All MIBs › RAPID-IPSEC-SA-MON-MIB-EXT › rsEspAuthFailureTrap
rsEspAuthFailureTrap
Module: RAPID-IPSEC-SA-MON-MIB-EXT
OID (symbolic): RAPID-IPSEC-SA-MON-MIB-EXT::rsEspAuthFailureTrap
OID (numeric): 1.3.6.1.4.1.4355.3.1.4.0.1
Node type: NOTIFICATION-TYPE
Description: IPSec packets with invalid hashes were found in an inbound ESP SA. The total number of authentication errors accumulated is sent for the specific row of the 'rsIpsecSaEspInTable' table for the SA; this provides the identity of the SA in which the error occurred.
Implementations SHOULD send one trap per SA (within a reasonable time period), rather than sending one trap per packet.
Examples
Send this trap to an SNMP manager — replace <manager> with the IP or hostname of your monitoring server (SNMPv2c):
snmptrap -v2c -c public <manager> '' RAPID-IPSEC-SA-MON-MIB-EXT::rsEspAuthFailureTrap snmptrap -v2c -c public <manager> '' 1.3.6.1.4.1.4355.3.1.4.0.1
Listen for incoming traps on the manager host (-f keeps it in the foreground, -Lo prints to stdout — useful for testing):
snmptrapd -f -Lo -c /dev/null authCommunity log public
Example snmptrapd log entry:
zoo11-linux.zoo [UDP: [192.168.30.111]:58408->[192.168.30.10]:162]: DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (476607016) 55 days, 3:54:30.16 SNMPv2-MIB::snmpTrapOID.0 = OID: RAPID-IPSEC-SA-MON-MIB-EXT::rsEspAuthFailureTrap
Start monitoring WatchGuard / RapidStream IPsec security gateways (IPsec SA monitoring) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the RAPID-IPSEC-SA-MON-MIB-EXT::rsEspAuthFailureTrap OID value, configure state conditions and alerts, and monitor any WatchGuard / RapidStream IPsec security gateways (IPsec SA monitoring) from a single console.
OID Breakdown
Upper-level ancestors (7 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.4355 | rapidstream | RAPID-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.4355.3 | rsIpsecSaMonModule | RAPID-IPSEC-SA-MON-MIB-EXT |
| 1.3.6.1.4.1.4355.3.1 | rsIpsecSaMonitorMIB | RAPID-IPSEC-SA-MON-MIB-EXT |
| 1.3.6.1.4.1.4355.3.1.4 | rsSaTraps | RAPID-IPSEC-SA-MON-MIB-EXT |
| 1.3.6.1.4.1.4355.3.1.4.0.1 | rsEspAuthFailureTrap | RAPID-IPSEC-SA-MON-MIB-EXT |