All MIBs › H3C-IPSEC-MONITOR-V2-MIB
Organization: Hangzhou H3C Tech. Co., Ltd.
Last Updated: 2012-06-27
Category: VPN and Security, Vendor: H3C/HH3C
Description: H3C MIB version 2 for enhanced IPsec VPN monitoring with extended security association and tunnel statistics.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is H3C-IPSEC-MONITOR-V2-MIB?
H3C-IPSEC-MONITOR-V2-MIB is an H3C enterprise MIB, version 2, for monitoring IPsec VPN tunnels on H3C routers and security gateways, an enhanced successor to an earlier IPsec monitoring MIB. Per its module description it exposes statistical information for individual IPsec tunnels as well as aggregate statistics across all tunnels. It directly supports monitoring the health of the IPsec VPN software subsystem — tracking whether individual tunnels are established, their negotiated security-association details, and per-tunnel traffic/error counters, which is critical for detecting VPN tunnel flaps or IKE negotiation failures. It is an explicit 'v2' extension of H3C's original IPsec monitoring MIB, and is conceptually parallel to (though not directly built on) the IETF IPSEC-MIB tradition. It's deployed on H3C routers/security gateways/firewalls terminating IPsec VPN tunnels in enterprise WAN or site-to-site VPN deployments. Engineers can download the H3C-IPSEC-MONITOR-V2-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in H3C-IPSEC-MONITOR-V2-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- H3C router/security gateway/firewall terminating IPsec VPN tunnels
Monitoring Examples
No object or table names were provided in sample_objects for this module, so a specific leaf-name example can't be given directly; based on the module description, the expected use is polling per-tunnel security-association state and traffic/error statistics to determine whether a given IPsec tunnel is currently established and passing traffic, or has dropped due to a negotiation failure.
What Can Be Monitored
- per-tunnel IPsec status
- per-tunnel traffic/error statistics
- aggregate tunnel count/statistics
This MIB depends on
Related MIBs
Imported Objects
From HUAWEI-3COM-OID-MIB
| h3cCommon | OBJECT-IDENTITY |
From IF-MIB
| InterfaceIndex |
From INET-ADDRESS-MIB
| InetAddress | |
| InetAddressType |
From RFC1213-MIB
| ifIndex |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| NOTIFICATION-GROUP | |
| OBJECT-GROUP |
From SNMPv2-SMI
| Counter32 | |
| Counter64 | |
| Gauge32 | |
| Integer32 | |
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE | |
| Unsigned32 |
From SNMPv2-TC
| DisplayString | |
| TEXTUAL-CONVENTION | |
| TruthValue |
How to Use in IPNetwork Monitor
Example using h3cIPsecGlobalInOctetsV2 OID:
Select an H3C router/security gateway/firewall (IPsec VPN tunnel stats, v2) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type h3cIPsecGlobalInOctetsV2 into the Find box to locate it in the OID tree, then select it and click OK. The total number of octets received by all current and previous IPsec Phase-2 Tunnels. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| h3cIPsecMonitorV2 | 1.3.6.1.4.1.2011.10.2.126 | The MIB is designed to get statistic information of IPsec tunnels. With this MIB, we can get information of a certain tunnel or all tunnels. | ||
| h3cIPsecObjectsV2 | 1.3.6.1.4.1.2011.10.2.126.1 | |||
| h3cIPsecScalarObjectsV2 | 1.3.6.1.4.1.2011.10.2.126.1.1 | |||
| STR h3cIPsecMIBVersion | 1.3.6.1.4.1.2011.10.2.126.1.1.1 | DisplayString | read-only | Version string of this MIB. |
| h3cIPsecTunnelV2Table | 1.3.6.1.4.1.2011.10.2.126.1.2 | not-accessible | The IPsec Phase-2 Tunnel Table. There is one entry in this table for each active IPsec Phase-2 Tunnel. | |
| h3cIPsecTunnelV2Entry | 1.3.6.1.4.1.2011.10.2.126.1.2.1 | not-accessible | Information about h3cIPsecTunnelV2Table. | |
| I32 h3cIPsecTunIndexV2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.1 | Integer32 | accessible-for-notify | The index of IPsec Phase-2 Tunnel Table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The value of this object will wrap at 2147483647. |
| NUM h3cIPsecTunIfIndexV2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.2 | InterfaceIndex | read-only | The interface index( the ifIndex of ifTable ). |
