tmnxKeyChainAuthFailure
TIMETRA-SECURITY-MIB ·
.1.3.6.1.4.1.6527.3.1.3.22.0.2
Object
notification
The tmnxKeyChainAuthFailure notification is generated when the
incoming packet is dropped due to key chain authentication failure.
Failure could be due to the following reasons or more:
- Send packet had not auth keychain but recv side had keychain enabled.
- Keychain key id's did not match.
- Keychain key digest mismatch
- Received packet with invalid enhanced authentication option length.
- For other causes of failure refer to 'draft-bonica-tcp-auth-05.txt'.
Context
- MIB
- TIMETRA-SECURITY-MIB
- OID
.1.3.6.1.4.1.6527.3.1.3.22.0.2- Type
- notification
- Status
- current
- Parent
- tmnxSecurityNotifications
- Siblings
- 63
Syntax
No syntax metadata recorded.
Values & Constraints
No enumerated values or constraints recorded.
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| tmnxSSHServerPreserveKeyFail The tmnxSSHServerPreserveKeyFail notification is generated when the
saving of SSH server host key on the persistent drive fails by the CPM
module.
tmnxCpmFlashId identi… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.1 |
| tmnxMD5AuthFailure The tmnxMD5AuthFailure notification is generated when the incoming
packet is dropped due to MD5 authentication failure. | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.10 |
| tmnxCpmProtDefPolModified The tmnxCpmProtDefPolModified notification is generated when the user
modifies a default access or default network policy. | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.11 |
| tmnxCpmProtViolSdpBind [CAUSE] The tmnxCpmProtViolSdpBind notification is generated when the
packet arrival rate at a mesh-sdp or spoke-sdp exceeds the SDP's
configured overall-rate.
[EFFECT]… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.12 |
| tmnxCpmProtExcdSdpBind [CAUSE] The tmnxCpmProtExcdSdpBind notification is generated when a
source (identified by a MAC address) sends a packet stream to a local
mesh-sdp or spoke-sdp at a rate which exc… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.13 |
| tmnxCpmProtExcdSapEcm [CAUSE] The tmnxCpmProtExcdSapEcm notification is generated when an
Eth-CFM packet stream (identified by a source MAC address, domain
level, and Eth-CFM opcode) arrives at a local… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.14 |
| tmnxCpmProtExcdSdpBindEcm [CAUSE] The tmnxCpmProtExcdSdpBindEcm notification is generated when
an Eth-CFM packet stream (identified by a source MAC address, domain
level, and Eth-CFM opcode) arrives at a l… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.15 |
| tmnxPkiFileReadFailed [CAUSE] The tmnxPkiFileReadFailed notification is generated when an
attempt to read the file fails. The reason for the failure is
indicated by the tmnxSecNotifFailureReason object… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.16 |
| tmnxPkiCertVerificationFailed [CAUSE] The tmnxPkiCertVerificationFailed notification is generated
when an attempt to verify the certificate fails. This notification is
only used by the IPsec application.
… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.17 |
| tmnxCAProfileStateChange [CAUSE] The tmnxCAProfileStateChange notification is generated when
Certificate Authority profile changes state to 'down' due to
tmnxSecNotifFailureReason.
[EFFECT] Cer… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.18 |
| tmnxCpmProtExcdSapIp [CAUSE] The tmnxCpmProtExcdSapIp notification is generated when a
source (identified by an IP address) sends a packet stream to a local
SAP at a rate which exceeds the SAP's confi… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.19 |
| tmnxPkiCAProfActnStatusChg [CAUSE] The tmnxPkiCAProfActnStatusChg notification is generated when
tmnxPkiCAProfActnStatus changes status. More information is available
through tmnxPkiCAProfActnStatusString a… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.20 |
| tmnxCpmProtViolSapOutProf [CAUSE] The tmnxCpmProtViolSapOutProf notification is generated when
the rate at which incoming control packets are marked as
out-of-profile specified by tmnxCpmProtPolOutProfileR… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.21 |
| tmnxCpmProtViolIfOutProf [CAUSE] The tmnxCpmProtViolIfOutProf notification is generated when
the rate at which incoming control packets are marked as
out-of-profile specified by tmnxCpmProtPolOutProfileRa… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.22 |
| tmnxCpmProtExcdSdpBindIp [CAUSE] The tmnxCpmProtExcdSdpBindIp notification is generated when a
source (identified by an IP address) sends a packet stream to a local
mesh-sdp or spoke-sdp at a rate which e… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.23 |
| tmnxSecComputeCertChainFailure [CAUSE] The tmnxSecComputeCertChainFailure notification is generated
when a compute chain-failure has occurred.
