Wellfleet-IPSEC-MIB

All MIBs › Wellfleet-IPSEC-MIB

Category: VPN and Tunneling

Description: Monitors Wellfleet IPsec security association parameters, encryption algorithms, and VPN tunnel statistics.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is Wellfleet-IPSEC-MIB?

Wellfleet-IPSEC-MIB is a Wellfleet Communications (later Nortel/Bay Networks) enterprise MIB for monitoring IPsec functionality on Wellfleet routers, covering security association (SA) parameters, encryption/authentication algorithms in use, and VPN tunnel statistics. Though no sample objects were provided, based on its description it would expose per-tunnel SA state, negotiated encryption algorithm, and packet/byte counters for VPN traffic. This MIB is used to monitor the software-level security status of the router -- specifically whether IPsec tunnels are established, which algorithms are negotiated, and how much traffic is flowing through each tunnel -- serving as a VPN health and security-posture MIB rather than physical hardware sensor telemetry. It likely conceptually aligns with the IETF IPsec-related MIBs (e.g. IPSEC-MIB draft-era definitions) for SA representation, though the specific relationship cannot be confirmed here. It would typically be deployed in legacy Wellfleet/Bay Networks router environments providing site-to-site or remote-access VPN connectivity. Network engineers evaluating or troubleshooting this functionality can download the Wellfleet-IPSEC-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in Wellfleet-IPSEC-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Wellfleet/Bay Networks routers with IPsec VPN capability

Monitoring Examples

No sample objects were supplied for this module, so specific table or object names cannot be confirmed; a typical use would involve polling security association state and tunnel traffic counters to detect a dropped or renegotiating IPsec tunnel, but exact OID names cannot be verified from the available data.

What Can Be Monitored

IPsec security association status
negotiated encryption algorithm
VPN tunnel traffic counters

