Login
- Table of Contents
- Related Documents
-
| Title | Size | Download |
|---|---|---|
| 02-HH3C-IPSEC-MONITOR-V2-MIB | 433.92 KB |
Contents
hh3cIPsecGlobalActiveTunnelsV2
hh3cIPsecGlobalInDecompOctetsV2
hh3cIPsecGlobalInReplayDropsV2
hh3cIPsecGlobalInDecryptFailsV2
hh3cIPsecGlobalOutUncompOctetsV2
hh3cIPsecGlobalOutEncryptFailsV2
hh3cIPsecGlobalNoMemoryDropsV2
hh3cIPsecGlobalNoFindSaDropsV2
hh3cIPsecGlobalQueueFullDropsV2
hh3cIPsecGlobalInvalidLenDropsV2
hh3cIPsecGlobalInvalidSaDropsV2
hh3cIPsecTunnelStartTrapCntlV2
hh3cIPsecAuthFailureTrapCntlV2
hh3cIPsecEncryFailureTrapCntlV2
hh3cIPsecDecryFailureTrapCntlV2
hh3cIPsecPolicyAttachTrapCntlV2
hh3cIPsecPolicyDetachTrapCntlV2
hh3cIPsecTunnelStatByDescripV2Table
HH3C-IPSEC-MONITOR-V2-MIB
About this MIB
Use this MIB to obtain information about IPsec tunnels, IPsec-protected traffic, IPsec SAs, IPsec tunnel packet statistics, and IPsec trap notifications.
MIB file name
hh3c-ipsec-monitor-v2.mib
Root object
iso(1).org(3).dod(6).internet(1).private(4).enterprises(1).hh3c(25506).hh3cCommon(2).hh3cIPsecMonitorV2(126)
Scalar objects
hh3cIPsecMIBVersion
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecMIBVersion (1.3.6.1.4.1.25506.2.126.1.1.1) |
read-only |
DisplayString |
OCTET STRING (0..255) |
IPsec MIB version information. |
As per the MIB. |
hh3cIPsecGlobalActiveTunnelsV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecGlobalActiveTunnelsV2 (1.3.6.1.4.1.25506.2.126.1.6.1) |
read-only |
Gauge32 |
Gauge32 (0..4294967295) |
Total number of currently active IPsec Phase-2 tunnels. |
As per the MIB. |
hh3cIPsecGlobalActiveSasV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecGlobalActiveSasV2 (1.3.6.1.4.1.25506.2.126.1.6.2) |
read-only |
Gauge32 |
Gauge32 (0..4294967295) |
Total number of existing IPsec Phase-2 SAs. |
As per the MIB. |
hh3cIPsecGlobalInOctetsV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecGlobalInOctetsV2 (1.3.6.1.4.1.25506.2.126.1.6.3) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of octets received by all current and previous IPsec Phase-2 tunnels. This value is accumulated before determining whether or not the packet should be decompressed. |
As per the MIB. |
hh3cIPsecGlobalInDecompOctetsV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecGlobalInDecompOctetsV2 (1.3.6.1.4.1.25506.2.126.1.6.4) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
The total number of decompressed octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated after a packet is decompressed. |
Not supported |
hh3cIPsecGlobalInPktsV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecGlobalInPktsV2 (1.3.6.1.4.1.25506.2.126.1.6.5) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of packets received by all current and previous IPsec Phase-2 tunnels. |
As per the MIB. |
hh3cIPsecGlobalInDropsV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecGlobalInDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.6) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of inbound packets dropped by all current and previous IPsec Phase-2 tunnels. |
As per the MIB. |
hh3cIPsecGlobalInReplayDropsV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecGlobalInReplayDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.7) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of inbound packets dropped due to anti-replay by all current and previous IPsec Phase-2 tunnels. |
As per the MIB. |
hh3cIPsecGlobalInAuthFailsV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecGlobalInAuthFailsV2 (1.3.6.1.4.1.25506.2.126.1.6.8) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of inbound packets that failed authentication on all current previous IPsec Phase-2 tunnels. |
As per the MIB. |
hh3cIPsecGlobalInDecryptFailsV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecGlobalInDecryptFailsV2 (1.3.6.1.4.1.25506.2.126.1.6.9) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of inbound packets that failed decryption on all current and previous IPsec Phase-2 tunnels. |
As per the MIB. |
hh3cIPsecGlobalOutOctetsV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecGlobalOutOctetsV2 (1.3.6.1.4.1.25506.2.126.1.6.10) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of octets sent by all current and previous IPsec Phase-2 tunnels. This value is accumulated before determining whether or not the packet should be compressed. |
As per the MIB. |
hh3cIPsecGlobalOutUncompOctetsV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecGlobalOutUncompOctetsV2 (1.3.6.1.4.1.25506.2.126.1.6.11) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
The total number of uncompressed octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated before a packet is compressed. |
Not supported |
hh3cIPsecGlobalOutPktsV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecGlobalOutPktsV2 (1.3.6.1.4.1.25506.2.126.1.6.12) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of packets sent by all current and previous IPsec Phase-2 tunnels. |
As per the MIB. |
hh3cIPsecGlobalOutDropsV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecGlobalOutDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.13) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of outbound packets dropped by all current and previous IPsec Phase-2 tunnels. |
As per the MIB. |
hh3cIPsecGlobalOutEncryptFailsV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecGlobalOutEncryptFailsV2 (1.3.6.1.4.1.25506.2.126.1.6.14) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of outbound packets that failed encryption on all current and previous IPsec Phase-2 tunnels. |
As per the MIB. |
hh3cIPsecGlobalNoMemoryDropsV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecGlobalNoMemoryDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.15) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of packets dropped by all current and previous IPsec Phase-2 tunnels due to insufficient memory. |
Not supported |
hh3cIPsecGlobalNoFindSaDropsV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecGlobalNoFindSaDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.16) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of packets dropped by all current and previous IPsec Phase-2 tunnels due to SA not found. |
As per the MIB. |
hh3cIPsecGlobalQueueFullDropsV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecGlobalQueueFullDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.17) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of packets dropped by all current and previous IPsec Phase-2 tunnels due to full queue. |
Not supported |
hh3cIPsecGlobalInvalidLenDropsV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecGlobalInvalidLenDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.18) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of packets dropped by all current and previous IPsec Phase-2 tunnels due to invalid packet length. |
As per the MIB. |
hh3cIPsecGlobalTooLongDropsV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecGlobalTooLongDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.19) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of packets dropped by all current and previous IPsec Phase-2 tunnels due to too long packet. |
As per the MIB. |
hh3cIPsecGlobalInvalidSaDropsV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecGlobalInvalidSaDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.20) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of packets dropped by all current and previous IPsec Phase-2 tunnels due to invalid SA. |
Not supported |
hh3cIPsecPolicyNameV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecPolicyNameV2 (1.3.6.1.4.1.25506.2.126.1.7.1) |
accessible-for-notify |
STRING |
OCTET STRING (1..63) |
Name of an IPsec policy in a trap notification. |
As per the MIB. |
hh3cIPsecPolicySeqNumV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecPolicySeqNumV2 (1.3.6.1.4.1.25506.2.126.1.7.2) |
