AVAYA-IPSEC-MIB Table View

Table-centric layout grouping table, row, and column objects.

Standard view Table view
Tables
7
Rows
7
Columns
119

avipsIsakmpPeerTable

table
.1.3.6.1.4.1.6889.2.6.1.1.2.1 · 1 row entry · 14 columns
Open in standard view 
This table contains a list of all the remote peers and peer-groups we are 
willing to establish an IPSec VPN connection with. Each entry 
represents a peer or a peer-group, and is indexed by the peer's IKE 
identification (type and value), or the peer-group name.
Each peer entry points to the ISAKMP policy that will be 
used for IKE negotiations (as an initiator or a responder).
Note that in case this entry represents a peer-group
the value of IsakmpIdentityType shall be set to peerGroup.
In that case certain columns in this row are N/A.
avipsIsakmpPeerEntry entry .1.3.6.1.4.1.6889.2.6.1.1.2.1.1
A specific entry.
Indexes
avipsIsakmpPeerIdType avipsIsakmpPeerId
Column Syntax OID
avipsIsakmpPeerIdType
This object is an enumeration identifying the type of the
Identity value. Note that value can also be peerGroup,
in that case avipsIsakmpPeerId contains the peer-group's
name. Also note that certain columns in this row…
Integer32
Constraints:
range: 1-260
 .1.3.6.1.4.1.6889.2.6.1.1.2.1.1.1
avipsIsakmpPeerId
This object contains an Identity filter to be used to match
against the identity payload in an IKE request.
This is also the second index component of this table.
IsakmpIdentityValue
Textual Convention: IsakmpIdentityValue OctetString
Type Constraints:
range: 1..110
 .1.3.6.1.4.1.6889.2.6.1.1.2.1.1.2
avipsIsakmpPeerDescription
Free text describing this row.
OctetStringr/w
Constraints:
range: 0-80
 .1.3.6.1.4.1.6889.2.6.1.1.2.1.1.3
avipsIsakmpPeerIsaPlcyId1
This object contains the ID of the ISAKMP policy to be used
in IKE Phase I negotiation with this peer.
A value of 0 indicates that this object is empty.

This object is N/A if avipsIsakmpPeerIdType is peer…
Integer32r/w
Constraints:
range: 0-9999
 .1.3.6.1.4.1.6889.2.6.1.1.2.1.1.4
avipsIsakmpPeerInitiateMode
This object specifies how to initiate IKE when communicating
with this peer:
none(1) - Never initiate IKE with this peer (i.e. respond only)
main(2) - Initiate Main Mode (MM)
aggressive(3) - Initiate Aggressive Mode (AM…
Enumerationr/w
Enumerated Values:
1none
2main
3aggressive
 .1.3.6.1.4.1.6889.2.6.1.1.2.1.1.5
avipsIsakmpPeerSelfIdType
This object is an enumeration identifying the type
of the Identity value which the local peer shall
use in the its identity payload during Phase-1
negotiation.

This object is N/A if avipsIsakmpPeerIdTy…
IsakmpIdentityTyper/w
Textual Convention: IsakmpIdentityType Enumeration
Type Values:
1ipv4Address
2fqdn
3userFqdn
256none
257peerGroup
270ifName
 .1.3.6.1.4.1.6889.2.6.1.1.2.1.1.6
avipsIsakmpPeerSelfId
If not empty, this object specifies the identity value
which the local peer will send in the identification payload
during IKE Phase-1 negotiation.
If this object is empty, the default local identity shall be
sent, a…
IsakmpIdentityValuer/w
Textual Convention: IsakmpIdentityValue OctetString
Type Constraints:
range: 1..110
 .1.3.6.1.4.1.6889.2.6.1.1.2.1.1.7
avipsIsakmpPeerKeepaliveMetric
The worry-metric to be used for deciding when to
send R-U-THERE message to the remote peer.

This object is N/A if avipsIsakmpPeerIdType is peerGroup.
IsakmpDpdKeepaliveMetricr/w
Textual Convention: IsakmpDpdKeepaliveMetric Enumeration
Type Values:
1disabled
2onDemand
3periodic
 .1.3.6.1.4.1.6889.2.6.1.1.2.1.1.8
avipsIsakmpPeerKeepaliveInterval
The minimal interval, in seconds, between two
consecutive R-U-THERE sent by the local peer, when
the previous R-U-THERE message has been answered.
The actual interval is based on this value and
other parameters, such a…
secondsSNMPv2-SMIInteger32r/w
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
 .1.3.6.1.4.1.6889.2.6.1.1.2.1.1.9
avipsIsakmpPeerKeepaliveRetryInterval
The actual interval, in seconds, between R-U-THERE
retries sent by the local peer, when the previous
R-U-THERE message has not been answered.