Imported Objects

From RFC-1212

OBJECT-TYPE

From RFC1155-SMI

Counter
Gauge
IpAddress
Opaque

From RFC1213-MIB

DisplayString

From Wellfleet-COMMON-MIB

wfIpsecGroup

OBJECT-IDENTITY

OIDs

OID symbolic	OID numeric	Type	Access	Description
wfIpsecBase	1.3.6.1.4.1.18.3.5.3.26.1
INT wfIpsecBaseCreate	1.3.6.1.4.1.18.3.5.3.26.1.1	INTEGER	read-write	Create/Delete parameter. Default is created. Users perform a set operation on this object in order to create/delete IPSec.
INT wfIpsecBaseEnable	1.3.6.1.4.1.18.3.5.3.26.1.2	INTEGER	read-write	Enable/Disable parameter. Default is enabled. Users perform a set operation on this object in order to enable/disable IPSec.
INT wfIpsecBaseState	1.3.6.1.4.1.18.3.5.3.26.1.3	INTEGER	read-only	The current state of IPsec.
INT wfIpsecBaseEspEncipherEnable	1.3.6.1.4.1.18.3.5.3.26.1.4	INTEGER	read-write	Used to control the whether ESP enciphers packets or not. Set this attribute to disable for debugging purposes only. When set to disabled, packets that match a policy that uses ESP to encipher the payload will not be enciphered. This allows one to view the plaintext inner headers for debugging purposes.
INT wfIpsecBaseMaxManualSpi	1.3.6.1.4.1.18.3.5.3.26.1.5	INTEGER	read-write	The maximum SPI value that will be accepted for manually configured SAs. The SA values 0 - 255 is reserved. To enter this value add the number of SAs belonging to a particular IPSec protocol ex ESP to 255. The default value is maximum of 32 unique ESP SAs. The value 255 will cause no manual SAs supported
wfIpsecSelectorInTable	1.3.6.1.4.1.18.3.5.3.26.2		not-accessible	A table of selectors used to identify which IP security policy should be applied to a packet.
wfIpsecSelectorInEntry	1.3.6.1.4.1.18.3.5.3.26.2.1		not-accessible	IP Security Selectors for a policy
INT wfIpsecSelectorInCreate	1.3.6.1.4.1.18.3.5.3.26.2.1.1	INTEGER	read-write	Defines the existence of the policy's selectors: created - instance exists delete - instance should be deleted.
INT wfIpsecSelectorInEnable	1.3.6.1.4.1.18.3.5.3.26.2.1.2	INTEGER	read-write	Defines whether or not the policy should be used: enabled - activate the policy's selectors. disabled - deactivate the policy's selectors.
INT wfIpsecSelectorInStatus	1.3.6.1.4.1.18.3.5.3.26.2.1.3	INTEGER	read-only	Defines the current status of the this instance: up: this instance is in use down: this instance is misconfigured inactive: this instance is disabled notpresent: the IPsec code isn't loaded
CTR wfIpsecSelectorInCounter	1.3.6.1.4.1.18.3.5.3.26.2.1.4	Counter	read-only	The number of received packets that have matched the selectors.
OPA wfIpsecSelectorInDefinition	1.3.6.1.4.1.18.3.5.3.26.2.1.5	Opaque	read-write	The policy's selector definition.
INT wfIpsecSelectorInReserved	1.3.6.1.4.1.18.3.5.3.26.2.1.6	INTEGER	read-only	Reserved field.
IP wfIpsecSelectorInInterface	1.3.6.1.4.1.18.3.5.3.26.2.1.7	IpAddress	read-only	The network address of the IP interface to which the corresponding policy is applied.
INT wfIpsecSelectorInCircuit	1.3.6.1.4.1.18.3.5.3.26.2.1.8	INTEGER	read-only	The ID of the Circuit to which the corresponding policy is applied.
INT wfIpsecSelectorInPolicyNumber	1.3.6.1.4.1.18.3.5.3.26.2.1.9	INTEGER	read-only	ID policy's selectors.
INT wfIpsecSelectorInFragment	1.3.6.1.4.1.18.3.5.3.26.2.1.10	INTEGER	read-only	Fragment number - for large sets of selectors.
STR wfIpsecSelectorInName	1.3.6.1.4.1.18.3.5.3.26.2.1.11	DisplayString	read-write	name of this instance of selectors.
wfIpsecSelectorOutTable	1.3.6.1.4.1.18.3.5.3.26.3		not-accessible	A table of selectors used to identify which IP security policy should be applied to a packet.
