16-Security

HomeSupportReference GuidesMIB CompanionH3C S6800 & S6860 Switch Series MIB Companion-Release 671x-6W10016-Security
02-HH3C-IPSEC-MONITOR-V2-MIB
Title Size Download
02-HH3C-IPSEC-MONITOR-V2-MIB 231.82 KB

Contents

HH3C-IPSEC-MONITOR-V2-MIB· 3

About this MIB· 3

MIB file name· 3

Root object 3

Scalar objects· 3

hh3cIPsecMIBVersion· 3

hh3cIPsecGlobalActiveTunnelsV2· 3

hh3cIPsecGlobalActiveSasV2· 3

hh3cIPsecGlobalInOctetsV2· 4

hh3cIPsecGlobalInDecompOctetsV2· 4

hh3cIPsecGlobalInPktsV2· 4

hh3cIPsecGlobalInDropsV2· 4

hh3cIPsecGlobalInReplayDropsV2· 5

hh3cIPsecGlobalInAuthFailsV2· 5

hh3cIPsecGlobalInDecryptFailsV2· 5

hh3cIPsecGlobalOutOctetsV2· 5

hh3cIPsecGlobalOutUncompOctetsV2· 6

hh3cIPsecGlobalOutPktsV2· 6

hh3cIPsecGlobalOutDropsV2· 6

hh3cIPsecGlobalOutEncryptFailsV2· 7

hh3cIPsecGlobalNoMemoryDropsV2· 7

hh3cIPsecGlobalNoFindSaDropsV2· 7

hh3cIPsecGlobalQueueFullDropsV2· 7

hh3cIPsecGlobalInvalidLenDropsV2· 8

hh3cIPsecGlobalTooLongDropsV2· 8

hh3cIPsecGlobalInvalidSaDropsV2· 8

hh3cIPsecPolicyNameV2· 8

hh3cIPsecPolicySeqNumV2· 8

hh3cIPsecPolicySizeV2· 9

hh3cIPsecTrapGlobalCntlV2· 9

hh3cIPsecTunnelStartTrapCntlV2· 9

hh3cIPsecTunnelStopTrapCntlV2· 9

hh3cIPsecNoSaTrapCntlV2· 10

hh3cIPsecAuthFailureTrapCntlV2· 10

hh3cIPsecEncryFailureTrapCntlV2· 10

hh3cIPsecDecryFailureTrapCntlV2· 10

hh3cIPsecInvalidSaTrapCntlV2· 10

hh3cIPsecPolicyAddTrapCntlV2· 11

hh3cIPsecPolicyDelTrapCntlV2· 11

hh3cIPsecPolicyAttachTrapCntlV2· 11

hh3cIPsecPolicyDetachTrapCntlV2· 11

Tabular objects· 12

hh3cIPsecTunnelV2Table· 12

hh3cIPsecTunnelStatV2Table· 15

hh3cIPsecSaV2Table· 17

hh3cIPsecTrafficV2Table· 18

Notifications· 20

hh3cIPsecTunnelStartV2· 21

hh3cIPsecTunnelStopV2· 22

hh3cIPsecNoSaFailureV2· 23

hh3cIPsecAuthFailFailureV2· 24

hh3cIPsecEncryFailFailureV2· 25

hh3cIPsecDecryFailFailureV2· 26

hh3cIPsecPolicyAddV2· 27

hh3cIPsecPolicyDelV2· 27

hh3cIPsecPolicyAttachV2· 28

hh3cIPsecPolicyDetachV2· 29

 


 

HH3C-IPSEC-MONITOR-V2-MIB

About this MIB

Use this MIB to obtain information about IPsec tunnels, IPsec-protected traffic, IPsec SAs, IPsec tunnel packet statistics, and IPsec trap notifications.

MIB file name

hh3c-ipsec-monitor-v2.mib

Root object

iso(1).org(3).dod(6).internet(1).private(4).enterprises(1).hh3c(25506).hh3cCommon(2).hh3cIPsecMonitorV2(126)

 

Scalar objects

hh3cIPsecMIBVersion

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecMIBVersion (1.3.6.1.4.1.25506.2.126.1.1.1)

read-only

DisplayString

OCTET STRING (1..255)

IPsec MIB version information.

As per the MIB.

 

hh3cIPsecGlobalActiveTunnelsV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecGlobalActiveTunnelsV2 (1.3.6.1.4.1.25506.2.126.1.6.1)

read-only

Gauge32

Gauge32 (0..4294967295)

Total number of currently active IPsec Phase-2 tunnels.

As per the MIB.

 

hh3cIPsecGlobalActiveSasV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecGlobalActiveSasV2 (1.3.6.1.4.1.25506.2.126.1.6.2)

read-only

Gauge32

Gauge32 (0..4294967295)

Total number of existing IPsec Phase-2 SAs.

As per the MIB.

 

hh3cIPsecGlobalInOctetsV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecGlobalInOctetsV2 (1.3.6.1.4.1.25506.2.126.1.6.3)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of octets received by all current and previous IPsec Phase-2 tunnels.

This value is accumulated before determining whether or not the packet should be decompressed.

As per the MIB.

 

hh3cIPsecGlobalInDecompOctetsV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecGlobalInDecompOctetsV2 (1.3.6.1.4.1.25506.2.126.1.6.4)

read-only

Counter64

Counter64 (0..18446744073709551615)

The total number of decompressed octets received by all current and previous IPsec Phase-2 Tunnels.

This value is accumulated after a packet is decompressed.

Not supported

 

hh3cIPsecGlobalInPktsV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecGlobalInPktsV2 (1.3.6.1.4.1.25506.2.126.1.6.5)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of packets received by all current and previous IPsec Phase-2 tunnels.

As per the MIB.

 

hh3cIPsecGlobalInDropsV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecGlobalInDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.6)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of inbound packets dropped by all current and previous IPsec Phase-2 tunnels.

As per the MIB.

 

hh3cIPsecGlobalInReplayDropsV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecGlobalInReplayDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.7)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of inbound packets dropped due to anti-replay by all current and previous IPsec Phase-2 tunnels.

As per the MIB.

