ALCATEL-IND1-IPSEC-MIB

All MIBs › ALCATEL-IND1-IPSEC-MIB

Organization: Alcatel - Architects Of An Internet World

Last Updated: 2010-07-20

Category: VPN and Security, Vendor: Alcatel-Lucent

Description: Alcatel OmniSwitch IPsec MIB for managing security associations, transform sets, and encryption policy configuration.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ALCATEL-IND1-IPSEC-MIB?

ALCATEL-IND1-IPSEC-MIB is an Alcatel-Lucent Enterprise proprietary MIB for the OmniSwitch "Birds Of Prey" product line, providing configuration and statistics for IPsec security associations, including manual security keys and per-protocol traffic counters. It exposes a security key table with current and new key values per key ID, and a statistics table tracking successful, policy-violation, missing-SA, and unknown-SPI packet counts per IPsec protocol. For device status/health monitoring it lets an administrator confirm IPsec traffic is being processed successfully versus dropped due to policy violations or missing security associations, which reveals misconfigured or expired IPsec tunnels. It implements management for the standard IPsec protocol suite (RFC 4301 etc.) though as a proprietary Alcatel MIB rather than the IETF IPsec-related MIBs. It is typically deployed on Alcatel-Lucent OmniSwitch devices used to secure inter-switch or WAN traffic with IPsec encryption. Engineers can download the ALCATEL-IND1-IPSEC-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in ALCATEL-IND1-IPSEC-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Alcatel-Lucent OmniSwitch (Birds Of Prey product line) with IPsec

Monitoring Examples

An operator would poll alaIPsecStatisticsTable/alaIPsecStatisticsEntry to check alaIPsecStatisticsInPolicyViolation and alaIPsecStatisticsInNoSA counters per alaIPsecStatisticsProtocol, and compare against alaIPsecStatisticsInSuccessful. A rising alaIPsecStatisticsInUnknownSPI or alaIPsecStatisticsInNoSA count would indicate that the IPsec peer is using a different or expired security association, pointing to a key mismatch (checked via alaIPsecSecurityKeyCurrent/alaIPsecSecurityKeyNew in alaIPsecSecurityKeyTable).

What Can Be Monitored

IPsec successful packet count
policy violation count
missing security association count
unknown SPI count
security key configuration per key ID

Imported Objects

From ALCATEL-IND1-BASE

softentIND1IPsec

OBJECT-IDENTITY

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

RowStatus
TEXTUAL-CONVENTION
TruthValue

How to Use in IPNetwork Monitor

Example using alaIPsecErrorsInPolicyViolation OID:

Select an Alcatel-Lucent Enterprise OmniSwitch switch as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type alaIPsecErrorsInPolicyViolation into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. It reports the number of incoming packets that were dropped because of policy violations. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases between polls, since a rising count of errors, failures, or discards often points to a real underlying problem. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
alaIPsecCompliance	1.3.6.1.4.1.6486.801.1.2.1.43.1.2.1.1			The compliance statement for Alcatel switches implementing ALCATEL-IND1-IPSEC-MIB.
alaIPsecConfig	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1
alaIPsecConfigGroup	1.3.6.1.4.1.6486.801.1.2.1.43.1.2.2.1			A collection of objects to support global configuration of IPsec.
alaIPsecCountersGroup	1.3.6.1.4.1.6486.801.1.2.1.43.1.2.2.5			A collection of objects to support management of IPsec counters.
alaIPsecErrorsEntry	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.6.1		not-accessible	The error counters entry.
C32 alaIPsecErrorsInAuthenticationFail	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.6.1.5	Counter32	read-only	Number of incoming packets that failed authentication.
C32 alaIPsecErrorsInDiscarded	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.6.1.6	Counter32	read-only	Number of incoming packets dropped because they matched a discard policy.
C32 alaIPsecErrorsInNoSA	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.6.1.3	Counter32	read-only	Number of incoming packets dropped because no matching SA was found.
C32 alaIPsecErrorsInOther	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.6.1.7	Counter32	read-only	Number of incoming packets dropped for a reason not otherwise counted.
C32 alaIPsecErrorsInPolicyViolationEx	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.6.1.2	Counter32	read-only	Number of incoming packets that were dropped because of policy violations.
C32 alaIPsecErrorsInReplay	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.6.1.4	Counter32	read-only	Number of incoming packets that failed a replay check.
C32 alaIPsecErrorsOutDiscarded	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.6.1.9	Counter32	read-only	Number of outgoing packets dropped because they matched a discard policy.
C32 alaIPsecErrorsOutNoSA	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.6.1.8	Counter32	read-only	Number of outgoing packets dropped because no matching SA was found.
C32 alaIPsecErrorsOutOther	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.6.1.10	Counter32	read-only	Number of outgoing packets dropped for a reason not otherwise counted.
INT alaIPsecErrorsProtocol	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.6.1.1	INTEGER	not-accessible	IP protocol version covered by the IPsec error counters.
alaIPsecErrorsTable	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.6		not-accessible	Table allowing retrieval of the IPsec error counters.
OCT alaIPsecKey	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.5.1.4	OCTET STRING	read-create	The key value. The value specified must match the required key length for the algorithm using the key. If an attempt is made to read the value of this object a zero-length octet string will be returned.
T/F alaIPsecKeyEncrypted	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.5.1.5	TruthValue	read-create	If true, the key value is specified in AOS encrypted form. For example, keys being restored from the configuration file.
alaIPsecKeyEntry	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.5.1		not-accessible	An IPsec key. Keys in the table must be uniquely identified by the combination of key type and key name. However, since the key name can be up to 255 characters, beyond the 128-element size limit for SNMP index objects, the key ID is used to uniquely identify a key for SNMP access.
alaIPsecKeyGroup	1.3.6.1.4.1.6486.801.1.2.1.43.1.2.2.4			A collection of objects to support management of keys.
U32 alaIPsecKeyID	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.5.1.1	Unsigned32	not-accessible	A unique identifier for this key. When creating a new key, a zero value must be specified. An available ID will then be automatically assigned to the key.
OCT alaIPsecKeyName	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.5.1.3	OCTET STRING	read-create	The name of the key. For manually-configured SA keys, the name is limited to a maximum length of 20 characters and should correspond to an entry in the alaIPsecSAConfigTable. The key name may not be changed once a key is created.
ROW alaIPsecKeyRowStatus	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.5.1.6	RowStatus	read-create	Used to control the addition and removal of keys.
alaIPsecKeyTable	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.5		not-accessible	Table used to configure the keys used by manually configured Security Associations in the IPsec Security Association Configuration table.
INT alaIPsecKeyType	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.5.1.2	INTEGER	read-create	Indicates if the key is to be used for encryption or authentication by a SA. Once a key is created, its type may not be changed.
IPS alaIPsecSAConfigAdminState	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1.13	IPsecAdminState	read-create	Allows a manually configured SA to be administratively enabled or disabled.
IPS alaIPsecSAConfigAuthenticationAlgorithm	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1.12	IPsecAHAlgorithm	read-create	Defines the authentication algorithm to be used. For ESP SAs, none(0) may be specified for encryption-only ESP. For ESP integrity-only, ESP integrity and encryption, or for AH SAs, hmacmd5(2), hmacsha1(3), or aesxcbcmac(9) must be specified.
