H3C-IKE-MONITOR-MIB

All MIBs › H3C-IKE-MONITOR-MIB

Organization: Huawei-3COM Technologies Co., Ltd.

Last Updated: 2004-10-26

Category: VPN and Security, Vendor: H3C/HH3C

Description: H3C MIB for monitoring IKE (Internet Key Exchange) phase 1 and phase 2 security association states.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is H3C-IKE-MONITOR-MIB?

H3C-IKE-MONITOR-MIB is an H3C proprietary MIB for monitoring Internet Key Exchange (IKE) security association (SA) state, covering both IKE phase 1 (main/aggressive mode) and phase 2 (quick mode) negotiations used to establish IPsec VPN tunnels. No sample objects were supplied, but the module description confirms it reports statistics for individual or all IKE tunnels/SAs on the device. It functions as a software/security-state monitoring MIB, letting an administrator confirm whether IKE phase 1 and phase 2 SAs are successfully established and remain up, a key indicator of IPsec VPN tunnel health. It is an H3C-proprietary module built around the IETF IKE/IPsec protocol standards (RFC 2409 and successors) though it defines its own object structure rather than reusing an IETF MIB. It is deployed on H3C routers and security gateways terminating IPsec VPN tunnels, and administrators can download the H3C-IKE-MONITOR-MIB file to load it into their MIB browser for this monitoring.

IPNetwork Monitor allows you to monitor SNMP objects defined in H3C-IKE-MONITOR-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

H3C router/security gateway (IPsec VPN)

Monitoring Examples

No sample objects were supplied for this MIB, so specific table or object names cannot be cited. Consistent with its stated purpose, an administrator would poll per-tunnel IKE phase 1/phase 2 SA state and statistics to confirm a VPN tunnel's key exchange remains established, flagging a tunnel whose SA has failed to renegotiate, but the exact objects cannot be confirmed from the available source.

Imported Objects

From HUAWEI-3COM-OID-MIB

h3cCommon

OBJECT-IDENTITY

From RFC1213-MIB

ifIndex

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Counter64
Gauge32
Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

From SNMPv2-TC

DisplayString
TEXTUAL-CONVENTION

How to Use in IPNetwork Monitor

Example using h3cIKEGlobalInOctets OID:

Select an H3C router/security gateway (IKE/IPsec SA monitoring) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type h3cIKEGlobalInOctets into the Find box to locate it in the OID tree, then select it and click OK. The total number of octets received by all currently and previously active IPSec Phase-1 IKE Tunnels. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
h3cIKEMonitor	1.3.6.1.4.1.2011.10.2.30			The MIB is designed to get statistic information of IKE tunnels. With this MIB, we can get information of a certain IKE tunnel or all IKE tunnels
h3cIKEObjects	1.3.6.1.4.1.2011.10.2.30.1
h3cIKETunnelTable	1.3.6.1.4.1.2011.10.2.30.1.1		not-accessible	The IPSec Phase-1 Internet Key Exchange Tunnel Table. There is one entry in this table for each active IPSec Phase-1 IKE Tunnel.
h3cIKETunnelEntry	1.3.6.1.4.1.2011.10.2.30.1.1.1		not-accessible	The entry contains the information about h3cIKETunnelTable, such as negotiate mode, encryption algorithm and authentication algorithm, etc.
I32 h3cIKETunIndex	1.3.6.1.4.1.2011.10.2.30.1.1.1.1	Integer32	not-accessible	The index of the IPSec Phase-1 IKE Tunnel Table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The value of this object will wrap at 2,147,483,647.
H3C h3cIKETunLocalType	1.3.6.1.4.1.2011.10.2.30.1.1.1.2	H3cIKEIDType	read-only	The type of local peer identity.
STR h3cIKETunLocalValue1	1.3.6.1.4.1.2011.10.2.30.1.1.1.3	DisplayString	read-only	The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is a host name, then this is the host name used to identify the local peer. If the local peer type is IP subnet, then this is the value of the subnet. If the local peer type is IP address range, then this is the value of beginning IP address of the range.
STR h3cIKETunLocalValue2	1.3.6.1.4.1.2011.10.2.30.1.1.1.4	DisplayString	read-only	The second specification of local peer's IP address. If the local peer type is single IP address or single name, then this is zero-length. If the local peer type is IP subnet, then this is the value of the subnet mask. If the local peer type is IP address range, then this is the value of ending IP address of the range.
IP h3cIKETunLocalAddr	1.3.6.1.4.1.2011.10.2.30.1.1.1.5	IpAddress	read-only	The IP address of the local endpoint for the IPSec Phase-1 IKE Tunnel.
H3C h3cIKETunRemoteType	1.3.6.1.4.1.2011.10.2.30.1.1.1.6	H3cIKEIDType	read-only	The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. a host name.
STR h3cIKETunRemoteValue1	1.3.6.1.4.1.2011.10.2.30.1.1.1.7	DisplayString	read-only	The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is a host name, then this is the host name used to identify the remote peer. If the remote peer type is IP subnet, then this is the value of the subnet. If the remote peer type is IP address range, then this is the value of beginning IP address of the range.
STR h3cIKETunRemoteValue2	1.3.6.1.4.1.2011.10.2.30.1.1.1.8	DisplayString	read-only	The second specification of remote peer's IP address. If the remote peer type is single IP address or single name, then this is zero-length. If the remote peer type is IP subnet, then this is the value of the subnet mask. If the remote peer type is IP address range, then this is the value of ending IP address of the range.
IP h3cIKETunRemoteAddr	1.3.6.1.4.1.2011.10.2.30.1.1.1.9	IpAddress	read-only	The IP address of the remote peer for the IPSec Phase-1 IKE Tunnel.
INT h3cIKETunInitiator	1.3.6.1.4.1.2011.10.2.30.1.1.1.10	INTEGER	read-only	The initiator of this tunnel.
H3C h3cIKETunNegoMode	1.3.6.1.4.1.2011.10.2.30.1.1.1.11	H3cIKENegoMode	read-only	The negotiation mode of the IPSec Phase-1 IKE Tunnel.
H3C h3cIKETunDiffHellmanGrp	1.3.6.1.4.1.2011.10.2.30.1.1.1.12	H3cDiffHellmanGrp	read-only	The Diffie Hellman Group used in the IPSec Phase-1 IKE negotiations.
