avipsGlobalsInvalidSpiRecovery

AVAYA-IPSEC-MIB · .1.3.6.1.4.1.6889.2.6.1.1.1.1
MIB view Table view

Object

scalar r/w SNMPv2-TCTruthValue 
This object determines whether invalid-spi-recovery 
is enabled (true) or disabled (false).
When enabled, the device shall open an IKE SA,
if it does not already exist, in order to 
send DELETE message to the remote peer when
receiving an invalid spi or invalid cookie 
with SIP of that remote peer.
This causes faster recovery times in case of 
SADB inconsistency, but may cause D/DoS attack
on the remote peer.

Context

MIB
AVAYA-IPSEC-MIB
OID
.1.3.6.1.4.1.6889.2.6.1.1.1.1
Type
scalar
Access
readwrite
Status
current
Parent
avipsGlobals
Siblings
3

Syntax

SNMPv2-TCTruthValue
Source
SNMPv2-TCTruthValue
Base type
Enumeration

Values & Constraints

Type Values
1true
2false

Related Objects

Sibling Objects
ObjectTypeSyntaxOID
avipsNatTEnabled
This object specifies whether IPSec NAT-T is invoked in the device. If this object is True then NAT-T is enabled.
scalarSNMPv2-TCTruthValue.1.3.6.1.4.1.6889.2.6.1.1.1.2
avipsNatTKeepaliveInterval
This object determines the NAT-T keepalive interval in seconds. If this object is set to 0 then NAT-T keepalives are disabled.
scalarseconds SNMPv2-SMIInteger32.1.3.6.1.4.1.6889.2.6.1.1.1.3
avipsCryptoEngineAccelEnabled
The value of this object determines whether IPSec HW acceleration is enabled or disabled. In case the HW does not support acceleration the value of this object shall be false.
scalarSNMPv2-TCTruthValue.1.3.6.1.4.1.6889.2.6.1.1.1.4