IPsecT1-MIB

All MIBs › IPsecT1-MIB

Organization: Tivoli Systems and Cisco Systems

Last Updated: 1999-11-04

Category: Domain: Security, Technology: VPN, VPN and Security

Description: Tivoli/Cisco IPsec Tier 1 MIB providing SNMP objects for monitoring IPsec security associations and related IKE statistics.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is IPsecT1-MIB?

IPsecT1-MIB, associated with Tivoli/Cisco management tooling, is a MIB module for managing the IP Security Protocol, modeling IPsec security associations (SAs) and related IKE (Internet Key Exchange) statistics at a foundational tier. It exposes objects describing SA state, cryptographic parameters, and IKE negotiation counters. Its primary monitoring value is software/security-service status, verifying that IPsec tunnels and SAs are established and that IKE negotiations are succeeding, which is critical for detecting VPN outages, rather than any physical hardware indicator. It is closely tied to the IPsec/IKE protocol standards it manages and is often layered alongside vendor-specific VPN MIBs. Typical deployment is routers, firewalls, or VPN gateways terminating IPsec tunnels in enterprise or service-provider networks. Engineers can download the IPsecT1-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in IPsecT1-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

IPsec-capable routers, firewalls, and VPN gateways

Monitoring Examples

No sample objects were captured for this MIB; based on the module description, an admin would typically poll IPsec security-association status and IKE statistics to confirm a tunnel is active and its keys are being renegotiated on schedule, with a stuck or absent SA indicating a failed IKE negotiation.

What Can Be Monitored

IPsec security association status
IKE negotiation statistics
SA cryptographic parameters
tunnel establishment state

Imported Objects

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Counter64
Gauge32
Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
enterprises

