HH3C-NDEC-MIB Table View

The table containing the list of all
SA entries configured on NDEC by the operator.

hh3chipsNDECSAListEntry row .1.3.6.1.4.1.25506.8.36.2.1.1

Each entry contains the attributes
associated with a single NDEC'S SA entry.

Indexes

hh3chipsPeerIpAddr hh3chipsProtocol hh3chipsSPI

Column	Syntax	OID
hh3chipsPeerIpAddr The peer IP address of this SA entry.	SNMPv2-SMIIpAddress Type Constraints: range: 4	.1.3.6.1.4.1.25506.8.36.2.1.1.1
hh3chipsProtocol The Protocol of this SA entry.	Enumeration Enumerated Values: 50 ipsecEsp 51 ipsecAh	.1.3.6.1.4.1.25506.8.36.2.1.1.2
hh3chipsSPI The SPI of this SA entry.	Unsigned32 Constraints: range: 256-4294967295	.1.3.6.1.4.1.25506.8.36.2.1.1.3
hh3chipsEncAlgorithm The encrypt algorithm of this SA entry.	Enumeration Enumerated Values: 1 ealgNone 2 ealgDescbc 3 ealg3desCbc 4 ealgXBlf 5 ealgXCast 6 ealgXSkipjack 7 ealgXAes 8 ealgXQc5 9 ealgXNsa	.1.3.6.1.4.1.25506.8.36.2.1.1.4
hh3chipsAuthAlgorithm The authentication algorithm of this SA entry.	Enumeration Enumerated Values: 1 aalgNone 2 aalgMd5Hmac 3 aalgSha1Hmac 4 aalgMd5Hmac96 5 aalgSha1Hmac96 6 aalgXRipeMd160Hmac96 7 aalgXMd5 8 aalgXSha1	.1.3.6.1.4.1.25506.8.36.2.1.1.5
hh3chipsLocalIpAddr The local IP address of this SA entry.	SNMPv2-SMIIpAddress Type Constraints: range: 4	.1.3.6.1.4.1.25506.8.36.2.1.1.6
hh3chipsSaLifeKBytes The lifetime of this SA entry in bytes.	SNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.25506.8.36.2.1.1.7
hh3chipsSaLifeSecond The lifetime of this SA entry in seconds.	SNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.25506.8.36.2.1.1.8
hh3chipsByCard The flag of this SA on NDEC or not.	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.25506.8.36.2.1.1.9
hh3chipsNegotiateSaMode The type of key used by the IPSec Phase-2 Tunnel.	Enumeration Enumerated Values: 1 none 2 isakmp 3 manual	.1.3.6.1.4.1.25506.8.36.2.1.1.10
hh3chipsExpBytes This object specifies the lifetime in bytes of the tunnels generated using this policy specification.	SNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.25506.8.36.2.1.1.11
hh3chipsSoftBytes This object specifies the lifetime in bytes of the tunnels generated using this policy specification.	SNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.25506.8.36.2.1.1.12
hh3chipsExpTimeout This object specifies the lifetime in seconds of the tunnels generated using this policy specification.	SNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.25506.8.36.2.1.1.13
hh3chipsSoftTimeout This object specifies the lifetime in seconds of the tunnels generated using this policy specification.	SNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.25506.8.36.2.1.1.14

The table containing IKE SA entities
configured on NDEC by the operator.

hh3chikeSAEntry row .1.3.6.1.4.1.25506.8.36.2.2.1

Each entry contains the attributes
associated with a single IKE SA entity.

Indexes

hh3chikeConnId

Column	Syntax	OID
hh3chikeConnId The identifier of IKE SA connection.	Integer32 Constraints: range: 0-65535	.1.3.6.1.4.1.25506.8.36.2.2.1.1
hh3chikePeerIpAddr The peer IP address of this IKE SA.	SNMPv2-SMIIpAddress Type Constraints: range: 4	.1.3.6.1.4.1.25506.8.36.2.2.1.2
hh3chikeFlag The status of this IKE SA.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.25506.8.36.2.2.1.3
hh3chikePhase The phase of this IKE SA.	Enumeration Enumerated Values: 1 unkown 2 phase1 3 phase2	.1.3.6.1.4.1.25506.8.36.2.2.1.4
hh3chikeDoi The domain of this IKE SA	Enumeration Enumerated Values: 1 unkown 2 ipsec	.1.3.6.1.4.1.25506.8.36.2.2.1.5
hh3chikeClearSA Clear this IKE SA or not.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.25506.8.36.2.2.1.6

List of all ISAKMP policy entries.

hh3chipsIKEPolicyEntry row .1.3.6.1.4.1.25506.8.36.2.3.1

Each entry includes the properties of a ISAKMP Policy entry.

