IPSEC-MIB

File: IPSEC-MIB.mib (53360 bytes)

Imported modules

SNMPv2-SMI SNMPv2-TC

Imported symbols

MODULE-IDENTITY OBJECT-TYPE Counter32
Counter64 Integer32 Unsigned32
experimental NOTIFICATION-TYPE DateAndTime
TruthValue

Defined Types

IpsecProtSuiteEntry  
SEQUENCE    
  ipsecProtSuiteIndex Integer32
  ipsecProtSuiteLocalAddress STRING
  ipsecProtSuiteRemoteAddress STRING
  ipsecProtSuiteInboundEspSpi Unsigned32
  ipsecProtSuiteOutboundEspSpi Unsigned32
  ipsecProtSuiteInboundAhSpi Unsigned32
  ipsecProtSuiteOutboundAhSpi Unsigned32
  ipsecProtSuiteInboundCompCpi INTEGER
  ipsecProtSuiteOutboundCompCpi INTEGER
  ipsecProtSuiteLocalId STRING
  ipsecProtSuiteLocalIdType Unsigned32
  ipsecProtSuiteRemoteId STRING
  ipsecProtSuiteRemoteIdType Unsigned32
  ipsecProtSuiteProtocol Integer32
  ipsecProtSuiteLocalPort Integer32
  ipsecProtSuiteRemotePort Integer32
  ipsecProtSuiteDifHelGroupDesc Integer32
  ipsecProtSuiteDifHelGroupType Integer32
  ipsecProtSuitePFS TruthValue
  ipsecProtSuiteEncapsulation INTEGER
  ipsecProtSuiteEspEncAlg Integer32
  ipsecProtSuiteEspEncKeyLength Unsigned32
  ipsecProtSuiteEspAuthAlg Integer32
  ipsecProtSuiteAhAuthAlg Integer32
  ipsecProtSuiteCompAlg Integer32
  ipsecProtSuiteCreationTime DateAndTime
  ipsecProtSuiteTimeLimit STRING
  ipsecProtSuiteTrafficLimit STRING
  ipsecProtSuiteInTrafficCount STRING
  ipsecProtSuiteOutTrafficCount STRING
  ipsecProtSuiteInboundTraffic Counter64
  ipsecProtSuiteOutboundTraffic Counter64
  ipsecProtSuiteInboundPackets Counter64
  ipsecProtSuiteOutboundPackets Counter64
  ipsecProtSuiteDecryptErrors Counter32
  ipsecProtSuiteAuthErrors Counter32
  ipsecProtSuiteReplayErrors Counter32
  ipsecProtSuitePolicyErrors Counter32
  ipsecProtSuiteOtherReceiveErrors Counter32
  ipsecProtSuiteSendErrors Counter32

IpsecIkeSaEntry  
SEQUENCE    
  ipsecIkeSaIndex Integer32
  ipsecIkeSaInitiatorCookie STRING
  ipsecIkeSaResponderCookie STRING
  ipsecIkeSaLocalIpAddress STRING
  ipsecIkeSaLocalPortNumber INTEGER
  ipsecIkeSaLocalIdType Integer32
  ipsecIkeSaLocalId STRING
  ipsecIkeSaPeerIpAddress STRING
  ipsecIkeSaPeerPortNumber INTEGER
  ipsecIkeSaAuthMethod Integer32
  ipsecIkeSaPeerIdType Integer32
  ipsecIkeSaPeerId STRING
  ipsecIkeSaPeerCertSerialNum STRING
  ipsecIkeSaPeerCertIssuer STRING
  ipsecIkeSaEncAlg INTEGER
  ipsecIkeSaEncKeyLength Integer32
  ipsecIkeSaHashAlg Integer32
  ipsecIkeSaDifHelGroupDesc Integer32
  ipsecIkeSaDifHelGroupType Integer32
  ipsecIkeSaDifHelFieldSize Integer32
  ipsecIkeSaPRF Integer32
  ipsecIkeSaPFS TruthValue
  ipsecIkeSaTimeStart DateAndTime
  ipsecIkeSaTimeLimit STRING
  ipsecIkeSaTrafficLimit STRING
  ipsecIkeSaInboundTraffic Counter64
  ipsecIkeSaOutboundTraffic Counter64
  ipsecIkeSaInboundPackets Counter32
  ipsecIkeSaOutboundPackets Counter32
  ipsecIkeProtSuitesCreated Counter32
  ipsecIkeProtSuitesDeleted Counter32
  ipsecIkeSaDecryptErrors Counter32
  ipsecIkeSaAuthErrors Counter32
  ipsecIkeSaOtherReceiveErrors Counter32
  ipsecIkeSaSendErrors Counter32

