A3COM-HUAWEI-IKE-MONITOR-MIB

All MIBs › A3COM-HUAWEI-IKE-MONITOR-MIB

Organization: Huawei-3COM Technologies Co., Ltd.

Last Updated: 2004-10-26

Category: VPN and Security, Vendor: H3C/HH3C

Description: Monitors IKE phase-1 and phase-2 negotiation states, SA lifetimes, and failure counts on H3C VPN gateways.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is A3COM-HUAWEI-IKE-MONITOR-MIB?

A3COM-HUAWEI-IKE-MONITOR-MIB is a Huawei-3COM Technologies proprietary MIB reporting IKE (Internet Key Exchange) tunnel statistics on H3C VPN gateways. Its tunnel table, keyed by index, records local/remote ID type and value, local/remote address, initiator flag, negotiation mode, Diffie-Hellman group, encryption/hash algorithm, authentication method, lifetime and active/remaining time, total rekey/refresh count, tunnel state, and DPD (Dead Peer Detection) interval/timeout, alongside a tunnel-statistics table. As a status MIB it lets an administrator confirm an IKE tunnel's negotiated crypto parameters and remaining lifetime before it rekeys. It is deployed on H3C (3Com-Huawei) VPN gateways. Engineers can download the A3COM-HUAWEI-IKE-MONITOR-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in A3COM-HUAWEI-IKE-MONITOR-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

H3C (3Com-Huawei) VPN gateways

Monitoring Examples

An administrator checks h3cIKETunEncryptAlgo and h3cIKETunRemainTime to confirm negotiated crypto parameters and time until rekey for an IKE tunnel on an H3C VPN gateway.

What Can Be Monitored

IKE tunnel crypto parameters and lifetime

Imported Objects

From A3COM-HUAWEI-OID-MIB

h3cCommon

OBJECT-IDENTITY

From RFC1213-MIB

ifIndex

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Counter64
Gauge32
Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

From SNMPv2-TC

DisplayString
TEXTUAL-CONVENTION

How to Use in IPNetwork Monitor

Example using h3cIKEGlobalInOctets OID:

Select an H3C VPN gateway as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type h3cIKEGlobalInOctets into the Find box to locate it in the OID tree, then select it and click OK. The total number of octets received by all currently and previously active IPSec Phase-1 IKE Tunnels. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
NTF h3cIKEAttrNotSuppFailure	1.3.6.1.4.1.43.45.1.10.2.30.1.6.1.9			This notification is generated when the IPSec phase-1 unsupported attribute failure occurs.
H3C h3cIKEAttrNotSuppTrapCntl	1.3.6.1.4.1.43.45.1.10.2.30.1.5.11	H3cTrapStatus	read-write	Indicates whether h3cIKEAttrNotSuppFailure traps should be generated.
NTF h3cIKEAuthFailFailure	1.3.6.1.4.1.43.45.1.10.2.30.1.6.1.7			This notification is generated when the IPSec phase-1 authentication failure occurs.
H3C h3cIKEAuthFailTrapCntl	1.3.6.1.4.1.43.45.1.10.2.30.1.5.8	H3cTrapStatus	read-write	Indicates whether h3cIKEAuthFailFailure traps should be generated.
STR h3cIKECertInformation	1.3.6.1.4.1.43.45.1.10.2.30.1.4.5	DisplayString	accessible-for-notify	The certificate information with a trap.
NTF h3cIKECertTypeUnsuppFailure	1.3.6.1.4.1.43.45.1.10.2.30.1.6.1.13			This notification is generated when the IPSec phase-1 unsupported certificate type failure occurs.
H3C h3cIKECertTypeUnsuppTrapCntl	1.3.6.1.4.1.43.45.1.10.2.30.1.5.15	H3cTrapStatus	read-write	Indicates whether h3cIKECertTypeUnsuppFailure traps should be generated.
NTF h3cIKECertUnavailableFailure	1.3.6.1.4.1.43.45.1.10.2.30.1.6.1.16			This notification is generated when the IPSec phase-1 certificate unavailable failure occurs.
H3C h3cIKECertUnavailableTrapCntl	1.3.6.1.4.1.43.45.1.10.2.30.1.5.18	H3cTrapStatus	read-write	Indicates whether h3cIKECertUnavailableFailure traps should be generated.
h3cIKECompliance	1.3.6.1.4.1.43.45.1.10.2.30.2.1.1
h3cIKECompliances	1.3.6.1.4.1.43.45.1.10.2.30.2.1
h3cIKEConformance	1.3.6.1.4.1.43.45.1.10.2.30.2
NTF h3cIKEDecryFailFailure	1.3.6.1.4.1.43.45.1.10.2.30.1.6.1.5			This notification is generated when the IKE tunnel has a decrypting failure.
H3C h3cIKEDecryFailureTrapCntl	1.3.6.1.4.1.43.45.1.10.2.30.1.5.6	H3cTrapStatus	read-write	Indicates whether h3cIKEDecryFailFailure traps should be generated.
NTF h3cIKEEncryFailFailure	1.3.6.1.4.1.43.45.1.10.2.30.1.6.1.4			This notification is generated when the IKE tunnel has an encrypting failure.
H3C h3cIKEEncryFailureTrapCntl	1.3.6.1.4.1.43.45.1.10.2.30.1.5.5	H3cTrapStatus	read-write	Indicates whether h3cIKEEncryFailFailure traps should be generated.
G32 h3cIKEGlobalActiveTunnels	1.3.6.1.4.1.43.45.1.10.2.30.1.3.1	Gauge32	read-only	The number of currently active IPSec Phase-1 IKE Tunnels.
C32 h3cIKEGlobalAttrNotSuppFails	1.3.6.1.4.1.43.45.1.10.2.30.1.3.23	Counter32	read-only	The total number of attributes not supported in failures which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
C32 h3cIKEGlobalAuthFails	1.3.6.1.4.1.43.45.1.10.2.30.1.3.20	Counter32	read-only	The total number of authentications which ended in failure by all current and previous IPSec Phase-1 IKE Tunnels.
C32 h3cIKEGlobalCertTypeUnsuppFails	1.3.6.1.4.1.43.45.1.10.2.30.1.3.28	Counter32	read-only	The total number of certificate type unsupported in failures which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