From SNMPv2-TC

DisplayString
TEXTUAL-CONVENTION
TimeInterval
TimeStamp
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
ipsecMIB	1.3.6.1.4.1.2.6.168.1.1.1			This is the MIB Module for objects to manage the IP Security Protocol.
ipsecMIBNotifications	1.3.6.1.4.1.2.6.168.1.1.1.0
NTF ikeTunnelStart	1.3.6.1.4.1.2.6.168.1.1.1.0.1			This notification is generated when an ipsec Phase-1 IKE Tunnel becomes active.
NTF ikeTunnelStop	1.3.6.1.4.1.2.6.168.1.1.1.0.2			This notification is generated when an ipsec Phase-1 IKE Tunnel becomes inactive.
NTF ikeSysFailure	1.3.6.1.4.1.2.6.168.1.1.1.0.3			This notification is generated when the processing for an ipsec Phase-1 IKE Tunnel experiences an internal or system capacity error.
NTF ikeCertCrlFailure	1.3.6.1.4.1.2.6.168.1.1.1.0.4			This notification is generated when the processing for an ipsec Phase-1 IKE Tunnel experiences a Certificate or a Certificate Revoke List (CRL) related error.
NTF ikeProtocolFailure	1.3.6.1.4.1.2.6.168.1.1.1.0.5			This notification is generated when the processing for an ipsec Phase-1 IKE Tunnel experiences a protocol related error.
NTF ikeNoSa	1.3.6.1.4.1.2.6.168.1.1.1.0.6			This notification is generated when the processing for an ipsec Phase-1 IKE Tunnel experiences a non-existent security association error.
NTF ipsecTunnelStart	1.3.6.1.4.1.2.6.168.1.1.1.0.7			This notification is generated when an ipsec Phase-2 Tunnel becomes active.
NTF ipsecTunnelStop	1.3.6.1.4.1.2.6.168.1.1.1.0.8			This notification is generated when an ipsec Phase-2 Tunnel becomes inactive.
NTF ipsecSysFailure	1.3.6.1.4.1.2.6.168.1.1.1.0.9			This notification is generated when the processing for an ipsec Phase-2 Tunnel experiences an internal or system capacity error.
NTF ipsecSetUpFailure	1.3.6.1.4.1.2.6.168.1.1.1.0.10			This notification is generated when the setup for an ipsec Phase-2 Tunnel fails.
NTF ipsecEarilyTunnelTerm	1.3.6.1.4.1.2.6.168.1.1.1.0.11			This notification is generated when an an ipsec Phase-2 Tunnel is terminated earily or before expected.
NTF ipsecProtocolFailure	1.3.6.1.4.1.2.6.168.1.1.1.0.12			This notification is generated when the processing for an ipsec Phase-2 Tunnel experiences a protocol related error.
NTF ipsecNoSa	1.3.6.1.4.1.2.6.168.1.1.1.0.13			This notification is generated when the processing for an ipsec Phase-2 Tunnel experiences a non-existent security association error.
ipsecMIBObjects	1.3.6.1.4.1.2.6.168.1.1.1.1
ipsecLevels	1.3.6.1.4.1.2.6.168.1.1.1.1.1
I32 ipsecMibLevel	1.3.6.1.4.1.2.6.168.1.1.1.1.1.1	Integer32	read-only	The level of the ipsec MIB.
ipsecPhaseOne	1.3.6.1.4.1.2.6.168.1.1.1.1.2
ikeGlobalStats	1.3.6.1.4.1.2.6.168.1.1.1.1.2.1
G32 ikeGlobalActiveTunnels	1.3.6.1.4.1.2.6.168.1.1.1.1.2.1.1	Gauge32	read-only	The number of currently active ipsec Phase-1 IKE Tunnels.
C32 ikeGlobalPreviousTunnels	1.3.6.1.4.1.2.6.168.1.1.1.1.2.1.2	Counter32	read-only	The total number of previously active ipsec Phase-1 IKE Tunnels.
C32 ikeGlobalInOctets	1.3.6.1.4.1.2.6.168.1.1.1.1.2.1.3	Counter32	read-only	The total number of octets received by all currently and previously active ipsec Phase-1 IKE Tunnels.
C32 ikeGlobalInPkts	1.3.6.1.4.1.2.6.168.1.1.1.1.2.1.4	Counter32	read-only	The total number of packets received by all currently and previously active ipsec Phase-1 IKE Tunnels.
C32 ikeGlobalInDropPkts	1.3.6.1.4.1.2.6.168.1.1.1.1.2.1.5	Counter32	read-only	The total number of packets which were dropped during receive processing by all currently and previously active ipsec Phase-1 IKE Tunnels.
C32 ikeGlobalInNotifys	1.3.6.1.4.1.2.6.168.1.1.1.1.2.1.6	Counter32	read-only	The total number of notifys received by all currently and previously active ipsec Phase-1 IKE Tunnels.
C32 ikeGlobalInP2Exchgs	1.3.6.1.4.1.2.6.168.1.1.1.1.2.1.7	Counter32	read-only	The total number of ipsec Phase-2 exchanges received by all currently and previously active ipsec Phase-1 IKE Tunnels.
C32 ikeGlobalInP2ExchgInvalids	1.3.6.1.4.1.2.6.168.1.1.1.1.2.1.8	Counter32	read-only	The total number of ipsec Phase-2 exchanges which were received and found to be invalid by all currently and previously active ipsec Phase-1 IKE Tunnels.
C32 ikeGlobalInP2ExchgRejects	1.3.6.1.4.1.2.6.168.1.1.1.1.2.1.9	Counter32	read-only	The total number of ipsec Phase-2 exchanges which were received and rejected by all currently and previously active ipsec Phase-1 IKE Tunnels.
C32 ikeGlobalInP2SaDelRequests	1.3.6.1.4.1.2.6.168.1.1.1.1.2.1.10	Counter32	read-only	The total number of ipsec Phase-2 security association delete requests received by all currently and previously active and ipsec Phase-1 IKE Tunnels.
C32 ikeGlobalOutOctets	1.3.6.1.4.1.2.6.168.1.1.1.1.2.1.11	Counter32	read-only	The total number of octets sent by all currently and previously active and ipsec Phase-1 IKE Tunnels.
C32 ikeGlobalOutPkts	1.3.6.1.4.1.2.6.168.1.1.1.1.2.1.12	Counter32	read-only	The total number of packets sent by all currently and previously active and ipsec Phase-1 IKE Tunnels.
C32 ikeGlobalOutDropPkts	1.3.6.1.4.1.2.6.168.1.1.1.1.2.1.13	Counter32	read-only	The total number of packets which were dropped during send processing by all currently and previously active ipsec Phase-1 IKE Tunnels.
C32 ikeGlobalOutNotifys	1.3.6.1.4.1.2.6.168.1.1.1.1.2.1.14	Counter32	read-only	The total number of notifys sent by all currently and previously active ipsec Phase-1 IKE Tunnels.
C32 ikeGlobalOutP2Exchgs	1.3.6.1.4.1.2.6.168.1.1.1.1.2.1.15	Counter32	read-only	The total number of ipsec Phase-2 exchanges which were sent by all currently and previously active and ipsec Phase-1 IKE Tunnels.
C32 ikeGlobalOutP2ExchgInvalids	1.3.6.1.4.1.2.6.168.1.1.1.1.2.1.16	Counter32	read-only	The total number of ipsec Phase-2 exchanges which were sent and found to be invalid by all currently and previously active ipsec Phase-1 IKE Tunnels.
C32 ikeGlobalOutP2ExchgRejects	1.3.6.1.4.1.2.6.168.1.1.1.1.2.1.17	Counter32	read-only	The total number of ipsec Phase-2 exchanges which were sent and rejected by all currently and previously active ipsec Phase-1 IKE Tunnels.
C32 ikeGlobalOutP2SaDelRequests	1.3.6.1.4.1.2.6.168.1.1.1.1.2.1.18	Counter32	read-only	The total number of ipsec Phase-2 security association delete requests sent by all currently and previously active ipsec Phase-1 IKE Tunnels.
C32 ikeGlobalInitTunnels	1.3.6.1.4.1.2.6.168.1.1.1.1.2.1.19	Counter32	read-only	The total number of ipsec Phase-1 IKE Tunnels which were locally initiated.
C32 ikeGlobalInitTunnelFails	1.3.6.1.4.1.2.6.168.1.1.1.1.2.1.20	Counter32	read-only	The total number of ipsec Phase-1 IKE Tunnels which were locally initiated and failed to activate.
C32 ikeGlobalRespTunnelFails	1.3.6.1.4.1.2.6.168.1.1.1.1.2.1.21	Counter32	read-only	The total number of ipsec Phase-1 IKE Tunnels which were remotely initiated and failed to activate.
C32 ikeGlobalSysCapFails	1.3.6.1.4.1.2.6.168.1.1.1.1.2.1.22	Counter32	read-only	The total number of system capcity failures which occurred during processing of all current and previously active and ipsec Phase-1 IKE Tunnels.
C32 ikeGlobalAuthFails	1.3.6.1.4.1.2.6.168.1.1.1.1.2.1.23	Counter32	read-only	The total number of authentications which ended in failure by all current and previous ipsec Phase-1 IKE Tunnels.
C32 ikeGlobalDecryptFails	1.3.6.1.4.1.2.6.168.1.1.1.1.2.1.24	Counter32	read-only	The total number of decryptions which ended in failure by all current and previous ipsec Phase-1 IKE Tunnels.
C32 ikeGlobalHashValidFails	1.3.6.1.4.1.2.6.168.1.1.1.1.2.1.25	Counter32	read-only	The total number of hash validations which ended in failure by all current and previous ipsec Phase-1 IKE Tunnels.
C32 ikeGlobalNoSaFails	1.3.6.1.4.1.2.6.168.1.1.1.1.2.1.26	Counter32	read-only	The total number of non-existent Security Assocication in failures which occurred during processing of all current and previous ipsec Phase-1 IKE Tunnels.
C32 ipsecGlobalProtocolUseFails	1.3.6.1.4.1.2.6.168.1.1.1.1.2.1.28	Counter32	read-only	The total number of protocol use failures which occurred during processing of all current and previously active and ipsec Phase-2 Tunnels.
C32 ipsecGlobalNoSaFails	1.3.6.1.4.1.2.6.168.1.1.1.1.2.1.29	Counter32	read-only	The total number of non-existent Security Assocication in failures which occurred during processing of all current and previous ipsec Phase-2 Tunnels.
C32 ipsecGlobalSysCapFails	1.3.6.1.4.1.2.6.168.1.1.1.1.2.1.30	Counter32	read-only	The total number of system capcity failures which occurred during processing of all current and previously active and ipsec Phase-2 Tunnels.
ikePeerTable	1.3.6.1.4.1.2.6.168.1.1.1.1.2.2		not-accessible	The ipsec Phase-1 Internet Key Exchange Peer Table. There is one entry in this table for each ipsec Phase-1 IKE peer association which is currently associated with an active ipsec Phase-2 Tunnel. The ipsec Phase-1 IKE Tunnel associated with this ipsec Phase-1 IKE peer association may or may not be currently active.
ikePeerEntry	1.3.6.1.4.1.2.6.168.1.1.1.1.2.2.1		not-accessible	Each entry contains the attributes associated with an ipsec Phase-1 IKE peer association.
IKE ikePeerLocalType	1.3.6.1.4.1.2.6.168.1.1.1.1.2.2.1.1	IkePeerType	not-accessible	The type of local peer identity. The local peer may be indentified by: 1. an IP address, or 2. a host name.
STR ikePeerLocalValue	1.3.6.1.4.1.2.6.168.1.1.1.1.2.2.1.2	DisplayString	not-accessible	The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is a host name, then this is the host name used to identify the local peer.
IKE ikePeerRemoteType	1.3.6.1.4.1.2.6.168.1.1.1.1.2.2.1.3	IkePeerType	not-accessible	The type of remote peer identity. The remote peer may be indentified by: 1. an IP address, or 2. a host name.
STR ikePeerRemoteValue	1.3.6.1.4.1.2.6.168.1.1.1.1.2.2.1.4	DisplayString	not-accessible	The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is a host name, then this is the host name used to identify the remote peer.
I32 ikePeerIntIndex	1.3.6.1.4.1.2.6.168.1.1.1.1.2.2.1.5	Integer32	not-accessible	The internal index of the local-remote peer association. This internal index is used to uniquely identify multiple associations between the local and remote peer.
ADR ikePeerLocalAddr	1.3.6.1.4.1.2.6.168.1.1.1.1.2.2.1.6	IPSIpAddress	read-only	The IP address of the local peer.
ADR ikePeerRemoteAddr	1.3.6.1.4.1.2.6.168.1.1.1.1.2.2.1.7	IPSIpAddress	read-only	The IP address of the remote peer.
NUM ikePeerActiveTime	1.3.6.1.4.1.2.6.168.1.1.1.1.2.2.1.8	TimeInterval	read-only	The length of time that the peer association has existed in hundredths of a second.
I32 ikePeerActiveTunnelIndex	1.3.6.1.4.1.2.6.168.1.1.1.1.2.2.1.9	Integer32	read-only	The index of the active ipsec Phase-1 IKE Tunnel (ikeTunIndex in the ikeTunnelTable) for this peer association. If an ipsec Phase-1 IKE Tunnel is not currently active, then the value of this object will be zero.
