All MIBs › TELDAT-TRAP-IPSE-MIB
Organization: Teldat, S.A.
Last Updated: 2014-01-20
Category: IP Security and VPN, Teldat Router Management, Teldat Trap Notifications
Description: Defines Teldat router IPSE (IPsec) event trap notifications.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is TELDAT-TRAP-IPSE-MIB?
TELDAT-TRAP-IPSE-MIB is a vendor-specific MIB from Teldat defining SNMP trap notifications from the router's IPSE (IPsec) event subsystem, complementing the polled TELDAT-MON-PROTOCOL-IPSEC-MIB with real-time fault/event alerts. It is a notifications-only module exposing trap variable bindings such as packet type, SPI (Security Parameter Index), protocol type, source/destination IP addresses, and SA count. Its monitoring purpose is software/security event visibility: it alerts a management station immediately when IPsec-related events occur, such as SA negotiation problems tied to a specific SPI or peer address, letting operators react quickly to VPN tunnel issues rather than waiting for a polling cycle. It depends on standard IPsec/IKE protocol constructs (SPI, Security Associations) as implemented in Teldat router software. It is typically deployed on Teldat routers terminating IPsec VPN tunnels where real-time alerting on tunnel/SA problems is desired. Engineers can download the TELDAT-TRAP-IPSE-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in TELDAT-TRAP-IPSE-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Teldat enterprise/carrier routers
Monitoring Examples
A monitoring system would receive a trap carrying ipse1-packet-type and ipse1-SPI to identify which IPsec packet type and Security Parameter Index triggered the event, and a trap with ipse3-protocol-type, ipse3-src-ip-addr, ipse3-dest-ip-addr, and ipse3-SPI to pinpoint the exact tunnel endpoint pair affected. A trap containing ipse4-protocol-type and ipse4-sa-number would flag an issue tied to a specific numbered Security Association, useful for correlating with the SA table in the companion monitoring MIB.
This MIB depends on
Related MIBs
Imported Objects
From SNMPv2-SMI
| Integer32 | |
| IpAddress | |
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-IDENTITY | |
| OBJECT-TYPE |
From SNMPv2-TC
| DisplayString |
From TELDAT-MIB
| telEventTraps | OBJECT-IDENTITY |
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| ipseTrapsMIB | 1.3.6.1.4.1.2007.1.4.138 | This Module Information Base file is defined for managing received SNMP notifications generated by the IPSE event subsystem. | ||
| ipseEventsGroup | 1.3.6.1.4.1.2007.1.4.138.1 | |||
| ipseEventObjects1 | 1.3.6.1.4.1.2007.1.4.138.1.1 | Event IPSE.1 It is shown the protocol of the encapsulated packet and the SPI. | ||
| STR ipse1_packet_type | 1.3.6.1.4.1.2007.1.4.138.1.1.1 | DisplayString | accessible-for-notify | Parameter 'packet-type' in event IPSE.1 |
| I32 ipse1_SPI | 1.3.6.1.4.1.2007.1.4.138.1.1.2 | Integer32 | accessible-for-notify | Parameter 'SPI' in event IPSE.1 |
| ipseEventObjects2 | 1.3.6.1.4.1.2007.1.4.138.1.2 | Event IPSE.2 The received encapsulated packet has an unknown protocol. | ||
| STR ipse2_protocol_type | 1.3.6.1.4.1.2007.1.4.138.1.2.1 | DisplayString | accessible-for-notify | Parameter 'protocol-type' in event IPSE.2 |
| ipseEventObjects3 | 1.3.6.1.4.1.2007.1.4.138.1.3 | Event IPSE.3 The output function of the tunnel net has encapsulated a ESP or AH packet successfully. It is shown the protocol of the encapsulated packet, the source and destination direction and the SPI. | ||
| STR ipse3_protocol_type | 1.3.6.1.4.1.2007.1.4.138.1.3.1 | DisplayString | accessible-for-notify | Parameter 'protocol-type' in event IPSE.3 |
| IP ipse3_src_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.3.2 | IpAddress | accessible-for-notify | Parameter 'src-ip-addr' in event IPSE.3 |
