All MIBs › L2TP-MIB
Organization: IETF L2TP Working Group
Last Updated: 2002-08-23
Category: VPN and Security
Description: Manages Layer Two Tunneling Protocol (L2TP) tunnel and session state, configuration, and statistics, including tunnel endpoint domain grouping.
IPNetwork Monitor uses several OIDs from this MIB in network discovery and polling the applicable devices. Start monitoring L2TP-MIB with a free 30-day trial of IPNetwork Monitor.
What Is L2TP-MIB?
L2TP-MIB is a standards-based IETF MIB (RFC 3371) for managing the Layer Two Tunneling Protocol, which carries PPP sessions inside tunnels across an IP network, commonly used in dial/VPN access aggregation. It exposes tunnel- and session-level configuration and statistics, per-domain tunnel grouping and administrative control, and vendor/firmware identification for the L2TP implementation. Monitoring emphasis leans toward software/service status: l2tpAdminState and l2tpDrainingTunnels reveal whether the L2TP service (or a specific domain of tunnels) is being gracefully drained for maintenance, while l2tpVendorName and l2tpFirmwareRev expose the implementation's software version. It is a vendor-neutral MIB that stands on its own but is commonly deployed alongside PPP- and RADIUS-related MIBs in access networks. It is typically deployed on LAC/LNS devices (L2TP Access Concentrators and Network Servers) used in broadband/VPDN remote-access deployments. Engineers implementing or auditing this functionality typically reference the L2TP-MIB RFC/standard documentation for the authoritative specification.
IPNetwork Monitor allows you to monitor SNMP objects defined in L2TP-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- vendor-neutral, standards-based MIB, not tied to a specific manufacturer — applies to LAC/LNS devices (L2TP access concentrators and network servers)
Monitoring Examples
An operator can check l2tpAdminState and l2tpDrainingTunnels to see whether tunnels are being administratively drained ahead of maintenance, and use l2tpDomainConfigTable (l2tpDomainConfigId, l2tpDomainConfigAdminState, l2tpDomainConfigDrainTunnels) to control or observe this behavior per domain group rather than for the whole device. l2tpVendorName and l2tpFirmwareRev confirm the L2TP software build in use, useful when diagnosing interoperability issues between LAC and LNS endpoints.
What Can Be Monitored
- tunnel/domain admin state
- tunnel draining status
- L2TP vendor name and firmware revision
- protocol versions supported
- per-domain authentication configuration
This MIB depends on
Related MIBs
Imported Objects
From IF-MIB
| InterfaceIndex |
From SNMP-FRAMEWORK-MIB
| SnmpAdminString |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| NOTIFICATION-GROUP | |
| OBJECT-GROUP |
From SNMPv2-SMI
| Counter32 | |
| Counter64 | |
| Gauge32 | |
| Integer32 | |
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE | |
| Unsigned32 | |
| transmission |
From SNMPv2-TC
| RowStatus | |
| StorageType | |
| TEXTUAL-CONVENTION | |
| TruthValue |
How to Use in IPNetwork Monitor
Example using l2tpDomainStatsTotalTunnels OID:
Select a device implementing L2TP-MIB as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type l2tpDomainStatsTotalTunnels into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. This object returns the total number of tunnels that have successfully reached the established state for this tunnel domain. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| l2tp | 1.3.6.1.2.1.10.95 | The MIB module that describes managed objects of general use by the Layer Two Transport Protocol. | ||
| l2tpNotifications | 1.3.6.1.2.1.10.95.0 | |||
| NTF l2tpTunnelAuthFailure | 1.3.6.1.2.1.10.95.0.1 | A l2tpTunnelAuthFailure trap signifies that an attempt to establish a tunnel to a remote peer has failed authentication. | ||
| l2tpObjects | 1.3.6.1.2.1.10.95.1 | |||
| l2tpScalar | 1.3.6.1.2.1.10.95.1.1 | |||
| l2tpConfig | 1.3.6.1.2.1.10.95.1.1.1 | |||
| INT l2tpAdminState | 1.3.6.1.2.1.10.95.1.1.1.1 | INTEGER | read-write | This object defines the administrative state of the L2TP protocol. Setting this object to 'disabled' causes all tunnels to be immediately disconnected and no further tunnels to be either initiated or accepted. The value of this object must be maintained in non-volatile memory. |
| T/F l2tpDrainTunnels | 1.3.6.1.2.1.10.95.1.1.1.2 | TruthValue | read-write | Setting this object to 'true' will prevent any new tunnels and/or sessions to be either initiated or accepted but does NOT disconnect any active tunnels/sessions. Setting this object to true(1) causes all domains and their respective tunnels to transition to the draining state. Note that when this occurs the 'xxxDraining' status objects of the domains and their tunnels should reflect that they are 'draining'. Setting this object has no affect on the domains or their tunnels 'xxxDrainTunnels' configuration objects. To cancel a drain this object should be set to false(2). The object l2tpDrainingTunnels reflects the current L2TP draining state. The value of this object must be maintained in non-volatile memory. |
| l2tpStats | 1.3.6.1.2.1.10.95.1.1.2 | |||
| OCT l2tpProtocolVersions | 1.3.6.1.2.1.10.95.1.1.2.1 | OCTET STRING | read-only | Vector of supported L2TP protocol version and revision numbers. Supported versions are identified via a two octet pairing where the first octet indicates the version and the second octet contains the revision. |
| STR l2tpVendorName | 1.3.6.1.2.1.10.95.1.1.2.2 | SnmpAdminString | read-only | This object identifies the Vendor name of the L2TP protocol stack. |
