CISCO-IPSEC-FLOW-MONITOR-MIB

File: CISCO-IPSEC-FLOW-MONITOR-MIB.mib (204295 bytes)

Imported modules

SNMPv2-SMI SNMPv2-CONF SNMPv2-TC
CISCO-MEDIA-GATEWAY-MIB CISCO-SMI

Imported symbols

MODULE-IDENTITY OBJECT-TYPE NOTIFICATION-TYPE
Counter32 Counter64 Gauge32
Integer32 Unsigned32 MODULE-COMPLIANCE
OBJECT-GROUP NOTIFICATION-GROUP TEXTUAL-CONVENTION
DisplayString TimeStamp TimeInterval
TruthValue cmgwIndex ciscoMgmt

Defined Types

IPSIpAddress  
An IP V4 or V6 Address.
TEXTUAL-CONVENTION    
  OCTET STRING Size(4|16)  

IkePeerType  
The type of IPsec Phase-1 IKE peer identity. The IKE peer may be identified by: 1. an IP address, or 2. a host name.
TEXTUAL-CONVENTION    
  INTEGER ipAddrPeer(1), namePeer(2)  

IkeNegoMode  
The IPsec Phase-1 IKE negotiation mode.
TEXTUAL-CONVENTION    
  INTEGER main(1), aggressive(2)  

IkeHashAlgo  
The hash algorithm used in IPsec Phase-1 IKE negotiations.
TEXTUAL-CONVENTION    
  INTEGER none(1), md5(2), sha(3)  

IkeAuthMethod  
The authentication method used in IPsec Phase-1 IKE negotiations.
TEXTUAL-CONVENTION    
  INTEGER none(1), preSharedKey(2), rsaSig(3), rsaEncrypt(4), revPublicKey(5)  

DiffHellmanGrp  
The Diffie Hellman Group used in negotiations.
TEXTUAL-CONVENTION    
  INTEGER none(1), dhGroup1(2), dhGroup2(3)  

KeyType  
The type of key used by an IPsec Phase-2 Tunnel.
TEXTUAL-CONVENTION    
  INTEGER ike(1), manual(2)  

EncapMode  
The encapsulation mode used by an IPsec Phase-2 Tunnel.
TEXTUAL-CONVENTION    
  INTEGER tunnel(1), transport(2)  

EncryptAlgo  
The encryption algorithm used in negotiations.
TEXTUAL-CONVENTION    
  INTEGER none(1), des(2), des3(3)  

AuthAlgo  
The authentication algorithm used by a security association of an IPsec Phase-2 Tunnel.
TEXTUAL-CONVENTION    
  INTEGER none(1), hmacMd5(2), hmacSha(3)  

CompAlgo  
The compression algorithm used by a security association of an IPsec Phase-2 Tunnel.
TEXTUAL-CONVENTION    
  INTEGER none(1), ldf(2)  

EndPtType  
The type of identity use to specify an IPsec End Point.
TEXTUAL-CONVENTION    
  INTEGER singleIpAddr(1), ipAddrRange(2), ipSubnet(3)  

TunnelStatus  
The status of a Tunnel. Objects of this type may be used to bring the tunnel down by setting value of this object to destroy(2). Objects of this type cannot be used to create a Tunnel.
TEXTUAL-CONVENTION    
  INTEGER active(1), destroy(2)  

TrapStatus  
The administrative status for sending a TRAP.
TEXTUAL-CONVENTION    
  INTEGER enabled(1), disabled(2)  

CikePeerEntry  
SEQUENCE    
  cikePeerLocalType IkePeerType
  cikePeerLocalValue DisplayString
  cikePeerRemoteType IkePeerType
  cikePeerRemoteValue DisplayString
  cikePeerIntIndex Integer32
  cikePeerLocalAddr IPSIpAddress
  cikePeerRemoteAddr IPSIpAddress
  cikePeerActiveTime TimeInterval
  cikePeerActiveTunnelIndex Integer32

CikeTunnelEntry  
SEQUENCE    
  cikeTunIndex Integer32
  cikeTunLocalType IkePeerType
  cikeTunLocalValue DisplayString
  cikeTunLocalAddr IPSIpAddress
  cikeTunLocalName DisplayString
  cikeTunRemoteType IkePeerType
  cikeTunRemoteValue DisplayString
  cikeTunRemoteAddr IPSIpAddress
  cikeTunRemoteName DisplayString
  cikeTunNegoMode IkeNegoMode
  cikeTunDiffHellmanGrp DiffHellmanGrp
  cikeTunEncryptAlgo EncryptAlgo
  cikeTunHashAlgo IkeHashAlgo
  cikeTunAuthMethod IkeAuthMethod
  cikeTunLifeTime Integer32
  cikeTunActiveTime TimeInterval
  cikeTunSaRefreshThreshold Integer32
  cikeTunTotalRefreshes Counter32
  cikeTunInOctets Counter32
  cikeTunInPkts Counter32
  cikeTunInDropPkts Counter32
  cikeTunInNotifys Counter32
  cikeTunInP2Exchgs Counter32
  cikeTunInP2ExchgInvalids Counter32
  cikeTunInP2ExchgRejects Counter32
  cikeTunInP2SaDelRequests Counter32
  cikeTunOutOctets Counter32
  cikeTunOutPkts Counter32
  cikeTunOutDropPkts Counter32
  cikeTunOutNotifys Counter32
  cikeTunOutP2Exchgs Counter32
  cikeTunOutP2ExchgInvalids Counter32
  cikeTunOutP2ExchgRejects Counter32
  cikeTunOutP2SaDelRequests Counter32
  cikeTunStatus TunnelStatus

CikePeerCorrEntry  
SEQUENCE    
  cikePeerCorrLocalType IkePeerType
  cikePeerCorrLocalValue DisplayString
  cikePeerCorrRemoteType IkePeerType
  cikePeerCorrRemoteValue DisplayString
  cikePeerCorrIntIndex Integer32
  cikePeerCorrSeqNum Integer32
  cikePeerCorrIpSecTunIndex Integer32

