TIMESTEP-IPSEC-MIB

File: TIMESTEP-IPSEC-MIB.mib (65991 bytes)

Imported modules

Imported symbols

MODULE-IDENTITY	OBJECT-TYPE	Counter32
Gauge32	Integer32	Unsigned32
IpAddress	NOTIFICATION-TYPE	DateAndTime
TruthValue	timestep

Defined Types

IpsecIkeSaEntry
SEQUENCE
	ipsecIkeSaIndex	Integer32
	ipsecIkeSaPeerIpAddress	IpAddress
	ipsecIkeSaPeerPortNumber	INTEGER
	ipsecIkeSaAuthMethod	Integer32
	ipsecIkeSaPeerIdType	Integer32
	ipsecIkeSaPeerId	OCTET STRING
	ipsecIkeSaPeerCertSerialNum	OCTET STRING
	ipsecIkeSaPeerCertIssuer	OCTET STRING
	ipsecIkeSaType	INTEGER
	ipsecIkeSaStatus	INTEGER
	ipsecIkeSaEncAlg	INTEGER
	ipsecIkeSaEncKeyLength	Integer32
	ipsecIkeSaHashAlg	Integer32
	ipsecIkeSaDifHelGroupDesc	Integer32
	ipsecIkeSaDifHelGroupType	Integer32
	ipsecIkeSaDifHelFieldSize	Integer32
	ipsecIkeSaPRF	Integer32
	ipsecIkeSaPFS	TruthValue
	ipsecIkeSaInitiatorCookie	OCTET STRING
	ipsecIkeSaResponderCookie	OCTET STRING
	ipsecIkeSaTimeStart	DateAndTime
	ipsecIkeSaTimeLimit	Gauge32
	ipsecIkeSaTrafficLimit	Gauge32
	ipsecIkeSaInboundTraffic	Counter32
	ipsecIkeSaOutboundTraffic	Counter32
	ipsecIkeSaInboundPackets	Counter32
	ipsecIkeSaOutboundPackets	Counter32
	ipsecIkeSaTotalSaNum	Counter32
	ipsecIkeSaFirstTimeStart	DateAndTime
	ipsecIkeSaTotalInboundTraffic	Counter32
	ipsecIkeSaTotalOutboundTraffic	Counter32
	ipsecIkeSaTotalInboundPackets	Counter32
	ipsecIkeSaTotalOutboundPackets	Counter32
	ipsecIkeSaDecryptErrors	Counter32
	ipsecIkeSaHashErrors	Counter32
	ipsecIkeSaOtherReceiveErrors	Counter32
	ipsecIkeSaSendErrors	Counter32
	ipsecIkeSaIpsecInboundTraffic	Counter32
	ipsecIkeSaIpsecOutboundTraffic	Counter32
	ipsecIkeSaIpsecInboundPackets	Counter32
	ipsecIkeSaIpsecOutboundPackets	Counter32
	ipsecIkeSaIpsecDecryptErrors	Counter32
	ipsecIkeSaIpsecAuthErrors	Counter32
	ipsecIkeSaIpsecReplayErrors	Counter32
	ipsecIkeSaIpsecOtherReceiveErrors	Counter32
	ipsecIkeSaIpsecSendErrors	Counter32

IpsecTunnelEntry
SEQUENCE
	ipsecTunnelIndex	Integer32
	ipsecTunnelIkeSa	Integer32
	ipsecTunnelType	INTEGER
	ipsecTunnelLocalAddressOrStart	IpAddress
	ipsecTunnelLocalAddressMaskOrEnd	IpAddress
	ipsecTunnelRemoteAddressOrStart	IpAddress
	ipsecTunnelRemoteAddressMaskOrEnd	IpAddress
	ipsecTunnelProtocol	Integer32
	ipsecTunnelLocalPort	Integer32
	ipsecTunnelRemotePort	Integer32
	ipsecTunnelMode	INTEGER
	ipsecTunnelEspEncAlg	Integer32
	ipsecTunnelEspEncKeyLength	Integer32
	ipsecTunnelEspAuthAlg	Integer32
	ipsecTunnelAhAuthAlg	Integer32
	ipsecTunnelCompAlg	Integer32
	ipsecTunnelStartTime	DateAndTime
	ipsecTunnelCurrentSaNum	Gauge32
	ipsecTunnelTotalSaNum	Counter32
	ipsecTunnelTotalInboundTraffic	Counter32
	ipsecTunnelTotalOutboundTraffic	Counter32
	ipsecTunnelTotalInboundPackets	Counter32
	ipsecTunnelTotalOutboundPackets	Counter32
	ipsecTunnelDecryptErrors	Counter32
	ipsecTunnelAuthErrors	Counter32
	ipsecTunnelReplayErrors	Counter32
	ipsecTunnelPolicyErrors	Counter32
	ipsecTunnelOtherReceiveErrors	Counter32
	ipsecTunnelSendErrors	Counter32

IpsecSaEntry
SEQUENCE
	ipsecSaIndex	Integer32
	ipsecSaTunnel	Integer32
	ipsecSaInboundEspSpi	Unsigned32
	ipsecSaOutboundEspSpi	Unsigned32
	ipsecSaInboundAhSpi	Unsigned32
	ipsecSaOutboundAhSpi	Unsigned32
	ipsecSaInboundCompCpi	INTEGER	0..65535
	ipsecSaOutboundCompCpi	INTEGER	0..65535
	ipsecSaCreationTime	DateAndTime
	ipsecSaTimeLimit	Gauge32
	ipsecSaTrafficLimit	Gauge32
	ipsecSaInboundTraffic	Counter32
	ipsecSaOutboundTraffic	Counter32
	ipsecSaInboundPackets	Counter32
	ipsecSaOutboundPackets	Counter32
	ipsecSaDecryptErrors	Counter32
	ipsecSaAuthErrors	Counter32
	ipsecSaReplayErrors	Counter32
	ipsecSaOtherReceiveErrors	Counter32
	ipsecSaSendErrors	Counter32