wfIpsecSelectorOutEntry	1.3.6.1.4.1.18.3.5.3.26.3.1		not-accessible	IP Security Selectors for a policy
INT wfIpsecSelectorOutCreate	1.3.6.1.4.1.18.3.5.3.26.3.1.1	INTEGER	read-write	Defines the existence of the policy's selectors: created - instance exists delete - instance should be deleted.
INT wfIpsecSelectorOutEnable	1.3.6.1.4.1.18.3.5.3.26.3.1.2	INTEGER	read-write	Defines whether or not the policy should be used: enabled - activate the policy's selectors. disabled - deactivate the policy's selectors.
INT wfIpsecSelectorOutStatus	1.3.6.1.4.1.18.3.5.3.26.3.1.3	INTEGER	read-only	Defines the current status of the this instance: up: this instance is in use down: this instance is misconfigured inactive: this instance is disabled notpresent: the IPsec code isn't loaded
CTR wfIpsecSelectorOutCounter	1.3.6.1.4.1.18.3.5.3.26.3.1.4	Counter	read-only	The number of received packets that have matched the selectors.
OPA wfIpsecSelectorOutDefinition	1.3.6.1.4.1.18.3.5.3.26.3.1.5	Opaque	read-write	The policy's selector definition.
INT wfIpsecSelectorOutReserved	1.3.6.1.4.1.18.3.5.3.26.3.1.6	INTEGER	read-only	Reserved field.
IP wfIpsecSelectorOutInterface	1.3.6.1.4.1.18.3.5.3.26.3.1.7	IpAddress	read-only	The network address of the IP interface to which the corresponding policy is applied.
INT wfIpsecSelectorOutCircuit	1.3.6.1.4.1.18.3.5.3.26.3.1.8	INTEGER	read-only	The ID of the Circuit to which the corresponding policy is applied.
INT wfIpsecSelectorOutPolicyNumber	1.3.6.1.4.1.18.3.5.3.26.3.1.9	INTEGER	read-only	ID policy's selectors.
INT wfIpsecSelectorOutFragment	1.3.6.1.4.1.18.3.5.3.26.3.1.10	INTEGER	read-only	Fragment number - for large sets of selectors.
STR wfIpsecSelectorOutName	1.3.6.1.4.1.18.3.5.3.26.3.1.11	DisplayString	read-write	name of this instance of selectors.
wfIpsecDescriptorTable	1.3.6.1.4.1.18.3.5.3.26.4		not-accessible	Table of IP security descriptors
wfIpsecDescriptorEntry	1.3.6.1.4.1.18.3.5.3.26.4.1		not-accessible	An IP security Descriptor
INT wfIpsecDescriptorCreate	1.3.6.1.4.1.18.3.5.3.26.4.1.1	INTEGER	read-write	Create/Delete parameter. Default is created.
INT wfIpsecDescriptorStatus	1.3.6.1.4.1.18.3.5.3.26.4.1.2	INTEGER	read-only	The status of this instance: up: this instance is in use down: this instance is misconfigured inactive: this instance is disabled notpresent: the IPsec code isn't loaded
INT wfIpsecDescriptorPolicyNumber	1.3.6.1.4.1.18.3.5.3.26.4.1.3	INTEGER	read-only	Allows instance of wfIpsecSelectorOutEntry to be matched with this instance.
IP wfIpsecDescriptorInterface	1.3.6.1.4.1.18.3.5.3.26.4.1.4	IpAddress	read-only	The IP address of the security gateway which this descriptor belongs to.
INT wfIpsecDescriptorCircuit	1.3.6.1.4.1.18.3.5.3.26.4.1.5	INTEGER	read-only	The ID of the Circuit to which this instance applies.
OPA wfIpsecDescriptorManualSaList	1.3.6.1.4.1.18.3.5.3.26.4.1.6	Opaque	read-write	the octet string represents an ordered list of Security Associations (SAs). the format of each 9 byte sequence is: ------------+-----------+-----------+------------+----------- \| protocol \| Peer IP Address \| ------------+-----------+-----------+------------+----------- \| SPI \| ------------+-----------+-----------+------------+
INT wfIpsecDescriptorSaMode	1.3.6.1.4.1.18.3.5.3.26.4.1.7	INTEGER	read-write	Identifies mode of the SA for this policy.
INT wfIpsecDescriptorPfs	1.3.6.1.4.1.18.3.5.3.26.4.1.8	INTEGER	read-write	Identifies whether perfect forward secrecy is required or not.
