CISCO-IPSEC-FLOW-MONITOR-MIB Table View

The IPsec Phase-1 Internet Key Exchange Peer Table.
There is one entry in this table for each IPsec
Phase-1 IKE peer association which is currently
associated with an active IPsec Phase-1 Tunnel.
The IPsec Phase-1 IKE Tunnel associated with this
IPsec Phase-1 IKE peer association may or may not
be currently active.

cikePeerEntry row .1.3.6.1.4.1.9.9.171.1.2.2.1

Each entry contains the attributes associated
with an IPsec Phase-1 IKE peer association.

Indexes

cikePeerLocalType cikePeerLocalValue cikePeerRemoteType cikePeerRemoteValue cikePeerIntIndex

Column	Syntax	OID
cikePeerLocalType The type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. a host name.	IkePeerType Type Values: 1 ipAddrPeer 2 namePeer	.1.3.6.1.4.1.9.9.171.1.2.2.1.1
cikePeerLocalValue The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is a host name, then this …	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.9.9.171.1.2.2.1.2
cikePeerRemoteType The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. a host name.	IkePeerType Type Values: 1 ipAddrPeer 2 namePeer	.1.3.6.1.4.1.9.9.171.1.2.2.1.3
cikePeerRemoteValue The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is a host name, then t…	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.9.9.171.1.2.2.1.4
cikePeerIntIndex The internal index of the local-remote peer association. This internal index is used to uniquely identify multiple associations between the local and remote peer.	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.9.9.171.1.2.2.1.5
cikePeerLocalAddr The IP address of the local peer.	IPSIpAddress Type Constraints: range: 4 range: 16	.1.3.6.1.4.1.9.9.171.1.2.2.1.6
cikePeerRemoteAddr The IP address of the remote peer.	IPSIpAddress Type Constraints: range: 4 range: 16	.1.3.6.1.4.1.9.9.171.1.2.2.1.7
cikePeerActiveTime The length of time that the peer association has existed in hundredths of a second.	SNMPv2-TCTimeInterval Type Constraints: range: 0..2147483647 Description: A period of time, measured in units of 0.01 seconds.	.1.3.6.1.4.1.9.9.171.1.2.2.1.8
cikePeerActiveTunnelIndex The index of the active IPsec Phase-1 IKE Tunnel (cikeTunIndex in the cikeTunnelTable) for this peer association. If an IPsec Phase-1 IKE Tunnel is not currently active, then the value of this object will be zero.	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.9.9.171.1.2.2.1.9

The IPsec Phase-1 Internet Key Exchange Tunnel Table.
There is one entry in this table for each active IPsec
Phase-1 IKE Tunnel.

cikeTunnelEntry row .1.3.6.1.4.1.9.9.171.1.2.3.1

Each entry contains the attributes associated with
an active IPsec Phase-1 IKE Tunnel.

Indexes

cikeTunIndex

Column	Syntax	OID
cikeTunIndex The index of the IPsec Phase-1 IKE Tunnel Table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The value of this object will wrap at 2,147,483,647.	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.9.9.171.1.2.3.1.1
cikeTunLocalType The type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. a host name.	IkePeerType Type Values: 1 ipAddrPeer 2 namePeer	.1.3.6.1.4.1.9.9.171.1.2.3.1.2
cikeTunLocalValue The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is a host name, then this …	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.9.9.171.1.2.3.1.3
cikeTunLocalAddr The IP address of the local endpoint for the IPsec Phase-1 IKE Tunnel.	IPSIpAddress Type Constraints: range: 4 range: 16	.1.3.6.1.4.1.9.9.171.1.2.3.1.4
cikeTunLocalName The DNS name of the local IP address for the IPsec Phase-1 IKE Tunnel. If the DNS name associated with the local tunnel endpoint is not known, then the value of this object will be a NULL string.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.9.9.171.1.2.3.1.5
cikeTunRemoteType The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. a host name.	IkePeerType Type Values: 1 ipAddrPeer 2 namePeer	.1.3.6.1.4.1.9.9.171.1.2.3.1.6
cikeTunRemoteValue The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is a host name, then …	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.9.9.171.1.2.3.1.7
cikeTunRemoteAddr The IP address of the remote endpoint for the IPsec Phase-1 IKE Tunnel.	IPSIpAddress Type Constraints: range: 4 range: 16	.1.3.6.1.4.1.9.9.171.1.2.3.1.8
cikeTunRemoteName The DNS name of the remote IP address of IPsec Phase-1 IKE Tunnel. If the DNS name associated with the remote tunnel endpoint is not known, then the value of this object will be a NULL string.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.9.9.171.1.2.3.1.9
cikeTunNegoMode The negotiation mode of the IPsec Phase-1 IKE Tunnel.	IkeNegoMode Type Values: 1 main 2 aggressive	.1.3.6.1.4.1.9.9.171.1.2.3.1.10
cikeTunDiffHellmanGrp The Diffie Hellman Group used in IPsec Phase-1 IKE negotiations.	DiffHellmanGrp Type Values: 1 none 2 dhGroup1 3 dhGroup2	.1.3.6.1.4.1.9.9.171.1.2.3.1.11
cikeTunEncryptAlgo The encryption algorithm used in IPsec Phase-1 IKE negotiations.	EncryptAlgo Type Values: 1 none 2 des 3 des3	.1.3.6.1.4.1.9.9.171.1.2.3.1.12
cikeTunHashAlgo The hash algorithm used in IPsec Phase-1 IKE negotiations.	IkeHashAlgo Type Values: 1 none 2 md5 3 sha	.1.3.6.1.4.1.9.9.171.1.2.3.1.13
cikeTunAuthMethod The authentication method used in IPsec Phase-1 IKE negotiations.	IkeAuthMethod Type Values: 1 none 2 preSharedKey 3 rsaSig 4 rsaEncrypt 5 revPublicKey	.1.3.6.1.4.1.9.9.171.1.2.3.1.14
cikeTunLifeTime The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel in seconds.	secondsInteger32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.9.9.171.1.2.3.1.15
cikeTunActiveTime The length of time the IPsec Phase-1 IKE tunnel has been active in hundredths of seconds.	SNMPv2-TCTimeInterval Type Constraints: range: 0..2147483647 Description: A period of time, measured in units of 0.01 seconds.	.1.3.6.1.4.1.9.9.171.1.2.3.1.16
cikeTunSaRefreshThreshold The security association refresh threshold in seconds.	secondsInteger32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.9.9.171.1.2.3.1.17
cikeTunTotalRefreshes The total number of security associations refreshes performed.	QM ExchangesSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.3.1.18
cikeTunInOctets The total number of octets received by this IPsec Phase-1 IKE Tunnel.	OctetsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.3.1.19
cikeTunInPkts The total number of packets received by this IPsec Phase-1 IKE Tunnel.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.3.1.20
cikeTunInDropPkts The total number of packets dropped by this IPsec Phase-1 IKE Tunnel during receive processing.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.3.1.21
cikeTunInNotifys The total number of notifys received by this IPsec Phase-1 IKE Tunnel.	Notification PayloadsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.3.1.22
cikeTunInP2Exchgs The total number of IPsec Phase-2 exchanges received by this IPsec Phase-1 IKE Tunnel.	SA PayloadsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.3.1.23
cikeTunInP2ExchgInvalids The total number of IPsec Phase-2 exchanges received and found to be invalid by this IPsec Phase-1 IKE Tunnel.	SA PayloadsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.3.1.24
cikeTunInP2ExchgRejects The total number of IPsec Phase-2 exchanges received and rejected by this IPsec Phase-1 Tunnel.	SA PayloadsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.3.1.25
cikeTunInP2SaDelRequests The total number of IPsec Phase-2 security association delete requests received by this IPsec Phase-1 IKE Tunnel.	Notification PayloadsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.3.1.26
cikeTunOutOctets The total number of octets sent by this IPsec Phase-1 IKE Tunnel.	OctetsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.3.1.27
cikeTunOutPkts The total number of packets sent by this IPsec Phase-1 IKE Tunnel.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.3.1.28
cikeTunOutDropPkts The total number of packets dropped by this IPsec Phase-1 IKE Tunnel during send processing.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.3.1.29
cikeTunOutNotifys The total number of notifys sent by this IPsec Phase-1 Tunnel.	Notification PayloadsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.3.1.30
cikeTunOutP2Exchgs The total number of IPsec Phase-2 exchanges sent by this IPsec Phase-1 IKE Tunnel.	SA PayloadsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.3.1.31
cikeTunOutP2ExchgInvalids The total number of IPsec Phase-2 exchanges sent and found to be invalid by this IPsec Phase-1 IKE Tunnel.	SA PayloadsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.3.1.32
cikeTunOutP2ExchgRejects The total number of IPsec Phase-2 exchanges sent and rejected by this IPsec Phase-1 IKE Tunnel.	SA PayloadsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.3.1.33
cikeTunOutP2SaDelRequests The total number of IPsec Phase-2 security association delete requests sent by this IPsec Phase-1 IKE Tunnel.	Notification PayloadsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.3.1.34
cikeTunStatus The status of the MIB table row. This object can be used to bring the tunnel down by setting value of this object to destroy(2). This object cannot be used to create a MIB table row.	TunnelStatusr/w Type Values: 1 active 2 destroy	.1.3.6.1.4.1.9.9.171.1.2.3.1.35