 

hh3cIPsecGlobalInAuthFailsV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecGlobalInAuthFailsV2 (1.3.6.1.4.1.25506.2.126.1.6.8)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of inbound packets that failed authentication on all current previous IPsec Phase-2 tunnels.

As per the MIB.

 

hh3cIPsecGlobalInDecryptFailsV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecGlobalInDecryptFailsV2 (1.3.6.1.4.1.25506.2.126.1.6.9)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of inbound packets that failed decryption on all current and previous IPsec Phase-2 tunnels.

As per the MIB.

 

hh3cIPsecGlobalOutOctetsV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecGlobalOutOctetsV2 (1.3.6.1.4.1.25506.2.126.1.6.10)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of octets sent by all current and previous IPsec Phase-2 tunnels.

This value is accumulated before determining whether or not the packet should be compressed.

As per the MIB.

 

hh3cIPsecGlobalOutUncompOctetsV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecGlobalOutUncompOctetsV2 (1.3.6.1.4.1.25506.2.126.1.6.11)

read-only

Counter64

Counter64 (0..18446744073709551615)

The total number of uncompressed octets sent by all current and previous IPsec Phase-2 Tunnels.

This value is accumulated before a packet is compressed.

Not supported

 

hh3cIPsecGlobalOutPktsV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecGlobalOutPktsV2 (1.3.6.1.4.1.25506.2.126.1.6.12)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of packets sent by all current and previous IPsec Phase-2 tunnels.

As per the MIB.

 

hh3cIPsecGlobalOutDropsV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecGlobalOutDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.13)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of outbound packets dropped by all current and previous IPsec Phase-2 tunnels.

As per the MIB.

 

hh3cIPsecGlobalOutEncryptFailsV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecGlobalOutEncryptFailsV2 (1.3.6.1.4.1.25506.2.126.1.6.14)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of outbound packets that failed encryption on all current and previous IPsec Phase-2 tunnels.

As per the MIB.

 

hh3cIPsecGlobalNoMemoryDropsV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecGlobalNoMemoryDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.15)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of packets dropped by all current and previous IPsec Phase-2 tunnels due to insufficient memory.

Not supported

 

hh3cIPsecGlobalNoFindSaDropsV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecGlobalNoFindSaDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.16)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of packets dropped by all current and previous IPsec Phase-2 tunnels due to SA not found.

As per the MIB.

 

hh3cIPsecGlobalQueueFullDropsV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecGlobalQueueFullDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.17)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of packets dropped by all current and previous IPsec Phase-2 tunnels due to full queue.

Not supported

 

hh3cIPsecGlobalInvalidLenDropsV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecGlobalInvalidLenDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.18)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of packets dropped by all current and previous IPsec Phase-2 tunnels due to invalid packet length.

As per the MIB.

 

hh3cIPsecGlobalTooLongDropsV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecGlobalTooLongDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.19)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of packets dropped by all current and previous IPsec Phase-2 tunnels due to too long packet.

As per the MIB.

 

hh3cIPsecGlobalInvalidSaDropsV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecGlobalInvalidSaDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.20)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of packets dropped by all current and previous IPsec Phase-2 tunnels due to invalid SA.

Not supported

 

hh3cIPsecPolicyNameV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecPolicyNameV2 (1.3.6.1.4.1.25506.2.126.1.7.1)

accessible-for-notify

STRING

OCTET STRING (1..63)

Name of an IPsec policy in a trap notification.

As per the MIB.

 

hh3cIPsecPolicySeqNumV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecPolicySeqNumV2 (1.3.6.1.4.1.25506.2.126.1.7.2)

accessible-for-notify

Integer32

Gauge32 (0..4294967295)

Sequence number of an IPsec policy entry in a trap notification.

As per the MIB.

 

hh3cIPsecPolicySizeV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecPolicySizeV2 (1.3.6.1.4.1.25506.2.126.1.7.3)

accessible-for-notify

Integer32

Gauge32 (0..4294967295)

Number of IPsec policy entries in a trap notification.

As per the MIB.

 

hh3cIPsecTrapGlobalCntlV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecTrapGlobalCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.1)

read-write

TruthValue

Integer32 (1,2)

Whether to enable trap notifications for IPsec events globally.

As per the MIB.

 

hh3cIPsecTunnelStartTrapCntlV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecTunnelStartTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.2)

read-write

TruthValue

Integer32 (1,2)

Whether to enable hh3cIPsecTunnelStartV2 trap notifications.

As per the MIB.

 

hh3cIPsecTunnelStopTrapCntlV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecTunnelStopTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.3)

read-write

TruthValue

Integer32 (1,2)

Whether to enable hh3cIPsecTunnelStopV2 trap notifications.

As per the MIB.

 

hh3cIPsecNoSaTrapCntlV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecNoSaTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.4)

read-write

TruthValue

Integer32 (1,2)

Whether to enable hh3cIPsecNoSaFailureV2 trap notifications.

As per the MIB.

 

hh3cIPsecAuthFailureTrapCntlV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecAuthFailureTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.5)

read-write

TruthValue

Integer32 (1,2)

Whether to enable hh3cIPsecAuthFailureV2 trap notifications.

As per the MIB.

 

hh3cIPsecEncryFailureTrapCntlV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecEncryFailureTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.6)

read-write

TruthValue

Integer32 (1,2)

Whether to enable hh3cIPsecEncryFailureV2 trap notifications.

As per the MIB.

 

hh3cIPsecDecryFailureTrapCntlV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecDecryFailureTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.7)

read-write

TruthValue

Integer32 (1,2)

Whether to enable hh3cIPsecDecryFailureV2 trap notifications.

As per the MIB.

 

hh3cIPsecInvalidSaTrapCntlV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecInvalidSaTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.8)

read-write

TruthValue

Integer32 (1,2)

Whether to enable hh3cIPsecInvalidSaFailureV2 trap notifications.

As per the MIB.

 

hh3cIPsecPolicyAddTrapCntlV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecPolicyAddTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.9)

read-write

TruthValue

Integer32 (1,2)

Whether to enable hh3cIPsecPolicyAddV2 trap notifications.

As per the MIB.

