HPN-ICF-IPSEC-MONITOR-MIB Table View

Table-centric layout grouping table, row, and column objects.

Standard view Table view

Tables

Rows

Columns

hpnicfIPSecTunnelTable

table

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.1 · 1 row entry · 26 columns

Open in standard view

Uses the hp variant from /opt/observium/mibs/hp.

Command help

Walk hpnicfIPSecTunnelTable

/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'HPN-ICF-IPSEC-MONITOR-MIB' -M '/opt/observium/mibs/hp:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'HPN-ICF-IPSEC-MONITOR-MIB::hpnicfIPSecTunnelTable'

The IPSec Phase-2 Tunnel Table. There is one
entry in this table for each active IPSec Phase-2 Tunnel.

hpnicfIPSecTunnelEntry row .1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1

Information about hpnicfIPSecTunnelTable.

Indexes

hpnicfIPSecTunIfIndex hpnicfIPSecTunEntryIndex hpnicfIPSecTunIndex

Column Syntax OID

hpnicfIPSecTunIfIndex

The interface index( the ifIndex of ifTable ).

Integer32

Constraints:
range: 1-2147483647

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.1

hpnicfIPSecTunEntryIndex

The index of IPSec policy applied in the interface.

Integer32

Constraints:
range: 1-2147483647

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.2

hpnicfIPSecTunIndex

The index of IPSec Phase-2 Tunnel Table. The value of
the index is a number which begins at one and is
incremented with each tunnel that is created. The
value of this object will wrap at 2,147,483,647.

Integer32

Constraints:
range: 1-2147483647

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.3

hpnicfIPSecTunIKETunnelIndex

The index of the associated IPSec Phase-1 IKE Tunnel
(IKETunIndex in the IKETunnelTable). 2147483647 is defined as
invalid value.

Integer32

Constraints:
range: 1-2147483647

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.4

hpnicfIPSecTunLocalAddr

The IP address of the local peer for the IPSec Phase-2
Tunnel. 0.0.0.0 is defined as invalid value.

RFC1155-SMIIpAddress

Type Constraints:
range: 4

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.5

hpnicfIPSecTunRemoteAddr

The IP address of the remote peer for the IPSec Phase-2
Tunnel. 0.0.0.0 is defined as invalid value.

RFC1155-SMIIpAddress

Type Constraints:
range: 4

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.6

hpnicfIPSecTunKeyType

The key negotiate mode used by the IPSec Phase-2 Tunnel.

HpnicfIPSecNegoType

Type Values:

1	ike
2	manual
2147483647	invalidType

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.7

hpnicfIPSecTunEncapMode

The encapsulation mode used by the IPSec Phase-2 Tunnel.

HpnicfEncapMode

Type Values:

1	tunnel
2	transport
2147483647	invalidMode

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.8

hpnicfIPSecTunInitiator

The initiator of this IPSec tunnel. Value none is used for manual
IPsec tunnel, for there is no initiator or responder in this method.

Enumeration

Enumerated Values:

1	local
2	remote
2147483647	none

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.9

hpnicfIPSecTunLifeSize

The negotiated LifeSize of the IPSec Phase-2 Tunnel in kilobytes.
0 is defined as invalid value.

SNMPv2-SMIGauge32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.10

hpnicfIPSecTunLifeTime

The negotiated LifeTime of the IPSec Phase-2 Tunnel in seconds.
2147483647 is defined as invalid value.

Integer32

Constraints:
range: 1-2147483647

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.11

hpnicfIPSecTunRemainTime

The remain time of SA in seconds. 2147483647 is defined as invalid
value.

Integer32

Constraints:
range: 0-2147483647

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.12

hpnicfIPSecTunActiveTime

The duration the IPSec Phase-2 Tunnel has been active in
hundredths of seconds. 2147483647 is defined as invalid value.

Integer32

Constraints:
range: 0-2147483647

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.13

hpnicfIPSecTunRemainSize

The remain LifeSize of SA in kilobytes. 0 is defined as
invalid value.

SNMPv2-SMIGauge32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.14

hpnicfIPSecTunTotalRefreshes

The total number of security association refreshing performed.

SNMPv2-SMICounter32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.15

hpnicfIPSecTunCurrentSaInstances

The number of security associations which are currently active
or expiring.

SNMPv2-SMIGauge32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.16

hpnicfIPSecTunInSaEncryptAlgo

The encryption algorithm used by the inbound security association
of the IPSec Phase-2 Tunnel.

