EQLIPSEC-MIB

All MIBs › EQLIPSEC-MIB

Organization: EqualLogic Inc.

Last Updated: 2014-03-12

Category: Domain: Security, Domain: Storage, Vendor: Dell/DNOS, Vendor: EqualLogic/Dell

Description: Dell EqualLogic IPsec MIB providing objects for configuring and monitoring IPsec security associations in storage networks.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is EQLIPSEC-MIB?

This is a Dell EqualLogic proprietary MIB for configuring and monitoring IPsec security associations used to protect iSCSI traffic on EqualLogic PS Series storage arrays. It exposes configuration and status data through an IPsec instance table (enable state and row status per instance) and an IPsec policy table describing filter names, IP version, address, and netmask for each policy's traffic selectors. Its monitoring value is primarily security-configuration status, letting administrators confirm which IPsec instances and policies are active and correctly scoped, plus notifications for IPsec-related events, rather than general hardware sensors. No dependency on another standard MIB is indicated; it functions as a self-contained storage-security MIB alongside Dell's broader EqualLogic MIB set. It is deployed in Dell EqualLogic SAN environments where iSCSI traffic must be encrypted/authenticated via IPsec for compliance or security requirements. Engineers can download the EQLIPSEC-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in EQLIPSEC-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Dell EqualLogic PS Series iSCSI storage arrays

Monitoring Examples

An administrator would poll eqlIpsecTable / eqlIpsecEntry to check eqlIpsecEnable and eqlIpsecRowStatus per IPsec instance, confirming a security association is active and not stuck in a notReady or notInService row state after configuration. Checking eqlIpsecPolicyTable / eqlIpsecPolicyEntry with eqlIpsecPolicyFilterAddress and eqlIpsecPolicyFilterNetmaskLen verifies the correct subnet is covered by an IPsec policy, and eqlIpsecNotifications would alert on IPsec negotiation failures affecting SAN traffic protection.

What Can Be Monitored

IPsec instance enable state and row status
IPsec policy filter address/netmask/IP version
IPsec-related notifications

Imported Objects

From EQLGROUP-MIB

eqlGroupId

OBJECT-TYPE

From EQLMEMBER-MIB

eqlMemberIndex

OBJECT-TYPE

From EQLSTORAGEPOOL-MIB

Unsigned64

From EQUALLOGIC-SMI

equalLogic

MODULE-IDENTITY

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMPv2-SMI

Counter64
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE
TimeTicks
Unsigned32
enterprises