The IPsec Phase-1 Internet Key Exchange Peer
Association to IPsec Phase-2 Tunnel
Correlation Table. There is one entry in
this table for each active IPsec Phase-2
Tunnel.

cikePeerCorrEntry row .1.3.6.1.4.1.9.9.171.1.2.4.1

Each entry contains the attributes of an
IPsec Phase-1 IKE Peer Association to IPsec
Phase-2 Tunnel Correlation.

Indexes

cikePeerCorrLocalType cikePeerCorrLocalValue cikePeerCorrRemoteType cikePeerCorrRemoteValue cikePeerCorrIntIndex cikePeerCorrSeqNum

Column	Syntax	OID
cikePeerCorrLocalType The type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. a host name.	IkePeerType Type Values: 1 ipAddrPeer 2 namePeer	.1.3.6.1.4.1.9.9.171.1.2.4.1.1
cikePeerCorrLocalValue The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is a host name, then this …	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.9.9.171.1.2.4.1.2
cikePeerCorrRemoteType The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. a host name.	IkePeerType Type Values: 1 ipAddrPeer 2 namePeer	.1.3.6.1.4.1.9.9.171.1.2.4.1.3
cikePeerCorrRemoteValue The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is a host name, then t…	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.9.9.171.1.2.4.1.4
cikePeerCorrIntIndex The internal index of the local-remote peer association. This internal index is used to uniquely identify multiple associations between the local and remote peer.	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.9.9.171.1.2.4.1.5
cikePeerCorrSeqNum The sequence number of the local-remote peer association. This sequence number is used to uniquely identify multiple instances of an unique association between the local and remote peer.	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.9.9.171.1.2.4.1.6
cikePeerCorrIpSecTunIndex The index of the active IPsec Phase-2 Tunnel (cipSecTunIndex in the cipSecTunnelTable) for this IPsec Phase-1 IKE Peer Association.	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.9.9.171.1.2.4.1.7

Phase-1 IKE stats information is included in this table.
Each entry is related to a specific gateway which is 
identified by 'cmgwIndex'.

cikePhase1GWStatsEntry row .1.3.6.1.4.1.9.9.171.1.2.5.1

Each entry contains the attributes of an Phase-1 IKE stats
information for the related gateway.

There is only one entry for each gateway. The entry
is created when a gateway up and cannot be deleted.

Indexes

CISCO-MEDIA-GATEWAY-MIBcmgwIndex

Column	Syntax	OID
cikePhase1GWActiveTunnels The number of currently active IPsec Phase-1 IKE Tunnels.	SNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.5.1.1
cikePhase1GWPreviousTunnels The total number of previously active IPsec Phase-1 IKE Tunnels.	SAsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.5.1.2
cikePhase1GWInOctets The total number of octets received by all currently and previously active IPsec Phase-1 IKE Tunnels.	OctetsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.5.1.3
cikePhase1GWInPkts The total number of packets received by all currently and previously active IPsec Phase-1 IKE Tunnels.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.5.1.4
cikePhase1GWInDropPkts The total number of packets which were dropped during receive processing by all currently and previously active IPsec Phase-1 IKE Tunnels.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.5.1.5
cikePhase1GWInNotifys The total number of notifys received by all currently and previously active IPsec Phase-1 IKE Tunnels.	Notification PayloadsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.5.1.6
cikePhase1GWInP2Exchgs The total number of IPsec Phase-2 exchanges received by all currently and previously active IPsec Phase-1 IKE Tunnels.	SA PayloadsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.5.1.7
cikePhase1GWInP2ExchgInvalids The total number of IPsec Phase-2 exchanges which were received and found to be invalid by all currently and previously active IPsec Phase-1 IKE Tunnels.	SA PayloadsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.5.1.8
cikePhase1GWInP2ExchgRejects The total number of IPsec Phase-2 exchanges which were received and rejected by all currently and previously active IPsec Phase-1 IKE Tunnels.	SA PayloadsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.5.1.9
cikePhase1GWInP2SaDelRequests The total number of IPsec Phase-2 'Security Association' delete requests received by all currently and previously active and IPsec Phase-1 IKE Tunnels.	Notification PayloadsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.5.1.10
cikePhase1GWOutOctets The total number of octets sent by all currently and previously active and IPsec Phase-1 IKE Tunnels.	OctetsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.5.1.11
cikePhase1GWOutPkts The total number of packets sent by all currently and previously active and IPsec Phase-1 Tunnels.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.5.1.12
cikePhase1GWOutDropPkts The total number of packets which were dropped during send processing by all currently and previously active IPsec Phase-1 IKE Tunnels.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.5.1.13
cikePhase1GWOutNotifys The total number of notifys sent by all currently and previously active IPsec Phase-1 IKE Tunnels.	Notification PayloadsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.5.1.14
cikePhase1GWOutP2Exchgs The total number of IPsec Phase-2 exchanges which were sent by all currently and previously active IPsec Phase-1 IKE Tunnels.	SA PayloadsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.5.1.15
cikePhase1GWOutP2ExchgInvalids The total number of IPsec Phase-2 exchanges which were sent and found to be invalid by all currently and previously active IPsec Phase-1 Tunnels.	SA PayloadsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.5.1.16
cikePhase1GWOutP2ExchgRejects The total number of IPsec Phase-2 exchanges which were sent and rejected by all currently and previously active IPsec Phase-1 IKE Tunnels.	SA PayloadsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.5.1.17
cikePhase1GWOutP2SaDelRequests The total number of IPsec Phase-2 SA delete requests sent by all currently and previously active IPsec Phase-1 IKE Tunnels.	Notification PayloadsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.5.1.18
cikePhase1GWInitTunnels The total number of IPsec Phase-1 IKE Tunnels which were locally initiated.	SAsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.5.1.19
cikePhase1GWInitTunnelFails The total number of IPsec Phase-1 IKE Tunnels which were locally initiated and failed to activate.	SAsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.5.1.20
cikePhase1GWRespTunnelFails The total number of IPsec Phase-1 IKE Tunnels which were remotely initiated and failed to activate.	SAsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.5.1.21
cikePhase1GWSysCapFails The total number of system capacity failures which occurred during processing of all current and previously active IPsec Phase-1 IKE Tunnels.	FailuresSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.5.1.22
cikePhase1GWAuthFails The total number of authentications which ended in failure by all current and previous IPsec Phase-1 IKE Tunnels.	FailuresSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.5.1.23
cikePhase1GWDecryptFails The total number of decryptions which ended in failure by all current and previous IPsec Phase-1 IKE Tunnels.	FailuresSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.5.1.24
cikePhase1GWHashValidFails The total number of hash validations which ended in failure by all current and previous IPsec Phase-1 IKE Tunnels.	FailuresSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.5.1.25
cikePhase1GWNoSaFails The total number of non-existent 'Security Association' failures occurred during processing of current and previous IPsec Phase-1 IKE Tunnels.	FailuresSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.2.5.1.26