accessible-for-notify |
Integer32 |
Gauge32 (0..4294967295) |
Sequence number of an IPsec policy entry in a trap notification. |
As per the MIB. |
hh3cIPsecPolicySizeV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecPolicySizeV2 (1.3.6.1.4.1.25506.2.126.1.7.3) |
accessible-for-notify |
Integer32 |
Gauge32 (0..4294967295) |
Number of IPsec policy entries in a trap notification. |
As per the MIB. |
hh3cIPsecTrapGlobalCntlV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecTrapGlobalCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.1) |
read-write |
TruthValue |
Integer32 (1,2) |
Whether to enable trap notifications for IPsec events globally. |
As per the MIB. |
hh3cIPsecTunnelStartTrapCntlV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecTunnelStartTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.2) |
read-write |
TruthValue |
Integer32 (1,2) |
Whether to enable hh3cIPsecTunnelStartV2 trap notifications. |
As per the MIB. |
hh3cIPsecTunnelStopTrapCntlV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecTunnelStopTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.3) |
read-write |
TruthValue |
Integer32 (1,2) |
Whether to enable hh3cIPsecTunnelStopV2 trap notifications. |
As per the MIB. |
hh3cIPsecNoSaTrapCntlV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecNoSaTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.4) |
read-write |
TruthValue |
Integer32 (1,2) |
Whether to enable hh3cIPsecNoSaFailureV2 trap notifications. |
As per the MIB. |
hh3cIPsecAuthFailureTrapCntlV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecAuthFailureTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.5) |
read-write |
TruthValue |
Integer32 (1,2) |
Whether to enable hh3cIPsecAuthFailureV2 trap notifications. |
As per the MIB. |
hh3cIPsecEncryFailureTrapCntlV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecEncryFailureTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.6) |
read-write |
TruthValue |
Integer32 (1,2) |
Whether to enable hh3cIPsecEncryFailureV2 trap notifications. |
As per the MIB. |
hh3cIPsecDecryFailureTrapCntlV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecDecryFailureTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.7) |
read-write |
TruthValue |
Integer32 (1,2) |
Whether to enable hh3cIPsecDecryFailureV2 trap notifications. |
As per the MIB. |
hh3cIPsecInvalidSaTrapCntlV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecInvalidSaTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.8) |
read-write |
TruthValue |
Integer32 (1,2) |
Whether to enable hh3cIPsecInvalidSaFailureV2 trap notifications. |
As per the MIB. |
hh3cIPsecPolicyAddTrapCntlV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecPolicyAddTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.9) |
read-write |
TruthValue |
Integer32 (1,2) |
Whether to enable hh3cIPsecPolicyAddV2 trap notifications. |
As per the MIB. |
hh3cIPsecPolicyDelTrapCntlV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecPolicyDelTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.10) |
read-write |
TruthValue |
Integer32 (1,2) |
Whether to enable hh3cIPsecPolicyDelV2 trap notifications. |
As per the MIB. |
hh3cIPsecPolicyAttachTrapCntlV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecPolicyAttachTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.11) |
read-write |
TruthValue |
Integer32 (1,2) |
Whether to enable hh3cIPsecPolicyAttachV2 trap notifications. |
As per the MIB. |
hh3cIPsecPolicyDetachTrapCntlV2
|
Object (OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecPolicyDetachTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.12) |
read-write |
TruthValue |
Integer32 (1,2) |
Whether to enable hh3cIPsecPolicyDetachV2 trap notifications. |
As per the MIB. |
Tabular objects
hh3cIPsecTunnelV2Table
About this table
This table contains IPsec tunnel information.
Support for operations
|
Create |
Edit/Modify |
Delete |
Read |
|
Not supported |
Not supported |
Not supported |
Supported |
Columns
The table index is hh3cIPsecTunIndexV2.
|
Object(OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecTunIndexV2 (1.3.6.1.4.1.25506.2.126.1.2.1.1) |
accessible-for-notify |
Integer32 |
Integer32 (1..2147483647) |
Index of an IPsec tunnel. |
As per the MIB. |
|
hh3cIPsecTunIfIndexV2 (1.3.6.1.4.1.25506.2.126.1.2.1.2) |
read-only |
InterfaceIndex |
Integer32 (1..2147483647) |
Index of the interface. |
As per the MIB. |
|
hh3cIPsecTunIKETunnelIndexV2 (1.3.6.1.4.1.25506.2.126.1.2.1.3) |
read-only |
Integer32 |
Integer32 (1..2147483647) |
Index of the IKE tunnel associated with the IPsec tunnel. |
The index value of the IKEv2 tunnel associated with the IPsec tunnel is an invalid value of 2147483647. |
|
hh3cIPsecTunIKETunLocalIDTypeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.4) |
read-only |
Hh3cIPsecIDTypeV2 |
Integer32 (0..11) |
Type of the local ID of the IKE tunnel. |
The value of the local ID type of the IKEv2 tunnel is an invalid value of 0. |
|
hh3cIPsecTunIKETunLocalIDVal1V2 (1.3.6.1.4.1.25506.2.126.1.2.1.5) |
read-only |
DisplayString |
OCTET STRING (0..255) |
Value of the local ID of the IKE tunnel. |
For a local ID that exceeds 255 bytes, this object displays only the first 255 bytes of information. The complete ID information is displayed by hh3cIPsecTunIKETunLocalIDVal3V2. The local ID of the IKEv2 tunnel is empty. |
|
hh3cIPsecTunIKETunLocalIDVal2V2 (1.3.6.1.4.1.25506.2.126.1.2.1.6) |
read-only |
DisplayString |
OCTET STRING (0..255) |
The second specification of the IP address of the IKE tunnel local end. |
The local IP address of the IKEv2 tunnel is empty. |
|
hh3cIPsecTunIKETunRemoteIDTypeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.7) |
read-only |
Hh3cIPsecIDTypeV2 |
Integer32 (0..11) |
Type of the remote ID of the IKE tunnel. |
The value of the remote ID type of the IKEv2 tunnel is an invalid value of 0. |
|
hh3cIPsecTunIKETunRemoteIDVal1V2 (1.3.6.1.4.1.25506.2.126.1.2.1.8) |
read-only |
DisplayString |
OCTET STRING (0..255) |
Value of the remote ID of the IKE tunnel. |
For a remote ID that exceeds 255 bytes, this object displays only the first 255 bytes of information. The complete ID information is displayed by hh3cIPsecTunIKETunRemoteIDVal3V2. The remote ID of the IKEv2 tunnel is empty. |
|
hh3cIPsecTunIKETunRemoteIDVal2V2 (1.3.6.1.4.1.25506.2.126.1.2.1.9) |
read-only |
DisplayString |
OCTET STRING (0..255) |
The second specification of the IP address of the IKE tunnel remote end. |
The remote IP address of the IKEv2 tunnel is empty. |
|
hh3cIPsecTunLocalAddrTypeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.10) |
read-only |
InetAddressType |
Integer32(1,2) |
Type of the IP address of the IPsec tunnel local end. |
As per the MIB. |
|
hh3cIPsecTunLocalAddrV2 (1.3.6.1.4.1.25506.2.126.1.2.1.11) |
read-only |
InetAddress |
OCTET STRING (4) |
IP address of the IPsec tunnel local end. |
As per the MIB. |
|
hh3cIPsecTunRemoteAddrTypeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.12) |
read-only |
InetAddressType |
Integer32(1,2) |
Type of the IP address of the IPsec tunnel remote end. |
As per the MIB. |
|
hh3cIPsecTunRemoteAddrV2 (1.3.6.1.4.1.25506.2.126.1.2.1.13) |
read-only |
InetAddress |
OCTET STRING (4) |
IP address of the IPsec tunnel remote end. |
As per the MIB. |
|
hh3cIPsecTunKeyTypeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.14) |
read-only |
Hh3cIPsecNegoTypeV2 |
Integer32(1,2,2147483647) |
Key negotiation mode of the IPsec tunnel. |
As per the MIB. |
|
hh3cIPsecTunEncapModeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.15) |
read-only |
Hh3cIPsecEncapModeV2 |
Integer32(1,2,2147483647) |
Encapsulation mode of the IPsec tunnel. |
As per the MIB. |
|
hh3cIPsecTunInitiatorV2 (1.3.6.1.4.1.25506.2.126.1.2.1.16) |
read-only |
INTEGER |
Integer32(1,2,2147483647) |