IpsecNotifyCountEntry
SEQUENCE
	ipsecNotifyMessage	INTEGER
	ipsecNotifyMessageCount	Counter32

Defined Values

ipsecMIB		1.3.6.1.4.1.1022.10
The MIB module to describe generic IPSec objects, transient and permanent virtual tunnels created by IPSec SAs, and entity level IPSec objects and events.
MODULE-IDENTITY

ipsecMIBObjects		1.3.6.1.4.1.1022.10.1
OBJECT IDENTIFIER

ipsec		1.3.6.1.4.1.1022.10.1.1
OBJECT IDENTIFIER

ipsecIkeSaTable		1.3.6.1.4.1.1022.10.1.1.1
The (conceptual) table containing information on IPSec's IKE SAs.
Status: current	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		IpsecIkeSaEntry

ipsecIkeSaEntry		1.3.6.1.4.1.1022.10.1.1.1.1
An entry (conceptual row) containing the information on a particular IKE SA.
Status: current	Access: not-accessible
OBJECT-TYPE
	IpsecIkeSaEntry

ipsecIkeSaIndex		1.3.6.1.4.1.1022.10.1.1.1.1.1
A unique value, greater than zero, for each tunnel interface. It is recommended that values are assigned contiguously starting from 1. The value for each tunnel interface must remain constant at least from one re-initialization of entity's network management system to the next re-initialization. Further, the value for tunnel interfaces that are marked as permanent must remain constant across all re- initializations of the network management system.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	1..16777215

ipsecIkeSaPeerIpAddress		1.3.6.1.4.1.1022.10.1.1.1.1.2
The IP address of the peer that this SA was negotiated with, or 0 if unknown.
Status: current	Access: read-only
OBJECT-TYPE
	IpAddress

ipsecIkeSaPeerPortNumber		1.3.6.1.4.1.1022.10.1.1.1.1.3
The port number of the peer that this SA was negotiated with, or 0 if the default ISAKMP port number (500).
Status: current	Access: read-only
OBJECT-TYPE
	INTEGER	0..65535

ipsecIkeSaAuthMethod		1.3.6.1.4.1.1022.10.1.1.1.1.4
The authentication method used to authenticate the peers. Note that this does not include the specific method of authentication if extended authenticated is used. Specific values are used as described in the ISAKMP Class Values of Authentication Method from Appendix A of [IKE].
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..65535

ipsecIkeSaPeerIdType		1.3.6.1.4.1.1022.10.1.1.1.1.5
The type of ID used by the peer. Specific values are used as described in Section 4.6.2.1 of [IPDOI].
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..256

ipsecIkeSaPeerId		1.3.6.1.4.1.1022.10.1.1.1.1.6
The ID of the peer this SA was negotiated with. The length may require truncation under some conditions.
Status: current	Access: read-only
OBJECT-TYPE
	OCTET STRING	Size(0..511)

ipsecIkeSaPeerCertSerialNum		1.3.6.1.4.1.1022.10.1.1.1.1.7
The serial number of the certificate of the peer this SA was negotiated with. This object has no meaning if a certificate was not used in authenticating the peer.
Status: current	Access: read-only
OBJECT-TYPE
	OCTET STRING	Size(0..63)

ipsecIkeSaPeerCertIssuer		1.3.6.1.4.1.1022.10.1.1.1.1.8
The serial number of the certificate of the peer this SA was negotiated with. This object has no meaning if a certificate was not used in authenticating the peer.
Status: current	Access: read-only
OBJECT-TYPE
	OCTET STRING	Size(0..511)

ipsecIkeSaType		1.3.6.1.4.1.1022.10.1.1.1.1.9
The type of virtual tunnel represented by this row. A transient link will disappear from the table when the SAs needed for it cannot be established. A permanent link will shows its status in the ipsecIkeSaStatus object.
Status: current	Access: read-only
OBJECT-TYPE
	INTEGER	transient(1), permanent(2)

ipsecIkeSaStatus		1.3.6.1.4.1.1022.10.1.1.1.1.10
The status of the virtual tunnel represented by this row, if the tunnel is configured as permanent. 'neverTried' means that no attempt to set-up the link has been done. 'linkUp' means that the link is up and operating normally. 'linkDown' means that the link was up, but has gone down.
Status: current	Access: read-only
OBJECT-TYPE
	INTEGER	neverTried(0), linkUp(1), linkDown(2)

ipsecIkeSaEncAlg		1.3.6.1.4.1.1022.10.1.1.1.1.11
A unique value representing the encryption algorithm applied to traffic carried by this SA or 0 if there is no encryption applied. Specific values are used as described in the ISAKMP Class Values of Encryption Algorithms from Appendix A of [IKE].
Status: current	Access: read-only
OBJECT-TYPE
	INTEGER	0..65535

ipsecIkeSaEncKeyLength		1.3.6.1.4.1.1022.10.1.1.1.1.12
The length of the encryption key in bits used for algorithm specified in the ipsecIkeSaEncAlg object or 0 if the key length is implicit in the specified algorithm or there is no encryption specified.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32

ipsecIkeSaHashAlg		1.3.6.1.4.1.1022.10.1.1.1.1.13
A unique value representing the hash algorithm applied to traffic carried by this SA or 0 if there is no encryption applied. Specific values are used as described in the ISAKMP Class Values of Hash Algorithms from Appendix A of [IKE].
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..65535

ipsecIkeSaDifHelGroupDesc		1.3.6.1.4.1.1022.10.1.1.1.1.14
A unique value representing the Diffie-Hellman group description used or 0 if the group is unknown. Specific values are used as described in the ISAKMP Class Values of Group Description from Appendix A of [IKE].
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..65535

