APSECURITY-MIB

All MIBs › APSECURITY-MIB

Organization: Acme Packet, Inc

Last Updated: 2012-07-16

Category: Telephony and VoIP, VPN and Security, Vendor: Acme Packet

Description: Covers security policy enforcement on Acme Packet SBCs, encompassing ACLs, IPsec, and DoS prevention mechanisms.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is APSECURITY-MIB?

APSECURITY-MIB is an Acme Packet vendor MIB for the Net-Net Session Border Controller, covering security policy enforcement mechanisms including IPsec tunnels, IKE negotiation, TACACS+ AAA, and certificate management. Scalars apSecurityIPsecTunCount and apSecurityIPsecTunCapPct report the number and license-capacity percentage of active IPsec tunnels; apSecurityIkeInterfaceStatsTable, indexed by IKE-interface address type/address, exposes a wide range of IKE negotiation failure counters — CPU overload rejections, cookie/auth/EAP/TS/CP/KE/proposal/syntax/critical-payload errors, plus threshold-crossing-alert counters for auth failures, tunnel removals, and dead-peer-detection; apSecurityTacacsTable tracks per-server TACACS+ CLI-command, authentication, and authorization success/failure counts; and further tables cover IKE-interface info and certificates. This gives a security operator visibility into whether IPsec/IKE tunnels are being established successfully, whether TACACS+ AAA is functioning, and where in the negotiation handshake failures are concentrated — critical for diagnosing failed VPN peers or AAA outages on a security-facing SBC. It depends on ACMEPACKET-SMI's acmepacketMgmt root and INET-ADDRESS-MIB's InetAddress types, and is deployed on Acme Packet Net-Net SBCs; security teams can perform an APSECURITY-MIB download when instrumenting IPsec/IKE and TACACS+ monitoring on these platforms.

IPNetwork Monitor allows you to monitor SNMP objects defined in APSECURITY-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Acme Packet Net-Net Session Border Controllers

Monitoring Examples

An operator polls apSecurityIkeInterfaceStatsTable for a given IKE-interface and watches apSecurityIkeInterfaceAuthErrors and apSecurityIkeInterfaceProposalErrors rise while apSecurityIPsecTunCount stays flat; this pattern would indicate a remote IPsec peer is failing IKE negotiation rather than tunnels simply not being attempted.

What Can Be Monitored

active IPsec tunnel count and license capacity percentage
per-IKE-interface negotiation error counters (auth, proposal, cookie, EAP, syntax)
IKE threshold-crossing alert counters (auth failure, tunnel removal, DPD)
per-TACACS+-server authentication/authorization success and failure counts
TACACS+ CLI command accounting count