Initiator of the IPsec tunnel. |
As per the MIB. |
|
hh3cIPsecTunLifeSizeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.17) |
read-only |
Gauge32 |
Gauge32 (0..4294967295) |
Negotiated traffic-based IPsec SA lifetime, in kilobytes. |
As per the MIB. |
|
hh3cIPsecTunLifeTimeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.18) |
read-only |
Integer32 |
Integer32(1..2147483647) |
Negotiated time-based IPsec SA lifetime, in seconds. |
As per the MIB. |
|
hh3cIPsecTunRemainTimeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.19) |
read-only |
Integer32 |
Integer32(1..2147483647) |
Remaining lifetime of the IPsec tunnel, in seconds. |
As per the MIB. |
|
hh3cIPsecTunActiveTimeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.20) |
read-only |
Integer32 |
Integer32(1..2147483647) |
Active period of time of the IPsec tunnel. |
As per the MIB. |
|
hh3cIPsecTunRemainSizeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.21) |
read-only |
Gauge32 |
Gauge32 (0..4294967295) |
Remaining lifetime of the IPsec tunnel, in kilobytes. |
outbound sa remain traffic duration |
|
hh3cIPsecTunTotalRefreshesV2 (1.3.6.1.4.1.25506.2.126.1.2.1.22) |
read-only |
Counter32 |
Counter32 (0..4294967295) |
Total number of SA refreshes. |
As per the MIB. |
|
hh3cIPsecTunCurrentSaInstancesV2 (1.3.6.1.4.1.25506.2.126.1.2.1.23) |
read-only |
Gauge32 |
Gauge32 (0..4294967295) |
Number of active and expiring SAs. |
As per the MIB. |
|
hh3cIPsecTunInSaEncryptAlgoV2 (1.3.6.1.4.1.25506.2.126.1.2.1.24) |
read-only |
Hh3cIPsecEncryptAlgoV2 |
Integer32 (0..26,128..131,2147483647) |
Encryption algorithm used by the inbound SA of the IPsec tunnel. |
As per the MIB. |
|
hh3cIPsecTunInSaAhAuthAlgoV2 (1.3.6.1.4.1.25506.2.126.1.2.1.25) |
read-only |
Hh3cIPsecAuthAlgoV2 |
Integer32 (0..6,128,2147483647) |
Authentication algorithm used by the inbound AH SA of the IPsec tunnel. |
As per the MIB. |
|
hh3cIPsecTunInSaEspAuthAlgoV2 (1.3.6.1.4.1.25506.2.126.1.2.1.26) |
read-only |
Hh3cIPsecAuthAlgoV2 |
Integer32 (0..6,128,2147483647) |
Authentication algorithm used by the inbound ESP SA of the IPsec tunnel. |
As per the MIB. |
|
hh3cIPsecTunDiffHellmanGrpV2 (1.3.6.1.4.1.25506.2.126.1.2.1.27) |
read-only |
Hh3cIPsecDiffHellmanGrpV2 |
Integer32 (0,1,2,5,12,14,2147483647) |
DH group used in the IKE Phase-2 negotiation. |
As per the MIB. |
|
hh3cIPsecTunOutSaEncryptAlgoV2 (1.3.6.1.4.1.25506.2.126.1.2.1.28) |
read-only |
Hh3cIPsecEncryptAlgoV2 |
Integer32 (0..26,128..131,2147483647) |
Encryption algorithm used by the outbound SA of the IPsec tunnel. |
As per the MIB. |
|
hh3cIPsecTunOutSaAhAuthAlgoV2 (1.3.6.1.4.1.25506.2.126.1.2.1.29) |
read-only |
Hh3cIPsecAuthAlgoV2 |
Integer32 (0..6,128,2147483647) |
Authentication algorithm used by the outbound AH SA of the IPsec tunnel. |
As per the MIB. |
|
hh3cIPsecTunOutSaEspAuthAlgoV2 (1.3.6.1.4.1.25506.2.126.1.2.1.30) |
read-only |
Hh3cIPsecAuthAlgoV2 |
Integer32 (0..5,2147483647) |
Authentication algorithm used by the outbound ESP SA of the IPsec tunnel. |
As per the MIB. |
|
hh3cIPsecTunPolicyNameV2 (1.3.6.1.4.1.25506.2.126.1.2.1.31) |
read-only |
DisplayString |
OCTET STRING (1..63) |
Name of the IPsec policy used by the IPsec tunnel. |
As per the MIB. |
|
hh3cIPsecTunPolicyNumV2 (1.3.6.1.4.1.25506.2.126.1.2.1.32) |
read-only |
Integer32 |
Integer32 (1..2147483647) |
Sequence number of the IPsec policy entry used by the IPsec tunnel. |
As per the MIB. |
|
hh3cIPsecTunStatusV2 (1.3.6.1.4.1.25506.2.126.1.2.1.33) |
read-only |
INTEGER |
Integer32 (1,2) |
State of the IPsec tunnel. |
As per the MIB. |
hh3cIPsecTunnelStatV2Table
About this table
This table contains IPsec tunnel packet statistics.
Support for operations
|
Create |
Edit/Modify |
Delete |
Read |
|
Not supported |
Not supported |
Not supported |
Supported |
Columns
The table index is hh3cIPsecTunIndexV2.
|
Object(OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecTunInOctetsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.1) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of octets received by the IPsec tunnel. This value is accumulated before determining whether or not the packet should be decompressed. |
As per the MIB. |
|
hh3cIPsecTunInDecompOctetsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.2) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of decompressed octets received by the IPsec tunnel. This value is accumulated after the packet is decompressed. |
Not supported |
|
hh3cIPsecTunInPktsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.3) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of packets received by the IPsec tunnel. |
As per the MIB. |
|
hh3cIPsecTunInDropPktsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.4) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of inbound packets dropped by the IPsec tunnel. |
As per the MIB. |
|
hh3cIPsecTunInReplayDropPktsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.5) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of inbound packets dropped by the IPsec tunnel due to anti-replay. |
As per the MIB. |
|
hh3cIPsecTunInAuthFailsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.6) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of inbound packets that failed authentication on the IPsec tunnel. |
As per the MIB. |
|
hh3cIPsecTunInDecryptFailsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.7) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of inbound packets that failed decryption on the IPsec tunnel. |
As per the MIB. |
|
hh3cIPsecTunOutOctetsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.8) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of octets sent by the IPsec tunnel. This value is accumulated after determining whether or not the packet should be compressed. |
As per the MIB. |
|
hh3cIPsecTunOutUncompOctetsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.9) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of uncompressed octets sent by this IPsec tunnel. This value is accumulated before the packet is compressed. |
Not supported |
|
hh3cIPsecTunOutPktsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.10) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of packets sent by the IPsec tunnel. |
As per the MIB. |
|
hh3cIPsecTunOutDropPktsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.11) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of outbound packets dropped by the IPsec tunnel. |
As per the MIB. |
|
hh3cIPsecTunOutEncryptFailsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.12) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of outbound packets that failed encryption on the IPsec tunnel. |
As per the MIB. |
|
hh3cIPsecTunNoMemoryDropPktsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.13) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of packets dropped by the IPsec tunnel due to insufficient memory. |
Not supported |
|
hh3cIPsecTunQueueFullDropPktsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.14) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of packets dropped by the IPsec tunnel due to full queue. |
Not supported |
|
hh3cIPsecTunInvalidLenDropPktsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.15) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of packets dropped by the IPsec tunnel due to invalid length. |
As per the MIB. |
|
hh3cIPsecTunTooLongDropPktsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.16) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of packets dropped by the IPsec tunnel due to too long packet. |
As per the MIB. |
|
hh3cIPsecTunInvalidSaDropPktsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.17) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of packets dropped by the IPsec tunnel due to invalid SA. |
Not supported. |
hh3cIPsecSaV2Table
About this table
This table contains IPsec SA information.