ipsecIkeSaDifHelGroupType		1.3.6.1.4.1.1022.10.1.1.1.1.15
A unique value representing the Diffie-Hellman group type used or 0 if the group is unknown. Specific values are used as described in the ISAKMP Class Values of Group Type from Appendix A of [IKE].
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..65535

ipsecIkeSaDifHelFieldSize		1.3.6.1.4.1.1022.10.1.1.1.1.16
The field size, in bits, of a Diffie-Hellman group.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32

ipsecIkeSaPRF		1.3.6.1.4.1.1022.10.1.1.1.1.17
The pseudo-random functions used, or 0 if not used or if unknown. Specific values are used as described in the ISAKMP Class Values of PRF from Appendix A of [IKE] (which specifies none at the present time).
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..65535

ipsecIkeSaPFS		1.3.6.1.4.1.1022.10.1.1.1.1.18
A value that indicates that perfect forward secrecy is used for all IPSec SAs created by this IKE SA.
Status: current	Access: read-only
OBJECT-TYPE
	TruthValue

ipsecIkeSaInitiatorCookie		1.3.6.1.4.1.1022.10.1.1.1.1.19
The value of the cookie used by the initiator for the current phase 1 SA.
Status: current	Access: read-only
OBJECT-TYPE
	OCTET STRING	Size(16)

ipsecIkeSaResponderCookie		1.3.6.1.4.1.1022.10.1.1.1.1.20
The value of the cookie used by the responder for the current phase 1 SA.
Status: current	Access: read-only
OBJECT-TYPE
	OCTET STRING	Size(16)

ipsecIkeSaTimeStart		1.3.6.1.4.1.1022.10.1.1.1.1.21
The date and time that the current SA within the link was set up. It is not the date and time that the virtual tunnel was set up.
Status: current	Access: read-only
OBJECT-TYPE
	DateAndTime

ipsecIkeSaTimeLimit		1.3.6.1.4.1.1022.10.1.1.1.1.22
The maximum lifetime in seconds of the current SA supporting the virtual tunnel, or 0 if there is no time constraint on its expiration.
Status: current	Access: read-only
OBJECT-TYPE
	Gauge32

ipsecIkeSaTrafficLimit		1.3.6.1.4.1.1022.10.1.1.1.1.23
The maximum traffic in 1024-byte blocks that the current SA supporting the virtual tunnel is allowed to support, or 0 if there is no traffic constraint on its expiration.
Status: current	Access: read-only
OBJECT-TYPE
	Gauge32

ipsecIkeSaInboundTraffic		1.3.6.1.4.1.1022.10.1.1.1.1.24
The amount traffic measured in bytes handled in the current SA in the inbound direction.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecIkeSaOutboundTraffic		1.3.6.1.4.1.1022.10.1.1.1.1.25
The amount traffic measured in bytes handled in the current SA in the outbound direction.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecIkeSaInboundPackets		1.3.6.1.4.1.1022.10.1.1.1.1.26
The number of packets handled in the current SA in the inbound direction.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecIkeSaOutboundPackets		1.3.6.1.4.1.1022.10.1.1.1.1.27
The number of packets handled in the current SA in the outbound direction.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecIkeSaTotalSaNum		1.3.6.1.4.1.1022.10.1.1.1.1.28
The total number of SAs, including the current SA, that have been set up to support this virtual tunnel.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecIkeSaFirstTimeStart		1.3.6.1.4.1.1022.10.1.1.1.1.29
The data and time that this virtual tunnel was originally set up. It is not the time that the current SA was set up. If this is a permanent virtual tunnel, it is reset when the tunnel goes to the 'linkUp' state.
Status: current	Access: read-only
OBJECT-TYPE
	DateAndTime

