HPN-ICF-IPSEC-MONITOR-MIB

All MIBs › HPN-ICF-IPSEC-MONITOR-MIB

Last Updated: 2004-10-26

Category: Technology: VPN, Vendor: H3C/HH3C, Vendor: HP/HPE

Description: Monitors IPsec security association (SA) status, traffic counters, and tunnel health on HP/Comware VPN devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HPN-ICF-IPSEC-MONITOR-MIB?

This MIB provides monitoring of IPsec security associations (SAs) and tunnels on HP/Comware VPN-capable devices, letting an operator retrieve statistics for a single tunnel or all active tunnels. It belongs to the HP/H3C ICF family and, per its stated purpose, focuses purely on IPsec tunnel/SA statistics rather than configuration. Its principal monitoring value is verifying the software/security state of VPN connectivity: tracking whether expected tunnels are up, how much traffic each SA has processed, and surfacing tunnels that have gone down or are experiencing negotiation failures. IPsec monitoring of this kind is conceptually aligned with (though not a strict extension of) the IETF's standard IPsec-related MIB conventions for security association tracking. It is deployed on HP/Comware routers and security gateways terminating IPsec VPN tunnels between sites or to remote clients. Network engineers evaluating or troubleshooting this functionality can download the HPN-ICF-IPSEC-MONITOR-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HPN-ICF-IPSEC-MONITOR-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

HP/Comware VPN router/security gateway

Monitoring Examples

No concrete sample object names were provided for this MIB, but based on its stated purpose an administrator would typically poll per-tunnel SA status and traffic counters (e.g., an IPsec tunnel/SA table) to confirm a site-to-site VPN tunnel remains established and passing traffic, with a stalled counter or a status change indicating the tunnel dropped. Because no table/object names are available in the sample set, this scenario is described at a conceptual rather than object-specific level.

What Can Be Monitored

IPsec tunnel status
IPsec SA traffic statistics
per-tunnel/per-SA counters

Imported Objects

From HPN-ICF-OID-MIB

hpnicfCommon

OBJECT-IDENTITY

From RFC1213-MIB

ifIndex

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Counter64
Gauge32
Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DisplayString
TEXTUAL-CONVENTION

How to Use in IPNetwork Monitor

Example using hpnicfIPSecGlobalInOctets OID:

Select a HP/Comware VPN router/security gateway (IPsec tunnel statistics) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hpnicfIPSecGlobalInOctets into the Find box to locate it in the OID tree, then select it and click OK. The total number of octets received by all current and previous IPSec Phase-2 Tunnels. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
hpnicfIPSecMonitor	1.3.6.1.4.1.11.2.14.11.15.2.7			The MIB is designed to get statistic information of IPSec tunnels. With this MIB, we can get information of a certain tunnel or all tunnels.
hpnicfIPSecObjects	1.3.6.1.4.1.11.2.14.11.15.2.7.1
hpnicfIPSecTunnelTable	1.3.6.1.4.1.11.2.14.11.15.2.7.1.1		not-accessible	The IPSec Phase-2 Tunnel Table. There is one entry in this table for each active IPSec Phase-2 Tunnel.
hpnicfIPSecTunnelEntry	1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1		not-accessible	Information about hpnicfIPSecTunnelTable.
I32 hpnicfIPSecTunIfIndex	1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.1	Integer32	not-accessible	The interface index( the ifIndex of ifTable ).
I32 hpnicfIPSecTunEntryIndex	1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.2	Integer32	not-accessible	The index of IPSec policy applied in the interface.
I32 hpnicfIPSecTunIndex	1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.3	Integer32	not-accessible	The index of IPSec Phase-2 Tunnel Table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The value of this object will wrap at 2,147,483,647.
I32 hpnicfIPSecTunIKETunnelIndex	1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.4	Integer32	read-only	The index of the associated IPSec Phase-1 IKE Tunnel (IKETunIndex in the IKETunnelTable). 2147483647 is defined as invalid value.
IP hpnicfIPSecTunLocalAddr	1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.5	IpAddress	read-only	The IP address of the local peer for the IPSec Phase-2 Tunnel. 0.0.0.0 is defined as invalid value.
IP hpnicfIPSecTunRemoteAddr	1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.6	IpAddress	read-only	The IP address of the remote peer for the IPSec Phase-2 Tunnel. 0.0.0.0 is defined as invalid value.
HPN hpnicfIPSecTunKeyType	1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.7	HpnicfIPSecNegoType	read-only	The key negotiate mode used by the IPSec Phase-2 Tunnel.
HPN hpnicfIPSecTunEncapMode	1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.8	HpnicfEncapMode	read-only	The encapsulation mode used by the IPSec Phase-2 Tunnel.
INT hpnicfIPSecTunInitiator	1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.9	INTEGER	read-only	The initiator of this IPSec tunnel. Value none is used for manual IPsec tunnel, for there is no initiator or responder in this method.
G32 hpnicfIPSecTunLifeSize	1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.10	Gauge32	read-only	The negotiated LifeSize of the IPSec Phase-2 Tunnel in kilobytes. 0 is defined as invalid value.
I32 hpnicfIPSecTunLifeTime	1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.11	Integer32	read-only	The negotiated LifeTime of the IPSec Phase-2 Tunnel in seconds. 2147483647 is defined as invalid value.
I32 hpnicfIPSecTunRemainTime	1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.12	Integer32	read-only	The remain time of SA in seconds. 2147483647 is defined as invalid value.
I32 hpnicfIPSecTunActiveTime	1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.13	Integer32	read-only	The duration the IPSec Phase-2 Tunnel has been active in hundredths of seconds. 2147483647 is defined as invalid value.
