JUNIPER-IPSEC-FLOW-MON-MIB Table View

The IPsec Phase-1 Internet Key Exchange Tunnel Table.
There is one entry in this table for each active IPsec
Phase-1 IKE Tunnel.

jnxIkeTunnelMonEntry row .1.3.6.1.4.1.2636.3.52.1.1.2.1

Each entry contains the attributes associated with
an active IPsec Phase-1 IKE Tunnel.

Indexes

jnxIkeTunMonRemoteGwAddrType jnxIkeTunMonRemoteGwAddr jnxIkeTunMonIndex

Column	Syntax	OID
jnxIkeTunMonRemoteGwAddrType The IP address type of the remote gateway (endpoint) for the IPsec Phase-1 IKE Tunnel.	INET-ADDRESS-MIBInetAddressType Type Values: 0 unknown 1 ipv4 2 ipv6 3 ipv4z 4 ipv6z 16 dns 25 l2vpn	.1.3.6.1.4.1.2636.3.52.1.1.2.1.1
jnxIkeTunMonRemoteGwAddr The IP address of the remote gateway (endpoint) for the IPsec Phase-1 IKE Tunnel.	INET-ADDRESS-MIBInetAddress Type Constraints: range: 0..255	.1.3.6.1.4.1.2636.3.52.1.1.2.1.2
jnxIkeTunMonIndex The index of the IPsec Phase-1 IKE Tunnel Table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The value of this object will wrap at 2,147,483,647.	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.2636.3.52.1.1.2.1.3
jnxIkeTunMonLocalGwAddr The IP address of the local endpoint (gateway) for the IPsec Phase-1 IKE Tunnel.	INET-ADDRESS-MIBInetAddress Type Constraints: range: 0..255	.1.3.6.1.4.1.2636.3.52.1.1.2.1.4
jnxIkeTunMonLocalGwAddrType The IP address type of the local endpoint (gateway) for the IPsec Phase-1 IKE Tunnel.	INET-ADDRESS-MIBInetAddressType Type Values: 0 unknown 1 ipv4 2 ipv6 3 ipv4z 4 ipv6z 16 dns 25 l2vpn	.1.3.6.1.4.1.2636.3.52.1.1.2.1.5
jnxIkeTunMonState The state of the IKE tunnel, It can be: 1. up - negotiation completed 2. down- being negotiated	JnxIkeTunStateType Type Values: 1 up 2 down	.1.3.6.1.4.1.2636.3.52.1.1.2.1.6
jnxIkeTunMonInitiatorCookie Cookie as generated by the peer that initiated the IKE Phase-1 negotiation. This cookie is carried in the ISAKMP header.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.2636.3.52.1.1.2.1.7
jnxIkeTunMonResponderCookie Cookie as generated by the peer responding to the IKE Phase-1 negotiation initiated by the remote peer. This cookie is carried in the ISAKMP header.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.2636.3.52.1.1.2.1.8
jnxIkeTunMonLocalRole The role of local peer identity. The Role of the local peer can be: 1. initiator. 2. or responder.	JnxIkePeerRole Type Values: 1 initiator 2 responder	.1.3.6.1.4.1.2636.3.52.1.1.2.1.9
jnxIkeTunMonLocalIdType The type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name string. 3. or a distinguished name string.	JnxIkePeerType Type Values: 0 unknown 1 idIpv4Addr 2 idFqdn 3 idDn 4 idUfqdn 5 idIpv6Addr	.1.3.6.1.4.1.2636.3.52.1.1.2.1.10
jnxIkeTunMonLocalIdValue The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is id_fqdn, then this is t…	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.2636.3.52.1.1.2.1.11
jnxIkeTunMonLocalCertName Name of the certificate used for authentication of the local tunnel endpoint. This object will have some valid value only if negotiated IKE authentication method is other than pre-saherd key. If the IKE negotiation do n…	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.2636.3.52.1.1.2.1.12
jnxIkeTunMonRemoteIdType The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name string. 3. or a distinguished name string.	JnxIkePeerType Type Values: 0 unknown 1 idIpv4Addr 2 idFqdn 3 idDn 4 idUfqdn 5 idIpv6Addr	.1.3.6.1.4.1.2636.3.52.1.1.2.1.13
jnxIkeTunMonRemoteIdValue The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is id_fqdn, then this …	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.2636.3.52.1.1.2.1.14
jnxIkeTunMonNegoMode The negotiation mode of the IPsec Phase-1 IKE Tunnel.	JnxIkeNegoMode Type Values: 1 main 2 aggressive 3 ikev2	.1.3.6.1.4.1.2636.3.52.1.1.2.1.15
jnxIkeTunMonDiffHellmanGrp The Diffie Hellman Group used in IPsec Phase-1 IKE negotiations.	JnxDiffHellmanGrp Type Values: 0 unknown 1 modp768 2 modp1024 5 modp1536 14 modp2048 15 modp3072 16 modp4096 19 ecmodp256 20 ecmodp384 21 ecmodp521 24 modp2048s256	.1.3.6.1.4.1.2636.3.52.1.1.2.1.16
jnxIkeTunMonEncryptAlgo The encryption algorithm used in IPsec Phase-1 IKE negotiations.	JnxEncryptAlgo Type Values: 1 espDes 2 esp3des 3 espNull 4 espAes128 5 espAes192 6 espAes256 7 espAesGcm128 8 espAesGcm192 9 espAesGcm256 10 espChaCha20Poly1305	.1.3.6.1.4.1.2636.3.52.1.1.2.1.17
jnxIkeTunMonHashAlgo The hash algorithm used in IPsec Phase-1 IKE negotiations.	JnxIkeHashAlgo Type Values: 1 md5 2 sha 3 sha256 4 sha384 5 sha512	.1.3.6.1.4.1.2636.3.52.1.1.2.1.18
jnxIkeTunMonAuthMethod The authentication method used in IPsec Phase-1 IKE negotiations.	JnxIkeAuthMethod Type Values: 1 preSharedKey 2 dssSignature 3 rsaSignature 4 rsaEncryption 5 revRsaEncryption 6 xauthPreSharedKey 7 xauthDssSignature 8 xauthRsaSignature 9 xauthRsaEncryption 10 xauthRevRsaEncryption 11 ecdsa256Signature 12 ecdsa384Signature 13 ecdsa521Signature 14 digitalSignature	.1.3.6.1.4.1.2636.3.52.1.1.2.1.19
jnxIkeTunMonLifeTime The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel in seconds.	secondsInteger32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.2636.3.52.1.1.2.1.20
jnxIkeTunMonActiveTime The length of time the IPsec Phase-1 IKE tunnel has been active in hundredths of seconds.	SNMPv2-TCTimeInterval Type Constraints: range: 0..2147483647 Description: A period of time, measured in units of 0.01 seconds.	.1.3.6.1.4.1.2636.3.52.1.1.2.1.21