 

hh3cIPsecPolicyDelTrapCntlV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecPolicyDelTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.10)

read-write

TruthValue

Integer32 (1,2)

Whether to enable hh3cIPsecPolicyDelV2 trap notifications.

As per the MIB.

 

hh3cIPsecPolicyAttachTrapCntlV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecPolicyAttachTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.11)

read-write

TruthValue

Integer32 (1,2)

Whether to enable hh3cIPsecPolicyAttachV2 trap notifications.

As per the MIB.

 

hh3cIPsecPolicyDetachTrapCntlV2

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecPolicyDetachTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.12)

read-write

TruthValue

Integer32 (1,2)

Whether to enable hh3cIPsecPolicyDetachV2 trap notifications.

As per the MIB.

 

Tabular objects

hh3cIPsecTunnelV2Table

About this table

This table contains IPsec tunnel information.

Support for operations

Create

Edit/Modify

Delete

Read

Not supported

Not supported

Not supported

Supported

Columns

The table index is hh3cIPsecTunIndexV2.

Object(OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecTunIndexV2 (1.3.6.1.4.1.25506.2.126.1.2.1.1)

accessible-for-notify

Integer32

Integer32 (1..2147483647)

Index of an IPsec tunnel.

As per the MIB.

hh3cIPsecTunIfIndexV2 (1.3.6.1.4.1.25506.2.126.1.2.1.2)

read-only

InterfaceIndex

Integer32 (1..2147483647)

Index of the interface.

As per the MIB.

hh3cIPsecTunIKETunnelIndexV2

(1.3.6.1.4.1.25506.2.126.1.2.1.3)

read-only

Integer32

Integer32 (1..2147483647)

Index of the IKE tunnel associated with the IPsec tunnel.

The index value of the IKEv2 tunnel associated with the IPsec tunnel is an invalid value of 2147483647.

hh3cIPsecTunIKETunLocalIDTypeV2

(1.3.6.1.4.1.25506.2.126.1.2.1.4)

read-only

Hh3cIPsecIDTypeV2

Integer32 (0..11)

Type of the local ID of the IKE tunnel.

The value of the local ID type of the IKEv2 tunnel is an invalid value of 0.

hh3cIPsecTunIKETunLocalIDVal1V2

(1.3.6.1.4.1.25506.2.126.1.2.1.5)

read-only

DisplayString

OCTET STRING (0..255)

Value of the local ID of the IKE tunnel.

For a local ID that exceeds 255 bytes, this object displays only the first 255 bytes of information. The complete ID information is displayed by hh3cIPsecTunIKETunLocalIDVal3V2. The local ID of the IKEv2 tunnel is empty.

hh3cIPsecTunIKETunLocalIDVal2V2 (1.3.6.1.4.1.25506.2.126.1.2.1.6)

read-only

DisplayString

OCTET STRING (0..255)

The second specification of the IP address of the IKE tunnel local end.

The local IP address of the IKEv2 tunnel is empty.

hh3cIPsecTunIKETunRemoteIDTypeV2

(1.3.6.1.4.1.25506.2.126.1.2.1.7)

read-only

Hh3cIPsecIDTypeV2

Integer32 (0..11)

Type of the remote ID of the IKE tunnel.

The value of the remote ID type of the IKEv2 tunnel is an invalid value of 0.

hh3cIPsecTunIKETunRemoteIDVal1V2 (1.3.6.1.4.1.25506.2.126.1.2.1.8)

read-only

DisplayString

OCTET STRING (0..255)

Value of the remote ID of the IKE tunnel.

For a remote ID that exceeds 255 bytes, this object displays only the first 255 bytes of information. The complete ID information is displayed by hh3cIPsecTunIKETunRemoteIDVal3V2. The remote ID of the IKEv2 tunnel is empty.

hh3cIPsecTunIKETunRemoteIDVal2V2 (1.3.6.1.4.1.25506.2.126.1.2.1.9)

read-only

DisplayString

OCTET STRING (0..255)

The second specification of the IP address of the IKE tunnel remote end.

The remote IP address of the IKEv2 tunnel is empty.

hh3cIPsecTunLocalAddrTypeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.10)

read-only

InetAddressType

Integer32(1,2)

Type of the IP address of the IPsec tunnel local end.

As per the MIB.

hh3cIPsecTunLocalAddrV2 (1.3.6.1.4.1.25506.2.126.1.2.1.11)

read-only

InetAddress

OCTET STRING (4)

IP address of the IPsec tunnel local end.

As per the MIB.

hh3cIPsecTunRemoteAddrTypeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.12)

read-only

InetAddressType

Integer32(1,2)

Type of the IP address of the IPsec tunnel remote end.

As per the MIB.

hh3cIPsecTunRemoteAddrV2 (1.3.6.1.4.1.25506.2.126.1.2.1.13)

read-only

InetAddress

OCTET STRING (4)

IP address of the IPsec tunnel remote end.

As per the MIB.

hh3cIPsecTunKeyTypeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.14)

read-only

Hh3cIPsecNegoTypeV2

Integer32(1,2,2147483647)

Key negotiation mode of the IPsec tunnel.

As per the MIB.

hh3cIPsecTunEncapModeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.15)

read-only

Hh3cIPsecEncapModeV2

Integer32(1,2,2147483647)

Encapsulation mode of the IPsec tunnel.

As per the MIB.

hh3cIPsecTunInitiatorV2 (1.3.6.1.4.1.25506.2.126.1.2.1.16)

read-only

INTEGER

Integer32(1,2,2147483647)

Initiator of the IPsec tunnel.

As per the MIB.

hh3cIPsecTunLifeSizeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.17)

read-only

Gauge32

Gauge32 (0..4294967295)

Negotiated traffic-based IPsec SA lifetime, in kilobytes.

As per the MIB.

hh3cIPsecTunLifeTimeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.18)

read-only

Integer32

Integer32(1..2147483647)

Negotiated time-based IPsec SA lifetime, in seconds.

As per the MIB.

hh3cIPsecTunRemainTimeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.19)

read-only

Integer32

Integer32(1..2147483647)

Remaining lifetime of the IPsec tunnel, in seconds.

As per the MIB.

hh3cIPsecTunActiveTimeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.20)

read-only

Integer32

Integer32(1..2147483647)

Active period of time of the IPsec tunnel.

