All MIBs › IPSECV1-MIB
Category: Domain: Security, Technology: VPN, VPN and Security
Description: IPsec version 1 MIB providing SNMP objects for monitoring legacy IPsec security association state and encryption parameters.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is IPSECV1-MIB?
IPSECV1-MIB is a legacy vendor MIB providing SNMP objects for monitoring version-1 IPSec security association state and encryption parameters, predating the later IETF IPSec-flow-monitor and DOI standardization work. It belongs to the network security/VPN monitoring category. Based on its purpose, it would expose Security Association-level data such as active SA identifiers, negotiated encryption/authentication algorithms, and SA lifetime/expiration counters. Its monitoring value centers on the software/protocol status of early IPSec implementations - confirming SAs remain established and are using the expected encryption parameters, and catching SAs that have expired or failed to renegotiate - rather than any hardware attribute. It presumably predates and was superseded by later IETF work such as IPSEC-FLOW-MONITOR-MIB and the IPSEC-ISAKMP-IKE-DOI-TC textual conventions, and would have been deployed on early IPSec-capable VPN gateways/routers. Engineers can download the IPSECV1-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in IPSECV1-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- legacy IPSec-capable VPN gateway or router
Monitoring Examples
No module description or sample objects were available for this MIB, so specific object or table names cannot be grounded; its documented purpose implies polling per-SA encryption parameters and lifetime/expiration state, but no concrete object names can be confirmed from the available data.
This MIB depends on
Related MIBs
Imported Objects
From RFC-1212
| OBJECT-TYPE |
From RFC-1215
| TRAP-TYPE |
From RFC1155-SMI
| Counter | |
| Gauge | |
| TimeTicks | |
| enterprises |
From RFC1213-MIB
| DisplayString |
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| ibmIROCroutingIpSec | 1.3.6.1.4.1.2.6.119.4.9 | |||
| NTF ikeTunnelStart | 1.3.6.1.4.1.2.6.119.4.9.0.1 | This TRAP is generated when an IPsec IKE Phase-1 Tunnel is created. | ||
| NTF ikeTunnelStop | 1.3.6.1.4.1.2.6.119.4.9.0.2 | This TRAP is generated when an IPsec IKE Phase-1 Tunnel is stopped. | ||
| NTF ipSecTunnelStart | 1.3.6.1.4.1.2.6.119.4.9.0.3 | This TRAP is generated when an IPsec Phase-2 Tunnel is created. | ||
| NTF ipSecTunnelStop | 1.3.6.1.4.1.2.6.119.4.9.0.4 | This TRAP is generated when an IPsec Phase-2 Tunnel is stopped. | ||
| NTF ipSecAuthFail | 1.3.6.1.4.1.2.6.119.4.9.0.5 | This TRAP is generated when a IPsec Phase-2 authenication failure is detected. | ||
| NTF ipSecDecryptFail | 1.3.6.1.4.1.2.6.119.4.9.0.6 | This TRAP is generated when a IPsec Phase-2 decryption failure is detected. | ||
| ipSecLevels | 1.3.6.1.4.1.2.6.119.4.9.1 | |||
| INT ipSecMibLevel | 1.3.6.1.4.1.2.6.119.4.9.1.1 | INTEGER | read-only | The level of the IBM IPSec MIB. |
| ipSecPhaseOne | 1.3.6.1.4.1.2.6.119.4.9.2 | |||
| ikeTunnelTable | 1.3.6.1.4.1.2.6.119.4.9.2.1 | not-accessible | The objects defined in this table are used to for the management of IKE (Phase-1) Tunnel. There is one entry in this table for each Phase-1 Tunnel. | |
| ikeTunnelEntry | 1.3.6.1.4.1.2.6.119.4.9.2.1.1 | not-accessible | Each entry contains attributes associated with a Phase-1 IKE tunnel. | |
| INT ikeTunnelIndex | 1.3.6.1.4.1.2.6.119.4.9.2.1.1.1 | INTEGER | read-only | The index of the Phase-1 Tunnel table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The value of this object will wrap at 65535. |
| OCT ikeTunnelId | 1.3.6.1.4.1.2.6.119.4.9.2.1.1.2 | OCTET STRING | read-only | The internal ID of the Phase-1 Tunnel. |
| ADR ikeTunnelLocalAddr | 1.3.6.1.4.1.2.6.119.4.9.2.1.1.3 | IPSIpAddress | read-only | The local IP Address the Phase-1 Tunnel. |
