CISCO-IPSEC-SIGNALING-MIB Table View

Table-centric layout grouping table, row, and column objects.

Standard view Table view

Tables

Rows

Columns

cisgIpsSgGlobalStatsTable

table

.1.3.6.1.4.1.9.9.438.1.1.1 · 1 row entry · 24 columns

Open in standard view

Uses the cisco variant from /opt/observium/mibs/cisco.

Command help

Walk cisgIpsSgGlobalStatsTable

/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'CISCO-IPSEC-SIGNALING-MIB' -M '/opt/observium/mibs/cisco:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'CISCO-IPSEC-SIGNALING-MIB::cisgIpsSgGlobalStatsTable'

This Signaling Protocol global statistics table.
There is one row in the following table for each
signaling protocol implemented by the managed entity.
          
There is no row corresponding to the instance
'cpNone'.
          
If the managed entity implements more than one
signaling protocol, the aggregate statistics
across all the supported signaling protocols 
must be computed by the network management station 
manually; in other words, there is no conceptual row
in this table corresponding to 'all signaling protocols'.

cisgIpsSgGlobalStatsEntry row .1.3.6.1.4.1.9.9.438.1.1.1.1

Each entry contains the global statistics pertaining
to a specific signaling protocol.

Indexes

cisgIpsSgProtocol

Column Syntax OID

cisgIpsSgProtocol

The identity of the signaling protocol used by the
control tunnel corresponding to this conceptual row.

CISCO-IPSEC-TCCIPsecControlProtocol

Type Values:

1	cpUnknown
2	cpAll
3	cpOther
4	cpManual
5	cpIkev1
6	cpIkev2
7	cpKink
8	cpPhoturis

.1.3.6.1.4.1.9.9.438.1.1.1.1.1

cisgIpsSgGlobalActiveTunnels

The number of currently active Phase-1
control tunnels.

SNMPv2-SMIGauge32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.9.9.438.1.1.1.1.2

cisgIpsSgGlobalPreviousTunnels

High capacity counter to accumulate the
total number of Phase-1 control tunnels that
are no longer active.

SAsSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.1.1.1.3

cisgIpsSgGlobalInOctets

The total number of octets received by all
currently and previously active Phase-1
Control Tunnels.

OctetsSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.1.1.1.4

cisgIpsSgGlobalInPkts

The total number of packets received by all currently
and previously active Phase-1 Control Tunnels.

PacketsSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.1.1.1.5

cisgIpsSgGlobalInDropPkts

The total number of packets which were dropped
during receive processing by all currently and
previously active Phase-1 Control Tunnels.

PacketsSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.1.1.1.6

cisgIpsSgGlobalInNotifys

The total number of notification payloads received by all
currently and previously active Phase-1 Control Tunnels.

Notification PayloadsSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.1.1.1.7

cisgIpsSgGlobalInP2SaDelReqs

The total number of Phase-2 security association delete
requests received by all currently and previously
active and Phase-1 Control Tunnels.

Notification PayloadsSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.1.1.1.8

cisgIpsSgGlobalOutOctets

The total number of octets sent by all currently
and previously active and Phase-1 Control
Tunnels.

OctetsSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.1.1.1.9

cisgIpsSgGlobalOutPkts

The total number of packets sent by all currently
and previously active and Phase-1 Control Tunnels.

PacketsSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.1.1.1.10

cisgIpsSgGlobalOutDropPkts

The total number of packets which were dropped
during send processing by all currently and previously
active Phase-1 Control Tunnels.

PacketsSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.1.1.1.11

cisgIpsSgGlobalOutNotifys

The total number of notification payloads sent by all
currently and previously active Phase-1 Control Tunnels.

Notification PayloadsSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.1.1.1.12

cisgIpsSgGlobalOutP2SaDelReqs

The total number of Phase-2 tunnel delete requests
sent by all currently and previously active Phase-1
Control Tunnels.