The IPsec Phase-2 Tunnel Table.
There is one entry in this table for 
each active IPsec Phase-2 Tunnel.

cipSecTunnelEntry row .1.3.6.1.4.1.9.9.171.1.3.2.1

Each entry contains the attributes
associated with an active IPsec Phase-2 Tunnel.

Indexes

cipSecTunIndex

Column	Syntax	OID
cipSecTunIndex The index of the IPsec Phase-2 Tunnel Table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The value of this object will wrap at 2,147,483,647.	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.9.9.171.1.3.2.1.1
cipSecTunIkeTunnelIndex The index of the associated IPsec Phase-1 IKE Tunnel. (cikeTunIndex in the cikeTunnelTable)	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.9.9.171.1.3.2.1.2
cipSecTunIkeTunnelAlive An indicator which specifies whether or not the IPsec Phase-1 IKE Tunnel currently exists.	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.9.9.171.1.3.2.1.3
cipSecTunLocalAddr The IP address of the local endpoint for the IPsec Phase-2 Tunnel.	IPSIpAddress Type Constraints: range: 4 range: 16	.1.3.6.1.4.1.9.9.171.1.3.2.1.4
cipSecTunRemoteAddr The IP address of the remote endpoint for the IPsec Phase-2 Tunnel.	IPSIpAddress Type Constraints: range: 4 range: 16	.1.3.6.1.4.1.9.9.171.1.3.2.1.5
cipSecTunKeyType The type of key used by the IPsec Phase-2 Tunnel.	KeyType Type Values: 1 ike 2 manual	.1.3.6.1.4.1.9.9.171.1.3.2.1.6
cipSecTunEncapMode The encapsulation mode used by the IPsec Phase-2 Tunnel.	EncapMode Type Values: 1 tunnel 2 transport	.1.3.6.1.4.1.9.9.171.1.3.2.1.7
cipSecTunLifeSize The negotiated LifeSize of the IPsec Phase-2 Tunnel in kilobytes.	KBytesInteger32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.9.9.171.1.3.2.1.8
cipSecTunLifeTime The negotiated LifeTime of the IPsec Phase-2 Tunnel in seconds.	SecondsInteger32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.9.9.171.1.3.2.1.9
cipSecTunActiveTime The length of time the IPsec Phase-2 Tunnel has been active in hundredths of seconds.	SNMPv2-TCTimeInterval Type Constraints: range: 0..2147483647 Description: A period of time, measured in units of 0.01 seconds.	.1.3.6.1.4.1.9.9.171.1.3.2.1.10
cipSecTunSaLifeSizeThreshold The security association LifeSize refresh threshold in kilobytes.	KBytesInteger32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.9.9.171.1.3.2.1.11
cipSecTunSaLifeTimeThreshold The security association LifeTime refresh threshold in seconds.	SecondsInteger32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.9.9.171.1.3.2.1.12
cipSecTunTotalRefreshes The total number of security association refreshes performed.	QM ExchangesSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.2.1.13
cipSecTunExpiredSaInstances The total number of security associations which have expired.	SAsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.2.1.14
cipSecTunCurrentSaInstances The number of security associations which are currently active or expiring.	SNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.2.1.15
cipSecTunInSaDiffHellmanGrp The Diffie Hellman Group used by the inbound security association of the IPsec Phase-2 Tunnel.	DiffHellmanGrp Type Values: 1 none 2 dhGroup1 3 dhGroup2	.1.3.6.1.4.1.9.9.171.1.3.2.1.16
cipSecTunInSaEncryptAlgo The encryption algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.	EncryptAlgo Type Values: 1 none 2 des 3 des3	.1.3.6.1.4.1.9.9.171.1.3.2.1.17
cipSecTunInSaAhAuthAlgo The authentication algorithm used by the inbound authentication header (AH) security association of the IPsec Phase-2 Tunnel.	AuthAlgo Type Values: 1 none 2 hmacMd5 3 hmacSha	.1.3.6.1.4.1.9.9.171.1.3.2.1.18
cipSecTunInSaEspAuthAlgo The authentication algorithm used by the inbound encapsulation security protocol (ESP) security association of the IPsec Phase-2 Tunnel.	AuthAlgo Type Values: 1 none 2 hmacMd5 3 hmacSha	.1.3.6.1.4.1.9.9.171.1.3.2.1.19
cipSecTunInSaDecompAlgo The decompression algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.	CompAlgo Type Values: 1 none 2 ldf	.1.3.6.1.4.1.9.9.171.1.3.2.1.20
cipSecTunOutSaDiffHellmanGrp The Diffie Hellman Group used by the outbound security association of the IPsec Phase-2 Tunnel.	DiffHellmanGrp Type Values: 1 none 2 dhGroup1 3 dhGroup2	.1.3.6.1.4.1.9.9.171.1.3.2.1.21
cipSecTunOutSaEncryptAlgo The encryption algorithm used by the outbound security association of the IPsec Phase-2 Tunnel.	EncryptAlgo Type Values: 1 none 2 des 3 des3	.1.3.6.1.4.1.9.9.171.1.3.2.1.22
cipSecTunOutSaAhAuthAlgo The authentication algorithm used by the outbound authentication header (AH) security association of the IPsec Phase-2 Tunnel.	AuthAlgo Type Values: 1 none 2 hmacMd5 3 hmacSha	.1.3.6.1.4.1.9.9.171.1.3.2.1.23
cipSecTunOutSaEspAuthAlgo The authentication algorithm used by the inbound encapsulation security protocol (ESP) security association of the IPsec Phase-2 Tunnel.	AuthAlgo Type Values: 1 none 2 hmacMd5 3 hmacSha	.1.3.6.1.4.1.9.9.171.1.3.2.1.24
cipSecTunOutSaCompAlgo The compression algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.	CompAlgo Type Values: 1 none 2 ldf	.1.3.6.1.4.1.9.9.171.1.3.2.1.25
cipSecTunInOctets The total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed. See also cipSecTunInOctWraps for the number of times thi…	OctetsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.2.1.26
cipSecTunHcInOctets A high capacity count of the total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed.	OctetsSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.171.1.3.2.1.27
cipSecTunInOctWraps The number of times the octets received counter (cipSecTunInOctets) has wrapped.	Integral unitsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.2.1.28
cipSecTunInDecompOctets The total number of decompressed octets received by this IPsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of cipSec…	OctetsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.2.1.29
cipSecTunHcInDecompOctets A high capacity count of the total number of decompressed octets received by this IPsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will matc…	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.171.1.3.2.1.30
cipSecTunInDecompOctWraps The number of times the decompressed octets received counter (cipSecTunInDecompOctets) has wrapped.	Integral unitsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.2.1.31
cipSecTunInPkts The total number of packets received by this IPsec Phase-2 Tunnel.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.2.1.32
cipSecTunInDropPkts The total number of packets dropped during receive processing by this IPsec Phase-2 Tunnel. This count does NOT include packets dropped due to Anti-Replay processing.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.2.1.33
cipSecTunInReplayDropPkts The total number of packets dropped during receive processing due to Anti-Replay processing by this IPsec Phase-2 Tunnel.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.2.1.34
cipSecTunInAuths The total number of inbound authentication's performed by this IPsec Phase-2 Tunnel.	EventsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.2.1.35
cipSecTunInAuthFails The total number of inbound authentication's which ended in failure by this IPsec Phase-2 Tunnel .	FailuresSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.2.1.36
cipSecTunInDecrypts The total number of inbound decryption's performed by this IPsec Phase-2 Tunnel.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.2.1.37
cipSecTunInDecryptFails The total number of inbound decryption's which ended in failure by this IPsec Phase-2 Tunnel.	FailuresSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.2.1.38
cipSecTunOutOctets The total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed. See also cipSecTunOutOctWraps for the number of times this cou…	OctetsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.2.1.39
cipSecTunHcOutOctets A high capacity count of the total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.171.1.3.2.1.40
cipSecTunOutOctWraps The number of times the out octets counter (cipSecTunOutOctets) has wrapped.	Integral unitsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.2.1.41
cipSecTunOutUncompOctets The total number of uncompressed octets sent by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of cipSecTunOut…	OctetsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.2.1.42
cipSecTunHcOutUncompOctets A high capacity count of the total number of uncompressed octets sent by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match …	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.171.1.3.2.1.43
cipSecTunOutUncompOctWraps The number of times the uncompressed octets sent counter (cipSecTunOutUncompOctets) has wrapped.	Integral unitsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.2.1.44
cipSecTunOutPkts The total number of packets sent by this IPsec Phase-2 Tunnel.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.2.1.45
cipSecTunOutDropPkts The total number of packets dropped during send processing by this IPsec Phase-2 Tunnel.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.2.1.46
cipSecTunOutAuths The total number of outbound authentication's performed by this IPsec Phase-2 Tunnel.	EventsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.2.1.47
cipSecTunOutAuthFails The total number of outbound authentication's which ended in failure by this IPsec Phase-2 Tunnel.	FailuresSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.2.1.48
cipSecTunOutEncrypts The total number of outbound encryption's performed by this IPsec Phase-2 Tunnel.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.2.1.49
cipSecTunOutEncryptFails The total number of outbound encryption's which ended in failure by this IPsec Phase-2 Tunnel.	FailuresSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.2.1.50
cipSecTunStatus The status of the MIB table row. This object can be used to bring the tunnel down by setting value of this object to destroy(2). When the value is set to destroy(2), the SA bundle is destroyed and this ro…	TunnelStatusr/w Type Values: 1 active 2 destroy	.1.3.6.1.4.1.9.9.171.1.3.2.1.51

