FS-IPSEC-MIB
106 objects
The MIB is designed to get statistic information of IPSec tunnels. With this MIB, we can get information of a certain tunnel or all tunnels.
Imported Objects
| FS-SMI | fsMgmt |
| SNMPv2-CONF | MODULE-COMPLIANCE NOTIFICATION-GROUP OBJECT-GROUP |
| SNMPv2-SMI | Counter32 Counter64 Gauge32 Integer32 IpAddress MODULE-IDENTITY NOTIFICATION-TYPE OBJECT-TYPE Unsigned32 |
| SNMPv2-TC | DisplayString TEXTUAL-CONVENTION TimeStamp |
| OID | Name | Access | Status | Description |
|---|---|---|---|---|
| 1.3.6.1.4.1.52642.1.1.10.2.94 | IdentityfsIPSecMonitor | The MIB is designed to get statistic information of IPSec tunnels. With this MIB, we can get information of a certain tunnel or all tunnels. | ||
| 1.3.6.1.4.1.52642.1.1.10.2.94.1 | NodefsIPSecObjects | |||
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.1 | TablefsIPSecTunnelTable | not-accessible | current | The IPSec Phase-2 Tunnel Table. There is one entry in this table for each active IPSec Phase-2 Tunnel. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.1.1 | RowfsIPSecTunnelEntry | not-accessible | current | Information about fsIPSecTunnelTable. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.1.1.1 | ColumnfsIPSecTunIfIndex | not-accessible | current | The interface index( the ifIndex of ifTable ). |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.1.1.2 | ColumnfsIPSecTunIndex | not-accessible | current | The index of IPSec Phase-2 Tunnel Table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The value … |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.1.1.3 | ColumnfsIPSecTunIKETunnelIndex | read-only | current | The index of the associated IPSec Phase-1 IKE Tunnel (IKETunIndex in the IKETunnelTable). 2147483647 is defined as invalid value. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.1.1.4 | ColumnfsIPSecTunLocalAddr | read-only | current | The IP address of the local peer for the IPSec Phase-2 Tunnel. 0.0.0.0 is defined as invalid value. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.1.1.5 | ColumnfsIPSecTunRemoteAddr | read-only | current | The IP address of the remote peer for the IPSec Phase-2 Tunnel. 0.0.0.0 is defined as invalid value. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.1.1.6 | ColumnfsIPSecTunLocalHostname | read-only | current | The Hostname of the local peer for the IPSec Phase-2 Tunnel. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.1.1.7 | ColumnfsIPSecTunRemoteHostname | read-only | current | The Hostname of the remote peer for the IPSec Phase-2 Tunnel. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.1.1.8 | ColumnfsIPSecTunKeyType | read-only | current | The key negotiate mode used by the IPSec Phase-2 Tunnel. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.1.1.9 | ColumnfsIPSecTunEncapMode | read-only | current | The encapsulation mode used by the IPSec Phase-2 Tunnel. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.1.1.10 | ColumnfsIPSecTunInitiator | read-only | current | The initiator of this IPSec tunnel. Value none is used for manual IPsec tunnel, for there is no initiator or responder in this method. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.1.1.11 | ColumnfsIPSecTunLifeSize | read-only | current | The negotiated LifeSize of the IPSec Phase-2 Tunnel in kilobytes. 2147483647 is defined as invalid value. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.1.1.12 | ColumnfsIPSecTunLifeTime | read-only | current | The negotiated LifeTime of the IPSec Phase-2 Tunnel in seconds. 2147483647 is defined as invalid value. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.1.1.13 | ColumnfsIPSecTunRemainTime | read-only | current | The remain time of SA in seconds. 2147483647 is defined as invalid value. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.1.1.14 | ColumnfsIPSecTunActiveTime | read-only | current | The duration the IPSec Phase-2 Tunnel has been active in hundredths of seconds. 2147483647 is defined as invalid value. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.1.1.15 | ColumnfsIPSecTunCreateTime | read-only | current | The Time Stamp when the IPSec Phase-2 Tunnel created. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.1.1.16 | ColumnfsIPSecTunRemainSize | read-only | current | The remain LifeSize of SA in kilobytes. 2147483647 is defined as invalid value. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.1.1.17 | ColumnfsIPSecTunTotalRefreshes | read-only | current | The total number of security association refreshing performed. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.1.1.18 | ColumnfsIPSecTunCurrentSaInstances | read-only | current | The number of security associations which are currently active or expiring. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.1.1.19 | ColumnfsIPSecTunInSaEncryptAlgo | read-only | current | The encryption algorithm used by the inbound security association of the IPSec Phase-2 Tunnel. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.1.1.20 | ColumnfsIPSecTunInSaAhAuthAlgo | read-only | current | The authentication algorithm used by the inbound authentication header (AH) security association of the IPSec Phase-2 Tunnel. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.1.1.21 | ColumnfsIPSecTunInSaEspAuthAlgo | read-only | current | The authentication algorithm used by the inbound encapsulation security protocol(ESP) security association of the IPSec Phase-2 Tunnel. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.1.1.22 | ColumnfsIPSecTunDiffHellmanGrp | read-only | current | The Diffie Hellman Group used by the security association of the IPSec Phase-2 Tunnel. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.1.1.23 | ColumnfsIPSecTunOutSaEncryptAlgo | read-only | current | The encryption algorithm used by the outbound security association of the IPSec Phase-2 Tunnel. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.1.1.24 | ColumnfsIPSecTunOutSaAhAuthAlgo | read-only | current | The authentication algorithm used by the outbound authentication header (AH) security association of the IPSec Phase-2 Tunnel. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.1.1.25 | ColumnfsIPSecTunOutSaEspAuthAlgo | read-only | current | The authentication algorithm used by the outbound encapsulation security protocol(ESP) security association of the IPSec Phase-2 Tunnel. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.1.1.26 | ColumnfsIPSecTunMapName | read-only | current | The Map name used by this IPSec tunnel. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.1.1.27 | ColumnfsIPSecTunSeqNum | read-only | current | The sequence number of policy used by this IPSec tunnel. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.1.1.28 | ColumnfsIPSecTunStatus | read-write | current | The status of the IPSec Tunnel. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.2 | TablefsIPSecTunnelStatTable | not-accessible | current | The IPSec Phase-2 Tunnel Statistics Table. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.2.1 | RowfsIPSecTunnelStatEntry | not-accessible | current | Information about fsIPSecTunnelStatTable. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.2.1.1 | ColumnfsIPSecTunInOctets | read-only | current | The total number of octets received by this IPSec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.2.1.2 | ColumnfsIPSecTunInDecompOctets | read-only | current | The total number of decompressed octets received by this IPSec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.2.1.3 | ColumnfsIPSecTunInPkts | read-only | current | The total number of packets received by this IPSec Phase-2 Tunnel. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.2.1.4 | ColumnfsIPSecTunInSpeed | read-only | current | The Speed(bps) of packets received by this IPSec Phase-2 Tunnel. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.2.1.5 | ColumnfsIPSecTunInDropPkts | read-only | current | The total number of packets dropped during receiving process by this IPSec Phase-2 Tunnel. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.2.1.6 | ColumnfsIPSecTunOutOctets | read-only | current | The total number of octets sent by this IPSec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.2.1.7 | ColumnfsIPSecTunOutUncompOctets | read-only | current | The total number of uncompressed octets sent by this IPSec Phase-2 Tunnel.This value is accumulated BEFORE the packet is compressed. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.2.1.8 | ColumnfsIPSecTunOutPkts | read-only | current | The total number of packets sent by this IPSec Phase-2 Tunnel. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.2.1.9 | ColumnfsIPSecTunOutSpeed | read-only | current | The Speed(bps) of packets sent by this IPSec Phase-2 Tunnel. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.2.1.10 | ColumnfsIPSecTunOutDropPkts | read-only | current | The total number of packets dropped during sending process by this IPSec Phase-2 Tunnel. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.3 | TablefsIPSecSaTable | not-accessible | current | The IPSec Phase-2 Security Protection Index Table. This table contains an entry for each active and expiring security association. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.3.1 | RowfsIPSecSaEntry | not-accessible | current | Information about fsIPSecSaTable. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.3.1.1 | ColumnfsIPSecSaIndex | not-accessible | current | The number of the Sa associated with the Phase-2 Tunnel Table. The value of this index is a number which begins at one and is incremented with each Sa associat… |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.3.1.2 | ColumnfsIPSecSaDirection | read-only | current | The direction of the SA. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.3.1.3 | ColumnfsIPSecSaValue | read-only | current | The value of the SPI. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.3.1.4 | ColumnfsIPSecSaProtocol | read-only | current | The security protocol of the SA. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.3.1.5 | ColumnfsIPSecSaEncryptAlgo | read-only | current | The encryption algorithm used by the security association of the IPSec Phase-2 Tunnel. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.3.1.6 | ColumnfsIPSecSaAuthAlgo | read-only | current | The authentication algorithm used by the SA. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.3.1.7 | ColumnfsIPSecSaStatus | read-only | current | The status of the SA. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.4 | TablefsIPSecTrafficTable | not-accessible | current | The IPSec Phase-2 Tunnel Traffic Table. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.4.1 | RowfsIPSecTrafficEntry | not-accessible | current | Information about fsIPSecTrafficTable. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.4.1.1 | ColumnfsIPSecTrafficLocalType | read-only | current | The type of local peer. Possible values are: a single IP address, or an IP address range, or an IP subnet. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.4.1.2 | ColumnfsIPSecTrafficLocalAddr1 | read-only | current | The first specification of local peer's IP address. If the local peer type is single IP address, then this is the value of the IP address. If the local peer ty… |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.4.1.3 | ColumnfsIPSecTrafficLocalAddr2 | read-only | current | The second specification of local peer's IP address. If the local peer type is single IP address, then this is the value of the IP address. If the local peer t… |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.4.1.4 | ColumnfsIPSecTrafficLocalProtocol | read-only | current | The protocol number of the local peer's traffic. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.4.1.5 | ColumnfsIPSecTrafficLocalPort | read-only | current | The port number of the local peer's traffic. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.4.1.6 | ColumnfsIPSecTrafficLocalHostname | read-only | current | The Hostname of local peer's IP address. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.4.1.7 | ColumnfsIPSecTrafficRemoteType | read-only | current | The type of remote peer. Possible values are: a single IP address, or an IP address range, or an IP subnet. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.4.1.8 | ColumnfsIPSecTrafficRemoteAddr1 | read-only | current | The first specification of remote peer's IP address. If the remote peer type is single IP address, then this is the value of the IP address. If the remote peer… |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.4.1.9 | ColumnfsIPSecTrafficRemoteAddr2 | read-only | current | Single IP address, then this is the value of the IP address. If the remote peer type is IP subnet, then this is the value of the subnet mask. If the remote pee… |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.4.1.10 | ColumnfsIPSecTrafficRemoteProtocol | read-only | current | The protocol number of the remote peer's traffic. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.4.1.11 | ColumnfsIPSecTrafficRemotePort | read-only | current | The port number of the remote peer's traffic. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.4.1.12 | ColumnfsIPSecTrafficRemoteHostname | read-only | current | The Hostname of remote peer's IP address. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.5 | NodefsIPSecGlobalStats | |||
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.5.1 | ScalarfsIPSecGlobalActiveTunnels | read-only | current | The total number of currently active IPSec Phase-2 Tunnels. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.5.2 | ScalarfsIPSecGlobalActiveSas | read-only | current | The total number of currently active or expiring IPSec Phase-2 SA. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.5.3 | ScalarfsIPSecGlobalInOctets | read-only | current | The total number of octets received by all current and previous IPSec Phase-2 Tunnels. This value is accumulated BEFORE determining whether or not the packet s… |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.5.4 | ScalarfsIPSecGlobalInPkts | read-only | current | The total number of packets received by all current and previous IPSec Phase-2 Tunnels. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.5.5 | ScalarfsIPSecGlobalInSpeed | read-only | current | The total speed(bps) of packets received by all current and previous IPSec Phase-2 Tunnels. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.5.6 | ScalarfsIPSecGlobalInDrops | read-only | current | The total number of packets dropped during receiving process by all current and previous IPSec Phase-2 Tunnels. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.5.7 | ScalarfsIPSecGlobalOutOctets | read-only | current | The total number of octets sent by all current and previous IPSec Phase-2 Tunnels. This value is accumulated AFTER determining whether or not the packet should… |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.5.8 | ScalarfsIPSecGlobalOutPkts | read-only | current | The total number of packets sent by all current and previous IPSec Phase-2 Tunnels. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.5.9 | ScalarfsIPSecGlobalOutSpeed | read-only | current | The total speed(bps) of packets sent by all current and previous IPSec Phase-2 Tunnels. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.5.10 | ScalarfsIPSecGlobalOutDrops | read-only | current | The total number of packets dropped during sending process by all current and previous IPSec Phase-2 Tunnels. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.6 | NodefsIPSecTrapObject | |||
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.6.1 | ScalarfsIPSecMapName | accessible-for-notify | current | The IPSec map name with a trap. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.6.2 | ScalarfsIPSecSeqNum | accessible-for-notify | current | The IPSec map sequence number with a trap. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.6.3 | ScalarfsIPSecSpiValue | accessible-for-notify | current | The SPI value associated with a trap. |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.7 | NodefsIPSecTrap | |||
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.7.1 | NodefsIPSecNotifications | |||
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.7.1.1 | NotificationfsIPSecTunnelStart | current | This notification is generated when an IPSec Phase-2 Tunnel is created. | |
| 1.3.6.1.4.1.52642.1.1.10.2.94.1.7.1.2 | NotificationfsIPSecTunnelStop | current | This notification is generated when an IPSec Phase-2 Tunnel is deleted. | |
| 1.3.6.1.4.1.52642.1.1.10.2.94.2 | NodefsIPSecConformance | |||
| 1.3.6.1.4.1.52642.1.1.10.2.94.2.1 | NodefsIPSecCompliances | |||
| 1.3.6.1.4.1.52642.1.1.10.2.94.2.1.1 | CompliancefsIPSecCompliance | current | ||
| 1.3.6.1.4.1.52642.1.1.10.2.94.2.2 | NodefsIPSecGroups | |||
| 1.3.6.1.4.1.52642.1.1.10.2.94.2.2.1 | GroupfsIPSecTunnelTableGroup | current | The group contains the IPSec tunnel's property information. | |
| 1.3.6.1.4.1.52642.1.1.10.2.94.2.2.2 | GroupfsIPSecTunnelStatGroup | current | The group contains the IPSec tunnel's statistic information. | |
| 1.3.6.1.4.1.52642.1.1.10.2.94.2.2.3 | GroupfsIPSecSaGroup | current | The group contains the SA's property information. | |
| 1.3.6.1.4.1.52642.1.1.10.2.94.2.2.4 | GroupfsIPSecTrafficTableGroup | current | The group contains the property information of the data flow protected by IPSec tunnel. | |
| 1.3.6.1.4.1.52642.1.1.10.2.94.2.2.5 | GroupfsIPSecGlobalStatsGroup | current | The group contains all of the IPSec tunnel's statistic information. | |
| 1.3.6.1.4.1.52642.1.1.10.2.94.2.2.6 | GroupfsIPSecTrapObjectGroup | current | The group contains all of trap objects of IPSec tunnels. | |
| 1.3.6.1.4.1.52642.1.1.10.2.94.2.2.7 | GroupfsIPSecTrapGroup | current | The group contains all of trap of IPSec tunnels. |
Type Definitions
| Name | Syntax | Status | Description |
|---|---|---|---|
| FSAuthAlgo | INTEGER { none(0), md5(1), sha(2), invalidAlg(2147483647) } | current | The authentication algorithm used in the IKE negotiations. invalidAlg(2147483647) is defined as invalid value. |
| FSDiffHellmanGrp | INTEGER { none(0), modp768(1), modp1024(2), invalidMode(2147483647) } | current | The Diffie Hellman Group used in the IKE and IPSec negotiations. invalidAlg(2147483647) is defined as invalid value. |
| FSEncapMode | INTEGER { tunnel(1), transport(2), invalidMode(2147483647) } | current | The encapsulation mode used by an IPSec Phase-2 Tunnel. |
| FSEncryptAlgo | INTEGER { none(0), desCbc(2), threedesCbc(3), aesCbc(12), sm1Cbc(128), invalidAlg(2147483647) } | current | The encryption algorithm used in the IKE and IPSec negotiations. invalidAlg(2147483647) is defined as invalid value. |
| FSIPSecNegoType | INTEGER { ike(1), manual(2), invalidType(2147483647) } | current | The type of key used by an IPSec Phase-2 Tunnel. invalidType(2147483647) is defined as invalid value. |
| FSIPSecTunnelState | INTEGER { establishing(1), active(2), expiring(3) } | current | The state of IPSec tunnel. |
| FSSaProtocol | INTEGER { reserved(0), isakmp(1), ah(2), esp(3) } | current | The protocol of security association. |
| FSTrafficType | INTEGER { ipv4Addr(1), ipv4AddrSubnet(2), ipv6Addr(3), ipv6AddrSubnet(4), ipv4AddrRange(5), ipv6AddrRange(6) } | current | The type of the data flow. |
| FSTunnelProtocol | INTEGER { none(0), icmp(1), igmp(2), ip(4), tcp(6), udp(17), esp(50), ah(51) } | current | The protocol of security association. |