Indexes

hh3chipsIsakmpPolPriority

Column	Syntax	OID
hh3chipsIsakmpPolPriority ISAKMP Policy entry's priority.	Integer32 Constraints: range: 0-65535	.1.3.6.1.4.1.25506.8.36.2.3.1.1
hh3chipsIsakmpPolEncr The specified encryption transform. It is used by Internet Key Exchange(IKE) tunnels to protect the ISAKMP PDUs.	Enumeration Enumerated Values: 1 ikeEncryptNone 2 ikeEncryptDesCbc 3 ikeEncryptIdeaCbc 4 ikeEncryptBlowfishcbc 5 ikeEncryptRc5R16B64cbc 6 ikeEncrypt3DesCbc 7 ikeEncryptCastCbc	.1.3.6.1.4.1.25506.8.36.2.3.1.2
hh3chipsIsakmpPolHash The specified hash transform. It is used by Internet Key Exchange(IKE) tunnels to protect the ISAKMP PDUs.	Enumeration Enumerated Values: 1 ikeHashNone 2 ikeHashMd5 3 ikeHashSha 4 ikeHashTiger	.1.3.6.1.4.1.25506.8.36.2.3.1.3
hh3chipsIsakmpPolAuth The specified peer authentication method. The local entity would authenticate the peer using the method specified by this object when this policy entity is selected to negotiate with a peer.	Enumeration Enumerated Values: 1 ikeAuthPreNone 2 ikeAuthPreShared 3 ikeAuthDss 4 ikeAuthRsaSig 5 ikeAuthRsaEnc 6 ikeAuthRsaEncRev	.1.3.6.1.4.1.25506.8.36.2.3.1.4
hh3chipsIsakmpPolGroup This object is used to specify the Oakley group which is used for Diffie Hellman exchange in the Main Mode. The local entity selects the group specified by this object to perform Diffie Hellman exchange with the peer wh…	Enumeration Enumerated Values: 1 none 2 dhGroup1 3 dhGroup2	.1.3.6.1.4.1.25506.8.36.2.3.1.5
hh3chipsIsakmpPolLifetime This object indicates the lifetime of the IKE tunnels in seconds.	SNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.25506.8.36.2.3.1.6

The table includes the list of the member cryptomaps
of the cryptomap sets which are set on the specific entity.

hh3chipsStaticCryptomapEntry row .1.3.6.1.4.1.25506.8.36.2.4.1

Each entry contains properites of a single static cryptomap entry.
The members of dynamic cryptomap sets, which may be linked with the
parent static cryptomap set, are not included in this table.