This object is N/A if avipsIsakmpPeerIdType is peerGroup.
secondsSNMPv2-SMIInteger32r/w
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
 .1.3.6.1.4.1.6889.2.6.1.1.2.1.1.10
avipsIsakmpPeerKeepaliveTrackId
Bind the status of this peer to an object-tracker by specifying
the ID of the object-tracker (avstrTrackerId in
AVAYA-SAA-TRACK-MIB).
A value of 0 means that peer is not bound to any
object-tracker.

Thi…
SNMPv2-SMIInteger32r/w
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
 .1.3.6.1.4.1.6889.2.6.1.1.2.1.1.11
avipsIsakmpPeerContChannel
This object determines whether continuous channel IKE
mode is used for contacting the peer.
Continuous channel IKE means that local peer
tries to establish an IKE SA with the remote peer
as soon as possible, also when t…
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.6889.2.6.1.1.2.1.1.12
avipsIsakmpPeerRowStatus
This object indicates the conceptual status of this row.

The value of this object has no effect on whether other
objects in this conceptual row can be modified.

If active, this object must …
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.6889.2.6.1.1.2.1.1.13
avipsIsakmpPeerGroupFailbacktoPrimaryInterval
The amount of time in seconds that secondary peer shall be up (after
primary peer went down) before there will be failback to primary
peer (in case it is up again). The default value is 24 hours.

Relevan…
secondsSNMPv2-SMIInteger32r/w
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
 .1.3.6.1.4.1.6889.2.6.1.1.2.1.1.14

avipsPeerGroupPeersTable

table
.1.3.6.1.4.1.6889.2.6.1.1.2.2 · 1 row entry · 5 columns
Open in standard view 
This table contains all the associations between peer-groups
and isakmp peers. The relation between peer-group and isakmp 
peer is many-to-many. A valid peer-group (i.e. a peer-group 
that can be associated with an active crypto-list) contains 
one or more isakmp peers. An isakmp peer may be contained in 
zero or more peer-groups.
avipsPeerGroupPeersEntry entry .1.3.6.1.4.1.6889.2.6.1.1.2.2.1
A specific entry.
Indexes
avipsPeerGroupPeersPGrpName avipsPeerGroupPeersPeerIndex
Column Syntax OID
avipsPeerGroupPeersPGrpName
The name of the peer-group associated with this isakmp peer.
Note that there must exist a matching active entry in
avipsIsakmpPeerTable which avipsIsakmpPeerIdType is
peerGroup, otherwise a 'set' operation shall fail.
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
 .1.3.6.1.4.1.6889.2.6.1.1.2.2.1.1
avipsPeerGroupPeersPeerIndex
The ordered index of the peer within the peer-group.
Integer32
Constraints:
range: 1-100
 .1.3.6.1.4.1.6889.2.6.1.1.2.2.1.2
avipsPeerGroupPeersPIdType
This object is an enumeration identifying the type of the
Identity value of the peer associated with this IPSec
connection. Note that value cannot be peerGroup.
The contents of this object object is interpreted along
w…
Integer32r/w
Constraints:
range: 1-256
 .1.3.6.1.4.1.6889.2.6.1.1.2.2.1.3
avipsPeerGroupPeersPIdValue
This object contains value of the peer ID.
The contents of this object object is interpreted along
with avipsPeerGroupPeersPIdType.
IsakmpIdentityValuer/w
Textual Convention: IsakmpIdentityValue OctetString
Type Constraints:
range: 1..110
 .1.3.6.1.4.1.6889.2.6.1.1.2.2.1.4
avipsPeerGroupPeersRowStatus
This object indicates the conceptual status of this row.

The value of this object has no effect on whether other
objects in this conceptual row can be modified.

If active, this object must …
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.6889.2.6.1.1.2.2.1.5

