jnxIkeTunMonLocalCertName
JUNIPER-IPSEC-FLOW-MON-MIB ·
.1.3.6.1.4.1.2636.3.52.1.1.2.1.12
Object
column
SNMPv2-TCDisplayString
Name of the certificate used for authentication of the local tunnel endpoint. This object will have some valid value only if negotiated IKE authentication method is other than pre-saherd key. If the IKE negotiation do not use certificate based authentication method, then the value of this object will be a NULL string.
Context
- MIB
- JUNIPER-IPSEC-FLOW-MON-MIB
- OID
.1.3.6.1.4.1.2636.3.52.1.1.2.1.12- Type
- column
- Access
- readonly
- Status
- current
- Parent
- jnxIkeTunnelMonEntry
- Table
- jnxIkeTunnelMonTable
- Siblings
- 46
Values & Constraints
Type Constraints
range: 0..255
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| jnxIkeTunMonRemoteGwAddrType The IP address type of the remote gateway (endpoint) for the IPsec
Phase-1 IKE Tunnel. | column | INET-ADDRESS-MIBInetAddressType | .1.3.6.1.4.1.2636.3.52.1.1.2.1.1 |
| jnxIkeTunMonLocalIdType The type of local peer identity. The local
peer may be identified by:
1. an IP address, or
2. or a fully qualified domain name string.
3. or a distinguished name string. | column | JnxIkePeerType | .1.3.6.1.4.1.2636.3.52.1.1.2.1.10 |
| jnxIkeTunMonLocalIdValue The value of the local peer identity.
If the local peer type is an IP Address, then this
is the IP Address used to identify the local peer.
If the lo… | column | SNMPv2-TCDisplayString | .1.3.6.1.4.1.2636.3.52.1.1.2.1.11 |
| jnxIkeTunMonRemoteIdType The type of remote peer identity.
The remote peer may be identified by:
1. an IP address, or
2. or a fully qualified domain name string.
3. or a distinguished name string. | column | JnxIkePeerType | .1.3.6.1.4.1.2636.3.52.1.1.2.1.13 |
| jnxIkeTunMonRemoteIdValue The value of the remote peer identity.
If the remote peer type is an IP Address, then this
is the IP Address used to identify the remote peer.
If the… | column | SNMPv2-TCDisplayString | .1.3.6.1.4.1.2636.3.52.1.1.2.1.14 |
| jnxIkeTunMonNegoMode The negotiation mode of the IPsec Phase-1 IKE Tunnel. | column | JnxIkeNegoMode | .1.3.6.1.4.1.2636.3.52.1.1.2.1.15 |
| jnxIkeTunMonDiffHellmanGrp The Diffie Hellman Group used in IPsec Phase-1 IKE
negotiations. | column | JnxDiffHellmanGrp | .1.3.6.1.4.1.2636.3.52.1.1.2.1.16 |
| jnxIkeTunMonEncryptAlgo The encryption algorithm used in IPsec Phase-1 IKE negotiations. | column | JnxEncryptAlgo | .1.3.6.1.4.1.2636.3.52.1.1.2.1.17 |
| jnxIkeTunMonHashAlgo The hash algorithm used in IPsec Phase-1 IKE negotiations. | column | JnxIkeHashAlgo | .1.3.6.1.4.1.2636.3.52.1.1.2.1.18 |
| jnxIkeTunMonAuthMethod The authentication method used in IPsec Phase-1 IKE
negotiations. | column | JnxIkeAuthMethod | .1.3.6.1.4.1.2636.3.52.1.1.2.1.19 |
| jnxIkeTunMonRemoteGwAddr The IP address of the remote gateway (endpoint) for the IPsec
Phase-1 IKE Tunnel. | column | INET-ADDRESS-MIBInetAddress | .1.3.6.1.4.1.2636.3.52.1.1.2.1.2 |
| jnxIkeTunMonLifeTime The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel
in seconds. | column | seconds Integer32 | .1.3.6.1.4.1.2636.3.52.1.1.2.1.20 |
| jnxIkeTunMonActiveTime The length of time the IPsec Phase-1 IKE tunnel has been
active in hundredths of seconds. | column | SNMPv2-TCTimeInterval | .1.3.6.1.4.1.2636.3.52.1.1.2.1.21 |
| jnxIkeTunMonInOctets The total number of octets received by this IPsec Phase-1
