Juniper-IPsec-Tunnel-MIB

All MIBs › Juniper-IPsec-Tunnel-MIB

Organization: Juniper Networks, Inc.

Last Updated: 2004-04-06

Category: VPN and Security, Vendor: Juniper

Description: Provides managed objects for IPsec VPN tunnel configuration, status, and traffic statistics on Juniper Networks E-series routers.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is Juniper-IPsec-Tunnel-MIB?

This is a Juniper Networks enterprise MIB for the E-series (ERX) router line, providing managed objects for configuring and monitoring IPsec VPN tunnel interfaces. It exposes an IPsec tunnel interface table capturing tunnel name, type, associated virtual router, local and remote IP endpoints, transform set, and source address type/value used to establish each tunnel. Monitoring this MIB centers on the software/protocol status of VPN connectivity, checking whether a tunnel's endpoints and transform set match the expected security policy, and (via the broader juniIpsecTunnel/juniIpsecSystem subtree) tracking tunnel up/down state and traffic statistics that reveal VPN negotiation failures or dropped tunnels. It depends conceptually on IPsec/IKE standards for the tunnel negotiation it configures and reports on. Typical deployment is on Juniper E-series (ERX) edge routers used by service providers to terminate large numbers of customer IPsec VPN tunnels. Engineers can download the Juniper-IPsec-Tunnel-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in Juniper-IPsec-Tunnel-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Juniper Networks E-series (ERX) edge router

Monitoring Examples

An operator would poll juniIpsecTunnelInterfaceTable/juniIpsecTunnelInterfaceEntry, indexed by juniIpsecTunnelIfIndex, for juniIpsecTunnelLocalEndPt, juniIpsecTunnelRemoteEndPt, and juniIpsecTunnelTransformSet to verify a customer VPN tunnel is configured correctly. If juniIpsecTunnelSrcAddr doesn't match the expected juniIpsecTunnelSrcType, or the tunnel's transport virtual router (juniIpsecTunnelTransportVirtualRouter) is wrong, the tunnel will fail to establish, showing up as a missing or errored entry keyed by juniIpsecTunnelName. juniIpsecTunnelNextIfIndex is used by the agent to allocate new tunnel interface indexes as tunnels are provisioned.

What Can Be Monitored

IPsec tunnel local/remote endpoints
tunnel transform set
tunnel type and virtual router association
tunnel source address type/value
number of provisioned tunnel interfaces

Imported Objects

From IF-MIB

InterfaceIndex

From Juniper-MIBs

juniMibs

MODULE-IDENTITY

From Juniper-TC

JuniName
JuniNextIfIndex

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Counter64
IpAddress
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DisplayString
RowStatus
TEXTUAL-CONVENTION

How to Use in IPNetwork Monitor

Example using juniIpsecTunnelStatInbUserRecvPkts OID:

Select a Juniper Networks E-series (ERX) edge router (IPsec VPN tunnel interfaces) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type juniIpsecTunnelStatInbUserRecvPkts into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. It reports the total number of inbound user packets received (successfully, with no errors) for this IPsec tunnel. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter stops increasing while the tunnel is expected to be passing traffic, since a stalled counter often means the tunnel has stopped forwarding. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
juniIpsecGlobalLocalEndpointGroup	1.3.6.1.4.1.4874.2.2.70.2.2.4			A collection of objects providing the global local endpoint for the IPsec tunnel.
juniIpsecObjects	1.3.6.1.4.1.4874.2.2.70.1
C32 juniIpsecSummaryStatsAdminStatusDisabled	1.3.6.1.4.1.4874.2.2.70.1.2.1.3	Counter32	read-only	The total number of tunnels with administrative status disabled
C32 juniIpsecSummaryStatsAdminStatusEnabled	1.3.6.1.4.1.4874.2.2.70.1.2.1.2	Counter32	read-only	The total number of tunnels with administrative status enabled
C32 juniIpsecSummaryStatsOperStatusDown	1.3.6.1.4.1.4874.2.2.70.1.2.1.5	Counter32	read-only	The total number of tunnels with operational status down
C32 juniIpsecSummaryStatsOperStatusNotPresent	1.3.6.1.4.1.4874.2.2.70.1.2.1.6	Counter32	read-only	The total number of tunnels with operational status not-present
C32 juniIpsecSummaryStatsOperStatusUp	1.3.6.1.4.1.4874.2.2.70.1.2.1.4	Counter32	read-only	The total number of tunnels with operational status up
C32 juniIpsecSummaryStatsTotalTunnels	1.3.6.1.4.1.4874.2.2.70.1.2.1.1	Counter32	read-only	The total number of tunnels
juniIpsecSystem	1.3.6.1.4.1.4874.2.2.70.1.2
juniIpsecTransformSetGroup	1.3.6.1.4.1.4874.2.2.70.2.2.3			A collection of objects providing transform set information of the IPsec tunnel.
juniIpsecTunnel	1.3.6.1.4.1.4874.2.2.70.1.1
IP juniIpsecTunnelBackupDstAddr	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.15	IpAddress	read-create	The tunnel backup destination IP(V4) address.
STR juniIpsecTunnelBackupDstName	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.16	DisplayString	read-create	The tunnel backup destination Name.
JUN juniIpsecTunnelBackupDstType	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.14	JuniIpsecIdentityType	read-create	The tunnel backup destination type. The tunnel backup destination type has to be the same as the tunnel destination type The tunnel destination may be identified by: 1. an IP(V4) address, or 2. a fully qualified domain name string, 3. a user fully qualified domain name string.
juniIpsecTunnelCompliance	1.3.6.1.4.1.4874.2.2.70.2.1.1			The compliance statement for SNMPv2 entities which implement the IPsec Tunnel MIB.
juniIpsecTunnelCompliance2	1.3.6.1.4.1.4874.2.2.70.2.1.2			The compliance statement for SNMPv2 entities which implement the IPsec Tunnel MIB.
juniIpsecTunnelConfigGroup	1.3.6.1.4.1.4874.2.2.70.2.2.1			A collection of objects providing configuration information of the IPsec tunnel.
IP juniIpsecTunnelDstAddr	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.12	IpAddress	read-create	The tunnel destination IP(V4) address.
STR juniIpsecTunnelDstName	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.13	DisplayString	read-create	The tunnel destination Name.
JUN juniIpsecTunnelDstType	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.11	JuniIpsecIdentityType	read-create	The tunnel destination type. The tunnel destination may be identified by: 1. an IP(V4) address, or 2. a fully qualified domain name string, or 3. a user fully qualified domain name string.
IP juniIpsecTunnelGlobalLocalEndpoint	1.3.6.1.4.1.4874.2.2.70.1.1.5.1.2	IpAddress	read-create	The global local endpoint for the transport virtual router.
juniIpsecTunnelGlobalLocalEndpointEntry	1.3.6.1.4.1.4874.2.2.70.1.1.5.1		not-accessible	Each entry defines the global local endpoint for the transport virtual router.
ROW juniIpsecTunnelGlobalLocalEndpointRowStatus	1.3.6.1.4.1.4874.2.2.70.1.1.5.1.3	RowStatus	read-create	Controls creation/deletion of entries in this table according to the RowStatus textual convention, constrained to support the following values only: createAndGo destroy To create an entry in this table, the following entry objects MUST be explicitly configured: juniIpsecTunnelGlobalLocalEndpoint juniIpsecTunnelTransportVrRouterIdx Once created, the global local endpoint can not be changed unless there is no IPsec tunnel references to the local endpoint.
juniIpsecTunnelGlobalLocalEndpointTable	1.3.6.1.4.1.4874.2.2.70.1.1.5		not-accessible	This table contains entries of global local endpoint for the IPsec tunnel. There is one global local endpoint for each transport virtual router if configured.