| I32 l2tpFirmwareRev | 1.3.6.1.2.1.10.95.1.1.2.3 | Integer32 | read-only | This object defines the firmware revision for the L2TP protocol stack. |
| T/F l2tpDrainingTunnels | 1.3.6.1.2.1.10.95.1.1.2.4 | TruthValue | read-only | This object indicates if the local L2TP is draining off sessions from all tunnels. |
| l2tpDomainConfigTable | 1.3.6.1.2.1.10.95.1.2 | not-accessible | The L2TP Domain configuration table. This table contains objects that can be used to configure the operational characteristics of a tunnel domain. There is a 1-1 correspondence between conceptual rows of this table and conceptual rows of the l2tpDomainStatsTable. | |
| l2tpDomainConfigEntry | 1.3.6.1.2.1.10.95.1.2.1 | not-accessible | An L2TP Domain configuration entry. An entry in this table may correspond to a single endpoint or a group of tunnel endpoints. | |
| STR l2tpDomainConfigId | 1.3.6.1.2.1.10.95.1.2.1.1 | SnmpAdminString | not-accessible | The identifier, usually in the form of a Domain Name (full or partial), describing a single tunnel endpoint or a domain of tunnel endpoints. This is typically used as a 'handle' to identify the tunnel configuration requirements for both incoming and outgoing tunnel connection attempts. Both the LAC and LNS could use information provided in the Host Name AVP attribute however the tunnel initiator could use other means not specified to identify the domain's tunnel configuration requirements. For example; three rows in this table have l2tpDomainConfigId values of 'lac1.isp.com', 'isp.com' and 'com'. A tunnel endpoint then identifies itself as 'lac1.isp.com' which would match the 'lac1.isp.com' entry in this table. A second tunnel endpoint then identifies itself as 'lac2.isp.com'. This endpoint is then associated with the 'isp.com' entry of this table. |
| INT l2tpDomainConfigAdminState | 1.3.6.1.2.1.10.95.1.2.1.2 | INTEGER | read-create | This object defines the administrative state of this tunnel domain. Setting this object to disabled(2) causes all tunnels to be immediately disconnected and no further tunnels to be either initiated or accepted. Note that all columnar objects corresponding to this conceptual row cannot be modified when the administrative state is enabled EXCEPT those objects which specifically state otherwise. |
| T/F l2tpDomainConfigDrainTunnels | 1.3.6.1.2.1.10.95.1.2.1.3 | TruthValue | read-create | Setting this object to 'true' will prevent any new tunnels and/or sessions from being either initiated or accepted but does NOT disconnect any active tunnels/sessions for this tunnel domain. Setting this object to true(1) causes all tunnels within this domain to transition to the draining state. Note that when this occurs the l2tpTunnelStatsDrainingTunnel status objects of all of this domain's tunnels should reflect that they are 'draining'. Setting this object has no effect on this domain's associated tunnels l2tpTunnelConfigDrainTunnel configuration objects. To cancel a drain this object should be set to false(2). Setting this object to false(2) when the L2TP object l2tpDrainTunnels is true(1) has no affect, all domains and their tunnels will continue to drain. |
| INT l2tpDomainConfigAuth | 1.3.6.1.2.1.10.95.1.2.1.4 | INTEGER | read-create | This object describes how tunnel peers belonging to this domain are to be authenticated. The value simple(2) indicates that peers are authenticated simply by their host name as described in the Host Name AVP. The value challenge(3) indicates that all peers are challenged to prove their identification. This mechanism is described in the L2TP protocol. |
| STR l2tpDomainConfigSecret | 1.3.6.1.2.1.10.95.1.2.1.5 | SnmpAdminString | read-create | This object is used to configure the shared secret used during the tunnel authentication phase of tunnel establishment. This object MUST be accessible only via requests using both authentication and privacy. The agent MUST report an empty string in response to get, get-next and get-bulk requests. |
| INT l2tpDomainConfigTunnelSecurity | 1.3.6.1.2.1.10.95.1.2.1.6 | INTEGER | read-create | This object defines whether this tunnel domain requires that all tunnels are to be secured. The value of ipsec(3) indicates that all tunnel packets, control and session, have IP Security headers. The type of IP Security headers (AH, ESP etc) and how they are further described is outside the scope of this document. |
| I32 l2tpDomainConfigTunnelHelloInt | 1.3.6.1.2.1.10.95.1.2.1.7 | Integer32 | read-create | This object defines the interval in which Hello (or keep-alive) packets are to be sent by local peers belonging to this tunnel domain. The value zero effectively disables the sending of Hello packets. This object may be modified when the administrative state is enabled for this conceptual row. |
| I32 l2tpDomainConfigTunnelIdleTO | 1.3.6.1.2.1.10.95.1.2.1.8 | Integer32 | read-create | This object defines the period of time that an established tunnel belonging to this tunnel domain with no active sessions will wait before disconnecting the tunnel. A value of zero indicates that the tunnel will disconnect immediately after the last session disconnects. A value of -1 leaves the tunnel up indefinitely. This object may be modified when the administrative state is enabled for this conceptual row. |
| I32 l2tpDomainConfigControlRWS | 1.3.6.1.2.1.10.95.1.2.1.9 | Integer32 | read-create | This object defines the control channel receive window size for tunnels belonging to this domain. It specifies the maximum number of packets the tunnel peer belonging to this domain can send without waiting for an acknowledgement from this peer. |