Indexes

hh3chipsStaticCryptomapName hh3chipsStaticCryptomapSN

Column	Syntax	OID
hh3chipsStaticCryptomapName The name of the cryptomap entry in the cryptomap set. This is the first index component of this table.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.25506.8.36.2.4.1.1
hh3chipsStaticCryptomapSN The sequence number of the cryptomap entry in the cryptomap set. This is the second index component of this table.	Integer32 Constraints: range: 0-65535	.1.3.6.1.4.1.25506.8.36.2.4.1.2
hh3chipsStaticCryptomapNegMode Type of the cryptomap entry. This object may be an ISAKMP cryptomap or manual.	Enumeration Enumerated Values: 1 none 2 isakmp 3 manual	.1.3.6.1.4.1.25506.8.36.2.4.1.3
hh3chipsStaticCryptomapMatchAddr The access list number entered by the operatoir while creating this cryptomap.	Integer32 Constraints: range: 1-100000	.1.3.6.1.4.1.25506.8.36.2.4.1.4
hh3chipsStaticCryptomapPeerIpAddr The IP address of the current peer. Traffic protected by this cryptomap is protected by a tunnel terminating at the device whose IP address is the value of this object.	SNMPv2-SMIIpAddress Type Constraints: range: 4	.1.3.6.1.4.1.25506.8.36.2.4.1.5
hh3chipsStaticCryptomapTransforName The transform associated with this cryptomap entry.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.25506.8.36.2.4.1.6
hh3chipsStaticCryptomapLifetime This object indicates the lifetime of the IPSec SA which is created using this IPSec policy entry.	SNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.25506.8.36.2.4.1.7
hh3chipsStaticCryptomapLifesize This object identifies the lifesize of the IPSec SAs generated using this IPSec policy entry. Lifesize means maximum traffic in bytes that may be carried.	SNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.25506.8.36.2.4.1.8
hh3chipsStaticCryptomapLocalIpAddr The value of this object is the local IP address of the IPSec SAs generated using this IPSec policy entry.	SNMPv2-SMIIpAddress Type Constraints: range: 4	.1.3.6.1.4.1.25506.8.36.2.4.1.9
hh3chipsIfNameUsed This object indicates the name of the interface which uses this IPSec policy entry.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.25506.8.36.2.4.1.10
hh3chipsInAHSPI This object indicates the inbound AH SPI IPSec SAs generated using this IPSec policy entry.	SNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.25506.8.36.2.4.1.11
hh3chipsInESPSPI This object indicates the inbound ESP SPI IPSec SAs generated using this IPSec policy entry.	SNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.25506.8.36.2.4.1.12
hh3chipsOutAHSPI This object indicates the outbound AH SPI IPSec SAs generated using this IPSec policy entry.	SNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.25506.8.36.2.4.1.13
hh3chipsOutESPSPI This object indicates the outbound ESP SPI IPSec SAs generated using this IPSec policy entry.	SNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.25506.8.36.2.4.1.14
hh3chipsInAhHexKeyString This object indicates the inbound AH authentication key IPSec SAs generated using this IPSec policy entry. The AH authentication key is in hex.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.25506.8.36.2.4.1.15
hh3chipsInEspCipherHexKeyString This object indicates the inbound ESP authentication key IPSec SAs generated using this IPSec policy entry. The ESP authentication key is hex.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.25506.8.36.2.4.1.16
hh3chipsInEspAuthenHexKeyString This object indicates the inbound ESP authentication key IPSec SAs generated using this IPSec policy entry. The ESP authentication key is hex.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.25506.8.36.2.4.1.17
hh3chipsInAhStringKeyString This object indicates the inbound ESP authentication key IPSec SAs generated using this IPSec policy entry. The key is in string.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.25506.8.36.2.4.1.18
hh3chipsInEspStringKeyString This object indicates the inbound ESP authentication key IPSec SAs generated using this IPSec policy entry. The key is in string.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.25506.8.36.2.4.1.19
hh3chipsOutAhHexKeyString This object indicates the outbound AH authentication key IPSec SAs generated using this IPSec policy entry. The key is in hex.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.25506.8.36.2.4.1.20
hh3chipsOutEspCipherHexKeyString This object indicates the outbound ESP authentication key IPSec SAs generated using this IPSec policy entry. The key is in hex.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.25506.8.36.2.4.1.21
hh3chipsOutEspAuthenHexKeyString This object indicates the outbound ESP authentication key IPSec SAs generated using this IPSec policy entry. The key is in hex.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.25506.8.36.2.4.1.22
hh3chipsOutAhStringKeyString This object indicates the outbound AH authentication key IPSec SAs generated using this IPSec policy entry. The key is in string.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.25506.8.36.2.4.1.23
hh3chipsOutEspStringKeyString This object indicates the outbound ESP authentication key IPSec SAs generated using this IPSec policy entry. The key is in string.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.25506.8.36.2.4.1.24

Transform set table.

hh3chipsTransformNameSetEntry row .1.3.6.1.4.1.25506.8.36.2.5.1

Each entry refers to properties of a transform.

