Use this MIB to obtain information about IPsec tunnels, IPsec-protected traffic, IPsec SAs, IPsec tunnel packet statistics, and IPsec trap notifications.

Root object

iso(1).org(3).dod(6).internet(1).private(4).enterprises(1).hh3c(25506).hh3cCommon(2).hh3cIPsecMonitorV2(126)

Scalar objects

hh3cIPsecMIBVersion (1.3.6.1.4.1.25506.2.126.1.1.1)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecMIBVersion (1.3.6.1.4.1.25506.2.126.1.1.1)	read-only	DisplayString	OCTET STRING (0..255)	IPsec MIB version information.	As per the MIB.

hh3cIPsecGlobalActiveTunnelsV2 (1.3.6.1.4.1.25506.2.126.1.6.1)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecGlobalActiveTunnelsV2 (1.3.6.1.4.1.25506.2.126.1.6.1)	read-only	Gauge32	Gauge32 (0..4294967295)	Total number of currently active IPsec Phase-2 tunnels.	As per the MIB.

hh3cIPsecGlobalActiveSasV2 (1.3.6.1.4.1.25506.2.126.1.6.2)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecGlobalActiveSasV2 (1.3.6.1.4.1.25506.2.126.1.6.2)	read-only	Gauge32	Gauge32 (0..4294967295)	Total number of existing IPsec Phase-2 SAs.	As per the MIB.

hh3cIPsecGlobalInOctetsV2 (1.3.6.1.4.1.25506.2.126.1.6.3)

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecGlobalInOctetsV2 (1.3.6.1.4.1.25506.2.126.1.6.3)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of octets received by all current and previous IPsec Phase-2 tunnels.

This value is accumulated before determining whether or not the packet should be decompressed.

As per the MIB.

hh3cIPsecGlobalInDecompOctetsV2 (1.3.6.1.4.1.25506.2.126.1.6.4)

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecGlobalInDecompOctetsV2 (1.3.6.1.4.1.25506.2.126.1.6.4)

read-only

Counter64

Counter64 (0..18446744073709551615)

The total number of decompressed octets received by all current and previous IPsec Phase-2 Tunnels.

This value is accumulated after a packet is decompressed.

Not supported

hh3cIPsecGlobalInPktsV2 (1.3.6.1.4.1.25506.2.126.1.6.5)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecGlobalInPktsV2 (1.3.6.1.4.1.25506.2.126.1.6.5)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of packets received by all current and previous IPsec Phase-2 tunnels.	As per the MIB.

hh3cIPsecGlobalInDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.6)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecGlobalInDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.6)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of inbound packets dropped by all current and previous IPsec Phase-2 tunnels.	As per the MIB.

hh3cIPsecGlobalInReplayDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.7)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecGlobalInReplayDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.7)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of inbound packets dropped due to anti-replay by all current and previous IPsec Phase-2 tunnels.	As per the MIB.

hh3cIPsecGlobalInAuthFailsV2 (1.3.6.1.4.1.25506.2.126.1.6.8)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecGlobalInAuthFailsV2 (1.3.6.1.4.1.25506.2.126.1.6.8)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of inbound packets that failed authentication on all current previous IPsec Phase-2 tunnels.	As per the MIB.

hh3cIPsecGlobalInDecryptFailsV2 (1.3.6.1.4.1.25506.2.126.1.6.9)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecGlobalInDecryptFailsV2 (1.3.6.1.4.1.25506.2.126.1.6.9)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of inbound packets that failed decryption on all current and previous IPsec Phase-2 tunnels.	As per the MIB.

hh3cIPsecGlobalOutOctetsV2 (1.3.6.1.4.1.25506.2.126.1.6.10)

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecGlobalOutOctetsV2 (1.3.6.1.4.1.25506.2.126.1.6.10)

read-only

Counter64

Counter64 (0..18446744073709551615)

Total number of octets sent by all current and previous IPsec Phase-2 tunnels.

This value is accumulated before determining whether or not the packet should be compressed.

As per the MIB.

hh3cIPsecGlobalOutUncompOctetsV2 (1.3.6.1.4.1.25506.2.126.1.6.11)

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cIPsecGlobalOutUncompOctetsV2 (1.3.6.1.4.1.25506.2.126.1.6.11)

read-only

Counter64

Counter64 (0..18446744073709551615)

The total number of uncompressed octets sent by all current and previous IPsec Phase-2 Tunnels.

This value is accumulated before a packet is compressed.

Not supported

hh3cIPsecGlobalOutPktsV2 (1.3.6.1.4.1.25506.2.126.1.6.12)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecGlobalOutPktsV2 (1.3.6.1.4.1.25506.2.126.1.6.12)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of packets sent by all current and previous IPsec Phase-2 tunnels.	As per the MIB.

hh3cIPsecGlobalOutDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.13)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecGlobalOutDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.13)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of outbound packets dropped by all current and previous IPsec Phase-2 tunnels.	As per the MIB.

hh3cIPsecGlobalOutEncryptFailsV2 (1.3.6.1.4.1.25506.2.126.1.6.14)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecGlobalOutEncryptFailsV2 (1.3.6.1.4.1.25506.2.126.1.6.14)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of outbound packets that failed encryption on all current and previous IPsec Phase-2 tunnels.	As per the MIB.

hh3cIPsecGlobalNoMemoryDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.15)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecGlobalNoMemoryDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.15)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of packets dropped by all current and previous IPsec Phase-2 tunnels due to insufficient memory.	Not supported

hh3cIPsecGlobalNoFindSaDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.16)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecGlobalNoFindSaDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.16)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of packets dropped by all current and previous IPsec Phase-2 tunnels due to SA not found.	As per the MIB.

hh3cIPsecGlobalQueueFullDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.17)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecGlobalQueueFullDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.17)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of packets dropped by all current and previous IPsec Phase-2 tunnels due to full queue.	Not supported

hh3cIPsecGlobalInvalidLenDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.18)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecGlobalInvalidLenDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.18)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of packets dropped by all current and previous IPsec Phase-2 tunnels due to invalid packet length.	As per the MIB.

hh3cIPsecGlobalTooLongDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.19)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecGlobalTooLongDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.19)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of packets dropped by all current and previous IPsec Phase-2 tunnels due to too long packet.	As per the MIB.

hh3cIPsecGlobalInvalidSaDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.20)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecGlobalInvalidSaDropsV2 (1.3.6.1.4.1.25506.2.126.1.6.20)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of packets dropped by all current and previous IPsec Phase-2 tunnels due to invalid SA.	Not supported

hh3cIPsecPolicyNameV2 (1.3.6.1.4.1.25506.2.126.1.7.1)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecPolicyNameV2 (1.3.6.1.4.1.25506.2.126.1.7.1)	accessible-for-notify	STRING	OCTET STRING (1..63)	Name of an IPsec policy in a trap notification.	As per the MIB.

hh3cIPsecPolicySeqNumV2 (1.3.6.1.4.1.25506.2.126.1.7.2)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecPolicySeqNumV2 (1.3.6.1.4.1.25506.2.126.1.7.2)	accessible-for-notify	Integer32	Gauge32 (0..4294967295)	Sequence number of an IPsec policy entry in a trap notification.	As per the MIB.

hh3cIPsecPolicySizeV2 (1.3.6.1.4.1.25506.2.126.1.7.3)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecPolicySizeV2 (1.3.6.1.4.1.25506.2.126.1.7.3)	accessible-for-notify	Integer32	Gauge32 (0..4294967295)	Number of IPsec policy entries in a trap notification.	As per the MIB.

hh3cIPsecTrapGlobalCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.1)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecTrapGlobalCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.1)	read-write	TruthValue	Integer32 (1,2)	Whether to enable trap notifications for IPsec events globally.	As per the MIB.

hh3cIPsecTunnelStartTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.2)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecTunnelStartTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.2)	read-write	TruthValue	Integer32 (1,2)	Whether to enable hh3cIPsecTunnelStartV2 trap notifications.	As per the MIB.

hh3cIPsecTunnelStopTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.3)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecTunnelStopTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.3)	read-write	TruthValue	Integer32 (1,2)	Whether to enable hh3cIPsecTunnelStopV2 trap notifications.	As per the MIB.

hh3cIPsecNoSaTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.4)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecNoSaTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.4)	read-write	TruthValue	Integer32 (1,2)	Whether to enable hh3cIPsecNoSaFailureV2 trap notifications.	As per the MIB.

hh3cIPsecAuthFailureTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.5)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecAuthFailureTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.5)	read-write	TruthValue	Integer32 (1,2)	Whether to enable hh3cIPsecAuthFailureV2 trap notifications.	As per the MIB.

hh3cIPsecEncryFailureTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.6)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecEncryFailureTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.6)	read-write	TruthValue	Integer32 (1,2)	Whether to enable hh3cIPsecEncryFailureV2 trap notifications.	As per the MIB.

hh3cIPsecDecryFailureTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.7)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecDecryFailureTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.7)	read-write	TruthValue	Integer32 (1,2)	Whether to enable hh3cIPsecDecryFailureV2 trap notifications.	As per the MIB.

hh3cIPsecInvalidSaTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.8)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecInvalidSaTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.8)	read-write	TruthValue	Integer32 (1,2)	Whether to enable hh3cIPsecInvalidSaFailureV2 trap notifications.	As per the MIB.

hh3cIPsecPolicyAddTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.9)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecPolicyAddTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.9)	read-write	TruthValue	Integer32 (1,2)	Whether to enable hh3cIPsecPolicyAddV2 trap notifications.	As per the MIB.

hh3cIPsecPolicyDelTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.10)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecPolicyDelTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.10)	read-write	TruthValue	Integer32 (1,2)	Whether to enable hh3cIPsecPolicyDelV2 trap notifications.	As per the MIB.

hh3cIPsecPolicyAttachTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.11)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecPolicyAttachTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.11)	read-write	TruthValue	Integer32 (1,2)	Whether to enable hh3cIPsecPolicyAttachV2 trap notifications.	As per the MIB.

hh3cIPsecPolicyDetachTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.12)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecPolicyDetachTrapCntlV2 (1.3.6.1.4.1.25506.2.126.1.8.12)	read-write	TruthValue	Integer32 (1,2)	Whether to enable hh3cIPsecPolicyDetachV2 trap notifications.	As per the MIB.

Tabular objects

hh3cIPsecTunnelV2Table

About this table

This table contains IPsec tunnel information.

Support for operations

Create：Not supported

Edit/Modify：Not supported

Delete：Not supported

Read：Supported

Columns

The table index is hh3cIPsecTunIndexV2.