ikeTunnelTable	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3		not-accessible	The ipsec Phase-1 Internet Key Exchange Tunnel Table. There is one entry in this table for each active ipsec Phase-1 IKE Tunnel.
ikeTunnelEntry	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1		not-accessible	Each entry contains the attributes associated with an active ipsec Phase-1 IKE Tunnel.
I32 ikeTunIndex	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.1	Integer32	not-accessible	The index of the ipsec Phase-1 IKE Tunnel Table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The value of this object will wrap at 2,147,483,647.
IKE ikeTunLocalType	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.2	IkePeerType	read-only	The type of local peer identity. The local peer may be indentified by: 1. an IP address, or 2. a host name.
STR ikeTunLocalValue	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.3	DisplayString	read-only	The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is a host name, then this is the host name used to identify the local peer.
ADR ikeTunLocalAddr	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.4	IPSIpAddress	read-only	The IP address of the local endpoint for the ipsec Phase-1 IKE Tunnel.
STR ikeTunLocalName	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.5	DisplayString	read-only	The DNS name of the local IP address for the ipsec Phase-1 IKE Tunnel. If the DNS name associated with the local tunnel endpoint is not known, then the value of this object will be a NULL string.
IKE ikeTunRemoteType	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.6	IkePeerType	read-only	The type of remote peer identity. The remote peer may be indentified by: 1. an IP address, or 2. a host name.
STR ikeTunRemoteValue	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.7	DisplayString	read-only	The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is a host name, then this is the host name used to identify the remote peer.
ADR ikeTunRemoteAddr	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.8	IPSIpAddress	read-only	The IP address of the remote endpoint for the ipsec Phase-1 IKE Tunnel.
STR ikeTunRemoteName	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.9	DisplayString	read-only	The DNS name of the remote IP address of ipsec Phase-1 IKE Tunnel. If the DNS name associated with the remote tunnel endpoint is not known, then the value of this object will be a NULL string.
IKE ikeTunNegoMode	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.10	IkeNegoMode	read-only	The negotiation mode of the ipsec Phase-1 IKE Tunnel.
DIF ikeTunDiffHellmanGrp	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.11	DiffHellmanGrp	read-only	The Diffie Hellman Group used in ipsec Phase-1 IKE negotiations.
ENC ikeTunEncryptAlgo	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.12	EncryptAlgo	read-only	The encryption algorithm used in ipsec Phase-1 IKE negotiations.
IKE ikeTunHashAlgo	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.13	IkeHashAlgo	read-only	The hash algorithm used in ipsec Phase-1 IKE negotiations.
IKE ikeTunAuthMethod	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.14	IkeAuthMethod	read-only	The authentication method used in ipsec Phase-1 IKE negotiations.
I32 ikeTunLifeTime	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.15	Integer32	read-only	The negotiated LifeTime of the ipsec Phase-1 IKE Tunnel in seconds.
NUM ikeTunActiveTime	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.16	TimeInterval	read-only	The length of time the ipsec Phase-1 IKE tunnel has been active in hundredths of seconds.
I32 ikeTunSaRefreshThreshold	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.17	Integer32	read-only	The security assoication refresh threshold in seconds.
C32 ikeTunTotalRefreshes	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.18	Counter32	read-only	The total number of security associations refreshes performed.
C32 ikeTunInOctets	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.19	Counter32	read-only	The total number of octets received by this ipsec Phase-1 IKE Tunnel.
C32 ikeTunInPkts	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.20	Counter32	read-only	The total number of packets received by this ipsec Phase-1 IKE Tunnel.
C32 ikeTunInDropPkts	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.21	Counter32	read-only	The total number of packets dropped by this ipsec Phase-1 IKE Tunnel during receive processing.
C32 ikeTunInNotifys	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.22	Counter32	read-only	The total number of notifys received by this ipsec Phase-1 IKE Tunnel.
C32 ikeTunInP2Exchgs	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.23	Counter32	read-only	The total number of ipsec Phase-2 exchanges received by this ipsec Phase-1 IKE Tunnel.
C32 ikeTunInP2ExchgInvalids	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.24	Counter32	read-only	The total number of ipsec Phase-2 exchanges received and found to be invalid by this ipsec Phase-1 IKE Tunnel.
C32 ikeTunInP2ExchgRejects	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.25	Counter32	read-only	The total number of ipsec Phase-2 exchanges received and rejected by this ipsec Phase-1 IKE Tunnel.
C32 ikeTunInP2SaDelRequests	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.26	Counter32	read-only	The total number of ipsec Phase-2 security association delete requests received by this ipsec Phase-1 IKE Tunnel.
C32 ikeTunOutOctets	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.27	Counter32	read-only	The total number of octets sent by this ipsec Phase-1 IKE Tunnel.
C32 ikeTunOutPkts	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.28	Counter32	read-only	The total number of packets sent by this ipsec Phase-1 IKE Tunnel.
C32 ikeTunOutDropPkts	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.29	Counter32	read-only	The total number of packets dropped by this ipsec Phase-1 IKE Tunnel during send processing.
C32 ikeTunOutNotifys	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.30	Counter32	read-only	The total number of notifys sent by this ipsec Phase-1 IKE Tunnel.
C32 ikeTunOutP2Exchgs	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.31	Counter32	read-only	The total number of ipsec Phase-2 exchanges sent by this ipsec Phase-1 IKE Tunnel.
C32 ikeTunOutP2ExchgInvalids	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.32	Counter32	read-only	The total number of ipsec Phase-2 exchanges sent and found to be invalid by this ipsec Phase-1 IKE Tunnel.
C32 ikeTunOutP2ExchgRejects	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.33	Counter32	read-only	The total number of ipsec Phase-2 exchanges sent and rejected by this ipsec Phase-1 IKE Tunnel.
C32 ikeTunOutP2SaDelRequests	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.34	Counter32	read-only	The total number of ipsec Phase-2 security association delete requests sent by this ipsec Phase-1 IKE Tunnel.
TUN ikeTunStatus	1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.35	TunnelStatus	read-write	The status of the MIB table row. This object can be used to bring the tunnel down by setting value of this object to destroy(2). This object cannot be used to create a MIB table row.
ikePeerCorrTable	1.3.6.1.4.1.2.6.168.1.1.1.1.2.4		not-accessible	The ipsec Phase-1 Internet Key Exchange Peer Association to ipsec Phase-2 Tunnel Correlation Table. There is one entry in this table for each active ipsec Phase-2 Tunnel.
ikePeerCorrEntry	1.3.6.1.4.1.2.6.168.1.1.1.1.2.4.1		not-accessible	Each entry contains the attributes of an an ipsec Phase-1 IKE Peer Association to ipsec Phase-2 Tunnel Correlation.
IKE ikePeerCorrLocalType	1.3.6.1.4.1.2.6.168.1.1.1.1.2.4.1.1	IkePeerType	not-accessible	The type of local peer identity. The local peer may be indentified by: 1. an IP address, or 2. a host name.
STR ikePeerCorrLocalValue	1.3.6.1.4.1.2.6.168.1.1.1.1.2.4.1.2	DisplayString	not-accessible	The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is a host name, then this is the host name used to identify the local peer.
IKE ikePeerCorrRemoteType	1.3.6.1.4.1.2.6.168.1.1.1.1.2.4.1.3	IkePeerType	not-accessible	The type of remote peer identity. The remote peer may be indentified by: 1. an IP address, or 2. a host name.
STR ikePeerCorrRemoteValue	1.3.6.1.4.1.2.6.168.1.1.1.1.2.4.1.4	DisplayString	not-accessible	The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is a host name, then this is the host name used to identify the remote peer.
I32 ikePeerCorrIntIndex	1.3.6.1.4.1.2.6.168.1.1.1.1.2.4.1.5	Integer32	not-accessible	The internal index of the local-remote peer association. This internal index is used to uniquely identify multiple associations between the local and remote peer.
I32 ikePeerCorrSeqNum	1.3.6.1.4.1.2.6.168.1.1.1.1.2.4.1.6	Integer32	not-accessible	The sequence number of the local-remote peer association. This sequence number is used to uniquely identify multiple instances of an unique association between the local and remote peer.
I32 ikePeerCorripsecTunIndex	1.3.6.1.4.1.2.6.168.1.1.1.1.2.4.1.7	Integer32	read-only	The index of the active ipsec Phase-2 Tunnel (ipsecTunIndex in the ipsecTunnelTable) for this ipsec Phase-1 IKE Peer Association.
ipsecPhaseTwo	1.3.6.1.4.1.2.6.168.1.1.1.1.3
ipsecGlobalStats	1.3.6.1.4.1.2.6.168.1.1.1.1.3.1
G32 ipsecGlobalActiveTunnels	1.3.6.1.4.1.2.6.168.1.1.1.1.3.1.1	Gauge32	read-only	The total number of currently active ipsec Phase-2 Tunnels.
C32 ipsecGlobalPreviousTunnels	1.3.6.1.4.1.2.6.168.1.1.1.1.3.1.2	Counter32	read-only	The total number of previously active ipsec Phase-2 Tunnels.
C32 ipsecGlobalInOctets	1.3.6.1.4.1.2.6.168.1.1.1.1.3.1.3	Counter32	read-only	The total number of octets received by all current and previous ipsec Phase-2 Tunnels. This value is accumulated BEFORE determining whether or not the packet should be decompressed. See also ipsecGlobalInOctWraps for the number of times this counter has wrapped.
C64 ipsecGlobalHcInOctets	1.3.6.1.4.1.2.6.168.1.1.1.1.3.1.4	Counter64	read-only	A high capacity count of the total number of octets received by all current and previous ipsec Phase-2 Tunnels. This value is accumulated BEFORE determining whether or not the packet should be decompressed.
C32 ipsecGlobalInOctWraps	1.3.6.1.4.1.2.6.168.1.1.1.1.3.1.5	Counter32	read-only	The number of times the global octets received counter (ipsecGlobalInOctets) has wrapped.
C32 ipsecGlobalInDecompOctets	1.3.6.1.4.1.2.6.168.1.1.1.1.3.1.6	Counter32	read-only	The total number of decompressed octets received by all current and previous ipsec Phase-2 Tunnels. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of ipsecGlobalInOctets. See also ipsecGlobalInDecompOctWraps for the number of times this counter has wrapped.