| I32 h3cIPsecTunIKETunnelIndexV2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.3 | Integer32 | read-only | The index of the associated IPsec Phase-1 IKE Tunnel (IKETunIndex in the IKETunnelTable). 2147483647 is defined as invalid value. |
| H3C h3cIPsecTunIKETunLocalIDTypeV2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.4 | H3cIPsecIDTypeV2 | read-only | The type of the local peer identity for the associated IPsec Phase-1 IKE Tunnel (IKETunLocalType in the IKETunnelTable). |
| STR h3cIPsecTunIKETunLocalIDVal1V2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.5 | DisplayString | read-only | The value of the local peer identity for the associated IPsec Phase-1 IKE Tunnel (IKETunLocalValue1 in the IKETunnelTable). If the local peer type is ipv4Addr/ipv6Addr, this is the IP address used to identify the local peer. If the local peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is the subnet address. If the local peer type is ipv4AddrRange/ipv6AddrRange, this is the beginning IP address of the range. If the local peer type is fqdn/userFqdn, this is the host name used to identify the local peer. If the local peer type is derAsn1Dn, this is the binary DER encoding of an ASN.1 X.500 Distinguished Name [X.501] of the principal whose certificates are being exchanged to establish the SA. If the local peer type is derAsn1Gn, this is the binary DER encoding of an ASN.1 X.500 GeneralName [X.509] of the principal whose certificates are being exchanged to establish the SA. If the local peer type is keyId, this is an opaque byte stream which may be used to pass vendor-specific information necessary to identify which pre-shared key should be used to authenticate Aggressive mode negotiations. |
| STR h3cIPsecTunIKETunLocalIDVal2V2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.6 | DisplayString | read-only | The second specification of the local peer's IP address for the associated IPsec Phase-1 IKE Tunnel (IKETunLocalValue2 in the IKETunnelTable). If the local peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is the subnet mask. If the local peer type is ipv4AddrRange/ipv6AddrRange, this is the ending IP address of the range. If the local peer type is others, this is a zero-length string. |
| H3C h3cIPsecTunIKETunRemoteIDTypeV2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.7 | H3cIPsecIDTypeV2 | read-only | The type of the remote peer identity for the associated IPsec Phase-1 IKE Tunnel (IKETunRemoteType in the IKETunnelTable). |
| STR h3cIPsecTunIKETunRemoteIDVal1V2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.8 | DisplayString | read-only | The value of the remote peer identity for the associated IPsec Phase-1 IKE Tunnel (IKETunRemoteValue1 in the IKETunnelTable). If the remote peer type is ipv4Addr/ipv6Addr, this is the IP address used to identify the remote peer. If the remote peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is the subnet address. If the remote peer type is ipv4AddrRange/ipv6AddrRange, this is the beginning IP address of the range. If the remote peer type is fqdn/userFqdn, this is the host name used to identify the remote peer. If the remote peer type is derAsn1Dn, this is the binary DER encoding of an ASN.1 X.500 Distinguished Name [X.501] of the principal whose certificates are being exchanged to establish the SA. If the remote peer type is derAsn1Gn, this is the binary DER encoding of an ASN.1 X.500 GeneralName [X.509] of the principal whose certificates are being exchanged to establish the SA. If the remote peer type is keyId, this is an opaque byte stream which may be used to pass vendor-specific information necessary to identify which pre-shared key should be used to authenticate Aggressive mode negotiations. |
| STR h3cIPsecTunIKETunRemoteIDVal2V2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.9 | DisplayString | read-only | The second specification of the remote peer's IP address for the associated IPsec Phase-1 IKE Tunnel(IKETunRemoteValue2 in the IKETunnelTable). If the remote peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is the subnet mask. If the remote peer type is ipv4AddrRange/ipv6AddrRange, this is the ending IP address of the range. If the remote peer type is others, this is a zero-length string. |
| IPt h3cIPsecTunLocalAddrTypeV2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.10 | InetAddressType | read-only | The type of the IP address for the local peer of the IPsec Phase-2 Tunnel. |