Imported Objects

From ACMEPACKET-SMI

acmepacketMgmt

OBJECT-IDENTITY

From INET-ADDRESS-MIB

InetAddress
InetAddressType
InetPortNumber

From SNMPv2-CONF

NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DisplayString
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
INT apSecurityAuthAlg	1.3.6.1.4.1.9148.3.9.2.6	INTEGER	accessible-for-notify	Type of the authentication algorithms supported in the tunnel setup.
NTF apSecurityAuthFailureThresholdInetNotification	1.3.6.1.4.1.9148.3.9.3.1.0.6			The notification will be generated when IKE DDos auth-failure-threshold is reached and report mode includes SNMP trap
NTF apSecurityAuthFailureThresholdNotification	1.3.6.1.4.1.9148.3.9.3.1.0.3			The notification will be generated when IKE DDos auth-failure-threshold is reached and report mode includes SNMP trap
apSecurityAuthNotifications	1.3.6.1.4.1.9148.3.9.3.1.0
apSecurityAuthNotificationsPrefix	1.3.6.1.4.1.9148.3.9.3.1
NTF apSecurityCertExpiredNotification	1.3.6.1.4.1.9148.3.9.3.6.0.1			The notification will be generated periodically if a locally installed certificate has expired.
NTF apSecurityCertExpireSoonNotification	1.3.6.1.4.1.9148.3.9.3.6.0.2			The notification will be generated periodically if a locally installed certificate will soon expire.
STR apSecurityCertificateCertExpire	1.3.6.1.4.1.9148.3.9.1.10.1.6	DisplayString	read-only	The expiration time and date of the certificate.
T/F apSecurityCertificateCertIsCA	1.3.6.1.4.1.9148.3.9.1.10.1.8	TruthValue	read-only	Boolean value indicating if the certificate is a CA certificate.
STR apSecurityCertificateCertIssuer	1.3.6.1.4.1.9148.3.9.1.10.1.7	DisplayString	read-only	The issuer of the certificate.
STR apSecurityCertificateCertStart	1.3.6.1.4.1.9148.3.9.1.10.1.5	DisplayString	read-only	The start time and date of the certificate.
STR apSecurityCertificateCertSubject	1.3.6.1.4.1.9148.3.9.1.10.1.4	DisplayString	read-only	The certificate subject.
U32 apSecurityCertificateConfigId	1.3.6.1.4.1.9148.3.9.1.10.1.1	Unsigned32	not-accessible	The internal configuration ID of the certificate.
apSecurityCertificateEntry	1.3.6.1.4.1.9148.3.9.1.10.1		not-accessible	The certificate entry.
U32 apSecurityCertificateIndex	1.3.6.1.4.1.9148.3.9.1.10.1.2	Unsigned32	not-accessible	The internal index of the certificate. Combined with configuration ID is the unique ID of a certificate
STR apSecurityCertificateRecordName	1.3.6.1.4.1.9148.3.9.1.10.1.3	DisplayString	read-only	The SBC's configuration record name for the certificate.
apSecurityCertificateTable	1.3.6.1.4.1.9148.3.9.1.10		not-accessible	The table of locally installed certifcate.
apSecurityCertNotifications	1.3.6.1.4.1.9148.3.9.3.6.0
apSecurityCertNotificationsGroup	1.3.6.1.4.1.9148.3.9.4.3.7			A collection of notifications for CRLs
apSecurityCertNotificationsPrefix	1.3.6.1.4.1.9148.3.9.3.6
apSecurityCertObjectsGroup	1.3.6.1.4.1.9148.3.9.4.2.4			Objects for managing locally installed certificates.
apSecurityCompliances	1.3.6.1.4.1.9148.3.9.4.1