| STR ikeTunnelLocalName | 1.3.6.1.4.1.2.6.119.4.9.2.1.1.4 | DisplayString | read-only | The local name of the Phase-1 Tunnel. |
| ADR ikeTunnelRemoteAddr | 1.3.6.1.4.1.2.6.119.4.9.2.1.1.5 | IPSIpAddress | read-only | The local IP Address the Phase-1 Tunnel. |
| STR ikeTunnelRemoteName | 1.3.6.1.4.1.2.6.119.4.9.2.1.1.6 | DisplayString | read-only | The remote name of the Phase-1 Tunnel. |
| INT ikeTunnelNegoMode | 1.3.6.1.4.1.2.6.119.4.9.2.1.1.7 | INTEGER | read-only | The negotiation mode of the Phase-1 Tunnel. |
| INT ikeTunnelLifetime | 1.3.6.1.4.1.2.6.119.4.9.2.1.1.8 | INTEGER | read-only | The lifetime of the Phase-1 Tunnel in seconds. |
| TIK ikeTunnelActiveTime | 1.3.6.1.4.1.2.6.119.4.9.2.1.1.9 | TimeTicks | read-only | The length of time the tunnel has been active in hundredths of seconds. |
| INT ikeTunnelSaRefreshThreshold | 1.3.6.1.4.1.2.6.119.4.9.2.1.1.10 | INTEGER | read-only | The security association refresh threshold percentage of the Phase-1 Tunnel. |
| CTR ikeTunnelTotalRefreshes | 1.3.6.1.4.1.2.6.119.4.9.2.1.1.11 | Counter | read-only | The total number of security associations refreshes completed. |
| CTR ikeTunnelInOctets | 1.3.6.1.4.1.2.6.119.4.9.2.1.1.12 | Counter | read-only | The total number of octets received by this Phase-1 Tunnel. |
| CTR ikeTunnelInPkts | 1.3.6.1.4.1.2.6.119.4.9.2.1.1.13 | Counter | read-only | The total number of packets received by this Phase-1 Tunnel. |
| CTR ikeTunnelInDropPkts | 1.3.6.1.4.1.2.6.119.4.9.2.1.1.14 | Counter | read-only | The total number of packets dropped by this Phase-1 Tunnel during receive processing. |
| CTR ikeTunnelInNotifys | 1.3.6.1.4.1.2.6.119.4.9.2.1.1.15 | Counter | read-only | The total number of notifications received by this Phase-1 Tunnel. |
| CTR ikeTunnelInP2Proposals | 1.3.6.1.4.1.2.6.119.4.9.2.1.1.16 | Counter | read-only | The total number of proposals received by this Phase-1 Tunnel. |
| CTR ikeTunnelInP2ProposalInvalids | 1.3.6.1.4.1.2.6.119.4.9.2.1.1.17 | Counter | read-only | The total number of proposals received by this Phase-1 Tunnel which were invalid. |
| CTR ikeTunnelInP2ProposalRejects | 1.3.6.1.4.1.2.6.119.4.9.2.1.1.18 | Counter | read-only | The total number of proposals received by this Phase-1 Tunnel which were rejected. |
| CTR ikeTunnelInSaDeleteRequests | 1.3.6.1.4.1.2.6.119.4.9.2.1.1.19 | Counter | read-only | The total number of security association deleted requests received by this Phase-1 Tunnel. |
| CTR ikeTunnelOutOctets | 1.3.6.1.4.1.2.6.119.4.9.2.1.1.20 | Counter | read-only | The total number of octets sent by this Phase-1 Tunnel. |
| CTR ikeTunnelOutPkts | 1.3.6.1.4.1.2.6.119.4.9.2.1.1.21 | Counter | read-only | The total number of packets sent by this Phase-1 Tunnel. |
| CTR ikeTunnelOutDropPkts | 1.3.6.1.4.1.2.6.119.4.9.2.1.1.22 | Counter | read-only | The total number of packets dropped by this Phase-1 Tunnel during send processing. |
| CTR ikeTunnelOutNotifys | 1.3.6.1.4.1.2.6.119.4.9.2.1.1.23 | Counter | read-only | The total number of notifications sent by this Phase-1 Tunnel. |
| CTR ikeTunnelOutP2Proposals | 1.3.6.1.4.1.2.6.119.4.9.2.1.1.24 | Counter | read-only | The total number of Phase-2 Proposals sent by this Phase-1 Tunnel. |
| CTR ikeTunnelOutP2ProposalRejects | 1.3.6.1.4.1.2.6.119.4.9.2.1.1.25 | Counter | read-only | The total number of Phase-2 Proposals sent by this Phase-1 Tunnel which were rejected. |
| CTR ikeTunnelOutSaDeleteRequests | 1.3.6.1.4.1.2.6.119.4.9.2.1.1.26 | Counter | read-only | The total number of security association deleted requests sent by this Phase-1 Tunnel. |
| INT ikeTunnelStatus | 1.3.6.1.4.1.2.6.119.4.9.2.1.1.27 | INTEGER | read-write | The status of the MIB table row. This object can be used to bring the tunnel down by setting value of this object to destroy(2). This object cannot be used to create a MIB table row. |
| ipSecPhaseTwo | 1.3.6.1.4.1.2.6.119.4.9.3 | |||
