All MIBs › Wellfleet-IPSEC-MIB › wfIpsecDescriptorAntiReplayWindow
wfIpsecDescriptorAntiReplayWindow
Module: Wellfleet-IPSEC-MIB
OID (symbolic): Wellfleet-IPSEC-MIB::wfIpsecDescriptorAntiReplayWindow
OID (numeric): 1.3.6.1.4.1.18.3.5.3.26.4.1.21
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-write
Description: Anti-replay checking implies checking the sequence number of each encrypted packet received and determining if we have received this packet before. Anti-replay checking by receivers of encrypted traffic is optional. It must only happen if authentication is select one of the security services for this flow. Anti-replay even if enabled will not happen for packets which are only encrypted. This MIB attribute controls the number of packets which are kept track of for replay checking. Anything sequence number less than the window size is thrown away.
What is wfIpsecDescriptorAntiReplayWindow?
Sets the anti-replay sequence-number window for this policy: disabled(1), or a window of the last 32/64(default)/128 packets; per the source DESCRIPTION this only takes effect when authentication is also selected, and any packet with a sequence number older than the window is discarded as a possible replay attack.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.18.3.5.3.26.4.1.21 snmpwalk -v2c -c public <target> Wellfleet-IPSEC-MIB::wfIpsecDescriptorAntiReplayWindow
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.18.3.5.3.26.4.1.21.1 snmpget -v2c -c public <target> Wellfleet-IPSEC-MIB::wfIpsecDescriptorAntiReplayWindow.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.18.3.5.3.26.4.1.21.1 i <value>
Start monitoring Wellfleet/Bay Networks routers with IPsec VPN capability (SA/tunnel traffic-counter status) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the Wellfleet-IPSEC-MIB::wfIpsecDescriptorAntiReplayWindow OID value, configure state conditions and alerts, and monitor any Wellfleet/Bay Networks routers with IPsec VPN capability (SA/tunnel traffic-counter status) from a single console.
OID Breakdown
Upper-level ancestors (11 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.18 | wellfleet | CMU-MIB |
| 1.3.6.1.4.1.18.3 | wfSwSeries7 | Wellfleet-COMMON-MIB |
| 1.3.6.1.4.1.18.3.5 | wfApplication | Wellfleet-COMMON-MIB |
| 1.3.6.1.4.1.18.3.5.3 | wfInternet | Wellfleet-COMMON-MIB |
| 1.3.6.1.4.1.18.3.5.3.26 | wfIpsecGroup | Wellfleet-COMMON-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.18.3.5.3.26.4 | wfIpsecDescriptorTable | Wellfleet-IPSEC-MIB |
| 1.3.6.1.4.1.18.3.5.3.26.4.1 | wfIpsecDescriptorEntry | Wellfleet-IPSEC-MIB |
| 1.3.6.1.4.1.18.3.5.3.26.4.1.21 | wfIpsecDescriptorAntiReplayWindow | Wellfleet-IPSEC-MIB |