| IP h3cIPsecTunLocalAddrV2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.11 | InetAddress | read-only | The IP address of the local peer for the IPsec Phase-2 Tunnel. |
| IPt h3cIPsecTunRemoteAddrTypeV2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.12 | InetAddressType | read-only | The type of the IP address for the remote peer of the IPsec Phase-2 Tunnel. |
| IP h3cIPsecTunRemoteAddrV2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.13 | InetAddress | read-only | The IP address of the remote peer for the IPsec Phase-2 Tunnel. |
| H3C h3cIPsecTunKeyTypeV2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.14 | H3cIPsecNegoTypeV2 | read-only | The key negotiate mode used by the IPsec Phase-2 Tunnel. |
| H3C h3cIPsecTunEncapModeV2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.15 | H3cIPsecEncapModeV2 | read-only | The encapsulation mode used by the IPsec Phase-2 Tunnel. |
| INT h3cIPsecTunInitiatorV2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.16 | INTEGER | read-only | The initiator of this IPsec tunnel. Value none is used for manual IPsec tunnel, for there is no initiator or responder in this method. |
| G32 h3cIPsecTunLifeSizeV2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.17 | Gauge32 | read-only | The negotiated LifeSize of the IPsec Phase-2 Tunnel in kilobytes. 0 is defined as invalid value. |
| I32 h3cIPsecTunLifeTimeV2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.18 | Integer32 | read-only | The negotiated LifeTime of the IPsec Phase-2 Tunnel in seconds. 2147483647 is defined as invalid value. |
| I32 h3cIPsecTunRemainTimeV2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.19 | Integer32 | read-only | The remain time of SA in seconds. 2147483647 is defined as invalid value. |
| I32 h3cIPsecTunActiveTimeV2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.20 | Integer32 | read-only | The duration the IPsec Phase-2 Tunnel has been active in hundredths of seconds. 2147483647 is defined as invalid value. |
| G32 h3cIPsecTunRemainSizeV2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.21 | Gauge32 | read-only | The remain LifeSize of SA in kilobytes. 0 is defined as invalid value. |
| C32 h3cIPsecTunTotalRefreshesV2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.22 | Counter32 | read-only | The total number of security association refreshing performed. |
| G32 h3cIPsecTunCurrentSaInstancesV2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.23 | Gauge32 | read-only | The number of security associations which are currently active or expiring. |
| H3C h3cIPsecTunInSaEncryptAlgoV2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.24 | H3cIPsecEncryptAlgoV2 | read-only | The encryption algorithm used by the inbound security association of the IPsec Phase-2 Tunnel. |
| H3C h3cIPsecTunInSaAhAuthAlgoV2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.25 | H3cIPsecAuthAlgoV2 | read-only | The authentication algorithm used by the inbound authentication header (AH) security association of the IPsec Phase-2 Tunnel. |
| H3C h3cIPsecTunInSaEspAuthAlgoV2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.26 | H3cIPsecAuthAlgoV2 | read-only | The authentication algorithm used by the inbound encapsulation security protocol(ESP) security association of the IPsec Phase-2 Tunnel. |
| H3C h3cIPsecTunDiffHellmanGrpV2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.27 | H3cIPsecDiffHellmanGrpV2 | read-only | The Diffie Hellman Group used by the security association of the IPsec Phase-2 Tunnel. |
| H3C h3cIPsecTunOutSaEncryptAlgoV2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.28 | H3cIPsecEncryptAlgoV2 | read-only | The encryption algorithm used by the outbound security association of the IPsec Phase-2 Tunnel. |
| H3C h3cIPsecTunOutSaAhAuthAlgoV2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.29 | H3cIPsecAuthAlgoV2 | read-only | The authentication algorithm used by the outbound authentication header (AH) security association of the IPsec Phase-2 Tunnel. |
| H3C h3cIPsecTunOutSaEspAuthAlgoV2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.30 | H3cIPsecAuthAlgoV2 | read-only | The authentication algorithm used by the outbound encapsulation security protocol(ESP) security association of the IPsec Phase-2 Tunnel. |
