All MIBs › ERICSSON-ROUTER-IP-SECURITY-MIB
Organization: Ericsson AB
Last Updated: 2015-01-14
Category: Domain: Security, Vendor: Ericsson
Description: Manages IP security policies, access control lists, and packet filtering on Ericsson routers.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is ERICSSON-ROUTER-IP-SECURITY-MIB?
ERICSSON-ROUTER-IP-SECURITY-MIB is Ericsson's proprietary MIB for managing IPsec functionality on SmartEdge/SM/SSR routers, covering IPsec tunnel configuration, remote peer identification, and security event logging. It exposes tunnel-level objects (identifier, name, type) and event records (date/time, severity, type, probable cause, tunnel-down cause) scoped by address context, giving visibility into both configuration and fault data for VPN tunnels. From a monitoring standpoint it's primarily a software/service-status MIB: eriRouterIpSecTunnelDownCause and the event-severity/probable-cause objects let operators detect tunnel flaps, negotiation failures, or peer unreachability, while eriRouterIpSecNotifications delivers traps for real-time fault alerting. The module is Ericsson-specific and does not formally import IETF IPsec MIBs, though it parallels standard IPsec/ISAKMP monitoring concepts. It's deployed in service-provider or enterprise WAN edges where Ericsson routers terminate site-to-site or remote-access IPsec VPN tunnels that need continuous availability monitoring, which the ERICSSON-ROUTER-IP-SECURITY-MIB MIB provides via SNMP polling and traps.
IPNetwork Monitor allows you to monitor SNMP objects defined in ERICSSON-ROUTER-IP-SECURITY-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Ericsson SmartEdge Multi-service Edge Router (MSER)
- Ericsson Smart Service Router (SSR)
- Ericsson SM Metro Ethernet Service Transport platform
Monitoring Examples
An operator would monitor eriRouterIpSecTunnelIdentifier/eriRouterIpSecTunnelName together with eriRouterIpSecTunnelDownCause to identify why a specific IPsec tunnel dropped, cross-referencing eriRouterIpSecRemoteId and eriRouterIpSecRemoteIdType to confirm which remote peer was involved. Polling eriRouterIpSecEventSeverity and eriRouterIpSecEventProbableCause for recent events surfaces recurring negotiation or authentication failures, and a trap from eriRouterIpSecNotifications tied to eriRouterIpSecLocalAddrContextName pinpoints the affected VRF/context when multiple tunnels share the router.
What Can Be Monitored
- IPsec tunnel identifier/name
- tunnel type
- tunnel-down cause
- security event severity
- security event probable cause
- remote peer identity
Imported Objects
From ERICSSON-ROUTER-SMI
| eriRouterMgmt | OBJECT-IDENTITY |
| IANAItuEventType | |
| IANAItuProbableCause |
From INET-ADDRESS-MIB
| InetAddress | |
| InetAddressType |
From ITU-ALARM-TC-MIB
| ItuPerceivedSeverity |
From SNMP-FRAMEWORK-MIB
| SnmpAdminString |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| NOTIFICATION-GROUP | |
| OBJECT-GROUP |
From SNMPv2-SMI
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE | |
| Unsigned32 |
From SNMPv2-TC
| DateAndTime |
OIDs
RFC description
Defines objects for managing IPsec (IP Security Protocol) on Ericsson routers.
Start monitoring Ericsson SmartEdge/SM/SSR router (Redback Networks heritage) (IPsec tunnel management/fault events) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.