All MIBs › IPSEC-MIB › ipsecTrapIpsecNegFailure
ipsecTrapIpsecNegFailure
Module: IPSEC-MIB
OID (symbolic): IPSEC-MIB::ipsecTrapIpsecNegFailure
OID (numeric): 1.3.6.1.3.500.1.1.3.0.3
Node type: NOTIFICATION-TYPE
Description: An attempt to negotiate a phase 2 protection suite within the specified IKE SA failed.
Examples
Send this trap to an SNMP manager — replace <manager> with the IP or hostname of your monitoring server (SNMPv2c):
snmptrap -v2c -c public <manager> '' IPSEC-MIB::ipsecTrapIpsecNegFailure snmptrap -v2c -c public <manager> '' 1.3.6.1.3.500.1.1.3.0.3
Listen for incoming traps on the manager host (-f keeps it in the foreground, -Lo prints to stdout — useful for testing):
snmptrapd -f -Lo -c /dev/null authCommunity log public
Example snmptrapd log entry:
zoo11-linux.zoo [UDP: [192.168.30.111]:51721->[192.168.30.10]:162]: DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (356179977) 41 days, 5:23:19.77 SNMPv2-MIB::snmpTrapOID.0 = OID: IPSEC-MIB::ipsecTrapIpsecNegFailure
Start monitoring Vendor-neutral IETF standard (IPsec-capable router/firewall/VPN gateway) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the IPSEC-MIB::ipsecTrapIpsecNegFailure OID value, configure state conditions and alerts, and monitor any Vendor-neutral IETF standard (IPsec-capable router/firewall/VPN gateway) from a single console.
OID Breakdown
Upper-level ancestors (5 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.3 | experimental | APERTUS-NPG-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.3.500 | ipsecMIB | IPSEC-MIB |
| 1.3.6.1.3.500.1 | ipsecMIBObjects | IPSEC-MIB |
| 1.3.6.1.3.500.1.1 | ipsec | IPSEC-MIB |
| 1.3.6.1.3.500.1.1.3 | ipsecTrapsA | IPSEC-MIB |
| 1.3.6.1.3.500.1.1.3.0 | ipsecTraps | IPSEC-MIB |
| 1.3.6.1.3.500.1.1.3.0.3 | ipsecTrapIpsecNegFailure | IPSEC-MIB |