ASCEND-MIBIPSEC-MIB

All MIBs › ASCEND-MIBIPSEC-MIB

Category: VPN and Security, Vendor: Ascend/Lucent

Description: Manages IPSec tunnel configuration, security associations, and transform sets on Ascend equipment.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ASCEND-MIBIPSEC-MIB?

ASCEND-MIBIPSEC-MIB is a vendor-specific MIB from Ascend Communications (later absorbed into Lucent) for managing IPSec VPN functionality on Ascend routers and remote-access concentrators. It focuses on configuration data, IPSec tunnel definitions, security association (SA) parameters, and transform/proposal sets used to negotiate encryption and authentication algorithms for a tunnel. Beyond static configuration, it supports monitoring the operational status of IPSec tunnels and their associations, letting an administrator confirm that a VPN tunnel is up, verify negotiated encryption parameters, and detect tunnels that have failed to establish or have dropped, effectively functioning as a software/service status check for the router's VPN subsystem. As an enterprise security MIB it generally builds on IETF's standard IPSec/IKE data model concepts even though it is implemented as an Ascend-proprietary tree rather than importing the standard IPSEC-MIB directly. It would typically be deployed in legacy WAN/remote-access environments where Ascend routers or MAX-series access concentrators terminate site-to-site or remote-access VPN tunnels. Engineers can download the ASCEND-MIBIPSEC-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in ASCEND-MIBIPSEC-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Ascend/Lucent MAX-series routers and remote-access concentrators

Monitoring Examples

Sample objects were not provided for this module, but based on its description an administrator would typically poll IPSec tunnel and security-association tables to confirm a given tunnel entry is active, check its negotiated transform set (encryption/hash algorithm), and watch for a tunnel status changing from established to down, which would indicate an IKE negotiation failure or a peer connectivity problem.

What Can Be Monitored

IPSec tunnel status
security association state
negotiated transform/encryption set
tunnel configuration parameters