G32 hpnicfIPSecTunRemainSize	1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.14	Gauge32	read-only	The remain LifeSize of SA in kilobytes. 0 is defined as invalid value.
C32 hpnicfIPSecTunTotalRefreshes	1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.15	Counter32	read-only	The total number of security association refreshing performed.
G32 hpnicfIPSecTunCurrentSaInstances	1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.16	Gauge32	read-only	The number of security associations which are currently active or expiring.
HPN hpnicfIPSecTunInSaEncryptAlgo	1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.17	HpnicfEncryptAlgo	read-only	The encryption algorithm used by the inbound security association of the IPSec Phase-2 Tunnel.
HPN hpnicfIPSecTunInSaAhAuthAlgo	1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.18	HpnicfAuthAlgo	read-only	The authentication algorithm used by the inbound authentication header (AH) security association of the IPSec Phase-2 Tunnel.
HPN hpnicfIPSecTunInSaEspAuthAlgo	1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.19	HpnicfAuthAlgo	read-only	The authentication algorithm used by the inbound encapsulation security protocol(ESP) security association of the IPSec Phase-2 Tunnel.
HPN hpnicfIPSecTunDiffHellmanGrp	1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.20	HpnicfDiffHellmanGrp	read-only	The Diffie Hellman Group used by the security association of the IPSec Phase-2 Tunnel.
HPN hpnicfIPSecTunOutSaEncryptAlgo	1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.21	HpnicfEncryptAlgo	read-only	The encryption algorithm used by the outbound security association of the IPSec Phase-2 Tunnel.
HPN hpnicfIPSecTunOutSaAhAuthAlgo	1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.22	HpnicfAuthAlgo	read-only	The authentication algorithm used by the outbound authentication header (AH) security association of the IPSec Phase-2 Tunnel.
HPN hpnicfIPSecTunOutSaEspAuthAlgo	1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.23	HpnicfAuthAlgo	read-only	The authentication algorithm used by the outbound encapsulation security protocol(ESP) security association of the IPSec Phase-2 Tunnel.
STR hpnicfIPSecTunPolicyName	1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.24	DisplayString	read-only	The policy name used by this IPSec tunnel.
I32 hpnicfIPSecTunPolicyNum	1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.25	Integer32	read-only	The sequence number of policy used by this IPSec tunnel.
INT hpnicfIPSecTunStatus	1.3.6.1.4.1.11.2.14.11.15.2.7.1.1.1.26	INTEGER	read-only	The status of the IPSec Tunnel.
hpnicfIPSecTunnelStatTable	1.3.6.1.4.1.11.2.14.11.15.2.7.1.2		not-accessible	The IPSec Phase-2 Tunnel Statistics Table.
hpnicfIPSecTunnelStatEntry	1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1		not-accessible	Information about hpnicfIPSecTunnelStatTable.
C64 hpnicfIPSecTunInOctets	1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.1	Counter64	read-only	The total number of octets received by this IPSec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed.
C64 hpnicfIPSecTunInDecompOctets	1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.2	Counter64	read-only	The total number of decompressed octets received by this IPSec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed.
