HH3C-IKE-MONITOR-MIB

All MIBs › HH3C-IKE-MONITOR-MIB

Organization: Hangzhou H3C Tech. Co., Ltd.

Last Updated: 2004-10-26

Category: Domain: Security, VPN and Security, Vendor: H3C/HH3C

Description: Monitors IKE (Internet Key Exchange) phase-1 and phase-2 SA negotiations and statistics on H3C VPN gateways.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HH3C-IKE-MONITOR-MIB?

HH3C-IKE-MONITOR-MIB is designed to expose statistical information about IKE (Internet Key Exchange) tunnels — the negotiation protocol underlying IPsec VPNs — on H3C VPN gateways, per its module description, allowing retrieval of stats for a specific IKE tunnel or all tunnels. As an IKE monitoring MIB it would typically expose per-tunnel or aggregate counters for phase-1/phase-2 SA negotiations, successes, and failures, reflecting the software/protocol health of VPN tunnel establishment rather than physical hardware. Monitoring would center on tunnel counts and negotiation success/failure rates to detect VPN instability or peers failing to establish IKE SAs. It builds directly on the IETF IKE/IPsec standards referenced in its purpose. It is deployed on H3C VPN gateways/firewalls terminating IPsec tunnels in enterprise or service-provider WAN environments; no object names were included in the source data, so specifics cannot be confirmed beyond the description. Network engineers evaluating or troubleshooting this functionality can download the HH3C-IKE-MONITOR-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HH3C-IKE-MONITOR-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

H3C VPN gateways/firewalls

Monitoring Examples

No sample objects were provided for this MIB, so a concrete scenario naming real objects cannot be constructed. Based on the description, an admin would typically poll per-tunnel or aggregate IKE SA statistics to confirm VPN tunnels are negotiating successfully.

What Can Be Monitored

IKE tunnel count
IKE SA negotiation statistics

Imported Objects

From HH3C-OID-MIB

hh3cCommon

OBJECT-IDENTITY

From RFC1213-MIB

ifIndex

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Counter64
Gauge32
Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

From SNMPv2-TC

DisplayString
TEXTUAL-CONVENTION

How to Use in IPNetwork Monitor

Example using hh3cIKEGlobalInOctets OID:

Select an H3C VPN gateway/firewall (IKE tunnel statistics) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hh3cIKEGlobalInOctets into the Find box to locate it in the OID tree, then select it and click OK. The total number of octets received by all currently and previously active IPSec Phase-1 IKE Tunnels. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
hh3cIKEMonitor	1.3.6.1.4.1.25506.2.30			The MIB is designed to get statistic information of IKE tunnels. With this MIB, we can get information of a certain IKE tunnel or all IKE tunnels
hh3cIKEObjects	1.3.6.1.4.1.25506.2.30.1
hh3cIKETunnelTable	1.3.6.1.4.1.25506.2.30.1.1		not-accessible	The IPSec Phase-1 Internet Key Exchange Tunnel Table. There is one entry in this table for each active IPSec Phase-1 IKE Tunnel.
hh3cIKETunnelEntry	1.3.6.1.4.1.25506.2.30.1.1.1		not-accessible	The entry contains the information about hh3cIKETunnelTable, such as negotiate mode, encryption algorithm and authentication algorithm, etc.
I32 hh3cIKETunIndex	1.3.6.1.4.1.25506.2.30.1.1.1.1	Integer32	not-accessible	The index of the IPSec Phase-1 IKE Tunnel Table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The value of this object will wrap at 2,147,483,647.
HH3 hh3cIKETunLocalType	1.3.6.1.4.1.25506.2.30.1.1.1.2	Hh3cIKEIDType	read-only	The type of local peer identity.
STR hh3cIKETunLocalValue1	1.3.6.1.4.1.25506.2.30.1.1.1.3	DisplayString	read-only	The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is a host name, then this is the host name used to identify the local peer. If the local peer type is IP subnet, then this is the value of the subnet. If the local peer type is IP address range, then this is the value of beginning IP address of the range.
STR hh3cIKETunLocalValue2	1.3.6.1.4.1.25506.2.30.1.1.1.4	DisplayString	read-only	The second specification of local peer's IP address. If the local peer type is single IP address or single name, then this is zero-length. If the local peer type is IP subnet, then this is the value of the subnet mask. If the local peer type is IP address range, then this is the value of ending IP address of the range.
IP hh3cIKETunLocalAddr	1.3.6.1.4.1.25506.2.30.1.1.1.5	IpAddress	read-only	The IP address of the local endpoint for the IPSec Phase-1 IKE Tunnel.
HH3 hh3cIKETunRemoteType	1.3.6.1.4.1.25506.2.30.1.1.1.6	Hh3cIKEIDType	read-only	The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. a host name.
STR hh3cIKETunRemoteValue1	1.3.6.1.4.1.25506.2.30.1.1.1.7	DisplayString	read-only	The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is a host name, then this is the host name used to identify the remote peer. If the remote peer type is IP subnet, then this is the value of the subnet. If the remote peer type is IP address range, then this is the value of beginning IP address of the range.
STR hh3cIKETunRemoteValue2	1.3.6.1.4.1.25506.2.30.1.1.1.8	DisplayString	read-only	The second specification of remote peer's IP address. If the remote peer type is single IP address or single name, then this is zero-length. If the remote peer type is IP subnet, then this is the value of the subnet mask. If the remote peer type is IP address range, then this is the value of ending IP address of the range.
IP hh3cIKETunRemoteAddr	1.3.6.1.4.1.25506.2.30.1.1.1.9	IpAddress	read-only	The IP address of the remote peer for the IPSec Phase-1 IKE Tunnel.
INT hh3cIKETunInitiator	1.3.6.1.4.1.25506.2.30.1.1.1.10	INTEGER	read-only	The initiator of this tunnel.
HH3 hh3cIKETunNegoMode	1.3.6.1.4.1.25506.2.30.1.1.1.11	Hh3cIKENegoMode	read-only	The negotiation mode of the IPSec Phase-1 IKE Tunnel.
