All MIBs › IPSEC-SA-MON-MIB › otherPolicyFailureTrap
otherPolicyFailureTrap
Module: IPSEC-SA-MON-MIB
OID (symbolic): IPSEC-SA-MON-MIB::otherPolicyFailureTrap
OID (numeric): 1.3.6.1.3.98.1.4.0.8
Node type: NOTIFICATION-TYPE
Description: Clear packets were found that should not have been sent to the entity in the clear. The total number of policy errors accumulated by the entity is sent, along with the source and destination addresses of the packet that triggered the trap.
Implementations SHOULD send one trap per source address pair (within a reasonable time period), rather than sending one trap per packet.
Examples
Send this trap to an SNMP manager — replace <manager> with the IP or hostname of your monitoring server (SNMPv2c):
snmptrap -v2c -c public <manager> '' IPSEC-SA-MON-MIB::otherPolicyFailureTrap snmptrap -v2c -c public <manager> '' 1.3.6.1.3.98.1.4.0.8
Listen for incoming traps on the manager host (-f keeps it in the foreground, -Lo prints to stdout — useful for testing):
snmptrapd -f -Lo -c /dev/null authCommunity log public
Example snmptrapd log entry:
zoo11-linux.zoo [UDP: [192.168.30.111]:50074->[192.168.30.10]:162]: DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (391731610) 45 days, 8:08:36.10 SNMPv2-MIB::snmpTrapOID.0 = OID: IPSEC-SA-MON-MIB::otherPolicyFailureTrap
SNMPv3 example:
snmptrap -v3 -l authPriv -u snmpv3user -a SHA -A "AuthPass1" -x AES -X "PrivPass1" <manager> '' IPSEC-SA-MON-MIB::otherPolicyFailureTrap
Start monitoring Vendor-neutral IETF standard (IPsec/IKE VPN gateway or firewall, SA lifecycle) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the IPSEC-SA-MON-MIB::otherPolicyFailureTrap OID value, configure state conditions and alerts, and monitor any Vendor-neutral IETF standard (IPsec/IKE VPN gateway or firewall, SA lifecycle) from a single console.
OID Breakdown
Upper-level ancestors (5 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.3 | experimental | APERTUS-NPG-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.3.98 | ipsecSaMonModule | IPSEC-SA-MON-MIB |
| 1.3.6.1.3.98.1 | ipsecSaMonitorMIB | IPSEC-SA-MON-MIB |
| 1.3.6.1.3.98.1.4 | saTraps | IPSEC-SA-MON-MIB |
| 1.3.6.1.3.98.1.4.0.8 | otherPolicyFailureTrap | IPSEC-SA-MON-MIB |