jnxIkeTunMonInOctets The total number of octets received by this IPsec Phase-1 IKE security association.	OctetsSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.2.1.22
jnxIkeTunMonInPkts The total number of packets received by this IPsec Phase-1 IKE security association.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.2636.3.52.1.1.2.1.23
jnxIkeTunMonOutOctets The total number of octets sent by this IPsec Phase-1 IKE security association.	OctetsSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.2.1.24
jnxIkeTunMonOutPkts The total number of packets sent by this IPsec Phase-1 IKE security association.	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.2636.3.52.1.1.2.1.25
jnxIkeTunMonXAuthUserId The extended Authentication (XAuth) User Identifier, identifies the user associated with this IPSec Phase negotiation.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.2636.3.52.1.1.2.1.26
jnxIkeTunMonDPDDownCountobsolete The number of times that the remote peer is detected in a dead (or down) state. This attribute is obsolete	PacketsSNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.2636.3.52.1.1.2.1.27
jnxIkeTunMonInitiatorIkev2IPSecSaRekeyRequestOut The number of IPSec SA rekey CREATE_CHILD_SA request message sent by Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.2.1.28
jnxIkeTunMonInitiatorIkev2IPSecSaRekeyResponseIn The number of IPSec SA rekey CREATE_CHILD_SA response message received by Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.2.1.29
jnxIkeTunMonInitiatorIkev2IPSecSaRekeyNoProposalChosenIn The number of IPSec SA rekey CREATE_CHILD_SA NO_PROPSAL_CHOSEN Notification received by Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.2.1.30
jnxIkeTunMonInitiatorIkev2IPSecSaRekeyInvalidKeIn The number of IPSec SA rekey CREATE_CHILD_SA INVALID_KE_PAYLOAD received by Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.2.1.31
jnxIkeTunMonInitiatorIkev2IPSecSaRekeyTsUnacceptableIn The number of IPSec SA rekey CREATE_CHILD_SA TS_UNACCEPTABLE notification received by Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.2.1.32
jnxIkeTunMonInitiatorIkev2IPSecSaRekeyResVerifySaFail The number of IPSec SA rekey CREATE_CHILD_SA response message verification of peer SA failed at Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.2.1.33
jnxIkeTunMonInitiatorIkev2IPSecSaRekeyResVerifyDhGroupFail The number of IPSec SA rekey CREATE_CHILD_SA response message verification of DH group failed at Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.2.1.34
jnxIkeTunMonInitiatorIkev2IPSecSaRekeyResVerifyTsFail The number of IPSec SA rekey CREATE_CHILD_SA response message verification of TS failed at Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.2.1.35
jnxIkeTunMonInitiatorIkev2IPSecSaRekeyResDhComputeKeyFail The number of IPSec SA rekey CREATE_CHILD_SA response message Diffie-Hellman compute key failed at Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.2.1.36
jnxIkeTunMonResponderIkev2IPSecSaRekeyRequestIn The number of IPSec SA rekey CREATE_CHILD_SA request message received by Responder.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.2.1.37
jnxIkeTunMonResponderIkev2IPSecSaRekeyResponseOut The number of IPSec SA rekey CREATE_CHILD_SA response message sent by Responder.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.2.1.38
jnxIkeTunMonResponderIkev2IPSecSaRekeyNoProposalChosenOut The number of IPSec SA rekey CREATE_CHILD_SA NO_PROPSAL_CHOSEN Notification sent by Responder.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.2.1.39
jnxIkeTunMonResponderIkev2IPSecSaRekeyInvalidKeOut The number of IPSec SA rekey CREATE_CHILD_SA INVALID_KE_PAYLOAD Notification sent by Responder.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.2.1.40
jnxIkeTunMonResponderIkev2IPSecSaRekeyTsUnacceptableOut The number of IPSec SA rekey CREATE_CHILD_SA TS_UNACCEPTABLE notification sent by Responder.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.2.1.41
jnxIkeTunMonResponderIkev2IPSecSaRekeyResDhComputeKeyFail The number of IPSec SA rekey CREATE_CHILD_SA response message Diffie-Hellman compute key failed at Responder.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.2.1.42
jnxIkeTunMonGwName The gateway name	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.2636.3.52.1.1.2.1.43
jnxIkeTunMonTunType The Tunnel type. It can be regular (1) or ha-link (2)	JnxIkeTunType Type Values: 1 regular 2 halink	.1.3.6.1.4.1.2636.3.52.1.1.2.1.44
jnxIkeTunMonLocalSignatureHashAlgo The signature hash algorithm used locally in IPsec Phase-1 IKE negotiations.	JnxIkeLocalSignatureHashAlgo Type Values: 1 sha1 2 sha256 3 sha384 4 sha512	.1.3.6.1.4.1.2636.3.52.1.1.2.1.45
jnxIkeTunMonRemoteSignatureHashAlgo The signature hash algorithm used by remote peer in IPsec Phase-1 IKE negotiations.	JnxIkeRemoteSignatureHashAlgo Type Values: 1 sha1 2 sha256 3 sha384 4 sha512	.1.3.6.1.4.1.2636.3.52.1.1.2.1.46
jnxIkeTunMonDigitalSignAuthKey Signature key RSA/DSA/ECDSA used for digital-signature auth method.	JnxIkeDigitalSignAuthKey Type Values: 1 signAuthRsa 2 signAuthDsa 3 signAuthEcdsa	.1.3.6.1.4.1.2636.3.52.1.1.2.1.47

The IKE Key Exchange Peer Address Table. There is one entry in this table
for each IKE peer with which the managed entity is currently associated.

jnxIkePeerAddrEntry row .1.3.6.1.4.1.2636.3.52.1.1.4.1

Each entry contains the attributes associated with
an IKE Peer.