ipsecIkeSaTotalInboundTraffic		1.3.6.1.4.1.1022.10.1.1.1.1.30
The total amount of traffic measured in bytes handled in the tunnel in the inbound direction. In other words, it is the aggregate value of all inbound traffic carried by all SAs ever set up to support the virtual tunnel. If this is a permanent virtual tunnel, it is not reset to zero when the tunnel goes to the 'linkUp' state.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecIkeSaTotalOutboundTraffic		1.3.6.1.4.1.1022.10.1.1.1.1.31
The total amount of traffic measured in bytes handled in the tunnel in the outbound direction. In other words, it is the aggregate value of all inbound traffic carried by all SAs ever set up to support the virtual tunnel. If this is a permanent virtual tunnel, it is not reset to zero when the tunnel goes to the 'linkUp' state.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecIkeSaTotalInboundPackets		1.3.6.1.4.1.1022.10.1.1.1.1.32
The total number of packets handled by the virtual tunnel since it became active in the inbound direction. In other words, it is the aggregate value of the number of inbound packets carried by all SAs ever set up to support the virtual tunnel. If this is a permanent virtual tunnel, it is not reset to zero when the tunnel goes to the 'linkUp' state.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecIkeSaTotalOutboundPackets		1.3.6.1.4.1.1022.10.1.1.1.1.33
The total number of packets handled by the virtual tunnel since it became active in the outbound direction. In other words, it is the aggregate value of the number of outbound packets carried by all SAs ever set up to support the virtual tunnel. If this is a permanent virtual tunnel, it is not reset to zero when the tunnel goes to the 'linkUp' state.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecIkeSaDecryptErrors		1.3.6.1.4.1.1022.10.1.1.1.1.34
The total number of inbound packets to this SA discarded due to decryption errors. Note that this refers to IKE protocol packets, and not to packets carried by SAs set up by the SAs supporting this tunnel. If this is a permanent virtual tunnel, it is not reset to zero when the tunnel goes to the 'linkUp' state.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecIkeSaHashErrors		1.3.6.1.4.1.1022.10.1.1.1.1.35
The total number of inbound packets to this SA discarded due to hash errors. Note that this refers to IKE protocol packets, and not to packets carried by SAs set up by the SAs supporting this tunnel. If this is a permanent virtual tunnel, it is not reset to zero when the tunnel goes to the 'linkUp' state.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecIkeSaOtherReceiveErrors		1.3.6.1.4.1.1022.10.1.1.1.1.36
The total number of inbound packets to this SA discarded for reasons other than bad hashes or decryption errors. This may include packets dropped to a lack of receive buffer space. Note that this refers to IKE protocol packets, and not to packets carried by SAs set up by the SAs supporting this tunnel. If this is a permanent virtual tunnel, it is not reset to zero when the tunnel goes to the 'linkUp' state.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecIkeSaSendErrors		1.3.6.1.4.1.1022.10.1.1.1.1.37
The total number of outbound packets from this SA discarded for any reason. This may include packets dropped to a lack of transmit buffer space. Note that this refers to IKE protocol packets, and not to packets carried by SAs set up by the SAs supporting this tunnel. If this is a permanent virtual tunnel, it is not reset to zero when the tunnel goes to the 'linkUp' state.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecIkeSaIpsecInboundTraffic		1.3.6.1.4.1.1022.10.1.1.1.1.38
The total amount of inbound traffic measured in bytes handled by all IPSec SAs set up by phase 1 SAs supporting this tunnel. If this is a permanent virtual tunnel, it is not reset to zero when the tunnel goes to the 'linkUp' state.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecIkeSaIpsecOutboundTraffic		1.3.6.1.4.1.1022.10.1.1.1.1.39
The total amount of outbound traffic measured in bytes handled by all IPSec SAs set up by phase 1 SAs supporting this tunnel. If this is a permanent virtual tunnel, it is not reset to zero when the tunnel goes to the 'linkUp' state.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecIkeSaIpsecInboundPackets		1.3.6.1.4.1.1022.10.1.1.1.1.40
The total number of inbound packets handled by all IPSec SAs set up by phase 1 SAs supporting this tunnel. If this is a permanent virtual tunnel, it is not reset to zero when the tunnel goes to the 'linkUp' state.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecIkeSaIpsecOutboundPackets		1.3.6.1.4.1.1022.10.1.1.1.1.41
The total number of outbound packets handled by all IPSec SAs set up by phase 1 SAs supporting this tunnel. If this is a permanent virtual tunnel, it is not reset to zero when the tunnel goes to the 'linkUp' state.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecIkeSaIpsecDecryptErrors		1.3.6.1.4.1.1022.10.1.1.1.1.42
The total number of inbound packets discarded by all IPSec SAs due to decryption errors. If this is a permanent virtual tunnel, it is not reset to zero when the tunnel goes to the 'linkUp' state.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecIkeSaIpsecAuthErrors		1.3.6.1.4.1.1022.10.1.1.1.1.43
The total number of inbound packets discarded by all IPSec SAs due to authentication errors. This includes hash failures in IPSec SAs using ESP and AH. If this is a permanent virtual tunnel, it is not reset to zero when the tunnel goes to the 'linkUp' state.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecIkeSaIpsecReplayErrors		1.3.6.1.4.1.1022.10.1.1.1.1.44
The total number of inbound packets discarded by all IPSec SAs due to replay errors. If this is a permanent virtual tunnel, it is not reset to zero when the tunnel goes to the 'linkUp' state.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecIkeSaIpsecOtherReceiveErrors		1.3.6.1.4.1.1022.10.1.1.1.1.45
The total number of inbound packets discarded by all IPSec SAs due to errors other than authentication, decryption or replay errors. This may include packets dropped due to lack of receive buffers. If this is a permanent virtual tunnel, it is not reset to zero when the tunnel goes to the 'linkUp' state.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecIkeSaIpsecSendErrors		1.3.6.1.4.1.1022.10.1.1.1.1.46
The total number of outbound packets discarded by all IPSec SAs due to any error. This may include packets dropped due to lack of receive buffers. If this is a permanent virtual tunnel, it is not reset to zero when the tunnel goes to the 'linkUp' state.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecTunnelTable		1.3.6.1.4.1.1022.10.1.1.2
The (conceptual) table containing information on IPSec SA-based tunnels.
Status: current	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		IpsecTunnelEntry

ipsecTunnelEntry		1.3.6.1.4.1.1022.10.1.1.2.1
An entry (conceptual row) containing the information on a particular configured tunnel.
Status: current	Access: not-accessible
OBJECT-TYPE
	IpsecTunnelEntry

ipsecTunnelIndex		1.3.6.1.4.1.1022.10.1.1.2.1.1
A unique value, greater than zero, for each tunnel interface. It is recommended that values are assigned contiguously starting from 1. The value for each tunnel interface must remain constant at least from one re-initialization of the entity's network management system to the next re-initialization. Further, the value for tunnel interfaces that are marked as permanent must remain constant across all re- initializations of the network management system.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	1..16777215

ipsecTunnelIkeSa		1.3.6.1.4.1.1022.10.1.1.2.1.2
The value of the index into the IKE SA tunnel table that created this tunnel (ipsecIkeSaIndex), or 0 if the tunnel is created by a static IPSec SA.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..2147483647

ipsecTunnelType		1.3.6.1.4.1.1022.10.1.1.2.1.3
The type of the virtual tunnel represented by this row. 'static' means that the tunnel is supported by a single static IPSec SA that was setup by configuration, and not by using a key exchange protocol. In this case, the value of ipsecTunnelIkeSa must be 0.
Status: current	Access: read-only
OBJECT-TYPE
	INTEGER	static(0), transient(1), permanent(2)

