CISCO-IPSEC-FLOW-MONITOR-MIB Table View

Table-centric layout grouping table, row, and column objects.

Tables
13
Rows
13
Columns
290
.1.3.6.1.4.1.9.9.171.1.2.2 · 1 row entry · 9 columns
The IPsec Phase-1 Internet Key Exchange Peer Table.
There is one entry in this table for each IPsec
Phase-1 IKE peer association which is currently
associated with an active IPsec Phase-1 Tunnel.
The IPsec Phase-1 IKE Tunnel associated with this
IPsec Phase-1 IKE peer association may or may not
be currently active.
cikePeerEntry entry .1.3.6.1.4.1.9.9.171.1.2.2.1
Each entry contains the attributes associated
with an IPsec Phase-1 IKE peer association.
Indexes
cikePeerLocalType cikePeerLocalValue cikePeerRemoteType cikePeerRemoteValue cikePeerIntIndex
Column Syntax OID
cikePeerLocalType
The type of local peer identity. The local peer
may be identified by:
1. an IP address, or
2. a host name.
IkePeerType
Textual Convention: IkePeerType Enumeration
Type Values:
1ipAddrPeer
2namePeer
.1.3.6.1.4.1.9.9.171.1.2.2.1.1
cikePeerLocalValue
The value of the local peer identity.

If the local peer type is an IP Address, then this
is the IP Address used to identify the local peer.

If the local peer type is a host name, then this …
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.9.9.171.1.2.2.1.2
cikePeerRemoteType
The type of remote peer identity. The remote peer
may be identified by:
1. an IP address, or
2. a host name.
IkePeerType
Textual Convention: IkePeerType Enumeration
Type Values:
1ipAddrPeer
2namePeer
.1.3.6.1.4.1.9.9.171.1.2.2.1.3
cikePeerRemoteValue
The value of the remote peer identity.

If the remote peer type is an IP Address, then this
is the IP Address used to identify the remote peer.

If the remote peer type is a host name, then t…
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.9.9.171.1.2.2.1.4
cikePeerIntIndex
The internal index of the local-remote
peer association. This internal index is used
to uniquely identify multiple associations between
the local and remote peer.
Integer32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.2.2.1.5
cikePeerLocalAddr
The IP address of the local peer.
IPSIpAddress
Textual Convention: IPSIpAddress OctetString
Type Constraints:
range: 4
range: 16
.1.3.6.1.4.1.9.9.171.1.2.2.1.6
cikePeerRemoteAddr
The IP address of the remote peer.
IPSIpAddress
Textual Convention: IPSIpAddress OctetString
Type Constraints:
range: 4
range: 16
.1.3.6.1.4.1.9.9.171.1.2.2.1.7
cikePeerActiveTime
The length of time that the peer association has
existed in hundredths of a second.
SNMPv2-TCTimeInterval
Textual Convention: SNMPv2-TCTimeInterval Integer32
Type Constraints:
range: 0..2147483647
.1.3.6.1.4.1.9.9.171.1.2.2.1.8
cikePeerActiveTunnelIndex
The index of the active IPsec Phase-1 IKE Tunnel
(cikeTunIndex in the cikeTunnelTable) for this peer
association. If an IPsec Phase-1 IKE Tunnel is
not currently active, then the value of this
object will be zero.
Integer32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.2.2.1.9
.1.3.6.1.4.1.9.9.171.1.2.3 · 1 row entry · 35 columns
The IPsec Phase-1 Internet Key Exchange Tunnel Table.
There is one entry in this table for each active IPsec
Phase-1 IKE Tunnel.
cikeTunnelEntry entry .1.3.6.1.4.1.9.9.171.1.2.3.1
Each entry contains the attributes associated with
an active IPsec Phase-1 IKE Tunnel.
Indexes
cikeTunIndex
Column Syntax OID
cikeTunIndex
The index of the IPsec Phase-1 IKE Tunnel Table.
The value of the index is a number which begins
at one and is incremented with each tunnel that
is created. The value of this object will
wrap at 2,147,483,647.
Integer32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.2.3.1.1
cikeTunLocalType
The type of local peer identity. The local
peer may be identified by:
1. an IP address, or
2. a host name.
IkePeerType
Textual Convention: IkePeerType Enumeration
Type Values:
1ipAddrPeer
2namePeer
.1.3.6.1.4.1.9.9.171.1.2.3.1.2
cikeTunLocalValue
The value of the local peer identity.

If the local peer type is an IP Address, then this
is the IP Address used to identify the local peer.

If the local peer type is a host name, then this …
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.9.9.171.1.2.3.1.3
cikeTunLocalAddr
The IP address of the local endpoint for the IPsec
Phase-1 IKE Tunnel.
IPSIpAddress
Textual Convention: IPSIpAddress OctetString
Type Constraints:
range: 4
range: 16
.1.3.6.1.4.1.9.9.171.1.2.3.1.4
cikeTunLocalName
The DNS name of the local IP address for
the IPsec Phase-1 IKE Tunnel. If the DNS
name associated with the local tunnel endpoint
is not known, then the value of this
object will be a NULL string.
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.9.9.171.1.2.3.1.5
cikeTunRemoteType
The type of remote peer identity.
The remote peer may be identified by:
1. an IP address, or
2. a host name.
IkePeerType
Textual Convention: IkePeerType Enumeration
Type Values:
1ipAddrPeer
2namePeer
.1.3.6.1.4.1.9.9.171.1.2.3.1.6
cikeTunRemoteValue
The value of the remote peer identity.

If the remote peer type is an IP Address, then this
is the IP Address used to identify the remote peer.

If the remote peer type is a host name, then
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.9.9.171.1.2.3.1.7
cikeTunRemoteAddr
The IP address of the remote endpoint for the IPsec
Phase-1 IKE Tunnel.
IPSIpAddress
Textual Convention: IPSIpAddress OctetString
Type Constraints:
range: 4
range: 16
.1.3.6.1.4.1.9.9.171.1.2.3.1.8
cikeTunRemoteName
The DNS name of the remote IP address of IPsec Phase-1
IKE Tunnel. If the DNS name associated with the remote
tunnel endpoint is not known, then the value of this
object will be a NULL string.
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.9.9.171.1.2.3.1.9
cikeTunNegoMode
The negotiation mode of the IPsec Phase-1 IKE Tunnel.
IkeNegoMode
Textual Convention: IkeNegoMode Enumeration
Type Values:
1main
2aggressive
.1.3.6.1.4.1.9.9.171.1.2.3.1.10
cikeTunDiffHellmanGrp
The Diffie Hellman Group used in IPsec Phase-1 IKE
negotiations.
DiffHellmanGrp
Textual Convention: DiffHellmanGrp Enumeration
Type Values:
1none
2dhGroup1
3dhGroup2
.1.3.6.1.4.1.9.9.171.1.2.3.1.11
cikeTunEncryptAlgo
The encryption algorithm used in IPsec Phase-1 IKE
negotiations.
EncryptAlgo
Textual Convention: EncryptAlgo Enumeration
Type Values:
1none
2des
3des3
.1.3.6.1.4.1.9.9.171.1.2.3.1.12
cikeTunHashAlgo
The hash algorithm used in IPsec Phase-1 IKE
negotiations.
IkeHashAlgo
Textual Convention: IkeHashAlgo Enumeration
Type Values:
1none
2md5
3sha
.1.3.6.1.4.1.9.9.171.1.2.3.1.13
cikeTunAuthMethod
The authentication method used in IPsec Phase-1 IKE
negotiations.
IkeAuthMethod
Textual Convention: IkeAuthMethod Enumeration
Type Values:
1none
2preSharedKey
3rsaSig
4rsaEncrypt
5revPublicKey
.1.3.6.1.4.1.9.9.171.1.2.3.1.14
cikeTunLifeTime
The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel
in seconds.
secondsInteger32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.2.3.1.15
cikeTunActiveTime
The length of time the IPsec Phase-1 IKE tunnel has been
active in hundredths of seconds.
SNMPv2-TCTimeInterval
Textual Convention: SNMPv2-TCTimeInterval Integer32
Type Constraints:
range: 0..2147483647
.1.3.6.1.4.1.9.9.171.1.2.3.1.16
cikeTunSaRefreshThreshold
The security association refresh threshold in seconds.
secondsInteger32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.2.3.1.17
cikeTunTotalRefreshes
The total number of security associations
refreshes performed.
QM ExchangesSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.3.1.18
cikeTunInOctets
The total number of octets received by
this IPsec Phase-1 IKE Tunnel.
OctetsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.3.1.19
cikeTunInPkts
The total number of packets received by
this IPsec Phase-1 IKE Tunnel.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.3.1.20
cikeTunInDropPkts
The total number of packets dropped
by this IPsec Phase-1 IKE Tunnel during
receive processing.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.3.1.21
cikeTunInNotifys
The total number of notifys received by
this IPsec Phase-1 IKE Tunnel.
Notification PayloadsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.3.1.22
cikeTunInP2Exchgs
The total number of IPsec Phase-2
exchanges received by
this IPsec Phase-1 IKE Tunnel.
SA PayloadsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.3.1.23
cikeTunInP2ExchgInvalids
The total number of IPsec Phase-2
exchanges received and found to be invalid
by this IPsec Phase-1 IKE Tunnel.
SA PayloadsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.3.1.24
cikeTunInP2ExchgRejects
The total number of IPsec Phase-2 exchanges
received and rejected by this IPsec Phase-1
Tunnel.
SA PayloadsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.3.1.25
cikeTunInP2SaDelRequests
The total number of IPsec Phase-2
security association delete requests received
by this IPsec Phase-1 IKE Tunnel.
Notification PayloadsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.3.1.26
cikeTunOutOctets
The total number of octets sent by this IPsec Phase-1
IKE Tunnel.
OctetsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.3.1.27
cikeTunOutPkts
The total number of packets sent by this IPsec Phase-1
IKE Tunnel.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.3.1.28
cikeTunOutDropPkts
The total number of packets dropped by this
IPsec Phase-1 IKE Tunnel during send processing.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.3.1.29
cikeTunOutNotifys
The total number of notifys sent by this
IPsec Phase-1 Tunnel.
Notification PayloadsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.3.1.30
cikeTunOutP2Exchgs
The total number of IPsec Phase-2 exchanges sent by
this IPsec Phase-1 IKE Tunnel.
SA PayloadsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.3.1.31
cikeTunOutP2ExchgInvalids
The total number of IPsec Phase-2 exchanges sent and
found to be invalid by this IPsec Phase-1 IKE Tunnel.
SA PayloadsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.3.1.32
cikeTunOutP2ExchgRejects
The total number of IPsec Phase-2 exchanges sent and
rejected by this IPsec Phase-1 IKE Tunnel.
SA PayloadsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.3.1.33
cikeTunOutP2SaDelRequests
The total number of IPsec Phase-2 security association
delete requests sent by this IPsec Phase-1 IKE Tunnel.
Notification PayloadsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.3.1.34
cikeTunStatus
The status of the MIB table row.

