NOKIAVPN-VPN-MIB

All MIBs › NOKIAVPN-VPN-MIB

Organization: Nokia Internet Communications

Last Updated: 2001-01-18

Category: IPSec/VPN

Description: Manages Nokia VPN gateway virtual private network instances, user authentication, and session state.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is NOKIAVPN-VPN-MIB?

NOKIAVPN-VPN-MIB is a Nokia enterprise MIB module for managing VPN gateway appliances, specifically covering Layer 2 Tunneling Protocol (L2TP) and Point-to-Point Tunneling Protocol (PPTP) remote-access VPN services. It exposes tunnel and session inventory data, including tables that list active tunnels, session counts, and per-tunnel identifying attributes such as local/remote endpoint IDs and IP addresses. In monitoring terms it is used to check the operational health of the VPN service itself: how many L2TP or PPTP tunnels and sessions are currently active versus provisioned, whether tunnel counts are climbing unexpectedly (possible attack or misconfiguration) or dropping to zero (possible outage), and whether individual tunnels are correctly established with the expected remote peer. It depends conceptually on the NOKIAVPN-MIB registration root and general Internet-standard tunneling concepts but is not derived from a formal IETF tunnel MIB. This MIB is deployed on Nokia VPN gateway appliances terminating remote-access L2TP/PPTP connections for telecommuters or branch offices, and administrators use the NOKIAVPN-VPN-MIB MIB to track tunnel health directly.

IPNetwork Monitor allows you to monitor SNMP objects defined in NOKIAVPN-VPN-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Nokia IP-series security/VPN appliances (Nokia IPSO platform)

Monitoring Examples

An operator would poll vpnActiveL2TPTunnels and vpnActivePPTPTS to get real-time counts of live tunnels and compare them against vpnL2TPTunnels/vpnPPTPTS totals to spot a sudden drop indicating a service disruption. Walking vpnTunnelTable/vpnTunnelEntry with columns like vpnTunnelLocalID, vpnTunnelRemoteID, vpnTunnelIPAddress, and vpnTunnelType lets an admin confirm that a specific remote user's tunnel is up and terminating at the expected IP address. A spike in vpnL2TPSessions without a corresponding rise in vpnActiveL2TPSessions could reveal sessions failing to establish properly.

What Can Be Monitored

active L2TP tunnel count
active PPTP session count
total provisioned tunnels
per-tunnel local and remote endpoint IDs
tunnel IP address
tunnel type (L2TP/PPTP)

Imported Objects

From NOKIAVPN-MIB

nokiaVPNModules	OBJECT-IDENTITY
vpn	OBJECT-IDENTITY

From SNMPv2-SMI

Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

DisplayString

How to Use in IPNetwork Monitor

Example using vpnL2TPTunnels OID:

Select a Nokia IP-series security/VPN appliance as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type vpnL2TPTunnels into the Find box to locate it in the OID tree, then select it and click OK. The number of L2TP tunnels. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is an Integer32-type OID, Value bounds is the most useful condition here — trigger an alert if the count changes from its expected baseline, since that would indicate the underlying set of items changed unexpectedly. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
I32 vpnL2TPTunnelsEx	1.3.6.1.4.1.94.1.41.2.2.1	Integer32	read-only	The number of L2TP tunnels.
I32 vpnActiveL2TPTunnels	1.3.6.1.4.1.94.1.41.2.2.2	Integer32	read-only	The number of active L2TP tunnels.
I32 vpnL2TPSessions	1.3.6.1.4.1.94.1.41.2.2.3	Integer32	read-only	The number of L2TP sessions.
I32 vpnActiveL2TPSessions	1.3.6.1.4.1.94.1.41.2.2.4	Integer32	read-only	The number of active L2TP sessions.
I32 vpnPPTPTS	1.3.6.1.4.1.94.1.41.2.2.5	Integer32	read-only	The number of PPTP tunnel and sessions. The number of PPTP tunnels are equal to the number of PPTP Sessions.
I32 vpnActivePPTPTS	1.3.6.1.4.1.94.1.41.2.2.6	Integer32	read-only	The number of active PPTP tunnels and sessions.
vpnTunnelTable	1.3.6.1.4.1.94.1.41.2.2.7		not-accessible	A list of tunnels.
vpnTunnelEntry	1.3.6.1.4.1.94.1.41.2.2.7.1		not-accessible	A table entry containing information about a tunnel.
I32 vpnTunnelLocalID	1.3.6.1.4.1.94.1.41.2.2.7.1.1	Integer32	read-only	Tunnel local ID.
IP vpnTunnelIPAddress	1.3.6.1.4.1.94.1.41.2.2.7.1.2	IpAddress	read-only	Tunnel IP Address.
I32 vpnTunnelRemoteID	1.3.6.1.4.1.94.1.41.2.2.7.1.3	Integer32	read-only	Tunnel remote ID.
INT vpnTunnelType	1.3.6.1.4.1.94.1.41.2.2.7.1.4	INTEGER	read-only	Tunnel type: ANY=0 L2TP=1 PPTP=2
INT vpnTunnelActive	1.3.6.1.4.1.94.1.41.2.2.7.1.5	INTEGER	read-only	Inactive=0, active=1
INT vpnTunnelState	1.3.6.1.4.1.94.1.41.2.2.7.1.6	INTEGER	read-only	Tunnel states For PPTP tunnel type: PPP_STATE_INACTIVE 0 PPP_STATE_SUSPENDED 1 PPP_STATE_ACTIVE 2 For L2TP tunnel type: L2TP_IDLE 0 L2TP_WAIT_REPLY 1 L2TP_WAIT_CONN 2 L2TP_ESTABLISHED 3 L2TP_WAIT_FINAL_ACK 4
vpnSessionTable	1.3.6.1.4.1.94.1.41.2.2.8		not-accessible	A list of sessions for the given tunnel.
vpnSessionEntry	1.3.6.1.4.1.94.1.41.2.2.8.1		not-accessible	A table entry containing information about a session on the given tunnel.
I32 vpnSessionLocalID	1.3.6.1.4.1.94.1.41.2.2.8.1.1	Integer32	read-only	Session local ID.
IP vpnSessionIPAddress	1.3.6.1.4.1.94.1.41.2.2.8.1.2	IpAddress	read-only	Session IP Address.
I32 vpnSessionRemoteID	1.3.6.1.4.1.94.1.41.2.2.8.1.3	Integer32	read-only	Session remote ID.
I32 vpnSessionPacketsIn	1.3.6.1.4.1.94.1.41.2.2.8.1.4	Integer32	read-only	The number of input packets.
I32 vpnSessionPacketsOut	1.3.6.1.4.1.94.1.41.2.2.8.1.5	Integer32	read-only	The number of output packets.
INT vpnSessionActive	1.3.6.1.4.1.94.1.41.2.2.8.1.6	INTEGER	read-only	Inactive=0, active=1
INT vpnSessionState	1.3.6.1.4.1.94.1.41.2.2.8.1.7	INTEGER	read-only	Session States: PPP_STATE_INACTIVE 0 PPP_STATE_SUSPENDED 1 PPP_STATE_ACTIVE 2
INT vpnSessionAuthType	1.3.6.1.4.1.94.1.41.2.2.8.1.8	INTEGER	read-only	Authenication type: VPN_AUTHENTICATION_NONE 0 VPN_AUTHENTICATION_CHAP 1 VPN_AUTHENTICATION_MSCHAP 2 VPN_AUTHENTICATION_PAP 3
I32 vpnSessionSendFlags	1.3.6.1.4.1.94.1.41.2.2.8.1.9	Integer32	read-only	Send flags: MS_MPPC 0x00000001 MS_MPPE_LM_40 0x00000020 MS_MPPE_128 0x00000040 MS_MPPX_STATELESS 0x01000000 MSCCP_ENCRYPTION (MS_MPPE_LM_40 \| MS_MPPE_128) MSCCP_COMPRESSION (MS_MPPC) MSCCP_STATELESS (MS_MPPX_STATELESS) MSCCP_ALL (MSCCP_COMPRESSION \| MSCCP_ENCRYPTION \| MSCCP_STATELESS)
I32 vpnSessionRecvFlags	1.3.6.1.4.1.94.1.41.2.2.8.1.10	Integer32	read-only	Received flags. MS_MPPC 0x00000001 MS_MPPE_LM_40 0x00000020 MS_MPPE_128 0x00000040 MS_MPPX_STATELESS 0x01000000 MSCCP_ENCRYPTION (MS_MPPE_LM_40 \| MS_MPPE_128) MSCCP_COMPRESSION (MS_MPPC) MSCCP_STATELESS (MS_MPPX_STATELESS) MSCCP_ALL (MSCCP_COMPRESSION \| MSCCP_ENCRYPTION \| MSCCP_STATELESS)
STR vpnSessionUsername	1.3.6.1.4.1.94.1.41.2.2.8.1.11	DisplayString	read-only	Session Username.
I32 vpnSessionLifetimeSeconds	1.3.6.1.4.1.94.1.41.2.2.8.1.12	Integer32	read-only	Number of seconds the session has been active.
nokiaVPNMIB	1.3.6.1.4.1.94.1.41.5.5			Virtual Private Network (L2TP and PPTP) MIB module.

RFC description

Manages Virtual Private Network (L2TP and PPTP) tunnels and sessions on Nokia VPN equipment.

Start monitoring Nokia IP-series security/VPN appliances with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download NOKIAVPN-VPN-MIB