The IPsec Phase-2 Tunnel Endpoint Table.
This table contains an entry for each 
active endpoint associated with an IPsec
 Phase-2 Tunnel.

cipSecEndPtEntry row .1.3.6.1.4.1.9.9.171.1.3.3.1

An IPsec Phase-2 Tunnel Endpoint entry.

Indexes

cipSecTunIndex cipSecEndPtIndex

Column	Syntax	OID
cipSecEndPtIndex The number of the Endpoint associated with the IPsec Phase-2 Tunnel Table. The value of this index is a number which begins at one and is incremented with each Endpoint associated with an IPsec Phase-2 Tunnel. The va…	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.9.9.171.1.3.3.1.1
cipSecEndPtLocalName The DNS name of the local Endpoint.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.9.9.171.1.3.3.1.2
cipSecEndPtLocalType The type of identity for the local Endpoint. Possible values are: 1) a single IP address, or 2) an IP address range, or 3) an IP subnet.	EndPtType Type Values: 1 singleIpAddr 2 ipAddrRange 3 ipSubnet	.1.3.6.1.4.1.9.9.171.1.3.3.1.3
cipSecEndPtLocalAddr1 The local Endpoint's first IP address specification. If the local Endpoint type is single IP address, then this is the value of the IP address. If the local Endpoint type is IP subnet, the…	IPSIpAddress Type Constraints: range: 4 range: 16	.1.3.6.1.4.1.9.9.171.1.3.3.1.4
cipSecEndPtLocalAddr2 The local Endpoint's second IP address specification. If the local Endpoint type is single IP address, then this is the value of the IP address. If the local Endpoint type is IP subnet, th…	IPSIpAddress Type Constraints: range: 4 range: 16	.1.3.6.1.4.1.9.9.171.1.3.3.1.5
cipSecEndPtLocalProtocol The protocol number of the local Endpoint's traffic.	Integer32 Constraints: range: 0-255	.1.3.6.1.4.1.9.9.171.1.3.3.1.6
cipSecEndPtLocalPort The port number of the local Endpoint's traffic.	Integer32 Constraints: range: 0-65535	.1.3.6.1.4.1.9.9.171.1.3.3.1.7
cipSecEndPtRemoteName The DNS name of the remote Endpoint.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.9.9.171.1.3.3.1.8
cipSecEndPtRemoteType The type of identity for the remote Endpoint. Possible values are: 1) a single IP address, or 2) an IP address range, or 3) an IP subnet.	EndPtType Type Values: 1 singleIpAddr 2 ipAddrRange 3 ipSubnet	.1.3.6.1.4.1.9.9.171.1.3.3.1.9
cipSecEndPtRemoteAddr1 The remote Endpoint's first IP address specification. If the remote Endpoint type is single IP address, then this is the value of the IP address. If the remote Endpoint type is IP subnet, …	IPSIpAddress Type Constraints: range: 4 range: 16	.1.3.6.1.4.1.9.9.171.1.3.3.1.10
cipSecEndPtRemoteAddr2 The remote Endpoint's second IP address specification. If the remote Endpoint type is single IP address, then this is the value of the IP address. If the remote Endpoint type is IP subnet,…	IPSIpAddress Type Constraints: range: 4 range: 16	.1.3.6.1.4.1.9.9.171.1.3.3.1.11
cipSecEndPtRemoteProtocol The protocol number of the remote Endpoint's traffic.	Integer32 Constraints: range: 0-255	.1.3.6.1.4.1.9.9.171.1.3.3.1.12
cipSecEndPtRemotePort The port number of the remote Endpoint's traffic.	Integer32 Constraints: range: 0-65535	.1.3.6.1.4.1.9.9.171.1.3.3.1.13

The IPsec Phase-2 Security Protection Index Table.
This table contains an entry for each active 
and expiring security
 association.

cipSecSpiEntry row .1.3.6.1.4.1.9.9.171.1.3.4.1

Each entry contains the attributes associated with
active and expiring IPsec Phase-2
security associations.