IpsecNotifyCountEntry  
SEQUENCE    
  ipsecNotifyMessage INTEGER
  ipsecNotifyMessageCount Counter32

Defined Values

ipsecMIB 1.3.6.1.3.500
The MIB module to describe generic IPSec objects, and entity level IPSec objects and events.
MODULE-IDENTITY    

ipsecMIBObjects 1.3.6.1.3.500.1
OBJECT IDENTIFIER    

ipsec 1.3.6.1.3.500.1.1
OBJECT IDENTIFIER    

ipsecProtSuiteTable 1.3.6.1.3.500.1.1.1
The (conceptual) table containing information on IPSec protection suites.
OBJECT-TYPE    
  SEQUENCE OF  
    IpsecProtSuiteEntry

ipsecProtSuiteEntry 1.3.6.1.3.500.1.1.1.1
An entry (conceptual row) containing the information on a particular IPSec protection suite.
OBJECT-TYPE    
  IpsecProtSuiteEntry  

ipsecProtSuiteIndex 1.3.6.1.3.500.1.1.1.1.1
A unique value, greater than zero, for each IPSec protection suite. It is recommended that values are assigned contiguously starting from 1.
OBJECT-TYPE    
  Integer32 1..2147483647  

ipsecProtSuiteLocalAddress 1.3.6.1.3.500.1.1.1.1.2
The local IP address used by the protection suite. The size of this object is 4 if the address is an IPv4 address, or 16 if the address is an IPv6 address.
OBJECT-TYPE    
  STRING Size(416)  

ipsecProtSuiteRemoteAddress 1.3.6.1.3.500.1.1.1.1.3
The peer IP address used by the protection suite. The size of this object is 4 if the address is an IPv4 address, or 16 if the address is an IPv6 address.
OBJECT-TYPE    
  STRING Size(416)  

ipsecProtSuiteInboundEspSpi 1.3.6.1.3.500.1.1.1.1.4
The value of the SPI for the inbound protection suite that provides the ESP security service, or zero if ESP is not used.
OBJECT-TYPE    
  Unsigned32 1..4294967295  

ipsecProtSuiteOutboundEspSpi 1.3.6.1.3.500.1.1.1.1.5
The value of the SPI for the outbound protection suite that provides the ESP security service, or zero if ESP is not used.
OBJECT-TYPE    
  Unsigned32 1..4294967295  

ipsecProtSuiteInboundAhSpi 1.3.6.1.3.500.1.1.1.1.6
The value of the SPI for the inbound protection suite that provides the AH security service, or zero if AH is not used.
OBJECT-TYPE    
  Unsigned32 1..4294967295  

ipsecProtSuiteOutboundAhSpi 1.3.6.1.3.500.1.1.1.1.7
The value of the SPI for the outbound protection suite that provides the AH security service, or zero if AH is not used.
OBJECT-TYPE    
  Unsigned32 1..4294967295  

ipsecProtSuiteInboundCompCpi 1.3.6.1.3.500.1.1.1.1.8
The value of the CPI for the inbound protection suite that provides IP compression, or zero if IPCOMP is not used.
OBJECT-TYPE    
  INTEGER 0..65535  

ipsecProtSuiteOutboundCompCpi 1.3.6.1.3.500.1.1.1.1.9
The value of the CPI for the outbound protection suite that provides IP compression, or zero if IPCOMP is not used.
OBJECT-TYPE    
  INTEGER 0..65535  

ipsecProtSuiteLocalId 1.3.6.1.3.500.1.1.1.1.10
The local identifier of the protection suite, or 0 if unknown or if the protection suite uses transport mode encapsulation. This value is taken directly from the optional ID payloads that are exchange during phase 2 negotiations.
OBJECT-TYPE    
  STRING Size(4..255)  

ipsecProtSuiteLocalIdType 1.3.6.1.3.500.1.1.1.1.11
The type of identifier presented by 'ipsecTunnelLocalId', or 0 if unknown or if the protection suite uses transport mode encapsulation. This value is taken directly from the optional ID payloads that are exchange during phase 2 negotiations.
OBJECT-TYPE    
  Unsigned32  

ipsecProtSuiteRemoteId 1.3.6.1.3.500.1.1.1.1.12
The remote identifier of the protection suite, or 0 if unknown or if the protection suite uses transport mode encapsulation. This value is taken directly from the optional ID payloads that are exchange during phase 2 negotiations.
OBJECT-TYPE    
  STRING Size(4..255)  

