All MIBs › ENTERASYS-IPSEC-NOTIFICATION-MIB › etsysIpSecDiscardedPacketEnabled
etsysIpSecDiscardedPacketEnabled
Module: ENTERASYS-IPSEC-NOTIFICATION-MIB
OID (symbolic): ENTERASYS-IPSEC-NOTIFICATION-MIB::etsysIpSecDiscardedPacketEnabled
OID (numeric): 1.3.6.1.4.1.5624.1.2.81.1.0.1
Node type: OBJECT-TYPE
Type: TruthValue
Access: read-write
Description: If this object is set to true (1) a trap will be sent when IPSec discards a packet due to not having a matching SPD cache entry.
What is etsysIpSecDiscardedPacketEnabled?
This TruthValue controls whether the device sends the etsysIpSecDiscardedPacket trap whenever IPSec discards a packet for lacking a matching SPD cache entry, and it defaults to false. Admins enable it to get proactive alerts about IPSec policy mismatches rather than having to notice dropped traffic after the fact. For example, setting this to true(1) on a VPN gateway means any packet arriving without a matching Security Policy Database entry immediately generates a trap the admin can act on.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.5624.1.2.81.1.0.1 snmpwalk -v2c -c public <target> ENTERASYS-IPSEC-NOTIFICATION-MIB::etsysIpSecDiscardedPacketEnabled
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.5624.1.2.81.1.0.1.1 snmpget -v2c -c public <target> ENTERASYS-IPSEC-NOTIFICATION-MIB::etsysIpSecDiscardedPacketEnabled.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.5624.1.2.81.1.0.1.1 s <value>
Start monitoring Enterasys Networks router/Layer 3 switch (legacy, later Extreme Networks) (IPsec VPN endpoint, security event traps) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the ENTERASYS-IPSEC-NOTIFICATION-MIB::etsysIpSecDiscardedPacketEnabled OID value, configure state conditions and alerts, and monitor any Enterasys Networks router/Layer 3 switch (legacy, later Extreme Networks) (IPsec VPN endpoint, security event traps) from a single console.
OID Breakdown
Upper-level ancestors (9 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.5624 | enterasys | ENTERASYS-MIB-NAMES |
| 1.3.6.1.4.1.5624.1 | etsysMibs | ENTERASYS-MIB-NAMES |
| 1.3.6.1.4.1.5624.1.2 | etsysModules | ENTERASYS-MIB-NAMES |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.5624.1.2.81 | etsysIpSecNotificationMIB | ENTERASYS-IPSEC-NOTIFICATION-MIB |
| 1.3.6.1.4.1.5624.1.2.81.1 | etsysIpSecNotificationObjects | ENTERASYS-IPSEC-NOTIFICATION-MIB |
| 1.3.6.1.4.1.5624.1.2.81.1.0 | etsysIpSecConfigBranch | ENTERASYS-IPSEC-NOTIFICATION-MIB |
| 1.3.6.1.4.1.5624.1.2.81.1.0.1 | etsysIpSecDiscardedPacketEnabled | ENTERASYS-IPSEC-NOTIFICATION-MIB |