avipsIsakmpPlcyTable

table
.1.3.6.1.4.1.6889.2.6.1.1.2.3 · 1 row entry · 8 columns
Open in standard view 
The table containing the list of all
ISAKMP policy entries configured by the operator.
avipsIsakmpPlcyEntry entry .1.3.6.1.4.1.6889.2.6.1.1.2.3.1
Each entry contains the attributes
associated with a single ISAKMP
Policy entry.
Indexes
avipsIsakmpPlcyId
Column Syntax OID
avipsIsakmpPlcyId
The ID of this ISAKMP Policy entry.
This is also the index of this table.
Integer32
Constraints:
range: 1-9999
 .1.3.6.1.4.1.6889.2.6.1.1.2.3.1.1
avipsIsakmpPlcyDescription
Free text describing this object.
OctetStringr/w
Constraints:
range: 0-80
 .1.3.6.1.4.1.6889.2.6.1.1.2.3.1.2
avipsIsakmpPlcyDhGroup
This object specifies the Oakley group used
for Diffie Hellman exchange in the Main Mode.
If this policy item is selected to negotiate
Main Mode with an IKE peer, the local entity
chooses the group specified by this …
DiffHellmanGrpr/w
Textual Convention: DiffHellmanGrp Enumeration
Type Values:
1dhGroup1
2dhGroup2
5dhGroup5
14dhGroup14
15dhGroup15
16dhGroup16
17dhGroup17
18dhGroup18
255none
 .1.3.6.1.4.1.6889.2.6.1.1.2.3.1.3
avipsIsakmpPlcyEncrAlgo
The encryption transform specified by this
ISAKMP policy specification. The Internet Key Exchange
(IKE) tunnels setup using this policy item would
use the specified encryption transform to protect the
ISAKMP PDUs.
IkeEncryptAlgor/w
Textual Convention: IkeEncryptAlgo Enumeration
Type Values:
2des
3des3
4aes
5aes192
6aes256
255none
 .1.3.6.1.4.1.6889.2.6.1.1.2.3.1.4
avipsIsakmpPlcyHashAlgo
The hash transform specified by this
ISAKMP policy specification. The IKE tunnels
setup using this policy item would use the
specified hash transform to protect the
ISAKMP PDUs.
IkeHashAlgor/w
Textual Convention: IkeHashAlgo Enumeration
Type Values:
1none
2md5
3sha
 .1.3.6.1.4.1.6889.2.6.1.1.2.3.1.5
avipsIsakmpPlcyLifetime
This object specifies the lifetime, in seconds,
of the IKE tunnels generated using this
policy specification.
secondsInteger32r/w
Constraints:
range: 60-86400
 .1.3.6.1.4.1.6889.2.6.1.1.2.3.1.6
avipsIsakmpPlcyAuth
The peer authentication method specified by
this ISAKMP policy specification. If this policy
entity is selected for negotiation with a peer,
the local entity would authenticate the peer using
the method specified by th…
Enumerationr/w
Enumerated Values:
1none
2preSharedKey
 .1.3.6.1.4.1.6889.2.6.1.1.2.3.1.7
avipsIsakmpPlcyRowStatus
This object indicates the conceptual status of this row.

The value of this object has no effect on whether other
objects in this conceptual row can be modified.

If active, this object must …
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.6889.2.6.1.1.2.3.1.8

avipsCryptoMapTable

table
.1.3.6.1.4.1.6889.2.6.1.1.3.1 · 1 row entry · 9 columns
Open in standard view 
This table contains all the crypto maps configured by the user.
A crypto map essentially concentrates all the IPSec protection
policy required for establishing IKE Phase-1 and Phase-2 
connections.
avipsCryptoMapEntry entry .1.3.6.1.4.1.6889.2.6.1.1.3.1.1
A specific crypto map entry.
Indexes
avipsCryptoMapId
Column Syntax OID
avipsCryptoMapId
The ID of the crypto map entry.
This is also the index of this table.
Integer32
Constraints:
range: 1-9999
 .1.3.6.1.4.1.6889.2.6.1.1.3.1.1.1
avipsCryptoMapDescription
Free text describing this object.
OctetStringr/w
Constraints:
range: 0-80
 .1.3.6.1.4.1.6889.2.6.1.1.3.1.1.2
avipsCryptoMapPeerIdType
This object is an enumeration identifying the type of the
Identity value of the peer associated with this IPSec
connection.
The contents of this object object is interpreted along
with avipsCryptoMapPeerIdValue.
Integer32r/w
Constraints:
range: 1-260
 .1.3.6.1.4.1.6889.2.6.1.1.3.1.1.3
avipsCryptoMapPeerIdValue
This object contains an Identity filter to be used
to select the remote peer or peer-group when initiating IKE,
and to match against the identity payload in an IKE request
when responding to IKE.
The contents of this…
IsakmpIdentityValuer/w
Textual Convention: IsakmpIdentityValue OctetString
Type Constraints:
range: 1..110
 .1.3.6.1.4.1.6889.2.6.1.1.3.1.1.4
avipsCryptoMapTranSetName1
The name of the transforms-set for this crypto map.
This object is the index into the avipsTranSetTable.
OctetStringr/w
Constraints:
range: 1-32
 .1.3.6.1.4.1.6889.2.6.1.1.3.1.1.5
avipsCryptoMapIsReady
This field is true if and only if this
crypto map entry and all the descendent
configuration objects pointed by it are in
the ready state.
Note that crypto list activation requires
that all the crypto maps it points…
SNMPv2-TCTruthValue
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.6889.2.6.1.1.3.1.1.6
avipsCryptoMapTunnelDscp
The method used to set the high 6 bits of the TOS in the
outer IP header. A value of -1 indicates that the bits are
copied from the payload's header. A value
between 0 and 63 inclusive indicates that the bit field is
s…
Integer32r/w
Constraints:
range: -1-63
 .1.3.6.1.4.1.6889.2.6.1.1.3.1.1.7
avipsCryptoMapContChannel
This object determines whether continuous channel IPSec
mode is used for the rule pointing to this crypto map.
Continuous channel IPSec means that local peer
tries to establish an IPSec SA with the remote peer
as soon a…
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.6889.2.6.1.1.3.1.1.8
avipsCryptoMapRowStatus
This object indicates the conceptual status of this row.