C32 h3cIKEGlobalCertUnavailableFails	1.3.6.1.4.1.43.45.1.10.2.30.1.3.31	Counter32	read-only	The total number of certificate unavailable in failures which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
C64 h3cIKEGlobalInDropPkts	1.3.6.1.4.1.43.45.1.10.2.30.1.3.4	Counter64	read-only	The total number of packets which were dropped during receiving process by all currently and previously active IPSec Phase-1 IKE Tunnels.
C32 h3cIKEGlobalInitTunnelFails	1.3.6.1.4.1.43.45.1.10.2.30.1.3.17	Counter32	read-only	The total number of IPSec Phase-1 IKE Tunnels which were locally initiated and failed to activate.
C32 h3cIKEGlobalInitTunnels	1.3.6.1.4.1.43.45.1.10.2.30.1.3.16	Counter32	read-only	The total number of IPSec Phase-1 IKE Tunnels which were locally initiated.
C32 h3cIKEGlobalInNotifys	1.3.6.1.4.1.43.45.1.10.2.30.1.3.8	Counter32	read-only	The total number of notifications received by all IPSec Phase-1 IKE Tunnels.
C64 h3cIKEGlobalInOctetsEx	1.3.6.1.4.1.43.45.1.10.2.30.1.3.2	Counter64	read-only	The total number of octets received by all currently and previously active IPSec Phase-1 IKE Tunnels.
C64 h3cIKEGlobalInP2ExchgRejects	1.3.6.1.4.1.43.45.1.10.2.30.1.3.6	Counter64	read-only	The total number of IPSec Phase-2 exchanges which were received and rejected by all currently and previously active IPSec Phase-1 IKE Tunnels.
C64 h3cIKEGlobalInP2Exchgs	1.3.6.1.4.1.43.45.1.10.2.30.1.3.5	Counter64	read-only	The total number of IPSec Phase-2 exchanges received by all currently and previously active IPSec Phase-1 IKE Tunnels.
C64 h3cIKEGlobalInP2SaDelRequests	1.3.6.1.4.1.43.45.1.10.2.30.1.3.7	Counter64	read-only	The total number of IPSec Phase-2 security association deleting requests received by all currently and previously active IPSec Phase-1 IKE Tunnels.
C64 h3cIKEGlobalInPkts	1.3.6.1.4.1.43.45.1.10.2.30.1.3.3	Counter64	read-only	The total number of packets received by all currently and previously active IPSec Phase-1 IKE Tunnels.
C32 h3cIKEGlobalInvalidCertAuthFails	1.3.6.1.4.1.43.45.1.10.2.30.1.3.29	Counter32	read-only	The total number of failures because of invalid certificate authority which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
C32 h3cIKEGlobalInvalidCookieFails	1.3.6.1.4.1.43.45.1.10.2.30.1.3.22	Counter32	read-only	The total number of invalid cookie in failures which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
C32 h3cIKEGlobalInvalidIdFails	1.3.6.1.4.1.43.45.1.10.2.30.1.3.26	Counter32	read-only	The total number of invalid id Information in failures which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
C32 h3cIKEGlobalInvalidProFails	1.3.6.1.4.1.43.45.1.10.2.30.1.3.27	Counter32	read-only	The total number of invalid protocol id in failures which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
C32 h3cIKEGlobalInvalidSignFails	1.3.6.1.4.1.43.45.1.10.2.30.1.3.30	Counter32	read-only	The total number of failures because of the invalid signature which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
C32 h3cIKEGlobalNoProposalChosenFails	1.3.6.1.4.1.43.45.1.10.2.30.1.3.24	Counter32	read-only	The total number of no proposal chosen in failures which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