CikePhase1GWStatsEntry  
SEQUENCE    
  cikePhase1GWActiveTunnels Gauge32
  cikePhase1GWPreviousTunnels Counter32
  cikePhase1GWInOctets Counter32
  cikePhase1GWInPkts Counter32
  cikePhase1GWInDropPkts Counter32
  cikePhase1GWInNotifys Counter32
  cikePhase1GWInP2Exchgs Counter32
  cikePhase1GWInP2ExchgInvalids Counter32
  cikePhase1GWInP2ExchgRejects Counter32
  cikePhase1GWInP2SaDelRequests Counter32
  cikePhase1GWOutOctets Counter32
  cikePhase1GWOutPkts Counter32
  cikePhase1GWOutDropPkts Counter32
  cikePhase1GWOutNotifys Counter32
  cikePhase1GWOutP2Exchgs Counter32
  cikePhase1GWOutP2ExchgInvalids Counter32
  cikePhase1GWOutP2ExchgRejects Counter32
  cikePhase1GWOutP2SaDelRequests Counter32
  cikePhase1GWInitTunnels Counter32
  cikePhase1GWInitTunnelFails Counter32
  cikePhase1GWRespTunnelFails Counter32
  cikePhase1GWSysCapFails Counter32
  cikePhase1GWAuthFails Counter32
  cikePhase1GWDecryptFails Counter32
  cikePhase1GWHashValidFails Counter32
  cikePhase1GWNoSaFails Counter32

CipSecTunnelEntry  
SEQUENCE    
  cipSecTunIndex Integer32
  cipSecTunIkeTunnelIndex Integer32
  cipSecTunIkeTunnelAlive TruthValue
  cipSecTunLocalAddr IPSIpAddress
  cipSecTunRemoteAddr IPSIpAddress
  cipSecTunKeyType KeyType
  cipSecTunEncapMode EncapMode
  cipSecTunLifeSize Integer32
  cipSecTunLifeTime Integer32
  cipSecTunActiveTime TimeInterval
  cipSecTunSaLifeSizeThreshold Integer32
  cipSecTunSaLifeTimeThreshold Integer32
  cipSecTunTotalRefreshes Counter32
  cipSecTunExpiredSaInstances Counter32
  cipSecTunCurrentSaInstances Gauge32
  cipSecTunInSaDiffHellmanGrp DiffHellmanGrp
  cipSecTunInSaEncryptAlgo EncryptAlgo
  cipSecTunInSaAhAuthAlgo AuthAlgo
  cipSecTunInSaEspAuthAlgo AuthAlgo
  cipSecTunInSaDecompAlgo CompAlgo
  cipSecTunOutSaDiffHellmanGrp DiffHellmanGrp
  cipSecTunOutSaEncryptAlgo EncryptAlgo
  cipSecTunOutSaAhAuthAlgo AuthAlgo
  cipSecTunOutSaEspAuthAlgo AuthAlgo
  cipSecTunOutSaCompAlgo CompAlgo
  cipSecTunInOctets Counter32
  cipSecTunHcInOctets Counter64
  cipSecTunInOctWraps Counter32
  cipSecTunInDecompOctets Counter32
  cipSecTunHcInDecompOctets Counter64
  cipSecTunInDecompOctWraps Counter32
  cipSecTunInPkts Counter32
  cipSecTunInDropPkts Counter32
  cipSecTunInReplayDropPkts Counter32
  cipSecTunInAuths Counter32
  cipSecTunInAuthFails Counter32
  cipSecTunInDecrypts Counter32
  cipSecTunInDecryptFails Counter32
  cipSecTunOutOctets Counter32
  cipSecTunHcOutOctets Counter64
  cipSecTunOutOctWraps Counter32
  cipSecTunOutUncompOctets Counter32
  cipSecTunHcOutUncompOctets Counter64
  cipSecTunOutUncompOctWraps Counter32
  cipSecTunOutPkts Counter32
  cipSecTunOutDropPkts Counter32
  cipSecTunOutAuths Counter32
  cipSecTunOutAuthFails Counter32
  cipSecTunOutEncrypts Counter32
  cipSecTunOutEncryptFails Counter32
  cipSecTunStatus TunnelStatus

CipSecEndPtEntry  
SEQUENCE    
  cipSecEndPtIndex Integer32
  cipSecEndPtLocalName DisplayString
  cipSecEndPtLocalType EndPtType
  cipSecEndPtLocalAddr1 IPSIpAddress
  cipSecEndPtLocalAddr2 IPSIpAddress
  cipSecEndPtLocalProtocol Integer32
  cipSecEndPtLocalPort Integer32
  cipSecEndPtRemoteName DisplayString
  cipSecEndPtRemoteType EndPtType
  cipSecEndPtRemoteAddr1 IPSIpAddress
  cipSecEndPtRemoteAddr2 IPSIpAddress
  cipSecEndPtRemoteProtocol Integer32
  cipSecEndPtRemotePort Integer32

CipSecSpiEntry  
SEQUENCE    
  cipSecSpiIndex Integer32
  cipSecSpiDirection INTEGER
  cipSecSpiValue Unsigned32
  cipSecSpiProtocol INTEGER
  cipSecSpiStatus INTEGER

CipSecPhase2GWStatsEntry  
SEQUENCE    
  cipSecPhase2GWActiveTunnels Gauge32
  cipSecPhase2GWPreviousTunnels Counter32
  cipSecPhase2GWInOctets Counter32
  cipSecPhase2GWInOctWraps Counter32
  cipSecPhase2GWInDecompOctets Counter32
  cipSecPhase2GWInDecompOctWraps Counter32
  cipSecPhase2GWInPkts Counter32
  cipSecPhase2GWInDrops Counter32
  cipSecPhase2GWInReplayDrops Counter32
  cipSecPhase2GWInAuths Counter32
  cipSecPhase2GWInAuthFails Counter32
  cipSecPhase2GWInDecrypts Counter32
  cipSecPhase2GWInDecryptFails Counter32
  cipSecPhase2GWOutOctets Counter32
  cipSecPhase2GWOutOctWraps Counter32
  cipSecPhase2GWOutUncompOctets Counter32
  cipSecPhase2GWOutUncompOctWraps Counter32
  cipSecPhase2GWOutPkts Counter32
  cipSecPhase2GWOutDrops Counter32
  cipSecPhase2GWOutAuths Counter32
  cipSecPhase2GWOutAuthFails Counter32
  cipSecPhase2GWOutEncrypts Counter32
  cipSecPhase2GWOutEncryptFails Counter32
  cipSecPhase2GWProtocolUseFails Counter32
  cipSecPhase2GWNoSaFails Counter32
  cipSecPhase2GWSysCapFails Counter32