| IP ipse3_dest_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.3.3 | IpAddress | accessible-for-notify | Parameter 'dest-ip-addr' in event IPSE.3 |
| I32 ipse3_SPI | 1.3.6.1.4.1.2007.1.4.138.1.3.4 | Integer32 | accessible-for-notify | Parameter 'SPI' in event IPSE.3 |
| ipseEventObjects4 | 1.3.6.1.4.1.2007.1.4.138.1.4 | Event IPSE.4 The authentication of an ESP or AH packet failed. | ||
| STR ipse4_protocol_type | 1.3.6.1.4.1.2007.1.4.138.1.4.1 | DisplayString | accessible-for-notify | Parameter 'protocol-type' in event IPSE.4 |
| I32 ipse4_sa_number | 1.3.6.1.4.1.2007.1.4.138.1.4.2 | Integer32 | accessible-for-notify | Parameter 'sa-number' in event IPSE.4 |
| ipseEventObjects5 | 1.3.6.1.4.1.2007.1.4.138.1.5 | Event IPSE.5 A packet was discarded because its secuence number was below the minimum admited in the reception window. | ||
| STR ipse5_protocol_name | 1.3.6.1.4.1.2007.1.4.138.1.5.1 | DisplayString | accessible-for-notify | Parameter 'protocol-name' in event IPSE.5 |
| IP ipse5_src_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.5.2 | IpAddress | accessible-for-notify | Parameter 'src-ip-addr' in event IPSE.5 |
| IP ipse5_dest_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.5.3 | IpAddress | accessible-for-notify | Parameter 'dest-ip-addr' in event IPSE.5 |
| ipseEventObjects6 | 1.3.6.1.4.1.2007.1.4.138.1.6 | Event IPSE.6 A packet was discarded because the antireplay options were active and it was already received. | ||
| STR ipse6_protocol_name | 1.3.6.1.4.1.2007.1.4.138.1.6.1 | DisplayString | accessible-for-notify | Parameter 'protocol-name' in event IPSE.6 |
| IP ipse6_src_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.6.2 | IpAddress | accessible-for-notify | Parameter 'src-ip-addr' in event IPSE.6 |
| IP ipse6_dest_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.6.3 | IpAddress | accessible-for-notify | Parameter 'dest-ip-addr' in event IPSE.6 |
| ipseEventObjects8 | 1.3.6.1.4.1.2007.1.4.138.1.8 | Event IPSE.8 A packet is discarded because it has a wrong length (it is not multiple of 32 bits). | ||
| STR ipse8_protocol_type | 1.3.6.1.4.1.2007.1.4.138.1.8.1 | DisplayString | accessible-for-notify | Parameter 'protocol-type' in event IPSE.8 |
| IP ipse8_src_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.8.2 | IpAddress | accessible-for-notify | Parameter 'src-ip-addr' in event IPSE.8 |
| IP ipse8_dest_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.8.3 | IpAddress | accessible-for-notify | Parameter 'dest-ip-addr' in event IPSE.8 |
| ipseEventObjects9 | 1.3.6.1.4.1.2007.1.4.138.1.9 | Event IPSE.9 Packet with correct sequence number in window. | ||
| STR ipse9_protocol_type | 1.3.6.1.4.1.2007.1.4.138.1.9.1 | DisplayString | accessible-for-notify | Parameter 'protocol-type' in event IPSE.9 |
| IP ipse9_src_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.9.2 | IpAddress | accessible-for-notify | Parameter 'src-ip-addr' in event IPSE.9 |
| IP ipse9_dest_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.9.3 | IpAddress | accessible-for-notify | Parameter 'dest-ip-addr' in event IPSE.9 |
| ipseEventObjects10 | 1.3.6.1.4.1.2007.1.4.138.1.10 | Event IPSE.10 The packet has arrived to window secuence with 0 as secuence number. | ||
| STR ipse10_protocol_type | 1.3.6.1.4.1.2007.1.4.138.1.10.1 | DisplayString | accessible-for-notify | Parameter 'protocol-type' in event IPSE.10 |
| IP ipse10_src_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.10.2 | IpAddress | accessible-for-notify | Parameter 'src-ip-addr' in event IPSE.10 |
| IP ipse10_dest_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.10.3 | IpAddress | accessible-for-notify | Parameter 'dest-ip-addr' in event IPSE.10 |
| ipseEventObjects11 | 1.3.6.1.4.1.2007.1.4.138.1.11 | Event IPSE.11 The protocol, the SA sequence number and the packet sequence number are shown. | ||
