Standard view Table view

IPSEC-SA-MON-MIB

        The MIB module to describe generic IPsec objects, and
entity level objects and events for those types.

Source file: IPSEC-SA-MON-MIB
Last revised: 21 Oct 1999, 12:00 UTC
Identity: ipsecSaMonModule
Base OID: 1.3.6.1.2.1.500

Imported Objects

IF-MIB	ifIndex
IPSEC-ISAKMP-IKE-DOI-TC	IpsecDoiAhTransform IpsecDoiAuthAlgorithm IpsecDoiEncapsulationMode IpsecDoiEspTransform IpsecDoiIdentType IpsecDoiIpcompTransform IpsecDoiSecProtocolId
SNMPv2-CONF	MODULE-COMPLIANCE (no object page) NOTIFICATION-GROUP (no object page) OBJECT-GROUP (no object page)
SNMPv2-SMI	Counter32 Counter64 Gauge32 Integer32 mib-2 MODULE-IDENTITY (no object page) NOTIFICATION-TYPE (no object page) OBJECT-IDENTITY (no object page) OBJECT-TYPE (no object page) Unsigned32
SNMPv2-TC	TEXTUAL-CONVENTION (no object page) TruthValue

Net-SNMP examples using the rfc MIB directory Show commands

These commands use the standard Observium installation path and load the selected MIB variant before the RFC and Net-SNMP directories.

Translate the module identity

/usr/bin/snmptranslate -Pud -Ir -On -m 'IPSEC-SA-MON-MIB' -M '/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'IPSEC-SA-MON-MIB::ipsecSaMonModule'

Walk the MIB subtree

/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'IPSEC-SA-MON-MIB' -M '/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'IPSEC-SA-MON-MIB::ipsecSaMonModule'

How SNMP, Net-SNMP, MIB paths, and variants work

Objects (180)

