Wellfleet-IKE-MIB

All MIBs › Wellfleet-IKE-MIB

Category: Wellfleet BayNetworks System Management

Description: Monitors Wellfleet IKE security association negotiations, phase1/phase2 states, and keying statistics.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is Wellfleet-IKE-MIB?

Wellfleet-IKE-MIB is a vendor MIB from Wellfleet Communications (later Bay Networks/Nortel) covering the Internet Key Exchange protocol used to negotiate IPsec security associations on Wellfleet routers. It exposes configuration data for IKE peer/policy definitions and status objects tracking phase 1 and phase 2 negotiation state, along with keying and negotiation statistics. Its monitoring focus is on the software/security service status: an operator checks whether IKE phase 1 and phase 2 negotiations with a given peer are established and stable, since a stuck or repeatedly failing negotiation indicates a misconfigured pre-shared key, policy mismatch, or peer reachability problem breaking the VPN tunnel. It implements the IETF IKE standard (RFC 2409) so its phase/state model closely mirrors that specification. It is typically deployed on legacy Wellfleet/Bay Networks routers terminating site-to-site IPsec VPN tunnels in enterprise networks. Engineers can download the Wellfleet-IKE-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in Wellfleet-IKE-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Wellfleet/Bay Networks routers
legacy IPsec VPN gateway routers

Monitoring Examples

An administrator would poll the IKE phase1/phase2 security association state objects for a given peer to confirm the VPN tunnel negotiation completed successfully, and a security association stuck in an incomplete or repeatedly re-negotiating state would reveal a pre-shared key mismatch or policy misconfiguration between the two VPN endpoints. No sample objects were listed in the source excerpt, so specific table/object names are inferred from standard IKE phase1/phase2 negotiation concepts rather than taken verbatim from the MIB.

What Can Be Monitored

IKE phase1/phase2 negotiation state
security association statistics
peer policy configuration
negotiation failure/retry counts

