TIMETRA-IPSEC-MIB

All MIBs › TIMETRA-IPSEC-MIB

Organization: Alcatel-Lucent

Last Updated: 2011-02-01

Description: TIMETRA-IPSEC-MIB module

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is TIMETRA-IPSEC-MIB?

TIMETRA-IPSEC-MIB is an Alcatel-Lucent (Nokia) enterprise MIB for the SROS operating system used on Alcatel-Lucent/Nokia service routers, providing management and provisioning of IPsec tunneling, encryption transforms, and IKE policy. It exposes configuration tables for IPsec transforms (authentication and encryption algorithms) and IKE policies, along with row-status and last-changed timestamp objects, plus a notification prefix and conformance branches for standard SNMP compliance grouping. Its monitoring value lies in verifying IPsec/IKE configuration integrity and change tracking: administrators check tmnxIPsecTransformAuthAlgorithm and tmnxIPsecTransformEncrAlgorithm to confirm the correct cryptographic algorithms are configured, tmnxIPsecTransformRowStatus to ensure entries are active, and the *LastChanged timestamp objects to audit when security configuration was last modified, supporting both configuration compliance and change-management monitoring. It builds directly on IETF IPsec/IKE standards (the RFC 2401/4301 and IKE/ISAKMP family) mapped into Alcatel-Lucent's proprietary Timetra object tree. It is typically deployed on Alcatel-Lucent/Nokia SROS service routers, where TIMETRA-IPSEC-MIB SNMP monitoring supports carrier or enterprise IPsec VPN termination.

IPNetwork Monitor allows you to monitor SNMP objects defined in TIMETRA-IPSEC-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Alcatel-Lucent/Nokia SROS service routers

Monitoring Examples

An operator would walk tmnxIPsecTransformTable / tmnxIPsecTransformEntry keyed by tmnxIPsecTransformId to verify tmnxIPsecTransformAuthAlgorithm and tmnxIPsecTransformEncrAlgorithm match approved cryptographic policy, and check tmnxIkePolicyTable / tmnxIkePolicyEntry keyed by tmnxIkePolicyId for the corresponding IKE policy settings. A transform or IKE policy entry with tmnxIPsecTransformRowStatus not active would indicate an incomplete provisioning step blocking a VPN tunnel from establishing.

What Can Be Monitored

IPsec transform authentication algorithm
IPsec transform encryption algorithm
transform/IKE policy row status
IKE policy configuration
configuration last-changed timestamps

Imported Objects

From IF-MIB

InterfaceIndex

From INET-ADDRESS-MIB

InetAddress
InetAddressPrefixLength
InetAddressType

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Counter64
Gauge32
Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DisplayString
RowStatus
StorageType
TEXTUAL-CONVENTION
TimeStamp
TruthValue

From TIMETRA-CHASSIS-MIB

TmnxHwIndexOrZero
tmnxCardSlotNum	OBJECT-TYPE
tmnxChassisIndex	OBJECT-TYPE
tmnxMDASlotNum	OBJECT-TYPE

From TIMETRA-GLOBAL-MIB

timetraSRMIBModules	OBJECT-IDENTITY
tmnxSRConfs	OBJECT-IDENTITY
tmnxSRNotifyPrefix	OBJECT-IDENTITY
tmnxSRObjs	OBJECT-IDENTITY

From TIMETRA-SAP-MIB

sapEncapValue	OBJECT-TYPE
sapPortId	OBJECT-TYPE

From TIMETRA-SERV-MIB

svcId

OBJECT-TYPE

From TIMETRA-TC-MIB

TItemDescription
TNamedItem
TNamedItemOrEmpty
TTcpUdpPort
TmnxAdminState
TmnxBfdSessOperState
TmnxIPsecTunnelTemplateId
TmnxIPsecTunnelTemplateIdOrZero
TmnxIkePolicyAuthMethod
TmnxIkePolicyOwnAuthMethod
TmnxOperState
TmnxServId

How to Use in IPNetwork Monitor

Example using tmnxIPsecTunnelNumDpdTx OID:

Select an Alcatel-Lucent/Nokia SROS service router (IPsec transform/IKE policy config status) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type tmnxIPsecTunnelNumDpdTx into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The value of tmnxIPsecTunnelNumDpdTx indicates the number of Dead-Peer-Detection packets transmitted. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
timetraIPsecMIBModule	1.3.6.1.4.1.6527.1.1.3.48			This document is the SNMP MIB module to manage and provision the Alcatel-Lucent SROS device with IPsec tunneling, encryption and other related features. Copyright 2008-2012 Alcatel-Lucent. All rights reserved. Reproduction of this document is authorized on the condition that the foregoing copyright notice is included. This SNMP MIB module (Specification) embodies Alcatel-Lucent's proprietary intellectual property. Alcatel-Lucent retains all title and ownership in the Specification, including any revisions. Alcatel-Lucent grants all interested parties a non-exclusive license to use and distribute an unmodified copy of this Specification in connection with management of Alcatel-Lucent products, and without fee, provided this copyright notice and license appear on all copies. This Specification is supplied `as is', and Alcatel-Lucent makes no warranty, either express or implied, as to the use, operation, condition, or performance of the Specification.
tmnxIPsecConformance	1.3.6.1.4.1.6527.3.1.1.48
tmnxIPsecCompliances	1.3.6.1.4.1.6527.3.1.1.48.1
tmnxIPsecCompliance	1.3.6.1.4.1.6527.3.1.1.48.1.1			The compliance statement for management of IPsec features on Alcatel-Lucent SROS series systems.
tmnxIPsecV6v1Compliance	1.3.6.1.4.1.6527.3.1.1.48.1.2			The compliance statement for management of IPsec features on Alcatel-Lucent SROS series systems.
tmnxIPsecV7v0Compliance	1.3.6.1.4.1.6527.3.1.1.48.1.3			The compliance statement for management of IPsec features on Alcatel-Lucent SROS series systems.
tmnxIPsecV8v0Compliance	1.3.6.1.4.1.6527.3.1.1.48.1.4			The compliance statement for management of IPsec features on Alcatel-Lucent SROS series systems.
tmnxIPsecV9v0Compliance	1.3.6.1.4.1.6527.3.1.1.48.1.5			The compliance statement for management of IPsec features on Alcatel-Lucent SROS series systems.
tmnxIPsecV10v0Compliance	1.3.6.1.4.1.6527.3.1.1.48.1.6			The compliance statement for management of IPsec features on Alcatel-Lucent SROS series systems.
tmnxIPsecGroups	1.3.6.1.4.1.6527.3.1.1.48.2
tmnxIPsecV6v0Group	1.3.6.1.4.1.6527.3.1.1.48.2.1			The group of objects supporting the IPsec Feature capabilities on Alcatel-Lucent SROS series systems.
tmnxIPsecMdaDpStatsV6v1Group	1.3.6.1.4.1.6527.3.1.1.48.2.2			The group of objects for IPsec Mda Data Path Statistics on Alcatel-Lucent SROS series systems.
tIPsecTnlTempGroup	1.3.6.1.4.1.6527.3.1.1.48.2.3			The group of objects for IPsec tunnel template on Alcatel-Lucent SROS series systems.
tmnxIPsecGWGroup	1.3.6.1.4.1.6527.3.1.1.48.2.4			The group of objects supporting management of IPSec gateway capabilities for SAP's on Alcatel-Lucnet SROS series systems.
tmnxIPsecNotifyObjsGroup	1.3.6.1.4.1.6527.3.1.1.48.2.5			The group of objects supporting management of IPsec notification objects on Alcatel-Lucent SROS series systems.
tmnxIPsecTnlBfdGroup	1.3.6.1.4.1.6527.3.1.1.48.2.6			The group of objects for IPsec Tunnel BFD service on Alcatel-Lucent SROS series systems.
tmnxIPsecIkeGroup	1.3.6.1.4.1.6527.3.1.1.48.2.7			The group of objects supporting management of IPSec IKE specific capabilities on Alcatel-Lucent SROS series systems.
tmnxIPsecCertGroup	1.3.6.1.4.1.6527.3.1.1.48.2.8			The group of objects supporting management of IPSec X.509 certificate specific capabilities on Alcatel-Lucent SROS series systems.
tmnxIpsecObsoletedV10v0Group	1.3.6.1.4.1.6527.3.1.1.48.2.9			The group of objects obsoleted related to management of IPSec specific capabilities on Alcatel-Lucent SROS series systems.
tmnxIPsecGWV10v0Group	1.3.6.1.4.1.6527.3.1.1.48.2.10			The group of objects supporting management of IPSec gateway capabilities for SAP's on Alcatel-Lucnet SROS series systems.
tmnxIPsecMdaDpStatsV10v0Group	1.3.6.1.4.1.6527.3.1.1.48.2.11			The group of objects for IPsec Mda Data Path Statistics on Alcatel-Lucent SROS series systems.
tmnxIPsecMdaDpGroup	1.3.6.1.4.1.6527.3.1.1.48.2.12			The group of objects for IPsec Mda Data Path Statistics on Alcatel-Lucent SROS series systems.
tmnxIPsecV10v0Group	1.3.6.1.4.1.6527.3.1.1.48.2.13			The group of additional objects for IPsec feature on Alcatel-Lucent SROS series systems in 10.0 release.
tmnxIPsecNotifGroups	1.3.6.1.4.1.6527.3.1.1.48.3
tmnxIPsecNotifGroup	1.3.6.1.4.1.6527.3.1.1.48.3.1			The group of notifications supporting IPsec on the Alcatel-Lucent SROS series systems.
tmnxIPsecObjects	1.3.6.1.4.1.6527.3.1.2.48
TIM tmnxIPsecTransformTblLastChanged	1.3.6.1.4.1.6527.3.1.2.48.1	TimeStamp	read-only	The value of tmnxIPsecTransformTblLastChanged indicates the sysUpTime at the time of the last modification to tmnxIPsecTransformTable by adding, deleting an entry or change to a writable object in the table. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value.
tmnxIPsecTransformTable	1.3.6.1.4.1.6527.3.1.2.48.2		not-accessible	Table to store the IPsec transform entries.
tmnxIPsecTransformEntry	1.3.6.1.4.1.6527.3.1.2.48.2.1		not-accessible	Information about a single IPsec transform entry.
TMN tmnxIPsecTransformId	1.3.6.1.4.1.6527.3.1.2.48.2.1.1	TmnxIPsecTransformId	not-accessible	The value of tmnxIPsecTransformId specifies the id of a transform entry and is the primary index for the table tmnxIPsecTransformTable.
ROW tmnxIPsecTransformRowStatus	1.3.6.1.4.1.6527.3.1.2.48.2.1.2	RowStatus	read-create	The tmnxIPsecTransformRowStatus object is used to create and delete rows in the tmnxIPsecTransformTable.
TIM tmnxIPsecTransformLastChanged	1.3.6.1.4.1.6527.3.1.2.48.2.1.3	TimeStamp	read-only	The value of tmnxIPsecTransformLastChanged indicates the sysUpTime at the time of the last modification of this entry. If no changes were made to the entry since the last re-initialization of the local network management subsystem, then this object contains a zero value.
TMN tmnxIPsecTransformAuthAlgorithm	1.3.6.1.4.1.6527.3.1.2.48.2.1.4	TmnxAuthAlgorithm	read-create	The value of tmnxIPsecTransformAuthAlgorithm specifies the Hashing algorithm used for the AH (Authentication Header) protocol's authentication function. If 'none' is used then AH protocol will not be used.
TMN tmnxIPsecTransformEncrAlgorithm	1.3.6.1.4.1.6527.3.1.2.48.2.1.5	TmnxEncrAlgorithm	read-create	The value of tmnxIPsecTransformEncrAlgorithm specifies the Encryption algorithm to be used for the IPsec session. Encryption only applies to ESP(Encapsulating Security Payload) configurations. If encryption is 'null', then ESP will not be used.
TIM tmnxIkePolicyTableLastChanged	1.3.6.1.4.1.6527.3.1.2.48.3	TimeStamp	read-only	The value of tmnxIkePolicyTableLastChanged indicates the sysUpTime at the time of the last modification to tmnxIkePolicyTable by adding, deleting an entry or change to a writable object in the table. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value.
tmnxIkePolicyTable	1.3.6.1.4.1.6527.3.1.2.48.4		not-accessible	Table to store the Ike policy entries.
tmnxIkePolicyEntry	1.3.6.1.4.1.6527.3.1.2.48.4.1		not-accessible	Information about a single Ike policy entry.
TMN tmnxIkePolicyId	1.3.6.1.4.1.6527.3.1.2.48.4.1.1	TmnxIkePolicyId	not-accessible	The value of tmnxIkePolicyId specifies the id of a policy entry and is the primary index for the table tmnxIkePolicyTable.
ROW tmnxIkePolicyRowStatus	1.3.6.1.4.1.6527.3.1.2.48.4.1.2	RowStatus	read-create	The tmnxIkePolicyRowStatus object is used to create and delete rows in the tmnxIkePolicyTable.
TIM tmnxIkePolicyLastChanged	1.3.6.1.4.1.6527.3.1.2.48.4.1.3	TimeStamp	read-only	The value of tmnxIkePolicyLastChanged indicates the sysUpTime at the time of the last modification of this entry. If no changes were made to the entry since the last re-initialization of the local network management subsystem, then this object contains a zero value.
TIT tmnxIkePolicyDescription	1.3.6.1.4.1.6527.3.1.2.48.4.1.4	TItemDescription	read-create	The value of tmnxIkePolicyDescription specifies the user-provided description for each tmnxIkePolicyEntry in the table tmnxIkePolicyTable.
TMN tmnxIkePolicyIkeMode	1.3.6.1.4.1.6527.3.1.2.48.4.1.5	TmnxIkePolicyIkeMode	read-create	The value of tmnxIkePolicyIkeMode specifies the mode of operation, which determines the number of messages used to establish the session.
TMN tmnxIkePolicyDHGroup	1.3.6.1.4.1.6527.3.1.2.48.4.1.6	TmnxIkePolicyDHGroup	read-create	The value of tmnxIkePolicyDHGroup specifes the Diffie-Hellman group to be used for calculating session keys which will be used in the Ike proposal.
T/F tmnxIkePolicyPFSEnabled	1.3.6.1.4.1.6527.3.1.2.48.4.1.7	TruthValue	read-create	The value of tmnxIkePolicyPFSEnabled specifies whether PFS(perfect forward secrecy) on the tunnel using this policy is enabled or not. When tmnxIkePolicyPFSDHGroup has a value of 'true', PFS is enabled.
TMN tmnxIkePolicyPFSDHGroup	1.3.6.1.4.1.6527.3.1.2.48.4.1.8	TmnxIkePolicyDHGroup	read-create	The value of tmnxIkePolicyPFSDHGroup is used only if the value of the tmnxIkePolicyPFSEnabled is 'true'. The value of tmnxIkePolicyPFSDHGroup specifies the new Diffie-hellman key exchange each time the SA(Security Association) key is renegotiated. After the SA expires, the key is forgotten and another key is generated (if the SA remains up). This means that an attacker who cracks part of the exchange can only read the part that used the key before the key changed. There is no advantage of cracking the other parts if the attacker has already cracked one.
TMN tmnxIkePolicyAuthAlgorithm	1.3.6.1.4.1.6527.3.1.2.48.4.1.9	TmnxAuthAlgorithm	read-create	The value of tmnxIkePolicyAuthAlgorithm specifies the Hashing algorithm used in the phase 1 SA.
TMN tmnxIkePolicyEncrAlgorithm	1.3.6.1.4.1.6527.3.1.2.48.4.1.10	TmnxEncrAlgorithm	read-create	The value of tmnxIkePolicyEncrAlgorithm specifies the Encryption algorithm to be used in the phase 1 SA.
U32 tmnxIkePolicyIsakmpLifeTime	1.3.6.1.4.1.6527.3.1.2.48.4.1.11	Unsigned32	read-create	The value of tmnxIkePolicyIsakmpLifeTime specifies the lifetime of the phase 1 Ike key. ISAKMP stands for Internet Security Association and Key Management Protocol
U32 tmnxIkePolicyIPsecLifeTime	1.3.6.1.4.1.6527.3.1.2.48.4.1.12	Unsigned32	read-create	The value of tmnxIkePolicyIPsecLifeTime specifies the lifetime of the phase 2 Ike key.
INT tmnxIkePolicyNatTraversal	1.3.6.1.4.1.6527.3.1.2.48.4.1.13	INTEGER	read-create	The value of tmnxIkePolicyNatTraversal specifies whether NAT-T(network address translation traversal) is 'enabled', 'disabled' or in 'forced' mode.
U32 tmnxIkePolicyNatTKeepAliveIntvl	1.3.6.1.4.1.6527.3.1.2.48.4.1.14	Unsigned32	read-create	The value of tmnxIkePolicyNatTKeepAliveIntvl specifies the keep alive interval for NAT-T. If the value of tmnxIkePolicyNatTKeepAliveIntvl is '0', then keep alives are disabled.
T/F tmnxIkePolicyNatTBehindNatOnly	1.3.6.1.4.1.6527.3.1.2.48.4.1.15	TruthValue	read-create	The value of tmnxIkePolicyNatTBehindNatOnly specifies whether the keep alive packets should be sent only when behind a NAT.