HH3 hh3cIKETunDiffHellmanGrp	1.3.6.1.4.1.25506.2.30.1.1.1.12	Hh3cDiffHellmanGrp	read-only	The Diffie Hellman Group used in the IPSec Phase-1 IKE negotiations.
HH3 hh3cIKETunEncryptAlgo	1.3.6.1.4.1.25506.2.30.1.1.1.13	Hh3cEncryptAlgo	read-only	The encryption algorithm used in the IPSec Phase-1 IKE negotiations.
HH3 hh3cIKETunHashAlgo	1.3.6.1.4.1.25506.2.30.1.1.1.14	Hh3cAuthAlgo	read-only	The hash algorithm used in the IPSec Phase-1 IKE negotiations.
HH3 hh3cIKETunAuthMethod	1.3.6.1.4.1.25506.2.30.1.1.1.15	Hh3cIKEAuthMethod	read-only	The authentication method used in the IPSec Phase-1 IKE negotiations.
I32 hh3cIKETunLifeTime	1.3.6.1.4.1.25506.2.30.1.1.1.16	Integer32	read-only	The negotiated LifeTime of the IPSec Phase-1 IKE Tunnel in seconds.
I32 hh3cIKETunActiveTime	1.3.6.1.4.1.25506.2.30.1.1.1.17	Integer32	read-only	The duration the IPSec Phase-1 IKE tunnel has been active in seconds.
I32 hh3cIKETunRemainTime	1.3.6.1.4.1.25506.2.30.1.1.1.18	Integer32	read-only	The security association remaining time in seconds.
C32 hh3cIKETunTotalRefreshes	1.3.6.1.4.1.25506.2.30.1.1.1.19	Counter32	read-only	The total number of security association refreshing performed.
HH3 hh3cIKETunState	1.3.6.1.4.1.25506.2.30.1.1.1.20	Hh3cIKETunnelState	read-only	The State of IKE Tunnel.
I32 hh3cIKETunDpdIntervalTime	1.3.6.1.4.1.25506.2.30.1.1.1.21	Integer32	read-only	The time that trigger DPD request. If ipsec message is expected to be sent out and the interval time between current time and the last time receiving peer's IPSec message is bigger than this time, DPD request would be triggered.
I32 hh3cIKETunDpdTimeOut	1.3.6.1.4.1.25506.2.30.1.1.1.22	Integer32	read-only	The overtime of single DPD request. If DPD requests are refused three times, all security associations related would be deleted.
hh3cIKETunnelStatTable	1.3.6.1.4.1.25506.2.30.1.2		not-accessible	The IPsec Phase-1 IKE Tunnel Statistic Table.
hh3cIKETunnelStatEntry	1.3.6.1.4.1.25506.2.30.1.2.1		not-accessible	The entry contains the information of hh3cIKETunnelStatTable, such as the number of packets sent and received by the IKE tunnel, etc.
C64 hh3cIKETunInOctets	1.3.6.1.4.1.25506.2.30.1.2.1.1	Counter64	read-only	The total number of octets received by this IPSec Phase-1 IKE Tunnel.
C64 hh3cIKETunInPkts	1.3.6.1.4.1.25506.2.30.1.2.1.2	Counter64	read-only	The total number of packets received by this IPSec Phase-1 IKE Tunnel.
C64 hh3cIKETunInDropPkts	1.3.6.1.4.1.25506.2.30.1.2.1.3	Counter64	read-only	The total number of packets dropped by this IPSec Phase-1 IKE Tunnel during receiving process.
C64 hh3cIKETunInP2Exchgs	1.3.6.1.4.1.25506.2.30.1.2.1.4	Counter64	read-only	The total number of IPSec Phase-2 exchanges received by this IPSec Phase-1 IKE Tunnel.
C64 hh3cIKETunInP2ExchgRejets	1.3.6.1.4.1.25506.2.30.1.2.1.5	Counter64	read-only	The total number of IPSec Phase-2 exchanges received and rejected by this IPSec Phase-1 Tunnel.
C64 hh3cIKETunInP2SaDelRequests	1.3.6.1.4.1.25506.2.30.1.2.1.6	Counter64	read-only	The total number of IPSec Phase-2 security association deleting requests received by this IPSec Phase-1 IKE Tunnel.
C64 hh3cIKETunInP1SaDelRequests	1.3.6.1.4.1.25506.2.30.1.2.1.7	Counter64	read-only	The total number of IPSec Phase-1 security association deleting requests.
C32 hh3cIKETunInNotifys	1.3.6.1.4.1.25506.2.30.1.2.1.8	Counter32	read-only	The total number of notifications received by this IPSec Phase-1 IKE Tunnel.
C64 hh3cIKETunOutOctets	1.3.6.1.4.1.25506.2.30.1.2.1.9	Counter64	read-only	The total number of octets sent by this IPSec Phase-1 IKE Tunnel.
C64 hh3cIKETunOutPkts	1.3.6.1.4.1.25506.2.30.1.2.1.10	Counter64	read-only	The total number of packets sent by this IPSec Phase-1 IKE Tunnel.
