VPN-PERFORMANCE-MIB

All MIBs › VPN-PERFORMANCE-MIB

Organization: Credit Suisse First Boston

Last Updated: 2003-09-15

Description: MIB for monitoring performance metrics of VPN tunnels, providing per-tunnel interface statistics and threshold-crossing notifications on VPN gateway devices

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is VPN-PERFORMANCE-MIB?

This is a MIB module for monitoring the performance of VPN tunnels on VPN gateway/router devices, tracking per-tunnel-interface statistics between a local and remote tunnel endpoint address. It exposes performance objects such as poll period, lost packets, last round-trip time, and configurable high/rearm/holddown thresholds, along with a trap table for threshold-crossing notifications. It is explicitly geared toward monitoring the operational health of VPN tunnel software/connectivity, detecting degraded or failing tunnels through lost-packet counts and rising round-trip latency, which serve as proxies for network- and device-level performance problems. It is a vendor-neutral performance-management MIB that typically complements interface/tunnel MIBs (such as IF-MIB or IPsec tunnel MIBs) describing the tunnels themselves. It is deployed on VPN concentrators, security gateways, or routers terminating site-to-site or remote-access VPN tunnels, where an NMS polls per-tunnel performance and receives threshold-crossing traps when quality degrades. Engineers can download the VPN-PERFORMANCE-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in VPN-PERFORMANCE-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

vendor-neutral, standards-based MIB, not tied to a specific manufacturer
VPN gateway/concentrator
router terminating VPN tunnels

Monitoring Examples

An admin polls vpnPerformanceIfTable/vpnPerformanceIfEntry rows, indexed by vpnPerformanceIndex and identified by vpnPerformanceIfLocalAddress/vpnPerformanceIfRemoteAddress, to track vpnPerformanceIfLostPackets and vpnPerformanceIfLastRoundTripTime for each tunnel. If lost packets exceed vpnPerformanceIfHighThreshold within the configured vpnPerformanceIfPollPeriod, an entry appears in vpnPerformanceTrapTable and a notification fires, alerting the operator to a degraded tunnel before it fully drops, with vpnPerformanceIfRearmThreshold and vpnPerformanceIfHolddownThreshold controlling when the alarm clears and re-fires.

What Can Be Monitored

tunnel packet loss
round-trip time
poll period
threshold-crossing alarms
local/remote tunnel endpoint addresses

