VPN-MIB

File: VPN-MIB.mib (14783 bytes)

Imported modules

RFC1155-SMI SNMPv2-TC RFC-1215
RFC-1212

Imported symbols

mgmt NetworkAddress IpAddress
Counter Gauge TimeTicks
enterprises DisplayString TRAP-TYPE
OBJECT-TYPE

Defined Types

WanIfEntry  
SEQUENCE    
  wanIfIndex INTEGER
  wanIfFramesRcvd INTEGER
  wanIfFramesXmit INTEGER
  wanIfFramesDisc INTEGER
  wanIfRcvOvrn INTEGER
  wanIfRcvAbort INTEGER
  wanIfRcvAlignErr INTEGER
  wanIfRcvErr INTEGER
  wanIfRcvFrameLong INTEGER
  wanIfRcvNoBuf INTEGER
  wanIfXmitUnderrun INTEGER
  wanIfXmitTimeout INTEGER
  wanIfXmitNoBuff INTEGER
  wanIfRcvByteRate Counter
  wanIfXmitByteRate Counter

VpnEntry  
SEQUENCE    
  vpnIndex INTEGER
  vpnDescr DisplayString
  vpnSkipInPktDecap INTEGER
  vpnSkipOutPktEncap INTEGER
  vpnSkipInPktParseErr INTEGER
  vpnSkipInKPUpdt INTEGER
  vpnSkipOutKPUpdt INTEGER
  vpnOutFrag INTEGER
  vpnOctetsIn INTEGER
  vpnOctetsOut INTEGER
  vpnNOutOfOrder INTEGER
  vpnSkipAlgMismatch INTEGER
  vpnAuthInPktInvdSig INTEGER
  vpnAuthInPktParseErr INTEGER
  vpnEncryptImpEncap INTEGER
  vpnEncryptInPktParseErr INTEGER

LogEntry  
SEQUENCE    
  logIndex INTEGER
  logTime INTEGER
  logAttackType INTEGER
  logDescription DisplayString

ActiveSessionEntry  
SEQUENCE    
  asName DisplayString
  asLength TimeTicks
  asOrgIPAddress IpAddress
  asXlateAddress IpAddress
  asDescr DisplayString
  asPktsIn Counter
  asPktsOut Counter
  asBytesIn Counter
  asBytesOut Counter

Defined Values

vpnet 1.3.6.1.4.1.1866
OBJECT IDENTIFIER    

vpnmib 1.3.6.1.4.1.1866.7
OBJECT IDENTIFIER    

waninterface 1.3.6.1.4.1.1866.7.1
OBJECT IDENTIFIER    

vpns 1.3.6.1.4.1.1866.7.2
OBJECT IDENTIFIER    

log 1.3.6.1.4.1.1866.7.3
OBJECT IDENTIFIER    

vsuSystem 1.3.6.1.4.1.1866.7.4
OBJECT IDENTIFIER    

activeSessions 1.3.6.1.4.1.1866.7.5
OBJECT IDENTIFIER    

wanIfTable 1.3.6.1.4.1.1866.7.1.1
Tok_String
Status: mandatory Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    WanIfEntry

wanIfEntry 1.3.6.1.4.1.1866.7.1.1.1
Tok_String
Status: mandatory Access: not-accessible
OBJECT-TYPE    
  WanIfEntry  

wanIfIndex 1.3.6.1.4.1.1866.7.1.1.1.1
A unique value for each interface. 1 - Private port 2 - Public port
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

wanIfFramesRcvd 1.3.6.1.4.1.1866.7.1.1.1.2
Total frames received on this interface.
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

wanIfFramesXmit 1.3.6.1.4.1.1866.7.1.1.1.3
Total frames transmitted on this interface.
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

wanIfFramesDisc 1.3.6.1.4.1.1866.7.1.1.1.4
Total frames discarded on this interface.
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

wanIfRcvOvrn 1.3.6.1.4.1.1866.7.1.1.1.5
Total frames received on this interface with data overrun errors.
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

wanIfRcvAbort 1.3.6.1.4.1.1866.7.1.1.1.6
Total frames received on this interface aborted by the sender.
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

wanIfRcvAlignErr 1.3.6.1.4.1.1866.7.1.1.1.7
Total frames received on this interface with alignment errors.
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

wanIfRcvCRCErr 1.3.6.1.4.1.1866.7.1.1.1.8
Total frames received on this interface with CRC errors.
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

wanIfRcvFrameLong 1.3.6.1.4.1.1866.7.1.1.1.9
Total frames received on this interface with length errors.
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

wanIfRcvNoBuff 1.3.6.1.4.1.1866.7.1.1.1.10
Total frames for which there were no receive buffers available.
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