HpnicfEncryptAlgo

Type Values:

0	none
1	desCbc
2	ideaCbc
3	blowfishCbc
4	rc5R16B64Cbc
5	tripledesCbc
6	castCbc
7	aesCbc
8	nsaCbc
9	aesCbc128
10	aesCbc192
11	aesCbc256
2147483647	invalidAlg

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.17

hpnicfIPSecTunInSaAhAuthAlgo

The authentication algorithm used by the inbound authentication
header (AH) security association of the IPSec Phase-2 Tunnel.

HpnicfAuthAlgo

Type Values:

0	none
1	md5
2	sha
2147483647	invalidAlg

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.18

hpnicfIPSecTunInSaEspAuthAlgo

The authentication algorithm used by the inbound encapsulation
security protocol(ESP) security association of the IPSec
Phase-2 Tunnel.

HpnicfAuthAlgo

Type Values:

0	none
1	md5
2	sha
2147483647	invalidAlg

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.19

hpnicfIPSecTunDiffHellmanGrp

The Diffie Hellman Group used by the security association of the
IPSec Phase-2 Tunnel.

HpnicfDiffHellmanGrp

Type Values:

0	none
1	modp768
2	modp1024
5	modp1536
14	modp2048
2147483647	invalidGroup

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.20

hpnicfIPSecTunOutSaEncryptAlgo

The encryption algorithm used by the outbound security
association of the IPSec Phase-2 Tunnel.

HpnicfEncryptAlgo

Type Values:

0	none
1	desCbc
2	ideaCbc
3	blowfishCbc
4	rc5R16B64Cbc
5	tripledesCbc
6	castCbc
7	aesCbc
8	nsaCbc
9	aesCbc128
10	aesCbc192
11	aesCbc256
2147483647	invalidAlg

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.21

hpnicfIPSecTunOutSaAhAuthAlgo

The authentication algorithm used by the outbound
authentication header (AH) security association of
the IPSec Phase-2 Tunnel.

HpnicfAuthAlgo

Type Values:

0	none
1	md5
2	sha
2147483647	invalidAlg

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.22

hpnicfIPSecTunOutSaEspAuthAlgo

The authentication algorithm used by the outbound encapsulation
security protocol(ESP) security association of the IPSec
Phase-2 Tunnel.

HpnicfAuthAlgo

Type Values:

0	none
1	md5
2	sha
2147483647	invalidAlg

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.23

hpnicfIPSecTunPolicyName

The policy name used by this IPSec tunnel.

SNMPv2-TCDisplayString

Type Constraints:
range: 0..255

Description:

Represents textual information taken from the NVT ASCII

character set, as defined in pages 4, 10-11 of RFC 854.

To summarize RFC 854, the NVT ASCII repertoire specifies:

- the use of c…

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.24

hpnicfIPSecTunPolicyNum

The sequence number of policy used by this IPSec tunnel.

Integer32

Constraints:
range: 1-2147483647

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.25

hpnicfIPSecTunStatus

The status of the IPSec Tunnel.

Enumeration

Enumerated Values:

1	initial
2	ready
3	rekeyed
4	closed

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.26

hpnicfIPSecTunnelStatTable

table

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.2 · 1 row entry · 17 columns

Open in standard view

Uses the hp variant from /opt/observium/mibs/hp.

Command help

Walk hpnicfIPSecTunnelStatTable

/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'HPN-ICF-IPSEC-MONITOR-MIB' -M '/opt/observium/mibs/hp:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'HPN-ICF-IPSEC-MONITOR-MIB::hpnicfIPSecTunnelStatTable'

The IPSec Phase-2 Tunnel Statistics Table.

hpnicfIPSecTunnelStatEntry row .1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1

Information about hpnicfIPSecTunnelStatTable.