C32 h3cIKEGlobalNoSaFails	1.3.6.1.4.1.43.45.1.10.2.30.1.3.21	Counter32	read-only	The total number of non-existent Security Association in failures which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
C64 h3cIKEGlobalOutDropPkts	1.3.6.1.4.1.43.45.1.10.2.30.1.3.11	Counter64	read-only	The total number of packets which were dropped during sending process by all currently and previously active IPSec Phase-1 IKE Tunnels.
C32 h3cIKEGlobalOutNotifys	1.3.6.1.4.1.43.45.1.10.2.30.1.3.15	Counter32	read-only	The total number of notifications sent by all active IPSec Phase-1 IKE Tunnels.
C64 h3cIKEGlobalOutOctets	1.3.6.1.4.1.43.45.1.10.2.30.1.3.9	Counter64	read-only	The total number of octets sent by all currently and previously active and IPSec Phase-1 IKE Tunnels.
C64 h3cIKEGlobalOutP2ExchgRejects	1.3.6.1.4.1.43.45.1.10.2.30.1.3.13	Counter64	read-only	The total number of IPSec Phase-2 exchanges which were sent and rejected by all currently and previously active IPSec Phase-1 IKE Tunnels.
C64 h3cIKEGlobalOutP2Exchgs	1.3.6.1.4.1.43.45.1.10.2.30.1.3.12	Counter64	read-only	The total number of IPSec Phase-2 exchanges which were sent by all currently and previously active IPSec Phase-1 IKE Tunnels.
C64 h3cIKEGlobalOutP2SaDelRequests	1.3.6.1.4.1.43.45.1.10.2.30.1.3.14	Counter64	read-only	The total number of IPSec Phase-2 SA deleting requests sent by all currently and previously active IPSec Phase-1 IKE Tunnels.
C64 h3cIKEGlobalOutPkts	1.3.6.1.4.1.43.45.1.10.2.30.1.3.10	Counter64	read-only	The total number of packets sent by all currently and previously active and IPSec Phase-1 Tunnels.
C32 h3cIKEGlobalRespTunnelFails	1.3.6.1.4.1.43.45.1.10.2.30.1.3.19	Counter32	read-only	The total number of IPSec Phase-1 IKE Tunnels which were remotely initiated and failed to activate.
C32 h3cIKEGlobalRespTunnels	1.3.6.1.4.1.43.45.1.10.2.30.1.3.18	Counter32	read-only	The total number of IPSec Phase-1 IKE Tunnels which were remotely initiated.
h3cIKEGlobalStats	1.3.6.1.4.1.43.45.1.10.2.30.1.3
h3cIKEGlobalStatsGroup	1.3.6.1.4.1.43.45.1.10.2.30.2.2.3			The group contains all of the IKE tunnel's statistic information.
C32 h3cIKEGlobalUnsportExchTypeFails	1.3.6.1.4.1.43.45.1.10.2.30.1.3.25	Counter32	read-only	The total number of unsupported exchange type in failures which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
h3cIKEGroups	1.3.6.1.4.1.43.45.1.10.2.30.2.2
STR h3cIKEIdInformation	1.3.6.1.4.1.43.45.1.10.2.30.1.4.3	DisplayString	accessible-for-notify	The id information with a trap.
NTF h3cIKEInvalidCertAuthFailure	1.3.6.1.4.1.43.45.1.10.2.30.1.6.1.14			This notification is generated when the IPSec phase-1 invalid certificate authorization failure occurs.
H3C h3cIKEInvalidCertAuthTrapCntl	1.3.6.1.4.1.43.45.1.10.2.30.1.5.16	H3cTrapStatus	read-write	Indicates whether h3cIKEInvalidCertAuthFailure traps should be generated.
NTF h3cIKEInvalidCookieFailure	1.3.6.1.4.1.43.45.1.10.2.30.1.6.1.8			This notification is generated when the IPSec phase-1 invalid cookie failure occurs.
H3C h3cIKEInvalidCookieTrapCntl	1.3.6.1.4.1.43.45.1.10.2.30.1.5.9	H3cTrapStatus	read-write	Indicates whether h3cIKEInvalidCookieFailure traps should be generated.