| I32 l2tpDomainConfigControlMaxRetx | 1.3.6.1.2.1.10.95.1.2.1.10 | Integer32 | read-create | This object defines the maximum number of retransmissions which the L2TP stack will attempt for tunnels belonging to this domain before assuming that the peer is no longer responding. |
| I32 l2tpDomainConfigControlMaxRetxTO | 1.3.6.1.2.1.10.95.1.2.1.11 | Integer32 | read-create | This object defines the maximum retransmission timeout interval which the L2TP stack will wait for tunnels belonging to this domain before retransmitting a control packet that has not been acknowledged. |
| INT l2tpDomainConfigPayloadSeq | 1.3.6.1.2.1.10.95.1.2.1.12 | INTEGER | read-create | This object determines whether or not session payload packets will be requested to be sent with sequence numbers from tunnel peers belonging to this domain. The value onDemand(1) allows the L2TP implementation to initiate payload sequencing when necessary based on local information (e.g: during LCP/NCP negotiations or for CCP). The value never(2) indicates that L2TP will never initiate sequencing but will do sequencing if asked. The value always(3) indicates that L2TP will send the Sequencing Required AVP during session establishment. |
| L2T l2tpDomainConfigReassemblyTO | 1.3.6.1.2.1.10.95.1.2.1.13 | L2tpMilliSeconds | read-create | This object defines the number of milliseconds that local peers of this tunnel domain will wait before processing payload packets that were received out of sequence (which are waiting for the packet(s) to put them in sequence). A low value increases the chance of delayed packets to be discarded (which MAY cause the PPP decompression engine to reset) while a high value may cause more queuing and possibly degrade throughput if packets are truly lost. The default value for this object is zero which will result in all delayed packets being lost. |
| T/F l2tpDomainConfigProxyPPPAuth | 1.3.6.1.2.1.10.95.1.2.1.14 | TruthValue | read-create | This object is used to configure the sending or acceptance of the PPP Proxy Authentication AVP's on the LAC or LNS. |
| STO l2tpDomainConfigStorageType | 1.3.6.1.2.1.10.95.1.2.1.15 | StorageType | read-create | The storage type for this conceptual row. Conceptual rows having the value 'permanent' must allow write-access at a minimum to: - l2tpDomainConfigAdminState and l2tpDomainConfigDrainTunnels at all times - l2tpDomainConfigSecret if l2tpDomainConfigAuth has been configured as 'challenge' It is an implementation issue to decide if a SET for a readOnly or permanent row is accepted at all. In some contexts this may make sense, in others it may not. If a SET for a readOnly or permanent row is not accepted at all, then a 'wrongValue' error must be returned. |
| ROW l2tpDomainConfigStatus | 1.3.6.1.2.1.10.95.1.2.1.16 | RowStatus | read-create | The status of this Domain entry. Columnar objects corresponding to this conceptual row may be modified according to their description clauses when this RowStatus object is 'active'. |
| l2tpDomainStatsTable | 1.3.6.1.2.1.10.95.1.3 | not-accessible | The L2TP Domain Status and Statistics table. This table contains objects that can be used to describe the current status and statistics of a tunnel domain. There is a 1-1 correspondence between conceptual rows of this table and conceptual rows of the l2tpDomainConfigTable. | |
| l2tpDomainStatsEntry | 1.3.6.1.2.1.10.95.1.3.1 | not-accessible | An L2TP Domain Stats entry. An entry in this table may correspond to a single endpoint or a group of tunnel endpoints. | |
| C32 l2tpDomainStatsTotalTunnelsEx | 1.3.6.1.2.1.10.95.1.3.1.1 | Counter32 | read-only | This object returns the total number of tunnels that have successfully reached the established state for this tunnel domain. |
| C32 l2tpDomainStatsFailedTunnels | 1.3.6.1.2.1.10.95.1.3.1.2 | Counter32 | read-only | This object returns the number of tunnels that failed (eg: connection timeout, unsupported or malformed AVP's etc) to reach the established state for this tunnel domain. |
| C32 l2tpDomainStatsFailedAuths | 1.3.6.1.2.1.10.95.1.3.1.3 | Counter32 | read-only | This object returns the number of failed tunnel connection attempts for this domain because the tunnel peer failed authentication. |
| G32 l2tpDomainStatsActiveTunnels | 1.3.6.1.2.1.10.95.1.3.1.4 | Gauge32 | read-only | This object returns the number of tunnels that are currently active for this domain. |
| C32 l2tpDomainStatsTotalSessions | 1.3.6.1.2.1.10.95.1.3.1.5 | Counter32 | read-only | This object returns the total number of sessions that have successfully reached the established state for this tunnel domain. |
| C32 l2tpDomainStatsFailedSessions | 1.3.6.1.2.1.10.95.1.3.1.6 | Counter32 | read-only | This object returns the number of sessions that failed (eg: connection timeout, unsupported or malformed AVP's etc) to reach the established state for this tunnel domain. |
| G32 l2tpDomainStatsActiveSessions | 1.3.6.1.2.1.10.95.1.3.1.7 | Gauge32 | read-only | This object returns the number of sessions that are currently active for this domain. |
| T/F l2tpDomainStatsDrainingTunnels | 1.3.6.1.2.1.10.95.1.3.1.8 | TruthValue | read-only | This object indicates if this domain is draining off sessions from all tunnels. |
| C32 l2tpDomainStatsControlRxOctets | 1.3.6.1.2.1.10.95.1.3.1.9 | Counter32 | read-only | This object returns the number of control channel octets received for this tunnel domain. |
| C32 l2tpDomainStatsControlRxPkts | 1.3.6.1.2.1.10.95.1.3.1.10 | Counter32 | read-only | This object returns the number of control packets received for this tunnel domain. |
