All MIBs › HPN-ICF-IPSEC-MONITOR-V2-MIB › hpnicfIPsecTunInvalidSaDropPktsV2
hpnicfIPsecTunInvalidSaDropPktsV2
Module: HPN-ICF-IPSEC-MONITOR-V2-MIB
OID (symbolic): HPN-ICF-IPSEC-MONITOR-V2-MIB::hpnicfIPsecTunInvalidSaDropPktsV2
OID (numeric): 1.3.6.1.4.1.11.2.14.11.15.2.126.1.3.1.17
Node type: OBJECT-TYPE
Type: Counter64
Access: read-only
Description: The total number of packets dropped due to invalid SA by this IPsec Phase-2 Tunnel.
What is hpnicfIPsecTunInvalidSaDropPktsV2?
Counts the number of packets this tunnel has dropped because they referenced a security association that the device could not find or validate. This often occurs when a peer sends packets using an SA that has already expired or been renegotiated out from under it.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.11.2.14.11.15.2.126.1.3.1.17 snmpwalk -v2c -c public <target> HPN-ICF-IPSEC-MONITOR-V2-MIB::hpnicfIPsecTunInvalidSaDropPktsV2
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.11.2.14.11.15.2.126.1.3.1.17.1 snmpget -v2c -c public <target> HPN-ICF-IPSEC-MONITOR-V2-MIB::hpnicfIPsecTunInvalidSaDropPktsV2.1
SNMPv3 example:
snmpget -v3 -l authPriv -u snmpv3-user -a SHA -A "AuthPassword1" -x AES -X "PrivPassword1" <target> hpnicfIPsecTunInvalidSaDropPktsV2.1
Start monitoring HPE/H3C Comware VPN gateway/firewall (IPsec tunnel stats, v2) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the HPN-ICF-IPSEC-MONITOR-V2-MIB::hpnicfIPsecTunInvalidSaDropPktsV2 OID value, configure state conditions and alerts, and monitor any HPE/H3C Comware VPN gateway/firewall (IPsec tunnel stats, v2) from a single console.
OID Breakdown
Upper-level ancestors (12 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.11 | hp | CLJ8500-MIB |
| 1.3.6.1.4.1.11.2 | nm | CLJ8500-MIB |
| 1.3.6.1.4.1.11.2.14 | icf | CONFIG-MIB |
| 1.3.6.1.4.1.11.2.14.11 | hpicfObjects | CONFIG-MIB |
| 1.3.6.1.4.1.11.2.14.11.15 | hpnicf | HPN-ICF-OID-MIB |
| 1.3.6.1.4.1.11.2.14.11.15.2 | hpnicfCommon | HPN-ICF-OID-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.11.2.14.11.15.2.126 | hpnicfIPsecMonitorV2 | HPN-ICF-IPSEC-MONITOR-V2-MIB |
| 1.3.6.1.4.1.11.2.14.11.15.2.126.1 | hpnicfIPsecObjectsV2 | HPN-ICF-IPSEC-MONITOR-V2-MIB |
| 1.3.6.1.4.1.11.2.14.11.15.2.126.1.3 | hpnicfIPsecTunnelStatV2Table | HPN-ICF-IPSEC-MONITOR-V2-MIB |
| 1.3.6.1.4.1.11.2.14.11.15.2.126.1.3.1 | hpnicfIPsecTunnelStatV2Entry | HPN-ICF-IPSEC-MONITOR-V2-MIB |
| 1.3.6.1.4.1.11.2.14.11.15.2.126.1.3.1.17 | hpnicfIPsecTunInvalidSaDropPktsV2 | HPN-ICF-IPSEC-MONITOR-V2-MIB |