authenticate Aggressive mode negotiations.
OBJECT-TYPE    
  DisplayString  

h3cIPsecTunIKETunRemoteIDVal2V2 1.3.6.1.4.1.2011.10.2.126.1.2.1.9
The second specification of the remote peer's IP address for the associated IPsec Phase-1 IKE Tunnel(IKETunRemoteValue2 in the IKETunnelTable). If the remote peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is the subnet mask. If the remote peer type is ipv4AddrRange/ipv6AddrRange, this is the ending IP address of the range. If the remote peer type is others, this is a zero-length string.
OBJECT-TYPE    
  DisplayString  

h3cIPsecTunLocalAddrTypeV2 1.3.6.1.4.1.2011.10.2.126.1.2.1.10
The type of the IP address for the local peer of the IPsec Phase-2 Tunnel.
OBJECT-TYPE    
  InetAddressType  

h3cIPsecTunLocalAddrV2 1.3.6.1.4.1.2011.10.2.126.1.2.1.11
The IP address of the local peer for the IPsec Phase-2 Tunnel.
OBJECT-TYPE    
  InetAddress  

h3cIPsecTunRemoteAddrTypeV2 1.3.6.1.4.1.2011.10.2.126.1.2.1.12
The type of the IP address for the remote peer of the IPsec Phase-2 Tunnel.
OBJECT-TYPE    
  InetAddressType  

h3cIPsecTunRemoteAddrV2 1.3.6.1.4.1.2011.10.2.126.1.2.1.13
The IP address of the remote peer for the IPsec Phase-2 Tunnel.
OBJECT-TYPE    
  InetAddress  

h3cIPsecTunKeyTypeV2 1.3.6.1.4.1.2011.10.2.126.1.2.1.14
The key negotiate mode used by the IPsec Phase-2 Tunnel.
OBJECT-TYPE    
  H3cIPsecNegoTypeV2  

h3cIPsecTunEncapModeV2 1.3.6.1.4.1.2011.10.2.126.1.2.1.15
The encapsulation mode used by the IPsec Phase-2 Tunnel.
OBJECT-TYPE    
  H3cIPsecEncapModeV2  

h3cIPsecTunInitiatorV2 1.3.6.1.4.1.2011.10.2.126.1.2.1.16
The initiator of this IPsec tunnel. Value none is used for manual IPsec tunnel, for there is no initiator or responder in this method.
OBJECT-TYPE    
  INTEGER local(1), remote(2), none(2147483647)  

h3cIPsecTunLifeSizeV2 1.3.6.1.4.1.2011.10.2.126.1.2.1.17
The negotiated LifeSize of the IPsec Phase-2 Tunnel in kilobytes. 0 is defined as invalid value.
OBJECT-TYPE    
  Gauge32  

h3cIPsecTunLifeTimeV2 1.3.6.1.4.1.2011.10.2.126.1.2.1.18
The negotiated LifeTime of the IPsec Phase-2 Tunnel in seconds. 2147483647 is defined as invalid value.
OBJECT-TYPE    
  Integer32 1..2147483647  

h3cIPsecTunRemainTimeV2 1.3.6.1.4.1.2011.10.2.126.1.2.1.19
The remain time of SA in seconds. 2147483647 is defined as invalid value.
OBJECT-TYPE    
  Integer32 0..2147483647  

h3cIPsecTunActiveTimeV2 1.3.6.1.4.1.2011.10.2.126.1.2.1.20
The duration the IPsec Phase-2 Tunnel has been active in hundredths of seconds. 2147483647 is defined as invalid value.
OBJECT-TYPE    
  Integer32 0..2147483647  

h3cIPsecTunRemainSizeV2 1.3.6.1.4.1.2011.10.2.126.1.2.1.21
The remain LifeSize of SA in kilobytes. 0 is defined as invalid value.
OBJECT-TYPE    
  Gauge32  

h3cIPsecTunTotalRefreshesV2 1.3.6.1.4.1.2011.10.2.126.1.2.1.22
The total number of security association refreshing performed.
OBJECT-TYPE    
  Counter32  

h3cIPsecTunCurrentSaInstancesV2 1.3.6.1.4.1.2011.10.2.126.1.2.1.23
The number of security associations which are currently active or expiring.
OBJECT-TYPE    
  Gauge32  