| ipSecGlobal | 1.3.6.1.4.1.2.6.119.4.9.3.1 | |||
| CTR ipSecGlobalActiveTunnels | 1.3.6.1.4.1.2.6.119.4.9.3.1.1 | Counter | read-only | The total number of currently active IPSec Phase-2 Tunnels. |
| CTR ipSecGlobalPreviousTunnels | 1.3.6.1.4.1.2.6.119.4.9.3.1.2 | Counter | read-only | The total number of previously active IPSec Phase-2 Tunnels. |
| CTR ipSecGlobalInOctets | 1.3.6.1.4.1.2.6.119.4.9.3.1.3 | Counter | read-only | The total number of octets received by all current and previous IPSec Phase-2 Tunnels. See also ipSecGlobalInOctWraps for the number of times this counter has wrapped. |
| CTR ipSecGlobalInPkts | 1.3.6.1.4.1.2.6.119.4.9.3.1.4 | Counter | read-only | The total number of packets received by all current and previous IPSec Phase-2 Tunnels. |
| CTR ipSecGlobalInDrops | 1.3.6.1.4.1.2.6.119.4.9.3.1.5 | Counter | read-only | The total number of packets dropped during receive processing by all current and previous IPSec Phase-2 Tunnels. |
| CTR ipSecGlobalInAuths | 1.3.6.1.4.1.2.6.119.4.9.3.1.6 | Counter | read-only | The total number of inbound authentication's performed by all current and previous IPSec Phase-2 Tunnels. |
| CTR ipSecGlobalInAuthFails | 1.3.6.1.4.1.2.6.119.4.9.3.1.7 | Counter | read-only | The total number of inbound authentication's which ended in failure by all current and previous IPSec Phase-2 Tunnels. |
| CTR ipSecGlobalInDecrypts | 1.3.6.1.4.1.2.6.119.4.9.3.1.8 | Counter | read-only | The total number of inbound decryption's performed by all current and previous IPSec Phase-2 Tunnels. |
| CTR ipSecGlobalInDecryptFails | 1.3.6.1.4.1.2.6.119.4.9.3.1.9 | Counter | read-only | The total number of inbound decryption's which ended in failure by all current and previous IPSec Phase-2 Tunnels. |
| CTR ipSecGlobalOutOctets | 1.3.6.1.4.1.2.6.119.4.9.3.1.10 | Counter | read-only | The total number of octets sent by all current and previous IPSec Phase-2 Tunnels. See also ipSecGlobalOutOctWraps for the number of times this counter has wrapped. |
| CTR ipSecGlobalOutPkts | 1.3.6.1.4.1.2.6.119.4.9.3.1.11 | Counter | read-only | The total number of packets sent by all current and previous IPSec Phase-2 Tunnels. |
| CTR ipSecGlobalOutDrops | 1.3.6.1.4.1.2.6.119.4.9.3.1.12 | Counter | read-only | The total number of packets dropped during send processing by all current and previous IPSec Phase-2 Tunnels. |
| CTR ipSecGlobalOutAuths | 1.3.6.1.4.1.2.6.119.4.9.3.1.13 | Counter | read-only | The total number of outbound authentication's performed by all current and previous IPSec Phase-2 Tunnels. |
| CTR ipSecGlobalOutAuthFails | 1.3.6.1.4.1.2.6.119.4.9.3.1.14 | Counter | read-only | The total number of outbound authentication's which ended in failure by all current and previous IPSec Phase-2 Tunnels. |
| CTR ipSecGlobalOutEncrypts | 1.3.6.1.4.1.2.6.119.4.9.3.1.15 | Counter | read-only | The total number of outbound encryption's performed by all current and previous IPSec Phase-2 Tunnels. |
| CTR ipSecGlobalOutEncryptFails | 1.3.6.1.4.1.2.6.119.4.9.3.1.16 | Counter | read-only | The total number of outbound encryption's which ended in failure by all current and previous IPSec Phase-2 Tunnels. |
| CTR ipSecGlobalInOctWraps | 1.3.6.1.4.1.2.6.119.4.9.3.1.17 | Counter | read-only | The number of times the total number of octets received counter (ipSecGlobalInOctets) has wrapped. |
| CTR ipSecGlobalOutOctWraps | 1.3.6.1.4.1.2.6.119.4.9.3.1.18 | Counter | read-only | The number of times the total number of octets sent counter (ipSecGlobalOutOctets) has wrapped. |
| ipSecTunnelTable | 1.3.6.1.4.1.2.6.119.4.9.3.2 | not-accessible | The IPSec Phase-2 Tunnel table. | |
| ipSecTunnelEntry | 1.3.6.1.4.1.2.6.119.4.9.3.2.1 | not-accessible | An IPSec Phase-2 Tunnel entry. | |
| INT ipSecTunnelIndex | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.1 | INTEGER | read-only | The index of the Phase-2 Tunnel table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The value of this object will wrap at 65535. |
