LUM-CRYPTO-MIB Table View

Table-centric layout grouping table, row, and column objects.

Standard view Table view
Tables
5
Rows
5
Columns
77

cryptoAuthTable

table
.1.3.6.1.4.1.8708.2.73.2.2.1 · 1 row entry · 8 columns
Open in standard view
Uses the infinera variant from /opt/observium/mibs/infinera.
Command help
Walk cryptoAuthTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'LUM-CRYPTO-MIB' -M '/opt/observium/mibs/infinera:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'LUM-CRYPTO-MIB::cryptoAuthTable' 
The crypto auth group contains information and
configuration for the crypto authentication.
cryptoAuthEntry row .1.3.6.1.4.1.8708.2.73.2.2.1.1
An entry in the crypto auth list.
Indexes
Column Syntax OID
cryptoAuthIndex
An index assigned to each entry.
SNMPv2-SMIUnsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.8708.2.73.2.2.1.1.1
cryptoAuthUId
A unique identifier assigned to each entry.
SNMPv2-SMIUnsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.8708.2.73.2.2.1.1.2
cryptoAuthName
The management name of the object,
in the format 'authentication:subrack:slot:Id'
LUM-TCMgmtNameString
Type Constraints:
range: 0..255
Description:
An octet string containing administrative
information, in human-readable form.

More or less the same as SnmpAdminString
defined in SNMP-FRAMEWORK-MIB.
 .1.3.6.1.4.1.8708.2.73.2.2.1.1.3
cryptoAuthIdentity
A globally unique authentication identifier for this board.
This is unique identity for communication, if found blank
please generate it using Generate Authentication Identity Option.
LUM-TCMgmtNameString
Type Constraints:
range: 0..255
Description:
An octet string containing administrative
information, in human-readable form.

More or less the same as SnmpAdminString
defined in SNMP-FRAMEWORK-MIB.
 .1.3.6.1.4.1.8708.2.73.2.2.1.1.4
cryptoAuthReAuthInterval
Denotes the interval after which reauthentication
will be triggered to ensure message integrity.
Unsigned32r/w
Constraints:
range: 1-500
 .1.3.6.1.4.1.8708.2.73.2.2.1.1.5
cryptoAuthReAuth
Action to initiate reauthentication for all IKE peers.
LUM-TCCommandString
Description:
tbd
 .1.3.6.1.4.1.8708.2.73.2.2.1.1.6
cryptoAuthCreateIKEPeer
Command for creating an IKE peer entry.
LUM-TCCommandString
Description:
tbd
 .1.3.6.1.4.1.8708.2.73.2.2.1.1.7
cryptoAuthGeneratedUniqueIdentity
A generated unique identifier which will be used,
in case backplane serial number is not present for node.
LUM-TCMgmtNameStringr/w
Type Constraints:
range: 0..255
Description:
An octet string containing administrative
information, in human-readable form.

More or less the same as SnmpAdminString
defined in SNMP-FRAMEWORK-MIB.
 .1.3.6.1.4.1.8708.2.73.2.2.1.1.8

cryptoIKEPeerTable

table
.1.3.6.1.4.1.8708.2.73.2.3.1 · 1 row entry · 18 columns
Open in standard view
Uses the infinera variant from /opt/observium/mibs/infinera.
Command help
Walk cryptoIKEPeerTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'LUM-CRYPTO-MIB' -M '/opt/observium/mibs/infinera:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'LUM-CRYPTO-MIB::cryptoIKEPeerTable' 
The crypto peer group contains information and
configuration for the crypto peer.
cryptoIKEPeerEntry row .1.3.6.1.4.1.8708.2.73.2.3.1.1
An entry in the crypto peer list.
Indexes
Column Syntax OID
cryptoIKEPeerIndex
An index assigned to each entry.
SNMPv2-SMIUnsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.8708.2.73.2.3.1.1.1
cryptoIKEPeerUId
An unique identifier assigned to each entry.
SNMPv2-SMIUnsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.8708.2.73.2.3.1.1.2
cryptoIKEPeerName
The management name of the object,
in the format 'ikePeer:subrack:slot:Id.'
LUM-TCMgmtNameString
Type Constraints:
range: 0..255
Description:
An octet string containing administrative
information, in human-readable form.

