IPSEC-SA-MON-MIB

        The MIB module to describe generic IPsec objects, and
entity level objects and events for those types.
    
ipsecSaMonModule 1.3.6.1.2.1.500
Imported Objects
IF-MIB ifIndex
IPSEC-ISAKMP-IKE-DOI-TC IpsecDoiAhTransform IpsecDoiAuthAlgorithm IpsecDoiEncapsulationMode IpsecDoiEspTransform IpsecDoiIdentType IpsecDoiIpcompTransform IpsecDoiSecProtocolId
SNMPv2-CONF MODULE-COMPLIANCE NOTIFICATION-GROUP OBJECT-GROUP
SNMPv2-SMI Counter32 Counter64 Gauge32 Integer32 mib-2 MODULE-IDENTITY NOTIFICATION-TYPE OBJECT-IDENTITY OBJECT-TYPE Unsigned32
SNMPv2-TC TEXTUAL-CONVENTION TruthValue
Type Definitions (3)
IpsecIpv6Address OctetString range: 16
IpsecRawId OctetString range: 0..255
IpsecSaCreatorIdent Enumeration
unknown(0)
static(1)
ike(2)
other(3)
Objects (180)
ipsecSaMonModule .1.3.6.1.2.1.500
ipsecSaMonitorMIB .1.3.6.1.2.1.500.1
saTables .1.3.6.1.2.1.500.1.1
ipsecSaEspInTable .1.3.6.1.2.1.500.1.1.1
ipsecSaEspInEntry ipsecSaEspInAddressipsecSaEspInSpi .1.3.6.1.2.1.500.1.1.1.1
ipsecSaEspInAddress IpsecIpv6Address .1.3.6.1.2.1.500.1.1.1.1.1
ipsecSaEspInCreator IpsecSaCreatorIdent .1.3.6.1.2.1.500.1.1.1.1.10
ipsecSaEspInEncapsulation IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiEncapsulationMode .1.3.6.1.2.1.500.1.1.1.1.11
ipsecSaEspInEncAlg IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiEspTransform .1.3.6.1.2.1.500.1.1.1.1.12
ipsecSaEspInEncKeyLength bitsUnsigned32 .1.3.6.1.2.1.500.1.1.1.1.13
ipsecSaEspInAuthAlg IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiAuthAlgorithm .1.3.6.1.2.1.500.1.1.1.1.14
ipsecSaEspInAuthKeyLength bitsUnsigned32 .1.3.6.1.2.1.500.1.1.1.1.15
ipsecSaEspInRepWinSize Unsigned32 .1.3.6.1.2.1.500.1.1.1.1.16
ipsecSaEspInLimitSeconds secondsUnsigned32 .1.3.6.1.2.1.500.1.1.1.1.17
ipsecSaEspInLimitKbytes kilobytesUnsigned32 .1.3.6.1.2.1.500.1.1.1.1.18
ipsecSaEspInAccSeconds secondsSNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.1.1.1.19
ipsecSaEspInSpi Unsigned32 .1.3.6.1.2.1.500.1.1.1.1.2
ipsecSaEspInAccKbytes kilobytesSNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.1.1.1.20
ipsecSaEspInUserOctets bytesSNMPv2-SMICounter64 .1.3.6.1.2.1.500.1.1.1.1.21
ipsecSaEspInPackets SNMPv2-SMICounter64 .1.3.6.1.2.1.500.1.1.1.1.22
ipsecSaEspInDecryptErrors SNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.1.1.1.23
ipsecSaEspInAuthErrors SNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.1.1.1.24
ipsecSaEspInReplayErrors SNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.1.1.1.25
ipsecSaEspInPolicyErrors SNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.1.1.1.26
ipsecSaEspInPadErrors SNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.1.1.1.27
ipsecSaEspInOtherReceiveErrors SNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.1.1.1.28
ipsecSaEspInDestId IpsecRawId .1.3.6.1.2.1.500.1.1.1.1.3
ipsecSaEspInDestIdType IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIdentType .1.3.6.1.2.1.500.1.1.1.1.4
ipsecSaEspInSourceId IpsecRawId .1.3.6.1.2.1.500.1.1.1.1.5