As per the MIB.

hh3cIPsecTunRemainSizeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.21)

read-only

Gauge32

Gauge32 (0..4294967295)

Remaining lifetime of the IPsec tunnel, in kilobytes.

outbound sa remain traffic duration

hh3cIPsecTunTotalRefreshesV2 (1.3.6.1.4.1.25506.2.126.1.2.1.22)

read-only

Counter32

Counter32 (0..4294967295)

Total number of SA refreshes.

As per the MIB.

hh3cIPsecTunCurrentSaInstancesV2 (1.3.6.1.4.1.25506.2.126.1.2.1.23)

read-only

Gauge32

Gauge32 (0..4294967295)

Number of active and expiring SAs.

As per the MIB.

hh3cIPsecTunInSaEncryptAlgoV2 (1.3.6.1.4.1.25506.2.126.1.2.1.24)

read-only

Hh3cIPsecEncryptAlgoV2

Integer32 (0..26,128..131,2147483647)

Encryption algorithm used by the inbound SA of the IPsec tunnel.

As per the MIB.

hh3cIPsecTunInSaAhAuthAlgoV2 (1.3.6.1.4.1.25506.2.126.1.2.1.25)

read-only

Hh3cIPsecAuthAlgoV2

Integer32 (0..6,128,2147483647)

Authentication algorithm used by the inbound AH SA of the IPsec tunnel.

As per the MIB.

hh3cIPsecTunInSaEspAuthAlgoV2 (1.3.6.1.4.1.25506.2.126.1.2.1.26)

read-only

Hh3cIPsecAuthAlgoV2

Integer32 (0..6,128,2147483647)

Authentication algorithm used by the inbound ESP SA of the IPsec tunnel.

As per the MIB.

hh3cIPsecTunDiffHellmanGrpV2 (1.3.6.1.4.1.25506.2.126.1.2.1.27)

read-only

Hh3cIPsecDiffHellmanGrpV2

Integer32 (0,1,2,5,12,14,2147483647)

DH group used in the IKE Phase-2 negotiation.

As per the MIB.

hh3cIPsecTunOutSaEncryptAlgoV2 (1.3.6.1.4.1.25506.2.126.1.2.1.28)

read-only

Hh3cIPsecEncryptAlgoV2

Integer32 (0..26,128..131,2147483647)

Encryption algorithm used by the outbound SA of the IPsec tunnel.

As per the MIB.

hh3cIPsecTunOutSaAhAuthAlgoV2 (1.3.6.1.4.1.25506.2.126.1.2.1.29)

read-only

Hh3cIPsecAuthAlgoV2

Integer32 (0..6,128,2147483647)

Authentication algorithm used by the outbound AH SA of the IPsec tunnel.

As per the MIB.

hh3cIPsecTunOutSaEspAuthAlgoV2 (1.3.6.1.4.1.25506.2.126.1.2.1.30)

read-only

Hh3cIPsecAuthAlgoV2

Integer32 (0..5,2147483647)

Authentication algorithm used by the outbound ESP SA of the IPsec tunnel.

As per the MIB.

hh3cIPsecTunPolicyNameV2 (1.3.6.1.4.1.25506.2.126.1.2.1.31)

read-only

DisplayString

OCTET STRING (0..255)

Name of the IPsec policy used by the IPsec tunnel.

As per the MIB.

hh3cIPsecTunPolicyNumV2 (1.3.6.1.4.1.25506.2.126.1.2.1.32)

read-only

Integer32

Integer32 (1..2147483647)

Sequence number of the IPsec policy entry used by the IPsec tunnel.

As per the MIB.

hh3cIPsecTunStatusV2 (1.3.6.1.4.1.25506.2.126.1.2.1.33)

read-only

INTEGER

Integer32 (1,2)

State of the IPsec tunnel.

As per the MIB.

hh3cIPsecTunnelStatV2Table

About this table

This table contains IPsec tunnel packet statistics.

Support for operations

Create

Edit/Modify

Delete

Read

Not supported

Not supported

Not supported

Supported

Columns

The table index is hh3cIPsecTunIndexV2.

Object(OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecTunInOctetsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.1)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of octets received by the IPsec tunnel.

This value is accumulated before determining whether or not the packet should be decompressed.

As per the MIB.

hh3cIPsecTunInDecompOctetsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.2)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of decompressed octets received by the IPsec tunnel.

This value is accumulated after the packet is decompressed.

Not supported

hh3cIPsecTunInPktsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.3)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of packets received by the IPsec tunnel.

As per the MIB.

hh3cIPsecTunInDropPktsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.4)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of inbound packets dropped by the IPsec tunnel.

As per the MIB.

hh3cIPsecTunInReplayDropPktsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.5)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of inbound packets dropped by the IPsec tunnel due to anti-replay.

As per the MIB.

hh3cIPsecTunInAuthFailsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.6)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of inbound packets that failed authentication on the IPsec tunnel.

As per the MIB.

hh3cIPsecTunInDecryptFailsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.7)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of inbound packets that failed decryption on the IPsec tunnel.

As per the MIB.

hh3cIPsecTunOutOctetsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.8)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of octets sent by the IPsec tunnel.

This value is accumulated after determining whether or not the packet should be compressed.

As per the MIB.

hh3cIPsecTunOutUncompOctetsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.9)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of uncompressed octets sent by this IPsec tunnel. This value is accumulated before the packet is compressed.

Not supported

hh3cIPsecTunOutPktsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.10)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of packets sent by the IPsec tunnel.

As per the MIB.

hh3cIPsecTunOutDropPktsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.11)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of outbound packets dropped by the IPsec tunnel.

As per the MIB.

hh3cIPsecTunOutEncryptFailsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.12)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of outbound packets that failed encryption on the IPsec tunnel.

As per the MIB.

hh3cIPsecTunNoMemoryDropPktsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.13)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of packets dropped by the IPsec tunnel due to insufficient memory.

Not supported

hh3cIPsecTunQueueFullDropPktsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.14)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of packets dropped by the IPsec tunnel due to full queue.

Not supported

hh3cIPsecTunInvalidLenDropPktsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.15)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of packets dropped by the IPsec tunnel due to invalid length.