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecTunIndexV2 (1.3.6.1.4.1.25506.2.126.1.2.1.1)	accessible-for-notify	Integer32	Integer32 (1..2147483647)	Index of an IPsec tunnel.	As per the MIB.
hh3cIPsecTunIfIndexV2 (1.3.6.1.4.1.25506.2.126.1.2.1.2)	read-only	InterfaceIndex	Integer32 (1..2147483647)	Index of the interface.	As per the MIB.
hh3cIPsecTunIKETunnelIndexV2 (1.3.6.1.4.1.25506.2.126.1.2.1.3)	read-only	Integer32	Integer32 (1..2147483647)	Index of the IKE tunnel associated with the IPsec tunnel.	The index value of the IKEv2 tunnel associated with the IPsec tunnel is an invalid value of 2147483647.
hh3cIPsecTunIKETunLocalIDTypeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.4)	read-only	Hh3cIPsecIDTypeV2	Integer32 (0..11)	Type of the local ID of the IKE tunnel.	The value of the local ID type of the IKEv2 tunnel is an invalid value of 0.
hh3cIPsecTunIKETunLocalIDVal1V2 (1.3.6.1.4.1.25506.2.126.1.2.1.5)	read-only	DisplayString	OCTET STRING (0..255)	Value of the local ID of the IKE tunnel.	For a local ID that exceeds 255 bytes, this object displays only the first 255 bytes of information. The complete ID information is displayed by hh3cIPsecTunIKETunLocalIDVal3V2. The local ID of the IKEv2 tunnel is empty.
hh3cIPsecTunIKETunLocalIDVal2V2 (1.3.6.1.4.1.25506.2.126.1.2.1.6)	read-only	DisplayString	OCTET STRING (0..255)	The second specification of the IP address of the IKE tunnel local end.	The local IP address of the IKEv2 tunnel is empty.
hh3cIPsecTunIKETunRemoteIDTypeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.7)	read-only	Hh3cIPsecIDTypeV2	Integer32 (0..11)	Type of the remote ID of the IKE tunnel.	The value of the remote ID type of the IKEv2 tunnel is an invalid value of 0.
hh3cIPsecTunIKETunRemoteIDVal1V2 (1.3.6.1.4.1.25506.2.126.1.2.1.8)	read-only	DisplayString	OCTET STRING (0..255)	Value of the remote ID of the IKE tunnel.	For a remote ID that exceeds 255 bytes, this object displays only the first 255 bytes of information. The complete ID information is displayed by hh3cIPsecTunIKETunRemoteIDVal3V2. The remote ID of the IKEv2 tunnel is empty.
hh3cIPsecTunIKETunRemoteIDVal2V2 (1.3.6.1.4.1.25506.2.126.1.2.1.9)	read-only	DisplayString	OCTET STRING (0..255)	The second specification of the IP address of the IKE tunnel remote end.	The remote IP address of the IKEv2 tunnel is empty.
hh3cIPsecTunLocalAddrTypeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.10)	read-only	InetAddressType	Integer32(1,2)	Type of the IP address of the IPsec tunnel local end.	As per the MIB.
hh3cIPsecTunLocalAddrV2 (1.3.6.1.4.1.25506.2.126.1.2.1.11)	read-only	InetAddress	OCTET STRING (4)	IP address of the IPsec tunnel local end.	As per the MIB.
hh3cIPsecTunRemoteAddrTypeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.12)	read-only	InetAddressType	Integer32(1,2)	Type of the IP address of the IPsec tunnel remote end.	As per the MIB.
hh3cIPsecTunRemoteAddrV2 (1.3.6.1.4.1.25506.2.126.1.2.1.13)	read-only	InetAddress	OCTET STRING (4)	IP address of the IPsec tunnel remote end.	As per the MIB.
hh3cIPsecTunKeyTypeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.14)	read-only	Hh3cIPsecNegoTypeV2	Integer32(1,2,2147483647)	Key negotiation mode of the IPsec tunnel.	As per the MIB.
hh3cIPsecTunEncapModeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.15)	read-only	Hh3cIPsecEncapModeV2	Integer32(1,2,2147483647)	Encapsulation mode of the IPsec tunnel.	As per the MIB.
hh3cIPsecTunInitiatorV2 (1.3.6.1.4.1.25506.2.126.1.2.1.16)	read-only	INTEGER	Integer32(1,2,2147483647)	Initiator of the IPsec tunnel.	As per the MIB.
hh3cIPsecTunLifeSizeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.17)	read-only	Gauge32	Gauge32 (0..4294967295)	Negotiated traffic-based IPsec SA lifetime, in kilobytes.	As per the MIB.
hh3cIPsecTunLifeTimeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.18)	read-only	Integer32	Integer32(1..2147483647)	Negotiated time-based IPsec SA lifetime, in seconds.	As per the MIB.
hh3cIPsecTunRemainTimeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.19)	read-only	Integer32	Integer32(1..2147483647)	Remaining lifetime of the IPsec tunnel, in seconds.	As per the MIB.
hh3cIPsecTunActiveTimeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.20)	read-only	Integer32	Integer32(1..2147483647)	Active period of time of the IPsec tunnel.	As per the MIB.
hh3cIPsecTunRemainSizeV2 (1.3.6.1.4.1.25506.2.126.1.2.1.21)	read-only	Gauge32	Gauge32 (0..4294967295)	Remaining lifetime of the IPsec tunnel, in kilobytes.	outbound sa remain traffic duration
hh3cIPsecTunTotalRefreshesV2 (1.3.6.1.4.1.25506.2.126.1.2.1.22)	read-only	Counter32	Counter32 (0..4294967295)	Total number of SA refreshes.	As per the MIB.
hh3cIPsecTunCurrentSaInstancesV2 (1.3.6.1.4.1.25506.2.126.1.2.1.23)	read-only	Gauge32	Gauge32 (0..4294967295)	Number of active and expiring SAs.	As per the MIB.
hh3cIPsecTunInSaEncryptAlgoV2 (1.3.6.1.4.1.25506.2.126.1.2.1.24)	read-only	Hh3cIPsecEncryptAlgoV2	Integer32 (0..26,128..131,2147483647)	Encryption algorithm used by the inbound SA of the IPsec tunnel.	As per the MIB.
hh3cIPsecTunInSaAhAuthAlgoV2 (1.3.6.1.4.1.25506.2.126.1.2.1.25)	read-only	Hh3cIPsecAuthAlgoV2	Integer32 (0..6,128,2147483647)	Authentication algorithm used by the inbound AH SA of the IPsec tunnel.	As per the MIB.
hh3cIPsecTunInSaEspAuthAlgoV2 (1.3.6.1.4.1.25506.2.126.1.2.1.26)	read-only	Hh3cIPsecAuthAlgoV2	nteger32 (0..6,128,2147483647)	Authentication algorithm used by the inbound ESP SA of the IPsec tunnel.	As per the MIB.
hh3cIPsecTunDiffHellmanGrpV2 (1.3.6.1.4.1.25506.2.126.1.2.1.27)	read-only	Hh3cIPsecDiffHellmanGrpV2	Integer32 (0,1,2,5,12,14,2147483647)	DH group used in the IKE Phase-2 negotiation.	As per the MIB.
hh3cIPsecTunOutSaEncryptAlgoV2 (1.3.6.1.4.1.25506.2.126.1.2.1.28)	read-only	Hh3cIPsecEncryptAlgoV2	Integer32 (0..26,128..131,2147483647)	Encryption algorithm used by the outbound SA of the IPsec tunnel.	As per the MIB.
hh3cIPsecTunOutSaAhAuthAlgoV2 (1.3.6.1.4.1.25506.2.126.1.2.1.29)	read-only	Hh3cIPsecAuthAlgoV2	Integer32 (0..6,128,2147483647)	Authentication algorithm used by the outbound AH SA of the IPsec tunnel.	As per the MIB.
hh3cIPsecTunOutSaEspAuthAlgoV2 (1.3.6.1.4.1.25506.2.126.1.2.1.30)	read-only	Hh3cIPsecAuthAlgoV2	Integer32 (0..6,128,2147483647)	Authentication algorithm used by the outbound ESP SA of the IPsec tunnel.	As per the MIB.
hh3cIPsecTunPolicyNameV2 (1.3.6.1.4.1.25506.2.126.1.2.1.31)	read-only	DisplayString	OCTET STRING (1..63)	Name of the IPsec policy used by the IPsec tunnel.	As per the MIB.
hh3cIPsecTunPolicyNumV2 (1.3.6.1.4.1.25506.2.126.1.2.1.32)	read-only	Integer32	Integer32 (1..2147483647)	Sequence number of the IPsec policy entry used by the IPsec tunnel.	As per the MIB.
hh3cIPsecTunStatusV2 (1.3.6.1.4.1.25506.2.126.1.2.1.33)	read-only	INTEGER	Integer32 (1,2)	State of the IPsec tunnel.	As per the MIB.
hh3cIPsecTunProfileNameV2 (1.3.6.1.4.1.25506.2.126.1.2.1.37)	read-only	DisplayString	OCTET STRING (0..255)	Name of the IPsec profile used by the IPsec tunnel.	As per the MIB.