This object can be used to bring the tunnel down
by setting value of this object to destroy(2).

This object cannot be used to create
a MIB table row.
TunnelStatusr/w
Textual Convention: TunnelStatus Enumeration
Type Values:
1active
2destroy
.1.3.6.1.4.1.9.9.171.1.2.3.1.35
.1.3.6.1.4.1.9.9.171.1.2.4 · 1 row entry · 7 columns
The IPsec Phase-1 Internet Key Exchange Peer
Association to IPsec Phase-2 Tunnel
Correlation Table. There is one entry in
this table for each active IPsec Phase-2
Tunnel.
cikePeerCorrEntry entry .1.3.6.1.4.1.9.9.171.1.2.4.1
Each entry contains the attributes of an
IPsec Phase-1 IKE Peer Association to IPsec
Phase-2 Tunnel Correlation.
Indexes
cikePeerCorrLocalType cikePeerCorrLocalValue cikePeerCorrRemoteType cikePeerCorrRemoteValue cikePeerCorrIntIndex cikePeerCorrSeqNum
Column Syntax OID
cikePeerCorrLocalType
The type of local peer identity. The local peer
may be identified by:
1. an IP address, or
2. a host name.
IkePeerType
Textual Convention: IkePeerType Enumeration
Type Values:
1ipAddrPeer
2namePeer
.1.3.6.1.4.1.9.9.171.1.2.4.1.1
cikePeerCorrLocalValue
The value of the local peer identity.

If the local peer type is an IP Address, then this
is the IP Address used to identify the local peer.

If the local peer type is a host name, then this …
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.9.9.171.1.2.4.1.2
cikePeerCorrRemoteType
The type of remote peer identity. The remote peer
may be identified by:
1. an IP address, or
2. a host name.
IkePeerType
Textual Convention: IkePeerType Enumeration
Type Values:
1ipAddrPeer
2namePeer
.1.3.6.1.4.1.9.9.171.1.2.4.1.3
cikePeerCorrRemoteValue
The value of the remote peer identity.

If the remote peer type is an IP Address, then this
is the IP Address used to identify the remote peer.

If the remote peer type is a host name, then t…
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.9.9.171.1.2.4.1.4
cikePeerCorrIntIndex
The internal index of the local-remote
peer association. This internal index is
used to uniquely identify multiple associations
between the local and remote peer.
Integer32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.2.4.1.5
cikePeerCorrSeqNum
The sequence number of the local-remote
peer association. This sequence number is
used to uniquely identify multiple instances
of an unique association between
the local and remote peer.
Integer32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.2.4.1.6
cikePeerCorrIpSecTunIndex
The index of the active IPsec Phase-2 Tunnel
(cipSecTunIndex in the cipSecTunnelTable) for this
IPsec Phase-1 IKE Peer Association.
Integer32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.2.4.1.7
.1.3.6.1.4.1.9.9.171.1.2.5 · 1 row entry · 26 columns
Phase-1 IKE stats information is included in this table.
Each entry is related to a specific gateway which is 
identified by 'cmgwIndex'.
cikePhase1GWStatsEntry entry .1.3.6.1.4.1.9.9.171.1.2.5.1
Each entry contains the attributes of an Phase-1 IKE stats
information for the related gateway.