C64 ipsecGlobalHcInDecompOctets	1.3.6.1.4.1.2.6.168.1.1.1.1.3.1.7	Counter64	read-only	A high capacity count of the total number of decompressed octets received by all current and previous ipsec Phase-2 Tunnels. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of ipsecGlobalHcInOctets.
C32 ipsecGlobalInDecompOctWraps	1.3.6.1.4.1.2.6.168.1.1.1.1.3.1.8	Counter32	read-only	The number of times the global decompressed octets received counter (ipsecGlobalInDecompOctets) has wrapped.
C32 ipsecGlobalInPkts	1.3.6.1.4.1.2.6.168.1.1.1.1.3.1.9	Counter32	read-only	The total number of packets received by all current and previous ipsec Phase-2 Tunnels.
C32 ipsecGlobalInDrops	1.3.6.1.4.1.2.6.168.1.1.1.1.3.1.10	Counter32	read-only	The total number of packets dropped during receive processing by all current and previous ipsec Phase-2 Tunnels. This count does NOT include packets dropped due to Anti-Replay processing.
C32 ipsecGlobalInReplayDrops	1.3.6.1.4.1.2.6.168.1.1.1.1.3.1.11	Counter32	read-only	The total number of packets dropped during receive processing due to Anti-Replay processing by all current and previous ipsec Phase-2 Tunnels.
C32 ipsecGlobalInAuths	1.3.6.1.4.1.2.6.168.1.1.1.1.3.1.12	Counter32	read-only	The total number of inbound authentication's performed by all current and previous ipsec Phase-2 Tunnels.
C32 ipsecGlobalInAuthFails	1.3.6.1.4.1.2.6.168.1.1.1.1.3.1.13	Counter32	read-only	The total number of inbound authentication's which ended in failure by all current and previous ipsec Phase-2 Tunnels.
C32 ipsecGlobalInDecrypts	1.3.6.1.4.1.2.6.168.1.1.1.1.3.1.14	Counter32	read-only	The total number of inbound decryption's performed by all current and previous ipsec Phase-2 Tunnels.
C32 ipsecGlobalInDecryptFails	1.3.6.1.4.1.2.6.168.1.1.1.1.3.1.15	Counter32	read-only	The total number of inbound decryption's which ended in failure by all current and previous ipsec Phase-2 Tunnels.
C32 ipsecGlobalOutOctets	1.3.6.1.4.1.2.6.168.1.1.1.1.3.1.16	Counter32	read-only	The total number of octets sent by all current and previous ipsec Phase-2 Tunnels. This value is accumulated AFTER determining whether or not the packet should be compressed. See also ipsecGlobalOutOctWraps for the number of times this counter has wrapped.
C64 ipsecGlobalHcOutOctets	1.3.6.1.4.1.2.6.168.1.1.1.1.3.1.17	Counter64	read-only	A high capacity count of the total number of octets sent by all current and previous ipsec Phase-2 Tunnels. This value is accumulated AFTER determining whether or not the packet should be compressed.
C32 ipsecGlobalOutOctWraps	1.3.6.1.4.1.2.6.168.1.1.1.1.3.1.18	Counter32	read-only	The number of times the global octets sent counter (ipsecGlobalOutOctets) has wrapped.
C32 ipsecGlobalOutUncompOctets	1.3.6.1.4.1.2.6.168.1.1.1.1.3.1.19	Counter32	read-only	The total number of uncompressed octets sent by all current and previous ipsec Phase-2 Tunnels. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of ipsecGlobalOutOctets. See also ipsecGlobalOutDecompOctWraps for the number of times this counter has wrapped.
C64 ipsecGlobalHcOutUncompOctets	1.3.6.1.4.1.2.6.168.1.1.1.1.3.1.20	Counter64	read-only	A high capacity count of the total number of uncompressed octets sent by all current and previous ipsec Phase-2 Tunnels. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of ipsecGlobalHcOutOctets.
C32 ipsecGlobalOutUncompOctWraps	1.3.6.1.4.1.2.6.168.1.1.1.1.3.1.21	Counter32	read-only	The number of times the global uncompressed octets sent counter (ipsecGlobalInUncompOctets) has wrapped.
C32 ipsecGlobalOutPkts	1.3.6.1.4.1.2.6.168.1.1.1.1.3.1.22	Counter32	read-only	The total number of packets sent by all current and previous ipsec Phase-2 Tunnels.
C32 ipsecGlobalOutDrops	1.3.6.1.4.1.2.6.168.1.1.1.1.3.1.23	Counter32	read-only	The total number of packets dropped during send processing by all current and previous ipsec Phase-2 Tunnels.
C32 ipsecGlobalOutAuths	1.3.6.1.4.1.2.6.168.1.1.1.1.3.1.24	Counter32	read-only	The total number of outbound authentication's performed by all current and previous ipsec Phase-2 Tunnels.
C32 ipsecGlobalOutAuthFails	1.3.6.1.4.1.2.6.168.1.1.1.1.3.1.25	Counter32	read-only	The total number of outbound authentication's which ended in failure by all current and previous ipsec Phase-2 Tunnels.
C32 ipsecGlobalOutEncrypts	1.3.6.1.4.1.2.6.168.1.1.1.1.3.1.26	Counter32	read-only	The total number of outbound encryption's performed by all current and previous ipsec Phase-2 Tunnels.
C32 ipsecGlobalOutEncryptFails	1.3.6.1.4.1.2.6.168.1.1.1.1.3.1.27	Counter32	read-only	The total number of outbound encryption's which ended in failure by all current and previous ipsec Phase-2 Tunnels.
ipsecTunnelTable	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2		not-accessible	The ipsec Phase-2 Tunnel Table. There is one entry in this table for each active ipsec Phase-2 Tunnel.
ipsecTunnelEntry	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1		not-accessible	Each entry contains the attributes associated with an active ipsec Phase-2 Tunnel.
I32 ipsecTunIndex	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.1	Integer32	not-accessible	The index of the ipsec Phase-2 Tunnel Table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The value of this object will wrap at 2,147,483,647.
I32 ipsecTunIkeTunnelIndex	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.2	Integer32	read-only	The index of the associated ipsec Phase-1 IKE Tunnel. (ikeTunIndex in the ikeTunnelTable)
T/F ipsecTunIkeTunnelAlive	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.3	TruthValue	read-only	An indicator which specifies whether or not the ipsec Phase-1 IKE Tunnel currently exists.
ADR ipsecTunLocalAddr	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.4	IPSIpAddress	read-only	The IP address of the local endpoint for the ipsec Phase-2 Tunnel.
ADR ipsecTunRemoteAddr	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.5	IPSIpAddress	read-only	The IP address of the remote endpoint for the ipsec Phase-2 Tunnel.
KEY ipsecTunKeyType	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.6	KeyType	read-only	The type of key used by the ipsec Phase-2 Tunnel.
ENC ipsecTunEncapMode	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.7	EncapMode	read-only	The encapsulation mode used by the ipsec Phase-2 Tunnel.
I32 ipsecTunLifeSize	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.8	Integer32	read-only	The negotiated LifeSize of the ipsec Phase-2 Tunnel in kilobytes.
I32 ipsecTunLifeTime	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.9	Integer32	read-only	The negotiated LifeTime of the ipsec Phase-2 Tunnel in seconds.
NUM ipsecTunActiveTime	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.10	TimeInterval	read-only	The length of time the ipsec Phase-2 Tunnel has been active in hundredths of seconds.
I32 ipsecTunSaLifeSizeThreshold	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.11	Integer32	read-only	The security association LifeSize refresh threshold in kilobytes.
I32 ipsecTunSaLifeTimeThreshold	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.12	Integer32	read-only	The security association LifeTime refresh threshold in seconds.
C32 ipsecTunTotalRefreshes	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.13	Counter32	read-only	The total number of security association refreshes performed.
C32 ipsecTunExpiredSaInstances	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.14	Counter32	read-only	The total number of security associations which have expired.
G32 ipsecTunCurrentSaInstances	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.15	Gauge32	read-only	The number of security associations which are currently active or expiring.
DIF ipsecTunInSaDiffHellmanGrp	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.16	DiffHellmanGrp	read-only	The Diffie Hellman Group used by the inbound security association of the ipsec Phase-2 Tunnel.
ENC ipsecTunInSaEncryptAlgo	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.17	EncryptAlgo	read-only	The encryption algorithm used by the inbound security association of the ipsec Phase-2 Tunnel.
AUT ipsecTunInSaAhAuthAlgo	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.18	AuthAlgo	read-only	The authentication algorithm used by the inbound authentication header (AH) security association of the ipsec Phase-2 Tunnel.
AUT ipsecTunInSaEspAuthAlgo	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.19	AuthAlgo	read-only	The authentication algorithm used by the inbound ecapsulation security protocol (ESP) security association of the ipsec Phase-2 Tunnel.
COM ipsecTunInSaDecompAlgo	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.20	CompAlgo	read-only	The decompression algorithm used by the inbound security association of the ipsec Phase-2 Tunnel.
DIF ipsecTunOutSaDiffHellmanGrp	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.21	DiffHellmanGrp	read-only	The Diffie Hellman Group used by the outbound security association of the ipsec Phase-2 Tunnel.
ENC ipsecTunOutSaEncryptAlgo	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.22	EncryptAlgo	read-only	The encryption algorithm used by the outbound security association of the ipsec Phase-2 Tunnel.
AUT ipsecTunOutSaAhAuthAlgo	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.23	AuthAlgo	read-only	The authentication algorithm used by the outbound authentication header (AH) security association of the ipsec Phase-2 Tunnel.
AUT ipsecTunOutSaEspAuthAlgo	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.24	AuthAlgo	read-only	The authentication algorithm used by the inbound ecapsulation security protocol (ESP) security association of the ipsec Phase-2 Tunnel.
COM ipsecTunOutSaCompAlgo	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.25	CompAlgo	read-only	The compression algorithm used by the inbound security association of the ipsec Phase-2 Tunnel.
C32 ipsecTunInOctets	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.26	Counter32	read-only	The total number of octets received by this ipsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed. See also ipsecTunInOctWraps for the number of times this counter has wrapped.
C64 ipsecTunHcInOctets	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.27	Counter64	read-only	A high capacity count of the total number of octets received by this ipsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed.
C32 ipsecTunInOctWraps	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.28	Counter32	read-only	The number of times the octets received counter (ipsecTunInOctets) has wrapped.
C32 ipsecTunInDecompOctets	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.29	Counter32	read-only	The total number of decompressed octets received by this ipsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of ipsecTunInOctets. See also ipsecTunInDecompOctWraps for the number of times this counter has wrapped.
C64 ipsecTunHcInDecompOctets	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.30	Counter64	read-only	A high capacity count of the total number of decompressed octets received by this ipsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of ipsecTunHcInOctets.