The value of this object has no effect on whether other
objects in this conceptual row can be modified.

If active, this object must …
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.6889.2.6.1.1.3.1.1.9

avipsTranSetTable

table
.1.3.6.1.4.1.6889.2.6.1.1.3.2 · 1 row entry · 9 columns
Open in standard view 
This table lists all the transform-sets which can be used to
build or accept IPsec proposals.
avipsTranSetEntry entry .1.3.6.1.4.1.6889.2.6.1.1.3.2.1
An entry containing the information on an IPsec transform-set.
Indexes
avipsTranSetName
Column Syntax OID
avipsTranSetName
The name of this particular transform-set be referred to by an
avipsCryptoMapEntry.
This is the index of this table.
OctetString
Constraints:
range: 1-32
 .1.3.6.1.4.1.6889.2.6.1.1.3.2.1.1
avipsTranSetEspEncrTran
This object specifies the transform ID of the ESP encryption
algorithm.
EspEncrTransformr/w
Textual Convention: EspEncrTransform Enumeration
Type Values:
1null
2des
3des3
4aes
5aes192
6aes256
255none
 .1.3.6.1.4.1.6889.2.6.1.1.3.2.1.2
avipsTranSetEspHashTran
This object specifies the ESP hash algorithm ID.
EspHashTransformr/w
Textual Convention: EspHashTransform Enumeration
Type Values:
1none
2md5
3sha
 .1.3.6.1.4.1.6889.2.6.1.1.3.2.1.3
avipsTranSetLifetime
This object specifies how long, in seconds,
the security association (SA) derived from this
transform should be used.
The value 0 is reserved for future use.
secondsInteger32r/w
Constraints:
range: 120-86400
range: 0-0
 .1.3.6.1.4.1.6889.2.6.1.1.3.2.1.4
avipsTranSetLifesize
This object specifies how long, in Kilobytes,
the security association (SA) derived from this
transform should be used.
The value -1 means that no size based lifetime
will be offered to the other side.
The value 0 is …
KBytesInteger32r/w
Constraints:
range: 2560-536870912
range: -1-0
 .1.3.6.1.4.1.6889.2.6.1.1.3.2.1.5
avipsTranSetPfsGroup
This object specifies the DH group that shall
be used for PFS in quick mode exchange, when creating the
security association (SA) derived from this
transform.
The reserved value 'none' means that PFS shall not be use…
DiffHellmanGrpr/w
Textual Convention: DiffHellmanGrp Enumeration
Type Values:
1dhGroup1
2dhGroup2
5dhGroup5
14dhGroup14
15dhGroup15
16dhGroup16
17dhGroup17
18dhGroup18
255none
 .1.3.6.1.4.1.6889.2.6.1.1.3.2.1.6
avipsTranSetEncapMode
This object determines the ESP encapsulation mode that
will be used. Possible values are 'tunnel' and
'transport'. In case transport mode is configured,
it shall be used only if possible, i.e. the SIP and
DIP of the re…
IpsecEncapModer/w
Textual Convention: IpsecEncapMode Enumeration
Type Values:
1tunnel
2transport
 .1.3.6.1.4.1.6889.2.6.1.1.3.2.1.7
avipsTranSetEspCompTran
This object specifies the ESP compression algorithm:
none(1) - no compression algorithm.
ippcpLzs(2) - IPPCP with LZS compression.
Enumerationr/w
Enumerated Values:
1none
2ippcpLzs
 .1.3.6.1.4.1.6889.2.6.1.1.3.2.1.8
avipsTranRowStatus
This object indicates the conceptual status of this row.

The value of this object has no effect on whether other
objects in this conceptual row can be modified.

If active, this object must …
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.6889.2.6.1.1.3.2.1.9

avipsPeerTable

table
.1.3.6.1.4.1.6889.2.6.1.1.4.1.2 · 1 row entry · 32 columns
Open in standard view 
This table contains entries for every active isakmp 
peer in the system. The word 'active' suggests that in case
the peer is part of a redundant list of peers within a 
crypto map, only the peer that is currently active will be
included.
avipsPeerEntry entry .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1
A specific peer entry.
Indexes
avipsPeerLocalId avipsPeerRemoteId
Column Syntax OID
avipsPeerLocalId
A synthetic ID that uniquely identifies the local peer for
monitoring purpose.
Note that this ID is persistent for this peer.