ipsecSaEspInSourceIdType IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIdentType .1.3.6.1.2.1.500.1.1.1.1.6
ipsecSaEspInProtocol Integer32 .1.3.6.1.2.1.500.1.1.1.1.7
ipsecSaEspInDestPort Integer32 .1.3.6.1.2.1.500.1.1.1.1.8
ipsecSaEspInSourcePort Integer32 .1.3.6.1.2.1.500.1.1.1.1.9
ipsecSaAhInTable .1.3.6.1.2.1.500.1.1.2
ipsecSaAhInEntry ipsecSaAhInAddressipsecSaAhInSpi .1.3.6.1.2.1.500.1.1.2.1
ipsecSaAhInAddress IpsecIpv6Address .1.3.6.1.2.1.500.1.1.2.1.1
ipsecSaAhInCreator IpsecSaCreatorIdent .1.3.6.1.2.1.500.1.1.2.1.10
ipsecSaAhInEncapsulation IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiEncapsulationMode .1.3.6.1.2.1.500.1.1.2.1.11
ipsecSaAhInAuthAlg IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiAhTransform .1.3.6.1.2.1.500.1.1.2.1.12
ipsecSaAhInAuthKeyLength bitsUnsigned32 .1.3.6.1.2.1.500.1.1.2.1.13
ipsecSaAhInRepWinSize Unsigned32 .1.3.6.1.2.1.500.1.1.2.1.14
ipsecSaAhInLimitSeconds secondsUnsigned32 .1.3.6.1.2.1.500.1.1.2.1.15
ipsecSaAhInLimitKbytes kilobytesUnsigned32 .1.3.6.1.2.1.500.1.1.2.1.16
ipsecSaAhInAccSeconds secondsSNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.1.2.1.17
ipsecSaAhInAccKbytes kilobytesSNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.1.2.1.18
ipsecSaAhInUserOctets bytesSNMPv2-SMICounter64 .1.3.6.1.2.1.500.1.1.2.1.19
ipsecSaAhInSpi Unsigned32 .1.3.6.1.2.1.500.1.1.2.1.2
ipsecSaAhInPackets SNMPv2-SMICounter64 .1.3.6.1.2.1.500.1.1.2.1.20
ipsecSaAhInAuthErrors SNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.1.2.1.21
ipsecSaAhInReplayErrors SNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.1.2.1.22
ipsecSaAhInPolicyErrors SNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.1.2.1.23
ipsecSaAhInOtherReceiveErrors SNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.1.2.1.24
ipsecSaAhInDestId IpsecRawId .1.3.6.1.2.1.500.1.1.2.1.3
ipsecSaAhInDestIdType IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIdentType .1.3.6.1.2.1.500.1.1.2.1.4
ipsecSaAhInSourceId IpsecRawId .1.3.6.1.2.1.500.1.1.2.1.5
ipsecSaAhInSourceIdType IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIdentType .1.3.6.1.2.1.500.1.1.2.1.6
ipsecSaAhInProtocol Integer32 .1.3.6.1.2.1.500.1.1.2.1.7
ipsecSaAhInDestPort Integer32 .1.3.6.1.2.1.500.1.1.2.1.8
ipsecSaAhInSourcePort Integer32 .1.3.6.1.2.1.500.1.1.2.1.9
ipsecSaIpcompInTable .1.3.6.1.2.1.500.1.1.3
ipsecSaIpcompInEntry ipsecSaIpcompInAddressipsecSaIpcompInCpi .1.3.6.1.2.1.500.1.1.3.1
ipsecSaIpcompInAddress IpsecIpv6Address .1.3.6.1.2.1.500.1.1.3.1.1
ipsecSaIpcompInCreator IpsecSaCreatorIdent .1.3.6.1.2.1.500.1.1.3.1.10
ipsecSaIpcompInEncapsulation IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiEncapsulationMode .1.3.6.1.2.1.500.1.1.3.1.11
ipsecSaIpcompInDecompAlg IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIpcompTransform .1.3.6.1.2.1.500.1.1.3.1.12
ipsecSaIpcompInSeconds secondsSNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.1.3.1.13
ipsecSaIpcompInUserOctets bytesSNMPv2-SMICounter64 .1.3.6.1.2.1.500.1.1.3.1.14