OPA wfIpsecDescriptorProposals	1.3.6.1.4.1.18.3.5.3.26.4.1.9	Opaque	read-write	the octet string represents an ordered list of proposals. Every 2 octets in the string contains a number which corresponds to an instance I.D. of wfIpsecProposalEntry. The list of proposals is a logically ORed list.
INT wfIpsecDescriptorSourceForDestAddr	1.3.6.1.4.1.18.3.5.3.26.4.1.10	INTEGER	read-write	The source for the destination IP address value to be used in the SA. 'packet' limits use of the SA to those packets which have a matching IP addr even if the policy permits a range. 'policy' allows more than one traffic flow to use the SA if the policy permits a range of IP addresses.
INT wfIpsecDescriptorSourceForSrcAddr	1.3.6.1.4.1.18.3.5.3.26.4.1.11	INTEGER	read-write	The source for the destination IP address value to be used in the SA. 'packet' limits use of the SA to those packets which have a matching IP addr even if the policy permits a range. 'policy' allows more than one traffic flow to use the SA if the policy permits a range of IP addresses.
INT wfIpsecDescriptorSourceForProtocol	1.3.6.1.4.1.18.3.5.3.26.4.1.12	INTEGER	read-write	The source for the destination IP address value to be used in the SA. 'packet' limits use of the SA to those packets which have a matching IP addr even if the policy permits a range. 'policy' allows more than one traffic flow to use the SA if the policy permits a range of IP addresses.
IP wfIpsecDescriptorStartSourceAddr	1.3.6.1.4.1.18.3.5.3.26.4.1.13	IpAddress	read-write	The start Source IP address for the dynamic SA.
IP wfIpsecDescriptorEndSourceAddr	1.3.6.1.4.1.18.3.5.3.26.4.1.14	IpAddress	read-write	The end Source IP address for the dynamic SA.
IP wfIpsecDescriptorStartDestAddr	1.3.6.1.4.1.18.3.5.3.26.4.1.15	IpAddress	read-write	The start Destination IP address for the dynamic SA.
IP wfIpsecDescriptorEndDestAddr	1.3.6.1.4.1.18.3.5.3.26.4.1.16	IpAddress	read-write	The end Source IP address for the dynamic SA.
INT wfIpsecDescriptorSourcePort	1.3.6.1.4.1.18.3.5.3.26.4.1.17	INTEGER	read-write	The source port number for the dynamic SA.
INT wfIpsecDescriptorProtocol	1.3.6.1.4.1.18.3.5.3.26.4.1.18	INTEGER	read-write	The IP protocol for the dynamic SA.
IP wfIpsecDescriptorPrimarySG	1.3.6.1.4.1.18.3.5.3.26.4.1.19	IpAddress	read-write	The address of the remote gateway.
INT wfIpsecDescriptorInboundIdleTimer	1.3.6.1.4.1.18.3.5.3.26.4.1.20	INTEGER	read-write	Inbound (Unprotect) SA inactivity timer, in minutes. If no traffic is received on an automated inbound SA for the indicated time, both SAs for this policy will be deleted. A value of zero disables the timer.
INT wfIpsecDescriptorAntiReplayWindow	1.3.6.1.4.1.18.3.5.3.26.4.1.21	INTEGER	read-write	Anti-replay checking implies checking the sequence number of each encrypted packet received and determining if we have received this packet before. Anti-replay checking by receivers of encrypted traffic is optional. It must only happen if authentication is select one of the security services for this flow. Anti-replay even if enabled will not happen for packets which are only encrypted. This MIB attribute controls the number of packets which are kept track of for replay checking. Anything sequence number less than the window size is thrown away.
INT wfIpsecDescriptorDestPort	1.3.6.1.4.1.18.3.5.3.26.4.1.22	INTEGER	read-write	The destination port number for the dynamic SA.
wfIpsecEspSaTable	1.3.6.1.4.1.18.3.5.3.26.5		not-accessible	The ESP security association table
wfIpsecEspSaEntry	1.3.6.1.4.1.18.3.5.3.26.5.1		not-accessible	Entry in ESP security association table
INT wfIpsecEspSaCreate	1.3.6.1.4.1.18.3.5.3.26.5.1.1	INTEGER	read-write	Create/Delete parameter.