INT tmnxIkePolicyDpd	1.3.6.1.4.1.6527.3.1.2.48.4.1.16	INTEGER	read-create	The value of tmnxIkePolicyDpd specifies whether DPD (dead peer detection) is 'enable', 'disable' or in 'replyOnly' mode. The DPD vendor ID is always advertised to the peer. To the extent that the peer advertises DPD support as well, the service-router will always reply to the peer's 'Are-You-There' messages. If tmnxIkePolicyDpd object is set to 'enable' the service-router will also send its own 'Are-You-There' message to the peer at the interval specified by tmnxIkePolicyDpdInterval. If tmnxIkePolicyDpd object is set to 'disable' the service-router will never send its own 'Are-You-There' message to the peer. If tmnxIkePolicyDpd object is set to 'replyOnly' the service-router will take the peer's 'Are-You-There' message as proof of 'liveliness' and will suppress the sending of its own 'Are-You-There' messages. Once it stops receiving 'Are-You-There' messages from the peer, it will start sending its own to determine if the peer is dead. The service-router will only send an 'Are-You-There' message when the other side has been idle (no traffic was forwarded through it) since the last tmnxIkePolicyDpdInterval. If the other side is active (as determined by its traffic counters) it is assumed the peer is alive and the 'Are-You-There' message is suppressed.
U32 tmnxIkePolicyDpdInterval	1.3.6.1.4.1.6527.3.1.2.48.4.1.17	Unsigned32	read-create	The value of tmnxIkePolicyDpdInterval specifies the dead peer detection interval.
U32 tmnxIkePolicyDpdMaxRetries	1.3.6.1.4.1.6527.3.1.2.48.4.1.18	Unsigned32	read-create	The value of tmnxIkePolicyDpdMaxRetries specifies the number of retries done before the peer is determined dead.
TMN tmnxIkePolicyAuthMethod	1.3.6.1.4.1.6527.3.1.2.48.4.1.19	TmnxIkePolicyAuthMethod	read-create	The value of tmnxIkePolicyAuthMethod specifies the authentication method used with this IKE policy for the remote-peer.
TMN tmnxIkePolicyIkeVersion	1.3.6.1.4.1.6527.3.1.2.48.4.1.20	TmnxIkeVersion	read-create	The value of tmnxIkePolicyIkeVersion specifies the IKE version to be used with this IKE policy.
TMN tmnxIkePolicyOwnAuthMethod	1.3.6.1.4.1.6527.3.1.2.48.4.1.21	TmnxIkePolicyOwnAuthMethod	read-create	The value of tmnxIkePolicyOwnAuthMethod specifies the authentication method used with this IKE policy on its own side.
TIM tmnxIPsecTunnelTableLastChanged	1.3.6.1.4.1.6527.3.1.2.48.5	TimeStamp	read-only	The value of tmnxIPsecTunnelTableLastChanged indicates the sysUpTime at the time of the last modification to tmnxIPsecTunnelTable by adding, deleting an entry or change to a writable object in the table. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value.
tmnxIPsecTunnelTable	1.3.6.1.4.1.6527.3.1.2.48.6		not-accessible	Table to store the IPsec Tunnel entries.
tmnxIPsecTunnelEntry	1.3.6.1.4.1.6527.3.1.2.48.6.1		not-accessible	Information about a single IPsec Tunnel entry.
TNA tmnxIPsecTunnelName	1.3.6.1.4.1.6527.3.1.2.48.6.1.1	TNamedItem	not-accessible	The value of tmnxIPsecTunnelName specifies the name of the tunnel and is part of the index for the table tmnxIPsecTunnelTable.
ROW tmnxIPsecTunnelRowStatus	1.3.6.1.4.1.6527.3.1.2.48.6.1.2	RowStatus	read-create	The tmnxIPsecTunnelRowStatus object is used to create and delete rows in the tmnxIPsecTunnelTable.
TIM tmnxIPsecTunnelLastChanged	1.3.6.1.4.1.6527.3.1.2.48.6.1.3	TimeStamp	read-only	The value of tmnxIPsecTunnelLastChanged indicates the sysUpTime at the time of the last modification of this entry. If no changes were made to the entry since the last re-initialization of the local network management subsystem, then this object contains a zero value.
TIT tmnxIPsecTunnelDescription	1.3.6.1.4.1.6527.3.1.2.48.6.1.4	TItemDescription	read-create	The value of tmnxIPsecTunnelDescription specifies the user-provided description for each tmnxIPsecTunnelEntry in the table tmnxIPsecTunnelTable.
IPt tmnxIPsecTunnelLclGwAddrType	1.3.6.1.4.1.6527.3.1.2.48.6.1.5	InetAddressType	read-create	The value of tmnxIPsecTunnelLclGwAddrType specifies the address type of address in tmnxIPsecTunnelLclGwAddr.
IP tmnxIPsecTunnelLclGwAddr	1.3.6.1.4.1.6527.3.1.2.48.6.1.6	InetAddress	read-create	The value of tmnxIPsecTunnelLclGwAddr specifies the address of the interface on the local node of this IPsec tunnel.
IPt tmnxIPsecTunnelRemGwAddrType	1.3.6.1.4.1.6527.3.1.2.48.6.1.7	InetAddressType	read-create	The value of tmnxIPsecTunnelRemGwAddrType specifies the address type of address in tmnxIPsecTunnelRemGwAddr.
IP tmnxIPsecTunnelRemGwAddr	1.3.6.1.4.1.6527.3.1.2.48.6.1.8	InetAddress	read-create	The value of tmnxIPsecTunnelRemGwAddr specifies the address of the interface on the remote node of this IPsec tunnel.
TMN tmnxIPsecTunnelPublicSvcId	1.3.6.1.4.1.6527.3.1.2.48.6.1.9	TmnxServId	read-create	The value of tmnxIPsecTunnelPublicSvcId specifies the service-id of the tunnel delivery service. The TIMETRA-SERV-MIB::svcType of the delivery service must be 'ies (5)' or 'vprn (4)', otherwise the set request will fail with an 'inconsistentValue' error.
TMN tmnxIPsecTunnelSecurityPolicyId	1.3.6.1.4.1.6527.3.1.2.48.6.1.10	TmnxIPsecPolicyIdOrZero	read-create	The value of tmnxIPsecTunnelSecurityPolicyId specifies the IPsec security policy entry in the tmnxIPsecPolicyTable that this tunnel will use.
TMN tmnxIPsecTunnelKeyingType	1.3.6.1.4.1.6527.3.1.2.48.6.1.11	TmnxIPsecKeyingType	read-create	The value of tmnxIPsecTunnelKeyingType specifies the keying type that this tunnel will use.
TMN tmnxIPsecTunnelDynTransformId1	1.3.6.1.4.1.6527.3.1.2.48.6.1.12	TmnxIPsecTransformIdOrZero	read-create	The value of tmnxIPsecTunnelDynTransformId1 specifies the first IPsec transform entry in the table tmnxIPsecTransformTable that this tunnel will use.
TMN tmnxIPsecTunnelDynTransformId2	1.3.6.1.4.1.6527.3.1.2.48.6.1.13	TmnxIPsecTransformIdOrZero	read-create	The value of tmnxIPsecTunnelDynTransformId2 specifies the second IPsec transform entry in the table tmnxIPsecTransformTable that this tunnel will use. The value of tmnxIPsecTunnelDynTransformId2 is valid and greater than 0, only if the value of tmnxIPsecTunnelKeyingType is 'dynamic'.
TMN tmnxIPsecTunnelDynTransformId3	1.3.6.1.4.1.6527.3.1.2.48.6.1.14	TmnxIPsecTransformIdOrZero	read-create	The value of tmnxIPsecTunnelDynTransformId3 specifies the third IPsec transform entry in the table tmnxIPsecTransformTable that this tunnel will use. The value of tmnxIPsecTunnelDynTransformId3 is valid and greater than 0, only if the value of tmnxIPsecTunnelKeyingType is 'dynamic'.
TMN tmnxIPsecTunnelDynTransformId4	1.3.6.1.4.1.6527.3.1.2.48.6.1.15	TmnxIPsecTransformIdOrZero	read-create	The value of tmnxIPsecTunnelDynTransformId4 specifies the fourth IPsec transform entry in the table tmnxIPsecTransformTable that this tunnel will use. The value of tmnxIPsecTunnelDynTransformId3 is valid and greater than 0, only if the value of tmnxIPsecTunnelKeyingType is 'dynamic'.
TMN tmnxIPsecTunnelIkePolicyId	1.3.6.1.4.1.6527.3.1.2.48.6.1.16	TmnxIkePolicyIdOrZero	read-create	The object tmnxIPsecTunnelIkePolicyId specifies the IKE policy entry that this tunnel will use. The value of tmnxIPsecTunnelIkePolicyId is valid and greater than 0, only if the value of tmnxIPsecTunnelKeyingType is 'dynamic'.
OCT tmnxIPsecTunnelIkePreSharedKey	1.3.6.1.4.1.6527.3.1.2.48.6.1.17	OCTET STRING	read-create	The value of tmnxIPsecTunnelIkePreSharedKey specifies the shared secret between the two peers forming the tunnel. The value of tmnxIPsecTunnelIkePreSharedKey is a valid and non null string only if the value of tmnxIPsecTunnelKeyingType is 'dynamic'.
TMN tmnxIPsecTunnelAdminState	1.3.6.1.4.1.6527.3.1.2.48.6.1.18	TmnxAdminState	read-create	The value of tmnxIPsecTunnelAdminState specifies the administrative state of the tmnxIPsecTunnelEntry.
TMN tmnxIPsecTunnelOperState	1.3.6.1.4.1.6527.3.1.2.48.6.1.19	TmnxOperState	read-only	The value of tmnxIPsecTunnelOperState indicates the operational status of tmnxIPsecTunnelEntry.
BIT tmnxIPsecTunnelOperFlags	1.3.6.1.4.1.6527.3.1.2.48.6.1.20	Bits	read-only	The value of tmnxIPsecTunnelOperFlags indicates the reason why the tunnel is operationally down.
U32 tmnxIPsecTunnelReplayWindow	1.3.6.1.4.1.6527.3.1.2.48.6.1.21	Unsigned32	read-create	The value of tmnxIPsecTunnelReplayWindow specifies the size of the anti-replay window. If the value of tmnxIPsecTunnelReplayWindow is set to 0, then the anti-replay feature is disabled.
T/F tmnxIPsecTunnelAutoEstablish	1.3.6.1.4.1.6527.3.1.2.48.6.1.22	TruthValue	read-create	The value of tmnxIPsecTunnelAutoEstablish specifies whether to attempt to establish a phase 1 exchange automatically.
T/F tmnxIPsecTunnelBfdDesignate	1.3.6.1.4.1.6527.3.1.2.48.6.1.23	TruthValue	read-create	The value of tmnxIPsecTunnelBfdDesignate specifies whether this IPSec tunnel is the BFD designated tunnel.
TNA tmnxIPsecTunnelCertTrustAnchor	1.3.6.1.4.1.6527.3.1.2.48.6.1.24	TNamedItemOrEmpty	read-create	The value of tmnxIPsecTunnelCertTrustAnchor specifies the name for Certificate-Authority Profile name associated with this SAP IPSec tunnel certificate. An 'inconsistentValue' error is returned if this object is modified when tmnxIPsecTunnelAdminState is in 'inService' state.
STR tmnxIPsecTunnelCertFile	1.3.6.1.4.1.6527.3.1.2.48.6.1.25	DisplayString	read-create	The value of tmnxIPsecTunnelCertFile specifies the local file URL of the certifiate to be used with this SAP IPSec tunnel.
STR tmnxIPsecTunnelKeyFile	1.3.6.1.4.1.6527.3.1.2.48.6.1.26	DisplayString	read-create	The value of tmnxIPsecTunnelKeyFile specifies the key-pair file to be used for X.509 certificate authentication with this SAP IPSec tunnel.
TMN tmnxIPsecTunnelLocalIdType	1.3.6.1.4.1.6527.3.1.2.48.6.1.27	TmnxIPsecLocalIdType	read-create	The value of tmnxIPsecTunnelLocalIdType specifies the local-identifier type used for IDi or IDr for IKEv2. An 'inconsistentValue' error is returned if this object is modified when tmnxIPsecTunnelAdminState is in 'inService' state.
STR tmnxIPsecTunnelLocalIdValue	1.3.6.1.4.1.6527.3.1.2.48.6.1.28	DisplayString	read-create	The value of tmnxIPsecTunnelLocalIdValue specifies the value associated with tmnxIPsecTunnelLocalIdType object. Value is extracted from the configured certificate when tmnxIPsecTunnelLocalIdType is set to 'dn'.
T/F tmnxIPsecTunnelClearDfBit	1.3.6.1.4.1.6527.3.1.2.48.6.1.29	TruthValue	read-create	The value of tmnxIPsecTunnelClearDfBit specifies whether to clear Do not Fragment (DF) bit in the outgoing packets in this tunnel.
U32 tmnxIPsecTunnelIpMtu	1.3.6.1.4.1.6527.3.1.2.48.6.1.30	Unsigned32	read-create	The value of tmnxIPsecTunnelIpMtu specifies the MTU size for IP packets for this tunnel. A value set to zero indicates maximum supported MTU size on the SAP for this tunnel.
TMN tmnxIPsecTunnelHostISA	1.3.6.1.4.1.6527.3.1.2.48.6.1.31	TmnxHwIndexOrZero	read-only	The value of tmnxIPsecTunnelHostISA indicates the active ISA that is being used to host this IPsec tunnel. This object will have a value of zero when this tunnel is operationally down.
tmnxIPsecTunnelStatsTable	1.3.6.1.4.1.6527.3.1.2.48.7		not-accessible	Table to store IPsec Tunnel statistics
tmnxIPsecTunnelStatsEntry	1.3.6.1.4.1.6527.3.1.2.48.7.1		not-accessible	Statistics for a single IPsec Tunnel.
INT tmnxIPsecTunnelIsakmpState	1.3.6.1.4.1.6527.3.1.2.48.7.1.1	INTEGER	read-only	The value of tmnxIPsecTunnelIsakmpState indicates the state of phase 1 IPsec negotiation.
TIM tmnxIPsecTunnelIsakmpEstabTime	1.3.6.1.4.1.6527.3.1.2.48.7.1.2	TimeStamp	read-only	The value of tmnxIPsecTunnelIsakmpEstabTime indicates the sysUpTime at the time the IPsec phase 1 negotiation completed.
U32 tmnxIPsecTunnelIsakmpNegLifeTime	1.3.6.1.4.1.6527.3.1.2.48.7.1.3	Unsigned32	read-only	The value of tmnxIPsecTunnelIsakmpNegLifeTime indicates the lifetime negotiated for phase1 Ike key.