| STR ipse11_protocol_type | 1.3.6.1.4.1.2007.1.4.138.1.11.1 | DisplayString | accessible-for-notify | Parameter 'protocol-type' in event IPSE.11 |
| I32 ipse11_spi | 1.3.6.1.4.1.2007.1.4.138.1.11.2 | Integer32 | accessible-for-notify | Parameter 'spi' in event IPSE.11 |
| I32 ipse11_sa_seq_num | 1.3.6.1.4.1.2007.1.4.138.1.11.3 | Integer32 | accessible-for-notify | Parameter 'sa-seq-num' in event IPSE.11 |
| I32 ipse11_inbound_seq_num | 1.3.6.1.4.1.2007.1.4.138.1.11.4 | Integer32 | accessible-for-notify | Parameter 'inbound-seq-num' in event IPSE.11 |
| ipseEventObjects12 | 1.3.6.1.4.1.2007.1.4.138.1.12 | Event IPSE.12 A packet has arrived with the SPI showed and there is not an static SA configured for it. | ||
| I32 ipse12_spi | 1.3.6.1.4.1.2007.1.4.138.1.12.1 | Integer32 | accessible-for-notify | Parameter 'spi' in event IPSE.12 |
| I32 ipse12_protocol | 1.3.6.1.4.1.2007.1.4.138.1.12.2 | Integer32 | accessible-for-notify | Parameter 'protocol' in event IPSE.12 |
| IP ipse12_remote_peer | 1.3.6.1.4.1.2007.1.4.138.1.12.3 | IpAddress | accessible-for-notify | Parameter 'remote-peer' in event IPSE.12 |
| ipseEventObjects13 | 1.3.6.1.4.1.2007.1.4.138.1.13 | Event IPSE.13 Overflow in sequence number the next sequence number is 1. | ||
| STR ipse13_protocol_type | 1.3.6.1.4.1.2007.1.4.138.1.13.1 | DisplayString | accessible-for-notify | Parameter 'protocol-type' in event IPSE.13 |
| ipseEventObjects14 | 1.3.6.1.4.1.2007.1.4.138.1.14 | Event IPSE.14 A packet has arrived with SPI %x and there is not an static SA configured for it. | ||
| I32 ipse14_spi | 1.3.6.1.4.1.2007.1.4.138.1.14.1 | Integer32 | accessible-for-notify | Parameter 'spi' in event IPSE.14 |
| I32 ipse14_protocol | 1.3.6.1.4.1.2007.1.4.138.1.14.2 | Integer32 | accessible-for-notify | Parameter 'protocol' in event IPSE.14 |
| IP ipse14_remote_peer | 1.3.6.1.4.1.2007.1.4.138.1.14.3 | IpAddress | accessible-for-notify | Parameter 'remote-peer' in event IPSE.14 |
| ipseEventObjects15 | 1.3.6.1.4.1.2007.1.4.138.1.15 | Event IPSE.15 Found entry hasn't policy assigned. (Debug). | ||
| IP ipse15_src_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.15.1 | IpAddress | accessible-for-notify | Parameter 'src-ip-addr' in event IPSE.15 |
| IP ipse15_dest_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.15.2 | IpAddress | accessible-for-notify | Parameter 'dest-ip-addr' in event IPSE.15 |
| ipseEventObjects16 | 1.3.6.1.4.1.2007.1.4.138.1.16 | Event IPSE.16 Attributes are wrong. | ||
| I32 ipse16_message | 1.3.6.1.4.1.2007.1.4.138.1.16.1 | Integer32 | accessible-for-notify | Parameter 'message' in event IPSE.16 |
| I32 ipse16_phase | 1.3.6.1.4.1.2007.1.4.138.1.16.2 | Integer32 | accessible-for-notify | Parameter 'phase' in event IPSE.16 |
| IP ipse16_src_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.16.3 | IpAddress | accessible-for-notify | Parameter 'src-ip-addr' in event IPSE.16 |
| IP ipse16_dest_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.16.4 | IpAddress | accessible-for-notify | Parameter 'dest-ip-addr' in event IPSE.16 |
| ipseEventObjects17 | 1.3.6.1.4.1.2007.1.4.138.1.17 | Event IPSE.17 Error allocating memory. | ||
| STR ipse17_message | 1.3.6.1.4.1.2007.1.4.138.1.17.1 | DisplayString | accessible-for-notify | Parameter 'message' in event IPSE.17 |
| ipseEventObjects18 | 1.3.6.1.4.1.2007.1.4.138.1.18 | Event IPSE.18 Incompatible IKE policies. | ||
| IP ipse18_src_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.18.1 | IpAddress | accessible-for-notify | Parameter 'src-ip-addr' in event IPSE.18 |
| IP ipse18_dest_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.18.2 | IpAddress | accessible-for-notify | Parameter 'dest-ip-addr' in event IPSE.18 |
| ipseEventObjects19 | 1.3.6.1.4.1.2007.1.4.138.1.19 | Event IPSE.19 Error building the message. | ||
