All MIBs › IPsecT1-MIB › ikeFailReason
ikeFailReason
Module: IPsecT1-MIB
OID (symbolic): IPsecT1-MIB::ikeFailReason
OID (numeric): 1.3.6.1.4.1.2.6.168.1.1.1.1.5.2.1.1.2
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-only
Description: The reason for the failure. Possible reasons include: 1 = other 2 = peer delete request was received 3 = contact with peer was lost 4 = local failure occurred 5 = sequence number rolled over 6 = authentication failure 7 = hash validation failure 8 = encryption failure 9 = internal error occurred 10 = system capacity failure 11 = proposal failure 12 = peer's certificate is unavailable 13 = peer's certificate was found invalid 14 = local certificate expired 15 = certificate revoke list (crl) failure 16 = peer encoding error 17 = non-existent security association 18 = operator requested termination.
What is ikeFailReason?
Why this Phase-1 IKE negotiation failed, as one of 18 codes such as peerLost (3), authFailure (6), hashValidation (7), proposalFailure (11), peerCertNotValid (13), localCertExpired (14) or nonExistentSa (17). It is the first thing to read when a VPN will not come up: 6 usually points to a wrong key and 11 to mismatched IKE proposals.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.2.6.168.1.1.1.1.5.2.1.1.2 snmpwalk -v2c -c public <target> IPsecT1-MIB::ikeFailReason
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.2.6.168.1.1.1.1.5.2.1.1.2.1 snmpget -v2c -c public <target> IPsecT1-MIB::ikeFailReason.1
Start monitoring IPsec-capable router/firewall/VPN gateway (Tivoli/Cisco IPsec management tooling) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the IPsecT1-MIB::ikeFailReason OID value, configure state conditions and alerts, and monitor any IPsec-capable router/firewall/VPN gateway (Tivoli/Cisco IPsec management tooling) from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.2 | ibm | ATM-ADAPTER-MIB |
| 1.3.6.1.4.1.2.6 | ibmProd | ATM-ADAPTER-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.2.6.168.1.1.1 | ipsecMIB | IPsecT1-MIB |
| 1.3.6.1.4.1.2.6.168.1.1.1.1 | ipsecMIBObjects | IPsecT1-MIB |
| 1.3.6.1.4.1.2.6.168.1.1.1.1.5 | ipsecFailures | IPsecT1-MIB |
| 1.3.6.1.4.1.2.6.168.1.1.1.1.5.2 | ipsecFailPhaseOne | IPsecT1-MIB |
| 1.3.6.1.4.1.2.6.168.1.1.1.1.5.2.1 | ikeFailTable | IPsecT1-MIB |
| 1.3.6.1.4.1.2.6.168.1.1.1.1.5.2.1.1 | ikeFailEntry | IPsecT1-MIB |
| 1.3.6.1.4.1.2.6.168.1.1.1.1.5.2.1.1.2 | ikeFailReason | IPsecT1-MIB |