apSecurityConformance	1.3.6.1.4.1.9148.3.9.4
NTF apSecurityCrlInvalidNotification	1.3.6.1.4.1.9148.3.9.3.4.0.1			This notification is sent when an invalid CRL is detected.
STR apSecurityCrlIssuer	1.3.6.1.4.1.9148.3.9.1.7	DisplayString	accessible-for-notify	CRL issuer name.
apSecurityCrlNotifications	1.3.6.1.4.1.9148.3.9.3.4.0
apSecurityCrlNotificationsGroup	1.3.6.1.4.1.9148.3.9.4.3.5			A collection of notifications for CRLs
apSecurityCrlNotificationsPrefix	1.3.6.1.4.1.9148.3.9.3.4
NTF apSecurityCRLRetrievalClearNotification	1.3.6.1.4.1.9148.3.9.3.5.0.2			This notification is sent when there is a success in CRL retrieval.
NTF apSecurityCRLRetrievalFailNotification	1.3.6.1.4.1.9148.3.9.3.5.0.1			This notification is sent when there is a failure in CRL retrieval.
INT apSecurityCRLRetrievalFailureCause	1.3.6.1.4.1.9148.3.9.2.16	INTEGER	accessible-for-notify	Reason for failure in the CRL retrieval.
apSecurityCRLRetrievalNotifications	1.3.6.1.4.1.9148.3.9.3.5.0
apSecurityCRLRetrievalNotificationsGroup	1.3.6.1.4.1.9148.3.9.4.3.6			A collection of notifications for CRL Retrieval
apSecurityCRLRetrievalNotificationsPrefix	1.3.6.1.4.1.9148.3.9.3.5
STR apSecurityCRLServer	1.3.6.1.4.1.9148.3.9.2.15	DisplayString	accessible-for-notify	CRL Server FQDN if configured.
IP apSecurityCRLServerIPAddress	1.3.6.1.4.1.9148.3.9.2.18	IpAddress	accessible-for-notify	CRL Server IP address.
STR apSecurityCspName	1.3.6.1.4.1.9148.3.9.1.8	DisplayString	accessible-for-notify	Cert-status-profile object name for fetching the CRL. If the CRL is just loaded from local file, then it is specified as file
STR apSecurityDateTime	1.3.6.1.4.1.9148.3.9.2.11	DisplayString	accessible-for-notify	Time as configured at the Net-Net SBC when an event completes.
apSecurityDDosNotificationsGroup	1.3.6.1.4.1.9148.3.9.4.3.3			A collection of notifications for IKEv2 DDos
apSecurityDDosNotificationsInetGroup	1.3.6.1.4.1.9148.3.9.4.3.10			A collection of notifications for IKEv2 DDos
IP apSecurityDstAddress	1.3.6.1.4.1.9148.3.9.2.26	InetAddress	accessible-for-notify	Destination IP address.
IPt apSecurityDstAddressFamily	1.3.6.1.4.1.9148.3.9.2.25	InetAddressType	accessible-for-notify	Destination IP address family IPv4 or IPv6.
IP apSecurityDstIpAddress	1.3.6.1.4.1.9148.3.9.2.3	IpAddress	accessible-for-notify	Destination IP address.
INT apSecurityEncryptionAlg	1.3.6.1.4.1.9148.3.9.2.5	INTEGER	accessible-for-notify	Type of the encryption algorithms supported in the tunnel setup.
INT apSecurityFailureArea	1.3.6.1.4.1.9148.3.9.2.9	INTEGER	accessible-for-notify	Where the failure happened.
INT apSecurityFailureCause	1.3.6.1.4.1.9148.3.9.2.8	INTEGER	accessible-for-notify	Reason for failure in the IKE, IPSec or RADIUS areas.
apSecurityGeneralNotifications	1.3.6.1.4.1.9148.3.9.3.2.0
apSecurityGeneralNotificationsPrefix	1.3.6.1.4.1.9148.3.9.3.2
apSecurityGroups	1.3.6.1.4.1.9148.3.9.4.2
apSecurityGTPFailureNotifications	1.3.6.1.4.1.9148.3.9.3.7.0
apSecurityGTPFailureNotificationsPrefix	1.3.6.1.4.1.9148.3.9.3.7