As per the MIB.

hh3cIPsecTunTooLongDropPktsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.16)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of packets dropped by the IPsec tunnel due to too long packet.

As per the MIB.

hh3cIPsecTunInvalidSaDropPktsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.17)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of packets dropped by the IPsec tunnel due to invalid SA.

Not supported.

hh3cIPsecSaV2Table

About this table

This table contains IPsec SA information.

Support for operations

Create

Edit/Modify

Delete

Read

Not supported

Not supported

Not supported

Supported

Columns

The table indexes are hh3cIPsecTunIndexV2 and hh3cIPsecSaIndexV2.

Object(OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecSaIndexV2 (1.3.6.1.4.1.25506.2.126.1.4.1.1)

accessible-for-notify

Integer32

Integer32 (1..2147483647)

Index of an SA in an IPsec tunnel.

As per the MIB.

hh3cIPsecSaDirectionV2 (1.3.6.1.4.1.25506.2.126.1.4.1.2)

read-only

INTEGER

Integer32 (1,2)

Direction of the SA.

As per the MIB.

hh3cIPsecSaSpiValueV2 (1.3.6.1.4.1.25506.2.126.1.4.1.3)

read-only

Unsigned32

Unsigned32 (1..4294967295)

SPI value of the SA.

As per the MIB.

hh3cIPsecSaProtocolV2 (1.3.6.1.4.1.25506.2.126.1.4.1.4)

read-only

Hh3cIPsecSaProtocolV2

Integer32 (0,2,3,4)

Security protocol used by the SA.

As per the MIB.

hh3cIPsecSaEncryptAlgoV2 (1.3.6.1.4.1.25506.2.126.1.4.1.5)

read-only

Hh3cIPsecEncryptAlgoV2

Integer32 (0..26,128..131,2147483647)

Encryption algorithm used by the SA.

As per the MIB.

hh3cIPsecSaAuthAlgoV2 (1.3.6.1.4.1.25506.2.126.1.4.1.6)

read-only

Hh3cIPsecAuthAlgoV2

Integer32 (0..6,128,2147483647)

Authentication algorithm used by the SA.

As per the MIB.

hh3cIPsecSaStatusV2 (1.3.6.1.4.1.25506.2.126.1.4.1.7)

read-only

INTEGER

Integer32 (1,2)

Status of the SA.

As per the MIB.

hh3cIPsecTrafficV2Table

About this table

This table contains information about the traffic protected by IPsec tunnels.

Support for operations

Create

Edit/Modify

Delete

Read

Not supported

Not supported

Not supported

Supported

Columns

The table index is hh3cIPsecTunIndexV2.

Object(OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecTrafficLocalTypeV2 (1.3.6.1.4.1.25506.2.126.1.5.1.1)

read-only

Hh3cIPsecTrafficTypeV2

Integer32 (1,4,5,6,7,8)

Type of the local end's traffic.

As per the MIB.

hh3cIPsecTrafficLocalAddr1TypeV2 (1.3.6.1.4.1.25506.2.126.1.5.1.2)

read-only

InetAddressType

Integer32(1,2)

Type of the first IP address specification for the local end's traffic.

As per the MIB.

hh3cIPsecTrafficLocalAddr1V2 (1.3.6.1.4.1.25506.2.126.1.5.1.3)

read-only

InetAddress

OCTET STRING (4)

The first IP address specification for the local end's traffic.

As per the MIB.

hh3cIPsecTrafficLocalAddr2TypeV2 (1.3.6.1.4.1.25506.2.126.1.5.1.4)

read-only

InetAddressType

Integer32(1,2)

Type of the second IP address specification for the local end's traffic.

As per the MIB.

hh3cIPsecTrafficLocalAddr2V2 (1.3.6.1.4.1.25506.2.126.1.5.1.5)

read-only

InetAddress

OCTET STRING (4)

The second IP address specification for the local end's traffic.

As per the MIB.

hh3cIPsecTrafficLocalProtocol1V2 (1.3.6.1.4.1.25506.2.126.1.5.1.6)

read-only

Integer32

Integer32 (0..255)

The first protocol number specification for the local end's traffic.

As per the MIB.

hh3cIPsecTrafficLocalProtocol2V2 (1.3.6.1.4.1.25506.2.126.1.5.1.7)

read-only

Integer32

Integer32 (0..255)

The second protocol number specification for the local end's traffic.

As per the MIB.

hh3cIPsecTrafficLocalPort1V2 (1.3.6.1.4.1.25506.2.126.1.5.1.8)

read-only

Integer32

Integer32 (0..65535)

The first port number specification for the local end's traffic.

As per the MIB.

hh3cIPsecTrafficLocalPort2V2 (1.3.6.1.4.1.25506.2.126.1.5.1.9)

read-only

Integer32

Integer32 (0..65535)

The second port number specification for the local end's traffic.

As per the MIB.

hh3cIPsecTrafficRemoteTypeV2 (1.3.6.1.4.1.25506.2.126.1.5.1.10)

read-only

Hh3cIPsecTrafficTypeV2

Integer32 (1,4,5,6,7,8)

Type of the remote end's traffic.

As per the MIB.

hh3cIPsecTrafficRemAddr1TypeV2 (1.3.6.1.4.1.25506.2.126.1.5.1.11)

read-only

InetAddressType

Integer32(1,2)

Type of the first IP address specification for the remote end's traffic.

As per the MIB.

hh3cIPsecTrafficRemAddr1V2 (1.3.6.1.4.1.25506.2.126.1.5.1.12)

read-only

InetAddress

OCTET STRING (4)

The first IP address specification for the remote end's traffic.

As per the MIB.

hh3cIPsecTrafficRemAddr2TypeV2 (1.3.6.1.4.1.25506.2.126.1.5.1.13)

read-only

InetAddressType

Integer32(1,2)

Type of the second IP address specification for the remote end's traffic.

As per the MIB.

hh3cIPsecTrafficRemAddr2V2 (1.3.6.1.4.1.25506.2.126.1.5.1.14)

read-only

InetAddress

OCTET STRING (4)

The second IP address specification for the remote end's traffic.