| I32 ipse19_mes_number | 1.3.6.1.4.1.2007.1.4.138.1.19.1 | Integer32 | accessible-for-notify | Parameter 'mes-number' in event IPSE.19 |
| I32 ipse19_phase_number | 1.3.6.1.4.1.2007.1.4.138.1.19.2 | Integer32 | accessible-for-notify | Parameter 'phase-number' in event IPSE.19 |
| IP ipse19_remote_peer_addr | 1.3.6.1.4.1.2007.1.4.138.1.19.3 | IpAddress | accessible-for-notify | Parameter 'remote-peer-addr' in event IPSE.19 |
| IP ipse19_local_ifc_addr | 1.3.6.1.4.1.2007.1.4.138.1.19.4 | IpAddress | accessible-for-notify | Parameter 'local-ifc-addr' in event IPSE.19 |
| ipseEventObjects20 | 1.3.6.1.4.1.2007.1.4.138.1.20 | Event IPSE.20 Error inicializating IKE protocol. | ||
| STR ipse20_message | 1.3.6.1.4.1.2007.1.4.138.1.20.1 | DisplayString | accessible-for-notify | Parameter 'message' in event IPSE.20 |
| ipseEventObjects21 | 1.3.6.1.4.1.2007.1.4.138.1.21 | Event IPSE.21 IKE is active. | ||
| I32 ipse21_ike_port | 1.3.6.1.4.1.2007.1.4.138.1.21.1 | Integer32 | accessible-for-notify | Parameter 'ike-port' in event IPSE.21 |
| ipseEventObjects22 | 1.3.6.1.4.1.2007.1.4.138.1.22 | Event IPSE.22 A packet is received. | ||
| IP ipse22_remote_addr | 1.3.6.1.4.1.2007.1.4.138.1.22.1 | IpAddress | accessible-for-notify | Parameter 'remote-addr' in event IPSE.22 |
| STR ipse22_message | 1.3.6.1.4.1.2007.1.4.138.1.22.2 | DisplayString | accessible-for-notify | Parameter 'message' in event IPSE.22 |
| ipseEventObjects23 | 1.3.6.1.4.1.2007.1.4.138.1.23 | Event IPSE.23 An ISAKMP SA has been created. | ||
| IP ipse23_local_addr | 1.3.6.1.4.1.2007.1.4.138.1.23.1 | IpAddress | accessible-for-notify | Parameter 'local-addr' in event IPSE.23 |
| IP ipse23_remote_addr | 1.3.6.1.4.1.2007.1.4.138.1.23.2 | IpAddress | accessible-for-notify | Parameter 'remote-addr' in event IPSE.23 |
| ipseEventObjects24 | 1.3.6.1.4.1.2007.1.4.138.1.24 | Event IPSE.24 Error (free format). | ||
| STR ipse24_error | 1.3.6.1.4.1.2007.1.4.138.1.24.1 | DisplayString | accessible-for-notify | Parameter 'error' in event IPSE.24 |
| ipseEventObjects25 | 1.3.6.1.4.1.2007.1.4.138.1.25 | Event IPSE.25 Leaving state in IPSec forwarder. | ||
| IP ipse25_src_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.25.1 | IpAddress | accessible-for-notify | Parameter 'src-ip-addr' in event IPSE.25 |
| IP ipse25_dest_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.25.2 | IpAddress | accessible-for-notify | Parameter 'dest-ip-addr' in event IPSE.25 |
| STR ipse25_state | 1.3.6.1.4.1.2007.1.4.138.1.25.3 | DisplayString | accessible-for-notify | Parameter 'state' in event IPSE.25 |
| ipseEventObjects26 | 1.3.6.1.4.1.2007.1.4.138.1.26 | Event IPSE.26 Checking output control access list in IPSec forwarder. | ||
| IP ipse26_src_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.26.1 | IpAddress | accessible-for-notify | Parameter 'src-ip-addr' in event IPSE.26 |
| IP ipse26_dest_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.26.2 | IpAddress | accessible-for-notify | Parameter 'dest-ip-addr' in event IPSE.26 |
| I32 ipse26_protocol | 1.3.6.1.4.1.2007.1.4.138.1.26.3 | Integer32 | accessible-for-notify | Parameter 'protocol' in event IPSE.26 |
| ipseEventObjects27 | 1.3.6.1.4.1.2007.1.4.138.1.27 | Event IPSE.27 Checking input control access list in IPSec forwarder. | ||
| IP ipse27_src_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.27.1 | IpAddress | accessible-for-notify | Parameter 'src-ip-addr' in event IPSE.27 |
| IP ipse27_dest_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.27.2 | IpAddress | accessible-for-notify | Parameter 'dest-ip-addr' in event IPSE.27 |
| I32 ipse27_protocol | 1.3.6.1.4.1.2007.1.4.138.1.27.3 | Integer32 | accessible-for-notify | Parameter 'protocol' in event IPSE.27 |
| ipseEventObjects28 | 1.3.6.1.4.1.2007.1.4.138.1.28 | Event IPSE.28 Searching the SA for an ESP packet. | ||