Indexes

cipSecTunIndex cipSecSpiIndex

Column	Syntax	OID
cipSecSpiIndex The number of the SPI associated with the Phase-2 Tunnel Table. The value of this index is a number which begins at one and is incremented with each SPI associated with an IPsec Phase-2 Tunnel. The value of this o…	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.9.9.171.1.3.4.1.1
cipSecSpiDirection The direction of the SPI.	Enumeration Enumerated Values: 1 in 2 out	.1.3.6.1.4.1.9.9.171.1.3.4.1.2
cipSecSpiValue The value of the SPI.	Unsigned32 Constraints: range: 1-4294967295	.1.3.6.1.4.1.9.9.171.1.3.4.1.3
cipSecSpiProtocol The protocol of the SPI.	Enumeration Enumerated Values: 1 ah 2 esp 3 ipcomp	.1.3.6.1.4.1.9.9.171.1.3.4.1.4
cipSecSpiStatus The status of the SPI.	Enumeration Enumerated Values: 1 active 2 expiring	.1.3.6.1.4.1.9.9.171.1.3.4.1.5

Phase-2 IPsec stats information is included in this table.
Each entry is related to a specific gateway which is 
identified by 'cmgwIndex'

cipSecPhase2GWStatsEntry row .1.3.6.1.4.1.9.9.171.1.3.5.1

Each entry contains the attributes of an Phase-2 IPsec stats
information for the related gateway.

There is only one entry for each gateway. The entry
is created when a gateway up and cannot be deleted.

Indexes

CISCO-MEDIA-GATEWAY-MIBcmgwIndex

Column	Syntax	OID
cipSecPhase2GWActiveTunnels The total number of currently active IPsec Phase-2 Tunnels.	SNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.5.1.1
cipSecPhase2GWPreviousTunnels The total number of previously active IPsec Phase-2 Tunnels.	Phase-2 TunnelsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.5.1.2
cipSecPhase2GWInOctets The total number of octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE determining whether or not the packet should be decompressed. See also cipSecGlobalInOctWraps fo…	OctetsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.5.1.3
cipSecPhase2GWInOctWraps The number of times the global octets received counter (cipSecGlobalInOctets) has wrapped.	Integral unitsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.5.1.4
cipSecPhase2GWInDecompOctets The total number of decompressed octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match…	OctetsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.5.1.5
cipSecPhase2GWInDecompOctWraps The number of times the global decompressed octets received counter (cipSecGlobalInDecompOctets) has wrapped.	Integral unitsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.5.1.6
cipSecPhase2GWInPkts The total number of packets received by all current and previous IPsec Phase-2 Tunnels.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.5.1.7
cipSecPhase2GWInDrops The total number of packets dropped during receive processing by all current and previous IPsec Phase-2 Tunnels. This count does NOT include packets dropped due to Anti-Replay processing.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.5.1.8
cipSecPhase2GWInReplayDrops The total number of packets dropped during receive processing due to Anti-Replay processing by all current and previous IPsec Phase-2 Tunnels.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.5.1.9
cipSecPhase2GWInAuths The total number of inbound authentication's performed by all current and previous IPsec Phase-2 Tunnels.	EventsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.5.1.10
cipSecPhase2GWInAuthFails The total number of inbound authentication's which ended in failure by all current and previous IPsec Phase-2 Tunnels.	FailuresSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.5.1.11
cipSecPhase2GWInDecrypts The total number of inbound decryption's performed by all current and previous IPsec Phase-2 Tunnels.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.5.1.12
cipSecPhase2GWInDecryptFails The total number of inbound decryption's which ended in failure by all current and previous IPsec Phase-2 Tunnels.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.5.1.13
cipSecPhase2GWOutOctets The total number of octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER determining whether or not the packet should be compressed. See also cipSecGlobalOutOctWraps for th…	OctetsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.5.1.14
cipSecPhase2GWOutOctWraps The number of times the global octets sent counter (cipSecGlobalOutOctets) has wrapped.	Integral unitsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.5.1.15
cipSecPhase2GWOutUncompOctets The total number of uncompressed octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the …	OctetsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.5.1.16
cipSecPhase2GWOutUncompOctWraps The number of times the global uncompressed octets sent counter (cipSecGlobalOutUncompOctets) has wrapped.	Integral unitsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.5.1.17
cipSecPhase2GWOutPkts The total number of packets sent by all current and previous IPsec Phase-2 Tunnels.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.5.1.18
cipSecPhase2GWOutDrops The total number of packets dropped during send processing by all current and previous IPsec Phase-2 Tunnels.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.5.1.19
cipSecPhase2GWOutAuths The total number of outbound authentication's performed by all current and previous IPsec Phase-2 Tunnels.	EventsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.5.1.20
cipSecPhase2GWOutAuthFails The total number of outbound authentication's which ended in failure by all current and previous IPsec Phase-2 Tunnels.	FailuresSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.5.1.21
cipSecPhase2GWOutEncrypts The total number of outbound encryption's performed by all current and previous IPsec Phase-2 Tunnels.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.5.1.22
cipSecPhase2GWOutEncryptFails The total number of outbound encryption's which ended in failure by all current and previous IPsec Phase-2 Tunnels.	FailuresSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.5.1.23
cipSecPhase2GWProtocolUseFails The total number of protocol use failures which occurred during processing of all current and previously active IPsec Phase-2 Tunnels.	FailuresSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.5.1.24
cipSecPhase2GWNoSaFails The total number of non-existent Security Association in failures which occurred during processing of all current and previous IPsec Phase-2 Tunnels.	FailuresSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.5.1.25
cipSecPhase2GWSysCapFails The total number of system capacity failures which occurred during processing of all current and previously active IPsec Phase-2 Tunnels.	FailuresSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.3.5.1.26

The IPsec Phase-1 Internet Key Exchange Tunnel
History Table.  This table is implemented as a 
sliding window in which only the last n entries 
are maintained.  The maximum number of entries
 is specified by the cipSecHistTableSize object.

cikeTunnelHistEntry row .1.3.6.1.4.1.9.9.171.1.4.2.1.1

Each entry contains the attributes
associated with a previously active IPsec
Phase-1 IKE Tunnel.