More or less the same as SnmpAdminString
defined in SNMP-FRAMEWORK-MIB.
 .1.3.6.1.4.1.8708.2.73.2.3.1.1.3
cryptoIKEPeerIdentity
A globally unique authentication identifier for this IKE peer.
LUM-TCMgmtNameString
Type Constraints:
range: 0..255
Description:
An octet string containing administrative
information, in human-readable form.

More or less the same as SnmpAdminString
defined in SNMP-FRAMEWORK-MIB.
 .1.3.6.1.4.1.8708.2.73.2.3.1.1.4
cryptoIKEPeerExpectedIKEPeerIdentity
Denotes the user configured expected identifier of the IKE peer.
LUM-TCMgmtNameStringr/w
Type Constraints:
range: 0..255
Description:
An octet string containing administrative
information, in human-readable form.

More or less the same as SnmpAdminString
defined in SNMP-FRAMEWORK-MIB.
 .1.3.6.1.4.1.8708.2.73.2.3.1.1.5
cryptoIKEPeerAuthScheme
The authentication scheme to use for this IKE peer.
Enumerationr/w
Enumerated Values:
1psk
 .1.3.6.1.4.1.8708.2.73.2.3.1.1.6
cryptoIKEPeerPSK
The pre-shared key(PSK) used to authenticate the IKE peer.
SNMPv2-TCDisplayString
Type Constraints:
range: 0..255
Description:
Represents textual information taken from the NVT ASCII

character set, as defined in pages 4, 10-11 of RFC 854.

To summarize RFC 854, the NVT ASCII repertoire specifies:

- the use of c…
 .1.3.6.1.4.1.8708.2.73.2.3.1.1.7
cryptoIKEPeerAdminStatus
The administrative state for the IKE peer.

service - the object is activated but alarms
are suppressed. Intended for use during service
or reconfiguration. When service is concluded
adminStatus should be …
LUM-TCAdminStatusWithOutDownr/w
Type Values:
2service
3up
2147483647notApplicable
Description:
The administrative state for an interface.

service - The board/interface is activated but
alarms are suppressed. Intended for use during
service or re-configuration. When service is
concluded adminStatus shou…
 .1.3.6.1.4.1.8708.2.73.2.3.1.1.8
cryptoIKEPeerOperStatus
The operational state of this object.
This attribute is required to automatically suppress (or not)
the alarms from admin status attribute.
LUM-TCOperStatusWithNA
Type Values:
1notPresent
2down
3up
2147483647notApplicable
Description:
The operational state for a interface.

notPresent - The interface is not available.

down - The interface is de-activated or
there are faults preventing it from going to the
'up'-state.

u…
 .1.3.6.1.4.1.8708.2.73.2.3.1.1.9
cryptoIKEPeerLastReAuthTime
The last time this IKE peer was reauthenticated.
SNMPv2-TCDateAndTime
Type Constraints:
range: 8
range: 11
Description:
A date-time specification.

field octets contents range
----- ------ -------- -----
1 1-2 year* 0..65536
2 3 month …
 .1.3.6.1.4.1.8708.2.73.2.3.1.1.10
cryptoIKEPeerReKeyInterval
The value denotes the remaining time interval beyond which the system
will initiate re-key for this IKE peer.
Unsigned32r/w
Constraints:
range: 600-86400
 .1.3.6.1.4.1.8708.2.73.2.3.1.1.11
cryptoIKEPeerLastReKeyTime
The last time the peer was rekeyed.
SNMPv2-TCDateAndTime
Type Constraints:
range: 8
range: 11
Description:
A date-time specification.

field octets contents range
----- ------ -------- -----
1 1-2 year* 0..65536
2 3 month …
 .1.3.6.1.4.1.8708.2.73.2.3.1.1.12
cryptoIKEPeerReKey
Action to initiate rekey for this IKE peer.
LUM-TCCommandString
Description:
tbd
 .1.3.6.1.4.1.8708.2.73.2.3.1.1.13
cryptoIKEPeerUnreachable
Unable to reach the IKE Peer.

