All MIBs › ACC-IPSEC › accIpsecStatsIllegalProtos
accIpsecStatsIllegalProtos
Module: ACC-IPSEC
OID (symbolic): ACC-IPSEC::accIpsecStatsIllegalProtos
OID (numeric): 1.3.6.1.4.1.5.1.1.81.2.4
Node type: OBJECT-TYPE
Type: Counter
Access: read-only
Description: Number of packets dropped because the protocol contained inside the received IPSec packet was incorrect, i.e. a transport mode SA contained a tunneled packet or a tunnel mode SA contained a non-tunneled packet
What is accIpsecStatsIllegalProtos?
ACC-IPSEC::accIpsecStatsIllegalProtos counts encrypted packets that were discarded because they violated the tunnel mode or transport mode rules—for instance, a transport-mode SA receiving a fully tunneled packet or vice versa. This error usually means the tunnel is configured inconsistently between your device and the peer, or someone is deliberately sending malformed IPSec traffic. For example, seeing 10 of these errors right after a policy change suggests the peer device wasn't updated and is still using the old tunnel mode.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.5.1.1.81.2.4 snmpwalk -v2c -c public <target> ACC-IPSEC::accIpsecStatsIllegalProtos
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.5.1.1.81.2.4.1 snmpget -v2c -c public <target> ACC-IPSEC::accIpsecStatsIllegalProtos.1
Start monitoring ACC/Ericsson WAN access routers (legacy) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the ACC-IPSEC::accIpsecStatsIllegalProtos OID value, configure state conditions and alerts, and monitor any ACC/Ericsson WAN access routers (legacy) from a single console.
OID Breakdown
Upper-level ancestors (9 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.5 | acc | ACC-MIB |
| 1.3.6.1.4.1.5.1 | accSBAR | ACC-MIB |
| 1.3.6.1.4.1.5.1.1 | accBRG | ACC-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.5.1.1.81 | accIpsec | ACC-IPSEC |
| 1.3.6.1.4.1.5.1.1.81.2 | accIpsecStats | ACC-IPSEC |
| 1.3.6.1.4.1.5.1.1.81.2.4 | accIpsecStatsIllegalProtos | ACC-IPSEC |