C32 tmnxIPsecTunnelNumDpdTxEx	1.3.6.1.4.1.6527.3.1.2.48.7.1.4	Counter32	read-only	The value of tmnxIPsecTunnelNumDpdTx indicates the number of Dead-Peer-Detection packets transmitted.
C32 tmnxIPsecTunnelNumDpdRx	1.3.6.1.4.1.6527.3.1.2.48.7.1.5	Counter32	read-only	The value of tmnxIPsecTunnelNumDpdRx indicates the number of Dead-Peer-Detection packets received.
C32 tmnxIPsecTunnelNumDpdAckTx	1.3.6.1.4.1.6527.3.1.2.48.7.1.6	Counter32	read-only	The value of tmnxIPsecTunnelNumDpdAckTx indicates the number of Dead-Peer-Detection acknowledgement packets transmitted.
C32 tmnxIPsecTunnelNumDpdAckRx	1.3.6.1.4.1.6527.3.1.2.48.7.1.7	Counter32	read-only	The value of tmnxIPsecTunnelNumDpdAckRx indicates the number of Dead-Peer-Detection acknowledgement packets received.
C32 tmnxIPsecTunnelNumExpRx	1.3.6.1.4.1.6527.3.1.2.48.7.1.8	Counter32	read-only	The value of tmnxIPsecTunnelNumExpRx indicates the number of DPD R-U-THERE packets that have not been acknowledged.
C32 tmnxIPsecTunnelNumInvalidDpdRx	1.3.6.1.4.1.6527.3.1.2.48.7.1.9	Counter32	read-only	The value of tmnxIPsecTunnelNumInvalidDpdRx indicates the number of malformed DPD R-U-THERE acknowledgement packets received.
C32 tmnxIPsecTunnelNumCtrlPktsTx	1.3.6.1.4.1.6527.3.1.2.48.7.1.10	Counter32	read-only	The value of tmnxIPsecTunnelNumCtrlPktsTx indicates the number of control packets this IPsec Tunnel has sent.
C32 tmnxIPsecTunnelNumCtrlPktsRx	1.3.6.1.4.1.6527.3.1.2.48.7.1.11	Counter32	read-only	The value of tmnxIPsecTunnelNumCtrlPktsRx indicates the number of control packets this IPsec Tunnel has received.
C32 tmnxIPsecTunnelNumCtrlTxErrors	1.3.6.1.4.1.6527.3.1.2.48.7.1.12	Counter32	read-only	The value of tmnxIPsecTunnelNumCtrlTxErrors indicates the number of control packet transmit errors.
C32 tmnxIPsecTunnelNumCtrlRxErrors	1.3.6.1.4.1.6527.3.1.2.48.7.1.13	Counter32	read-only	The value of tmnxIPsecTunnelNumCtrlRxErrors indicates the number of control packet receive errors.
TIM tmnxIPsecPolicyTableLastChanged	1.3.6.1.4.1.6527.3.1.2.48.8	TimeStamp	read-only	The value of tmnxIPsecPolicyTableLastChanged indicates the sysUpTime at the time of the last modification to tmnxIPsecPolicyTable by adding, deleting an entry or change to a writable object in the table. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value.
tmnxIPsecPolicyTable	1.3.6.1.4.1.6527.3.1.2.48.9		not-accessible	Table to store the IPsec Security Policy entries.
tmnxIPsecPolicyEntry	1.3.6.1.4.1.6527.3.1.2.48.9.1		not-accessible	Information about a single IPsec Security Policy entry.
TMN tmnxIPsecPolicyId	1.3.6.1.4.1.6527.3.1.2.48.9.1.1	TmnxIPsecPolicyId	not-accessible	The value of tmnxIPsecPolicyId specifies the id of a Security Policy entry and is the primary index for the table.
ROW tmnxIPsecPolicyRowStatus	1.3.6.1.4.1.6527.3.1.2.48.9.1.2	RowStatus	read-create	The tmnxIPsecPolicyRowStatus object is used to create and delete rows in the tmnxIPsecPolicyTable.
TIM tmnxIPsecPolicyLastChanged	1.3.6.1.4.1.6527.3.1.2.48.9.1.3	TimeStamp	read-only	The value of tmnxIPsecPolicyLastChanged indicates the sysUpTime at the time of the last modification of this entry. If no changes were made to the entry since the last re-initialization of the local network management subsystem, then this object contains a zero value.
TIM tmnxIPsecPlcyParamsTblLastChangd	1.3.6.1.4.1.6527.3.1.2.48.10	TimeStamp	read-only	The value of tmnxIPsecPlcyParamsTblLastChangd indicates the sysUpTime at the time of the last modification to tmnxIPsecPolicyParamsTable by adding, deleting an entry or change to a writable object in the table. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value.
tmnxIPsecPolicyParamsTable	1.3.6.1.4.1.6527.3.1.2.48.11		not-accessible	Table to store the IPsec Security Policy Params entries.
tmnxIPsecPolicyParamsEntry	1.3.6.1.4.1.6527.3.1.2.48.11.1		not-accessible	Information about a single IPsec Security policy params entry.
U32 tmnxIPsecPolicyParamsId	1.3.6.1.4.1.6527.3.1.2.48.11.1.1	Unsigned32	not-accessible	The value of tmnxIPsecPolicyParamsId specifies the id of an IPsec policy params entry and is part of the index for the tmnxIPsecPolicyParamsTable.
ROW tmnxIPsecPolicyParamsRowStatus	1.3.6.1.4.1.6527.3.1.2.48.11.1.2	RowStatus	read-create	The tmnxIPsecPolicyParamsRowStatus object is used to create and delete rows in the tmnxIPsecPolicyParamsTable.
TIM tmnxIPsecPolicyParamsLastChanged	1.3.6.1.4.1.6527.3.1.2.48.11.1.3	TimeStamp	read-only	The value of tmnxIPsecPolicyParamsLastChanged indicates the sysUpTime at the time of the last modification of this entry. If no changes were made to the entry since the last re-initialization of the local network management subsystem, then this object contains a zero value.
T/F tmnxIPsecPolicyParamsLclAddrAny	1.3.6.1.4.1.6527.3.1.2.48.11.1.4	TruthValue	read-create	The value of tmnxIPsecPolicyParamsLclAddrAny specifies whether the ip address on the vpn side can be any ip address. If the value is 'true' then local ip address can be any ip address. Please look at the following chart for more details: tmnxIPsecPolicyParamsLclAddrAny true false ----------------------------------------------------------------- tmnxIPsecPolicyParamsLclAddrType unknown unknown or ipv4 tmnxIPsecPolicyParamsLclAddr ''H ''H or valid ipv4 tmnxIPsecPolicyParamsLclAPrefLen 0 0 to 32
IPt tmnxIPsecPolicyParamsLclAddrType	1.3.6.1.4.1.6527.3.1.2.48.11.1.5	InetAddressType	read-create	The value of tmnxIPsecPolicyParamsLclAddrType specifies the address type of address in tmnxIPsecPolicyParamsLclAddr. If the value of tmnxIPsecPolicyParamsLclAddrAny is 'true' then the value of tmnxIPsecPolicyParamsLclAddrType will be 'unknown'.
IP tmnxIPsecPolicyParamsLclAddr	1.3.6.1.4.1.6527.3.1.2.48.11.1.6	InetAddress	read-create	The value of tmnxIPsecPolicyParamsLclAddr specifies the ip address on the vpn side. If the value of tmnxIPsecPolicyParamsLclAddrAny is 'true' then the value of tmnxIPsecPolicyParamsLclAddr will be empty(''H).
ADR tmnxIPsecPolicyParamsLclAPrefLen	1.3.6.1.4.1.6527.3.1.2.48.11.1.7	InetAddressPrefixLength	read-create	The value of tmnxIPsecPolicyParamsLclAPrefLen specifies the number of bits to match of the tmnxIPsecPolicyParamsLclAddr. If the value of tmnxIPsecPolicyParamsLclAddrAny is 'true' then the value of tmnxIPsecPolicyParamsLclAPrefLen will be 0.
T/F tmnxIPsecPolicyParamsRemAddrAny	1.3.6.1.4.1.6527.3.1.2.48.11.1.8	TruthValue	read-create	The value of tmnxIPsecPolicyParamsRemAddrAny specifies whether the ip address on the tunnel side can be any ip address. If the value is 'true' then remote ip address can be any ip address. Please look at the following chart for more details: tmnxIPsecPolicyParamsLclAddrAny true false ----------------------------------------------------------------- tmnxIPsecPolicyParamsRemAddrType unknown unknown or ipv4 tmnxIPsecPolicyParamsRemAddr ''H ''H or valid ipv4 tmnxIPsecPolicyParamsRemAPrefLen 0 0 to 32
IPt tmnxIPsecPolicyParamsRemAddrType	1.3.6.1.4.1.6527.3.1.2.48.11.1.9	InetAddressType	read-create	The value of tmnxIPsecPolicyParamsRemAddrType specifies the address type of address in tmnxIPsecPolicyParamsRemAddr. If the value of tmnxIPsecPolicyParamsRemAddrAny is 'true' then the value of tmnxIPsecPolicyParamsRemAddrType will be 'unknown'.
IP tmnxIPsecPolicyParamsRemAddr	1.3.6.1.4.1.6527.3.1.2.48.11.1.10	InetAddress	read-create	The value of tmnxIPsecPolicyParamsRemAddr specifies the ip address on the tunnel side. If the value of tmnxIPsecPolicyParamsRemAddrAny is 'true' then the value of tmnxIPsecPolicyParamsRemAddr will be empty(''H).
ADR tmnxIPsecPolicyParamsRemAPrefLen	1.3.6.1.4.1.6527.3.1.2.48.11.1.11	InetAddressPrefixLength	read-create	The value of tmnxIPsecPolicyParamsRemAPrefLen specifies the number of bits to match of the tmnxIPsecPolicyParamsRemAddr. If the value of tmnxIPsecPolicyParamsRemAddrAny is 'true' then the value of tmnxIPsecPolicyParamsRemAPrefLen will be 0.
TIM tmnxIPsecSATableLastChanged	1.3.6.1.4.1.6527.3.1.2.48.12	TimeStamp	read-only	The value of tmnxIPsecSATableLastChanged indicates the sysUpTime at the time of the last modification to tmnxIPsecSATable by adding, deleting an entry or change to a writable object in the table. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value.
tmnxIPsecSATable	1.3.6.1.4.1.6527.3.1.2.48.13		not-accessible	Table to store the IPsec manual and dynamic SA entries.
tmnxIPsecSAEntry	1.3.6.1.4.1.6527.3.1.2.48.13.1		not-accessible	Information about a single IPsec SA entry.
U32 tmnxIPsecSAId	1.3.6.1.4.1.6527.3.1.2.48.13.1.1	Unsigned32	not-accessible	The value of tmnxIPsecSAId specifies the id of an SA entry and is part of the index for the tmnxIPsecSATable.
U32 tmnxIPsecSAIndex	1.3.6.1.4.1.6527.3.1.2.48.13.1.2	Unsigned32	not-accessible	The value of tmnxIPsecSAIndex specifies an additional index to uniquely indentify the SA entry in the tmnxIPsecSATable. The value of tmnxIPsecSAIndex is limited to a value of '1' when tmnxIPsecTunnelKeyingType corresponding to the tunnel specified tmnxIPsecTunnelName is set to 'static'.
TMN tmnxIPsecSADirection	1.3.6.1.4.1.6527.3.1.2.48.13.1.3	TmnxIPsecDirection	not-accessible	The value of tmnxIPsecSADirection specifies the direction on the IPsec tunnel to which this SA entry can be applied. The value of tmnxIPsecSADirection is also part of the index for the table tmnxIPsecSATable
ROW tmnxIPsecSARowStatus	1.3.6.1.4.1.6527.3.1.2.48.13.1.4	RowStatus	read-create	The tmnxIPsecSARowStatus object is used to create and delete rows in the tmnxIPsecSATable. When creating an entry in tmnxIPsecSATable, the value of tmnxIPsecSARowStatus must be 'createAndGo' and the objects tmnxIPsecSAEncryptionKey, tmnxIPsecSAAuthenticationKey, tmnxIPsecSASpi, tmnxIPsecSAManualTransformId are required to be set in the same request.
TIM tmnxIPsecSALastChanged	1.3.6.1.4.1.6527.3.1.2.48.13.1.5	TimeStamp	read-only	The value of tmnxIPsecSALastChanged indicates the sysUpTime at the time of the last modification of this entry. If no changes were made to the entry since the last re-initialization of the local network management subsystem, then this object contains a zero value.
TMN tmnxIPsecSAType	1.3.6.1.4.1.6527.3.1.2.48.13.1.6	TmnxIPsecKeyingType	read-only	The value of tmnxIPsecSAType indicates whether this SA entry is created manually by the user or dynamically by the IPsec sub-system.
OCT tmnxIPsecSAEncryptionKey	1.3.6.1.4.1.6527.3.1.2.48.13.1.7	OCTET STRING	read-create	The value of tmnxIPsecSAEncryptionKey specifies the key used for the encryption algorithm defined by the tmnxIPsecTransformEncrAlgorithm in the IPsec transform indexed by tmnxIPsecSAManualTransformId. The length of the key must match the length required by the encryption algorithm. If a key of another length is set, the request will fail with an 'inconsistentValue' error. There is no default value for tmnxIPsecSAEncryptionKey and this is a required object when creating an entry in tmnxIPsecSATable. If tmnxIPsecSAEncryptionKey is not specified when creating an entry, the request will fail with an 'inconsistentValue' error.
OCT tmnxIPsecSAAuthenticationKey	1.3.6.1.4.1.6527.3.1.2.48.13.1.8	OCTET STRING	read-create	The value of tmnxIPsecSAAuthenticationKey specifies the key used for the authentication algorithm defined by the tmnxIPsecTransformAuthAlgorithm in the IPsec transform indexed by tmnxIPsecSAManualTransformId. The length of the key must match the length required by the authentication algorithm. If a key of another length is set, the request will fail with an 'inconsistentValue' error. There is no default value for tmnxIPsecSAAuthenticationKey and this is a required object when creating an entry in tmnxIPsecSATable. If tmnxIPsecSAAuthenticationKey is not specified when creating an entry, the request will fail with an 'inconsistentValue' error.