| C32 l2tpDomainStatsControlTxOctets | 1.3.6.1.2.1.10.95.1.3.1.11 | Counter32 | read-only | This object returns the number of control channel octets that were transmitted to tunnel endpoints for this domain. |
| C32 l2tpDomainStatsControlTxPkts | 1.3.6.1.2.1.10.95.1.3.1.12 | Counter32 | read-only | This object returns the number of control packets that were transmitted to tunnel endpoints for this domain. |
| C32 l2tpDomainStatsPayloadRxOctets | 1.3.6.1.2.1.10.95.1.3.1.13 | Counter32 | read-only | This object returns the number of payload channel octets that were received for this tunnel domain. |
| C32 l2tpDomainStatsPayloadRxPkts | 1.3.6.1.2.1.10.95.1.3.1.14 | Counter32 | read-only | This object returns the number of payload packets that were received for this tunnel domain. |
| C32 l2tpDomainStatsPayloadRxDiscs | 1.3.6.1.2.1.10.95.1.3.1.15 | Counter32 | read-only | This object returns the number of received payload packets that were discarded by this tunnel domain. |
| C32 l2tpDomainStatsPayloadTxOctets | 1.3.6.1.2.1.10.95.1.3.1.16 | Counter32 | read-only | This object returns the number of payload channel octets that were transmitted to tunnel peers within this tunnel domain. |
| C32 l2tpDomainStatsPayloadTxPkts | 1.3.6.1.2.1.10.95.1.3.1.17 | Counter32 | read-only | This object returns the number of payload packets that were transmitted to tunnel peers within this tunnel domain. |
| C64 l2tpDomainStatsControlHCRxOctets | 1.3.6.1.2.1.10.95.1.3.1.18 | Counter64 | read-only | This object is a 64-bit version of l2tpDomainStatsControlRxOctets. |
| C64 l2tpDomainStatsControlHCRxPkts | 1.3.6.1.2.1.10.95.1.3.1.19 | Counter64 | read-only | This object is a 64-bit version of l2tpDomainStatsControlRxPkts. |
| C64 l2tpDomainStatsControlHCTxOctets | 1.3.6.1.2.1.10.95.1.3.1.20 | Counter64 | read-only | This object is a 64-bit version of l2tpDomainStatsControlTxOctets. |
| C64 l2tpDomainStatsControlHCTxPkts | 1.3.6.1.2.1.10.95.1.3.1.21 | Counter64 | read-only | This object is a 64-bit version of l2tpDomainStatsControlTxPkts. |
| C64 l2tpDomainStatsPayloadHCRxOctets | 1.3.6.1.2.1.10.95.1.3.1.22 | Counter64 | read-only | This object is a 64-bit version of l2tpDomainStatsPayloadRxOctets. |
| C64 l2tpDomainStatsPayloadHCRxPkts | 1.3.6.1.2.1.10.95.1.3.1.23 | Counter64 | read-only | This object is a 64-bit version of l2tpDomainStatsPayloadRxPkts. |
| C64 l2tpDomainStatsPayloadHCRxDiscs | 1.3.6.1.2.1.10.95.1.3.1.24 | Counter64 | read-only | This object is a 64-bit version of l2tpDomainStatsPayloadRxDiscs. |
| C64 l2tpDomainStatsPayloadHCTxOctets | 1.3.6.1.2.1.10.95.1.3.1.25 | Counter64 | read-only | This object is a 64-bit version of l2tpDomainStatsPayloadTxOctets. |
| C64 l2tpDomainStatsPayloadHCTxPkts | 1.3.6.1.2.1.10.95.1.3.1.26 | Counter64 | read-only | This object is a 64-bit version of l2tpDomainStatsPayloadTxPkts. |
| l2tpTunnelConfigTable | 1.3.6.1.2.1.10.95.1.4 | not-accessible | The L2TP tunnel configuration table. This table contains objects that can be used to (re)configure the operational characteristics of a single L2TP tunnel. There is a 1-1 correspondence between conceptual rows of this table and conceptual rows of the l2tpTunnelStatsTable. Entries in this table have the same persistency characteristics as that of the tunnelConfigTable. | |
| l2tpTunnelConfigEntry | 1.3.6.1.2.1.10.95.1.4.1 | not-accessible | A L2TP tunnel interface configuration entry. Entries in this table come and go as a result of protocol interactions or on management operations. The latter occurs when a row is instantiated in the tunnelConfigTable row and the encapsulation method is 'l2tp'. | |
| NUM l2tpTunnelConfigIfIndex | 1.3.6.1.2.1.10.95.1.4.1.1 | InterfaceIndex | not-accessible | This value for this object is equal to the value of ifIndex of the Interfaces MIB for tunnel interfaces of type L2TP. |
| STR l2tpTunnelConfigDomainId | 1.3.6.1.2.1.10.95.1.4.1.2 | SnmpAdminString | read-write | The tunnel domain that this tunnel belongs to. A LNS tunnel endpoint will typically inherit this value from the endpoint domain table. A LAC may be provided with this information during tunnel setup. When a zero length string is returned this tunnel does not belong belong to any particular domain. |
| INT l2tpTunnelConfigAuth | 1.3.6.1.2.1.10.95.1.4.1.3 | INTEGER | read-write | This object describes how L2TP tunnel peers are to be authenticated. The value 'simple' indicates that peers are authenticated simply by their host name as described in the Host Name AVP. The value 'challenge' indicates that all peers are challenged to prove their identification. This mechanism is described in the L2TP protocol. This object cannot be modified when the tunnel is in a connecting or connected state. |
| STR l2tpTunnelConfigSecret | 1.3.6.1.2.1.10.95.1.4.1.4 | SnmpAdminString | read-write | This object is used to configure the shared secret used during the tunnel authentication phase of tunnel establishment. This object cannot be modified when the tunnel is in a connecting or connected state. This object MUST be accessible only via requests using both authentication and privacy. The agent MUST report an empty string in response to get, get-next and get-bulk requests. |
| INT l2tpTunnelConfigSecurity | 1.3.6.1.2.1.10.95.1.4.1.5 | INTEGER | read-write | This object defines whether this tunnel is to be secured. The value of 'ipSec' indicates that all tunnel packets, control and session, have IP Security headers. The type of IP Security headers (AH, ESP etc) and how they are further described is outside the scope of this document. This object cannot be modified when the tunnel is in a connecting or connected state. |