| INT ipSecTunnelId | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.2 | INTEGER | read-only | The internal ID of the Phase-2 Tunnel. |
| INT ipSecTunnelIkeTunnelIndex | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.3 | INTEGER | read-only | The index of the related IKE Phase-1 Tunnel. (ikeTunnelIndex) |
| ADR ipSecTunnelLocalAddr | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.4 | IPSIpAddress | read-only | The local IP address of the Phase-2 Tunnel. |
| ADR ipSecTunnelRemoteAddr | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.5 | IPSIpAddress | read-only | The remote IP address of the Phase-2 Tunnel. |
| INT ipSecTunnelKeyType | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.6 | INTEGER | read-only | The type of key used by the Phase-2 Tunnel. |
| INT ipSecTunnelEncapMode | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.7 | INTEGER | read-only | The encapsulation mode used by the Phase-2 Tunnel. |
| TIK ipSecTunnelLifetime | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.8 | TimeTicks | read-only | The defined lifetime of the tunnel in hundredths of seconds. |
| TIK ipSecTunnelActiveTime | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.9 | TimeTicks | read-only | The length of time the tunnel has been active in hundredths of seconds. |
| INT ipSecTunnelSaRefreshThreshold | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.10 | INTEGER | read-only | The security association refresh threshold percentage of the tunnel. |
| CTR ipSecTunnelTotalRefreshes | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.11 | Counter | read-only | The number of security association refreshes performed. |
| CTR ipSecTunnelExpiredSaInstances | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.12 | Counter | read-only | The number of security association which have expired. |
| GAU ipSecTunnelCurrentSaInstances | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.13 | Gauge | read-only | The number of security associations which are currently active or expiring. |
| INT ipSecTunnelInSaEncrypt | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.14 | INTEGER | read-only | The encryption used by the inbound security association. |
| INT ipSecTunnelInSaAuthAlgo | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.15 | INTEGER | read-only | The authentication algorithm used by the inbound security association. |
| INT ipSecTunnelOutSaEncrypt | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.16 | INTEGER | read-only | The encryption used by the outbound security association. |
| INT ipSecTunnelOutSaAuthAlgo | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.17 | INTEGER | read-only | The authentication algorithm used by the outbound security association. |
| CTR ipSecTunnelInOctets | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.18 | Counter | read-only | The number of octets received. This value is accumulated BEFORE determining whether or not the packet should be decompressed. See also ipSecTunnelInOctWraps for the number of times this counter has wrapped. |
| CTR ipSecTunnelInDecompOctets | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.19 | Counter | read-only | The number of decompressed octets received. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of ipSecTunnelInOctets. See also ipSecTunnelInDecompOctWraps for the number of times this counter has wrapped. |
| CTR ipSecTunnelInPkts | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.20 | Counter | read-only | The number of packets received. |
| CTR ipSecTunnelInDropPkts | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.21 | Counter | read-only | The number of packets dropped during received processing. |
| CTR ipSecTunnelInAuths | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.22 | Counter | read-only | The total number of inbound authentication's performed. |