| IP ipse28_src_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.28.1 | IpAddress | accessible-for-notify | Parameter 'src-ip-addr' in event IPSE.28 |
| IP ipse28_dest_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.28.2 | IpAddress | accessible-for-notify | Parameter 'dest-ip-addr' in event IPSE.28 |
| ipseEventObjects29 | 1.3.6.1.4.1.2007.1.4.138.1.29 | Event IPSE.29 Decapsulation Id Checking Fail. | ||
| IP ipse29_src_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.29.1 | IpAddress | accessible-for-notify | Parameter 'src-ip-addr' in event IPSE.29 |
| IP ipse29_dest_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.29.2 | IpAddress | accessible-for-notify | Parameter 'dest-ip-addr' in event IPSE.29 |
| ipseEventObjects30 | 1.3.6.1.4.1.2007.1.4.138.1.30 | Event IPSE.30 LCA checking fail: packet not protected by IPSec. | ||
| IP ipse30_src_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.30.1 | IpAddress | accessible-for-notify | Parameter 'src-ip-addr' in event IPSE.30 |
| IP ipse30_dest_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.30.2 | IpAddress | accessible-for-notify | Parameter 'dest-ip-addr' in event IPSE.30 |
| ipseEventObjects31 | 1.3.6.1.4.1.2007.1.4.138.1.31 | Event IPSE.31 It is shown the source and destination direction, ports and protocols. | ||
| I32 ipse31_protocol_type | 1.3.6.1.4.1.2007.1.4.138.1.31.1 | Integer32 | accessible-for-notify | Parameter 'protocol-type' in event IPSE.31 |
| IP ipse31_src_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.31.2 | IpAddress | accessible-for-notify | Parameter 'src-ip-addr' in event IPSE.31 |
| I32 ipse31_src_port | 1.3.6.1.4.1.2007.1.4.138.1.31.3 | Integer32 | accessible-for-notify | Parameter 'src-port' in event IPSE.31 |
| IP ipse31_dest_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.31.4 | IpAddress | accessible-for-notify | Parameter 'dest-ip-addr' in event IPSE.31 |
| I32 ipse31_dest_port | 1.3.6.1.4.1.2007.1.4.138.1.31.5 | Integer32 | accessible-for-notify | Parameter 'dest-port' in event IPSE.31 |
| I32 ipse31_length | 1.3.6.1.4.1.2007.1.4.138.1.31.6 | Integer32 | accessible-for-notify | Parameter 'length' in event IPSE.31 |
| ipseEventObjects32 | 1.3.6.1.4.1.2007.1.4.138.1.32 | Event IPSE.32 The router received an ICMP Path MTU 'too big' message (RFC 1191), indicating that a sent packet was too big and was unable to be fragmented for some reason. The 'source' IP address indicates the router whose next hop MTU is too small for the packet. | ||
| I32 ipse32_rmtu | 1.3.6.1.4.1.2007.1.4.138.1.32.1 | Integer32 | accessible-for-notify | Parameter 'rmtu' in event IPSE.32 |
| I32 ipse32_spi | 1.3.6.1.4.1.2007.1.4.138.1.32.2 | Integer32 | accessible-for-notify | Parameter 'spi' in event IPSE.32 |
| IP ipse32_src_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.32.3 | IpAddress | accessible-for-notify | Parameter 'src-ip-addr' in event IPSE.32 |
| IP ipse32_dest_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.32.4 | IpAddress | accessible-for-notify | Parameter 'dest-ip-addr' in event IPSE.32 |
| ipseEventObjects33 | 1.3.6.1.4.1.2007.1.4.138.1.33 | Event IPSE.33 The router is trying to send an IPSec packet which exceeds the stored PMTU value for the associated bundle. Packet is dropped, and an ICMP PMTU packet is sent back to the source IP address. | ||
| I32 ipse33_mtu | 1.3.6.1.4.1.2007.1.4.138.1.33.1 | Integer32 | accessible-for-notify | Parameter 'mtu' in event IPSE.33 |
| I32 ipse33_spi | 1.3.6.1.4.1.2007.1.4.138.1.33.2 | Integer32 | accessible-for-notify | Parameter 'spi' in event IPSE.33 |
| IP ipse33_src_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.33.3 | IpAddress | accessible-for-notify | Parameter 'src-ip-addr' in event IPSE.33 |