C32 ipsecTunInDecompOctWraps	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.31	Counter32	read-only	The number of times the decompressed octets received counter (ipsecTunInDecompOctets) has wrapped.
C32 ipsecTunInPkts	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.32	Counter32	read-only	The total number of packets received by this ipsec Phase-2 Tunnel.
C32 ipsecTunInDropPkts	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.33	Counter32	read-only	The total number of packets dropped during receive processing by this ipsec Phase-2 Tunnel. This count does NOT include packets dropped due to Anti-Replay processing.
C32 ipsecTunInReplayDropPkts	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.34	Counter32	read-only	The total number of packets dropped during receive processing due to Anti-Replay processing by this ipsec Phase-2 Tunnel.
C32 ipsecTunInAuths	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.35	Counter32	read-only	The total number of inbound authentication's performed by this ipsec Phase-2 Tunnel.
C32 ipsecTunInAuthFails	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.36	Counter32	read-only	The total number of inbound authentication's which ended in failure by this ipsec Phase-2 Tunnel .
C32 ipsecTunInDecrypts	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.37	Counter32	read-only	The total number of inbound decryption's performed by this ipsec Phase-2 Tunnel.
C32 ipsecTunInDecryptFails	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.38	Counter32	read-only	The total number of inbound decryption's which ended in failure by this ipsec Phase-2 Tunnel.
C32 ipsecTunOutOctets	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.39	Counter32	read-only	The total number of octets sent by this ipsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed. See also ipsecTunOutOctWraps for the number of times this counter has wrapped.
C64 ipsecTunHcOutOctets	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.40	Counter64	read-only	A high capacity count of the total number of octets sent by this ipsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed.
C32 ipsecTunOutOctWraps	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.41	Counter32	read-only	The number of times the octets sent counter (ipsecTunOutOctets) has wrapped.
C32 ipsecTunOutUncompOctets	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.42	Counter32	read-only	The total number of uncompressed octets sent by this ipsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of ipsecTunOutOctets. See also ipsecTunOutDecompOctWraps for the number of times this counter has wrapped.
C64 ipsecTunHcOutUncompOctets	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.43	Counter64	read-only	A high capacity count of the total number of uncompressed octets sent by this ipsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of ipsecTunHcOutOctets.
C32 ipsecTunOutUncompOctWraps	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.44	Counter32	read-only	The number of times the uncompressed octets sent counter (ipsecTunInUncompOctets) has wrapped.
C32 ipsecTunOutPkts	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.45	Counter32	read-only	The total number of packets sent by this ipsec Phase-2 Tunnel.
C32 ipsecTunOutDropPkts	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.46	Counter32	read-only	The total number of packets dropped during send processing by this ipsec Phase-2 Tunnel.
C32 ipsecTunOutAuths	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.47	Counter32	read-only	The total number of outbound authentication's performed by this ipsec Phase-2 Tunnel.
C32 ipsecTunOutAuthFails	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.48	Counter32	read-only	The total number of outbound authentication's which ended in failure by this ipsec Phase-2 Tunnel.
C32 ipsecTunOutEncrypts	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.49	Counter32	read-only	The total number of outbound encryption's performed by this ipsec Phase-2 Tunnel.
C32 ipsecTunOutEncryptFails	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.50	Counter32	read-only	The total number of outbound encryption's which ended in failure by this ipsec Phase-2 Tunnel.
TUN ipsecTunStatus	1.3.6.1.4.1.2.6.168.1.1.1.1.3.2.1.51	TunnelStatus	read-write	The status of the MIB table row. This object can be used to bring the tunnel down by setting value of this object to destroy(2). This object cannot be used to create a MIB table row.
ipsecEndPtTable	1.3.6.1.4.1.2.6.168.1.1.1.1.3.3		not-accessible	The ipsec Phase-2 Tunnel Endpoint Table. This table contains an entry for each active endpoint associated with an ipsec Phase-2 Tunnel.
ipsecEndPtEntry	1.3.6.1.4.1.2.6.168.1.1.1.1.3.3.1		not-accessible	An ipsec Phase-2 Tunnel Endpoint entry.
I32 ipsecEndPtIndex	1.3.6.1.4.1.2.6.168.1.1.1.1.3.3.1.1	Integer32	not-accessible	The number of the Endpoint associated with the ipsec Phase-2 Tunnel Table. The value of this index is a number which begins at one and is incremented with each Endpoint associated with an ipsec Phase-2 Tunnel. The value of this object will wrap at 2,147,483,647.
STR ipsecEndPtLocalName	1.3.6.1.4.1.2.6.168.1.1.1.1.3.3.1.2	DisplayString	read-only	The DNS name of the local Endpoint.
END ipsecEndPtLocalType	1.3.6.1.4.1.2.6.168.1.1.1.1.3.3.1.3	EndPtType	read-only	The type of identity for the local Endpoint. Possible values are: 1) a single IP address, or 2) an IP address range, or 3) an IP subnet.
ADR ipsecEndPtLocalAddr1	1.3.6.1.4.1.2.6.168.1.1.1.1.3.3.1.4	IPSIpAddress	read-only	The local Endpoint's first IP address specification. If the local Endpoint type is single IP address, then this is the value of the IP address. If the local Endpoint type is IP subnet, then this is the value of the subnet. If the local Endpoint type is IP address range, then this is the value of beginning IP address of the range.
ADR ipsecEndPtLocalAddr2	1.3.6.1.4.1.2.6.168.1.1.1.1.3.3.1.5	IPSIpAddress	read-only	The local Endpoint's second IP address specification. If the local Endpoint type is single IP address, then this is the value of the IP address. If the local Endpoint type is IP subnet, then this is the value of the subnet mask. If the local Endpoint type is IP address range, then this is the value of ending IP address of the range.
I32 ipsecEndPtLocalProtocol	1.3.6.1.4.1.2.6.168.1.1.1.1.3.3.1.6	Integer32	read-only	The protocol number of the local Endpoint's traffic.
I32 ipsecEndPtLocalPort	1.3.6.1.4.1.2.6.168.1.1.1.1.3.3.1.7	Integer32	read-only	The port number of the local Endpoint's traffic.
STR ipsecEndPtRemoteName	1.3.6.1.4.1.2.6.168.1.1.1.1.3.3.1.8	DisplayString	read-only	The DNS name of the remote Endpoint.
END ipsecEndPtRemoteType	1.3.6.1.4.1.2.6.168.1.1.1.1.3.3.1.9	EndPtType	read-only	The type of identity for the remote Endpoint. Possible values are: 1) a single IP address, or 2) an IP address range, or 3) an IP subnet.
ADR ipsecEndPtRemoteAddr1	1.3.6.1.4.1.2.6.168.1.1.1.1.3.3.1.10	IPSIpAddress	read-only	The remote Endpoint's first IP address specification. If the remote Endpoint type is single IP address, then this is the value of the IP address. If the remote Endpoint type is IP subnet, then this is the value of the subnet. If the remote Endpoint type is IP address range, then this is the value of beginning IP address of the range.
ADR ipsecEndPtRemoteAddr2	1.3.6.1.4.1.2.6.168.1.1.1.1.3.3.1.11	IPSIpAddress	read-only	The remote Endpoint's second IP address specification. If the remote Endpoint type is single IP address, then this is the value of the IP address. If the remote Endpoint type is IP subnet, then this is the value of the subnet mask. If the remote Endpoint type is IP address range, then this is the value of ending IP address of the range.
I32 ipsecEndPtRemoteProtocol	1.3.6.1.4.1.2.6.168.1.1.1.1.3.3.1.12	Integer32	read-only	The protocol number of the remote Endpoint's traffic.
I32 ipsecEndPtRemotePort	1.3.6.1.4.1.2.6.168.1.1.1.1.3.3.1.13	Integer32	read-only	The port number of the remote Endpoint's traffic.
ipsecSpiTable	1.3.6.1.4.1.2.6.168.1.1.1.1.3.4		not-accessible	The ipsec Phase-2 Security Protection Index Table. This table contains an entry for each active and expiring security association.
ipsecSpiEntry	1.3.6.1.4.1.2.6.168.1.1.1.1.3.4.1		not-accessible	Each entry contains the attributes associated with active and expiring ipsec Phase-2 security associations.
I32 ipsecSpiIndex	1.3.6.1.4.1.2.6.168.1.1.1.1.3.4.1.1	Integer32	not-accessible	The number of the SPI associated with the Phase-2 Tunnel Table. The value of this index is a number which begins at one and is incremented with each SPI associated with an ipsec Phase-2 Tunnel. The value of this object will wrap at 2,147,483,647.
INT ipsecSpiDirection	1.3.6.1.4.1.2.6.168.1.1.1.1.3.4.1.2	INTEGER	read-only	The direction of the SPI.
I32 ipsecSpiValue	1.3.6.1.4.1.2.6.168.1.1.1.1.3.4.1.3	Integer32	read-only	The value of the SPI.
INT ipsecSpiProtocol	1.3.6.1.4.1.2.6.168.1.1.1.1.3.4.1.4	INTEGER	read-only	The protocol of the SPI.
INT ipsecSpiStatus	1.3.6.1.4.1.2.6.168.1.1.1.1.3.4.1.5	INTEGER	read-only	The status of the SPI.
ipsecHistory	1.3.6.1.4.1.2.6.168.1.1.1.1.4
ipsecHistGlobal	1.3.6.1.4.1.2.6.168.1.1.1.1.4.1
ipsecHistGlobalCntl	1.3.6.1.4.1.2.6.168.1.1.1.1.4.1.1
I32 ipsecHistTableSize	1.3.6.1.4.1.2.6.168.1.1.1.1.4.1.1.1	Integer32	read-write	The window size of the ipsec Phase-1 and Phase-2 History Tables. The ipsec Phase-1 and Phase-2 History Tables are implemented as a sliding window in which only the last n entries are maintained. This object is used specify the number of entries which will be maintained in the ipsec Phase-1 and Phase-2 History Tables. When modified by an SNMP SET request, the device will set the value of this object as close as possible to the requested value based on the implementation and available resources.
ipsecHistPhaseOne	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2
ikeTunnelHistTable	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1		not-accessible	The ipsec Phase-1 Internet Key Exchange Tunnel History Table. This table is implemented as a sliding window in which only the last n entries are maintained. The maximum number of entries is specified by the ipsecHistTableSize object.
ikeTunnelHistEntry	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1		not-accessible	Each entry contains the attributes associated with a previously active ipsec Phase-1 IKE Tunnel.
I32 ikeTunHistIndex	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.1	Integer32	not-accessible	The index of the ipsec Phase-1 IKE Tunnel History Table. The value of the index is a number which begins at one and is incremented with each tunnel that ends. The value of this object will wrap at 2,147,483,647.