NTF h3cIKEInvalidIdFailure	1.3.6.1.4.1.43.45.1.10.2.30.1.6.1.11			This notification is generated when the IPSec phase-1 invalid id failure occurs.
H3C h3cIKEInvalidIdTrapCntl	1.3.6.1.4.1.43.45.1.10.2.30.1.5.13	H3cTrapStatus	read-write	Indicates whether h3cIKEInvalidIdFailure traps should be generated.
NTF h3cIKEInvalidProposalFailure	1.3.6.1.4.1.43.45.1.10.2.30.1.6.1.6			This notification is generated when the IPSec phase-1 invalid proposal occurs.
H3C h3cIKEInvalidProposalTrapCntl	1.3.6.1.4.1.43.45.1.10.2.30.1.5.7	H3cTrapStatus	read-write	Indicates whether h3cIKEInvalidProposalFailure traps should be generated.
NTF h3cIKEInvalidProtocolFailure	1.3.6.1.4.1.43.45.1.10.2.30.1.6.1.12			This notification is generated when the processing for an IPSec Phase-1 IKE Tunnel has a protocol related errors.
H3C h3cIKEInvalidProtocolTrapCntl	1.3.6.1.4.1.43.45.1.10.2.30.1.5.14	H3cTrapStatus	read-write	Indicates whether h3cIKEInvalidProtocolFailure traps should be generated.
H3C h3cIKEInvalidSignTrapCntl	1.3.6.1.4.1.43.45.1.10.2.30.1.5.17	H3cTrapStatus	read-write	Indicates whether h3cIKEInvalidSignFailure traps should be generated.
H3C h3cIKEInvalidSpiTrapCntl	1.3.6.1.4.1.43.45.1.10.2.30.1.5.10	H3cTrapStatus	read-write	Indicates whether h3cIKEInvalidSpiFailure traps should be generated.
NTF h3cIKElInvalidSignFailure	1.3.6.1.4.1.43.45.1.10.2.30.1.6.1.15			This notification is generated when the IPSec phase-1 invalid signature failure occurs.
h3cIKEMonitor	1.3.6.1.4.1.43.45.1.10.2.30			The MIB is designed to get statistic information of IKE tunnels. With this MIB, we can get information of a certain IKE tunnel or all IKE tunnels
NTF h3cIKENoSaFailure	1.3.6.1.4.1.43.45.1.10.2.30.1.6.1.3			This notification is generated when the IKE tunnel has a non-existent SA error.
H3C h3cIKENoSaTrapCntl	1.3.6.1.4.1.43.45.1.10.2.30.1.5.4	H3cTrapStatus	read-write	Indicates whether h3cIKENoSaFailure traps should be generated.
h3cIKENotifications	1.3.6.1.4.1.43.45.1.10.2.30.1.6.1
h3cIKEObjects	1.3.6.1.4.1.43.45.1.10.2.30.1
NTF h3cIKEProposalAdd	1.3.6.1.4.1.43.45.1.10.2.30.1.6.1.17			This notification is generated when an IKE proposal is added.
H3C h3cIKEProposalAddTrapCntl	1.3.6.1.4.1.43.45.1.10.2.30.1.5.19	H3cTrapStatus	read-write	Indicates whether h3cIKEProposalAdd traps should be generated.
NTF h3cIKEProposalDel	1.3.6.1.4.1.43.45.1.10.2.30.1.6.1.18			This notification is generated when an IKE proposal is deleted.
H3C h3cIKEProposalDelTrapCntl	1.3.6.1.4.1.43.45.1.10.2.30.1.5.20	H3cTrapStatus	read-write	Indicates whether h3cIKEProposalDel traps should be generated.
I32 h3cIKEProposalNumber	1.3.6.1.4.1.43.45.1.10.2.30.1.4.1	Integer32	accessible-for-notify	The IKE proposal's number with a trap.
I32 h3cIKEProposalSize	1.3.6.1.4.1.43.45.1.10.2.30.1.4.2	Integer32	accessible-for-notify	The number of IKE proposals with a trap.
I32 h3cIKEProtocolNum	1.3.6.1.4.1.43.45.1.10.2.30.1.4.4	Integer32	accessible-for-notify	The protocol number with a trap
h3cIKETrap	1.3.6.1.4.1.43.45.1.10.2.30.1.6
h3cIKETrapCntl	1.3.6.1.4.1.43.45.1.10.2.30.1.5
h3cIKETrapCntlGroup	1.3.6.1.4.1.43.45.1.10.2.30.2.2.5			The group contains all of trap switches of IKE tunnels.
H3C h3cIKETrapGlobalCntl	1.3.6.1.4.1.43.45.1.10.2.30.1.5.1	H3cTrapStatus	read-write	Indicates whether all IKE traps should be generated.