INT wfIpsecEspSaStatus	1.3.6.1.4.1.18.3.5.3.26.5.1.2	INTEGER	read-only	The current status of this Security Association: up: this SA is in use down: this SA is misconfigured inactive: this SA is disabled notpresent: the IPsec code isn't loaded
IP wfIpsecEspSaSrc	1.3.6.1.4.1.18.3.5.3.26.5.1.3	IpAddress	read-only	The IP address of the SA's source.
IP wfIpsecEspSaDest	1.3.6.1.4.1.18.3.5.3.26.5.1.4	IpAddress	read-only	The IP address of the SA's destination.
INT wfIpsecEspSaSpi	1.3.6.1.4.1.18.3.5.3.26.5.1.5	INTEGER	read-only	The security parameters index
INT wfIpsecEspSaCipherAlg	1.3.6.1.4.1.18.3.5.3.26.5.1.6	INTEGER	read-write	Identifies cipher algorithm for this SA.
OCT wfIpsecEspSaManualCipherKey	1.3.6.1.4.1.18.3.5.3.26.5.1.7	OCTET STRING	read-write	The key for a manually-keyed SA's cipher algorithm
INT wfIpsecEspSaDesKeyStrength	1.3.6.1.4.1.18.3.5.3.26.5.1.8	INTEGER	read-write	The strength of the cipher key.
INT wfIpsecEspSaIntegrityAlg	1.3.6.1.4.1.18.3.5.3.26.5.1.9	INTEGER	read-write	The algorithm for ESP Auth.
OCT wfIpsecEspSaManualIntegrityKey	1.3.6.1.4.1.18.3.5.3.26.5.1.10	OCTET STRING	read-write	The key for a manually-keyed SA's integrity algorithm
INT wfIpsecEspSaVerifyPad	1.3.6.1.4.1.18.3.5.3.26.5.1.11	INTEGER	read-write	This attribute enables checking of the pad field of ESP packets making sure it is in expected numeric ascending order. Packets with bad padding are discarded.
INT wfIpsecEspSaReset	1.3.6.1.4.1.18.3.5.3.26.5.1.12	INTEGER	read-write	Reset IPSec SA statistics indicator.
CTR wfIpsecEspSaBadAuthen	1.3.6.1.4.1.18.3.5.3.26.5.1.13	Counter	read-only	The number of received encrypted packets that could not be properly authenticated.
CTR wfIpsecEspSaBadDecrypt	1.3.6.1.4.1.18.3.5.3.26.5.1.14	Counter	read-only	The number of received packets that could not be properly decrypted.
CTR wfIpsecEspSaBadPad	1.3.6.1.4.1.18.3.5.3.26.5.1.15	Counter	read-only	The number of received packets that contained bad padding information.
CTR wfIpsecEspSaProtectPkt	1.3.6.1.4.1.18.3.5.3.26.5.1.16	Counter	read-only	The number of successfully encrypted packets.
CTR wfIpsecEspSaUnprotectPkt	1.3.6.1.4.1.18.3.5.3.26.5.1.17	Counter	read-only	The number of successfully decrypted packets.
CTR wfIpsecEspSaEncryptByte	1.3.6.1.4.1.18.3.5.3.26.5.1.18	Counter	read-only	The number of successfully encrypted bytes.
CTR wfIpsecEspSaDecryptByte	1.3.6.1.4.1.18.3.5.3.26.5.1.19	Counter	read-only	The number of successfully encrypted bytes.
INT wfIpsecEspSaMode	1.3.6.1.4.1.18.3.5.3.26.5.1.20	INTEGER	read-write	Identifies mode of the SA.
INT wfIpsecEspSaPfs	1.3.6.1.4.1.18.3.5.3.26.5.1.21	INTEGER	read-write	Identifies whether this SA has perfect forward secrecy or not.
INT wfIpsecEspSaExpiryType	1.3.6.1.4.1.18.3.5.3.26.5.1.22	INTEGER	read-write	The units used to interpret the expiry value. The SA's keys don't expire when this is set to none.
INT wfIpsecEspSaExpiryValue	1.3.6.1.4.1.18.3.5.3.26.5.1.23	INTEGER	read-write	The value used to determine when the keys for this SA expire.
wfIpsecStatsTable	1.3.6.1.4.1.18.3.5.3.26.6		not-accessible	The interface statistics table
wfIpsecStatsEntry	1.3.6.1.4.1.18.3.5.3.26.6.1		not-accessible	Entry in Interface Statistics Table
INT wfIpsecStatsCreate	1.3.6.1.4.1.18.3.5.3.26.6.1.1	INTEGER	read-only	Create/Delete parameter.
IP wfIpsecStatsInterface	1.3.6.1.4.1.18.3.5.3.26.6.1.2	IpAddress	read-only	The IP address of the security gateway which these statistics belong to.
INT wfIpsecStatsCircuit	1.3.6.1.4.1.18.3.5.3.26.6.1.3	INTEGER	read-only	The ID of the Circuit to which this instance applies.