INT ikeTunHistTermReason	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.2	INTEGER	read-only	The reason the ipsec Phase-1 IKE Tunnel was terminated. Possible reasons include: 1 = other 2 = normal termination 3 = operator request 4 = peer delete request was received 5 = contact with peer was lost 6 = sequence number rolled over 7 = local failure occurred.
I32 ikeTunHistActiveIndex	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.3	Integer32	read-only	The index of the previously active ipsec Phase-1 IKE Tunnel.
IKE ikeTunHistPeerLocalType	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.4	IkePeerType	read-only	The type of local peer identity. The local peer may be indentified by: 1. an IP address, or 2. a host name.
STR ikeTunHistPeerLocalValue	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.5	DisplayString	read-only	The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is a host name, then this is the host name used to identify the local peer.
I32 ikeTunHistPeerIntIndex	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.6	Integer32	read-only	The internal index of the local-remote peer association. This internal index is used to uniquely identify multiple associations between the local and remote peer.
IKE ikeTunHistPeerRemoteType	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.7	IkePeerType	read-only	The type of remote peer identity. The remote peer may be indentified by: 1. an IP address, or 2. a host name.
STR ikeTunHistPeerRemoteValue	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.8	DisplayString	read-only	The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is a host name, then this is the host name used to identify the remote peer.
ADR ikeTunHistLocalAddr	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.9	IPSIpAddress	read-only	The IP address of the local endpoint for the ipsec Phase-1 IKE Tunnel.
STR ikeTunHistLocalName	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.10	DisplayString	read-only	The DNS name of the local IP address for the ipsec Phase-1 IKE Tunnel. If the DNS name associated with the local tunnel endpoint is not known, then the value of this object will be a NULL string.
ADR ikeTunHistRemoteAddr	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.11	IPSIpAddress	read-only	The IP address of the remote endpoint for the ipsec Phase-1 IKE Tunnel.
STR ikeTunHistRemoteName	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.12	DisplayString	read-only	The DNS name of the remote IP address of ipsec Phase-1 IKE Tunnel. If the DNS name associated with the remote tunnel endpoint is not known, then the value of this object will be a NULL string.
IKE ikeTunHistNegoMode	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.13	IkeNegoMode	read-only	The negotiation mode of the ipsec Phase-1 IKE Tunnel.
DIF ikeTunHistDiffHellmanGrp	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.14	DiffHellmanGrp	read-only	The Diffie Hellman Group used in ipsec Phase-1 IKE negotiations.
ENC ikeTunHistEncryptAlgo	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.15	EncryptAlgo	read-only	The encryption algorithm used in ipsec Phase-1 IKE negotiations.
IKE ikeTunHistHashAlgo	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.16	IkeHashAlgo	read-only	The hash algorithm used in ipsec Phase-1 IKE negotiations.
IKE ikeTunHistAuthMethod	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.17	IkeAuthMethod	read-only	The authentication method used in ipsec Phase-1 IKE negotiations.
I32 ikeTunHistLifeTime	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.18	Integer32	read-only	The negotiated LifeTime of the ipsec Phase-1 IKE Tunnel in seconds.
TIM ikeTunHistStartTime	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.19	TimeStamp	read-only	The time when the ipsec Phase-1 IKE tunnel was started in hundredths of seconds.
NUM ikeTunHistActiveTime	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.20	TimeInterval	read-only	The length of time the ipsec Phase-1 IKE tunnel was been active in hundredths of seconds.
C32 ikeTunHistTotalRefreshes	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.21	Counter32	read-only	The total number of security associations refreshes performed.
C32 ikeTunHistTotalSas	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.22	Counter32	read-only	The total number of security associations used during the life of the ipsec Phase-1 IKE Tunnel.
C32 ikeTunHistInOctets	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.23	Counter32	read-only	The total number of octets received by this ipsec Phase-1 IKE Tunnel.
C32 ikeTunHistInPkts	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.24	Counter32	read-only	The total number of packets received by this ipsec Phase-1 IKE Tunnel.
C32 ikeTunHistInDropPkts	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.25	Counter32	read-only	The total number of packets dropped by this ipsec Phase-1 IKE Tunnel during receive processing.
C32 ikeTunHistInNotifys	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.26	Counter32	read-only	The total number of nsotifys received by this ipsec Phase-1 IKE Tunnel.
C32 ikeTunHistInP2Exchgs	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.27	Counter32	read-only	The total number of ipsec Phase-2 exchanges received by this ipsec Phase-1 IKE Tunnel.
C32 ikeTunHistInP2ExchgInvalids	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.28	Counter32	read-only	The total number of ipsec Phase-2 exchanges received and found to be invalid by this ipsec Phase-1 IKE Tunnel.
C32 ikeTunHistInP2ExchgRejects	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.29	Counter32	read-only	The total number of ipsec Phase-2 exchanges received and rejected by this ipsec Phase-1 IKE Tunnel.
C32 ikeTunHistInP2SaDelRequests	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.30	Counter32	read-only	The total number of ipsec Phase-2 security association delete requests received by this ipsec Phase-1 IKE Tunnel.
C32 ikeTunHistOutOctets	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.31	Counter32	read-only	The total number of octets sent by this ipsec Phase-1 IKE Tunnel.
C32 ikeTunHistOutPkts	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.32	Counter32	read-only	The total number of packets sent by this ipsec Phase-1 IKE Tunnel.
C32 ikeTunHistOutDropPkts	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.33	Counter32	read-only	The total number of packets dropped by this ipsec Phase-1 IKE Tunnel during send processing.
C32 ikeTunHistOutNotifys	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.34	Counter32	read-only	The total number of notifys sent by this ipsec Phase-1 IKE Tunnel.
C32 ikeTunHistOutP2Exchgs	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.35	Counter32	read-only	The total number of ipsec Phase-2 exchanges sent by this ipsec Phase-1 IKE Tunnel.
C32 ikeTunHistOutP2ExchgInvalids	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.36	Counter32	read-only	The total number of ipsec Phase-2 exchanges sent and found to be invalid by this ipsec Phase-1 IKE Tunnel.
C32 ikeTunHistOutP2ExchgRejects	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.37	Counter32	read-only	The total number of ipsec Phase-2 exchanges sent and rejected by this ipsec Phase-1 IKE Tunnel.
C32 ikeTunHistOutP2SaDelRequests	1.3.6.1.4.1.2.6.168.1.1.1.1.4.2.1.1.38	Counter32	read-only	The total number of ipsec Phase-2 security association delete requests sent by this ipsec Phase-1 IKE Tunnel.
ipsecHistPhaseTwo	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3
ipsecTunnelHistTable	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1		not-accessible	The ipsec Phase-2 Tunnel History Table. This table is implemented as a sliding window in which only the last n entries are maintained. The maximum number of entries is specified by the ipsecHistTableSize object.
ipsecTunnelHistEntry	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1		not-accessible	Each entry contains the attributes associated with a previously active ipsec Phase-2 Tunnel.
I32 ipsecTunHistIndex	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.1	Integer32	not-accessible	The index of the ipsec Phase-2 Tunnel History Table. The value of the index is a number which begins at one and is incremented with each tunnel that ends. The value of this object will wrap at 2,147,483,647.
INT ipsecTunHistTermReason	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.2	INTEGER	read-only	The reason the ipsec Phase-2 Tunnel was terminated. Possible reasons include: 1 = other 2 = normal termination 3 = operator request 4 = peer delete request was received 5 = contact with peer was lost 6 = local failure occurred 7 = sequence number rolled over.
I32 ipsecTunHistActiveIndex	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.3	Integer32	read-only	The index of the previously active ipsec Phase-2 Tunnel.
I32 ipsecTunHistIkeTunnelIndex	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.4	Integer32	read-only	The index of the associated ipsec Phase-1 Tunnel (ikeTunIndex in the ikeTunnelTable).
ADR ipsecTunHistLocalAddr	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.5	IPSIpAddress	read-only	The IP address of the local endpoint for the ipsec Phase-2 Tunnel.
ADR ipsecTunHistRemoteAddr	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.6	IPSIpAddress	read-only	The IP address of the remote endpoint for the ipsec Phase-2 Tunnel.
KEY ipsecTunHistKeyType	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.7	KeyType	read-only	The type of key used by the ipsec Phase-2 Tunnel.
ENC ipsecTunHistEncapMode	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.8	EncapMode	read-only	The encapsulation mode used by the ipsec Phase-2 Tunnel.
I32 ipsecTunHistLifeSize	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.9	Integer32	read-only	The negotiated LifeSize of the ipsec Phase-2 Tunnel in kilobytes.
I32 ipsecTunHistLifeTime	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.10	Integer32	read-only	The negotiated LifeTime of the ipsec Phase-2 Tunnel in seconds.
TIM ipsecTunHistStartTime	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.11	TimeStamp	read-only	The time when the ipsec Phase-2 Tunnel was started in hundredths of seconds.
NUM ipsecTunHistActiveTime	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.12	TimeInterval	read-only	The length of time the ipsec Phase-2 Tunnel has been active in hundredths of seconds.
C32 ipsecTunHistTotalRefreshes	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.13	Counter32	read-only	The total number of security association refreshes performed.
C32 ipsecTunHistTotalSas	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.14	Counter32	read-only	The total number of security associations used during the life of the ipsec Phase-2 Tunnel.