Support for operations
|
Create |
Edit/Modify |
Delete |
Read |
|
Not supported |
Not supported |
Not supported |
Supported |
Columns
The table indexes are hh3cIPsecTunIndexV2 and hh3cIPsecSaIndexV2.
|
Object(OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecSaIndexV2 (1.3.6.1.4.1.25506.2.126.1.4.1.1) |
accessible-for-notify |
Integer32 |
Integer32 (1..2147483647) |
Index of an SA in an IPsec tunnel. |
As per the MIB. |
|
hh3cIPsecSaDirectionV2 (1.3.6.1.4.1.25506.2.126.1.4.1.2) |
read-only |
INTEGER |
Integer32 (1,2) |
Direction of the SA. |
As per the MIB. |
|
hh3cIPsecSaSpiValueV2 (1.3.6.1.4.1.25506.2.126.1.4.1.3) |
read-only |
Unsigned32 |
Unsigned32 (1..4294967295) |
SPI value of the SA. |
As per the MIB. |
|
hh3cIPsecSaSecProtocolV2 (1.3.6.1.4.1.25506.2.126.1.4.1.4) |
read-only |
Hh3cIPsecSaProtocolV2 |
Integer32 (0,2,3,4) |
Security protocol used by the SA. |
As per the MIB. |
|
hh3cIPsecSaEncryptAlgoV2 (1.3.6.1.4.1.25506.2.126.1.4.1.5) |
read-only |
Hh3cIPsecEncryptAlgoV2 |
Integer32 (0..26,128..131,2147483647) |
Encryption algorithm used by the SA. |
As per the MIB. |
|
hh3cIPsecSaAuthAlgoV2 (1.3.6.1.4.1.25506.2.126.1.4.1.6) |
read-only |
Hh3cIPsecAuthAlgoV2 |
Integer32 (0..6,128,2147483647) |
Authentication algorithm used by the SA. |
As per the MIB. |
|
hh3cIPsecSaStatusV2 (1.3.6.1.4.1.25506.2.126.1.4.1.7) |
read-only |
INTEGER |
Integer32 (1,2) |
Status of the SA. |
As per the MIB. |
hh3cIPsecTrafficV2Table
About this table
This table contains information about the traffic protected by IPsec tunnels.
Support for operations
|
Create |
Edit/Modify |
Delete |
Read |
|
Not supported |
Not supported |
Not supported |
Supported |
Columns
The table index is hh3cIPsecTunIndexV2.
|
Object(OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecTrafficLocalTypeV2 (1.3.6.1.4.1.25506.2.126.1.5.1.1) |
read-only |
Hh3cIPsecTrafficTypeV2 |
Integer32 (1,4,5,6,7,8) |
Type of the local end's traffic. |
As per the MIB. |
|
hh3cIPsecTrafficLocalAddr1TypeV2 (1.3.6.1.4.1.25506.2.126.1.5.1.2) |
read-only |
InetAddressType |
Integer32(1,2) |
Type of the first IP address specification for the local end's traffic. |
As per the MIB. |
|
hh3cIPsecTrafficLocalAddr1V2 (1.3.6.1.4.1.25506.2.126.1.5.1.3) |
read-only |
InetAddress |
OCTET STRING (4) |
The first IP address specification for the local end's traffic. |
As per the MIB. |
|
hh3cIPsecTrafficLocalAddr2TypeV2 (1.3.6.1.4.1.25506.2.126.1.5.1.4) |
read-only |
InetAddressType |
Integer32(1,2) |
Type of the second IP address specification for the local end's traffic. |
As per the MIB. |
|
hh3cIPsecTrafficLocalAddr2V2 (1.3.6.1.4.1.25506.2.126.1.5.1.5) |
read-only |
InetAddress |
OCTET STRING (4) |
The second IP address specification for the local end's traffic. |
As per the MIB. |
|
hh3cIPsecTrafficLocalProtocol1V2 (1.3.6.1.4.1.25506.2.126.1.5.1.6) |
read-only |
Integer32 |
Integer32 (0..255) |
The first protocol number specification for the local end's traffic. |
As per the MIB. |
|
hh3cIPsecTrafficLocalProtocol2V2 (1.3.6.1.4.1.25506.2.126.1.5.1.7) |
read-only |
Integer32 |
Integer32 (0..255) |
The second protocol number specification for the local end's traffic. |
As per the MIB. |
|
hh3cIPsecTrafficLocalPort1V2 (1.3.6.1.4.1.25506.2.126.1.5.1.8) |
read-only |
Integer32 |
Integer32 (0..65535) |
The first port number specification for the local end's traffic. |
As per the MIB. |
|
hh3cIPsecTrafficLocalPort2V2 (1.3.6.1.4.1.25506.2.126.1.5.1.9) |
read-only |
Integer32 |
Integer32 (0..65535) |
The second port number specification for the local end's traffic. |
As per the MIB. |
|
hh3cIPsecTrafficRemoteTypeV2 (1.3.6.1.4.1.25506.2.126.1.5.1.10) |
read-only |
Hh3cIPsecTrafficTypeV2 |
Integer32 (1,4,5,6,7,8) |
Type of the remote end's traffic. |
As per the MIB. |
|
hh3cIPsecTrafficRemAddr1TypeV2 (1.3.6.1.4.1.25506.2.126.1.5.1.11) |
read-only |
InetAddressType |
Integer32(1,2) |
Type of the first IP address specification for the remote end's traffic. |
As per the MIB. |
|
hh3cIPsecTrafficRemAddr1V2 (1.3.6.1.4.1.25506.2.126.1.5.1.12) |
read-only |
InetAddress |
OCTET STRING (4) |
The first IP address specification for the remote end's traffic. |
As per the MIB. |
|
hh3cIPsecTrafficRemAddr2TypeV2 (1.3.6.1.4.1.25506.2.126.1.5.1.13) |
read-only |
InetAddressType |
Integer32(1,2) |
Type of the second IP address specification for the remote end's traffic. |
As per the MIB. |
|
hh3cIPsecTrafficRemAddr2V2 (1.3.6.1.4.1.25506.2.126.1.5.1.14) |
read-only |
InetAddress |
OCTET STRING (4) |
The second IP address specification for the remote end's traffic. |
As per the MIB. |
|
hh3cIPsecTrafficRemoPro1V2 (1.3.6.1.4.1.25506.2.126.1.5.1.15) |
read-only |
Integer32 |
Integer32 (0..255) |
The first protocol number specification for the remote end's traffic. |
As per the MIB. |
|
hh3cIPsecTrafficRemoPro2V2 (1.3.6.1.4.1.25506.2.126.1.5.1.16) |
read-only |
Integer32 |
Integer32 (0..255) |
The second protocol number specification for the remote end's traffic. |
As per the MIB. |
|
hh3cIPsecTrafficRemPort1V2 (1.3.6.1.4.1.25506.2.126.1.5.1.17) |
read-only |
Integer32 |
Integer32 (0..65535) |
The first port number specification for the remote end's traffic. |
As per the MIB. |
|
hh3cIPsecTrafficRemPort2V2 (1.3.6.1.4.1.25506.2.126.1.5.1.18) |
read-only |
Integer32 |
Integer32 (0..65535) |
The second port number specification for the remote end's traffic. |
As per the MIB. |
hh3cIPsecTunnelStatByDescripV2Table
About this table
This table contains IPsec tunnel packet statistics corresponding to the description for an IPsec policy.