CikeTunnelHistEntry  
SEQUENCE    
  cikeTunHistIndex Integer32
  cikeTunHistTermReason INTEGER
  cikeTunHistActiveIndex Integer32
  cikeTunHistPeerLocalType IkePeerType
  cikeTunHistPeerLocalValue DisplayString
  cikeTunHistPeerIntIndex Integer32
  cikeTunHistPeerRemoteType IkePeerType
  cikeTunHistPeerRemoteValue DisplayString
  cikeTunHistLocalAddr IPSIpAddress
  cikeTunHistLocalName DisplayString
  cikeTunHistRemoteAddr IPSIpAddress
  cikeTunHistRemoteName DisplayString
  cikeTunHistNegoMode IkeNegoMode
  cikeTunHistDiffHellmanGrp DiffHellmanGrp
  cikeTunHistEncryptAlgo EncryptAlgo
  cikeTunHistHashAlgo IkeHashAlgo
  cikeTunHistAuthMethod IkeAuthMethod
  cikeTunHistLifeTime Integer32
  cikeTunHistStartTime TimeStamp
  cikeTunHistActiveTime TimeInterval
  cikeTunHistTotalRefreshes Counter32
  cikeTunHistTotalSas Counter32
  cikeTunHistInOctets Counter32
  cikeTunHistInPkts Counter32
  cikeTunHistInDropPkts Counter32
  cikeTunHistInNotifys Counter32
  cikeTunHistInP2Exchgs Counter32
  cikeTunHistInP2ExchgInvalids Counter32
  cikeTunHistInP2ExchgRejects Counter32
  cikeTunHistInP2SaDelRequests Counter32
  cikeTunHistOutOctets Counter32
  cikeTunHistOutPkts Counter32
  cikeTunHistOutDropPkts Counter32
  cikeTunHistOutNotifys Counter32
  cikeTunHistOutP2Exchgs Counter32
  cikeTunHistOutP2ExchgInvalids Counter32
  cikeTunHistOutP2ExchgRejects Counter32
  cikeTunHistOutP2SaDelRequests Counter32

CipSecTunnelHistEntry  
SEQUENCE    
  cipSecTunHistIndex Integer32
  cipSecTunHistTermReason INTEGER
  cipSecTunHistActiveIndex Integer32
  cipSecTunHistIkeTunnelIndex Integer32
  cipSecTunHistLocalAddr IPSIpAddress
  cipSecTunHistRemoteAddr IPSIpAddress
  cipSecTunHistKeyType KeyType
  cipSecTunHistEncapMode EncapMode
  cipSecTunHistLifeSize Integer32
  cipSecTunHistLifeTime Integer32
  cipSecTunHistStartTime TimeStamp
  cipSecTunHistActiveTime TimeInterval
  cipSecTunHistTotalRefreshes Counter32
  cipSecTunHistTotalSas Counter32
  cipSecTunHistInSaDiffHellmanGrp DiffHellmanGrp
  cipSecTunHistInSaEncryptAlgo EncryptAlgo
  cipSecTunHistInSaAhAuthAlgo AuthAlgo
  cipSecTunHistInSaEspAuthAlgo AuthAlgo
  cipSecTunHistInSaDecompAlgo CompAlgo
  cipSecTunHistOutSaDiffHellmanGrp DiffHellmanGrp
  cipSecTunHistOutSaEncryptAlgo EncryptAlgo
  cipSecTunHistOutSaAhAuthAlgo AuthAlgo
  cipSecTunHistOutSaEspAuthAlgo AuthAlgo
  cipSecTunHistOutSaCompAlgo CompAlgo
  cipSecTunHistInOctets Counter32
  cipSecTunHistHcInOctets Counter64
  cipSecTunHistInOctWraps Counter32
  cipSecTunHistInDecompOctets Counter32
  cipSecTunHistHcInDecompOctets Counter64
  cipSecTunHistInDecompOctWraps Counter32
  cipSecTunHistInPkts Counter32
  cipSecTunHistInDropPkts Counter32
  cipSecTunHistInReplayDropPkts Counter32
  cipSecTunHistInAuths Counter32
  cipSecTunHistInAuthFails Counter32
  cipSecTunHistInDecrypts Counter32
  cipSecTunHistInDecryptFails Counter32
  cipSecTunHistOutOctets Counter32
  cipSecTunHistHcOutOctets Counter64
  cipSecTunHistOutOctWraps Counter32
  cipSecTunHistOutUncompOctets Counter32
  cipSecTunHistHcOutUncompOctets Counter64
  cipSecTunHistOutUncompOctWraps Counter32
  cipSecTunHistOutPkts Counter32
  cipSecTunHistOutDropPkts Counter32
  cipSecTunHistOutAuths Counter32
  cipSecTunHistOutAuthFails Counter32
  cipSecTunHistOutEncrypts Counter32
  cipSecTunHistOutEncryptFails Counter32

CipSecEndPtHistEntry  
SEQUENCE    
  cipSecEndPtHistIndex Integer32
  cipSecEndPtHistTunIndex Integer32
  cipSecEndPtHistActiveIndex Integer32
  cipSecEndPtHistLocalName DisplayString
  cipSecEndPtHistLocalType EndPtType
  cipSecEndPtHistLocalAddr1 IPSIpAddress
  cipSecEndPtHistLocalAddr2 IPSIpAddress
  cipSecEndPtHistLocalProtocol Integer32
  cipSecEndPtHistLocalPort Integer32
  cipSecEndPtHistRemoteName DisplayString
  cipSecEndPtHistRemoteType EndPtType
  cipSecEndPtHistRemoteAddr1 IPSIpAddress
  cipSecEndPtHistRemoteAddr2 IPSIpAddress
  cipSecEndPtHistRemoteProtocol Integer32
  cipSecEndPtHistRemotePort Integer32

CikeFailEntry  
SEQUENCE    
  cikeFailIndex Integer32
  cikeFailReason INTEGER
  cikeFailTime TimeStamp
  cikeFailLocalType IkePeerType
  cikeFailLocalValue DisplayString
  cikeFailRemoteType IkePeerType
  cikeFailRemoteValue DisplayString
  cikeFailLocalAddr IPSIpAddress
  cikeFailRemoteAddr IPSIpAddress

CipSecFailEntry  
SEQUENCE    
  cipSecFailIndex Integer32
  cipSecFailReason INTEGER
  cipSecFailTime TimeStamp
  cipSecFailTunnelIndex Integer32
  cipSecFailSaSpi Integer32
  cipSecFailPktSrcAddr IPSIpAddress
  cipSecFailPktDstAddr IPSIpAddress