This is also the first index component of this table.
SNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.1
avipsPeerRemoteId
A synthetic ID that uniquely identifies the remote peer for
monitoring purpose.
Note that this ID is persistent for this peer.

This is also the second index component of this table.
SNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.2
avipsPeerLocalType
The type of the local peer identity, as it was configured.
If the local peer ID was configured as an interface name,
the value of this object shall be ifName.
IsakmpIdentityType
Textual Convention: IsakmpIdentityType Enumeration
Type Values:
1ipv4Address
2fqdn
3userFqdn
256none
257peerGroup
270ifName
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.3
avipsPeerLocalValue
The value of the local peer identity.

If the local peer type is an IP Address, then this
is the IP Address used to identify the local peer.

If the local peer type is an interface name, then…
IsakmpIdentityValue
Textual Convention: IsakmpIdentityValue OctetString
Type Constraints:
range: 1..110
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.4
avipsPeerRemoteType
The type of the remote peer identity.
IsakmpIdentityType
Textual Convention: IsakmpIdentityType Enumeration
Type Values:
1ipv4Address
2fqdn
3userFqdn
256none
257peerGroup
270ifName
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.5
avipsPeerRemoteValue
The value of the remote peer identity.

If the remote peer type is an IP Address, then this
is the IP Address used to identify the remote peer.

If the remote peer type is a fqdn, then this i…
IsakmpIdentityValue
Textual Convention: IsakmpIdentityValue OctetString
Type Constraints:
range: 1..110
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.6
avipsPeerRemoteDescription
Free text describing the remote peer or peer-group.
The value of this field is taken from
avipsIsakmpPeerDescription.
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.7
avipsPeerLocalAddress
The IP address of the local peer.

This is derived from the local-address specified in the
crypto-list that creates this connection.

If the local peer type is an IP Address, then
this is i…
SNMPv2-SMIIpAddress
Textual Convention: SNMPv2-SMIIpAddress OctetString
Type Constraints:
range: 4
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.8
avipsPeerRemoteAddress
The IP address of the remote peer.

If the remote peer type is an IP Address, then this
is identical to avipsPeerRemoteValue.

If the remote peer type is a fqdn, then this is
the IP address t…
SNMPv2-SMIIpAddress
Textual Convention: SNMPv2-SMIIpAddress OctetString
Type Constraints:
range: 4
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.9
avipsPeerRemotePeerGrpActiveIndex
In case the remote is a peer-group, i.e. avipsPeerRemoteType
is peerGroup, this object specifies the index within
the peer-group of the currently active peer. This value
is taken from avipsPeerGroupPeersPeerIndex of t…
SNMPv2-SMIInteger32
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.10
avipsPeerRemotePeerGrpActiveIdType
In case the remote is a peer-group, i.e. avipsPeerRemoteType
is peerGroup, this object specifies the id-type of the
currently active peer. This value is taken from
avipsIsakmpPeerIdType of the active peer in this
pe…
IsakmpIdentityType
Textual Convention: IsakmpIdentityType Enumeration
Type Values:
1ipv4Address
2fqdn
3userFqdn
256none
257peerGroup
270ifName
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.11
avipsPeerRemotePeerGrpActiveIdValue
In case the remote is a peer-group, i.e. avipsPeerRemoteType
is peerGroup, this object specifies the id-value of the
currently active peer. This value is taken from
avipsIsakmpPeerId of the active peer in this
peer-…
IsakmpIdentityValue
Textual Convention: IsakmpIdentityValue OctetString
Type Constraints:
range: 1..110
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.12
avipsPeerIsakmpState
This object specifies the state of the IKE connection
between the peers.
1. closed - No IKE SA exists between peers because it was
not negotiated yet, or because last IKE closed
normally due to h…
Enumeration
Enumerated Values:
1closed
2inProgress
3established
4failed
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.13
avipsPeerIsakmpStateLastChange
sysUpTime when the last change in avipsPeerIsakmpState
occured, in hundredths of a second.
SNMPv2-TCTimeStamp
Textual Convention: SNMPv2-TCTimeStamp Unsigned32
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.14
avipsPeerTunnelsClosed
The number of IPSec tunnels associated with these peers,
which are in the 'closed' state.
SNMPv2-SMIGauge32
Textual Convention: SNMPv2-SMIGauge32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.15
avipsPeerTunnelsInProgress
The number of IPSec tunnels associated with these peers,
which are in the 'inProgress' state.
SNMPv2-SMIGauge32
Textual Convention: SNMPv2-SMIGauge32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.16
avipsPeerTunnelsEstablished
The number of IPSec tunnels associated with these peers,
which are in the 'established' state.
SNMPv2-SMIGauge32
Textual Convention: SNMPv2-SMIGauge32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.17
avipsPeerTunnelsFailed
The number of IPSec tunnels associated with these peers,
which are in the 'failed' state.
SNMPv2-SMIGauge32
Textual Convention: SNMPv2-SMIGauge32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.18
avipsPeerInOctets
The aggregate number of octets (bytes) successfully received
through all the tunnels between the peers.
This value is accumulated BEFORE determining whether or
not the packet should be decompressed.