ipsecTunnelLocalAddressOrStart		1.3.6.1.4.1.1022.10.1.1.2.1.4
The address of or the start address (if an address range) of the local endpoint of the tunnel, or 0.0.0.0 if unknown or if the SA uses transport mode encapsulation.
Status: current	Access: read-only
OBJECT-TYPE
	IpAddress

ipsecTunnelLocalAddressMaskOrEnd		1.3.6.1.4.1.1022.10.1.1.2.1.5
The mask of or the end address (if an address range) of the local endpoint of the tunnel, or 0.0.0.0 if unknown or if the SA uses transport mode encapsulation.
Status: current	Access: read-only
OBJECT-TYPE
	IpAddress

ipsecTunnelRemoteAddressOrStart		1.3.6.1.4.1.1022.10.1.1.2.1.6
The address of or the start address (if an address range) of the remote endpoint of the tunnel, or 0.0.0.0 if unknown or if the SA uses transport mode encapsulation.
Status: current	Access: read-only
OBJECT-TYPE
	IpAddress

ipsecTunnelRemoteAddressMaskOrEnd		1.3.6.1.4.1.1022.10.1.1.2.1.7
The mask of or the end address (if an address range) of the remote endpoint of the tunnel, or 0.0.0.0 if unknown or if the SA uses transport mode encapsulation.
Status: current	Access: read-only
OBJECT-TYPE
	IpAddress

ipsecTunnelProtocol		1.3.6.1.4.1.1022.10.1.1.2.1.8
The number of the protocol that this tunnel carries, or 0 if it carries any protocol.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..255

ipsecTunnelLocalPort		1.3.6.1.4.1.1022.10.1.1.2.1.9
The number of the local port that this tunnel carries, or 0 if it carries any port number.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..65535

ipsecTunnelRemotePort		1.3.6.1.4.1.1022.10.1.1.2.1.10
The number of the remote port that this tunnel carries, or 0 if it carries any port number.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..65535

ipsecTunnelMode		1.3.6.1.4.1.1022.10.1.1.2.1.11
The type of encapsulation used by this virtual tunnel.
Status: current	Access: read-only
OBJECT-TYPE
	INTEGER	transport(1), tunnel(2)

ipsecTunnelEspEncAlg		1.3.6.1.4.1.1022.10.1.1.2.1.12
A unique value representing the encryption algorithm applied to traffic carried by this SA if it uses ESP or 0 if there is no encryption applied by ESP or if ESP is not used. Specific values are taken from section 4.4.4 of [IPDOI].
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..255

ipsecTunnelEspEncKeyLength		1.3.6.1.4.1.1022.10.1.1.2.1.13
The length of the encryption key in bits used for the algorithm specified in the ipsecTunnelEspEncAlg object, or 0 if the key length is implicit in the specified algorithm or there is no encryption specified.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32

ipsecTunnelEspAuthAlg		1.3.6.1.4.1.1022.10.1.1.2.1.14
A unique value representing the hash algorithm applied to traffic carried by this SA if it uses ESP or 0 if there is no authentication applied by ESP or if ESP is not used. Specific values are taken from the Authentication Algorithm attribute values of Section 4.5 of [IPDOI].
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..255

ipsecTunnelAhAuthAlg		1.3.6.1.4.1.1022.10.1.1.2.1.15
A unique value representing the hash algorithm applied to traffic carried by this SA if it uses AH or 0 if AH is not used. Specific values are taken from Section 4.4.3 of [IPDOI].
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..255

ipsecTunnelCompAlg		1.3.6.1.4.1.1022.10.1.1.2.1.16
A unique value representing the compression algorithm applied to traffic carried by this SA if it uses IPCOMP. Specific values are taken from Section 4.4.5 of [IPDOI].
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..255

ipsecTunnelStartTime		1.3.6.1.4.1.1022.10.1.1.2.1.17
The date and time that this virtual tunnel was set up. If this is a permanent virtual tunnel, it is reset when the number of current SAs (ipsecTunnelCurrentSaNum) changes from 0 to 1.
Status: current	Access: read-only
OBJECT-TYPE
	DateAndTime

ipsecTunnelCurrentSaNum		1.3.6.1.4.1.1022.10.1.1.2.1.18
The number of current SAs set up to support this virtual tunnel. If this number is 0, the tunnel must be considered down. Also if this number is 0, the tunnel must a permanent tunnel, since transient tunnels that are down do not appear in the table.
Status: current	Access: read-only
OBJECT-TYPE
	Gauge32