Indexes

hh3chipsTransformName

Column	Syntax	OID
hh3chipsTransformName Name of the transform entry.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.25506.8.36.2.5.1.1
hh3chipsTransformMode Mode of the transform entry.	Enumeration Enumerated Values: 1 tunnel 2 transport	.1.3.6.1.4.1.25506.8.36.2.5.1.2
hh3chipsTransformProtocol Transform protocol.	Enumeration Enumerated Values: 1 ipsecNone 2 ipsecAhNew 3 ipsecAhEspNew 4 ipsecAhEspOld 5 ipsecAhOld 6 ipsecEspNew 7 ipsecEspAhNew 8 ipsecEspAhOld 9 ipsecEspOld	.1.3.6.1.4.1.25506.8.36.2.5.1.3
hh3chipsAH Algorithm of AH protocol.	Enumeration Enumerated Values: 1 aalgNone 2 aalgMd5Hmac 3 aalgSha1Hmac 4 aalgMd5Hmac96 5 aalgSha1Hmac96 6 aalgXRipeMd160Hmac96 7 aalgXMd5 8 aalgXSha1	.1.3.6.1.4.1.25506.8.36.2.5.1.4
hh3chipsEespEn Encryption algorithm of ESP protocol.	Enumeration Enumerated Values: 1 ealgNone 2 ealgDescbc 3 ealg3desCbc 4 ealgXBlf 5 ealgXCast 6 ealgXSkipjack 7 ealgXAes 8 ealgXQc5	.1.3.6.1.4.1.25506.8.36.2.5.1.5
hh3chipsEspAu Authentication algorithm of ESP protocol.	Enumeration Enumerated Values: 1 aalgNone 2 aalgMd5Hmac 3 aalgSha1Hmac 4 aalgMd5Hmac96 5 aalgSha1Hmac96 6 aalgXRipeMd160Hmac96 7 aalgXMd5 8 aalgXSha1	.1.3.6.1.4.1.25506.8.36.2.5.1.6
hh3chipsIsCardTransform This object indicates the flag of the NDEC is used for IPSec SAs generated using this IPSec policy entry.	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.25506.8.36.2.5.1.7

Table of NDEC set.

hh3chipsNDECInfoEntry row .1.3.6.1.4.1.25506.8.36.2.6.1

Properties of each NDEC.

Indexes

hh3chipsCardSlot

Column	Syntax	OID
hh3chipsCardSlot Slot number of NDEC .	Integer32 Constraints: range: 0-7	.1.3.6.1.4.1.25506.8.36.2.6.1.1
hh3chipsInPac Total packets of the NDEC recieved.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.25506.8.36.2.6.1.2
hh3chipsOutPac Total packets of the NDEC sent.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.25506.8.36.2.6.1.3
hh3chipsInByte Total bytes of the NDEC sent.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.25506.8.36.2.6.1.4
hh3chipsOutByte Total bytes of the NDEC sent.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.25506.8.36.2.6.1.5
hh3chipsDropPac Total packets of the NDEC dropped .	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.25506.8.36.2.6.1.6
hh3chipsCardStatus State of the NDEC.	Enumeration Enumerated Values: 1 ecStateInvalid 2 ecStateReady 3 ecStateResetting 4 ecStateProgramUpdating 5 ecStateDisable	.1.3.6.1.4.1.25506.8.36.2.6.1.7
hh3chipsCardHardVer Hardware version of the NDEC.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.25506.8.36.2.6.1.8
hh3chipsCardSoftVer Software version of the NDEC.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.25506.8.36.2.6.1.9
hh3chipsCardCPLDVer CPLD version of the NDEC.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.25506.8.36.2.6.1.10
hh3chipsCardOperate The version of the NDEC's CPLD. cardClearStatic(1): clear the statistics of the card cardReset(2): rest the card cardSynTime(3): synchoronize the clock of the card cardSysLogOn(4):turn on the log of the card cardSysLogO…	Enumerationr/w Enumerated Values: 1 cardClearStatic 2 cardReset 3 cardSynTime 4 cardSysLogOn 5 cardSysLogOff 6 cardSysLogClear	.1.3.6.1.4.1.25506.8.36.2.6.1.11
hh3chipsDropPacInUnitTime Dropped packets in unit interval.	SNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.25506.8.36.2.6.1.12