Indexes

jnxIkePeerAddrState jnxIkePeerAddrRemoteGwAddrType jnxIkePeerAddrRemoteGwAddr jnxIkePeerAddrRemotePort jnxIkePeerAddrLocalGwAddrType jnxIkePeerAddrLocalGwAddr jnxIkePeerAddrLocalPort jnxIkePeerAddrRoutingInstance

Column	Syntax	OID
jnxIkePeerAddrState The state of the peer, it can be: 1. active - The IKE peer is currently associated by an active IKE SA. There is at least one active IKE SA or Tunnel termination on the managed entity from the pe…	JnxPeerStateType Type Values: 1 active 2 inactive	.1.3.6.1.4.1.2636.3.52.1.1.4.1.1
jnxIkePeerAddrRemoteGwAddrType The IP address type of the remote gateway (endpoint) for the IPSec Phase-1 IKE Tunnel.	INET-ADDRESS-MIBInetAddressType Type Values: 0 unknown 1 ipv4 2 ipv6 3 ipv4z 4 ipv6z 16 dns 25 l2vpn	.1.3.6.1.4.1.2636.3.52.1.1.4.1.2
jnxIkePeerAddrRemoteGwAddr The IP address of the remote gateway (endpoint) for the IPSec Phase-1 IKE Tunnel.	INET-ADDRESS-MIBInetAddress Type Constraints: range: 0..255	.1.3.6.1.4.1.2636.3.52.1.1.4.1.3
jnxIkePeerAddrRemotePort The port number of the remote gateway (endpoint) for the IKE SA negotiation. The port number zero means the input value is ignored for this object and the default port is considered.	INET-ADDRESS-MIBInetPortNumber Type Constraints: range: 0..65535	.1.3.6.1.4.1.2636.3.52.1.1.4.1.4
jnxIkePeerAddrLocalGwAddrType The IP address type of the local endpoint (gateway) for the IPSec Phase-1 IKE Tunnel.	INET-ADDRESS-MIBInetAddressType Type Values: 0 unknown 1 ipv4 2 ipv6 3 ipv4z 4 ipv6z 16 dns 25 l2vpn	.1.3.6.1.4.1.2636.3.52.1.1.4.1.5
jnxIkePeerAddrLocalGwAddr The IP address of the local endpoint (gateway) for the IPSec Phase-1 IKE Tunnel.	INET-ADDRESS-MIBInetAddress Type Constraints: range: 0..255	.1.3.6.1.4.1.2636.3.52.1.1.4.1.6
jnxIkePeerAddrLocalPort The port number of the local gateway (endpoint) for the IKE SA negotiation. The port number zero means the input value is ignored for this object and the default port is considered.	INET-ADDRESS-MIBInetPortNumber Type Constraints: range: 0..65535	.1.3.6.1.4.1.2636.3.52.1.1.4.1.7
jnxIkePeerAddrRoutingInstance The VR ID.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.2636.3.52.1.1.4.1.8
jnxIkePeerAddrIndex The index of the IPSec Phase-1 key exchange Peer Table. The value of the index is a number which begins at one and is incremented with each peer that is created due to an association. The value of this object will wrap …	Unsigned32 Constraints: range: 1-4294967295	.1.3.6.1.4.1.2636.3.52.1.1.4.1.9

The IKE Key Exchange Peer ID Table. There is one entry in this table
for each IKE peer with which the managed entity is currently associated.
In the index truncated value for Remote ID value, Local ID value and AAA
username is used to restrict the length of the SNMP index to a legal
size. In the index, for jnxIkePeerIdRemoteId and jnxIkePeerIdLocalId, any
string longer than 41 bytes will be truncated and only 41 bytes would be
considered. Similarly in the index, for jnxIkePeerIdAAAUserName, any
string longer than 25 bytes will be truncated and only 25 bytes would be
considered. Because of the truncation, the index may become same for
different peers, to keep the index unique, jnxIkePeerInternalIndex is
used to uniquely identify each peer.

jnxIkePeerIdEntry row .1.3.6.1.4.1.2636.3.52.1.1.5.1

Each entry contains the attributes associated with
an IKE Peer.

Indexes

jnxIkePeerIdState jnxIkePeerIdRemoteIdType jnxIkePeerIdRemoteIdValue jnxIkePeerIdLocalIdType jnxIkePeerIdLocalIdValue jnxIkePeerIdAAAUserName jnxIkePeerInternalIndex

Column	Syntax	OID
jnxIkePeerIdState The state of the peer, it can be: 1. active - The IKE peer is currently associated by an active IKE SA. There is at least one active IKE SA or Tunnel termination on the managed entity from the pe…	JnxPeerStateType Type Values: 1 active 2 inactive	.1.3.6.1.4.1.2636.3.52.1.1.5.1.1
jnxIkePeerIdRemoteIdType The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name string. 3. or a distinguished name string.	JnxIkePeerType Type Values: 0 unknown 1 idIpv4Addr 2 idFqdn 3 idDn 4 idUfqdn 5 idIpv6Addr	.1.3.6.1.4.1.2636.3.52.1.1.5.1.2
jnxIkePeerIdRemoteIdValue The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is id_fqdn, then this …	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.2636.3.52.1.1.5.1.3
jnxIkePeerIdLocalIdType The type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name string. 3. or a distinguished name string.	JnxIkePeerType Type Values: 0 unknown 1 idIpv4Addr 2 idFqdn 3 idDn 4 idUfqdn 5 idIpv6Addr	.1.3.6.1.4.1.2636.3.52.1.1.5.1.4
jnxIkePeerIdLocalIdValue The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is id_fqdn, then this is t…	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.2636.3.52.1.1.5.1.5
jnxIkePeerIdAAAUserName Identifies the user with the specified authentication, authorization and accounting (AAA) username, associated with the IKE SA negotiation.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.2636.3.52.1.1.5.1.6
jnxIkePeerInternalIndex The internal index of the Peer Id table. This index is used to uniquely identify multiple entry for the same truncated ids.	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.2636.3.52.1.1.5.1.7
jnxIkePeerIdIndex The index of the IPSec Phase-1 key exchange Peer Table. The value of the index is a number which begins at one and is incremented with each peer that is created due to an association. The value of this object will wrap …	Unsigned32 Constraints: range: 1-4294967295	.1.3.6.1.4.1.2636.3.52.1.1.5.1.8

The IKE Key Exchange Peer Stats Table. There is one entry in this table
for each IKE peer with which the managed entity is currently associated.

jnxIkePeerStatsEntry row .1.3.6.1.4.1.2636.3.52.1.1.6.1

Each entry contains the attributes associated with an IKE Peer.