C64 hpnicfIPSecTunInPkts	1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.3	Counter64	read-only	The total number of packets received by this IPSec Phase-2 Tunnel.
C64 hpnicfIPSecTunInDropPkts	1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.4	Counter64	read-only	The total number of packets dropped during receiving process by this IPSec Phase-2 Tunnel.
C32 hpnicfIPSecTunInReplayDropPkts	1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.5	Counter32	read-only	The total number of packets dropped during receiving process due to Anti-Replay process by this IPSec Phase-2 Tunnel.
C32 hpnicfIPSecTunInAuthFails	1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.6	Counter32	read-only	The total number of inbound authentication's which ended in failure by this IPSec Phase-2 Tunnel.
C32 hpnicfIPSecTunInDecryptFails	1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.7	Counter32	read-only	The total number of inbound decryption's which ended in failure by this IPSec Phase-2 Tunnel.
C64 hpnicfIPSecTunOutOctets	1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.8	Counter64	read-only	The total number of octets sent by this IPSec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed.
C64 hpnicfIPSecTunOutUncompOctets	1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.9	Counter64	read-only	The total number of uncompressed octets sent by this IPSec Phase-2 Tunnel.This value is accumulated BEFORE the packet is compressed.
C64 hpnicfIPSecTunOutPkts	1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.10	Counter64	read-only	The total number of packets sent by this IPSec Phase-2 Tunnel.
C64 hpnicfIPSecTunOutDropPkts	1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.11	Counter64	read-only	The total number of packets dropped during sending process by this IPSec Phase-2 Tunnel.
C32 hpnicfIPSecTunOutEncryptFails	1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.12	Counter32	read-only	The total number of outbound encryption's which ended in failure by this IPSec Phase-2 Tunnel.
C32 hpnicfIPSecTunNoMemoryDropPkts	1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.13	Counter32	read-only	The total number of packets dropped due to no enough memory by this IPSec Phase-2 Tunnel.
C32 hpnicfIPSecTunQueueFullDropPkts	1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.14	Counter32	read-only	The total number of packets dropped due to queue full by this IPSec Phase-2 Tunnel.
C32 hpnicfIPSecTunInvalidLenDropPkts	1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.15	Counter32	read-only	The total number of packets dropped due to invalid length packet by this IPSec Phase-2 Tunnel.
C32 hpnicfIPSecTunTooLongDropPkts	1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.16	Counter32	read-only	The total number of packets dropped due to too long packet by this IPSec Phase-2 Tunnel.
C32 hpnicfIPSecTunInvalidSaDropPkts	1.3.6.1.4.1.11.2.14.11.15.2.7.1.2.1.17	Counter32	read-only	The total number of packets dropped due to invalid SA by this IPSec Phase-2 Tunnel.
hpnicfIPSecSaTable	1.3.6.1.4.1.11.2.14.11.15.2.7.1.3		not-accessible	The IPSec Phase-2 Security Protection Index Table. This table contains an entry for each active and expiring security association.
hpnicfIPSecSaEntry	1.3.6.1.4.1.11.2.14.11.15.2.7.1.3.1		not-accessible	Information about hpnicfIPSecSaTable.
I32 hpnicfIPSecSaIndex	1.3.6.1.4.1.11.2.14.11.15.2.7.1.3.1.1	Integer32	not-accessible	The number of the Sa associated with the Phase-2 Tunnel Table. The value of this index is a number which begins at one and is incremented with each Sa associated with an IPSec Phase-2 Tunnel. The value of this object will wrap at 2,147,483,647.