ipsecProtSuiteRemoteIdType 1.3.6.1.3.500.1.1.1.1.13
The type of identifier presented by 'ipsecTunnelRemoteId', or 0 if unknown or if the protection suite uses transport mode encapsulation. This value is taken directly from the optional ID payloads that are exchange during phase 2 negotiations.
OBJECT-TYPE    
  Unsigned32  

ipsecProtSuiteProtocol 1.3.6.1.3.500.1.1.1.1.14
The IP protocol number that this protection suite carries, or 0 if it carries any protocol.
OBJECT-TYPE    
  Integer32 0..255  

ipsecProtSuiteLocalPort 1.3.6.1.3.500.1.1.1.1.15
The local UDP or TCP port number that this protection suite carries, or 0 if it carries any port number.
OBJECT-TYPE    
  Integer32 0..65535  

ipsecProtSuiteRemotePort 1.3.6.1.3.500.1.1.1.1.16
The remote UDP or TCP port number that this protection suite carries, or 0 if it carries any port number.
OBJECT-TYPE    
  Integer32 0..65535  

ipsecProtSuiteDifHelGroupDesc 1.3.6.1.3.500.1.1.1.1.17
A unique value representing the Diffie-Hellman group description used to set up this protection suite, or 0 if the description is unknown. Specific values are used as described in the ISAKMP Class Values of Group Description from Appendix A of [IKE].
OBJECT-TYPE    
  Integer32  

ipsecProtSuiteDifHelGroupType 1.3.6.1.3.500.1.1.1.1.18
A unique value representing the Diffie-Hellman group type used to set up this protection suite, or 0 if the type is unknown. Specific values are used as described in the ISAKMP Class Values of Group Type from Appendix A of [IKE].
OBJECT-TYPE    
  Integer32  

ipsecProtSuitePFS 1.3.6.1.3.500.1.1.1.1.19
'true' if the protection suite was created using perfect forward secrect.
OBJECT-TYPE    
  TruthValue  

ipsecProtSuiteEncapsulation 1.3.6.1.3.500.1.1.1.1.20
The type of encapsulation used by this protection suite.
OBJECT-TYPE    
  INTEGER transport(1), tunnel(2)  

ipsecProtSuiteEspEncAlg 1.3.6.1.3.500.1.1.1.1.21
A unique value representing the encryption algorithm applied to traffic carried by this protection suite if it uses ESP or 0 if there is no encryption applied by ESP or if ESP is not used. Specific values are taken from section 4.4.4 of [IPDOI].
OBJECT-TYPE    
  Integer32 0..255  

ipsecProtSuiteEspEncKeyLength 1.3.6.1.3.500.1.1.1.1.22
The length of the encryption key in bits used for the algorithm specified in the 'ipsecTunnelEspEncAlg' object, or 0 if the key length is implicit in the specified algorithm or there is no encryption specified.
OBJECT-TYPE    
  Unsigned32  

ipsecProtSuiteEspAuthAlg 1.3.6.1.3.500.1.1.1.1.23
A unique value representing the hash algorithm applied to traffic carried by this protection suite if it uses ESP or 0 if there is no authentication applied by ESP or if ESP is not used. Specific values are taken from the Authentication Algorithm attribute values of Section 4.5 of [IPDOI].
OBJECT-TYPE    
  Integer32 0..255  

ipsecProtSuiteAhAuthAlg 1.3.6.1.3.500.1.1.1.1.24
A unique value representing the hash algorithm applied to traffic carried by this protection suite if it uses AH or 0 if AH is not used. Specific values are taken from Section 4.4.3 of [IPDOI].
OBJECT-TYPE    
  Integer32 0..255  

ipsecProtSuiteCompAlg 1.3.6.1.3.500.1.1.1.1.25
A unique value representing the compression algorithm applied to traffic carried by this protection suite if it uses IPCOMP. Specific values are taken from Section 4.4.5 of [IPDOI].
OBJECT-TYPE    
  Integer32 0..255  

ipsecProtSuiteCreationTime 1.3.6.1.3.500.1.1.1.1.26
The date and time that the current protection suite was set up.
OBJECT-TYPE    
  DateAndTime  

ipsecProtSuiteTimeLimit 1.3.6.1.3.500.1.1.1.1.27
The maximum lifetime in seconds of the protection suite, or 0 if there is no time constraint on its expiration.
OBJECT-TYPE    
  STRING Size(4..255)  

ipsecProtSuiteTrafficLimit 1.3.6.1.3.500.1.1.1.1.28
The maximum traffic in 1024-byte blocks that the protection suite is allowed to support, or 0 if there is no traffic constraint on its expiration.
OBJECT-TYPE    
  STRING Size(4..255)  