Indexes

jnxIkePeerStatsState jnxIkePeerStatsIndex

Column	Syntax	OID
jnxIkePeerStatsState The state of the peer, it can be: 1. active - The IKE peer is currently associated by an active IKE SA. There is at least one active IKE SA or Tunnel termination on the managed entity from the pe…	JnxPeerStateType Type Values: 1 active 2 inactive	.1.3.6.1.4.1.2636.3.52.1.1.6.1.1
jnxIkePeerStatsIndex The index of the IPSec Phase-1 key exchange Peer Table. The value of the index is a number which begins at one and is incremented with each peer that is created due to an association. The value of this object will wrap …	Unsigned32 Constraints: range: 1-4294967295	.1.3.6.1.4.1.2636.3.52.1.1.6.1.2
jnxIkePeerStatsRemoteGwAddrType The IP address type of the remote gateway (endpoint) for the IPSec Phase-1 IKE Tunnel.	INET-ADDRESS-MIBInetAddressType Type Values: 0 unknown 1 ipv4 2 ipv6 3 ipv4z 4 ipv6z 16 dns 25 l2vpn	.1.3.6.1.4.1.2636.3.52.1.1.6.1.3
jnxIkePeerStatsRemoteGwAddr The IP address of the remote gateway (endpoint) for the IPSec Phase-1 IKE Tunnel.	INET-ADDRESS-MIBInetAddress Type Constraints: range: 0..255	.1.3.6.1.4.1.2636.3.52.1.1.6.1.4
jnxIkePeerStatsRemotePort The value specifying a port associated with the remote gateway (endpoint) for the IKE Tunnel. A value of zero means that the port should be ignored.	INET-ADDRESS-MIBInetPortNumber Type Constraints: range: 0..65535	.1.3.6.1.4.1.2636.3.52.1.1.6.1.5
jnxIkePeerStatsLocalGwAddrType The IP address type of the local endpoint (gateway) for the IPSec Phase-1 IKE Tunnel.	INET-ADDRESS-MIBInetAddressType Type Values: 0 unknown 1 ipv4 2 ipv6 3 ipv4z 4 ipv6z 16 dns 25 l2vpn	.1.3.6.1.4.1.2636.3.52.1.1.6.1.6
jnxIkePeerStatsLocalGwAddr The IP address of the local endpoint (gateway) for the IPSec Phase-1 IKE Tunnel.	INET-ADDRESS-MIBInetAddress Type Constraints: range: 0..255	.1.3.6.1.4.1.2636.3.52.1.1.6.1.7
jnxIkePeerStatsLocalPort The value specifying a port associated with the local endpoint (gateway) for the IKE Tunnel. A value of zero means that the port should be ignored.	INET-ADDRESS-MIBInetPortNumber Type Constraints: range: 0..65535	.1.3.6.1.4.1.2636.3.52.1.1.6.1.8
jnxIkePeerStatsRoutingInstance The VR ID.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.2636.3.52.1.1.6.1.9
jnxIkePeerStatsRemoteIdType The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name string. 3. or a distinguished name string.	JnxIkePeerType Type Values: 0 unknown 1 idIpv4Addr 2 idFqdn 3 idDn 4 idUfqdn 5 idIpv6Addr	.1.3.6.1.4.1.2636.3.52.1.1.6.1.10
jnxIkePeerStatsRemoteIdValue The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is id_fqdn, then this is the FQDN of the remote peer…	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.2636.3.52.1.1.6.1.11
jnxIkePeerStatsLocalIdType The type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. or a fully qualified domain name string. 3. or a distinguished name string.	JnxIkePeerType Type Values: 0 unknown 1 idIpv4Addr 2 idFqdn 3 idDn 4 idUfqdn 5 idIpv6Addr	.1.3.6.1.4.1.2636.3.52.1.1.6.1.12
jnxIkePeerStatsLocalIdValue The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is id_fqdn, then this is the FQDN of the remote peer. If…	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.2636.3.52.1.1.6.1.13
jnxIkePeerStatsAAAUserName The extended authentication User Name, identifies the user associated with the IKE SA negotiation.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.2636.3.52.1.1.6.1.14
jnxIkePeerStatsGwName The gateway name	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.2636.3.52.1.1.6.1.15
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitRequestOut The number of IKE_SA_INIT request message sent by Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.16
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitResponseIn The number of IKE_SA_INIT response message received by Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.17
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitResInvalidIkeSpi The number of IKE_SA_INIT response message containing invalid SPI received by Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.18
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitInvalidKePayloadIn The total number of IKE_SA_INIT INVALID_KE_PAYLOAD received by Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.19
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitNoProposalChosenIn The number of IKE_SA_INIT NO_PROPSAL_CHOSEN received by Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.20
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitResVerifySaFail The number of IKE_SA_INIT response message verification of peer SA failed at Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.21
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitResIkeSaFillFail The number of IKE_SA_INIT response message IKE_SA fill operation failed at Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.22
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitResVerifyDhGroupFail The number of IKE_SA_INIT response message verification of DH group failed at Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.23
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitCookieRequestIn The total number of IKE_SA_INIT COOKIE notification request message received by Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.24
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitCookieResponseOut The total number of IKE_SA_INIT COOKIE notification response message sent by Responder.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.25
jnxIkePeerStatsIkeSaInitiatorIkev2SaInitResDhComputeKeyFail Number of IKE SA rekey response message Diffie-Hellman compute key failed at Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.26
jnxIkePeerStatsIkeSaResponderIkev2SaInitRequestIn The number of IKE_SA_INIT request message received by Responder.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.27
jnxIkePeerStatsIkeSaResponderIkev2SaInitResponseOut The number of IKE_SA_INIT response message sent by Responder.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.28
jnxIkePeerStatsIkeSaResponderIkev2SaInitNoProposalChosenOut The number of IKE_SA_INIT NO_PROPSAL_CHOSEN notification sent by Responder	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.29
jnxIkePeerStatsIkeSaResponderIkev2SaInitInvalidKePayloadOut The number of IKE_SA_INIT INVALID_KE_PAYLOAD notification sent by Responder.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.30
jnxIkePeerStatsIkeSaResponderIkev2SaInitResInvalidDhGroupConf The number of IKE_SA_INIT response message invalid DH group configured at Responder.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.31
jnxIkePeerStatsIkeSaResponderIkev2SaInitResDhGenKeyFail The number of IKE_SA_INIT response message Diffie-Hellman generate key failed at Responder	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.32
jnxIkePeerStatsIkeSaResponderIkev2SaInitResGetCAsFail The number of IKE_SA_INIT response message get CAs failed at Responder.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.33
jnxIkePeerStatsIkeSaResponderIkev2SaInitResGetVidFail The number of IKE_SA_INIT response message get vendor ID request failed at Responder.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.34
jnxIkePeerStatsIkeSaResponderIkev2SaInitResDhComputeKeyFail The number of IKE_SA_INIT response message Diffie-Hellman compute key failed at Responder	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.35
jnxIkePeerStatsIkeSaResponderIkev2SaInitCookieRequestOut The number of IKE_SA_INIT COOKIE notification request sent by Responder.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.36
jnxIkePeerStatsIkeSaResponderIkev2SaInitCookieResponseIn The number of IKE_SA_INIT COOKIE notification response message received by Responder.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.37
