tmnxPkiCAProfCrlUpdLargPreUpdTm
TIMETRA-SECURITY-MIB ·
.1.3.6.1.4.1.6527.3.1.3.22.0.45
Object
notification
[CAUSE] A tmnxPkiCAProfCrlUpdLargPreUpdTm notification is generated
when the 'nextUpdate' time of a newly downloaded CRL is earlier than
the last successful update time or the time of setting
tmnxPkiCAProfAtCrlUpdAdminState to 'inService (2)' plus the pre-update
time.
The last successful update time is stored in
tmnxPkiCAProfAtCrlUpdLstSucsTmSt. The pre-update time is configured
via tmnxPkiCAProfAtCrlUpdPreUpdTime.
[EFFECT] The system will update the CRL again in
tmnxPkiCAProfAtCrlUpdRetryIntv seconds rather than immediately.
[RECOVERY] Configure tmnxPkiCAProfAtCrlUpdPreUpdTime to a value less
than (the 'nextUpdate' value of the newly downloaded CRL - the last
successful update time). The ideal value would be a value slightly
lower than the CRL overlap period to avoid unnecessary download
attempts.
No recovery is needed for if the notification is generated in case of
setting tmnxPkiCAProfAtCrlUpdAdminState to 'inService (2)'.
Context
- MIB
- TIMETRA-SECURITY-MIB
- OID
.1.3.6.1.4.1.6527.3.1.3.22.0.45- Type
- notification
- Status
- current
- Parent
- tmnxSecurityNotifications
- Siblings
- 63
Syntax
No syntax metadata recorded.
Values & Constraints
No enumerated values or constraints recorded.
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| tmnxSSHServerPreserveKeyFail The tmnxSSHServerPreserveKeyFail notification is generated when the
saving of SSH server host key on the persistent drive fails by the CPM
module.
tmnxCpmFlashId identi… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.1 |
| tmnxMD5AuthFailure The tmnxMD5AuthFailure notification is generated when the incoming
packet is dropped due to MD5 authentication failure. | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.10 |
| tmnxCpmProtDefPolModified The tmnxCpmProtDefPolModified notification is generated when the user
modifies a default access or default network policy. | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.11 |
| tmnxCpmProtViolSdpBind [CAUSE] The tmnxCpmProtViolSdpBind notification is generated when the
packet arrival rate at a mesh-sdp or spoke-sdp exceeds the SDP's
configured overall-rate.
[EFFECT]… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.12 |
| tmnxCpmProtExcdSdpBind [CAUSE] The tmnxCpmProtExcdSdpBind notification is generated when a
source (identified by a MAC address) sends a packet stream to a local
mesh-sdp or spoke-sdp at a rate which exc… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.13 |
| tmnxCpmProtExcdSapEcm [CAUSE] The tmnxCpmProtExcdSapEcm notification is generated when an
Eth-CFM packet stream (identified by a source MAC address, domain
level, and Eth-CFM opcode) arrives at a local… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.14 |
| tmnxCpmProtExcdSdpBindEcm [CAUSE] The tmnxCpmProtExcdSdpBindEcm notification is generated when
an Eth-CFM packet stream (identified by a source MAC address, domain
level, and Eth-CFM opcode) arrives at a l… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.15 |
| tmnxPkiFileReadFailed [CAUSE] The tmnxPkiFileReadFailed notification is generated when an
attempt to read the file fails. The reason for the failure is
indicated by the tmnxSecNotifFailureReason object… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.16 |
| tmnxPkiCertVerificationFailed [CAUSE] The tmnxPkiCertVerificationFailed notification is generated
when an attempt to verify the certificate fails. This notification is
only used by the IPsec application.
… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.17 |
| tmnxCAProfileStateChange [CAUSE] The tmnxCAProfileStateChange notification is generated when
Certificate Authority profile changes state to 'down' due to
tmnxSecNotifFailureReason.
[EFFECT] Cer… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.18 |
| tmnxCpmProtExcdSapIp [CAUSE] The tmnxCpmProtExcdSapIp notification is generated when a
source (identified by an IP address) sends a packet stream to a local
SAP at a rate which exceeds the SAP's confi… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.19 |
| tmnxKeyChainAuthFailure The tmnxKeyChainAuthFailure notification is generated when the
incoming packet is dropped due to key chain authentication failure.