ipsecProtSuiteInTrafficCount 1.3.6.1.3.500.1.1.1.1.29
The amount of inbound traffic accumulated that counts against the protection suite's expiration by traffic limitation, measured in 1024-byte blocks. This value may be 0 if the protection suite does not expire based on traffic. In the case of multiple SAs within a protection suite, this value is the maximum of any traffic accumulation values applied to any of the individual SAs within the protection suite.
OBJECT-TYPE    
  STRING Size(4..255)  

ipsecProtSuiteOutTrafficCount 1.3.6.1.3.500.1.1.1.1.30
The amount of outbound traffic accumulated that counts against the protection suite's expiration by traffic limitation, measured in 1024-byte blocks. This value may be 0 if the protection suite does not expire based on traffic. In the case of multiple SAs within a protection suite, this value is the maximum of any traffic accumulation values applied to any of the individual SAs within the protection suite.
OBJECT-TYPE    
  STRING Size(4..255)  

ipsecProtSuiteInboundTraffic 1.3.6.1.3.500.1.1.1.1.31
The amount of user level traffic measured in bytes handled by the protection suite in the inbound direction. This is not necessarily the same as the amount of traffic applied against the traffic expiration limit.
OBJECT-TYPE    
  Counter64  

ipsecProtSuiteOutboundTraffic 1.3.6.1.3.500.1.1.1.1.32
The amount of user level traffic measured in bytes handled by the protection suite in the outbound direction. This is not necessarily the same as the amount of traffic applied against the traffic expiration limit.
OBJECT-TYPE    
  Counter64  

ipsecProtSuiteInboundPackets 1.3.6.1.3.500.1.1.1.1.33
The number of packets handled by the protection suite in the inbound direction.
OBJECT-TYPE    
  Counter64  

ipsecProtSuiteOutboundPackets 1.3.6.1.3.500.1.1.1.1.34
The number of packets handled by the protection suite in the outbound direction.
OBJECT-TYPE    
  Counter64  

ipsecProtSuiteDecryptErrors 1.3.6.1.3.500.1.1.1.1.35
The number of inbound packets discarded by the protection suite due to decryption errors.
OBJECT-TYPE    
  Counter32  

ipsecProtSuiteAuthErrors 1.3.6.1.3.500.1.1.1.1.36
The number of inbound packets discarded by the protection suite due to authentication errors. This includes hash failures in both ESP and AH.
OBJECT-TYPE    
  Counter32  

ipsecProtSuiteReplayErrors 1.3.6.1.3.500.1.1.1.1.37
The number of inbound packets discarded by the protection suite due to replay errors. This includes replay failures both ESP and AH.
OBJECT-TYPE    
  Counter32  

ipsecProtSuitePolicyErrors 1.3.6.1.3.500.1.1.1.1.38
The number of inbound packets discarded by the protection suite due to policy errors.
OBJECT-TYPE    
  Counter32  

ipsecProtSuiteOtherReceiveErrors 1.3.6.1.3.500.1.1.1.1.39
The number of inbound packets discarded by the protection suite due to errors other than decryption, authentication or replay errors. This may include decompression errors or errors due to a lack of receive buffers.
OBJECT-TYPE    
  Counter32  

ipsecProtSuiteSendErrors 1.3.6.1.3.500.1.1.1.1.40
The number of outbound packets discarded by the protection suite due to any error. This may include compression errors or errors due to a lack of transmit buffers.
OBJECT-TYPE    
  Counter32  

ipsecIkeSaTable 1.3.6.1.3.500.1.1.2
The (conceptual) table containing information on IPSec's IKE SAs.
OBJECT-TYPE    
  SEQUENCE OF  
    IpsecIkeSaEntry

ipsecIkeSaEntry 1.3.6.1.3.500.1.1.2.1
An entry (conceptual row) containing the information on a particular IKE SA.
OBJECT-TYPE    
  IpsecIkeSaEntry  

ipsecIkeSaIndex 1.3.6.1.3.500.1.1.2.1.1
A unique value, greater than zero, for each phase 1 SA. It is recommended that values are assigned contiguously starting from 1. The value for each entry must remain constant at least from one re-initialization of entity's network management system to the next re-initialization.
OBJECT-TYPE    
  Integer32 1..16777215  

ipsecIkeSaInitiatorCookie 1.3.6.1.3.500.1.1.2.1.2
The value of the cookie used by the initiator for the phase 1 SA.
OBJECT-TYPE    
  STRING Size(16)  