H3C h3cIKETunEncryptAlgo	1.3.6.1.4.1.2011.10.2.30.1.1.1.13	H3cEncryptAlgo	read-only	The encryption algorithm used in the IPSec Phase-1 IKE negotiations.
H3C h3cIKETunHashAlgo	1.3.6.1.4.1.2011.10.2.30.1.1.1.14	H3cAuthAlgo	read-only	The hash algorithm used in the IPSec Phase-1 IKE negotiations.
H3C h3cIKETunAuthMethod	1.3.6.1.4.1.2011.10.2.30.1.1.1.15	H3cIKEAuthMethod	read-only	The authentication method used in the IPSec Phase-1 IKE negotiations.
I32 h3cIKETunLifeTime	1.3.6.1.4.1.2011.10.2.30.1.1.1.16	Integer32	read-only	The negotiated LifeTime of the IPSec Phase-1 IKE Tunnel in seconds.
I32 h3cIKETunActiveTime	1.3.6.1.4.1.2011.10.2.30.1.1.1.17	Integer32	read-only	The duration the IPSec Phase-1 IKE tunnel has been active in seconds.
I32 h3cIKETunRemainTime	1.3.6.1.4.1.2011.10.2.30.1.1.1.18	Integer32	read-only	The security association remaining time in seconds.
C32 h3cIKETunTotalRefreshes	1.3.6.1.4.1.2011.10.2.30.1.1.1.19	Counter32	read-only	The total number of security association refreshing performed.
H3C h3cIKETunState	1.3.6.1.4.1.2011.10.2.30.1.1.1.20	H3cIKETunnelState	read-only	The State of IKE Tunnel.
I32 h3cIKETunDpdIntervalTime	1.3.6.1.4.1.2011.10.2.30.1.1.1.21	Integer32	read-only	The time that trigger DPD request. If ipsec message is expected to be sent out and the interval time between current time and the last time receiving peer's IPSec message is bigger than this time, DPD request would be triggered.
I32 h3cIKETunDpdTimeOut	1.3.6.1.4.1.2011.10.2.30.1.1.1.22	Integer32	read-only	The overtime of single DPD request. If DPD requests are refused three times, all security associations related would be deleted.
h3cIKETunnelStatTable	1.3.6.1.4.1.2011.10.2.30.1.2		not-accessible	The IPsec Phase-1 IKE Tunnel Statistic Table.
h3cIKETunnelStatEntry	1.3.6.1.4.1.2011.10.2.30.1.2.1		not-accessible	The entry contains the information of h3cIKETunnelStatTable, such as the number of packets sent and received by the IKE tunnel, etc.
C64 h3cIKETunInOctets	1.3.6.1.4.1.2011.10.2.30.1.2.1.1	Counter64	read-only	The total number of octets received by this IPSec Phase-1 IKE Tunnel.
C64 h3cIKETunInPkts	1.3.6.1.4.1.2011.10.2.30.1.2.1.2	Counter64	read-only	The total number of packets received by this IPSec Phase-1 IKE Tunnel.
C64 h3cIKETunInDropPkts	1.3.6.1.4.1.2011.10.2.30.1.2.1.3	Counter64	read-only	The total number of packets dropped by this IPSec Phase-1 IKE Tunnel during receiving process.
C64 h3cIKETunInP2Exchgs	1.3.6.1.4.1.2011.10.2.30.1.2.1.4	Counter64	read-only	The total number of IPSec Phase-2 exchanges received by this IPSec Phase-1 IKE Tunnel.
C64 h3cIKETunInP2ExchgRejets	1.3.6.1.4.1.2011.10.2.30.1.2.1.5	Counter64	read-only	The total number of IPSec Phase-2 exchanges received and rejected by this IPSec Phase-1 Tunnel.
C64 h3cIKETunInP2SaDelRequests	1.3.6.1.4.1.2011.10.2.30.1.2.1.6	Counter64	read-only	The total number of IPSec Phase-2 security association deleting requests received by this IPSec Phase-1 IKE Tunnel.
C64 h3cIKETunInP1SaDelRequests	1.3.6.1.4.1.2011.10.2.30.1.2.1.7	Counter64	read-only	The total number of IPSec Phase-1 security association deleting requests.
C32 h3cIKETunInNotifys	1.3.6.1.4.1.2011.10.2.30.1.2.1.8	Counter32	read-only	The total number of notifications received by this IPSec Phase-1 IKE Tunnel.
C64 h3cIKETunOutOctets	1.3.6.1.4.1.2011.10.2.30.1.2.1.9	Counter64	read-only	The total number of octets sent by this IPSec Phase-1 IKE Tunnel.
C64 h3cIKETunOutPkts	1.3.6.1.4.1.2011.10.2.30.1.2.1.10	Counter64	read-only	The total number of packets sent by this IPSec Phase-1 IKE Tunnel.
C64 h3cIKETunOutDropPkts	1.3.6.1.4.1.2011.10.2.30.1.2.1.11	Counter64	read-only	The total number of packets dropped by this IPSec Phase-1 IKE Tunnel during sending process.