hh3cIPsecTunnelStatV2Table

About this table

This table contains IPsec tunnel packet statistics.

Support for operations

Create：Not supported

Edit/Modify：Not supported

Delete：Not supported

Read：Supported

Columns

The table index hh3cIPsecTunIndexV2.

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecTunInOctetsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.1)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of octets received by the IPsec tunnel. This value is accumulated before determining whether or not the packet should be decompressed.	As per the MIB.
hh3cIPsecTunInDecompOctetsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.2)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of decompressed octets received by the IPsec tunnel. This value is accumulated after the packet is decompressed.	Not supported
hh3cIPsecTunInPktsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.3)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of packets received by the IPsec tunnel.	As per the MIB.
hh3cIPsecTunInDropPktsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.4)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of inbound packets dropped by the IPsec tunnel.	As per the MIB.
hh3cIPsecTunInReplayDropPktsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.5)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of inbound packets dropped by the IPsec tunnel due to anti-replay.	As per the MIB.
hh3cIPsecTunInAuthFailsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.6)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of inbound packets that failed authentication on the IPsec tunnel.	As per the MIB.
hh3cIPsecTunInDecryptFailsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.7)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of inbound packets that failed decryption on the IPsec tunnel.	As per the MIB.
hh3cIPsecTunOutOctetsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.8)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of octets sent by the IPsec tunnel. This value is accumulated after determining whether or not the packet should be compressed.	As per the MIB.
hh3cIPsecTunOutUncompOctetsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.9)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of uncompressed octets sent by this IPsec tunnel. This value is accumulated before the packet is compressed.	Not supported
hh3cIPsecTunOutPktsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.10)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of packets sent by the IPsec tunnel.	As per the MIB.
hh3cIPsecTunOutDropPktsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.11)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of outbound packets dropped by the IPsec tunnel.	As per the MIB.
hh3cIPsecTunOutEncryptFailsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.12)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of outbound packets that failed encryption on the IPsec tunnel.	As per the MIB.
hh3cIPsecTunNoMemoryDropPktsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.13)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of packets dropped by the IPsec tunnel due to insufficient memory.	Not supported
hh3cIPsecTunQueueFullDropPktsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.14)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of packets dropped by the IPsec tunnel due to full queue.	Not supported
hh3cIPsecTunInvalidLenDropPktsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.15)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of packets dropped by the IPsec tunnel due to invalid length.	As per the MIB.
hh3cIPsecTunTooLongDropPktsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.16)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of packets dropped by the IPsec tunnel due to too long packet.	As per the MIB.
hh3cIPsecTunInvalidSaDropPktsV2 (1.3.6.1.4.1.25506.2.126.1.3.1.17)	read-only	Counter64	Counter64 (0..18446744073709551615)	Total number of packets dropped by the IPsec tunnel due to invalid SA.	Not supported.

hh3cIPsecSaV2Table

About this table

This table contains IPsec SA information.