C64 hh3cIKETunOutDropPkts	1.3.6.1.4.1.25506.2.30.1.2.1.11	Counter64	read-only	The total number of packets dropped by this IPSec Phase-1 IKE Tunnel during sending process.
C64 hh3cIKETunOutP2Exchgs	1.3.6.1.4.1.25506.2.30.1.2.1.12	Counter64	read-only	The total number of IPSec Phase-2 exchanges sent by this IPSec Phase-1 IKE Tunnel.
C64 hh3cIKETunOutP2ExchgRejects	1.3.6.1.4.1.25506.2.30.1.2.1.13	Counter64	read-only	The total number of IPSec Phase-2 exchanges sent and rejected by this IPSec Phase-1 IKE Tunnel.
C64 hh3cIKETunOutP2SaDelRequests	1.3.6.1.4.1.25506.2.30.1.2.1.14	Counter64	read-only	The total number of IPSec Phase-2 security association deleting requests sent by this IPSec Phase-1 IKE Tunnel.
C64 hh3cIKETunOutP1SaDelRequests	1.3.6.1.4.1.25506.2.30.1.2.1.15	Counter64	read-only	The total number of IPSec Phase-1 security association deleting requests sent by this IPSec Phase-1 IKE Tunnel.
C32 hh3cIKETunOutNotifys	1.3.6.1.4.1.25506.2.30.1.2.1.16	Counter32	read-only	The total number of notifications sent by this IPSec Phase-1 Tunnel.
hh3cIKEGlobalStats	1.3.6.1.4.1.25506.2.30.1.3
G32 hh3cIKEGlobalActiveTunnels	1.3.6.1.4.1.25506.2.30.1.3.1	Gauge32	read-only	The number of currently active IPSec Phase-1 IKE Tunnels.
C64 hh3cIKEGlobalInOctetsEx	1.3.6.1.4.1.25506.2.30.1.3.2	Counter64	read-only	The total number of octets received by all currently and previously active IPSec Phase-1 IKE Tunnels.
C64 hh3cIKEGlobalInPkts	1.3.6.1.4.1.25506.2.30.1.3.3	Counter64	read-only	The total number of packets received by all currently and previously active IPSec Phase-1 IKE Tunnels.
C64 hh3cIKEGlobalInDropPkts	1.3.6.1.4.1.25506.2.30.1.3.4	Counter64	read-only	The total number of packets which were dropped during receiving process by all currently and previously active IPSec Phase-1 IKE Tunnels.
C64 hh3cIKEGlobalInP2Exchgs	1.3.6.1.4.1.25506.2.30.1.3.5	Counter64	read-only	The total number of IPSec Phase-2 exchanges received by all currently and previously active IPSec Phase-1 IKE Tunnels.
C64 hh3cIKEGlobalInP2ExchgRejects	1.3.6.1.4.1.25506.2.30.1.3.6	Counter64	read-only	The total number of IPSec Phase-2 exchanges which were received and rejected by all currently and previously active IPSec Phase-1 IKE Tunnels.
C64 hh3cIKEGlobalInP2SaDelRequests	1.3.6.1.4.1.25506.2.30.1.3.7	Counter64	read-only	The total number of IPSec Phase-2 security association deleting requests received by all currently and previously active IPSec Phase-1 IKE Tunnels.
C32 hh3cIKEGlobalInNotifys	1.3.6.1.4.1.25506.2.30.1.3.8	Counter32	read-only	The total number of notifications received by all IPSec Phase-1 IKE Tunnels.
C64 hh3cIKEGlobalOutOctets	1.3.6.1.4.1.25506.2.30.1.3.9	Counter64	read-only	The total number of octets sent by all currently and previously active and IPSec Phase-1 IKE Tunnels.
C64 hh3cIKEGlobalOutPkts	1.3.6.1.4.1.25506.2.30.1.3.10	Counter64	read-only	The total number of packets sent by all currently and previously active and IPSec Phase-1 Tunnels.
C64 hh3cIKEGlobalOutDropPkts	1.3.6.1.4.1.25506.2.30.1.3.11	Counter64	read-only	The total number of packets which were dropped during sending process by all currently and previously active IPSec Phase-1 IKE Tunnels.
C64 hh3cIKEGlobalOutP2Exchgs	1.3.6.1.4.1.25506.2.30.1.3.12	Counter64	read-only	The total number of IPSec Phase-2 exchanges which were sent by all currently and previously active IPSec Phase-1 IKE Tunnels.
C64 hh3cIKEGlobalOutP2ExchgRejects	1.3.6.1.4.1.25506.2.30.1.3.13	Counter64	read-only	The total number of IPSec Phase-2 exchanges which were sent and rejected by all currently and previously active IPSec Phase-1 IKE Tunnels.
C64 hh3cIKEGlobalOutP2SaDelRequests	1.3.6.1.4.1.25506.2.30.1.3.14	Counter64	read-only	The total number of IPSec Phase-2 SA deleting requests sent by all currently and previously active IPSec Phase-1 IKE Tunnels.