ipsecIkeSaResponderCookie 1.3.6.1.3.500.1.1.2.1.3
The value of the cookie used by the responder for the phase 1 SA.
OBJECT-TYPE    
  STRING Size(16)  

ipsecIkeSaLocalIpAddress 1.3.6.1.3.500.1.1.2.1.4
The local IP address used to negotiated the SA. The size of the object is 4 if the address is an IPv4 address and 16 if an IPv6 address.
OBJECT-TYPE    
  STRING Size(416)  

ipsecIkeSaLocalPortNumber 1.3.6.1.3.500.1.1.2.1.5
The local UDP port number that this SA was negotiated with.
OBJECT-TYPE    
  INTEGER 0..65535  

ipsecIkeSaLocalIdType 1.3.6.1.3.500.1.1.2.1.8
The type of ID used by the local end of this SA. Specific values are used as described in Section 4.6.2.1 of [IPDOI].
OBJECT-TYPE    
  Integer32 0..256  

ipsecIkeSaLocalId 1.3.6.1.3.500.1.1.2.1.9
The ID of the local host that negotiated this SA. The length may require truncation under some conditions.
OBJECT-TYPE    
  STRING Size(0..511)  

ipsecIkeSaPeerIpAddress 1.3.6.1.3.500.1.1.2.1.10
The IP address of the peer that this SA was negotiated with. The size of the object is 4 if the address is an IPv4 address and 16 if it is an IPv6 address.
OBJECT-TYPE    
  STRING Size(416)  

ipsecIkeSaPeerPortNumber 1.3.6.1.3.500.1.1.2.1.11
The UDP port number of the peer that this SA was negotiated with.
OBJECT-TYPE    
  INTEGER 0..65535  

ipsecIkeSaAuthMethod 1.3.6.1.3.500.1.1.2.1.12
The authentication method used to authenticate the peer. Note that this does not include the specific method of authentication if extended authenticated is used. Specific values are used as described in the ISAKMP Class Values of Authentication Method from Appendix A of [IKE].
OBJECT-TYPE    
  Integer32 0..65535  

ipsecIkeSaPeerIdType 1.3.6.1.3.500.1.1.2.1.13
The type of ID used by the peer. Specific values are used as described in Section 4.6.2.1 of [IPDOI].
OBJECT-TYPE    
  Integer32 0..256  

ipsecIkeSaPeerId 1.3.6.1.3.500.1.1.2.1.14
The ID of the peer this SA was negotiated with. The length may require truncation under some conditions.
OBJECT-TYPE    
  STRING Size(0..511)  

ipsecIkeSaPeerCertSerialNum 1.3.6.1.3.500.1.1.2.1.15
The serial number of the certificate of the peer this SA was negotiated with. This object has no meaning if a certificate was not used in authenticating the peer.
OBJECT-TYPE    
  STRING Size(0..63)  

ipsecIkeSaPeerCertIssuer 1.3.6.1.3.500.1.1.2.1.16
The issuer of the certificate of the peer this SA was negotiated with. This object has no meaning if a certificate was not used in authenticating the peer.
OBJECT-TYPE    
  STRING Size(0..511)  

ipsecIkeSaEncAlg 1.3.6.1.3.500.1.1.2.1.17
A unique value representing the encryption algorithm applied to traffic carried by this SA. Specific values are used as described in the ISAKMP Class Values of Encryption Algorithms from Appendix A of [IKE].
OBJECT-TYPE    
  INTEGER 0..65535  

ipsecIkeSaEncKeyLength 1.3.6.1.3.500.1.1.2.1.18
The length of the encryption key in bits used for algorithm specified in the ipsecIkeSaEncAlg object or 0 if the key length is implicit in the specified algorithm.
OBJECT-TYPE    
  Integer32  

ipsecIkeSaHashAlg 1.3.6.1.3.500.1.1.2.1.19
A unique value representing the hash algorithm applied to traffic carried by this SA. Specific values are used as described in the ISAKMP Class Values of Hash Algorithms from Appendix A of [IKE].
OBJECT-TYPE    
  Integer32 0..65535  

ipsecIkeSaDifHelGroupDesc 1.3.6.1.3.500.1.1.2.1.20
A unique value representing the Diffie-Hellman group description used or 0 if the group is unknown. Specific values are used as described in the ISAKMP Class Values of Group Description from Appendix A of [IKE].
OBJECT-TYPE    
  Integer32 0..65535  