From SNMPv2-TC

DateAndTime
DisplayString
RowPointer
RowStatus
StorageType
TimeStamp
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
eqlIpsecCertConfigEntry	1.3.6.1.4.1.12740.22.1.3.1		not-accessible	A definition of a particular certificate.
eqlIpsecCertConfigTable	1.3.6.1.4.1.12740.22.1.3		not-accessible	EqualLogic-Dynamic IPSec certificate configuration Table. This table contains the list of certificates configured.
eqlIpsecCertDisplayEntry	1.3.6.1.4.1.12740.22.1.5.1		not-accessible	Contents of a particular certificate instance for display.
STR eqlIpsecCertDisplayExpiresOn	1.3.6.1.4.1.12740.22.1.5.1.6	SnmpAdminString	read-create	Display string for the field expires on.
INT eqlIpsecCertDisplayFormat	1.3.6.1.4.1.12740.22.1.5.1.10	INTEGER	read-create	The certificate format. x.509 or pkcs12.
STR eqlIpsecCertDisplayIssuedByDName	1.3.6.1.4.1.12740.22.1.5.1.4	SnmpAdminString	read-create	Display string for the field issued by distinguished name.
STR eqlIpsecCertDisplayIssuedOn	1.3.6.1.4.1.12740.22.1.5.1.5	SnmpAdminString	read-create	Display string for the field issued on.
STR eqlIpsecCertDisplayIssuedToDName	1.3.6.1.4.1.12740.22.1.5.1.2	SnmpAdminString	read-create	Display string for the field issued to distinguished name.
INT eqlIpsecCertDisplayLocal	1.3.6.1.4.1.12740.22.1.5.1.9	INTEGER	read-create	Boolean that indicates if this is a localm certificate or not.
STR eqlIpsecCertDisplayMd5Fingerprint	1.3.6.1.4.1.12740.22.1.5.1.8	SnmpAdminString	read-create	Display string for the field MD5 finger print.
STR eqlIpsecCertDisplayName	1.3.6.1.4.1.12740.22.1.5.1.1	SnmpAdminString	read-create	The administrative name for this certificate.
STR eqlIpsecCertDisplaySerialNumber	1.3.6.1.4.1.12740.22.1.5.1.3	SnmpAdminString	read-create	Display string for the field serial number.
STR eqlIpsecCertDisplaySha1Fingerprint	1.3.6.1.4.1.12740.22.1.5.1.7	SnmpAdminString	read-create	Display string for the field SHA1 finger print.
STR eqlIpsecCertDisplaySubAltName	1.3.6.1.4.1.12740.22.1.5.1.11	SnmpAdminString	read-create	Display string for the field MD5 finger print.
eqlIpsecCertDisplayTable	1.3.6.1.4.1.12740.22.1.5		not-accessible	EqualLogic-Dynamic IPSec certificate display Table. This table is used to display certificate details.
STR eqlIpsecCertFileName	1.3.6.1.4.1.12740.22.1.3.1.3	SnmpAdminString	read-create	The certificate file name.
I32 eqlIpsecCertInstanceId	1.3.6.1.4.1.12740.22.1.3.1.1	Integer32	not-accessible	This index identifies the IPSec certificate instance.
STR eqlIpsecCertName	1.3.6.1.4.1.12740.22.1.3.1.2	SnmpAdminString	read-create	The administrative name for this certificate.
STR eqlIpsecCertPassword	1.3.6.1.4.1.12740.22.1.3.1.6	SnmpAdminString	read-create	The password to use for decrypting certificate.
ROW eqlIpsecCertRowStatus	1.3.6.1.4.1.12740.22.1.3.1.7	RowStatus	read-create	This object indicates the conceptual status of this row. This object may not be set to active if the requirements of the spdIpHeadFiltType object are not met. In other words, if the associated value columns needed by a particular test have not been set, then attempting to change this row to an active state will result in an inconsistentValue error. See the spdIpHeadFiltType object description for further details.
INT eqlIpsecCertType	1.3.6.1.4.1.12740.22.1.3.1.4	INTEGER	read-create	The certificate type. Local cert, Root CA cert or intermediate cert.
eqlIpsecConformance	1.3.6.1.4.1.12740.22.3
T/F eqlIpsecEnable	1.3.6.1.4.1.12740.22.1.1.1.2	TruthValue	read-write	This specifies if IPSec is enabled or disbaled. True for enabled and False for disabled.
eqlIpsecEntry	1.3.6.1.4.1.12740.22.1.1.1		not-accessible	An entry (row) containing global IPSec settings.
I32 eqlIpsecInstanceId	1.3.6.1.4.1.12740.22.1.1.1.1	Integer32	not-accessible	This index identifies the IPSec instance. This index should always be 1.
eqlIpsecModule	1.3.6.1.4.1.12740.22			Equallogic Inc. group information Copyright (c) 2002-2010 by Dell, Inc. All rights reserved. This software may not be copied, disclosed, transferred, or used except in accordance with a license granted by Dell, Inc. This software embodies proprietary information and trade secrets of Dell, Inc.