DIF ipsecTunHistInSaDiffHellmanGrp	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.15	DiffHellmanGrp	read-only	The Diffie Hellman Group used by the inbound security association of the ipsec Phase-2 Tunnel.
ENC ipsecTunHistInSaEncryptAlgo	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.16	EncryptAlgo	read-only	The encryption algorithm used by the inbound security association of the ipsec Phase-2 Tunnel.
AUT ipsecTunHistInSaAhAuthAlgo	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.17	AuthAlgo	read-only	The authentication algorithm used by the inbound authentication header (AH) security association of the ipsec Phase-2 Tunnel.
AUT ipsecTunHistInSaEspAuthAlgo	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.18	AuthAlgo	read-only	The authentication algorithm used by the inbound ecapsulation security protocol (ESP) security association of the ipsec Phase-2 Tunnel.
COM ipsecTunHistInSaDecompAlgo	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.19	CompAlgo	read-only	The decompression algorithm used by the inbound security association of the ipsec Phase-2 Tunnel.
DIF ipsecTunHistOutSaDiffHellmanGrp	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.20	DiffHellmanGrp	read-only	The Diffie Hellman Group used by the outbound security association of the ipsec Phase-2 Tunnel.
ENC ipsecTunHistOutSaEncryptAlgo	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.21	EncryptAlgo	read-only	The encryption algorithm used by the outbound security association of the ipsec Phase-2 Tunnel.
AUT ipsecTunHistOutSaAhAuthAlgo	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.22	AuthAlgo	read-only	The authentication algorithm used by the outbound authentication header (AH) security association of the ipsec Phase-2 Tunnel.
AUT ipsecTunHistOutSaEspAuthAlgo	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.23	AuthAlgo	read-only	The authentication algorithm used by the inbound ecapsulation security protocol (ESP) security association of the ipsec Phase-2 Tunnel.
COM ipsecTunHistOutSaCompAlgo	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.24	CompAlgo	read-only	The compression algorithm used by the inbound security association of the ipsec Phase-2 Tunnel.
C32 ipsecTunHistInOctets	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.25	Counter32	read-only	The total number of octets received by this ipsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed. See also ipsecTunInOctWraps for the number of times this counter has wrapped.
C64 ipsecTunHistHcInOctets	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.26	Counter64	read-only	A high capacity count of the total number of octets received by this ipsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed.
C32 ipsecTunHistInOctWraps	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.27	Counter32	read-only	The number of times the octets received counter (ipsecTunInOctets) has wrapped.
C32 ipsecTunHistInDecompOctets	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.28	Counter32	read-only	The total number of decompressed octets received by this ipsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of ipsecTunInOctets. See also ipsecTunInDecompOctWraps for the number of times this counter has wrapped.
C64 ipsecTunHistHcInDecompOctets	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.29	Counter64	read-only	A high capacity count of the total number of decompressed octets received by this ipsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of ipsecTunHcInOctets.
C32 ipsecTunHistInDecompOctWraps	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.30	Counter32	read-only	The number of times the decompressed octets received counter (ipsecTunInDecompOctets) has wrapped.
C32 ipsecTunHistInPkts	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.31	Counter32	read-only	The total number of packets received by this ipsec Phase-2 Tunnel.
C32 ipsecTunHistInDropPkts	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.32	Counter32	read-only	The total number of packets dropped during receive processing by this ipsec Phase-2 Tunnel. This count does NOT include packets dropped due to Anti-Replay processing.
C32 ipsecTunHistInReplayDropPkts	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.33	Counter32	read-only	The total number of packets dropped during receive processing due to Anti-Replay processing by this ipsec Phase-2 Tunnel.
C32 ipsecTunHistInAuths	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.34	Counter32	read-only	The total number of inbound authentication's performed by this ipsec Phase-2 Tunnel.
C32 ipsecTunHistInAuthFails	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.35	Counter32	read-only	The total number of inbound authentication's which ended in failure by this ipsec Phase-2 Tunnel .
C32 ipsecTunHistInDecrypts	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.36	Counter32	read-only	The total number of inbound decryption's performed by this ipsec Phase-2 Tunnel.
C32 ipsecTunHistInDecryptFails	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.37	Counter32	read-only	The total number of inbound decryption's which ended in failure by this ipsec Phase-2 Tunnel.
C32 ipsecTunHistOutOctets	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.38	Counter32	read-only	The total number of octets sent by this ipsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed. See also ipsecTunOutOctWraps for the number of times this counter has wrapped.
C64 ipsecTunHistHcOutOctets	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.39	Counter64	read-only	A high capacity count of the total number of octets sent by this ipsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed.
C32 ipsecTunHistOutOctWraps	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.40	Counter32	read-only	The number of times the octets sent counter (ipsecTunOutOctets) has wrapped.
C32 ipsecTunHistOutUncompOctets	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.41	Counter32	read-only	The total number of uncompressed octets sent by this ipsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of ipsecTunOutOctets. See also ipsecTunOutDecompOctWraps for the number of times this counter has wrapped.
C64 ipsecTunHistHcOutUncompOctets	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.42	Counter64	read-only	A high capacity count of the total number of uncompressed octets sent by this ipsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of ipsecTunHcOutOctets.
C32 ipsecTunHistOutUncompOctWraps	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.43	Counter32	read-only	The number of times the uncompressed octets sent counter (ipsecTunInUncompOctets) has wrapped.
C32 ipsecTunHistOutPkts	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.44	Counter32	read-only	The total number of packets sent by this ipsec Phase-2 Tunnel.
C32 ipsecTunHistOutDropPkts	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.45	Counter32	read-only	The total number of packets dropped during send processing by this ipsec Phase-2 Tunnel.
C32 ipsecTunHistOutAuths	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.46	Counter32	read-only	The total number of outbound authentication's performed by this ipsec Phase-2 Tunnel.
C32 ipsecTunHistOutAuthFails	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.47	Counter32	read-only	The total number of outbound authentication's which ended in failure by this ipsec Phase-2 Tunnel.
C32 ipsecTunHistOutEncrypts	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.48	Counter32	read-only	The total number of outbound encryption's performed by this ipsec Phase-2 Tunnel.
C32 ipsecTunHistOutEncryptFails	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.1.1.49	Counter32	read-only	The total number of outbound encryption's which ended in failure by this ipsec Phase-2 Tunnel.
ipsecEndPtHistTable	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.2		not-accessible	The ipsec Phase-2 Tunnel Endpoint History Table. This table is implemented as a sliding window in which only the last n entries are maintained. The maximum number of entries is specified by the ipsecHistTableSize object.
ipsecEndPtHistEntry	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.2.1		not-accessible	Each entry contains the attributes associated with a previously active ipsec Phase-2 Tunnel Endpoint.
I32 ipsecEndPtHistIndex	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.2.1.1	Integer32	not-accessible	The number of the previously active Endpoint associated with a ipsec Phase-2 Tunnel Table. The value of this index is a number which begins at one and is incremented with each Endpoint associated with an ipsec Phase-2 Tunnel. The value of this object will wrap at 2,147,483,647.
I32 ipsecEndPtHistTunIndex	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.2.1.2	Integer32	read-only	The index of the previously active ipsec Phase-2 Tunnel Table.
I32 ipsecEndPtHistActiveIndex	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.2.1.3	Integer32	read-only	The index of the previously active Endpoint.
STR ipsecEndPtHistLocalName	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.2.1.4	DisplayString	read-only	The DNS name of the local Endpoint.
INT ipsecEndPtHistLocalType	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.2.1.5	INTEGER	read-only	The type of identity for the local Endpoint. Possible values are: 1) a single IP address, or 2) an IP address range, or 3) an IP subnet.
ADR ipsecEndPtHistLocalAddr1	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.2.1.6	IPSIpAddress	read-only	The local Endpoint's first IP address specification. If the local Endpoint type is single IP address, then this is the value of the IP address. If the local Endpoint type is IP subnet, then this is the value of the subnet. If the local Endpoint type is IP address range, then this is the value of beginning IP address of the range.
ADR ipsecEndPtHistLocalAddr2	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.2.1.7	IPSIpAddress	read-only	The local Endpoint's second IP address specification. If the local Endpoint type is single IP address, then this is the value of the IP address. If the local Endpoint type is IP subnet, then this is the value of the subnet mask. If the local Endpoint type is IP address range, then this is the value of ending IP address of the range.
I32 ipsecEndPtHistLocalProtocol	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.2.1.8	Integer32	read-only	The protocol number of the local Endpoint's traffic.
I32 ipsecEndPtHistLocalPort	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.2.1.9	Integer32	read-only	The port number of the local Endpoint's traffic.
STR ipsecEndPtHistRemoteName	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.2.1.10	DisplayString	read-only	The DNS name of the remote Endpoint.
INT ipsecEndPtHistRemoteType	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.2.1.11	INTEGER	read-only	The type of identity for the remote Endpoint. Possible values are: 1) a single IP address, or 2) an IP address range, or 3) an IP subnet.
