NOKIAVPN-CONFIG-MIB

All MIBs › NOKIAVPN-CONFIG-MIB

Organization: Nokia Internet Communications.

Last Updated: 2001-01-18

Category: IPSec/VPN

Description: Manages Nokia VPN gateway configuration including tunnel endpoints, policies, and crypto profiles.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is NOKIAVPN-CONFIG-MIB?

NOKIAVPN-CONFIG-MIB is a vendor MIB from Nokia for its VPN gateway product line, covering configuration of tunnel endpoints, security policies, and crypto profiles as well as broader system configuration and resource-threshold settings. It exposes configuration data (a config 'dirty bit' and commit trigger, polling rate, trap delay) alongside performance/resource-threshold configuration and current values for CPU usage, I/O load, UDP/IP packet drops, and memory usage. Its monitoring value spans both configuration management and hardware/software health: administrators use configCommit/configDirtyBit to confirm pending changes are applied, while configValCPUUsage, configValMemUsage, configValIOLoad, and drop counters (configValUDPDrop, configValIPDrop) directly monitor CPU load, memory utilization, I/O load, and packet-drop rates -- classic device health indicators for a VPN gateway under crypto processing load. No explicit dependency on other MIBs is documented, though the threshold pattern (configTreshold* paired with configVal*) suggests an internal alarm-triggering design. It is deployed on Nokia VPN gateway appliances at enterprise or service-provider network edges terminating IPsec/VPN tunnels. Engineers can download the NOKIAVPN-CONFIG-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in NOKIAVPN-CONFIG-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Nokia VPN gateway appliance

Monitoring Examples

An operator would poll configValCPUUsage and configValMemUsage against their respective configTresholdCPUUsage and configTresholdMemUsage settings to detect when the VPN gateway is approaching resource exhaustion under heavy tunnel/crypto load, and would check configValUDPDrop and configValIPDrop for rising packet-drop counts that could indicate the device is overwhelmed or under attack. configDirtyBit would be checked after a configuration change to confirm whether configCommit still needs to be invoked to apply pending settings.

What Can Be Monitored

CPU usage vs. threshold
memory usage vs. threshold
I/O load vs. threshold
UDP/IP packet drop counts
pending configuration (dirty bit) / commit status
config poll rate and trap delay settings

Imported Objects

From NOKIAVPN-MIB

config	OBJECT-IDENTITY
nokiaVPNModules	OBJECT-IDENTITY

From SNMPv2-SMI

Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

How to Use in IPNetwork Monitor

Example using configDirtyBit OID:

Select a Nokia VPN gateway appliance (system configuration/resource thresholds) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type configDirtyBit into the Find box to locate it in the OID tree, then select it and click OK. Says whether the configuration has been changed via a set on any of the writable SNMP variables. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is an INTEGER-type OID, Value bounds is the most useful condition here — trigger an alert if the value is anything other than 'no', since that indicates the condition this object reports has changed to one worth investigating. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
INT configDirtyBitEx	1.3.6.1.4.1.94.1.41.2.3.1	INTEGER	read-only	Says whether the configuration has been changed via a set on any of the writable SNMP variables.
INT configCommit	1.3.6.1.4.1.94.1.41.2.3.2	INTEGER	read-write	When an SNMP management station sets (changes) a configuration parameter via an SNMP set operation, the SNMP agent code will set a dirty bit. The management station can then submit a set operation on this configCommit variable to write the configuration to flash, thereby committing the change. Performing a read on this variable will return the value of the config dirty bit.
I32 configPollrate	1.3.6.1.4.1.94.1.41.2.3.3	Integer32	read-only	Defines how often in seconds SNMP Agent checks system resources for capasity-limit-exceeded -trap sending purposes.
I32 configTrapDelay	1.3.6.1.4.1.94.1.41.2.3.4	Integer32	read-only	Defines how often (at most) one type of trap is sent in seconds.
I32 configTresholdCPUUsage	1.3.6.1.4.1.94.1.41.2.3.5	Integer32	read-only	Defines the treshold (percentage) of CPU utilisation after which a trap is sent.
I32 configTresholdIOLoad	1.3.6.1.4.1.94.1.41.2.3.6	Integer32	read-only	Defines the treshold (pkts/sec divided by system performance rating) of I/O load after which a trap is sent.
I32 configTresholdUDPDrop	1.3.6.1.4.1.94.1.41.2.3.7	Integer32	read-only	Defines the UDP packet drop rate treshold (percentage) after which a trap is sent.
I32 configTresholdIPDrop	1.3.6.1.4.1.94.1.41.2.3.8	Integer32	read-only	Defines the IP packet drop rate treshold (percentage) after which a trap is sent.
I32 configTresholdMemUsage	1.3.6.1.4.1.94.1.41.2.3.9	Integer32	read-only	Defines the memory usage treshold (percentage) after which a trap is sent.
I32 configValCPUUsage	1.3.6.1.4.1.94.1.41.2.3.10	Integer32	read-only	The current CPU (the most loaded CPU) usage (percentage).
I32 configValIOLoad	1.3.6.1.4.1.94.1.41.2.3.11	Integer32	read-only	The current I/O load (pkts/sec divided by system performance rating) .
I32 configValUDPDrop	1.3.6.1.4.1.94.1.41.2.3.12	Integer32	read-only	The current UDP packet drop rate (percentage).
I32 configValIPDrop	1.3.6.1.4.1.94.1.41.2.3.13	Integer32	read-only	The current IP packet drop rate (percentage).
I32 configValMemUsage	1.3.6.1.4.1.94.1.41.2.3.14	Integer32	read-only	The current memory usage (percentage).
nokiaVPNConfigMIB	1.3.6.1.4.1.94.1.41.5.6			NokiaVPN Configuration MIB module.

RFC description

Manages VPN configuration parameters including dirty flags, trap thresholds, and polling rates for Nokia VPN appliances.

Start monitoring Nokia VPN gateway appliance (system configuration/resource thresholds) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download NOKIAVPN-CONFIG-MIB