INT wfIpsecStatsReset	1.3.6.1.4.1.18.3.5.3.26.6.1.4	INTEGER	read-write	Reset IPSec statistics indicator.
CTR wfIpsecStatsUnprotectPkt	1.3.6.1.4.1.18.3.5.3.26.6.1.5	Counter	read-only	The number of received packets successfully decrypted.
CTR wfIpsecStatsProtectPkt	1.3.6.1.4.1.18.3.5.3.26.6.1.6	Counter	read-only	The number of received packets successfully encrypted.
CTR wfIpsecStatsBypassPkt	1.3.6.1.4.1.18.3.5.3.26.6.1.7	Counter	read-only	The number of received packets that have bypassed.
CTR wfIpsecStatsDropPkt	1.3.6.1.4.1.18.3.5.3.26.6.1.8	Counter	read-only	The number of received packets that have been dropped.
CTR wfIpsecStatsNoSa	1.3.6.1.4.1.18.3.5.3.26.6.1.9	Counter	read-only	The number of received packets for which no SA was found.
INT wfIpsecStatsLastBadSpi	1.3.6.1.4.1.18.3.5.3.26.6.1.10	INTEGER	read-only	The last security parameters index for which no SA could be found.
CTR wfIpsecStatsNoPolicyMatch	1.3.6.1.4.1.18.3.5.3.26.6.1.11	Counter	read-only	The number of received packets for which no policy match could be found.
CTR wfIpsecStatsSaExpDropBytes	1.3.6.1.4.1.18.3.5.3.26.6.1.12	Counter	read-only	The number of bytes discarded owing to SA Expiry
CTR wfIpsecStatsOutClips	1.3.6.1.4.1.18.3.5.3.26.6.1.13	Counter	read-only	The number of outbound packets clipped due to buffer congestion.
CTR wfIpsecStatsInClips	1.3.6.1.4.1.18.3.5.3.26.6.1.14	Counter	read-only	The number of inbound packets clipped due to buffer congestion.
wfIpsecRemoteGatewayTable	1.3.6.1.4.1.18.3.5.3.26.7		not-accessible	A table of known remote Security Gateways.
wfIpsecRemoteGatewayEntry	1.3.6.1.4.1.18.3.5.3.26.7.1		not-accessible	A remote Security Gateway
INT wfIpsecRemoteGatewayCreate	1.3.6.1.4.1.18.3.5.3.26.7.1.1	INTEGER	read-write	creates or deletes an instance.
INT wfIpsecRemoteGatewayEnable	1.3.6.1.4.1.18.3.5.3.26.7.1.2	INTEGER	read-write	enables and disables this instance.
INT wfIpsecRemoteGatewayStatus	1.3.6.1.4.1.18.3.5.3.26.7.1.3	INTEGER	read-only	Defines the current status of the instance: inactive - ? active - ? error - ?
IP wfIpsecRemoteGatewayInterface	1.3.6.1.4.1.18.3.5.3.26.7.1.4	IpAddress	read-only	The address of the IP interface to which this instance applies.
INT wfIpsecRemoteGatewayCircuit	1.3.6.1.4.1.18.3.5.3.26.7.1.5	INTEGER	read-only	The ID of the Circuit to which the instance applies.
INT wfIpsecRemoteGatewayIndex	1.3.6.1.4.1.18.3.5.3.26.7.1.6	INTEGER	read-only	An index used to differentiate remote gateway instances.
IP wfIpsecRemoteGatewayIpAddr	1.3.6.1.4.1.18.3.5.3.26.7.1.7	IpAddress	read-write	The address of the remote gateway.
OCT wfIpsecRemoteGatewayRange	1.3.6.1.4.1.18.3.5.3.26.7.1.8	OCTET STRING	read-write	The range of destination IP addresses that the remote security gateway represents.
STR wfIpsecRemoteGatewayName	1.3.6.1.4.1.18.3.5.3.26.7.1.9	DisplayString	read-write	name of the remote security gateway.
wfIpsecProposalTable	1.3.6.1.4.1.18.3.5.3.26.8		not-accessible	Table of IP security proposals
wfIpsecProposalEntry	1.3.6.1.4.1.18.3.5.3.26.8.1		not-accessible	An IP security Proposal. This is essentially a sequence of protection suites represented by wfIpsecSuiteEntry instances
INT wfIpsecProposalCreate	1.3.6.1.4.1.18.3.5.3.26.8.1.1	INTEGER	read-write	Create/Delete parameter. Default is created.
INT wfIpsecProposalStatus	1.3.6.1.4.1.18.3.5.3.26.8.1.2	INTEGER	read-only	The status of this Proposal.
STR wfIpsecProposalName	1.3.6.1.4.1.18.3.5.3.26.8.1.3	DisplayString	read-write	Proposal name.
INT wfIpsecProposalNumber	1.3.6.1.4.1.18.3.5.3.26.8.1.4	INTEGER	read-only	A number that identifies this proposal.