Indexes

cikeTunHistIndex

Column	Syntax	OID
cikeTunHistIndex The index of the IPsec Phase-1 IKE Tunnel History Table. The value of the index is a number which begins at one and is incremented with each tunnel that ends. The value of this object will wrap at 2,147,483,647.	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.1
cikeTunHistTermReason The reason the IPsec Phase-1 IKE Tunnel was terminated. Possible reasons include: 1 = other 2 = normal termination 3 = operator request 4 = peer delete request was received 5 = contact with peer was lost 6 = local failu…	Enumeration Enumerated Values: 1 other 2 normal 3 operRequest 4 peerDelRequest 5 peerLost 6 localFailure 7 checkPointReg	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.2
cikeTunHistActiveIndex The index of the previously active IPsec Phase-1 IKE Tunnel.	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.3
cikeTunHistPeerLocalType The type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. a host name.	IkePeerType Type Values: 1 ipAddrPeer 2 namePeer	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.4
cikeTunHistPeerLocalValue The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is a host name, then this …	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.5
cikeTunHistPeerIntIndex The internal index of the local-remote peer association. This internal index is used to uniquely identify multiple associations between the local and remote peer.	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.6
cikeTunHistPeerRemoteType The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. a host name.	IkePeerType Type Values: 1 ipAddrPeer 2 namePeer	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.7
cikeTunHistPeerRemoteValue The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is a host name, then t…	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.8
cikeTunHistLocalAddr The IP address of the local endpoint for the IPsec Phase-1 IKE Tunnel.	IPSIpAddress Type Constraints: range: 4 range: 16	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.9
cikeTunHistLocalName The DNS name of the local IP address for the IPsec Phase-1 IKE Tunnel. If the DNS name associated with the local tunnel endpoint is not known, then the value of this object will be a NULL string.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.10
cikeTunHistRemoteAddr The IP address of the remote endpoint for the IPsec Phase-1 IKE Tunnel.	IPSIpAddress Type Constraints: range: 4 range: 16	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.11
cikeTunHistRemoteName The DNS name of the remote IP address of IPsec Phase-1 IKE Tunnel. If the DNS name associated with the remote tunnel endpoint is not known, then the value of this object will be a NULL string.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.12
cikeTunHistNegoMode The negotiation mode of the IPsec Phase-1 IKE Tunnel.	IkeNegoMode Type Values: 1 main 2 aggressive	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.13
cikeTunHistDiffHellmanGrp The Diffie Hellman Group used in IPsec Phase-1 IKE negotiations.	DiffHellmanGrp Type Values: 1 none 2 dhGroup1 3 dhGroup2	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.14
cikeTunHistEncryptAlgo The encryption algorithm used in IPsec Phase-1 IKE negotiations.	EncryptAlgo Type Values: 1 none 2 des 3 des3	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.15
cikeTunHistHashAlgo The hash algorithm used in IPsec Phase-1 IKE negotiations.	IkeHashAlgo Type Values: 1 none 2 md5 3 sha	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.16
cikeTunHistAuthMethod The authentication method used in IPsec Phase-1 IKE negotiations.	IkeAuthMethod Type Values: 1 none 2 preSharedKey 3 rsaSig 4 rsaEncrypt 5 revPublicKey	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.17
cikeTunHistLifeTime The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel in seconds.	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.18
cikeTunHistStartTime The value of sysUpTime in hundredths of seconds when the IPsec Phase-1 IKE tunnel was started.	SNMPv2-TCTimeStamp Based On: SNMPv2-SMITimeTicks Description: The value of the sysUpTime object at which a specific occurrence happened. The specific occurrence must be defined in the description of any object defined using this type. If sysUpTime is reset t…	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.19
cikeTunHistActiveTime The length of time the IPsec Phase-1 IKE tunnel was been active in hundredths of seconds.	SNMPv2-TCTimeInterval Type Constraints: range: 0..2147483647 Description: A period of time, measured in units of 0.01 seconds.	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.20
cikeTunHistTotalRefreshes The total number of security associations refreshes performed.	QM ExchangesSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.21
cikeTunHistTotalSas The total number of security associations used during the life of the IPsec Phase-1 IKE Tunnel.	SAsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.22
cikeTunHistInOctets The total number of octets received by this IPsec Phase-1 IKE Tunnel.	OctetsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.23
cikeTunHistInPkts The total number of packets received by this IPsec Phase-1 IKE Tunnel.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.24
cikeTunHistInDropPkts The total number of packets dropped by this IPsec Phase-1 IKE Tunnel during receive processing.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.25
cikeTunHistInNotifys The total number of notifys received by this IPsec Phase-1 IKE Tunnel.	Notification PayloadsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.26
cikeTunHistInP2Exchgs The total number of IPsec Phase-2 exchanges received by this IPsec Phase-1 IKE Tunnel.	SA PayloadsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.27
cikeTunHistInP2ExchgInvalids The total number of IPsec Phase-2 exchanges received and found to be invalid by this IPsec Phase-1 IKE Tunnel.	SA PayloadsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.28
cikeTunHistInP2ExchgRejects The total number of IPsec Phase-2 exchanges received and rejected by this IPsec Phase-1 IKE Tunnel.	SA PayloadsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.29
cikeTunHistInP2SaDelRequests The total number of IPsec Phase-2 security association delete requests received by this IPsec Phase-1 IKE Tunnel.	Notification PayloadsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.30
cikeTunHistOutOctets The total number of octets sent by this IPsec Phase-1 IKE Tunnel.	OctetsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.31
cikeTunHistOutPkts The total number of packets sent by this IPsec Phase-1 IKE Tunnel.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.32
cikeTunHistOutDropPkts The total number of packets dropped by this IPsec Phase-1 IKE Tunnel during send processing.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.33
cikeTunHistOutNotifys The total number of notifys sent by this IPsec Phase-1 IKE Tunnel.	Notification PayloadsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.34
cikeTunHistOutP2Exchgs The total number of IPsec Phase-2 exchanges sent by this IPsec Phase-1 IKE Tunnel.	SA PayloadsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.35
cikeTunHistOutP2ExchgInvalids The total number of IPsec Phase-2 exchanges sent and found to be invalid by this IPsec Phase-1 IKE Tunnel.	SA PayloadsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.36
cikeTunHistOutP2ExchgRejects The total number of IPsec Phase-2 exchanges sent and rejected by this IPsec Phase-1 IKE Tunnel.	SA PayloadsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.37
cikeTunHistOutP2SaDelRequests The total number of IPsec Phase-2 security association delete requests sent by this IPsec Phase-1 IKE Tunnel.	Notification PayloadsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.2.1.1.38

The IPsec Phase-2 Tunnel History Table.
This table is implemented as a sliding 
window in which only the
last n entries are maintained.  The maximum number 
of entries
is specified by the cipSecHistTableSize object.

cipSecTunnelHistEntry row .1.3.6.1.4.1.9.9.171.1.4.3.1.1

Each entry contains the attributes associated with
a previously active IPsec Phase-2 Tunnel.