h3cIKETrapGroup	1.3.6.1.4.1.43.45.1.10.2.30.2.2.6			The group contains all of trap of IKE tunnels.
h3cIKETrapObject	1.3.6.1.4.1.43.45.1.10.2.30.1.4
h3cIKETrapObjectGroup	1.3.6.1.4.1.43.45.1.10.2.30.2.2.4			The group contains all of trap objects of IKE tunnels.
I32 h3cIKETunActiveTime	1.3.6.1.4.1.43.45.1.10.2.30.1.1.1.17	Integer32	read-only	The duration the IPSec Phase-1 IKE tunnel has been active in seconds.
H3C h3cIKETunAuthMethod	1.3.6.1.4.1.43.45.1.10.2.30.1.1.1.15	H3cIKEAuthMethod	read-only	The authentication method used in the IPSec Phase-1 IKE negotiations.
H3C h3cIKETunDiffHellmanGrp	1.3.6.1.4.1.43.45.1.10.2.30.1.1.1.12	H3cDiffHellmanGrp	read-only	The Diffie Hellman Group used in the IPSec Phase-1 IKE negotiations.
I32 h3cIKETunDpdIntervalTime	1.3.6.1.4.1.43.45.1.10.2.30.1.1.1.21	Integer32	read-only	The time that trigger DPD request. If ipsec message is expected to be sent out and the interval time between current time and the last time receiving peer's IPSec message is bigger than this time, DPD request would be triggered.
I32 h3cIKETunDpdTimeOut	1.3.6.1.4.1.43.45.1.10.2.30.1.1.1.22	Integer32	read-only	The overtime of single DPD request. If DPD requests are refused three times, all security associations related would be deleted.
H3C h3cIKETunEncryptAlgo	1.3.6.1.4.1.43.45.1.10.2.30.1.1.1.13	H3cEncryptAlgo	read-only	The encryption algorithm used in the IPSec Phase-1 IKE negotiations.
H3C h3cIKETunHashAlgo	1.3.6.1.4.1.43.45.1.10.2.30.1.1.1.14	H3cAuthAlgo	read-only	The hash algorithm used in the IPSec Phase-1 IKE negotiations.
I32 h3cIKETunIndex	1.3.6.1.4.1.43.45.1.10.2.30.1.1.1.1	Integer32	not-accessible	The index of the IPSec Phase-1 IKE Tunnel Table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The value of this object will wrap at 2,147,483,647.
C64 h3cIKETunInDropPkts	1.3.6.1.4.1.43.45.1.10.2.30.1.2.1.3	Counter64	read-only	The total number of packets dropped by this IPSec Phase-1 IKE Tunnel during receiving process.
INT h3cIKETunInitiator	1.3.6.1.4.1.43.45.1.10.2.30.1.1.1.10	INTEGER	read-only	The initiator of this tunnel.
C32 h3cIKETunInNotifys	1.3.6.1.4.1.43.45.1.10.2.30.1.2.1.8	Counter32	read-only	The total number of notifications received by this IPSec Phase-1 IKE Tunnel.
C64 h3cIKETunInOctets	1.3.6.1.4.1.43.45.1.10.2.30.1.2.1.1	Counter64	read-only	The total number of octets received by this IPSec Phase-1 IKE Tunnel.
C64 h3cIKETunInP1SaDelRequests	1.3.6.1.4.1.43.45.1.10.2.30.1.2.1.7	Counter64	read-only	The total number of IPSec Phase-1 security association deleting requests.
C64 h3cIKETunInP2ExchgRejets	1.3.6.1.4.1.43.45.1.10.2.30.1.2.1.5	Counter64	read-only	The total number of IPSec Phase-2 exchanges received and rejected by this IPSec Phase-1 Tunnel.
C64 h3cIKETunInP2Exchgs	1.3.6.1.4.1.43.45.1.10.2.30.1.2.1.4	Counter64	read-only	The total number of IPSec Phase-2 exchanges received by this IPSec Phase-1 IKE Tunnel.
C64 h3cIKETunInP2SaDelRequests	1.3.6.1.4.1.43.45.1.10.2.30.1.2.1.6	Counter64	read-only	The total number of IPSec Phase-2 security association deleting requests received by this IPSec Phase-1 IKE Tunnel.