h3cIPsecTunInSaEncryptAlgoV2 1.3.6.1.4.1.2011.10.2.126.1.2.1.24
The encryption algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.
OBJECT-TYPE    
  H3cIPsecEncryptAlgoV2  

h3cIPsecTunInSaAhAuthAlgoV2 1.3.6.1.4.1.2011.10.2.126.1.2.1.25
The authentication algorithm used by the inbound authentication header (AH) security association of the IPsec Phase-2 Tunnel.
OBJECT-TYPE    
  H3cIPsecAuthAlgoV2  

h3cIPsecTunInSaEspAuthAlgoV2 1.3.6.1.4.1.2011.10.2.126.1.2.1.26
The authentication algorithm used by the inbound encapsulation security protocol(ESP) security association of the IPsec Phase-2 Tunnel.
OBJECT-TYPE    
  H3cIPsecAuthAlgoV2  

h3cIPsecTunDiffHellmanGrpV2 1.3.6.1.4.1.2011.10.2.126.1.2.1.27
The Diffie Hellman Group used by the security association of the IPsec Phase-2 Tunnel.
OBJECT-TYPE    
  H3cIPsecDiffHellmanGrpV2  

h3cIPsecTunOutSaEncryptAlgoV2 1.3.6.1.4.1.2011.10.2.126.1.2.1.28
The encryption algorithm used by the outbound security association of the IPsec Phase-2 Tunnel.
OBJECT-TYPE    
  H3cIPsecEncryptAlgoV2  

h3cIPsecTunOutSaAhAuthAlgoV2 1.3.6.1.4.1.2011.10.2.126.1.2.1.29
The authentication algorithm used by the outbound authentication header (AH) security association of the IPsec Phase-2 Tunnel.
OBJECT-TYPE    
  H3cIPsecAuthAlgoV2  

h3cIPsecTunOutSaEspAuthAlgoV2 1.3.6.1.4.1.2011.10.2.126.1.2.1.30
The authentication algorithm used by the outbound encapsulation security protocol(ESP) security association of the IPsec Phase-2 Tunnel.
OBJECT-TYPE    
  H3cIPsecAuthAlgoV2  

h3cIPsecTunPolicyNameV2 1.3.6.1.4.1.2011.10.2.126.1.2.1.31
The policy name used by this IPsec tunnel.
OBJECT-TYPE    
  DisplayString  

h3cIPsecTunPolicyNumV2 1.3.6.1.4.1.2011.10.2.126.1.2.1.32
The sequence number of policy used by this IPsec tunnel.
OBJECT-TYPE    
  Integer32 1..2147483647  

h3cIPsecTunStatusV2 1.3.6.1.4.1.2011.10.2.126.1.2.1.33
The status of the IPsec Tunnel.
OBJECT-TYPE    
  INTEGER initial(1), ready(2), rekeyed(3), closed(4)  

h3cIPsecTunnelStatV2Table 1.3.6.1.4.1.2011.10.2.126.1.3
The IPsec Phase-2 Tunnel Statistics Table.
OBJECT-TYPE    
  SEQUENCE OF  
    H3cIPsecTunnelStatV2Entry

h3cIPsecTunnelStatV2Entry 1.3.6.1.4.1.2011.10.2.126.1.3.1
Information about h3cIPsecTunnelStatV2Table.
OBJECT-TYPE    
  H3cIPsecTunnelStatV2Entry  

h3cIPsecTunInOctetsV2 1.3.6.1.4.1.2011.10.2.126.1.3.1.1
The total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed.
OBJECT-TYPE    
  Counter64  

h3cIPsecTunInDecompOctetsV2 1.3.6.1.4.1.2011.10.2.126.1.3.1.2
The total number of decompressed octets received by this IPsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed.
OBJECT-TYPE    
  Counter64  

h3cIPsecTunInPktsV2 1.3.6.1.4.1.2011.10.2.126.1.3.1.3
The total number of packets received by this IPsec Phase-2 Tunnel.
OBJECT-TYPE    
  Counter64  

h3cIPsecTunInDropPktsV2 1.3.6.1.4.1.2011.10.2.126.1.3.1.4
The total number of packets dropped during receiving process by this IPsec Phase-2 Tunnel.
OBJECT-TYPE    
  Counter64  

h3cIPsecTunInReplayDropPktsV2 1.3.6.1.4.1.2011.10.2.126.1.3.1.5
The total number of packets dropped during receiving process due to Anti-Replay process by this IPsec Phase-2 Tunnel.
OBJECT-TYPE    
  Counter64  

