All MIBs › IPSEC-SA-MON-MIB › ahPolicyFailureTrap
ahPolicyFailureTrap
Module: IPSEC-SA-MON-MIB
OID (symbolic): IPSEC-SA-MON-MIB::ahPolicyFailureTrap
OID (numeric): 1.3.6.1.3.98.1.4.0.6
Node type: NOTIFICATION-TYPE
Description: IPsec packets carrying packets with invalid selectors for the specified AH SA were found. The total number of policy errors accumulated is sent for the specific row of the 'ipsecSaAhInTable' table for the SA; this provides the identity of the SA in which the error occurred.
Implementations SHOULD send one trap per SA (within a reasonable time period), rather than sending one trap per packet.
Examples
Send this trap to an SNMP manager — replace <manager> with the IP or hostname of your monitoring server (SNMPv2c):
snmptrap -v2c -c public <manager> '' IPSEC-SA-MON-MIB::ahPolicyFailureTrap snmptrap -v2c -c public <manager> '' 1.3.6.1.3.98.1.4.0.6
Listen for incoming traps on the manager host (-f keeps it in the foreground, -Lo prints to stdout — useful for testing):
snmptrapd -f -Lo -c /dev/null authCommunity log public
Example snmptrapd log entry:
zoo11-linux.zoo [UDP: [192.168.30.111]:61085->[192.168.30.10]:162]: DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (490817181) 56 days, 19:22:51.81 SNMPv2-MIB::snmpTrapOID.0 = OID: IPSEC-SA-MON-MIB::ahPolicyFailureTrap
Start monitoring Vendor-neutral IETF standard (IPsec/IKE VPN gateway or firewall, SA lifecycle) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the IPSEC-SA-MON-MIB::ahPolicyFailureTrap OID value, configure state conditions and alerts, and monitor any Vendor-neutral IETF standard (IPsec/IKE VPN gateway or firewall, SA lifecycle) from a single console.
OID Breakdown
Upper-level ancestors (5 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.3 | experimental | APERTUS-NPG-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.3.98 | ipsecSaMonModule | IPSEC-SA-MON-MIB |
| 1.3.6.1.3.98.1 | ipsecSaMonitorMIB | IPSEC-SA-MON-MIB |
| 1.3.6.1.3.98.1.4 | saTraps | IPSEC-SA-MON-MIB |
| 1.3.6.1.3.98.1.4.0.6 | ahPolicyFailureTrap | IPSEC-SA-MON-MIB |