avipsTunnelState
AVAYA-IPSEC-MIB ·
.1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.16
Object
column
Enumeration
This object specifies the state of this tunnel.
1. closed - The tunnel does not exist between the peers because
it was not negotiated yet, or because last tunnel
closed normally due to hard timeout, clear by admin
or DELETE received from the remote peer.
This is also the initial state of the row when
it is created.
2. inProgress - The tunnel does not exist between peers, but it
is currently being negotiated in IKE Quick Mode.
3. established - The tunnel exists between peers.
4. failed - The tunnel does not exist between peers because of a
failure:
1. Last time we tried to establish this tunnel
the negotiation failed.
2. The connection with the remote peer has failed due
to one of the following, and hence all the
corresponding ipsec tunnels were closed:
a. Last time we tried to establish IKE the
negotiation failed.
b. During last connection a track object
signaled a connection failure.
c. The interface used for local-address does
not have an IP address asigned to it 1 minute
or more after this row was created.
NOTE: The word 'tunnel' in this context refers to 1 or more
IPSec SAs (ESP or AH) between the peers, pertaining to the proxy
addresses specified in this entry. As long as there is at least
1 SA established, the tunnel state shall remain 'established'.
Context
- MIB
- AVAYA-IPSEC-MIB
- OID
.1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.16- Type
- column
- Access
- readonly
- Status
- current
- Parent
- avipsTunnelEntry
- Table
- avipsTunnelTable
- Siblings
- 41
Syntax
Enumeration
Values & Constraints
Enumerated Values
1 | closed |
2 | inProgress |
3 | established |
4 | failed |
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| avipsTunnelPeerLocalId A synthetic ID that uniquely identifies the local peer for
monitoring purpose.
Note that this ID is persistent for this peer. | column | SNMPv2-SMIUnsigned32 | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.1 |
| avipsTunnelLocalAddress The IP address of the local peer. | column | SNMPv2-SMIIpAddress | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.10 |
| avipsTunnelRemoteAddress The IP address of the remote peer. | column | SNMPv2-SMIIpAddress | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.11 |
| avipsTunnelProxyLocalSubnet The local subnet address this tunnel protects. | column | SNMPv2-SMIIpAddress | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.12 |
| avipsTunnelProxyLocalMask The local subnet mask this tunnel protects. | column | SNMPv2-SMIIpAddress | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.13 |
| avipsTunnelProxyRemoteSubnet The remote subnet address this tunnel protects. | column | SNMPv2-SMIIpAddress | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.14 |
| avipsTunnelProxyRemoteMask The remote subnet mask this tunnel protects. | column | SNMPv2-SMIIpAddress | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.15 |
| avipsTunnelStateLastChange sysUpTime when the last change in avipsTunnelState
occured, in hundredths of a second. | column | SNMPv2-TCTimeStamp | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.17 |
| avipsTunnelLastCntrsReset sysUpTime when last counter reset for this tunnel
occured, in hundredths of a second.
Counters are zeroized when:
o Issuing 'clear crypto sa counters' in CLI.
o Set… | column | SNMPv2-TCTimeStamp | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.18 |
| avipsTunnelInOctets The total number of octets (bytes) successfully received
through this IPSec tunnel.
This value is accumulated BEFORE determining whether or
not the packet should be decompresse… | column | SNMPv2-SMICounter32 | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.19 |
| avipsTunnelPeerRemoteId A synthetic ID that uniquely identifies the remote peer for
monitoring purpose.
Note that this ID is persistent for this peer. | column | SNMPv2-SMIUnsigned32 | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.2 |
| avipsTunnelInOctetsWraps The number of times avipsTunnelInOctets has wrapped.
This counter is zeroized when:
o Issuing 'clear crypto sa counters' in CLI.
o Setting avipsMonitorRstCntrs in M… | column | SNMPv2-SMICounter32 | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.20 |
| avipsTunnelInDecompOctets The total number of decompressed octets (bytes) successfully
received through this IPsec Tunnel.
This value is accumulated AFTER the packet is decompressed.
If compression is no… | column | SNMPv2-SMICounter32 | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.21 |
| avipsTunnelInDecompOctetsWraps The number of times avipsTunnelInDecompOctets has wrapped.
This counter is zeroized when:
o Issuing 'clear crypto sa counters' in CLI.
o Setting avipsMonitorRstCntr… | column | SNMPv2-SMICounter32 | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.22 |
| avipsTunnelInDecompRatio The overall decompression ratio * 100.
This is the ratio between the number of octets received after
decompression and the number of octets received before
decompression. It is c… | column | Ratio * 100 SNMPv2-SMIGauge32 | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.23 |
| avipsTunnelInPkts The number of packets succesfully received through this
tunnel.
This counter is zeroized when:
o Issuing 'clear crypto sa counters' in CLI.
o Setting avipsMonitor… | column | SNMPv2-SMICounter32 | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.24 |
| avipsTunnelInDropTotalPkts The total number of packets discarded after being received
through this tunnel.
This counter is zeroized when:
o Issuing 'clear crypto sa counters' in CLI.
o Settin… | column | SNMPv2-SMICounter32 | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.25 |
| avipsTunnelInDropAntiReplayPkts The number of packets discarded after being received
through this tunnel due to anti-replay verification failure.
This counter is zeroized when:
o Issuing 'clear cr… | column | SNMPv2-SMICounter32 | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.26 |
| avipsTunnelInDropHmacFailPkts The number of packets discarded after being received
through this tunnel due to HMAC verification failure.