jnxIkePeerStatsIkeSaInitiatorIkev2AuthRequestOut The total number of IKE_AUTH request message sent by Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.38
jnxIkePeerStatsIkeSaInitiatorIkev2AuthResponseIn The total number of IKE_AUTH response message received by Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.39
jnxIkePeerStatsIkeSaInitiatorIkev2AuthNoProposalChosenIn The number of IKE_AUTH NO_PROPSAL_CHOSEN notification received by Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.40
jnxIkePeerStatsIkeSaInitiatorIkev2AuthTsUnacceptableIn The number of IKE_AUTH TS_UNACCEPTABLE notification received by Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.41
jnxIkePeerStatsIkeSaInitiatorIkev2AuthAuthenticationFailedIn The number of IKE_AUTH AUTHENTICATION_FAILED notification received by Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.42
jnxIkePeerStatsIkeSaResponderIkev2AuthRequestIn The number of IKE_AUTH request message received by Responder.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.43
jnxIkePeerStatsIkeSaResponderIkev2AuthResponseOut The number of IKE_AUTH response message sent by Responder.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.44
jnxIkePeerStatsIkeSaResponderIkev2AuthAuthenticationFailedOut The number of IKE_AUTH request message AUTHENTICATION_FAILED notification sent by Responder.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.45
jnxIkePeerStatsIkeSaResponderIkev2AuthNoProposalChosenOut The number of IKE_AUTH NO_PROPSAL_CHOSEN notification sent by Responder.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.46
jnxIkePeerStatsIkeSaResponderIkev2AuthTsUnacceptableOut The number of IKE_AUTH TS_UNACCEPTABLE notification sent by Responder.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.47
jnxIkePeerStatsIkeSaInitiatorIkev2IkeSaRekeyRequestOut The number of IKE_SA rekey CREATE_CHILD_SA request message sent by Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.48
jnxIkePeerStatsIkeSaInitiatorIkev2IkeSaRekeyResponseIn The number of IKE_SA rekey CREATE_CHILD_SA response message received by Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.49
jnxIkePeerStatsIkeSaInitiatorIkev2IkeSaRekeyNoProposalChosenIn The number of CREATE_CHILD_SA IKE SA rekey NO_PROPSAL_CHOSEN notification received by Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.50
jnxIkePeerStatsIkeSaInitiatorIkev2IkeSaRekeyInvalidKeIn The number of CREATE_CHILD_SA IKE SA rekey INVALID_KE_PAYLOAD received by Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.51
jnxIkePeerStatsIkeSaInitiatorIkev2IkeSaRekeyResVerifySaFail The number of CREATE_CHILD_SA IKE SA rekey response message verification of peer SA failed at Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.52
jnxIkePeerStatsIkeSaInitiatorIkev2IkeSaRekeyResFillIkeSaFail The number of IKE_SA rekey CREATE_CHILD_SA response message fill IKE_SA failed at Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.53
jnxIkePeerStatsIkeSaInitiatorIkev2IkeSaRekeyResVerifyDhGroupFail The number of CREATE_CHILD_SA IKE SA rekey response message verification of DH group failed at Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.54
jnxIkePeerStatsIkeSaInitiatorIkev2IkeSaRekeyResDhComputeKeyFail The number of CREATE_CHILD_SA IKE SA rekey response message Diffie-Hellman compute key failed at Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.55
jnxIkePeerStatsIkeSaResponderIkev2IkeSaRekeyRequestIn The number of IKE_SA rekey CREATE_CHILD_SA request message received by Responder.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.56
jnxIkePeerStatsIkeSaResponderIkev2IkeSaRekeyResponseOut The number of IKE_SA rekey CREATE_CHILD_SA response message sent by Responder.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.57
jnxIkePeerStatsIkeSaResponderIkev2IkeSaRekeyNoProposalChosenOut The number of CREATE_CHILD_SA IKE rekey NO_PROPSAL_CHOSEN notification sent by Responder	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.58
jnxIkePeerStatsIkeSaResponderIkev2IkeSaRekeyInvalidKeOut The number of IKE_SA rekey CREATE_CHILD_SA INVALID_KE_PAYLOAD sent by Responder.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.59
jnxIkePeerStatsIkeSaResponderIkev2IkeSaRekeyResDhComputeKeyFail The number of CREATE_CHILD_SA IKE rekey response message Diffie-Hellman compute key failed at Responder.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.60
jnxIkePeerStatsIkeSaInitiatorIkev2IPSecSaRekeyRequestOut The number of IPSec SA rekey CREATE_CHILD_SA request message sent by Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.61
jnxIkePeerStatsIkeSaInitiatorIkev2IPSecSaRekeyResponseIn The number of IPSec SA rekey CREATE_CHILD_SA response message received by Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.62
jnxIkePeerStatsIkeSaInitiatorIkev2IPSecSaRekeyNoProposalChosenIn The number of IPSec SA rekey CREATE_CHILD_SA NO_PROPSAL_CHOSEN notification received by Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.63
jnxIkePeerStatsIkeSaInitiatorIkev2IPSecSaRekeyInvalidKeIn The number of IPSec SA rekey CREATE_CHILD_SA INVALID_KE_PAYLOAD received by Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.64
jnxIkePeerStatsIkeSaInitiatorIkev2IPSecSaRekeyTsUnacceptableIn The number of IPSec SA rekey CREATE_CHILD_SA TS_UNACCEPTABLE notification received by Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.65
jnxIkePeerStatsIkeSaInitiatorIkev2IPSecSaRekeyResVerifySaFail The number of IPSec SA rekey CREATE_CHILD_SA response message verification of peer SA failed at Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.66
jnxIkePeerStatsIkeSaInitiatorIkev2IPSecSaRekeyResVerifyDhGrpFail The number of IPSec SA rekey CREATE_CHILD_SA response message verification of DH group failed at Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.67
jnxIkePeerStatsIkeSaInitiatorIkev2IPSecSaRekeyResVerifyTsFail The number of IPSec SA rekey CREATE_CHILD_SA response message verification of TS failed at Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.68
jnxIkePeerStatsIkeSaInitiatorIkev2IPSecSaRekeyResDhCompKeyFail The number of IPSec SA rekey CREATE_CHILD_SA response message Diffie-Hellman compute key failed at Initiator.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.69
jnxIkePeerStatsIkeSaResponderIkev2IPSecSaRekeyRequestIn The total number of IPSec SA rekey CREATE_CHILD_SA request message received by Responder.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.70
jnxIkePeerStatsIkeSaResponderIkev2IPSecSaRekeyResponseOut The total number of IPSec SA rekey CREATE_CHILD_SA response message sent by Responder.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.71
jnxIkePeerStatsIkeSaResponderIkev2IPSecSaRekeyNoPropChosenOut The number of IPSec SA rekey CREATE_CHILD_SA NO_PROPSAL_CHOSEN Notification sent by Responder.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.72
jnxIkePeerStatsIkeSaResponderIkev2IPSecSaRekeyInvalidKeOut The number of IPSec SA rekey CREATE_CHILD_SA INVALID_KE_PAYLOAD Notification sent by Responder.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.73
jnxIkePeerStatsIkeSaResponderIkev2IPSecSaRekeyTsUnacceptableOut The number of IPSec SA rekey CREATE_CHILD_SA TS_UNACCEPTABLE notification sent by Responder.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.74
jnxIkePeerStatsIkeSaResponderIkev2IPSecSaRekeyResDhCompKeyFail The number of IPSec SA rekey CREATE_CHILD_SA response message Diffie-Hellman compute key failed at Responder.	MessagesSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.1.6.1.75
jnxIkePeerStatsTunType The Tunnel type. It can be regular (1) or ha-link (2).	JnxIkeTunType Type Values: 1 regular 2 halink	.1.3.6.1.4.1.2636.3.52.1.1.6.1.76