There is only one entry for each gateway. The entry
is created when a gateway up and cannot be deleted.
Indexes
Column Syntax OID
cikePhase1GWActiveTunnels
The number of currently active IPsec
Phase-1 IKE Tunnels.
SNMPv2-SMIGauge32
Textual Convention: SNMPv2-SMIGauge32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.5.1.1
cikePhase1GWPreviousTunnels
The total number of previously active
IPsec Phase-1 IKE Tunnels.
SAsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.5.1.2
cikePhase1GWInOctets
The total number of octets received by all currently
and previously active IPsec Phase-1 IKE Tunnels.
OctetsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.5.1.3
cikePhase1GWInPkts
The total number of packets received by all
currently and previously active IPsec
Phase-1 IKE Tunnels.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.5.1.4
cikePhase1GWInDropPkts
The total number of packets which were
dropped during receive processing by all
currently and previously
active IPsec Phase-1 IKE Tunnels.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.5.1.5
cikePhase1GWInNotifys
The total number of notifys received by
all currently and previously active IPsec
Phase-1 IKE Tunnels.
Notification PayloadsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.5.1.6
cikePhase1GWInP2Exchgs
The total number of IPsec Phase-2 exchanges
received by all currently and previously
active IPsec Phase-1 IKE Tunnels.
SA PayloadsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.5.1.7
cikePhase1GWInP2ExchgInvalids
The total number of IPsec Phase-2 exchanges
which were received and found to be invalid
by all currently and previously active IPsec
Phase-1 IKE Tunnels.
SA PayloadsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.5.1.8
cikePhase1GWInP2ExchgRejects
The total number of IPsec Phase-2 exchanges
which were received and rejected by all
currently and previously active IPsec Phase-1
IKE Tunnels.
SA PayloadsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.5.1.9
cikePhase1GWInP2SaDelRequests
The total number of IPsec Phase-2 'Security
Association' delete requests received by all
currently and previously active and IPsec
Phase-1 IKE Tunnels.
Notification PayloadsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.5.1.10
cikePhase1GWOutOctets
The total number of octets sent by all currently
and previously active and IPsec Phase-1
IKE Tunnels.
OctetsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.5.1.11
cikePhase1GWOutPkts
The total number of packets sent by all currently
and previously active and IPsec Phase-1
Tunnels.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.5.1.12
cikePhase1GWOutDropPkts
The total number of packets which were dropped
during send processing by all currently
and previously
active IPsec Phase-1 IKE Tunnels.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.5.1.13
cikePhase1GWOutNotifys
The total number of notifys sent by all currently
and previously active IPsec Phase-1 IKE Tunnels.
Notification PayloadsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.5.1.14
cikePhase1GWOutP2Exchgs
The total number of IPsec Phase-2 exchanges
which were sent by all currently and previously
active IPsec Phase-1 IKE Tunnels.
SA PayloadsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.5.1.15
cikePhase1GWOutP2ExchgInvalids
The total number of IPsec Phase-2 exchanges
which were sent and found to be invalid by
all currently and previously active IPsec Phase-1
Tunnels.
SA PayloadsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.5.1.16
cikePhase1GWOutP2ExchgRejects
The total number of IPsec Phase-2 exchanges
which were sent and rejected by all currently and
previously active IPsec Phase-1 IKE Tunnels.
SA PayloadsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.5.1.17
cikePhase1GWOutP2SaDelRequests
The total number of IPsec Phase-2 SA
delete requests sent by all currently and
previously active IPsec Phase-1 IKE Tunnels.
Notification PayloadsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.5.1.18
cikePhase1GWInitTunnels
The total number of IPsec Phase-1 IKE
Tunnels which were locally initiated.
SAsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.5.1.19
cikePhase1GWInitTunnelFails
The total number of IPsec Phase-1 IKE Tunnels
which were locally initiated and failed to activate.
SAsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.5.1.20
cikePhase1GWRespTunnelFails
The total number of IPsec Phase-1 IKE Tunnels
which were remotely initiated and failed to activate.
SAsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.5.1.21
cikePhase1GWSysCapFails
The total number of system capacity failures
which occurred during processing of all current
and previously active IPsec Phase-1 IKE Tunnels.
FailuresSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.5.1.22
cikePhase1GWAuthFails
The total number of authentications which ended
in failure by all current and previous IPsec Phase-1
IKE Tunnels.
FailuresSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.5.1.23
cikePhase1GWDecryptFails
The total number of decryptions which ended
in failure by all current and previous IPsec Phase-1
IKE Tunnels.
FailuresSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.5.1.24
cikePhase1GWHashValidFails
The total number of hash validations which ended
in failure by all current and previous IPsec Phase-1
IKE Tunnels.
FailuresSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.5.1.25
cikePhase1GWNoSaFails
The total number of non-existent 'Security Association'
failures occurred during processing of current and
previous IPsec Phase-1 IKE Tunnels.
FailuresSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.2.5.1.26
.1.3.6.1.4.1.9.9.171.1.3.2 · 1 row entry · 51 columns
The IPsec Phase-2 Tunnel Table.
There is one entry in this table for 
each active IPsec Phase-2 Tunnel.
cipSecTunnelEntry entry .1.3.6.1.4.1.9.9.171.1.3.2.1
Each entry contains the attributes
associated with an active IPsec Phase-2 Tunnel.
Indexes
cipSecTunIndex
Column Syntax OID
cipSecTunIndex
The index of the IPsec Phase-2 Tunnel Table.
The value of the index is a number which begins
at one and is incremented with each tunnel that
is created. The value of this object will wrap
at 2,147,483,647.
Integer32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.3.2.1.1
cipSecTunIkeTunnelIndex
The index of the associated IPsec Phase-1
IKE Tunnel.
(cikeTunIndex in the cikeTunnelTable)
Integer32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.3.2.1.2
cipSecTunIkeTunnelAlive
An indicator which specifies whether or not the
IPsec Phase-1 IKE Tunnel currently exists.
SNMPv2-TCTruthValue
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
.1.3.6.1.4.1.9.9.171.1.3.2.1.3
cipSecTunLocalAddr
The IP address of the local endpoint for the IPsec
Phase-2 Tunnel.
IPSIpAddress
Textual Convention: IPSIpAddress OctetString
Type Constraints:
range: 4
range: 16
.1.3.6.1.4.1.9.9.171.1.3.2.1.4
cipSecTunRemoteAddr
The IP address of the remote endpoint for the IPsec
Phase-2 Tunnel.
IPSIpAddress
Textual Convention: IPSIpAddress OctetString
Type Constraints:
range: 4
range: 16
.1.3.6.1.4.1.9.9.171.1.3.2.1.5
cipSecTunKeyType
The type of key used by the IPsec Phase-2 Tunnel.
KeyType
Textual Convention: KeyType Enumeration
Type Values:
1ike
2manual
.1.3.6.1.4.1.9.9.171.1.3.2.1.6
cipSecTunEncapMode
The encapsulation mode used by the
IPsec Phase-2 Tunnel.
EncapMode
Textual Convention: EncapMode Enumeration
Type Values:
1tunnel
2transport
.1.3.6.1.4.1.9.9.171.1.3.2.1.7
cipSecTunLifeSize
The negotiated LifeSize of the
IPsec Phase-2 Tunnel in kilobytes.
KBytesInteger32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.3.2.1.8
cipSecTunLifeTime
The negotiated LifeTime of the
IPsec Phase-2 Tunnel in seconds.
SecondsInteger32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.3.2.1.9
cipSecTunActiveTime
The length of time the IPsec Phase-2
Tunnel has been
active in hundredths of seconds.
SNMPv2-TCTimeInterval
Textual Convention: SNMPv2-TCTimeInterval Integer32
Type Constraints:
range: 0..2147483647
.1.3.6.1.4.1.9.9.171.1.3.2.1.10
cipSecTunSaLifeSizeThreshold
The security association LifeSize refresh
threshold in kilobytes.
KBytesInteger32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.3.2.1.11
cipSecTunSaLifeTimeThreshold
The security association LifeTime refresh
threshold in seconds.
SecondsInteger32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.3.2.1.12
cipSecTunTotalRefreshes
The total number of security
association refreshes performed.
QM ExchangesSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.2.1.13
cipSecTunExpiredSaInstances
The total number of security associations
which have expired.
SAsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.2.1.14
cipSecTunCurrentSaInstances
The number of security associations
which are currently active or expiring.
SNMPv2-SMIGauge32
Textual Convention: SNMPv2-SMIGauge32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.2.1.15
cipSecTunInSaDiffHellmanGrp
The Diffie Hellman Group used
by the inbound security association of the
IPsec Phase-2 Tunnel.
DiffHellmanGrp
Textual Convention: DiffHellmanGrp Enumeration
Type Values:
1none
2dhGroup1
3dhGroup2
.1.3.6.1.4.1.9.9.171.1.3.2.1.16
cipSecTunInSaEncryptAlgo
The encryption algorithm used by the inbound security
association of the IPsec Phase-2 Tunnel.
EncryptAlgo
Textual Convention: EncryptAlgo Enumeration
Type Values:
1none
2des
3des3
.1.3.6.1.4.1.9.9.171.1.3.2.1.17
cipSecTunInSaAhAuthAlgo
The authentication algorithm used by the inbound
authentication header (AH) security association of
the IPsec Phase-2 Tunnel.
AuthAlgo
Textual Convention: AuthAlgo Enumeration
Type Values:
1none
2hmacMd5
3hmacSha
.1.3.6.1.4.1.9.9.171.1.3.2.1.18
cipSecTunInSaEspAuthAlgo
The authentication algorithm used by the inbound
encapsulation security protocol (ESP) security
association of the IPsec Phase-2 Tunnel.
AuthAlgo
Textual Convention: AuthAlgo Enumeration
Type Values:
1none
2hmacMd5
3hmacSha
.1.3.6.1.4.1.9.9.171.1.3.2.1.19
cipSecTunInSaDecompAlgo
The decompression algorithm used by the inbound
security association of the IPsec Phase-2 Tunnel.
CompAlgo
Textual Convention: CompAlgo Enumeration
Type Values:
1none
2ldf
.1.3.6.1.4.1.9.9.171.1.3.2.1.20
cipSecTunOutSaDiffHellmanGrp
The Diffie Hellman Group used by the outbound security
association of the IPsec Phase-2 Tunnel.
DiffHellmanGrp
Textual Convention: DiffHellmanGrp Enumeration
Type Values:
1none
2dhGroup1
3dhGroup2
.1.3.6.1.4.1.9.9.171.1.3.2.1.21
cipSecTunOutSaEncryptAlgo
The encryption algorithm used by the outbound security
association of the IPsec Phase-2 Tunnel.
EncryptAlgo
Textual Convention: EncryptAlgo Enumeration
Type Values:
1none
2des
3des3
.1.3.6.1.4.1.9.9.171.1.3.2.1.22
cipSecTunOutSaAhAuthAlgo
The authentication algorithm used by the outbound
authentication header (AH) security association of
the IPsec Phase-2 Tunnel.
AuthAlgo
Textual Convention: AuthAlgo Enumeration
Type Values:
1none
2hmacMd5
3hmacSha
.1.3.6.1.4.1.9.9.171.1.3.2.1.23
cipSecTunOutSaEspAuthAlgo
The authentication algorithm used by the inbound
encapsulation security protocol (ESP)
security association of the IPsec Phase-2 Tunnel.
AuthAlgo
Textual Convention: AuthAlgo Enumeration
Type Values:
1none
2hmacMd5
3hmacSha
.1.3.6.1.4.1.9.9.171.1.3.2.1.24
cipSecTunOutSaCompAlgo
The compression algorithm used by the inbound
security association of the IPsec Phase-2 Tunnel.
CompAlgo
Textual Convention: CompAlgo Enumeration
Type Values:
1none
2ldf
.1.3.6.1.4.1.9.9.171.1.3.2.1.25
cipSecTunInOctets
The total number of octets received by this IPsec
Phase-2 Tunnel. This value is accumulated
BEFORE determining whether or not the packet should be
decompressed. See also cipSecTunInOctWraps for the
number of times thi…
OctetsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.2.1.26
cipSecTunHcInOctets
A high capacity count of the total number of octets
received by this IPsec Phase-2 Tunnel. This value is
accumulated BEFORE determining whether or not the packet
should be decompressed.
OctetsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.3.6.1.4.1.9.9.171.1.3.2.1.27
cipSecTunInOctWraps
The number of times the octets received counter
(cipSecTunInOctets) has wrapped.
Integral unitsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.2.1.28
cipSecTunInDecompOctets
The total number of decompressed octets received
by this IPsec Phase-2 Tunnel. This value is
accumulated AFTER the packet is decompressed.
If compression is not being
used, this value will match the value of
cipSec…
OctetsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.2.1.29
cipSecTunHcInDecompOctets
A high capacity count of the total number of decompressed
octets received by this IPsec Phase-2 Tunnel. This value
is accumulated AFTER the packet is decompressed. If
compression is not being used, this value will matc…
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.3.6.1.4.1.9.9.171.1.3.2.1.30
cipSecTunInDecompOctWraps
The number of times the decompressed
octets received counter
(cipSecTunInDecompOctets) has wrapped.
Integral unitsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.2.1.31
cipSecTunInPkts
The total number of packets received
by this IPsec Phase-2 Tunnel.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.2.1.32
cipSecTunInDropPkts
The total number of packets dropped
during receive processing by this IPsec Phase-2
Tunnel. This count does NOT include
packets dropped due to Anti-Replay processing.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.2.1.33
cipSecTunInReplayDropPkts
The total number of packets dropped during
receive processing due to Anti-Replay processing
by this IPsec Phase-2 Tunnel.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.2.1.34
cipSecTunInAuths
The total number of inbound
authentication's performed by this
IPsec Phase-2 Tunnel.
EventsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.2.1.35
cipSecTunInAuthFails
The total number of inbound authentication's
which ended in
failure by this IPsec Phase-2 Tunnel .
FailuresSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.2.1.36
cipSecTunInDecrypts
The total number of inbound decryption's performed
by this IPsec Phase-2 Tunnel.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.2.1.37
cipSecTunInDecryptFails
The total number of inbound decryption's
which ended in failure
by this IPsec Phase-2 Tunnel.
FailuresSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.2.1.38
cipSecTunOutOctets
The total number of octets sent by this IPsec
Phase-2 Tunnel. This value is accumulated
AFTER determining whether or not the packet should
be compressed. See also cipSecTunOutOctWraps for
the number of times this cou…
OctetsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.2.1.39
cipSecTunHcOutOctets
A high capacity count of the total number of octets
sent by this IPsec Phase-2 Tunnel. This value is
accumulated AFTER determining whether or not the
packet
should be compressed.
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.3.6.1.4.1.9.9.171.1.3.2.1.40
cipSecTunOutOctWraps
The number of times the out octets counter
(cipSecTunOutOctets) has wrapped.
Integral unitsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.2.1.41
cipSecTunOutUncompOctets
The total number of uncompressed octets sent
by this IPsec Phase-2 Tunnel. This value
is accumulated BEFORE the packet is compressed.
If compression is not being used, this value
will match the value of cipSecTunOut…
OctetsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.2.1.42
cipSecTunHcOutUncompOctets
A high capacity count of the total number
of uncompressed octets sent by this IPsec
Phase-2 Tunnel. This value is accumulated BEFORE
the packet is compressed. If compression
is not being used, this value will match …
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.3.6.1.4.1.9.9.171.1.3.2.1.43
cipSecTunOutUncompOctWraps
The number of times the uncompressed octets sent
counter (cipSecTunOutUncompOctets) has wrapped.
Integral unitsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.2.1.44
cipSecTunOutPkts
The total number of packets sent by this
IPsec Phase-2 Tunnel.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.2.1.45
cipSecTunOutDropPkts
The total number of packets dropped during
send processing by this IPsec Phase-2 Tunnel.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.2.1.46
cipSecTunOutAuths
The total number of outbound authentication's performed
by this IPsec Phase-2 Tunnel.
EventsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.2.1.47
cipSecTunOutAuthFails
The total number of outbound
authentication's which ended in failure
by this IPsec Phase-2 Tunnel.
FailuresSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.2.1.48
cipSecTunOutEncrypts
The total number of outbound encryption's performed
by this IPsec Phase-2 Tunnel.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.2.1.49
cipSecTunOutEncryptFails
The total number of outbound encryption's
which ended in failure by this IPsec Phase-2 Tunnel.
FailuresSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.2.1.50
cipSecTunStatus
The status of the MIB table row.