| I32 l2tpTunnelConfigHelloInterval | 1.3.6.1.2.1.10.95.1.4.1.6 | Integer32 | read-write | This object defines the interval in which Hello (or keep-alive) packets are to be sent to the tunnel peer. The value zero effectively disables the sending of Hello packets. Modifications to this object have immediate effect. |
| I32 l2tpTunnelConfigIdleTimeout | 1.3.6.1.2.1.10.95.1.4.1.7 | Integer32 | read-write | This object defines the period of time that an established tunnel with no sessions will wait before disconnecting the tunnel. A value of zero indicates that the tunnel will disconnect immediately after the last session disconnects. A value of -1 leaves the tunnel up indefinitely. Modifications to this object have immediate effect. |
| I32 l2tpTunnelConfigControlRWS | 1.3.6.1.2.1.10.95.1.4.1.8 | Integer32 | read-write | This object defines the control channel receive window size. It specifies the maximum number of packets the tunnel peer can send without waiting for an acknowledgement from this peer. This object cannot be modified when the tunnel is in a con- necting or connected state. |
| I32 l2tpTunnelConfigControlMaxRetx | 1.3.6.1.2.1.10.95.1.4.1.9 | Integer32 | read-write | This object defines the number of retransmissions which the tunnel will attempt before assuming that the peer is no longer responding. A value of zero indicates that this peer will not attempt to retransmit an unacknowledged control packet. Modifications to this object have immediate effect. |
| I32 l2tpTunnelConfigControlMaxRetxTO | 1.3.6.1.2.1.10.95.1.4.1.10 | Integer32 | read-write | This object defines the maximum retransmission timeout interval which the tunnel will wait before retrans- mitting a control packet that has not been acknowledged. Modifications to this object have immediate effect. |
| INT l2tpTunnelConfigPayloadSeq | 1.3.6.1.2.1.10.95.1.4.1.11 | INTEGER | read-write | This object determines whether or not session payload packets will be requested to be sent with sequence numbers from tunnel peers belonging to this domain. The value onDemand(1) allows the L2TP implementation to initiate payload sequencing when necessary based on local information (e.g: during LCP/NCP negotiations or for CCP). The value never(2) indicates that L2TP will never initiate sequencing but will do sequencing if asked. The value always(3) indicates that L2TP will send the Sequencing Required AVP during session establishment. Modifications to this object have immediate effect. |
| L2T l2tpTunnelConfigReassemblyTO | 1.3.6.1.2.1.10.95.1.4.1.12 | L2tpMilliSeconds | read-write | This object defines the number of milliseconds that this tunnel will wait before processing payload packets that were received out of sequence (which are waiting for the packet(s) to put them in sequence). A low value increases the chance of delayed packets to be discarded (which MAY cause the PPP decompression engine to reset) while a high value may cause more queuing and possibly degrade throughput if packets are truly lost. The default value for this object is zero which will result in all delayed packets being lost. Modifications to this object have immediate effect. |
| INT l2tpTunnelConfigTransport | 1.3.6.1.2.1.10.95.1.4.1.13 | INTEGER | read-write | This object defines the underlying transport media that is in use for this tunnel entry. Different tunnel transports may define MIB extensions to the L2TP tunnel table to realize the transport layer. For example if the value of this object is 'udpIp' then the value of ifIndex for this table may be used to determine state from the l2tpUdpStatsTable. This object cannot be modified when the tunnel is in a connecting or connected state. |
| T/F l2tpTunnelConfigDrainTunnel | 1.3.6.1.2.1.10.95.1.4.1.14 | TruthValue | read-write | Setting this object to 'true' will prevent any new session from being either initiated or accepted but does NOT disconnect any active sessions for this tunnel. Note that when this occurs the l2tpTunnelStatsDrainingTunnel status object of this tunnel should reflect that it is 'draining'. To cancel a drain this object should be set to false(2). Setting this object to false(2) when the L2TP objects l2tpDrainTunnels or l2tpDomainConfigDrainTunnels is true(1) has no affect, this tunnels will continue to drain. |
| T/F l2tpTunnelConfigProxyPPPAuth | 1.3.6.1.2.1.10.95.1.4.1.15 | TruthValue | read-write | This object is used to configure the sending or acceptance of the session PPP Proxy Authentication AVP's on the LAC or LNS. |
| l2tpTunnelStatsTable | 1.3.6.1.2.1.10.95.1.5 | not-accessible | The L2TP tunnel status and statistics table. This table contains objects that can be used to describe the current status and statistics of a single L2TP tunnel. There is a 1-1 correspondence between conceptual rows of this table and conceptual rows of the l2tpTunnelConfigTable. | |
| l2tpTunnelStatsEntry | 1.3.6.1.2.1.10.95.1.5.1 | not-accessible | An L2TP tunnel interface stats entry. | |
| I32 l2tpTunnelStatsLocalTID | 1.3.6.1.2.1.10.95.1.5.1.1 | Integer32 | read-only | This object contains the local tunnel Identifier. |
| I32 l2tpTunnelStatsRemoteTID | 1.3.6.1.2.1.10.95.1.5.1.2 | Integer32 | read-only | This object contains the remote tunnel Identifier. |
| INT l2tpTunnelStatsState | 1.3.6.1.2.1.10.95.1.5.1.3 | INTEGER | read-only | This field contains the current state of the control tunnel. |
| INT l2tpTunnelStatsInitiated | 1.3.6.1.2.1.10.95.1.5.1.4 | INTEGER | read-only | This object indicates whether the tunnel was initiated locally or by the remote tunnel peer. |