As per the MIB.

hh3cIPsecTrafficRemoPro1V2 (1.3.6.1.4.1.25506.2.126.1.5.1.15)

read-only

Integer32

Integer32 (0..255)

The first protocol number specification for the remote end's traffic.

As per the MIB.

hh3cIPsecTrafficRemoPro2V2 (1.3.6.1.4.1.25506.2.126.1.5.1.16)

read-only

Integer32

Integer32 (0..255)

The second protocol number specification for the remote end's traffic.

As per the MIB.

hh3cIPsecTrafficRemPort1V2 (1.3.6.1.4.1.25506.2.126.1.5.1.17)

read-only

Integer32

Integer32 (0..65535)

The first port number specification for the remote end's traffic.

As per the MIB.

hh3cIPsecTrafficRemPort2V2 (1.3.6.1.4.1.25506.2.126.1.5.1.18)

read-only

Integer32

Integer32 (0..65535)

The second port number specification for the remote end's traffic.

As per the MIB.

 

Notifications

The following information describes the notifications generated by HH3C-IPSEC-MONITOR-V2-MIB.

hh3cIPsecTunnelStartV2

Basic information

OID

Event

Type

Severity

Recovery notification

Default status

1.3.6.1.4.1.25506.2.126.1.9.0.1

IPsec tunnel created.

Informational

-

-

OFF

 

Description

This notification is generated when an IPsec tunnel is created.

Status control

ON

·     CLI: Use the snmp-agent trap enable ipsec tunnel-start command.

·     MIB: Set hh3cIPsecTunnelStartTrapCntlV2 to true(1).

OFF

·     CLI: Use the undo snmp-agent trap enable ipsec tunnel-start command.

·     MIB: Set hh3cIPsecTunnelStartTrapCntlV2 to false(2).

 

Objects

OID (object name)

Description

Index

Type

Value range

1.3.6.1.4.1.25506.2.126.1.2.1.1 (hh3cIPsecTunIndexV2)

Index of an IPsec tunnel.

Yes

Integer32

1..2147483647

1.3.6.1.4.1.25506.2.126.1.2.1.10 (hh3cIPsecTunLocalAddrTypeV2)

Type of the IP address of the IPsec tunnel local end.

No

InetAddressType

Standard MIB values.

1.3.6.1.4.1.25506.2.126.1.2.1.11 (hh3cIPsecTunLocalAddrV2)

IP address of the IPsec tunnel local end.

No

InetAddress

Standard MIB values.

1.3.6.1.4.1.25506.2.126.1.2.1.12 (hh3cIPsecTunRemoteAddrTypeV2)

Type of the IP address of the IPsec tunnel remote end.

No

InetAddressType

Standard MIB values.

1.3.6.1.4.1.25506.2.126.1.2.1.13 (hh3cIPsecTunRemoteAddrV2)

IP address of the IPsec tunnel remote end.

No

InetAddress

Standard MIB values.

1.3.6.1.4.1.25506.2.126.1.2.1.18 (hh3cIPsecTunLifeTimeV2)

Time-based lifetime of the IPsec tunnel, in seconds.

No

Integer32

1..2147483647

1.3.6.1.4.1.25506.2.126.1.2.1.17 (hh3cIPsecTunLifeSizeV2)

Time-based lifetime of the IPsec tunnel, in kilobytes.

No

Gauge32

Standard MIB values.

 

Recommended action

No action is required.

hh3cIPsecTunnelStopV2

Basic information

OID

Event

Type

Severity

Recovery notification

Default status

1.3.6.1.4.1.25506.2.126.1.9.0.2

IPsec tunnel deleted.

Informational

-

-

OFF

 

Description

This notification is generated when an IPsec tunnel is deleted.

Status control

ON

·     CLI: Use the snmp-agent trap enable ipsec tunnel-stop command.

·     MIB: Set hh3cIPsecTunnelStopTrapCntlV2 to true(1).

OFF

·     CLI: Use the undo snmp-agent trap enable ipsec tunnel-stop command.

·     MIB: Set hh3cIPsecTunnelStopTrapCntlV2 to false(2).

 

Objects

OID (object name)

Description

Index

Type

Value range

1.3.6.1.4.1.25506.2.126.1.2.1.1 (hh3cIPsecTunIndexV2)

Index of an IPsec tunnel.

Yes

Integer32

1..2147483647

1.3.6.1.4.1.25506.2.126.1.2.1.10 (hh3cIPsecTunLocalAddrTypeV2)

Type of the IP address of the IPsec tunnel local end.

No

InetAddressType

Standard MIB values.

1.3.6.1.4.1.25506.2.126.1.2.1.11 (hh3cIPsecTunLocalAddrV2)

IP address of the IPsec tunnel local end.

No

InetAddress

Standard MIB values.

1.3.6.1.4.1.25506.2.126.1.2.1.12 (hh3cIPsecTunRemoteAddrTypeV2)

Type of the IP address of the IPsec tunnel remote end.

No

InetAddressType

Standard MIB values.

1.3.6.1.4.1.25506.2.126.1.2.1.13 (hh3cIPsecTunRemoteAddrV2)

IP address of the IPsec tunnel remote end.

No

InetAddress

Standard MIB values.

1.3.6.1.4.1.25506.2.126.1.2.1.20 (hh3cIPsecTunActiveTimeV2)

Active period of time of the IPsec tunnel.

No

Integer32

0..2147483647

 

Recommended action

No action is required.

hh3cIPsecNoSaFailureV2

Basic information

OID

Event

Type

Severity

Recovery notification

Default status

1.3.6.1.4.1.25506.2.126.1.9.0.3

No SA for IPsec tunnel.

Informational

Warning

-

OFF

 

Description

This notification is generated when no SA is available for an IPsec tunnel.

Status control

ON

·     CLI: Use the snmp-agent trap enable ipsec no-sa-failure command.

·     MIB: Set hh3cIPsecNoSaTrapCntlV2 to true(1).

OFF

·     CLI: Use the undo snmp-agent trap enable ipsec no-sa-failure command.

·     MIB: Set hh3cIPsecNoSaTrapCntlV2 to false(2).

 

Objects

OID (object name)

Description

Index

Type

Value range

1.3.6.1.4.1.25506.2.126.1.2.1.1 (hh3cIPsecTunIndexV2)

Index of an IPsec tunnel.