NUM juniIpsecTunnelIfIndex	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.1	InterfaceIndex	not-accessible	The ifIndex of the IPsec tunnel interface. When creating entries in this table, suitable values for this object are determined by reading juniIpsecTunnelNextIfIndex.
SPI juniIpsecTunnelInboundSpi1	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.27	Spi	read-only	The tunnel inbound SPI 1.
SPI juniIpsecTunnelInboundSpi2	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.29	Spi	read-only	The tunnel inbound SPI 2.
SPI juniIpsecTunnelInboundSpi3	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.31	Spi	read-only	The tunnel inbound SPI 3.
SPI juniIpsecTunnelInboundSpi4	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.33	Spi	read-only	The tunnel inbound SPI 4.
JUN juniIpsecTunnelInboundTransform1	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.28	JuniIpsecTransformType	read-only	The tunnel inbound transform 1.
JUN juniIpsecTunnelInboundTransform2	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.30	JuniIpsecTransformType	read-only	The tunnel inbound transform 2.
JUN juniIpsecTunnelInboundTransform3	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.32	JuniIpsecTransformType	read-only	The tunnel inbound transform 3.
JUN juniIpsecTunnelInboundTransform4	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.34	JuniIpsecTransformType	read-only	The tunnel inbound transform 4.
juniIpsecTunnelInterfaceEntry	1.3.6.1.4.1.4874.2.2.70.1.1.2.1		not-accessible	Each entry describes the characteristics of a single IPsec Tunnel interface. Creating/deleting entries in this table causes corresponding entries for be created/deleted in ifTable/ifXTable/juniIfTable.
juniIpsecTunnelInterfaceTable	1.3.6.1.4.1.4874.2.2.70.1.1.2		not-accessible	This table contains entries of IPsec Tunnel interfaces.
U32 juniIpsecTunnelLifeTimeKBs	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.24	Unsigned32	read-create	The tunnel lifetime in kilobytes.
U32 juniIpsecTunnelLifeTimeSecs	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.23	Unsigned32	read-create	The tunnel lifetime in seconds.
IP juniIpsecTunnelLocalEndPt	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.5	IpAddress	read-only	The tunnel local endpoint.
IP juniIpsecTunnelLocalIdAddr1	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.18	IpAddress	read-create	The tunnel local phase-2 identity IP address 1.
IP juniIpsecTunnelLocalIdAddr2	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.19	IpAddress	read-create	The tunnel local phase-2 identity IP address 2 in the case the identity type is an IP address range. The tunnel local phase-2 identity netmask in the case the identity type is an IP address subnet.
JUN juniIpsecTunnelLocalIdType	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.17	JuniIpsecIdentityType	read-create	The tunnel phase-2 local identity type. The tunnel local identity type may be identified by: 1. an IP address, or 2. an IP address subnet, or 3. an IP address range.
juniIpsecTunnelMIB	1.3.6.1.4.1.4874.2.2.70			The IPsec Tunnel MIB for the Juniper Networks enterprise.
juniIpsecTunnelMIBCompliances	1.3.6.1.4.1.4874.2.2.70.2.1
juniIpsecTunnelMIBConformance	1.3.6.1.4.1.4874.2.2.70.2
juniIpsecTunnelMIBGroups	1.3.6.1.4.1.4874.2.2.70.2.2
U32 juniIpsecTunnelMtu	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.26	Unsigned32	read-create	The tunnel MTU.
STR juniIpsecTunnelName	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.2	DisplayString	read-create	The administratively assigned name for this IPsec Tunnel interface. Before configuring other tunnel attributes, IPsec tunnel has to be created with minimum attributes (tunnel name and rowStatus).
JUN juniIpsecTunnelNextIfIndex	1.3.6.1.4.1.4874.2.2.70.1.1.1	JuniNextIfIndex	read-only	Coordinate ifIndex value allocation for entries in the juniIpsecTunnelIfTable. A GET of this object returns the next available ifIndex value to be used to create an entry in the associated interface table; or zero, if no valid ifIndex value is available. This object also returns a value of zero when it is the lexicographic successor of a varbind presented in an SNMP GETNEXT or GETBULK request, for which circumstance it is assumed that ifIndex allocation is unintended. Successive GETs will typically return different values, thus avoiding collisions among cooperating management clients seeking to create table entries simultaneously.
C32 juniIpsecTunnelOutbOtherTxErrs	1.3.6.1.4.1.4874.2.2.70.1.1.3.1.16	Counter32	read-only	The total number of outbound packets with other TX errors for this IPsec tunnel.