alarm: communication failure.

ok: IKE peer communication successfull.
LUM-TCFaultStatusWithNA
Type Values:
1ok
2alarm
2147483647notApplicable
Description:
A value indicating the current state
of a potential fault condition leading to
an alarm for an object.

ok - indicates that no fault condition is present
and no alarm is active or the alarm has been cleared.
…
 .1.3.6.1.4.1.8708.2.73.2.3.1.1.14
cryptoIKEPeerConfigMismatch
IKE SA cannot be negotiated due to mismatch in SA proposal.

alarm: configured peer identity wrong or un-configured.

ok: the encryption configuration matches.
LUM-TCFaultStatusWithNA
Type Values:
1ok
2alarm
2147483647notApplicable
Description:
A value indicating the current state
of a potential fault condition leading to
an alarm for an object.

ok - indicates that no fault condition is present
and no alarm is active or the alarm has been cleared.
…
 .1.3.6.1.4.1.8708.2.73.2.3.1.1.15
cryptoIKEPeerAuthenticationFailure
Re-authentication with the peer instance failed.

alarm: re-authentication with the peer instance failed.

ok: the IKE authentication is successfull.
LUM-TCFaultStatusWithNA
Type Values:
1ok
2alarm
2147483647notApplicable
Description:
A value indicating the current state
of a potential fault condition leading to
an alarm for an object.

ok - indicates that no fault condition is present
and no alarm is active or the alarm has been cleared.
…
 .1.3.6.1.4.1.8708.2.73.2.3.1.1.16
cryptoIKEPeerReKeyFailure
The rekey of the IKE SA fails.

alarm: IKE SA rekey is unsuccessfull.

ok: IKE SA rekey is successfull.
LUM-TCFaultStatusWithNA
Type Values:
1ok
2alarm
2147483647notApplicable
Description:
A value indicating the current state
of a potential fault condition leading to
an alarm for an object.

ok - indicates that no fault condition is present
and no alarm is active or the alarm has been cleared.
…
 .1.3.6.1.4.1.8708.2.73.2.3.1.1.17
cryptoIKEPeerSetPSK
Set the Pre-shared key(PSK). This key will be used to authenticate the IKE peer.

PSK should be in the below format:
- text string
- valid length: 64-128 characters
LUM-TCCommandString
Description:
tbd
 .1.3.6.1.4.1.8708.2.73.2.3.1.1.18

cryptoDataplaneEncryptionTable

table
.1.3.6.1.4.1.8708.2.73.2.4.1 · 1 row entry · 24 columns
Open in standard view
Uses the infinera variant from /opt/observium/mibs/infinera.
Command help
Walk cryptoDataplaneEncryptionTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'LUM-CRYPTO-MIB' -M '/opt/observium/mibs/infinera:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'LUM-CRYPTO-MIB::cryptoDataplaneEncryptionTable' 
The crypto dataplane encryption contains information and
configuration for the crypto dataplane encryption.
cryptoDataplaneEncryptionEntry row .1.3.6.1.4.1.8708.2.73.2.4.1.1
An entry in the crypto dataplane encryption list.
Indexes
Column Syntax OID
cryptoDataplaneEncryptionIndex
An index assigned to each entry.
SNMPv2-SMIUnsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.8708.2.73.2.4.1.1.1
cryptoDataplaneEncryptionUId
An unique identifier assigned to each entry.
SNMPv2-SMIUnsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.8708.2.73.2.4.1.1.2
cryptoDataplaneEncryptionName
The management name of the Dataplane Link,
in the format 'dpEncr:subrack:slot:portNumber'.
LUM-TCMgmtNameString
Type Constraints:
range: 0..255
Description:
An octet string containing administrative
information, in human-readable form.

