RAPID-IPSEC-TUNNEL-MIB

All MIBs › RAPID-IPSEC-TUNNEL-MIB

Organization: WatchGuard Technologies, Inc.

Last Updated: 2001-03-06

Category: Firewall / Security Appliance, IPsec / VPN, WatchGuard

Description: Manages IPsec VPN tunnel configuration and monitors tunnel status on WatchGuard Firebox.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is RAPID-IPSEC-TUNNEL-MIB?

RAPID-IPSEC-TUNNEL-MIB is a vendor MIB originating from RapidStream Inc. (later acquired by WatchGuard, appearing on WatchGuard Firebox security appliances) for managing IPsec VPN tunnel objects. It exposes configuration and status data for individual IPsec tunnels, such as tunnel identity, peer endpoint, and connection state. Its principal use is monitoring the software/protocol status of VPN tunnels -- specifically tunnel up/down state and negotiation status -- rather than physical hardware health. It is a self-contained proprietary MIB describing tunnel objects, conceptually paralleling standard IPsec/tunnel MIB concepts without an explicit stated dependency in the available module description. It is typically deployed on WatchGuard Firebox/RapidStream security gateways at network edges terminating site-to-site or remote-access IPsec VPNs. Engineers can download the RAPID-IPSEC-TUNNEL-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in RAPID-IPSEC-TUNNEL-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

WatchGuard Firebox security appliance
RapidStream VPN gateway

Monitoring Examples

Since sample_objects is empty for this MIB, no specific object names are available from the source to ground a concrete polling example; based on the module description one would generally expect a tunnel table with per-tunnel identity and status columns, but inventing exact object names here would not be grounded in the provided data.

What Can Be Monitored

IPsec tunnel connection status
IPsec tunnel configuration

Imported Objects

From RAPID-MIB

rapidstream

OBJECT-IDENTITY

From SNMPv2-SMI

Counter32
Counter64
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-IDENTITY
OBJECT-TYPE
TimeTicks
Unsigned32
enterprises