ipsecTunnelTotalSaNum		1.3.6.1.4.1.1022.10.1.1.2.1.19
The total number of SAs, including all current SAs, that have been set up to support this virtual tunnel.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecTunnelTotalInboundTraffic		1.3.6.1.4.1.1022.10.1.1.2.1.20
The total amount of traffic measured in bytes handled in the tunnel in the inbound direction. In other words, it is the aggregate value of all inbound traffic carried by all IPSec SAs ever set up to support the virtual tunnel. If this is a permanent virtual tunnel, it is not reset to zero when the number of current SAs (ipsecTunnelCurrentSaNum) changes from 0 to 1.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecTunnelTotalOutboundTraffic		1.3.6.1.4.1.1022.10.1.1.2.1.21
The total amount of traffic measured in bytes handled in the tunnel in the outbound direction. In other words, it is the aggregate value of all inbound traffic carried by all IPSec SAs ever set up to support the virtual tunnel. If this is a permanent virtual tunnel, it is not reset to zero when the number of current SAs (ipsecTunnelCurrentSaNum) changes from 0 to 1.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecTunnelTotalInboundPackets		1.3.6.1.4.1.1022.10.1.1.2.1.22
The total number of packets handled in the tunnel in the inbound direction. In other words, it is the aggregate value of all inbound packets carried by all IPSec SAs ever set up to support the virtual tunnel. If this is a permanent virtual tunnel, it is not reset to zero when the number of current SAs (ipsecTunnelCurrentSaNum) changes from 0 to 1.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecTunnelTotalOutboundPackets		1.3.6.1.4.1.1022.10.1.1.2.1.23
The total number of packets handled in the tunnel in the outbound direction. In other words, it is the aggregate value of all outbound packets carried by all IPSec SAs ever set up to support the virtual tunnel. If this is a permanent virtual tunnel, it is not reset to zero when the number of current SAs (ipsecTunnelCurrentSaNum) changes from 0 to 1.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecTunnelDecryptErrors		1.3.6.1.4.1.1022.10.1.1.2.1.24
The total number of inbound packets discarded by this virtual tunnel due to decryption errors in ESP. If this is a permanent virtual tunnel, it is not reset to zero when the number of current SAs (ipsecTunnelCurrentSaNum) changes from 0 to 1.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecTunnelAuthErrors		1.3.6.1.4.1.1022.10.1.1.2.1.25
The total number of inbound packets discarded by this virtual tunnel due to authentication errors. This includes hash failures in IPSec SA bundles using both ESP and AH. If this is a permanent virtual tunnel, it is not resetto zero when the number of current SAs (ipsecTunnelCurrentSaNum) changes from 0 to 1.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecTunnelReplayErrors		1.3.6.1.4.1.1022.10.1.1.2.1.26
The total number of inbound packets discarded by this virtual tunnel due to replay errors. This includes replay failures in IPSec SA bundles using both ESP and AH. If this is a permanent virtual tunnel, it is not reset to zero when the number of current SAs (ipsecTunnelCurrentSaNum) changes from 0 to 1.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecTunnelPolicyErrors		1.3.6.1.4.1.1022.10.1.1.2.1.27
The total number of inbound packets discarded by this virtual tunnel due to policy errors. This includes errors in all transforms if SA bundles are used. Policy errors are due to the detection of a packet that was inappropriately sent into this tunnel. If this is a permanent virtual tunnel, it is not reset to zero when the number of current SAs (ipsecTunnelCurrentSaNum) changes from 0 to 1.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecTunnelOtherReceiveErrors		1.3.6.1.4.1.1022.10.1.1.2.1.28
The total number of inbound packets discarded by this virtual tunnel due to errors other than decryption, authentication or replay errors. This may include packets dropped due to a lack of receive buffers. If this is a permanent virtual tunnel, it is not reset to zero when the number of current SAs (ipsecTunnelCurrentSaNum) changes from 0 to 1.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecTunnelSendErrors		1.3.6.1.4.1.1022.10.1.1.2.1.29
The total number of outbound packets discarded by this virtual tunnel due to any error. This may include packets dropped due to a lack of transmit buffers. If this is a permanent virtual tunnel, it is not reset to zero when the number of current SAs (ipsecTunnelCurrentSaNum) changes from 0 to 1.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecSaTable		1.3.6.1.4.1.1022.10.1.1.3
The (conceptual) table containing information on IPSec SAs.
Status: current	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		IpsecSaEntry

ipsecSaEntry		1.3.6.1.4.1.1022.10.1.1.3.1
An entry (conceptual row) containing the information on a particular IPSec SA.
Status: current	Access: not-accessible
OBJECT-TYPE
	IpsecSaEntry

ipsecSaIndex		1.3.6.1.4.1.1022.10.1.1.3.1.1
A unique value, greater than zero, for each IPSec SA. It is recommended that values are assigned contiguously starting from 1.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	1..2147483647

ipsecSaTunnel		1.3.6.1.4.1.1022.10.1.1.3.1.2
The value of the index into the IPSec SA tunnel table that this SA supports (ipsecTunnelIndex).
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	1..2147483647

ipsecSaInboundEspSpi		1.3.6.1.4.1.1022.10.1.1.3.1.3
The value of the SPI for the inbound SA that provides the ESP security service, or zero if ESP is not used.
Status: current	Access: read-only
OBJECT-TYPE
	Unsigned32

ipsecSaOutboundEspSpi		1.3.6.1.4.1.1022.10.1.1.3.1.4
The value of the SPI for the outbound SA that provides the ESP security service, or zero if ESP is not used.
Status: current	Access: read-only
OBJECT-TYPE
	Unsigned32

ipsecSaInboundAhSpi		1.3.6.1.4.1.1022.10.1.1.3.1.5
The value of the SPI for the inbound SA that provides the AH security service, or zero if AH is not used.
Status: current	Access: read-only
OBJECT-TYPE
	Unsigned32

ipsecSaOutboundAhSpi		1.3.6.1.4.1.1022.10.1.1.3.1.6
The value of the SPI for the outbound SA that provides the AH security service, or zero if AH is not used.
Status: current	Access: read-only
OBJECT-TYPE
	Unsigned32

ipsecSaInboundCompCpi		1.3.6.1.4.1.1022.10.1.1.3.1.7
The value of the CPI for the inbound SA that provides IP compression, or zero if IPCOMP is not used.
Status: current	Access: read-only
OBJECT-TYPE
	INTEGER	0..65535

ipsecSaOutboundCompCpi		1.3.6.1.4.1.1022.10.1.1.3.1.8
The value of the CPI for the outbound SA that provides IP compression, or zero if IPCOMP is not used.
Status: current	Access: read-only
OBJECT-TYPE
	INTEGER	0..65535

ipsecSaCreationTime		1.3.6.1.4.1.1022.10.1.1.3.1.9
The date and time that the current SA was set up.
Status: current	Access: read-only
OBJECT-TYPE
	DateAndTime