STR apSecurityGTPHostName	1.3.6.1.4.1.9148.3.9.2.20	DisplayString	accessible-for-notify	GGSN Host Name if configured.
IP apSecurityGTPIPAddress	1.3.6.1.4.1.9148.3.9.2.22	IpAddress	accessible-for-notify	GGSN IP address.
NTF apSecurityGTPLinkClearNotification	1.3.6.1.4.1.9148.3.9.3.7.0.2			This notification is sent when the link is restored with GGSN on GTP Profile.
INT apSecurityGTPLinkFailureCause	1.3.6.1.4.1.9148.3.9.2.21	INTEGER	accessible-for-notify	Reason for failure in the GTPCRL retrieval.
NTF apSecurityGTPLinkFailureNotification	1.3.6.1.4.1.9148.3.9.3.7.0.1			This notification is sent when there is a link failure with GGSN on GTP Profile.
apSecurityGTPNotificationsGroup	1.3.6.1.4.1.9148.3.9.4.3.8			A collection of notifications for GTP peer communication
STR apSecurityGTPProfileName	1.3.6.1.4.1.9148.3.9.2.19	DisplayString	accessible-for-notify	GTP Profile Name configured.
IP apSecurityIkeInterfaceAddress	1.3.6.1.4.1.9148.3.9.1.3.1.2	InetAddress	read-only	IPAddress of the IKE-interface
U32 apSecurityIkeInterfaceAuthCertCheckFailure	1.3.6.1.4.1.9148.3.9.1.9.1.24	Unsigned32	read-only	Number of Certificate Status Failures on the IKE-interface.
U32 apSecurityIkeInterfaceAuthCertCheckRequest	1.3.6.1.4.1.9148.3.9.1.9.1.22	Unsigned32	read-only	Number of Certificate Status Requests on the IKE-interface.
U32 apSecurityIkeInterfaceAuthCertCheckSuccess	1.3.6.1.4.1.9148.3.9.1.9.1.23	Unsigned32	read-only	Number of Certificate Status Success on the IKE-interface.
U32 apSecurityIkeInterfaceAuthErrors	1.3.6.1.4.1.9148.3.9.1.3.1.5	Unsigned32	read-only	The count of IKE AUTH payload errors on the IKE-interface
U32 apSecurityIkeInterfaceAuthFailure	1.3.6.1.4.1.9148.3.9.1.9.1.19	Unsigned32	read-only	Number of Authentication Failures on the IKE-interface.
U32 apSecurityIkeInterfaceAuthFailureTca	1.3.6.1.4.1.9148.3.9.1.3.1.14	Unsigned32	read-only	Dummy object for the IKE authentication failure TCA
U32 apSecurityIkeInterfaceAuthIDError	1.3.6.1.4.1.9148.3.9.1.9.1.21	Unsigned32	read-only	Number of Authentication ID Errors on the IKE-interface.
U32 apSecurityIkeInterfaceChildSaDelFail	1.3.6.1.4.1.9148.3.9.1.9.1.6	Unsigned32	read-only	Number of Child SA Delete Failures on the IKE-interface.
U32 apSecurityIkeInterfaceChildSaDelRequest	1.3.6.1.4.1.9148.3.9.1.9.1.4	Unsigned32	read-only	Number of Child SA Delete Requests on the IKE-interface.
U32 apSecurityIkeInterfaceChildSaDelSuccess	1.3.6.1.4.1.9148.3.9.1.9.1.5	Unsigned32	read-only	Number of Child SA Delete Success on the IKE-interface.
U32 apSecurityIkeInterfaceChildSaFail	1.3.6.1.4.1.9148.3.9.1.9.1.3	Unsigned32	read-only	Number of Child SA Failures on the IKE-interface.
U32 apSecurityIkeInterfaceChildSaRekey	1.3.6.1.4.1.9148.3.9.1.9.1.7	Unsigned32	read-only	Number of Child SA Rekeys on the IKE-interface.
U32 apSecurityIkeInterfaceChildSaRequest	1.3.6.1.4.1.9148.3.9.1.9.1.1	Unsigned32	read-only	Number of Child SA Requests on the IKE-interface.
U32 apSecurityIkeInterfaceChildSaSuccess	1.3.6.1.4.1.9148.3.9.1.9.1.2	Unsigned32	read-only	Number of Child SA Success on the IKE-interface.
