All MIBs › CHECKPOINT-MIB › cpvIpsecEspDecPkts
cpvIpsecEspDecPkts
Module: CHECKPOINT-MIB
OID (symbolic): CHECKPOINT-MIB::cpvIpsecEspDecPkts
OID (numeric): 1.3.6.1.4.1.2620.1.2.5.4.6
Node type: OBJECT-TYPE
Type: DisplayString
Access: read-only
Description: IPsec ESP decrypted packets
What is cpvIpsecEspDecPkts?
The desc explicitly states this is the count of IPsec ESP decrypted packets, the mirror of cpvIpsecEspEncPkts for the inbound direction. Like the other in/out pairs on this gateway, a persistent rate mismatch between this counter and cpvIpsecEspEncPkts is the first thing to check when troubleshooting one-directional VPN traffic loss on a specific tunnel. e.g. a tunnel where cpvIpsecEspEncPkts keeps climbing but cpvIpsecEspDecPkts stays flat would indicate this gateway is sending encrypted traffic into the tunnel but receiving nothing back.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.2620.1.2.5.4.6 snmpwalk -v2c -c public <target> CHECKPOINT-MIB::cpvIpsecEspDecPkts
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.2620.1.2.5.4.6.1 snmpget -v2c -c public <target> CHECKPOINT-MIB::cpvIpsecEspDecPkts.1
Start monitoring Check Point security gateway/firewall appliances with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CHECKPOINT-MIB::cpvIpsecEspDecPkts OID value, configure state conditions and alerts, and monitor any Check Point security gateway/firewall appliances from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.2620 | checkpoint | CHECKPOINT-GAIA-TRAP-MIB |
| 1.3.6.1.4.1.2620.1 | products | CHECKPOINT-GAIA-TRAP-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.2620.1.2 | vpn | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.2.5 | cpvIPsec | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.2.5.4 | cpvIpsecStatistics | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.2.5.4.6 | cpvIpsecEspDecPkts | CHECKPOINT-MIB |