Yes

Integer32

1..2147483647

1.3.6.1.4.1.25506.2.126.1.2.1.10 (hh3cIPsecTunLocalAddrTypeV2)

Type of the IP address of the IPsec tunnel local end.

No

InetAddressType

Standard MIB values.

1.3.6.1.4.1.25506.2.126.1.2.1.11 (hh3cIPsecTunLocalAddrV2)

IP address of the IPsec tunnel local end.

No

InetAddress

Standard MIB values.

1.3.6.1.4.1.25506.2.126.1.2.1.12 (hh3cIPsecTunRemoteAddrTypeV2)

Type of the IP address of the IPsec tunnel remote end.

No

InetAddressType

Standard MIB values.

1.3.6.1.4.1.25506.2.126.1.2.1.13 (hh3cIPsecTunRemoteAddrV2)

IP address of the IPsec tunnel remote end.

No

InetAddress

Standard MIB values.

 

Recommended action

No action is required.

hh3cIPsecAuthFailFailureV2

Basic information

OID

Event

Type

Severity

Recovery notification

Default status

1.3.6.1.4.1.25506.2.126.1.9.0.4

IPsec authentication failure.

Informational

Warning

-

OFF

 

Description

This notification is generated when an IPsec authentication failure occurs.

Status control

ON

·     CLI: Use the snmp-agent trap enable ipsec auth-failure command.

·     MIB: Set hh3cIPsecAuthFailureTrapCntlV2 to true(1).

OFF

·     CLI: Use the undo snmp-agent trap enable ipsec auth-failure command.

·     MIB: Set hh3cIPsecAuthFailureTrapCntlV2 to false(2).

 

Objects

OID (object name)

Description

Index

Type

Value range

1.3.6.1.4.1.25506.2.126.1.2.1.1 (hh3cIPsecTunIndexV2)

Index of an IPsec tunnel.

Yes

Integer32

1..2147483647

1.3.6.1.4.1.25506.2.126.1.2.1.10 (hh3cIPsecTunLocalAddrTypeV2)

Type of the IP address of the IPsec tunnel local end.

No

InetAddressType

Standard MIB values.

1.3.6.1.4.1.25506.2.126.1.2.1.11 (hh3cIPsecTunLocalAddrV2)

IP address of the IPsec tunnel local end.

No

InetAddress

Standard MIB values.

1.3.6.1.4.1.25506.2.126.1.2.1.12 (hh3cIPsecTunRemoteAddrTypeV2)

Type of the IP address of the IPsec tunnel remote end.

No

InetAddressType

Standard MIB values.

1.3.6.1.4.1.25506.2.126.1.2.1.13 (hh3cIPsecTunRemoteAddrV2)

IP address of the IPsec tunnel remote end.

No

InetAddress

Standard MIB values.

 

Recommended action

No action is required.

hh3cIPsecEncryFailFailureV2

Basic information

OID

Event

Type

Severity

Recovery notification

Default status

1.3.6.1.4.1.25506.2.126.1.9.0.5

IPsec tunnel encryption failure.

Informational

Warning

-

OFF

 

Description

This notification is generated when an IPsec tunnel has an encryption failure.

Status control

ON

·     CLI: Use the snmp-agent trap enable ipsec encrypt-failure command.

·     MIB: Set hh3cIPsecEncryFailureTrapCntlV2 to true(1).

OFF

·     CLI: Use the undo snmp-agent trap enable ipsec encrypt-failure command.

·     MIB: Set hh3cIPsecEncryFailureTrapCntlV2 to false(2).

 

Objects

OID (object name)

Description

Index

Type

Value range

1.3.6.1.4.1.25506.2.126.1.2.1.1 (hh3cIPsecTunIndexV2)

Index of an IPsec tunnel.

Yes

Integer32

1..2147483647

1.3.6.1.4.1.25506.2.126.1.2.1.10 (hh3cIPsecTunLocalAddrTypeV2)

Type of the IP address of the IPsec tunnel local end.

No

InetAddressType

Standard MIB values.

1.3.6.1.4.1.25506.2.126.1.2.1.11 (hh3cIPsecTunLocalAddrV2)

IP address of the IPsec tunnel local end.

No

InetAddress

Standard MIB values.

1.3.6.1.4.1.25506.2.126.1.2.1.12 (hh3cIPsecTunRemoteAddrTypeV2)

Type of the IP address of the IPsec tunnel remote end.

No

InetAddressType

Standard MIB values.

1.3.6.1.4.1.25506.2.126.1.2.1.13 (hh3cIPsecTunRemoteAddrV2)

IP address of the IPsec tunnel remote end.

No

InetAddress

Standard MIB values.

 

Recommended action

No action is required.

hh3cIPsecDecryFailFailureV2

Basic information

OID

Event

Type

Severity

Recovery notification

Default status

1.3.6.1.4.1.25506.2.126.1.9.0.6

IPsec tunnel encryption failure.

Informational

Warning

-

OFF

 

Description

This notification is generated when an IPsec tunnel has a decryption failure.

Status control

ON

·     CLI: Use the snmp-agent trap enable ipsec decrypt-failure command.

·     MIB: Set hh3cIPsecDecryFailureTrapCntlV2 to true(1).

OFF

·     CLI: Use the undo snmp-agent trap enable ipsec decrypt-failure command.

·     MIB: Set hh3cIPsecDecryFailureTrapCntlV2 to false(2).

 

Objects

OID (object name)

Description

Index

Type

Value range

1.3.6.1.4.1.25506.2.126.1.2.1.1 (hh3cIPsecTunIndexV2)

Index of an IPsec tunnel.

Yes

Integer32

1..2147483647

1.3.6.1.4.1.25506.2.126.1.2.1.10 (hh3cIPsecTunLocalAddrTypeV2)

Type of the IP address of the IPsec tunnel local end.

No

InetAddressType

Standard MIB values.

1.3.6.1.4.1.25506.2.126.1.2.1.11 (hh3cIPsecTunLocalAddrV2)

IP address of the IPsec tunnel local end.

No

InetAddress

Standard MIB values.

1.3.6.1.4.1.25506.2.126.1.2.1.12 (hh3cIPsecTunRemoteAddrTypeV2)

Type of the IP address of the IPsec tunnel remote end.