| STR l2tpTunnelStatsRemoteHostName | 1.3.6.1.2.1.10.95.1.5.1.5 | SnmpAdminString | read-only | This object contains the host name as discovered during the tunnel establishment phase (via the Host Name AVP) of the L2TP peer. If the tunnel is idle this object should maintain its value from the last time it was connected. |
| STR l2tpTunnelStatsRemoteVendorName | 1.3.6.1.2.1.10.95.1.5.1.6 | SnmpAdminString | read-only | This object identifies the vendor name of the peer's L2TP implementation. If the tunnel is idle this object should maintain its value from the last time it was connected. |
| I32 l2tpTunnelStatsRemoteFirmwareRev | 1.3.6.1.2.1.10.95.1.5.1.7 | Integer32 | read-only | This object contains the tunnel peer's firmware revision number. If the tunnel is idle this object should maintain its value from the last time it was connected. |
| OCT l2tpTunnelStatsRemoteProtocolVer | 1.3.6.1.2.1.10.95.1.5.1.8 | OCTET STRING | read-only | This object describes the protocol version and revision of the tunnel peers implementation. The first octet contains the protocol version. The second octet contains the protocol revision. |
| I32 l2tpTunnelStatsInitialRemoteRWS | 1.3.6.1.2.1.10.95.1.5.1.9 | Integer32 | read-only | This object contains the initial remote peer's receive window size as indicated by the tunnel peer (in the RWS AVP) during the tunnel establishment phase. If the tunnel is idle this object should maintain its value from the last time it was connected. |
| INT l2tpTunnelStatsBearerCaps | 1.3.6.1.2.1.10.95.1.5.1.10 | INTEGER | read-only | This object describes the Bearer Capabilities of the tunnel peer. If the tunnel is idle this object should maintain its value from the last time it was connected. |
| INT l2tpTunnelStatsFramingCaps | 1.3.6.1.2.1.10.95.1.5.1.11 | INTEGER | read-only | This object describes the Framing Capabilities of the tunnel peer. If the tunnel is idle this object should maintain its value from the last time it was connected. |
| C32 l2tpTunnelStatsControlRxPkts | 1.3.6.1.2.1.10.95.1.5.1.12 | Counter32 | read-only | This object contains the number of control packets received on the tunnel. |
| C32 l2tpTunnelStatsControlRxZLB | 1.3.6.1.2.1.10.95.1.5.1.13 | Counter32 | read-only | This object returns a count of the number of Zero Length Body control packet acknowledgement packets that were received. |
| C32 l2tpTunnelStatsControlOutOfSeq | 1.3.6.1.2.1.10.95.1.5.1.14 | Counter32 | read-only | This object returns a count of the number of control packets that were not received in the correct order (as per the sequence number) on this tunnel including out of window packets. |
| C32 l2tpTunnelStatsControlOutOfWin | 1.3.6.1.2.1.10.95.1.5.1.15 | Counter32 | read-only | This object contains the number of control packets that were received outside of the offered receive window. It is implementation specific as to whether these packets are queued or discarded. |
| C32 l2tpTunnelStatsControlTxPkts | 1.3.6.1.2.1.10.95.1.5.1.16 | Counter32 | read-only | This object contains the number of control packets that were transmitted to the tunnel peer. |
| C32 l2tpTunnelStatsControlTxZLB | 1.3.6.1.2.1.10.95.1.5.1.17 | Counter32 | read-only | This object contains the number of Zero Length Body control packets transmitted to the tunnel peer. |
| C32 l2tpTunnelStatsControlAckTO | 1.3.6.1.2.1.10.95.1.5.1.18 | Counter32 | read-only | This object returns a count of the number of control packet timeouts due to the lack of a timely acknowledgement from the tunnel peer. |
| G32 l2tpTunnelStatsCurrentRemoteRWS | 1.3.6.1.2.1.10.95.1.5.1.19 | Gauge32 | read-only | This object contains the current remote receive window size as determined by the local flow control mechanism employed. |
| I32 l2tpTunnelStatsTxSeq | 1.3.6.1.2.1.10.95.1.5.1.20 | Integer32 | read-only | This object contains the next send sequence number for the control channel. |
| I32 l2tpTunnelStatsTxSeqAck | 1.3.6.1.2.1.10.95.1.5.1.21 | Integer32 | read-only | This object contains the send sequence number that the tunnel peer has acknowledged for the control channel. The flow control state can be determined by subtracting the l2tpTunnelStatsTxSeq from l2tpTunnelStatsTxSeqAck and comparing this value to l2tpTunnelStatsCurrentRemoteRWS (taking into consideration sequence number wraps). |
| I32 l2tpTunnelStatsRxSeq | 1.3.6.1.2.1.10.95.1.5.1.22 | Integer32 | read-only | This object contains the next receive sequence number expected to be received on this control channel. |
| I32 l2tpTunnelStatsRxSeqAck | 1.3.6.1.2.1.10.95.1.5.1.23 | Integer32 | read-only | This object contains the last receive sequence number that was acknowledged back to the tunnel peer for the control channel. |
| C32 l2tpTunnelStatsTotalSessions | 1.3.6.1.2.1.10.95.1.5.1.24 | Counter32 | read-only | This object contains the total number of sessions that this tunnel has successfully connected through to its tunnel peer since this tunnel was created. |
| C32 l2tpTunnelStatsFailedSessions | 1.3.6.1.2.1.10.95.1.5.1.25 | Counter32 | read-only | This object contains the total number of sessions that were initiated but failed to reach the established phase. |
| G32 l2tpTunnelStatsActiveSessions | 1.3.6.1.2.1.10.95.1.5.1.26 | Gauge32 | read-only | This object contains the total number of sessions in the established state for this tunnel. |
| I32 l2tpTunnelStatsLastResultCode | 1.3.6.1.2.1.10.95.1.5.1.27 | Integer32 | read-only | This object contains the last value of the result code as described in the Result Code AVP which caused the tunnel to disconnect. |
| I32 l2tpTunnelStatsLastErrorCode | 1.3.6.1.2.1.10.95.1.5.1.28 | Integer32 | read-only | This object contains the last value of the error code as described in the Result Code AVP which caused the tunnel to disconnect. |