The Peer Association to active IKE SA - Correlation Table.
There is one entry in this table for each active IKE SA.

jnxPeerIkeSaCorrEntry row .1.3.6.1.4.1.2636.3.52.1.1.7.1

Each entry contains the attributes of an
Peer Association to active IKE SA Correlation.

Indexes

jnxPeerIkeSaCorrPeerIndex jnxPeerIkeSaCorrIntIndex

Column	Syntax	OID
jnxPeerIkeSaCorrPeerIndex The index of the Peer (jnxPeerIndex in the jnxIkePeerTable).	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.2636.3.52.1.1.7.1.1
jnxPeerIkeSaCorrIntIndex The internal index of the Peer and IKE SA association. This internal index is used to uniquely identify multiple Instances of a unique association between the peer and IKE SA.	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.2636.3.52.1.1.7.1.2
jnxPeerIkeSaCorrIkeTunMonIndex The index of the active IKE SA (jnxIkeTunMonIndex in the jnxIkeTunnelMonTable) for this Peer association.	Unsigned32 Constraints: range: 1-4294967295	.1.3.6.1.4.1.2636.3.52.1.1.7.1.3

The Peer Association to IPSec Tunnel Correlation Table.
There is one entry in this table
for each active IPSec Tunnel.

jnxPeerIPSecTunnelCorrEntry row .1.3.6.1.4.1.2636.3.52.1.1.8.1

Each entry contains the attributes of an
Peer Association to active IPSec Tunnel Correlation.

Indexes

jnxPeerIPSecTunnelCorrPeerIndex jnxPeerIPSecTunnelCorrIntIndex

Column	Syntax	OID
jnxPeerIPSecTunnelCorrPeerIndex The index of the Peer (jnxPeerIndex in the jnxIkePeerTable).	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.2636.3.52.1.1.8.1.1
jnxPeerIPSecTunnelCorrIntIndex The internal index of the Peer and IPSec Tunnel association. This index is used to uniquely identify multiple association between the peer and IPSec Tunnel.	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.2636.3.52.1.1.8.1.2
jnxPeerIPSecTunnelCorrIPSecTunMonIndex The index of the active IPSec Tunnel (jnxIpSecTunMonIndex in the jnxIpSecTunnelMonTable) for this association between Peer and IPSec Tunnel.	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.2636.3.52.1.1.8.1.3

The IPsec Phase-2 Tunnel Table.
There is one entry in this table for each active IPsec Phase-2 
Tunnel.  If the tunnel is terminated, then the entry is no longer 
available after the table has been refreshed.

jnxIpSecTunnelMonEntry row .1.3.6.1.4.1.2636.3.52.1.2.2.1

Each entry contains the attributes
associated with an active IPsec Phase-2 Tunnel.