INT hpnicfIPSecSaDirection	1.3.6.1.4.1.11.2.14.11.15.2.7.1.3.1.2	INTEGER	read-only	The direction of the SA.
U32 hpnicfIPSecSaValue	1.3.6.1.4.1.11.2.14.11.15.2.7.1.3.1.3	Unsigned32	read-only	The value of the SPI.
HPN hpnicfIPSecSaProtocol	1.3.6.1.4.1.11.2.14.11.15.2.7.1.3.1.4	HpnicfSaProtocol	read-only	The security protocol of the SA.
HPN hpnicfIPSecSaEncryptAlgo	1.3.6.1.4.1.11.2.14.11.15.2.7.1.3.1.5	HpnicfEncryptAlgo	read-only	The encryption algorithm used by the security association of the IPSec Phase-2 Tunnel.
HPN hpnicfIPSecSaAuthAlgo	1.3.6.1.4.1.11.2.14.11.15.2.7.1.3.1.6	HpnicfAuthAlgo	read-only	The authentication algorithm used by the SA.
INT hpnicfIPSecSaStatus	1.3.6.1.4.1.11.2.14.11.15.2.7.1.3.1.7	INTEGER	read-only	The status of the SA.
hpnicfIPSecTrafficTable	1.3.6.1.4.1.11.2.14.11.15.2.7.1.4		not-accessible	The IPSec Phase-2 Tunnel Traffic Table.
hpnicfIPSecTrafficEntry	1.3.6.1.4.1.11.2.14.11.15.2.7.1.4.1		not-accessible	Information about hpnicfIPSecTrafficTable.
HPN hpnicfIPSecTrafficLocalType	1.3.6.1.4.1.11.2.14.11.15.2.7.1.4.1.1	HpnicfTrafficType	read-only	The type of local peer. Possible values are: a single IP address, or an IP address range, or an IP subnet.
IP hpnicfIPSecTrafficLocalAddr1	1.3.6.1.4.1.11.2.14.11.15.2.7.1.4.1.2	IpAddress	read-only	The first specification of local peer's IP address. If the local peer type is single IP address, then this is the value of the IP address. If the local peer type is IP subnet, then this is the value of the subnet. If the local peer type is IP address range, then this is the value of beginning IP address of the range.
IP hpnicfIPSecTrafficLocalAddr2	1.3.6.1.4.1.11.2.14.11.15.2.7.1.4.1.3	IpAddress	read-only	The second specification of local peer's IP address. If the local peer type is single IP address, then this is the value of the IP address. If the local peer type is IP subnet, then this is the value of the subnet mask. If the local peer type is IP address range, then this is the value of ending IP address of the range.
I32 hpnicfIPSecTrafficLocalProtocol	1.3.6.1.4.1.11.2.14.11.15.2.7.1.4.1.4	Integer32	read-only	The protocol number of the local peer's traffic.
I32 hpnicfIPSecTrafficLocalPort	1.3.6.1.4.1.11.2.14.11.15.2.7.1.4.1.5	Integer32	read-only	The port number of the local peer's traffic.
HPN hpnicfIPSecTrafficRemoteType	1.3.6.1.4.1.11.2.14.11.15.2.7.1.4.1.6	HpnicfTrafficType	read-only	The type of remote peer. Possible values are: a single IP address, or an IP address range, or an IP subnet.
IP hpnicfIPSecTrafficRemoteAddr1	1.3.6.1.4.1.11.2.14.11.15.2.7.1.4.1.7	IpAddress	read-only	The first specification of remote peer's IP address. If the remote peer type is single IP address, then this is the value of the IP address. If the remote peer type is IP subnet, then this is the value of the subnet. If the remote peer type is IP address range, then this is the value of beginning IP address of the range.
IP hpnicfIPSecTrafficRemoteAddr2	1.3.6.1.4.1.11.2.14.11.15.2.7.1.4.1.8	IpAddress	read-only	Single IP address, then this is the value of the IP address. If the remote peer type is IP subnet, then this is the value of the subnet mask. If the remote peer type is IP address range, then this is the value of ending IP address of the range.