Imported Objects

From RFC-1212

OBJECT-TYPE

From RFC1155-SMI

Counter
IpAddress
Opaque

From RFC1213-MIB

DisplayString

From Wellfleet-COMMON-MIB

wfIKEGroup

OBJECT-IDENTITY

OIDs

OID symbolic	OID numeric	Type	Access	Description
wfIkeDescriptorTable	1.3.6.1.4.1.18.3.5.27.1		not-accessible	Table of Internet Key Exchange descriptors. The descriptors correspond to IKE Proposals in the IKE RFC.
wfIkeDescriptorEntry	1.3.6.1.4.1.18.3.5.27.1.1		not-accessible	An Internet Key Exchange Descriptor
INT wfIkeDescriptorCreate	1.3.6.1.4.1.18.3.5.27.1.1.1	INTEGER	read-write	Create/Delete parameter. Default is created.
INT wfIkeDescriptorStatus	1.3.6.1.4.1.18.3.5.27.1.1.2	INTEGER	read-only
IP wfIkeDescriptorLocalIpAddr	1.3.6.1.4.1.18.3.5.27.1.1.3	IpAddress	read-only	The address of the local IP interface to which this instance applies.
IP wfIkeDescriptorPeerIpAddr	1.3.6.1.4.1.18.3.5.27.1.1.4	IpAddress	read-only	The address of the remote IP interface to which this instance applies.
INT wfIkeDescriptorIndex	1.3.6.1.4.1.18.3.5.27.1.1.5	INTEGER	read-only	Differentiates instances with same peer IP addr
INT wfIkeDescriptorExchange	1.3.6.1.4.1.18.3.5.27.1.1.6	INTEGER	read-write
OPA wfIkeDescriptorProposals	1.3.6.1.4.1.18.3.5.27.1.1.7	Opaque	read-write	an ordered, logically OR'ed list of IKE proposals
STR wfIkeDescriptorName	1.3.6.1.4.1.18.3.5.27.1.1.8	DisplayString	read-write	Name of Ike Descriptor Entry
OCT wfIkeDescriptorPreSharedSecret	1.3.6.1.4.1.18.3.5.27.1.1.9	OCTET STRING	read-write	IKE Pre shared secret
INT wfIkeDescriptorExpiryMinutes	1.3.6.1.4.1.18.3.5.27.1.1.10	INTEGER	read-write	The value used to determine when the keys for this SA expire due to the passage of time.
INT wfIkeDescriptorExpiryKBytes	1.3.6.1.4.1.18.3.5.27.1.1.11	INTEGER	read-write	The value used to determine when the keys for this SA expire due to the number of bytes processed. The units are kilobytes.
INT wfIkeDescriptorExpiryPref	1.3.6.1.4.1.18.3.5.27.1.1.12	INTEGER	read-write
INT wfIkeDescriptorIdType	1.3.6.1.4.1.18.3.5.27.1.1.13	INTEGER	read-write	Controls the ID type sent in the ID payload. Use subnet if the peer cannot interpret the range type
wfIkeTransformTable	1.3.6.1.4.1.18.3.5.27.2		not-accessible	Table of Internet Key Exchange Transforms
wfIkeTransformEntry	1.3.6.1.4.1.18.3.5.27.2.1		not-accessible	An Internet Key Exchange Transform
INT wfIkeTransformCreate	1.3.6.1.4.1.18.3.5.27.2.1.1	INTEGER	read-write	Create/Delete parameter. Default is created.
INT wfIkeTransformStatus	1.3.6.1.4.1.18.3.5.27.2.1.2	INTEGER	read-only
INT wfIkeTransformNumber	1.3.6.1.4.1.18.3.5.27.2.1.3	INTEGER	read-only
INT wfIkeTransformCipherAlg	1.3.6.1.4.1.18.3.5.27.2.1.4	INTEGER	read-write
INT wfIkeTransformDesKeyStrength	1.3.6.1.4.1.18.3.5.27.2.1.5	INTEGER	read-write
INT wfIkeTransformIntegrityAlg	1.3.6.1.4.1.18.3.5.27.2.1.6	INTEGER	read-write
wfIkeSlotTable	1.3.6.1.4.1.18.3.5.27.3		not-accessible	Per slot IKE configuration information
wfIkeSlotEntry	1.3.6.1.4.1.18.3.5.27.3.1		not-accessible	Defines per slot cfg info such as log level
INT wfIkeSlotCreate	1.3.6.1.4.1.18.3.5.27.3.1.1	INTEGER	read-write	Specifies wfIkeEntry instantiation status
INT wfIkeSlotNum	1.3.6.1.4.1.18.3.5.27.3.1.2	INTEGER	read-only	The slot number
INT wfIkeSlotLogLevel	1.3.6.1.4.1.18.3.5.27.3.1.3	INTEGER	read-write	Specifies the level(s) of log messages specified
wfIkeSaTable	1.3.6.1.4.1.18.3.5.27.4		not-accessible	The IKE security association table
wfIkeSaEntry	1.3.6.1.4.1.18.3.5.27.4.1		not-accessible	Entry in IKE security association table
INT wfIkeSaCreate	1.3.6.1.4.1.18.3.5.27.4.1.1	INTEGER	read-only	Create/Delete parameter.
IP wfIkeSaSrc	1.3.6.1.4.1.18.3.5.27.4.1.2	IpAddress	read-only	The IP address of the SA's source.
IP wfIkeSaDest	1.3.6.1.4.1.18.3.5.27.4.1.3	IpAddress	read-only	The IP address of the SA's destination.
INT wfIkeSaIndex	1.3.6.1.4.1.18.3.5.27.4.1.4	INTEGER	read-only	The index that differentiates IKE SAs
INT wfIkeSaCipherAlg	1.3.6.1.4.1.18.3.5.27.4.1.5	INTEGER	read-only	Identifies cipher algorithm for this SA.
INT wfIkeSaIntegrityAlg	1.3.6.1.4.1.18.3.5.27.4.1.6	INTEGER	read-only	The algorithm for ESP Auth.
INT wfIkeSaExpiryUnits	1.3.6.1.4.1.18.3.5.27.4.1.7	INTEGER	read-only	The units used to interpret the expiry value.
INT wfIkeSaExpiryValue	1.3.6.1.4.1.18.3.5.27.4.1.8	INTEGER	read-only	The value used to determine when the keys for this SA expire.
CTR wfIkeSaBadDecrypt	1.3.6.1.4.1.18.3.5.27.4.1.9	Counter	read-only	The number of received packets that could not be properly decrypted.
CTR wfIkeSaBadPad	1.3.6.1.4.1.18.3.5.27.4.1.10	Counter	read-only	The number of received packets that contained bad padding information.
CTR wfIkeSaTxPkts	1.3.6.1.4.1.18.3.5.27.4.1.11	Counter	read-only	The number of packets sent.
CTR wfIkeSaRxPkts	1.3.6.1.4.1.18.3.5.27.4.1.12	Counter	read-only	The number of packets received.
CTR wfIkeSaTxOctets	1.3.6.1.4.1.18.3.5.27.4.1.13	Counter	read-only	The number of octets transmitted.
CTR wfIkeSaRxOctets	1.3.6.1.4.1.18.3.5.27.4.1.14	Counter	read-only	The number of octets received.

RFC description

Internet Key Exchange (IKE) proposal descriptors for VPN security policy management.

Start monitoring Wellfleet/Bay Networks routers, legacy IPsec VPN gateway routers (IKE phase-1/phase-2 negotiation status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download Wellfleet-IKE-MIB

What Is Wellfleet-IKE-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description