| STR h3cIPsecTunPolicyNameV2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.31 | DisplayString | read-only | The policy name used by this IPsec tunnel. |
| I32 h3cIPsecTunPolicyNumV2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.32 | Integer32 | read-only | The sequence number of policy used by this IPsec tunnel. |
| INT h3cIPsecTunStatusV2 | 1.3.6.1.4.1.2011.10.2.126.1.2.1.33 | INTEGER | read-only | The status of the IPsec Tunnel. |
| h3cIPsecTunnelStatV2Table | 1.3.6.1.4.1.2011.10.2.126.1.3 | not-accessible | The IPsec Phase-2 Tunnel Statistics Table. | |
| h3cIPsecTunnelStatV2Entry | 1.3.6.1.4.1.2011.10.2.126.1.3.1 | not-accessible | Information about h3cIPsecTunnelStatV2Table. | |
| C64 h3cIPsecTunInOctetsV2 | 1.3.6.1.4.1.2011.10.2.126.1.3.1.1 | Counter64 | read-only | The total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed. |
| C64 h3cIPsecTunInDecompOctetsV2 | 1.3.6.1.4.1.2011.10.2.126.1.3.1.2 | Counter64 | read-only | The total number of decompressed octets received by this IPsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed. |
| C64 h3cIPsecTunInPktsV2 | 1.3.6.1.4.1.2011.10.2.126.1.3.1.3 | Counter64 | read-only | The total number of packets received by this IPsec Phase-2 Tunnel. |
| C64 h3cIPsecTunInDropPktsV2 | 1.3.6.1.4.1.2011.10.2.126.1.3.1.4 | Counter64 | read-only | The total number of packets dropped during receiving process by this IPsec Phase-2 Tunnel. |
| C64 h3cIPsecTunInReplayDropPktsV2 | 1.3.6.1.4.1.2011.10.2.126.1.3.1.5 | Counter64 | read-only | The total number of packets dropped during receiving process due to Anti-Replay process by this IPsec Phase-2 Tunnel. |
| C64 h3cIPsecTunInAuthFailsV2 | 1.3.6.1.4.1.2011.10.2.126.1.3.1.6 | Counter64 | read-only | The total number of inbound authentication's which ended in failure by this IPsec Phase-2 Tunnel. |
| C64 h3cIPsecTunInDecryptFailsV2 | 1.3.6.1.4.1.2011.10.2.126.1.3.1.7 | Counter64 | read-only | The total number of inbound decryption's which ended in failure by this IPsec Phase-2 Tunnel. |
| C64 h3cIPsecTunOutOctetsV2 | 1.3.6.1.4.1.2011.10.2.126.1.3.1.8 | Counter64 | read-only | The total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed. |
| C64 h3cIPsecTunOutUncompOctetsV2 | 1.3.6.1.4.1.2011.10.2.126.1.3.1.9 | Counter64 | read-only | The total number of uncompressed octets sent by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed. |
| C64 h3cIPsecTunOutPktsV2 | 1.3.6.1.4.1.2011.10.2.126.1.3.1.10 | Counter64 | read-only | The total number of packets sent by this IPsec Phase-2 Tunnel. |
| C64 h3cIPsecTunOutDropPktsV2 | 1.3.6.1.4.1.2011.10.2.126.1.3.1.11 | Counter64 | read-only | The total number of packets dropped during sending process by this IPsec Phase-2 Tunnel. |
| C64 h3cIPsecTunOutEncryptFailsV2 | 1.3.6.1.4.1.2011.10.2.126.1.3.1.12 | Counter64 | read-only | The total number of outbound encryption's which ended in failure by this IPsec Phase-2 Tunnel. |
| C64 h3cIPsecTunNoMemoryDropPktsV2 | 1.3.6.1.4.1.2011.10.2.126.1.3.1.13 | Counter64 | read-only | The total number of packets dropped due to no enough memory by this IPsec Phase-2 Tunnel. |
| C64 h3cIPsecTunQueueFullDropPktsV2 | 1.3.6.1.4.1.2011.10.2.126.1.3.1.14 | Counter64 | read-only | The total number of packets dropped due to queue full by this IPsec Phase-2 Tunnel. |
| C64 h3cIPsecTunInvalidLenDropPktsV2 | 1.3.6.1.4.1.2011.10.2.126.1.3.1.15 | Counter64 | read-only | The total number of packets dropped due to invalid length packet by this IPsec Phase-2 Tunnel. |
| C64 h3cIPsecTunTooLongDropPktsV2 | 1.3.6.1.4.1.2011.10.2.126.1.3.1.16 | Counter64 | read-only | The total number of packets dropped due to too long packet by this IPsec Phase-2 Tunnel. |
| C64 h3cIPsecTunInvalidSaDropPktsV2 | 1.3.6.1.4.1.2011.10.2.126.1.3.1.17 | Counter64 | read-only | The total number of packets dropped due to invalid SA by this IPsec Phase-2 Tunnel. |
| h3cIPsecSaV2Table | 1.3.6.1.4.1.2011.10.2.126.1.4 | not-accessible | The IPsec Phase-2 Security Protection Index Table. This table contains an entry for each active and expiring security association. | |
| h3cIPsecSaV2Entry | 1.3.6.1.4.1.2011.10.2.126.1.4.1 | not-accessible | Information about h3cIPsecSaV2Table. | |