From SNMPv2-TC

DateAndTime

OIDs

OID symbolic	OID numeric	Type	Access	Description
rsInfoModule	1.3.6.1.4.1.4355.6			The MIB module describes various tunnel objects of RapidStream system.
rsIpsecTunnelMIB	1.3.6.1.4.1.4355.6.5			This is the base object identifier for all tunnel branches.
rsIpsecTunnel	1.3.6.1.4.1.4355.6.5.1			This is the base object identifier for all tunnel information.
U32 rsIpsecTunnelNum	1.3.6.1.4.1.4355.6.5.1.1	Unsigned32	read-only	The total number of entries in the rsIpsecTunnelTable.
rsIpsecTunnelTable	1.3.6.1.4.1.4355.6.5.1.2		not-accessible	This is the connection table describing all current tunnels exist on this entity.
rsIpsecTunnelEntry	1.3.6.1.4.1.4355.6.5.1.2.1		not-accessible	An entry (conceptual row) containing the information on a tunnel between two security gateways.
I32 rsIpsecTunnelID	1.3.6.1.4.1.4355.6.5.1.2.1.1	Integer32	read-only	The running index of this tunnel.
IP rsIpsecTunnelLocalAddr	1.3.6.1.4.1.4355.6.5.1.2.1.2	IpAddress	read-only	The local IP address of the current tunnel.
IP rsIpsecTunnelPeerAddr	1.3.6.1.4.1.4355.6.5.1.2.1.3	IpAddress	read-only	The remote IP address of the current tunnel.
I32 rsIpsecTunnelInSpi	1.3.6.1.4.1.4355.6.5.1.2.1.4	Integer32	read-only	The security parameters index of inbound SA's within this tunnel.
I32 rsIpsecTunnelOutSpi	1.3.6.1.4.1.4355.6.5.1.2.1.5	Integer32	read-only	The security parameters index of outbound SA's within this tunnel.
DAT rsIpsecTunnelCreateTime	1.3.6.1.4.1.4355.6.5.1.2.1.6	DateAndTime	read-only	The date and time when the tunnel is created.
U32 rsIpsecTunnelDeviceID	1.3.6.1.4.1.4355.6.5.1.2.1.7	Unsigned32	read-only	The identifier of target device where the SA resides.
INT rsIpsecTunnelEspEncryptAlg	1.3.6.1.4.1.4355.6.5.1.2.1.8	INTEGER	read-only	The encryption algorithm used in the tunnel. It's 0 if ESP is not used.
INT rsIpsecTunnelEspAuthAlg	1.3.6.1.4.1.4355.6.5.1.2.1.9	INTEGER	read-only	The authentication algorithm used in the tunnel. It's 0 if ESP is not used.
INT rsIpsecTunnelAhAuthAlg	1.3.6.1.4.1.4355.6.5.1.2.1.10	INTEGER	read-only	The AH authentication algorithm used in the tunnel. It's 0 if AH is not used.
INT rsIpsecTunnelMode	1.3.6.1.4.1.4355.6.5.1.2.1.11	INTEGER	read-only	The tunnel/transport mode of the tunnel.
INT rsIpsecTunnelKeyMode	1.3.6.1.4.1.4355.6.5.1.2.1.12	INTEGER	read-only	The key mode of the tunnel.
TIK rsIpsecTunnelLifeTime	1.3.6.1.4.1.4355.6.5.1.2.1.13	TimeTicks	read-only	The life time (in hundredths of a second) of the tunnel.
C32 rsIpsecTunnelLifeLength	1.3.6.1.4.1.4355.6.5.1.2.1.14	Counter32	read-only	The maximum traffic in bytes that the tunnel is allowed to support.
C32 rsIpsecTunnelInSaBytes	1.3.6.1.4.1.4355.6.5.1.2.1.15	Counter32	read-only	Current active inbound SA bytes of the tunnel.
C32 rsIpsecTunnelOutSaBytes	1.3.6.1.4.1.4355.6.5.1.2.1.16	Counter32	read-only	Current active outbound SA bytes of the tunnel.
C32 rsIpsecTunnelAccSecs	1.3.6.1.4.1.4355.6.5.1.2.1.17	Counter32	read-only	The number of seconds that the tunnel has existed.
INT rsIpsecTunnelSelectorProtocol	1.3.6.1.4.1.4355.6.5.1.2.1.18	INTEGER	read-only	The ip protocol number that this SA selector carries, or 0 if it carries any protocol.
INT rsIpsecTunnelSelectorRemoteIPType	1.3.6.1.4.1.4355.6.5.1.2.1.19	INTEGER	read-only	The type of remote IP address of the SA selector in the entity.
IP rsIpsecTunnelSelectorRemoteIPOne	1.3.6.1.4.1.4355.6.5.1.2.1.20	IpAddress	read-only	The first remote IP address of the SA selector in the entity. It's IP address if remote IP of this selector only has one address. It's IP address of subnet if the remote IP of this selector is IP subnet. It's the start IP address if the remote IP of this selector has a range of addresses.
IP rsIpsecTunnelSelectorRemoteIPTwo	1.3.6.1.4.1.4355.6.5.1.2.1.21	IpAddress	read-only	The second remote IP address of the SA selector in the entity. It's 0 if remote IP of this selector only has one address. It's netmask of subnet if the remote IP of this selector is IP subnet. It's the end IP address if the remote IP of this selector has a range of addresses.
INT rsIpsecTunnelSelectorRemotePort	1.3.6.1.4.1.4355.6.5.1.2.1.22	INTEGER	read-only	The remote port used by this selector in the entity.