Support for operations
|
Create |
Edit/Modify |
Delete |
Read |
|
Not supported |
Not supported |
Not supported |
Supported |
Columns
The table index is hh3cIPsecPolicyDescripV2.
|
Object(OID) |
Access |
Syntax |
Value range |
Description |
Implementation |
|
hh3cIPsecPolicyDescripV2 (1.3.6.1.4.1.25506.2.126.1.10.1.1) |
accessible-for-notify |
STRING |
OCTET STRING (1..80) |
Description for the IPsec policy. |
As per the MIB. |
|
hh3cIPsecTunInOctetsByDescripV2 (1.3.6.1.4.1.25506.2.126.1.10.1.2) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of octets received by the IPsec tunnel. This value is accumulated before determining whether or not the packet should be decompressed. |
As per the MIB. |
|
hh3cIPsecTunInDecompOctetsByDescripV2 (1.3.6.1.4.1.25506.2.126.1.10.1.3) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of decompressed octets received by the IPsec tunnel. This value is accumulated after the packet is decompressed. |
As per the MIB. |
|
hh3cIPsecTunInPktsByDescripV2 (1.3.6.1.4.1.25506.2.126.1.10.1.4) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of packets received by the IPsec tunnel. |
As per the MIB. |
|
hh3cIPsecTunInDropPktsByDescripV2 (1.3.6.1.4.1.25506.2.126.1.10.1.5) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of inbound packets dropped by the IPsec tunnel. |
As per the MIB. |
|
hh3cIPsecTunInReplayDropPktsByDescripV2 (1.3.6.1.4.1.25506.2.126.1.10.1.6) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of inbound packets dropped by the IPsec tunnel due to anti-replay. |
As per the MIB. |
|
hh3cIPsecTunInAuthFailsByDescripV2 (1.3.6.1.4.1.25506.2.126.1.10.1.7) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of inbound packets that failed authentication on the IPsec tunnel. |
As per the MIB. |
|
hh3cIPsecTunInDecryptFailsByDescripV2 (1.3.6.1.4.1.25506.2.126.1.10.1.8) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of inbound packets that failed decryption on the IPsec tunnel. |
As per the MIB. |
|
hh3cIPsecTunOutOctetsByDescripV2 (1.3.6.1.4.1.25506.2.126.1.10.1.9) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of octets sent by the IPsec tunnel. This value is accumulated after determining whether or not the packet should be compressed. |
As per the MIB. |
|
hh3cIPsecTunOutUncompOctetsByDescripV2 (1.3.6.1.4.1.25506.2.126.1.10.1.10) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of uncompressed octets sent by this IPsec tunnel. This value is accumulated before the packet is compressed. |
As per the MIB. |
|
hh3cIPsecTunOutPktsByDescripV2 (1.3.6.1.4.1.25506.2.126.1.10.1.11) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of packets sent by the IPsec tunnel. |
As per the MIB. |
|
hh3cIPsecTunOutDropPktsByDescripV2 (1.3.6.1.4.1.25506.2.126.1.10.1.12) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of outbound packets dropped by the IPsec tunnel. |
As per the MIB. |
|
hh3cIPsecTunOutEncryptFailsByDescripV2 (1.3.6.1.4.1.25506.2.126.1.10.1.13) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of outbound packets that failed encryption on the IPsec tunnel. |
As per the MIB. |
|
hh3cIPsecTunNoMemoryDropPktsByDescripV2(1.3.6.1.4.1.25506.2.126.1.10.1.14) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of packets dropped by the IPsec tunnel due to insufficient memory. |
As per the MIB. |
|
hh3cIPsecTunQueueFullDropPktsByDescripV2(1.3.6.1.4.1.25506.2.126.1.10.1.15) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of packets dropped by the IPsec tunnel due to full queue. |
As per the MIB. |
|
hh3cIPsecTunInvalidLenDropPktsByDescripV2(1.3.6.1.4.1.25506.2.126.1.10.1.16) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of packets dropped by the IPsec tunnel due to invalid length. |
As per the MIB. |
|
hh3cIPsecTunTooLongDropPktsByDescripV2(1.3.6.1.4.1.25506.2.126.1.10.1.17) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of packets dropped by the IPsec tunnel due to too long packet. |
As per the MIB. |
|
hh3cIPsecTunInvalidSaDropPktsByDescripV2(1.3.6.1.4.1.25506.2.126.1.10.1.18) |
read-only |
Counter64 |
Counter64 (0..18446744073709551615) |
Total number of packets dropped by the IPsec tunnel due to invalid SA. |
As per the MIB. |
Notifications
The following information describes the notifications generated by HH3C-IPSEC-MONITOR-V2-MIB.
hh3cIPsecTunnelStartV2
Basic information
|
OID |
Event |
Type |
Severity |
Recovery notification |
Default status |
|
1.3.6.1.4.1.25506.2.126.1.9.0.1 |
IPsec tunnel created. |
Informational |
Warning |
N/A |
OFF |
Notification triggers
This notification is generated when an IPsec tunnel is created.
System impact
No impact on services.
Status control
ON
· CLI: Use the snmp-agent trap enable ipsec tunnel-start command.
· MIB: Set hh3cIPsecTunnelStartTrapCntlV2 to true(1).
OFF
· CLI: Use the undo snmp-agent trap enable ipsec tunnel-start command.
· MIB: Set hh3cIPsecTunnelStartTrapCntlV2 to false(2).