Indexes

jnxIpSecTunMonRemoteGwAddrType jnxIpSecTunMonRemoteGwAddr jnxIpSecTunMonIndex

Column	Syntax	OID
jnxIpSecTunMonRemoteGwAddrType The IP address type of the remote gateway (endpoint) for the IPsec Phase-2 Tunnel.	INET-ADDRESS-MIBInetAddressType Type Values: 0 unknown 1 ipv4 2 ipv6 3 ipv4z 4 ipv6z 16 dns 25 l2vpn	.1.3.6.1.4.1.2636.3.52.1.2.2.1.1
jnxIpSecTunMonRemoteGwAddr The IP address of the remote gateway (endpoint) for the IPsec Phase-2 Tunnel.	INET-ADDRESS-MIBInetAddress Type Constraints: range: 0..255	.1.3.6.1.4.1.2636.3.52.1.2.2.1.2
jnxIpSecTunMonIndex The index of the IPsec Phase-2 Tunnel Table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The value of this object will wrap at 2,147,483,647.	Integer32 Constraints: range: 1-2147483647	.1.3.6.1.4.1.2636.3.52.1.2.2.1.3
jnxIpSecTunMonLocalGwAddrType The IP address type of the local gateway (endpoint) for the IPsec Phase-2 Tunnel.	INET-ADDRESS-MIBInetAddressType Type Values: 0 unknown 1 ipv4 2 ipv6 3 ipv4z 4 ipv6z 16 dns 25 l2vpn	.1.3.6.1.4.1.2636.3.52.1.2.2.1.4
jnxIpSecTunMonLocalGwAddr The IP address of the local gateway (endpoint) for the IPsec Phase-2 Tunnel.	INET-ADDRESS-MIBInetAddress Type Constraints: range: 0..255	.1.3.6.1.4.1.2636.3.52.1.2.2.1.5
jnxIpSecTunMonLocalProxyIddeprecated Identifier for the local end.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.2636.3.52.1.2.2.1.6
jnxIpSecTunMonRemoteProxyIddeprecated Identifier for the remote end.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.2636.3.52.1.2.2.1.7
jnxIpSecTunMonKeyType The type of key used by the IPsec Phase-2 Tunnel. It can be one of the following two types: - IKE negotiated - Manually installed	JnxKeyType Type Values: 0 unknown 1 keyIke 2 keyManual	.1.3.6.1.4.1.2636.3.52.1.2.2.1.8
jnxIpSecTunMonRemotePeerType The type of the remote peer gateway (endpoint). It can be one of the following two types: - static (Remote peer whose IP address is known beforehand) - dynamic (Remote peer whose IP address is not known …	JnxRemotePeerType Type Values: 0 unknown 1 static 2 dynamic	.1.3.6.1.4.1.2636.3.52.1.2.2.1.9
jnxIpSecTunMonOutEncryptedBytes Number of bytes encrypted by this Phase-2 tunnel.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.2.2.1.10
jnxIpSecTunMonOutEncryptedPkts Number of packets encrypted by this Phase-2 tunnel.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.2.2.1.11
jnxIpSecTunMonInDecryptedBytes Number of bytes decrypted by this Phase-2 tunnel.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.2.2.1.12
jnxIpSecTunMonInDecryptedPkts Number of packets decrypted by this Phase-2 tunnel.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.2.2.1.13
jnxIpSecTunMonAHInBytes Number of incoming bytes authenticated using AH by this Phase-2 tunnel.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.2.2.1.14
jnxIpSecTunMonAHInPkts Number of incoming packets authenticated using AH by this Phase-2 tunnel.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.2.2.1.15
jnxIpSecTunMonAHOutBytes Number of outgoing bytes applied AH by this Phase-2 tunnel.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.2.2.1.16
jnxIpSecTunMonAHOutPkts Number of outgoing packets applied AH by this Phase-2 tunnel.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.2.2.1.17
jnxIpSecTunMonReplayDropPkts Number of packets dropped by this Phase-2 tunnel due to anti replay check failure.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.2.2.1.18
jnxIpSecTunMonAhAuthFails Number of packets received by this Phase-2 tunnel that failed AH authentication.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.2.2.1.19
jnxIpSecTunMonEspAuthFails Number of packets received by this Phase-2 tunnel that failed ESP authentication.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.2.2.1.20
jnxIpSecTunMonDecryptFails Number of packets received by this Phase-2 tunnel that failed decryption.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.2.2.1.21
jnxIpSecTunMonBadHeaders Number of packets received by this Phase-2 tunnel that failed due to bad headers.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.2.2.1.22
jnxIpSecTunMonBadTrailers Number of packets received by this Phase-2 tunnel that failed due to bad ESP trailers.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.2.2.1.23
jnxIpSecTunMonDroppedPktsobsolete Total number of dropped packets for this Phase-2 tunnel. This attribute is obsolete.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.2.2.1.26
jnxIpSecTunMonVpnName VPN tunnel name.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.2636.3.52.1.2.2.1.27
jnxIpSecTunMonTsName Traffic selector name.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.2636.3.52.1.2.2.1.28
jnxIpSecTunMonMultiSa Multi-SA Configuration Status.	Enumeration Enumerated Values: 0 disable 1 enable	.1.3.6.1.4.1.2636.3.52.1.2.2.1.29
jnxIpSecTunMonInvalidSpi Total number of Invalid SPI for this IPSec tunnel.	PacketsSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.2.2.1.30
jnxIpSecTunMonTsCheckFail Total number of TS check fail for this IPSec tunnel.	PacketsSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.2.2.1.31
jnxIpSecTunMonDiscarded Total number of discarded packets for this IPSec tunnel.	PacketsSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.2.2.1.32
jnxIpSecTunMonTunType The Tunnel type. It can be regular (1) or ha-link (2).	JnxIkeTunType Type Values: 1 regular 2 halink	.1.3.6.1.4.1.2636.3.52.1.2.2.1.33
jnxIpSecTunMonTsType The TS type. It can be proxyId (1) or trafficSelector (2).	JnxIpSecTsType Type Values: 1 proxyId 2 trafficSelector	.1.3.6.1.4.1.2636.3.52.1.2.2.1.34
jnxIpSecTunMonTSi Negotiated Traffic Selector or Proxy ID for the local end.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.2636.3.52.1.2.2.1.35
jnxIpSecTunMonTSr Negotiated Traffic Selector or Proxy ID for the remote end.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.2636.3.52.1.2.2.1.36
jnxIpSecTunMonTunMtu The maximum transmit packet size (256..9192) for IPSec tunnels. The value of this object will be 0, if tunnel MTU is not configured.	Integer32 Constraints: range: 0-9192	.1.3.6.1.4.1.2636.3.52.1.2.2.1.37
jnxIpSecTunMonExceedsTunMtu Number of packets received by this Phase-2 tunnel that failed due to Exceeding Tunnel MTU.	PacketsSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2636.3.52.1.2.2.1.38