ipsecIkeSaDifHelGroupType 1.3.6.1.3.500.1.1.2.1.21
A unique value representing the Diffie-Hellman group type used or 0 if the group is unknown. Specific values are used as described in the ISAKMP Class Values of Group Type from Appendix A of [IKE].
OBJECT-TYPE    
  Integer32 0..65535  

ipsecIkeSaDifHelFieldSize 1.3.6.1.3.500.1.1.2.1.22
The field size, in bits, of the Diffie-Hellman group used to generate the key-pair, or 0 if unknown.
OBJECT-TYPE    
  Integer32  

ipsecIkeSaPRF 1.3.6.1.3.500.1.1.2.1.23
The pseudo-random functions used, or 0 if not used or if unknown. Specific values are used as described in the ISAKMP Class Values of PRF from Appendix A of [IKE] (which specifies none at the present time).
OBJECT-TYPE    
  Integer32 0..65535  

ipsecIkeSaPFS 1.3.6.1.3.500.1.1.2.1.24
A value that indicates that perfect forward secrecy is used for all IPSec SAs created by this IKE SA.
OBJECT-TYPE    
  TruthValue  

ipsecIkeSaTimeStart 1.3.6.1.3.500.1.1.2.1.25
The date and time that the SA was set up.
OBJECT-TYPE    
  DateAndTime  

ipsecIkeSaTimeLimit 1.3.6.1.3.500.1.1.2.1.26
The maximum lifetime in seconds of the SA, or 0 if there is no time constraint on its expiration.
OBJECT-TYPE    
  STRING  

ipsecIkeSaTrafficLimit 1.3.6.1.3.500.1.1.2.1.27
The maximum traffic in 1024-byte blocks that the SA is allowed to carry, or 0 if there is no traffic constraint on its expiration.
OBJECT-TYPE    
  STRING  

ipsecIkeSaInboundTraffic 1.3.6.1.3.500.1.1.2.1.28
The amount traffic measured in bytes handled in the SA in the inbound direction.
OBJECT-TYPE    
  Counter64  

ipsecIkeSaOutboundTraffic 1.3.6.1.3.500.1.1.2.1.29
The amount traffic measured in bytes handled in the SA in the outbound direction.
OBJECT-TYPE    
  Counter64  

ipsecIkeSaInboundPackets 1.3.6.1.3.500.1.1.2.1.30
The number of packets handled in the SA in the inbound direction.
OBJECT-TYPE    
  Counter32  

ipsecIkeSaOutboundPackets 1.3.6.1.3.500.1.1.2.1.31
The number of packets handled in the SA in the outbound direction.
OBJECT-TYPE    
  Counter32  

ipsecIkeProtSuitesCreated 1.3.6.1.3.500.1.1.2.1.32
The total number of phase 2 protection suites created by the SA.
OBJECT-TYPE    
  Counter32  

ipsecIkeProtSuitesDeleted 1.3.6.1.3.500.1.1.2.1.33
The total number of phase 2 protection suites deleted by the SA.
OBJECT-TYPE    
  Counter32  

ipsecIkeSaDecryptErrors 1.3.6.1.3.500.1.1.2.1.34
The number of inbound packets discarded by the phase1 SA due to decryption errors.
OBJECT-TYPE    
  Counter32  

ipsecIkeSaAuthErrors 1.3.6.1.3.500.1.1.2.1.35
The number of inbound packets discarded by the phase 1 SA due to authentication errors.
OBJECT-TYPE    
  Counter32  

ipsecIkeSaOtherReceiveErrors 1.3.6.1.3.500.1.1.2.1.36
The number of inbound packets discarded by the phase 1 SA due to errors other than decryption or authentication errors. This may include errors due to a lack of receive buffers.
OBJECT-TYPE    
  Counter32  

ipsecIkeSaSendErrors 1.3.6.1.3.500.1.1.2.1.37
The number of outbound packets discarded by the phase 1 SA due to any error. This may include errors due to a lack of transmit buffers.
OBJECT-TYPE    
  Counter32  

ipsecTrapsA 1.3.6.1.3.500.1.1.3
OBJECT IDENTIFIER    

ipsecTraps 1.3.6.1.3.500.1.1.3.0
OBJECT IDENTIFIER    

ipsecIpsecStats 1.3.6.1.3.500.1.1.4
OBJECT IDENTIFIER    

ipsecIpsecErrorStats 1.3.6.1.3.500.1.1.5
OBJECT IDENTIFIER    

ipsecIkeStats 1.3.6.1.3.500.1.1.6
OBJECT IDENTIFIER    

ipsecIkeErrorStats 1.3.6.1.3.500.1.1.7
OBJECT IDENTIFIER    

ipsecNotifications 1.3.6.1.3.500.1.1.8
OBJECT IDENTIFIER    

ipsecIpsecTotalProtSuites 1.3.6.1.3.500.1.1.4.1
The total number of phase 2 protection suites established by the entity since boot time.
OBJECT-TYPE    
  Counter64  