ipsecSaMonModule		`.1.3.6.1.2.1.500`
ipsecSaMonitorMIB		`.1.3.6.1.2.1.500.1`
saTables		`.1.3.6.1.2.1.500.1.1`
ipsecSaEspInTable		`.1.3.6.1.2.1.500.1.1.1`
ipsecSaEspInEntry	ipsecSaEspInAddressipsecSaEspInSpi	`.1.3.6.1.2.1.500.1.1.1.1`
ipsecSaEspInAddress	IpsecIpv6Address	`.1.3.6.1.2.1.500.1.1.1.1.1`
ipsecSaEspInCreator	IpsecSaCreatorIdent	`.1.3.6.1.2.1.500.1.1.1.1.10`
ipsecSaEspInEncapsulation	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiEncapsulationMode	`.1.3.6.1.2.1.500.1.1.1.1.11`
ipsecSaEspInEncAlg	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiEspTransform	`.1.3.6.1.2.1.500.1.1.1.1.12`
ipsecSaEspInEncKeyLength	bitsUnsigned32	`.1.3.6.1.2.1.500.1.1.1.1.13`
ipsecSaEspInAuthAlg	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiAuthAlgorithm	`.1.3.6.1.2.1.500.1.1.1.1.14`
ipsecSaEspInAuthKeyLength	bitsUnsigned32	`.1.3.6.1.2.1.500.1.1.1.1.15`
ipsecSaEspInRepWinSize	SNMPv2-SMIUnsigned32	`.1.3.6.1.2.1.500.1.1.1.1.16`
ipsecSaEspInLimitSeconds	secondsSNMPv2-SMIUnsigned32	`.1.3.6.1.2.1.500.1.1.1.1.17`
ipsecSaEspInLimitKbytes	kilobytesSNMPv2-SMIUnsigned32	`.1.3.6.1.2.1.500.1.1.1.1.18`
ipsecSaEspInAccSeconds	secondsSNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.1.1.1.19`
ipsecSaEspInSpi	SNMPv2-SMIUnsigned32	`.1.3.6.1.2.1.500.1.1.1.1.2`
ipsecSaEspInAccKbytes	kilobytesSNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.1.1.1.20`
ipsecSaEspInUserOctets	bytesSNMPv2-SMICounter64	`.1.3.6.1.2.1.500.1.1.1.1.21`
ipsecSaEspInPackets	SNMPv2-SMICounter64	`.1.3.6.1.2.1.500.1.1.1.1.22`
ipsecSaEspInDecryptErrors	SNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.1.1.1.23`
ipsecSaEspInAuthErrors	SNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.1.1.1.24`
ipsecSaEspInReplayErrors	SNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.1.1.1.25`
ipsecSaEspInPolicyErrors	SNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.1.1.1.26`
ipsecSaEspInPadErrors	SNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.1.1.1.27`
ipsecSaEspInOtherReceiveErrors	SNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.1.1.1.28`
ipsecSaEspInDestId	IpsecRawId	`.1.3.6.1.2.1.500.1.1.1.1.3`
ipsecSaEspInDestIdType	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIdentType	`.1.3.6.1.2.1.500.1.1.1.1.4`
ipsecSaEspInSourceId	IpsecRawId	`.1.3.6.1.2.1.500.1.1.1.1.5`
ipsecSaEspInSourceIdType	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIdentType	`.1.3.6.1.2.1.500.1.1.1.1.6`
ipsecSaEspInProtocol	Integer32	`.1.3.6.1.2.1.500.1.1.1.1.7`
ipsecSaEspInDestPort	Integer32	`.1.3.6.1.2.1.500.1.1.1.1.8`
ipsecSaEspInSourcePort	Integer32	`.1.3.6.1.2.1.500.1.1.1.1.9`
ipsecSaAhInTable		`.1.3.6.1.2.1.500.1.1.2`
ipsecSaAhInEntry	ipsecSaAhInAddressipsecSaAhInSpi	`.1.3.6.1.2.1.500.1.1.2.1`
ipsecSaAhInAddress	IpsecIpv6Address	`.1.3.6.1.2.1.500.1.1.2.1.1`
ipsecSaAhInCreator	IpsecSaCreatorIdent	`.1.3.6.1.2.1.500.1.1.2.1.10`
ipsecSaAhInEncapsulation	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiEncapsulationMode	`.1.3.6.1.2.1.500.1.1.2.1.11`
ipsecSaAhInAuthAlg	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiAhTransform	`.1.3.6.1.2.1.500.1.1.2.1.12`
ipsecSaAhInAuthKeyLength	bitsUnsigned32	`.1.3.6.1.2.1.500.1.1.2.1.13`
ipsecSaAhInRepWinSize	SNMPv2-SMIUnsigned32	`.1.3.6.1.2.1.500.1.1.2.1.14`
ipsecSaAhInLimitSeconds	secondsSNMPv2-SMIUnsigned32	`.1.3.6.1.2.1.500.1.1.2.1.15`
ipsecSaAhInLimitKbytes	kilobytesSNMPv2-SMIUnsigned32	`.1.3.6.1.2.1.500.1.1.2.1.16`
ipsecSaAhInAccSeconds	secondsSNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.1.2.1.17`
ipsecSaAhInAccKbytes	kilobytesSNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.1.2.1.18`
ipsecSaAhInUserOctets	bytesSNMPv2-SMICounter64	`.1.3.6.1.2.1.500.1.1.2.1.19`
ipsecSaAhInSpi	SNMPv2-SMIUnsigned32	`.1.3.6.1.2.1.500.1.1.2.1.2`
ipsecSaAhInPackets	SNMPv2-SMICounter64	`.1.3.6.1.2.1.500.1.1.2.1.20`
ipsecSaAhInAuthErrors	SNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.1.2.1.21`
ipsecSaAhInReplayErrors	SNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.1.2.1.22`
ipsecSaAhInPolicyErrors	SNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.1.2.1.23`
ipsecSaAhInOtherReceiveErrors	SNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.1.2.1.24`
ipsecSaAhInDestId	IpsecRawId	`.1.3.6.1.2.1.500.1.1.2.1.3`
ipsecSaAhInDestIdType	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIdentType	`.1.3.6.1.2.1.500.1.1.2.1.4`
ipsecSaAhInSourceId	IpsecRawId	`.1.3.6.1.2.1.500.1.1.2.1.5`
ipsecSaAhInSourceIdType	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIdentType	`.1.3.6.1.2.1.500.1.1.2.1.6`
ipsecSaAhInProtocol	Integer32	`.1.3.6.1.2.1.500.1.1.2.1.7`
ipsecSaAhInDestPort	Integer32	`.1.3.6.1.2.1.500.1.1.2.1.8`
ipsecSaAhInSourcePort	Integer32	`.1.3.6.1.2.1.500.1.1.2.1.9`
ipsecSaIpcompInTable		`.1.3.6.1.2.1.500.1.1.3`
