All MIBs › CHECKPOINT-MIB › cpvIPsecNICCurrDownLoadedSAs
cpvIPsecNICCurrDownLoadedSAs
Module: CHECKPOINT-MIB
OID (symbolic): CHECKPOINT-MIB::cpvIPsecNICCurrDownLoadedSAs
OID (numeric): 1.3.6.1.4.1.2620.1.2.10.1.3
Node type: OBJECT-TYPE
Type: DisplayString
Access: read-only
Description: IPsec NIC: Current downloaded SA's
What is cpvIPsecNICCurrDownLoadedSAs?
This DisplayString reports how many Security Associations are currently offloaded to the IPsec NIC right now, per 'IPsec NIC: Current downloaded SA's.' Comparing it live against cpvIKECurrSAs shows what fraction of active VPN tunnels are hardware-accelerated at this moment versus running in software. A gateway with 50 current IKE SAs but only 10 currently downloaded to the NIC would be running 80% of its VPN traffic through the slower CPU path.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.2620.1.2.10.1.3 snmpwalk -v2c -c public <target> CHECKPOINT-MIB::cpvIPsecNICCurrDownLoadedSAs
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.2620.1.2.10.1.3.1 snmpget -v2c -c public <target> CHECKPOINT-MIB::cpvIPsecNICCurrDownLoadedSAs.1
Start monitoring Check Point security gateway/firewall appliances with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CHECKPOINT-MIB::cpvIPsecNICCurrDownLoadedSAs OID value, configure state conditions and alerts, and monitor any Check Point security gateway/firewall appliances from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.2620 | checkpoint | CHECKPOINT-GAIA-TRAP-MIB |
| 1.3.6.1.4.1.2620.1 | products | CHECKPOINT-GAIA-TRAP-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.2620.1.2 | vpn | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.2.10.1 | cpvIPsecNIC | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.2.10.1.3 | cpvIPsecNICCurrDownLoadedSAs | CHECKPOINT-MIB |