WATCHGUARD-IPSEC-SA-MON-MIB-EXT

File: WATCHGUARD-IPSEC-SA-MON-MIB-EXT.mib (71976 bytes)

Imported modules

SNMPv2-SMI	SNMPv2-TC	RFC1213-MIB
IPSEC-ISAKMP-IKE-DOI-TC	WATCHGUARD-MIB

Imported symbols

IpAddress	MODULE-IDENTITY	OBJECT-TYPE
Counter32	Gauge32	Integer32
NOTIFICATION-TYPE	OBJECT-IDENTITY	enterprises
TEXTUAL-CONVENTION	TruthValue	ifIndex
IpsecDoiIdentType	IpsecDoiEncapsulationMode	IpsecDoiEspTransform
IpsecDoiAhTransform	IpsecDoiAuthAlgorithm	IpsecDoiIpcompTransform
IpsecDoiSecProtocolId	watchguard

Defined Types

IpsecSaCreatorIdent
A value indicating how an SA was created.
TEXTUAL-CONVENTION
	INTEGER	unknown(0), static(1), ike(2), other(3)

IpsecIpv6Address
This data type is used to model IPv6 address prefixes. This is a binary string of 16 octets in network byte-order.
TEXTUAL-CONVENTION
	OCTET STRING	Size(16)

WGIpsecSaEspInEntry
SEQUENCE
	wgIpsecSaEspInAddress	IpAddress
	wgIpsecSaEspInSpi	Integer32
	wgIpsecSaEspInDestId	OCTET STRING
	wgIpsecSaEspInDestIdType	IpsecDoiIdentType
	wgIpsecSaEspInSourceId	OCTET STRING
	wgIpsecSaEspInSourceIdType	IpsecDoiIdentType
	wgIpsecSaEspInProtocol	Integer32
	wgIpsecSaEspInDestPort	Integer32
	wgIpsecSaEspInSourcePort	Integer32
	wgIpsecSaEspInCreator	IpsecSaCreatorIdent
	wgIpsecSaEspInEncapsulation	IpsecDoiEncapsulationMode
	wgIpsecSaEspInEncAlg	IpsecDoiEspTransform
	wgIpsecSaEspInEncKeyLength	Integer32
	wgIpsecSaEspInAuthAlg	IpsecDoiAuthAlgorithm
	wgIpsecSaEspInLimitSeconds	Integer32
	wgIpsecSaEspInLimitKbytes	Integer32
	wgIpsecSaEspInAccSeconds	Counter32
	wgIpsecSaEspInAccKbytes	Counter32
	wgIpsecSaEspInUserOctets	Counter32
	wgIpsecSaEspInPackets	Counter32
	wgIpsecSaEspInDecryptErrors	Counter32
	wgIpsecSaEspInAuthErrors	Counter32
	wgIpsecSaEspInReplayErrors	Counter32
	wgIpsecSaEspInPolicyErrors	Counter32
	wgIpsecSaEspInPadErrors	Counter32
	wgIpsecSaEspInOtherReceiveErrors	Counter32

WGIpsecSaAhInEntry
SEQUENCE
	wgIpsecSaAhInAddress	IpAddress
	wgIpsecSaAhInSpi	Integer32
	wgIpsecSaAhInDestId	OCTET STRING
	wgIpsecSaAhInDestIdType	IpsecDoiIdentType
	wgIpsecSaAhInSourceId	OCTET STRING
	wgIpsecSaAhInSourceIdType	IpsecDoiIdentType
	wgIpsecSaAhInProtocol	Integer32
	wgIpsecSaAhInDestPort	Integer32
	wgIpsecSaAhInSourcePort	Integer32
	wgIpsecSaAhInCreator	IpsecSaCreatorIdent
	wgIpsecSaAhInEncapsulation	IpsecDoiEncapsulationMode
	wgIpsecSaAhInAuthAlg	IpsecDoiAhTransform
	wgIpsecSaAhInLimitSeconds	Integer32
	wgIpsecSaAhInLimitKbytes	Integer32
	wgIpsecSaAhInAccSeconds	Counter32
	wgIpsecSaAhInAccKbytes	Counter32
	wgIpsecSaAhInUserOctets	Counter32
	wgIpsecSaAhInPackets	Counter32
	wgIpsecSaAhInAuthErrors	Counter32
	wgIpsecSaAhInReplayErrors	Counter32
	wgIpsecSaAhInPolicyErrors	Counter32
	wgIpsecSaAhInOtherReceiveErrors	Counter32

WGIpsecSaIpcompInEntry
SEQUENCE
	wgIpsecSaIpcompInAddress	IpAddress
	wgIpsecSaIpcompInCpi	IpsecDoiIpcompTransform
	wgIpsecSaIpcompInDestId	OCTET STRING
	wgIpsecSaIpcompInDestIdType	IpsecDoiIdentType
	wgIpsecSaIpcompInSourceId	OCTET STRING
	wgIpsecSaIpcompInSourceIdType	IpsecDoiIdentType
	wgIpsecSaIpcompInProtocol	Integer32
	wgIpsecSaIpcompInDestPort	Integer32
	wgIpsecSaIpcompInSourcePort	Integer32
	wgIpsecSaIpcompInCreator	IpsecSaCreatorIdent
	wgIpsecSaIpcompInEncapsulation	IpsecDoiEncapsulationMode
	wgIpsecSaIpcompInDecompAlg	IpsecDoiIpcompTransform
	wgIpsecSaIpcompInSeconds	Counter32
	wgIpsecSaIpcompInUserOctets	Counter32
	wgIpsecSaIpcompInPackets	Counter32
	wgIpsecSaIpcompInDecompErrors	Counter32
	wgIpsecSaIpcompInOtherReceiveErrors	Counter32