| STR l2tpTunnelStatsLastErrorMessage | 1.3.6.1.2.1.10.95.1.5.1.29 | SnmpAdminString | read-only | This object contains the last value of the optional message as described in the Result Code AVP which caused the tunnel to disconnect. |
| T/F l2tpTunnelStatsDrainingTunnel | 1.3.6.1.2.1.10.95.1.5.1.30 | TruthValue | read-only | This object indicates if this tunnel is draining off sessions. This object will return false(2) when the tunnel is not draining sessions or after the last session has disconnected when the tunnel is in the draining state. |
| l2tpSessionStatsTable | 1.3.6.1.2.1.10.95.1.7 | not-accessible | The L2TP session status and statistics table. This table contains the objects that can be used to describe the current status and statistics of a single L2TP tunneled session. | |
| l2tpSessionStatsEntry | 1.3.6.1.2.1.10.95.1.7.1 | not-accessible | An L2TP session interface stats entry. | |
| NUM l2tpSessionStatsTunnelIfIndex | 1.3.6.1.2.1.10.95.1.7.1.1 | InterfaceIndex | not-accessible | This object identifies the session's associated L2TP tunnel ifIndex value. |
| NUM l2tpSessionStatsIfIndex | 1.3.6.1.2.1.10.95.1.7.1.2 | InterfaceIndex | read-only | This object identifies the ifIndex value of the interface from which PPP packets are being tunneled. For example this could be a DS0 ifIndex on a LAC or it would be the PPP ifIndex on the LNS. |
| I32 l2tpSessionStatsLocalSID | 1.3.6.1.2.1.10.95.1.7.1.3 | Integer32 | not-accessible | This object contains the local assigned session identifier for this session. |
| I32 l2tpSessionStatsRemoteSID | 1.3.6.1.2.1.10.95.1.7.1.4 | Integer32 | read-only | This object contains the remote assigned session identifier for this session. When a session is starting this value may be zero until the remote tunnel endpoint has responded. |
| STR l2tpSessionStatsUserName | 1.3.6.1.2.1.10.95.1.7.1.5 | SnmpAdminString | read-only | This object identifies the peer session name on this interface. This is typically the login name of the remote user. If the user name is unknown to the local tunnel peer then this object will contain a null string. |
| INT l2tpSessionStatsState | 1.3.6.1.2.1.10.95.1.7.1.6 | INTEGER | read-only | This object contains the current state of the session. |
| INT l2tpSessionStatsCallType | 1.3.6.1.2.1.10.95.1.7.1.7 | INTEGER | read-only | This object indicates the type of call and the role this tunnel peer is providing for this session. For example, lacIncoming(1) indicates that this tunnel peer is acting as a LAC and generated a Incoming-Call-Request to the tunnel peer (the LNS). Note that tunnel peers can be both LAC and LNS simultaneously. |
| U32 l2tpSessionStatsCallSerialNumber | 1.3.6.1.2.1.10.95.1.7.1.8 | Unsigned32 | read-only | This object contains the serial number that has been assigned to this session. |
| U32 l2tpSessionStatsTxConnectSpeed | 1.3.6.1.2.1.10.95.1.7.1.9 | Unsigned32 | read-only | This object returns the last known transmit baud rate for this session. |
| U32 l2tpSessionStatsRxConnectSpeed | 1.3.6.1.2.1.10.95.1.7.1.10 | Unsigned32 | read-only | This object returns the last known receive baud rate for this session established. |
| INT l2tpSessionStatsCallBearerType | 1.3.6.1.2.1.10.95.1.7.1.11 | INTEGER | read-only | This object describes the bearer type of this session. |
| INT l2tpSessionStatsFramingType | 1.3.6.1.2.1.10.95.1.7.1.12 | INTEGER | read-only | This object describes the framing type of this session. |
| U32 l2tpSessionStatsPhysChanId | 1.3.6.1.2.1.10.95.1.7.1.13 | Unsigned32 | read-only | This object contains the physical channel identifier for the session. |
| STR l2tpSessionStatsDNIS | 1.3.6.1.2.1.10.95.1.7.1.14 | SnmpAdminString | read-only | This object identifies the Dialed Number Information String that the LAC obtained from the network for the session. If no DNIS was provided then a null string will be returned. |
| STR l2tpSessionStatsCLID | 1.3.6.1.2.1.10.95.1.7.1.15 | SnmpAdminString | read-only | This object identifies the Calling Line ID that the LAC obtained from the network for the session. If no CLID was provided then a null string will be returned. |
| STR l2tpSessionStatsSubAddress | 1.3.6.1.2.1.10.95.1.7.1.16 | SnmpAdminString | read-only | This object identifies the Sub Address that the LAC obtained from the network for the session. If no Sub Address was provided then a null string will be returned. |
| STR l2tpSessionStatsPrivateGroupID | 1.3.6.1.2.1.10.95.1.7.1.17 | SnmpAdminString | read-only | This object identifies the Private Group Identifier used for this tunneled session. If no Private Group Identifier was provided then a null string will be returned. |
| T/F l2tpSessionStatsProxyLcp | 1.3.6.1.2.1.10.95.1.7.1.18 | TruthValue | read-only | Indicates whether the LAC performed proxy LCP for this session. |
| INT l2tpSessionStatsAuthMethod | 1.3.6.1.2.1.10.95.1.7.1.19 | INTEGER | read-only | This object contains the proxy authentication method employed by the LAC for the session. If l2tpSessionProxyLcp is false(2) this object should not be interpreted. |
| INT l2tpSessionStatsSequencingState | 1.3.6.1.2.1.10.95.1.7.1.20 | INTEGER | read-only | This object defines which tunnel peers have requested payload sequencing. The value of both(4) indicates that both peers have requested payload sequencing. |
| C32 l2tpSessionStatsOutSequence | 1.3.6.1.2.1.10.95.1.7.1.21 | Counter32 | read-only | This object returns the total number of packets received for this session which were received out of sequence. |