| I32 h3cIPsecSaIndexV2 | 1.3.6.1.4.1.2011.10.2.126.1.4.1.1 | Integer32 | accessible-for-notify | The number of the Sa associated with the Phase-2 Tunnel Table. The value of this index is a number which begins at one and is incremented with each Sa associated with an IPsec Phase-2 Tunnel. The value of this object will wrap at 2,147,483,647. |
| INT h3cIPsecSaDirectionV2 | 1.3.6.1.4.1.2011.10.2.126.1.4.1.2 | INTEGER | read-only | The direction of the SA. |
| U32 h3cIPsecSaSpiValueV2 | 1.3.6.1.4.1.2011.10.2.126.1.4.1.3 | Unsigned32 | read-only | The value of the SPI. |
| H3C h3cIPsecSaSecProtocolV2 | 1.3.6.1.4.1.2011.10.2.126.1.4.1.4 | H3cIPsecSaProtocolV2 | read-only | The security protocol of the SA. |
| H3C h3cIPsecSaEncryptAlgoV2 | 1.3.6.1.4.1.2011.10.2.126.1.4.1.5 | H3cIPsecEncryptAlgoV2 | read-only | The encryption algorithm used by the security association of the IPsec Phase-2 Tunnel. |
| H3C h3cIPsecSaAuthAlgoV2 | 1.3.6.1.4.1.2011.10.2.126.1.4.1.6 | H3cIPsecAuthAlgoV2 | read-only | The authentication algorithm used by the SA. |
| INT h3cIPsecSaStatusV2 | 1.3.6.1.4.1.2011.10.2.126.1.4.1.7 | INTEGER | read-only | The status of the SA. |
| h3cIPsecTrafficV2Table | 1.3.6.1.4.1.2011.10.2.126.1.5 | not-accessible | The IPsec Phase-2 Tunnel Traffic Table. | |
| h3cIPsecTrafficV2Entry | 1.3.6.1.4.1.2011.10.2.126.1.5.1 | not-accessible | Information about h3cIPsecTrafficV2Table. | |
| H3C h3cIPsecTrafficLocalTypeV2 | 1.3.6.1.4.1.2011.10.2.126.1.5.1.1 | H3cIPsecTrafficTypeV2 | read-only | The type of the local peer's traffic. Possible values are: 1) A single IP address 2) An IP address range 3) An IP subnet |
| IPt h3cIPsecTrafficLocalAddr1TypeV2 | 1.3.6.1.4.1.2011.10.2.126.1.5.1.2 | InetAddressType | read-only | The type of the first IP address specification for the local peer's traffic. |
| IP h3cIPsecTrafficLocalAddr1V2 | 1.3.6.1.4.1.2011.10.2.126.1.5.1.3 | InetAddress | read-only | The first IP address specification of the local peer's traffic. If the local peer's traffic type is single IP address, this is the IP address. If the local peer's traffic type is IP subnet, this is the subnet address. If the local peer's traffic type is IP address range, this is the beginning IP address of the range. |
| IPt h3cIPsecTrafficLocalAddr2TypeV2 | 1.3.6.1.4.1.2011.10.2.126.1.5.1.4 | InetAddressType | read-only | The type of the second IP address specification for the local peer's traffic. |
| IP h3cIPsecTrafficLocalAddr2V2 | 1.3.6.1.4.1.2011.10.2.126.1.5.1.5 | InetAddress | read-only | The second IP address specification of the local peer's traffic. If the local peer's traffic type is single IP address, this is the IP address. If the local peer's traffic type is IP subnet, this is the subnet mask. If the local peer's traffic type is IP address range, this is the ending IP address of the range. |
| I32 h3cIPsecTrafficLocalProtocol1V2 | 1.3.6.1.4.1.2011.10.2.126.1.5.1.6 | Integer32 | read-only | The first protocol number specification of the local peer's traffic. If the protocol type of the local peer's traffic is single protocol, this is the protocol number. If the protocol type of the local peer's traffic is protocol range, this is the beginning protocol number of the range. |
| I32 h3cIPsecTrafficLocalProtocol2V2 | 1.3.6.1.4.1.2011.10.2.126.1.5.1.7 | Integer32 | read-only | The second protocol number specification of the local peer's traffic. If the protocol type of the local peer's traffic is single protocol, this is the protocol number. If the protocol type of the local peer's traffic is protocol range, this is the ending protocol number of the range. |
| I32 h3cIPsecTrafficLocalPort1V2 | 1.3.6.1.4.1.2011.10.2.126.1.5.1.8 | Integer32 | read-only | The first port number specification of the local peer's traffic. If the port type of the local peer's traffic is single port, this is the port number. If the port type of the local peer's traffic is port range, this is the beginning port number of the range. |
| I32 h3cIPsecTrafficLocalPort2V2 | 1.3.6.1.4.1.2011.10.2.126.1.5.1.9 | Integer32 | read-only | The second port number specification of the local peer's traffic. If the port type of the local peer's traffic is single port, this is the port number. If the port type of the local peer's traffic is port range, this is the ending port number of the range. |