This object can be used to bring the tunnel down
by setting value of this object to destroy(2).
When the value is set to destroy(2), the SA
bundle is destroyed and this ro…
TunnelStatusr/w
Textual Convention: TunnelStatus Enumeration
Type Values:
1active
2destroy
.1.3.6.1.4.1.9.9.171.1.3.2.1.51
.1.3.6.1.4.1.9.9.171.1.3.3 · 1 row entry · 13 columns
The IPsec Phase-2 Tunnel Endpoint Table.
This table contains an entry for each 
active endpoint associated with an IPsec
 Phase-2 Tunnel.
cipSecEndPtEntry entry .1.3.6.1.4.1.9.9.171.1.3.3.1
An IPsec Phase-2 Tunnel Endpoint entry.
Indexes
cipSecTunIndex cipSecEndPtIndex
Column Syntax OID
cipSecEndPtIndex
The number of the Endpoint associated with the
IPsec Phase-2 Tunnel Table. The value of this
index is a number which begins at one and
is incremented with each Endpoint associated
with an IPsec Phase-2 Tunnel.
The va…
Integer32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.3.3.1.1
cipSecEndPtLocalName
The DNS name of the local Endpoint.
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.9.9.171.1.3.3.1.2
cipSecEndPtLocalType
The type of identity for the local Endpoint.
Possible values are:
1) a single IP address, or
2) an IP address range, or
3) an IP subnet.
EndPtType
Textual Convention: EndPtType Enumeration
Type Values:
1singleIpAddr
2ipAddrRange
3ipSubnet
.1.3.6.1.4.1.9.9.171.1.3.3.1.3
cipSecEndPtLocalAddr1
The local Endpoint's first IP address specification.

If the local Endpoint type is single IP address,
then this is the value of the IP address.

If the local Endpoint type is IP subnet, the…
IPSIpAddress
Textual Convention: IPSIpAddress OctetString
Type Constraints:
range: 4
range: 16
.1.3.6.1.4.1.9.9.171.1.3.3.1.4
cipSecEndPtLocalAddr2
The local Endpoint's second IP address specification.

If the local Endpoint type is single IP address,
then this is the value of the IP address.

If the local Endpoint type is IP subnet, th…
IPSIpAddress
Textual Convention: IPSIpAddress OctetString
Type Constraints:
range: 4
range: 16
.1.3.6.1.4.1.9.9.171.1.3.3.1.5
cipSecEndPtLocalProtocol
The protocol number of the local Endpoint's traffic.
Integer32
Constraints:
range: 0-255
.1.3.6.1.4.1.9.9.171.1.3.3.1.6
cipSecEndPtLocalPort
The port number of the local Endpoint's traffic.
Integer32
Constraints:
range: 0-65535
.1.3.6.1.4.1.9.9.171.1.3.3.1.7
cipSecEndPtRemoteName
The DNS name of the remote Endpoint.
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.9.9.171.1.3.3.1.8
cipSecEndPtRemoteType
The type of identity for the remote Endpoint.
Possible values are:
1) a single IP address, or
2) an IP address range, or
3) an IP subnet.
EndPtType
Textual Convention: EndPtType Enumeration
Type Values:
1singleIpAddr
2ipAddrRange
3ipSubnet
.1.3.6.1.4.1.9.9.171.1.3.3.1.9
cipSecEndPtRemoteAddr1
The remote Endpoint's first IP address specification.

If the remote Endpoint type is single IP address,
then this is the value of the IP address.

If the remote Endpoint type is IP subnet, …
IPSIpAddress
Textual Convention: IPSIpAddress OctetString
Type Constraints:
range: 4
range: 16
.1.3.6.1.4.1.9.9.171.1.3.3.1.10
cipSecEndPtRemoteAddr2
The remote Endpoint's second IP address specification.

If the remote Endpoint type is single IP address,
then this is the value of the IP address.