ipsecSaIpcompInPackets SNMPv2-SMICounter64 .1.3.6.1.2.1.500.1.1.3.1.15
ipsecSaIpcompInDecompErrors SNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.1.3.1.16
ipsecSaIpcompInOtherReceiveErrors SNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.1.3.1.17
ipsecSaIpcompInCpi IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIpcompTransform .1.3.6.1.2.1.500.1.1.3.1.2
ipsecSaIpcompInDestId IpsecRawId .1.3.6.1.2.1.500.1.1.3.1.3
ipsecSaIpcompInDestIdType IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIdentType .1.3.6.1.2.1.500.1.1.3.1.4
ipsecSaIpcompInSourceId IpsecRawId .1.3.6.1.2.1.500.1.1.3.1.5
ipsecSaIpcompInSourceIdType IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIdentType .1.3.6.1.2.1.500.1.1.3.1.6
ipsecSaIpcompInProtocol Integer32 .1.3.6.1.2.1.500.1.1.3.1.7
ipsecSaIpcompInDestPort Integer32 .1.3.6.1.2.1.500.1.1.3.1.8
ipsecSaIpcompInSourcePort Integer32 .1.3.6.1.2.1.500.1.1.3.1.9
ipsecSaEspOutTable .1.3.6.1.2.1.500.1.1.4
ipsecSaEspOutEntry ipsecSaEspOutAddressipsecSaEspOutSpi .1.3.6.1.2.1.500.1.1.4.1
ipsecSaEspOutAddress IpsecIpv6Address .1.3.6.1.2.1.500.1.1.4.1.1
ipsecSaEspOutCreator IpsecSaCreatorIdent .1.3.6.1.2.1.500.1.1.4.1.10
ipsecSaEspOutEncapsulation IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiEncapsulationMode .1.3.6.1.2.1.500.1.1.4.1.11
ipsecSaEspOutEncAlg IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiEspTransform .1.3.6.1.2.1.500.1.1.4.1.12
ipsecSaEspOutEncKeyLength bitsUnsigned32 .1.3.6.1.2.1.500.1.1.4.1.13
ipsecSaEspOutAuthAlg IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiAuthAlgorithm .1.3.6.1.2.1.500.1.1.4.1.14
ipsecSaEspOutAuthKeyLength bitsUnsigned32 .1.3.6.1.2.1.500.1.1.4.1.15
ipsecSaEspOutLimitSeconds secondsUnsigned32 .1.3.6.1.2.1.500.1.1.4.1.16
ipsecSaEspOutLimitKbytes kilobytesUnsigned32 .1.3.6.1.2.1.500.1.1.4.1.17
ipsecSaEspOutAccSeconds secondsSNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.1.4.1.18
ipsecSaEspOutAccKbytes kilobytesSNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.1.4.1.19
ipsecSaEspOutSpi Unsigned32 .1.3.6.1.2.1.500.1.1.4.1.2
ipsecSaEspOutUserOctets bytesSNMPv2-SMICounter64 .1.3.6.1.2.1.500.1.1.4.1.20
ipsecSaEspOutPackets SNMPv2-SMICounter64 .1.3.6.1.2.1.500.1.1.4.1.21
ipsecSaEspOutSendErrors SNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.1.4.1.22
ipsecSaEspOutSourceId IpsecRawId .1.3.6.1.2.1.500.1.1.4.1.3
ipsecSaEspOutSourceIdType IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIdentType .1.3.6.1.2.1.500.1.1.4.1.4
ipsecSaEspOutDestId IpsecRawId .1.3.6.1.2.1.500.1.1.4.1.5
ipsecSaEspOutDestIdType IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIdentType .1.3.6.1.2.1.500.1.1.4.1.6
ipsecSaEspOutProtocol Integer32 .1.3.6.1.2.1.500.1.1.4.1.7
ipsecSaEspOutSourcePort Integer32 .1.3.6.1.2.1.500.1.1.4.1.8
ipsecSaEspOutDestPort Integer32 .1.3.6.1.2.1.500.1.1.4.1.9
ipsecSaAhOutTable .1.3.6.1.2.1.500.1.1.5
ipsecSaAhOutEntry ipsecSaAhOutAddressipsecSaAhOutSpi .1.3.6.1.2.1.500.1.1.5.1