Support for operations

Create：Not supported

Edit/Modify：Not supported

Delete：Not supported

Read：Supported

Columns

The table indexes are hh3cIPsecTunIndexV2 and hh3cIPsecSaIndexV2.

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cIPsecSaIndexV2 (1.3.6.1.4.1.25506.2.126.1.4.1.1)	accessible-for-notify	Integer32	Integer32 (1..2147483647)	Index of an SA in an IPsec tunnel.	As per the MIB.
hh3cIPsecSaDirectionV2 (1.3.6.1.4.1.25506.2.126.1.4.1.2)	read-only	INTEGER	Integer32 (1,2)	Direction of the SA.	As per the MIB.
hh3cIPsecSaSpiValueV2 (1.3.6.1.4.1.25506.2.126.1.4.1.3)	read-only	Unsigned32	Unsigned32 (1..4294967295)	SPI value of the SA.	As per the MIB.
hh3cIPsecSaSecProtocolV2 (1.3.6.1.4.1.25506.2.126.1.4.1.4)	read-only	Hh3cIPsecSaProtocolV2	Integer32 (0,2,3,4)	Security protocol used by the SA.	As per the MIB.
hh3cIPsecSaEncryptAlgoV2 (1.3.6.1.4.1.25506.2.126.1.4.1.5)	read-only	Hh3cIPsecEncryptAlgoV2	Integer32 (0..26,128..131,2147483647)	Encryption algorithm used by the SA.	As per the MIB.
hh3cIPsecSaAuthAlgoV2 (1.3.6.1.4.1.25506.2.126.1.4.1.6)	read-only	Hh3cIPsecAuthAlgoV2	Integer32 (0..6,128,2147483647)	Authentication algorithm used by the SA.	As per the MIB.
hh3cIPsecSaStatusV2 (1.3.6.1.4.1.25506.2.126.1.4.1.7)	read-only	INTEGER	Integer32 (1,2)	Status of the SA.	As per the MIB.

Notifications

hh3cIPsecTunnelStopV2

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.126.1.9.0.2	IPsec tunnel deleted.	Informational	Warning	N/A (N/A)	OFF

Notification triggers

This notification is generated when an IPsec tunnel is deleted.

This notification might be generated when the following events occur:

Hard timeout of the phase-2 IKE negotiation occurs.

The IPsec SA is accidentally deleted when you modify other configurations or manually deleted.

A new IPsec SA takes over the old IPsec SA.

IPsec SA idle timer expires.

The remote end asks to delete the IPsec SA.

Other events.

System impact

The IPsec tunnel is deleted.

Status control

CLI: Use the snmp-agent trap enable ipsec tunnel-stop command.

MIB: Set hh3cIPsecTunnelStopTrapCntlV2 to true(1).

OFF

CLI: Use the undo snmp-agent trap enable ipsec tunnel-stop command.

MIB: Set hh3cIPsecTunnelStopTrapCntlV2 to false(2).

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.126.1.2.1.1 (hh3cIPsecTunIndexV2)	Index of an IPsec tunnel.	hh3cIPsecTunIndexV2	Integer32	1..2147483647
1.3.6.1.4.1.25506.2.126.1.2.1.10 (hh3cIPsecTunLocalAddrTypeV2)	Type of the IP address of the IPsec tunnel local end.	hh3cIPsecTunIndexV2	InetAddressType	Standard MIB values.
1.3.6.1.4.1.25506.2.126.1.2.1.11 (hh3cIPsecTunLocalAddrV2)	IP address of the IPsec tunnel local end.	hh3cIPsecTunIndexV2	InetAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.126.1.2.1.12 (hh3cIPsecTunRemoteAddrTypeV2)	Type of the IP address of the IPsec tunnel remote end.	hh3cIPsecTunIndexV2	InetAddressType	Standard MIB values.
1.3.6.1.4.1.25506.2.126.1.2.1.13 (hh3cIPsecTunRemoteAddrV2)	IP address of the IPsec tunnel remote end.	hh3cIPsecTunIndexV2	InetAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.126.1.2.1.20 (hh3cIPsecTunActiveTimeV2)	Active period of time of the IPsec tunnel.	hh3cIPsecTunIndexV2	Integer32	0..2147483647

Recommended action

To resolve this issue, take the following operations according to the corresponding notification generation reasons:

● Check whether the IPsec SA lifetime is appropriate. If no, modify the IPsec SA lifetime.

● Check whether the reset ipsec sa command has been executed to delete the IPsec SA. If yes, no action is required. Then check whether an IPsec policy application has been removed from the interface and whether the removement is appropriate. If no, apply an IPsec policy to the interface again.

● If a new IPsec SA takes over the old IPsec SA, no action is required.

● Check whether the IPsec SA idle timeout is appropriate. If no, modify the IPsec SA idle timeout.

● View the logs on the remote end and identify the IPsec tunnel deletion reasons.