Th…
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.19
avipsPeerInOctetsWraps
The number of times avipsPeerInOctets has wrapped.
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.20
avipsPeerInDecompOctets
The aggregate number of decompressed octets (bytes)
successfully received through all the tunnels between
the peers.
This value is accumulated AFTER the packet is decompressed.
If compression is not being used in any…
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.21
avipsPeerInDecompOctetsWraps
The number of times avipsPeerInDecompOctets has wrapped.
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.22
avipsPeerInDecompRatio
The overall decompression ratio * 100.
This is the ratio between the number of octets received after
decompression and the number of octets received before
decompression. It is calculated as the integer of
{[(avipsPeer…
Ratio * 100SNMPv2-SMIGauge32
Textual Convention: SNMPv2-SMIGauge32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.23
avipsPeerInPkts
The aggregate number of packets successfully received through
all the tunnels between the peers.

This number is the sum of avipsTunnelInPkts for all
the tunnels pertaining to the peers.
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.24
avipsPeerInDropPkts
The aggregate number of packets dropped after being
received through any of the tunnels between the peers.

This number is the sum of avipsTunnelInDropTotalPkts
for all the tunnels pertaining to the peer…
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.25
avipsPeerOutOctets
The aggregate number of octets (bytes) successfully
transmitted through all the tunnels between the peers.
This value is accumulated AFTER determining whether or
not the packet should be compressed.

Th…
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.26
avipsPeerOutOctetsWraps
The number of times avipsPeerOutOctets has wrapped.
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.27
avipsPeerOutUncompOctets
The aggregate number of uncompressed octets (bytes)
successfully transmitted through this IPsec Tunnel.
This value is accumulated BEFORE the packet is compressed.
If compression is not being used in any of the tunnels…
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.28
avipsPeerOutUncompOctetsWraps
The number of times avipsPeerInDecompOctets has wrapped.
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.29
avipsPeerOutCompRatio
The overall compression ratio * 100.
This is the ratio between the number of outbound octets before
compression and the number of outbound octets after
compression. It is calculated as the integer of
{[(avipsPeerOutUnco…
Ratio * 100SNMPv2-SMIGauge32
Textual Convention: SNMPv2-SMIGauge32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.30
avipsPeerOutPkts
The aggregate number of packets successfully transmitted
through all the tunnels between the peers.

This number is the sum of avipsTunnelOutPkts for all
the tunnels pertaining to the peers.
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.31
avipsPeerOutDropPkts
The aggregate number of packets dropped before being
transmitted through any of the tunnels between the peers.

This number is the sum of avipsTunnelOutDropTotalPkts for
all the tunnels pertaining to the…
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.2.1.32

avipsTunnelTable

table
.1.3.6.1.4.1.6889.2.6.1.1.4.1.3 · 1 row entry · 42 columns
Open in standard view 
This table contains a entries for all the tunnels in the
system. A 'tunnel' is a rule within an active crypto-list.
avipsTunnelEntry entry .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1
A specific tunnel entry.
Indexes
avipsTunnelIndex avipsTunnelSubIndex avipsTunnelPeerLocalId avipsTunnelPeerRemoteId
Column Syntax OID
avipsTunnelPeerLocalId
A synthetic ID that uniquely identifies the local peer for
monitoring purpose.
Note that this ID is persistent for this peer.
SNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.1
avipsTunnelPeerRemoteId
A synthetic ID that uniquely identifies the remote peer for
monitoring purpose.
Note that this ID is persistent for this peer.
SNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.2
avipsTunnelIndex
The ID of the crypto-list containing the rule that
creates this tunnel.

This is also the fifth index component of this table.
Integer32
Constraints:
range: 1-2147483647
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.3
avipsTunnelSubIndex
The index of the crypto-list rule that creates this tunnel.

This is also the sixth index component of this table.
Integer32
Constraints:
range: 1-2147483647
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.4
avipsTunnelPeerLocalType
The type of the local peer identity, as it was configured.
If the local peer ID was configured as an interface name,
the value of this object shall be ifName.

This is also the first index component of thi…
IsakmpIdentityType
Textual Convention: IsakmpIdentityType Enumeration
Type Values:
1ipv4Address
2fqdn
3userFqdn
256none
257peerGroup
270ifName
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.5
avipsTunnelPeerLocalValue
The value of the local peer identity.