Notification PayloadsSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.1.1.1.13

cisgIpsSgGlobalInitTunnels

The total number of Phase-1 currently and previously active
Control Tunnels which were locally initiated.

SAsSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.1.1.1.14

cisgIpsSgGlobalInitTunnelFails

The total number of Phase-1 currently and previously active
Control Tunnels which were locally initiated and
failed to activate.

SAsSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.1.1.1.15

cisgIpsSgGlobalRespTunnels

The total number of Phase-1 currently and previously active
Control Tunnels which were remotely initiated.

SAsSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.1.1.1.16

cisgIpsSgGlobalRespTunnelFails

The total number of Phase-1 currently and previously active
Control Tunnels which were remotely initiated and failed
to activate.

SAsSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.1.1.1.17

cisgIpsSgGlobalSysCapFails

The total number of system capacity failures
which occurred during processing of all current
and previously active Phase-1 Control Tunnels.

FailuresSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.1.1.1.18

cisgIpsSgGlobalAuthFails

The total number of authentications which ended
in failure by all current and previous Phase-1
Control Tunnels.

FailuresSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.1.1.1.19

cisgIpsSgGlobalDecryptFails

The total number of decryption operations in all current
and previous Phase-1 Control Tunnels which failed to yield
the original payload.

FailuresSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.1.1.1.20

cisgIpsSgGlobalHashValidFails

The total number of hash validation operations in all
current and previous Phase-1 Control Tunnels which resulted
in failure.

FailuresSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.1.1.1.21

cisgIpsSgGlobalBadTunnelRefs

The total number of incoming packets that refer to
non-existent Phase-1 control tunnels which occurred during
processing of all current and previous Phase-1 Control
Tunnels.

FailuresSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.1.1.1.22

cisgIpsSgGlobalInP1SaDelReqs

The total number of Phase-1 security association
delete requests received by all currently and
previously active and Phase-1 Control Tunnels.

Notification PayloadsSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.1.1.1.23

cisgIpsSgGlobalOutP1SaDelReqs

The total number of Phase-1 security association
delete requests sent by all currently and
previously active and Phase-1 Control Tunnels.

Notification PayloadsSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.1.1.1.24

cisgIpsSgTunnelHistTable

table

.1.3.6.1.4.1.9.9.438.1.3.2 · 1 row entry · 31 columns

Open in standard view

Uses the cisco variant from /opt/observium/mibs/cisco.

Command help

Walk cisgIpsSgTunnelHistTable

/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'CISCO-IPSEC-SIGNALING-MIB' -M '/opt/observium/mibs/cisco:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'CISCO-IPSEC-SIGNALING-MIB::cisgIpsSgTunnelHistTable'

The control tunnel History Table. This table
lists all instances of control tunnels that were
successfully established but which are no longer in
operation. An entry transitions to this table from
the active tunnel table ('cisgIpsSgTunnelTable') into 
this table after it expires, is aborted or terminated.
          
This table is conceptually a sliding window in 
which only the last 'N' entries are maintained,
where 'N' is the value of the object 
'cisgIpsSgHistTableSize'.
          
If the value of 'cisgIpsSgHistTableSize' is 0,
archiving of entries in this table is disabled.

cisgIpsSgTunnelHistEntry row .1.3.6.1.4.1.9.9.438.1.3.2.1

Each entry contains the attributes associated with
a previously active control Tunnel.

