All MIBs › CHECKPOINT-MIB › cpvIpsecAhEncPkts
cpvIpsecAhEncPkts
Module: CHECKPOINT-MIB
OID (symbolic): CHECKPOINT-MIB::cpvIpsecAhEncPkts
OID (numeric): 1.3.6.1.4.1.2620.1.2.5.4.3
Node type: OBJECT-TYPE
Type: DisplayString
Access: read-only
Description: IPsec AH encrypted packets
What is cpvIpsecAhEncPkts?
The desc explicitly states this is the count of IPsec AH encrypted packets, the packet-level mirror of the AH SA counters elsewhere in this MIB. Like the AH SA counters, this stays at zero on the vast majority of modern deployments that use ESP exclusively, so its main value is as a tripwire — any nonzero reading confirms AH traffic is actually being sent, not just that an AH SA merely exists in the configuration. e.g. remains at 0 for a typical ESP-only gateway's entire uptime.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.2620.1.2.5.4.3 snmpwalk -v2c -c public <target> CHECKPOINT-MIB::cpvIpsecAhEncPkts
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.2620.1.2.5.4.3.1 snmpget -v2c -c public <target> CHECKPOINT-MIB::cpvIpsecAhEncPkts.1
Start monitoring Check Point security gateway/firewall appliances with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CHECKPOINT-MIB::cpvIpsecAhEncPkts OID value, configure state conditions and alerts, and monitor any Check Point security gateway/firewall appliances from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.2620 | checkpoint | CHECKPOINT-GAIA-TRAP-MIB |
| 1.3.6.1.4.1.2620.1 | products | CHECKPOINT-GAIA-TRAP-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.2620.1.2 | vpn | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.2.5 | cpvIPsec | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.2.5.4 | cpvIpsecStatistics | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.2.5.4.3 | cpvIpsecAhEncPkts | CHECKPOINT-MIB |