IPSEC-MIB :: ipsecUnknownSpiErrors

MIB Reference — IPNetwork Monitor · Updated October 06, 2026

All MIBs › IPSEC-MIB › ipsecUnknownSpiErrors

ipsecUnknownSpiErrors

Module: IPSEC-MIB

OID (symbolic): IPSEC-MIB::ipsecUnknownSpiErrors

OID (numeric): 1.3.6.1.3.500.1.1.5.7

Node type: OBJECT-TYPE

Type: Counter32

Access: read-only

Description: The total number of packets received by the entity since boot time with SPIs or CPIs that were not valid.

What is ipsecUnknownSpiErrors?

A device-wide count of packets received since boot time carrying an SPI or CPI value that did not match any known SA, often an early sign of a stale peer configuration or a probing/spoofing attempt.

Examples

Walk all instances (SNMPv2c):

snmpwalk -v2c -c public <target> 1.3.6.1.3.500.1.1.5.7
snmpwalk -v2c -c public <target> IPSEC-MIB::ipsecUnknownSpiErrors

Get a specific instance (index 1):

snmpget -v2c -c public <target> 1.3.6.1.3.500.1.1.5.7.1
snmpget -v2c -c public <target> IPSEC-MIB::ipsecUnknownSpiErrors.1

Start monitoring Vendor-neutral IETF standard (IPsec-capable router/firewall/VPN gateway) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the IPSEC-MIB::ipsecUnknownSpiErrors OID value, configure state conditions and alerts, and monitor any Vendor-neutral IETF standard (IPsec-capable router/firewall/VPN gateway) from a single console.

OID Breakdown

Upper-level ancestors (5 from the standard OID tree / other modules)
Numeric OIDNameModule
1isoLANART-AGENT
1.3orgAirPair-MIB
1.3.6dodAirPair-MIB
1.3.6.1internetAirPair-MIB
1.3.6.1.3experimentalAPERTUS-NPG-MIB
Numeric OIDNameModule
1.3.6.1.3.500ipsecMIBIPSEC-MIB
1.3.6.1.3.500.1ipsecMIBObjectsIPSEC-MIB
1.3.6.1.3.500.1.1ipsecIPSEC-MIB
1.3.6.1.3.500.1.1.5ipsecIpsecErrorStatsIPSEC-MIB
1.3.6.1.3.500.1.1.5.7ipsecUnknownSpiErrorsIPSEC-MIB