If the local peer type is an IP Address, then this
is the IP Address used to identify the local peer.

If the local peer type is an interface name, then…
IsakmpIdentityValue
Textual Convention: IsakmpIdentityValue OctetString
Type Constraints:
range: 1..110
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.6
avipsTunnelPeerRemoteType
The type of the remote peer identity.

This is also the third index component of this table.
IsakmpIdentityType
Textual Convention: IsakmpIdentityType Enumeration
Type Values:
1ipv4Address
2fqdn
3userFqdn
256none
257peerGroup
270ifName
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.7
avipsTunnelPeerRemoteValue
The value of the remote peer identity.

If the remote peer type is an IP Address, then this
is the IP Address used to identify the remote peer.

If the remote peer type is a fqdn, then this i…
IsakmpIdentityValue
Textual Convention: IsakmpIdentityValue OctetString
Type Constraints:
range: 1..110
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.8
avipsTunnelDescription
Free text describing this tunnel.
The value of this field is taken from the
description specified for the crypto-list rule that
creates this tunnel.
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.9
avipsTunnelLocalAddress
The IP address of the local peer.
SNMPv2-SMIIpAddress
Textual Convention: SNMPv2-SMIIpAddress OctetString
Type Constraints:
range: 4
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.10
avipsTunnelRemoteAddress
The IP address of the remote peer.
SNMPv2-SMIIpAddress
Textual Convention: SNMPv2-SMIIpAddress OctetString
Type Constraints:
range: 4
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.11
avipsTunnelProxyLocalSubnet
The local subnet address this tunnel protects.
SNMPv2-SMIIpAddress
Textual Convention: SNMPv2-SMIIpAddress OctetString
Type Constraints:
range: 4
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.12
avipsTunnelProxyLocalMask
The local subnet mask this tunnel protects.
SNMPv2-SMIIpAddress
Textual Convention: SNMPv2-SMIIpAddress OctetString
Type Constraints:
range: 4
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.13
avipsTunnelProxyRemoteSubnet
The remote subnet address this tunnel protects.
SNMPv2-SMIIpAddress
Textual Convention: SNMPv2-SMIIpAddress OctetString
Type Constraints:
range: 4
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.14
avipsTunnelProxyRemoteMask
The remote subnet mask this tunnel protects.
SNMPv2-SMIIpAddress
Textual Convention: SNMPv2-SMIIpAddress OctetString
Type Constraints:
range: 4
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.15
avipsTunnelState
This object specifies the state of this tunnel.
1. closed - The tunnel does not exist between the peers because
it was not negotiated yet, or because last tunnel
closed normally due to hard time…
Enumeration
Enumerated Values:
1closed
2inProgress
3established
4failed
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.16
avipsTunnelStateLastChange
sysUpTime when the last change in avipsTunnelState
occured, in hundredths of a second.
SNMPv2-TCTimeStamp
Textual Convention: SNMPv2-TCTimeStamp Unsigned32
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.17
avipsTunnelLastCntrsReset
sysUpTime when last counter reset for this tunnel
occured, in hundredths of a second.

Counters are zeroized when:
o Issuing 'clear crypto sa counters' in CLI.
o Setting avipsMonitorRstCntrs in MIB (equiva…
SNMPv2-TCTimeStamp
Textual Convention: SNMPv2-TCTimeStamp Unsigned32
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.18
avipsTunnelInOctets
The total number of octets (bytes) successfully received
through this IPSec tunnel.
This value is accumulated BEFORE determining whether or
not the packet should be decompressed.

This counter is zeroiz…
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.19
avipsTunnelInOctetsWraps
The number of times avipsTunnelInOctets has wrapped.

This counter is zeroized when:
o Issuing 'clear crypto sa counters' in CLI.
o Setting avipsMonitorRstCntrs in MIB (equivalent to above).
o Issuing 'cle…
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.20
avipsTunnelInDecompOctets
The total number of decompressed octets (bytes) successfully
received through this IPsec Tunnel.
This value is accumulated AFTER the packet is decompressed.
If compression is not being used, this value will match the …
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.21
avipsTunnelInDecompOctetsWraps
The number of times avipsTunnelInDecompOctets has wrapped.

This counter is zeroized when:
o Issuing 'clear crypto sa counters' in CLI.
o Setting avipsMonitorRstCntrs in MIB (equivalent to above).
o Issuin…
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.22
avipsTunnelInDecompRatio
The overall decompression ratio * 100.
This is the ratio between the number of octets received after
decompression and the number of octets received before
decompression. It is calculated as the integer of
{[(avipsTunn…
Ratio * 100SNMPv2-SMIGauge32
Textual Convention: SNMPv2-SMIGauge32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.23
avipsTunnelInPkts
The number of packets succesfully received through this
tunnel.

