All MIBs › ACC-IPSEC › accIpsecStatsIllegalInSpis
accIpsecStatsIllegalInSpis
Module: ACC-IPSEC
OID (symbolic): ACC-IPSEC::accIpsecStatsIllegalInSpis
OID (numeric): 1.3.6.1.4.1.5.1.1.81.2.3
Node type: OBJECT-TYPE
Type: Counter
Access: read-only
Description: Number of packets dropped because the SPI was incorrect
What is accIpsecStatsIllegalInSpis?
ACC-IPSEC::accIpsecStatsIllegalInSpis counts the number of incoming encrypted packets that were dropped because they used a Security Parameter Index (SPI) that does not exist on your gateway or was invalid. You would care about this counter if you suspect an attacker is sending spoofed traffic or if your tunnel configuration is out of sync with the peer device. For example, a value of 5 might indicate a mismatched IPSec policy between gateways, and dozens of these errors suggest an active misconfiguration or attack.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.5.1.1.81.2.3 snmpwalk -v2c -c public <target> ACC-IPSEC::accIpsecStatsIllegalInSpis
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.5.1.1.81.2.3.1 snmpget -v2c -c public <target> ACC-IPSEC::accIpsecStatsIllegalInSpis.1
Start monitoring ACC/Ericsson WAN access routers (legacy) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the ACC-IPSEC::accIpsecStatsIllegalInSpis OID value, configure state conditions and alerts, and monitor any ACC/Ericsson WAN access routers (legacy) from a single console.
OID Breakdown
Upper-level ancestors (9 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.5 | acc | ACC-MIB |
| 1.3.6.1.4.1.5.1 | accSBAR | ACC-MIB |
| 1.3.6.1.4.1.5.1.1 | accBRG | ACC-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.5.1.1.81 | accIpsec | ACC-IPSEC |
| 1.3.6.1.4.1.5.1.1.81.2 | accIpsecStats | ACC-IPSEC |
| 1.3.6.1.4.1.5.1.1.81.2.3 | accIpsecStatsIllegalInSpis | ACC-IPSEC |