All MIBs › IPSEC-SA-MON-MIB › ipsecUnknownSpiErrors
ipsecUnknownSpiErrors
Module: IPSEC-SA-MON-MIB
OID (symbolic): IPSEC-SA-MON-MIB::ipsecUnknownSpiErrors
OID (numeric): 1.3.6.1.3.98.1.3.7
Node type: OBJECT-TYPE
Type: Counter32
Access: read-only
Description: The total number of packets received by the entity since boot time with SPIs or CPIs that were not valid.
What is ipsecUnknownSpiErrors?
The device-wide total number of packets received since boot carrying an SPI or CPI that didn't match any known SA; a rising count can indicate a peer using a stale/torn-down SA, or a misdirected/spoofed packet.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.3.98.1.3.7 snmpwalk -v2c -c public <target> IPSEC-SA-MON-MIB::ipsecUnknownSpiErrors
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.3.98.1.3.7.1 snmpget -v2c -c public <target> IPSEC-SA-MON-MIB::ipsecUnknownSpiErrors.1
Start monitoring Vendor-neutral IETF standard (IPsec/IKE VPN gateway or firewall, SA lifecycle) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the IPSEC-SA-MON-MIB::ipsecUnknownSpiErrors OID value, configure state conditions and alerts, and monitor any Vendor-neutral IETF standard (IPsec/IKE VPN gateway or firewall, SA lifecycle) from a single console.
OID Breakdown
Upper-level ancestors (5 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.3 | experimental | APERTUS-NPG-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.3.98 | ipsecSaMonModule | IPSEC-SA-MON-MIB |
| 1.3.6.1.3.98.1 | ipsecSaMonitorMIB | IPSEC-SA-MON-MIB |
| 1.3.6.1.3.98.1.3 | saErrors | IPSEC-SA-MON-MIB |
| 1.3.6.1.3.98.1.3.7 | ipsecUnknownSpiErrors | IPSEC-SA-MON-MIB |