I32 hpnicfIPSecTrafficRemoteProtocol	1.3.6.1.4.1.11.2.14.11.15.2.7.1.4.1.9	Integer32	read-only	The protocol number of the remote peer's traffic.
I32 hpnicfIPSecTrafficRemotePort	1.3.6.1.4.1.11.2.14.11.15.2.7.1.4.1.10	Integer32	read-only	The port number of the remote peer's traffic.
hpnicfIPSecGlobalStats	1.3.6.1.4.1.11.2.14.11.15.2.7.1.5
G32 hpnicfIPSecGlobalActiveTunnels	1.3.6.1.4.1.11.2.14.11.15.2.7.1.5.1	Gauge32	read-only	The total number of currently active IPSec Phase-2 Tunnels.
G32 hpnicfIPSecGlobalActiveSas	1.3.6.1.4.1.11.2.14.11.15.2.7.1.5.2	Gauge32	read-only	The total number of currently active or expiring IPSec Phase-2 SA.
C64 hpnicfIPSecGlobalInOctetsEx	1.3.6.1.4.1.11.2.14.11.15.2.7.1.5.3	Counter64	read-only	The total number of octets received by all current and previous IPSec Phase-2 Tunnels. This value is accumulated BEFORE determining whether or not the packet should be decompressed.
C64 hpnicfIPSecGlobalInDecompOctets	1.3.6.1.4.1.11.2.14.11.15.2.7.1.5.4	Counter64	read-only	The total number of decompressed octets received by all current and previous IPSec Phase-2 Tunnels. This value is accumulated AFTER the packet is decompressed.
C64 hpnicfIPSecGlobalInPkts	1.3.6.1.4.1.11.2.14.11.15.2.7.1.5.5	Counter64	read-only	The total number of packets received by all current and previous IPSec Phase-2 Tunnels.
C64 hpnicfIPSecGlobalInDrops	1.3.6.1.4.1.11.2.14.11.15.2.7.1.5.6	Counter64	read-only	The total number of packets dropped during receiving process by all current and previous IPSec Phase-2 Tunnels.
C32 hpnicfIPSecGlobalInReplayDrops	1.3.6.1.4.1.11.2.14.11.15.2.7.1.5.7	Counter32	read-only	The total number of packets dropped during receiving process due to Anti-Replay process by all current and previous IPSec Phase-2 Tunnels.
C32 hpnicfIPSecGlobalInAuthFails	1.3.6.1.4.1.11.2.14.11.15.2.7.1.5.8	Counter32	read-only	The total number of inbound authentication's which ended in failure by all current and previous IPSec Phase-2 Tunnels.
C32 hpnicfIPSecGlobalInDecryptFails	1.3.6.1.4.1.11.2.14.11.15.2.7.1.5.9	Counter32	read-only	The total number of inbound decryption's which ended in failure by all current and previous IPSec Phase-2 Tunnels.
C64 hpnicfIPSecGlobalOutOctets	1.3.6.1.4.1.11.2.14.11.15.2.7.1.5.10	Counter64	read-only	The total number of octets sent by all current and previous IPSec Phase-2 Tunnels. This value is accumulated AFTER determining whether or not the packet should be compressed.
C64 hpnicfIPSecGlobalOutUncompOctets	1.3.6.1.4.1.11.2.14.11.15.2.7.1.5.11	Counter64	read-only	The total number of uncompressed octets sent by all current and previous IPSec Phase-2 Tunnels. This value is accumulated BEFORE the packet is compressed.
C64 hpnicfIPSecGlobalOutPkts	1.3.6.1.4.1.11.2.14.11.15.2.7.1.5.12	Counter64	read-only	The total number of packets sent by all current and previous IPSec Phase-2 Tunnels.
C64 hpnicfIPSecGlobalOutDrops	1.3.6.1.4.1.11.2.14.11.15.2.7.1.5.13	Counter64	read-only	The total number of packets dropped during sending process by all current and previous IPSec Phase-2 Tunnels.
C32 hpnicfIPSecGlobalOutEncryptFails	1.3.6.1.4.1.11.2.14.11.15.2.7.1.5.14	Counter32	read-only	The total number of outbound encryption's which ended in failure by all current and previous IPSec Phase-2 Tunnels.
C32 hpnicfIPSecGlobalNoMemoryDropPkts	1.3.6.1.4.1.11.2.14.11.15.2.7.1.5.15	Counter32	read-only	The total number of packets dropped due to no enough memory by all current and previous IPSec Phase-2 Tunnels.