U32 tmnxIPsecSASpi	1.3.6.1.4.1.6527.3.1.2.48.13.1.9	Unsigned32	read-create	The value of tmnxIPsecSASpi specifies the SPI (Security Parameter Index) used to lookup the instruction to verify and decrypt the incoming IPsec packets when the value of tmnxIPsecSADirection is 'inbound'. The value of tmnxIPsecSASpi specifies the SPI that will be used in the encoding of the outgoing packets when the value of tmnxIPsecSADirection is 'outbound'. The remote node can use this SPI to lookup the instruction to verify and decrypt the packet. There is no default value for tmnxIPsecSASpi and this is a required object when creating an entry in tmnxIPsecSATable. If tmnxIPsecSAAuthenticationKey is not specified when creating an entry, the request will fail with an 'inconsistentValue' error.
TMN tmnxIPsecSAManualTransformId	1.3.6.1.4.1.6527.3.1.2.48.13.1.10	TmnxIPsecTransformIdOrZero	read-create	The value of tmnxIPsecSAManualTransformId specifies the transform entry that will be used by this SA entry. This object should be specified for all the entries created by the user which are manual SAs. If the value of tmnxIPsecSAType is 'dynamic', then the value of tmnxIPsecSAManualTransformId is irrelevant and will be zero. There is no default value for tmnxIPsecSAManualTransformId and this is a required object when creating an entry in tmnxIPsecSATable. If tmnxIPsecSAManualTransformId is not specified when creating an entry, the request will fail with an 'inconsistentValue' error.
TMN tmnxIPsecSAAuthAlgorithm	1.3.6.1.4.1.6527.3.1.2.48.13.1.11	TmnxAuthAlgorithm	read-only	The value of tmnxIPsecSAAuthAlgorithm indicates the authentication algorithm used with this SA.
TMN tmnxIPsecSAEncrAlgorithm	1.3.6.1.4.1.6527.3.1.2.48.13.1.12	TmnxEncrAlgorithm	read-only	The value of tmnxIPsecSAEncrAlgorithm indicates the encryption algorithm used with this SA.
STO tmnxIPsecSAStorageType	1.3.6.1.4.1.6527.3.1.2.48.13.1.13	StorageType	read-only	The value of tmnxIPsecSAStorageType indicates how the row is stored. Entries with tmnxIPsecSAStorageType of 'read-only' are dynamic SAs and are created by the IPsec sub-system and cannot be modified or destroyed. All the entries created by the user are manual SAs and will have the tmnxIPsecSAStorageType as 'nonVolatile'.
TIM tmnxIPsecSAEstablishedTime	1.3.6.1.4.1.6527.3.1.2.48.13.1.14	TimeStamp	read-only	The value of tmnxIPsecSAEstablishedTime indicates the sysUpTime at the time the IPsec phase 2 negotiation completed.
U32 tmnxIPsecSANegotiatedLifeTime	1.3.6.1.4.1.6527.3.1.2.48.13.1.15	Unsigned32	read-only	The value of tmnxIPsecSANegotiatedLifeTime indicates the lifetime negotiated for phase2 Ike key.
tmnxIPsecSAStatsTable	1.3.6.1.4.1.6527.3.1.2.48.14		not-accessible	Table to retrieve the IPsec SA Statistics entries.
tmnxIPsecSAStatsEntry	1.3.6.1.4.1.6527.3.1.2.48.14.1		not-accessible	Information about a single IPsec SA Statistics entry.
C64 tmnxIPsecSAStatsBytesProcessed	1.3.6.1.4.1.6527.3.1.2.48.14.1.1	Counter64	read-only	The value of tmnxIPsecSAStatsBytesProcessed indicates the number of bytes successfully processed for this SA.
C32 tmnxIPsecSAStatsBytesProcLow32	1.3.6.1.4.1.6527.3.1.2.48.14.1.2	Counter32	read-only	The value of tmnxIPsecSAStatsBytesProcLow32 indicates the lower 32 bits of the value of tmnxIPsecSAStatsBytesProcessed.
C32 tmnxIPsecSAStatsBytesProcHigh32	1.3.6.1.4.1.6527.3.1.2.48.14.1.3	Counter32	read-only	The value of tmnxIPsecSAStatsBytesProcHigh32 indicates the higher 32 bits of the value of tmnxIPsecSAStatsBytesProcessed.
C64 tmnxIPsecSAStatsPktsProcessed	1.3.6.1.4.1.6527.3.1.2.48.14.1.4	Counter64	read-only	The value of tmnxIPsecSAStatsPktsProcessed indicates the number of packets successfully processed for this SA.
C32 tmnxIPsecSAStatsPktsProcLow32	1.3.6.1.4.1.6527.3.1.2.48.14.1.5	Counter32	read-only	The value of tmnxIPsecSAStatsPktsProcLow32 indicates the lower 32 bits of the value of tmnxIPsecSAStatsPktsProcessed.
C32 tmnxIPsecSAStatsPktsProcHigh32	1.3.6.1.4.1.6527.3.1.2.48.14.1.6	Counter32	read-only	The value of tmnxIPsecSAStatsPktsProcHigh32 indicates the higher 32 bits of the value of tmnxIPsecSAStatsPktsProcessed.
C32 tmnxIPsecSAStatsCryptoErrors	1.3.6.1.4.1.6527.3.1.2.48.14.1.7	Counter32	read-only	The value of tmnxIPsecSAStatsCryptoErrors indicates the number of crypto errors encountered on this SA. The crypto errors include errors on packets where protocol does not match or if the check on authentication header length failed.
C32 tmnxIPsecSAStatsReplayErrors	1.3.6.1.4.1.6527.3.1.2.48.14.1.8	Counter32	read-only	The value of tmnxIPsecSAStatsReplayErrors indicates the number of replay errors encountered on this SA.
C32 tmnxIPsecSAStatsSAErrors	1.3.6.1.4.1.6527.3.1.2.48.14.1.9	Counter32	read-only	The value of tmnxIPsecSAStatsSAErrors indicates the number of SA errors encountered on this SA. The SA errors include sequence number failure, invalid SA, ploicy version mismatch, illegal authentication algorithm, expanded packet too big, illegal configured algorithm and ttl decrement error.
C32 tmnxIPsecSAStatsPolicyErrors	1.3.6.1.4.1.6527.3.1.2.48.14.1.10	Counter32	read-only	The value of tmnxIPsecSAStatsPolicyErrors indicates the number of policy errors encountered on this SA. The policy errors include bundled SA, selector check and policy direction error.
tmnxIPsecMdaDpStatsTable	1.3.6.1.4.1.6527.3.1.2.48.15		not-accessible	Table to retrieve the IPsec Mda Data Path Statistics entries.
tmnxIPsecMdaDpStatsEntry	1.3.6.1.4.1.6527.3.1.2.48.15.1		not-accessible	Information about a single IPsec Mda Data Path Statistics entry.
C64 tmnxIPsecMdaDpStatsEncryptPkts	1.3.6.1.4.1.6527.3.1.2.48.15.1.1	Counter64	read-only	The value of tmnxIPsecMdaDpStatsEncryptPkts indicates the number of packets encrypted by the IPsec data path.
C32 tmnxIPsecMdaDpStatsEncryptPktsLow32	1.3.6.1.4.1.6527.3.1.2.48.15.1.2	Counter32	read-only	The value of tmnxIPsecMdaDpStatsEncryptPktsLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpStatsEncryptPkts.
C32 tmnxIPsecMdaDpStatsEncryptPktsHigh32	1.3.6.1.4.1.6527.3.1.2.48.15.1.3	Counter32	read-only	The value of tmnxIPsecMdaDpStatsEncryptPktsHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpStatsEncryptPkts.
C64 tmnxIPsecMdaDpStatsEncryptBytes	1.3.6.1.4.1.6527.3.1.2.48.15.1.4	Counter64	read-only	The value of tmnxIPsecMdaDpStatsEncryptBytes indicates the number of bytes encrypted by the IPsec data path.
C32 tmnxIPsecMdaDpStatsEncryptBytesLow32	1.3.6.1.4.1.6527.3.1.2.48.15.1.5	Counter32	read-only	The value of tmnxIPsecMdaDpStatsEncryptBytesLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpStatsEncryptBytes.
C32 tmnxIPsecMdaDpStatsEncryptBytesHigh32	1.3.6.1.4.1.6527.3.1.2.48.15.1.6	Counter32	read-only	The value of tmnxIPsecMdaDpStatsEncryptBytesHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpStatsEncryptBytes.
C64 tmnxIPsecMdaDpStatsDecryptPkts	1.3.6.1.4.1.6527.3.1.2.48.15.1.7	Counter64	read-only	The value of tmnxIPsecMdaDpStatsDecryptPkts indicates the number of packets encrypted by the IPsec data path.
C32 tmnxIPsecMdaDpStatsDecryptPktsLow32	1.3.6.1.4.1.6527.3.1.2.48.15.1.8	Counter32	read-only	The value of tmnxIPsecMdaDpStatsDecryptPktsLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpStatsDecryptPkts.
C32 tmnxIPsecMdaDpStatsDecryptPktsHigh32	1.3.6.1.4.1.6527.3.1.2.48.15.1.9	Counter32	read-only	The value of tmnxIPsecMdaDpStatsDecryptPktsHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpStatsDecryptPkts.
C64 tmnxIPsecMdaDpStatsDecryptBytes	1.3.6.1.4.1.6527.3.1.2.48.15.1.10	Counter64	read-only	The value of tmnxIPsecMdaDpStatsDecryptBytes indicates the number of bytes encrypted by the IPsec data path.
C32 tmnxIPsecMdaDpStatsDecryptBytesLow32	1.3.6.1.4.1.6527.3.1.2.48.15.1.11	Counter32	read-only	The value of tmnxIPsecMdaDpStatsDecryptBytesLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpStatsDecryptBytes.
C32 tmnxIPsecMdaDpStatsDecryptBytesHigh32	1.3.6.1.4.1.6527.3.1.2.48.15.1.12	Counter32	read-only	The value of tmnxIPsecMdaDpStatsDecryptBytesHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpStatsDecryptBytes.
C32 tmnxIPsecMdaDpStatsTxPktErrs	1.3.6.1.4.1.6527.3.1.2.48.15.1.13	Counter32	read-only	The value of tmnxIPsecMdaDpStatsTxPktErrs indicates the number of packets transmit failures by the IPsec data path.
C64 tmnxIPsecMdaDpStatsOutBDropPkts	1.3.6.1.4.1.6527.3.1.2.48.15.1.14	Counter64	read-only	The value of tmnxIPsecMdaDpStatsOutBDropPkts indicates the number of packets dropped before and during outbound (encryption) processing by the IPsec data path.
C32 tmnxIPsecMdaDpStatsOutBDropPktsLow32	1.3.6.1.4.1.6527.3.1.2.48.15.1.15	Counter32	read-only	The value of tmnxIPsecMdaDpStatsOutBDropPktsLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpStatsOutBDropPkts.
C32 tmnxIPsecMdaDpStatsOutBDropPktsHigh32	1.3.6.1.4.1.6527.3.1.2.48.15.1.16	Counter32	read-only	The value of tmnxIPsecMdaDpStatsOutBDropPktsHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpStatsOutBDropPkts.
C64 tmnxIPsecMdaDpStatsOutBSAMisses	1.3.6.1.4.1.6527.3.1.2.48.15.1.17	Counter64	read-only	The value of tmnxIPsecMdaDpStatsOutBSAMisses indicates the number of packets dropped before outbound (encryption) processing by the IPsec data path due to no SA (security association) present.
C32 tmnxIPsecMdaDpStatsOutBSAMissesLow32	1.3.6.1.4.1.6527.3.1.2.48.15.1.18	Counter32	read-only	The value of tmnxIPsecMdaDpStatsOutBSAMissesLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpStatsOutBSAMisses.
C32 tmnxIPsecMdaDpStatsOutBSAMissesHigh32	1.3.6.1.4.1.6527.3.1.2.48.15.1.19	Counter32	read-only	The value of tmnxIPsecMdaDpStatsOutBSAMissesHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpStatsOutBSAMisses.
C32 tmnxIPsecMdaDpStatsOutBPolicyEntryMisses	1.3.6.1.4.1.6527.3.1.2.48.15.1.20	Counter32	read-only	The value of tmnxIPsecMdaDpStatsOutBPolicyEntryMisses indicates the number of packets dropped before outbound (encryption) processing by the IPsec data path due to no matching Policy Entry.
C64 tmnxIPsecMdaDpStatsInBDropPkts	1.3.6.1.4.1.6527.3.1.2.48.15.1.21	Counter64	read-only	The value of tmnxIPsecMdaDpStatsInBDropPkts indicates the number of packets dropped before and during inbound (decryption) processing by the IPsec data path.
C32 tmnxIPsecMdaDpStatsInBDropPktsLow32	1.3.6.1.4.1.6527.3.1.2.48.15.1.22	Counter32	read-only	The value of tmnxIPsecMdaDpStatsInBDropPktsLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpStatsInBDropPkts.
C32 tmnxIPsecMdaDpStatsInBDropPktsHigh32	1.3.6.1.4.1.6527.3.1.2.48.15.1.23	Counter32	read-only	The value of tmnxIPsecMdaDpStatsInBDropPktsHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpStatsInBDropPkts.
C64 tmnxIPsecMdaDpStatsInBSAMisses	1.3.6.1.4.1.6527.3.1.2.48.15.1.24	Counter64	read-only	The value of tmnxIPsecMdaDpStatsInBSAMisses indicates the number of packets dropped before inbound (decryption) processing by the IPsec data path due to no SA (security association) present.
C32 tmnxIPsecMdaDpStatsInBSAMissesLow32	1.3.6.1.4.1.6527.3.1.2.48.15.1.25	Counter32	read-only	The value of tmnxIPsecMdaDpStatsInBSAMissesLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpStatsInBSAMisses.
C32 tmnxIPsecMdaDpStatsInBSAMissesHigh32	1.3.6.1.4.1.6527.3.1.2.48.15.1.26	Counter32	read-only	The value of tmnxIPsecMdaDpStatsInBSAMissesHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpStatsInBSAMisses.