U32 apSecurityIkeInterfaceCpErrors	1.3.6.1.4.1.9148.3.9.1.3.1.9	Unsigned32	read-only	The count of IKE config payload errors on the IKE-interface
U32 apSecurityIkeInterfaceCpuOverloadErrors	1.3.6.1.4.1.9148.3.9.1.3.1.3	Unsigned32	read-only	The count of CPU overload rejections on the IKE-interface
U32 apSecurityIkeInterfaceCriticalPayloadErrors	1.3.6.1.4.1.9148.3.9.1.3.1.13	Unsigned32	read-only	The count of IKE critical payload errors on the IKE-interface
U32 apSecurityIkeInterfaceCurrentChildSaPair	1.3.6.1.4.1.9148.3.9.1.9.1.33	Unsigned32	read-only	Current number of Child Security Association Pairs (Tunnels) on the IKE-interface.
U32 apSecurityIkeInterfaceDDosRecv	1.3.6.1.4.1.9148.3.9.1.9.1.26	Unsigned32	read-only	Number of DDoS Received on the IKE-interface.
U32 apSecurityIkeInterfaceDDosSent	1.3.6.1.4.1.9148.3.9.1.9.1.25	Unsigned32	read-only	Number of DDoS Sent on the IKE-interface.
U32 apSecurityIkeInterfaceDPDRecv	1.3.6.1.4.1.9148.3.9.1.9.1.13	Unsigned32	read-only	Number of DPD Packets Received on the IKE-interface.
U32 apSecurityIkeInterfaceDPDRecvIPChange	1.3.6.1.4.1.9148.3.9.1.9.1.10	Unsigned32	read-only	Number of DPD IP Change Received on the IKE-interface.
U32 apSecurityIkeInterfaceDPDRecvPortChange	1.3.6.1.4.1.9148.3.9.1.9.1.9	Unsigned32	read-only	Number of DPD Port Change Received on the IKE-interface.
U32 apSecurityIkeInterfaceDPDRespNotRecv	1.3.6.1.4.1.9148.3.9.1.9.1.12	Unsigned32	read-only	Number of DPD Responses Not Received on the IKE-interface.
U32 apSecurityIkeInterfaceDPDRespRecv	1.3.6.1.4.1.9148.3.9.1.9.1.11	Unsigned32	read-only	Number of DPD Responses Received on the IKE-interface.
U32 apSecurityIkeInterfaceDPDRetran	1.3.6.1.4.1.9148.3.9.1.9.1.14	Unsigned32	read-only	Number of DPD Packets Retransmitted on the IKE-interface.
U32 apSecurityIkeInterfaceDPDSent	1.3.6.1.4.1.9148.3.9.1.9.1.15	Unsigned32	read-only	Number of DPD Packets Sent on the IKE-interface.
U32 apSecurityIkeInterfaceDpdTca	1.3.6.1.4.1.9148.3.9.1.3.1.16	Unsigned32	read-only	Dummy object for the IKE dead peer detection TCA
U32 apSecurityIkeInterfaceEapAccessChallengeErrors	1.3.6.1.4.1.9148.3.9.1.3.1.7	Unsigned32	read-only	The count of IKE EAP access challenge errors on the IKE-interface
U32 apSecurityIkeInterfaceEapAccessRequestErrors	1.3.6.1.4.1.9148.3.9.1.3.1.6	Unsigned32	read-only	The count of IKE EAP access request errors on the IKE-interface
U32 apSecurityIkeInterfaceIKESAPacketDropped	1.3.6.1.4.1.9148.3.9.1.9.1.18	Unsigned32	read-only	Number of IKE SA Packets dropped on the IKE-interface.
U32 apSecurityIkeInterfaceIKESAPacketRcv	1.3.6.1.4.1.9148.3.9.1.9.1.17	Unsigned32	read-only	Number of IKE SA Packets Received on the IKE-interface.
U32 apSecurityIkeInterfaceIKESAPacketSent	1.3.6.1.4.1.9148.3.9.1.9.1.16	Unsigned32	read-only	Number of IKE SA Packets Sent on the IKE-interface.
apSecurityIkeInterfaceInfoEntry	1.3.6.1.4.1.9148.3.9.1.9.1		not-accessible	IKE info for an IKE-interface.