C64 h3cIKETunInPkts	1.3.6.1.4.1.43.45.1.10.2.30.1.2.1.2	Counter64	read-only	The total number of packets received by this IPSec Phase-1 IKE Tunnel.
I32 h3cIKETunLifeTime	1.3.6.1.4.1.43.45.1.10.2.30.1.1.1.16	Integer32	read-only	The negotiated LifeTime of the IPSec Phase-1 IKE Tunnel in seconds.
IP h3cIKETunLocalAddr	1.3.6.1.4.1.43.45.1.10.2.30.1.1.1.5	IpAddress	read-only	The IP address of the local endpoint for the IPSec Phase-1 IKE Tunnel.
H3C h3cIKETunLocalType	1.3.6.1.4.1.43.45.1.10.2.30.1.1.1.2	H3cIKEIDType	read-only	The type of local peer identity.
STR h3cIKETunLocalValue1	1.3.6.1.4.1.43.45.1.10.2.30.1.1.1.3	DisplayString	read-only	The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is a host name, then this is the host name used to identify the local peer. If the local peer type is IP subnet, then this is the value of the subnet. If the local peer type is IP address range, then this is the value of beginning IP address of the range.
STR h3cIKETunLocalValue2	1.3.6.1.4.1.43.45.1.10.2.30.1.1.1.4	DisplayString	read-only	The second specification of local peer's IP address. If the local peer type is single IP address or single name, then this is zero-length. If the local peer type is IP subnet, then this is the value of the subnet mask. If the local peer type is IP address range, then this is the value of ending IP address of the range.
H3C h3cIKETunNegoMode	1.3.6.1.4.1.43.45.1.10.2.30.1.1.1.11	H3cIKENegoMode	read-only	The negotiation mode of the IPSec Phase-1 IKE Tunnel.
h3cIKETunnelEntry	1.3.6.1.4.1.43.45.1.10.2.30.1.1.1		not-accessible	The entry contains the information about h3cIKETunnelTable, such as negotiate mode, encryption algorithm and authentication algorithm, etc.
NTF h3cIKETunnelStart	1.3.6.1.4.1.43.45.1.10.2.30.1.6.1.1			This notification is generated when an IPSec Phase-1 IKE Tunnel is created.
H3C h3cIKETunnelStartTrapCntl	1.3.6.1.4.1.43.45.1.10.2.30.1.5.2	H3cTrapStatus	read-write	Indicates whether h3cIKETunnelStart traps should be generated.
h3cIKETunnelStatEntry	1.3.6.1.4.1.43.45.1.10.2.30.1.2.1		not-accessible	The entry contains the information of h3cIKETunnelStatTable, such as the number of packets sent and received by the IKE tunnel, etc.
h3cIKETunnelStatTable	1.3.6.1.4.1.43.45.1.10.2.30.1.2		not-accessible	The IPsec Phase-1 IKE Tunnel Statistic Table.
h3cIKETunnelStatTableGroup	1.3.6.1.4.1.43.45.1.10.2.30.2.2.2			The group contains the IKE tunnel's statistic information.
NTF h3cIKETunnelStop	1.3.6.1.4.1.43.45.1.10.2.30.1.6.1.2			This notification is generated when an IPSec Phase-1 IKE Tunnel is deleted.
H3C h3cIKETunnelStopTrapCntl	1.3.6.1.4.1.43.45.1.10.2.30.1.5.3	H3cTrapStatus	read-write	Indicates whether h3cIKETunnelStop traps should be generated.
h3cIKETunnelTable	1.3.6.1.4.1.43.45.1.10.2.30.1.1		not-accessible	The IPSec Phase-1 Internet Key Exchange Tunnel Table. There is one entry in this table for each active IPSec Phase-1 IKE Tunnel.
h3cIKETunnelTableGroup	1.3.6.1.4.1.43.45.1.10.2.30.2.2.1			The group contains the IKE tunnel's property information.
C64 h3cIKETunOutDropPkts	1.3.6.1.4.1.43.45.1.10.2.30.1.2.1.11	Counter64	read-only	The total number of packets dropped by this IPSec Phase-1 IKE Tunnel during sending process.