More or less the same as SnmpAdminString
defined in SNMP-FRAMEWORK-MIB.
 .1.3.6.1.4.1.8708.2.73.2.4.1.1.3
cryptoDataplaneEncryptionLocalDataplaneId
Denotes the unique local unique identifier for the dataplane link
LUM-TCMgmtNameString
Type Constraints:
range: 0..255
Description:
An octet string containing administrative
information, in human-readable form.

More or less the same as SnmpAdminString
defined in SNMP-FRAMEWORK-MIB.
 .1.3.6.1.4.1.8708.2.73.2.4.1.1.4
cryptoDataplaneEncryptionExpectedPeerDataplaneId
Denotes the user configured expected Dataplane link peer unique identifier.
LUM-TCMgmtNameStringr/w
Type Constraints:
range: 0..255
Description:
An octet string containing administrative
information, in human-readable form.

More or less the same as SnmpAdminString
defined in SNMP-FRAMEWORK-MIB.
 .1.3.6.1.4.1.8708.2.73.2.4.1.1.5
cryptoDataplaneEncryptionDiscoveredPeerDataplaneId
Denotes the actual peer Dataplane link identifier discovered by the system.
LUM-TCMgmtNameString
Type Constraints:
range: 0..255
Description:
An octet string containing administrative
information, in human-readable form.

More or less the same as SnmpAdminString
defined in SNMP-FRAMEWORK-MIB.
 .1.3.6.1.4.1.8708.2.73.2.4.1.1.6
cryptoDataplaneEncryptionOTNOHAllocation
Denotes the OTN overhead chosen by the user for Dataplane link.

The system offers 4 options. For each option the row,column and the
bytes occupied by encryption overhead is given below:

aps…
Enumerationr/w
Enumerated Values:
1apsPccTcm36
2apsPccTcm13
3tcm1456
4tcm3456
 .1.3.6.1.4.1.8708.2.73.2.4.1.1.7
cryptoDataplaneEncryptionIKEPeerIdentity
Denotes the corresponding IKE Peer associated to the data plane
entity. This attribute is used only for internal communication
between Control and Traffic Unit.
Enumeration
Enumerated Values:
0none
1ikePeer1
2ikePeer2
3ikePeer3
4ikePeer4
5ikePeer5
6ikePeer6
7ikePeer7
8ikePeer8
9ikePeer9
10ikePeer10
11ikePeer11
12ikePeer12
13ikePeer13
14ikePeer14
15ikePeer15
16ikePeer16
2147483647notApplicable
 .1.3.6.1.4.1.8708.2.73.2.4.1.1.8
cryptoDataplaneEncryptionReKeyInterval
The value denotes the remaining time interval beyond which the system will initiate re-key.
Unsigned32r/w
Constraints:
range: 300-86400
 .1.3.6.1.4.1.8708.2.73.2.4.1.1.9
cryptoDataplaneEncryptionFailurePolicy
The value denotes which policy is applied on rekey or re-auth failure scenarios.
continueop - indicates continue operation for 14.18 days, post which
traffic will be stopped.
killtraffic - indicates stop the traffic aft…
Enumerationr/w
Enumerated Values:
1continueop
2killtraffic
 .1.3.6.1.4.1.8708.2.73.2.4.1.1.10
cryptoDataplaneEncryptionTrafficKillTimeOffset
Represents, how long to hold-off before traffic should be killed.
Applies if failure policy is set to kill traffic.
Unsigned32r/w
Constraints:
range: 600-86400
 .1.3.6.1.4.1.8708.2.73.2.4.1.1.11
cryptoDataplaneEncryptionEncryptionMode
Denotes the encryption mode selected by user for Dataplane link
Enumerationr/w
Enumerated Values:
1noEncryption
2gcm
 .1.3.6.1.4.1.8708.2.73.2.4.1.1.12
cryptoDataplaneEncryptionLastReKeyTimeTx
Denotes the last time the dataplane was rekeyed in tx direction.
SNMPv2-TCDateAndTime
Type Constraints:
range: 8
range: 11
Description:
A date-time specification.