Failure could be due to the following… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.2 |
| tmnxPkiCAProfActnStatusChg [CAUSE] The tmnxPkiCAProfActnStatusChg notification is generated when
tmnxPkiCAProfActnStatus changes status. More information is available
through tmnxPkiCAProfActnStatusString a… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.20 |
| tmnxCpmProtViolSapOutProf [CAUSE] The tmnxCpmProtViolSapOutProf notification is generated when
the rate at which incoming control packets are marked as
out-of-profile specified by tmnxCpmProtPolOutProfileR… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.21 |
| tmnxCpmProtViolIfOutProf [CAUSE] The tmnxCpmProtViolIfOutProf notification is generated when
the rate at which incoming control packets are marked as
out-of-profile specified by tmnxCpmProtPolOutProfileRa… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.22 |
| tmnxCpmProtExcdSdpBindIp [CAUSE] The tmnxCpmProtExcdSdpBindIp notification is generated when a
source (identified by an IP address) sends a packet stream to a local
mesh-sdp or spoke-sdp at a rate which e… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.23 |
| tmnxSecComputeCertChainFailure [CAUSE] The tmnxSecComputeCertChainFailure notification is generated
when a compute chain-failure has occurred.
[EFFECT] The chain cannot be built for a configured cert… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.24 |
| tmnxCpmProtViolSdpBindOutProf [CAUSE] The tmnxCpmProtViolSdpBindOutProf notification is generated
when the rate at which incoming control packets are marked as
out-of-profile specified by tmnxCpmProtPolOutProf… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.25 |
| tmnxSecNotifKeyChainExpired The tmnxSecNotifKeyChainExpired notification is generated when a
protocol instance tries to use a keychain, for which the last key
entry has expired. | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.26 |
| tmnxCAProfUpDueToRevokeChkCrlOpt [CAUSE] The tmnxCAProfUpDueToRevokeChkCrlOpt notification is generated
when Certificate Authority profile changes state to 'up' due to
tmnxPkiCAProfRevokeChk set to 'crlOptional' … | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.27 |
| tmnxPkiCertBeforeExpWarning [CAUSE] The tmnxPkiCertBeforeExpWarning notification is generated when
the certificate indicated in tmnxSecNotifFile will expire in the time
period indicated by tmnxPkiExpRemainin… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.28 |
| tmnxPkiCertAfterExpWarning [CAUSE] The tmnxPkiCertAfterExpWarning notification is generated when
the certificate indicated in tmnxSecNotifFile has expired.
[EFFECT] The indicated certificate has … | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.29 |
| tmnxCpmProtViolPort The tmnxCpmProtViolPort notification is generated when a link-specific
packet arrival rate limit violation is detected for a port.
This notification is not supported on… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.3 |
| tmnxPkiCertExpWarningCleared [CAUSE] The tmnxPkiCertExpWarningCleared notification is generated
when the expiration warning for the certificate indicated in
tmnxSecNotifFile no longer applies because of the r… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.30 |
| tmnxPkiCRLBeforeExpWarning [CAUSE] The tmnxPkiCRLBeforeExpWarning notification is generated when
the CRL (certificate revocation list) indicated in tmnxSecNotifFile
will expire in the time period indicated … | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.31 |
| tmnxPkiCRLAfterExpWarning [CAUSE] The tmnxPkiCRLAfterExpWarning notification is generated when
the CRL (certificate revocation list) indicated in tmnxSecNotifFile
has expired.