C32 h3cIKETunOutNotifys	1.3.6.1.4.1.43.45.1.10.2.30.1.2.1.16	Counter32	read-only	The total number of notifications sent by this IPSec Phase-1 Tunnel.
C64 h3cIKETunOutOctets	1.3.6.1.4.1.43.45.1.10.2.30.1.2.1.9	Counter64	read-only	The total number of octets sent by this IPSec Phase-1 IKE Tunnel.
C64 h3cIKETunOutP1SaDelRequests	1.3.6.1.4.1.43.45.1.10.2.30.1.2.1.15	Counter64	read-only	The total number of IPSec Phase-1 security association deleting requests sent by this IPSec Phase-1 IKE Tunnel.
C64 h3cIKETunOutP2ExchgRejects	1.3.6.1.4.1.43.45.1.10.2.30.1.2.1.13	Counter64	read-only	The total number of IPSec Phase-2 exchanges sent and rejected by this IPSec Phase-1 IKE Tunnel.
C64 h3cIKETunOutP2Exchgs	1.3.6.1.4.1.43.45.1.10.2.30.1.2.1.12	Counter64	read-only	The total number of IPSec Phase-2 exchanges sent by this IPSec Phase-1 IKE Tunnel.
C64 h3cIKETunOutP2SaDelRequests	1.3.6.1.4.1.43.45.1.10.2.30.1.2.1.14	Counter64	read-only	The total number of IPSec Phase-2 security association deleting requests sent by this IPSec Phase-1 IKE Tunnel.
C64 h3cIKETunOutPkts	1.3.6.1.4.1.43.45.1.10.2.30.1.2.1.10	Counter64	read-only	The total number of packets sent by this IPSec Phase-1 IKE Tunnel.
I32 h3cIKETunRemainTime	1.3.6.1.4.1.43.45.1.10.2.30.1.1.1.18	Integer32	read-only	The security association remaining time in seconds.
IP h3cIKETunRemoteAddr	1.3.6.1.4.1.43.45.1.10.2.30.1.1.1.9	IpAddress	read-only	The IP address of the remote peer for the IPSec Phase-1 IKE Tunnel.
H3C h3cIKETunRemoteType	1.3.6.1.4.1.43.45.1.10.2.30.1.1.1.6	H3cIKEIDType	read-only	The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. a host name.
STR h3cIKETunRemoteValue1	1.3.6.1.4.1.43.45.1.10.2.30.1.1.1.7	DisplayString	read-only	The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is a host name, then this is the host name used to identify the remote peer. If the remote peer type is IP subnet, then this is the value of the subnet. If the remote peer type is IP address range, then this is the value of beginning IP address of the range.
STR h3cIKETunRemoteValue2	1.3.6.1.4.1.43.45.1.10.2.30.1.1.1.8	DisplayString	read-only	The second specification of remote peer's IP address. If the remote peer type is single IP address or single name, then this is zero-length. If the remote peer type is IP subnet, then this is the value of the subnet mask. If the remote peer type is IP address range, then this is the value of ending IP address of the range.
H3C h3cIKETunState	1.3.6.1.4.1.43.45.1.10.2.30.1.1.1.20	H3cIKETunnelState	read-only	The State of IKE Tunnel.
C32 h3cIKETunTotalRefreshes	1.3.6.1.4.1.43.45.1.10.2.30.1.1.1.19	Counter32	read-only	The total number of security association refreshing performed.
NTF h3cIKEUnsportExchTypeFailure	1.3.6.1.4.1.43.45.1.10.2.30.1.6.1.10			This notification is generated when the IPSec phase-1 unsupported exchange type failure occurs.
H3C h3cIKEUnsportExchTypeTrapCntl	1.3.6.1.4.1.43.45.1.10.2.30.1.5.12	H3cTrapStatus	read-write	Indicates whether h3cIKEUnsportExchTypeFailure traps should be generated.

RFC description

IKE tunnel monitoring MIB for obtaining statistic information on Internet Key Exchange tunnels.

Start monitoring H3C VPN gateways with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download A3COM-HUAWEI-IKE-MONITOR-MIB