ipsecSaTimeLimit		1.3.6.1.4.1.1022.10.1.1.3.1.10
The maximum lifetime in seconds of the SA, or 0 if there is no time constraint on its expiration.
Status: current	Access: read-only
OBJECT-TYPE
	Gauge32

ipsecSaTrafficLimit		1.3.6.1.4.1.1022.10.1.1.3.1.11
The maximum traffic in 1024-byte blocks that the SA is allowed to support, or 0 if there is no traffic constraint on its expiration.
Status: current	Access: read-only
OBJECT-TYPE
	Gauge32

ipsecSaInboundTraffic		1.3.6.1.4.1.1022.10.1.1.3.1.12
The amount traffic measured in bytes handled by the SA in the inbound direction.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecSaOutboundTraffic		1.3.6.1.4.1.1022.10.1.1.3.1.13
The amount traffic measured in bytes handled by the SA in the outbound direction.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecSaInboundPackets		1.3.6.1.4.1.1022.10.1.1.3.1.14
The number of packets handled by the SA in the inbound direction.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecSaOutboundPackets		1.3.6.1.4.1.1022.10.1.1.3.1.15
The number of packets handled by the SA in the outbound direction.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecSaDecryptErrors		1.3.6.1.4.1.1022.10.1.1.3.1.16
The number of inbound packets discarded by the SA due to decryption errors.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecSaAuthErrors		1.3.6.1.4.1.1022.10.1.1.3.1.17
The number of inbound packets discarded by the SA due to authentication errors. This includes hash failures in both ESP and AH.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecSaReplayErrors		1.3.6.1.4.1.1022.10.1.1.3.1.18
The number of inbound packets discarded by the SA due to replay errors. This includes replay failures both ESP and AH.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecSaOtherReceiveErrors		1.3.6.1.4.1.1022.10.1.1.3.1.19
The number of inbound packets discarded by the SA due to errors other than decryption, authentication or replay errors. This may include decompression errors or errors due to a lack of receive buffers.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecSaSendErrors		1.3.6.1.4.1.1022.10.1.1.3.1.20
The number of outbound packets discarded by the SA due to any error. This may include compression errors or errors due to a lack of transmit buffers.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecTraps		1.3.6.1.4.1.1022.10.1.1.4
OBJECT IDENTIFIER

ipsecSaCounts		1.3.6.1.4.1.1022.10.1.1.5
OBJECT IDENTIFIER

ipsecPermTunStats		1.3.6.1.4.1.1022.10.1.1.6
OBJECT IDENTIFIER

ipsecTransTunStats		1.3.6.1.4.1.1022.10.1.1.7
OBJECT IDENTIFIER

ipsecNotifications		1.3.6.1.4.1.1022.10.1.1.8
OBJECT IDENTIFIER

ipsecErrorStats		1.3.6.1.4.1.1022.10.1.1.9
OBJECT IDENTIFIER

ipsecTotalIkeSAs		1.3.6.1.4.1.1022.10.1.1.5.1
The total number of phase 1 SAs established by the entity since boot time. It is not the total number of tunnels established by the entity since boot time. It does include SAs established to support both permanent and transient tunnels.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecTotalIpsecSAs		1.3.6.1.4.1.1022.10.1.1.5.2
The total number of phase 2 SAs established by the entity since boot time. It is not the total number of IPSec virtual tunnels established by the entity since boot time. It does include SAs established to support permanent and transient tunnels. It is recommended that SA bundles or security suites be considered a single SA for the purposes of this statistic.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecCnfgPermIkeTunnels		1.3.6.1.4.1.1022.10.1.1.6.1
The total number of phase 1 tunnels in the entity that are configured as permanent.
Status: current	Access: read-only
OBJECT-TYPE
	Gauge32

ipsecUpPermIkeTunnels		1.3.6.1.4.1.1022.10.1.1.6.2
The total number of phase 1 tunnels in the entity that are configured as permanent and are up and available for use.
Status: current	Access: read-only
OBJECT-TYPE
	Gauge32

ipsecCnfgPermIpsecTunnels		1.3.6.1.4.1.1022.10.1.1.6.3
The total number of phase 2 tunnels in the entity that are configured as permanent.
Status: current	Access: read-only
OBJECT-TYPE
	Gauge32

ipsecUpPermIpsecTunnels		1.3.6.1.4.1.1022.10.1.1.6.4
The total number of phase 2 tunnels in the entity that are configured as permanent and are up and available for use.
Status: current	Access: read-only
OBJECT-TYPE
	Gauge32

ipsecTotalTransIkeTunnels		1.3.6.1.4.1.1022.10.1.1.7.1
The total number of transient phase 1 tunnels established by the entity since boot time.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecCurrentTransIkeTunnels		1.3.6.1.4.1.1022.10.1.1.7.2
The number of transient phase 1 tunnels in the entity that are up and available for use at this moment in time.
Status: current	Access: read-only
OBJECT-TYPE
	Gauge32

ipsecTotalTransIpsecTunnels		1.3.6.1.4.1.1022.10.1.1.7.3
The total number of transient phase 2 tunnels established by the entity since boot time.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecCurrentTransIpsecTunnels		1.3.6.1.4.1.1022.10.1.1.7.4
The number of phase 2 tunnels in the entity that are up and available for use at this moment in time.
Status: current	Access: read-only
OBJECT-TYPE
	Gauge32