IKE security association. | column | Octets SNMPv2-SMICounter64 | .1.3.6.1.4.1.2636.3.52.1.1.2.1.22 |
| jnxIkeTunMonInPkts The total number of packets received by this IPsec Phase-1
IKE security association. | column | Packets SNMPv2-SMICounter32 | .1.3.6.1.4.1.2636.3.52.1.1.2.1.23 |
| jnxIkeTunMonOutOctets The total number of octets sent by this IPsec Phase-1
IKE security association. | column | Octets SNMPv2-SMICounter64 | .1.3.6.1.4.1.2636.3.52.1.1.2.1.24 |
| jnxIkeTunMonOutPkts The total number of packets sent by this IPsec Phase-1
IKE security association. | column | Packets SNMPv2-SMICounter32 | .1.3.6.1.4.1.2636.3.52.1.1.2.1.25 |
| jnxIkeTunMonXAuthUserId The extended Authentication (XAuth) User Identifier, identifies the
user associated with this IPSec Phase negotiation. | column | SNMPv2-TCDisplayString | .1.3.6.1.4.1.2636.3.52.1.1.2.1.26 |
| jnxIkeTunMonDPDDownCount obsolete The number of times that the remote peer is detected
in a dead (or down) state. This attribute is obsolete | column | Packets SNMPv2-SMICounter32 | .1.3.6.1.4.1.2636.3.52.1.1.2.1.27 |
| jnxIkeTunMonInitiatorIkev2IPSecSaRekeyRequestOut The number of IPSec SA rekey CREATE_CHILD_SA request
message sent by Initiator. | column | Messages SNMPv2-SMICounter64 | .1.3.6.1.4.1.2636.3.52.1.1.2.1.28 |
| jnxIkeTunMonInitiatorIkev2IPSecSaRekeyResponseIn The number of IPSec SA rekey CREATE_CHILD_SA response
message received by Initiator. | column | Messages SNMPv2-SMICounter64 | .1.3.6.1.4.1.2636.3.52.1.1.2.1.29 |
| jnxIkeTunMonIndex The index of the IPsec Phase-1 IKE Tunnel Table.
The value of the index is a number which begins
at one and is incremented with each tunnel that
is created. The value of this obje… | column | Integer32 | .1.3.6.1.4.1.2636.3.52.1.1.2.1.3 |
| jnxIkeTunMonInitiatorIkev2IPSecSaRekeyNoProposalChosenIn The number of IPSec SA rekey CREATE_CHILD_SA NO_PROPSAL_CHOSEN
Notification received by Initiator. | column | Messages SNMPv2-SMICounter64 | .1.3.6.1.4.1.2636.3.52.1.1.2.1.30 |
| jnxIkeTunMonInitiatorIkev2IPSecSaRekeyInvalidKeIn The number of IPSec SA rekey CREATE_CHILD_SA INVALID_KE_PAYLOAD
received by Initiator. | column | Messages SNMPv2-SMICounter64 | .1.3.6.1.4.1.2636.3.52.1.1.2.1.31 |
| jnxIkeTunMonInitiatorIkev2IPSecSaRekeyTsUnacceptableIn The number of IPSec SA rekey CREATE_CHILD_SA TS_UNACCEPTABLE
notification received by Initiator. | column | Messages SNMPv2-SMICounter64 | .1.3.6.1.4.1.2636.3.52.1.1.2.1.32 |
| jnxIkeTunMonInitiatorIkev2IPSecSaRekeyResVerifySaFail The number of IPSec SA rekey CREATE_CHILD_SA response message
verification of peer SA failed at Initiator. | column | Messages SNMPv2-SMICounter64 | .1.3.6.1.4.1.2636.3.52.1.1.2.1.33 |
| jnxIkeTunMonInitiatorIkev2IPSecSaRekeyResVerifyDhGroupFail The number of IPSec SA rekey CREATE_CHILD_SA response message
verification of DH group failed at Initiator. | column | Messages SNMPv2-SMICounter64 | .1.3.6.1.4.1.2636.3.52.1.1.2.1.34 |
| jnxIkeTunMonInitiatorIkev2IPSecSaRekeyResVerifyTsFail The number of IPSec SA rekey CREATE_CHILD_SA response message
verification of TS failed at Initiator. | column | Messages SNMPv2-SMICounter64 | .1.3.6.1.4.1.2636.3.52.1.1.2.1.35 |
| jnxIkeTunMonInitiatorIkev2IPSecSaRekeyResDhComputeKeyFail The number of IPSec SA rekey CREATE_CHILD_SA response message
Diffie-Hellman compute key failed at Initiator. | column | Messages SNMPv2-SMICounter64 | .1.3.6.1.4.1.2636.3.52.1.1.2.1.36 |