Objects
|
OID (object name) |
Description |
Index nodes |
Type |
Value range |
|
1.3.6.1.4.1.25506.2.126.1.2.1.1 (hh3cIPsecTunIndexV2) |
Index of an IPsec tunnel. |
hh3cIPsecTunIndexV2 |
Integer32 |
1..2147483647 |
|
1.3.6.1.4.1.25506.2.126.1.2.1.10 (hh3cIPsecTunLocalAddrTypeV2) |
Type of the IP address of the IPsec tunnel local end. |
hh3cIPsecTunIndexV2 |
InetAddressType |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.126.1.2.1.11 (hh3cIPsecTunLocalAddrV2) |
IP address of the IPsec tunnel local end. |
hh3cIPsecTunIndexV2 |
InetAddress |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.126.1.2.1.12 (hh3cIPsecTunRemoteAddrTypeV2) |
Type of the IP address of the IPsec tunnel remote end. |
hh3cIPsecTunIndexV2 |
InetAddressType |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.126.1.2.1.13 (hh3cIPsecTunRemoteAddrV2) |
IP address of the IPsec tunnel remote end. |
hh3cIPsecTunIndexV2 |
InetAddress |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.126.1.2.1.18 (hh3cIPsecTunLifeTimeV2) |
Time-based lifetime of the IPsec tunnel, in seconds. |
hh3cIPsecTunIndexV2 |
Integer32 |
1..2147483647 |
|
1.3.6.1.4.1.25506.2.126.1.2.1.17 (hh3cIPsecTunLifeSizeV2) |
Time-based lifetime of the IPsec tunnel, in kilobytes. |
hh3cIPsecTunIndexV2 |
Gauge32 |
Standard MIB values. |
Recommended action
No action is required.
hh3cIPsecTunnelStopV2
Basic information
|
OID |
Event |
Type |
Severity |
Recovery notification |
Default status |
|
1.3.6.1.4.1.25506.2.126.1.9.0.2 |
IPsec tunnel deleted. |
Informational |
Warning |
N/A |
OFF |
Notification triggers
This notification is generated when an IPsec tunnel is deleted.
This notification might be generated when the following events occur:
· Hard timeout of the phase-2 IKE negotiation occurs.
· The IPsec SA is accidentally deleted when you modify other configurations or manually deleted.
· A new IPsec SA takes over the old IPsec SA.
· IPsec SA idle timer expires.
· The remote end asks to delete the IPsec SA.
· Other events.
System impact
The IPsec tunnel is deleted.
Status control
ON
· CLI: Use the snmp-agent trap enable ipsec tunnel-stop command.
· MIB: Set hh3cIPsecTunnelStopTrapCntlV2 to true(1).
OFF
· CLI: Use the undo snmp-agent trap enable ipsec tunnel-stop command.
· MIB: Set hh3cIPsecTunnelStopTrapCntlV2 to false(2).
Objects
|
OID (object name) |
Description |
Index nodes |
Type |
Value range |
|
1.3.6.1.4.1.25506.2.126.1.2.1.1 (hh3cIPsecTunIndexV2) |
Index of an IPsec tunnel. |
hh3cIPsecTunIndexV2 |
Integer32 |
1..2147483647 |
|
1.3.6.1.4.1.25506.2.126.1.2.1.10 (hh3cIPsecTunLocalAddrTypeV2) |
Type of the IP address of the IPsec tunnel local end. |
hh3cIPsecTunIndexV2 |
InetAddressType |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.126.1.2.1.11 (hh3cIPsecTunLocalAddrV2) |
IP address of the IPsec tunnel local end. |
hh3cIPsecTunIndexV2 |
InetAddress |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.126.1.2.1.12 (hh3cIPsecTunRemoteAddrTypeV2) |
Type of the IP address of the IPsec tunnel remote end. |
hh3cIPsecTunIndexV2 |
InetAddressType |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.126.1.2.1.13 (hh3cIPsecTunRemoteAddrV2) |
IP address of the IPsec tunnel remote end. |
hh3cIPsecTunIndexV2 |
InetAddress |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.126.1.2.1.20 (hh3cIPsecTunActiveTimeV2) |
Active period of time of the IPsec tunnel. |
hh3cIPsecTunIndexV2 |
Integer32 |
0..2147483647 |
Recommended action
To resolve this issue, take the following operations according to the corresponding notification generation reasons:
· Check whether the IPsec SA lifetime is appropriate. If no, modify the IPsec SA lifetime.
· Check whether the reset ipsec sa command has been executed to delete the IPsec SA. If yes, no action is required. Then check whether an IPsec policy application has been removed from the interface and whether the removement is appropriate. If no, apply an IPsec policy to the interface again.
· If a new IPsec SA takes over the old IPsec SA, no action is required.
· Check whether the IPsec SA idle timeout is appropriate. If no, modify the IPsec SA idle timeout.
· View the logs on the remote end and identify the IPsec tunnel deletion reasons.
· Collect alarm information and configuration data, and then contact H3C Support for help.
hh3cIPsecNoSaFailureV2
Basic information
|
OID |
Event |
Type |
Severity |
Recovery notification |
Default status |
|
1.3.6.1.4.1.25506.2.126.1.9.0.3 |
No SA for IPsec tunnel. |
Informational |
Warning |
N/A |
OFF |
Notification triggers
This notification is generated when no SA is available for an IPsec tunnel.
System impact
If the IPsec tunnel exists, IPsec-related services are unavailable.
If this notification is generated when negotiation is triggered, there is no impact on services.
Status control
ON
· CLI: Use the snmp-agent trap enable ipsec no-sa-failure command.
· MIB: Set hh3cIPsecNoSaTrapCntlV2 to true(1).
OFF
· CLI: Use the undo snmp-agent trap enable ipsec no-sa-failure command.
· MIB: Set hh3cIPsecNoSaTrapCntlV2 to false(2).
Objects
|
OID (object name) |
Description |
Index nodes |
Type |
Value range |
|
1.3.6.1.4.1.25506.2.126.1.2.1.1 (hh3cIPsecTunIndexV2) |
Index of an IPsec tunnel. |
hh3cIPsecTunIndexV2 |
Integer32 |
1..2147483647 |
|
1.3.6.1.4.1.25506.2.126.1.2.1.10 (hh3cIPsecTunLocalAddrTypeV2) |
Type of the IP address of the IPsec tunnel local end. |
hh3cIPsecTunIndexV2 |
InetAddressType |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.126.1.2.1.11 (hh3cIPsecTunLocalAddrV2) |
IP address of the IPsec tunnel local end. |
hh3cIPsecTunIndexV2 |
InetAddress |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.126.1.2.1.12 (hh3cIPsecTunRemoteAddrTypeV2) |
Type of the IP address of the IPsec tunnel remote end. |
hh3cIPsecTunIndexV2 |
InetAddressType |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.126.1.2.1.13 (hh3cIPsecTunRemoteAddrV2) |
IP address of the IPsec tunnel remote end. |
hh3cIPsecTunIndexV2 |
InetAddress |
Standard MIB values. |
Recommended action
To resolve this issue:
1. Check whether this notification is generated when negotiation is triggered:
¡ If yes, no action is required.
¡ If no, use the reset ipsec sa command to delete IPsec SAs and use the reset ike sa command to delete IKE SAs so as to trigger IKE SA negotiation. If the negotiation is successful and this notification still exists, go to step 2.
2. If the issue persists, collect alarm information and configuration data, and then contact H3C Support for help.
hh3cIPsecAuthFailFailureV2
Basic information
|
OID |
Event |
Type |
Severity |
Recovery notification |
Default status |
|
1.3.6.1.4.1.25506.2.126.1.9.0.4 |
IPsec authentication failure. |
Informational |
Warning |
N/A |
OFF |
Notification triggers
This notification is generated when an IPsec authentication failure occurs.
System impact
IPsec-related services are unavailable.
Status control
ON
· CLI: Use the snmp-agent trap enable ipsec auth-failure command.
· MIB: Set hh3cIPsecAuthFailureTrapCntlV2 to true(1).
OFF
· CLI: Use the undo snmp-agent trap enable ipsec auth-failure command.
· MIB: Set hh3cIPsecAuthFailureTrapCntlV2 to false(2).