IPS alaIPsecSAConfigDescription	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1.9	IPsecDescription	read-create	A detailed description for the manually created IPsec SA.
IP alaIPsecSAConfigDestination	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1.6	InetAddress	read-create	The destination of packets covered by this SA.
IPt alaIPsecSAConfigDestinationType	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1.5	InetAddressType	read-create	The type of destination address specified. Currently only ipv6(2) is allowed.
IPS alaIPsecSAConfigEncryptionAlgorithm	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1.10	IPsecESPAlgorithm	read-create	For an ESP SA, defines the encryption algorithm to be used. null(11) should be specified if ESP is being used for integrity only. If null(11) is specified, alaIPsecSAConfigAuthenticationAlgorithm may not be none(0). aesctr(13) is not valid for manually configured SAs. The value of this object is none(0) for AH SAs.
U32 alaIPsecSAConfigEncryptionKeyLength	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1.11	Unsigned32	read-create	For those algorithms where multiple key lengths are supported, specifies the key length to be used. Zero may be specified to use the default key length.
alaIPsecSAConfigEntry	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1		not-accessible	Manually configured security association (SA) parameters.
alaIPsecSAConfigGroup	1.3.6.1.4.1.6486.801.1.2.1.43.1.2.2.3			A collection of objects to support management of manually configured IPsec SAs.
U32 alaIPsecSAConfigID	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1.1	Unsigned32	not-accessible	A unique identifier for this manually configured SA. When creating a new SA, a zero value must be specified. An available ID will then be automatically assigned to the SA.
STR alaIPsecSAConfigName	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1.8	SnmpAdminString	read-create	The name of this manually configured SA.
IPS alaIPsecSAConfigOperationalState	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1.14	IPsecOperationalState	read-only	The operational state of the manually configured SA.
ROW alaIPsecSAConfigRowStatus	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1.15	RowStatus	read-create	Used to control the addition and removal of manually configured IPsec SAs.
IP alaIPsecSAConfigSource	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1.4	InetAddress	read-create	The source of packets covered by this SA.
IPt alaIPsecSAConfigSourceType	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1.3	InetAddressType	read-create	The type of source address specified. Currently only ipv6(2) is allowed.
U32 alaIPsecSAConfigSPI	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1.7	Unsigned32	read-create	The Security Parameters Index (SPI) of this SA.
alaIPsecSAConfigTable	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4		not-accessible	Table allowing the manual configuration of Security Associations in the Security Association Database (SAD).
IPS alaIPsecSAConfigType	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1.2	IPsecSAType	read-create	The type of this SA: AH or ESP. Once set, the type may not be changed.
OCT alaIPsecSecurityKeyCurrent	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.1.1.2	OCTET STRING	read-write	The current value of the 16-byte IPsec security key. If an attempt is made to read the value of this object, a zero-length octet string will be returned.
alaIPsecSecurityKeyEntry	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.1.1		not-accessible	The security key entry.
U32 alaIPsecSecurityKeyID	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.1.1.1	Unsigned32	not-accessible	The row's identifier. Only one entry is ever present, with an ID value of 1.
OCT alaIPsecSecurityKeyNew	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.1.1.3	OCTET STRING	read-write	Used to set a new 16-byte value for the IPsec security key. Both alaIPsecSecurityKeyCurrent (with its correct value) and alaIPsecSecurityKeyNew must be specified in the same SNMP SET message. If alaIPsecSecurityKeyCurrent is not present, or if its value is incorrect, the attempt to set a new key will fail. If an attempt is made to read the value of this object, a zero-length octet string will be returned.
alaIPsecSecurityKeyTable	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.1		not-accessible	Table allowing the configuration of the switch's IPsec security key. The security key is used to encrypt and IPsec related information retained in permanent storage. There is always a single row in this table with an index value of 1.
INT alaIPsecSecurityPolicyAction	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.15	INTEGER	read-create	The action to take on traffic covered by this policy. discard(0) means that all traffic covered by the policy will be discarded. none(1) means that no IPsec processing will be done on the traffic covered by this policy. ipsec(2) means that IPsec processing will take place on the traffic. One or more rules should be defined in the IPsec Rule Table. If no rules are defined processing is identical to none(0) being specified.
IPS alaIPsecSecurityPolicyAdminState	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.16	IPsecAdminState	read-create	Allows a policy to be administratively enabled or disabled.
IPS alaIPsecSecurityPolicyDescription	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.14	IPsecDescription	read-create	A detailed description of this policy.