field octets contents range
----- ------ -------- -----
1 1-2 year* 0..65536
2 3 month …
 .1.3.6.1.4.1.8708.2.73.2.4.1.1.13
cryptoDataplaneEncryptionLastReKeyTimeRx
Denotes the last time the dataplane was rekeyed in rx direction.
SNMPv2-TCDateAndTime
Type Constraints:
range: 8
range: 11
Description:
A date-time specification.

field octets contents range
----- ------ -------- -----
1 1-2 year* 0..65536
2 3 month …
 .1.3.6.1.4.1.8708.2.73.2.4.1.1.14
cryptoDataplaneEncryptionIVExhausted
IV has been used too many times and is about to wrap back to zero.

alarm: data plane has detected that the IV has been used too many times.

ok: IV exhaustion condition cleared.
LUM-TCFaultStatusWithNA
Type Values:
1ok
2alarm
2147483647notApplicable
Description:
A value indicating the current state
of a potential fault condition leading to
an alarm for an object.

ok - indicates that no fault condition is present
and no alarm is active or the alarm has been cleared.
…
 .1.3.6.1.4.1.8708.2.73.2.4.1.1.15
cryptoDataplaneEncryptionFunctionBlocked
This alarm is applicable when encryption mode = gcm
but encryption is not in affect due to other alarms or admin status.

alarm: encryption function blocked traffic.

ok: encryption function …
LUM-TCFaultStatusWithNA
Type Values:
1ok
2alarm
2147483647notApplicable
Description:
A value indicating the current state
of a potential fault condition leading to
an alarm for an object.

ok - indicates that no fault condition is present
and no alarm is active or the alarm has been cleared.
…
 .1.3.6.1.4.1.8708.2.73.2.4.1.1.16
cryptoDataplaneEncryptionPeerDpIdMismatch
The expected peer dataplane identity does not match with what is discovered.

alarm: expected peer dataplane identity does not match with what is discovered.

ok: peer dataplane matches with …
LUM-TCFaultStatusWithNA
Type Values:
1ok
2alarm
2147483647notApplicable
Description:
A value indicating the current state
of a potential fault condition leading to
an alarm for an object.

ok - indicates that no fault condition is present
and no alarm is active or the alarm has been cleared.
…
 .1.3.6.1.4.1.8708.2.73.2.4.1.1.17
cryptoDataplaneEncryptionConfigMismatch
The CHILD SA cannot be negotiated due to config mismatch.

alarm: CHILD SA cannot be negotiated due to config mismatch.

ok: encryption config matches successfully.
LUM-TCFaultStatusWithNA
Type Values:
1ok
2alarm
2147483647notApplicable
Description:
A value indicating the current state
of a potential fault condition leading to
an alarm for an object.

ok - indicates that no fault condition is present
and no alarm is active or the alarm has been cleared.
…
 .1.3.6.1.4.1.8708.2.73.2.4.1.1.18
cryptoDataplaneEncryptionReKeyFailure
The rekey of the CHILD SA fails.

alarm: rekey of the CHILD SA fails.

ok: rekey of child SA successfull.
LUM-TCFaultStatusWithNA
Type Values:
1ok
2alarm
2147483647notApplicable
Description:
A value indicating the current state
of a potential fault condition leading to
an alarm for an object.

ok - indicates that no fault condition is present
and no alarm is active or the alarm has been cleared.
…
 .1.3.6.1.4.1.8708.2.73.2.4.1.1.19
cryptoDataplaneEncryptionUnexpectedRxKeyId
Unexpected rx key identifier.

alarm: rx key identifier in the dataplane does not match with what has been programmed.

ok: rx key Identifier matches successfully.
LUM-TCFaultStatusWithNA
Type Values:
1ok
2alarm
2147483647notApplicable
Description:
A value indicating the current state
of a potential fault condition leading to
an alarm for an object.