ipsecSaIpcompInEntry	ipsecSaIpcompInAddressipsecSaIpcompInCpi	`.1.3.6.1.2.1.500.1.1.3.1`
ipsecSaIpcompInAddress	IpsecIpv6Address	`.1.3.6.1.2.1.500.1.1.3.1.1`
ipsecSaIpcompInCreator	IpsecSaCreatorIdent	`.1.3.6.1.2.1.500.1.1.3.1.10`
ipsecSaIpcompInEncapsulation	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiEncapsulationMode	`.1.3.6.1.2.1.500.1.1.3.1.11`
ipsecSaIpcompInDecompAlg	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIpcompTransform	`.1.3.6.1.2.1.500.1.1.3.1.12`
ipsecSaIpcompInSeconds	secondsSNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.1.3.1.13`
ipsecSaIpcompInUserOctets	bytesSNMPv2-SMICounter64	`.1.3.6.1.2.1.500.1.1.3.1.14`
ipsecSaIpcompInPackets	SNMPv2-SMICounter64	`.1.3.6.1.2.1.500.1.1.3.1.15`
ipsecSaIpcompInDecompErrors	SNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.1.3.1.16`
ipsecSaIpcompInOtherReceiveErrors	SNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.1.3.1.17`
ipsecSaIpcompInCpi	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIpcompTransform	`.1.3.6.1.2.1.500.1.1.3.1.2`
ipsecSaIpcompInDestId	IpsecRawId	`.1.3.6.1.2.1.500.1.1.3.1.3`
ipsecSaIpcompInDestIdType	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIdentType	`.1.3.6.1.2.1.500.1.1.3.1.4`
ipsecSaIpcompInSourceId	IpsecRawId	`.1.3.6.1.2.1.500.1.1.3.1.5`
ipsecSaIpcompInSourceIdType	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIdentType	`.1.3.6.1.2.1.500.1.1.3.1.6`
ipsecSaIpcompInProtocol	Integer32	`.1.3.6.1.2.1.500.1.1.3.1.7`
ipsecSaIpcompInDestPort	Integer32	`.1.3.6.1.2.1.500.1.1.3.1.8`
ipsecSaIpcompInSourcePort	Integer32	`.1.3.6.1.2.1.500.1.1.3.1.9`
ipsecSaEspOutTable		`.1.3.6.1.2.1.500.1.1.4`
ipsecSaEspOutEntry	ipsecSaEspOutAddressipsecSaEspOutSpi	`.1.3.6.1.2.1.500.1.1.4.1`
ipsecSaEspOutAddress	IpsecIpv6Address	`.1.3.6.1.2.1.500.1.1.4.1.1`
ipsecSaEspOutCreator	IpsecSaCreatorIdent	`.1.3.6.1.2.1.500.1.1.4.1.10`
ipsecSaEspOutEncapsulation	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiEncapsulationMode	`.1.3.6.1.2.1.500.1.1.4.1.11`
ipsecSaEspOutEncAlg	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiEspTransform	`.1.3.6.1.2.1.500.1.1.4.1.12`
ipsecSaEspOutEncKeyLength	bitsUnsigned32	`.1.3.6.1.2.1.500.1.1.4.1.13`
ipsecSaEspOutAuthAlg	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiAuthAlgorithm	`.1.3.6.1.2.1.500.1.1.4.1.14`
ipsecSaEspOutAuthKeyLength	bitsUnsigned32	`.1.3.6.1.2.1.500.1.1.4.1.15`
ipsecSaEspOutLimitSeconds	secondsSNMPv2-SMIUnsigned32	`.1.3.6.1.2.1.500.1.1.4.1.16`
ipsecSaEspOutLimitKbytes	kilobytesSNMPv2-SMIUnsigned32	`.1.3.6.1.2.1.500.1.1.4.1.17`
ipsecSaEspOutAccSeconds	secondsSNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.1.4.1.18`
ipsecSaEspOutAccKbytes	kilobytesSNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.1.4.1.19`
ipsecSaEspOutSpi	SNMPv2-SMIUnsigned32	`.1.3.6.1.2.1.500.1.1.4.1.2`
ipsecSaEspOutUserOctets	bytesSNMPv2-SMICounter64	`.1.3.6.1.2.1.500.1.1.4.1.20`
ipsecSaEspOutPackets	SNMPv2-SMICounter64	`.1.3.6.1.2.1.500.1.1.4.1.21`
ipsecSaEspOutSendErrors	SNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.1.4.1.22`
ipsecSaEspOutSourceId	IpsecRawId	`.1.3.6.1.2.1.500.1.1.4.1.3`
ipsecSaEspOutSourceIdType	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIdentType	`.1.3.6.1.2.1.500.1.1.4.1.4`
ipsecSaEspOutDestId	IpsecRawId	`.1.3.6.1.2.1.500.1.1.4.1.5`
ipsecSaEspOutDestIdType	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIdentType	`.1.3.6.1.2.1.500.1.1.4.1.6`
ipsecSaEspOutProtocol	Integer32	`.1.3.6.1.2.1.500.1.1.4.1.7`
ipsecSaEspOutSourcePort	Integer32	`.1.3.6.1.2.1.500.1.1.4.1.8`
ipsecSaEspOutDestPort	Integer32	`.1.3.6.1.2.1.500.1.1.4.1.9`
ipsecSaAhOutTable		`.1.3.6.1.2.1.500.1.1.5`
ipsecSaAhOutEntry	ipsecSaAhOutAddressipsecSaAhOutSpi	`.1.3.6.1.2.1.500.1.1.5.1`
ipsecSaAhOutAddress	IpsecIpv6Address	`.1.3.6.1.2.1.500.1.1.5.1.1`
ipsecSaAhOutCreator	IpsecSaCreatorIdent	`.1.3.6.1.2.1.500.1.1.5.1.10`
ipsecSaAhOutEncapsulation	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiEncapsulationMode	`.1.3.6.1.2.1.500.1.1.5.1.11`
ipsecSaAhOutAuthAlg	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiAhTransform	`.1.3.6.1.2.1.500.1.1.5.1.12`
ipsecSaAhOutAuthKeyLength	bitsUnsigned32	`.1.3.6.1.2.1.500.1.1.5.1.13`
ipsecSaAhOutLimitSeconds	secondsSNMPv2-SMIUnsigned32	`.1.3.6.1.2.1.500.1.1.5.1.14`
ipsecSaAhOutLimitKbytes	kilobytesSNMPv2-SMIUnsigned32	`.1.3.6.1.2.1.500.1.1.5.1.15`
ipsecSaAhOutAccSeconds	secondsSNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.1.5.1.16`
ipsecSaAhOutAccKbytes	kilobytesSNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.1.5.1.17`
ipsecSaAhOutUserOctets	bytesSNMPv2-SMICounter64	`.1.3.6.1.2.1.500.1.1.5.1.18`
ipsecSaAhOutPackets	SNMPv2-SMICounter64	`.1.3.6.1.2.1.500.1.1.5.1.19`
ipsecSaAhOutSpi	SNMPv2-SMIUnsigned32	`.1.3.6.1.2.1.500.1.1.5.1.2`
ipsecSaAhOutSendErrors	SNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.1.5.1.20`