IP alaIPsecSecurityPolicyDestination	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.7	InetAddress	read-create	The destination of packets covered by this policy.
IPS alaIPsecSecurityPolicyDestinationPort	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.9	IPsecPortNumber	read-create	The destination port of packets covered by this policy. To match packets from any port, specify the 0 wildcard value. A wildcard policy will only be used when there is no exact match to a destination port in another entry.
IPS alaIPsecSecurityPolicyDestinationPrefixLength	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.8	IPsecPrefixLength	read-create	The number of bits of the destination prefix used to determine which packets are covered by this policy. The default value varies depending upon the type of destination address specified: IPv4 - 32 IPv6 - 128 DNS name - 0 (any other value is ignored)
IPt alaIPsecSecurityPolicyDestinationType	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.6	InetAddressType	read-create	The type of destination address specified. Currently only ipv6(2) is allowed.
INT alaIPsecSecurityPolicyDirection	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.12	INTEGER	read-create	The direction of traffic covered by this policy.
alaIPsecSecurityPolicyEntry	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1		not-accessible	A security policy entry.
alaIPsecSecurityPolicyGroup	1.3.6.1.4.1.6486.801.1.2.1.43.1.2.2.2			A collection of objects to support management of IPsec security policies.
I32 alaIPsecSecurityPolicyICMPv6Type	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.11	Integer32	read-create	If the upper-layer protocol is ICMPv6, an ICMPv6 type value may be specified to restrict the policy to a specific packet type. To match all ICMPv6 packets, the 0 wildcard value should be specified.
U32 alaIPsecSecurityPolicyID	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.1	Unsigned32	not-accessible	A unique identifier for this security policy. When creating a new policy, a zero value must be specified. An available policy ID will then be automatically assigned to the policy.
STR alaIPsecSecurityPolicyName	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.13	SnmpAdminString	read-create	A name for this policy.
IPS alaIPsecSecurityPolicyOperationalState	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.17	IPsecOperationalState	read-only	The operational state of this policy.
I32 alaIPsecSecurityPolicyPriority	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.18	Integer32	read-create	The priority for this policy. When traffic would be covered by multiple policies the policy with the highest priority value is used. If two policies have the same priority, the one configured first has precedence.
ROW alaIPsecSecurityPolicyRowStatus	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.19	RowStatus	read-create	Used to control the addition and removal of security policy entries.
alaIPsecSecurityPolicyRuleEntry	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.3.1		not-accessible	A security policy entry.
U32 alaIPsecSecurityPolicyRuleIndex	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.3.1.1	Unsigned32	not-accessible	Index specifying the order in which multiple rules for the same security policy will be applied. Rules are indexed by the order in which they are applied to the original payload. For example, for a security policy where an IPv6 payload should be protected by an ESP header, which should be protected by an AH header, there would be two Rule Table entries. The ESP entry would have an index of 1 (first rule applied to the payload). The AH entry would have an index of 2 (second rule applied).
INT alaIPsecSecurityPolicyRuleMode	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.3.1.3	INTEGER	read-create	The mode in which the rule's protocol is running. At present, only transport(1) is allowed. Until tunnel mode is supported, transport(1) will be treated as the default value.
INT alaIPsecSecurityPolicyRuleProtocol	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.3.1.2	INTEGER	read-create	Indicates the type of header required by the rule.
ROW alaIPsecSecurityPolicyRuleRowStatus	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.3.1.4	RowStatus	read-create	Used to control the addition and removal of security policy IPsec rule entries.
alaIPsecSecurityPolicyRuleTable	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.3		not-accessible	Table allowing the configuration of the IPsec rules for a security policy.
IP alaIPsecSecurityPolicySource	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.3	InetAddress	read-create	The source of packets covered by this policy.
IPS alaIPsecSecurityPolicySourcePort	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.5	IPsecPortNumber	read-create	The source port of packets covered by this policy. To match packets from any port, specify the 0 wildcard value. A wildcard policy will only be used when there is no exact match to a destination port in another entry.
IPS alaIPsecSecurityPolicySourcePrefixLength	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.4	IPsecPrefixLength	read-create	The number of bits of the source address used to determine which packets are covered by this policy. The default value varies depending upon the type of source address specified: IPv4 - 32 IPv6 - 128 DNS name - 0 (any other value is ignored)
IPt alaIPsecSecurityPolicySourceType	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.2	InetAddressType	read-create	The type of source address specified. Currently only ipv6(2) is allowed.
alaIPsecSecurityPolicyTable	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2		not-accessible	Table allowing the configuration of IPsec security policies.