[EFFECT] The chain cannot be built for a configured cert… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.24 |
| tmnxCpmProtViolSdpBindOutProf [CAUSE] The tmnxCpmProtViolSdpBindOutProf notification is generated
when the rate at which incoming control packets are marked as
out-of-profile specified by tmnxCpmProtPolOutProf… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.25 |
| tmnxSecNotifKeyChainExpired The tmnxSecNotifKeyChainExpired notification is generated when a
protocol instance tries to use a keychain, for which the last key
entry has expired. | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.26 |
| tmnxCAProfUpDueToRevokeChkCrlOpt [CAUSE] The tmnxCAProfUpDueToRevokeChkCrlOpt notification is generated
when Certificate Authority profile changes state to 'up' due to
tmnxPkiCAProfRevokeChk set to 'crlOptional' … | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.27 |
| tmnxPkiCertBeforeExpWarning [CAUSE] The tmnxPkiCertBeforeExpWarning notification is generated when
the certificate indicated in tmnxSecNotifFile will expire in the time
period indicated by tmnxPkiExpRemainin… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.28 |
| tmnxPkiCertAfterExpWarning [CAUSE] The tmnxPkiCertAfterExpWarning notification is generated when
the certificate indicated in tmnxSecNotifFile has expired.
[EFFECT] The indicated certificate has … | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.29 |
| tmnxCpmProtViolPort The tmnxCpmProtViolPort notification is generated when a link-specific
packet arrival rate limit violation is detected for a port.
This notification is not supported on… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.3 |
| tmnxPkiCertExpWarningCleared [CAUSE] The tmnxPkiCertExpWarningCleared notification is generated
when the expiration warning for the certificate indicated in
tmnxSecNotifFile no longer applies because of the r… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.30 |
| tmnxPkiCRLBeforeExpWarning [CAUSE] The tmnxPkiCRLBeforeExpWarning notification is generated when
the CRL (certificate revocation list) indicated in tmnxSecNotifFile
will expire in the time period indicated … | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.31 |
| tmnxPkiCRLAfterExpWarning [CAUSE] The tmnxPkiCRLAfterExpWarning notification is generated when
the CRL (certificate revocation list) indicated in tmnxSecNotifFile
has expired.
[EFFECT] The indic… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.32 |
| tmnxPkiCRLExpWarningCleared [CAUSE] The tmnxPkiCRLExpWarningCleared notification is generated when
the expiration warning for the CRL (certificate revocation list)
indicated in tmnxSecNotifFile no longer app… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.33 |
| tmnxSecNotifFileReloaded [CAUSE] The tmnxSecNotifFileReloaded notification is generated when
the certificate or key indicated in tmnxSecNotifFile is reloaded.
tmnxSecNotifFileType indicates whether a cert… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.34 |
| tmnxSecPwdHistoryFileLoadFailed [CAUSE] The tmnxSecPwdHistoryFileLoadFailed notification is generated
when the password history is enabled (tmnxPasswordHistory is not 0)
for the first time and the system was una… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.35 |
| tmnxSecPwdHistoryFileWriteFailed [CAUSE] The tmnxSecPwdHistoryFileWriteFailed notification is generated
when the system is unable to store the password history when an user's
password is changed.
[EFFE… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.36 |
| tmnxPkiCAProfCrlUpdateStart [CAUSE] A tmnxPkiCAProfCrlUpdateStart notification is generated when a
CRL update operation is started for an existing CA Profile.
The CA Profile is configured via tmnx… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.37 |
| tmnxPkiCAProfCrlUpdateSuccess [CAUSE] A tmnxPkiCAProfCrlUpdateSuccess notification is generated when
a new valid CRL file is successfully updated for an existing CA
Profile.
The CA Profile is config… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.38 |
| tmnxPkiCAProfCrlUpdateUrlFail [CAUSE] A tmnxPkiCAProfCrlUpdateUrlFail notification is generated when
the CRL update operation has failed after attempting the indicated URL
for an existing CA Profile.
… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.39 |
| tmnxCpmProtViolPortAgg The tmnxCpmProtViolPortAgg notification is generated when a per-port
overall packet rate limit violation is detected for a port.
This notification is not supported on S… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.4 |
| tmnxPkiCAProfCrlUpdAllUrlsFail [CAUSE] A tmnxPkiCAProfCrlUpdAllUrlsFail notification is generated
when the CRL update operation failed after attempting all URLs for an
existing CA Profile.
The CA Pro… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.40 |
| tmnxPkiFileWriteFailed [CAUSE] The tmnxPkiFileWriteFailed notification is generated when an
attempt to write the file fails. Reason for the failure is indicated
by the tmnxSecNotifFailureReason object.
… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.41 |
| tmnxPkiCAProfCrlUpdNoNxtUpdTime [CAUSE] A tmnxPkiCAProfCrlUpdNoNxtUpdTime notification is generated
when tmnxPkiCAProfAtCrlUpdScheduleT is 'nextUpdateBased (1)' and
one of the following conditions is true:
1) Th… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.42 |
| tmnxUsrProfSessionLimitExceeded [CAUSE] The tmnxUsrProfSessionLimitExceeded notification is generated
when an attempt to establish a new user access session is not
successful because any of SSH / Telnet / Total … | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.43 |
| tmnxCliGroupSessionLimitExceeded [CAUSE] The tmnxCliGroupSessionLimitExceeded notification is generated
when an attempt to establish a new user access session is not
successful because any of SSH / Telnet / Total… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.44 |
| tmnxPkiCAProfCrlUpdLargPreUpdTm [CAUSE] A tmnxPkiCAProfCrlUpdLargPreUpdTm notification is generated
when the 'nextUpdate' time of a newly downloaded CRL is earlier than
the last successful update time or the tim… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.45 |
| tmnxUserCliLoginMaxAttempts [CAUSE] A tmnxUserCliLoginMaxAttempts notification is generated when a
non Lawful Interception user attempting to open a CLI session failed
to authenticate for more than a maximum… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.46 |
| tmnxUserFtpLoginMaxAttempts [CAUSE] A tmnxUserFtpLoginMaxAttempts notification is generated when a
non Lawful Interception user attempting to connect via FTP failed to
authenticate for more than a maximum al… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.47 |
| tmnxUserSshLoginMaxAttempts [CAUSE] A tmnxUserSshLoginMaxAttempts notification is generated when a
non Lawful Interception user attempting to connect via SSH failed to
authenticate for more than a maximum al… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.48 |
| tmnxPkiCertNotYetValid [CAUSE] The tmnxPkiCertNotYetValid notification is generated when the
certificate indicated in tmnxSecNotifFile is not yet valid.
[EFFECT] The indicated certificate is … | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.49 |
| tmnxCpmProtViolIf The tmnxCpmProtViolIf notification is generated when a overall packet
arrival rate violation is detected for an interface, and this
notification is enabled.
This notifi… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.5 |
| tmnxPkiCRLNotYetValid [CAUSE] The tmnxPkiCRLNotYetValid notification is generated when the
CRL (Certificate Revocation List) indicated in tmnxSecNotifFile is not
yet valid.
[EFFECT] The CRL … | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.50 |
| tmnxLiUserCliLoginMaxAttempts [CAUSE] A tmnxLiUserCliLoginMaxAttempts notification is generated when
a Lawful Interception user attempting to open a CLI session failed to
authenticate for more than a maximum a… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.51 |
| tmnxLiUserSshLoginMaxAttempts [CAUSE] A tmnxLiUserSshLoginMaxAttempts notification is generated when
a Lawful Interception user attempting to connect via SSH failed to
authenticate for more than a maximum allo… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.52 |
| tmnxLiUserFtpLoginMaxAttempts [CAUSE] A tmnxLiUserFtpLoginMaxAttempts notification is generated when
a Lawful Interception user attempting to connect via FTP failed to
authenticate for more than a maximum allo… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.53 |
| tmnxAppPkiCertVerificationFailed [CAUSE] The tmnxAppPkiCertVerificationFailed notification is generated
when an attempt to verify the certificate fails for a non-IPsec
application.
