NETWORK-ALCHEMY-VPN-MIB

All MIBs › NETWORK-ALCHEMY-VPN-MIB

Organization: Network Alchemy, Inc.

Last Updated: 2000-10-25

Category: IPSec/VPN

Description: Manages VPN tunnel configuration, user authentication, and session statistics on Network Alchemy VPN appliances.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is NETWORK-ALCHEMY-VPN-MIB?

NETWORK-ALCHEMY-VPN-MIB is a vendor MIB from Network Alchemy, an early VPN appliance vendor later acquired by Nokia, for monitoring L2TP and PPTP-based VPN tunnel service on its VPN gateway appliances. It exposes aggregate counters for configured and currently active L2TP tunnels and sessions and PPTP tunnel sessions, plus a detailed tunnel table with per-tunnel local/remote tunnel IDs, IP addresses, and tunnel type. Its monitoring value centers on VPN service software status: comparing vpnActiveL2TPTunnels/vpnActiveL2TPSessions against the configured vpnL2TPTunnels/vpnL2TPSessions capacity reveals whether the appliance is approaching its tunnel/session limits, and a sudden drop in active tunnels can indicate a service disruption or upstream connectivity fault. It is a vendor-private MIB built on the standard L2TP/PPTP tunneling protocol concepts rather than reusing another SNMP MIB module directly. It is deployed on Network Alchemy VPN gateway appliances providing remote-access L2TP/PPTP VPN termination for dial-up or broadband remote users. Engineers can download the NETWORK-ALCHEMY-VPN-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in NETWORK-ALCHEMY-VPN-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Network Alchemy VPN gateway appliance

Monitoring Examples

An admin would compare vpnActiveL2TPTunnels and vpnActiveL2TPSessions against the configured vpnL2TPTunnels/vpnL2TPSessions to see if the gateway is near capacity, and similarly track vpnActivePPTPTS against vpnPPTPTS for PPTP sessions. The vpnTunnelTable/vpnTunnelEntry, indexed by vpnTunnelLocalID, exposes vpnTunnelIPAddress, vpnTunnelRemoteID, and vpnTunnelType per tunnel, letting the admin identify exactly which remote peer's tunnel dropped if the active tunnel count suddenly decreases. A remote-access user reporting inability to connect could be diagnosed by checking whether a corresponding tunnel entry ever appears in vpnTunnelTable.

What Can Be Monitored

configured vs active L2TP tunnel/session counts
configured vs active PPTP session counts
per-tunnel local/remote ID and IP address
tunnel type

Imported Objects

From NETAL-SMI

netalModules	OBJECT-IDENTITY
vpn	OBJECT-IDENTITY

From SNMPv2-SMI

Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

DisplayString

How to Use in IPNetwork Monitor

Example using vpnL2TPTunnels OID:

Select a Network Alchemy VPN gateway appliance (L2TP/PPTP) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type vpnL2TPTunnels into the Find box to locate it in the OID tree, then select it and click OK. It reports the number of L2TP tunnels. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is an Integer32-type OID, Value bounds is the most useful condition here — trigger an alert if the count changes from its expected baseline, since that would indicate the underlying set of items changed unexpectedly. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
I32 vpnL2TPTunnelsEx	1.3.6.1.4.1.2972.2.4.1	Integer32	read-only	Number of L2TP tunnels
I32 vpnActiveL2TPTunnels	1.3.6.1.4.1.2972.2.4.2	Integer32	read-only	Number of Active L2TP Tunnels
I32 vpnL2TPSessions	1.3.6.1.4.1.2972.2.4.3	Integer32	read-only	Number of L2TP Sessions
I32 vpnActiveL2TPSessions	1.3.6.1.4.1.2972.2.4.4	Integer32	read-only	Number of Active L2TP Sessions
I32 vpnPPTPTS	1.3.6.1.4.1.2972.2.4.5	Integer32	read-only	Number of PPTP Tunnel&Sessions. Number of PPTP tunnels are equal to the number of PPTP Sessions
I32 vpnActivePPTPTS	1.3.6.1.4.1.2972.2.4.6	Integer32	read-only	# of Active PPTP Tunnels&Sessions
vpnTunnelTable	1.3.6.1.4.1.2972.2.4.7		not-accessible	A list of tunnels.
vpnTunnelEntry	1.3.6.1.4.1.2972.2.4.7.1		not-accessible	A table entry containing information about a tunnel.
I32 vpnTunnelLocalID	1.3.6.1.4.1.2972.2.4.7.1.1	Integer32	read-only	Tunnel local ID.
IP vpnTunnelIPAddress	1.3.6.1.4.1.2972.2.4.7.1.2	IpAddress	read-only	Tunnel IP Address.
I32 vpnTunnelRemoteID	1.3.6.1.4.1.2972.2.4.7.1.3	Integer32	read-only	Tunnel remote ID.
INT vpnTunnelType	1.3.6.1.4.1.2972.2.4.7.1.4	INTEGER	read-only	Tunnel type: ANY=0, L2TP=1, PPTP=2.
INT vpnTunnelActive	1.3.6.1.4.1.2972.2.4.7.1.5	INTEGER	read-only	INACTIVE=0, ACTIVE!=0
INT vpnTunnelState	1.3.6.1.4.1.2972.2.4.7.1.6	INTEGER	read-only	Tunnel states For PPTP tunnel type: PPP_STATE_INACTIVE 0 PPP_STATE_SUSPENDED 1 PPP_STATE_ACTIVE 2 For L2TP tunnel type: L2TP_IDLE 0 L2TP_WAIT_REPLY 1 L2TP_WAIT_CONN 2 L2TP_ESTABLISHED 3 L2TP_WAIT_FINAL_ACK 4
vpnSessionTable	1.3.6.1.4.1.2972.2.4.8		not-accessible	A list of sessions for the given tunnel.
vpnSessionEntry	1.3.6.1.4.1.2972.2.4.8.1		not-accessible	A table entry containing information about a session on the given tunnel.
I32 vpnSessionLocalID	1.3.6.1.4.1.2972.2.4.8.1.1	Integer32	read-only	Session local ID.
IP vpnSessionIPAddress	1.3.6.1.4.1.2972.2.4.8.1.2	IpAddress	read-only	Session IP Address.
I32 vpnSessionRemoteID	1.3.6.1.4.1.2972.2.4.8.1.3	Integer32	read-only	Session remote ID.
I32 vpnSessionPacketsIn	1.3.6.1.4.1.2972.2.4.8.1.4	Integer32	read-only	Number of input packets.
I32 vpnSessionPacketsOut	1.3.6.1.4.1.2972.2.4.8.1.5	Integer32	read-only	Number of output packets.
INT vpnSessionActive	1.3.6.1.4.1.2972.2.4.8.1.6	INTEGER	read-only	INACTIVE=0, ACTIVE!=0
INT vpnSessionState	1.3.6.1.4.1.2972.2.4.8.1.7	INTEGER	read-only	Session States: PPP_STATE_INACTIVE 0 PPP_STATE_SUSPENDED 1 PPP_STATE_ACTIVE 2
INT vpnSessionAuthType	1.3.6.1.4.1.2972.2.4.8.1.8	INTEGER	read-only	Authenication type VPN_AUTHENTICATION_NONE 0 VPN_AUTHENTICATION_CHAP 1 VPN_AUTHENTICATION_MSCHAP 2 VPN_AUTHENTICATION_PAP 3
I32 vpnSessionSendFlags	1.3.6.1.4.1.2972.2.4.8.1.9	Integer32	read-only	Send flags MS_MPPC 0x00000001 MS_MPPE_LM_40 0x00000020 MS_MPPE_128 0x00000040 MS_MPPX_STATELESS 0x01000000 MSCCP_ENCRYPTION (MS_MPPE_LM_40 \| MS_MPPE_128) MSCCP_COMPRESSION (MS_MPPC) MSCCP_STATELESS (MS_MPPX_STATELESS) MSCCP_ALL (MSCCP_COMPRESSION \| MSCCP_ENCRYPTION \| MSCCP_STATELESS)
I32 vpnSessionRecvFlags	1.3.6.1.4.1.2972.2.4.8.1.10	Integer32	read-only	Received flags. MS_MPPC 0x00000001 MS_MPPE_LM_40 0x00000020 MS_MPPE_128 0x00000040 MS_MPPX_STATELESS 0x01000000 MSCCP_ENCRYPTION (MS_MPPE_LM_40 \| MS_MPPE_128) MSCCP_COMPRESSION (MS_MPPC) MSCCP_STATELESS (MS_MPPX_STATELESS) MSCCP_ALL (MSCCP_COMPRESSION \| MSCCP_ENCRYPTION \| MSCCP_STATELESS)
STR vpnSessionUsername	1.3.6.1.4.1.2972.2.4.8.1.11	DisplayString	read-only	Session Username.
I32 vpnSessionLifetimeSeconds	1.3.6.1.4.1.2972.2.4.8.1.12	Integer32	read-only	Number of seconds the session has been active.
networkAlchemyVPNMIB	1.3.6.1.4.1.2972.5.5			Virtual Private Network (L2TP and PPTP) MIB module.

RFC description

Virtual Private Network tunnel and session statistics for L2TP and PPTP protocols.

Start monitoring Network Alchemy VPN gateway appliance (L2TP/PPTP) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download NETWORK-ALCHEMY-VPN-MIB