h3cIPsecTunInAuthFailsV2 1.3.6.1.4.1.2011.10.2.126.1.3.1.6
The total number of inbound authentication's which ended in failure by this IPsec Phase-2 Tunnel.
OBJECT-TYPE    
  Counter64  

h3cIPsecTunInDecryptFailsV2 1.3.6.1.4.1.2011.10.2.126.1.3.1.7
The total number of inbound decryption's which ended in failure by this IPsec Phase-2 Tunnel.
OBJECT-TYPE    
  Counter64  

h3cIPsecTunOutOctetsV2 1.3.6.1.4.1.2011.10.2.126.1.3.1.8
The total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed.
OBJECT-TYPE    
  Counter64  

h3cIPsecTunOutUncompOctetsV2 1.3.6.1.4.1.2011.10.2.126.1.3.1.9
The total number of uncompressed octets sent by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed.
OBJECT-TYPE    
  Counter64  

h3cIPsecTunOutPktsV2 1.3.6.1.4.1.2011.10.2.126.1.3.1.10
The total number of packets sent by this IPsec Phase-2 Tunnel.
OBJECT-TYPE    
  Counter64  

h3cIPsecTunOutDropPktsV2 1.3.6.1.4.1.2011.10.2.126.1.3.1.11
The total number of packets dropped during sending process by this IPsec Phase-2 Tunnel.
OBJECT-TYPE    
  Counter64  

h3cIPsecTunOutEncryptFailsV2 1.3.6.1.4.1.2011.10.2.126.1.3.1.12
The total number of outbound encryption's which ended in failure by this IPsec Phase-2 Tunnel.
OBJECT-TYPE    
  Counter64  

h3cIPsecTunNoMemoryDropPktsV2 1.3.6.1.4.1.2011.10.2.126.1.3.1.13
The total number of packets dropped due to no enough memory by this IPsec Phase-2 Tunnel.
OBJECT-TYPE    
  Counter64  

h3cIPsecTunQueueFullDropPktsV2 1.3.6.1.4.1.2011.10.2.126.1.3.1.14
The total number of packets dropped due to queue full by this IPsec Phase-2 Tunnel.
OBJECT-TYPE    
  Counter64  

h3cIPsecTunInvalidLenDropPktsV2 1.3.6.1.4.1.2011.10.2.126.1.3.1.15
The total number of packets dropped due to invalid length packet by this IPsec Phase-2 Tunnel.
OBJECT-TYPE    
  Counter64  

h3cIPsecTunTooLongDropPktsV2 1.3.6.1.4.1.2011.10.2.126.1.3.1.16
The total number of packets dropped due to too long packet by this IPsec Phase-2 Tunnel.
OBJECT-TYPE    
  Counter64  

h3cIPsecTunInvalidSaDropPktsV2 1.3.6.1.4.1.2011.10.2.126.1.3.1.17
The total number of packets dropped due to invalid SA by this IPsec Phase-2 Tunnel.
OBJECT-TYPE    
  Counter64  

h3cIPsecSaV2Table 1.3.6.1.4.1.2011.10.2.126.1.4
The IPsec Phase-2 Security Protection Index Table. This table contains an entry for each active and expiring security association.
OBJECT-TYPE    
  SEQUENCE OF  
    H3cIPsecSaV2Entry

h3cIPsecSaV2Entry 1.3.6.1.4.1.2011.10.2.126.1.4.1
Information about h3cIPsecSaV2Table.
OBJECT-TYPE    
  H3cIPsecSaV2Entry  

h3cIPsecSaIndexV2 1.3.6.1.4.1.2011.10.2.126.1.4.1.1
The number of the Sa associated with the Phase-2 Tunnel Table. The value of this index is a number which begins at one and is incremented with each Sa associated with an IPsec Phase-2 Tunnel. The value of this object will wrap at 2,147,483,647.
OBJECT-TYPE    
  Integer32 1..2147483647  

h3cIPsecSaDirectionV2 1.3.6.1.4.1.2011.10.2.126.1.4.1.2
The direction of the SA.
OBJECT-TYPE    
  INTEGER in(1), out(2)  

h3cIPsecSaSpiValueV2 1.3.6.1.4.1.2011.10.2.126.1.4.1.3
The value of the SPI.
OBJECT-TYPE    
  Unsigned32 1..4294967295  