| H3C h3cIPsecTrafficRemoteTypeV2 | 1.3.6.1.4.1.2011.10.2.126.1.5.1.10 | H3cIPsecTrafficTypeV2 | read-only | The type of the remote peer's traffic. Possible values are: 1) A single IP address 2) An IP address range 3) An IP subnet |
| IPt h3cIPsecTrafficRemAddr1TypeV2 | 1.3.6.1.4.1.2011.10.2.126.1.5.1.11 | InetAddressType | read-only | The type of the first IP address specification for the remote peer's traffic. |
| IP h3cIPsecTrafficRemAddr1V2 | 1.3.6.1.4.1.2011.10.2.126.1.5.1.12 | InetAddress | read-only | The first IP address specification of the remote peer's traffic. If the remote traffic type is single IP address, this is the IP address. If the remote traffic type is IP subnet, this is the subnet address. If the remote traffic type is IP address range, this is the beginning IP address of the range. |
| IPt h3cIPsecTrafficRemAddr2TypeV2 | 1.3.6.1.4.1.2011.10.2.126.1.5.1.13 | InetAddressType | read-only | The type of the second IP address specification for the remote peer's traffic. |
| IP h3cIPsecTrafficRemAddr2V2 | 1.3.6.1.4.1.2011.10.2.126.1.5.1.14 | InetAddress | read-only | The second IP address specification of the remote peer's traffic. If the remote traffic type is single IP address, this is the IP address. If the remote traffic type is IP subnet, this is the subnet mask. If the remote traffic type is IP address range, this is the ending IP address of the range. |
| I32 h3cIPsecTrafficRemoPro1V2 | 1.3.6.1.4.1.2011.10.2.126.1.5.1.15 | Integer32 | read-only | The first protocol number specification of the remote peer's traffic. If the protocol type of the remote peer's traffic is single protocol, this is the protocol number. If the protocol type of the remote peer's traffic is protocol range, this is the beginning protocol number of the range. |
| I32 h3cIPsecTrafficRemoPro2V2 | 1.3.6.1.4.1.2011.10.2.126.1.5.1.16 | Integer32 | read-only | The second protocol number specification of the remote peer's traffic. If the protocol type of the remote peer's traffic is single protocol, this is the protocol number. If the protocol type of the remote peer's traffic is protocol range, this is the ending protocol number of the range. |
| I32 h3cIPsecTrafficRemPort1V2 | 1.3.6.1.4.1.2011.10.2.126.1.5.1.17 | Integer32 | read-only | The first port number specification of the remote peer's traffic. If the port type of the remote peer's traffic is single port, this is the port number. If the port type of the remote peer's traffic is port range, this is the beginning port number of the range. |
| I32 h3cIPsecTrafficRemPort2V2 | 1.3.6.1.4.1.2011.10.2.126.1.5.1.18 | Integer32 | read-only | The second port number specification of the remote peer's traffic. If the port type of the remote peer's traffic is single port, this is the port number. If the port type of the remote peer's traffic is port range, this is the ending port number of the range. |
| h3cIPsecGlobalStatsV2 | 1.3.6.1.4.1.2011.10.2.126.1.6 | |||
| G32 h3cIPsecGlobalActiveTunnelsV2 | 1.3.6.1.4.1.2011.10.2.126.1.6.1 | Gauge32 | read-only | The total number of currently active IPsec Phase-2 Tunnels. |
| G32 h3cIPsecGlobalActiveSasV2 | 1.3.6.1.4.1.2011.10.2.126.1.6.2 | Gauge32 | read-only | The total number of currently active or expiring IPsec Phase-2 SA. |
| C64 h3cIPsecGlobalInOctetsV2Ex | 1.3.6.1.4.1.2011.10.2.126.1.6.3 | Counter64 | read-only | The total number of octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE determining whether or not the packet should be decompressed. |
| C64 h3cIPsecGlobalInDecompOctetsV2 | 1.3.6.1.4.1.2011.10.2.126.1.6.4 | Counter64 | read-only | The total number of decompressed octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER the packet is decompressed. |
| C64 h3cIPsecGlobalInPktsV2 | 1.3.6.1.4.1.2011.10.2.126.1.6.5 | Counter64 | read-only | The total number of packets received by all current and previous IPsec Phase-2 Tunnels. |
| C64 h3cIPsecGlobalInDropsV2 | 1.3.6.1.4.1.2011.10.2.126.1.6.6 | Counter64 | read-only | The total number of packets dropped during receiving process by all current and previous IPsec Phase-2 Tunnels. |
| C64 h3cIPsecGlobalInReplayDropsV2 | 1.3.6.1.4.1.2011.10.2.126.1.6.7 | Counter64 | read-only | The total number of packets dropped during receiving process due to Anti-Replay process by all current and previous IPsec Phase-2 Tunnels. |