ipsecSaAhOutSourceId	IpsecRawId	`.1.3.6.1.2.1.500.1.1.5.1.3`
ipsecSaAhOutSourceIdType	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIdentType	`.1.3.6.1.2.1.500.1.1.5.1.4`
ipsecSaAhOutDestId	IpsecRawId	`.1.3.6.1.2.1.500.1.1.5.1.5`
ipsecSaAhOutDestIdType	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIdentType	`.1.3.6.1.2.1.500.1.1.5.1.6`
ipsecSaAhOutProtocol	Integer32	`.1.3.6.1.2.1.500.1.1.5.1.7`
ipsecSaAhOutSourcePort	Integer32	`.1.3.6.1.2.1.500.1.1.5.1.8`
ipsecSaAhOutDestPort	Integer32	`.1.3.6.1.2.1.500.1.1.5.1.9`
ipsecSaIpcompOutTable		`.1.3.6.1.2.1.500.1.1.6`
ipsecSaIpcompOutEntry	ipsecSaIpcompOutAddressipsecSaIpcompOutCpi	`.1.3.6.1.2.1.500.1.1.6.1`
ipsecSaIpcompOutAddress	IpsecIpv6Address	`.1.3.6.1.2.1.500.1.1.6.1.1`
ipsecSaIpcompOutCreator	IpsecSaCreatorIdent	`.1.3.6.1.2.1.500.1.1.6.1.10`
ipsecSaIpcompOutEncapsulation	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiEncapsulationMode	`.1.3.6.1.2.1.500.1.1.6.1.11`
ipsecSaIpcompOutCompAlg	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIpcompTransform	`.1.3.6.1.2.1.500.1.1.6.1.12`
ipsecSaIpcompOutSeconds	secondsSNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.1.6.1.13`
ipsecSaIpcompOutUserOctets	bytesSNMPv2-SMICounter64	`.1.3.6.1.2.1.500.1.1.6.1.14`
ipsecSaIpcompOutOutputOctets	bytesSNMPv2-SMICounter64	`.1.3.6.1.2.1.500.1.1.6.1.15`
ipsecSaIpcompOutPackets	SNMPv2-SMICounter64	`.1.3.6.1.2.1.500.1.1.6.1.16`
ipsecSaIpcompOutCpi	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIpcompTransform	`.1.3.6.1.2.1.500.1.1.6.1.2`
ipsecSaIpcompOutSourceId	IpsecRawId	`.1.3.6.1.2.1.500.1.1.6.1.3`
ipsecSaIpcompOutSourceIdType	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIdentType	`.1.3.6.1.2.1.500.1.1.6.1.4`
ipsecSaIpcompOutDestId	IpsecRawId	`.1.3.6.1.2.1.500.1.1.6.1.5`
ipsecSaIpcompOutDestIdType	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIdentType	`.1.3.6.1.2.1.500.1.1.6.1.6`
ipsecSaIpcompOutProtocol	Integer32	`.1.3.6.1.2.1.500.1.1.6.1.7`
ipsecSaIpcompOutSourcePort	Integer32	`.1.3.6.1.2.1.500.1.1.6.1.8`
ipsecSaIpcompOutDestPort	Integer32	`.1.3.6.1.2.1.500.1.1.6.1.9`
saStatistics		`.1.3.6.1.2.1.500.1.2`
ipsecEspCurrentInboundSAs	SNMPv2-SMIGauge32	`.1.3.6.1.2.1.500.1.2.1`
ipsecIpcompTotalInboundSAs	SNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.2.10`
ipsecIpcompCurrentOutboundSAs	SNMPv2-SMIGauge32	`.1.3.6.1.2.1.500.1.2.11`
ipsecIpcompTotalOutboundSAs	SNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.2.12`
ipsecEspTotalInboundSAs	SNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.2.2`
ipsecEspCurrentOutboundSAs	SNMPv2-SMIGauge32	`.1.3.6.1.2.1.500.1.2.3`
ipsecEspTotalOutboundSAs	SNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.2.4`
ipsecAhCurrentInboundSAs	SNMPv2-SMIGauge32	`.1.3.6.1.2.1.500.1.2.5`
ipsecAhTotalInboundSAs	SNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.2.6`
ipsecAhCurrentOutboundSAs	SNMPv2-SMIGauge32	`.1.3.6.1.2.1.500.1.2.7`
ipsecAhTotalOutboundSAs	SNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.2.8`
ipsecIpcompCurrentInboundSAs	SNMPv2-SMIGauge32	`.1.3.6.1.2.1.500.1.2.9`
saErrors		`.1.3.6.1.2.1.500.1.3`
ipsecDecryptionErrors	SNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.3.1`
ipsecAuthenticationErrors	SNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.3.2`
ipsecReplayErrors	SNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.3.3`
ipsecPolicyErrors	SNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.3.4`
ipsecOtherReceiveErrors	SNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.3.5`
ipsecSendErrors	SNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.3.6`
ipsecUnknownSpiErrors	SNMPv2-SMICounter32	`.1.3.6.1.2.1.500.1.3.7`
saTraps		`.1.3.6.1.2.1.500.1.4`
saTrapObjects		`.1.3.6.1.2.1.500.1.5`
ipsecSecurityProtocol	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiSecProtocolId	`.1.3.6.1.2.1.500.1.5.1`
ipsecSPI	SNMPv2-SMIUnsigned32	`.1.3.6.1.2.1.500.1.5.2`
ipsecLocalAddress	IpsecIpv6Address	`.1.3.6.1.2.1.500.1.5.3`
ipsecPeerAddress	IpsecIpv6Address	`.1.3.6.1.2.1.500.1.5.4`
saTrapControl		`.1.3.6.1.2.1.500.1.6`
espAuthFailureTrapEnable r/w	SNMPv2-TCTruthValue	`.1.3.6.1.2.1.500.1.6.1`
ahAuthFailureTrapEnable r/w	SNMPv2-TCTruthValue	`.1.3.6.1.2.1.500.1.6.2`
espReplayFailureTrapEnable r/w	SNMPv2-TCTruthValue	`.1.3.6.1.2.1.500.1.6.3`
ahReplayFailureTrapEnable r/w	SNMPv2-TCTruthValue	`.1.3.6.1.2.1.500.1.6.4`
espPolicyFailureTrapEnable r/w	SNMPv2-TCTruthValue	`.1.3.6.1.2.1.500.1.6.5`
ahPolicyFailureTrapEnable r/w	SNMPv2-TCTruthValue	`.1.3.6.1.2.1.500.1.6.6`
invalidSpiTrapEnable r/w	SNMPv2-TCTruthValue	`.1.3.6.1.2.1.500.1.6.7`
otherPolicyFailureTrapEnable r/w	SNMPv2-TCTruthValue	`.1.3.6.1.2.1.500.1.6.8`
saGroups		`.1.3.6.1.2.1.500.1.7`
saConformance		`.1.3.6.1.2.1.500.1.8`