h3cIPsecSaSecProtocolV2 1.3.6.1.4.1.2011.10.2.126.1.4.1.4
The security protocol of the SA.
OBJECT-TYPE    
  H3cIPsecSaProtocolV2  

h3cIPsecSaEncryptAlgoV2 1.3.6.1.4.1.2011.10.2.126.1.4.1.5
The encryption algorithm used by the security association of the IPsec Phase-2 Tunnel.
OBJECT-TYPE    
  H3cIPsecEncryptAlgoV2  

h3cIPsecSaAuthAlgoV2 1.3.6.1.4.1.2011.10.2.126.1.4.1.6
The authentication algorithm used by the SA.
OBJECT-TYPE    
  H3cIPsecAuthAlgoV2  

h3cIPsecSaStatusV2 1.3.6.1.4.1.2011.10.2.126.1.4.1.7
The status of the SA.
OBJECT-TYPE    
  INTEGER active(1), expiring(2)  

h3cIPsecTrafficV2Table 1.3.6.1.4.1.2011.10.2.126.1.5
The IPsec Phase-2 Tunnel Traffic Table.
OBJECT-TYPE    
  SEQUENCE OF  
    H3cIPsecTrafficV2Entry

h3cIPsecTrafficV2Entry 1.3.6.1.4.1.2011.10.2.126.1.5.1
Information about h3cIPsecTrafficV2Table.
OBJECT-TYPE    
  H3cIPsecTrafficV2Entry  

h3cIPsecTrafficLocalTypeV2 1.3.6.1.4.1.2011.10.2.126.1.5.1.1
The type of the local peer's traffic. Possible values are: 1) A single IP address 2) An IP address range 3) An IP subnet
OBJECT-TYPE    
  H3cIPsecTrafficTypeV2  

h3cIPsecTrafficLocalAddr1TypeV2 1.3.6.1.4.1.2011.10.2.126.1.5.1.2
The type of the first IP address specification for the local peer's traffic.
OBJECT-TYPE    
  InetAddressType  

h3cIPsecTrafficLocalAddr1V2 1.3.6.1.4.1.2011.10.2.126.1.5.1.3
The first IP address specification of the local peer's traffic. If the local peer's traffic type is single IP address, this is the IP address. If the local peer's traffic type is IP subnet, this is the subnet address. If the local peer's traffic type is IP address range, this is the beginning IP address of the range.
OBJECT-TYPE    
  InetAddress  

h3cIPsecTrafficLocalAddr2TypeV2 1.3.6.1.4.1.2011.10.2.126.1.5.1.4
The type of the second IP address specification for the local peer's traffic.
OBJECT-TYPE    
  InetAddressType  

h3cIPsecTrafficLocalAddr2V2 1.3.6.1.4.1.2011.10.2.126.1.5.1.5
The second IP address specification of the local peer's traffic. If the local peer's traffic type is single IP address, this is the IP address. If the local peer's traffic type is IP subnet, this is the subnet mask. If the local peer's traffic type is IP address range, this is the ending IP address of the range.
OBJECT-TYPE    
  InetAddress  

h3cIPsecTrafficLocalProtocol1V2 1.3.6.1.4.1.2011.10.2.126.1.5.1.6
The first protocol number specification of the local peer's traffic. If the protocol type of the local peer's traffic is single protocol, this is the protocol number. If the protocol type of the local peer's traffic is protocol range, this is the beginning protocol number of the range.
OBJECT-TYPE    
  Integer32 0..255  

h3cIPsecTrafficLocalProtocol2V2 1.3.6.1.4.1.2011.10.2.126.1.5.1.7
The second protocol number specification of the local peer's traffic. If the protocol type of the local peer's traffic is single protocol, this is the protocol number. If the protocol type of the local peer's traffic is protocol range, this is the ending protocol number of the range.
OBJECT-TYPE    
  Integer32 0..255  

h3cIPsecTrafficLocalPort1V2 1.3.6.1.4.1.2011.10.2.126.1.5.1.8
The first port number specification of the local peer's traffic. If the port type of the local peer's traffic is single port, this is the port number. If the port type of the local peer's traffic is port range, this is the beginning port number of the range.
OBJECT-TYPE    
  Integer32 0..65535  

