HUAWEI-SECURITY-IPSEC-MIB

MIB Reference — IPNetwork Monitor · Updated October 05, 2026

All MIBs › HUAWEI-SECURITY-IPSEC-MIB

Organization: Huawei Symantec Technologies Co., Ltd.

Last Updated: 2009-10-10

Category: Domain: Security, VPN and Security, Vendor: Huawei

Description: Huawei security IPsec MIB for managing IKE policies, IPsec tunnels, transform sets, and security association statistics.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HUAWEI-SECURITY-IPSEC-MIB?

HUAWEI-SECURITY-IPSEC-MIB is a Huawei-proprietary security module for managing IPsec VPN functionality on the Eudemon and USG firewall product series. It exposes IKE policy configuration, IPsec tunnel and transform-set definitions, and security-association (SA) statistics such as encrypted/decrypted packet and byte counts and negotiation failures. It is used to monitor the software/process status of VPN tunnels: whether an SA is up or down, how much traffic it is carrying, and whether IKE negotiations are succeeding, all of which are core indicators of VPN service health. Since there is no single IETF-standard IPsec MIB, this vendor module fills that gap and typically coexists with other Huawei security modules like HUAWEI-SECURITY-GLOBALIPCAR-MIB and HUAWEI-SECURITY-LICENSE-MIB on the same device. It is typically deployed on enterprise or carrier Eudemon/USG gateways terminating site-to-site or remote-access IPsec VPN tunnels. Engineers can download the HUAWEI-SECURITY-IPSEC-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HUAWEI-SECURITY-IPSEC-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

  • Huawei Eudemon firewalls
  • Huawei USG firewalls/VPN gateways

Monitoring Examples

An admin would poll an IPsec tunnel table (an hwIPSecTunnelTable/hwIPSecTunnelEntry pattern) for each tunnel's up/down state along with SA counters for encrypted/decrypted packets and negotiation failures. A tunnel reported as down alongside rising IKE negotiation-failure counts points to a peer-reachability problem or a pre-shared-key/certificate mismatch. Tracking encrypted-byte throughput per tunnel over time also helps confirm a site-to-site VPN link is actually carrying the expected traffic volume.

What Can Be Monitored

  • IPsec/IKE tunnel up/down status
  • SA encrypted/decrypted packet and byte counters
  • IKE negotiation failure counts
  • IKE policy and transform-set configuration

This MIB depends on

Related MIBs

Imported Objects

From RFC1155-SMI

enterprises

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter64
Gauge32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE

How to Use in IPNetwork Monitor

Example using hwIPSecGlobalPacketInput OID:

Select a Huawei Eudemon/USG firewall/VPN gateway (IPsec VPN) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hwIPSecGlobalPacketInput into the Find box to locate it in the OID tree, then select it and click OK. It reports the number of received security packets. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.
OIDs

RFC description

Monitors IPSec tunnel statistics and packet/byte counters on Huawei security devices.

Start monitoring Huawei Eudemon/USG firewall/VPN gateway (IPsec VPN) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HUAWEI-SECURITY-IPSEC-MIB