eqlIpsecNotifications	1.3.6.1.4.1.12740.22.2
eqlIpsecObjects	1.3.6.1.4.1.12740.22.1
INT eqlIpsecPeerAuthType	1.3.6.1.4.1.12740.22.1.4.1.3	INTEGER	read-create	The authentication method used with this peer. Pre-shared keys, certificates and manual keys are the options.
INT eqlIpsecPeerCertIdType	1.3.6.1.4.1.12740.22.1.4.1.5	INTEGER	read-write	The identifier type to be used in ID payload. Only applicable if the auth type is certificates.
STR eqlIpsecPeerCertIdValue	1.3.6.1.4.1.12740.22.1.4.1.6	SnmpAdminString	read-write	The pre-shared key to be used during authentication. Only applicable if the auth type is certificates.
eqlIpsecPeerEntry	1.3.6.1.4.1.12740.22.1.4.1		not-accessible	A definition of a particular certificate.
T/F eqlIpsecPeerIkeV2	1.3.6.1.4.1.12740.22.1.4.1.11	TruthValue	read-create	This specifies the IKE version to be used with this peer. If the peer talks the other version, the IPSec session will not be established.
I32 eqlIpsecPeerInstanceId	1.3.6.1.4.1.12740.22.1.4.1.1	Integer32	not-accessible	This index identifies the IPSec policy instance.
INT eqlIpsecPeerManualKeyAuthAlg	1.3.6.1.4.1.12740.22.1.4.1.15	INTEGER	read-create	The authentication algorithm to be used. Only applicable if the auth type is manual keys.
STR eqlIpsecPeerManualKeyAuthKeyIn	1.3.6.1.4.1.12740.22.1.4.1.17	SnmpAdminString	read-create	The authentication key to be used in the inbound direction. Specified as a string. Only applicable if the auth type is manual keys.
STR eqlIpsecPeerManualKeyAuthKeyOut	1.3.6.1.4.1.12740.22.1.4.1.16	SnmpAdminString	read-create	The authentication key to be used in the outbound direction. Specified as a string. Only applicable if the auth type is manual keys.
INT eqlIpsecPeerManualKeyEncAlg	1.3.6.1.4.1.12740.22.1.4.1.12	INTEGER	read-create	The encryption algorithm to be used. Only applicable if the auth type is manual keys.
STR eqlIpsecPeerManualKeyEncKeyIn	1.3.6.1.4.1.12740.22.1.4.1.14	SnmpAdminString	read-create	The encryption key to be used in the inbound direction. Specified as a hex string. Only applicable if the auth type is manual keys.
STR eqlIpsecPeerManualKeyEncKeyOut	1.3.6.1.4.1.12740.22.1.4.1.13	SnmpAdminString	read-create	The encryption key to be used in the outbound direction. Specified as a hex string. Only applicable if the auth type is manual keys.
I32 eqlIpsecPeerManualKeySpiIn	1.3.6.1.4.1.12740.22.1.4.1.19	Integer32	read-create	The SPI to be used in the inbound direction. Only applicable if the auth type is manual keys.
I32 eqlIpsecPeerManualKeySpiOut	1.3.6.1.4.1.12740.22.1.4.1.18	Integer32	read-create	The SPI to be used in the outbound direction. Only applicable if the auth type is manual keys.
STR eqlIpsecPeerName	1.3.6.1.4.1.12740.22.1.4.1.2	SnmpAdminString	read-create	The administrative name for this peer.
T/F eqlIpsecPeerNullEnc	1.3.6.1.4.1.12740.22.1.4.1.7	TruthValue	read-create	This specifies if null encryption is to be used. Only applicable if the auth type is certificates or pre-shared keys.
STR eqlIpsecPeerPreSharedKey	1.3.6.1.4.1.12740.22.1.4.1.4	DisplayString	read-create	The pre-shared key to be used during authentication. It is mandatory that this only contain printable ASCII ASCII characters, meaning each byte must be in the range of 33 to 126.
ROW eqlIpsecPeerRowStatus	1.3.6.1.4.1.12740.22.1.4.1.20	RowStatus	read-create	This object indicates the conceptual status of this row. This object may not be set to active if the requirements of the spdIpHeadFiltType object are not met. In other words, if the associated value columns needed by a particular test have not been set, then attempting to change this row to an active state will result in an inconsistentValue error. See the spdIpHeadFiltType object description for further details.
eqlIpsecPeerTable	1.3.6.1.4.1.12740.22.1.4		not-accessible	EqualLogic-Persistent Storage IPSec peer Table. This table contains the list of peers configured.
IP eqlIpsecPeerTunnelAddress	1.3.6.1.4.1.12740.22.1.4.1.10	InetAddress	read-create	The address of the tunnel remote end This object is only used if tunnelMode is set to True.