h3cIPsecTrafficLocalPort2V2 1.3.6.1.4.1.2011.10.2.126.1.5.1.9
The second port number specification of the local peer's traffic. If the port type of the local peer's traffic is single port, this is the port number. If the port type of the local peer's traffic is port range, this is the ending port number of the range.
OBJECT-TYPE    
  Integer32 0..65535  

h3cIPsecTrafficRemoteTypeV2 1.3.6.1.4.1.2011.10.2.126.1.5.1.10
The type of the remote peer's traffic. Possible values are: 1) A single IP address 2) An IP address range 3) An IP subnet
OBJECT-TYPE    
  H3cIPsecTrafficTypeV2  

h3cIPsecTrafficRemAddr1TypeV2 1.3.6.1.4.1.2011.10.2.126.1.5.1.11
The type of the first IP address specification for the remote peer's traffic.
OBJECT-TYPE    
  InetAddressType  

h3cIPsecTrafficRemAddr1V2 1.3.6.1.4.1.2011.10.2.126.1.5.1.12
The first IP address specification of the remote peer's traffic. If the remote traffic type is single IP address, this is the IP address. If the remote traffic type is IP subnet, this is the subnet address. If the remote traffic type is IP address range, this is the beginning IP address of the range.
OBJECT-TYPE    
  InetAddress  

h3cIPsecTrafficRemAddr2TypeV2 1.3.6.1.4.1.2011.10.2.126.1.5.1.13
The type of the second IP address specification for the remote peer's traffic.
OBJECT-TYPE    
  InetAddressType  

h3cIPsecTrafficRemAddr2V2 1.3.6.1.4.1.2011.10.2.126.1.5.1.14
The second IP address specification of the remote peer's traffic. If the remote traffic type is single IP address, this is the IP address. If the remote traffic type is IP subnet, this is the subnet mask. If the remote traffic type is IP address range, this is the ending IP address of the range.
OBJECT-TYPE    
  InetAddress  

h3cIPsecTrafficRemoPro1V2 1.3.6.1.4.1.2011.10.2.126.1.5.1.15
The first protocol number specification of the remote peer's traffic. If the protocol type of the remote peer's traffic is single protocol, this is the protocol number. If the protocol type of the remote peer's traffic is protocol range, this is the beginning protocol number of the range.
OBJECT-TYPE    
  Integer32 0..255  

h3cIPsecTrafficRemoPro2V2 1.3.6.1.4.1.2011.10.2.126.1.5.1.16
The second protocol number specification of the remote peer's traffic. If the protocol type of the remote peer's traffic is single protocol, this is the protocol number. If the protocol type of the remote peer's traffic is protocol range, this is the ending protocol number of the range.
OBJECT-TYPE    
  Integer32 0..255  

h3cIPsecTrafficRemPort1V2 1.3.6.1.4.1.2011.10.2.126.1.5.1.17
The first port number specification of the remote peer's traffic. If the port type of the remote peer's traffic is single port, this is the port number. If the port type of the remote peer's traffic is port range, this is the beginning port number of the range.
OBJECT-TYPE    
  Integer32 0..65535  

h3cIPsecTrafficRemPort2V2 1.3.6.1.4.1.2011.10.2.126.1.5.1.18
The second port number specification of the remote peer's traffic. If the port type of the remote peer's traffic is single port, this is the port number. If the port type of the remote peer's traffic is port range, this is the ending port number of the range.
OBJECT-TYPE    
  Integer32 0..65535  

h3cIPsecGlobalStatsV2 1.3.6.1.4.1.2011.10.2.126.1.6
OBJECT IDENTIFIER    

h3cIPsecGlobalActiveTunnelsV2 1.3.6.1.4.1.2011.10.2.126.1.6.1
The total number of currently active IPsec Phase-2 Tunnels.
OBJECT-TYPE    
  Gauge32  

h3cIPsecGlobalActiveSasV2 1.3.6.1.4.1.2011.10.2.126.1.6.2
The total number of currently active or expiring IPsec Phase-2 SA.
OBJECT-TYPE    
  Gauge32  

h3cIPsecGlobalInOctetsV2 1.3.6.1.4.1.2011.10.2.126.1.6.3
The total number of octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE determining whether or not the packet should be decompressed.
OBJECT-TYPE    
  Counter64  

h3cIPsecGlobalInDecompOctetsV2 1.3.6.1.4.1.2011.10.2.126.1.6.4
The total number of decompressed octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER the packet is decompressed.
OBJECT-TYPE    
  Counter64  