apSecurityIkeInterfaceInfoObjectsGroup	1.3.6.1.4.1.9148.3.9.4.2.5			Objects for monitoring IKE interface tunnel information
apSecurityIkeInterfaceInfoTable	1.3.6.1.4.1.9148.3.9.1.9		not-accessible	The table of Ike Info per ike-interface for IKE negotiations.
U32 apSecurityIkeInterfaceInitCookieErrors	1.3.6.1.4.1.9148.3.9.1.3.1.4	Unsigned32	read-only	The count of IKE COOKIE errors on the IKE-interface
U32 apSecurityIkeInterfaceInitialChildSa	1.3.6.1.4.1.9148.3.9.1.9.1.8	Unsigned32	read-only	Number of Initial Child SA Establishments on the IKE-interface.
U32 apSecurityIkeInterfaceKeErrors	1.3.6.1.4.1.9148.3.9.1.3.1.10	Unsigned32	read-only	The count of IKE KE errors on the IKE-interface
U32 apSecurityIkeInterfaceMessageRetrans	1.3.6.1.4.1.9148.3.9.1.9.1.27	Unsigned32	read-only	Number of IKE Message Retransmissions on the IKE-interface.
U32 apSecurityIkeInterfaceMsgError	1.3.6.1.4.1.9148.3.9.1.9.1.20	Unsigned32	read-only	Number of IKE Message Errors on the IKE-interface.
apSecurityIkeInterfaceObjectsGroup	1.3.6.1.4.1.9148.3.9.4.2.2			Objects for monitoring IKE negotiation errors.
U32 apSecurityIkeInterfaceProposalErrors	1.3.6.1.4.1.9148.3.9.1.3.1.11	Unsigned32	read-only	The count of IKE proposal payload errors on the IKE-interface
U32 apSecurityIkeInterfaceSAEstablishmentAttempts	1.3.6.1.4.1.9148.3.9.1.9.1.30	Unsigned32	read-only	Number of IKE_SA establishment attempts on the IKE-interface.
U32 apSecurityIkeInterfaceSAEstablishmentSuccess	1.3.6.1.4.1.9148.3.9.1.9.1.31	Unsigned32	read-only	Number of IKE_SA establishment success on the IKE-interface.
U32 apSecurityIkeInterfaceSAInitMsgRecv	1.3.6.1.4.1.9148.3.9.1.9.1.28	Unsigned32	read-only	Number of IKE_SA_INIT messages received on the IKE-interface.
U32 apSecurityIkeInterfaceSAInitMsgSent	1.3.6.1.4.1.9148.3.9.1.9.1.29	Unsigned32	read-only	Number of IKE_SA_INIT messages sent on the IKE-interface.
apSecurityIkeInterfaceStatsEntry	1.3.6.1.4.1.9148.3.9.1.3.1		not-accessible	IKE negotiation statistics for an IKE-interface.
apSecurityIkeInterfaceStatsTable	1.3.6.1.4.1.9148.3.9.1.3		not-accessible	The table of Ike statistics per ike-interface for IKE negotiations.
U32 apSecurityIkeInterfaceSyntaxErrors	1.3.6.1.4.1.9148.3.9.1.3.1.12	Unsigned32	read-only	The count of IKE Syntax errors on the IKE-interface
U32 apSecurityIkeInterfaceTsErrors	1.3.6.1.4.1.9148.3.9.1.3.1.8	Unsigned32	read-only	The count of IKE TS errors on the IKE-interface
U32 apSecurityIkeInterfaceTunnelRate	1.3.6.1.4.1.9148.3.9.1.9.1.32	Unsigned32	read-only	Number of Tunnels per second averaged over 100sec window on the IKE-interface.
U32 apSecurityIkeInterfaceTunnelRemovalsTca	1.3.6.1.4.1.9148.3.9.1.3.1.15	Unsigned32	read-only	Dummy object for the IPsec tunnel removals TCA
IPt apSecurityIkeInterfaceType	1.3.6.1.4.1.9148.3.9.1.3.1.1	InetAddressType	read-only	IPAddress type of the IKE-interface
INT apSecurityIPSECMode	1.3.6.1.4.1.9148.3.9.2.4	INTEGER	accessible-for-notify	IPSec mode.