C32 hpnicfIPSecGlobalNoFindSaDropPkts	1.3.6.1.4.1.11.2.14.11.15.2.7.1.5.16	Counter32	read-only	The total number of packets dropped due to not find SA by all current and previous IPSec Phase-2 Tunnels.
C32 hpnicfIPSecGlobalQueueFullDropPkts	1.3.6.1.4.1.11.2.14.11.15.2.7.1.5.17	Counter32	read-only	The total number of packets dropped due to queue full by all current and previous IPSec Phase-2 Tunnels.
C32 hpnicfIPSecGlobalInvalidLenDropPkts	1.3.6.1.4.1.11.2.14.11.15.2.7.1.5.18	Counter32	read-only	The total number of packets dropped due to invalid packet length by all current and previous IPSec Phase-2 Tunnels.
C32 hpnicfIPSecGlobalTooLongDropPkts	1.3.6.1.4.1.11.2.14.11.15.2.7.1.5.19	Counter32	read-only	The total number of packets dropped due to too long packet by all current and previous IPSec Phase-2 Tunnels.
C32 hpnicfIPSecGlobalInvalidSaDropPkts	1.3.6.1.4.1.11.2.14.11.15.2.7.1.5.20	Counter32	read-only	The total number of packets dropped due to invalid SA by all current and previous IPSec Phase-2 Tunnels.
hpnicfIPSecTrapObject	1.3.6.1.4.1.11.2.14.11.15.2.7.1.6
STR hpnicfIPSecPolicyName	1.3.6.1.4.1.11.2.14.11.15.2.7.1.6.1	DisplayString	accessible-for-notify	The IPSec policy name with a trap.
I32 hpnicfIPSecPolicySeqNum	1.3.6.1.4.1.11.2.14.11.15.2.7.1.6.2	Integer32	accessible-for-notify	The IPSec policy sequence number with a trap.
I32 hpnicfIPSecPolicySize	1.3.6.1.4.1.11.2.14.11.15.2.7.1.6.3	Integer32	accessible-for-notify	The number of IPSec policies with a trap.
I32 hpnicfIPSecSpiValue	1.3.6.1.4.1.11.2.14.11.15.2.7.1.6.4	Integer32	accessible-for-notify	The SPI value associated with a trap.
hpnicfIPSecTrapCntl	1.3.6.1.4.1.11.2.14.11.15.2.7.1.7
HPN hpnicfIPSecTrapGlobalCntl	1.3.6.1.4.1.11.2.14.11.15.2.7.1.7.1	HpnicfTrapStatus	read-write	Indicates whether all IPSec traps should be generated.
HPN hpnicfIPSecTunnelStartTrapCntl	1.3.6.1.4.1.11.2.14.11.15.2.7.1.7.2	HpnicfTrapStatus	read-write	Indicates whether hpnicfIPSecTunnelStart traps should be generated.
HPN hpnicfIPSecTunnelStopTrapCntl	1.3.6.1.4.1.11.2.14.11.15.2.7.1.7.3	HpnicfTrapStatus	read-write	Indicates whether hpnicfIPSecTunnelStop traps should be generated.
HPN hpnicfIPSecNoSaTrapCntl	1.3.6.1.4.1.11.2.14.11.15.2.7.1.7.4	HpnicfTrapStatus	read-write	Indicates whether hpnicfIPSecNoSaFailure traps should be generated.
HPN hpnicfIPSecAuthFailureTrapCntl	1.3.6.1.4.1.11.2.14.11.15.2.7.1.7.5	HpnicfTrapStatus	read-write	Indicates whether hpnicfIPSecAuthFailFailure traps should be generated.
HPN hpnicfIPSecEncryFailureTrapCntl	1.3.6.1.4.1.11.2.14.11.15.2.7.1.7.6	HpnicfTrapStatus	read-write	Indicates whether hpnicfIPSecEncryFailFailure traps should be generated.
HPN hpnicfIPSecDecryFailureTrapCntl	1.3.6.1.4.1.11.2.14.11.15.2.7.1.7.7	HpnicfTrapStatus	read-write	Indicates whether hpnicfIPSecDecryFailFailure traps should be generated.
HPN hpnicfIPSecInvalidSaTrapCntl	1.3.6.1.4.1.11.2.14.11.15.2.7.1.7.8	HpnicfTrapStatus	read-write	Indicates whether hpnicfIPSec Invalid Sa Failure traps should be generated.
HPN hpnicfIPSecPolicyAddTrapCntl	1.3.6.1.4.1.11.2.14.11.15.2.7.1.7.9	HpnicfTrapStatus	read-write	Indicates whether hpnicfIPSecPolicyAdd traps should be generated.
HPN hpnicfIPSecPolicyDelTrapCntl	1.3.6.1.4.1.11.2.14.11.15.2.7.1.7.10	HpnicfTrapStatus	read-write	Indicates whether hpnicfIPSecPolicyDel traps should be generated.
HPN hpnicfIPSecPolicyAttachTrapCntl	1.3.6.1.4.1.11.2.14.11.15.2.7.1.7.11	HpnicfTrapStatus	read-write	Indicates whether hpnicfIPSecPolicyAttach traps should be generated.