C64 h3cIKETunOutP2Exchgs	1.3.6.1.4.1.2011.10.2.30.1.2.1.12	Counter64	read-only	The total number of IPSec Phase-2 exchanges sent by this IPSec Phase-1 IKE Tunnel.
C64 h3cIKETunOutP2ExchgRejects	1.3.6.1.4.1.2011.10.2.30.1.2.1.13	Counter64	read-only	The total number of IPSec Phase-2 exchanges sent and rejected by this IPSec Phase-1 IKE Tunnel.
C64 h3cIKETunOutP2SaDelRequests	1.3.6.1.4.1.2011.10.2.30.1.2.1.14	Counter64	read-only	The total number of IPSec Phase-2 security association deleting requests sent by this IPSec Phase-1 IKE Tunnel.
C64 h3cIKETunOutP1SaDelRequests	1.3.6.1.4.1.2011.10.2.30.1.2.1.15	Counter64	read-only	The total number of IPSec Phase-1 security association deleting requests sent by this IPSec Phase-1 IKE Tunnel.
C32 h3cIKETunOutNotifys	1.3.6.1.4.1.2011.10.2.30.1.2.1.16	Counter32	read-only	The total number of notifications sent by this IPSec Phase-1 Tunnel.
h3cIKEGlobalStats	1.3.6.1.4.1.2011.10.2.30.1.3
G32 h3cIKEGlobalActiveTunnels	1.3.6.1.4.1.2011.10.2.30.1.3.1	Gauge32	read-only	The number of currently active IPSec Phase-1 IKE Tunnels.
C64 h3cIKEGlobalInOctetsEx	1.3.6.1.4.1.2011.10.2.30.1.3.2	Counter64	read-only	The total number of octets received by all currently and previously active IPSec Phase-1 IKE Tunnels.
C64 h3cIKEGlobalInPkts	1.3.6.1.4.1.2011.10.2.30.1.3.3	Counter64	read-only	The total number of packets received by all currently and previously active IPSec Phase-1 IKE Tunnels.
C64 h3cIKEGlobalInDropPkts	1.3.6.1.4.1.2011.10.2.30.1.3.4	Counter64	read-only	The total number of packets which were dropped during receiving process by all currently and previously active IPSec Phase-1 IKE Tunnels.
C64 h3cIKEGlobalInP2Exchgs	1.3.6.1.4.1.2011.10.2.30.1.3.5	Counter64	read-only	The total number of IPSec Phase-2 exchanges received by all currently and previously active IPSec Phase-1 IKE Tunnels.
C64 h3cIKEGlobalInP2ExchgRejects	1.3.6.1.4.1.2011.10.2.30.1.3.6	Counter64	read-only	The total number of IPSec Phase-2 exchanges which were received and rejected by all currently and previously active IPSec Phase-1 IKE Tunnels.
C64 h3cIKEGlobalInP2SaDelRequests	1.3.6.1.4.1.2011.10.2.30.1.3.7	Counter64	read-only	The total number of IPSec Phase-2 security association deleting requests received by all currently and previously active IPSec Phase-1 IKE Tunnels.
C32 h3cIKEGlobalInNotifys	1.3.6.1.4.1.2011.10.2.30.1.3.8	Counter32	read-only	The total number of notifications received by all IPSec Phase-1 IKE Tunnels.
C64 h3cIKEGlobalOutOctets	1.3.6.1.4.1.2011.10.2.30.1.3.9	Counter64	read-only	The total number of octets sent by all currently and previously active and IPSec Phase-1 IKE Tunnels.
C64 h3cIKEGlobalOutPkts	1.3.6.1.4.1.2011.10.2.30.1.3.10	Counter64	read-only	The total number of packets sent by all currently and previously active and IPSec Phase-1 Tunnels.
C64 h3cIKEGlobalOutDropPkts	1.3.6.1.4.1.2011.10.2.30.1.3.11	Counter64	read-only	The total number of packets which were dropped during sending process by all currently and previously active IPSec Phase-1 IKE Tunnels.
C64 h3cIKEGlobalOutP2Exchgs	1.3.6.1.4.1.2011.10.2.30.1.3.12	Counter64	read-only	The total number of IPSec Phase-2 exchanges which were sent by all currently and previously active IPSec Phase-1 IKE Tunnels.
C64 h3cIKEGlobalOutP2ExchgRejects	1.3.6.1.4.1.2011.10.2.30.1.3.13	Counter64	read-only	The total number of IPSec Phase-2 exchanges which were sent and rejected by all currently and previously active IPSec Phase-1 IKE Tunnels.
C64 h3cIKEGlobalOutP2SaDelRequests	1.3.6.1.4.1.2011.10.2.30.1.3.14	Counter64	read-only	The total number of IPSec Phase-2 SA deleting requests sent by all currently and previously active IPSec Phase-1 IKE Tunnels.