Defined Values

ciscoIpSecFlowMonitorMIB 1.3.6.1.4.1.9.9.171
This is a MIB Module for monitoring the structures in IPSec-based Virtual Private Networks. The MIB has been designed to be adopted as an IETF standard. Hence Cisco-specific features of IPSec protocol are excluded from this MIB. Acronyms The following acronyms are used in this document: IPSec: Secure IP Protocol VPN: Virtual Private Network ISAKMP: Internet Security Association and Key Exchange Protocol IKE: Internet Key Exchange Protocol SA: Security Association MM: Main Mode - the process of setting up a Phase 1 SA to secure the exchanges required to setup Phase 2 SAs QM: Quick Mode - the process of setting up Phase 2 Security Associations using a Phase 1 SA. Overview of IPsec MIB The MIB contains six major groups of objects which are used to manage the IPSec Protocol. These groups include a Levels Group, a Phase-1 Group, a Phase-2 Group, a History Group, a Failure Group and a TRAP Control Group. The following table illustrates the structure of the IPSec MIB. The Phase 1 group models objects pertaining to IKE negotiations and tunnels. The Phase 2 group models objects pertaining to IPSec data tunnels. The History group is to aid applications that do trending analysis. The Failure group is to enable an operator to do troubleshooting and debugging of the VPN Router. Further, counters are supported to aid Intrusion Detection. In addition to the five major MIB Groups, there are a number of Notifications. The following table illustrates the name and description of the IPSec TRAPs. For a detailed discussion, please refer to the IETF draft draft-ietf-ipsec-flow-monitoring-mib-00.txt.
MODULE-IDENTITY    

cipSecMIBObjects 1.3.6.1.4.1.9.9.171.1
OBJECT IDENTIFIER    

cipSecLevels 1.3.6.1.4.1.9.9.171.1.1
OBJECT IDENTIFIER    

cipSecPhaseOne 1.3.6.1.4.1.9.9.171.1.2
OBJECT IDENTIFIER    

cipSecPhaseTwo 1.3.6.1.4.1.9.9.171.1.3
OBJECT IDENTIFIER    

cipSecHistory 1.3.6.1.4.1.9.9.171.1.4
OBJECT IDENTIFIER    

cipSecFailures 1.3.6.1.4.1.9.9.171.1.5
OBJECT IDENTIFIER    

cipSecTrapCntl 1.3.6.1.4.1.9.9.171.1.6
OBJECT IDENTIFIER    

cipSecMibLevel 1.3.6.1.4.1.9.9.171.1.1.1
The level of the IPsec MIB.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 1..4096  

cikeGlobalStats 1.3.6.1.4.1.9.9.171.1.2.1
OBJECT IDENTIFIER    

cikeGlobalActiveTunnels 1.3.6.1.4.1.9.9.171.1.2.1.1
The number of currently active IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Gauge32  

cikeGlobalPreviousTunnels 1.3.6.1.4.1.9.9.171.1.2.1.2
The total number of previously active IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeGlobalInOctets 1.3.6.1.4.1.9.9.171.1.2.1.3
The total number of octets received by all currently and previously active IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeGlobalInPkts 1.3.6.1.4.1.9.9.171.1.2.1.4
The total number of packets received by all currently and previously active IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeGlobalInDropPkts 1.3.6.1.4.1.9.9.171.1.2.1.5
The total number of packets which were dropped during receive processing by all currently and previously active IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeGlobalInNotifys 1.3.6.1.4.1.9.9.171.1.2.1.6
The total number of notifys received by all currently and previously active IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeGlobalInP2Exchgs 1.3.6.1.4.1.9.9.171.1.2.1.7
The total number of IPsec Phase-2 exchanges received by all currently and previously active IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeGlobalInP2ExchgInvalids 1.3.6.1.4.1.9.9.171.1.2.1.8
The total number of IPsec Phase-2 exchanges which were received and found to be invalid by all currently and previously active IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeGlobalInP2ExchgRejects 1.3.6.1.4.1.9.9.171.1.2.1.9
The total number of IPsec Phase-2 exchanges which were received and rejected by all currently and previously active IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeGlobalInP2SaDelRequests 1.3.6.1.4.1.9.9.171.1.2.1.10
The total number of IPsec Phase-2 security association delete requests received by all currently and previously active and IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeGlobalOutOctets 1.3.6.1.4.1.9.9.171.1.2.1.11
The total number of octets sent by all currently and previously active and IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeGlobalOutPkts 1.3.6.1.4.1.9.9.171.1.2.1.12
The total number of packets sent by all currently and previously active and IPsec Phase-1 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeGlobalOutDropPkts 1.3.6.1.4.1.9.9.171.1.2.1.13
The total number of packets which were dropped during send processing by all currently and previously active IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeGlobalOutNotifys 1.3.6.1.4.1.9.9.171.1.2.1.14
The total number of notifys sent by all currently and previously active IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeGlobalOutP2Exchgs 1.3.6.1.4.1.9.9.171.1.2.1.15
The total number of IPsec Phase-2 exchanges which were sent by all currently and previously active IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeGlobalOutP2ExchgInvalids 1.3.6.1.4.1.9.9.171.1.2.1.16
The total number of IPsec Phase-2 exchanges which were sent and found to be invalid by all currently and previously active IPsec Phase-1 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeGlobalOutP2ExchgRejects 1.3.6.1.4.1.9.9.171.1.2.1.17
The total number of IPsec Phase-2 exchanges which were sent and rejected by all currently and previously active IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeGlobalOutP2SaDelRequests 1.3.6.1.4.1.9.9.171.1.2.1.18
The total number of IPsec Phase-2 SA delete requests sent by all currently and previously active IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeGlobalInitTunnels 1.3.6.1.4.1.9.9.171.1.2.1.19
The total number of IPsec Phase-1 IKE Tunnels which were locally initiated.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeGlobalInitTunnelFails 1.3.6.1.4.1.9.9.171.1.2.1.20
The total number of IPsec Phase-1 IKE Tunnels which were locally initiated and failed to activate.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeGlobalRespTunnelFails 1.3.6.1.4.1.9.9.171.1.2.1.21
The total number of IPsec Phase-1 IKE Tunnels which were remotely initiated and failed to activate.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeGlobalSysCapFails 1.3.6.1.4.1.9.9.171.1.2.1.22
The total number of system capacity failures which occurred during processing of all current and previously active IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeGlobalAuthFails 1.3.6.1.4.1.9.9.171.1.2.1.23
The total number of authentications which ended in failure by all current and previous IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeGlobalDecryptFails 1.3.6.1.4.1.9.9.171.1.2.1.24
The total number of decryptions which ended in failure by all current and previous IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeGlobalHashValidFails 1.3.6.1.4.1.9.9.171.1.2.1.25
The total number of hash validations which ended in failure by all current and previous IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeGlobalNoSaFails 1.3.6.1.4.1.9.9.171.1.2.1.26
The total number of non-existent Security Association in failures which occurred during processing of all current and previous IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikePeerTable 1.3.6.1.4.1.9.9.171.1.2.2
The IPsec Phase-1 Internet Key Exchange Peer Table. There is one entry in this table for each IPsec Phase-1 IKE peer association which is currently associated with an active IPsec Phase-1 Tunnel. The IPsec Phase-1 IKE Tunnel associated with this IPsec Phase-1 IKE peer association may or may not be currently active.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    CikePeerEntry