WGIpsecSaEspOutEntry
SEQUENCE
	wgIpsecSaEspOutAddress	IpAddress
	wgIpsecSaEspOutSpi	Integer32
	wgIpsecSaEspOutSourceId	OCTET STRING
	wgIpsecSaEspOutSourceIdType	IpsecDoiIdentType
	wgIpsecSaEspOutDestId	OCTET STRING
	wgIpsecSaEspOutDestIdType	IpsecDoiIdentType
	wgIpsecSaEspOutProtocol	Integer32
	wgIpsecSaEspOutSourcePort	Integer32
	wgIpsecSaEspOutDestPort	Integer32
	wgIpsecSaEspOutCreator	IpsecSaCreatorIdent
	wgIpsecSaEspOutEncapsulation	IpsecDoiEncapsulationMode
	wgIpsecSaEspOutEncAlg	IpsecDoiEspTransform
	wgIpsecSaEspOutEncKeyLength	Integer32
	wgIpsecSaEspOutAuthAlg	IpsecDoiAuthAlgorithm
	wgIpsecSaEspOutLimitSeconds	Integer32
	wgIpsecSaEspOutLimitKbytes	Integer32
	wgIpsecSaEspOutAccSeconds	Counter32
	wgIpsecSaEspOutAccKbytes	Counter32
	wgIpsecSaEspOutUserOctets	Counter32
	wgIpsecSaEspOutPackets	Counter32
	wgIpsecSaEspOutSendErrors	Counter32

WGIpsecSaAhOutEntry
SEQUENCE
	wgIpsecSaAhOutAddress	IpAddress
	wgIpsecSaAhOutSpi	Integer32
	wgIpsecSaAhOutSourceId	OCTET STRING
	wgIpsecSaAhOutSourceIdType	IpsecDoiIdentType
	wgIpsecSaAhOutDestId	OCTET STRING
	wgIpsecSaAhOutDestIdType	IpsecDoiIdentType
	wgIpsecSaAhOutProtocol	Integer32
	wgIpsecSaAhOutSourcePort	Integer32
	wgIpsecSaAhOutDestPort	Integer32
	wgIpsecSaAhOutCreator	IpsecSaCreatorIdent
	wgIpsecSaAhOutEncapsulation	IpsecDoiEncapsulationMode
	wgIpsecSaAhOutAuthAlg	IpsecDoiAhTransform
	wgIpsecSaAhOutLimitSeconds	Integer32
	wgIpsecSaAhOutLimitKbytes	Integer32
	wgIpsecSaAhOutAccSeconds	Counter32
	wgIpsecSaAhOutAccKbytes	Counter32
	wgIpsecSaAhOutUserOctets	Counter32
	wgIpsecSaAhOutPackets	Counter32
	wgIpsecSaAhOutSendErrors	Counter32

WGIpsecSaIpcompOutEntry
SEQUENCE
	wgIpsecSaIpcompOutAddress	IpAddress
	wgIpsecSaIpcompOutCpi	IpsecDoiIpcompTransform
	wgIpsecSaIpcompOutSourceId	OCTET STRING
	wgIpsecSaIpcompOutSourceIdType	IpsecDoiIdentType
	wgIpsecSaIpcompOutDestId	OCTET STRING
	wgIpsecSaIpcompOutDestIdType	IpsecDoiIdentType
	wgIpsecSaIpcompOutProtocol	Integer32
	wgIpsecSaIpcompOutSourcePort	Integer32
	wgIpsecSaIpcompOutDestPort	Integer32
	wgIpsecSaIpcompOutCreator	IpsecSaCreatorIdent
	wgIpsecSaIpcompOutEncapsulation	IpsecDoiEncapsulationMode
	wgIpsecSaIpcompOutCompAlg	IpsecDoiIpcompTransform
	wgIpsecSaIpcompOutSeconds	Counter32
	wgIpsecSaIpcompOutUserOctets	Counter32
	wgIpsecSaIpcompOutPackets	Counter32

Defined Values

wgIpsecSaMonModule		1.3.6.1.4.1.3097.3
The MIB module describes generic IPSec objects defined in IETF working draft 'draft-ieft-ipsec-monitor-mib-01' and WatchGuard's extension.
MODULE-IDENTITY

wgIpsecSaMonitorMIB		1.3.6.1.4.1.3097.3.1
This is the base object identifier for all IPSec branches.
Status: current	Access: read-only
OBJECT-IDENTITY

wgSaTables		1.3.6.1.4.1.3097.3.1.1
This is the base object identifier for all SA tables.
Status: current	Access: read-only
OBJECT-IDENTITY

wgSaStatistics		1.3.6.1.4.1.3097.3.1.2
This is the base object identifier for all objects which are global counters for IPSec security associations.
Status: current	Access: read-only
OBJECT-IDENTITY

wgSaErrors		1.3.6.1.4.1.3097.3.1.3
This is the base object identifier for all objects which are global error counters for IPSec security associations.
Status: current	Access: read-only
OBJECT-IDENTITY

wgIpsecSaEspInTable		1.3.6.1.4.1.3097.3.1.1.1
The (conceptual) table containing information on IPSec inbound ESP SAs. There should be one row for every inbound ESP security association that exists in the entity. The maximum number of rows is implementation dependent.
Status: current	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		WGIpsecSaEspInEntry

wgIpsecSaEspInEntry		1.3.6.1.4.1.3097.3.1.1.1.1
An entry (conceptual row) containing the information on a particular IPSec inbound ESP SA. A row in this table cannot be created or deleted by SNMP operations on columns of the table.
Status: current	Access: not-accessible
OBJECT-TYPE
	WGIpsecSaEspInEntry

wgIpsecSaEspInAddress		1.3.6.1.4.1.3097.3.1.1.1.1.1
The destination address of the SA. For implementations that do not support IPv6, this address should appear as one of the IPv4-mapped IPv6 addresses as defined in Section 2.5.4 of [IPV6AA]. Specifically, the prefix '0000:0000:0000:0000:0000:FFFF:' is used for IPv4 only nodes, while the prefix '0000:0000:0000:0000:0000:0000:' is used for bi-lingual nodes.
Status: current	Access: read-only
OBJECT-TYPE
	IpAddress

wgIpsecSaEspInSpi		1.3.6.1.4.1.3097.3.1.1.1.1.2
The security parameters index of the SA.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32

wgIpsecSaEspInDestId		1.3.6.1.4.1.3097.3.1.1.1.1.3
The destination identifier of the SA, or 0 if unknown or if the SA uses transport mode encapsulation. This value is taken directly from the optional ID payloads that are exchanged during SA creation negotiation.
Status: current	Access: read-only
OBJECT-TYPE
	OCTET STRING	Size(1..255)