ok - indicates that no fault condition is present
and no alarm is active or the alarm has been cleared.
…
 .1.3.6.1.4.1.8708.2.73.2.4.1.1.20
cryptoDataplaneEncryptionReKey
Action to initiate rekey for this Dataplane entity.
LUM-TCCommandString
Description:
tbd
 .1.3.6.1.4.1.8708.2.73.2.4.1.1.21
cryptoDataplaneEncryptionConnectedOduIndex
DPE entity and ODU connection identifier.
Unsigned32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.8708.2.73.2.4.1.1.22
cryptoDataplaneEncryptionTrxSelfTestFailure
This alarm occurs when self-test procedure fails for the AES-engine
related to this data plane object.

alarm: Self-test procedure fails for the AES-engine.

ok: Self-test procedure is succes…
LUM-TCFaultStatusWithNA
Type Values:
1ok
2alarm
2147483647notApplicable
Description:
A value indicating the current state
of a potential fault condition leading to
an alarm for an object.

ok - indicates that no fault condition is present
and no alarm is active or the alarm has been cleared.
…
 .1.3.6.1.4.1.8708.2.73.2.4.1.1.23
cryptoDataplaneEncryptionAssocIKEPeer
Denotes the corresponding IKE Peer associated to the data plane
entity, in the format 'ikePeer:subrack:slot:Id'.
SNMPv2-TCDisplayStringr/w
Type Constraints:
range: 0..255
Description:
Represents textual information taken from the NVT ASCII

character set, as defined in pages 4, 10-11 of RFC 854.

To summarize RFC 854, the NVT ASCII repertoire specifies:

- the use of c…
 .1.3.6.1.4.1.8708.2.73.2.4.1.1.24

cryptoPmadminTable

table
.1.3.6.1.4.1.8708.2.73.2.5.1 · 1 row entry · 5 columns
Open in standard view
Uses the infinera variant from /opt/observium/mibs/infinera.
Command help
Walk cryptoPmadminTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'LUM-CRYPTO-MIB' -M '/opt/observium/mibs/infinera:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'LUM-CRYPTO-MIB::cryptoPmadminTable' 
The  cryptoPmadmin group contains information and
configuration for all cryptoPmadmin objects.
cryptoPmadminEntry row .1.3.6.1.4.1.8708.2.73.2.5.1.1
An entry in the cryptoPmadmin list.
Indexes
Column Syntax OID
cryptoPmadminIndex
An index assigned to each entry.
SNMPv2-SMIUnsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.8708.2.73.2.5.1.1.1
cryptoPmadminName
The management name of the pmadmin object,
for example 'cryptoPmadmin:1:2:1-2', where the first number indicates
subrack, the second slot number and the third/fourth
are the physical port numbers.
LUM-TCMgmtNameStringr/w
Type Constraints:
range: 0..255
Description:
An octet string containing administrative
information, in human-readable form.

More or less the same as SnmpAdminString
defined in SNMP-FRAMEWORK-MIB.
 .1.3.6.1.4.1.8708.2.73.2.5.1.1.2
cryptoPmadminUId
An unique identifier assigned to each entry.
SNMPv2-SMIUnsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.8708.2.73.2.5.1.1.3
cryptoPmadminConnAdminIfIndex
An index that describes to which index in cryptoPmadmin table
this object is related.
LUM-TCUnsigned32WithNAr/w
Type Constraints:
range: 0..4294967294
Description:
An unsigned32 integer of an object.

4294967293 used to tell that it is not
possible to read attribute at the moment.

4294967294 is used to indicate that the attribute
is not used on the object
 .1.3.6.1.4.1.8708.2.73.2.5.1.1.4
cryptoPmadminUpId
Identity in the UP for the cryptoPmadmin entry
Unsigned32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.8708.2.73.2.5.1.1.5