[EFFECT] The indic… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.32 |
| tmnxPkiCRLExpWarningCleared [CAUSE] The tmnxPkiCRLExpWarningCleared notification is generated when
the expiration warning for the CRL (certificate revocation list)
indicated in tmnxSecNotifFile no longer app… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.33 |
| tmnxSecNotifFileReloaded [CAUSE] The tmnxSecNotifFileReloaded notification is generated when
the certificate or key indicated in tmnxSecNotifFile is reloaded.
tmnxSecNotifFileType indicates whether a cert… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.34 |
| tmnxSecPwdHistoryFileLoadFailed [CAUSE] The tmnxSecPwdHistoryFileLoadFailed notification is generated
when the password history is enabled (tmnxPasswordHistory is not 0)
for the first time and the system was una… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.35 |
| tmnxSecPwdHistoryFileWriteFailed [CAUSE] The tmnxSecPwdHistoryFileWriteFailed notification is generated
when the system is unable to store the password history when an user's
password is changed.
[EFFE… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.36 |
| tmnxPkiCAProfCrlUpdateStart [CAUSE] A tmnxPkiCAProfCrlUpdateStart notification is generated when a
CRL update operation is started for an existing CA Profile.
The CA Profile is configured via tmnx… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.37 |
| tmnxPkiCAProfCrlUpdateSuccess [CAUSE] A tmnxPkiCAProfCrlUpdateSuccess notification is generated when
a new valid CRL file is successfully updated for an existing CA
Profile.
The CA Profile is config… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.38 |
| tmnxPkiCAProfCrlUpdateUrlFail [CAUSE] A tmnxPkiCAProfCrlUpdateUrlFail notification is generated when
the CRL update operation has failed after attempting the indicated URL
for an existing CA Profile.
… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.39 |
| tmnxCpmProtViolPortAgg The tmnxCpmProtViolPortAgg notification is generated when a per-port
overall packet rate limit violation is detected for a port.
This notification is not supported on S… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.4 |
| tmnxPkiCAProfCrlUpdAllUrlsFail [CAUSE] A tmnxPkiCAProfCrlUpdAllUrlsFail notification is generated
when the CRL update operation failed after attempting all URLs for an
existing CA Profile.
The CA Pro… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.40 |
| tmnxPkiFileWriteFailed [CAUSE] The tmnxPkiFileWriteFailed notification is generated when an
attempt to write the file fails. Reason for the failure is indicated
by the tmnxSecNotifFailureReason object.
… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.41 |
| tmnxPkiCAProfCrlUpdNoNxtUpdTime [CAUSE] A tmnxPkiCAProfCrlUpdNoNxtUpdTime notification is generated
when tmnxPkiCAProfAtCrlUpdScheduleT is 'nextUpdateBased (1)' and
one of the following conditions is true:
1) Th… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.42 |
| tmnxUsrProfSessionLimitExceeded [CAUSE] The tmnxUsrProfSessionLimitExceeded notification is generated
when an attempt to establish a new user access session is not
successful because any of SSH / Telnet / Total … | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.43 |
| tmnxCliGroupSessionLimitExceeded [CAUSE] The tmnxCliGroupSessionLimitExceeded notification is generated
when an attempt to establish a new user access session is not
successful because any of SSH / Telnet / Total… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.44 |
| tmnxUserCliLoginMaxAttempts [CAUSE] A tmnxUserCliLoginMaxAttempts notification is generated when a
non Lawful Interception user attempting to open a CLI session failed
to authenticate for more than a maximum… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.46 |
| tmnxUserFtpLoginMaxAttempts [CAUSE] A tmnxUserFtpLoginMaxAttempts notification is generated when a
non Lawful Interception user attempting to connect via FTP failed to
authenticate for more than a maximum al… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.47 |
| tmnxUserSshLoginMaxAttempts [CAUSE] A tmnxUserSshLoginMaxAttempts notification is generated when a
non Lawful Interception user attempting to connect via SSH failed to
authenticate for more than a maximum al… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.48 |
| tmnxPkiCertNotYetValid [CAUSE] The tmnxPkiCertNotYetValid notification is generated when the
certificate indicated in tmnxSecNotifFile is not yet valid.
[EFFECT] The indicated certificate is … | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.49 |
| tmnxCpmProtViolIf The tmnxCpmProtViolIf notification is generated when a overall packet
arrival rate violation is detected for an interface, and this
notification is enabled.
This notifi… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.5 |
| tmnxPkiCRLNotYetValid [CAUSE] The tmnxPkiCRLNotYetValid notification is generated when the
CRL (Certificate Revocation List) indicated in tmnxSecNotifFile is not
yet valid.