| IP ipse33_dest_ip_addr | 1.3.6.1.4.1.2007.1.4.138.1.33.4 | IpAddress | accessible-for-notify | Parameter 'dest-ip-addr' in event IPSE.33 |
| ipseEventObjects34 | 1.3.6.1.4.1.2007.1.4.138.1.34 | Event IPSE.34 timestamp error | ||
| I32 ipse34_rcvd_time | 1.3.6.1.4.1.2007.1.4.138.1.34.1 | Integer32 | accessible-for-notify | Parameter 'rcvd-time' in event IPSE.34 |
| I32 ipse34_expected_time | 1.3.6.1.4.1.2007.1.4.138.1.34.2 | Integer32 | accessible-for-notify | Parameter 'expected-time' in event IPSE.34 |
| I32 ipse34_windows | 1.3.6.1.4.1.2007.1.4.138.1.34.3 | Integer32 | accessible-for-notify | Parameter 'windows' in event IPSE.34 |
| ipseEventObjects35 | 1.3.6.1.4.1.2007.1.4.138.1.35 | Event IPSE.35 Usual operation trace (free format). | ||
| STR ipse35_trace | 1.3.6.1.4.1.2007.1.4.138.1.35.1 | DisplayString | accessible-for-notify | Parameter 'trace' in event IPSE.35 |
| ipseNotifications | 1.3.6.1.4.1.2007.1.4.138.2 | |||
| ipseNotificationsPrefix | 1.3.6.1.4.1.2007.1.4.138.2.0 | |||
| NTF ipseNotification1 | 1.3.6.1.4.1.2007.1.4.138.2.0.1 | Notification of Event IPSE.1 Message: '$1, spi $2' Parameters list: $1: ipse1-packet-type $2: ipse1-SPI It is shown the protocol of the encapsulated packet and the SPI. | ||
| NTF ipseNotification2 | 1.3.6.1.4.1.2007.1.4.138.2.0.2 | Notification of Event IPSE.2 Message: 'Error while unencapsulating packet $1, unknown' Parameters list: $1: ipse2-protocol-type The received encapsulated packet has an unknown protocol. | ||
| NTF ipseNotification3 | 1.3.6.1.4.1.2007.1.4.138.2.0.3 | Notification of Event IPSE.3 Message: 'Packet $1 successfully encapsulated (source $2 -> destination $3) spi $4' Parameters list: $1: ipse3-protocol-type $2: ipse3-src-ip-addr $3: ipse3-dest-ip-addr $4: ipse3-SPI The output function of the tunnel net has encapsulated a ESP or AH packet successfully. It is shown the protocol of the encapsulated packet, the source and destination direction and the SPI. | ||
| NTF ipseNotification4 | 1.3.6.1.4.1.2007.1.4.138.2.0.4 | Notification of Event IPSE.4 Message: 'Error in packet authentication $1 ,spi $2' Parameters list: $1: ipse4-protocol-type $2: ipse4-sa-number The authentication of an ESP or AH packet failed. | ||
| NTF ipseNotification5 | 1.3.6.1.4.1.2007.1.4.138.2.0.5 | Notification of Event IPSE.5 Message: 'Packet discarded $1 received with delay, (source $2 -> destination $3)' Parameters list: $1: ipse5-protocol-name $2: ipse5-src-ip-addr $3: ipse5-dest-ip-addr A packet was discarded because its secuence number was below the minimum admited in the reception window. | ||
| NTF ipseNotification6 | 1.3.6.1.4.1.2007.1.4.138.2.0.6 | Notification of Event IPSE.6 Message: 'Packet discarded $1 because repeated, (source $2 -> destination $3)' Parameters list: $1: ipse6-protocol-name $2: ipse6-src-ip-addr $3: ipse6-dest-ip-addr A packet was discarded because the antireplay options were active and it was already received. | ||
| NTF ipseNotification7 | 1.3.6.1.4.1.2007.1.4.138.2.0.7 | Notification of Event IPSE.7 Message: 'Packet discarded because used a wrong padding' A packet was discarded because the padding had a wrong value. | ||
| NTF ipseNotification8 | 1.3.6.1.4.1.2007.1.4.138.2.0.8 | Notification of Event IPSE.8 Message: 'Packet discarded because has a wrong length $1, not multiple of 32 bits (source $2-> destination $3)' Parameters list: $1: ipse8-protocol-type $2: ipse8-src-ip-addr $3: ipse8-dest-ip-addr A packet is discarded because it has a wrong length (it is not multiple of 32 bits). | ||
| NTF ipseNotification9 | 1.3.6.1.4.1.2007.1.4.138.2.0.9 | Notification of Event IPSE.9 Message: 'Packet with correct sequence number, protocol $1, (source $2 -> destination $3)' Parameters list: $1: ipse9-protocol-type $2: ipse9-src-ip-addr $3: ipse9-dest-ip-addr Packet with correct sequence number in window. | ||
