All MIBs › CHECKPOINT-MIB › cpvIPsecNICTotalDownLoadedSAs
cpvIPsecNICTotalDownLoadedSAs
Module: CHECKPOINT-MIB
OID (symbolic): CHECKPOINT-MIB::cpvIPsecNICTotalDownLoadedSAs
OID (numeric): 1.3.6.1.4.1.2620.1.2.10.1.2
Node type: OBJECT-TYPE
Type: DisplayString
Access: read-only
Description: IPsec NIC: Total downloaded SA's
What is cpvIPsecNICTotalDownLoadedSAs?
This DisplayString is the lifetime count of IPsec Security Associations that have been downloaded (offloaded) onto the dedicated IPsec NIC for hardware processing, per 'IPsec NIC: Total downloaded SA's.' A high total relative to cpvIKETotalSAs indicates most VPN tunnels are successfully getting hardware acceleration rather than staying in software. If this total stays near zero while many IKE SAs are being negotiated, the offload path to the NIC is broken even though tunnels themselves are still coming up (in software).
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.2620.1.2.10.1.2 snmpwalk -v2c -c public <target> CHECKPOINT-MIB::cpvIPsecNICTotalDownLoadedSAs
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.2620.1.2.10.1.2.1 snmpget -v2c -c public <target> CHECKPOINT-MIB::cpvIPsecNICTotalDownLoadedSAs.1
Start monitoring Check Point security gateway/firewall appliances with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CHECKPOINT-MIB::cpvIPsecNICTotalDownLoadedSAs OID value, configure state conditions and alerts, and monitor any Check Point security gateway/firewall appliances from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.2620 | checkpoint | CHECKPOINT-GAIA-TRAP-MIB |
| 1.3.6.1.4.1.2620.1 | products | CHECKPOINT-GAIA-TRAP-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.2620.1.2 | vpn | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.2.10.1 | cpvIPsecNIC | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.2.10.1.2 | cpvIPsecNICTotalDownLoadedSAs | CHECKPOINT-MIB |