INT rsIpsecTunnelSelectorLocalIPType	1.3.6.1.4.1.4355.6.5.1.2.1.23	INTEGER	read-only	The type of local IP address of the SA selector in the entity.
IP rsIpsecTunnelSelectorLocalIPOne	1.3.6.1.4.1.4355.6.5.1.2.1.24	IpAddress	read-only	The first local IP address of the SA selector in the entity. It's IP address if local IP of this selector only has one address. It's IP address of subnet if the local IP of this selector is IP subnet. It's the start IP address if the local IP of this selector has a range of IP addresses.
IP rsIpsecTunnelSelectorLocalIPTwo	1.3.6.1.4.1.4355.6.5.1.2.1.25	IpAddress	read-only	The second local IP address of the SA selector in the entity. It's 0 if local IP of this selector only has one address. It's netmask of subnet if the local IP of this selector is IP subnet. It's the end IP address if the local IP of this selector has a range of IP addresses.
INT rsIpsecTunnelSelectorLocalPort	1.3.6.1.4.1.4355.6.5.1.2.1.26	INTEGER	read-only	The local port used by this selector in the entity.
C32 rsIpsecTunnelNumRekey	1.3.6.1.4.1.4355.6.5.1.2.1.27	Counter32	read-only	The number of rekeys of the tunnel.
C32 rsIpsecTunnelInKbytes	1.3.6.1.4.1.4355.6.5.1.2.1.28	Counter32	read-only	Total inbound traffic in Kbytes since the establish of this tunnel.
C32 rsIpsecTunnelOutKbytes	1.3.6.1.4.1.4355.6.5.1.2.1.29	Counter32	read-only	Total outound traffic in Kbytes since the establish of this connection.
C32 rsIpsecTunnelInPackets	1.3.6.1.4.1.4355.6.5.1.2.1.30	Counter32	read-only	Total number of inbound packets since the establish of this connection.
C32 rsIpsecTunnelOutPackets	1.3.6.1.4.1.4355.6.5.1.2.1.31	Counter32	read-only	Total number of outound packets since the establish of this connection.
C32 rsIpsecTunnelInDecryptErrors	1.3.6.1.4.1.4355.6.5.1.2.1.32	Counter32	read-only	Total number of packets discarded due to decryption error since the establish of this connection.
C32 rsIpsecTunnelInAuthErrors	1.3.6.1.4.1.4355.6.5.1.2.1.33	Counter32	read-only	Total number of packets discarded due to authentication error since the establish of this connection.
C32 rsIpsecTunnelInReplayErrors	1.3.6.1.4.1.4355.6.5.1.2.1.34	Counter32	read-only	Total number of packets discarded due to replay error since the establish of this connection.
C32 rsIpsecTunnelInOtherErrors	1.3.6.1.4.1.4355.6.5.1.2.1.35	Counter32	read-only	The number of packets discarded due to errors other than decryption, authentication or replay errors. This may include packets dropped due to a lack of receive buffers, and may include packets dropped due to congestion at the decryption element.
C32 rsIpsecTunnelOutDecryptErrors	1.3.6.1.4.1.4355.6.5.1.2.1.36	Counter32	read-only	Total number of packets discarded due to decryption error since the establish of this connection.
C32 rsIpsecTunnelOutAuthErrors	1.3.6.1.4.1.4355.6.5.1.2.1.37	Counter32	read-only	Total number of packets discarded due to authentication error since the establish of this connection.
C32 rsIpsecTunnelOutReplayErrors	1.3.6.1.4.1.4355.6.5.1.2.1.38	Counter32	read-only	Total number of packets discarded due to replay error since the establish of this connection.
C32 rsIpsecTunnelOutOtherErrors	1.3.6.1.4.1.4355.6.5.1.2.1.39	Counter32	read-only	The number of packets discarded due to errors other than decryption, authentication or replay errors. This may include packets dropped due to a lack of receive buffers, and may include packets dropped due to congestion at the decryption element.
INT rsIpsecTunnelUdpEncap	1.3.6.1.4.1.4355.6.5.1.2.1.40	INTEGER	read-only	Indicates whether if UDP encapsulated IPSec has been enabled.
INT rsIpsecTunnelPeerUdpPort	1.3.6.1.4.1.4355.6.5.1.2.1.41	INTEGER	read-only	The peer's UDP port of current tunnel when UDP encapsulated IPSec is enabled.
IP rsIpsecTunnelOrigPeerAddr	1.3.6.1.4.1.4355.6.5.1.2.1.42	IpAddress	read-only	The original peer ip address of current tunnel when UDP encapsulated IPSec is enabled

RFC description

Manages IPsec tunnel monitoring and statistics on RapidStream security gateways including tunnel connection tables and metrics.

Start monitoring WatchGuard Firebox security appliance, RapidStream VPN gateway (IPsec tunnel status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download RAPID-IPSEC-TUNNEL-MIB

What Is RAPID-IPSEC-TUNNEL-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description