wgIpsecSaEspInDestIdType		1.3.6.1.4.1.3097.3.1.1.1.1.4
The type of identifier presented by 'wgIpsecSaEspInDestId', or 0 if unknown or if the SA uses transport mode encapsulation.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecDoiIdentType

wgIpsecSaEspInSourceId		1.3.6.1.4.1.3097.3.1.1.1.1.5
The source identifier of the SA, or 0 if unknown or if the SA uses transport mode encapsulation. This value is taken directly from the optional ID payloads that are exchange during SA creation negotiation.
Status: current	Access: read-only
OBJECT-TYPE
	OCTET STRING	Size(1..255)

wgIpsecSaEspInSourceIdType		1.3.6.1.4.1.3097.3.1.1.1.1.6
The type of identifier presented by 'wgIpsecSaEspInSourceId', or 0 if unknown or if the SA uses transport mode encapsulation.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecDoiIdentType

wgIpsecSaEspInProtocol		1.3.6.1.4.1.3097.3.1.1.1.1.7
The transport-layer protocol number that this SA carries, or 0 if it carries any protocol.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..255

wgIpsecSaEspInDestPort		1.3.6.1.4.1.3097.3.1.1.1.1.8
The destination port number of the protocol that this SA carries, or 0 if it carries any port number.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..65535

wgIpsecSaEspInSourcePort		1.3.6.1.4.1.3097.3.1.1.1.1.9
The source port number of the protocol that this SA carries, or 0 if it carries any port number.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..65535

wgIpsecSaEspInCreator		1.3.6.1.4.1.3097.3.1.1.1.1.10
The creator of this SA. This MIB makes no assumptions about how the SAs are created. They may be created statically, or by a key exchange protocol such as IKE, or by some other method.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecSaCreatorIdent

wgIpsecSaEspInEncapsulation		1.3.6.1.4.1.3097.3.1.1.1.1.11
The type of encapsulation used by this SA.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecDoiEncapsulationMode

wgIpsecSaEspInEncAlg		1.3.6.1.4.1.3097.3.1.1.1.1.12
A unique value representing the encryption algorithm applied to traffic or 0 if there is no encryption used.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecDoiEspTransform

wgIpsecSaEspInEncKeyLength		1.3.6.1.4.1.3097.3.1.1.1.1.13
The length of the encryption key in bits used for the algorithm specified in the 'wgIpsecSaEspInEncAlg' object, or 0 if the key length is implicit in the specified algorithm or there is no encryption specified.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..65531

wgIpsecSaEspInAuthAlg		1.3.6.1.4.1.3097.3.1.1.1.1.14
A unique value representing the hash algorithm applied to traffic or 0 if there is no authentication used.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecDoiAuthAlgorithm

wgIpsecSaEspInLimitSeconds		1.3.6.1.4.1.3097.3.1.1.1.1.15
The maximum lifetime in seconds of the SA, or 0 if there is no time constraint on its expiration. The display value is limited to 4294967295 seconds (more than 136 years); values greater than that value will be truncated.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32

wgIpsecSaEspInLimitKbytes		1.3.6.1.4.1.3097.3.1.1.1.1.16
The maximum traffic in kilobytes that the SA is allowed to support, or 0 if there is no traffic constraint on its expiration. The display value is limited to 4294967295 kilobytes; values greater than that value will be truncated.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32

wgIpsecSaEspInAccSeconds		1.3.6.1.4.1.3097.3.1.1.1.1.17
The number of seconds accumulated against the SA's expiration by time. This is also the number of seconds that the SA has existed.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaEspInAccKbytes		1.3.6.1.4.1.3097.3.1.1.1.1.18
The amount of traffic accumulated that counts against the SA's expiration by traffic limitation, measured in Kbytes. This value may be 0 if the SA does not expire based on traffic.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaEspInUserOctets		1.3.6.1.4.1.3097.3.1.1.1.1.19
The amount of user level traffic measured in bytes handled by the SA. This is not necessarily the same as the amount of traffic applied against the traffic expiration limit.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaEspInPackets		1.3.6.1.4.1.3097.3.1.1.1.1.20
The number of packets handled by the SA.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaEspInDecryptErrors		1.3.6.1.4.1.3097.3.1.1.1.1.21
The number of packets discarded by the SA due to decryption errors.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaEspInAuthErrors		1.3.6.1.4.1.3097.3.1.1.1.1.22
The number of packets discarded by the SA due to authentication errors.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaEspInReplayErrors		1.3.6.1.4.1.3097.3.1.1.1.1.23
The number of packets discarded by the SA due to replay errors.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaEspInPolicyErrors		1.3.6.1.4.1.3097.3.1.1.1.1.24
The number of packets discarded by the SA due to policy errors. This includes packets where the next protocol is invalid.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaEspInPadErrors		1.3.6.1.4.1.3097.3.1.1.1.1.25
The number of packets discarded by the SA due to pad value errors. Implementations that do not check this must not support this object.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaEspInOtherReceiveErrors		1.3.6.1.4.1.3097.3.1.1.1.1.26
The number of packets discarded by the SA due to errors other than decryption, authentication or replay errors. This may include packets dropped due to a lack of receive buffers, and may include packets dropped due to congestion at the decryption element.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaAhInTable		1.3.6.1.4.1.3097.3.1.1.2
The (conceptual) table containing information on IPSec inbound AH SAs. There should be one row for every inbound AH security association that exists in the entity. The maximum number of rows is implementation dependent.
Status: current	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		WGIpsecSaAhInEntry

wgIpsecSaAhInEntry		1.3.6.1.4.1.3097.3.1.1.2.1
An entry (conceptual row) containing the information on a particular IPSec inbound AH SA. A row in this table cannot be created or deleted by SNMP operations on columns of the table.
Status: current	Access: not-accessible
OBJECT-TYPE
	WGIpsecSaAhInEntry