Indexes

cisgIpsSgProtocol cisgIpsSgTunHistIndex

Column Syntax OID

cisgIpsSgTunHistIndex

The index of the Phase-1 Control Tunnel History
Table. This object has no relationship to the
cisgIpsSgTunIndex of the tunnel when it was active.
The value of the index is a number which
begins at one and is incremented…

SNMPv2-SMIUnsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.9.9.438.1.3.2.1.1

cisgIpsSgTunHistTermReason

The reason the Phase-1 Control Tunnel was terminated.
Possible reasons include:
1 = other
2 = normal termination
3 = operator request
4 = peer delete request was received
5 = contact with peer was lost
6 = applicationIn…

Enumeration

Enumerated Values:

1	other
2	normal
3	operRequest
4	peerDelRequest
5	peerLost
6	applicationInitiated
7	userAuthFailure
8	localFailure

.1.3.6.1.4.1.9.9.438.1.3.2.1.2

cisgIpsSgTunHistActiveIndex

The index of the previously active
Control Tunnel. This object must correspond
to an expired IKE tunnel.

CISCO-IPSEC-TCCIPsecPhase1TunnelIndex

Type Constraints:
range: 1..2147483647

.1.3.6.1.4.1.9.9.438.1.3.2.1.3

cisgIpsSgTunHistPeerLocalType

The type of local peer identity.

CISCO-IPSEC-TCCIPsecPhase1PeerIdentityType

Type Values:

1	idOther
2	idIpv4Addr
3	idFqdn
4	idDn
5	idIpv6Addr
6	idUserFqdn
7	idIpv4AddrSubnet
8	idIpv6AddrSubnet
9	idIpv4AddrRange
10	idIpv6AddrRange
11	idDerAsn1Gn
12	idKeyId
13	idWwn

.1.3.6.1.4.1.9.9.438.1.3.2.1.4

cisgIpsSgTunHistPeerLocalValue

The value of the local peer identity.

OctetString

Constraints:
range: 1-255

.1.3.6.1.4.1.9.9.438.1.3.2.1.5

cisgIpsSgTunHistPeerIntIndex

The arbitrary index to keep local-remote peer
association. This index is used to
uniquely identify multiple associations between
the local and remote peer.

Unsigned32

Constraints:
range: 1-2147483647

.1.3.6.1.4.1.9.9.438.1.3.2.1.6

cisgIpsSgTunHistPeerRemoteType

The type of remote peer identity.

CISCO-IPSEC-TCCIPsecPhase1PeerIdentityType

Type Values:

1	idOther
2	idIpv4Addr
3	idFqdn
4	idDn
5	idIpv6Addr
6	idUserFqdn
7	idIpv4AddrSubnet
8	idIpv6AddrSubnet
9	idIpv4AddrRange
10	idIpv6AddrRange
11	idDerAsn1Gn
12	idKeyId
13	idWwn

.1.3.6.1.4.1.9.9.438.1.3.2.1.7

cisgIpsSgTunHistPeerRemoteValue

The value of the remote peer identity.

OctetString

Constraints:
range: 1-255

.1.3.6.1.4.1.9.9.438.1.3.2.1.8

cisgIpsSgTunHistLocalAddrType

The type of the address of the local endpoint
for the control tunnel.

CISCO-IPSEC-TCCIPsecPhase1PeerIdentityType

Type Values:

1	idOther
2	idIpv4Addr
3	idFqdn
4	idDn
5	idIpv6Addr
6	idUserFqdn
7	idIpv4AddrSubnet
8	idIpv6AddrSubnet
9	idIpv4AddrRange
10	idIpv6AddrRange
11	idDerAsn1Gn
12	idKeyId
13	idWwn

.1.3.6.1.4.1.9.9.438.1.3.2.1.9

cisgIpsSgTunHistLocalAddr

The address of the local endpoint for the
control tunnel.

OctetString

Constraints:
range: 0-255

.1.3.6.1.4.1.9.9.438.1.3.2.1.10

cisgIpsSgTunHistLocalName

The DNS name of the local address for the control
Tunnel. If the DNS name associated with the local
tunnel endpoint is not known, then the value of this
object will be a zero-length string.

OctetString

Constraints:
range: 0-255

.1.3.6.1.4.1.9.9.438.1.3.2.1.11

cisgIpsSgTunHistRemoteAddrType

The type of the address of the remote endpoint
for the control Tunnel.