NTF apSecurityIPsecTunCapClearNotification	1.3.6.1.4.1.9148.3.9.3.2.0.3			This trap is sent when the percentage of licensed IPsec tunnels no longer exceeds an IPsec tunnel alarm threshold. The apSecurityIPsecTunCapPct object indicates the current percentage.
NTF apSecurityIPsecTunCapNotification	1.3.6.1.4.1.9148.3.9.3.2.0.2			This notification is sent when the percentage of licensed IPsec tunnels exceeds an IPsec tunnel alarm threshold. The apSecurityIPsecTunCapPct object indicates the current percentage.
U32 apSecurityIPsecTunCapPct	1.3.6.1.4.1.9148.3.9.1.2	Unsigned32	read-only	The percentage of licensed IPsec tunnels currently in progress.
U32 apSecurityIPsecTunCount	1.3.6.1.4.1.9148.3.9.1.1	Unsigned32	read-only	The number of IPsec tunnels currently in progress.
apSecurityIPsecTunnelsNotificationsGroup	1.3.6.1.4.1.9148.3.9.4.3.2			A collection of notifications for IPsec tunnel capacity.
apSecurityIPsecTunnelsObjectsGroup	1.3.6.1.4.1.9148.3.9.4.2.1			Objects for monitoring IPsec tunnel capacity.
I32 apSecurityLastSuccessfulCRLRetrieval	1.3.6.1.4.1.9148.3.9.2.17	Integer32	accessible-for-notify	Last successful CRL retrieval.
apSecurityMIBObjects	1.3.6.1.4.1.9148.3.9.1
apSecurityModule	1.3.6.1.4.1.9148.3.9			The Net-Net SECURITY MIB for Acme Packet
apSecurityNotificationObjects	1.3.6.1.4.1.9148.3.9.2
apSecurityNotifications	1.3.6.1.4.1.9148.3.9.3
apSecurityNotificationsGroup	1.3.6.1.4.1.9148.3.9.4.3.1			A collection of notifications for security
apSecurityNotificationsGroups	1.3.6.1.4.1.9148.3.9.4.3
apSecurityNotificationsInetGroup	1.3.6.1.4.1.9148.3.9.4.3.9			A collection of notifications for security
NTF apSecurityOCSRDownNotification	1.3.6.1.4.1.9148.3.9.3.3.0.1			This notification is sent when a OCSR server becomes unreachable.
STR apSecurityOCSRHostname	1.3.6.1.4.1.9148.3.9.1.6	DisplayString	accessible-for-notify	OCSR server hostname.
IP apSecurityOCSRIpAddress	1.3.6.1.4.1.9148.3.9.1.5	IpAddress	accessible-for-notify	OCSR server IP address.
apSecurityOCSRNotifications	1.3.6.1.4.1.9148.3.9.3.3.0
apSecurityOCSRNotificationsGroup	1.3.6.1.4.1.9148.3.9.4.3.4			A collection of notifications for OCSRs
apSecurityOCSRNotificationsPrefix	1.3.6.1.4.1.9148.3.9.3.3
NTF apSecurityOCSRUpNotification	1.3.6.1.4.1.9148.3.9.3.3.0.2			This notification is sent when a OCSR server becomes reachable.
IP apSecurityPeerAddress	1.3.6.1.4.1.9148.3.9.2.28	InetAddress	accessible-for-notify	IKE peer IP address.
IPt apSecurityPeerAddressFamily	1.3.6.1.4.1.9148.3.9.2.27	InetAddressType	accessible-for-notify	IKE peer IP address family IPv4 or IPv6.
IP apSecurityPeerIpAddress	1.3.6.1.4.1.9148.3.9.2.14	IpAddress	accessible-for-notify	IKE peer IP address.
INE apSecurityPeerPort	1.3.6.1.4.1.9148.3.9.2.13	InetPortNumber	accessible-for-notify	IKE peer port
NTF apSecurityRadiusFailureNotification	1.3.6.1.4.1.9148.3.9.3.1.0.2			The notification will be generated whenever Radius authentication request fails.
INT apSecuritySecProtocol	1.3.6.1.4.1.9148.3.9.2.7	INTEGER	accessible-for-notify	Type of the security protocol supported in the tunnel setup.