SPI juniIpsecTunnelOutboundSpi	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.35	Spi	read-only	The tunnel outbound SPI.
JUN juniIpsecTunnelOutboundTransform	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.36	JuniIpsecTransformType	read-only	The tunnel outbound transform.
C32 juniIpsecTunnelOutbPolicyErrs	1.3.6.1.4.1.4874.2.2.70.1.1.3.1.17	Counter32	read-only	The total number of outbound packets with outbound policy errors for this IPsec tunnel.
JUN juniIpsecTunnelPfsGroup	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.25	JuniIpsecPfsGroup	read-create	The tunnel perfect forward secrecty group.
IP juniIpsecTunnelRemoteEndPt	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.6	IpAddress	read-only	The tunnel remote endpoint.
IP juniIpsecTunnelRemoteIdAddr1	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.21	IpAddress	read-create	The tunnel remote phase-2 identity IP address 1.
IP juniIpsecTunnelRemoteIdAddr2	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.22	IpAddress	read-create	The tunnel remote phase-2 identity IP address 2 in the case the identity type is an IP address range. The tunnel remote phase-2 identity netmask in the case the identity type is an IP address subnet.
JUN juniIpsecTunnelRemoteIdType	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.20	JuniIpsecIdentityType	read-create	The tunnel phase-2 remote identity type. The tunnel remote identity type may be identified by: 1. an IP address, or 2. an IP address subnet, or 3. an IP address range.
ROW juniIpsecTunnelRowStatus	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.37	RowStatus	read-create	Controls creation/deletion of entries in this table according to the RowStatus textual convention, constrained to support the following values only: createAndGo destroy To create an entry in this table, the following entry objects MUST be explicitly configured: juniIpsecTunnelIfRowStatus juniIpsecTunnelName In addition, when creating an entry the following condition must hold: A value for juniIpsecTunnelIfIndex must have been determined previously, typically by reading juniIpsecTunnelNextIfIndex. Once created, the following objects may not be modified: juniIpsecTunnelName juniIpsecTunnelVirtualRouter A corresponding entry in ifTable/ifXTable/juniIfTable is created/ destroyed as a result of creating/destroying an entry in this table.
IP juniIpsecTunnelSrcAddr	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.9	IpAddress	read-create	The tunnel source IP(V4) address.
STR juniIpsecTunnelSrcName	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.10	DisplayString	read-create	The tunnel source Name.
JUN juniIpsecTunnelSrcType	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.8	JuniIpsecIdentityType	read-create	The tunnel source type. The tunnel source may be identified by: 1. an IP(V4) address, or 2. a fully qualified domain name string, or 3. a user fully qualified domain name string.
juniIpsecTunnelStatEntry	1.3.6.1.4.1.4874.2.2.70.1.1.3.1		not-accessible	Describes the ipsec traffic statistics of the ipsec tunnel interface.
NUM juniIpsecTunnelStatIfIndex	1.3.6.1.4.1.4874.2.2.70.1.1.3.1.1	InterfaceIndex	not-accessible	Same value as ifIndex for the corresponding entry in Interfaces MIB ifTable.
C64 juniIpsecTunnelStatInbAccRecvOctets	1.3.6.1.4.1.4874.2.2.70.1.1.3.1.5	Counter64	read-only	The total number of inbound encapsulated octets received for this IPsec tunnel.
C64 juniIpsecTunnelStatInbAccRecvPkts	1.3.6.1.4.1.4874.2.2.70.1.1.3.1.4	Counter64	read-only	The total number of inbound encapsulated packets received for this IPsec tunnel.
C32 juniIpsecTunnelStatInbAuthErrs	1.3.6.1.4.1.4874.2.2.70.1.1.3.1.6	Counter32	read-only	The total number of inbound packets with authentication errors received for this IPsec tunnel.
C32 juniIpsecTunnelStatInbDecryptErrs	1.3.6.1.4.1.4874.2.2.70.1.1.3.1.10	Counter32	read-only	The total number of inbound packets with decryption errors received for this IPsec tunnel.
C32 juniIpsecTunnelStatInbOtherRecvErrs	1.3.6.1.4.1.4874.2.2.70.1.1.3.1.9	Counter32	read-only	The total number of inbound packets with other Rx errors received for this IPsec tunnel.
C32 juniIpsecTunnelStatInbPadErrs	1.3.6.1.4.1.4874.2.2.70.1.1.3.1.11	Counter32	read-only	The total number of inbound packets with pad errors received for this IPsec tunnel.
C32 juniIpsecTunnelStatInbPolicyErrs	1.3.6.1.4.1.4874.2.2.70.1.1.3.1.8	Counter32	read-only	The total number of inbound packets with inbound policy errors received for this IPsec tunnel.
C32 juniIpsecTunnelStatInbReplayErrs	1.3.6.1.4.1.4874.2.2.70.1.1.3.1.7	Counter32	read-only	The total number of inbound packets with replay errors received for this IPsec tunnel.
