All MIBs › IPSEC-SA-MON-MIB › espInvalidSpiTrap
espInvalidSpiTrap
Module: IPSEC-SA-MON-MIB
OID (symbolic): IPSEC-SA-MON-MIB::espInvalidSpiTrap
OID (numeric): 1.3.6.1.3.98.1.4.0.7
Node type: NOTIFICATION-TYPE
Description: A packet with an unknown SPI was detected from the specified peer with the specified SPI using the specified protocol. The destination address of the received packet is specified by 'ipsecLocalAddress'.
The value 'ifIndex' may be 0 if this optional linkage is unsupported.
If the object 'ipsecSecurityProtocol' has the value for IPcomp, then the 'ipsecSPI' object is the CPI of the packet.
Implementations SHOULD send one trap per peer (within a reasonable time period), rather than sending one trap per packet.
Examples
Send this trap to an SNMP manager — replace <manager> with the IP or hostname of your monitoring server (SNMPv2c):
snmptrap -v2c -c public <manager> '' IPSEC-SA-MON-MIB::espInvalidSpiTrap snmptrap -v2c -c public <manager> '' 1.3.6.1.3.98.1.4.0.7
Listen for incoming traps on the manager host (-f keeps it in the foreground, -Lo prints to stdout — useful for testing):
snmptrapd -f -Lo -c /dev/null authCommunity log public
Example snmptrapd log entry:
zoo11-linux.zoo [UDP: [192.168.30.111]:56843->[192.168.30.10]:162]: DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (224734219) 26 days, 0:15:42.19 SNMPv2-MIB::snmpTrapOID.0 = OID: IPSEC-SA-MON-MIB::espInvalidSpiTrap
Start monitoring Vendor-neutral IETF standard (IPsec/IKE VPN gateway or firewall, SA lifecycle) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the IPSEC-SA-MON-MIB::espInvalidSpiTrap OID value, configure state conditions and alerts, and monitor any Vendor-neutral IETF standard (IPsec/IKE VPN gateway or firewall, SA lifecycle) from a single console.
OID Breakdown
Upper-level ancestors (5 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.3 | experimental | APERTUS-NPG-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.3.98 | ipsecSaMonModule | IPSEC-SA-MON-MIB |
| 1.3.6.1.3.98.1 | ipsecSaMonitorMIB | IPSEC-SA-MON-MIB |
| 1.3.6.1.3.98.1.4 | saTraps | IPSEC-SA-MON-MIB |
| 1.3.6.1.3.98.1.4.0.7 | espInvalidSpiTrap | IPSEC-SA-MON-MIB |