RAPID-IPSEC-SA-MON-MIB-EXT :: rsInvalidSpiTrap

MIB Reference — IPNetwork Monitor · Updated October 06, 2026

All MIBs › RAPID-IPSEC-SA-MON-MIB-EXT › rsInvalidSpiTrap

rsInvalidSpiTrap

Module: RAPID-IPSEC-SA-MON-MIB-EXT

OID (symbolic): RAPID-IPSEC-SA-MON-MIB-EXT::rsInvalidSpiTrap

OID (numeric): 1.3.6.1.4.1.4355.3.1.4.0.7

Node type: NOTIFICATION-TYPE

Description: A packet with an unknown SPI was detected from the specified peer with the specified SPI using the specified protocol. The destination address of the received packet is specified by 'ipsecLocalAddress'.

The value 'ifIndex' may be 0 if this optional linkage is unsupported.

If the object 'ipsecSecurityProtocol' has the value for IPCOMP, then the 'ipsecSPI' object is the CPI of the packet. Implementations SHOULD send one trap per peer (within a reasonable time period), rather than sending one trap per packet.

Examples

Send this trap to an SNMP manager — replace <manager> with the IP or hostname of your monitoring server (SNMPv2c):

snmptrap -v2c -c public <manager> '' RAPID-IPSEC-SA-MON-MIB-EXT::rsInvalidSpiTrap
snmptrap -v2c -c public <manager> '' 1.3.6.1.4.1.4355.3.1.4.0.7

Listen for incoming traps on the manager host (-f keeps it in the foreground, -Lo prints to stdout — useful for testing):

snmptrapd -f -Lo -c /dev/null authCommunity log public

Example snmptrapd log entry:

zoo11-linux.zoo [UDP: [192.168.30.111]:49437->[192.168.30.10]:162]:
  DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (50908957) 5 days, 21:24:49.57
  SNMPv2-MIB::snmpTrapOID.0 = OID: RAPID-IPSEC-SA-MON-MIB-EXT::rsInvalidSpiTrap

Start monitoring WatchGuard / RapidStream IPsec security gateways (IPsec SA monitoring) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the RAPID-IPSEC-SA-MON-MIB-EXT::rsInvalidSpiTrap OID value, configure state conditions and alerts, and monitor any WatchGuard / RapidStream IPsec security gateways (IPsec SA monitoring) from a single console.

OID Breakdown

Upper-level ancestors (7 from the standard OID tree / other modules)
Numeric OIDNameModule
1isoLANART-AGENT
1.3orgAirPair-MIB
1.3.6dodAirPair-MIB
1.3.6.1internetAirPair-MIB
1.3.6.1.4privateAirPair-MIB
1.3.6.1.4.1enterprisesAirPair-MIB
1.3.6.1.4.1.4355rapidstreamRAPID-MIB
Numeric OIDNameModule
1.3.6.1.4.1.4355.3rsIpsecSaMonModuleRAPID-IPSEC-SA-MON-MIB-EXT
1.3.6.1.4.1.4355.3.1rsIpsecSaMonitorMIBRAPID-IPSEC-SA-MON-MIB-EXT
1.3.6.1.4.1.4355.3.1.4rsSaTrapsRAPID-IPSEC-SA-MON-MIB-EXT
1.3.6.1.4.1.4355.3.1.4.0.7rsInvalidSpiTrapRAPID-IPSEC-SA-MON-MIB-EXT