Indexes

hpnicfIPSecTunIfIndex hpnicfIPSecTunEntryIndex hpnicfIPSecTunIndex

Column	Syntax	OID
hpnicfIPSecTunInOctets The total number of octets received by this IPSec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed.	SNMPv2-SMICounter64 Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.1`
hpnicfIPSecTunInDecompOctets The total number of decompressed octets received by this IPSec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed.	SNMPv2-SMICounter64 Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.2`
hpnicfIPSecTunInPkts The total number of packets received by this IPSec Phase-2 Tunnel.	SNMPv2-SMICounter64 Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.3`
hpnicfIPSecTunInDropPkts The total number of packets dropped during receiving process by this IPSec Phase-2 Tunnel.	SNMPv2-SMICounter64 Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.4`
hpnicfIPSecTunInReplayDropPkts The total number of packets dropped during receiving process due to Anti-Replay process by this IPSec Phase-2 Tunnel.	SNMPv2-SMICounter32 Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.5`
hpnicfIPSecTunInAuthFails The total number of inbound authentication's which ended in failure by this IPSec Phase-2 Tunnel.	SNMPv2-SMICounter32 Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.6`
hpnicfIPSecTunInDecryptFails The total number of inbound decryption's which ended in failure by this IPSec Phase-2 Tunnel.	SNMPv2-SMICounter32 Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.7`
hpnicfIPSecTunOutOctets The total number of octets sent by this IPSec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed.	SNMPv2-SMICounter64 Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.8`
hpnicfIPSecTunOutUncompOctets The total number of uncompressed octets sent by this IPSec Phase-2 Tunnel.This value is accumulated BEFORE the packet is compressed.	SNMPv2-SMICounter64 Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.9`
hpnicfIPSecTunOutPkts The total number of packets sent by this IPSec Phase-2 Tunnel.	SNMPv2-SMICounter64 Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.10`
hpnicfIPSecTunOutDropPkts The total number of packets dropped during sending process by this IPSec Phase-2 Tunnel.	SNMPv2-SMICounter64 Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.11`
hpnicfIPSecTunOutEncryptFails The total number of outbound encryption's which ended in failure by this IPSec Phase-2 Tunnel.	SNMPv2-SMICounter32 Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.12`
hpnicfIPSecTunNoMemoryDropPkts The total number of packets dropped due to no enough memory by this IPSec Phase-2 Tunnel.	SNMPv2-SMICounter32 Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.13`
hpnicfIPSecTunQueueFullDropPkts The total number of packets dropped due to queue full by this IPSec Phase-2 Tunnel.	SNMPv2-SMICounter32 Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.14`
hpnicfIPSecTunInvalidLenDropPkts The total number of packets dropped due to invalid length packet by this IPSec Phase-2 Tunnel.	SNMPv2-SMICounter32 Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.15`
hpnicfIPSecTunTooLongDropPkts The total number of packets dropped due to too long packet by this IPSec Phase-2 Tunnel.	SNMPv2-SMICounter32 Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.16`
hpnicfIPSecTunInvalidSaDropPkts The total number of packets dropped due to invalid SA by this IPSec Phase-2 Tunnel.	SNMPv2-SMICounter32 Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.17`

hpnicfIPSecSaTable

table

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.3 · 1 row entry · 7 columns

Open in standard view

Uses the hp variant from /opt/observium/mibs/hp.

Command help

Walk hpnicfIPSecSaTable

/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'HPN-ICF-IPSEC-MONITOR-MIB' -M '/opt/observium/mibs/hp:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'HPN-ICF-IPSEC-MONITOR-MIB::hpnicfIPSecSaTable'

The IPSec Phase-2 Security Protection Index Table.  This table
contains an entry for each active and expiring security association.

hpnicfIPSecSaEntry row .1.3.6.1.4.1.11.2.14.11.15.2.7.1.3.1

Information about hpnicfIPSecSaTable.

Indexes

hpnicfIPSecTunIfIndex hpnicfIPSecTunEntryIndex hpnicfIPSecTunIndex hpnicfIPSecSaIndex

Column Syntax OID

hpnicfIPSecSaIndex

The number of the Sa associated with the Phase-2 Tunnel
Table. The value of this index is a number which begins
at one and is incremented with each Sa associated with
an IPSec Phase-2 Tunnel. The value of this object …

Integer32

Constraints:
range: 1-2147483647

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.3.1.1

hpnicfIPSecSaDirection

The direction of the SA.

Enumeration

Enumerated Values:

1	in
2	out

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.3.1.2

hpnicfIPSecSaValue

The value of the SPI.

Unsigned32

Constraints:
range: 1-4294967295

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.3.1.3

hpnicfIPSecSaProtocol

The security protocol of the SA.

HpnicfSaProtocol

Type Values:

0	reserved
1	isakmp
2	ah
3	esp
4	ipcomp

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.3.1.4

hpnicfIPSecSaEncryptAlgo

The encryption algorithm used by the security association
of the IPSec Phase-2 Tunnel.

