All MIBs › IPSEC-SA-MON-MIB › espAuthFailureTrap
espAuthFailureTrap
Module: IPSEC-SA-MON-MIB
OID (symbolic): IPSEC-SA-MON-MIB::espAuthFailureTrap
OID (numeric): 1.3.6.1.3.98.1.4.0.1
Node type: NOTIFICATION-TYPE
Description: IPsec packets with invalid hashes were found in an inbound ESP SA. The total number of authentication errors accumulated is sent for the specific row of the 'ipsecSaEspInTable' table for the SA; this provides the identity of the SA in which the error occurred.
Implementations SHOULD send one trap per SA (within a reasonable time period), rather than sending one trap per packet.
Examples
Send this trap to an SNMP manager — replace <manager> with the IP or hostname of your monitoring server (SNMPv2c):
snmptrap -v2c -c public <manager> '' IPSEC-SA-MON-MIB::espAuthFailureTrap snmptrap -v2c -c public <manager> '' 1.3.6.1.3.98.1.4.0.1
Listen for incoming traps on the manager host (-f keeps it in the foreground, -Lo prints to stdout — useful for testing):
snmptrapd -f -Lo -c /dev/null authCommunity log public
Example snmptrapd log entry:
zoo11-linux.zoo [UDP: [192.168.30.111]:64318->[192.168.30.10]:162]: DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (342235966) 39 days, 14:39:19.66 SNMPv2-MIB::snmpTrapOID.0 = OID: IPSEC-SA-MON-MIB::espAuthFailureTrap
Start monitoring Vendor-neutral IETF standard (IPsec/IKE VPN gateway or firewall, SA lifecycle) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the IPSEC-SA-MON-MIB::espAuthFailureTrap OID value, configure state conditions and alerts, and monitor any Vendor-neutral IETF standard (IPsec/IKE VPN gateway or firewall, SA lifecycle) from a single console.
OID Breakdown
Upper-level ancestors (5 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.3 | experimental | APERTUS-NPG-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.3.98 | ipsecSaMonModule | IPSEC-SA-MON-MIB |
| 1.3.6.1.3.98.1 | ipsecSaMonitorMIB | IPSEC-SA-MON-MIB |
| 1.3.6.1.3.98.1.4 | saTraps | IPSEC-SA-MON-MIB |
| 1.3.6.1.3.98.1.4.0.1 | espAuthFailureTrap | IPSEC-SA-MON-MIB |