C64 juniIpsecTunnelStatInbUserRecvOctets	1.3.6.1.4.1.4874.2.2.70.1.1.3.1.3	Counter64	read-only	The total number of inbound user octets (non-error) received for this IPsec tunnel.
C64 juniIpsecTunnelStatInbUserRecvPktsEx	1.3.6.1.4.1.4874.2.2.70.1.1.3.1.2	Counter64	read-only	The total number of inbound user packets (non-error) received for this IPsec tunnel.
C64 juniIpsecTunnelStatOutbAccRecvOctets	1.3.6.1.4.1.4874.2.2.70.1.1.3.1.15	Counter64	read-only	The total number of encapsulated outbound octets received for this IPsec tunnel.
C64 juniIpsecTunnelStatOutbAccRecvPkts	1.3.6.1.4.1.4874.2.2.70.1.1.3.1.14	Counter64	read-only	The total number of encapsulated outbound packets received for this IPsec tunnel.
C64 juniIpsecTunnelStatOutbUserRecvOctets	1.3.6.1.4.1.4874.2.2.70.1.1.3.1.13	Counter64	read-only	The total number of outbound user octets received for this IPsec tunnel.
C64 juniIpsecTunnelStatOutbUserRecvPkts	1.3.6.1.4.1.4874.2.2.70.1.1.3.1.12	Counter64	read-only	The total number of outbound user packets received for this IPsec tunnel.
juniIpsecTunnelStatsGroup	1.3.6.1.4.1.4874.2.2.70.2.2.2			A collection of objects providing satistics information of the IPsec tunnel.
juniIpsecTunnelStatTable	1.3.6.1.4.1.4874.2.2.70.1.1.3		not-accessible	The IPsec tunnel interface statistics table. Describes the IPsec tunnel inbound/outbound statistics on IPsec de/encapsulation, de/encryption, and related error statistics.
juniIpsecTunnelSystemStats	1.3.6.1.4.1.4874.2.2.70.1.2.1
juniIpsecTunnelSystemStatsGroup	1.3.6.1.4.1.4874.2.2.70.2.2.5			A collection of objects providing summary statistics information for IPsec tunnels in one system.
JUN juniIpsecTunnelTransform1	1.3.6.1.4.1.4874.2.2.70.1.1.4.1.2	JuniIpsecTransformType	read-create	The first IPsec transform in the transform set.
JUN juniIpsecTunnelTransform2	1.3.6.1.4.1.4874.2.2.70.1.1.4.1.3	JuniIpsecTransformType	read-create	The second IPsec transform in the transform set.
JUN juniIpsecTunnelTransform3	1.3.6.1.4.1.4874.2.2.70.1.1.4.1.4	JuniIpsecTransformType	read-create	The third IPsec transform in the transform set.
JUN juniIpsecTunnelTransform4	1.3.6.1.4.1.4874.2.2.70.1.1.4.1.5	JuniIpsecTransformType	read-create	The fourth IPsec transform in the transform set.
JUN juniIpsecTunnelTransform5	1.3.6.1.4.1.4874.2.2.70.1.1.4.1.6	JuniIpsecTransformType	read-create	The fifth IPsec transform in the transform set.
JUN juniIpsecTunnelTransform6	1.3.6.1.4.1.4874.2.2.70.1.1.4.1.7	JuniIpsecTransformType	read-create	The sixth IPsec transform in the transform set.
STR juniIpsecTunnelTransformSet	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.7	DisplayString	read-create	The transform set. It refers to a transform set that is defined in the transform set table.
juniIpsecTunnelTransformSetEntry	1.3.6.1.4.1.4874.2.2.70.1.1.4.1		not-accessible	Each entry describes a transform set that contains up to 6 IPsec transforms. The transform set name is referenced by the IPsec tunnel as its local IPsec policy.
STR juniIpsecTunnelTransformSetName	1.3.6.1.4.1.4874.2.2.70.1.1.4.1.1	DisplayString	not-accessible	The name of the IPsec tunnel transform set.
ROW juniIpsecTunnelTransformSetRowStatus	1.3.6.1.4.1.4874.2.2.70.1.1.4.1.8	RowStatus	read-create	Controls creation/deletion of entries in this table according to the RowStatus textual convention, constrained to support the following values only: createAndGo destroy To create an entry in this table, the following entry objects MUST be explicitly configured: juniIpsecTunnelTransformSetRowStatus juniIpsecTunnelTransformSetName juniIpsecTunnelTransform1.
juniIpsecTunnelTransformSetTable	1.3.6.1.4.1.4874.2.2.70.1.1.4		not-accessible	This table contains entries of IPsec transform sets defined for this router.
JUN juniIpsecTunnelTransportVirtualRouter	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.4	JuniName	read-create	The transport virtual router associated with this IPsec tunnel interface. This object need not be set when creating row entries. Note that the default when this object is not specified is the router associated with the agent acting on the management request.
U32 juniIpsecTunnelTransportVrRouterIdx	1.3.6.1.4.1.4874.2.2.70.1.1.5.1.1	Unsigned32	not-accessible	The transport virtual router for the global local endpoint.
JUN juniIpsecTunnelType	1.3.6.1.4.1.4874.2.2.70.1.1.2.1.3	JuniIpsecTunnelType	read-create	The configured mode for this IPsec Tunnel interface.

RFC description

Juniper IPsec Tunnel MIB for managing IPsec VPN tunnel configuration, status, identity types, and encryption transform parameters.

Start monitoring Juniper Networks E-series (ERX) edge router (IPsec VPN tunnel interfaces) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download Juniper-IPsec-Tunnel-MIB