cikePeerEntry 1.3.6.1.4.1.9.9.171.1.2.2.1
Each entry contains the attributes associated with an IPsec Phase-1 IKE peer association.
Status: current Access: not-accessible
OBJECT-TYPE    
  CikePeerEntry  

cikePeerLocalType 1.3.6.1.4.1.9.9.171.1.2.2.1.1
The type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. a host name.
Status: current Access: not-accessible
OBJECT-TYPE    
  IkePeerType  

cikePeerLocalValue 1.3.6.1.4.1.9.9.171.1.2.2.1.2
The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is a host name, then this is the host name used to identify the local peer.
Status: current Access: not-accessible
OBJECT-TYPE    
  DisplayString  

cikePeerRemoteType 1.3.6.1.4.1.9.9.171.1.2.2.1.3
The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. a host name.
Status: current Access: not-accessible
OBJECT-TYPE    
  IkePeerType  

cikePeerRemoteValue 1.3.6.1.4.1.9.9.171.1.2.2.1.4
The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is a host name, then this is the host name used to identify the remote peer.
Status: current Access: not-accessible
OBJECT-TYPE    
  DisplayString  

cikePeerIntIndex 1.3.6.1.4.1.9.9.171.1.2.2.1.5
The internal index of the local-remote peer association. This internal index is used to uniquely identify multiple associations between the local and remote peer.
Status: current Access: not-accessible
OBJECT-TYPE    
  Integer32 1..2147483647  

cikePeerLocalAddr 1.3.6.1.4.1.9.9.171.1.2.2.1.6
The IP address of the local peer.
Status: current Access: read-only
OBJECT-TYPE    
  IPSIpAddress  

cikePeerRemoteAddr 1.3.6.1.4.1.9.9.171.1.2.2.1.7
The IP address of the remote peer.
Status: current Access: read-only
OBJECT-TYPE    
  IPSIpAddress  

cikePeerActiveTime 1.3.6.1.4.1.9.9.171.1.2.2.1.8
The length of time that the peer association has existed in hundredths of a second.
Status: current Access: read-only
OBJECT-TYPE    
  TimeInterval  

cikePeerActiveTunnelIndex 1.3.6.1.4.1.9.9.171.1.2.2.1.9
The index of the active IPsec Phase-1 IKE Tunnel (cikeTunIndex in the cikeTunnelTable) for this peer association. If an IPsec Phase-1 IKE Tunnel is not currently active, then the value of this object will be zero.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 1..2147483647  

cikeTunnelTable 1.3.6.1.4.1.9.9.171.1.2.3
The IPsec Phase-1 Internet Key Exchange Tunnel Table. There is one entry in this table for each active IPsec Phase-1 IKE Tunnel.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    CikeTunnelEntry

cikeTunnelEntry 1.3.6.1.4.1.9.9.171.1.2.3.1
Each entry contains the attributes associated with an active IPsec Phase-1 IKE Tunnel.
Status: current Access: not-accessible
OBJECT-TYPE    
  CikeTunnelEntry  

cikeTunIndex 1.3.6.1.4.1.9.9.171.1.2.3.1.1
The index of the IPsec Phase-1 IKE Tunnel Table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The value of this object will wrap at 2,147,483,647.
Status: current Access: not-accessible
OBJECT-TYPE    
  Integer32 1..2147483647  

cikeTunLocalType 1.3.6.1.4.1.9.9.171.1.2.3.1.2
The type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. a host name.
Status: current Access: read-only
OBJECT-TYPE    
  IkePeerType  

cikeTunLocalValue 1.3.6.1.4.1.9.9.171.1.2.3.1.3
The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is a host name, then this is the host name used to identify the local peer.
Status: current Access: read-only
OBJECT-TYPE    
  DisplayString  

cikeTunLocalAddr 1.3.6.1.4.1.9.9.171.1.2.3.1.4
The IP address of the local endpoint for the IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  IPSIpAddress  

cikeTunLocalName 1.3.6.1.4.1.9.9.171.1.2.3.1.5
The DNS name of the local IP address for the IPsec Phase-1 IKE Tunnel. If the DNS name associated with the local tunnel endpoint is not known, then the value of this object will be a NULL string.
Status: current Access: read-only
OBJECT-TYPE    
  DisplayString  

cikeTunRemoteType 1.3.6.1.4.1.9.9.171.1.2.3.1.6
The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. a host name.
Status: current Access: read-only
OBJECT-TYPE    
  IkePeerType  

cikeTunRemoteValue 1.3.6.1.4.1.9.9.171.1.2.3.1.7
The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is a host name, then this is the host name used to identify the remote peer.
Status: current Access: read-only
OBJECT-TYPE    
  DisplayString  

cikeTunRemoteAddr 1.3.6.1.4.1.9.9.171.1.2.3.1.8
The IP address of the remote endpoint for the IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  IPSIpAddress  

cikeTunRemoteName 1.3.6.1.4.1.9.9.171.1.2.3.1.9
The DNS name of the remote IP address of IPsec Phase-1 IKE Tunnel. If the DNS name associated with the remote tunnel endpoint is not known, then the value of this object will be a NULL string.
Status: current Access: read-only
OBJECT-TYPE    
  DisplayString  

cikeTunNegoMode 1.3.6.1.4.1.9.9.171.1.2.3.1.10
The negotiation mode of the IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  IkeNegoMode  

cikeTunDiffHellmanGrp 1.3.6.1.4.1.9.9.171.1.2.3.1.11
The Diffie Hellman Group used in IPsec Phase-1 IKE negotiations.
Status: current Access: read-only
OBJECT-TYPE    
  DiffHellmanGrp  

cikeTunEncryptAlgo 1.3.6.1.4.1.9.9.171.1.2.3.1.12
The encryption algorithm used in IPsec Phase-1 IKE negotiations.
Status: current Access: read-only
OBJECT-TYPE    
  EncryptAlgo  

cikeTunHashAlgo 1.3.6.1.4.1.9.9.171.1.2.3.1.13
The hash algorithm used in IPsec Phase-1 IKE negotiations.
Status: current Access: read-only
OBJECT-TYPE    
  IkeHashAlgo  

cikeTunAuthMethod 1.3.6.1.4.1.9.9.171.1.2.3.1.14
The authentication method used in IPsec Phase-1 IKE negotiations.
Status: current Access: read-only
OBJECT-TYPE    
  IkeAuthMethod  