[EFFECT] The CRL … | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.50 |
| tmnxLiUserCliLoginMaxAttempts [CAUSE] A tmnxLiUserCliLoginMaxAttempts notification is generated when
a Lawful Interception user attempting to open a CLI session failed to
authenticate for more than a maximum a… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.51 |
| tmnxLiUserSshLoginMaxAttempts [CAUSE] A tmnxLiUserSshLoginMaxAttempts notification is generated when
a Lawful Interception user attempting to connect via SSH failed to
authenticate for more than a maximum allo… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.52 |
| tmnxLiUserFtpLoginMaxAttempts [CAUSE] A tmnxLiUserFtpLoginMaxAttempts notification is generated when
a Lawful Interception user attempting to connect via FTP failed to
authenticate for more than a maximum allo… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.53 |
| tmnxAppPkiCertVerificationFailed [CAUSE] The tmnxAppPkiCertVerificationFailed notification is generated
when an attempt to verify the certificate fails for a non-IPsec
application.
[EFFECT] Fail to est… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.54 |
| tmnxUserNetconfLoginMaxAttempts [CAUSE] A tmnxUserNetconfLoginMaxAttempts notification is generated
when a user attempting to connect via netconf failed to authenticate
for more than a maximum allowed number of … | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.55 |
| tmnxCertKeyPairGen [CAUSE] A tmnxCertKeyPairGen notification is generated when a user
generates a cryptographic key with the admin certificate command | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.56 |
| tmnxCertImport [CAUSE] A tmnxCertImport notification is generated when a user imports
a cryptographic key, certificate, or CRL with the admin certificate
command | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.57 |
| tmnxCertExport [CAUSE] A tmnxCertExport notification is generated when a user exports
a cryptographic key, certificate, or CRL with the admin certificate
command | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.58 |
| tmnxFileDeleted [CAUSE] A tmnxFileDeleted notification is generated when a user
deletes a file through the file command | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.59 |
| tmnxCpmProtViolSap The tmnxCpmProtViolSap notification is generated when a overall packet
arrival rate violation is detected for a SAP, and this notification is
enabled.
This notification… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.6 |
| tmnxFileMoved [CAUSE] A tmnxFileMoved notification is generated when a user moves a
file through the file command | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.60 |
| tmnxFileCopied [CAUSE] A tmnxFileCopied notification is generated when a user copies
a file through the file command | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.61 |
| tmnxFileUnzip [CAUSE] The tmnxFileUnzip notification is generated upon the
completion of an unzip operation of the source ZIP file specified by
tmnxSecNotifyUrl to the destination location spec… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.62 |
| tmnxPasswordHashingChanged [CAUSE] The tmnxPasswordHashingChanged notification is generated upon
the change of password hashing algorithm (tmnxPasswordHashing). The
value of the object tmnxSecNotifNewPasswo… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.63 |
| tmnxUserPasswordChangedByAdmin [CAUSE] The tmnxUserPasswordChangedByAdmin notification is generated
upon the change of a password of a local user by a user with
administrative rights. The value of the object
tm… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.64 |
| tmnxCpmProtViolMac The tmnxCpmProtViolMac notification is generated when a per-source
rate limit violation was detected for a source, and this notification
is enabled.
This notification i… | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.7 |
| tmnxCpmProtViolVdoSvcClient The tmnxCpmProtViolVdoSvcClient notification is generated when a
per-source rate limit violation was detected for a client address of a
RTCP control traffic in VPLS service. | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.8 |
| tmnxCpmProtViolVdoVrtrClient The tmnxCpmProtViolVdoVrtrClient notification is generated when a
per-source rate limit violation was detected for a client address of a
RTCP control traffic in router context. | notification | - | .1.3.6.1.4.1.6527.3.1.3.22.0.9 |
Notification Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| tmnxPkiCAProfileNameForNotify The value of tmnxPkiCAProfileNameForNotify indicates the name of the
Certificate-Authority profile. | scalar | TIMETRA-TC-MIBTNamedItem | .1.3.6.1.4.1.6527.3.1.2.22.16.19 |