No

InetAddressType

Standard MIB values.

1.3.6.1.4.1.25506.2.126.1.2.1.13 (hh3cIPsecTunRemoteAddrV2)

IP address of the IPsec tunnel remote end.

No

InetAddress

Standard MIB values.

 

Recommended action

No action is required.

hh3cIPsecPolicyAddV2

Basic information

OID

Event

Type

Severity

Recovery notification

Default status

1.3.6.1.4.1.25506.2.126.1.9.0.8

IPsec policy added.

Informational

-

-

OFF

 

Description

This notification is generated when an IPsec policy is added.

Status control

ON

·     CLI: Use the snmp-agent trap enable ipsec policy-add command.

·     MIB: Set hh3cIPsecPolicyAddTrapCntlV2 to true(1).

OFF

·     CLI: Use the undo snmp-agent trap enable ipsec policy-add command.

·     MIB: Set hh3cIPsecPolicyAddTrapCntlV2 to false(2).

 

Objects

OID (object name)

Description

Index

Type

Value range

1.3.6.1.4.1.25506.2.126.1.7.1 (hh3cIPsecPolicyNameV2)

Name of an IPsec policy.

No

DisplayString

OCTET STRING (SIZE (0..255))

1.3.6.1.4.1.25506.2.126.1.7.2 (hh3cIPsecPolicySeqNumV2)

Sequence number an IPsec policy entry.

No

Integer32

1..2147483647

1.3.6.1.4.1.25506.2.126.1.7.3 (hh3cIPsecPolicySizeV2)

Number of the IPsec policy entries.

No

InetAddressType

Standard MIB values.

 

Recommended action

No action is required.

hh3cIPsecPolicyDelV2

Basic information

OID

Event

Type

Severity

Recovery notification

Default status

1.3.6.1.4.1.25506.2.126.1.9.0.9

IPsec policy deleted.

Informational

-

-

OFF

 

Description

This notification is generated when an IPsec policy is deleted.

Status control

ON

·     CLI: Use the snmp-agent trap enable ipsec policy-delete command.

·     MIB: Set hh3cIPsecPolicyDelTrapCntlV2 to true(1).

OFF

·     CLI: Use the undo snmp-agent trap enable ipsec policy-delete command.

·     MIB: Set hh3cIPsecPolicyDelTrapCntlV2 to false(2).

 

Objects

OID (object name)

Description

Index

Type

Value range

1.3.6.1.4.1.25506.2.126.1.7.1 (hh3cIPsecPolicyNameV2)

Name of an IPsec policy.

No

DisplayString

OCTET STRING (SIZE (0..255))

1.3.6.1.4.1.25506.2.126.1.7.2 (hh3cIPsecPolicySeqNumV2)

Sequence number of an IPsec policy entry.

No

Integer32

1..2147483647

1.3.6.1.4.1.25506.2.126.1.7.3 (hh3cIPsecPolicySizeV2)

Number of the IPsec policy entries.

No

InetAddressType

Standard MIB values.

 

Recommended action

No action is required.

hh3cIPsecPolicyAttachV2

Basic information

OID

Event

Type

Severity

Recovery notification

Default status

1.3.6.1.4.1.25506.2.126.1.9.0.10

IPsec policy applied to interface.

Informational

-

-

OFF

 

Description

This notification is generated when an IPsec policy is applied to an interface.

Status control

ON

·     CLI: Use the snmp-agent trap enable ipsec policy-attach command.

·     MIB: Set hh3cIPsecPolicyAttachTrapCntlV2 to true(1).

OFF

·     CLI: Use the undo snmp-agent trap enable ipsec policy-attach command.

·     MIB: Set hh3cIPsecPolicyAttachTrapCntlV2 to false(2).

 

Objects

OID (object name)

Description

Index

Type

Value range

1.3.6.1.4.1.25506.2.126.1.7.1 (hh3cIPsecPolicyNameV2)

Name of an IPsec policy.

No

DisplayString

OCTET STRING (SIZE (0..255))

1.3.6.1.4.1.25506.2.126.1.7.3 (hh3cIPsecPolicySizeV2)

Number of the IPsec policy entries.

No

Integer32

1..2147483647

1.3.6.1.2.1.2.2.1.1 (ifIndex)

Index of an interface.

Yes

InterfaceIndex

Integer32(1..2147483647)

 

Recommended action

No action is required.

hh3cIPsecPolicyDetachV2

Basic information

OID

Event

Type

Severity

Recovery notification

Default status

1.3.6.1.4.1.25506.2.126.1.9.0.11

IPsec policy application removed from interface.

Informational

-

-

OFF

 

Description

This notification is generated when an IPsec policy application is removed from an interface.

Status control

ON

·     CLI: Use the snmp-agent trap enable ipsec policy-detach command.

·     MIB: Set hh3cIPsecPolicyDetachTrapCntlV2 to true(1).

OFF

·     CLI: Use the undo snmp-agent trap enable ipsec policy-detach command.

·     MIB: Set hh3cIPsecPolicyDetachTrapCntlV2 to false(2).

 

Objects

OID (object name)

Description

Index

Type

Value range

1.3.6.1.4.1.25506.2.126.1.7.1 (hh3cIPsecPolicyNameV2)

Name of an IPsec policy.

No

DisplayString

OCTET STRING (SIZE (0..255))

1.3.6.1.4.1.25506.2.126.1.7.3 (hh3cIPsecPolicySizeV2)

Number of the IPsec policy entries.

No

Integer32

1..2147483647

1.3.6.1.2.1.2.2.1.1 (ifIndex)

Index of an interface.

Yes

InterfaceIndex

Integer32(1..2147483647)

 

Recommended action

No action is required.

 

  • Cloud & AI
  • InterConnect
  • Intelligent Computing
  • Security
  • SMB Products
  • Intelligent Terminal Products
  • Product Support Services
  • Technical Service Solutions
All Services
  • Resource Center
  • Policy
  • Online Help
All Support
  • Become a Partner
  • Partner Resources
  • Partner Business Management
All Partners
  • Profile
  • News & Events
  • Online Exhibition Center
  • Contact Us
All About Us
新华三官网