The IPsec Phase-2 Security Association Table.
This table identifies the structure (in terms of
component SAs) of each active Phase-2 IPsec tunnel.
This table contains an entry for each active and
expiring security association and maps each entry
in the active Phase-2 tunnel table (ipSecTunTable)
into a number of entries in this table. 
          
SA contains the information negotiated by IKE. The SA 
is like a contract laying out the rules of the VPN 
connection for the duration of the SA. An SA is assigned 
a 32-bit number that, when used in conjunction with the 
destination IP address, uniquely identifies the SA. This 
number is called the Security Parameters Index or SPI.
          
IPSec SAs area unidirectional and they are unique in 
each security protocol. A set of SAs are needed for a 
protected data pipe, one per direction per protocol.

jnxIpSecSaMonEntry row .1.3.6.1.4.1.2636.3.52.1.2.3.1

Each entry contains the attributes associated with
active and expiring IPsec Phase-2
security associations.

Indexes

jnxIpSecTunMonRemoteGwAddrType jnxIpSecTunMonRemoteGwAddr jnxIpSecTunMonIndex jnxIpSecSaMonIndex

Column	Syntax	OID
jnxIpSecSaMonIndex The index, in the context of the IPsec tunnel ipSecTunIndex, of the security association represented by this table entry. The value of this index is a number which begins at one and is incremented with each SPI associat…	Integer32 Constraints: range: 1-65535	.1.3.6.1.4.1.2636.3.52.1.2.3.1.1
jnxIpSecSaMonProtocol The index, represents the security protocol (AH, ESP or IPComp) for which this security association was setup.	Enumeration Enumerated Values: 1 ah 2 esp	.1.3.6.1.4.1.2636.3.52.1.2.3.1.2
jnxIpSecSaMonInSpi The value of the incoming SPI.	JnxSpiType Type Constraints: range: 256..4294967295	.1.3.6.1.4.1.2636.3.52.1.2.3.1.3
jnxIpSecSaMonOutSpi The value of the outgoing SPI.	JnxSpiType Type Constraints: range: 256..4294967295	.1.3.6.1.4.1.2636.3.52.1.2.3.1.4
jnxIpSecSaMonType This field represents the type of security associations which can be either manual or dynamic	JnxSAType Type Values: 0 unknown 1 manual 2 dynamic	.1.3.6.1.4.1.2636.3.52.1.2.3.1.5
jnxIpSecSaMonEncapMode The encapsulation mode used by an IPsec Phase-2 Tunnel.	JnxEncapMode Type Values: 0 unknown 1 tunnel 2 transport	.1.3.6.1.4.1.2636.3.52.1.2.3.1.6
jnxIpSecSaMonLifeSize The negotiated LifeSize of the IPsec Phase-2 Tunnel in kilobytes.	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2636.3.52.1.2.3.1.7
jnxIpSecSaMonLifeTime The negotiated LifeTime of the IPsec Phase-2 Tunnel in seconds.	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2636.3.52.1.2.3.1.8
jnxIpSecSaMonActiveTime The length of time the IPsec Phase-2 Tunnel has been active in hundredths of seconds.	SNMPv2-TCTimeInterval Type Constraints: range: 0..2147483647 Description: A period of time, measured in units of 0.01 seconds.	.1.3.6.1.4.1.2636.3.52.1.2.3.1.9
jnxIpSecSaMonLifeSizeThreshold The security association LifeSize refresh threshold in kilobytes.	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2636.3.52.1.2.3.1.10
jnxIpSecSaMonLifeTimeThreshold The security association LifeTime refresh threshold in seconds.	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2636.3.52.1.2.3.1.11
jnxIpSecSaMonEncryptAlgo The Encryption algorithm used to encrypt the packets.	JnxEncryptAlgo Type Values: 1 espDes 2 esp3des 3 espNull 4 espAes128 5 espAes192 6 espAes256 7 espAesGcm128 8 espAesGcm192 9 espAesGcm256 10 espChaCha20Poly1305	.1.3.6.1.4.1.2636.3.52.1.2.3.1.12
jnxIpSecSaMonAuthAlgo The algorithm used for authentication of packets which can be hmac-md5-96 or hmac-sha1-96 or hmac-sha-256-128	JnxAuthAlgo Type Values: 0 unknown 1 hmacMd5 2 hmacSha 3 hmacSha256 4 hmacSha384 5 hmacSha512 6 aesGcm128 7 aesGcm192 8 aesGcm256 9 chacha20Poly1305	.1.3.6.1.4.1.2636.3.52.1.2.3.1.13
jnxIpSecSaMonState This column represents the status of the security association represented by this table entry. If the status of the SA is 'active', the SA is ready for active use. The status 'expiring' represents any of the various sta…	Enumeration Enumerated Values: 0 unknown 1 active 2 expiring	.1.3.6.1.4.1.2636.3.52.1.2.3.1.14
jnxIpSecSaMonFcName Class-Of-Service Forwarding Class name.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.2636.3.52.1.2.3.1.15
jnxIpSecSaMonEsnMode This field represents whether IPSec extended sequence number support is enabled or disabled	JnxEsnMode Type Values: 0 none 1 enable 2 disable	.1.3.6.1.4.1.2636.3.52.1.2.3.1.16