If the remote Endpoint type is IP subnet,…
IPSIpAddress
Textual Convention: IPSIpAddress OctetString
Type Constraints:
range: 4
range: 16
.1.3.6.1.4.1.9.9.171.1.3.3.1.11
cipSecEndPtRemoteProtocol
The protocol number of the remote Endpoint's traffic.
Integer32
Constraints:
range: 0-255
.1.3.6.1.4.1.9.9.171.1.3.3.1.12
cipSecEndPtRemotePort
The port number of the remote Endpoint's traffic.
Integer32
Constraints:
range: 0-65535
.1.3.6.1.4.1.9.9.171.1.3.3.1.13
.1.3.6.1.4.1.9.9.171.1.3.4 · 1 row entry · 5 columns
The IPsec Phase-2 Security Protection Index Table.
This table contains an entry for each active 
and expiring security
 association.
cipSecSpiEntry entry .1.3.6.1.4.1.9.9.171.1.3.4.1
Each entry contains the attributes associated with
active and expiring IPsec Phase-2
security associations.
Indexes
cipSecTunIndex cipSecSpiIndex
Column Syntax OID
cipSecSpiIndex
The number of the SPI associated with the
Phase-2 Tunnel Table. The value of this
index is a number which begins at one and is
incremented with each SPI associated with an
IPsec Phase-2 Tunnel. The value of this
o…
Integer32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.3.4.1.1
cipSecSpiDirection
The direction of the SPI.
Enumeration
Enumerated Values:
1in
2out
.1.3.6.1.4.1.9.9.171.1.3.4.1.2
cipSecSpiValue
The value of the SPI.
Unsigned32
Constraints:
range: 1-4294967295
.1.3.6.1.4.1.9.9.171.1.3.4.1.3
cipSecSpiProtocol
The protocol of the SPI.
Enumeration
Enumerated Values:
1ah
2esp
3ipcomp
.1.3.6.1.4.1.9.9.171.1.3.4.1.4
cipSecSpiStatus
The status of the SPI.
Enumeration
Enumerated Values:
1active
2expiring
.1.3.6.1.4.1.9.9.171.1.3.4.1.5
.1.3.6.1.4.1.9.9.171.1.3.5 · 1 row entry · 26 columns
Phase-2 IPsec stats information is included in this table.
Each entry is related to a specific gateway which is 
identified by 'cmgwIndex'
cipSecPhase2GWStatsEntry entry .1.3.6.1.4.1.9.9.171.1.3.5.1
Each entry contains the attributes of an Phase-2 IPsec stats
information for the related gateway.

There is only one entry for each gateway. The entry
is created when a gateway up and cannot be deleted.
Indexes
Column Syntax OID
cipSecPhase2GWActiveTunnels
The total number of currently active
IPsec Phase-2 Tunnels.
SNMPv2-SMIGauge32
Textual Convention: SNMPv2-SMIGauge32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.5.1.1
cipSecPhase2GWPreviousTunnels
The total number of previously active
IPsec Phase-2 Tunnels.
Phase-2 TunnelsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.5.1.2
cipSecPhase2GWInOctets
The total number of octets received by all
current and previous IPsec Phase-2 Tunnels.
This value is accumulated BEFORE determining
whether or not the packet should be decompressed.
See also cipSecGlobalInOctWraps fo…
OctetsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.5.1.3
cipSecPhase2GWInOctWraps
The number of times the global octets received
counter (cipSecGlobalInOctets) has wrapped.
Integral unitsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.5.1.4
cipSecPhase2GWInDecompOctets
The total number of decompressed octets received
by all current and previous IPsec Phase-2 Tunnels.
This value is accumulated AFTER the packet is
decompressed. If compression is not being used,
this value will match…
OctetsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.5.1.5
cipSecPhase2GWInDecompOctWraps
The number of times the global decompressed
octets received counter (cipSecGlobalInDecompOctets)
has wrapped.
Integral unitsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.5.1.6
cipSecPhase2GWInPkts
The total number of packets received
by all current and previous IPsec Phase-2 Tunnels.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.5.1.7
cipSecPhase2GWInDrops
The total number of packets dropped
during receive processing by all current and previous
IPsec Phase-2 Tunnels. This count does NOT include
packets dropped due to Anti-Replay processing.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.5.1.8
cipSecPhase2GWInReplayDrops
The total number of packets dropped during
receive processing due to Anti-Replay
processing by all current and previous IPsec
Phase-2 Tunnels.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.5.1.9
cipSecPhase2GWInAuths
The total number of inbound authentication's
performed by all current and previous IPsec
Phase-2 Tunnels.
EventsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.5.1.10
cipSecPhase2GWInAuthFails
The total number of inbound authentication's
which ended in failure by all current and previous
IPsec Phase-2 Tunnels.
FailuresSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.5.1.11
cipSecPhase2GWInDecrypts
The total number of inbound decryption's
performed by all current and previous IPsec
Phase-2 Tunnels.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.5.1.12
cipSecPhase2GWInDecryptFails
The total number of inbound decryption's
which ended in failure by all current and
previous IPsec Phase-2 Tunnels.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.5.1.13
cipSecPhase2GWOutOctets
The total number of octets sent by all
current and previous IPsec Phase-2 Tunnels.
This value is accumulated AFTER determining
whether or not the packet should be compressed.
See also cipSecGlobalOutOctWraps for th…
OctetsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.5.1.14
cipSecPhase2GWOutOctWraps
The number of times the global octets sent counter
(cipSecGlobalOutOctets) has wrapped.
Integral unitsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.5.1.15
cipSecPhase2GWOutUncompOctets
The total number of uncompressed octets sent
by all current and previous IPsec Phase-2 Tunnels.
This value is accumulated BEFORE the packet is
compressed. If compression is not being used, this
value will match the …
OctetsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.5.1.16
cipSecPhase2GWOutUncompOctWraps
The number of times the global uncompressed
octets sent counter (cipSecGlobalOutUncompOctets)
has wrapped.
Integral unitsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.5.1.17
cipSecPhase2GWOutPkts
The total number of packets sent by all
current and previous IPsec Phase-2
Tunnels.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.5.1.18
cipSecPhase2GWOutDrops
The total number of packets dropped during send
processing by all current and previous IPsec
Phase-2 Tunnels.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.5.1.19
cipSecPhase2GWOutAuths
The total number of outbound authentication's
performed by all current and previous IPsec
Phase-2 Tunnels.
EventsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.5.1.20
cipSecPhase2GWOutAuthFails
The total number of outbound authentication's
which ended in failure
by all current and previous IPsec Phase-2 Tunnels.
FailuresSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.5.1.21
cipSecPhase2GWOutEncrypts
The total number of outbound encryption's performed
by all current and previous IPsec Phase-2 Tunnels.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.5.1.22
cipSecPhase2GWOutEncryptFails
The total number of outbound encryption's
which ended in failure by all current and
previous IPsec Phase-2 Tunnels.
FailuresSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.5.1.23
cipSecPhase2GWProtocolUseFails
The total number of protocol use failures
which occurred during processing of all current
and previously active IPsec Phase-2 Tunnels.
FailuresSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.5.1.24
cipSecPhase2GWNoSaFails
The total number of non-existent
Security Association in failures which occurred
during processing of all current
and previous IPsec Phase-2 Tunnels.
FailuresSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.5.1.25
cipSecPhase2GWSysCapFails
The total number of system capacity failures
which occurred during processing of all current
and previously active IPsec Phase-2 Tunnels.
FailuresSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.3.5.1.26
.1.3.6.1.4.1.9.9.171.1.4.2.1 · 1 row entry · 38 columns
The IPsec Phase-1 Internet Key Exchange Tunnel
History Table.  This table is implemented as a 
sliding window in which only the last n entries 
are maintained.  The maximum number of entries
 is specified by the cipSecHistTableSize object.
cikeTunnelHistEntry entry .1.3.6.1.4.1.9.9.171.1.4.2.1.1
Each entry contains the attributes
associated with a previously active IPsec
Phase-1 IKE Tunnel.
Indexes
cikeTunHistIndex
Column Syntax OID
cikeTunHistIndex
The index of the IPsec Phase-1 IKE Tunnel History
Table. The value of the index is a number which
begins at one and is incremented with each
tunnel that ends. The value of this object
will wrap at 2,147,483,647.
Integer32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.1
cikeTunHistTermReason
The reason the IPsec Phase-1 IKE Tunnel was terminated.
Possible reasons include:
1 = other
2 = normal termination
3 = operator request
4 = peer delete request was received
5 = contact with peer was lost
6 = local failu…
Enumeration
Enumerated Values:
1other
2normal
3operRequest
4peerDelRequest
5peerLost
6localFailure
7checkPointReg
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.2
cikeTunHistActiveIndex
The index of the previously active IPsec
Phase-1 IKE Tunnel.
Integer32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.3
cikeTunHistPeerLocalType
The type of local peer identity. The local peer
may be identified by:
1. an IP address, or
2. a host name.
IkePeerType
Textual Convention: IkePeerType Enumeration
Type Values:
1ipAddrPeer
2namePeer
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.4
cikeTunHistPeerLocalValue
The value of the local peer identity.

If the local peer type is an IP Address, then this
is the IP Address used to identify the local peer.

If the local peer type is a host name, then this …
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.5
cikeTunHistPeerIntIndex
The internal index of the local-remote peer
association. This internal index is used to
uniquely identify multiple associations between
the local and remote peer.
Integer32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.6
cikeTunHistPeerRemoteType
The type of remote peer identity. The remote
peer may be identified by:
1. an IP address, or
2. a host name.
IkePeerType
Textual Convention: IkePeerType Enumeration
Type Values:
1ipAddrPeer
2namePeer
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.7
cikeTunHistPeerRemoteValue
The value of the remote peer identity.

If the remote peer type is an IP Address, then this
is the IP Address used to identify the remote peer.