| CTR ipSecTunnelInAuthFails | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.23 | Counter | read-only | The number of inbound authentication's which failed. |
| CTR ipSecTunnelInDecrypts | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.24 | Counter | read-only | The total number of inbound decryption's performed. |
| CTR ipSecTunnelInDecryptFails | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.25 | Counter | read-only | The number of inbound decryption's which failed. |
| CTR ipSecTunnelOutOctets | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.26 | Counter | read-only | The number of octets sent. This value is accumulated AFTER determining whether or not the packet should be compressed. See also ipSecTunnelOutOctWraps for the number of times this counter has wrapped. |
| CTR ipSecTunnelOutUncompOctets | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.27 | Counter | read-only | The number of uncompressed octets sent. This value is accumulated BEFORE the packet is compress. If compression is not being used, this value will match the value of ipSecTunnelOutOctets. See also ipSecTunnelOutUncompOctWraps for the number of times this counter has wrapped. |
| CTR ipSecTunnelOutPkts | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.28 | Counter | read-only | The number of packets sent. |
| CTR ipSecTunnelOutDropPkts | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.29 | Counter | read-only | The number of packets dropped during send processing. |
| CTR ipSecTunnelOutAuths | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.30 | Counter | read-only | The total number of outbound authentication's performed. |
| CTR ipSecTunnelOutAuthFails | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.31 | Counter | read-only | The number of outbound authentication's which failed. |
| CTR ipSecTunnelOutEncrypts | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.32 | Counter | read-only | The total number of outbound encryption's performed. |
| CTR ipSecTunnelOutEncryptFails | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.33 | Counter | read-only | The number of outbound encryption's which failed. |
| INT ipSecTunnelStatus | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.34 | INTEGER | read-write | The status of the MIB table row. This object can be used to: 1) allow user-data traffic flow through this tunnel by setting this the value of this object to active (1). 2 bring the tunnel down by setting the value of this object to destroy(2). 3) stop all user-data traffic flow through the tunnel by setting the value of this object to disable(3). This object cannot be used to create a MIB table row. Valid Status Changes New Status +---------+---------+---------+ Current Status | active | destroy | disable | +---------------+=========+=========+=========+ | active | Valid | Valid | Valid | +---------------+---------+---------+---------+ | destroy | Invalid | Invalid | Invalid | +---------------+---------+---------+---------+ | disable | Valid | Valid | Valid | +---------------+---------+---------+---------+ |
| CTR ipSecTunnelInOctWraps | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.35 | Counter | read-only | The number of times the octets received counter (ipSecTunnelInOctets) has wrapped. |
| CTR ipSecTunnelInDecompOctWraps | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.36 | Counter | read-only | The number of times the decompressed octets received counter (ipSecTunnelInDecompOctets) has wrapped. |
| CTR ipSecTunnelOutOctWraps | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.37 | Counter | read-only | The number of times the octets sent counter (ipSecTunnelOutOctets) has wrapped. |
| CTR ipSecTunnelOutUncompOctWraps | 1.3.6.1.4.1.2.6.119.4.9.3.2.1.38 | Counter | read-only | The number of times the uncompressed octets sent counter (ipSecTunnelOutUncompOctets) has wrapped. |