wanIfXmitUnderrun 1.3.6.1.4.1.1866.7.1.1.1.11
Total frames with transmit underrun errors.
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

wanIfXmitTimeout 1.3.6.1.4.1.1866.7.1.1.1.12
Total times we've timed out trying to transmit a frame.
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

wanIfXmitNoBuff 1.3.6.1.4.1.1866.7.1.1.1.13
Total times there were no transmit buffers available when trying to transmit a frame.
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

wanIfRcvByteRate 1.3.6.1.4.1.1866.7.1.1.1.14
last 16 second average KB per second of data received.
Status: mandatory Access: read-only
OBJECT-TYPE    
  Counter  

wanIfXmitByteRate 1.3.6.1.4.1.1866.7.1.1.1.15
last 16 second average KB per second of data sent.
Status: mandatory Access: read-only
OBJECT-TYPE    
  Counter  

vpnTable 1.3.6.1.4.1.1866.7.2.1
Tok_String
Status: mandatory Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    VpnEntry

vpnEntry 1.3.6.1.4.1.1866.7.2.1.1
Tok_String
Status: mandatory Access: not-accessible
OBJECT-TYPE    
  VpnEntry  

vpnIndex 1.3.6.1.4.1.1866.7.2.1.1.1
A unique value for each VPN. Ranges from 1 to (number of VPNs configured + number of clients configured). So, this table will not map 1-to-1 with the VPNs configured via VPNmanager when VPNRemote clients are configured as part of a VPN. Each client has it's own physical VPN on a VSU.
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

vpnDescr 1.3.6.1.4.1.1866.7.2.1.1.2
Textual description of this interface. Currently (1/9/98) just shows the VPN decimal id.
Status: mandatory Access: read-only
OBJECT-TYPE    
  DisplayString  

vpnSkipInPktDecap 1.3.6.1.4.1.1866.7.2.1.1.3
Total incoming SKIP-decapsulated packets for this VPN.
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

vpnSkipOutPktEncap 1.3.6.1.4.1.1866.7.2.1.1.4
Total outgoing SKIP-encapsulated packets for this VPN.
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

vpnSkipInPktParseErr 1.3.6.1.4.1.1866.7.2.1.1.5
Total incoming packets for this VPN with IPSec header errors.
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

vpnSkipInKPUpdt 1.3.6.1.4.1.1866.7.2.1.1.6
Number of Kp (key material) updates for incoming traffic this VPN. Not currently supported.
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

vpnSkipOutKPUpdt 1.3.6.1.4.1.1866.7.2.1.1.7
Number of Kp (key material) updates for outgoing traffic this VPN. Not currently supported.
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

vpnOutFrag 1.3.6.1.4.1.1866.7.2.1.1.8
Total outgoing packets for this VPN that had to be fragmented.
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

vpnOctetsIn 1.3.6.1.4.1.1866.7.2.1.1.9
Total bytes received for this VPN.
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

vpnOctetsOut 1.3.6.1.4.1.1866.7.2.1.1.10
Total bytes sent for this VPN.
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

vpnNOutOfOrder 1.3.6.1.4.1.1866.7.2.1.1.11
Counter N out-of-order errors for this VPN. Not currently supported.
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

vpnSkipAlgMismatch 1.3.6.1.4.1.1866.7.2.1.1.12
Total number of packets belonging to this VPN with SKIP Algorithm mismatches. That is, the parameters of the VPN that this packet belongs to does not match the VPN parameters in the packet's SKIP header.
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

vpnAuthInPktInvdSig 1.3.6.1.4.1.1866.7.2.1.1.13
Total number of packets belonging to this VPN with SKIP Authentication errors. That is, the authentication key in the offending packet was not correct. This type of attack results in an authFailure trap which shows up on the VPNmanager as Invalid Authentication Signature.
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

vpnAuthInPktParseErr 1.3.6.1.4.1.1866.7.2.1.1.14
Not currently supported.
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

vpnEncryptImpEncap 1.3.6.1.4.1.1866.7.2.1.1.15
Total outgoing packets encrypted for this VPN.
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

vpnEncryptInPktParseErr 1.3.6.1.4.1.1866.7.2.1.1.16
Total packets belonging to this VPN that had parse errors. For example, encrypted data was not on a 8-byte boundary or the ESP trailer was not of the appropriate size.
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

logTable 1.3.6.1.4.1.1866.7.3.1
Tok_String
Status: mandatory Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    LogEntry

logEntry 1.3.6.1.4.1.1866.7.3.1.1
Tok_String
Status: mandatory Access: not-accessible
OBJECT-TYPE    
  LogEntry  

logIndex 1.3.6.1.4.1.1866.7.3.1.1.1
Tok_String
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

logTime 1.3.6.1.4.1.1866.7.3.1.1.2
Tok_String
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