OPA wfIpsecProposalSuites	1.3.6.1.4.1.18.3.5.3.26.8.1.5	Opaque	read-write	the octet string contains a list of ordered, 2 byte numbers that correspond to wfIpsecSuiteEntry instance ID's. The list of protection suites is a logically ANDed list. This allows multiple protocols to be used for a policy.
wfIpsecSuiteTable	1.3.6.1.4.1.18.3.5.3.26.9		not-accessible	Table of IP security protection suites
wfIpsecSuiteEntry	1.3.6.1.4.1.18.3.5.3.26.9.1		not-accessible	An IP security protection suite
INT wfIpsecSuiteCreate	1.3.6.1.4.1.18.3.5.3.26.9.1.1	INTEGER	read-write	Create/Delete parameter. Default is created.
INT wfIpsecSuiteStatus	1.3.6.1.4.1.18.3.5.3.26.9.1.2	INTEGER	read-only	The status of this Suite.
STR wfIpsecSuiteName	1.3.6.1.4.1.18.3.5.3.26.9.1.3	DisplayString	read-write	Suite name.
INT wfIpsecSuiteNumber	1.3.6.1.4.1.18.3.5.3.26.9.1.4	INTEGER	read-only	A number that identifies this protection suite.
OPA wfIpsecSuiteEspProtocol	1.3.6.1.4.1.18.3.5.3.26.9.1.5	Opaque	read-write	The ordered sequence of wfIpsecEspTransformEntry instances that comprise this protection suite.
OPA wfIpsecSuiteAhProtocol	1.3.6.1.4.1.18.3.5.3.26.9.1.6	Opaque	read-write	The ordered sequence of wfIpsecAhProposalEntry instances that comprise this protection suite.
wfIpsecEspTransformTable	1.3.6.1.4.1.18.3.5.3.26.10		not-accessible	Table of IP security policies
wfIpsecEspTransformEntry	1.3.6.1.4.1.18.3.5.3.26.10.1		not-accessible	An IP security ESP Transform
INT wfIpsecEspTransformCreate	1.3.6.1.4.1.18.3.5.3.26.10.1.1	INTEGER	read-write	Create/Delete parameter. Default is created.
INT wfIpsecEspTransformStatus	1.3.6.1.4.1.18.3.5.3.26.10.1.2	INTEGER	read-only	The status of this ESP Transform.
STR wfIpsecEspTransformName	1.3.6.1.4.1.18.3.5.3.26.10.1.3	DisplayString	read-write	ESP Transform name.
INT wfIpsecEspTransformNumber	1.3.6.1.4.1.18.3.5.3.26.10.1.4	INTEGER	read-only	A number that identifies this ESP proposal.
INT wfIpsecEspTransformCipherAlg	1.3.6.1.4.1.18.3.5.3.26.10.1.5	INTEGER	read-write	The cipher algorithm for ESP.
INT wfIpsecEspTransformKeyLength	1.3.6.1.4.1.18.3.5.3.26.10.1.6	INTEGER	read-write	The key length for the ESP cipher algorithm.
INT wfIpsecEspTransformIntegrityAlg	1.3.6.1.4.1.18.3.5.3.26.10.1.7	INTEGER	read-write	The algorithm for ESP Auth.
INT wfIpsecEspTransformExpiryTime	1.3.6.1.4.1.18.3.5.3.26.10.1.8	INTEGER	read-write	The value used to determine when the keys for this SA expire due to the passage of time. The units are minutes. The minium recommended value is 10 min.
INT wfIpsecEspTransformExpiryMBytes	1.3.6.1.4.1.18.3.5.3.26.10.1.9	INTEGER	read-write	The value used to determine when the keys for this SA expire due to the number of bytes processed. The units are mega-bytes. The minium recommended value is 10 Mbytes. A value of 0 indicates that MByte expiry is not desired.
INT wfIpsecEspTransformExpiryPref	1.3.6.1.4.1.18.3.5.3.26.10.1.10	INTEGER	read-write	The value used to determine precedence between time/kbyte expiry
wfIpsecAhTransformTable	1.3.6.1.4.1.18.3.5.3.26.11		not-accessible	Table of IP security policies
wfIpsecAhTransformEntry	1.3.6.1.4.1.18.3.5.3.26.11.1		not-accessible	An IP security AhTransform
INT wfIpsecAhTransformCreate	1.3.6.1.4.1.18.3.5.3.26.11.1.1	INTEGER	read-write	Create/Delete parameter. Default is created.
INT wfIpsecAhTransformStatus	1.3.6.1.4.1.18.3.5.3.26.11.1.2	INTEGER	read-only	The status of this AhTransform.
STR wfIpsecAhTransformName	1.3.6.1.4.1.18.3.5.3.26.11.1.3	DisplayString	read-write	AhTransform name.
INT wfIpsecAhTransformNumber	1.3.6.1.4.1.18.3.5.3.26.11.1.4	INTEGER	read-only	A number that identifies this AH proposal.
