All MIBs › IPsecT1-MIB › ikeTunInP2ExchgInvalids
ikeTunInP2ExchgInvalids
Module: IPsecT1-MIB
OID (symbolic): IPsecT1-MIB::ikeTunInP2ExchgInvalids
OID (numeric): 1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.24
Node type: OBJECT-TYPE
Type: Counter32
Access: read-only
Description: The total number of ipsec Phase-2 exchanges received and found to be invalid by this ipsec Phase-1 IKE Tunnel.
What is ikeTunInP2ExchgInvalids?
Total Phase-2 exchanges that were received and found to be invalid by this Phase-1 (IKE) tunnel. Invalid exchanges usually mean malformed messages or incompatible peer behaviour; a non-zero, growing value is worth a look at both peers' IPsec configuration.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.24 snmpwalk -v2c -c public <target> IPsecT1-MIB::ikeTunInP2ExchgInvalids
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.24.1 snmpget -v2c -c public <target> IPsecT1-MIB::ikeTunInP2ExchgInvalids.1
SNMPv3 example:
snmpget -v3 -l authPriv -u snmpv3-user -a SHA -A "AuthPassword1" -x AES -X "PrivPassword1" <target> ikeTunInP2ExchgInvalids.1
Start monitoring IPsec-capable router/firewall/VPN gateway (Tivoli/Cisco IPsec management tooling) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the IPsecT1-MIB::ikeTunInP2ExchgInvalids OID value, configure state conditions and alerts, and monitor any IPsec-capable router/firewall/VPN gateway (Tivoli/Cisco IPsec management tooling) from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.2 | ibm | ATM-ADAPTER-MIB |
| 1.3.6.1.4.1.2.6 | ibmProd | ATM-ADAPTER-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.2.6.168.1.1.1 | ipsecMIB | IPsecT1-MIB |
| 1.3.6.1.4.1.2.6.168.1.1.1.1 | ipsecMIBObjects | IPsecT1-MIB |
| 1.3.6.1.4.1.2.6.168.1.1.1.1.2 | ipsecPhaseOne | IPsecT1-MIB |
| 1.3.6.1.4.1.2.6.168.1.1.1.1.2.3 | ikeTunnelTable | IPsecT1-MIB |
| 1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1 | ikeTunnelEntry | IPsecT1-MIB |
| 1.3.6.1.4.1.2.6.168.1.1.1.1.2.3.1.24 | ikeTunInP2ExchgInvalids | IPsecT1-MIB |