[EFFECT] Fail to est… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.54 |
| tmnxUserNetconfLoginMaxAttempts [CAUSE] A tmnxUserNetconfLoginMaxAttempts notification is generated
when a user attempting to connect via netconf failed to authenticate
for more than a maximum allowed number of … | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.55 |
| tmnxCertKeyPairGen [CAUSE] A tmnxCertKeyPairGen notification is generated when a user
generates a cryptographic key with the admin certificate command | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.56 |
| tmnxCertImport [CAUSE] A tmnxCertImport notification is generated when a user imports
a cryptographic key, certificate, or CRL with the admin certificate
command | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.57 |
| tmnxCertExport [CAUSE] A tmnxCertExport notification is generated when a user exports
a cryptographic key, certificate, or CRL with the admin certificate
command | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.58 |
| tmnxFileDeleted [CAUSE] A tmnxFileDeleted notification is generated when a user
deletes a file through the file command | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.59 |
| tmnxCpmProtViolSap The tmnxCpmProtViolSap notification is generated when a overall packet
arrival rate violation is detected for a SAP, and this notification is
enabled.
This notification… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.6 |
| tmnxFileMoved [CAUSE] A tmnxFileMoved notification is generated when a user moves a
file through the file command | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.60 |
| tmnxFileCopied [CAUSE] A tmnxFileCopied notification is generated when a user copies
a file through the file command | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.61 |
| tmnxFileUnzip [CAUSE] The tmnxFileUnzip notification is generated upon the
completion of an unzip operation of the source ZIP file specified by
tmnxSecNotifyUrl to the destination location spec… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.62 |
| tmnxPasswordHashingChanged [CAUSE] The tmnxPasswordHashingChanged notification is generated upon
the change of password hashing algorithm (tmnxPasswordHashing). The
value of the object tmnxSecNotifNewPasswo… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.63 |
| tmnxUserPasswordChangedByAdmin [CAUSE] The tmnxUserPasswordChangedByAdmin notification is generated
upon the change of a password of a local user by a user with
administrative rights. The value of the object
tm… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.64 |
| tmnxCpmProtViolMac The tmnxCpmProtViolMac notification is generated when a per-source
rate limit violation was detected for a source, and this notification
is enabled.
This notification i… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.7 |
| tmnxCpmProtViolVdoSvcClient The tmnxCpmProtViolVdoSvcClient notification is generated when a
per-source rate limit violation was detected for a client address of a
RTCP control traffic in VPLS service. | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.8 |
| tmnxCpmProtViolVdoVrtrClient The tmnxCpmProtViolVdoVrtrClient notification is generated when a
per-source rate limit violation was detected for a client address of a
RTCP control traffic in router context. | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.9 |
Notification Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| tmnxKeyChainReceiveTcpOptionNum The value of tmnxKeyChainReceiveTcpOptionNum specifies the TCP option
value to check for in the TCP header of packets being received by the
router.
The value of tmn… | column | TmnxKeyChainTcpOptionNum | .1.3.6.1.4.1.6527.3.1.2.22.14.1.5 |
| tmnxKeyChainAuthFailReason tmnxKeyChainAuthFailReason is used by tmnxKeyChainAuthFailure to
notify the reason for the keychain authentication failure. | scalar | Enumeration | .1.3.6.1.4.1.6527.3.1.2.22.16.1 |
| tmnxKeyChainAuthAddrType The value of the object tmnxKeyChainAuthAddrType indicates the address
type (ipv4 or ipv6) of the source address in the authentication
packet. | scalar | INET-ADDRESS-MIBInetAddressType | .1.3.6.1.4.1.6527.3.1.2.22.16.2 |
| tmnxKeyChainAuthAddr The value of the object tmnxKeyChainAuthAddr indicates the source
address in the authentication packet. | scalar | INET-ADDRESS-MIBInetAddress | .1.3.6.1.4.1.6527.3.1.2.22.16.3 |
| TIMETRA-VRTR-MIBvRtrID The unique value which identifies this virtual router in the Tmnx
system. The vRtrID value for each virtual router must remain
constant at least from one re-initializa… | column | TIMETRA-TC-MIBTmnxVRtrID | .1.3.6.1.4.1.6527.3.1.2.3.1.1.1 |