Indexes

cipSecTunHistIndex

Column	Syntax	OID
cipSecTunHistIndex The index of the IPsec Phase-2 Tunnel History Table. The value of the index is a number which begins at one and is incremented with each tunnel that ends. The value of this object will wrap at 2,147,483,647.	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.1
cipSecTunHistTermReason The reason the IPsec Phase-2 Tunnel was terminated. Possible reasons include: 1 = other 2 = normal termination 3 = operator request 4 = peer delete request was received 5 = contact with peer was lost 6 = local failure o…	Enumeration Enumerated Values: 1 other 2 normal 3 operRequest 4 peerDelRequest 5 peerLost 6 seqNumRollOver 7 checkPointReq	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.2
cipSecTunHistActiveIndex The index of the previously active IPsec Phase-2 Tunnel.	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.3
cipSecTunHistIkeTunnelIndex The index of the associated IPsec Phase-1 Tunnel (cikeTunIndex in the cikeTunnelTable).	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.4
cipSecTunHistLocalAddr The IP address of the local endpoint for the IPsec Phase-2 Tunnel.	IPSIpAddress Type Constraints: range: 4 range: 16	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.5
cipSecTunHistRemoteAddr The IP address of the remote endpoint for the IPsec Phase-2 Tunnel.	IPSIpAddress Type Constraints: range: 4 range: 16	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.6
cipSecTunHistKeyType The type of key used by the IPsec Phase-2 Tunnel.	KeyType Type Values: 1 ike 2 manual	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.7
cipSecTunHistEncapMode The encapsulation mode used by the IPsec Phase-2 Tunnel.	EncapMode Type Values: 1 tunnel 2 transport	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.8
cipSecTunHistLifeSize The negotiated LifeSize of the IPsec Phase-2 Tunnel in kilobytes.	KBytesInteger32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.9
cipSecTunHistLifeTime The negotiated LifeTime of the IPsec Phase-2 Tunnel in seconds.	SecondsInteger32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.10
cipSecTunHistStartTime The value of sysUpTime in hundredths of seconds when the IPsec Phase-2 Tunnel was started.	SNMPv2-TCTimeStamp Based On: SNMPv2-SMITimeTicks Description: The value of the sysUpTime object at which a specific occurrence happened. The specific occurrence must be defined in the description of any object defined using this type. If sysUpTime is reset t…	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.11
cipSecTunHistActiveTime The length of time the IPsec Phase-2 Tunnel has been active in hundredths of seconds.	SNMPv2-TCTimeInterval Type Constraints: range: 0..2147483647 Description: A period of time, measured in units of 0.01 seconds.	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.12
cipSecTunHistTotalRefreshes The total number of security association refreshes performed.	QM ExchangesSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.13
cipSecTunHistTotalSas The total number of security associations used during the life of the IPsec Phase-2 Tunnel.	SAsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.14
cipSecTunHistInSaDiffHellmanGrp The Diffie Hellman Group used by the inbound security association of the IPsec Phase-2 Tunnel.	DiffHellmanGrp Type Values: 1 none 2 dhGroup1 3 dhGroup2	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.15
cipSecTunHistInSaEncryptAlgo The encryption algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.	EncryptAlgo Type Values: 1 none 2 des 3 des3	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.16
cipSecTunHistInSaAhAuthAlgo The authentication algorithm used by the inbound authentication header (AH) security association of the IPsec Phase-2 Tunnel.	AuthAlgo Type Values: 1 none 2 hmacMd5 3 hmacSha	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.17
cipSecTunHistInSaEspAuthAlgo The authentication algorithm used by the inbound encapsulation security protocol (ESP) security association of the IPsec Phase-2 Tunnel.	AuthAlgo Type Values: 1 none 2 hmacMd5 3 hmacSha	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.18
cipSecTunHistInSaDecompAlgo The decompression algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.	CompAlgo Type Values: 1 none 2 ldf	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.19
cipSecTunHistOutSaDiffHellmanGrp The Diffie Hellman Group used by the outbound security association of the IPsec Phase-2 Tunnel.	DiffHellmanGrp Type Values: 1 none 2 dhGroup1 3 dhGroup2	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.20
cipSecTunHistOutSaEncryptAlgo The encryption algorithm used by the outbound security association of the IPsec Phase-2 Tunnel.	EncryptAlgo Type Values: 1 none 2 des 3 des3	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.21
cipSecTunHistOutSaAhAuthAlgo The authentication algorithm used by the outbound authentication header (AH) security association of the IPsec Phase-2 Tunnel.	AuthAlgo Type Values: 1 none 2 hmacMd5 3 hmacSha	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.22
cipSecTunHistOutSaEspAuthAlgo The authentication algorithm used by the inbound encapsulation security protocol (ESP) security association of the IPsec Phase-2 Tunnel.	AuthAlgo Type Values: 1 none 2 hmacMd5 3 hmacSha	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.23
cipSecTunHistOutSaCompAlgo The compression algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.	CompAlgo Type Values: 1 none 2 ldf	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.24
cipSecTunHistInOctets The total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed. See also cipSecTunInOctWraps for the number of times t…	OctetsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.25
cipSecTunHistHcInOctets A high capacity count of the total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.26
cipSecTunHistInOctWraps The number of times the octets received counter (cipSecTunInOctets) has wrapped.	Integral unitsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.27
cipSecTunHistInDecompOctets The total number of decompressed octets received by this IPsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of cipSecTunH…	OctetsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.28
cipSecTunHistHcInDecompOctets A high capacity count of the total number of decompressed octets received by this IPsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will matc…	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.29
cipSecTunHistInDecompOctWraps The number of times the decompressed octets received counter (cipSecTunInDecompOctets) has wrapped.	Integral unitsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.30
cipSecTunHistInPkts The total number of packets received by this IPsec Phase-2 Tunnel.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.31
cipSecTunHistInDropPkts The total number of packets dropped during receive processing by this IPsec Phase-2 Tunnel. This count does NOT include packets dropped due to Anti-Replay processing.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.32
cipSecTunHistInReplayDropPkts The total number of packets dropped during receive processing due to Anti-Replay processing by this IPsec Phase-2 Tunnel.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.33
cipSecTunHistInAuths The total number of inbound authentication's performed by this IPsec Phase-2 Tunnel.	EventsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.34
cipSecTunHistInAuthFails The total number of inbound authentication's which ended in failure by this IPsec Phase-2 Tunnel .	FailuresSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.35
cipSecTunHistInDecrypts The total number of inbound decryption's performed by this IPsec Phase-2 Tunnel.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.36
cipSecTunHistInDecryptFails The total number of inbound decryption's which ended in failure by this IPsec Phase-2 Tunnel.	FailuresSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.37
cipSecTunHistOutOctets The total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed. See also cipSecTunOutOctWraps for the number of times this cou…	OctetsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.38
cipSecTunHistHcOutOctets A high capacity count of the total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.39
cipSecTunHistOutOctWraps The number of times the octets sent counter (cipSecTunOutOctets) has wrapped.	Integral unitsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.40
cipSecTunHistOutUncompOctets The total number of uncompressed octets sent by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of cipSecTunHistO…	OctetsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.41
cipSecTunHistHcOutUncompOctets A high capacity count of the total number of uncompressed octets sent by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match t…	OctetsSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.42
cipSecTunHistOutUncompOctWraps The number of times the uncompressed octets sent counter (cipSecTunOutUncompOctets) has wrapped.	Integral unitsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.43
cipSecTunHistOutPkts The total number of packets sent by this IPsec Phase-2 Tunnel.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.44
cipSecTunHistOutDropPkts The total number of packets dropped during send processing by this IPsec Phase-2 Tunnel.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.45
cipSecTunHistOutAuths The total number of outbound authentication's performed by this IPsec Phase-2 Tunnel.	EventsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.46
cipSecTunHistOutAuthFails The total number of outbound authentication's which ended in failure by this IPsec Phase-2 Tunnel.	FailuresSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.47
cipSecTunHistOutEncrypts The total number of outbound encryption's performed by this IPsec Phase-2 Tunnel.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.48
cipSecTunHistOutEncryptFails The total number of outbound encryption's which ended in failure by this IPsec Phase-2 Tunnel.	FailuresSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.171.1.4.3.1.1.49

The IPsec Phase-2 Tunnel Endpoint History Table.
This table is implemented as a 
sliding window in which only the
last n entries are maintained.  
The maximum number of entries
is specified by the cipSecHistTableSize object.

cipSecEndPtHistEntry row .1.3.6.1.4.1.9.9.171.1.4.3.2.1

Each entry contains the attributes associated with
a previously active IPsec Phase-2 Tunnel Endpoint.