ipsecSaAhOutAddress IpsecIpv6Address .1.3.6.1.2.1.500.1.1.5.1.1
ipsecSaAhOutCreator IpsecSaCreatorIdent .1.3.6.1.2.1.500.1.1.5.1.10
ipsecSaAhOutEncapsulation IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiEncapsulationMode .1.3.6.1.2.1.500.1.1.5.1.11
ipsecSaAhOutAuthAlg IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiAhTransform .1.3.6.1.2.1.500.1.1.5.1.12
ipsecSaAhOutAuthKeyLength bitsUnsigned32 .1.3.6.1.2.1.500.1.1.5.1.13
ipsecSaAhOutLimitSeconds secondsUnsigned32 .1.3.6.1.2.1.500.1.1.5.1.14
ipsecSaAhOutLimitKbytes kilobytesUnsigned32 .1.3.6.1.2.1.500.1.1.5.1.15
ipsecSaAhOutAccSeconds secondsSNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.1.5.1.16
ipsecSaAhOutAccKbytes kilobytesSNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.1.5.1.17
ipsecSaAhOutUserOctets bytesSNMPv2-SMICounter64 .1.3.6.1.2.1.500.1.1.5.1.18
ipsecSaAhOutPackets SNMPv2-SMICounter64 .1.3.6.1.2.1.500.1.1.5.1.19
ipsecSaAhOutSpi Unsigned32 .1.3.6.1.2.1.500.1.1.5.1.2
ipsecSaAhOutSendErrors SNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.1.5.1.20
ipsecSaAhOutSourceId IpsecRawId .1.3.6.1.2.1.500.1.1.5.1.3
ipsecSaAhOutSourceIdType IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIdentType .1.3.6.1.2.1.500.1.1.5.1.4
ipsecSaAhOutDestId IpsecRawId .1.3.6.1.2.1.500.1.1.5.1.5
ipsecSaAhOutDestIdType IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIdentType .1.3.6.1.2.1.500.1.1.5.1.6
ipsecSaAhOutProtocol Integer32 .1.3.6.1.2.1.500.1.1.5.1.7
ipsecSaAhOutSourcePort Integer32 .1.3.6.1.2.1.500.1.1.5.1.8
ipsecSaAhOutDestPort Integer32 .1.3.6.1.2.1.500.1.1.5.1.9
ipsecSaIpcompOutTable .1.3.6.1.2.1.500.1.1.6
ipsecSaIpcompOutEntry ipsecSaIpcompOutAddressipsecSaIpcompOutCpi .1.3.6.1.2.1.500.1.1.6.1
ipsecSaIpcompOutAddress IpsecIpv6Address .1.3.6.1.2.1.500.1.1.6.1.1
ipsecSaIpcompOutCreator IpsecSaCreatorIdent .1.3.6.1.2.1.500.1.1.6.1.10
ipsecSaIpcompOutEncapsulation IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiEncapsulationMode .1.3.6.1.2.1.500.1.1.6.1.11
ipsecSaIpcompOutCompAlg IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIpcompTransform .1.3.6.1.2.1.500.1.1.6.1.12
ipsecSaIpcompOutSeconds secondsSNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.1.6.1.13
ipsecSaIpcompOutUserOctets bytesSNMPv2-SMICounter64 .1.3.6.1.2.1.500.1.1.6.1.14
ipsecSaIpcompOutOutputOctets bytesSNMPv2-SMICounter64 .1.3.6.1.2.1.500.1.1.6.1.15
ipsecSaIpcompOutPackets SNMPv2-SMICounter64 .1.3.6.1.2.1.500.1.1.6.1.16
ipsecSaIpcompOutCpi IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIpcompTransform .1.3.6.1.2.1.500.1.1.6.1.2
ipsecSaIpcompOutSourceId IpsecRawId .1.3.6.1.2.1.500.1.1.6.1.3
ipsecSaIpcompOutSourceIdType IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIdentType .1.3.6.1.2.1.500.1.1.6.1.4
ipsecSaIpcompOutDestId IpsecRawId .1.3.6.1.2.1.500.1.1.6.1.5
ipsecSaIpcompOutDestIdType IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIdentType .1.3.6.1.2.1.500.1.1.6.1.6
ipsecSaIpcompOutProtocol Integer32 .1.3.6.1.2.1.500.1.1.6.1.7
ipsecSaIpcompOutSourcePort Integer32 .1.3.6.1.2.1.500.1.1.6.1.8