C32 h3cIKEGlobalOutNotifys	1.3.6.1.4.1.2011.10.2.30.1.3.15	Counter32	read-only	The total number of notifications sent by all active IPSec Phase-1 IKE Tunnels.
C32 h3cIKEGlobalInitTunnels	1.3.6.1.4.1.2011.10.2.30.1.3.16	Counter32	read-only	The total number of IPSec Phase-1 IKE Tunnels which were locally initiated.
C32 h3cIKEGlobalInitTunnelFails	1.3.6.1.4.1.2011.10.2.30.1.3.17	Counter32	read-only	The total number of IPSec Phase-1 IKE Tunnels which were locally initiated and failed to activate.
C32 h3cIKEGlobalRespTunnels	1.3.6.1.4.1.2011.10.2.30.1.3.18	Counter32	read-only	The total number of IPSec Phase-1 IKE Tunnels which were remotely initiated.
C32 h3cIKEGlobalRespTunnelFails	1.3.6.1.4.1.2011.10.2.30.1.3.19	Counter32	read-only	The total number of IPSec Phase-1 IKE Tunnels which were remotely initiated and failed to activate.
C32 h3cIKEGlobalAuthFails	1.3.6.1.4.1.2011.10.2.30.1.3.20	Counter32	read-only	The total number of authentications which ended in failure by all current and previous IPSec Phase-1 IKE Tunnels.
C32 h3cIKEGlobalNoSaFails	1.3.6.1.4.1.2011.10.2.30.1.3.21	Counter32	read-only	The total number of non-existent Security Association in failures which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
C32 h3cIKEGlobalInvalidCookieFails	1.3.6.1.4.1.2011.10.2.30.1.3.22	Counter32	read-only	The total number of invalid cookie in failures which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
C32 h3cIKEGlobalAttrNotSuppFails	1.3.6.1.4.1.2011.10.2.30.1.3.23	Counter32	read-only	The total number of attributes not supported in failures which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
C32 h3cIKEGlobalNoProposalChosenFails	1.3.6.1.4.1.2011.10.2.30.1.3.24	Counter32	read-only	The total number of no proposal chosen in failures which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
C32 h3cIKEGlobalUnsportExchTypeFails	1.3.6.1.4.1.2011.10.2.30.1.3.25	Counter32	read-only	The total number of unsupported exchange type in failures which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
C32 h3cIKEGlobalInvalidIdFails	1.3.6.1.4.1.2011.10.2.30.1.3.26	Counter32	read-only	The total number of invalid id Information in failures which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
C32 h3cIKEGlobalInvalidProFails	1.3.6.1.4.1.2011.10.2.30.1.3.27	Counter32	read-only	The total number of invalid protocol id in failures which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
C32 h3cIKEGlobalCertTypeUnsuppFails	1.3.6.1.4.1.2011.10.2.30.1.3.28	Counter32	read-only	The total number of certificate type unsupported in failures which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
C32 h3cIKEGlobalInvalidCertAuthFails	1.3.6.1.4.1.2011.10.2.30.1.3.29	Counter32	read-only	The total number of failures because of invalid certificate authority which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
C32 h3cIKEGlobalInvalidSignFails	1.3.6.1.4.1.2011.10.2.30.1.3.30	Counter32	read-only	The total number of failures because of the invalid signature which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
C32 h3cIKEGlobalCertUnavailableFails	1.3.6.1.4.1.2011.10.2.30.1.3.31	Counter32	read-only	The total number of certificate unavailable in failures which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
h3cIKETrapObject	1.3.6.1.4.1.2011.10.2.30.1.4
I32 h3cIKEProposalNumber	1.3.6.1.4.1.2011.10.2.30.1.4.1	Integer32	accessible-for-notify	The IKE proposal's number with a trap.
I32 h3cIKEProposalSize	1.3.6.1.4.1.2011.10.2.30.1.4.2	Integer32	accessible-for-notify	The number of IKE proposals with a trap.
STR h3cIKEIdInformation	1.3.6.1.4.1.2011.10.2.30.1.4.3	DisplayString	accessible-for-notify	The id information with a trap.
