ipsecSaAhInPolicyErrors
IPSEC-SA-MON-MIB ·
.1.3.6.1.2.1.500.1.1.2.1.23
Object
column
SNMPv2-SMICounter32
The number of packets discarded by the SA due to policy errors. This includes packets where the next protocol is invalid.
Context
- MIB
- IPSEC-SA-MON-MIB
- OID
.1.3.6.1.2.1.500.1.1.2.1.23- Type
- column
- Access
- readonly
- Status
- current
- Parent
- ipsecSaAhInEntry
- Table
- ipsecSaAhInTable
- Siblings
- 23
Syntax
SNMPv2-SMICounter32
- Source
- SNMPv2-SMICounter32
- Base type
Unsigned32
Values & Constraints
Type Constraints
range: 0..4294967295
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| ipsecSaAhInAddress The destination address of the SA.
IPv4 entities will prefix the IP address with
'0000:0000:0000:0000:0000:FFFF::'. | column | IpsecIpv6Address | .1.3.6.1.2.1.500.1.1.2.1.1 |
| ipsecSaAhInCreator The creator of this SA.
This MIB makes no assumptions about how the SAs are created.
They may be created statically, or by a key exchange
protocol such as IKE, or b… | column | IpsecSaCreatorIdent | .1.3.6.1.2.1.500.1.1.2.1.10 |
| ipsecSaAhInEncapsulation The type of encapsulation used by this SA. | column | IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiEncapsulationMode | .1.3.6.1.2.1.500.1.1.2.1.11 |
| ipsecSaAhInAuthAlg A unique value representing the hash algorithm applied to
traffic carried by this SA. | column | IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiAhTransform | .1.3.6.1.2.1.500.1.1.2.1.12 |
| ipsecSaAhInAuthKeyLength The length of the authentication key in bits used for the
algorithm specified in the 'ipsecSaAhInAuthAlg' object. It
may be 0 if the key length is implicit in the specified
algori… | column | bits Unsigned32 | .1.3.6.1.2.1.500.1.1.2.1.13 |
| ipsecSaAhInRepWinSize The size of the anti-replay window used by this SA, or 0 if
anti-replay checking is not being done. | column | SNMPv2-SMIUnsigned32 | .1.3.6.1.2.1.500.1.1.2.1.14 |
| ipsecSaAhInLimitSeconds The maximum lifetime in seconds of the SA, or 0 if there is
no time constraint on its expiration.
The display value is limited to 4294967295 seconds (more
than 136 … | column | seconds SNMPv2-SMIUnsigned32 | .1.3.6.1.2.1.500.1.1.2.1.15 |
| ipsecSaAhInLimitKbytes The maximum traffic in bytes that the SA is allowed to
process, or 0 if there is no traffic constraint on its
expiration.
The display value is limited to 4294967295… | column | kilobytes SNMPv2-SMIUnsigned32 | .1.3.6.1.2.1.500.1.1.2.1.16 |
| ipsecSaAhInAccSeconds The number of seconds accumulated against the SA's
expiration by time.
This is also the number of seconds that the SA has existed. | column | seconds SNMPv2-SMICounter32 | .1.3.6.1.2.1.500.1.1.2.1.17 |
| ipsecSaAhInAccKbytes The amount of traffic accumulated that counts against the
SA's expiration by traffic limitation, measured in
kilobytes.
This value may be 0 if the SA does not expir… | column | kilobytes SNMPv2-SMICounter32 | .1.3.6.1.2.1.500.1.1.2.1.18 |
| ipsecSaAhInUserOctets The amount of user level traffic measured in bytes handled
by the SA. This is the number of bytes of the de-processed
IP packet, including the original IP header of that de-
proce… | column | bytes SNMPv2-SMICounter64 | .1.3.6.1.2.1.500.1.1.2.1.19 |
| ipsecSaAhInSpi The security parameters index of the SA. | column | SNMPv2-SMIUnsigned32 | .1.3.6.1.2.1.500.1.1.2.1.2 |
| ipsecSaAhInPackets The number of packets handled by the SA. | column | SNMPv2-SMICounter64 | .1.3.6.1.2.1.500.1.1.2.1.20 |
| ipsecSaAhInAuthErrors The number of packets discarded by the SA due to
authentication errors. | column | SNMPv2-SMICounter32 | .1.3.6.1.2.1.500.1.1.2.1.21 |
| ipsecSaAhInReplayErrors The number of packets discarded by the SA due to replay
errors. | column | SNMPv2-SMICounter32 | .1.3.6.1.2.1.500.1.1.2.1.22 |
| ipsecSaAhInOtherReceiveErrors The number of packets discarded by the SA due to errors
other than decryption, authentication or replay errors. This
may include packets dropped due to a lack of receive
buffers, … | column | SNMPv2-SMICounter32 | .1.3.6.1.2.1.500.1.1.2.1.24 |
| ipsecSaAhInDestId The destination identifier of the SA. It may be 0 if
unknown or if the SA uses transport mode encapsulation.
This value is taken directly from the optional ID paylo… | column | IpsecRawId | .1.3.6.1.2.1.500.1.1.2.1.3 |
| ipsecSaAhInDestIdType The type of identifier presented by 'ipsecSaAhInDestId'. It
may be 0 if unknown or if the SA uses transport mode
encapsulation. | column | IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIdentType | .1.3.6.1.2.1.500.1.1.2.1.4 |
| ipsecSaAhInSourceId The source identifier of the SA. It may be 0 if unknown or
if the SA uses transport mode encapsulation.
This value is taken directly from the optional ID payloads
t… | column | IpsecRawId | .1.3.6.1.2.1.500.1.1.2.1.5 |
| ipsecSaAhInSourceIdType The type of identifier presented by 'ipsecSaAhInSourceId'.
It may be 0 if unknown or if the SA uses transport mode
encapsulation. | column | IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIdentType | .1.3.6.1.2.1.500.1.1.2.1.6 |
| ipsecSaAhInProtocol The transport-layer protocol number that this SA carries,
or 0 if it carries any protocol. | column | Integer32 | .1.3.6.1.2.1.500.1.1.2.1.7 |
| ipsecSaAhInDestPort The destination port number of the protocol that this SA
carries, or 0 if it carries any port number. | column | Integer32 | .1.3.6.1.2.1.500.1.1.2.1.8 |
| ipsecSaAhInSourcePort The source port number of the protocol that this SA
carries, or 0 if it carries any port number. | column | Integer32 | .1.3.6.1.2.1.500.1.1.2.1.9 |