IPt eqlIpsecPeerTunnelAddressIPVersion	1.3.6.1.4.1.12740.22.1.4.1.9	InetAddressType	read-create	The Internet Protocol version the addresses are to match against. The value of this property determines the size and format of the spdIpHeadFiltSrcAddressBegin, spdIpHeadFiltSrcAddressEnd, spdIpHeadFiltDstAddressBegin, and spdIpHeadFiltDstAddressEnd objects. Values of unknown, ipv4z, ipv6z and dns are not legal values for this object.
T/F eqlIpsecPeerTunnelMode	1.3.6.1.4.1.12740.22.1.4.1.8	TruthValue	read-create	This specifies if tunnel mode is to be used with this peer.
eqlIpsecPolicyEntry	1.3.6.1.4.1.12740.22.1.2.1		not-accessible	A definition of a particular filter.
INT eqlIpsecPolicyFilterAction	1.3.6.1.4.1.12740.22.1.2.1.11	INTEGER	read-create	The action to be taken on packets matching this rule.
IP eqlIpsecPolicyFilterAddress	1.3.6.1.4.1.12740.22.1.2.1.4	InetAddress	read-create	The starting address of a source address range that the packet must match against for this filter to be considered TRUE. This object is only used if sourceAddress is set in spdIpHeadFiltType.
IPt eqlIpsecPolicyFilterIPVersion	1.3.6.1.4.1.12740.22.1.2.1.3	InetAddressType	read-create	The Internet Protocol version the addresses are to match against. The value of this property determines the size and format of the eqlIpsecPolicyFilterAddress and eqlIpsecPolicyFilterLocalAddress.
IP eqlIpsecPolicyFilterLocalAddress	1.3.6.1.4.1.12740.22.1.2.1.6	InetAddress	read-create	The Local IP Address on the array to bind a policy to. This option is only used when the Peer is of type manual. Can be either a IPv4 or IPV6 address.
I32 eqlIpsecPolicyFilterLocalPort	1.3.6.1.4.1.12740.22.1.2.1.8	Integer32	read-create	The low port of the port range a packet's source must match against. To match, the port number must be greater than or equal to this value. This object is only used if sourcePort is set in spdIpHeadFiltType. The value of 0 for this object is illegal. This object specifies the local port to be used.
STR eqlIpsecPolicyFilterName	1.3.6.1.4.1.12740.22.1.2.1.2	SnmpAdminString	read-create	The administrative name for this filter.
I32 eqlIpsecPolicyFilterNetmaskLen	1.3.6.1.4.1.12740.22.1.2.1.5	Integer32	read-create	The ending address of a source address range to check a packet against, where the starting is specified by the spdIpHeadFiltSrcAddressBegin object. Set this column to the same value as the spdIpHeadFiltSrcAddressBegin column to get an exact single address match. This object is only used if sourceAddress is set in spdIpHeadFiltType.
STR eqlIpsecPolicyFilterPeerName	1.3.6.1.4.1.12740.22.1.2.1.10	SnmpAdminString	read-create	This specifies the name of the peer this policy must be associated with.
I32 eqlIpsecPolicyFilterPort	1.3.6.1.4.1.12740.22.1.2.1.7	Integer32	read-create	The low port of the port range a packet's source must match against. To match, the port number must be greater than or equal to this value. This object is only used if sourcePort is set in spdIpHeadFiltType. The value of 0 for this object is illegal.
I32 eqlIpsecPolicyFilterProtocol	1.3.6.1.4.1.12740.22.1.2.1.9	Integer32	read-create	The protocol number the incoming packet must match against for this filter to be evaluated as true. This object is only used if protocol is set in spdIpHeadFiltType.
ROW eqlIpsecPolicyFilterRowStatus	1.3.6.1.4.1.12740.22.1.2.1.12	RowStatus	read-create	This object indicates the conceptual status of this row. This object may not be set to active if the requirements of the spdIpHeadFiltType object are not met. In other words, if the associated value columns needed by a particular test have not been set, then attempting to change this row to an active state will result in an inconsistentValue error. See the spdIpHeadFiltType object description for further details.
I32 eqlIpsecPolicyInstanceId	1.3.6.1.4.1.12740.22.1.2.1.1	Integer32	not-accessible	This index identifies the IPSec policy instance.
eqlIpsecPolicyTable	1.3.6.1.4.1.12740.22.1.2		not-accessible	EqualLogic-Persistent Storage IPSec Policy Table. This table contains a list of filter definitions.