If the remote peer type is a host name, then t…
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.8
cikeTunHistLocalAddr
The IP address of the local endpoint for the IPsec
Phase-1 IKE Tunnel.
IPSIpAddress
Textual Convention: IPSIpAddress OctetString
Type Constraints:
range: 4
range: 16
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.9
cikeTunHistLocalName
The DNS name of the local IP address for
the IPsec Phase-1 IKE Tunnel. If the DNS
name associated with the local tunnel endpoint
is not known, then the value of this
object will be a NULL string.
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.10
cikeTunHistRemoteAddr
The IP address of the remote endpoint for the IPsec
Phase-1 IKE Tunnel.
IPSIpAddress
Textual Convention: IPSIpAddress OctetString
Type Constraints:
range: 4
range: 16
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.11
cikeTunHistRemoteName
The DNS name of the remote IP address of IPsec Phase-1
IKE Tunnel. If the DNS name associated with the remote
tunnel endpoint is not known, then the value of this
object will be a NULL string.
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.12
cikeTunHistNegoMode
The negotiation mode of the IPsec Phase-1 IKE Tunnel.
IkeNegoMode
Textual Convention: IkeNegoMode Enumeration
Type Values:
1main
2aggressive
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.13
cikeTunHistDiffHellmanGrp
The Diffie Hellman Group used in IPsec Phase-1 IKE
negotiations.
DiffHellmanGrp
Textual Convention: DiffHellmanGrp Enumeration
Type Values:
1none
2dhGroup1
3dhGroup2
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.14
cikeTunHistEncryptAlgo
The encryption algorithm used in IPsec Phase-1 IKE
negotiations.
EncryptAlgo
Textual Convention: EncryptAlgo Enumeration
Type Values:
1none
2des
3des3
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.15
cikeTunHistHashAlgo
The hash algorithm used in IPsec Phase-1 IKE
negotiations.
IkeHashAlgo
Textual Convention: IkeHashAlgo Enumeration
Type Values:
1none
2md5
3sha
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.16
cikeTunHistAuthMethod
The authentication method used in IPsec Phase-1 IKE
negotiations.
IkeAuthMethod
Textual Convention: IkeAuthMethod Enumeration
Type Values:
1none
2preSharedKey
3rsaSig
4rsaEncrypt
5revPublicKey
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.17
cikeTunHistLifeTime
The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel
in seconds.
Integer32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.18
cikeTunHistStartTime
The value of sysUpTime in hundredths of seconds
when the IPsec Phase-1 IKE tunnel was started.
SNMPv2-TCTimeStamp
Textual Convention: SNMPv2-TCTimeStamp Unsigned32
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.19
cikeTunHistActiveTime
The length of time the IPsec Phase-1 IKE tunnel was been
active in hundredths of seconds.
SNMPv2-TCTimeInterval
Textual Convention: SNMPv2-TCTimeInterval Integer32
Type Constraints:
range: 0..2147483647
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.20
cikeTunHistTotalRefreshes
The total number of security associations
refreshes performed.
QM ExchangesSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.21
cikeTunHistTotalSas
The total number of security associations
used during the
life of the IPsec Phase-1 IKE Tunnel.
SAsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.22
cikeTunHistInOctets
The total number of octets
received by this IPsec Phase-1
IKE Tunnel.
OctetsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.23
cikeTunHistInPkts
The total number of packets received
by this IPsec Phase-1
IKE Tunnel.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.24
cikeTunHistInDropPkts
The total number of packets dropped
by this IPsec Phase-1
IKE Tunnel during receive processing.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.25
cikeTunHistInNotifys
The total number of notifys received
by this IPsec Phase-1
IKE Tunnel.
Notification PayloadsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.26
cikeTunHistInP2Exchgs
The total number of IPsec Phase-2
exchanges received by
this IPsec Phase-1 IKE Tunnel.
SA PayloadsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.27
cikeTunHistInP2ExchgInvalids
The total number of IPsec Phase-2
exchanges received and
found to be invalid by this IPsec Phase-1 IKE Tunnel.
SA PayloadsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.28
cikeTunHistInP2ExchgRejects
The total number of IPsec Phase-2
exchanges received and
rejected by this IPsec Phase-1 IKE Tunnel.
SA PayloadsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.29
cikeTunHistInP2SaDelRequests
The total number of IPsec Phase-2 security association
delete requests received by this IPsec
Phase-1 IKE Tunnel.
Notification PayloadsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.30
cikeTunHistOutOctets
The total number of octets sent by this IPsec Phase-1
IKE Tunnel.
OctetsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.31
cikeTunHistOutPkts
The total number of packets sent by this IPsec Phase-1
IKE Tunnel.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.32
cikeTunHistOutDropPkts
The total number of packets dropped
by this IPsec Phase-1
IKE Tunnel during send processing.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.33
cikeTunHistOutNotifys
The total number of notifys sent by this IPsec Phase-1
IKE Tunnel.
Notification PayloadsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.34
cikeTunHistOutP2Exchgs
The total number of IPsec Phase-2 exchanges sent by
this IPsec Phase-1 IKE Tunnel.
SA PayloadsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.35
cikeTunHistOutP2ExchgInvalids
The total number of IPsec Phase-2 exchanges sent and
found to be invalid by this IPsec Phase-1 IKE Tunnel.
SA PayloadsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.36
cikeTunHistOutP2ExchgRejects
The total number of IPsec Phase-2 exchanges sent and
rejected by this IPsec Phase-1 IKE Tunnel.
SA PayloadsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.37
cikeTunHistOutP2SaDelRequests
The total number of IPsec Phase-2 security association
delete requests sent by this IPsec Phase-1 IKE Tunnel.
Notification PayloadsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.2.1.1.38
.1.3.6.1.4.1.9.9.171.1.4.3.1 · 1 row entry · 49 columns
The IPsec Phase-2 Tunnel History Table.
This table is implemented as a sliding 
window in which only the
last n entries are maintained.  The maximum number 
of entries
is specified by the cipSecHistTableSize object.
cipSecTunnelHistEntry entry .1.3.6.1.4.1.9.9.171.1.4.3.1.1
Each entry contains the attributes associated with
a previously active IPsec Phase-2 Tunnel.
Indexes
cipSecTunHistIndex
Column Syntax OID
cipSecTunHistIndex
The index of the IPsec Phase-2 Tunnel History Table.
The value of the index is a number which
begins at one and is incremented with each tunnel
that ends. The value
of this object will wrap at 2,147,483,647.
Integer32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.1
cipSecTunHistTermReason
The reason the IPsec Phase-2 Tunnel was terminated.
Possible reasons include:
1 = other
2 = normal termination
3 = operator request
4 = peer delete request was received
5 = contact with peer was lost
6 = local failure o…
Enumeration
Enumerated Values:
1other
2normal
3operRequest
4peerDelRequest
5peerLost
6seqNumRollOver
7checkPointReq
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.2
cipSecTunHistActiveIndex
The index of the previously active
IPsec Phase-2 Tunnel.
Integer32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.3
cipSecTunHistIkeTunnelIndex
The index of the associated IPsec Phase-1 Tunnel
(cikeTunIndex in the cikeTunnelTable).
Integer32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.4
cipSecTunHistLocalAddr
The IP address of the local endpoint for the IPsec
Phase-2 Tunnel.
IPSIpAddress
Textual Convention: IPSIpAddress OctetString
Type Constraints:
range: 4
range: 16
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.5
cipSecTunHistRemoteAddr
The IP address of the remote endpoint for the IPsec
Phase-2 Tunnel.
IPSIpAddress
Textual Convention: IPSIpAddress OctetString
Type Constraints:
range: 4
range: 16
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.6
cipSecTunHistKeyType
The type of key used by the IPsec Phase-2 Tunnel.
KeyType
Textual Convention: KeyType Enumeration
Type Values:
1ike
2manual
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.7
cipSecTunHistEncapMode
The encapsulation mode used by the
IPsec Phase-2 Tunnel.
EncapMode
Textual Convention: EncapMode Enumeration
Type Values:
1tunnel
2transport
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.8
cipSecTunHistLifeSize
The negotiated LifeSize of the IPsec Phase-2 Tunnel in
kilobytes.
KBytesInteger32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.9
cipSecTunHistLifeTime
The negotiated LifeTime of the IPsec Phase-2 Tunnel in
seconds.
SecondsInteger32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.10
cipSecTunHistStartTime
The value of sysUpTime in hundredths of seconds
when the IPsec Phase-2 Tunnel was started.
SNMPv2-TCTimeStamp
Textual Convention: SNMPv2-TCTimeStamp Unsigned32
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.11
cipSecTunHistActiveTime
The length of time the IPsec Phase-2 Tunnel has been
active in hundredths of seconds.
SNMPv2-TCTimeInterval
Textual Convention: SNMPv2-TCTimeInterval Integer32
Type Constraints:
range: 0..2147483647
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.12
cipSecTunHistTotalRefreshes
The total number of security association refreshes
performed.
QM ExchangesSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.13
cipSecTunHistTotalSas
The total number of security associations used
during the
life of the IPsec Phase-2 Tunnel.
SAsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.14
cipSecTunHistInSaDiffHellmanGrp
The Diffie Hellman Group used by the inbound security