Imported Objects

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
TimeTicks
mib-2

From SNMPv2-TC

DisplayString

OIDs

OID symbolic	OID numeric	Type	Access	Description
vpnPerformanceMIB	1.3.6.1.2.1.9929			The MIB module for performance management of VPN tunnels.
vpnPerformanceMIBObjects	1.3.6.1.2.1.9929.1
vpnPerformanceTrapNotifications	1.3.6.1.2.1.9929.1.0
NTF vpnPerformanceTrapLostPackets	1.3.6.1.2.1.9929.1.0.1			The agent has detected the number of lost packets has exceeded a threshold.
NTF vpnPerformanceTrapLostPacketsOk	1.3.6.1.2.1.9929.1.0.2			The agent has detected the number of lost packets has dropped below a threshold.
vpnPerformanceNotificationsGroup	1.3.6.1.2.1.9929.1.0.3			Generic VPN Performance Notifications.
vpnPerformance	1.3.6.1.2.1.9929.1.1
vpnPerformanceIfTable	1.3.6.1.2.1.9929.1.1.1		not-accessible	The table containing line entries for each VPN tunnel.
vpnPerformanceIfEntry	1.3.6.1.2.1.9929.1.1.1.1		not-accessible	A line entry containing information about a particular configured tunnel.
I32 vpnPerformanceIndex	1.3.6.1.2.1.9929.1.1.1.1.1	Integer32	not-accessible	A unique value for each table entry.
IP vpnPerformanceIfLocalAddress	1.3.6.1.2.1.9929.1.1.1.1.2	IpAddress	read-only	The address of the local VPN tunnel endpoint.
IP vpnPerformanceIfRemoteAddress	1.3.6.1.2.1.9929.1.1.1.1.3	IpAddress	read-only	The address of the remote VPN tunnel endpoint.
TIK vpnPerformanceIfPollPeriod	1.3.6.1.2.1.9929.1.1.1.1.4	TimeTicks	read-write	The time period used to send performance packets to the remote end of the VPN tunnel.
TIK vpnPerformanceIfHighThreshold	1.3.6.1.2.1.9929.1.1.1.1.5	TimeTicks	read-write	The time threshold used to compare round trip values against.
C32 vpnPerformanceIfLostPackets	1.3.6.1.2.1.9929.1.1.1.1.6	Counter32	read-only	The counting threshold used to compare the number of lost packet values against.
TIK vpnPerformanceIfRearmThreshold	1.3.6.1.2.1.9929.1.1.1.1.7	TimeTicks	read-write	The rearm threshold used to compare successive alarm values against.
TIK vpnPerformanceIfHolddownThreshold	1.3.6.1.2.1.9929.1.1.1.1.8	TimeTicks	read-write	The holddown threshold used to compare successive alarm values against.
TIK vpnPerformanceIfLastRoundTripTime	1.3.6.1.2.1.9929.1.1.1.1.9	TimeTicks	read-write	The last round trip value collected.
vpnPerformanceTRAP	1.3.6.1.2.1.9929.1.2
vpnPerformanceTrapTable	1.3.6.1.2.1.9929.1.2.1		not-accessible	The agent's table containing the alarm information.
vpnPerformanceTrapEntry	1.3.6.1.2.1.9929.1.2.1.1		not-accessible	Information about the last trap generated by the agent. There is always one entry in this table, indexed by the integer value 1.
I32 vpnPerformanceTrapIndex	1.3.6.1.2.1.9929.1.2.1.1.1	Integer32	not-accessible	A unique value for each table entry.
C32 vpnPerformanceTrapSequence	1.3.6.1.2.1.9929.1.2.1.1.2	Counter32	read-only	A counter of the number of alarms generated since the agent for last initialised.
STR vpnPerformanceTrapText	1.3.6.1.2.1.9929.1.2.1.1.3	DisplayString	read-write	Trap text to make the alarm obvious.
I32 vpnPerformanceTrapPriority	1.3.6.1.2.1.9929.1.2.1.1.4	Integer32	read-only	The priority level as set on the agent for this type of trap.
C32 vpnPerformanceTrapTime	1.3.6.1.2.1.9929.1.2.1.1.5	Counter32	read-only	The time that the condition or event occurred which generated the alarm. The value is given in seconds since 00:00:00 Greenwich Mean Time (GMT) January 1, 1970.
IP vpnPerformanceTrapSuspect	1.3.6.1.2.1.9929.1.2.1.1.6	IpAddress	read-only	An ASCII string describing the host which caused the alarm.
vpnPerformanceConformance	1.3.6.1.2.1.9929.2
vpnPerformanceCompliances	1.3.6.1.2.1.9929.2.1
vpnPerformanceCompliance	1.3.6.1.2.1.9929.2.1.1			The compliance statement for SNMPv2 entities which implement the VPN performance module.
vpnPerformanceGroups	1.3.6.1.2.1.9929.2.2
vpnPerformanceGroup	1.3.6.1.2.1.9929.2.2.1			The vpnPerformance group of objects providing for the management of VPN performance metrics.
vpnPerformanceTrapConformance	1.3.6.1.2.1.9929.3
vpnPerformanceTrapCompliances	1.3.6.1.2.1.9929.3.1
vpnPerformanceTrapCompliance	1.3.6.1.2.1.9929.3.1.1			The compliance statement for SNMPv2 entities which implement the VPN performance trap module.
vpnPerformanceTrapGroups	1.3.6.1.2.1.9929.3.2
vpnPerformanceTrapGroup	1.3.6.1.2.1.9929.3.2.1			The vpnPerformance group of objects providing for the management of VPN performance traps.

RFC description

Monitors VPN tunnel performance metrics including latency, packet loss, and tunnel status.

Start monitoring vendor-neutral, standards-based MIB, VPN gateway/concentrator, router terminating VPN tunnels (per-tunnel packet-loss/RTT threshold status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download VPN-PERFORMANCE-MIB

What Is VPN-PERFORMANCE-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description