| NTF ipseNotification10 | 1.3.6.1.4.1.2007.1.4.138.2.0.10 | Notification of Event IPSE.10 Message: 'Packet discarded in window secuence because as 0 secuence number in protocol $1, source $2, destination $3' Parameters list: $1: ipse10-protocol-type $2: ipse10-src-ip-addr $3: ipse10-dest-ip-addr The packet has arrived to window secuence with 0 as secuence number. | ||
| NTF ipseNotification11 | 1.3.6.1.4.1.2007.1.4.138.2.0.11 | Notification of Event IPSE.11 Message: 'Prot $1 spi $2 seq num SA $3, seq num pack $4' Parameters list: $1: ipse11-protocol-type $2: ipse11-spi $3: ipse11-sa-seq-num $4: ipse11-inbound-seq-num The protocol, the SA sequence number and the packet sequence number are shown. | ||
| NTF ipseNotification12 | 1.3.6.1.4.1.2007.1.4.138.2.0.12 | Notification of Event IPSE.12 Message: 'SA not found, spi $1 protocol $2 remote peer $3' Parameters list: $1: ipse12-spi $2: ipse12-protocol $3: ipse12-remote-peer A packet has arrived with the SPI showed and there is not an static SA configured for it. | ||
| NTF ipseNotification13 | 1.3.6.1.4.1.2007.1.4.138.2.0.13 | Notification of Event IPSE.13 Message: 'Warning! Overflow of seq num, prot $1' Parameters list: $1: ipse13-protocol-type Overflow in sequence number the next sequence number is 1. | ||
| NTF ipseNotification14 | 1.3.6.1.4.1.2007.1.4.138.2.0.14 | Notification of Event IPSE.14 Message: 'SA is down, spi $1 protocol $2 remote peer $3' Parameters list: $1: ipse14-spi $2: ipse14-protocol $3: ipse14-remote-peer A packet has arrived with SPI %x and there is not an static SA configured for it. | ||
| NTF ipseNotification15 | 1.3.6.1.4.1.2007.1.4.138.2.0.15 | Notification of Event IPSE.15 Message: 'Policy not found for packet ($1->$2)' Parameters list: $1: ipse15-src-ip-addr $2: ipse15-dest-ip-addr Found entry hasn't policy assigned. (Debug). | ||
| NTF ipseNotification16 | 1.3.6.1.4.1.2007.1.4.138.2.0.16 | Notification of Event IPSE.16 Message: 'ISAKMP - Message $1 fase $2 INVALID ATTRIBUTES. pack ($3->$4)' Parameters list: $1: ipse16-message $2: ipse16-phase $3: ipse16-src-ip-addr $4: ipse16-dest-ip-addr Attributes are wrong. | ||
| NTF ipseNotification17 | 1.3.6.1.4.1.2007.1.4.138.2.0.17 | Notification of Event IPSE.17 Message: 'IKE - Allocating memory error. $1' Parameters list: $1: ipse17-message Error allocating memory. | ||
| NTF ipseNotification18 | 1.3.6.1.4.1.2007.1.4.138.2.0.18 | Notification of Event IPSE.18 Message: 'ISAKMP-SA proposal incompatible. remote peer:$1 Local interface:$2' Parameters list: $1: ipse18-src-ip-addr $2: ipse18-dest-ip-addr Incompatible IKE policies. | ||
| NTF ipseNotification19 | 1.3.6.1.4.1.2007.1.4.138.2.0.19 | Notification of Event IPSE.19 Message: 'IKE -Error building the $1 message in fase $2. remote peer:$3 Local interface:$4' Parameters list: $1: ipse19-mes-number $2: ipse19-phase-number $3: ipse19-remote-peer-addr $4: ipse19-local-ifc-addr Error building the message. | ||
| NTF ipseNotification20 | 1.3.6.1.4.1.2007.1.4.138.2.0.20 | Notification of Event IPSE.20 Message: 'Error inicializating IKE protocol. $1' Parameters list: $1: ipse20-message Error inicializating IKE protocol. | ||
| NTF ipseNotification21 | 1.3.6.1.4.1.2007.1.4.138.2.0.21 | Notification of Event IPSE.21 Message: 'IKE protocol server active in port: $1' Parameters list: $1: ipse21-ike-port IKE is active. | ||
| NTF ipseNotification22 | 1.3.6.1.4.1.2007.1.4.138.2.0.22 | Notification of Event IPSE.22 Message: 'IKE($1)$2' Parameters list: $1: ipse22-remote-addr $2: ipse22-message A packet is received. | ||
| NTF ipseNotification23 | 1.3.6.1.4.1.2007.1.4.138.2.0.23 | Notification of Event IPSE.23 Message: 'IKE - ISAKMP SA has been created ($1 $2)' Parameters list: $1: ipse23-local-addr $2: ipse23-remote-addr An ISAKMP SA has been created. | ||