cikeTunLifeTime 1.3.6.1.4.1.9.9.171.1.2.3.1.15
The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel in seconds.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 1..2147483647  

cikeTunActiveTime 1.3.6.1.4.1.9.9.171.1.2.3.1.16
The length of time the IPsec Phase-1 IKE tunnel has been active in hundredths of seconds.
Status: current Access: read-only
OBJECT-TYPE    
  TimeInterval  

cikeTunSaRefreshThreshold 1.3.6.1.4.1.9.9.171.1.2.3.1.17
The security association refresh threshold in seconds.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 1..2147483647  

cikeTunTotalRefreshes 1.3.6.1.4.1.9.9.171.1.2.3.1.18
The total number of security associations refreshes performed.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunInOctets 1.3.6.1.4.1.9.9.171.1.2.3.1.19
The total number of octets received by this IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunInPkts 1.3.6.1.4.1.9.9.171.1.2.3.1.20
The total number of packets received by this IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunInDropPkts 1.3.6.1.4.1.9.9.171.1.2.3.1.21
The total number of packets dropped by this IPsec Phase-1 IKE Tunnel during receive processing.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunInNotifys 1.3.6.1.4.1.9.9.171.1.2.3.1.22
The total number of notifys received by this IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunInP2Exchgs 1.3.6.1.4.1.9.9.171.1.2.3.1.23
The total number of IPsec Phase-2 exchanges received by this IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunInP2ExchgInvalids 1.3.6.1.4.1.9.9.171.1.2.3.1.24
The total number of IPsec Phase-2 exchanges received and found to be invalid by this IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunInP2ExchgRejects 1.3.6.1.4.1.9.9.171.1.2.3.1.25
The total number of IPsec Phase-2 exchanges received and rejected by this IPsec Phase-1 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunInP2SaDelRequests 1.3.6.1.4.1.9.9.171.1.2.3.1.26
The total number of IPsec Phase-2 security association delete requests received by this IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunOutOctets 1.3.6.1.4.1.9.9.171.1.2.3.1.27
The total number of octets sent by this IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunOutPkts 1.3.6.1.4.1.9.9.171.1.2.3.1.28
The total number of packets sent by this IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunOutDropPkts 1.3.6.1.4.1.9.9.171.1.2.3.1.29
The total number of packets dropped by this IPsec Phase-1 IKE Tunnel during send processing.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunOutNotifys 1.3.6.1.4.1.9.9.171.1.2.3.1.30
The total number of notifys sent by this IPsec Phase-1 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunOutP2Exchgs 1.3.6.1.4.1.9.9.171.1.2.3.1.31
The total number of IPsec Phase-2 exchanges sent by this IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunOutP2ExchgInvalids 1.3.6.1.4.1.9.9.171.1.2.3.1.32
The total number of IPsec Phase-2 exchanges sent and found to be invalid by this IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunOutP2ExchgRejects 1.3.6.1.4.1.9.9.171.1.2.3.1.33
The total number of IPsec Phase-2 exchanges sent and rejected by this IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunOutP2SaDelRequests 1.3.6.1.4.1.9.9.171.1.2.3.1.34
The total number of IPsec Phase-2 security association delete requests sent by this IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunStatus 1.3.6.1.4.1.9.9.171.1.2.3.1.35
The status of the MIB table row. This object can be used to bring the tunnel down by setting value of this object to destroy(2). This object cannot be used to create a MIB table row.
Status: current Access: read-write
OBJECT-TYPE    
  TunnelStatus  

cikePeerCorrTable 1.3.6.1.4.1.9.9.171.1.2.4
The IPsec Phase-1 Internet Key Exchange Peer Association to IPsec Phase-2 Tunnel Correlation Table. There is one entry in this table for each active IPsec Phase-2 Tunnel.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    CikePeerCorrEntry

cikePeerCorrEntry 1.3.6.1.4.1.9.9.171.1.2.4.1
Each entry contains the attributes of an IPsec Phase-1 IKE Peer Association to IPsec Phase-2 Tunnel Correlation.
Status: current Access: not-accessible
OBJECT-TYPE    
  CikePeerCorrEntry  

cikePeerCorrLocalType 1.3.6.1.4.1.9.9.171.1.2.4.1.1
The type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. a host name.
Status: current Access: not-accessible
OBJECT-TYPE    
  IkePeerType  

cikePeerCorrLocalValue 1.3.6.1.4.1.9.9.171.1.2.4.1.2
The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is a host name, then this is the host name used to identify the local peer.
Status: current Access: not-accessible
OBJECT-TYPE    
  DisplayString  

cikePeerCorrRemoteType 1.3.6.1.4.1.9.9.171.1.2.4.1.3
The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. a host name.
Status: current Access: not-accessible
OBJECT-TYPE    
  IkePeerType  

cikePeerCorrRemoteValue 1.3.6.1.4.1.9.9.171.1.2.4.1.4
The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is a host name, then this is the host name used to identify the remote peer.
Status: current Access: not-accessible
OBJECT-TYPE    
  DisplayString  

cikePeerCorrIntIndex 1.3.6.1.4.1.9.9.171.1.2.4.1.5
The internal index of the local-remote peer association. This internal index is used to uniquely identify multiple associations between the local and remote peer.
Status: current Access: not-accessible
OBJECT-TYPE    
  Integer32 1..2147483647  

cikePeerCorrSeqNum 1.3.6.1.4.1.9.9.171.1.2.4.1.6
The sequence number of the local-remote peer association. This sequence number is used to uniquely identify multiple instances of an unique association between the local and remote peer.
Status: current Access: not-accessible
OBJECT-TYPE    
  Integer32 1..2147483647  

cikePeerCorrIpSecTunIndex 1.3.6.1.4.1.9.9.171.1.2.4.1.7
The index of the active IPsec Phase-2 Tunnel (cipSecTunIndex in the cipSecTunnelTable) for this IPsec Phase-1 IKE Peer Association.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 1..2147483647  

cikePhase1GWStatsTable 1.3.6.1.4.1.9.9.171.1.2.5
Phase-1 IKE stats information is included in this table. Each entry is related to a specific gateway which is identified by 'cmgwIndex'.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    CikePhase1GWStatsEntry

cikePhase1GWStatsEntry 1.3.6.1.4.1.9.9.171.1.2.5.1
Each entry contains the attributes of an Phase-1 IKE stats information for the related gateway. There is only one entry for each gateway. The entry is created when a gateway up and cannot be deleted.
Status: current Access: not-accessible
OBJECT-TYPE    
  CikePhase1GWStatsEntry  

cikePhase1GWActiveTunnels 1.3.6.1.4.1.9.9.171.1.2.5.1.1
The number of currently active IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Gauge32  