● Collect alarm information and configuration data, and then contact H3C Support for help.

hh3cIPsecNoSaFailureV2

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.126.1.9.0.3	No SA for IPsec tunnel.	Informational	Warning	N/A (N/A)	OFF

Notification triggers

This notification is generated when no SA is available for an IPsec tunnel.

System impact

If the IPsec tunnel exists, IPsec-related services are unavailable.

If this notification is generated when negotiation is triggered, there is no impact on services.

Status control

CLI: Use the snmp-agent trap enable ipsec no-sa-failure command.

MIB: Set hh3cIPsecNoSaTrapCntlV2 to true(1).

OFF

CLI: Use the undo snmp-agent trap enable ipsec no-sa-failure command.

MIB: Set hh3cIPsecNoSaTrapCntlV2 to false(2).

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.126.1.2.1.1 (hh3cIPsecTunIndexV2)	Index of an IPsec tunnel.	hh3cIPsecTunIndexV2	Integer32	1..2147483647
1.3.6.1.4.1.25506.2.126.1.2.1.10 (hh3cIPsecTunLocalAddrTypeV2)	Type of the IP address of the IPsec tunnel local end.	hh3cIPsecTunIndexV2	InetAddressType	Standard MIB values.
1.3.6.1.4.1.25506.2.126.1.2.1.11 (hh3cIPsecTunLocalAddrV2)	IP address of the IPsec tunnel local end.	hh3cIPsecTunIndexV2	InetAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.126.1.2.1.12 (hh3cIPsecTunRemoteAddrTypeV2)	Type of the IP address of the IPsec tunnel remote end.	hh3cIPsecTunIndexV2	InetAddressType	Standard MIB values.
1.3.6.1.4.1.25506.2.126.1.2.1.13 (hh3cIPsecTunRemoteAddrV2)	IP address of the IPsec tunnel remote end.	hh3cIPsecTunIndexV2	InetAddress	Standard MIB values.

Recommended action

To resolve this issue:

1.Check whether this notification is generated when negotiation is triggered:

- If yes, no action is required.

- If no, use the reset ipsec sa command to delete IPsec SAs and use the reset ike sa command to delete IKE SAs so as to trigger IKE SA negotiation. If the negotiation is successful and this notification still exists, go to step 2.

If the issue persists, collect alarm information and configuration data, and then contact H3C Support for help.

hh3cIPsecAuthFailFailureV2

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.126.1.9.0.4	IPsec authentication failure.	Informational	Warning	N/A (N/A)	OFF

Notification triggers

This notification is generated when an IPsec authentication failure occurs.

System impact

IPsec-related services are unavailable.

Status control

CLI: Use the snmp-agent trap enable ipsec auth-failure command.

MIB: Set hh3cIPsecAuthFailureTrapCntlV2 to true(1).

OFF

CLI: Use the undo snmp-agent trap enable ipsec auth-failure command.

MIB: Set hh3cIPsecAuthFailureTrapCntlV2 to false(2).

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.126.1.2.1.1 (hh3cIPsecTunIndexV2)	Index of an IPsec tunnel.	hh3cIPsecTunIndexV2	Integer32	1..2147483647
1.3.6.1.4.1.25506.2.126.1.2.1.10 (hh3cIPsecTunLocalAddrTypeV2)	Type of the IP address of the IPsec tunnel local end.	hh3cIPsecTunIndexV2	InetAddressType	Standard MIB values.
1.3.6.1.4.1.25506.2.126.1.2.1.11 (hh3cIPsecTunLocalAddrV2)	IP address of the IPsec tunnel local end.	hh3cIPsecTunIndexV2	InetAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.126.1.2.1.12 (hh3cIPsecTunRemoteAddrTypeV2)	Type of the IP address of the IPsec tunnel remote end.	hh3cIPsecTunIndexV2	InetAddressType	Standard MIB values.
1.3.6.1.4.1.25506.2.126.1.2.1.13 (hh3cIPsecTunRemoteAddrV2)	IP address of the IPsec tunnel remote end.	hh3cIPsecTunIndexV2	InetAddress	Standard MIB values.

Recommended action

To resolve this issue:

1.Use the reset ipsec sa command to delete IPsec SAs and use the reset ike sa command to delete IKE SAs so as to trigger IKE SA negotiation.

If the issue persists, collect alarm information and configuration data, and then contact H3C Support for help.

hh3cIPsecEncryFailFailureV2

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.126.1.9.0.5	IPsec tunnel encryption failure.	Informational	Warning	N/A (N/A)	OFF

Notification triggers

This notification is generated when an IPsec tunnel has an encryption failure.

System impact

IPsec-related services are unavailable.

Status control

CLI: Use the snmp-agent trap enable ipsec encrypt-failure command.

MIB: Set hh3cIPsecEncryFailureTrapCntlV2 to true(1).

OFF

CLI: Use the undo snmp-agent trap enable ipsec encrypt-failure command.

MIB: Set hh3cIPsecEncryFailureTrapCntlV2 to false(2).

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.126.1.2.1.1 (hh3cIPsecTunIndexV2)	Index of an IPsec tunnel.	hh3cIPsecTunIndexV2	Integer32	1..2147483647
1.3.6.1.4.1.25506.2.126.1.2.1.10 (hh3cIPsecTunLocalAddrTypeV2)	Type of the IP address of the IPsec tunnel local end.	hh3cIPsecTunIndexV2	InetAddressType	Standard MIB values.
1.3.6.1.4.1.25506.2.126.1.2.1.11 (hh3cIPsecTunLocalAddrV2)	IP address of the IPsec tunnel local end.	hh3cIPsecTunIndexV2	InetAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.126.1.2.1.12 (hh3cIPsecTunRemoteAddrTypeV2)	Type of the IP address of the IPsec tunnel remote end.	hh3cIPsecTunIndexV2	InetAddressType	Standard MIB values.
1.3.6.1.4.1.25506.2.126.1.2.1.13 (hh3cIPsecTunRemoteAddrV2)	IP address of the IPsec tunnel remote end.	hh3cIPsecTunIndexV2	InetAddress	Standard MIB values.