C32 hh3cIKEGlobalOutNotifys	1.3.6.1.4.1.25506.2.30.1.3.15	Counter32	read-only	The total number of notifications sent by all active IPSec Phase-1 IKE Tunnels.
C32 hh3cIKEGlobalInitTunnels	1.3.6.1.4.1.25506.2.30.1.3.16	Counter32	read-only	The total number of IPSec Phase-1 IKE Tunnels which were locally initiated.
C32 hh3cIKEGlobalInitTunnelFails	1.3.6.1.4.1.25506.2.30.1.3.17	Counter32	read-only	The total number of IPSec Phase-1 IKE Tunnels which were locally initiated and failed to activate.
C32 hh3cIKEGlobalRespTunnels	1.3.6.1.4.1.25506.2.30.1.3.18	Counter32	read-only	The total number of IPSec Phase-1 IKE Tunnels which were remotely initiated.
C32 hh3cIKEGlobalRespTunnelFails	1.3.6.1.4.1.25506.2.30.1.3.19	Counter32	read-only	The total number of IPSec Phase-1 IKE Tunnels which were remotely initiated and failed to activate.
C32 hh3cIKEGlobalAuthFails	1.3.6.1.4.1.25506.2.30.1.3.20	Counter32	read-only	The total number of authentications which ended in failure by all current and previous IPSec Phase-1 IKE Tunnels.
C32 hh3cIKEGlobalNoSaFails	1.3.6.1.4.1.25506.2.30.1.3.21	Counter32	read-only	The total number of non-existent Security Association in failures which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
C32 hh3cIKEGlobalInvalidCookieFails	1.3.6.1.4.1.25506.2.30.1.3.22	Counter32	read-only	The total number of invalid cookie in failures which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
C32 hh3cIKEGlobalAttrNotSuppFails	1.3.6.1.4.1.25506.2.30.1.3.23	Counter32	read-only	The total number of attributes not supported in failures which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
C32 hh3cIKEGlobalNoProposalChosenFails	1.3.6.1.4.1.25506.2.30.1.3.24	Counter32	read-only	The total number of no proposal chosen in failures which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
C32 hh3cIKEGlobalUnsportExchTypeFails	1.3.6.1.4.1.25506.2.30.1.3.25	Counter32	read-only	The total number of unsupported exchange type in failures which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
C32 hh3cIKEGlobalInvalidIdFails	1.3.6.1.4.1.25506.2.30.1.3.26	Counter32	read-only	The total number of invalid id Information in failures which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
C32 hh3cIKEGlobalInvalidProFails	1.3.6.1.4.1.25506.2.30.1.3.27	Counter32	read-only	The total number of invalid protocol id in failures which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
C32 hh3cIKEGlobalCertTypeUnsuppFails	1.3.6.1.4.1.25506.2.30.1.3.28	Counter32	read-only	The total number of certificate type unsupported in failures which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
C32 hh3cIKEGlobalInvalidCertAuthFails	1.3.6.1.4.1.25506.2.30.1.3.29	Counter32	read-only	The total number of failures because of invalid certificate authority which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
C32 hh3cIKEGlobalInvalidSignFails	1.3.6.1.4.1.25506.2.30.1.3.30	Counter32	read-only	The total number of failures because of the invalid signature which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
C32 hh3cIKEGlobalCertUnavailableFails	1.3.6.1.4.1.25506.2.30.1.3.31	Counter32	read-only	The total number of certificate unavailable in failures which occurred during processing of all current and previous IPSec Phase-1 IKE Tunnels.
hh3cIKETrapObject	1.3.6.1.4.1.25506.2.30.1.4
I32 hh3cIKEProposalNumber	1.3.6.1.4.1.25506.2.30.1.4.1	Integer32	accessible-for-notify	The IKE proposal's number with a trap.
I32 hh3cIKEProposalSize	1.3.6.1.4.1.25506.2.30.1.4.2	Integer32	accessible-for-notify	The number of IKE proposals with a trap.