| C64 h3cIPsecGlobalInAuthFailsV2 | 1.3.6.1.4.1.2011.10.2.126.1.6.8 | Counter64 | read-only | The total number of inbound authentication's which ended in failure by all current and previous IPsec Phase-2 Tunnels. |
| C64 h3cIPsecGlobalInDecryptFailsV2 | 1.3.6.1.4.1.2011.10.2.126.1.6.9 | Counter64 | read-only | The total number of inbound decryption's which ended in failure by all current and previous IPsec Phase-2 Tunnels. |
| C64 h3cIPsecGlobalOutOctetsV2 | 1.3.6.1.4.1.2011.10.2.126.1.6.10 | Counter64 | read-only | The total number of octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER determining whether or not the packet should be compressed. |
| C64 h3cIPsecGlobalOutUncompOctetsV2 | 1.3.6.1.4.1.2011.10.2.126.1.6.11 | Counter64 | read-only | The total number of uncompressed octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE the packet is compressed. |
| C64 h3cIPsecGlobalOutPktsV2 | 1.3.6.1.4.1.2011.10.2.126.1.6.12 | Counter64 | read-only | The total number of packets sent by all current and previous IPsec Phase-2 Tunnels. |
| C64 h3cIPsecGlobalOutDropsV2 | 1.3.6.1.4.1.2011.10.2.126.1.6.13 | Counter64 | read-only | The total number of packets dropped during sending process by all current and previous IPsec Phase-2 Tunnels. |
| C64 h3cIPsecGlobalOutEncryptFailsV2 | 1.3.6.1.4.1.2011.10.2.126.1.6.14 | Counter64 | read-only | The total number of outbound encryption's which ended in failure by all current and previous IPsec Phase-2 Tunnels. |
| C64 h3cIPsecGlobalNoMemoryDropsV2 | 1.3.6.1.4.1.2011.10.2.126.1.6.15 | Counter64 | read-only | The total number of packets dropped due to no enough memory by all current and previous IPsec Phase-2 Tunnels. |
| C64 h3cIPsecGlobalNoFindSaDropsV2 | 1.3.6.1.4.1.2011.10.2.126.1.6.16 | Counter64 | read-only | The total number of packets dropped due to not find SA by all current and previous IPsec Phase-2 Tunnels. |
| C64 h3cIPsecGlobalQueueFullDropsV2 | 1.3.6.1.4.1.2011.10.2.126.1.6.17 | Counter64 | read-only | The total number of packets dropped due to queue full by all current and previous IPsec Phase-2 Tunnels. |
| C64 h3cIPsecGlobalInvalidLenDropsV2 | 1.3.6.1.4.1.2011.10.2.126.1.6.18 | Counter64 | read-only | The total number of packets dropped due to invalid packet length by all current and previous IPsec Phase-2 Tunnels. |
| C64 h3cIPsecGlobalTooLongDropsV2 | 1.3.6.1.4.1.2011.10.2.126.1.6.19 | Counter64 | read-only | The total number of packets dropped due to too long packet by all current and previous IPsec Phase-2 Tunnels. |
| C64 h3cIPsecGlobalInvalidSaDropsV2 | 1.3.6.1.4.1.2011.10.2.126.1.6.20 | Counter64 | read-only | The total number of packets dropped due to invalid SA by all current and previous IPsec Phase-2 Tunnels. |
| h3cIPsecTrapObjectV2 | 1.3.6.1.4.1.2011.10.2.126.1.7 | |||
| STR h3cIPsecPolicyNameV2 | 1.3.6.1.4.1.2011.10.2.126.1.7.1 | DisplayString | accessible-for-notify | The IPsec policy name with a trap. |
| I32 h3cIPsecPolicySeqNumV2 | 1.3.6.1.4.1.2011.10.2.126.1.7.2 | Integer32 | accessible-for-notify | The IPsec policy sequence number with a trap. |
| I32 h3cIPsecPolicySizeV2 | 1.3.6.1.4.1.2011.10.2.126.1.7.3 | Integer32 | accessible-for-notify | The number of IPsec policies with a trap. |
| h3cIPsecTrapCntlV2 | 1.3.6.1.4.1.2011.10.2.126.1.8 | |||
| T/F h3cIPsecTrapGlobalCntlV2 | 1.3.6.1.4.1.2011.10.2.126.1.8.1 | TruthValue | read-write | Indicates whether all IPsec traps should be generated. |
| T/F h3cIPsecTunnelStartTrapCntlV2 | 1.3.6.1.4.1.2011.10.2.126.1.8.2 | TruthValue | read-write | Indicates whether h3cIPsecTunnelStartV2 traps should be generated. |
| T/F h3cIPsecTunnelStopTrapCntlV2 | 1.3.6.1.4.1.2011.10.2.126.1.8.3 | TruthValue | read-write | Indicates whether h3cIPsecTunnelStopV2 traps should be generated. |
| T/F h3cIPsecNoSaTrapCntlV2 | 1.3.6.1.4.1.2011.10.2.126.1.8.4 | TruthValue | read-write | Indicates whether h3cIPsecNoSaFailureV2 traps should be generated. |
| T/F h3cIPsecAuthFailureTrapCntlV2 | 1.3.6.1.4.1.2011.10.2.126.1.8.5 | TruthValue | read-write | Indicates whether h3cIPsecAuthFailFailureV2 traps should be generated. |
| T/F h3cIPsecEncryFailureTrapCntlV2 | 1.3.6.1.4.1.2011.10.2.126.1.8.6 | TruthValue | read-write | Indicates whether h3cIPsecEncryFailFailureV2 traps should be generated. |
| T/F h3cIPsecDecryFailureTrapCntlV2 | 1.3.6.1.4.1.2011.10.2.126.1.8.7 | TruthValue | read-write | Indicates whether h3cIPsecDecryFailFailureV2 traps should be generated. |