| ipSecClientTable | 1.3.6.1.4.1.2.6.119.4.9.3.3 | not-accessible | The IPSec Phase-2 Tunnel Client table. | |
| ipSecClientEntry | 1.3.6.1.4.1.2.6.119.4.9.3.3.1 | not-accessible | An IPSec Phase-2 Tunnel Client entry. | |
| INT ipSecClientIndex | 1.3.6.1.4.1.2.6.119.4.9.3.3.1.1 | INTEGER | read-only | The number of the Client associated with the Phase-2 Tunnel table. The value of this number begins at one and is incremented with each Client associated with a Phase-2 Tunnel. For example, each Phase-2 Tunnel may have Client Indices of 1 through 65,535. The value of this object will wrap at 65535. |
| STR ipSecClientLocalName | 1.3.6.1.4.1.2.6.119.4.9.3.3.1.2 | DisplayString | read-only | The local name of the Client. |
| INT ipSecClientLocalType | 1.3.6.1.4.1.2.6.119.4.9.3.3.1.3 | INTEGER | read-only | The local entry type. Possible values are: 1) The local IP Address Range is being used, or 2) The local IP Subnet Mask is being used. |
| INT ipSecClientLocalProtocol | 1.3.6.1.4.1.2.6.119.4.9.3.3.1.4 | INTEGER | read-only | The local protocol number for this Client. |
| ADR ipSecClientLocalSubnetMask | 1.3.6.1.4.1.2.6.119.4.9.3.3.1.5 | IPSIpAddress | read-only | The local subnet mask of the Client. |
| ADR ipSecClientLocalHiAddr | 1.3.6.1.4.1.2.6.119.4.9.3.3.1.6 | IPSIpAddress | read-only | The local high IP Address of the Client. |
| ADR ipSecClientLocalLoAddr | 1.3.6.1.4.1.2.6.119.4.9.3.3.1.7 | IPSIpAddress | read-only | The local low IP Address of the Client. |
| INT ipSecClientLocalPort | 1.3.6.1.4.1.2.6.119.4.9.3.3.1.8 | INTEGER | read-only | The local port of the Client. |
| STR ipSecClientRemoteName | 1.3.6.1.4.1.2.6.119.4.9.3.3.1.9 | DisplayString | read-only | The remote name of the Client. |
| INT ipSecClientRemoteType | 1.3.6.1.4.1.2.6.119.4.9.3.3.1.10 | INTEGER | read-only | The remote entry type. Possible values are: 1) The remote IP Address Range is being used, or 2) The remote IP Subnet Mask is being used. |
| INT ipSecClientRemoteProtocol | 1.3.6.1.4.1.2.6.119.4.9.3.3.1.11 | INTEGER | read-only | The remote protocol number for this Client. |
| ADR ipSecClientRemoteSubnetMask | 1.3.6.1.4.1.2.6.119.4.9.3.3.1.12 | IPSIpAddress | read-only | The remote subnet mask of the Client. |
| ADR ipSecClientRemoteHiAddr | 1.3.6.1.4.1.2.6.119.4.9.3.3.1.13 | IPSIpAddress | read-only | The remote high IP Address of the Client. |
| ADR ipSecClientRemoteLoAddr | 1.3.6.1.4.1.2.6.119.4.9.3.3.1.14 | IPSIpAddress | read-only | The remote low IP Address of the Client. |
| INT ipSecClientRemotePort | 1.3.6.1.4.1.2.6.119.4.9.3.3.1.15 | INTEGER | read-only | The remote port of the Client. |
| ipSecSpiTable | 1.3.6.1.4.1.2.6.119.4.9.3.4 | not-accessible | The IPSec Phase-2 Security Protection Index table. | |
| ipSecSpiEntry | 1.3.6.1.4.1.2.6.119.4.9.3.4.1 | not-accessible | An IPSec Phase-2 Security Protection Index entry. | |
| INT ipSecSpiIndex | 1.3.6.1.4.1.2.6.119.4.9.3.4.1.1 | INTEGER | read-only | The number of the SPI associated with the Phase-2 Tunnel table. The value of this number begins at one and is incremented with each SPI associated with a Phase-2 Tunnel. For example, each Phase-2 Tunnel may have Client Indices of 1 through 65,535. The value of this object will wrap at 65535. |
| INT ipSecSpiDirection | 1.3.6.1.4.1.2.6.119.4.9.3.4.1.2 | INTEGER | read-only | The direction of the SPI. |
| INT ipSecSpiValue | 1.3.6.1.4.1.2.6.119.4.9.3.4.1.3 | INTEGER | read-only | The value of the SPI. |
| INT ipSecSpiProtocol | 1.3.6.1.4.1.2.6.119.4.9.3.4.1.4 | INTEGER | read-only | The protocol of the SPI. |
| INT ipSecSpiStatus | 1.3.6.1.4.1.2.6.119.4.9.3.4.1.5 | INTEGER | read-only | The status of the SPI. |
| ipSecHistory | 1.3.6.1.4.1.2.6.119.4.9.4 | |||
| ipSecTunnelHistTable | 1.3.6.1.4.1.2.6.119.4.9.4.2 | not-accessible | The IPSec Phase-2 Tunnel History table. | |
