All MIBs › A3COM-HUAWEI-IKE-MONITOR-MIB › h3cIKEGlobalInvalidCertAuthFails
h3cIKEGlobalInvalidCertAuthFails
Module: A3COM-HUAWEI-IKE-MONITOR-MIB
OID (symbolic): A3COM-HUAWEI-IKE-MONITOR-MIB::h3cIKEGlobalInvalidCertAuthFails
OID (numeric): 1.3.6.1.4.1.43.45.1.10.2.30.1.3.29
Node type: OBJECT-TYPE
Type: Counter32
Access: read-only
Description: The total number of failures because of invalid certificate authority which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
What is h3cIKEGlobalInvalidCertAuthFails?
This counter tracks the cumulative number of IKE Phase-1 tunnel authentication failures caused by invalid certificate authorities. A network engineer monitors this to detect PKI infrastructure problems or certificate trust store misconfigurations affecting VPN connectivity. If this counter increases rapidly, it indicates peers are presenting certificates signed by untrusted CAs—for example, a branch office with an old root certificate that expired from the central firewall's trust list.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.43.45.1.10.2.30.1.3.29 snmpwalk -v2c -c public <target> A3COM-HUAWEI-IKE-MONITOR-MIB::h3cIKEGlobalInvalidCertAuthFails
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.43.45.1.10.2.30.1.3.29.1 snmpget -v2c -c public <target> A3COM-HUAWEI-IKE-MONITOR-MIB::h3cIKEGlobalInvalidCertAuthFails.1
SNMPv3 example:
snmpget -v3 -l authPriv -u snmpv3-user -a SHA -A "AuthPassword1" -x AES -X "PrivPassword1" <target> h3cIKEGlobalInvalidCertAuthFails.1
Start monitoring H3C VPN gateways with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the A3COM-HUAWEI-IKE-MONITOR-MIB::h3cIKEGlobalInvalidCertAuthFails OID value, configure state conditions and alerts, and monitor any H3C VPN gateways from a single console.
OID Breakdown
Upper-level ancestors (11 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.43 | a3Com | A3COM-BRIDGE-R3-MIB |
| 1.3.6.1.4.1.43.45 | jv_mib | A3COM-HUAWEI-OID-MIB |
| 1.3.6.1.4.1.43.45.1 | huawei | A3COM-HUAWEI-OID-MIB |
| 1.3.6.1.4.1.43.45.1.10 | h3c | A3COM-HUAWEI-OID-MIB |
| 1.3.6.1.4.1.43.45.1.10.2 | h3cCommon | A3COM-HUAWEI-OID-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.43.45.1.10.2.30 | h3cIKEMonitor | A3COM-HUAWEI-IKE-MONITOR-MIB |
| 1.3.6.1.4.1.43.45.1.10.2.30.1 | h3cIKEObjects | A3COM-HUAWEI-IKE-MONITOR-MIB |
| 1.3.6.1.4.1.43.45.1.10.2.30.1.3 | h3cIKEGlobalStats | A3COM-HUAWEI-IKE-MONITOR-MIB |
| 1.3.6.1.4.1.43.45.1.10.2.30.1.3.29 | h3cIKEGlobalInvalidCertAuthFails | A3COM-HUAWEI-IKE-MONITOR-MIB |