Objects
|
OID (object name) |
Description |
Index nodes |
Type |
Value range |
|
1.3.6.1.4.1.25506.2.126.1.2.1.1 (hh3cIPsecTunIndexV2) |
Index of an IPsec tunnel. |
hh3cIPsecTunIndexV2 |
Integer32 |
1..2147483647 |
|
1.3.6.1.4.1.25506.2.126.1.2.1.10 (hh3cIPsecTunLocalAddrTypeV2) |
Type of the IP address of the IPsec tunnel local end. |
hh3cIPsecTunIndexV2 |
InetAddressType |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.126.1.2.1.11 (hh3cIPsecTunLocalAddrV2) |
IP address of the IPsec tunnel local end. |
hh3cIPsecTunIndexV2 |
InetAddress |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.126.1.2.1.12 (hh3cIPsecTunRemoteAddrTypeV2) |
Type of the IP address of the IPsec tunnel remote end. |
hh3cIPsecTunIndexV2 |
InetAddressType |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.126.1.2.1.13 (hh3cIPsecTunRemoteAddrV2) |
IP address of the IPsec tunnel remote end. |
hh3cIPsecTunIndexV2 |
InetAddress |
Standard MIB values. |
Recommended action
To resolve this issue:
1. Use the reset ipsec sa command to delete IPsec SAs and use the reset ike sa command to delete IKE SAs so as to trigger IKE SA negotiation.
2. If the issue persists, collect alarm information and configuration data, and then contact H3C Support for help.
hh3cIPsecEncryFailFailureV2
Basic information
|
OID |
Event |
Type |
Severity |
Recovery notification |
Default status |
|
1.3.6.1.4.1.25506.2.126.1.9.0.5 |
IPsec tunnel encryption failure. |
Informational |
Warning |
N/A |
OFF |
Notification triggers
This notification is generated when an IPsec tunnel has an encryption failure.
System impact
IPsec-related services are unavailable.
Status control
ON
· CLI: Use the snmp-agent trap enable ipsec encrypt-failure command.
· MIB: Set hh3cIPsecEncryFailureTrapCntlV2 to true(1).
OFF
· CLI: Use the undo snmp-agent trap enable ipsec encrypt-failure command.
· MIB: Set hh3cIPsecEncryFailureTrapCntlV2 to false(2).
Objects
|
OID (object name) |
Description |
Index nodes |
Type |
Value range |
|
1.3.6.1.4.1.25506.2.126.1.2.1.1 (hh3cIPsecTunIndexV2) |
Index of an IPsec tunnel. |
hh3cIPsecTunIndexV2 |
Integer32 |
1..2147483647 |
|
1.3.6.1.4.1.25506.2.126.1.2.1.10 (hh3cIPsecTunLocalAddrTypeV2) |
Type of the IP address of the IPsec tunnel local end. |
hh3cIPsecTunIndexV2 |
InetAddressType |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.126.1.2.1.11 (hh3cIPsecTunLocalAddrV2) |
IP address of the IPsec tunnel local end. |
hh3cIPsecTunIndexV2 |
InetAddress |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.126.1.2.1.12 (hh3cIPsecTunRemoteAddrTypeV2) |
Type of the IP address of the IPsec tunnel remote end. |
hh3cIPsecTunIndexV2 |
InetAddressType |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.126.1.2.1.13 (hh3cIPsecTunRemoteAddrV2) |
IP address of the IPsec tunnel remote end. |
hh3cIPsecTunIndexV2 |
InetAddress |
Standard MIB values. |
Recommended action
To resolve this issue:
1. Use the reset ipsec sa command to delete IPsec SAs and use the reset ike sa command to delete IKE SAs so as to trigger IKE SA negotiation.
2. If the issue persists, collect alarm information and configuration data, and then contact H3C Support for help.
hh3cIPsecDecryFailFailureV2
Basic information
|
OID |
Event |
Type |
Severity |
Recovery notification |
Default status |
|
1.3.6.1.4.1.25506.2.126.1.9.0.6 |
IPsec tunnel encryption failure. |
Informational |
Warning |
N/A |
OFF |
Notification triggers
This notification is generated when an IPsec tunnel has a decryption failure.
System impact
IPsec-related services are unavailable.
Status control
ON
· CLI: Use the snmp-agent trap enable ipsec decrypt-failure command.
· MIB: Set hh3cIPsecDecryFailureTrapCntlV2 to true(1).
OFF
· CLI: Use the undo snmp-agent trap enable ipsec decrypt-failure command.
· MIB: Set hh3cIPsecDecryFailureTrapCntlV2 to false(2).
Objects
|
OID (object name) |
Description |
Index nodes |
Type |
Value range |
|
1.3.6.1.4.1.25506.2.126.1.2.1.1 (hh3cIPsecTunIndexV2) |
Index of an IPsec tunnel. |
hh3cIPsecTunIndexV2 |
Integer32 |
1..2147483647 |
|
1.3.6.1.4.1.25506.2.126.1.2.1.10 (hh3cIPsecTunLocalAddrTypeV2) |
Type of the IP address of the IPsec tunnel local end. |
hh3cIPsecTunIndexV2 |
InetAddressType |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.126.1.2.1.11 (hh3cIPsecTunLocalAddrV2) |
IP address of the IPsec tunnel local end. |
hh3cIPsecTunIndexV2 |
InetAddress |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.126.1.2.1.12 (hh3cIPsecTunRemoteAddrTypeV2) |
Type of the IP address of the IPsec tunnel remote end. |
hh3cIPsecTunIndexV2 |
InetAddressType |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.126.1.2.1.13 (hh3cIPsecTunRemoteAddrV2) |
IP address of the IPsec tunnel remote end. |
hh3cIPsecTunIndexV2 |
InetAddress |
Standard MIB values. |
Recommended action
To resolve this issue:
1. Use the reset ipsec sa command to delete IPsec SAs and use the reset ike sa command to delete IKE SAs so as to trigger IKE SA negotiation.
2. If the issue persists, collect alarm information and configuration data, and then contact H3C Support for help.
hh3cIPsecInvalidSaFailureV2
Basic information
|
OID |
Event |
Type |
Severity |
Recovery notification |
Default status |
|
1.3.6.1.4.1.25506.2.126.1.9.0.7 |
Invalid IPsec phase-2 SA. |
Informational |
Warning |
N/A |
OFF |
Notification triggers
This notification is generated when an IPsec phase-2 SA is invalid.
System impact
IPsec-related services are unavailable.
Status control
ON
· CLI: snmp-agent trap enable ipsec invalid-sa-failure
· MIB: Set hh3cIPsecInvalidSaTrapCntlV2 to true(1).
OFF
· CLI: undo snmp-agent trap enable ipsec invalid-sa-failure
· MIB: Set hh3cIPsecInvalidSaTrapCntlV2 to false(2).
