Standard view Table view

RBN-IP-SECURITY-MIB

        Defines the objects necessary to support the management of
IPSEC objects.
Source file
RBN-IP-SECURITY-MIB
Last revised
Identity
rbnIpSecurityMib
Base OID
1.3.6.1.4.1.2352.2.55
Imported Objects
IANA-ITU-ALARM-TC-MIB IANAItuEventType IANAItuProbableCause
INET-ADDRESS-MIB InetAddress InetAddressType
ITU-ALARM-TC-MIB ItuPerceivedSeverity
RBN-SMI rbnMgmt
SNMP-FRAMEWORK-MIB SnmpAdminString
SNMPv2-CONF MODULE-COMPLIANCE NOTIFICATION-GROUP OBJECT-GROUP
SNMPv2-SMI MODULE-IDENTITY NOTIFICATION-TYPE OBJECT-TYPE Unsigned32
SNMPv2-TC DateAndTime
Net-SNMP examples using the ericsson MIB directory Show commands

These commands use the standard Observium installation path and load the selected MIB variant before the RFC and Net-SNMP directories.

Translate the module identity
/usr/bin/snmptranslate -Pud -Ir -On -m 'RBN-IP-SECURITY-MIB' -M '/opt/observium/mibs/ericsson:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'RBN-IP-SECURITY-MIB::rbnIpSecurityMib'
Walk the MIB subtree
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'RBN-IP-SECURITY-MIB' -M '/opt/observium/mibs/ericsson:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'RBN-IP-SECURITY-MIB::rbnIpSecurityMib'
How SNMP, Net-SNMP, MIB paths, and variants work
Objects (27)
rbnIpSecurityMib
.1.3.6.1.4.1.2352.2.55
rbnIpSecNotifications
.1.3.6.1.4.1.2352.2.55.0
rbnIpSecObjects
.1.3.6.1.4.1.2352.2.55.1
rbnIpSecNotify
.1.3.6.1.4.1.2352.2.55.1.1
rbnIpSecEventDateAndTime
SNMPv2-TCDateAndTime
 .1.3.6.1.4.1.2352.2.55.1.1.1
rbnIpSecRemoteId
OctetString
 .1.3.6.1.4.1.2352.2.55.1.1.10
rbnIpSecLocalAddrContextName
OctetString
 .1.3.6.1.4.1.2352.2.55.1.1.11
rbnIpSecLocalAddressType
INET-ADDRESS-MIBInetAddressType
 .1.3.6.1.4.1.2352.2.55.1.1.12
rbnIpSecLocalAddress
INET-ADDRESS-MIBInetAddress
 .1.3.6.1.4.1.2352.2.55.1.1.13
rbnIpSecRemoteAddressType
INET-ADDRESS-MIBInetAddressType
 .1.3.6.1.4.1.2352.2.55.1.1.14
rbnIpSecRemoteAddress
INET-ADDRESS-MIBInetAddress
 .1.3.6.1.4.1.2352.2.55.1.1.15
rbnIpSecTunnelState
Enumeration
 .1.3.6.1.4.1.2352.2.55.1.1.16
rbnIpSecSelfCertificateIdentifier
OctetString
 .1.3.6.1.4.1.2352.2.55.1.1.17
rbnIpSecCertificateHandle
SNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.2352.2.55.1.1.18
rbnIpSecExpiryDateAndTime
OctetString
 .1.3.6.1.4.1.2352.2.55.1.1.19
rbnIpSecEventSeverity
ITU-ALARM-TC-MIBItuPerceivedSeverity
 .1.3.6.1.4.1.2352.2.55.1.1.2
rbnIpSecCertificateSubjectName
OctetString
 .1.3.6.1.4.1.2352.2.55.1.1.20
rbnIpSecEventType
IANA-ITU-ALARM-TC-MIBIANAItuEventType
 .1.3.6.1.4.1.2352.2.55.1.1.3
rbnIpSecEventProbableCause
IANA-ITU-ALARM-TC-MIBIANAItuProbableCause
 .1.3.6.1.4.1.2352.2.55.1.1.4
rbnIpSecTunnelIdentifier
OctetString
 .1.3.6.1.4.1.2352.2.55.1.1.5
rbnIpSecTunnelName
OctetString
 .1.3.6.1.4.1.2352.2.55.1.1.6
rbnIpSecTunnelType
Enumeration
 .1.3.6.1.4.1.2352.2.55.1.1.7
rbnIpSecTunnelDownCause
Enumeration
 .1.3.6.1.4.1.2352.2.55.1.1.8
rbnIpSecRemoteIdType
Enumeration
 .1.3.6.1.4.1.2352.2.55.1.1.9
rbnIpSecConformance
.1.3.6.1.4.1.2352.2.55.2
rbnIpSecCompliances
.1.3.6.1.4.1.2352.2.55.2.1
rbnIpSecGroups
.1.3.6.1.4.1.2352.2.55.2.2
Dependencies (8) 8 direct Show tree and compile order Hide dependency details

Each imported module is resolved in the importing module's source directory first, then through the normal default-variant rules.