Dependencies (7) 5 direct · 2 transitive Show tree and compile order Hide dependency details

Each imported module is resolved in the importing module's source directory first, then through the normal default-variant rules.

Dependency tree

IPSEC-SA-MON-MIBrfcselected
- IF-MIBrfc1 symbol
  - IANAifType-MIBrfc1 symbol
    - SNMPv2-SMIrfc2 symbols
    - SNMPv2-TCrfc1 symbol
      - SNMPv2-SMIrfcshared1 symbol
  - SNMPv2-CONFrfc3 symbols
    - SNMPv2-SMIrfcshared3 symbols
  - SNMPv2-MIBrfc1 symbol
    - SNMPv2-CONFrfcshared3 symbols
    - SNMPv2-SMIrfcshared7 symbols
    - SNMPv2-TCrfcshared3 symbols
  - SNMPv2-SMIrfcshared9 symbols
  - SNMPv2-TCrfcshared8 symbols
- IPSEC-ISAKMP-IKE-DOI-TCrfc7 symbols
  - SNMPv2-SMIrfcshared3 symbols
  - SNMPv2-TCrfcshared1 symbol
- SNMPv2-CONFrfcshared3 symbols
- SNMPv2-SMIrfcshared10 symbols
- SNMPv2-TCrfcshared2 symbols