I32 h3cIKEProtocolNum	1.3.6.1.4.1.2011.10.2.30.1.4.4	Integer32	accessible-for-notify	The protocol number with a trap
STR h3cIKECertInformation	1.3.6.1.4.1.2011.10.2.30.1.4.5	DisplayString	accessible-for-notify	The certificate information with a trap.
h3cIKETrapCntl	1.3.6.1.4.1.2011.10.2.30.1.5
H3C h3cIKETrapGlobalCntl	1.3.6.1.4.1.2011.10.2.30.1.5.1	H3cTrapStatus	read-write	Indicates whether all IKE traps should be generated.
H3C h3cIKETunnelStartTrapCntl	1.3.6.1.4.1.2011.10.2.30.1.5.2	H3cTrapStatus	read-write	Indicates whether h3cIKETunnelStart traps should be generated.
H3C h3cIKETunnelStopTrapCntl	1.3.6.1.4.1.2011.10.2.30.1.5.3	H3cTrapStatus	read-write	Indicates whether h3cIKETunnelStop traps should be generated.
H3C h3cIKENoSaTrapCntl	1.3.6.1.4.1.2011.10.2.30.1.5.4	H3cTrapStatus	read-write	Indicates whether h3cIKENoSaFailure traps should be generated.
H3C h3cIKEEncryFailureTrapCntl	1.3.6.1.4.1.2011.10.2.30.1.5.5	H3cTrapStatus	read-write	Indicates whether h3cIKEEncryFailFailure traps should be generated.
H3C h3cIKEDecryFailureTrapCntl	1.3.6.1.4.1.2011.10.2.30.1.5.6	H3cTrapStatus	read-write	Indicates whether h3cIKEDecryFailFailure traps should be generated.
H3C h3cIKEInvalidProposalTrapCntl	1.3.6.1.4.1.2011.10.2.30.1.5.7	H3cTrapStatus	read-write	Indicates whether h3cIKEInvalidProposalFailure traps should be generated.
H3C h3cIKEAuthFailTrapCntl	1.3.6.1.4.1.2011.10.2.30.1.5.8	H3cTrapStatus	read-write	Indicates whether h3cIKEAuthFailFailure traps should be generated.
H3C h3cIKEInvalidCookieTrapCntl	1.3.6.1.4.1.2011.10.2.30.1.5.9	H3cTrapStatus	read-write	Indicates whether h3cIKEInvalidCookieFailure traps should be generated.
H3C h3cIKEInvalidSpiTrapCntl	1.3.6.1.4.1.2011.10.2.30.1.5.10	H3cTrapStatus	read-write	Indicates whether h3cIKEInvalidSpiFailure traps should be generated.
H3C h3cIKEAttrNotSuppTrapCntl	1.3.6.1.4.1.2011.10.2.30.1.5.11	H3cTrapStatus	read-write	Indicates whether h3cIKEAttrNotSuppFailure traps should be generated.
H3C h3cIKEUnsportExchTypeTrapCntl	1.3.6.1.4.1.2011.10.2.30.1.5.12	H3cTrapStatus	read-write	Indicates whether h3cIKEUnsportExchTypeFailure traps should be generated.
H3C h3cIKEInvalidIdTrapCntl	1.3.6.1.4.1.2011.10.2.30.1.5.13	H3cTrapStatus	read-write	Indicates whether h3cIKEInvalidIdFailure traps should be generated.
H3C h3cIKEInvalidProtocolTrapCntl	1.3.6.1.4.1.2011.10.2.30.1.5.14	H3cTrapStatus	read-write	Indicates whether h3cIKEInvalidProtocolFailure traps should be generated.
H3C h3cIKECertTypeUnsuppTrapCntl	1.3.6.1.4.1.2011.10.2.30.1.5.15	H3cTrapStatus	read-write	Indicates whether h3cIKECertTypeUnsuppFailure traps should be generated.
H3C h3cIKEInvalidCertAuthTrapCntl	1.3.6.1.4.1.2011.10.2.30.1.5.16	H3cTrapStatus	read-write	Indicates whether h3cIKEInvalidCertAuthFailure traps should be generated.
H3C h3cIKEInvalidSignTrapCntl	1.3.6.1.4.1.2011.10.2.30.1.5.17	H3cTrapStatus	read-write	Indicates whether h3cIKEInvalidSignFailure traps should be generated.
H3C h3cIKECertUnavailableTrapCntl	1.3.6.1.4.1.2011.10.2.30.1.5.18	H3cTrapStatus	read-write	Indicates whether h3cIKECertUnavailableFailure traps should be generated.
H3C h3cIKEProposalAddTrapCntl	1.3.6.1.4.1.2011.10.2.30.1.5.19	H3cTrapStatus	read-write	Indicates whether h3cIKEProposalAdd traps should be generated.
H3C h3cIKEProposalDelTrapCntl	1.3.6.1.4.1.2011.10.2.30.1.5.20	H3cTrapStatus	read-write	Indicates whether h3cIKEProposalDel traps should be generated.
h3cIKETrap	1.3.6.1.4.1.2011.10.2.30.1.6
h3cIKENotifications	1.3.6.1.4.1.2011.10.2.30.1.6.1
NTF h3cIKETunnelStart	1.3.6.1.4.1.2011.10.2.30.1.6.1.1			This notification is generated when an IPSec Phase-1 IKE Tunnel is created.
NTF h3cIKETunnelStop	1.3.6.1.4.1.2011.10.2.30.1.6.1.2			This notification is generated when an IPSec Phase-1 IKE Tunnel is deleted.