C32 tmnxIPsecMdaDpStatsInBIPDstSrcMismatches	1.3.6.1.4.1.6527.3.1.2.48.15.1.27	Counter32	read-only	The value of tmnxIPsecMdaDpStatsInBIPDstSrcMismatches indicates the number of packets dropped before inbound (decryption) processing by the IPsec data path due to the received packet's outer IP destination or source address does not match the Tunnel's local or peer gateway address.
C64 tmnxIPsecMdaDpInFragments	1.3.6.1.4.1.6527.3.1.2.48.15.1.28	Counter64	read-only	The value of tmnxIPsecMdaDpInFragments indicates the number of fragments received by the IPsec data path.
C32 tmnxIPsecMdaDpInFragmentsLow32	1.3.6.1.4.1.6527.3.1.2.48.15.1.29	Counter32	read-only	The value of tmnxIPsecMdaDpInFragmentsLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpInFragments.
C32 tmnxIPsecMdaDpInFragmentsHigh32	1.3.6.1.4.1.6527.3.1.2.48.15.1.30	Counter32	read-only	The value of tmnxIPsecMdaDpInFragmentsHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpInFragments.
C64 tmnxIPsecMdaDpPktsReassem	1.3.6.1.4.1.6527.3.1.2.48.15.1.31	Counter64	read-only	The value of tmnxIPsecMdaDpPktsReassem indicates the number of packets reassembled by the IPsec data path.
C32 tmnxIPsecMdaDpPktsReassemLow32	1.3.6.1.4.1.6527.3.1.2.48.15.1.32	Counter32	read-only	The value of tmnxIPsecMdaDpPktsReassemLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpPktsReassem.
C32 tmnxIPsecMdaDpPktsReassemHigh32	1.3.6.1.4.1.6527.3.1.2.48.15.1.33	Counter32	read-only	The value of tmnxIPsecMdaDpPktsReassemHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpPktsReassem.
C64 tmnxIPsecMdaDpFragDropTime	1.3.6.1.4.1.6527.3.1.2.48.15.1.34	Counter64	read-only	The value of tmnxIPsecMdaDpFragDropTime indicates the number of fragments dropped due to time-out by the IPsec data path.
C32 tmnxIPsecMdaDpFragDropTimeLow32	1.3.6.1.4.1.6527.3.1.2.48.15.1.35	Counter32	read-only	The value of tmnxIPsecMdaDpFragDropTimeLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpFragDropTime.
C32 tmnxIPsecMdaDpFragDropTimeHigh32	1.3.6.1.4.1.6527.3.1.2.48.15.1.36	Counter32	read-only	The value of tmnxIPsecMdaDpFragDropTimeHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpFragDropTime.
C64 tmnxIPsecMdaDpFragDropped	1.3.6.1.4.1.6527.3.1.2.48.15.1.37	Counter64	read-only	The value of tmnxIPsecMdaDpFragDropped indicates the number of total fragments dropped by the IPsec data path.
C32 tmnxIPsecMdaDpFragDroppedLow32	1.3.6.1.4.1.6527.3.1.2.48.15.1.38	Counter32	read-only	The value of tmnxIPsecMdaDpFragDroppedLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpFragDropped.
C32 tmnxIPsecMdaDpFragDroppedHigh32	1.3.6.1.4.1.6527.3.1.2.48.15.1.39	Counter32	read-only	The value of tmnxIPsecMdaDpFragDroppedHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpFragDropped.
C64 tmnxIPsecMdaDpGreTnlInPkts	1.3.6.1.4.1.6527.3.1.2.48.15.1.40	Counter64	read-only	The value of tmnxIPsecMdaDpGreTnlInPkts indicates the number of packets received by the GRE tunnel data path.
C32 tmnxIPsecMdaDpGreTnlInPktsLo	1.3.6.1.4.1.6527.3.1.2.48.15.1.41	Counter32	read-only	The value of tmnxIPsecMdaDpGreTnlInPktsLo indicates the lower 32 bits of the number of packets received by the GRE tunnel data path.
C32 tmnxIPsecMdaDpGreTnlInPktsHi	1.3.6.1.4.1.6527.3.1.2.48.15.1.42	Counter32	read-only	The value of tmnxIPsecMdaDpGreTnlInPktsHi indicates the higher 32 bits of the number of packets received by the GRE tunnel data path.
C64 tmnxIPsecMdaDpGreTnlInBytes	1.3.6.1.4.1.6527.3.1.2.48.15.1.43	Counter64	read-only	The value of tmnxIPsecMdaDpGreTnlInBytes indicates the number of packets received by the GRE tunnel data path.
C32 tmnxIPsecMdaDpGreTnlInBytesLo	1.3.6.1.4.1.6527.3.1.2.48.15.1.44	Counter32	read-only	The value of tmnxIPsecMdaDpGreTnlInBytesLo indicates the lower 32 bits of the number of packets received by the GRE tunnel data path.
C32 tmnxIPsecMdaDpGreTnlInBytesHi	1.3.6.1.4.1.6527.3.1.2.48.15.1.45	Counter32	read-only	The value of tmnxIPsecMdaDpGreTnlInBytesHi indicates the higher 32 bits of the number of packets received by the GRE tunnel data path.
C64 tmnxIPsecMdaDpGreTnlInErrs	1.3.6.1.4.1.6527.3.1.2.48.15.1.46	Counter64	read-only	The value of tmnxIPsecMdaDpGreTnlInErrs indicates the number of packets received by the GRE tunnel data path.
C32 tmnxIPsecMdaDpGreTnlInErrsLo	1.3.6.1.4.1.6527.3.1.2.48.15.1.47	Counter32	read-only	The value of tmnxIPsecMdaDpGreTnlInErrsLo indicates the lower 32 bits of the number of packets received by the GRE tunnel data path.
C32 tmnxIPsecMdaDpGreTnlInErrsHi	1.3.6.1.4.1.6527.3.1.2.48.15.1.48	Counter32	read-only	The value of tmnxIPsecMdaDpGreTnlInErrsHi indicates the higher 32 bits of the number of packets received by the GRE tunnel data path.
C64 tmnxIPsecMdaDpGreTnlOutPkts	1.3.6.1.4.1.6527.3.1.2.48.15.1.49	Counter64	read-only	The value of tmnxIPsecMdaDpGreTnlOutPkts indicates the number of packets received by the GRE tunnel data path.
C32 tmnxIPsecMdaDpGreTnlOutPktsLo	1.3.6.1.4.1.6527.3.1.2.48.15.1.50	Counter32	read-only	The value of tmnxIPsecMdaDpGreTnlOutPktsLo indicates the lower 32 bits of the number of packets received by the GRE tunnel data path.
C32 tmnxIPsecMdaDpGreTnlOutPktsHi	1.3.6.1.4.1.6527.3.1.2.48.15.1.51	Counter32	read-only	The value of tmnxIPsecMdaDpGreTnlOutPktsHi indicates the higher 32 bits of the number of packets received by the GRE tunnel data path.
C64 tmnxIPsecMdaDpGreTnlOutBytes	1.3.6.1.4.1.6527.3.1.2.48.15.1.52	Counter64	read-only	The value of tmnxIPsecMdaDpGreTnlOutBytes indicates the number of packets received by the GRE tunnel data path.
C32 tmnxIPsecMdaDpGreTnlOutBytesLo	1.3.6.1.4.1.6527.3.1.2.48.15.1.53	Counter32	read-only	The value of tmnxIPsecMdaDpGreTnlOutBytesLo indicates the lower 32 bits of the number of packets received by the GRE tunnel data path.
C32 tmnxIPsecMdaDpGreTnlOutBytesHi	1.3.6.1.4.1.6527.3.1.2.48.15.1.54	Counter32	read-only	The value of tmnxIPsecMdaDpGreTnlOutBytesHi indicates the higher 32 bits of the number of packets received by the GRE tunnel data path.
C64 tmnxIPsecMdaDpGreTnlOutErrs	1.3.6.1.4.1.6527.3.1.2.48.15.1.55	Counter64	read-only	The value of tmnxIPsecMdaDpGreTnlOutErrs indicates the number of packets received by the GRE tunnel data path.
C32 tmnxIPsecMdaDpGreTnlOutErrsLo	1.3.6.1.4.1.6527.3.1.2.48.15.1.56	Counter32	read-only	The value of tmnxIPsecMdaDpGreTnlOutErrsLo indicates the lower 32 bits of the number of packets received by the GRE tunnel data path.
C32 tmnxIPsecMdaDpGreTnlOutErrsHi	1.3.6.1.4.1.6527.3.1.2.48.15.1.57	Counter32	read-only	The value of tmnxIPsecMdaDpGreTnlOutErrsHi indicates the higher 32 bits of the number of packets received by the GRE tunnel data path.
C64 tmnxIPsecMdaDpPktsDropDfSet	1.3.6.1.4.1.6527.3.1.2.48.15.1.58	Counter64	read-only	The value of tmnxIPsecMdaDpPktsDropDfSet indicates the number of packets with DF bit set dropped in this Tunnel exceeding MTU size and with clear tunnel DF bit not set.
C32 tmnxIPsecMdaDpPktsDropDfSetLo	1.3.6.1.4.1.6527.3.1.2.48.15.1.59	Counter32	read-only	The value of tmnxIPsecMdaDpPktsDropDfSetLo indicates lower 32 bits of the value of tmnxIPsecMdaDpPktsDropDfSet object.
C32 tmnxIPsecMdaDpPktsDropDfSetHi	1.3.6.1.4.1.6527.3.1.2.48.15.1.60	Counter32	read-only	The value of tmnxIPsecMdaDpPktsDropDfSetHi indicates higher 32 bits of the value of tmnxIPsecMdaDpPktsDropDfSet object.
C32 tmnxIPsecMdaDpStaticIPsecTnls	1.3.6.1.4.1.6527.3.1.2.48.15.1.61	Counter32	read-only	The value of tmnxIPsecMdaDpStaticIPsecTnls indicates number of configured static IPsec tunnels on the MDA.
C32 tmnxIPsecMdaDpDynIPsecTnls	1.3.6.1.4.1.6527.3.1.2.48.15.1.62	Counter32	read-only	The value of tmnxIPsecMdaDpDynIPsecTnls indicates number of dynamic IPsec tunnels in use on the MDA.
C32 tmnxIPsecMdaDpIpGreTnls	1.3.6.1.4.1.6527.3.1.2.48.15.1.63	Counter32	read-only	The value of tmnxIPsecMdaDpIpGreTnls indicates number of configured IP tunnels (with GRE headers) on the MDA.
C32 tmnxIPsecMdaDpIpv4Tnls	1.3.6.1.4.1.6527.3.1.2.48.15.1.64	Counter32	read-only	The value of tmnxIPsecMdaDpIpv4Tnls indicates number of configured IPv4 tunnels on the MDA.
TIM tIPsecTnlTempTblLastChanged	1.3.6.1.4.1.6527.3.1.2.48.16	TimeStamp	read-only	The value of tIPsecTnlTempTblLastChanged indicates the sysUpTime at the time of the last modification to tIPsecTnlTempTable by adding, deleting an entry or change to a writable object in the table. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value.
tIPsecTnlTempTable	1.3.6.1.4.1.6527.3.1.2.48.17		not-accessible	Table to store the IPsec tunnel template entries.
tIPsecTnlTempEntry	1.3.6.1.4.1.6527.3.1.2.48.17.1		not-accessible	Information about a single IPsec tunnel template entry.
TMN tIPsecTnlTempId	1.3.6.1.4.1.6527.3.1.2.48.17.1.1	TmnxIPsecTunnelTemplateId	not-accessible	The value of tIPsecTnlTempId specifies the id of a tunnel template entry and is the primary index for the table tIPsecTnlTempTable.
ROW tIPsecTnlTempRowStatus	1.3.6.1.4.1.6527.3.1.2.48.17.1.2	RowStatus	read-create	The tIPsecTnlTempRowStatus object is used to create and delete rows in the tIPsecTnlTempTable.
TIM tIPsecTnlTempLastChanged	1.3.6.1.4.1.6527.3.1.2.48.17.1.3	TimeStamp	read-only	The value of tIPsecTnlTempLastChanged indicates the sysUpTime at the time of the last modification of this entry. If no changes were made to the entry since the last re-initialization of the local network management subsystem, then this object contains a zero value.
TIT tIPsecTnlTempDescr	1.3.6.1.4.1.6527.3.1.2.48.17.1.4	TItemDescription	read-create	The value of tIPsecTnlTempDescr specifies the user-provided description for the template.
INT tIPsecTnlTempReverseRoute	1.3.6.1.4.1.6527.3.1.2.48.17.1.5	INTEGER	read-create	The value of tIPsecTnlTempReverseRoute specifies whether node using this template will accept framed-routes sent by radius server and install them for the lifetime of the tunnel as managed routes. If this object is set to 'useSecurityPolicy' then the node using this template will add a route to every client-side-protected-subnet as signaled by the client.
TMN tIPsecTnlTempDynKeyTransformId1	1.3.6.1.4.1.6527.3.1.2.48.17.1.6	TmnxIPsecTransformIdOrZero	read-create	The value of tIPsecTnlTempDynKeyTransformId1 specifies the first transform-id for this IPSec Tunnel template to use.
TMN tIPsecTnlTempDynKeyTransformId2	1.3.6.1.4.1.6527.3.1.2.48.17.1.7	TmnxIPsecTransformIdOrZero	read-create	The value of tIPsecTnlTempDynKeyTransformId2 specifies the second transform-id for this IPSec Tunnel template to use.
TMN tIPsecTnlTempDynKeyTransformId3	1.3.6.1.4.1.6527.3.1.2.48.17.1.8	TmnxIPsecTransformIdOrZero	read-create	The value of tIPsecTnlTempDynKeyTransformId3 specifies the third transform-id for this IPSec Tunnel template to use.
TMN tIPsecTnlTempDynKeyTransformId4	1.3.6.1.4.1.6527.3.1.2.48.17.1.9	TmnxIPsecTransformIdOrZero	read-create	The value of tIPsecTnlTempDynKeyTransformId4 specifies the fourth transform-id for this IPSec Tunnel template to use.
U32 tIPsecTnlTempReplayWindow	1.3.6.1.4.1.6527.3.1.2.48.17.1.10	Unsigned32	read-create	The value of tIPsecTnlTempReplayWindow specifies the size of the anti-replay window for the template. If the value of tmnxIPsecTunnelReplayWindow is set to 0, then the anti-replay feature is disabled.
TIM tmnxIPsecGWTblLastChgd	1.3.6.1.4.1.6527.3.1.2.48.18	TimeStamp	read-only	The value of tmnxIPsecGWTblLastChgd indicates the sysUpTime at the time of the last modification of tmnxIPsecGWTable. If no changes were made to the entry since the last re-initialization of the local network management subsystem, then this object contains a zero value.
tmnxIPsecGWTable	1.3.6.1.4.1.6527.3.1.2.48.19		not-accessible	A table that contains SAP IPSec gateway information.