INT wfIpsecAhTransformIntegrityAlg	1.3.6.1.4.1.18.3.5.3.26.11.1.5	INTEGER	read-write	The algorithm for AH.
INT wfIpsecAhTransformGroup	1.3.6.1.4.1.18.3.5.3.26.11.1.6	INTEGER	read-write	The DH group
INT wfIpsecAhTransformExpiryType	1.3.6.1.4.1.18.3.5.3.26.11.1.7	INTEGER	read-write	The units used to interpret the expiry value. The SA's keys don't expire when this is set to none.
INT wfIpsecAhTransformExpiryValue	1.3.6.1.4.1.18.3.5.3.26.11.1.8	INTEGER	read-write	The value used to determine when the keys for this SA expire.
wfIpsecSaStatsTable	1.3.6.1.4.1.18.3.5.3.26.12		not-accessible	The Ipsec automated SA table
wfIpsecSaStatsEntry	1.3.6.1.4.1.18.3.5.3.26.12.1		not-accessible	Entry in Automated ESP SA table
INT wfIpsecSaStatsStatus	1.3.6.1.4.1.18.3.5.3.26.12.1.1	INTEGER	read-only	The current status of this Security Association: up: this SA is in use down: this SA is misconfigured ??? inactive: this SA is disabled ??? notpresent: the IPsec code isn't loaded ???
IP wfIpsecSaStatsSrc	1.3.6.1.4.1.18.3.5.3.26.12.1.2	IpAddress	read-only	The IP address of the SA's source.
IP wfIpsecSaStatsDest	1.3.6.1.4.1.18.3.5.3.26.12.1.3	IpAddress	read-only	The IP address of the SA's destination.
GAU wfIpsecSaStatsSpi	1.3.6.1.4.1.18.3.5.3.26.12.1.4	Gauge	read-only	The security parameters index
INT wfIpsecSaStatsProto	1.3.6.1.4.1.18.3.5.3.26.12.1.5	INTEGER	read-only	The protocol used by this SA.
INT wfIpsecSaStatsCipherAlg	1.3.6.1.4.1.18.3.5.3.26.12.1.6	INTEGER	read-only	Identifies cipher algorithm for this SA.
INT wfIpsecSaStatsIntegrityAlg	1.3.6.1.4.1.18.3.5.3.26.12.1.7	INTEGER	read-only	The algorithm for ESP Auth.
CTR wfIpsecSaStatsBadAuthen	1.3.6.1.4.1.18.3.5.3.26.12.1.8	Counter	read-only	The number of received encrypted packets that could not be properly authenticated.
CTR wfIpsecSaStatsBadDecrypt	1.3.6.1.4.1.18.3.5.3.26.12.1.9	Counter	read-only	The number of received packets that could not be properly decrypted.
CTR wfIpsecSaStatsBadPad	1.3.6.1.4.1.18.3.5.3.26.12.1.10	Counter	read-only	The number of received packets that contained bad padding information.
CTR wfIpsecSaStatsProtectPkt	1.3.6.1.4.1.18.3.5.3.26.12.1.11	Counter	read-only	The number of successfully encrypted packets.
CTR wfIpsecSaStatsUnprotectPkt	1.3.6.1.4.1.18.3.5.3.26.12.1.12	Counter	read-only	The number of successfully decrypted packets.
CTR wfIpsecSaStatsEncryptByte	1.3.6.1.4.1.18.3.5.3.26.12.1.13	Counter	read-only	The number of successfully encrypted bytes.
CTR wfIpsecSaStatsDecryptByte	1.3.6.1.4.1.18.3.5.3.26.12.1.14	Counter	read-only	The number of successfully encrypted bytes.
INT wfIpsecSaStatsMode	1.3.6.1.4.1.18.3.5.3.26.12.1.15	INTEGER	read-only	Identifies mode of the SA.
INT wfIpsecSaStatsPfs	1.3.6.1.4.1.18.3.5.3.26.12.1.16	INTEGER	read-only	Identifies whether this SA has perfect forward secrecy or not.
INT wfIpsecSaStatsExpiryType	1.3.6.1.4.1.18.3.5.3.26.12.1.17	INTEGER	read-only	The units used to interpret the expiry value. The SA's keys don't expire when this is set to none.
INT wfIpsecSaStatsExpiryValue	1.3.6.1.4.1.18.3.5.3.26.12.1.18	INTEGER	read-only	The value used to determine when the keys for this SA expire.

RFC description

Wellfleet IPSec MIB for managing IPSec policies, encryption parameters, and Security Association configuration on Wellfleet routers.

Start monitoring Wellfleet/Bay Networks routers with IPsec VPN capability (SA/tunnel traffic-counter status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download Wellfleet-IPSEC-MIB

What Is Wellfleet-IPSEC-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description