HpnicfEncryptAlgo

Type Values:

0	none
1	desCbc
2	ideaCbc
3	blowfishCbc
4	rc5R16B64Cbc
5	tripledesCbc
6	castCbc
7	aesCbc
8	nsaCbc
9	aesCbc128
10	aesCbc192
11	aesCbc256
2147483647	invalidAlg

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.3.1.5

hpnicfIPSecSaAuthAlgo

The authentication algorithm used by the SA.

HpnicfAuthAlgo

Type Values:

0	none
1	md5
2	sha
2147483647	invalidAlg

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.3.1.6

hpnicfIPSecSaStatus

The status of the SA.

Enumeration

Enumerated Values:

1	active
2	expiring

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.3.1.7

hpnicfIPSecTrafficTable

table

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.4 · 1 row entry · 10 columns

Open in standard view

Uses the hp variant from /opt/observium/mibs/hp.

Command help

Walk hpnicfIPSecTrafficTable

/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'HPN-ICF-IPSEC-MONITOR-MIB' -M '/opt/observium/mibs/hp:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'HPN-ICF-IPSEC-MONITOR-MIB::hpnicfIPSecTrafficTable'

The IPSec Phase-2 Tunnel Traffic Table.

hpnicfIPSecTrafficEntry row .1.3.6.1.4.1.11.2.14.11.15.2.7.1.4.1

Information about hpnicfIPSecTrafficTable.

Indexes

hpnicfIPSecTunIfIndex hpnicfIPSecTunEntryIndex hpnicfIPSecTunIndex

Column Syntax OID

hpnicfIPSecTrafficLocalType

The type of local peer. Possible values are: a single
IP address, or an IP address range, or an IP subnet.

HpnicfTrafficType

Type Values:

1	ipv4Addr
4	ipv4AddrSubnet
5	ipv6Addr
6	ipv6AddrSubnet
7	ipv4AddrRange
8	ipv6AddrRange

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.4.1.1

hpnicfIPSecTrafficLocalAddr1

The first specification of local peer's IP address. If
the local peer type is single IP address, then this is the
value of the IP address. If the local peer type is IP subnet,
then this is the value of the subnet. If th…

RFC1155-SMIIpAddress

Type Constraints:
range: 4

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.4.1.2

hpnicfIPSecTrafficLocalAddr2

The second specification of local peer's IP address. If the local
peer type is single IP address, then this is the value of the
IP address. If the local peer type is IP subnet, then this is
the value of the subnet mask.…

RFC1155-SMIIpAddress

Type Constraints:
range: 4

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.4.1.3

hpnicfIPSecTrafficLocalProtocol

The protocol number of the local peer's traffic.

Integer32

Constraints:
range: 0-255

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.4.1.4

hpnicfIPSecTrafficLocalPort

The port number of the local peer's traffic.

Integer32

Constraints:
range: 0-65535

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.4.1.5

hpnicfIPSecTrafficRemoteType

The type of remote peer. Possible values are: a single
IP address, or an IP address range, or an IP subnet.

HpnicfTrafficType

Type Values:

1	ipv4Addr
4	ipv4AddrSubnet
5	ipv6Addr
6	ipv6AddrSubnet
7	ipv4AddrRange
8	ipv6AddrRange

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.4.1.6

hpnicfIPSecTrafficRemoteAddr1

The first specification of remote peer's IP address.
If the remote peer type is single IP address, then
this is the value of the IP address. If the remote
peer type is IP subnet, then this is the value
of the subnet. If…

RFC1155-SMIIpAddress

Type Constraints:
range: 4

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.4.1.7

hpnicfIPSecTrafficRemoteAddr2

Single IP address, then this is the value of the IP
address. If the remote peer type is IP subnet,
then this is the value of the subnet mask. If the
remote peer type is IP address range, then this
is the value of ending…

RFC1155-SMIIpAddress

Type Constraints:
range: 4

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.4.1.8

hpnicfIPSecTrafficRemoteProtocol

The protocol number of the remote peer's traffic.

Integer32

Constraints:
range: 0-255

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.4.1.9

hpnicfIPSecTrafficRemotePort

The port number of the remote peer's traffic.

Integer32

Constraints:
range: 0-65535

.1.3.6.1.4.1.11.2.14.11.15.2.7.1.4.1.10