wgIpsecSaAhInAddress		1.3.6.1.4.1.3097.3.1.1.2.1.1
The destination address of the SA. For implementations that do not support IPv6, this address should appear as one of the IPv4-mapped IPv6 addresses as defined in Section 2.5.4 of [IPV6AA]. Specifically, the prefix '0000:0000:0000:0000:0000:FFFF:' is used for IPv4 only nodes, while the prefix '0000:0000:0000:0000:0000:0000:' is used for bi-lingual nodes.
Status: current	Access: read-only
OBJECT-TYPE
	IpAddress

wgIpsecSaAhInSpi		1.3.6.1.4.1.3097.3.1.1.2.1.2
The security parameters index of the SA.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32

wgIpsecSaAhInDestId		1.3.6.1.4.1.3097.3.1.1.2.1.3
The destination identifier of the SA, or 0 if unknown or if the SA uses transport mode encapsulation. This value is taken directly from the optional ID payloads that are exchange during SA creation negotiation.
Status: current	Access: read-only
OBJECT-TYPE
	OCTET STRING	Size(1..255)

wgIpsecSaAhInDestIdType		1.3.6.1.4.1.3097.3.1.1.2.1.4
The type of identifier presented by 'wgIpsecSaAhInDestId', or 0 if unknown or if the SA uses transport mode encapsulation.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecDoiIdentType

wgIpsecSaAhInSourceId		1.3.6.1.4.1.3097.3.1.1.2.1.5
The source identifier of the SA, or 0 if unknown or if the SA uses transport mode encapsulation. This value is taken directly from the optional ID payloads that are exchange during SA creation negotiation.
Status: current	Access: read-only
OBJECT-TYPE
	OCTET STRING	Size(1..255)

wgIpsecSaAhInSourceIdType		1.3.6.1.4.1.3097.3.1.1.2.1.6
The type of identifier presented by 'wgIpsecSaAhInSourceId', or 0 if unknown or if the SA uses transport mode encapsulation.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecDoiIdentType

wgIpsecSaAhInProtocol		1.3.6.1.4.1.3097.3.1.1.2.1.7
The transport-layer protocol number that this SA carries, or 0 if it carries any protocol.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..255

wgIpsecSaAhInDestPort		1.3.6.1.4.1.3097.3.1.1.2.1.8
The destination port number of the protocol that this SA carries, or 0 if it carries any port number.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..65535

wgIpsecSaAhInSourcePort		1.3.6.1.4.1.3097.3.1.1.2.1.9
The source port number of the protocol that this SA carries, or 0 if it carries any port number.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..65535

wgIpsecSaAhInCreator		1.3.6.1.4.1.3097.3.1.1.2.1.10
The creator of this SA. This MIB makes no assumptions about how the SAs are created. They may be created statically, or by a key exchange protocol such as IKE, or by some other method.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecSaCreatorIdent

wgIpsecSaAhInEncapsulation		1.3.6.1.4.1.3097.3.1.1.2.1.11
The type of encapsulation used by this SA.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecDoiEncapsulationMode

wgIpsecSaAhInAuthAlg		1.3.6.1.4.1.3097.3.1.1.2.1.12
A unique value representing the hash algorithm applied to traffic carried by this SA if it uses ESP or 0 if there is no authentication applied by ESP.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecDoiAhTransform

wgIpsecSaAhInLimitSeconds		1.3.6.1.4.1.3097.3.1.1.2.1.13
The maximum lifetime in seconds of the SA, or 0 if there is no time constraint on its expiration. The display value is limited to 4294967295 seconds (more than 136 years); values greater than that value will be truncated.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32

wgIpsecSaAhInLimitKbytes		1.3.6.1.4.1.3097.3.1.1.2.1.14
The maximum traffic in Kbytes that the SA is allowed to support, or 0 if there is no traffic constraint on its expiration. The display value is limited to 4294967295 kilobytes; values greater than that value will be truncated.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32

wgIpsecSaAhInAccSeconds		1.3.6.1.4.1.3097.3.1.1.2.1.15
The number of seconds accumulated against the SA's expiration by time. This is also the number of seconds that the SA has existed.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaAhInAccKbytes		1.3.6.1.4.1.3097.3.1.1.2.1.16
The amount of traffic accumulated that counts against the SA's expiration by traffic limitation, measured in Kbytes. This value may be 0 if the SA does not expire based on traffic.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaAhInUserOctets		1.3.6.1.4.1.3097.3.1.1.2.1.17
The amount of user level traffic measured in bytes handled by the SA. This is not necessarily the same as the amount of traffic applied against the traffic expiration limit.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaAhInPackets		1.3.6.1.4.1.3097.3.1.1.2.1.18
The number of packets handled by the SA.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaAhInAuthErrors		1.3.6.1.4.1.3097.3.1.1.2.1.19
The number of packets discarded by the SA due to authentication errors.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaAhInReplayErrors		1.3.6.1.4.1.3097.3.1.1.2.1.20
The number of packets discarded by the SA due to replay errors.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaAhInPolicyErrors		1.3.6.1.4.1.3097.3.1.1.2.1.21
The number of packets discarded by the SA due to policy errors. This includes packets where the next protocol is invalid.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaAhInOtherReceiveErrors		1.3.6.1.4.1.3097.3.1.1.2.1.22
The number of packets discarded by the SA due to errors other than decryption, authentication or replay errors. This may include packets dropped due to a lack of receive buffers, and may include packets dropped due to congestion at the authentication element.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaIpcompInTable		1.3.6.1.4.1.3097.3.1.1.3
The (conceptual) table containing information on IPSec inbound IPCOMP SAs. There should be one row for every inbound IPCOMP (security) association that exists in the entity. The maximum number of rows is implementation dependent.
Status: current	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		WGIpsecSaIpcompInEntry

wgIpsecSaIpcompInEntry		1.3.6.1.4.1.3097.3.1.1.3.1
An entry (conceptual row) containing the information on a particular IPSec inbound IPCOMP SA. A row in this table cannot be created or deleted by SNMP operations on columns of the table.
Status: current	Access: not-accessible
OBJECT-TYPE
	WGIpsecSaIpcompInEntry