Recommended action

To resolve this issue:

1.Use the reset ipsec sa command to delete IPsec SAs and use the reset ike sa command to delete IKE SAs so as to trigger IKE SA negotiation.

2.If the issue persists, collect alarm information and configuration data, and then contact H3C Support for help.

hh3cIPsecDecryFailFailureV2

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.126.1.9.0.6	IPsec tunnel encryption failure.	Informational	Warning	N/A (N/A)	OFF

Notification triggers

This notification is generated when an IPsec tunnel has a decryption failure.

System impact

IPsec-related services are unavailable.

Status control

CLI: Use the snmp-agent trap enable ipsec decrypt-failure command.

MIB: Set hh3cIPsecDecryFailureTrapCntlV2 to true(1).

OFF

CLI: Use the undo snmp-agent trap enable ipsec decrypt-failure command.

MIB: Set hh3cIPsecDecryFailureTrapCntlV2 to false(2).

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.126.1.2.1.1 (hh3cIPsecTunIndexV2)	Index of an IPsec tunnel.	hh3cIPsecTunIndexV2	Integer32	1..2147483647
1.3.6.1.4.1.25506.2.126.1.2.1.10 (hh3cIPsecTunLocalAddrTypeV2)	Type of the IP address of the IPsec tunnel local end.	hh3cIPsecTunIndexV2	InetAddressType	Standard MIB values.
1.3.6.1.4.1.25506.2.126.1.2.1.11 (hh3cIPsecTunLocalAddrV2)	IP address of the IPsec tunnel local end.	hh3cIPsecTunIndexV2	InetAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.126.1.2.1.12 (hh3cIPsecTunRemoteAddrTypeV2)	Type of the IP address of the IPsec tunnel remote end.	hh3cIPsecTunIndexV2	InetAddressType	Standard MIB values.
1.3.6.1.4.1.25506.2.126.1.2.1.13 (hh3cIPsecTunRemoteAddrV2)	IP address of the IPsec tunnel remote end.	hh3cIPsecTunIndexV2	InetAddress	Standard MIB values.

Recommended action

To resolve this issue:

1.Use the reset ipsec sa command to delete IPsec SAs and use the reset ike sa command to delete IKE SAs so as to trigger IKE SA negotiation.

2.If the issue persists, collect alarm information and configuration data, and then contact H3C Support for help.

hh3cIPsecInvalidSaFailureV2

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.126.1.9.0.7	Invalid IPsec SA.	Informational	Warning	N/A (N/A)	OFF

Notification triggers

This notification is generated when an IPsec SA is invalid.

System impact

IPsec-related services are unavailable.

Status control

CLI: Use the snmp-agent trap enable ipsec invalid-sa-failure command.

MIB: Set hh3cIPsecInvalidSaTrapCntlV2 to true(1).

OFF

CLI: Use the undo snmp-agent trap enable ipsec invalid-sa-failure command.

MIB: Set hh3cIPsecInvalidSaTrapCntlV2 to false(2).

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.126.1.2.1.1 (hh3cIPsecTunIndexV2)	Index of an IPsec tunnel.	hh3cIPsecTunIndexV2	Integer32	1..2147483647
1.3.6.1.4.1.25506.2.126.1.4.1.1 (hh3cIPsecSaIndexV2)	Index of an SA in an IPsec tunnel.	hh3cIPsecTunIndexV2 and hh3cIPsecSaIndexV2	Integer32	1..2147483647
1.3.6.1.4.1.25506.2.126.1.2.1.10 (hh3cIPsecTunLocalAddrTypeV2)	Type of the IP address of the IPsec tunnel local end.	hh3cIPsecTunIndexV2	InetAddressType	Standard MIB values.
1.3.6.1.4.1.25506.2.126.1.2.1.11 (hh3cIPsecTunLocalAddrV2)	IP address of the IPsec tunnel local end.	hh3cIPsecTunIndexV2	InetAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.126.1.2.1.12 (hh3cIPsecTunRemoteAddrTypeV2)	Type of the IP address of the IPsec tunnel remote end.	hh3cIPsecTunIndexV2	InetAddressType	Standard MIB values.
1.3.6.1.4.1.25506.2.126.1.2.1.13 (hh3cIPsecTunRemoteAddrV2)	IP address of the IPsec tunnel remote end.	hh3cIPsecTunIndexV2	InetAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.126.1.4.1.3 (hh3cIPsecSaSpiValueV2)	SPI of the SA.	hh3cIPsecTunIndexV2 and hh3cIPsecSaIndexV2	Unsigned32	1..4294967295

Recommended action

To resolve this issue:

1.Use the reset ipsec sa command to delete IPsec SAs and use the reset ike sa command to delete IKE SAs so as to trigger IKE SA negotiation.

2.If the issue persists, collect alarm information and configuration data, and then contact H3C Support for help.

hh3cIPsecPolicyAddV2

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.126.1.9.0.8	IPsec policy or profile added.	Informational	Warning	N/A (N/A)	OFF

Notification triggers

This notification is generated when an IPsec policy or profile is added.

System impact

No negative impact on services.

Status control

CLI: Use the snmp-agent trap enable ipsec policy-add command.