cikePhase1GWPreviousTunnels 1.3.6.1.4.1.9.9.171.1.2.5.1.2
The total number of previously active IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikePhase1GWInOctets 1.3.6.1.4.1.9.9.171.1.2.5.1.3
The total number of octets received by all currently and previously active IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikePhase1GWInPkts 1.3.6.1.4.1.9.9.171.1.2.5.1.4
The total number of packets received by all currently and previously active IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikePhase1GWInDropPkts 1.3.6.1.4.1.9.9.171.1.2.5.1.5
The total number of packets which were dropped during receive processing by all currently and previously active IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikePhase1GWInNotifys 1.3.6.1.4.1.9.9.171.1.2.5.1.6
The total number of notifys received by all currently and previously active IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikePhase1GWInP2Exchgs 1.3.6.1.4.1.9.9.171.1.2.5.1.7
The total number of IPsec Phase-2 exchanges received by all currently and previously active IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikePhase1GWInP2ExchgInvalids 1.3.6.1.4.1.9.9.171.1.2.5.1.8
The total number of IPsec Phase-2 exchanges which were received and found to be invalid by all currently and previously active IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikePhase1GWInP2ExchgRejects 1.3.6.1.4.1.9.9.171.1.2.5.1.9
The total number of IPsec Phase-2 exchanges which were received and rejected by all currently and previously active IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikePhase1GWInP2SaDelRequests 1.3.6.1.4.1.9.9.171.1.2.5.1.10
The total number of IPsec Phase-2 'Security Association' delete requests received by all currently and previously active and IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikePhase1GWOutOctets 1.3.6.1.4.1.9.9.171.1.2.5.1.11
The total number of octets sent by all currently and previously active and IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikePhase1GWOutPkts 1.3.6.1.4.1.9.9.171.1.2.5.1.12
The total number of packets sent by all currently and previously active and IPsec Phase-1 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikePhase1GWOutDropPkts 1.3.6.1.4.1.9.9.171.1.2.5.1.13
The total number of packets which were dropped during send processing by all currently and previously active IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikePhase1GWOutNotifys 1.3.6.1.4.1.9.9.171.1.2.5.1.14
The total number of notifys sent by all currently and previously active IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikePhase1GWOutP2Exchgs 1.3.6.1.4.1.9.9.171.1.2.5.1.15
The total number of IPsec Phase-2 exchanges which were sent by all currently and previously active IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikePhase1GWOutP2ExchgInvalids 1.3.6.1.4.1.9.9.171.1.2.5.1.16
The total number of IPsec Phase-2 exchanges which were sent and found to be invalid by all currently and previously active IPsec Phase-1 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikePhase1GWOutP2ExchgRejects 1.3.6.1.4.1.9.9.171.1.2.5.1.17
The total number of IPsec Phase-2 exchanges which were sent and rejected by all currently and previously active IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikePhase1GWOutP2SaDelRequests 1.3.6.1.4.1.9.9.171.1.2.5.1.18
The total number of IPsec Phase-2 SA delete requests sent by all currently and previously active IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikePhase1GWInitTunnels 1.3.6.1.4.1.9.9.171.1.2.5.1.19
The total number of IPsec Phase-1 IKE Tunnels which were locally initiated.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikePhase1GWInitTunnelFails 1.3.6.1.4.1.9.9.171.1.2.5.1.20
The total number of IPsec Phase-1 IKE Tunnels which were locally initiated and failed to activate.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikePhase1GWRespTunnelFails 1.3.6.1.4.1.9.9.171.1.2.5.1.21
The total number of IPsec Phase-1 IKE Tunnels which were remotely initiated and failed to activate.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikePhase1GWSysCapFails 1.3.6.1.4.1.9.9.171.1.2.5.1.22
The total number of system capacity failures which occurred during processing of all current and previously active IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikePhase1GWAuthFails 1.3.6.1.4.1.9.9.171.1.2.5.1.23
The total number of authentications which ended in failure by all current and previous IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikePhase1GWDecryptFails 1.3.6.1.4.1.9.9.171.1.2.5.1.24
The total number of decryptions which ended in failure by all current and previous IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikePhase1GWHashValidFails 1.3.6.1.4.1.9.9.171.1.2.5.1.25
The total number of hash validations which ended in failure by all current and previous IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikePhase1GWNoSaFails 1.3.6.1.4.1.9.9.171.1.2.5.1.26
The total number of non-existent 'Security Association' failures occurred during processing of current and previous IPsec Phase-1 IKE Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecGlobalStats 1.3.6.1.4.1.9.9.171.1.3.1
OBJECT IDENTIFIER    

cipSecGlobalActiveTunnels 1.3.6.1.4.1.9.9.171.1.3.1.1
The total number of currently active IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Gauge32  

cipSecGlobalPreviousTunnels 1.3.6.1.4.1.9.9.171.1.3.1.2
The total number of previously active IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecGlobalInOctets 1.3.6.1.4.1.9.9.171.1.3.1.3
The total number of octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE determining whether or not the packet should be decompressed. See also cipSecGlobalInOctWraps for the number of times this counter has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecGlobalHcInOctets 1.3.6.1.4.1.9.9.171.1.3.1.4
A high capacity count of the total number of octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE determining whether or not the packet should be decompressed.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

cipSecGlobalInOctWraps 1.3.6.1.4.1.9.9.171.1.3.1.5
The number of times the global octets received counter (cipSecGlobalInOctets) has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecGlobalInDecompOctets 1.3.6.1.4.1.9.9.171.1.3.1.6
The total number of decompressed octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of cipSecGlobalInOctets. See also cipSecGlobalInDecompOctWraps for the number of times this counter has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecGlobalHcInDecompOctets 1.3.6.1.4.1.9.9.171.1.3.1.7
A high capacity count of the total number of decompressed octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of cipSecGlobalHcInOctets.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