This counter is zeroized when:
o Issuing 'clear crypto sa counters' in CLI.
o Setting avipsMonitorRstCntrs in MIB (equivalent to above).
o…
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.24
avipsTunnelInDropTotalPkts
The total number of packets discarded after being received
through this tunnel.

This counter is zeroized when:
o Issuing 'clear crypto sa counters' in CLI.
o Setting avipsMonitorRstCntrs in MIB (equivalen…
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.25
avipsTunnelInDropAntiReplayPkts
The number of packets discarded after being received
through this tunnel due to anti-replay verification failure.

This counter is zeroized when:
o Issuing 'clear crypto sa counters' in CLI.
o Setting avip…
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.26
avipsTunnelInDropHmacFailPkts
The number of packets discarded after being received
through this tunnel due to HMAC verification failure.

This counter is zeroized when:
o Issuing 'clear crypto sa counters' in CLI.
o Setting avipsMonito…
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.27
avipsTunnelInDropBadTrailerPkts
The number of packets discarded after being received
through this tunnel due to bad ESP trailer format received
failure.

This counter is zeroized when:
o Issuing 'clear crypto sa counters' in CLI.
o Setti…
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.28
avipsTunnelInDropInvalidIdPkts
The number of packets discarded after being received
through this tunnel due to invalid identity: inner
(original) IP header address doesn't match the configured
tunnel proxy IPs.

This counter is zeroiz…
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.29
avipsTunnelInDropUnprotectPkts
The number of packets discarded after being received
in the clear (unprotected) although they were expected
to arrive protected by this tunnel (i.e. unprotected
packets with source and destination IP matching the
proxy…
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.30
avipsTunnelInDropInvalidLenPkts
The number of packets discarded after being received
through this tunnel due to length being not aligned to
cipher block.

This counter is zeroized when:
o Issuing 'clear crypto sa counters' in CLI.
o Set…
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.31
avipsTunnelInDropSaExpiredPkts
The number of packets discarded after being received
through this tunnel due to SA KB lifetime being smaller
then the external IP packet total length.

This counter is zeroized when:
o Issuing 'clear crypt…
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.32
avipsTunnelOutOctets
The total number of octets (bytes) successfully transmitted
through this IPSec tunnel.
This value is accumulated AFTER determining whether or
not the packet should be compressed.

This counter is zeroiz…
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.33
avipsTunnelOutOctetsWraps
The number of times avipsTunnelOutOctets has wrapped.

This counter is zeroized when:
o Issuing 'clear crypto sa counters' in CLI.
o Setting avipsMonitorRstCntrs in MIB (equivalent to above).
o Issuing 'cl…
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.34
avipsTunnelOutUncompOctets
The total number of uncompressed octets (bytes) successfully
transmitted through this IPsec Tunnel.
This value is accumulated BEFORE the packet is compressed.
If compression is not being used, this value will match th…
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.35
avipsTunnelOutUncompOctetsWraps
The number of times avipsTunnelInDecompOctets has wrapped.

This counter is zeroized when:
o Issuing 'clear crypto sa counters' in CLI.
o Setting avipsMonitorRstCntrs in MIB (equivalent to above).
o Issuin…
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.36
avipsTunnelOutCompRatio
The overall compression ratio * 100.
This is the ratio between the number of outbound octets before
compression and the number of outbound octets after
compression. It is calculated as the integer of
{[(avipsTunnelOutUn…
Ratio * 100SNMPv2-SMIGauge32
Textual Convention: SNMPv2-SMIGauge32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.37
avipsTunnelOutPkts
The number of packets succesfully transmitted through
this tunnel.

This counter is zeroized when:
o Issuing 'clear crypto sa counters' in CLI.
o Setting avipsMonitorRstCntrs in MIB (equivalent to above).…
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.38
avipsTunnelOutDropTotalPkts
The total number of packets dropped before being transmitted
through this tunnel.

This counter is zeroized when:
o Issuing 'clear crypto sa counters' in CLI.
o Setting avipsMonitorRstCntrs in MIB (equival…
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.39
avipsTunnelOutDropNoSaPkts
The number of packets dropped before being transmitted
through this tunnel due to no IPSec SA existed when
the packet arrived.

This counter is zeroized when:
o Issuing 'clear crypto sa counters' in CLI.
…
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.40
avipsTunnelOutDropSeqRolPkts
The number of packets dropped before being transmitted
through this tunnel due to sequence number rollover:
the sequence number of the IPSec SA reached its capacity.

This counter is zeroized when:
o Issu…
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.41
avipsTunnelOutDropSaExpiredPkts
The number of packets dropped before being transmitted
through this tunnel due to SA expired: SA KB lifetime
is smaller then the external IP packet total length.

This counter is zeroized when:
o Issuing …
SNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.42