This counter is zeroized when:
o Issuing 'clear crypto sa… | column | SNMPv2-SMICounter32 | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.27 |
| avipsTunnelInDropBadTrailerPkts The number of packets discarded after being received
through this tunnel due to bad ESP trailer format received
failure.
This counter is zeroized when:
o Issuing 'c… | column | SNMPv2-SMICounter32 | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.28 |
| avipsTunnelInDropInvalidIdPkts The number of packets discarded after being received
through this tunnel due to invalid identity: inner
(original) IP header address doesn't match the configured
tunnel proxy IP… | column | SNMPv2-SMICounter32 | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.29 |
| avipsTunnelIndex The ID of the crypto-list containing the rule that
creates this tunnel.
This is also the fifth index component of this table. | column | Integer32 | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.3 |
| avipsTunnelInDropUnprotectPkts The number of packets discarded after being received
in the clear (unprotected) although they were expected
to arrive protected by this tunnel (i.e. unprotected
packets with sourc… | column | SNMPv2-SMICounter32 | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.30 |
| avipsTunnelInDropInvalidLenPkts The number of packets discarded after being received
through this tunnel due to length being not aligned to
cipher block.
This counter is zeroized when:
o Issuing … | column | SNMPv2-SMICounter32 | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.31 |
| avipsTunnelInDropSaExpiredPkts The number of packets discarded after being received
through this tunnel due to SA KB lifetime being smaller
then the external IP packet total length.
This counter … | column | SNMPv2-SMICounter32 | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.32 |
| avipsTunnelOutOctets The total number of octets (bytes) successfully transmitted
through this IPSec tunnel.
This value is accumulated AFTER determining whether or
not the packet should be compresse… | column | SNMPv2-SMICounter32 | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.33 |
| avipsTunnelOutOctetsWraps The number of times avipsTunnelOutOctets has wrapped.
This counter is zeroized when:
o Issuing 'clear crypto sa counters' in CLI.
o Setting avipsMonitorRstCntrs in … | column | SNMPv2-SMICounter32 | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.34 |
| avipsTunnelOutUncompOctets The total number of uncompressed octets (bytes) successfully
transmitted through this IPsec Tunnel.
This value is accumulated BEFORE the packet is compressed.
If compression is … | column | SNMPv2-SMICounter32 | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.35 |
| avipsTunnelOutUncompOctetsWraps The number of times avipsTunnelInDecompOctets has wrapped.
This counter is zeroized when:
o Issuing 'clear crypto sa counters' in CLI.
o Setting avipsMonitorRstCntr… | column | SNMPv2-SMICounter32 | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.36 |
| avipsTunnelOutCompRatio The overall compression ratio * 100.
This is the ratio between the number of outbound octets before
compression and the number of outbound octets after
compression. It is calculat… | column | Ratio * 100 SNMPv2-SMIGauge32 | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.37 |
| avipsTunnelOutPkts The number of packets succesfully transmitted through
this tunnel.
This counter is zeroized when:
o Issuing 'clear crypto sa counters' in CLI.
o Setting avipsMonit… | column | SNMPv2-SMICounter32 | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.38 |
| avipsTunnelOutDropTotalPkts The total number of packets dropped before being transmitted
through this tunnel.
This counter is zeroized when:
o Issuing 'clear crypto sa counters' in CLI.
o Sett… | column | SNMPv2-SMICounter32 | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.39 |
| avipsTunnelSubIndex The index of the crypto-list rule that creates this tunnel.
This is also the sixth index component of this table. | column | Integer32 | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.4 |
| avipsTunnelOutDropNoSaPkts The number of packets dropped before being transmitted
through this tunnel due to no IPSec SA existed when
the packet arrived.
This counter is zeroized when:
o Iss… | column | SNMPv2-SMICounter32 | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.40 |
| avipsTunnelOutDropSeqRolPkts The number of packets dropped before being transmitted
through this tunnel due to sequence number rollover:
the sequence number of the IPSec SA reached its capacity.
… | column | SNMPv2-SMICounter32 | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.41 |
| avipsTunnelOutDropSaExpiredPkts The number of packets dropped before being transmitted
through this tunnel due to SA expired: SA KB lifetime
is smaller then the external IP packet total length.
T… | column | SNMPv2-SMICounter32 | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.42 |
| avipsTunnelPeerLocalType The type of the local peer identity, as it was configured.
If the local peer ID was configured as an interface name,
the value of this object shall be ifName.
This … | column | IsakmpIdentityType | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.5 |
| avipsTunnelPeerLocalValue The value of the local peer identity.
If the local peer type is an IP Address, then this
is the IP Address used to identify the local peer.
If the lo… | column | IsakmpIdentityValue | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.6 |
| avipsTunnelPeerRemoteType The type of the remote peer identity.
This is also the third index component of this table. | column | IsakmpIdentityType | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.7 |
| avipsTunnelPeerRemoteValue The value of the remote peer identity.
If the remote peer type is an IP Address, then this
is the IP Address used to identify the remote peer.
If the… | column | IsakmpIdentityValue | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.8 |
| avipsTunnelDescription Free text describing this tunnel.
The value of this field is taken from the
description specified for the crypto-list rule that
creates this tunnel. | column | SNMPv2-TCDisplayString | .1.3.6.1.4.1.6889.2.6.1.1.4.1.3.1.9 |