Imported Objects

From ASCEND-MIB

configuration

OBJECT-IDENTITY

From RFC-1212

OBJECT-TYPE

From RFC1155-SMI

IpAddress

OIDs

OID symbolic	OID numeric	Type	Access	Description
mibmibProfIpsec	1.3.6.1.4.1.529.23.85
mibmibProfIpsecTable	1.3.6.1.4.1.529.23.85.1		not-accessible	A list of mibmibProfIpsec profile entries.
mibmibProfIpsecEntry	1.3.6.1.4.1.529.23.85.1.1		not-accessible	A mibmibProfIpsec entry containing objects that maps to the parameters of mibmibProfIpsec profile.
STR mibProfIpsec_Name	1.3.6.1.4.1.529.23.85.1.1.1	DisplayString	read-only	Name of this scheme
INT mibProfIpsec_Active	1.3.6.1.4.1.529.23.85.1.1.2	INTEGER	read-write	Is this scheme in use?
INT mibProfIpsec_EncapMode	1.3.6.1.4.1.529.23.85.1.1.3	INTEGER	read-write	Encapsulation mode.
IP mibProfIpsec_TunnelAddress	1.3.6.1.4.1.529.23.85.1.1.4	IpAddress	read-write	Address of the machine at the tunnel end.
INT mibProfIpsec_SendAh_Active	1.3.6.1.4.1.529.23.85.1.1.5	INTEGER	read-write	Is this profile active? Yes/No.
INT mibProfIpsec_SendAh_Spi	1.3.6.1.4.1.529.23.85.1.1.6	INTEGER	read-write	Security Parameters Index
INT mibProfIpsec_SendAh_AhType	1.3.6.1.4.1.529.23.85.1.1.7	INTEGER	read-write	Which type of transform shall we use?
STR mibProfIpsec_SendAh_Key	1.3.6.1.4.1.529.23.85.1.1.8	DisplayString	read-write	Authentication Key for hashing.
INT mibProfIpsec_SendAh_ReplayProtection	1.3.6.1.4.1.529.23.85.1.1.9	INTEGER	read-write	Replay Protection enable/disable.
INT mibProfIpsec_RecvAh_Active	1.3.6.1.4.1.529.23.85.1.1.10	INTEGER	read-write	Is this profile active? Yes/No.
INT mibProfIpsec_RecvAh_Spi	1.3.6.1.4.1.529.23.85.1.1.11	INTEGER	read-write	Security Parameters Index
INT mibProfIpsec_RecvAh_AhType	1.3.6.1.4.1.529.23.85.1.1.12	INTEGER	read-write	Which type of transform shall we use?
STR mibProfIpsec_RecvAh_Key	1.3.6.1.4.1.529.23.85.1.1.13	DisplayString	read-write	Authentication Key for hashing.
INT mibProfIpsec_RecvAh_ReplayProtection	1.3.6.1.4.1.529.23.85.1.1.14	INTEGER	read-write	Replay Protection enable/disable.
INT mibProfIpsec_SendEsp_Active	1.3.6.1.4.1.529.23.85.1.1.15	INTEGER	read-write	Is this profile active? Yes/No.
INT mibProfIpsec_SendEsp_Spi	1.3.6.1.4.1.529.23.85.1.1.16	INTEGER	read-write	Security Parameters Index
INT mibProfIpsec_SendEsp_Version	1.3.6.1.4.1.529.23.85.1.1.17	INTEGER	read-write	Version of ESP.
INT mibProfIpsec_SendEsp_EspType	1.3.6.1.4.1.529.23.85.1.1.18	INTEGER	read-write	The Type of ESP Transform.
INT mibProfIpsec_SendEsp_IvLen	1.3.6.1.4.1.529.23.85.1.1.19	INTEGER	read-write	Length of Initialization Vector. Ignored for ESP V2 (always 64).
STR mibProfIpsec_SendEsp_Key	1.3.6.1.4.1.529.23.85.1.1.20	DisplayString	read-write	Authentication Key for ESP encryption.
STR mibProfIpsec_SendEsp_Key2	1.3.6.1.4.1.529.23.85.1.1.21	DisplayString	read-write	Authentication Key for ESP encryption (only for 3DES-CBC).
STR mibProfIpsec_SendEsp_Key3	1.3.6.1.4.1.529.23.85.1.1.22	DisplayString	read-write	Authentication Key for ESP encryption (only for 3DES-CBC).
INT mibProfIpsec_SendEsp_AuthType	1.3.6.1.4.1.529.23.85.1.1.23	INTEGER	read-write	Authentication Transform to be used. Valid only for ESP V2.
STR mibProfIpsec_SendEsp_AuthKey	1.3.6.1.4.1.529.23.85.1.1.24	DisplayString	read-write	Authentication Key for hashing. Valid only for ESP V2.
INT mibProfIpsec_SendEsp_ReplayProtection	1.3.6.1.4.1.529.23.85.1.1.25	INTEGER	read-write	Replay Protection enable/disable. Automatically enabled for ESP V2
INT mibProfIpsec_RecvEsp_Active	1.3.6.1.4.1.529.23.85.1.1.26	INTEGER	read-write	Is this profile active? Yes/No.
INT mibProfIpsec_RecvEsp_Spi	1.3.6.1.4.1.529.23.85.1.1.27	INTEGER	read-write	Security Parameters Index
INT mibProfIpsec_RecvEsp_Version	1.3.6.1.4.1.529.23.85.1.1.28	INTEGER	read-write	Version of ESP.
INT mibProfIpsec_RecvEsp_EspType	1.3.6.1.4.1.529.23.85.1.1.29	INTEGER	read-write	The Type of ESP Transform.
INT mibProfIpsec_RecvEsp_IvLen	1.3.6.1.4.1.529.23.85.1.1.30	INTEGER	read-write	Length of Initialization Vector. Ignored for ESP V2 (always 64).
STR mibProfIpsec_RecvEsp_Key	1.3.6.1.4.1.529.23.85.1.1.31	DisplayString	read-write	Authentication Key for ESP encryption.
STR mibProfIpsec_RecvEsp_Key2	1.3.6.1.4.1.529.23.85.1.1.32	DisplayString	read-write	Authentication Key for ESP encryption (only for 3DES-CBC).
STR mibProfIpsec_RecvEsp_Key3	1.3.6.1.4.1.529.23.85.1.1.33	DisplayString	read-write	Authentication Key for ESP encryption (only for 3DES-CBC).
INT mibProfIpsec_RecvEsp_AuthType	1.3.6.1.4.1.529.23.85.1.1.34	INTEGER	read-write	Authentication Transform to be used. Valid only for ESP V2.
STR mibProfIpsec_RecvEsp_AuthKey	1.3.6.1.4.1.529.23.85.1.1.35	DisplayString	read-write	Authentication Key for hashing. Valid only for ESP V2.
INT mibProfIpsec_RecvEsp_ReplayProtection	1.3.6.1.4.1.529.23.85.1.1.36	INTEGER	read-write	Replay Protection enable/disable. Automatically enabled for ESP V2
INT mibProfIpsec_Action_o	1.3.6.1.4.1.529.23.85.1.1.37	INTEGER	read-write
INT mibProfIpsec_PfsMode	1.3.6.1.4.1.529.23.85.1.1.38	INTEGER	read-write	Perfect Forward Secrecy mode.
INT mibProfIpsec_SaLife_TimeLimit	1.3.6.1.4.1.529.23.85.1.1.39	INTEGER	read-write	Lifetime of the SA in seconds. The SA will expire at the end of the lifetime. The value of 0 disables the timer.
INT mibProfIpsec_SaLife_SizeLimit	1.3.6.1.4.1.529.23.85.1.1.40	INTEGER	read-write	Maximum number of kilobytes (KB) covered by the SA before it expires. The value of 0 disables the counter.
INT mibProfIpsec_SaLife_AnticipateRekey	1.3.6.1.4.1.529.23.85.1.1.41	INTEGER	read-write	A percentage of lifetime or lifesize to trigger negotiation of a new SA before the old one expires (a.k.a. soft lifetime).
INT mibProfIpsec_SaLife_LifeNegotiationFallback	1.3.6.1.4.1.529.23.85.1.1.42	INTEGER	read-write	What to do when local policy requires a shorter life than what is proposed by SA initiator. Applies to IPSec SAs only.
INT mibProfIpsec_SaLife_IdleTimeout	1.3.6.1.4.1.529.23.85.1.1.43	INTEGER	read-write	SA lifetime without traffic.
STR mibProfIpsec_Next	1.3.6.1.4.1.529.23.85.1.1.44	DisplayString	read-write	The name of the next IPSec protection suite.

RFC description

Manages IPsec tunnel profiles including encryption, authentication, and replay protection.

Start monitoring Ascend Communications (Lucent) MAX/Pipeline/TNT WAN access equipment (legacy) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ASCEND-MIBIPSEC-MIB

What Is ASCEND-MIBIPSEC-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description