STR hh3cIKEIdInformation	1.3.6.1.4.1.25506.2.30.1.4.3	DisplayString	accessible-for-notify	The id information with a trap.
I32 hh3cIKEProtocolNum	1.3.6.1.4.1.25506.2.30.1.4.4	Integer32	accessible-for-notify	The protocol number with a trap
STR hh3cIKECertInformation	1.3.6.1.4.1.25506.2.30.1.4.5	DisplayString	accessible-for-notify	The certificate information with a trap.
hh3cIKETrapCntl	1.3.6.1.4.1.25506.2.30.1.5
HH3 hh3cIKETrapGlobalCntl	1.3.6.1.4.1.25506.2.30.1.5.1	Hh3cTrapStatus	read-write	Indicates whether all IKE traps should be generated.
HH3 hh3cIKETunnelStartTrapCntl	1.3.6.1.4.1.25506.2.30.1.5.2	Hh3cTrapStatus	read-write	Indicates whether hh3cIKETunnelStart traps should be generated.
HH3 hh3cIKETunnelStopTrapCntl	1.3.6.1.4.1.25506.2.30.1.5.3	Hh3cTrapStatus	read-write	Indicates whether hh3cIKETunnelStop traps should be generated.
HH3 hh3cIKENoSaTrapCntl	1.3.6.1.4.1.25506.2.30.1.5.4	Hh3cTrapStatus	read-write	Indicates whether hh3cIKENoSaFailure traps should be generated.
HH3 hh3cIKEEncryFailureTrapCntl	1.3.6.1.4.1.25506.2.30.1.5.5	Hh3cTrapStatus	read-write	Indicates whether hh3cIKEEncryFailFailure traps should be generated.
HH3 hh3cIKEDecryFailureTrapCntl	1.3.6.1.4.1.25506.2.30.1.5.6	Hh3cTrapStatus	read-write	Indicates whether hh3cIKEDecryFailFailure traps should be generated.
HH3 hh3cIKEInvalidProposalTrapCntl	1.3.6.1.4.1.25506.2.30.1.5.7	Hh3cTrapStatus	read-write	Indicates whether hh3cIKEInvalidProposalFailure traps should be generated.
HH3 hh3cIKEAuthFailTrapCntl	1.3.6.1.4.1.25506.2.30.1.5.8	Hh3cTrapStatus	read-write	Indicates whether hh3cIKEAuthFailFailure traps should be generated.
HH3 hh3cIKEInvalidCookieTrapCntl	1.3.6.1.4.1.25506.2.30.1.5.9	Hh3cTrapStatus	read-write	Indicates whether hh3cIKEInvalidCookieFailure traps should be generated.
HH3 hh3cIKEInvalidSpiTrapCntl	1.3.6.1.4.1.25506.2.30.1.5.10	Hh3cTrapStatus	read-write	Indicates whether hh3cIKEInvalidSpiFailure traps should be generated.
HH3 hh3cIKEAttrNotSuppTrapCntl	1.3.6.1.4.1.25506.2.30.1.5.11	Hh3cTrapStatus	read-write	Indicates whether hh3cIKEAttrNotSuppFailure traps should be generated.
HH3 hh3cIKEUnsportExchTypeTrapCntl	1.3.6.1.4.1.25506.2.30.1.5.12	Hh3cTrapStatus	read-write	Indicates whether hh3cIKEUnsportExchTypeFailure traps should be generated.
HH3 hh3cIKEInvalidIdTrapCntl	1.3.6.1.4.1.25506.2.30.1.5.13	Hh3cTrapStatus	read-write	Indicates whether hh3cIKEInvalidIdFailure traps should be generated.
HH3 hh3cIKEInvalidProtocolTrapCntl	1.3.6.1.4.1.25506.2.30.1.5.14	Hh3cTrapStatus	read-write	Indicates whether hh3cIKEInvalidProtocolFailure traps should be generated.
HH3 hh3cIKECertTypeUnsuppTrapCntl	1.3.6.1.4.1.25506.2.30.1.5.15	Hh3cTrapStatus	read-write	Indicates whether hh3cIKECertTypeUnsuppFailure traps should be generated.
HH3 hh3cIKEInvalidCertAuthTrapCntl	1.3.6.1.4.1.25506.2.30.1.5.16	Hh3cTrapStatus	read-write	Indicates whether hh3cIKEInvalidCertAuthFailure traps should be generated.
HH3 hh3cIKEInvalidSignTrapCntl	1.3.6.1.4.1.25506.2.30.1.5.17	Hh3cTrapStatus	read-write	Indicates whether hh3cIKEInvalidSignFailure traps should be generated.
HH3 hh3cIKECertUnavailableTrapCntl	1.3.6.1.4.1.25506.2.30.1.5.18	Hh3cTrapStatus	read-write	Indicates whether hh3cIKECertUnavailableFailure traps should be generated.
HH3 hh3cIKEProposalAddTrapCntl	1.3.6.1.4.1.25506.2.30.1.5.19	Hh3cTrapStatus	read-write	Indicates whether hh3cIKEProposalAdd traps should be generated.
HH3 hh3cIKEProposalDelTrapCntl	1.3.6.1.4.1.25506.2.30.1.5.20	Hh3cTrapStatus	read-write	Indicates whether hh3cIKEProposalDel traps should be generated.
hh3cIKETrap	1.3.6.1.4.1.25506.2.30.1.6
hh3cIKENotifications	1.3.6.1.4.1.25506.2.30.1.6.1
NTF hh3cIKETunnelStart	1.3.6.1.4.1.25506.2.30.1.6.1.1			This notification is generated when an IPSec Phase-1 IKE Tunnel is created.