MIB: Set hh3cIPsecPolicyAddTrapCntlV2 to true(1).

OFF

CLI: Use the undo snmp-agent trap enable ipsec policy-add command.

MIB: Set hh3cIPsecPolicyAddTrapCntlV2 to false(2).

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.126.1.7.1 (hh3cIPsecPolicyNameV2)	Name of an IPsec policy.	N/A	DisplayString	OCTET STRING (SIZE (0..255))
1.3.6.1.4.1.25506.2.126.1.7.2 (hh3cIPsecPolicySeqNumV2)	Sequence number an IPsec policy entry.	N/A	Integer32	1..2147483647
1.3.6.1.4.1.25506.2.126.1.7.3 (hh3cIPsecPolicySizeV2)	Number of the IPsec policy entries.	N/A	InetAddressType	Standard MIB values.

Recommended action

No action is required.

hh3cIPsecPolicyDelV2

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.126.1.9.0.9	IPsec policy or profile deleted.	Informational	Warning	N/A (N/A)	OFF

Notification triggers

This notification is generated when an IPsec policy or profile is deleted.

System impact

No negative impact on services.

Status control

CLI: Use the snmp-agent trap enable ipsec policy-delete command.

MIB: Set hh3cIPsecPolicyDelTrapCntlV2 to true(1).

OFF

CLI: Use the undo snmp-agent trap enable ipsec policy-delete command.

MIB: Set hh3cIPsecPolicyDelTrapCntlV2 to false(2).

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.126.1.7.1 (hh3cIPsecPolicyNameV2)	Name of an IPsec policy.	N/A	DisplayString	OCTET STRING (SIZE (0..255))
1.3.6.1.4.1.25506.2.126.1.7.2 (hh3cIPsecPolicySeqNumV2)	Sequence number of an IPsec policy entry.	N/A	Integer32	1..2147483647
1.3.6.1.4.1.25506.2.126.1.7.3 (hh3cIPsecPolicySizeV2)	Number of the IPsec policy entries.	N/A	InetAddressType	Standard MIB values.

Recommended action

No action is required.

hh3cIPsecPolicyAttachV2

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.126.1.9.0.10	IPsec policy or profile applied to interface.	Informational	Warning	N/A (N/A)	OFF

Notification triggers

This notification is generated when an IPsec policy or profile is applied to an interface.

System impact

No negative impact on services.

Status control

CLI: Use the snmp-agent trap enable ipsec policy-attach command.

MIB: Set hh3cIPsecPolicyAttachTrapCntlV2 to true(1).

OFF

CLI: Use the undo snmp-agent trap enable ipsec policy-attach command.

MIB: Set hh3cIPsecPolicyAttachTrapCntlV2 to false(2).

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.126.1.7.1 (hh3cIPsecPolicyNameV2)	Name of an IPsec policy.	N/A	DisplayString	OCTET STRING (SIZE (0..255))
1.3.6.1.4.1.25506.2.126.1.7.3 (hh3cIPsecPolicySizeV2)	Number of the IPsec policy entries.	N/A	Integer32	1..2147483647
1.3.6.1.2.1.2.2.1.1 (ifIndex)	Index of an interface.	ifIndex	InterfaceIndex	Integer32(1..2147483647)

Recommended action

No action is required.

hh3cIPsecPolicyDetachV2

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.126.1.9.0.11	IPsec policy or profile application removed from interface.	Informational	Warning	N/A (N/A)	OFF

Notification triggers

This notification is generated when an IPsec policy or profile application is removed from an interface.

System impact

If an IPsec tunnel exists, the running IPsec tunnel will be disconnected.

If no IPsec tunnel exists, there is no impact on services.

Status control

CLI: Use the snmp-agent trap enable ipsec policy-detach command.

MIB: Set hh3cIPsecPolicyDetachTrapCntlV2 to true(1).

OFF

CLI: Use the undo snmp-agent trap enable ipsec policy-detach command.

MIB: Set hh3cIPsecPolicyDetachTrapCntlV2 to false(2).

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.126.1.7.1 (hh3cIPsecPolicyNameV2)	Name of an IPsec policy.	N/A	DisplayString	OCTET STRING (SIZE (0..255))
1.3.6.1.4.1.25506.2.126.1.7.3 (hh3cIPsecPolicySizeV2)	Number of the IPsec policy entries.	N/A	Integer32	1..2147483647
1.3.6.1.2.1.2.2.1.1 (ifIndex)	Index of an interface.	ifIndex	InterfaceIndex	Integer32(1..2147483647)

Recommended action

No action is required.

18-Security

About this table

Support for operations

Columns

About this table

Support for operations

Columns

About this table

Support for operations

Columns

Basic information

Notification triggers

System impact

Status control

Object

Recommended action

Basic information

Notification triggers

System impact

Status control

Object

Recommended action

Basic information

Notification triggers

System impact

Status control

Object

Recommended action

Basic information

Notification triggers

System impact

Status control

Object

Recommended action

Basic information

Notification triggers

System impact

Status control

Object

Recommended action

Basic information

Notification triggers

System impact

Status control

Object

Recommended action

Basic information

Notification triggers

System impact

Status control

Object

Recommended action

Basic information

Notification triggers

System impact

Status control

Object

Recommended action

Basic information

Notification triggers

System impact

Status control

Object

Recommended action

Basic information

Notification triggers

System impact

Status control

Object

Recommended action

Basic information

Notification triggers

System impact

Status control

Object

Recommended action

Intelligent Terminal Products

Product Support Services

Technical Service Solutions

Resource Center