Dependency-first compile order

Type Definitions (3)

IpsecIpv6Address	OctetString	`range: 16`
IpsecRawId	OctetString	`range: 0..255`
IpsecSaCreatorIdent	Enumeration	`unknown(0)` `static(1)` `ike(2)` `other(3)`

Conformance Groups (7)

ipsecSaEspGroup	ipsecSaEspInAddress ipsecSaEspInSpi ipsecSaEspInDestId ipsecSaEspInDestIdType ipsecSaEspInSourceId ipsecSaEspInSourceIdType ipsecSaEspInProtocol ipsecSaEspInDestPort ipsecSaEspInSourcePort ipsecSaEspInCreator ipsecSaEspInEncapsulation ipsecSaEspInEncAlg ipsecSaEspInEncKeyLength ipsecSaEspInAuthAlg ipsecSaEspInAuthKeyLength ipsecSaEspInRepWinSize ipsecSaEspInLimitSeconds ipsecSaEspInLimitKbytes ipsecSaEspInAccSeconds ipsecSaEspInAccKbytes ipsecSaEspInUserOctets ipsecSaEspInPackets ipsecSaEspInDecryptErrors ipsecSaEspInAuthErrors ipsecSaEspInReplayErrors ipsecSaEspInPolicyErrors ipsecSaEspInPadErrors ipsecSaEspInOtherReceiveErrors ipsecSaEspOutAddress ipsecSaEspOutSpi ipsecSaEspOutSourceId ipsecSaEspOutSourceIdType ipsecSaEspOutDestId ipsecSaEspOutDestIdType ipsecSaEspOutProtocol ipsecSaEspOutSourcePort ipsecSaEspOutDestPort ipsecSaEspOutCreator ipsecSaEspOutEncapsulation ipsecSaEspOutEncAlg ipsecSaEspOutAuthKeyLength ipsecSaEspOutEncKeyLength ipsecSaEspOutAuthAlg ipsecSaEspOutLimitSeconds ipsecSaEspOutLimitKbytes ipsecSaEspOutAccSeconds ipsecSaEspOutAccKbytes ipsecSaEspOutUserOctets ipsecSaEspOutPackets ipsecSaEspOutSendErrors ipsecEspCurrentInboundSAs ipsecEspTotalInboundSAs ipsecEspCurrentOutboundSAs ipsecEspTotalOutboundSAs A collection of objects that describe the state of the security associations of the ESP protocol.	`.1.3.6.1.2.1.500.1.7.1`
ipsecSaAhGroup	ipsecSaAhInAddress ipsecSaAhInSpi ipsecSaAhInDestId ipsecSaAhInDestIdType ipsecSaAhInSourceId ipsecSaAhInSourceIdType ipsecSaAhInProtocol ipsecSaAhInDestPort ipsecSaAhInSourcePort ipsecSaAhInCreator ipsecSaAhInEncapsulation ipsecSaAhInAuthAlg ipsecSaAhInAuthKeyLength ipsecSaAhInRepWinSize ipsecSaAhInLimitSeconds ipsecSaAhInLimitKbytes ipsecSaAhInAccSeconds ipsecSaAhInAccKbytes ipsecSaAhInUserOctets ipsecSaAhInPackets ipsecSaAhInAuthErrors ipsecSaAhInReplayErrors ipsecSaAhInPolicyErrors ipsecSaAhInOtherReceiveErrors ipsecSaAhOutAddress ipsecSaAhOutSpi ipsecSaAhOutSourceId ipsecSaAhOutSourceIdType ipsecSaAhOutDestId ipsecSaAhOutDestIdType ipsecSaAhOutProtocol ipsecSaAhOutSourcePort ipsecSaAhOutDestPort ipsecSaAhOutCreator ipsecSaAhOutEncapsulation ipsecSaAhOutAuthAlg ipsecSaAhOutAuthKeyLength ipsecSaAhOutLimitSeconds ipsecSaAhOutLimitKbytes ipsecSaAhOutAccSeconds ipsecSaAhOutAccKbytes ipsecSaAhOutUserOctets ipsecSaAhOutPackets ipsecSaAhOutSendErrors ipsecAhCurrentInboundSAs ipsecAhTotalInboundSAs ipsecAhCurrentOutboundSAs ipsecAhTotalOutboundSAs A collection of objects that describe the state of the security associations of the AH protocol.	`.1.3.6.1.2.1.500.1.7.2`
ipsecSaIpcompGroup	ipsecSaIpcompInAddress ipsecSaIpcompInCpi ipsecSaIpcompInDestId ipsecSaIpcompInDestIdType ipsecSaIpcompInSourceId ipsecSaIpcompInSourceIdType ipsecSaIpcompInProtocol ipsecSaIpcompInDestPort ipsecSaIpcompInSourcePort ipsecSaIpcompInCreator ipsecSaIpcompInEncapsulation ipsecSaIpcompInDecompAlg ipsecSaIpcompInSeconds ipsecSaIpcompInUserOctets ipsecSaIpcompInPackets ipsecSaIpcompInDecompErrors ipsecSaIpcompInOtherReceiveErrors ipsecSaIpcompOutAddress ipsecSaIpcompOutCpi ipsecSaIpcompOutSourceId ipsecSaIpcompOutSourceIdType ipsecSaIpcompOutDestId ipsecSaIpcompOutDestIdType ipsecSaIpcompOutProtocol ipsecSaIpcompOutSourcePort ipsecSaIpcompOutDestPort ipsecSaIpcompOutCreator ipsecSaIpcompOutEncapsulation ipsecSaIpcompOutCompAlg ipsecSaIpcompOutSeconds ipsecSaIpcompOutUserOctets ipsecSaIpcompOutOutputOctets ipsecSaIpcompOutPackets ipsecIpcompCurrentInboundSAs ipsecIpcompTotalInboundSAs ipsecIpcompCurrentOutboundSAs ipsecIpcompTotalOutboundSAs A collection of objects that describe the state of the security associations of the IPComp protocol.	`.1.3.6.1.2.1.500.1.7.3`
ipsecSaErrorsGroup	ipsecDecryptionErrors ipsecAuthenticationErrors ipsecReplayErrors ipsecPolicyErrors ipsecOtherReceiveErrors ipsecUnknownSpiErrors ipsecSendErrors A collection of objects providing global IPsec error counters.	`.1.3.6.1.2.1.500.1.7.4`
ipsecSaFailureTrapEnableGroup	espAuthFailureTrapEnable ahAuthFailureTrapEnable espReplayFailureTrapEnable ahReplayFailureTrapEnable espPolicyFailureTrapEnable ahPolicyFailureTrapEnable invalidSpiTrapEnable otherPolicyFailureTrapEnable A collection of objects providing control over trap generation.	`.1.3.6.1.2.1.500.1.7.5`
ipsecSaTrapArgumentGroup	ipsecSecurityProtocol ipsecSPI ipsecLocalAddress ipsecPeerAddress A collection of objects used only as arguments in traps.	`.1.3.6.1.2.1.500.1.7.6`
ipsecSaFailureTrapGroup	espAuthFailureTrap ahAuthFailureTrap espReplayFailureTrap ahReplayFailureTrap espPolicyFailureTrap ahPolicyFailureTrap espInvalidSpiTrap otherPolicyFailureTrap A collection of traps.	`.1.3.6.1.2.1.500.1.7.7`