h3cIPsecGlobalInPktsV2 1.3.6.1.4.1.2011.10.2.126.1.6.5
The total number of packets received by all current and previous IPsec Phase-2 Tunnels.
OBJECT-TYPE    
  Counter64  

h3cIPsecGlobalInDropsV2 1.3.6.1.4.1.2011.10.2.126.1.6.6
The total number of packets dropped during receiving process by all current and previous IPsec Phase-2 Tunnels.
OBJECT-TYPE    
  Counter64  

h3cIPsecGlobalInReplayDropsV2 1.3.6.1.4.1.2011.10.2.126.1.6.7
The total number of packets dropped during receiving process due to Anti-Replay process by all current and previous IPsec Phase-2 Tunnels.
OBJECT-TYPE    
  Counter64  

h3cIPsecGlobalInAuthFailsV2 1.3.6.1.4.1.2011.10.2.126.1.6.8
The total number of inbound authentication's which ended in failure by all current and previous IPsec Phase-2 Tunnels.
OBJECT-TYPE    
  Counter64  

h3cIPsecGlobalInDecryptFailsV2 1.3.6.1.4.1.2011.10.2.126.1.6.9
The total number of inbound decryption's which ended in failure by all current and previous IPsec Phase-2 Tunnels.
OBJECT-TYPE    
  Counter64  

h3cIPsecGlobalOutOctetsV2 1.3.6.1.4.1.2011.10.2.126.1.6.10
The total number of octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER determining whether or not the packet should be compressed.
OBJECT-TYPE    
  Counter64  

h3cIPsecGlobalOutUncompOctetsV2 1.3.6.1.4.1.2011.10.2.126.1.6.11
The total number of uncompressed octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE the packet is compressed.
OBJECT-TYPE    
  Counter64  

h3cIPsecGlobalOutPktsV2 1.3.6.1.4.1.2011.10.2.126.1.6.12
The total number of packets sent by all current and previous IPsec Phase-2 Tunnels.
OBJECT-TYPE    
  Counter64  

h3cIPsecGlobalOutDropsV2 1.3.6.1.4.1.2011.10.2.126.1.6.13
The total number of packets dropped during sending process by all current and previous IPsec Phase-2 Tunnels.
OBJECT-TYPE    
  Counter64  

h3cIPsecGlobalOutEncryptFailsV2 1.3.6.1.4.1.2011.10.2.126.1.6.14
The total number of outbound encryption's which ended in failure by all current and previous IPsec Phase-2 Tunnels.
OBJECT-TYPE    
  Counter64  

h3cIPsecGlobalNoMemoryDropsV2 1.3.6.1.4.1.2011.10.2.126.1.6.15
The total number of packets dropped due to no enough memory by all current and previous IPsec Phase-2 Tunnels.
OBJECT-TYPE    
  Counter64  

h3cIPsecGlobalNoFindSaDropsV2 1.3.6.1.4.1.2011.10.2.126.1.6.16
The total number of packets dropped due to not find SA by all current and previous IPsec Phase-2 Tunnels.
OBJECT-TYPE    
  Counter64  

h3cIPsecGlobalQueueFullDropsV2 1.3.6.1.4.1.2011.10.2.126.1.6.17
The total number of packets dropped due to queue full by all current and previous IPsec Phase-2 Tunnels.
OBJECT-TYPE    
  Counter64  

h3cIPsecGlobalInvalidLenDropsV2 1.3.6.1.4.1.2011.10.2.126.1.6.18
The total number of packets dropped due to invalid packet length by all current and previous IPsec Phase-2 Tunnels.
OBJECT-TYPE    
  Counter64  

h3cIPsecGlobalTooLongDropsV2 1.3.6.1.4.1.2011.10.2.126.1.6.19
The total number of packets dropped due to too long packet by all current and previous IPsec Phase-2 Tunnels.
OBJECT-TYPE    
  Counter64  

h3cIPsecGlobalInvalidSaDropsV2 1.3.6.1.4.1.2011.10.2.126.1.6.20
The total number of packets dropped due to invalid SA by all current and previous IPsec Phase-2 Tunnels.
OBJECT-TYPE    
  Counter64  