· Objects
|
OID (object name) |
Description |
Index nodes |
Type |
Value range |
|
1.3.6.1.4.1.25506.2.126.1.2.1.1 (hh3cIPsecTunIndexV2) |
IPsec tunnel index. |
hh3cIPsecTunIndexV2 |
Integer32 |
1..2147483647 |
|
1.3.6.1.4.1.25506.2.126.1.4.1.1 (hh3cIPsecSaIndexV2) |
Index of an SA in the IPsec tunnel. |
hh3cIPsecTunIndexV2, hh3cIPsecSaIndexV2 |
Integer32 |
1..2147483647 |
|
1.3.6.1.4.1.25506.2.126.1.2.1.10 (hh3cIPsecTunLocalAddrTypeV2) |
IP address type of the IPsec tunnel local end. |
hh3cIPsecTunIndexV2 |
InetAddressType |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.126.1.2.1.11 (hh3cIPsecTunLocalAddrV2) |
IP address of the IPsec tunnel local end. |
hh3cIPsecTunIndexV2 |
InetAddress |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.126.1.2.1.12 (hh3cIPsecTunRemoteAddrTypeV2) |
IP address type of the IPsec tunnel remote end. |
hh3cIPsecTunIndexV2 |
InetAddressType |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.126.1.2.1.13 (hh3cIPsecTunRemoteAddrV2) |
IP address of the IPsec tunnel remote end. |
hh3cIPsecTunIndexV2 |
InetAddress |
Standard MIB values. |
|
1.3.6.1.4.1.25506.2.126.1.4.1.3 (hh3cIPsecSaSpiValueV2) |
SPI of the SA. |
hh3cIPsecTunIndexV2, hh3cIPsecSaIndexV2 |
Unsigned32 |
1..4294967295 |
Recommended action
To resolve this issue:
1. Use the reset ipsec sa command to delete IPsec SAs and use the reset ike sa command to delete IKE SAs so as to trigger IKE SA negotiation.
2. If the issue persists, collect alarm information and configuration data, and then contact H3C Support for help.
hh3cIPsecPolicyAddV2
Basic information
|
OID |
Event |
Type |
Severity |
Recovery notification |
Default status |
|
1.3.6.1.4.1.25506.2.126.1.9.0.8 |
IPsec policy or IPsec profile added. |
Informational |
Warning |
N/A |
OFF |
Notification triggers
This notification is generated when an IPsec policy or IPsec profile is added.
System impact
No impact on services.
Status control
ON
· CLI: Use the snmp-agent trap enable ipsec policy-add command.
· MIB: Set hh3cIPsecPolicyAddTrapCntlV2 to true(1).
OFF
· CLI: Use the undo snmp-agent trap enable ipsec policy-add command.
· MIB: Set hh3cIPsecPolicyAddTrapCntlV2 to false(2).
Objects
|
OID (object name) |
Description |
Index nodes |
Type |
Value range |
|
1.3.6.1.4.1.25506.2.126.1.7.1 (hh3cIPsecPolicyNameV2) |
Name of an IPsec policy. |
N/A |
DisplayString |
OCTET STRING (SIZE (0..255)) |
|
1.3.6.1.4.1.25506.2.126.1.7.2 (hh3cIPsecPolicySeqNumV2) |
Sequence number an IPsec policy entry. |
N/A |
Integer32 |
1..2147483647 |
|
1.3.6.1.4.1.25506.2.126.1.7.3 (hh3cIPsecPolicySizeV2) |
Number of the IPsec policy entries. |
N/A |
InetAddressType |
Standard MIB values. |
Recommended action
No action is required.
hh3cIPsecPolicyDelV2
Basic information
|
OID |
Event |
Type |
Severity |
Recovery notification |
Default status |
|
1.3.6.1.4.1.25506.2.126.1.9.0.9 |
IPsec policy or IPsec profile deleted. |
Informational |
Warning |
N/A |
OFF |
Notification triggers
This notification is generated when an IPsec policy or IPsec profile is deleted.
System impact
No impact on services.
Status control
ON
· CLI: Use the snmp-agent trap enable ipsec policy-delete command.
· MIB: Set hh3cIPsecPolicyDelTrapCntlV2 to true(1).
OFF
· CLI: Use the undo snmp-agent trap enable ipsec policy-delete command.
· MIB: Set hh3cIPsecPolicyDelTrapCntlV2 to false(2).
Objects
|
OID (object name) |
Description |
Index nodes |
Type |
Value range |
|
1.3.6.1.4.1.25506.2.126.1.7.1 (hh3cIPsecPolicyNameV2) |
Name of an IPsec policy. |
N/A |
DisplayString |
OCTET STRING (SIZE (0..255)) |
|
1.3.6.1.4.1.25506.2.126.1.7.2 (hh3cIPsecPolicySeqNumV2) |
Sequence number of an IPsec policy entry. |
N/A |
Integer32 |
1..2147483647 |
|
1.3.6.1.4.1.25506.2.126.1.7.3 (hh3cIPsecPolicySizeV2) |
Number of the IPsec policy entries. |
N/A |
InetAddressType |
Standard MIB values. |
Recommended action
No action is required.
hh3cIPsecPolicyAttachV2
Basic information
|
OID |
Event |
Type |
Severity |
Recovery notification |
Default status |
|
1.3.6.1.4.1.25506.2.126.1.9.0.10 |
IPsec policy or IPsec profile applied to interface. |
Informational |
Warning |
N/A |
OFF |
Notification triggers
This notification is generated when an IPsec policy or IPsec profile is applied to an interface.
System impact
No impact on services.
Status control
ON
· CLI: Use the snmp-agent trap enable ipsec policy-attach command.
· MIB: Set hh3cIPsecPolicyAttachTrapCntlV2 to true(1).
OFF
· CLI: Use the undo snmp-agent trap enable ipsec policy-attach command.
· MIB: Set hh3cIPsecPolicyAttachTrapCntlV2 to false(2).
Objects
|
OID (object name) |
Description |
Index nodes |
Type |
Value range |
|
1.3.6.1.4.1.25506.2.126.1.7.1 (hh3cIPsecPolicyNameV2) |
Name of an IPsec policy. |
N/A |
DisplayString |
OCTET STRING (SIZE (0..255)) |
|
1.3.6.1.4.1.25506.2.126.1.7.3 (hh3cIPsecPolicySizeV2) |
Number of the IPsec policy entries. |
N/A |
Integer32 |
1..2147483647 |
|
1.3.6.1.2.1.2.2.1.1 (ifIndex) |
Index of an interface. |
ifIndex |
InterfaceIndex |
Integer32(1..2147483647) |
Recommended action
No action is required.
hh3cIPsecPolicyDetachV2
Basic information
|
OID |
Event |
Type |
Severity |
Recovery notification |
Default status |
|
1.3.6.1.4.1.25506.2.126.1.9.0.11 |
IPsec policy or IPsec profile application removed from interface. |
Informational |
Warning |
N/A |
OFF |
Notification triggers
This notification is generated when an IPsec policy or IPsec profile application is removed from an interface.
System impact
If an IPsec tunnel exists, the running IPsec tunnel will be disconnected.
If no IPsec tunnel exists, there is no impact on services.
Status control
ON
· CLI: Use the snmp-agent trap enable ipsec policy-detach command.
· MIB: Set hh3cIPsecPolicyDetachTrapCntlV2 to true(1).
OFF
· CLI: Use the undo snmp-agent trap enable ipsec policy-detach command.
· MIB: Set hh3cIPsecPolicyDetachTrapCntlV2 to false(2).
Objects
|
OID (object name) |
Description |
Index nodes |
Type |
Value range |
|
1.3.6.1.4.1.25506.2.126.1.7.1 (hh3cIPsecPolicyNameV2) |
Name of an IPsec policy. |
N/A |
DisplayString |
OCTET STRING (SIZE (0..255)) |
|
1.3.6.1.4.1.25506.2.126.1.7.3 (hh3cIPsecPolicySizeV2) |
Number of the IPsec policy entries. |
N/A |
Integer32 |
1..2147483647 |
|
1.3.6.1.2.1.2.2.1.1 (ifIndex) |
Index of an interface. |
ifIndex |
InterfaceIndex |
Integer32(1..2147483647) |
Recommended action
No action is required.