ipsecIpsecNegFailures 1.3.6.1.3.500.1.1.4.2
The total number of phase 2 protection suite negotiations that failed that occurred in the entity since boot time.
OBJECT-TYPE    
  Counter64  

ipsecIpsecTotalInboundPackets 1.3.6.1.3.500.1.1.4.3
The total number of inbound packets carried on IPSec protection suites since boot time.
OBJECT-TYPE    
  Counter64  

ipsecIpsecTotalTransOutboundPackets 1.3.6.1.3.500.1.1.4.4
The total number of outbound packets carried on IPSec protection suites since boot time.
OBJECT-TYPE    
  Counter64  

ipsecIpsecTotalTransInboundTraffic 1.3.6.1.3.500.1.1.4.5
The total amount of inbound traffic carried on IPSec protection suites since boot time, measured in 1024-octet blocks.
OBJECT-TYPE    
  Counter64  

ipsecIpsecTotalTransOutboundTraffic 1.3.6.1.3.500.1.1.4.6
The total amount of outbound traffic carried on IPSec protection suites since boot time, measured in 1024-octet blocks.
OBJECT-TYPE    
  Counter64  

ipsecIpsecDecryptionErrors 1.3.6.1.3.500.1.1.5.1
The total number of packets received by the entity in the IPSec protection suites since boot time with decryption errors.
OBJECT-TYPE    
  Counter32  

ipsecIpsecAuthenticationErrors 1.3.6.1.3.500.1.1.5.2
The total number of packets received by the entity in the IPSec protection suites since boot time with authentication errors. This includes all packets in which the hash value is determined to be invalid.
OBJECT-TYPE    
  Counter32  

ipsecIpsecReplayErrors 1.3.6.1.3.500.1.1.5.3
The total number of packets received by the entity in the IPSec protection suites since boot time with replay errors.
OBJECT-TYPE    
  Counter32  

ipsecIpsecPolicyErrors 1.3.6.1.3.500.1.1.5.4
The total number of packets received by the entity in the IPSec protection suites since boot time and discarded due to policy errors. This includes packets that had selectors that were invalid for the SA or protection suite that carried them.
OBJECT-TYPE    
  Counter32  

ipsecIpsecOtherReceiveErrors 1.3.6.1.3.500.1.1.5.5
The total number of packets received by the entity in the IPSec protection suites since boot time and discarded due to errors not due to decryption, authentication, replay or policy.
OBJECT-TYPE    
  Counter32  

ipsecIpsecSendErrors 1.3.6.1.3.500.1.1.5.6
The total number of packets to be sent by the entity in the IPSec protection suites since boot time and discarded due to errors.
OBJECT-TYPE    
  Counter32  

ipsecUnknownSpiErrors 1.3.6.1.3.500.1.1.5.7
The total number of packets received by the entity since boot time with SPIs or CPIs that were not valid.
OBJECT-TYPE    
  Counter32  

ipsecIkeTotalSAs 1.3.6.1.3.500.1.1.6.1
The total number of phase 1 SAs successfully established by the entity since boot time.
OBJECT-TYPE    
  Counter64  

ipsecIkeNegFailures 1.3.6.1.3.500.1.1.6.2
The total number of phase 1 SA negotiations that failed that occurred in the entity since boot time.
OBJECT-TYPE    
  Counter64  

ipsecIkeTotalInboundPackets 1.3.6.1.3.500.1.1.6.3
The total number of inbound packets carried on phase 1 SAs since boot time.
OBJECT-TYPE    
  Counter64  

ipsecIkeTotalTransOutboundPackets 1.3.6.1.3.500.1.1.6.4
The total number of outbound packets carried on phase 1 SAs since boot time.
OBJECT-TYPE    
  Counter64  

ipsecIkeTotalTransInboundTraffic 1.3.6.1.3.500.1.1.6.5
The total amount of inbound traffic carried on phase 1 SAs since boot time, measured in 1024-octet blocks.
OBJECT-TYPE    
  Counter64  

ipsecIkeTotalTransOutboundTraffic 1.3.6.1.3.500.1.1.6.6
The total amount of outbound traffic carried on phase 1 SAs since boot time, measured in 1024-octet blocks.
OBJECT-TYPE    
  Counter64  