NTF h3cIKENoSaFailure	1.3.6.1.4.1.2011.10.2.30.1.6.1.3			This notification is generated when the IKE tunnel has a non-existent SA error.
NTF h3cIKEEncryFailFailure	1.3.6.1.4.1.2011.10.2.30.1.6.1.4			This notification is generated when the IKE tunnel has an encrypting failure.
NTF h3cIKEDecryFailFailure	1.3.6.1.4.1.2011.10.2.30.1.6.1.5			This notification is generated when the IKE tunnel has a decrypting failure.
NTF h3cIKEInvalidProposalFailure	1.3.6.1.4.1.2011.10.2.30.1.6.1.6			This notification is generated when the IPSec phase-1 invalid proposal occurs.
NTF h3cIKEAuthFailFailure	1.3.6.1.4.1.2011.10.2.30.1.6.1.7			This notification is generated when the IPSec phase-1 authentication failure occurs.
NTF h3cIKEInvalidCookieFailure	1.3.6.1.4.1.2011.10.2.30.1.6.1.8			This notification is generated when the IPSec phase-1 invalid cookie failure occurs.
NTF h3cIKEAttrNotSuppFailure	1.3.6.1.4.1.2011.10.2.30.1.6.1.9			This notification is generated when the IPSec phase-1 unsupported attribute failure occurs.
NTF h3cIKEUnsportExchTypeFailure	1.3.6.1.4.1.2011.10.2.30.1.6.1.10			This notification is generated when the IPSec phase-1 unsupported exchange type failure occurs.
NTF h3cIKEInvalidIdFailure	1.3.6.1.4.1.2011.10.2.30.1.6.1.11			This notification is generated when the IPSec phase-1 invalid id failure occurs.
NTF h3cIKEInvalidProtocolFailure	1.3.6.1.4.1.2011.10.2.30.1.6.1.12			This notification is generated when the processing for an IPSec Phase-1 IKE Tunnel has a protocol related errors.
NTF h3cIKECertTypeUnsuppFailure	1.3.6.1.4.1.2011.10.2.30.1.6.1.13			This notification is generated when the IPSec phase-1 unsupported certificate type failure occurs.
NTF h3cIKEInvalidCertAuthFailure	1.3.6.1.4.1.2011.10.2.30.1.6.1.14			This notification is generated when the IPSec phase-1 invalid certificate authorization failure occurs.
NTF h3cIKElInvalidSignFailure	1.3.6.1.4.1.2011.10.2.30.1.6.1.15			This notification is generated when the IPSec phase-1 invalid signature failure occurs.
NTF h3cIKECertUnavailableFailure	1.3.6.1.4.1.2011.10.2.30.1.6.1.16			This notification is generated when the IPSec phase-1 certificate unavailable failure occurs.
NTF h3cIKEProposalAdd	1.3.6.1.4.1.2011.10.2.30.1.6.1.17			This notification is generated when an IKE proposal is added.
NTF h3cIKEProposalDel	1.3.6.1.4.1.2011.10.2.30.1.6.1.18			This notification is generated when an IKE proposal is deleted.
h3cIKEConformance	1.3.6.1.4.1.2011.10.2.30.2
h3cIKECompliances	1.3.6.1.4.1.2011.10.2.30.2.1
h3cIKECompliance	1.3.6.1.4.1.2011.10.2.30.2.1.1
h3cIKEGroups	1.3.6.1.4.1.2011.10.2.30.2.2
h3cIKETunnelTableGroup	1.3.6.1.4.1.2011.10.2.30.2.2.1			The group contains the IKE tunnel's property information.
h3cIKETunnelStatTableGroup	1.3.6.1.4.1.2011.10.2.30.2.2.2			The group contains the IKE tunnel's statistic information.
h3cIKEGlobalStatsGroup	1.3.6.1.4.1.2011.10.2.30.2.2.3			The group contains all of the IKE tunnel's statistic information.
h3cIKETrapObjectGroup	1.3.6.1.4.1.2011.10.2.30.2.2.4			The group contains all of trap objects of IKE tunnels.
h3cIKETrapCntlGroup	1.3.6.1.4.1.2011.10.2.30.2.2.5			The group contains all of trap switches of IKE tunnels.
h3cIKETrapGroup	1.3.6.1.4.1.2011.10.2.30.2.2.6			The group contains all of trap of IKE tunnels.

RFC description

H3C vendor-private MIB for IKE (Internet Key Exchange) protocol monitoring and statistics.

Start monitoring H3C router/security gateway (IKE/IPsec SA monitoring) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download H3C-IKE-MONITOR-MIB

What Is H3C-IKE-MONITOR-MIB?

Supported Devices

Monitoring Examples

This MIB depends on

Related MIBs

How to Use in IPNetwork Monitor

RFC description