| T/F h3cIPsecInvalidSaTrapCntlV2 | 1.3.6.1.4.1.2011.10.2.126.1.8.8 | TruthValue | read-write | Indicates whether h3cIPsecInvalidSaFailureV2 traps should be generated. |
| T/F h3cIPsecPolicyAddTrapCntlV2 | 1.3.6.1.4.1.2011.10.2.126.1.8.9 | TruthValue | read-write | Indicates whether h3cIPsecPolicyAddV2 traps should be generated. |
| T/F h3cIPsecPolicyDelTrapCntlV2 | 1.3.6.1.4.1.2011.10.2.126.1.8.10 | TruthValue | read-write | Indicates whether h3cIPsecPolicyDelV2 traps should be generated. |
| T/F h3cIPsecPolicyAttachTrapCntlV2 | 1.3.6.1.4.1.2011.10.2.126.1.8.11 | TruthValue | read-write | Indicates whether h3cIPsecPolicyAttachV2 traps should be generated. |
| T/F h3cIPsecPolicyDetachTrapCntlV2 | 1.3.6.1.4.1.2011.10.2.126.1.8.12 | TruthValue | read-write | Indicates whether h3cIPsecPolicyDetachV2 traps should be generated. |
| h3cIPsecTrapV2 | 1.3.6.1.4.1.2011.10.2.126.1.9 | |||
| h3cIPsecNotificationsV2 | 1.3.6.1.4.1.2011.10.2.126.1.9.0 | |||
| NTF h3cIPsecTunnelStartV2 | 1.3.6.1.4.1.2011.10.2.126.1.9.0.1 | This notification is generated when an IPsec Phase-2 Tunnel is created. | ||
| NTF h3cIPsecTunnelStopV2 | 1.3.6.1.4.1.2011.10.2.126.1.9.0.2 | This notification is generated when an IPsec Phase-2 Tunnel is deleted. | ||
| NTF h3cIPsecNoSaFailureV2 | 1.3.6.1.4.1.2011.10.2.126.1.9.0.3 | This notification is generated when an IPsec Phase-2 non-existent SA error occurs. | ||
| NTF h3cIPsecAuthFailFailureV2 | 1.3.6.1.4.1.2011.10.2.126.1.9.0.4 | This notification is generated when the IPsec phase-2 authentication failure occurs. | ||
| NTF h3cIPsecEncryFailFailureV2 | 1.3.6.1.4.1.2011.10.2.126.1.9.0.5 | This notification is generated when the IPsec phase-2 tunnel has an encrypting failure. | ||
| NTF h3cIPsecDecryFailFailureV2 | 1.3.6.1.4.1.2011.10.2.126.1.9.0.6 | This notification is generated when the IPsec phase-2 tunnel has a decrypting failure. | ||
| NTF h3cIPsecInvalidSaFailureV2 | 1.3.6.1.4.1.2011.10.2.126.1.9.0.7 | This notification is generated when the IPsec phase-2 invalid SA failure occurs. | ||
| NTF h3cIPsecPolicyAddV2 | 1.3.6.1.4.1.2011.10.2.126.1.9.0.8 | This notification is generated when an IPsec policy is added. | ||
| NTF h3cIPsecPolicyDelV2 | 1.3.6.1.4.1.2011.10.2.126.1.9.0.9 | This notification is generated when an IPsec policy is deleted. | ||
| NTF h3cIPsecPolicyAttachV2 | 1.3.6.1.4.1.2011.10.2.126.1.9.0.10 | This notification is generated when an IPsec policy is attached with one interface. | ||
| NTF h3cIPsecPolicyDetachV2 | 1.3.6.1.4.1.2011.10.2.126.1.9.0.11 | This notification is generated when an IPsec policy is detached with one interface. | ||
| h3cIPsecConformanceV2 | 1.3.6.1.4.1.2011.10.2.126.2 | |||
| h3cIPsecCompliancesV2 | 1.3.6.1.4.1.2011.10.2.126.2.1 | |||
| h3cIPsecComplianceV2 | 1.3.6.1.4.1.2011.10.2.126.2.1.1 | |||
| h3cIPsecGroupsV2 | 1.3.6.1.4.1.2011.10.2.126.2.2 | |||
| h3cIPsecScalarObjectsGroupV2 | 1.3.6.1.4.1.2011.10.2.126.2.2.1 | The group contains all of scalar objects of the MIB. | ||
| h3cIPsecTunnelTableGroupV2 | 1.3.6.1.4.1.2011.10.2.126.2.2.2 | The group contains the IPsec tunnel's property information. | ||
| h3cIPsecTunnelStatGroupV2 | 1.3.6.1.4.1.2011.10.2.126.2.2.3 | The group contains the IPsec tunnel's statistic information. | ||
| h3cIPsecSaGroupV2 | 1.3.6.1.4.1.2011.10.2.126.2.2.4 | The group contains the SA's property information. | ||
| h3cIPsecTrafficTableGroupV2 | 1.3.6.1.4.1.2011.10.2.126.2.2.5 | The group contains the property information of the data flow protected by IPsec tunnel. | ||
| h3cIPsecGlobalStatsGroupV2 | 1.3.6.1.4.1.2011.10.2.126.2.2.6 | The group contains all of the IPsec tunnel's statistic information. | ||
| h3cIPsecTrapObjectGroupV2 | 1.3.6.1.4.1.2011.10.2.126.2.2.7 | The group contains all of trap objects of IPsec tunnels. | ||
| h3cIPsecTrapCntlGroupV2 | 1.3.6.1.4.1.2011.10.2.126.2.2.8 | The group contains all of trap switches of IPsec tunnels. | ||
| h3cIPsecTrapGroupV2 | 1.3.6.1.4.1.2011.10.2.126.2.2.9 | The group contains all of trap of IPsec tunnels. |
RFC description
Retrieves statistic information and status of IPsec tunnels on H3C network devices.
Start monitoring H3C router/security gateway/firewall (IPsec VPN tunnel stats, v2) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.