h3cIPsecTrapObjectV2 1.3.6.1.4.1.2011.10.2.126.1.7
OBJECT IDENTIFIER    

h3cIPsecPolicyNameV2 1.3.6.1.4.1.2011.10.2.126.1.7.1
The IPsec policy name with a trap.
OBJECT-TYPE    
  DisplayString  

h3cIPsecPolicySeqNumV2 1.3.6.1.4.1.2011.10.2.126.1.7.2
The IPsec policy sequence number with a trap.
OBJECT-TYPE    
  Integer32  

h3cIPsecPolicySizeV2 1.3.6.1.4.1.2011.10.2.126.1.7.3
The number of IPsec policies with a trap.
OBJECT-TYPE    
  Integer32  

h3cIPsecTrapCntlV2 1.3.6.1.4.1.2011.10.2.126.1.8
OBJECT IDENTIFIER    

h3cIPsecTrapGlobalCntlV2 1.3.6.1.4.1.2011.10.2.126.1.8.1
Indicates whether all IPsec traps should be generated.
OBJECT-TYPE    
  TruthValue  

h3cIPsecTunnelStartTrapCntlV2 1.3.6.1.4.1.2011.10.2.126.1.8.2
Indicates whether h3cIPsecTunnelStartV2 traps should be generated.
OBJECT-TYPE    
  TruthValue  

h3cIPsecTunnelStopTrapCntlV2 1.3.6.1.4.1.2011.10.2.126.1.8.3
Indicates whether h3cIPsecTunnelStopV2 traps should be generated.
OBJECT-TYPE    
  TruthValue  

h3cIPsecNoSaTrapCntlV2 1.3.6.1.4.1.2011.10.2.126.1.8.4
Indicates whether h3cIPsecNoSaFailureV2 traps should be generated.
OBJECT-TYPE    
  TruthValue  

h3cIPsecAuthFailureTrapCntlV2 1.3.6.1.4.1.2011.10.2.126.1.8.5
Indicates whether h3cIPsecAuthFailFailureV2 traps should be generated.
OBJECT-TYPE    
  TruthValue  

h3cIPsecEncryFailureTrapCntlV2 1.3.6.1.4.1.2011.10.2.126.1.8.6
Indicates whether h3cIPsecEncryFailFailureV2 traps should be generated.
OBJECT-TYPE    
  TruthValue  

h3cIPsecDecryFailureTrapCntlV2 1.3.6.1.4.1.2011.10.2.126.1.8.7
Indicates whether h3cIPsecDecryFailFailureV2 traps should be generated.
OBJECT-TYPE    
  TruthValue  

h3cIPsecInvalidSaTrapCntlV2 1.3.6.1.4.1.2011.10.2.126.1.8.8
Indicates whether h3cIPsecInvalidSaFailureV2 traps should be generated.
OBJECT-TYPE    
  TruthValue  

h3cIPsecPolicyAddTrapCntlV2 1.3.6.1.4.1.2011.10.2.126.1.8.9
Indicates whether h3cIPsecPolicyAddV2 traps should be generated.
OBJECT-TYPE    
  TruthValue  

h3cIPsecPolicyDelTrapCntlV2 1.3.6.1.4.1.2011.10.2.126.1.8.10
Indicates whether h3cIPsecPolicyDelV2 traps should be generated.
OBJECT-TYPE    
  TruthValue  

h3cIPsecPolicyAttachTrapCntlV2 1.3.6.1.4.1.2011.10.2.126.1.8.11
Indicates whether h3cIPsecPolicyAttachV2 traps should be generated.
OBJECT-TYPE    
  TruthValue  

h3cIPsecPolicyDetachTrapCntlV2 1.3.6.1.4.1.2011.10.2.126.1.8.12
Indicates whether h3cIPsecPolicyDetachV2 traps should be generated.
OBJECT-TYPE    
  TruthValue  

h3cIPsecTrapV2 1.3.6.1.4.1.2011.10.2.126.1.9
OBJECT IDENTIFIER    

h3cIPsecNotificationsV2 1.3.6.1.4.1.2011.10.2.126.1.9.0
OBJECT IDENTIFIER    

h3cIPsecTunnelStartV2 1.3.6.1.4.1.2011.10.2.126.1.9.0.1
This notification is generated when an IPsec Phase-2 Tunnel is created.
NOTIFICATION-TYPE    

h3cIPsecTunnelStopV2 1.3.6.1.4.1.2011.10.2.126.1.9.0.2
This notification is generated when an IPsec Phase-2 Tunnel is deleted.
NOTIFICATION-TYPE    