CISCO-IPSEC-TCCIPsecPhase1PeerIdentityType

Type Values:

1	idOther
2	idIpv4Addr
3	idFqdn
4	idDn
5	idIpv6Addr
6	idUserFqdn
7	idIpv4AddrSubnet
8	idIpv6AddrSubnet
9	idIpv4AddrRange
10	idIpv6AddrRange
11	idDerAsn1Gn
12	idKeyId
13	idWwn

.1.3.6.1.4.1.9.9.438.1.3.2.1.12

cisgIpsSgTunHistRemoteAddr

The address of the remote endpoint for the
control Tunnel.

OctetString

Constraints:
range: 0-255

.1.3.6.1.4.1.9.9.438.1.3.2.1.13

cisgIpsSgTunHistRemoteName

The DNS name of the remote address of
control Tunnel. If the DNS name associated with
the remote tunnel endpoint is not known, then the
value of this object will be a zero-length string.

OctetString

Constraints:
range: 0-255

.1.3.6.1.4.1.9.9.438.1.3.2.1.14

cisgIpsSgTunHistEncryptAlgo

The encryption algorithm used in control tunnel.

CISCO-IPSEC-TCCIPsecEncryptAlgorithm

Type Values:

1	none
2	other
3	espDes
4	esp3des
5	espRc5
6	espIdea
7	espCast
8	espTwofish
9	espBlowfish
10	esp3idea
11	espRc4
12	espNull
13	espAes128
14	espAes192
15	espAes256
16	espAesCtr128
17	espAesCtr192
18	espAesCtr256

.1.3.6.1.4.1.9.9.438.1.3.2.1.15

cisgIpsSgTunHistEncryptKeySize

The size in bits of the key which was negotiated
for the control tunnel to be used with the algorithm
denoted by the column 'cisgIpsSgTunEncryptAlgo'. For
DES and 3DES the key size is respectively 56 and 168.
For AES…

BitsCISCO-IPSEC-TCCIPsecEncryptionKeySize

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.9.9.438.1.3.2.1.16

cisgIpsSgTunHistHashAlgo

The hash algorithm used in control tunnel negotiations.

CISCO-IPSEC-TCCIPsecIkeHashAlgorithm

Type Values:

1	none
2	other
3	md5
4	sha
5	tiger
6	sha256
7	sha384
8	sha512
9	aesMac

.1.3.6.1.4.1.9.9.438.1.3.2.1.17

cisgIpsSgTunHistAuthMethod

The authentication method used in control tunnel
negotiations.

CISCO-IPSEC-TCCIPsecIkeAuthMethod

Type Values:

1	other
2	preSharedKey
3	rsaSignature
4	rsaEncryption
5	revRsaEncryption
6	dssSignature
7	elGamalEncryption
8	revElGamalEncryption
9	ecsdaSignature
10	gssApiV1
11	gssApiV2

.1.3.6.1.4.1.9.9.438.1.3.2.1.18

cisgIpsSgTunHistLifeTime

The negotiated LifeTime of the control tunnel in seconds.

Unsigned32

Constraints:
range: 1-2147483647

.1.3.6.1.4.1.9.9.438.1.3.2.1.19

cisgIpsSgTunHistStartTime

The value of sysUpTime in hundredths of seconds when the
control tunnel was started.

SNMPv2-TCTimeStamp

Based On: SNMPv2-SMITimeTicks

Description:

The value of the sysUpTime object at which a specific
occurrence happened. The specific occurrence must be

defined in the description of any object defined using this
type.

If sysUpTime is reset t…

.1.3.6.1.4.1.9.9.438.1.3.2.1.20

cisgIpsSgTunHistActiveTime

The length of time the control tunnel has been active
in hundredths of seconds.

SNMPv2-TCTimeInterval

Type Constraints:
range: 0..2147483647

Description:

A period of time, measured in units of 0.01 seconds.