wgIpsecSaIpcompInAddress		1.3.6.1.4.1.3097.3.1.1.3.1.1
The destination address of the SA. For implementations that do not support IPv6, this address should appear as one of the IPv4-mapped IPv6 addresses as defined in Section 2.5.4 of [IPV6AA]. Specifically, the prefix '0000:0000:0000:0000:0000:FFFF:' is used for IPv4 only nodes, while the prefix '0000:0000:0000:0000:0000:0000:' is used for bi-lingual nodes.
Status: current	Access: read-only
OBJECT-TYPE
	IpAddress

wgIpsecSaIpcompInCpi		1.3.6.1.4.1.3097.3.1.1.3.1.2
The CPI of the SA. Since the lower values of CPIs are reserved to be the same as the algorithm, the syntax for this object is the same as the transform.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecDoiIpcompTransform

wgIpsecSaIpcompInDestId		1.3.6.1.4.1.3097.3.1.1.3.1.3
The destination identifier of the SA, or 0 if unknown or if the SA uses transport mode, or 0 if this SA is used with multiple SAs in protection suites. This value, if non-zero, is taken directly from the optional ID payloads that are exchange during SA creation negotiation.
Status: current	Access: read-only
OBJECT-TYPE
	OCTET STRING	Size(1..255)

wgIpsecSaIpcompInDestIdType		1.3.6.1.4.1.3097.3.1.1.3.1.4
The type of identifier presented by 'wgIpsecSaIpcompInDestId', or 0 if unknown or if the SA uses transport mode, or 0 if this SA is used with multiple SAs in protection suites.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecDoiIdentType

wgIpsecSaIpcompInSourceId		1.3.6.1.4.1.3097.3.1.1.3.1.5
The source identifier of the SA, or 0 if unknown or if the SA uses transport mode encapsulation, or 0 if this SA is used with multiple SAs in protection suites. This value, if non-zero, is taken directly from the optional ID payloads that are exchange during SA creation negotiation.
Status: current	Access: read-only
OBJECT-TYPE
	OCTET STRING	Size(1..255)

wgIpsecSaIpcompInSourceIdType		1.3.6.1.4.1.3097.3.1.1.3.1.6
The type of identifier presented by 'wgIpsecSaIpcompInSourceId', or 0 if unknown or if the SA uses transport mode encapsulation, or 0 if this SA is used with multiple SAs in protection suites.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecDoiIdentType

wgIpsecSaIpcompInProtocol		1.3.6.1.4.1.3097.3.1.1.3.1.7
The transport-layer protocol number that this SA carries, or 0 if it carries any protocol.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..255

wgIpsecSaIpcompInDestPort		1.3.6.1.4.1.3097.3.1.1.3.1.8
The destination port number of the protocol that this SA carries, or 0 if it carries any port number.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..65535

wgIpsecSaIpcompInSourcePort		1.3.6.1.4.1.3097.3.1.1.3.1.9
The source port number of the protocol that this SA carries, or 0 if it carries any port number.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..65535

wgIpsecSaIpcompInCreator		1.3.6.1.4.1.3097.3.1.1.3.1.10
The creator of this SA. This MIB makes no assumptions about how the SAs are created. They may be created statically, or by a key exchange protocol such as IKE, or by some other method.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecSaCreatorIdent

wgIpsecSaIpcompInEncapsulation		1.3.6.1.4.1.3097.3.1.1.3.1.11
The type of encapsulation used by this SA.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecDoiEncapsulationMode

wgIpsecSaIpcompInDecompAlg		1.3.6.1.4.1.3097.3.1.1.3.1.12
A unique value representing the decompression algorithm applied to traffic.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecDoiIpcompTransform

wgIpsecSaIpcompInSeconds		1.3.6.1.4.1.3097.3.1.1.3.1.13
The number of seconds that the SA has existed.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaIpcompInUserOctets		1.3.6.1.4.1.3097.3.1.1.3.1.14
The amount of user level traffic measured in bytes handled by the SA.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaIpcompInPackets		1.3.6.1.4.1.3097.3.1.1.3.1.15
The number of packets handled by the SA.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaIpcompInDecompErrors		1.3.6.1.4.1.3097.3.1.1.3.1.16
The number of packets discarded by the SA due to decompression errors.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaIpcompInOtherReceiveErrors		1.3.6.1.4.1.3097.3.1.1.3.1.17
The number of packets discarded by the SA due to errors other than decompression errors. This may include packets dropped due to a lack of receive buffers, and packets dropped due to congestion at the decompression element.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaEspOutTable		1.3.6.1.4.1.3097.3.1.1.4
The (conceptual) table containing information on IPSec Outbound ESP SAs. There should be one row for every outbound ESP security association that exists in the entity. The maximum number of rows is implementation dependent.
Status: current	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		WGIpsecSaEspOutEntry

wgIpsecSaEspOutEntry		1.3.6.1.4.1.3097.3.1.1.4.1
An entry (conceptual row) containing the information on a particular IPSec Outbound ESP SA. A row in this table cannot be created or deleted by SNMP operations on columns of the table.
Status: current	Access: not-accessible
OBJECT-TYPE
	WGIpsecSaEspOutEntry

wgIpsecSaEspOutAddress		1.3.6.1.4.1.3097.3.1.1.4.1.1
The destination address of the SA. For implementations that do not support IPv6, this address should appear as one of the IPv4-mapped IPv6 addresses as defined in Section 2.5.4 of [IPV6AA]. Specifically, the prefix '0000:0000:0000:0000:0000:FFFF:' is used for IPv4 only nodes, while the prefix '0000:0000:0000:0000:0000:0000:' is used for bi-lingual nodes.
Status: current	Access: read-only
OBJECT-TYPE
	IpAddress

wgIpsecSaEspOutSpi		1.3.6.1.4.1.3097.3.1.1.4.1.2
The security parameters index of the SA.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32

wgIpsecSaEspOutSourceId		1.3.6.1.4.1.3097.3.1.1.4.1.3
The source identifier of the SA, or 0 if unknown or if the SA uses transport mode encapsulation. This value is taken directly from the optional ID payloads that are exchange during phase 2 negotiations.
Status: current	Access: read-only
OBJECT-TYPE
	OCTET STRING	Size(4..255)

wgIpsecSaEspOutSourceIdType		1.3.6.1.4.1.3097.3.1.1.4.1.4
The type of identifier presented by 'wgIpsecSaEspOutSourceId', or 0 if unknown or if the SA uses transport mode encapsulation.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecDoiIdentType

wgIpsecSaEspOutDestId		1.3.6.1.4.1.3097.3.1.1.4.1.5
The destination identifier of the SA, or 0 if unknown or if the SA uses transport mode encapsulation. This value is taken directly from the optional ID payloads that are exchange during phase 2 negotiations.
Status: current	Access: read-only
OBJECT-TYPE
	OCTET STRING	Size(4..255)

wgIpsecSaEspOutDestIdType		1.3.6.1.4.1.3097.3.1.1.4.1.6
The type of identifier presented by 'wgIpsecSaEspOutDestId', or 0 if unknown or if the SA uses transport mode encapsulation.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecDoiIdentType

wgIpsecSaEspOutProtocol		1.3.6.1.4.1.3097.3.1.1.4.1.7
The transport-layer protocol number that this SA carries, or 0 if it carries any protocol.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..255

wgIpsecSaEspOutSourcePort		1.3.6.1.4.1.3097.3.1.1.4.1.8
The source port number of the protocol that this SA carries, or 0 if it carries any port number.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..65535

wgIpsecSaEspOutDestPort		1.3.6.1.4.1.3097.3.1.1.4.1.9
The destination port number of the protocol that this SA carries, or 0 if it carries any port number.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..65535

wgIpsecSaEspOutCreator		1.3.6.1.4.1.3097.3.1.1.4.1.10
The creator of this SA. This MIB makes no assumptions about how the SAs are created. They may be created statically, or by a key exchange protocol such as IKE, or by some other method.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecSaCreatorIdent

wgIpsecSaEspOutEncapsulation		1.3.6.1.4.1.3097.3.1.1.4.1.11
The type of encapsulation used by this SA.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecDoiEncapsulationMode

wgIpsecSaEspOutEncAlg		1.3.6.1.4.1.3097.3.1.1.4.1.12
A unique value representing the encryption algorithm applied to traffic or 0 if there is no encryption used.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecDoiEspTransform

wgIpsecSaEspOutEncKeyLength		1.3.6.1.4.1.3097.3.1.1.4.1.13
The length of the encryption key in bits used for the algorithm specified in the 'wgIpsecSaEspOutEncAlg' object, or 0 if the key length is implicit in the specified algorithm or there is no encryption specified.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..65531

wgIpsecSaEspOutAuthAlg		1.3.6.1.4.1.3097.3.1.1.4.1.14
A unique value representing the hash algorithm applied to traffic or 0 if there is no authentication used.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecDoiAuthAlgorithm

wgIpsecSaEspOutLimitSeconds		1.3.6.1.4.1.3097.3.1.1.4.1.15
The maximum lifetime in seconds of the SA, or 0 if there is no time constraint on its expiration. The display value is limited to 4294967295 seconds (more than 136 years); values greater than that value will be truncated.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32

wgIpsecSaEspOutLimitKbytes		1.3.6.1.4.1.3097.3.1.1.4.1.16
The maximum traffic in kbytes that the SA is allowed to support, or 0 if there is no traffic constraint on its expiration. The display value is limited to 4294967295 kilobytes; values greater than that value will be truncated.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32

wgIpsecSaEspOutAccSeconds		1.3.6.1.4.1.3097.3.1.1.4.1.17
The number of seconds accumulated against the SA's expiration by time. This is also the number of seconds that the SA has existed.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaEspOutAccKbytes		1.3.6.1.4.1.3097.3.1.1.4.1.18
The amount of traffic accumulated that counts against the SA's expiration by traffic limitation, measured in Kbytes. This value may be 0 if the SA does not expire based on traffic.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaEspOutUserOctets		1.3.6.1.4.1.3097.3.1.1.4.1.19
The amount of user level traffic measured in bytes handled by the SA. This is not necessarily the same as the amount of traffic applied against the traffic expiration limit.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaEspOutPackets		1.3.6.1.4.1.3097.3.1.1.4.1.20
The number of packets handled by the SA.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaEspOutSendErrors		1.3.6.1.4.1.3097.3.1.1.4.1.21
The number of packets discarded by the SA due to any error. This may include errors due to a lack of transmit buffers.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaAhOutTable		1.3.6.1.4.1.3097.3.1.1.5
The (conceptual) table containing information on IPSec Outbound AH SAs. There should be one row for every outbound AH security association that exists in the entity. The maximum number of rows is implementation dependent.
Status: current	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		WGIpsecSaAhOutEntry

wgIpsecSaAhOutEntry		1.3.6.1.4.1.3097.3.1.1.5.1
An entry (conceptual row) containing the information on a particular IPSec Outbound AH SA. A row in this table cannot be created or deleted by SNMP operations on columns of the table.
Status: current	Access: not-accessible
OBJECT-TYPE
	WGIpsecSaAhOutEntry

wgIpsecSaAhOutAddress		1.3.6.1.4.1.3097.3.1.1.5.1.1
The destination address of the SA. For implementations that do not support IPv6, this address should appear as one of the IPv4-mapped IPv6 addresses as defined in Section 2.5.4 of [IPV6AA]. Specifically, the prefix '0000:0000:0000:0000:0000:FFFF:' is used for IPv4 only nodes, while the prefix '0000:0000:0000:0000:0000:0000:' is used for bi-lingual nodes.
Status: current	Access: read-only
OBJECT-TYPE
	IpAddress

wgIpsecSaAhOutSpi		1.3.6.1.4.1.3097.3.1.1.5.1.2
The security parameters index of the SA.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32

wgIpsecSaAhOutSourceId		1.3.6.1.4.1.3097.3.1.1.5.1.3
The source identifier of the SA, or 0 if unknown or if the SA uses transport mode encapsulation. This value is taken directly from the optional ID payloads that are exchange during phase 2 negotiations.
Status: current	Access: read-only
OBJECT-TYPE
	OCTET STRING	Size(4..255)

wgIpsecSaAhOutSourceIdType		1.3.6.1.4.1.3097.3.1.1.5.1.4
The type of identifier presented by 'wgIpsecSaAhOutSourceId', or 0 if unknown or if the SA uses transport mode encapsulation.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecDoiIdentType

wgIpsecSaAhOutDestId		1.3.6.1.4.1.3097.3.1.1.5.1.5
The destination identifier of the SA, or 0 if unknown or if the SA uses transport mode encapsulation. This value is taken directly from the optional ID payloads that are exchange during phase 2 negotiations.
Status: current	Access: read-only
OBJECT-TYPE
	OCTET STRING	Size(4..255)

wgIpsecSaAhOutDestIdType		1.3.6.1.4.1.3097.3.1.1.5.1.6
The type of identifier presented by 'wgIpsecSaAhOutDestId', or 0 if unknown or if the SA uses transport mode encapsulation.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecDoiIdentType

wgIpsecSaAhOutProtocol		1.3.6.1.4.1.3097.3.1.1.5.1.7
The transport-layer protocol number that this SA carries, or 0 if it carries any protocol.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..255

wgIpsecSaAhOutSourcePort		1.3.6.1.4.1.3097.3.1.1.5.1.8
The source port number of the protocol that this SA carries, or 0 if it carries any port number.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..65535

wgIpsecSaAhOutDestPort		1.3.6.1.4.1.3097.3.1.1.5.1.9
The destination port number of the protocol that this SA carries, or 0 if it carries any port number.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..65535

wgIpsecSaAhOutCreator		1.3.6.1.4.1.3097.3.1.1.5.1.10
The creator of this SA. This MIB makes no assumptions about how the SAs are created. They may be created statically, or by a key exchange protocol such as IKE, or by some other method.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecSaCreatorIdent

wgIpsecSaAhOutEncapsulation		1.3.6.1.4.1.3097.3.1.1.5.1.11
The type of encapsulation used by this SA.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecDoiEncapsulationMode

wgIpsecSaAhOutAuthAlg		1.3.6.1.4.1.3097.3.1.1.5.1.12
A unique value representing the hash algorithm applied to traffic or 0 if there is no authentication used.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecDoiAhTransform

wgIpsecSaAhOutLimitSeconds		1.3.6.1.4.1.3097.3.1.1.5.1.13
The maximum lifetime in seconds of the SA, or 0 if there is no time constraint on its expiration. The display value is limited to 4294967295 seconds (more than 136 years); values greater than that value will be truncated.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32

wgIpsecSaAhOutLimitKbytes		1.3.6.1.4.1.3097.3.1.1.5.1.14
The maximum traffic in Kbytes that the SA is allowed to support, or 0 if there is no traffic constraint on its expiration. The display value is limited to 4294967295 kilobytes; values greater than that value will be truncated.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32

wgIpsecSaAhOutAccSeconds		1.3.6.1.4.1.3097.3.1.1.5.1.15
The number of seconds accumulated against the SA's expiration by time. This is also the number of seconds that the SA has existed.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaAhOutAccKbytes		1.3.6.1.4.1.3097.3.1.1.5.1.16
The amount of traffic accumulated that counts against the SA's expiration by traffic limitation, measured in Kbytes. This value may be 0 if the SA does not expire based on traffic.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaAhOutUserOctets		1.3.6.1.4.1.3097.3.1.1.5.1.17
The amount of user level traffic measured in bytes handled by the SA. This is not necessarily the same as the amount of traffic applied against the traffic expiration limit.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaAhOutPackets		1.3.6.1.4.1.3097.3.1.1.5.1.18
The number of packets handled by the SA.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaAhOutSendErrors		1.3.6.1.4.1.3097.3.1.1.5.1.19
The number of packets discarded by the SA due to any error. This may include errors due to a lack of transmit buffers.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaIpcompOutTable		1.3.6.1.4.1.3097.3.1.1.6
The (conceptual) table containing information on IPSec Outbound IPCOMP SAs. There should be one row for every outbound IPCOMP (security) association that exists in the entity. The maximum number of rows is implementation dependent.
Status: current	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		WGIpsecSaIpcompOutEntry

wgIpsecSaIpcompOutEntry		1.3.6.1.4.1.3097.3.1.1.6.1
An entry (conceptual row) containing the information on a particular IPSec Outbound IPCOMP SA. A row in this table cannot be created or deleted by SNMP operations on columns of the table.
Status: current	Access: not-accessible
OBJECT-TYPE
	WGIpsecSaIpcompOutEntry

wgIpsecSaIpcompOutAddress		1.3.6.1.4.1.3097.3.1.1.6.1.1
The destination address of the SA. If the IPCOMP SA is shared across multiple SAs in protection suites, this value may be 0. For implementations that do not support IPv6, this address should appear as one of the IPv4-mapped IPv6 addresses as defined in Section 2.5.4 of [IPV6AA]. Specifically, the prefix '0000:0000:0000:0000:0000:FFFF:' is used for IPv4 only nodes, while the prefix '0000:0000:0000:0000:0000:0000:' is used for bi-lingual nodes.
Status: current	Access: read-only
OBJECT-TYPE
	IpAddress

wgIpsecSaIpcompOutCpi		1.3.6.1.4.1.3097.3.1.1.6.1.2
The CPI of the SA. Since the lower values of CPIs are reserved to be the same as the algorithm, the syntax for this object is the same as the transform.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecDoiIpcompTransform

wgIpsecSaIpcompOutSourceId		1.3.6.1.4.1.3097.3.1.1.6.1.3
The source identifier of the SA, or 0 if unknown or if the SA uses transport mode encapsulation, or 0 if this SA is used with multiple SAs in protection suites. This value, if non-zero, is taken directly from the optional ID payloads that are exchange during phase 2 negotiations.
Status: current	Access: read-only
OBJECT-TYPE
	OCTET STRING	Size(4..255)

wgIpsecSaIpcompOutSourceIdType		1.3.6.1.4.1.3097.3.1.1.6.1.4
The type of identifier presented by 'wgIpsecSaIpcompOutSourceId', or 0 if unknown or if the SA uses transport mode encapsulation, or 0 if this SA is used with multiple SAs in protection suites.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecDoiIdentType

wgIpsecSaIpcompOutDestId		1.3.6.1.4.1.3097.3.1.1.6.1.5
The destination identifier of the SA, or 0 if unknown or if the SA uses transport mode encapsulation, or 0 if this SA is used with multiple SAs in protection suites. This value, if non-zero, is taken directly from the optional ID payloads that are exchange during phase 2 negotiations.
Status: current	Access: read-only
OBJECT-TYPE
	OCTET STRING	Size(4..255)

wgIpsecSaIpcompOutDestIdType		1.3.6.1.4.1.3097.3.1.1.6.1.6
The type of identifier presented by 'wgIpsecSaIpcompOutDestId', or 0 if unknown or if the SA uses transport mode encapsulation, or 0 if this SA is used with multiple SAs in protection suites.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecDoiIdentType

wgIpsecSaIpcompOutProtocol		1.3.6.1.4.1.3097.3.1.1.6.1.7
The transport-layer protocol number that this SA carries, or 0 if it carries any protocol.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..255

wgIpsecSaIpcompOutSourcePort		1.3.6.1.4.1.3097.3.1.1.6.1.8
The source port number of the protocol that this SA carries, or 0 if it carries any port number.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..65535

wgIpsecSaIpcompOutDestPort		1.3.6.1.4.1.3097.3.1.1.6.1.9
The destination port number of the protocol that this SA carries, or 0 if it carries any port number.
Status: current	Access: read-only
OBJECT-TYPE
	Integer32	0..65535

wgIpsecSaIpcompOutCreator		1.3.6.1.4.1.3097.3.1.1.6.1.10
The creator of this SA. This MIB makes no assumptions about how the SAs are created. They may be created statically, or by a key exchange protocol such as IKE, or by some other method.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecSaCreatorIdent

wgIpsecSaIpcompOutEncapsulation		1.3.6.1.4.1.3097.3.1.1.6.1.11
The type of encapsulation used by this SA.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecDoiEncapsulationMode

wgIpsecSaIpcompOutCompAlg		1.3.6.1.4.1.3097.3.1.1.6.1.12
A unique value representing the compression algorithm applied to traffic.
Status: current	Access: read-only
OBJECT-TYPE
	IpsecDoiIpcompTransform

wgIpsecSaIpcompOutSeconds		1.3.6.1.4.1.3097.3.1.1.6.1.13
The number of seconds that the SA has existed.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaIpcompOutUserOctets		1.3.6.1.4.1.3097.3.1.1.6.1.14
The amount of user level traffic measured in bytes handled by the SA. This is not necessarily the same as the amount of traffic applied against the traffic expiration limit.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSaIpcompOutPackets		1.3.6.1.4.1.3097.3.1.1.6.1.15
The number of packets handled by the SA.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecEspCurrentInboundSAs		1.3.6.1.4.1.3097.3.1.2.1
The current number of inbound ESP SAs in the entity.
Status: current	Access: read-only
OBJECT-TYPE
	Gauge32

wgIpsecEspTotalInboundSAs		1.3.6.1.4.1.3097.3.1.2.2
The total number of inbound ESP SAs created in the entity since boot time.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecEspCurrentOutboundSAs		1.3.6.1.4.1.3097.3.1.2.3
The current number of outbound ESP SAs in the entity.
Status: current	Access: read-only
OBJECT-TYPE
	Gauge32

wgIpsecEspTotalOutboundSAs		1.3.6.1.4.1.3097.3.1.2.4
The total number of outbound ESP SAs created in the entity since boot time.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecAhCurrentInboundSAs		1.3.6.1.4.1.3097.3.1.2.5
The current number of inbound AH SAs in the entity.
Status: current	Access: read-only
OBJECT-TYPE
	Gauge32

wgIpsecAhTotalInboundSAs		1.3.6.1.4.1.3097.3.1.2.6
The total number of inbound AH SAs created in the entity since boot time.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecAhCurrentOutboundSAs		1.3.6.1.4.1.3097.3.1.2.7
The current number of outbound AH SAs in the entity.
Status: current	Access: read-only
OBJECT-TYPE
	Gauge32

wgIpsecAhTotalOutboundSAs		1.3.6.1.4.1.3097.3.1.2.8
The total number of outbound AH SAs created in the entity since boot time.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecIpcompCurrentInboundSAs		1.3.6.1.4.1.3097.3.1.2.9
The current number of inbound IPCOMP SAs in the entity.
Status: current	Access: read-only
OBJECT-TYPE
	Gauge32

wgIpsecIpcompTotalInboundSAs		1.3.6.1.4.1.3097.3.1.2.10
The total number of inbound IPCOMP SAs created in the entity since boot time.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecIpcompCurrentOutboundSAs		1.3.6.1.4.1.3097.3.1.2.11
The current number of outbound IPCOMP SAs in the entity.
Status: current	Access: read-only
OBJECT-TYPE
	Gauge32

wgIpsecIpcompTotalOutboundSAs		1.3.6.1.4.1.3097.3.1.2.12
The total number of outbound IPCOMP SAs created in the entity since boot time.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecDecryptionErrors		1.3.6.1.4.1.3097.3.1.3.1
The total number of packets received by the entity in SAs since boot time with decryption errors.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecAuthenticationErrors		1.3.6.1.4.1.3097.3.1.3.2
The total number of packets received by the entity in SAs since boot time with authentication errors. This includes all packets in which the hash value is determined to be invalid, for both ESP and AH SAs.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecReplayErrors		1.3.6.1.4.1.3097.3.1.3.3
The total number of packets received by the entity in SAs since boot time with replay errors.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecPolicyErrors		1.3.6.1.4.1.3097.3.1.3.4
The total number of packets received by the entity in SAs since boot time and discarded due to policy errors. This includes packets that had selectors that were invalid for the SA that carried them.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecOtherReceiveErrors		1.3.6.1.4.1.3097.3.1.3.5
The total number of packets received by the entity in SAs since boot time and discarded due to errors not due to decryption, authentication, replay or policy.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecSendErrors		1.3.6.1.4.1.3097.3.1.3.6
The total number of packets to be sent by the entity in SAs since boot time and discarded due to errors.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

wgIpsecUnknownSpiErrors		1.3.6.1.4.1.3097.3.1.3.7
The total number of packets received by the entity since boot time with SPIs or CPIs that were not valid.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32