association of the IPsec Phase-2 Tunnel.
DiffHellmanGrp
Textual Convention: DiffHellmanGrp Enumeration
Type Values:
1none
2dhGroup1
3dhGroup2
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.15
cipSecTunHistInSaEncryptAlgo
The encryption algorithm used by the inbound security
association of the IPsec Phase-2 Tunnel.
EncryptAlgo
Textual Convention: EncryptAlgo Enumeration
Type Values:
1none
2des
3des3
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.16
cipSecTunHistInSaAhAuthAlgo
The authentication algorithm used by the inbound
authentication header (AH) security association of
the IPsec Phase-2 Tunnel.
AuthAlgo
Textual Convention: AuthAlgo Enumeration
Type Values:
1none
2hmacMd5
3hmacSha
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.17
cipSecTunHistInSaEspAuthAlgo
The authentication algorithm used by the inbound
encapsulation security protocol (ESP)
security association of
the IPsec Phase-2 Tunnel.
AuthAlgo
Textual Convention: AuthAlgo Enumeration
Type Values:
1none
2hmacMd5
3hmacSha
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.18
cipSecTunHistInSaDecompAlgo
The decompression algorithm used by the inbound
security association of the IPsec Phase-2 Tunnel.
CompAlgo
Textual Convention: CompAlgo Enumeration
Type Values:
1none
2ldf
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.19
cipSecTunHistOutSaDiffHellmanGrp
The Diffie Hellman Group used by the outbound security
association of the IPsec Phase-2 Tunnel.
DiffHellmanGrp
Textual Convention: DiffHellmanGrp Enumeration
Type Values:
1none
2dhGroup1
3dhGroup2
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.20
cipSecTunHistOutSaEncryptAlgo
The encryption algorithm used by the outbound security
association of the IPsec Phase-2 Tunnel.
EncryptAlgo
Textual Convention: EncryptAlgo Enumeration
Type Values:
1none
2des
3des3
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.21
cipSecTunHistOutSaAhAuthAlgo
The authentication algorithm used by the outbound
authentication header (AH) security association of
the IPsec Phase-2 Tunnel.
AuthAlgo
Textual Convention: AuthAlgo Enumeration
Type Values:
1none
2hmacMd5
3hmacSha
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.22
cipSecTunHistOutSaEspAuthAlgo
The authentication algorithm used by the inbound
encapsulation security protocol (ESP)
security association of the IPsec Phase-2 Tunnel.
AuthAlgo
Textual Convention: AuthAlgo Enumeration
Type Values:
1none
2hmacMd5
3hmacSha
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.23
cipSecTunHistOutSaCompAlgo
The compression algorithm used by the inbound
security association of the IPsec Phase-2 Tunnel.
CompAlgo
Textual Convention: CompAlgo Enumeration
Type Values:
1none
2ldf
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.24
cipSecTunHistInOctets
The total number of octets received by this IPsec
Phase-2 Tunnel. This value is accumulated
BEFORE determining whether or not the packet should
be decompressed. See also cipSecTunInOctWraps for
the number of times t…
OctetsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.25
cipSecTunHistHcInOctets
A high capacity count of the total number of octets
received by this IPsec Phase-2 Tunnel. This value is
accumulated BEFORE determining whether or not
the packet should be decompressed.
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.26
cipSecTunHistInOctWraps
The number of times the octets received counter
(cipSecTunInOctets) has wrapped.
Integral unitsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.27
cipSecTunHistInDecompOctets
The total number of decompressed octets received by this
IPsec Phase-2 Tunnel. This value is accumulated AFTER
the packet is decompressed. If compression is not being
used, this value will match the value of cipSecTunH…
OctetsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.28
cipSecTunHistHcInDecompOctets
A high capacity count of the total number of decompressed
octets received by this IPsec Phase-2 Tunnel. This value
is accumulated AFTER the packet is decompressed. If
compression is not being used, this value will matc…
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.29
cipSecTunHistInDecompOctWraps
The number of times the decompressed octets
received counter (cipSecTunInDecompOctets) has wrapped.
Integral unitsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.30
cipSecTunHistInPkts
The total number of packets received by this
IPsec Phase-2 Tunnel.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.31
cipSecTunHistInDropPkts
The total number of packets dropped during
receive processing by this IPsec Phase-2 Tunnel.
This count does NOT include packets
dropped due to Anti-Replay processing.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.32
cipSecTunHistInReplayDropPkts
The total number of packets dropped during
receive processing due to Anti-Replay processing
by this IPsec Phase-2 Tunnel.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.33
cipSecTunHistInAuths
The total number of inbound authentication's
performed
by this IPsec Phase-2 Tunnel.
EventsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.34
cipSecTunHistInAuthFails
The total number of inbound authentication's
which ended in
failure by this IPsec Phase-2 Tunnel .
FailuresSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.35
cipSecTunHistInDecrypts
The total number of inbound decryption's performed
by this IPsec Phase-2 Tunnel.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.36
cipSecTunHistInDecryptFails
The total number of inbound decryption's
which ended in failure
by this IPsec Phase-2 Tunnel.
FailuresSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.37
cipSecTunHistOutOctets
The total number of octets sent by this IPsec
Phase-2 Tunnel. This value is accumulated
AFTER determining whether or not the
packet should be
compressed. See also cipSecTunOutOctWraps for the
number of times this cou…
OctetsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.38
cipSecTunHistHcOutOctets
A high capacity count of the total number of octets
sent by this IPsec Phase-2 Tunnel. This value
is accumulated AFTER determining whether or not
the packet should be
compressed.
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.39
cipSecTunHistOutOctWraps
The number of times the octets sent counter
(cipSecTunOutOctets) has wrapped.
Integral unitsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.40
cipSecTunHistOutUncompOctets
The total number of uncompressed octets sent by this
IPsec Phase-2 Tunnel. This value is accumulated BEFORE
the packet is compressed. If compression is not being
used, this value will match the value of
cipSecTunHistO…
OctetsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.41
cipSecTunHistHcOutUncompOctets
A high capacity count of the total
number of uncompressed octets sent by this
IPsec Phase-2 Tunnel. This value is accumulated
BEFORE the packet is compressed. If compression
is not being used, this value will match t…
OctetsSNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.42
cipSecTunHistOutUncompOctWraps
The number of times the uncompressed octets sent counter
(cipSecTunOutUncompOctets) has wrapped.
Integral unitsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.43
cipSecTunHistOutPkts
The total number of packets sent by this
IPsec Phase-2 Tunnel.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.44
cipSecTunHistOutDropPkts
The total number of packets dropped
during send processing
by this IPsec Phase-2 Tunnel.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.45
cipSecTunHistOutAuths
The total number of outbound authentication's performed
by this IPsec Phase-2 Tunnel.
EventsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.46
cipSecTunHistOutAuthFails
The total number of outbound authentication's
which ended in
failure by this IPsec Phase-2 Tunnel.
FailuresSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.47
cipSecTunHistOutEncrypts
The total number of outbound encryption's performed
by this IPsec Phase-2 Tunnel.
PacketsSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.48
cipSecTunHistOutEncryptFails
The total number of outbound encryption's
which ended in failure
by this IPsec Phase-2 Tunnel.
FailuresSNMPv2-SMICounter32
Textual Convention: SNMPv2-SMICounter32 Unsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.9.9.171.1.4.3.1.1.49
.1.3.6.1.4.1.9.9.171.1.4.3.2 · 1 row entry · 15 columns
The IPsec Phase-2 Tunnel Endpoint History Table.
This table is implemented as a 
sliding window in which only the
last n entries are maintained.  
The maximum number of entries
is specified by the cipSecHistTableSize object.
cipSecEndPtHistEntry entry .1.3.6.1.4.1.9.9.171.1.4.3.2.1
Each entry contains the attributes associated with
a previously active IPsec Phase-2 Tunnel Endpoint.
Indexes
cipSecEndPtHistIndex
Column Syntax OID
cipSecEndPtHistIndex
The number of the previously active
Endpoint associated
with a IPsec Phase-2 Tunnel Table. The value
of this index is a number which begins at
one and is incremented with each Endpoint
associated with an IPsec P…
Integer32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.4.3.2.1.1
cipSecEndPtHistTunIndex
The index of the previously active IPsec
Phase-2 Tunnel Table.
Integer32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.4.3.2.1.2
cipSecEndPtHistActiveIndex
The index of the previously active Endpoint.
Integer32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.4.3.2.1.3
cipSecEndPtHistLocalName
The DNS name of the local Endpoint.
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.9.9.171.1.4.3.2.1.4
cipSecEndPtHistLocalType
The type of identity for the local Endpoint.
Possible values are:
1) a single IP address, or
2) an IP address range, or
3) an IP subnet.
EndPtType
Textual Convention: EndPtType Enumeration
Type Values:
1singleIpAddr
2ipAddrRange
3ipSubnet
.1.3.6.1.4.1.9.9.171.1.4.3.2.1.5
cipSecEndPtHistLocalAddr1
The local Endpoint's first IP address specification.