ipsecSaIpcompOutDestPort Integer32 .1.3.6.1.2.1.500.1.1.6.1.9
saStatistics .1.3.6.1.2.1.500.1.2
ipsecEspCurrentInboundSAs SNMPv2-SMIGauge32 .1.3.6.1.2.1.500.1.2.1
ipsecIpcompTotalInboundSAs SNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.2.10
ipsecIpcompCurrentOutboundSAs SNMPv2-SMIGauge32 .1.3.6.1.2.1.500.1.2.11
ipsecIpcompTotalOutboundSAs SNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.2.12
ipsecEspTotalInboundSAs SNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.2.2
ipsecEspCurrentOutboundSAs SNMPv2-SMIGauge32 .1.3.6.1.2.1.500.1.2.3
ipsecEspTotalOutboundSAs SNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.2.4
ipsecAhCurrentInboundSAs SNMPv2-SMIGauge32 .1.3.6.1.2.1.500.1.2.5
ipsecAhTotalInboundSAs SNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.2.6
ipsecAhCurrentOutboundSAs SNMPv2-SMIGauge32 .1.3.6.1.2.1.500.1.2.7
ipsecAhTotalOutboundSAs SNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.2.8
ipsecIpcompCurrentInboundSAs SNMPv2-SMIGauge32 .1.3.6.1.2.1.500.1.2.9
saErrors .1.3.6.1.2.1.500.1.3
ipsecDecryptionErrors SNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.3.1
ipsecAuthenticationErrors SNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.3.2
ipsecReplayErrors SNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.3.3
ipsecPolicyErrors SNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.3.4
ipsecOtherReceiveErrors SNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.3.5
ipsecSendErrors SNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.3.6
ipsecUnknownSpiErrors SNMPv2-SMICounter32 .1.3.6.1.2.1.500.1.3.7
saTraps .1.3.6.1.2.1.500.1.4
saTrapObjects .1.3.6.1.2.1.500.1.5
ipsecSecurityProtocol IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiSecProtocolId .1.3.6.1.2.1.500.1.5.1
ipsecSPI Unsigned32 .1.3.6.1.2.1.500.1.5.2
ipsecLocalAddress IpsecIpv6Address .1.3.6.1.2.1.500.1.5.3
ipsecPeerAddress IpsecIpv6Address .1.3.6.1.2.1.500.1.5.4
saTrapControl .1.3.6.1.2.1.500.1.6
espAuthFailureTrapEnable r/w SNMPv2-TCTruthValue .1.3.6.1.2.1.500.1.6.1
ahAuthFailureTrapEnable r/w SNMPv2-TCTruthValue .1.3.6.1.2.1.500.1.6.2
espReplayFailureTrapEnable r/w SNMPv2-TCTruthValue .1.3.6.1.2.1.500.1.6.3
ahReplayFailureTrapEnable r/w SNMPv2-TCTruthValue .1.3.6.1.2.1.500.1.6.4
espPolicyFailureTrapEnable r/w SNMPv2-TCTruthValue .1.3.6.1.2.1.500.1.6.5
ahPolicyFailureTrapEnable r/w SNMPv2-TCTruthValue .1.3.6.1.2.1.500.1.6.6
invalidSpiTrapEnable r/w SNMPv2-TCTruthValue .1.3.6.1.2.1.500.1.6.7
otherPolicyFailureTrapEnable r/w SNMPv2-TCTruthValue .1.3.6.1.2.1.500.1.6.8
saGroups .1.3.6.1.2.1.500.1.7
saConformance .1.3.6.1.2.1.500.1.8
Notifications / Traps (8)
NameOIDDescription
espAuthFailureTrap .1.3.6.1.2.1.500.1.4.0.1
IPsec packets with invalid hashes were found in an inbound
ESP SA. The total number of authentication errors
accumulated is sent for the specific row of the
'ipsecSaEspInTable' table for the SA; this provides the
identity of the SA in which the error occurred.
          