| C32 l2tpSessionStatsReassemblyTO | 1.3.6.1.2.1.10.95.1.7.1.22 | Counter32 | read-only | This object returns the number of reassembly timeouts that have occurred for this session. |
| I32 l2tpSessionStatsTxSeq | 1.3.6.1.2.1.10.95.1.7.1.23 | Integer32 | read-only | This object contains the next send sequence number for for this session. |
| I32 l2tpSessionStatsRxSeq | 1.3.6.1.2.1.10.95.1.7.1.24 | Integer32 | read-only | This object contains the next receive sequence number expected to be received on this session. |
| l2tpTunnelMapTable | 1.3.6.1.2.1.10.95.1.8 | not-accessible | The L2TP Tunnel index mapping table. This table is intended to assist management applications to quickly determine what the ifIndex value is for a given local tunnel identifier. | |
| l2tpTunnelMapEntry | 1.3.6.1.2.1.10.95.1.8.1 | not-accessible | An L2TP tunnel index map entry. | |
| I32 l2tpTunnelMapLocalTID | 1.3.6.1.2.1.10.95.1.8.1.1 | Integer32 | not-accessible | This object contains the local tunnel Identifier. |
| NUM l2tpTunnelMapIfIndex | 1.3.6.1.2.1.10.95.1.8.1.2 | InterfaceIndex | read-only | This value for this object is equal to the value of ifIndex of the Interfaces MIB for tunnel interfaces of type L2TP. |
| l2tpSessionMapTable | 1.3.6.1.2.1.10.95.1.9 | not-accessible | The L2TP Session index mapping table. This table is intended to assist management applications to map interfaces to a tunnel and session identifier. | |
| l2tpSessionMapEntry | 1.3.6.1.2.1.10.95.1.9.1 | not-accessible | An L2TP Session index map entry. | |
| NUM l2tpSessionMapIfIndex | 1.3.6.1.2.1.10.95.1.9.1.1 | InterfaceIndex | not-accessible | This object identifies the ifIndex value of the interface which is receiving or sending its packets over an L2TP tunnel. For example this could be a DS0 ifIndex on a LAC or a PPP ifIndex on the LNS. |
| NUM l2tpSessionMapTunnelIfIndex | 1.3.6.1.2.1.10.95.1.9.1.2 | InterfaceIndex | read-create | This object identifies the sessions associated L2TP tunnel ifIndex value. When this object is set it provides a binding between a particular interface identified by l2tpSessionMapIfIndex to a particular tunnel. |
| I32 l2tpSessionMapLocalSID | 1.3.6.1.2.1.10.95.1.9.1.3 | Integer32 | read-only | This object contains the local assigned session identifier for this session. |
| ROW l2tpSessionMapStatus | 1.3.6.1.2.1.10.95.1.9.1.4 | RowStatus | read-create | The status of this session map entry. |
| l2tpTransports | 1.3.6.1.2.1.10.95.3 | |||
| l2tpTransportIpUdp | 1.3.6.1.2.1.10.95.3.1 | |||
| l2tpIpUdpObjects | 1.3.6.1.2.1.10.95.3.1.1 | |||
| l2tpUdpStatsTable | 1.3.6.1.2.1.10.95.3.1.1.2 | not-accessible | The L2TP UDP/IP transport stats table. This table contains objects that can be used to describe the current status and statistics of the UDP/IP L2TP tunnel transport. | |
| l2tpUdpStatsEntry | 1.3.6.1.2.1.10.95.3.1.1.2.1 | not-accessible | An L2TP UDP/IP transport stats entry. | |
| NUM l2tpUdpStatsIfIndex | 1.3.6.1.2.1.10.95.3.1.1.2.1.1 | InterfaceIndex | not-accessible | This value for this object is equal to the value of ifIndex of the Interfaces MIB for tunnel interfaces of type L2TP and which have a L2TP transport of UDP/IP. |
| I32 l2tpUdpStatsPeerPort | 1.3.6.1.2.1.10.95.3.1.1.2.1.2 | Integer32 | read-only | This object reflects the peer's UDP port number used for this tunnel. When not known a value of zero should be returned. |
| I32 l2tpUdpStatsLocalPort | 1.3.6.1.2.1.10.95.3.1.1.2.1.3 | Integer32 | read-only | This object reflects the local UDP port number that this tunnel is bound to. |
| l2tpIpUdpTraps | 1.3.6.1.2.1.10.95.3.1.2 | |||
| l2tpConformance | 1.3.6.1.2.1.10.95.4 | |||
| l2tpGroups | 1.3.6.1.2.1.10.95.4.1 | |||
| l2tpConfigGroup | 1.3.6.1.2.1.10.95.4.1.1 | A collection of objects providing configuration information of the L2TP protocol, tunnels and sessions. | ||
| l2tpStatsGroup | 1.3.6.1.2.1.10.95.4.1.2 | A collection of objects providing status and statistics of the L2TP protocol, tunnels and sessions. | ||
| l2tpIpUdpGroup | 1.3.6.1.2.1.10.95.4.1.3 | A collection of objects providing status and statistics of the L2TP UDP/IP transport layer. | ||
| l2tpDomainGroup | 1.3.6.1.2.1.10.95.4.1.4 | A collection of objects providing configuration, status and statistics of L2TP tunnel domains. | ||
| l2tpMappingGroup | 1.3.6.1.2.1.10.95.4.1.5 | A collection of objects providing index mapping. | ||
| l2tpSecurityGroup | 1.3.6.1.2.1.10.95.4.1.6 | A collection of objects providing L2TP security configuration. | ||
| l2tpTrapGroup | 1.3.6.1.2.1.10.95.4.1.7 | A collection of L2TP trap events as specified in NOTIFICATION-TYPE constructs. | ||
| l2tpHCPacketGroup | 1.3.6.1.2.1.10.95.4.1.8 | A collection of objects providing High Capacity 64-bit counter objects. | ||
| l2tpCompliances | 1.3.6.1.2.1.10.95.4.2 | |||
| l2tpMIBFullCompliance | 1.3.6.1.2.1.10.95.4.2.1 | When this MIB is implemented with support for read-create and read-write, then such an implementation can claim full compliance. Such an implementation can then be both monitored and configured with this MIB. | ||
| l2tpMIBReadOnlyCompliance | 1.3.6.1.2.1.10.95.4.2.2 | When this MIB is implemented without support for read-create and read-write (i.e. in read-only mode), then such an implementation can claim read-only compliance. Such an implementation can then be monitored but can not be configured with this MIB. |
RFC description
Defines managed objects for Layer 2 Tunneling Protocol (L2TP), a protocol for tunneling PPP traffic over IP networks. Used for managing L2TP tunnel and session parameters.
Start monitoring Vendor-neutral IETF standard, RFC 3371 (L2TP access concentrators/network servers) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.