Dependency tree
Dependency-first compile order
  1. SNMPv2-SMIrfc
  2. SNMPv2-TCrfc
  3. IANA-ITU-ALARM-TC-MIBrfc
  4. INET-ADDRESS-MIBrfc
  5. ITU-ALARM-TC-MIBrfc
  6. RBN-SMIericsson
  7. SNMPv2-CONFrfc
  8. SNMP-FRAMEWORK-MIBrfc
  9. RBN-IP-SECURITY-MIBericssonselected
Conformance Groups (2)
rbnIpSecNotifyObjectGroup
rbnIpSecEventDateAndTime rbnIpSecEventSeverity rbnIpSecEventType rbnIpSecEventProbableCause rbnIpSecTunnelIdentifier rbnIpSecTunnelName rbnIpSecTunnelType rbnIpSecTunnelDownCause rbnIpSecRemoteIdType rbnIpSecRemoteId rbnIpSecLocalAddrContextName rbnIpSecLocalAddressType rbnIpSecLocalAddress rbnIpSecRemoteAddressType rbnIpSecRemoteAddress rbnIpSecTunnelState rbnIpSecSelfCertificateIdentifier rbnIpSecCertificateSubjectName rbnIpSecCertificateHandle rbnIpSecExpiryDateAndTime
The collection of objects related to IPSEC
notifications.
 .1.3.6.1.4.1.2352.2.55.2.2.1
rbnIpSecNotifyGroup
rbnIpSecTunnelStatusChangeAlarm rbnIpSecNoValidRSASelfCertificateAlarm rbnIpSecNoValidRSATrustedCertificateAlarm rbnIpSecRSASelfCertificateNearingExpiryAlarm rbnIpSecRSATrustedCertificateNearingExpiryAlarm
Notification for tracking IPSEC events.
 .1.3.6.1.4.1.2352.2.55.2.2.2
Compliance Statements (1)

OID .1.3.6.1.4.1.2352.2.55.2.1.1
The compliance statement for SNMP entities which implement
the IPSEC MIB.
Required groups
mandatory rbnIpSecNotifyObjectGroup
mandatory rbnIpSecNotifyGroup
Notifications / Traps (5)
NameOIDDescription
rbnIpSecTunnelStatusChangeAlarm
.1.3.6.1.4.1.2352.2.55.0.1
This notification signifies a change in the
IpSecTunnelState. When IPSecTunnelState has the value
'down', rbnIpSecEventSeverity has the value 'major'. When
IPSecTunnelState has the value 'up' or is obsoleted due to
configuration change rbnIpSecEventSeverity has the value 'clear'
rbnIpSecNoValidRSASelfCertificateAlarm
.1.3.6.1.4.1.2352.2.55.0.2
This alarm is set, when there is no valid RSA self-certificate
for a context. It.s cleared when a valid self-certificate is
configured or when system time is change to make the existing
certificate valid. As long as any valid RSA self-certificate exists from any
CA, this alarm will not be set. This alarm is set at .Major. severity.
rbnIpSecNoValidRSATrustedCertificateAlarm
.1.3.6.1.4.1.2352.2.55.0.3
This alarm is raised, when there is no valid RSA trusted-certificate for
a context. It.s cleared, when a valid trusted-certificate is
configured or when system time is change to make the existing certificate
valid. As long as any valid RSA trusted-certificate exists for any CA, this
alarm will not be raised. This alarm is set at .Major. severity.
rbnIpSecRSASelfCertificateNearingExpiryAlarm
.1.3.6.1.4.1.2352.2.55.0.4
This alarm notifies the operator that the RSA self certificate
expiration is near. It will be raised at the user specified time
before the expiration. It will be cleared when a new certificate with
the self subject name is added, the certificate is deleted, or the system
time pulled up. This alarm is set at .Warning. severity.
rbnIpSecRSATrustedCertificateNearingExpiryAlarm
.1.3.6.1.4.1.2352.2.55.0.5
This alarm notifies the operator that the RSA self certificate
expiration is near. It will be raised at the user specified time
before the expiration. It will be cleared when a new certificate with
the self subject name is added, the certificate is deleted, or the system
time is pulled up. This alarm is set at .Warning. severity.