Implementations SHOULD send one trap per SA (within a
reasonable time period), rather than sending one trap per
packet.
ahAuthFailureTrap .1.3.6.1.2.1.500.1.4.0.2
IPsec packets with invalid hashes were found in an inbound
AH SA. The total number of authentication errors accumulated
is sent for the specific row of the 'ipsecSaAhInTable' table
for the SA; this provides the identity of the SA in which
the error occurred.
          
Implementations SHOULD send one trap per SA (within a
reasonable time period), rather than sending one trap per
packet.
espReplayFailureTrap .1.3.6.1.2.1.500.1.4.0.3
IPsec packets with invalid sequence numbers were found in
an inbound ESP SA. The total number of replay errors
accumulated is sent for the specific row of the
'ipsecSaEspInTable' table for the SA; this provides the
identity of the SA in which the error occurred.
          
Implementations SHOULD send one trap per SA (within a
reasonable time period), rather than sending one trap per
packet.
ahReplayFailureTrap .1.3.6.1.2.1.500.1.4.0.4
IPsec packets with invalid sequence numbers were found in
the specified AH SA. The total number of replay errors
accumulated is sent for the specific row of the
'ipsecSaAhInTable' table for the SA; this provides the
identity of the SA in which the error occurred.
          
Implementations SHOULD send one trap per SA (within a
reasonable time period), rather than sending one trap per
packet.
espPolicyFailureTrap .1.3.6.1.2.1.500.1.4.0.5
IPsec packets carrying packets with invalid selectors for
the specified ESP SA were found. The total number of policy
errors accumulated is sent for the specific row of the
'ipsecSaEspInTable' table for the SA; this provides the
identity of the SA in which the error occurred.
          
Implementations SHOULD send one trap per SA (within a
reasonable time period), rather than sending one trap per
packet.
ahPolicyFailureTrap .1.3.6.1.2.1.500.1.4.0.6
IPsec packets carrying packets with invalid selectors for
the specified AH SA were found. The total number of policy
errors accumulated is sent for the specific row of the
'ipsecSaAhInTable' table for the SA; this provides the
identity of the SA in which the error occurred.
          
Implementations SHOULD send one trap per SA (within a
reasonable time period), rather than sending one trap per
packet.
espInvalidSpiTrap .1.3.6.1.2.1.500.1.4.0.7
A packet with an unknown SPI was detected from the
specified peer with the specified SPI using the specified
protocol. The destination address of the received packet is
specified by 'ipsecLocalAddress'.
          
The value 'ifIndex' may be 0 if this optional linkage is
unsupported.
          
If the object 'ipsecSecurityProtocol' has the value for
IPcomp, then the 'ipsecSPI' object is the CPI of the packet.
          
Implementations SHOULD send one trap per peer (within a
reasonable time period), rather than sending one trap per
packet.
otherPolicyFailureTrap .1.3.6.1.2.1.500.1.4.0.8
Clear packets were found that should not have been sent to
the entity in the clear. The total number of policy errors
accumulated by the entity is sent, along with the source and
destination addresses of the packet that triggered the trap.
          
Implementations SHOULD send one trap per source address pair
(within a reasonable time period), rather than sending one
trap per packet.