IPS alaIPsecSecurityPolicyULProtocol	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.10	IPsecULProtocol	read-create	The upper-layer protocol of packets covered by this policy. To match all protocols, specify the 255 wildcard value. A wildcard policy will only be used when there is no exact match to the protocol value specified in another entry.
alaIPsecStatisticsEntry	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1		not-accessible	The statistics entry.
alaIPsecStatisticsGroup	1.3.6.1.4.1.6486.801.1.2.1.43.1.2.2.6			A collection of objects to support management of IPsec statistics.
C32 alaIPsecStatisticsInAHAuthenticationFail	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.9	Counter32	read-only	Number of incoming packets that failed AH authentication.
C32 alaIPsecStatisticsInAHAuthenticationSuccess	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.8	Counter32	read-only	Number of incoming packets that successfully passed AH authentication.
C32 alaIPsecStatisticsInAHReplay	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.6	Counter32	read-only	Number of incoming packets that failed the AH replay check.
C32 alaIPsecStatisticsInBadPacket	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.12	Counter32	read-only	Number of incoming packets requiring IPsec processing that were not valid.
C32 alaIPsecStatisticsInDiscarded	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.19	Counter32	read-only	Number of incoming packets dropped because they matched a discard policy.
C32 alaIPsecStatisticsInESPAuthenticationFail	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.11	Counter32	read-only	Number of incoming packets that failed ESP authentication.
C32 alaIPsecStatisticsInESPAuthenticationSuccess	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.10	Counter32	read-only	Number of incoming packets that successfully passed ESP authentication.
C32 alaIPsecStatisticsInESPReplay	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.7	Counter32	read-only	Number of incoming packets taht failed the ESP replay check.
C32 alaIPsecStatisticsInNoMemory	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.13	Counter32	read-only	Number of incoming IPsec packets dropped because no memory was available.
C32 alaIPsecStatisticsInNoSA	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.4	Counter32	read-only	Number of incoming packets dropped because no matching SA was found.
C32 alaIPsecStatisticsInPolicyViolation	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.3	Counter32	read-only	Number of incoming packets that were dropped because of policy violations.
C32 alaIPsecStatisticsInSuccessful	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.2	Counter32	read-only	Number of incoming packets requiring IPsec processing that were successfully handled.
C32 alaIPsecStatisticsInUnknownSPI	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.5	Counter32	read-only	Number of incoming packets dropped because the SPI was unknown.
C32 alaIPsecStatisticsOutBadPacket	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.17	Counter32	read-only	Number of outgoing packets requiring IPsec processing that were not valid.
C32 alaIPsecStatisticsOutDiscarded	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.20	Counter32	read-only	Number of outgoing packets dropped because they matched a discard policy.
C32 alaIPsecStatisticsOutNoMemory	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.18	Counter32	read-only	Number of outgoing IPsec packets dropped because no memory was available.
C32 alaIPsecStatisticsOutNoSA	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.16	Counter32	read-only	Number of outgoing packets dropped because no matching SA was found.
C32 alaIPsecStatisticsOutPolicyViolation	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.15	Counter32	read-only	Number of outgoing packets dropped because of a policy violation.
C32 alaIPsecStatisticsOutSuccessful	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.14	Counter32	read-only	Number of outgoing packets requiring IPsec processing that were successfully handled.
INT alaIPsecStatisticsProtocol	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.1	INTEGER	not-accessible	IP protocol version covered by the IPsec statistics.
alaIPsecStatisticsTable	1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2		not-accessible	Table allowing the IPv6 statistics to be retrieved.
alcatelIND1IPsecMIB	1.3.6.1.4.1.6486.801.1.2.1.43.1			This module describes an authoritative enterprise-specific Simple Network Management Protocol (SNMP) Management Information Base (MIB): Proprietary IPsec MIB definitions The right to make changes in specification and other information contained in this document without prior notice is reserved. No liability shall be assumed for any incidental, indirect, special, or consequential damages whatsoever arising from or related to this document or the information contained herein. Vendors, end-users, and other interested parties are granted non-exclusive license to use this specification in connection with management of the products for which it is intended to be used. Copyright (C) 1995-2010 Alcatel-Lucent ALL RIGHTS RESERVED WORLDWIDE
alcatelIND1IPsecMIBCompliances	1.3.6.1.4.1.6486.801.1.2.1.43.1.2.1
alcatelIND1IPsecMIBConformance	1.3.6.1.4.1.6486.801.1.2.1.43.1.2
alcatelIND1IPsecMIBGroups	1.3.6.1.4.1.6486.801.1.2.1.43.1.2.2
alcatelIND1IPsecMIBObjects	1.3.6.1.4.1.6486.801.1.2.1.43.1.1

RFC description

Alcatel-Lucent IPSec VPN tunnel management MIB for monitoring encryption and key exchange parameters.

Start monitoring Alcatel-Lucent Enterprise OmniSwitch switches with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ALCATEL-IND1-IPSEC-MIB