| ipSecTunnelHistEntry | 1.3.6.1.4.1.2.6.119.4.9.4.2.1 | not-accessible | An IPSec Phase-2 Tunnel History entry. | |
| INT ipSecTunnelHistIndex | 1.3.6.1.4.1.2.6.119.4.9.4.2.1.1 | INTEGER | read-only | The index of the IPSec Phase-2 Tunnel History table. The value of the index is a number which begins at one and is incremented with each tunnel that ends. The value of this object will wrap at 65535. |
| INT ipSecTunnelHistId | 1.3.6.1.4.1.2.6.119.4.9.4.2.1.2 | INTEGER | read-only | The internal ID of the Phase-2 Tunnel. |
| ADR ipSecTunnelHistLocalAddr | 1.3.6.1.4.1.2.6.119.4.9.4.2.1.3 | IPSIpAddress | read-only | The local IP address of the Phase-2 Tunnel. |
| ADR ipSecTunnelHistRemoteAddr | 1.3.6.1.4.1.2.6.119.4.9.4.2.1.4 | IPSIpAddress | read-only | The remote IP address of the Phase-2 Tunnel. |
| TIK ipSecTunnelHistActiveTime | 1.3.6.1.4.1.2.6.119.4.9.4.2.1.5 | TimeTicks | read-only | The length of time the tunnel was active in hundredths of seconds. |
| CTR ipSecTunnelHistTotalRefreshes | 1.3.6.1.4.1.2.6.119.4.9.4.2.1.6 | Counter | read-only | The number of security association refreshes performed. |
| CTR ipSecTunnelHistTotalSas | 1.3.6.1.4.1.2.6.119.4.9.4.2.1.7 | Counter | read-only | The number of security associations which were active or or had expired during the life of the tunnel. |
| CTR ipSecTunnelHistInOctets | 1.3.6.1.4.1.2.6.119.4.9.4.2.1.8 | Counter | read-only | The number of octets received. This value is accumulated BEFORE determining whether or not the packet should be decompressed. See also ipSecTunnelHistInOctWraps for the number of times this counter has wrapped. |
| CTR ipSecTunnelHistInDecompOctets | 1.3.6.1.4.1.2.6.119.4.9.4.2.1.9 | Counter | read-only | The number of decompressed octets received. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of ipSecTunnelHistInOctets. See also ipSecTunnelHistInDecompOctWraps for the number of times this counter has wrapped. |
| CTR ipSecTunnelHistInPkts | 1.3.6.1.4.1.2.6.119.4.9.4.2.1.10 | Counter | read-only | The number of packets received. |
| CTR ipSecTunnelHistInDropPkts | 1.3.6.1.4.1.2.6.119.4.9.4.2.1.11 | Counter | read-only | The number of packets dropped during received processing. |
| CTR ipSecTunnelHistInAuths | 1.3.6.1.4.1.2.6.119.4.9.4.2.1.12 | Counter | read-only | The total number of inbound authentication's performed. |
| CTR ipSecTunnelHistInAuthFails | 1.3.6.1.4.1.2.6.119.4.9.4.2.1.13 | Counter | read-only | The number of inbound authentication's which failed. |
| CTR ipSecTunnelHistInDecrypts | 1.3.6.1.4.1.2.6.119.4.9.4.2.1.14 | Counter | read-only | The total number of inbound decryption's performed. |
| CTR ipSecTunnelHistInDecryptFails | 1.3.6.1.4.1.2.6.119.4.9.4.2.1.15 | Counter | read-only | The number of inbound decryption's which failed. |
| CTR ipSecTunnelHistOutOctets | 1.3.6.1.4.1.2.6.119.4.9.4.2.1.16 | Counter | read-only | The number of octets sent. This value is accumulated AFTER determining whether or not the packet should be compressed. See also ipSecTunnelHistOutOctWraps for the number of times this counter has wrapped. |
| CTR ipSecTunnelHistOutUncompOctets | 1.3.6.1.4.1.2.6.119.4.9.4.2.1.17 | Counter | read-only | The number of uncompressed octets sent. This value is accumulated BEFORE the packet is compress. If compression is not being used, this value will match the value of ipSecTunnelHistOutOctets. See also ipSecTunnelHistOutUncompOctWraps for the number of times this counter has wrapped. |
| CTR ipSecTunnelHistOutPkts | 1.3.6.1.4.1.2.6.119.4.9.4.2.1.18 | Counter | read-only | The number of packets sent. |
| CTR ipSecTunnelHistOutDropPkts | 1.3.6.1.4.1.2.6.119.4.9.4.2.1.19 | Counter | read-only | The number of packets dropped during send processing. |
| CTR ipSecTunnelHistOutAuths | 1.3.6.1.4.1.2.6.119.4.9.4.2.1.20 | Counter | read-only | The total number of outbound authentication's performed. |