Compliance Statements (1)

OID .1.3.6.1.2.1.500.1.8.1

The compliance statement for SNMPv2 entities which
implement the IPsec Monitoring MIB.

Required groups

mandatory	ipsecSaEspGroup
mandatory	ipsecSaAhGroup
mandatory	ipsecSaErrorsGroup
mandatory	ipsecSaFailureTrapEnableGroup
mandatory	ipsecSaFailureTrapGroup
optional	ipsecSaIpcompGroup	This group is mandatory only for those systems that implement the IPComp protocol as a part of the IPsec suite.

Object refinements

Object	Access	Description
espAuthFailureTrapEnable	readonly	If an implementation cannot properly secure this variable against unauthorized write access, it SHOULD implement it as read-only, to prevent the security risk of enabling the traps. Of course, there must be other means of controlling the generation of the associated trap.
ahAuthFailureTrapEnable	readonly	If an implementation cannot properly secure this variable against unauthorized write access, it SHOULD implement it as read-only, to prevent the security risk of enabling the traps. Of course, there must be other means of controlling the generation of the associated trap.
espReplayFailureTrapEnable	readonly	If an implementation cannot properly secure this variable against unauthorized write access, it SHOULD implement it as read-only, to prevent the security risk of enabling the traps. Of course, there must be other means of controlling the generation of the associated trap.
ahReplayFailureTrapEnable	readonly	If an implementation cannot properly secure this variable against unauthorized write access, it SHOULD implement it as read-only, to prevent the security risk of enabling the traps. Of course, there must be other means of controlling the generation of the associated trap.
espPolicyFailureTrapEnable	readonly	If an implementation cannot properly secure this variable against unauthorized write access, it SHOULD implement it as read-only, to prevent the security risk of enabling the traps. Of course, there must be other means of controlling the generation of the associated trap.
ahPolicyFailureTrapEnable	readonly	If an implementation cannot properly secure this variable against unauthorized write access, it SHOULD implement it as read-only, to prevent the security risk of enabling the traps. Of course, there must be other means of controlling the generation of the associated trap.
invalidSpiTrapEnable	readonly	If an implementation cannot properly secure this variable against unauthorized write access, it SHOULD implement it as read-only, to prevent the security risk of enabling the traps. Of course, there must be other means of controlling the generation of the associated trap.
otherPolicyFailureTrapEnable	readonly	If an implementation cannot properly secure this variable against unauthorized write access, it SHOULD implement it as read-only, to prevent the security risk of enabling the traps. Of course, there must be other means of controlling the generation of the associated trap.

