All MIBs › IPSEC-SA-MON-MIB › ahReplayFailureTrap
ahReplayFailureTrap
Module: IPSEC-SA-MON-MIB
OID (symbolic): IPSEC-SA-MON-MIB::ahReplayFailureTrap
OID (numeric): 1.3.6.1.3.98.1.4.0.4
Node type: NOTIFICATION-TYPE
Description: IPsec packets with invalid sequence numbers were found in the specified AH SA. The total number of replay errors accumulated is sent for the specific row of the 'ipsecSaAhInTable' table for the SA; this provides the identity of the SA in which the error occurred.
Implementations SHOULD send one trap per SA (within a reasonable time period), rather than sending one trap per packet.
Examples
Send this trap to an SNMP manager — replace <manager> with the IP or hostname of your monitoring server (SNMPv2c):
snmptrap -v2c -c public <manager> '' IPSEC-SA-MON-MIB::ahReplayFailureTrap snmptrap -v2c -c public <manager> '' 1.3.6.1.3.98.1.4.0.4
Listen for incoming traps on the manager host (-f keeps it in the foreground, -Lo prints to stdout — useful for testing):
snmptrapd -f -Lo -c /dev/null authCommunity log public
Example snmptrapd log entry:
zoo11-linux.zoo [UDP: [192.168.30.111]:53169->[192.168.30.10]:162]: DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (25514929) 2 days, 22:52:29.29 SNMPv2-MIB::snmpTrapOID.0 = OID: IPSEC-SA-MON-MIB::ahReplayFailureTrap
Start monitoring Vendor-neutral IETF standard (IPsec/IKE VPN gateway or firewall, SA lifecycle) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the IPSEC-SA-MON-MIB::ahReplayFailureTrap OID value, configure state conditions and alerts, and monitor any Vendor-neutral IETF standard (IPsec/IKE VPN gateway or firewall, SA lifecycle) from a single console.
OID Breakdown
Upper-level ancestors (5 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.3 | experimental | APERTUS-NPG-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.3.98 | ipsecSaMonModule | IPSEC-SA-MON-MIB |
| 1.3.6.1.3.98.1 | ipsecSaMonitorMIB | IPSEC-SA-MON-MIB |
| 1.3.6.1.3.98.1.4 | saTraps | IPSEC-SA-MON-MIB |
| 1.3.6.1.3.98.1.4.0.4 | ahReplayFailureTrap | IPSEC-SA-MON-MIB |