.1.3.6.1.4.1.9.9.438.1.3.2.1.21

cisgIpsSgTunHistInOctets

The total number of octets received by this control
tunnel.

OctetsSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.3.2.1.22

cisgIpsSgTunHistInPkts

The total number of packets received by this Phase-1
control tunnel.

PacketsSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.3.2.1.23

cisgIpsSgTunHistInDropPkts

The total number of packets dropped by this control
Tunnel during receive processing.

PacketsSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.3.2.1.24

cisgIpsSgTunHistInNotifys

The total number of notification payloads received by
this control tunnel.

Notification PayloadsSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.3.2.1.25

cisgIpsSgTunHistInP2SaDelReqs

The total number of Phase-2 tunnel delete requests
received by this control tunnel.

Notification PayloadsSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.3.2.1.26

cisgIpsSgTunHistOutOctets

The total number of octets sent by this control Tunnel.

OctetsSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.3.2.1.27

cisgIpsSgTunHistOutPkts

The total number of packets sent by this control Tunnel.

PacketsSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.3.2.1.28

cisgIpsSgTunHistOutDropPkts

The total number of packets dropped by this control
Tunnel during send processing.

PacketsSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.3.2.1.29

cisgIpsSgTunHistOutNotifys

The total number of notification payloads sent by this
control Tunnel.

Notification PayloadsSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.3.2.1.30

cisgIpsSgTunHistOutP2SaDelReqs

The total number of Phase-2 tunnel delete requests
sent by this control tunnel.

Notification PayloadsSNMPv2-SMICounter64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.9.9.438.1.3.2.1.31

cisgIpsSgFailTable

table

.1.3.6.1.4.1.9.9.438.1.4.2 · 1 row entry · 9 columns

Open in standard view

Uses the cisco variant from /opt/observium/mibs/cisco.

Command help

Walk cisgIpsSgFailTable

/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'CISCO-IPSEC-SIGNALING-MIB' -M '/opt/observium/mibs/cisco:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'CISCO-IPSEC-SIGNALING-MIB::cisgIpsSgFailTable'

This is the control tunnel Table and is 
implemented as a sliding window in which only the 
last 'N' entries are maintained. The maximum number 
of entries is specified by the object 
'cisgIpsSgFailTableSize'.
          
The failure records are catalogued under each
signaling protocol type; that is, the first index
of this table is the signaling protocol identifier
('cisgIpsSgProtocol'). The second index 
('cisgIpsSgFailIndex') identifies the failure record
uniquely in the subcategory.
          
Should a failure be identified before the signaling
protocol itself has been identified by the managed
entity, the failure record will be classified under
'cpUnknown'.

cisgIpsSgFailEntry row .1.3.6.1.4.1.9.9.438.1.4.2.1

Each entry contains the attributes associated
with an Phase-1 failure.

Indexes

cisgIpsSgProtocol cisgIpsSgFailIndex

Column Syntax OID

cisgIpsSgFailIndex

The Phase-1 Failure Table index.
This object has no relationship to the
cisgIpsSgTunIndex of the tunnel when it was active.
The value of the index is a number which
begins at one and is incremented with each
Phase-1 fai…

SNMPv2-SMIUnsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.9.9.438.1.4.2.1.1

cisgIpsSgFailReason

The reason for the failure. Possible reasons
include:
1 = other
2 = peer delete request was received
3 = contact with peer was lost
4 = local failure occurred
5 = authentication failure
6 = hash…

Enumeration

Enumerated Values:

1	other
2	peerDelRequest
3	peerLost
4	localFailure
5	authFailure
6	hashValidation
7	encryptFailure
8	internalError
9	sysCapExceeded
10	proposalFailure
11	peerCertUnavailable
12	peerCertNotValid
13	localCertExpired
14	crlFailure
15	peerEncodingError
16	nonExistentSa
17	userAuthFailure
18	operRequest
19	deniedByAdmissionControl
20	protocolSpecific