cryptoPerformanceTable

table
.1.3.6.1.4.1.8708.2.73.2.6.1 · 1 row entry · 22 columns
Open in standard view
Uses the infinera variant from /opt/observium/mibs/infinera.
Command help
Walk cryptoPerformanceTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'LUM-CRYPTO-MIB' -M '/opt/observium/mibs/infinera:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'LUM-CRYPTO-MIB::cryptoPerformanceTable' 
The  cryptoPerformance performance group contains information and
configuration for all cryptoPerformance performance objects.
cryptoPerformanceEntry row .1.3.6.1.4.1.8708.2.73.2.6.1.1
An entry in the cryptoPerformance list.
Indexes
Column Syntax OID
cryptoPerformanceIndex
An index assigned to each entry.
SNMPv2-SMIUnsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.8708.2.73.2.6.1.1.1
cryptoPerformanceName
The management name of the performance object,
for example 'cryptoPerformance:1:2:1-2', where the first number indicates
subrack, the second slot number and the third/fourth
are the physical port numbers.
LUM-TCMgmtNameStringr/w
Type Constraints:
range: 0..255
Description:
An octet string containing administrative
information, in human-readable form.

More or less the same as SnmpAdminString
defined in SNMP-FRAMEWORK-MIB.
 .1.3.6.1.4.1.8708.2.73.2.6.1.1.2
cryptoPerformanceUId
An unique identifier assigned to each entry.
SNMPv2-SMIUnsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.8708.2.73.2.6.1.1.3
cryptoPerformanceConnAdminIfIndex
An index that describes to which index in cryptoPerformance table
this object is related.
LUM-TCUnsigned32WithNAr/w
Type Constraints:
range: 0..4294967294
Description:
An unsigned32 integer of an object.

4294967293 used to tell that it is not
possible to read attribute at the moment.

4294967294 is used to indicate that the attribute
is not used on the object
 .1.3.6.1.4.1.8708.2.73.2.6.1.1.4
cryptoPerformancePeriod
Period, 15 minute or 24 hour.
- 15 minute interval measurements per
measurement point

- 24 hour interval measurements per
measurement point
CryptoPeriodWithNAr/w
Type Values:
0fifteenMinutes
1twentyfourHours
2147483647notApplicable
Description:
The period time for performance data.

fifteenMinutes - 15 minutes
twentyfourHours - 24 hours
 .1.3.6.1.4.1.8708.2.73.2.6.1.1.5
cryptoPerformanceType
The direction type of signal the interface expects.

rx - Only ingoing signal.

tx - Only outgoing signal.
CryptoMeasurementTypeWithNAr/w
Type Values:
0rx
1tx
2147483647notApplicable
Description:
The direction type.

rx - receiver, only ingoing signal
tx - transmitter, only outgoing signal
 .1.3.6.1.4.1.8708.2.73.2.6.1.1.6
cryptoPerformanceCounterNulledFrames
Frames that are discarded (replaced with ODU-NULL) regardless of reason.
SNMPv2-SMICounter64
Type Constraints:
range: 0..18446744073709551615
 .1.3.6.1.4.1.8708.2.73.2.6.1.1.7
cryptoPerformanceCounterAuthFail
Frames that are discarded due to the fact
that the received authentication tag does not
match the expected value. The frame will be dropped.
SNMPv2-SMICounter64
Type Constraints:
range: 0..18446744073709551615
 .1.3.6.1.4.1.8708.2.73.2.6.1.1.8
cryptoPerformanceCounterIvInconsistent
This is relevant for the transmitter (encryptor).
The IV (of which the MFAS is one part) does not match
the internal counter. This can happen at a frame slip
causing a jump in the MFAS. The frame is not dropped at
the t…
SNMPv2-SMICounter64
Type Constraints:
range: 0..18446744073709551615
 .1.3.6.1.4.1.8708.2.73.2.6.1.1.9
cryptoPerformanceCounterReplayErr
A frame that can be properly authenticated using
the received IV and that IV is lower than the
highest received IV, that frame is considered to be
a replayed frame. It will be dropped.
SNMPv2-SMICounter64
Type Constraints:
range: 0..18446744073709551615
 .1.3.6.1.4.1.8708.2.73.2.6.1.1.10
cryptoPerformanceCounterTotalFrames
The total number of frames that are processed.
SNMPv2-SMICounter64
Type Constraints:
range: 0..18446744073709551615
 .1.3.6.1.4.1.8708.2.73.2.6.1.1.11
cryptoPerformanceCounterAuthFrames
The number of frames that are processed in authentication
mode. Note that the value is based on the configured
mode rather than the status of the processed frames.
SNMPv2-SMICounter64
Type Constraints:
range: 0..18446744073709551615
 .1.3.6.1.4.1.8708.2.73.2.6.1.1.12
cryptoPerformanceCounterEncryptedFrames
The number of frames that are processed in encryption
mode. Note that the value is based on the configured
mode rather than the status of the processed frames.
SNMPv2-SMICounter64
Type Constraints:
range: 0..18446744073709551615
 .1.3.6.1.4.1.8708.2.73.2.6.1.1.13
cryptoPerformanceThresholdNulledFrames
Nulled frames count threshold. If count exceeds
threshold, correspong alarm will be raised.