STR eqlIpsecPrivKeyFileName	1.3.6.1.4.1.12740.22.1.3.1.5	SnmpAdminString	read-create	The private key file name.
ROW eqlIpsecRowStatus	1.3.6.1.4.1.12740.22.1.1.1.3	RowStatus	read-create	This object indicates the conceptual status of this row. This object may not be set to active if the requirements of the spdIpHeadFiltType object are not met. In other words, if the associated value columns needed by a particular test have not been set, then attempting to change this row to an active state will result in an inconsistentValue error. See the spdIpHeadFiltType object description for further details.
INT eqlIpsecSecAssocAuthAlg	1.3.6.1.4.1.12740.22.1.6.1.8	INTEGER	read-create	The authentication algorithm used.
STR eqlIpsecSecAssocAuthKey	1.3.6.1.4.1.12740.22.1.6.1.11	SnmpAdminString	read-create	Display string for the authentication key used in the SA.
IP eqlIpsecSecAssocDstAddress	1.3.6.1.4.1.12740.22.1.6.1.6	InetAddress	read-create	The IP address of the destination endpoint.
IPt eqlIpsecSecAssocDstAddressIPVersion	1.3.6.1.4.1.12740.22.1.6.1.5	InetAddressType	read-create	The IP version of the destination endpoint.
INT eqlIpsecSecAssocEncAlg	1.3.6.1.4.1.12740.22.1.6.1.7	INTEGER	read-create	The encryption algorithm used.
STR eqlIpsecSecAssocEncKey	1.3.6.1.4.1.12740.22.1.6.1.10	SnmpAdminString	read-create	Display string for the encryption key used in the SA.
eqlIpsecSecAssocEntry	1.3.6.1.4.1.12740.22.1.6.1		not-accessible	Contents of a particular SA instance for display.
U32 eqlIpsecSecAssocInstanceIdHigh	1.3.6.1.4.1.12740.22.1.6.1.1	Unsigned32	not-accessible	This index carries the high-order 32-bit of the instance ID that identifies the IPSec security association.
U32 eqlIpsecSecAssocInstanceIdLow	1.3.6.1.4.1.12740.22.1.6.1.2	Unsigned32	not-accessible	This index carries the low-order 32-bit of the instance ID that identifies the IPSec security association.
T/F eqlIpsecSecAssocManual	1.3.6.1.4.1.12740.22.1.6.1.12	TruthValue	read-create	True means SA is from a manual key configured.
I32 eqlIpsecSecAssocSpi	1.3.6.1.4.1.12740.22.1.6.1.9	Integer32	read-create	SPI used in the security association.
IP eqlIpsecSecAssocSrcAddress	1.3.6.1.4.1.12740.22.1.6.1.4	InetAddress	read-create	The IP address of the source endpoint.
IPt eqlIpsecSecAssocSrcAddressIPVersion	1.3.6.1.4.1.12740.22.1.6.1.3	InetAddressType	read-create	The IP version of the source endpoint.
eqlIpsecSecAssocTable	1.3.6.1.4.1.12740.22.1.6		not-accessible	EqualLogic-Dynamic IPSec security association Table. This table is used to display the security association details.
IP eqlIpsecStaleSecAssocDeleteDestAddress	1.3.6.1.4.1.12740.22.1.7.1.3	InetAddress	read-create	The destination address of the security associations to delete.
IPt eqlIpsecStaleSecAssocDeleteDestAddressIPVersion	1.3.6.1.4.1.12740.22.1.7.1.2	InetAddressType	read-create	The IP version of the destination address of the security associations to delete.
eqlIpsecStaleSecAssocDeleteEntry	1.3.6.1.4.1.12740.22.1.7.1		not-accessible	Contents of a particular SA instance for delete.
I32 eqlIpsecStaleSecAssocDeleteInstanceId	1.3.6.1.4.1.12740.22.1.7.1.1	Integer32	not-accessible	This index identifies the IPSec stale SA delete instance.
ROW eqlIpsecStaleSecAssocDeleteRowStatus	1.3.6.1.4.1.12740.22.1.7.1.4	RowStatus	read-create	This object indicates the conceptual status of this row.
eqlIpsecStaleSecAssocDeleteTable	1.3.6.1.4.1.12740.22.1.7		not-accessible	EqualLogic-Dynamic IPSec stale security association delete Table. This table is used to indicate the destination address and type of all security associations to delete.
eqlIpsecTable	1.3.6.1.4.1.12740.22.1.1		not-accessible	EqualLogic-Persistent Storage IPSec global settings This table contains global IPSec settings.

RFC description

Manages IPsec configurations on EqualLogic storage arrays for secure data transmission and encryption.

Start monitoring Dell EqualLogic PS-series iSCSI SAN storage array (IPsec security for iSCSI) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download EQLIPSEC-MIB

What Is EQLIPSEC-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description