h3cIPsecNoSaFailureV2 1.3.6.1.4.1.2011.10.2.126.1.9.0.3
This notification is generated when an IPsec Phase-2 non-existent SA error occurs.
NOTIFICATION-TYPE    

h3cIPsecAuthFailFailureV2 1.3.6.1.4.1.2011.10.2.126.1.9.0.4
This notification is generated when the IPsec phase-2 authentication failure occurs.
NOTIFICATION-TYPE    

h3cIPsecEncryFailFailureV2 1.3.6.1.4.1.2011.10.2.126.1.9.0.5
This notification is generated when the IPsec phase-2 tunnel has an encrypting failure.
NOTIFICATION-TYPE    

h3cIPsecDecryFailFailureV2 1.3.6.1.4.1.2011.10.2.126.1.9.0.6
This notification is generated when the IPsec phase-2 tunnel has a decrypting failure.
NOTIFICATION-TYPE    

h3cIPsecInvalidSaFailureV2 1.3.6.1.4.1.2011.10.2.126.1.9.0.7
This notification is generated when the IPsec phase-2 invalid SA failure occurs.
NOTIFICATION-TYPE    

h3cIPsecPolicyAddV2 1.3.6.1.4.1.2011.10.2.126.1.9.0.8
This notification is generated when an IPsec policy is added.
NOTIFICATION-TYPE    

h3cIPsecPolicyDelV2 1.3.6.1.4.1.2011.10.2.126.1.9.0.9
This notification is generated when an IPsec policy is deleted.
NOTIFICATION-TYPE    

h3cIPsecPolicyAttachV2 1.3.6.1.4.1.2011.10.2.126.1.9.0.10
This notification is generated when an IPsec policy is attached with one interface.
NOTIFICATION-TYPE    

h3cIPsecPolicyDetachV2 1.3.6.1.4.1.2011.10.2.126.1.9.0.11
This notification is generated when an IPsec policy is detached with one interface.
NOTIFICATION-TYPE    

h3cIPsecConformanceV2 1.3.6.1.4.1.2011.10.2.126.2
OBJECT IDENTIFIER    

h3cIPsecCompliancesV2 1.3.6.1.4.1.2011.10.2.126.2.1
OBJECT IDENTIFIER    

h3cIPsecGroupsV2 1.3.6.1.4.1.2011.10.2.126.2.2
OBJECT IDENTIFIER    

h3cIPsecComplianceV2 1.3.6.1.4.1.2011.10.2.126.2.1.1
MODULE-COMPLIANCE    

h3cIPsecScalarObjectsGroupV2 1.3.6.1.4.1.2011.10.2.126.2.2.1
The group contains all of scalar objects of the MIB.
OBJECT-GROUP    

h3cIPsecTunnelTableGroupV2 1.3.6.1.4.1.2011.10.2.126.2.2.2
The group contains the IPsec tunnel's property information.
OBJECT-GROUP    

h3cIPsecTunnelStatGroupV2 1.3.6.1.4.1.2011.10.2.126.2.2.3
The group contains the IPsec tunnel's statistic information.
OBJECT-GROUP    

h3cIPsecSaGroupV2 1.3.6.1.4.1.2011.10.2.126.2.2.4
The group contains the SA's property information.
OBJECT-GROUP    

h3cIPsecTrafficTableGroupV2 1.3.6.1.4.1.2011.10.2.126.2.2.5
The group contains the property information of the data flow protected by IPsec tunnel.
OBJECT-GROUP    

h3cIPsecGlobalStatsGroupV2 1.3.6.1.4.1.2011.10.2.126.2.2.6
The group contains all of the IPsec tunnel's statistic information.
OBJECT-GROUP    

h3cIPsecTrapObjectGroupV2 1.3.6.1.4.1.2011.10.2.126.2.2.7
The group contains all of trap objects of IPsec tunnels.
OBJECT-GROUP    

h3cIPsecTrapCntlGroupV2 1.3.6.1.4.1.2011.10.2.126.2.2.8
The group contains all of trap switches of IPsec tunnels.
OBJECT-GROUP    

h3cIPsecTrapGroupV2 1.3.6.1.4.1.2011.10.2.126.2.2.9
The group contains all of trap of IPsec tunnels.
NOTIFICATION-GROUP