| CTR ipSecTunnelHistOutAuthFails | 1.3.6.1.4.1.2.6.119.4.9.4.2.1.21 | Counter | read-only | The number of outbound authentication's which failed. |
| CTR ipSecTunnelHistOutEncrypts | 1.3.6.1.4.1.2.6.119.4.9.4.2.1.22 | Counter | read-only | The total number of outbound encryption's performed. |
| CTR ipSecTunnelHistOutEncryptFails | 1.3.6.1.4.1.2.6.119.4.9.4.2.1.23 | Counter | read-only | The number of outbound encryption's which failed. |
| CTR ipSecTunnelHistInOctWraps | 1.3.6.1.4.1.2.6.119.4.9.4.2.1.24 | Counter | read-only | The number of times the octets received counter (ipSecTunnelHistInOctets) has wrapped. |
| CTR ipSecTunnelHistInDecompOctWraps | 1.3.6.1.4.1.2.6.119.4.9.4.2.1.25 | Counter | read-only | The number of times the decompressed octets received counter (ipSecTunnelHistInDecompOctets) has wrapped. |
| CTR ipSecTunnelHistOutOctWraps | 1.3.6.1.4.1.2.6.119.4.9.4.2.1.26 | Counter | read-only | The number times the octets sent counter (ipSecTunnelHistOutOctets) has wrapped. |
| CTR ipSecTunnelHistOutUncompOctWraps | 1.3.6.1.4.1.2.6.119.4.9.4.2.1.27 | Counter | read-only | The number times the uncompressed octets sent counter (ipSecTunnelHistOutUncompOctets) has wrapped. |
| ipSecFailTable | 1.3.6.1.4.1.2.6.119.4.9.4.3 | not-accessible | The IPSec Phase-2 Failure table. | |
| ipSecFailEntry | 1.3.6.1.4.1.2.6.119.4.9.4.3.1 | not-accessible | An IPSec Phase-2 Failure entry. | |
| INT ipSecFailIndex | 1.3.6.1.4.1.2.6.119.4.9.4.3.1.1 | INTEGER | read-only | The index of the IPSec Phase-2 Failure table. The value of the index is a number which begins at one and is incremented with each failure that occurs. The value of this object will wrap at 65535. |
| INT ipSecFailReason | 1.3.6.1.4.1.2.6.119.4.9.4.3.1.2 | INTEGER | read-only | The reason for the failure. |
| TIK ipSecFailTime | 1.3.6.1.4.1.2.6.119.4.9.4.3.1.3 | TimeTicks | read-only | The time of the failure in hundredths of seconds. |
| INT ipSecFailTunnelIndex | 1.3.6.1.4.1.2.6.119.4.9.4.3.1.4 | INTEGER | read-only | The Phase-2 Tunnel index (ipSecTunnelIndex). |
| INT ipSecFailTunnelId | 1.3.6.1.4.1.2.6.119.4.9.4.3.1.5 | INTEGER | read-only | The internal ID of the Phase-2 Tunnel. |
| INT ipSecFailSaSpi | 1.3.6.1.4.1.2.6.119.4.9.4.3.1.6 | INTEGER | read-only | The security association SPI value. |
| ADR ipSecFailPktSrcAddr | 1.3.6.1.4.1.2.6.119.4.9.4.3.1.7 | IPSIpAddress | read-only | The packet's source IP address. |
| ADR ipSecFailPktDstAddr | 1.3.6.1.4.1.2.6.119.4.9.4.3.1.8 | IPSIpAddress | read-only | The packet's destination IP address. |
| ipSecTrapCntl | 1.3.6.1.4.1.2.6.119.4.9.5 | |||
| INT ipSecTrapCntlIkeTunnelStart | 1.3.6.1.4.1.2.6.119.4.9.5.1 | INTEGER | read-write | This object defines the administrative state of sending the IPSec IKE Phase-1 Tunnel Start TRAP |
| INT ipSecTrapCntlIkeTunnelStop | 1.3.6.1.4.1.2.6.119.4.9.5.2 | INTEGER | read-write | This object defines the administrative state of sending the IPSec IKE Phase-1 Tunnel Stop TRAP |
| INT ipSecTrapCntlP2TunnelStart | 1.3.6.1.4.1.2.6.119.4.9.5.3 | INTEGER | read-write | This object defines the administrative state of sending the IPSec Phase-2 Tunnel Start TRAP |
| INT ipSecTrapCntlP2TunnelStop | 1.3.6.1.4.1.2.6.119.4.9.5.4 | INTEGER | read-write | This object defines the administrative state of sending the IPSec Phase-2 Tunnel Stop TRAP |
| INT ipSecTrapCntlAuthFail | 1.3.6.1.4.1.2.6.119.4.9.5.5 | INTEGER | read-write | This object defines the administrative state of sending the IPSec Authentication Failure TRAP |
| INT ipSecTrapCntlDecryptFail | 1.3.6.1.4.1.2.6.119.4.9.5.6 | INTEGER | read-write | This object defines the administrative state of sending the IPSec Decryption Failure TRAP |
RFC description
IBM IPSec (Internet Protocol Security) management MIB for tunnel configuration, encryption, and security monitoring.
Start monitoring Legacy IPSec-capable VPN gateway or router (version-1 SA monitoring) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.