logAttackType 1.3.6.1.4.1.1866.7.3.1.1.3
The type of packet error that caused us to perceive this as an attack. 1 - SKIP header error. e.g. this packet was not IPSec AH or IPSec ESP. 2 - SKIP Counter N error. Not currently (1/9/98) supported. 3 - SKIP Algorithm mismatch. The parameters of the VPN that this packet belongs to does not match the VPN parameters in the SKIP header. 4 - SKIP Authentication error. The authentication key in the offending packet was not correct. This type of attack results in an authFailure trap which shows up on the VPNmanager as Invalid Authentication Signature. 5 - SKIP Authentication Header error. Not supported. 6 - SKIP Encryption Header error. The packet's ESP trailer wasn't correct.
Status: mandatory Access: read-only
OBJECT-TYPE    
  INTEGER  

logDescription 1.3.6.1.4.1.1866.7.3.1.1.4
Tok_String
Status: mandatory Access: read-only
OBJECT-TYPE    
  DisplayString Size(0..65)  

cpuUtilization 1.3.6.1.4.1.1866.7.4.1
Tok_String
Status: mandatory Access: read-only
OBJECT-TYPE    
  Counter  

activeSessionTable 1.3.6.1.4.1.1866.7.5.1
Tok_String
Status: mandatory Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    ActiveSessionEntry

activeSessionEntry 1.3.6.1.4.1.1866.7.5.1.1
Tok_String
Status: mandatory Access: not-accessible
OBJECT-TYPE    
  ActiveSessionEntry  

asName 1.3.6.1.4.1.1866.7.5.1.1.1
A VPNremote client name or a VSU name as defined in VPNmanager.
Status: mandatory Access: read-only
OBJECT-TYPE    
  DisplayString  

asLength 1.3.6.1.4.1.1866.7.5.1.1.2
Length of this session in seconds.
Status: mandatory Access: read-only
OBJECT-TYPE    
  TimeTicks  

asOrgIPAddress 1.3.6.1.4.1.1866.7.5.1.1.3
VPNremote client's originating IP address or remote VSU IP address.
Status: mandatory Access: read-only
OBJECT-TYPE    
  IpAddress  

asXlateIPAddress 1.3.6.1.4.1.1866.7.5.1.1.4
VPNremote client's assigned address from the Client IP Address pool if configured. If the Client IP Address pool is not configured or this session is from a VSU then this attribute is empty.
Status: mandatory Access: read-only
OBJECT-TYPE    
  IpAddress  

asDescr 1.3.6.1.4.1.1866.7.5.1.1.5
Textual description of this VPN indicating what key management is being used and what encryption, authentication and compression algorithms are being used. For example: IKE, 3DES, MD5, Compression.
Status: mandatory Access: read-only
OBJECT-TYPE    
  DisplayString  

asPktsIn 1.3.6.1.4.1.1866.7.5.1.1.6
Number of packets sent to this VSU from the VPNremote Client or remote VSU indicated by asName during this session.
Status: mandatory Access: read-only
OBJECT-TYPE    
  Counter  

asPktsOut 1.3.6.1.4.1.1866.7.5.1.1.7
Number of packets sent from this VSU to the VPNremote Client or remote VSU indicated by asName during this session.
Status: mandatory Access: read-only
OBJECT-TYPE    
  Counter  

asBytesIn 1.3.6.1.4.1.1866.7.5.1.1.8
Number of bytes sent to this VSU from the VPNremote Client or remote VSU indicated by asName during this session.
Status: mandatory Access: read-only
OBJECT-TYPE    
  Counter  

asBytesOut 1.3.6.1.4.1.1866.7.5.1.1.9
Number of bytes sent from this VSU to the VPNremote Client or remote VSU indicated by asName during this session.
Status: mandatory Access: read-only
OBJECT-TYPE    
  Counter  

skipHdrErr 1
SKIP header error. e.g. this packet was not IPSec AH or IPSec ESP.
TRAP-TYPE    

skipNCounterErr 2
SKIP Count N error. Not used.
TRAP-TYPE    

skipAlgMismatch 3
SKIP Algorithm mismatch. The parameters of the VPN that a packet belonged to did not match the VPN parameters in the SKIP header.
TRAP-TYPE    

authFailure 4
SKIP Authentication error. The authentication key in the offending packet was not correct. This trap shows up on the VPNmanager as Invalid Authentication Signature.
TRAP-TYPE    

authHdrErr 5
SKIP Authentication Header error. Not used.
TRAP-TYPE    

encryptHdrErr 6
SKIP Encryption Header error. The packet's ESP trailer wasn't correct.
TRAP-TYPE    

authFailureLimitErr 7
Client Configuration Download failure limit reached.
TRAP-TYPE