ipsecTotalTransInboundPackets		1.3.6.1.4.1.1022.10.1.1.7.5
The total number of inbound packets carried on transient IPSec tunnels since boot time.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecTotalTransOutboundPackets		1.3.6.1.4.1.1022.10.1.1.7.6
The total number of outbound packets carried on transient IPSec tunnels since boot time.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecTotalTransInboundTraffic		1.3.6.1.4.1.1022.10.1.1.7.7
The total amount of inbound traffic carried on transient IPSec tunnels since boot time, measured in 1024-octet blocks.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecTotalTransOutboundTraffic		1.3.6.1.4.1.1022.10.1.1.7.8
The total amount of outbound traffic carried on transient IPSec tunnels since boot time, measured in 1024-octet blocks.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecTotalTransIkeSetupFailures		1.3.6.1.4.1.1022.10.1.1.7.9
The total number of IKE SA set up attempts that have failed since entity boot time. This includes SAs associated with transient tunnels only.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecUnknownSpiErrors		1.3.6.1.4.1.1022.10.1.1.9.1
The total number of packets received by the entity since boot time with SPIs or CPIs that were not valid.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecIkeProtocolErrors		1.3.6.1.4.1.1022.10.1.1.9.2
The total number of packets received by the entity since boot time with IKE protocol errors. This includes packets with invalid cookies, but does not include errors that could be associated with specific IKE SAs.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecIpsecAuthenticationErrors		1.3.6.1.4.1.1022.10.1.1.9.3
The total number of packets received by the entity since boot time with authentication errors in the IPSec SAs. This includes all packets in which the hash value is determined to be invalid.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecIpsecReplayErrors		1.3.6.1.4.1.1022.10.1.1.9.4
The total number of packets received by the entity since boot time with replay errors in the IPSec SAs.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecIpsecPolicyErrors		1.3.6.1.4.1.1022.10.1.1.9.5
The total number of packets received by the entity since boot time and discarded due to policy errors. This includes packets that had selectors that were invalid for the SA that carried them.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecNotifyMessageTotalCount		1.3.6.1.4.1.1022.10.1.1.8.1
The total number of all types of notify messages sent or received by the entity since boot time. It is the sum of all occurrences in the 'ipsecNotifyCountTable'.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecNotifyCountTable		1.3.6.1.4.1.1022.10.1.1.8.2
The (conceptual) table containing information on IPSec notify message counts. This table MAY be sparsely populated; that is, rows for which the count is 0 may be absent.
Status: current	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		IpsecNotifyCountEntry

ipsecNotifyCountEntry		1.3.6.1.4.1.1022.10.1.1.8.2.1
An entry (conceptual row) containing the total number of occurrences of a notify message.
Status: current	Access: not-accessible
OBJECT-TYPE
	IpsecNotifyCountEntry

ipsecNotifyMessage		1.3.6.1.4.1.1022.10.1.1.8.2.1.1
The value representing a specific IPSec notify message, or 0 if unknown. Values are assigned from the set of notify message types as defined in Section 3.14.1 of [ISAKMP]. In addition, the value 0 may be used for this object when the object is used as a trap cause, and the cause is unknown.
Status: current	Access: read-only
OBJECT-TYPE
	INTEGER	0..65535

ipsecNotifyMessageCount		1.3.6.1.4.1.1022.10.1.1.8.2.1.2
The total number of times the specific notify message has been received or sent by the entity since system boot.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

ipsecTrapsObjects		1.3.6.1.4.1.1022.10.1.1.4.0
OBJECT IDENTIFIER

ipsecTrapPermIkeNegFailure		1.3.6.1.4.1.1022.10.1.1.4.0.1
An attempt to negotiate a phase 1 SA for the specified permanent IKE tunnel failed.
Status: current	Access: read-only
NOTIFICATION-TYPE

ipsecTrapTransIkeNegFailure		1.3.6.1.4.1.1022.10.1.1.4.0.2
An attempt to negotiate a phase 1 SA for a transient IKE tunnel failed. This trap is different from the 'ipsecTrapPermIkeNegFailure' trap, since this one will likely result in the removal of this entry from the IKE SA tunnel table.
Status: current	Access: read-only
NOTIFICATION-TYPE

ipsecTrapInvalidCookie		1.3.6.1.4.1.1022.10.1.1.4.0.3
IKE packets with invalid cookies were detected from the specified peer. Implementations SHOULD send one trap per peer (within a reasonable time period, rather than sending one trap per packet.
Status: current	Access: read-only
NOTIFICATION-TYPE

ipsecTrapIpsecNegFailure		1.3.6.1.4.1.1022.10.1.1.4.0.4
An attempt to negotiate a phase 2 SA within the specified IKE tunnel failed.
Status: current	Access: read-only
NOTIFICATION-TYPE

ipsecTrapIpsecAuthFailure		1.3.6.1.4.1.1022.10.1.1.4.0.5
IPSec packets with invalid hashes were found in the specified SA. Implementations SHOULD send one trap per SA (within a reasonable time period), rather than sending one trap per packet.
Status: current	Access: read-only
NOTIFICATION-TYPE

ipsecTrapIpsecReplayFailure		1.3.6.1.4.1.1022.10.1.1.4.0.6
IPSec packets with invalid sequence numbers were found in the specified SA. Implementations SHOULD send one trap per SA (within a reasonable time period), rather than sending one trap per packet.
Status: current	Access: read-only
NOTIFICATION-TYPE

ipsecTrapIpsecPolicyFailure		1.3.6.1.4.1.1022.10.1.1.4.0.7
IPSec packets carrying packets with invalid selectors for the specified SA were found. Implementations SHOULD send one trap per SA (within a reasonable time period), rather than sending one trap per packet.
Status: current	Access: read-only
NOTIFICATION-TYPE

ipsecTrapInvalidSpi		1.3.6.1.4.1.1022.10.1.1.4.0.8
ESP, AH or IPCOMP packets with unknown SPIs (or CPIs) were detected from the specified peer. Implementations SHOULD send one trap per peer (within a reasonable time period), rather than sending one trap per packet.
Status: current	Access: read-only
NOTIFICATION-TYPE