If the local Endpoint type is single IP address,
then this is the value of the IP address.

If the local Endpoint type is IP subnet, the…
IPSIpAddress
Textual Convention: IPSIpAddress OctetString
Type Constraints:
range: 4
range: 16
.1.3.6.1.4.1.9.9.171.1.4.3.2.1.6
cipSecEndPtHistLocalAddr2
The local Endpoint's second IP address specification.

If the local Endpoint type is single IP address,
then this is the value of the IP address.

If the local Endpoint type is IP subnet, th…
IPSIpAddress
Textual Convention: IPSIpAddress OctetString
Type Constraints:
range: 4
range: 16
.1.3.6.1.4.1.9.9.171.1.4.3.2.1.7
cipSecEndPtHistLocalProtocol
The protocol number of the local Endpoint's traffic.
Integer32
Constraints:
range: 0-255
.1.3.6.1.4.1.9.9.171.1.4.3.2.1.8
cipSecEndPtHistLocalPort
The port number of the local Endpoint's traffic.
Integer32
Constraints:
range: 0-65535
.1.3.6.1.4.1.9.9.171.1.4.3.2.1.9
cipSecEndPtHistRemoteName
The DNS name of the remote Endpoint.
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.9.9.171.1.4.3.2.1.10
cipSecEndPtHistRemoteType
The type of identity for the remote Endpoint.
Possible values are:
1) a single IP address, or
2) an IP address range, or
3) an IP subnet.
EndPtType
Textual Convention: EndPtType Enumeration
Type Values:
1singleIpAddr
2ipAddrRange
3ipSubnet
.1.3.6.1.4.1.9.9.171.1.4.3.2.1.11
cipSecEndPtHistRemoteAddr1
The remote Endpoint's first IP address specification.

If the remote Endpoint type is single IP address,
then this
is the value of the IP address.

If the remote Endpoint type is IP subnet, …
IPSIpAddress
Textual Convention: IPSIpAddress OctetString
Type Constraints:
range: 4
range: 16
.1.3.6.1.4.1.9.9.171.1.4.3.2.1.12
cipSecEndPtHistRemoteAddr2
The remote Endpoint's second IP address specification.

If the remote Endpoint type is single IP address,
then this
is the value of the IP address.

If the remote Endpoint type is IP subnet,…
IPSIpAddress
Textual Convention: IPSIpAddress OctetString
Type Constraints:
range: 4
range: 16
.1.3.6.1.4.1.9.9.171.1.4.3.2.1.13
cipSecEndPtHistRemoteProtocol
The protocol number of the remote Endpoint's traffic.
Integer32
Constraints:
range: 0-255
.1.3.6.1.4.1.9.9.171.1.4.3.2.1.14
cipSecEndPtHistRemotePort
The port number of the remote Endpoint's traffic.
Integer32
Constraints:
range: 0-65535
.1.3.6.1.4.1.9.9.171.1.4.3.2.1.15
.1.3.6.1.4.1.9.9.171.1.5.2.1 · 1 row entry · 9 columns
The IPsec Phase-1 Failure Table.
This table is implemented as a sliding 
window in which only the last n entries are 
maintained.  The maximum number of entries
is specified by the cipSecFailTableSize object.
cikeFailEntry entry .1.3.6.1.4.1.9.9.171.1.5.2.1.1
Each entry contains the attributes associated
with
an IPsec Phase-1 failure.
Indexes
cikeFailIndex
Column Syntax OID
cikeFailIndex
The IPsec Phase-1 Failure Table index.
The value of the index is a number which
begins at one and is incremented with each
IPsec Phase-1 failure. The value
of this object will wrap at 2,147,483,647.
Integer32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.5.2.1.1.1
cikeFailReason
The reason for the failure. Possible reasons include:
1 = other
2 = peer delete request was received
3 = contact with peer was lost
4 = local failure occurred
5 = authentication failure
6 = hash validation failure
7 = …
Enumeration
Enumerated Values:
1other
2peerDelRequest
3peerLost
4localFailure
5authFailure
6hashValidation
7encryptFailure
8internalError
9sysCapExceeded
10proposalFailure
11peerCertUnavailable
12peerCertNotValid
13localCertExpired
14crlFailure
15peerEncodingError
16nonExistentSa
17operRequest
.1.3.6.1.4.1.9.9.171.1.5.2.1.1.2
cikeFailTime
The value of sysUpTime in hundredths of seconds
at the time of the failure.
SNMPv2-TCTimeStamp
Textual Convention: SNMPv2-TCTimeStamp Unsigned32
.1.3.6.1.4.1.9.9.171.1.5.2.1.1.3
cikeFailLocalType
The type of local peer identity. The local peer
may be identified by:
1. an IP address, or
2. a host name.
IkePeerType
Textual Convention: IkePeerType Enumeration
Type Values:
1ipAddrPeer
2namePeer
.1.3.6.1.4.1.9.9.171.1.5.2.1.1.4
cikeFailLocalValue
The value of the local peer identity.

If the local peer type is an IP Address, then this
is the IP Address used to identify the local peer.

If the local peer type is a host name, then this …
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.9.9.171.1.5.2.1.1.5
cikeFailRemoteType
The type of remote peer identity. The remote
peer may be identified by:
1. an IP address, or
2. a host name.
IkePeerType
Textual Convention: IkePeerType Enumeration
Type Values:
1ipAddrPeer
2namePeer
.1.3.6.1.4.1.9.9.171.1.5.2.1.1.6
cikeFailRemoteValue
The value of the remote peer identity.

If the remote peer type is an IP Address, then this
is the IP Address used to identify the remote peer.

If the remote peer type is a host name, then t…
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.9.9.171.1.5.2.1.1.7
cikeFailLocalAddr
The IP address of the local peer.
IPSIpAddress
Textual Convention: IPSIpAddress OctetString
Type Constraints:
range: 4
range: 16
.1.3.6.1.4.1.9.9.171.1.5.2.1.1.8
cikeFailRemoteAddr
The IP address of the remote peer.
IPSIpAddress
Textual Convention: IPSIpAddress OctetString
Type Constraints:
range: 4
range: 16
.1.3.6.1.4.1.9.9.171.1.5.2.1.1.9
.1.3.6.1.4.1.9.9.171.1.5.3.1 · 1 row entry · 7 columns
The IPsec Phase-2 Failure Table.
This table is implemented as a sliding window 
in which only the last n entries are maintained.  
The maximum number of entries
is specified by the cipSecFailTableSize object.
cipSecFailEntry entry .1.3.6.1.4.1.9.9.171.1.5.3.1.1
Each entry contains the attributes associated with
an IPsec Phase-1 failure.
Indexes
cipSecFailIndex
Column Syntax OID
cipSecFailIndex
The IPsec Phase-2 Failure Table index.
The value of the index is a number which
begins at one and is incremented with each
IPsec Phase-1 failure. The value
of this object will wrap at 2,147,483,647.
Integer32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.5.3.1.1.1
cipSecFailReason
The reason for the failure. Possible reasons
include:
1 = other
2 = internal error occurred
3 = peer encoding error
4 = proposal failure
5 = protocol use failure
6 = non-existent security association
7 = …
Enumeration
Enumerated Values:
1other
2internalError
3peerEncodingError
4proposalFailure
5protocolUseFail
6nonExistentSa
7decryptFailure
8encryptFailure
9inAuthFailure
10outAuthFailure
11compression
12sysCapExceeded
13peerDelRequest
14peerLost
15seqNumRollOver
16operRequest
.1.3.6.1.4.1.9.9.171.1.5.3.1.1.2
cipSecFailTime
The value of sysUpTime in hundredths of seconds
at the time of the failure.
SNMPv2-TCTimeStamp
Textual Convention: SNMPv2-TCTimeStamp Unsigned32
.1.3.6.1.4.1.9.9.171.1.5.3.1.1.3
cipSecFailTunnelIndex
The Phase-2 Tunnel index (cipSecTunIndex).
Integer32
Constraints:
range: 1-2147483647
.1.3.6.1.4.1.9.9.171.1.5.3.1.1.4
cipSecFailSaSpi
The security association SPI value.
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.9.9.171.1.5.3.1.1.5
cipSecFailPktSrcAddr
The packet's source IP address.
IPSIpAddress
Textual Convention: IPSIpAddress OctetString
Type Constraints:
range: 4
range: 16
.1.3.6.1.4.1.9.9.171.1.5.3.1.1.6
cipSecFailPktDstAddr
The packet's destination IP address.
IPSIpAddress
Textual Convention: IPSIpAddress OctetString
Type Constraints:
range: 4
range: 16
.1.3.6.1.4.1.9.9.171.1.5.3.1.1.7