Notifications / Traps (8)

Name	OID	Description
espAuthFailureTrap ipsecSaEspInAuthErrors	`.1.3.6.1.2.1.500.1.4.0.1`	IPsec packets with invalid hashes were found in an inbound ESP SA. The total number of authentication errors accumulated is sent for the specific row of the 'ipsecSaEspInTable' table for the SA; this provides the identity of the SA in which the error occurred. Implementations SHOULD send one trap per SA (within a reasonable time period), rather than sending one trap per packet.
ahAuthFailureTrap ipsecSaAhInAuthErrors	`.1.3.6.1.2.1.500.1.4.0.2`	IPsec packets with invalid hashes were found in an inbound AH SA. The total number of authentication errors accumulated is sent for the specific row of the 'ipsecSaAhInTable' table for the SA; this provides the identity of the SA in which the error occurred. Implementations SHOULD send one trap per SA (within a reasonable time period), rather than sending one trap per packet.
espReplayFailureTrap ipsecSaEspInReplayErrors	`.1.3.6.1.2.1.500.1.4.0.3`	IPsec packets with invalid sequence numbers were found in an inbound ESP SA. The total number of replay errors accumulated is sent for the specific row of the 'ipsecSaEspInTable' table for the SA; this provides the identity of the SA in which the error occurred. Implementations SHOULD send one trap per SA (within a reasonable time period), rather than sending one trap per packet.
ahReplayFailureTrap ipsecSaAhInReplayErrors	`.1.3.6.1.2.1.500.1.4.0.4`	IPsec packets with invalid sequence numbers were found in the specified AH SA. The total number of replay errors accumulated is sent for the specific row of the 'ipsecSaAhInTable' table for the SA; this provides the identity of the SA in which the error occurred. Implementations SHOULD send one trap per SA (within a reasonable time period), rather than sending one trap per packet.
espPolicyFailureTrap ipsecSaEspInPolicyErrors	`.1.3.6.1.2.1.500.1.4.0.5`	IPsec packets carrying packets with invalid selectors for the specified ESP SA were found. The total number of policy errors accumulated is sent for the specific row of the 'ipsecSaEspInTable' table for the SA; this provides the identity of the SA in which the error occurred. Implementations SHOULD send one trap per SA (within a reasonable time period), rather than sending one trap per packet.
ahPolicyFailureTrap ipsecSaAhInPolicyErrors	`.1.3.6.1.2.1.500.1.4.0.6`	IPsec packets carrying packets with invalid selectors for the specified AH SA were found. The total number of policy errors accumulated is sent for the specific row of the 'ipsecSaAhInTable' table for the SA; this provides the identity of the SA in which the error occurred. Implementations SHOULD send one trap per SA (within a reasonable time period), rather than sending one trap per packet.
espInvalidSpiTrap ipsecLocalAddress ipsecSecurityProtocol ipsecPeerAddress ipsecSPI IF-MIBifIndex	`.1.3.6.1.2.1.500.1.4.0.7`	A packet with an unknown SPI was detected from the specified peer with the specified SPI using the specified protocol. The destination address of the received packet is specified by 'ipsecLocalAddress'. The value 'ifIndex' may be 0 if this optional linkage is unsupported. If the object 'ipsecSecurityProtocol' has the value for IPcomp, then the 'ipsecSPI' object is the CPI of the packet. Implementations SHOULD send one trap per peer (within a reasonable time period), rather than sending one trap per packet.
otherPolicyFailureTrap ipsecPolicyErrors ipsecPeerAddress ipsecLocalAddress	`.1.3.6.1.2.1.500.1.4.0.8`	Clear packets were found that should not have been sent to the entity in the clear. The total number of policy errors accumulated by the entity is sent, along with the source and destination addresses of the packet that triggered the trap. Implementations SHOULD send one trap per source address pair (within a reasonable time period), rather than sending one trap per packet.