| NTF ipseNotification24 | 1.3.6.1.4.1.2007.1.4.138.2.0.24 | Notification of Event IPSE.24 Message: 'ISAKMP Error - $1' Parameters list: $1: ipse24-error Error (free format). | ||
| NTF ipseNotification25 | 1.3.6.1.4.1.2007.1.4.138.2.0.25 | Notification of Event IPSE.25 Message: 'Packet ($1 -> $2) entered in IpSec Forwarder State $3.' Parameters list: $1: ipse25-src-ip-addr $2: ipse25-dest-ip-addr $3: ipse25-state Leaving state in IPSec forwarder. | ||
| NTF ipseNotification26 | 1.3.6.1.4.1.2007.1.4.138.2.0.26 | Notification of Event IPSE.26 Message: 'Out.ACL($1->$2) ProtNum $3.' Parameters list: $1: ipse26-src-ip-addr $2: ipse26-dest-ip-addr $3: ipse26-protocol Checking output control access list in IPSec forwarder. | ||
| NTF ipseNotification27 | 1.3.6.1.4.1.2007.1.4.138.2.0.27 | Notification of Event IPSE.27 Message: 'In.ACL($1->$2) ProtNum $3.' Parameters list: $1: ipse27-src-ip-addr $2: ipse27-dest-ip-addr $3: ipse27-protocol Checking input control access list in IPSec forwarder. | ||
| NTF ipseNotification28 | 1.3.6.1.4.1.2007.1.4.138.2.0.28 | Notification of Event IPSE.28 Message: 'Searching SA for an ESP/AH Packet directed to a Local Ifc. Packet ($1->$2).' Parameters list: $1: ipse28-src-ip-addr $2: ipse28-dest-ip-addr Searching the SA for an ESP packet. | ||
| NTF ipseNotification29 | 1.3.6.1.4.1.2007.1.4.138.2.0.29 | Notification of Event IPSE.29 Message: 'Packet ($1 -> $2) decapsulation Id checking Failure.' Parameters list: $1: ipse29-src-ip-addr $2: ipse29-dest-ip-addr Decapsulation Id Checking Fail. | ||
| NTF ipseNotification30 | 1.3.6.1.4.1.2007.1.4.138.2.0.30 | Notification of Event IPSE.30 Message: 'No Ipsec protected : packet ($1 -> $2) drop.' Parameters list: $1: ipse30-src-ip-addr $2: ipse30-dest-ip-addr LCA checking fail: packet not protected by IPSec. | ||
| NTF ipseNotification31 | 1.3.6.1.4.1.2007.1.4.138.2.0.31 | Notification of Event IPSE.31 Message: 'protocol $1 (source $2 port $3-> destination $4 prot $5) length $6' Parameters list: $1: ipse31-protocol-type $2: ipse31-src-ip-addr $3: ipse31-src-port $4: ipse31-dest-ip-addr $5: ipse31-dest-port $6: ipse31-length It is shown the source and destination direction, ports and protocols. | ||
| NTF ipseNotification32 | 1.3.6.1.4.1.2007.1.4.138.2.0.32 | Notification of Event IPSE.32 Message: 'Rcvd ICMP PMTU: Next-hop mtu = $1 bytes. SPI $2, pkt $3 -> $4' Parameters list: $1: ipse32-rmtu $2: ipse32-spi $3: ipse32-src-ip-addr $4: ipse32-dest-ip-addr The router received an ICMP Path MTU 'too big' message (RFC 1191), indicating that a sent packet was too big and was unable to be fragmented for some reason. The 'source' IP address indicates the router whose next hop MTU is too small for the packet. | ||
| NTF ipseNotification33 | 1.3.6.1.4.1.2007.1.4.138.2.0.33 | Notification of Event IPSE.33 Message: 'Sent ICMP PMTU: Path mtu = $1 bytes. SPI $2, pkt $3 -> $4' Parameters list: $1: ipse33-mtu $2: ipse33-spi $3: ipse33-src-ip-addr $4: ipse33-dest-ip-addr The router is trying to send an IPSec packet which exceeds the stored PMTU value for the associated bundle. Packet is dropped, and an ICMP PMTU packet is sent back to the source IP address. | ||
| NTF ipseNotification34 | 1.3.6.1.4.1.2007.1.4.138.2.0.34 | Notification of Event IPSE.34 Message: 'GDOI timestamp error rcvd time $1 expected $2 window $3' Parameters list: $1: ipse34-rcvd-time $2: ipse34-expected-time $3: ipse34-windows timestamp error | ||
| NTF ipseNotification35 | 1.3.6.1.4.1.2007.1.4.138.2.0.35 | Notification of Event IPSE.35 Message: 'Access list cache - $1' Parameters list: $1: ipse35-trace Usual operation trace (free format). |
RFC description
IPSec event trap MIB defining SNMP notifications for IPSec packet encapsulation and protocol error events.
Start monitoring Teldat enterprise/carrier routers (IPsec SA/SPI negotiation event traps) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.