HPN hpnicfIPSecPolicyDetachTrapCntl	1.3.6.1.4.1.11.2.14.11.15.2.7.1.7.12	HpnicfTrapStatus	read-write	Indicates whether hpnicfIPSecPolicyDetach traps should be generated.
hpnicfIPSecTrap	1.3.6.1.4.1.11.2.14.11.15.2.7.1.8
hpnicfIPSecNotifications	1.3.6.1.4.1.11.2.14.11.15.2.7.1.8.1
NTF hpnicfIPSecTunnelStart	1.3.6.1.4.1.11.2.14.11.15.2.7.1.8.1.1			This notification is generated when an IPSec Phase-2 Tunnel is created.
NTF hpnicfIPSecTunnelStop	1.3.6.1.4.1.11.2.14.11.15.2.7.1.8.1.2			This notification is generated when an IPSec Phase-2 Tunnel is deleted.
NTF hpnicfIPSecNoSaFailure	1.3.6.1.4.1.11.2.14.11.15.2.7.1.8.1.3			This notification is generated when an IPSec Phase-2 non-existent SA error occurs.
NTF hpnicfIPSecAuthFailFailure	1.3.6.1.4.1.11.2.14.11.15.2.7.1.8.1.4			This notification is generated when the IPSec phase-2 authentication failure occurs.
NTF hpnicfIPSecEncryFailFailure	1.3.6.1.4.1.11.2.14.11.15.2.7.1.8.1.5			This notification is generated when the IPSec phase-2 tunnel has an encrypting failure.
NTF hpnicfIPSecDecryFailFailure	1.3.6.1.4.1.11.2.14.11.15.2.7.1.8.1.6			This notification is generated when the IPSec phase-2 tunnel has a decrypting failure.
NTF hpnicfIPSecInvalidSaFailure	1.3.6.1.4.1.11.2.14.11.15.2.7.1.8.1.7			This notification is generated when the IPSec phase-2 invalid SA failure occurs.
NTF hpnicfIPSecPolicyAdd	1.3.6.1.4.1.11.2.14.11.15.2.7.1.8.1.8			This notification is generated when an IPSec policy is added.
NTF hpnicfIPSecPolicyDel	1.3.6.1.4.1.11.2.14.11.15.2.7.1.8.1.9			This notification is generated when an IPSec policy is deleted.
NTF hpnicfIPSecPolicyAttach	1.3.6.1.4.1.11.2.14.11.15.2.7.1.8.1.10			This notification is generated when an IPSec policy is attached with one interface.
NTF hpnicfIPSecPolicyDetach	1.3.6.1.4.1.11.2.14.11.15.2.7.1.8.1.11			This notification is generated when an IPSec policy is detached with one interface.
hpnicfIPSecConformance	1.3.6.1.4.1.11.2.14.11.15.2.7.2
hpnicfIPSecCompliances	1.3.6.1.4.1.11.2.14.11.15.2.7.2.1
hpnicfIPSecCompliance	1.3.6.1.4.1.11.2.14.11.15.2.7.2.1.1
hpnicfIPSecGroups	1.3.6.1.4.1.11.2.14.11.15.2.7.2.2
hpnicfIPSecTunnelTableGroup	1.3.6.1.4.1.11.2.14.11.15.2.7.2.2.1			The group contains the IPSec tunnel's property information.
hpnicfIPSecTunnelStatGroup	1.3.6.1.4.1.11.2.14.11.15.2.7.2.2.2			The group contains the IPSec tunnel's statistic information.
hpnicfIPSecSaGroup	1.3.6.1.4.1.11.2.14.11.15.2.7.2.2.3			The group contains the SA's property information.
hpnicfIPSecTrafficTableGroup	1.3.6.1.4.1.11.2.14.11.15.2.7.2.2.4			The group contains the property information of the data flow protected by IPSec tunnel.
hpnicfIPSecGlobalStatsGroup	1.3.6.1.4.1.11.2.14.11.15.2.7.2.2.5			The group contains all of the IPSec tunnel's statistic information.
hpnicfIPSecTrapObjectGroup	1.3.6.1.4.1.11.2.14.11.15.2.7.2.2.6			The group contains all of trap objects of IPSec tunnels.
hpnicfIPSecTrapCntlGroup	1.3.6.1.4.1.11.2.14.11.15.2.7.2.2.7			The group contains all of trap switches of IPSec tunnels.
hpnicfIPSecTrapGroup	1.3.6.1.4.1.11.2.14.11.15.2.7.2.2.8			The group contains all of trap of IPSec tunnels.

RFC description

Monitors IPSec tunnel statistics including phase-1 and phase-2 encryption, authentication, and encapsulation parameters.

Start monitoring HP/Comware VPN router/security gateway (IPsec tunnel statistics) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HPN-ICF-IPSEC-MONITOR-MIB