NTF hh3cIKETunnelStop	1.3.6.1.4.1.25506.2.30.1.6.1.2			This notification is generated when an IPSec Phase-1 IKE Tunnel is deleted.
NTF hh3cIKENoSaFailure	1.3.6.1.4.1.25506.2.30.1.6.1.3			This notification is generated when the IKE tunnel has a non-existent SA error.
NTF hh3cIKEEncryFailFailure	1.3.6.1.4.1.25506.2.30.1.6.1.4			This notification is generated when the IKE tunnel has an encrypting failure.
NTF hh3cIKEDecryFailFailure	1.3.6.1.4.1.25506.2.30.1.6.1.5			This notification is generated when the IKE tunnel has a decrypting failure.
NTF hh3cIKEInvalidProposalFailure	1.3.6.1.4.1.25506.2.30.1.6.1.6			This notification is generated when the IPSec phase-1 invalid proposal occurs.
NTF hh3cIKEAuthFailFailure	1.3.6.1.4.1.25506.2.30.1.6.1.7			This notification is generated when the IPSec phase-1 authentication failure occurs.
NTF hh3cIKEInvalidCookieFailure	1.3.6.1.4.1.25506.2.30.1.6.1.8			This notification is generated when the IPSec phase-1 invalid cookie failure occurs.
NTF hh3cIKEAttrNotSuppFailure	1.3.6.1.4.1.25506.2.30.1.6.1.9			This notification is generated when the IPSec phase-1 unsupported attribute failure occurs.
NTF hh3cIKEUnsportExchTypeFailure	1.3.6.1.4.1.25506.2.30.1.6.1.10			This notification is generated when the IPSec phase-1 unsupported exchange type failure occurs.
NTF hh3cIKEInvalidIdFailure	1.3.6.1.4.1.25506.2.30.1.6.1.11			This notification is generated when the IPSec phase-1 invalid id failure occurs.
NTF hh3cIKEInvalidProtocolFailure	1.3.6.1.4.1.25506.2.30.1.6.1.12			This notification is generated when the processing for an IPSec Phase-1 IKE Tunnel has a protocol related errors.
NTF hh3cIKECertTypeUnsuppFailure	1.3.6.1.4.1.25506.2.30.1.6.1.13			This notification is generated when the IPSec phase-1 unsupported certificate type failure occurs.
NTF hh3cIKEInvalidCertAuthFailure	1.3.6.1.4.1.25506.2.30.1.6.1.14			This notification is generated when the IPSec phase-1 invalid certificate authorization failure occurs.
NTF hh3cIKElInvalidSignFailure	1.3.6.1.4.1.25506.2.30.1.6.1.15			This notification is generated when the IPSec phase-1 invalid signature failure occurs.
NTF hh3cIKECertUnavailableFailure	1.3.6.1.4.1.25506.2.30.1.6.1.16			This notification is generated when the IPSec phase-1 certificate unavailable failure occurs.
NTF hh3cIKEProposalAdd	1.3.6.1.4.1.25506.2.30.1.6.1.17			This notification is generated when an IKE proposal is added.
NTF hh3cIKEProposalDel	1.3.6.1.4.1.25506.2.30.1.6.1.18			This notification is generated when an IKE proposal is deleted.
hh3cIKEConformance	1.3.6.1.4.1.25506.2.30.2
hh3cIKECompliances	1.3.6.1.4.1.25506.2.30.2.1
hh3cIKECompliance	1.3.6.1.4.1.25506.2.30.2.1.1
hh3cIKEGroups	1.3.6.1.4.1.25506.2.30.2.2
hh3cIKETunnelTableGroup	1.3.6.1.4.1.25506.2.30.2.2.1			The group contains the IKE tunnel's property information.
hh3cIKETunnelStatTableGroup	1.3.6.1.4.1.25506.2.30.2.2.2			The group contains the IKE tunnel's statistic information.
hh3cIKEGlobalStatsGroup	1.3.6.1.4.1.25506.2.30.2.2.3			The group contains all of the IKE tunnel's statistic information.
hh3cIKETrapObjectGroup	1.3.6.1.4.1.25506.2.30.2.2.4			The group contains all of trap objects of IKE tunnels.
hh3cIKETrapCntlGroup	1.3.6.1.4.1.25506.2.30.2.2.5			The group contains all of trap switches of IKE tunnels.
hh3cIKETrapGroup	1.3.6.1.4.1.25506.2.30.2.2.6			The group contains all of trap of IKE tunnels.

RFC description

H3C IKE tunnel statistic monitoring including negotiation parameters and DPD configuration.

Start monitoring H3C VPN gateway/firewall (IKE tunnel statistics) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HH3C-IKE-MONITOR-MIB