U32 apSecuritySpi	1.3.6.1.4.1.9148.3.9.2.1	Unsigned32	accessible-for-notify	Tunnel security-policy-index.
IP apSecuritySrcAddress	1.3.6.1.4.1.9148.3.9.2.24	InetAddress	accessible-for-notify	Source IP address.
IPt apSecuritySrcAddressFamily	1.3.6.1.4.1.9148.3.9.2.23	InetAddressType	accessible-for-notify	Source IP address family IPv4 or IPv6.
IP apSecuritySrcIpAddress	1.3.6.1.4.1.9148.3.9.2.2	IpAddress	accessible-for-notify	Source IP address.
INT apSecurityStatus	1.3.6.1.4.1.9148.3.9.2.10	INTEGER	accessible-for-notify	Status.
U32 apSecurityTacacsCliCommands	1.3.6.1.4.1.9148.3.9.1.4.1.3	Unsigned32	read-only	Number of CLI commands sent for TACACS+ accounting
apSecurityTacacsEntry	1.3.6.1.4.1.9148.3.9.1.4.1		not-accessible	An entry in the table of all licenses
U32 apSecurityTacacsFailureAuthentication	1.3.6.1.4.1.9148.3.9.1.4.1.5	Unsigned32	read-only	Number of failed TACACS+ authentication requests
U32 apSecurityTacacsFailureAuthorization	1.3.6.1.4.1.9148.3.9.1.4.1.7	Unsigned32	read-only	Number of failed TACACS+ authorization requests
NTF apSecurityTacacsFailureNotification	1.3.6.1.4.1.9148.3.9.3.1.0.4			The notification will be generated whenever TACACS authentication requests fail.
I32 apSecurityTacacsIndex	1.3.6.1.4.1.9148.3.9.1.4.1.1	Integer32	not-accessible	Unique index for the tacacs table.
apSecurityTacacsObjectsGroup	1.3.6.1.4.1.9148.3.9.4.2.3			Objects for monitoring TACACS+ transactions.
STR apSecurityTacacsServer	1.3.6.1.4.1.9148.3.9.1.4.1.2	DisplayString	read-only	Server for last transaction
U32 apSecurityTacacsSuccessAuthentication	1.3.6.1.4.1.9148.3.9.1.4.1.4	Unsigned32	read-only	Number of successful TACACS+ authentication requests
U32 apSecurityTacacsSuccessAuthorization	1.3.6.1.4.1.9148.3.9.1.4.1.6	Unsigned32	read-only	Number of successful TACACS+ authorization requests
apSecurityTacacsTable	1.3.6.1.4.1.9148.3.9.1.4		not-accessible	The table of all tacacs, including the system-wide consolidated license (always index 1)
NTF apSecurityTunnelDPDInetNotification	1.3.6.1.4.1.9148.3.9.3.2.0.4			The notification will be generated whenever IPSEC IKEV2 tunnel fails due to Dead Peer Detection(DPD).
NTF apSecurityTunnelDPDNotification	1.3.6.1.4.1.9148.3.9.3.2.0.1			The notification will be generated whenever IPSEC IKEV2 tunnel fails due to Dead Peer Detection(DPD).
NTF apSecurityTunnelFailureInetNotification	1.3.6.1.4.1.9148.3.9.3.1.0.5			The notification will be generated whenever IPSEC IKEV2 tunnel fails to establish.
NTF apSecurityTunnelFailureNotification	1.3.6.1.4.1.9148.3.9.3.1.0.1			The notification will be generated whenever IPSEC IKEV2 tunnel fails to establish.
STR apSecurityUser	1.3.6.1.4.1.9148.3.9.2.12	DisplayString	accessible-for-notify	User name

RFC description

Acme Packet SBC security policy enforcement including ACLs, IPsec, and DoS prevention.

Start monitoring Acme Packet (Oracle) Net-Net Session Border Controllers with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download APSECURITY-MIB

What Is APSECURITY-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description