ADR ipsecEndPtHistRemoteAddr1	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.2.1.12	IPSIpAddress	read-only	The remote Endpoint's first IP address specification. If the remote Endpoint type is single IP address, then this is the value of the IP address. If the remote Endpoint type is IP subnet, then this is the value of the subnet. If the remote Endpoint type is IP address range, then this is the value of beginning IP address of the range.
ADR ipsecEndPtHistRemoteAddr2	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.2.1.13	IPSIpAddress	read-only	The remote Endpoint's second IP address specification. If the remote Endpoint type is single IP address, then this is the value of the IP address. If the remote Endpoint type is IP subnet, then this is the value of the subnet mask. If the remote Endpoint type is IP address range, then this is the value of ending IP address of the range.
I32 ipsecEndPtHistRemoteProtocol	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.2.1.14	Integer32	read-only	The protocol number of the remote Endpoint's traffic.
I32 ipsecEndPtHistRemotePort	1.3.6.1.4.1.2.6.168.1.1.1.1.4.3.2.1.15	Integer32	read-only	The port number of the remote Endpoint's traffic.
ipsecFailures	1.3.6.1.4.1.2.6.168.1.1.1.1.5
ipsecFailGlobal	1.3.6.1.4.1.2.6.168.1.1.1.1.5.1
ipsecFailGlobalCntl	1.3.6.1.4.1.2.6.168.1.1.1.1.5.1.1
I32 ipsecFailTableSize	1.3.6.1.4.1.2.6.168.1.1.1.1.5.1.1.1	Integer32	read-write	The window size of the ipsec Phase-1 and Phase-2 Failure Tables. The ipsec Phase-1 and Phase-2 Failure Tables are implemented as a sliding window in which only the last n entries are maintained. This object is used specify the number of entries which will be maintained in the ipsec Phase-1 and Phase-2 Failure Tables. When modified by an SNMP SET request, the device will set the value of this object as close as possible to the requested value based on the implementation and available resources.
ipsecFailPhaseOne	1.3.6.1.4.1.2.6.168.1.1.1.1.5.2
ikeFailTable	1.3.6.1.4.1.2.6.168.1.1.1.1.5.2.1		not-accessible	The ipsec Phase-1 Failure Table. This table is implemented as a sliding window in which only the last n entries are maintained. The maximum number of entries is specified by the ipsecFailTableSize object.
ikeFailEntry	1.3.6.1.4.1.2.6.168.1.1.1.1.5.2.1.1		not-accessible	Each entry contains the attributes associated with an ipsec Phase-1 failure.
I32 ikeFailIndex	1.3.6.1.4.1.2.6.168.1.1.1.1.5.2.1.1.1	Integer32	not-accessible	The ipsec Phase-1 Failure Table index. The value of the index is a number which begins at one and is incremented with each ipsec Phase-1 failure. The value of this object will wrap at 2,147,483,647.
INT ikeFailReason	1.3.6.1.4.1.2.6.168.1.1.1.1.5.2.1.1.2	INTEGER	read-only	The reason for the failure. Possible reasons include: 1 = other 2 = peer delete request was received 3 = contact with peer was lost 4 = local failure occurred 5 = sequence number rolled over 6 = authentication failure 7 = hash validation failure 8 = encryption failure 9 = internal error occurred 10 = system capacity failure 11 = proposal failure 12 = peer's certificate is unavailable 13 = peer's certificate was found invalid 14 = local certificate expired 15 = certificate revoke list (crl) failure 16 = peer encoding error 17 = non-existent security association 18 = operator requested termination.
TIM ikeFailTime	1.3.6.1.4.1.2.6.168.1.1.1.1.5.2.1.1.3	TimeStamp	read-only	The time of the failure in hundredths of seconds.
IKE ikeFailLocalType	1.3.6.1.4.1.2.6.168.1.1.1.1.5.2.1.1.4	IkePeerType	read-only	The type of local peer identity. The local peer may be indentified by: 1. an IP address, or 2. a host name.
STR ikeFailLocalValue	1.3.6.1.4.1.2.6.168.1.1.1.1.5.2.1.1.5	DisplayString	read-only	The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is a host name, then this is the host name used to identify the local peer.
IKE ikeFailRemoteType	1.3.6.1.4.1.2.6.168.1.1.1.1.5.2.1.1.6	IkePeerType	read-only	The type of remote peer identity. The remote peer may be indentified by: 1. an IP address, or 2. a host name.
STR ikeFailRemoteValue	1.3.6.1.4.1.2.6.168.1.1.1.1.5.2.1.1.7	DisplayString	read-only	The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is a host name, then this is the host name used to identify the remote peer.
ADR ikeFailLocalAddr	1.3.6.1.4.1.2.6.168.1.1.1.1.5.2.1.1.8	IPSIpAddress	read-only	The IP address of the local peer.
ADR ikeFailRemoteAddr	1.3.6.1.4.1.2.6.168.1.1.1.1.5.2.1.1.9	IPSIpAddress	read-only	The IP address of the remote peer.
ipsecFailPhaseTwo	1.3.6.1.4.1.2.6.168.1.1.1.1.5.3
ipsecFailTable	1.3.6.1.4.1.2.6.168.1.1.1.1.5.3.1		not-accessible	The ipsec Phase-2 Failure Table. This table is implemented as a sliding window in which only the last n entries are maintained. The maximum number of entries is specified by the ipsecFailTableSize object.
ipsecFailEntry	1.3.6.1.4.1.2.6.168.1.1.1.1.5.3.1.1		not-accessible	Each entry contains the attributes associated with an ipsec Phase-1 failure.
I32 ipsecFailIndex	1.3.6.1.4.1.2.6.168.1.1.1.1.5.3.1.1.1	Integer32	not-accessible	The ipsec Phase-2 Failure Table index. The value of the index is a number which begins at one and is incremented with each ipsec Phase-1 failure. The value of this object will wrap at 2,147,483,647.
INT ipsecFailReason	1.3.6.1.4.1.2.6.168.1.1.1.1.5.3.1.1.2	INTEGER	read-only	The reason for the failure. Possible reasons include: 1 = other 2 = internal error occurred 3 = peer encoding error 4 = proposal failure 5 = protocol use failure 6 = non-existent security association 7 = decryption failure 8 = encryption failure 9 = inbound authentication failure 10 = outbound authentication failure 11 = compression failure 12 = system capacity failure 13 = peer delete request was received 14 = contact with peer was lost 15 = sequence number rolled over 16 = operator requested termination.
TIM ipsecFailTime	1.3.6.1.4.1.2.6.168.1.1.1.1.5.3.1.1.3	TimeStamp	read-only	The time of the failure in hundredths of seconds.
I32 ipsecFailTunnelIndex	1.3.6.1.4.1.2.6.168.1.1.1.1.5.3.1.1.4	Integer32	read-only	The Phase-2 Tunnel index (ipsecTunIndex).
I32 ipsecFailSaSpi	1.3.6.1.4.1.2.6.168.1.1.1.1.5.3.1.1.5	Integer32	read-only	The security association SPI value.
ADR ipsecFailPktSrcAddr	1.3.6.1.4.1.2.6.168.1.1.1.1.5.3.1.1.6	IPSIpAddress	read-only	The packet's source IP address.
ADR ipsecFailPktDstAddr	1.3.6.1.4.1.2.6.168.1.1.1.1.5.3.1.1.7	IPSIpAddress	read-only	The packet's destination IP address.
ipsecTrapCntl	1.3.6.1.4.1.2.6.168.1.1.1.1.6
TRA ipsecTrapCntlIkeTunnelStart	1.3.6.1.4.1.2.6.168.1.1.1.1.6.1	TrapStatus	read-write	This object defines the administrative state of sending the ipsec IKE Phase-1 Tunnel Start TRAP
TRA ipsecTrapCntlIkeTunnelStop	1.3.6.1.4.1.2.6.168.1.1.1.1.6.2	TrapStatus	read-write	This object defines the administrative state of sending the ipsec IKE Phase-1 Tunnel Stop TRAP
TRA ipsecTrapCntlIkeSysFailure	1.3.6.1.4.1.2.6.168.1.1.1.1.6.3	TrapStatus	read-write	This object defines the administrative state of sending the ipsec IKE Phase-1 System Failure TRAP
TRA ipsecTrapCntlIkeCertCrlFailure	1.3.6.1.4.1.2.6.168.1.1.1.1.6.4	TrapStatus	read-write	This object defines the administrative state of sending the ipsec IKE Phase-1 Certificate/CRL Failure TRAP
TRA ipsecTrapCntlIkeProtocolFailure	1.3.6.1.4.1.2.6.168.1.1.1.1.6.5	TrapStatus	read-write	This object defines the administrative state of sending the ipsec IKE Phase-1 Protocol Failure TRAP
TRA ipsecTrapCntlIkeNoSa	1.3.6.1.4.1.2.6.168.1.1.1.1.6.6	TrapStatus	read-write	This object defines the administrative state of sending the ipsec IKE Phase-1 No Security Association TRAP
TRA ipsecTrapCntlipsecTunnelStart	1.3.6.1.4.1.2.6.168.1.1.1.1.6.7	TrapStatus	read-write	This object defines the administrative state of sending the ipsec Phase-2 Tunnel Start TRAP
TRA ipsecTrapCntlipsecTunnelStop	1.3.6.1.4.1.2.6.168.1.1.1.1.6.8	TrapStatus	read-write	This object defines the administrative state of sending the ipsec Phase-2 Tunnel Stop TRAP
TRA ipsecTrapCntlipsecSysFailure	1.3.6.1.4.1.2.6.168.1.1.1.1.6.9	TrapStatus	read-write	This object defines the administrative state of sending the ipsec Phase-2 System Failure TRAP
TRA ipsecTrapCntlipsecSetUpFailure	1.3.6.1.4.1.2.6.168.1.1.1.1.6.10	TrapStatus	read-write	This object defines the administrative state of sending the ipsec Phase-2 Set Up Failure TRAP
TRA ipsecTrapCntlipsecEarlyTunTerm	1.3.6.1.4.1.2.6.168.1.1.1.1.6.11	TrapStatus	read-write	This object defines the administrative state of sending the ipsec Phase-2 Earily Tunnel Termination TRAP
TRA ipsecTrapCntlipsecProtocolFailure	1.3.6.1.4.1.2.6.168.1.1.1.1.6.12	TrapStatus	read-write	This object defines the administrative state of sending the ipsec Phase-2 Protocol Failure TRAP
TRA ipsecTrapCntlipsecNoSa	1.3.6.1.4.1.2.6.168.1.1.1.1.6.13	TrapStatus	read-write	This object defines the administrative state of sending the ipsec Phase-2 No Security Association TRAP
ipsecMIBConformance	1.3.6.1.4.1.2.6.168.1.1.1.2
ipsecMIBGroups	1.3.6.1.4.1.2.6.168.1.1.1.2.1
ipsecLevelsGroup	1.3.6.1.4.1.2.6.168.1.1.1.2.1.1			This group consists of a: 1) ipsec MIB Level
ipsecPhaseOneGroup	1.3.6.1.4.1.2.6.168.1.1.1.2.1.2			This group consists of: 1) ipsec Phase-1 Global Objects 2) ipsec Phase-1 Peer Table 3) ipsec Phase-1 Tunnel Table 4) ipsec Phase-1 Correlation Table
ipsecPhaseTwoGroup	1.3.6.1.4.1.2.6.168.1.1.1.2.1.3			This group consists of: 1) ipsec Phase-2 Global Statistics 2) ipsec Phase-2 Tunnel Table 3) ipsec Phase-2 Endpoint Table 4) ipsec Phase-2 Security Protection Index Table
ipsecHistoryGroup	1.3.6.1.4.1.2.6.168.1.1.1.2.1.4			This group consists of: 1) ipsec History Global Objects 2) ipsec Phase-1 History Objects 3) ipsec Phase-2 History Objects
ipsecFailuresGroup	1.3.6.1.4.1.2.6.168.1.1.1.2.1.5			This group consists of: 1) ipsec Failure Global Objects 2) ipsec Phase-1 Tunnel Failure Table 3) ipsec Phase-2 Tunnel Failure Table
ipsecTrapCntlGroup	1.3.6.1.4.1.2.6.168.1.1.1.2.1.6			This group of objects controls the sending of ipsec TRAPs.
ipsecNotificationGroup	1.3.6.1.4.1.2.6.168.1.1.1.2.1.7			This group contains the notifications for the ipsec MIB.
ipsecMIBCompliances	1.3.6.1.4.1.2.6.168.1.1.1.2.2
ipsecMIBCompliance	1.3.6.1.4.1.2.6.168.1.1.1.2.2.1			The compliance statement for SNMP entities the IP Security Protocol.

RFC description

IPsec Flow Monitoring MIB that provides management objects for monitoring, accounting, and error detection across IPsec Phase-1 and Phase-2 operations, tunnel status, and security associations.

Start monitoring IPsec-capable router/firewall/VPN gateway (Tivoli/Cisco IPsec management tooling) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download IPsecT1-MIB

What Is IPsecT1-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description