spdPacketNotification
IPSEC-SPD-MIB ·
.1.3.6.1.2.1.153.2.0.2
Object
notification
Notification that a packet passed through a Security
Association (SA). Only SAs created by actions with packet
logging enabled will result in this notification getting
sent. The objects sent MUST include the spdActionExecuted,
which will indicate which action was executed within the
scope of the rule. Additionally, the spdIPSourceType,
spdIPSourceAddress, spdIPDestinationType, and
spdIPDestinationAddress objects MUST be included to
indicate the packet source and destination of the packet
that triggered the action. The spdIPEndpointAddType,
spdIPEndpointAddress, and spdPacketDirection objects are
included to indicate which endpoint the packet was
associated with. Finally, spdPacketPart is included to
enable sending a variable sized part of the front of the
packet with the size dependent on the value of the object of
TC syntax 'SpdIPPacketLogging', which indicated that logging
should be done.
A spdPacketNotification SHOULD be limited to a maximum of
one notification sent per minute for any action
notifications that do not have any other configuration
controlling their send rate.
An action notification SHOULD be limited to a maximum of
one notification sent per minute for any action
notifications that do not have any other configuration
controlling their send rate.
Context
- MIB
- IPSEC-SPD-MIB
- OID
.1.3.6.1.2.1.153.2.0.2- Type
- notification
- Status
- current
- Parent
- spdNotifications
- Siblings
- 1
Syntax
No syntax metadata recorded.
Values & Constraints
No enumerated values or constraints recorded.
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| spdActionNotification Notification that an action was executed by a rule.
Only actions with logging enabled will result in this
notification getting sent. The object includes the
spdActionExecuted obj… | notification | - | .1.3.6.1.2.1.153.2.0.1 |
Notification Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| spdActionExecuted Points to the action instance that was executed that
resulted in the notification being sent. | scalar | SNMPv2-TCVariablePointer | .1.3.6.1.2.1.153.2.1.1 |
| spdIPEndpointAddType Contains the address type for the interface that the
notification triggering packet is passing through. | scalar | INET-ADDRESS-MIBInetAddressType | .1.3.6.1.2.1.153.2.1.2 |
| spdIPEndpointAddress Contains the interface address for the interface that the
notification triggering packet is passing through.
The format of this object is specified by the
spdIPEndpoint… | scalar | INET-ADDRESS-MIBInetAddress | .1.3.6.1.2.1.153.2.1.3 |
| spdIPSourceType Contains the source address type of the packet that
triggered the notification. | scalar | INET-ADDRESS-MIBInetAddressType | .1.3.6.1.2.1.153.2.1.4 |
| spdIPSourceAddress Contains the source address of the packet that
triggered the notification.
The format of this object is specified by the
spdIPSourceType object. | scalar | INET-ADDRESS-MIBInetAddress | .1.3.6.1.2.1.153.2.1.5 |
| spdIPDestinationType Contains the destination address type of the packet
that triggered the notification. | scalar | INET-ADDRESS-MIBInetAddressType | .1.3.6.1.2.1.153.2.1.6 |
| spdIPDestinationAddress Contains the destination address of the packet that
triggered the notification.
The format of this object is specified by the
spdIPDestinationType object. | scalar | INET-ADDRESS-MIBInetAddress | .1.3.6.1.2.1.153.2.1.7 |
| spdPacketDirection Indicates if the packet that triggered the action in
questions was ingress (inbound) or egress (outbound). | scalar | DIFFSERV-MIBIfDirection | .1.3.6.1.2.1.153.2.1.8 |
| spdPacketPart spdPacketPart is the front part of the full IP packet that
triggered this notification. The initial size limit is
determined by the smaller of the size, indicated by:
… | scalar | OctetString | .1.3.6.1.2.1.153.2.1.9 |