| jnxIkeTunMonResponderIkev2IPSecSaRekeyRequestIn The number of IPSec SA rekey CREATE_CHILD_SA request
message received by Responder. | column | Messages SNMPv2-SMICounter64 | .1.3.6.1.4.1.2636.3.52.1.1.2.1.37 |
| jnxIkeTunMonResponderIkev2IPSecSaRekeyResponseOut The number of IPSec SA rekey CREATE_CHILD_SA response
message sent by Responder. | column | Messages SNMPv2-SMICounter64 | .1.3.6.1.4.1.2636.3.52.1.1.2.1.38 |
| jnxIkeTunMonResponderIkev2IPSecSaRekeyNoProposalChosenOut The number of IPSec SA rekey CREATE_CHILD_SA NO_PROPSAL_CHOSEN
Notification sent by Responder. | column | Messages SNMPv2-SMICounter64 | .1.3.6.1.4.1.2636.3.52.1.1.2.1.39 |
| jnxIkeTunMonLocalGwAddr The IP address of the local endpoint (gateway) for the IPsec
Phase-1 IKE Tunnel. | column | INET-ADDRESS-MIBInetAddress | .1.3.6.1.4.1.2636.3.52.1.1.2.1.4 |
| jnxIkeTunMonResponderIkev2IPSecSaRekeyInvalidKeOut The number of IPSec SA rekey CREATE_CHILD_SA INVALID_KE_PAYLOAD
Notification sent by Responder. | column | Messages SNMPv2-SMICounter64 | .1.3.6.1.4.1.2636.3.52.1.1.2.1.40 |
| jnxIkeTunMonResponderIkev2IPSecSaRekeyTsUnacceptableOut The number of IPSec SA rekey CREATE_CHILD_SA TS_UNACCEPTABLE
notification sent by Responder. | column | Messages SNMPv2-SMICounter64 | .1.3.6.1.4.1.2636.3.52.1.1.2.1.41 |
| jnxIkeTunMonResponderIkev2IPSecSaRekeyResDhComputeKeyFail The number of IPSec SA rekey CREATE_CHILD_SA response message
Diffie-Hellman compute key failed at Responder. | column | Messages SNMPv2-SMICounter64 | .1.3.6.1.4.1.2636.3.52.1.1.2.1.42 |
| jnxIkeTunMonGwName The gateway name | column | SNMPv2-TCDisplayString | .1.3.6.1.4.1.2636.3.52.1.1.2.1.43 |
| jnxIkeTunMonTunType The Tunnel type. It can be regular (1) or ha-link (2) | column | JnxIkeTunType | .1.3.6.1.4.1.2636.3.52.1.1.2.1.44 |
| jnxIkeTunMonLocalSignatureHashAlgo The signature hash algorithm used locally in IPsec Phase-1 IKE negotiations. | column | JnxIkeLocalSignatureHashAlgo | .1.3.6.1.4.1.2636.3.52.1.1.2.1.45 |
| jnxIkeTunMonRemoteSignatureHashAlgo The signature hash algorithm used by remote peer in IPsec Phase-1 IKE negotiations. | column | JnxIkeRemoteSignatureHashAlgo | .1.3.6.1.4.1.2636.3.52.1.1.2.1.46 |
| jnxIkeTunMonDigitalSignAuthKey Signature key RSA/DSA/ECDSA used for digital-signature auth method. | column | JnxIkeDigitalSignAuthKey | .1.3.6.1.4.1.2636.3.52.1.1.2.1.47 |
| jnxIkeTunMonLocalGwAddrType The IP address type of the local endpoint (gateway) for the IPsec
Phase-1 IKE Tunnel. | column | INET-ADDRESS-MIBInetAddressType | .1.3.6.1.4.1.2636.3.52.1.1.2.1.5 |
| jnxIkeTunMonState The state of the IKE tunnel, It can be:
1. up - negotiation completed
2. down- being negotiated | column | JnxIkeTunStateType | .1.3.6.1.4.1.2636.3.52.1.1.2.1.6 |
| jnxIkeTunMonInitiatorCookie Cookie as generated by the peer that initiated the IKE Phase-1
negotiation. This cookie is carried in the ISAKMP header. | column | SNMPv2-TCDisplayString | .1.3.6.1.4.1.2636.3.52.1.1.2.1.7 |
| jnxIkeTunMonResponderCookie Cookie as generated by the peer responding to the IKE Phase-1
negotiation initiated by the remote peer. This cookie is carried
in the ISAKMP header. | column | SNMPv2-TCDisplayString | .1.3.6.1.4.1.2636.3.52.1.1.2.1.8 |
| jnxIkeTunMonLocalRole The role of local peer identity. The Role of the local peer can be:
1. initiator.
2. or responder. | column | JnxIkePeerRole | .1.3.6.1.4.1.2636.3.52.1.1.2.1.9 |