tmnxIPsecGWEntry	1.3.6.1.4.1.6527.3.1.2.48.19.1		not-accessible	Information about a SAP IPSec gateway.
ROW tmnxIPsecGWRowStatus	1.3.6.1.4.1.6527.3.1.2.48.19.1.1	RowStatus	read-create	The value of tmnxIPsecGWRowStatus controls the creation and deletion of rows in this table.
TIM tmnxIPsecGWLastMgmtChange	1.3.6.1.4.1.6527.3.1.2.48.19.1.2	TimeStamp	read-only	The value of tmnxIPsecGWLastMgmtChange indicates the value of sysUpTime at the time of the last management change of any writable object of this row.
TMN tmnxIPsecGWAdminState	1.3.6.1.4.1.6527.3.1.2.48.19.1.3	TmnxAdminState	read-create	The value of the object tmnxIPsecGWAdminState specifies the administrative state of SAP IPSec gateway entry.
TMN tmnxIPsecGWOperState	1.3.6.1.4.1.6527.3.1.2.48.19.1.4	TmnxOperState	read-only	The value of the object tmnxIPsecGWOperState indicates the operating state of the SAP IPSec gateway.
TMN tmnxIPsecGWTunnelPolicyTemp	1.3.6.1.4.1.6527.3.1.2.48.19.1.5	TmnxIPsecTunnelTemplateIdOrZero	read-create	The value of the object tmnxIPsecGWTunnelPolicyTemp specifies the TIMETRA-IPSEC-MIB::tIPsecTnlTempId used by this SAP IPSec gateway.
TMN tmnxIPsecGWSecureService	1.3.6.1.4.1.6527.3.1.2.48.19.1.6	TmnxServId	read-create	The value of the object tmnxIPsecGWSecureService specifies the service-id of the default security service used by this SAP IPSec gateway.
TNA tmnxIPsecGWIfName	1.3.6.1.4.1.6527.3.1.2.48.19.1.7	TNamedItemOrEmpty	read-create	The value of the object tmnxIPsecGWIfName specifies the IPSec interface used by the SAP.
IPt tmnxIPsecGWInetAddrType	1.3.6.1.4.1.6527.3.1.2.48.19.1.8	InetAddressType	read-create	The value of the object tmnxIPsecGWInetAddrType specifies the address type of the SAP IPSec gateway.
IP tmnxIPsecGWInetAddress	1.3.6.1.4.1.6527.3.1.2.48.19.1.9	InetAddress	read-create	This value of tmnxIPsecGWInetAddress specifies the IPv4 address of the SAP IPSec gateway.
TMN tmnxIPsecGWIkePolicyId	1.3.6.1.4.1.6527.3.1.2.48.19.1.10	TmnxIkePolicyIdOrZero	read-create	The value of tmnxIPsecGWIkePolicyId specifies the policy id for this SAP IPSec gateway.
OCT tmnxIPsecGWIkePreShared	1.3.6.1.4.1.6527.3.1.2.48.19.1.11	OCTET STRING	read-create	The value of tmnxIPsecGWIkePreShared specifies the shared secret between the two peers forming the tunnel for the SAP IPSec gateway.
STR tmnxIPsecGWLclX509Cert	1.3.6.1.4.1.6527.3.1.2.48.19.1.12	DisplayString	read-create	The value of tmnxIPsecGWLclX509Cert specifies the path-name of the local X509 Certificate to be used with this SAP IPSec gateway.
STR tmnxIPsecGWLclPrivateKey	1.3.6.1.4.1.6527.3.1.2.48.19.1.13	DisplayString	read-create	The value of tmnxIPsecGWLclPrivateKey specifies the path-name of the local private key to be used with this SAP IPSec gateway.
BIT tmnxIPsecGWOperFlags	1.3.6.1.4.1.6527.3.1.2.48.19.1.14	Bits	read-only	The value of tmnxIPsecGWOperFlags indicates the reason why the gateway is operationally down.
STR tmnxIPsecGWCACert	1.3.6.1.4.1.6527.3.1.2.48.19.1.15	DisplayString	read-create	The value of tmnxIPsecGWCACert specifies the path-name of the Certificate from the Certificate-Authority to be used with this SAP IPSec gateway.
STR tmnxIPsecGWCACertRevocList	1.3.6.1.4.1.6527.3.1.2.48.19.1.16	DisplayString	read-create	The value of tmnxIPsecGWCACertRevocList specifies the path-name of the Certificate Revocation List (CRL) from Certificate-Authority to be used with this SAP IPSec gateway.
TNA tmnxIPsecGWName	1.3.6.1.4.1.6527.3.1.2.48.19.1.17	TNamedItem	read-create	The value of the object tmnxIPsecGWIfName specifies the name for this IPSec gateway. An 'inconsistentValue' error is returned if value of this object is not set to unique value at the time of creation.
TNA tmnxIPsecGWCertTrustAnchor	1.3.6.1.4.1.6527.3.1.2.48.19.1.18	TNamedItemOrEmpty	read-create	The value of tmnxIPsecGWCertTrustAnchor specifies the name for Certificate-Authority Profile name associated with this SAP IPSec gateway certificate. An 'inconsistentValue' error is returned if this object is modified when tmnxIPsecGWAdminState is in 'inService' state.
TMN tmnxIPsecGWLocalIdType	1.3.6.1.4.1.6527.3.1.2.48.19.1.19	TmnxIPsecLocalIdType	read-create	The value of tmnxIPsecGWLocalIdType specifies the local-identifier of 7750 used for IDi or IDr for IKEv2. An 'inconsistentValue' error is returned if this object is modified when tmnxIPsecGWAdminState is in 'inService' state.
STR tmnxIPsecGWLocalIdValue	1.3.6.1.4.1.6527.3.1.2.48.19.1.20	DisplayString	read-create	The value of tmnxIPsecGWLocalIdValue specifies the value associated with tmnxIPsecGWLocalIdType object. Value is extracted from the configured certificate when tmnxIPsecGWLocalIdType is set to 'dn'.
tIPsecRUTnlTable	1.3.6.1.4.1.6527.3.1.2.48.20		not-accessible	Table to store dynamic IPsec Remote-User Tunnel entries.
tIPsecRUTnlEntry	1.3.6.1.4.1.6527.3.1.2.48.20.1		not-accessible	Information about a single dynamic IPsec Remote-User Tunnel entry.
IPt tIPsecRUTnlInetAddrType	1.3.6.1.4.1.6527.3.1.2.48.20.1.1	InetAddressType	not-accessible	The value of the object tIPsecRUTnlInetAddrType indicates the address type of the SAP IPsec gateway to the tunnel.
IP tIPsecRUTnlInetAddress	1.3.6.1.4.1.6527.3.1.2.48.20.1.2	InetAddress	not-accessible	This value of tIPsecRUTnlInetAddress indicates the address of of the SAP IPsec gateway to the tunnel.
TTC tIPsecRUTnlPort	1.3.6.1.4.1.6527.3.1.2.48.20.1.3	TTcpUdpPort	not-accessible	The value of tIPsecRUTnlPort indicates the UDP port of the SAP IPsec gateway to the tunnel.
IPt tIPsecRUTnlPrivateIpAddrType	1.3.6.1.4.1.6527.3.1.2.48.20.1.4	InetAddressType	read-only	The value of the object tIPsecRUTnlPrivateIpAddrType indicates the address type of the private IP Address in the tunnel.
IP tIPsecRUTnlPrivateIpAddr	1.3.6.1.4.1.6527.3.1.2.48.20.1.5	InetAddress	read-only	The value of tIPsecRUTnlPrivateIpAddr indicates the private ip address on the IPsec gateway tunnel.
ADR tIPsecRUTnlPrivateIpPrefixLen	1.3.6.1.4.1.6527.3.1.2.48.20.1.6	InetAddressPrefixLength	read-only	The value of tIPsecRUTnlPrivateIpPrefixLen indicates the number of bits to match on the tIPsecRUTnlPrivateIpAddr.
TMN tIPsecRUTnlTempId	1.3.6.1.4.1.6527.3.1.2.48.20.1.7	TmnxIPsecTunnelTemplateId	read-only	The value of tIPsecRUTnlTempId indicates the id of a tunnel template entry used for the tunnel.
U32 tIPsecRUTnlIPsecSALifeTime	1.3.6.1.4.1.6527.3.1.2.48.20.1.8	Unsigned32	read-only	The value of tIPsecRUTnlIPsecSALifeTime indicates the lifetime of the phase 2 Ike key.
TMN tIPsecRUTnlPfsDHGroup	1.3.6.1.4.1.6527.3.1.2.48.20.1.9	TmnxIkePolicyDHGroupOrZero	read-only	The value of tIPsecRUTnlPfsDHGroup indicates the new Diffie-hellman key exchange each time the SA(Security Association) key is renegotiated. After the SA expires, the key is forgotten and another key is generated (if the SA remains up). This means that an attacker who cracks part of the exchange can only read the part that used the key before the key changed. There is no advantage of cracking the other parts if the attacker has already cracked one.
U32 tIPsecRUTnlReplayWindow	1.3.6.1.4.1.6527.3.1.2.48.20.1.10	Unsigned32	read-only	The value of tIPsecRUTnlReplayWindow indicates the size of the anti-replay window.
TMN tIPsecRUTnlPrivateSvcId	1.3.6.1.4.1.6527.3.1.2.48.20.1.11	TmnxServId	read-only	The value of tIPsecRUTnlPrivateSvcId indicates the service-id of the Tunnel delivery service.
NUM tIPsecRUTnlPrivateIfIndex	1.3.6.1.4.1.6527.3.1.2.48.20.1.12	InterfaceIndex	read-only	The value of tIPsecRUTnlPrivateIfIndex indicates the private interface index used by the tunnel.
T/F tIPsecRUTnlHasBiDirectionalSA	1.3.6.1.4.1.6527.3.1.2.48.20.1.13	TruthValue	read-only	The value of tIPsecRUTnlHasBiDirectionalSA indicates whether this tunnel has bi-directional Security-Association entries.
TMN tIPsecRUTnlHostISA	1.3.6.1.4.1.6527.3.1.2.48.20.1.14	TmnxHwIndexOrZero	read-only	The value of tIPsecRUTnlHostISA indicates the active ISA that is being used to host this tunnel. This object will have a value of zero when this tunnel is operationally down.
tIPsecRUTnlStatsTable	1.3.6.1.4.1.6527.3.1.2.48.21		not-accessible	Table to store IPsec Remote User Tunnel statistics
tIPsecRUTnlStatsEntry	1.3.6.1.4.1.6527.3.1.2.48.21.1		not-accessible	Statistics for a single IPsec Remote User Tunnel.
INT tIPsecRUTnlIsakmpState	1.3.6.1.4.1.6527.3.1.2.48.21.1.1	INTEGER	read-only	The value of tIPsecRUTnlIsakmpState indicates the state of phase 1 IPsec negotiation.
TIM tIPsecRUTnlIsakmpEstabTime	1.3.6.1.4.1.6527.3.1.2.48.21.1.2	TimeStamp	read-only	The value of tIPsecRUTnlIsakmpEstabTime indicates the sysUpTime at the time the IPsec phase 1 negotiation completed.
U32 tIPsecRUTnlIsakmpNegLifeTime	1.3.6.1.4.1.6527.3.1.2.48.21.1.3	Unsigned32	read-only	The value of tIPsecRUTnlIsakmpNegLifeTime indicates the lifetime negotiated for phase1 Ike key.
C32 tIPsecRUTnlNumDpdTx	1.3.6.1.4.1.6527.3.1.2.48.21.1.4	Counter32	read-only	The value of tIPsecRUTnlNumDpdTx indicates the number of Dead-Peer-Detection packets transmitted.
C32 tIPsecRUTnlNumDpdRx	1.3.6.1.4.1.6527.3.1.2.48.21.1.5	Counter32	read-only	The value of tIPsecRUTnlNumDpdRx indicates the number of Dead-Peer-Detection packets received.
C32 tIPsecRUTnlNumDpdAckTx	1.3.6.1.4.1.6527.3.1.2.48.21.1.6	Counter32	read-only	The value of tIPsecRUTnlNumDpdAckTx indicates the number of Dead-Peer-Detection acknowledgement packets transmitted.
C32 tIPsecRUTnlNumDpdAckRx	1.3.6.1.4.1.6527.3.1.2.48.21.1.7	Counter32	read-only	The value of tIPsecRUTnlNumDpdAckRx indicates the number of Dead-Peer-Detection acknowledgement packets received.
C32 tIPsecRUTnlNumExpRx	1.3.6.1.4.1.6527.3.1.2.48.21.1.8	Counter32	read-only	The value of tIPsecRUTnlNumExpRx indicates the number of DPD R-U-THERE packets that have not been acknowledged.
C32 tIPsecRUTnlNumInvalidDpdRx	1.3.6.1.4.1.6527.3.1.2.48.21.1.9	Counter32	read-only	The value of tIPsecRUTnlNumInvalidDpdRx indicates the number of malformed DPD R-U-THERE acknowledgement packets received.
C32 tIPsecRUTnlNumCtrlPktsTx	1.3.6.1.4.1.6527.3.1.2.48.21.1.10	Counter32	read-only	The value of tIPsecRUTnlNumCtrlPktsTx indicates the number of control packets this IPsec Tunnel has sent.
C32 tIPsecRUTnlNumCtrlPktsRx	1.3.6.1.4.1.6527.3.1.2.48.21.1.11	Counter32	read-only	The value of tIPsecRUTnlNumCtrlPktsRx indicates the number of control packets this IPsec Tunnel has received.
C32 tIPsecRUTnlNumCtrlTxErrors	1.3.6.1.4.1.6527.3.1.2.48.21.1.12	Counter32	read-only	The value of tIPsecRUTnlNumCtrlTxErrors indicates the number of control packet transmit errors.
C32 tIPsecRUTnlNumCtrlRxErrors	1.3.6.1.4.1.6527.3.1.2.48.21.1.13	Counter32	read-only	The value of tIPsecRUTnlNumCtrlRxErrors indicates the number of control packet receive errors.
tIPsecRUSATable	1.3.6.1.4.1.6527.3.1.2.48.22		not-accessible	Table to store the IPsec remote-user dynamic SA entries.
tIPsecRUSAEntry	1.3.6.1.4.1.6527.3.1.2.48.22.1		not-accessible	Information about a single IPsec remote-user SA entry.
U32 tIPsecRUSAId	1.3.6.1.4.1.6527.3.1.2.48.22.1.1	Unsigned32	not-accessible	The value of tIPsecRUSAId indicates the id of an SA entry and is part of the index for the tIPsecRUSATable.
U32 tIPsecRUSAIndex	1.3.6.1.4.1.6527.3.1.2.48.22.1.2	Unsigned32	not-accessible	The value of tIPsecRUSAIndex indicates an additional index to uniquely indentify the SA entry in the tIPsecRUSATable.
TMN tIPsecRUSADirection	1.3.6.1.4.1.6527.3.1.2.48.22.1.3	TmnxIPsecDirection	not-accessible	The value of tIPsecRUSADirection indicates the direction on the IPsec Tunnel to which this SA entry can be applied. The value of tIPsecRUSADirection is also part of the index for the table tIPsecRUSATable