ipsecIkeProtocolErrors 1.3.6.1.3.500.1.1.7.1
The total number of packets received by the entity since boot time with IKE protocol errors. This includes packets with invalid cookies, but does not include errors that are associated with specific IKE SAs.
OBJECT-TYPE    
  Counter32  

ipsecIkeDecryptionErrors 1.3.6.1.3.500.1.1.7.2
The total number of packets received by the entity in the IPSec protection suites since boot time with decryption errors.
OBJECT-TYPE    
  Counter32  

ipsecIkeAuthenticationErrors 1.3.6.1.3.500.1.1.7.3
The total number of packets received by the entity in the IPSec protection suites since boot time with authentication errors. This includes all packets in which the hash value is determined to be invalid.
OBJECT-TYPE    
  Counter32  

ipsecIkeOtherReceiveErrors 1.3.6.1.3.500.1.1.7.4
The total number of packets received by the entity in phase 1 SAs since boot time and discarded due to errors not due to decryption or authentication.
OBJECT-TYPE    
  Counter32  

ipsecIkeSendErrors 1.3.6.1.3.500.1.1.7.5
The total number of packets to be sent by the entity in phase 1 SAs since boot time and discarded due to errors.
OBJECT-TYPE    
  Counter32  

ipsecNotifyMessageTotalCount 1.3.6.1.3.500.1.1.8.1
The total number of all types of notify messages sent or received by the entity since boot time. It is the sum of all occurrences in the 'ipsecNotifyCountTable'.
OBJECT-TYPE    
  Counter64  

ipsecNotifyCountTable 1.3.6.1.3.500.1.1.8.2
The (conceptual) table containing information on IPSec notify message counts. This table MAY be sparsely populated; that is, rows for which the count is 0 may be absent.
OBJECT-TYPE    
  SEQUENCE OF  
    IpsecNotifyCountEntry

ipsecNotifyCountEntry 1.3.6.1.3.500.1.1.8.2.1
An entry (conceptual row) containing the total number of occurrences of a notify message.
OBJECT-TYPE    
  IpsecNotifyCountEntry  

ipsecNotifyMessage 1.3.6.1.3.500.1.1.8.2.1.1
The value representing a specific IPSec notify message, or 0 if unknown. Values are assigned from the set of notify message types as defined in Section 3.14.1 of [ISAKMP]. In addition, the value 0 may be used for this object when the object is used as a trap cause, and the cause is unknown.
OBJECT-TYPE    
  INTEGER 0..65535  

ipsecNotifyMessageCount 1.3.6.1.3.500.1.1.8.2.1.2
The total number of times the specific notify message has been received or sent by the entity since system boot.
OBJECT-TYPE    
  Counter32  

ipsecTrapIkeNegFailure 1.3.6.1.3.500.1.1.3.0.1
An attempt to negotiate a phase 1 SA failed.
NOTIFICATION-TYPE    

ipsecTrapInvalidCookie 1.3.6.1.3.500.1.1.3.0.2
IKE packets with invalid cookies were detected from the specified peer. Implementations SHOULD send one trap per peer (within a reasonable time period, rather than sending one trap per packet.
NOTIFICATION-TYPE    

ipsecTrapIpsecNegFailure 1.3.6.1.3.500.1.1.3.0.3
An attempt to negotiate a phase 2 protection suite within the specified IKE SA failed.
NOTIFICATION-TYPE    

ipsecTrapIpsecAuthFailure 1.3.6.1.3.500.1.1.3.0.4
IPSec packets with invalid hashes were found in the specified protection suite. Implementations SHOULD send one trap per protection suite (within a reasonable time period), rather than sending one trap per packet.
NOTIFICATION-TYPE    

ipsecTrapIpsecReplayFailure 1.3.6.1.3.500.1.1.3.0.5
IPSec packets with invalid sequence numbers were found in the specified protection suite. Implementations SHOULD send one trap per protection suite (within a reasonable time period), rather than sending one trap per packet.
NOTIFICATION-TYPE    

ipsecTrapIpsecPolicyFailure 1.3.6.1.3.500.1.1.3.0.6
IPSec packets carrying packets with invalid selectors for the specified protection suite were found. Implementations SHOULD send one trap per protection suite (within a reasonable time period), rather than sending one trap per packet.
NOTIFICATION-TYPE    

ipsecTrapInvalidSpi 1.3.6.1.3.500.1.1.3.0.7
ESP, AH or IPCOMP packets with unknown SPIs (or CPIs) were detected from the specified peer. Implementations SHOULD send one trap per peer (within a reasonable time period), rather than sending one trap per packet.
NOTIFICATION-TYPE