For 24h period:

Default 200

For 15m period:
Unsigned32r/w
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.8708.2.73.2.6.1.1.14
cryptoPerformanceThresholdAuthFail
Authentication failed threshold. If count exceeds
threshold, correspong alarm will be raised.

For 24h period:

Default 100

For 15m period:
Unsigned32r/w
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.8708.2.73.2.6.1.1.15
cryptoPerformanceThresholdIvInconsistent
IV inconsistent threshold. If count exceeds
threshold, correspong alarm will be raised.

For 24h period:

Default 100

For 15m period:
Unsigned32r/w
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.8708.2.73.2.6.1.1.16
cryptoPerformanceThresholdReplayErr
Replay Error threshold. If count exceeds
threshold, correspong alarm will be raised.

For 24h period:

Default 100

For 15m period:
Unsigned32r/w
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.8708.2.73.2.6.1.1.17
cryptoPerformanceFaultStatusNulledFrames
Nulled Frames Count Threshold Exceeded.

alarm: The number of errors during a period
exceeds the associated threshold.

ok: The number of errors during a
period is below the threshold.
LUM-TCFaultStatusWithNA
Type Values:
1ok
2alarm
2147483647notApplicable
Description:
A value indicating the current state
of a potential fault condition leading to
an alarm for an object.

ok - indicates that no fault condition is present
and no alarm is active or the alarm has been cleared.
…
 .1.3.6.1.4.1.8708.2.73.2.6.1.1.18
cryptoPerformanceFaultStatusAuthFail
Authentication Fail Count Threshold Exceeded.

alarm: The number of errors during a period
exceeds the associated threshold.

ok: The number of errors during a
period is below the threshold.
LUM-TCFaultStatusWithNA
Type Values:
1ok
2alarm
2147483647notApplicable
Description:
A value indicating the current state
of a potential fault condition leading to
an alarm for an object.

ok - indicates that no fault condition is present
and no alarm is active or the alarm has been cleared.
…
 .1.3.6.1.4.1.8708.2.73.2.6.1.1.19
cryptoPerformanceFaultStatusIvInconsistent
IV Inconsistent Count Threshold Exceeded.

alarm: The number of errors during a period
exceeds the associated threshold.

ok: The number of errors during a
period is below the threshold.
LUM-TCFaultStatusWithNA
Type Values:
1ok
2alarm
2147483647notApplicable
Description:
A value indicating the current state
of a potential fault condition leading to
an alarm for an object.

ok - indicates that no fault condition is present
and no alarm is active or the alarm has been cleared.
…
 .1.3.6.1.4.1.8708.2.73.2.6.1.1.20
cryptoPerformanceFaultStatusReplayErr
Replay Error Count Threshold Exceeded.

alarm: The number of errors during a period
exceeds the associated threshold.

ok: The number of errors during a
period is below the threshold.
LUM-TCFaultStatusWithNA
Type Values:
1ok
2alarm
2147483647notApplicable
Description:
A value indicating the current state
of a potential fault condition leading to
an alarm for an object.

ok - indicates that no fault condition is present
and no alarm is active or the alarm has been cleared.
…
 .1.3.6.1.4.1.8708.2.73.2.6.1.1.21
cryptoPerformanceUpId
Identity in the UP for the cryptoPerf entry
Unsigned32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.8708.2.73.2.6.1.1.22