OCT tIPsecRUSAEncryptionKey	1.3.6.1.4.1.6527.3.1.2.48.22.1.4	OCTET STRING	read-only	The value of tIPsecRUSAEncryptionKey indicates the key used for the encryption algorithm defined by the tIPsecRUSAEncrAlgorithm in the IPsec transform.
OCT tIPsecRUSAAuthenticationKey	1.3.6.1.4.1.6527.3.1.2.48.22.1.5	OCTET STRING	read-only	The value of tIPsecRUSAAuthenticationKey indicates the key used for the authentication algorithm defined by the tIPsecRUSAAuthAlgorithm in the IPsec transform.
U32 tIPsecRUSASpi	1.3.6.1.4.1.6527.3.1.2.48.22.1.6	Unsigned32	read-only	The value of tIPsecRUSASpi indicates the SPI (Security Parameter Index) used to lookup the instruction to verify and decrypt the incoming IPsec packets when the value of tIPsecRUSADirection is 'inbound'.
TMN tIPsecRUSAAuthAlgorithm	1.3.6.1.4.1.6527.3.1.2.48.22.1.7	TmnxAuthAlgorithm	read-only	The value of tIPsecRUSAAuthAlgorithm indicates the authentication algorithm used with this SA.
TMN tIPsecRUSAEncrAlgorithm	1.3.6.1.4.1.6527.3.1.2.48.22.1.8	TmnxEncrAlgorithm	read-only	The value of tIPsecRUSAEncrAlgorithm indicates the encryption algorithm used with this SA.
TIM tIPsecRUSAEstablishedTime	1.3.6.1.4.1.6527.3.1.2.48.22.1.9	TimeStamp	read-only	The value of tIPsecRUSAEstablishedTime indicates the sysUpTime at the time the IPsec phase 2 negotiation completed.
U32 tIPsecRUSANegotiatedLifeTime	1.3.6.1.4.1.6527.3.1.2.48.22.1.10	Unsigned32	read-only	The value of tIPsecRUSANegotiatedLifeTime indicates the lifetime negotiated for phase2 Ike key.
IPt tIPsecRUSALclAddrType	1.3.6.1.4.1.6527.3.1.2.48.22.1.11	InetAddressType	read-only	The value of tIPsecRUSALclAddrType indicates the address type of address in tIPsecRUSALclAddr.
IP tIPsecRUSALclAddr	1.3.6.1.4.1.6527.3.1.2.48.22.1.12	InetAddress	read-only	The value of tIPsecRUSALclAddr indicates the ip address on the vpn side.
ADR tIPsecRUSALclAPrefLen	1.3.6.1.4.1.6527.3.1.2.48.22.1.13	InetAddressPrefixLength	read-only	The value of tIPsecRUSALclAPrefLen indicates the number of bits to match of the tIPsecRUSALclAddr.
IPt tIPsecRUSARemAddrType	1.3.6.1.4.1.6527.3.1.2.48.22.1.14	InetAddressType	read-only	The value of tIPsecRUSARemAddrType indicates the address type of address in tIPsecRUSARemAddr.
IP tIPsecRUSARemAddr	1.3.6.1.4.1.6527.3.1.2.48.22.1.15	InetAddress	read-only	The value of tIPsecRUSARemAddr indicates the ip address on the tunnel side.
ADR tIPsecRUSARemAPrefLen	1.3.6.1.4.1.6527.3.1.2.48.22.1.16	InetAddressPrefixLength	read-only	The value of tIPsecRUSARemAPrefLen indicates the number of bits to match of the tIPsecRUSARemAddr.
tIPsecRUSAStatsTable	1.3.6.1.4.1.6527.3.1.2.48.23		not-accessible	Table to retrieve the IPsec Remote-User SA Statistics entries.
tIPsecRUSAStatsEntry	1.3.6.1.4.1.6527.3.1.2.48.23.1		not-accessible	Information about a single IPsec Remote-User SA Statistics entry.
C64 tIPsecRUSAStatsBytesProcessed	1.3.6.1.4.1.6527.3.1.2.48.23.1.1	Counter64	read-only	The value of tIPsecRUSAStatsBytesProcessed indicates the number of bytes successfully processed for this SA.
C32 tIPsecRUSAStatsBytesProcLow32	1.3.6.1.4.1.6527.3.1.2.48.23.1.2	Counter32	read-only	The value of tIPsecRUSAStatsBytesProcLow32 indicates the lower 32 bits of the value of tIPsecRUSAStatsBytesProcessed.
C32 tIPsecRUSAStatsBytesProcHigh32	1.3.6.1.4.1.6527.3.1.2.48.23.1.3	Counter32	read-only	The value of tIPsecRUSAStatsBytesProcHigh32 indicates the higher 32 bits of the value of tIPsecRUSAStatsBytesProcessed.
C64 tIPsecRUSAStatsPktsProcessed	1.3.6.1.4.1.6527.3.1.2.48.23.1.4	Counter64	read-only	The value of tIPsecRUSAStatsPktsProcessed indicates the number of packets successfully processed for this SA.
C32 tIPsecRUSAStatsPktsProcLow32	1.3.6.1.4.1.6527.3.1.2.48.23.1.5	Counter32	read-only	The value of tIPsecRUSAStatsPktsProcLow32 indicates the lower 32 bits of the value of tIPsecRUSAStatsPktsProcessed.
C32 tIPsecRUSAStatsPktsProcHigh32	1.3.6.1.4.1.6527.3.1.2.48.23.1.6	Counter32	read-only	The value of tIPsecRUSAStatsPktsProcHigh32 indicates the higher 32 bits of the value of tIPsecRUSAStatsPktsProcessed.
C32 tIPsecRUSAStatsCryptoErrors	1.3.6.1.4.1.6527.3.1.2.48.23.1.7	Counter32	read-only	The value of tIPsecRUSAStatsCryptoErrors indicates the number of crypto errors encountered on this SA. The crypto errors include errors on packets where protocol does not match or if the check on authentication header length failed.
C32 tIPsecRUSAStatsReplayErrors	1.3.6.1.4.1.6527.3.1.2.48.23.1.8	Counter32	read-only	The value of tIPsecRUSAStatsReplayErrors indicates the number of replay errors encountered on this SA.
C32 tIPsecRUSAStatsSAErrors	1.3.6.1.4.1.6527.3.1.2.48.23.1.9	Counter32	read-only	The value of tIPsecRUSAStatsSAErrors indicates the number of SA errors encountered on this SA. The SA errors include sequence number failure, invalid SA, policy version mismatch, illegal authentication algorithm, expanded packet too big, illegal configured algorithm and ttl decrement error.
C32 tIPsecRUSAStatsPolicyErrors	1.3.6.1.4.1.6527.3.1.2.48.23.1.10	Counter32	read-only	The value of tIPsecRUSAStatsPolicyErrors indicates the number of policy errors encountered on this SA. The policy errors include bundled SA, selector check and policy direction error.
tmnxIPsecTunnelCountObjs	1.3.6.1.4.1.6527.3.1.2.48.24
G32 tmnxIPsecPskTunnels	1.3.6.1.4.1.6527.3.1.2.48.24.1	Gauge32	read-only	The value of tmnxIPsecPskTunnels indicates the number of IPSec tunnels with tmnxIkePolicyAuthMethod set to 'psk'.
G32 tmnxIPsecGWPskTunnels	1.3.6.1.4.1.6527.3.1.2.48.24.2	Gauge32	read-only	The value of tmnxIPsecGWPskTunnels indicates the number of IPSec gateway tunnels with tmnxIkePolicyAuthMethod set to 'psk'.
G32 tmnxIPsecGWPskXAuthTunnels	1.3.6.1.4.1.6527.3.1.2.48.24.3	Gauge32	read-only	The value of tmnxIPsecGWPskXAuthTunnels indicates the number of IPSec gateway tunnels with tmnxIkePolicyAuthMethod set to 'plainPskXAuth'.
G32 tmnxIPsecGWCertTunnels	1.3.6.1.4.1.6527.3.1.2.48.24.4	Gauge32	read-only	The value of tmnxIPsecGWCertTunnels indicates the number of IPSec gateway tunnels with tmnxIkePolicyAuthMethod set to 'cert'.
TIM tmnxIPsecTunnelBfdTableLastChgd	1.3.6.1.4.1.6527.3.1.2.48.25	TimeStamp	read-only	The value of tmnxIPsecTunnelBfdTableLastChgd indicates the sysUpTime at the time of the last modification to tmnxIPsecTunnelBfdTable by adding, deleting an entry or change to a writable object in the table. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value.
tmnxIPsecTunnelBfdTable	1.3.6.1.4.1.6527.3.1.2.48.26		not-accessible	Table to store the IPsec Tunnel BFD session entries.
tmnxIPsecTunnelBfdEntry	1.3.6.1.4.1.6527.3.1.2.48.26.1		not-accessible	Information about a single IPsec Tunnel BFD session entry.
TMN tmnxIPsecTunnelBfdSvcId	1.3.6.1.4.1.6527.3.1.2.48.26.1.1	TmnxServId	not-accessible	The value of the object tmnxIPsecTunnelBfdSvcId specifies the service-id of the interface running BFD.
TNA tmnxIPsecTunnelBfdIfName	1.3.6.1.4.1.6527.3.1.2.48.26.1.2	TNamedItem	not-accessible	The value of the object tmnxIPsecTunnelBfdIfName specifies the IPSec interface used by the BFD session.
IPt tmnxIPsecTunnelBfdDstAddrType	1.3.6.1.4.1.6527.3.1.2.48.26.1.3	InetAddressType	not-accessible	The value of tmnxIPsecTunnelBfdDstAddrType specifies the address type of address in tmnxIPsecTunnelBfdDstAddr.
IP tmnxIPsecTunnelBfdDstAddr	1.3.6.1.4.1.6527.3.1.2.48.26.1.4	InetAddress	not-accessible	The value of tmnxIPsecTunnelBfdDstAddr specifies the destination ipaddress to be used for the BFD session.
ROW tmnxIPsecTunnelBfdRowStatus	1.3.6.1.4.1.6527.3.1.2.48.26.1.5	RowStatus	read-create	The tmnxIPsecTunnelBfdRowStatus object is used to create and delete rows in the tmnxIPsecTunnelBfdTable.
TIM tmnxIPsecTunnelBfdLastChanged	1.3.6.1.4.1.6527.3.1.2.48.26.1.6	TimeStamp	read-only	The value of tmnxIPsecTunnelBfdLastChanged indicates the sysUpTime at the time of the last modification of this entry. If no changes were made to the entry since the last re-initialization of the local network management subsystem, then this object contains a zero value.
IPt tmnxIPsecTunnelBfdSrcAddrType	1.3.6.1.4.1.6527.3.1.2.48.26.1.7	InetAddressType	read-only	The value of tmnxIPsecTunnelBfdSrcAddrType indicates the address type of tmnxIPsecTunnelBfdSrcAddr object.
IP tmnxIPsecTunnelBfdSrcAddr	1.3.6.1.4.1.6527.3.1.2.48.26.1.8	InetAddress	read-only	The value of tmnxIPsecTunnelBfdSrcAddr indicates the source IP address on the interface running BFD.
TMN tmnxIPsecTunnelBfdSessOperState	1.3.6.1.4.1.6527.3.1.2.48.26.1.9	TmnxBfdSessOperState	read-only	The value of tmnxIPsecTunnelBfdSessOperState indicates the operational state of the BFD session the IPsec tunnel is relying upon for its fast triggering mechanism.
tmnxIPsecNotifyObjs	1.3.6.1.4.1.6527.3.1.2.48.100
IPt tIPsecNotifRUTnlInetAddrType	1.3.6.1.4.1.6527.3.1.2.48.100.1	InetAddressType	accessible-for-notify	The value of the object tIPsecNotifRUTnlInetAddrType indicates address type of tIPsecNotifRUTnlInetAddress object.
IP tIPsecNotifRUTnlInetAddress	1.3.6.1.4.1.6527.3.1.2.48.100.2	InetAddress	accessible-for-notify	This value of tIPsecNotifRUTnlInetAddress indicates the address of of the SAP IPsec gateway to the tunnel.
TTC tIPsecNotifRUTnlPort	1.3.6.1.4.1.6527.3.1.2.48.100.3	TTcpUdpPort	accessible-for-notify	The value of tIPsecNotifRUTnlPort indicates the UDP port of the SAP IPsec gateway to the tunnel.
STR tIPsecNotifReason	1.3.6.1.4.1.6527.3.1.2.48.100.4	DisplayString	accessible-for-notify	The value of tIPsecNotifReason indicates the reason for the IPsec notification.
TMN tIPsecNotifBfdIntfSvcId	1.3.6.1.4.1.6527.3.1.2.48.100.5	TmnxServId	accessible-for-notify	The value of tIPsecNotifBfdIntfSvcId specifies the service ID of the interface running BFD in the notification.
TNA tIPsecNotifBfdIntfIfName	1.3.6.1.4.1.6527.3.1.2.48.100.6	TNamedItem	accessible-for-notify	The value of tIPsecNotifBfdIntfIfName specifies the name of the interface running BFD in the notification.
IPt tIPsecNotifBfdIntfDestIpType	1.3.6.1.4.1.6527.3.1.2.48.100.7	InetAddressType	accessible-for-notify	The value of tIPsecNotifBfdIntfDestIpType specifies the address type of tIPsecNotifBfdIntfDestIp object.
IP tIPsecNotifBfdIntfDestIp	1.3.6.1.4.1.6527.3.1.2.48.100.8	InetAddress	accessible-for-notify	The value of tIPsecNotifBfdIntfDestIp specifies the destination IP address on the interface running BFD in the notification.
TMN tIPsecNotifBfdIntfSessState	1.3.6.1.4.1.6527.3.1.2.48.100.9	TmnxBfdSessOperState	accessible-for-notify	The value of tIPsecNotifBfdIntfSessState indicates the operational state of BFD session on the interface in the notification.
tmnxIPsecNotifyPrefix	1.3.6.1.4.1.6527.3.1.3.48
tmnxIPsecNotifications	1.3.6.1.4.1.6527.3.1.3.48.0
NTF tIPsecRUTnlFailToCreate	1.3.6.1.4.1.6527.3.1.3.48.0.1			The trap tIPsecRUTnlFailToCreate is sent when creation of a remote-user tunnel fails with reason indicated by tIPsecNotifReason.
NTF tIPsecRUSAFailToAddRoute	1.3.6.1.4.1.6527.3.1.3.48.0.2			The trap tIPsecRUSAFailToAddRoute is sent when adding route to tIPsecRUSARemAddr for the remote-user tunnel fails with reason indicated by tIPsecNotifReason.
NTF tIPsecBfdIntfSessStateChgd	1.3.6.1.4.1.6527.3.1.3.48.0.3			The notification tIPsecBfdIntfSessStateChgd is generated when the operational state of BFD session of the IPSec instance changes.

RFC description

Alcatel-Lucent IPsec tunneling, encryption, and security management for SROS devices.

Start monitoring Alcatel-Lucent/Nokia SROS service routers (IPsec transform/IKE policy config status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download TIMETRA-IPSEC-MIB