Indexes

cipSecEndPtHistIndex

Column	Syntax	OID
cipSecEndPtHistIndex The number of the previously active Endpoint associated with a IPsec Phase-2 Tunnel Table. The value of this index is a number which begins at one and is incremented with each Endpoint associated with an IPsec P…	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.9.9.171.1.4.3.2.1.1
cipSecEndPtHistTunIndex The index of the previously active IPsec Phase-2 Tunnel Table.	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.9.9.171.1.4.3.2.1.2
cipSecEndPtHistActiveIndex The index of the previously active Endpoint.	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.9.9.171.1.4.3.2.1.3
cipSecEndPtHistLocalName The DNS name of the local Endpoint.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.9.9.171.1.4.3.2.1.4
cipSecEndPtHistLocalType The type of identity for the local Endpoint. Possible values are: 1) a single IP address, or 2) an IP address range, or 3) an IP subnet.	EndPtType Type Values: 1 singleIpAddr 2 ipAddrRange 3 ipSubnet	.1.3.6.1.4.1.9.9.171.1.4.3.2.1.5
cipSecEndPtHistLocalAddr1 The local Endpoint's first IP address specification. If the local Endpoint type is single IP address, then this is the value of the IP address. If the local Endpoint type is IP subnet, the…	IPSIpAddress Type Constraints: range: 4 range: 16	.1.3.6.1.4.1.9.9.171.1.4.3.2.1.6
cipSecEndPtHistLocalAddr2 The local Endpoint's second IP address specification. If the local Endpoint type is single IP address, then this is the value of the IP address. If the local Endpoint type is IP subnet, th…	IPSIpAddress Type Constraints: range: 4 range: 16	.1.3.6.1.4.1.9.9.171.1.4.3.2.1.7
cipSecEndPtHistLocalProtocol The protocol number of the local Endpoint's traffic.	Integer32 Constraints: range: 0-255	.1.3.6.1.4.1.9.9.171.1.4.3.2.1.8
cipSecEndPtHistLocalPort The port number of the local Endpoint's traffic.	Integer32 Constraints: range: 0-65535	.1.3.6.1.4.1.9.9.171.1.4.3.2.1.9
cipSecEndPtHistRemoteName The DNS name of the remote Endpoint.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.9.9.171.1.4.3.2.1.10
cipSecEndPtHistRemoteType The type of identity for the remote Endpoint. Possible values are: 1) a single IP address, or 2) an IP address range, or 3) an IP subnet.	EndPtType Type Values: 1 singleIpAddr 2 ipAddrRange 3 ipSubnet	.1.3.6.1.4.1.9.9.171.1.4.3.2.1.11
cipSecEndPtHistRemoteAddr1 The remote Endpoint's first IP address specification. If the remote Endpoint type is single IP address, then this is the value of the IP address. If the remote Endpoint type is IP subnet, …	IPSIpAddress Type Constraints: range: 4 range: 16	.1.3.6.1.4.1.9.9.171.1.4.3.2.1.12
cipSecEndPtHistRemoteAddr2 The remote Endpoint's second IP address specification. If the remote Endpoint type is single IP address, then this is the value of the IP address. If the remote Endpoint type is IP subnet,…	IPSIpAddress Type Constraints: range: 4 range: 16	.1.3.6.1.4.1.9.9.171.1.4.3.2.1.13
cipSecEndPtHistRemoteProtocol The protocol number of the remote Endpoint's traffic.	Integer32 Constraints: range: 0-255	.1.3.6.1.4.1.9.9.171.1.4.3.2.1.14
cipSecEndPtHistRemotePort The port number of the remote Endpoint's traffic.	Integer32 Constraints: range: 0-65535	.1.3.6.1.4.1.9.9.171.1.4.3.2.1.15

The IPsec Phase-1 Failure Table.
This table is implemented as a sliding 
window in which only the last n entries are 
maintained.  The maximum number of entries
is specified by the cipSecFailTableSize object.

cikeFailEntry row .1.3.6.1.4.1.9.9.171.1.5.2.1.1

Each entry contains the attributes associated
with
an IPsec Phase-1 failure.

Indexes

cikeFailIndex

Column	Syntax	OID
cikeFailIndex The IPsec Phase-1 Failure Table index. The value of the index is a number which begins at one and is incremented with each IPsec Phase-1 failure. The value of this object will wrap at 2,147,483,647.	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.9.9.171.1.5.2.1.1.1
cikeFailReason The reason for the failure. Possible reasons include: 1 = other 2 = peer delete request was received 3 = contact with peer was lost 4 = local failure occurred 5 = authentication failure 6 = hash validation failure 7 = …	Enumeration Enumerated Values: 1 other 2 peerDelRequest 3 peerLost 4 localFailure 5 authFailure 6 hashValidation 7 encryptFailure 8 internalError 9 sysCapExceeded 10 proposalFailure 11 peerCertUnavailable 12 peerCertNotValid 13 localCertExpired 14 crlFailure 15 peerEncodingError 16 nonExistentSa 17 operRequest	.1.3.6.1.4.1.9.9.171.1.5.2.1.1.2
cikeFailTime The value of sysUpTime in hundredths of seconds at the time of the failure.	SNMPv2-TCTimeStamp Based On: SNMPv2-SMITimeTicks Description: The value of the sysUpTime object at which a specific occurrence happened. The specific occurrence must be defined in the description of any object defined using this type. If sysUpTime is reset t…	.1.3.6.1.4.1.9.9.171.1.5.2.1.1.3
cikeFailLocalType The type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. a host name.	IkePeerType Type Values: 1 ipAddrPeer 2 namePeer	.1.3.6.1.4.1.9.9.171.1.5.2.1.1.4
cikeFailLocalValue The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is a host name, then this …	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.9.9.171.1.5.2.1.1.5
cikeFailRemoteType The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. a host name.	IkePeerType Type Values: 1 ipAddrPeer 2 namePeer	.1.3.6.1.4.1.9.9.171.1.5.2.1.1.6
cikeFailRemoteValue The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is a host name, then t…	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.9.9.171.1.5.2.1.1.7
cikeFailLocalAddr The IP address of the local peer.	IPSIpAddress Type Constraints: range: 4 range: 16	.1.3.6.1.4.1.9.9.171.1.5.2.1.1.8
cikeFailRemoteAddr The IP address of the remote peer.	IPSIpAddress Type Constraints: range: 4 range: 16	.1.3.6.1.4.1.9.9.171.1.5.2.1.1.9