cipSecGlobalInDecompOctWraps 1.3.6.1.4.1.9.9.171.1.3.1.8
The number of times the global decompressed octets received counter (cipSecGlobalInDecompOctets) has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecGlobalInPkts 1.3.6.1.4.1.9.9.171.1.3.1.9
The total number of packets received by all current and previous IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecGlobalInDrops 1.3.6.1.4.1.9.9.171.1.3.1.10
The total number of packets dropped during receive processing by all current and previous IPsec Phase-2 Tunnels. This count does NOT include packets dropped due to Anti-Replay processing.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecGlobalInReplayDrops 1.3.6.1.4.1.9.9.171.1.3.1.11
The total number of packets dropped during receive processing due to Anti-Replay processing by all current and previous IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecGlobalInAuths 1.3.6.1.4.1.9.9.171.1.3.1.12
The total number of inbound authentication's performed by all current and previous IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecGlobalInAuthFails 1.3.6.1.4.1.9.9.171.1.3.1.13
The total number of inbound authentication's which ended in failure by all current and previous IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecGlobalInDecrypts 1.3.6.1.4.1.9.9.171.1.3.1.14
The total number of inbound decryption's performed by all current and previous IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecGlobalInDecryptFails 1.3.6.1.4.1.9.9.171.1.3.1.15
The total number of inbound decryption's which ended in failure by all current and previous IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecGlobalOutOctets 1.3.6.1.4.1.9.9.171.1.3.1.16
The total number of octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER determining whether or not the packet should be compressed. See also cipSecGlobalOutOctWraps for the number of times this counter has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecGlobalHcOutOctets 1.3.6.1.4.1.9.9.171.1.3.1.17
A high capacity count of the total number of octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER determining whether or not the packet should be compressed.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

cipSecGlobalOutOctWraps 1.3.6.1.4.1.9.9.171.1.3.1.18
The number of times the global octets sent counter (cipSecGlobalOutOctets) has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecGlobalOutUncompOctets 1.3.6.1.4.1.9.9.171.1.3.1.19
The total number of uncompressed octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of cipSecGlobalOutOctets. See also cipSecGlobalOutDecompOctWraps for the number of times this counter has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecGlobalHcOutUncompOctets 1.3.6.1.4.1.9.9.171.1.3.1.20
A high capacity count of the total number of uncompressed octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of cipSecGlobalHcOutOctets.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

cipSecGlobalOutUncompOctWraps 1.3.6.1.4.1.9.9.171.1.3.1.21
The number of times the global uncompressed octets sent counter (cipSecGlobalOutUncompOctets) has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecGlobalOutPkts 1.3.6.1.4.1.9.9.171.1.3.1.22
The total number of packets sent by all current and previous IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecGlobalOutDrops 1.3.6.1.4.1.9.9.171.1.3.1.23
The total number of packets dropped during send processing by all current and previous IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecGlobalOutAuths 1.3.6.1.4.1.9.9.171.1.3.1.24
The total number of outbound authentication's performed by all current and previous IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecGlobalOutAuthFails 1.3.6.1.4.1.9.9.171.1.3.1.25
The total number of outbound authentication's which ended in failure by all current and previous IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecGlobalOutEncrypts 1.3.6.1.4.1.9.9.171.1.3.1.26
The total number of outbound encryption's performed by all current and previous IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecGlobalOutEncryptFails 1.3.6.1.4.1.9.9.171.1.3.1.27
The total number of outbound encryption's which ended in failure by all current and previous IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecGlobalProtocolUseFails 1.3.6.1.4.1.9.9.171.1.3.1.28
The total number of protocol use failures which occurred during processing of all current and previously active IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecGlobalNoSaFails 1.3.6.1.4.1.9.9.171.1.3.1.29
The total number of non-existent Security Association in failures which occurred during processing of all current and previous IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecGlobalSysCapFails 1.3.6.1.4.1.9.9.171.1.3.1.30
The total number of system capacity failures which occurred during processing of all current and previously active IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunnelTable 1.3.6.1.4.1.9.9.171.1.3.2
The IPsec Phase-2 Tunnel Table. There is one entry in this table for each active IPsec Phase-2 Tunnel.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    CipSecTunnelEntry

cipSecTunnelEntry 1.3.6.1.4.1.9.9.171.1.3.2.1
Each entry contains the attributes associated with an active IPsec Phase-2 Tunnel.
Status: current Access: not-accessible
OBJECT-TYPE    
  CipSecTunnelEntry  

cipSecTunIndex 1.3.6.1.4.1.9.9.171.1.3.2.1.1
The index of the IPsec Phase-2 Tunnel Table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The value of this object will wrap at 2,147,483,647.
Status: current Access: not-accessible
OBJECT-TYPE    
  Integer32 1..2147483647  

cipSecTunIkeTunnelIndex 1.3.6.1.4.1.9.9.171.1.3.2.1.2
The index of the associated IPsec Phase-1 IKE Tunnel. (cikeTunIndex in the cikeTunnelTable)
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 1..2147483647  

cipSecTunIkeTunnelAlive 1.3.6.1.4.1.9.9.171.1.3.2.1.3
An indicator which specifies whether or not the IPsec Phase-1 IKE Tunnel currently exists.
Status: current Access: read-only
OBJECT-TYPE    
  TruthValue  

cipSecTunLocalAddr 1.3.6.1.4.1.9.9.171.1.3.2.1.4
The IP address of the local endpoint for the IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  IPSIpAddress  

cipSecTunRemoteAddr 1.3.6.1.4.1.9.9.171.1.3.2.1.5
The IP address of the remote endpoint for the IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  IPSIpAddress  

cipSecTunKeyType 1.3.6.1.4.1.9.9.171.1.3.2.1.6
The type of key used by the IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  KeyType  

cipSecTunEncapMode 1.3.6.1.4.1.9.9.171.1.3.2.1.7
The encapsulation mode used by the IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  EncapMode  

cipSecTunLifeSize 1.3.6.1.4.1.9.9.171.1.3.2.1.8
The negotiated LifeSize of the IPsec Phase-2 Tunnel in kilobytes.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 1..2147483647  

cipSecTunLifeTime 1.3.6.1.4.1.9.9.171.1.3.2.1.9
The negotiated LifeTime of the IPsec Phase-2 Tunnel in seconds.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 1..2147483647  

cipSecTunActiveTime 1.3.6.1.4.1.9.9.171.1.3.2.1.10
The length of time the IPsec Phase-2 Tunnel has been active in hundredths of seconds.
Status: current Access: read-only
OBJECT-TYPE    
  TimeInterval  

cipSecTunSaLifeSizeThreshold 1.3.6.1.4.1.9.9.171.1.3.2.1.11
The security association LifeSize refresh threshold in kilobytes.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 1..2147483647  

cipSecTunSaLifeTimeThreshold 1.3.6.1.4.1.9.9.171.1.3.2.1.12
The security association LifeTime refresh threshold in seconds.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 1..2147483647  

cipSecTunTotalRefreshes 1.3.6.1.4.1.9.9.171.1.3.2.1.13
The total number of security association refreshes performed.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunExpiredSaInstances 1.3.6.1.4.1.9.9.171.1.3.2.1.14
The total number of security associations which have expired.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunCurrentSaInstances 1.3.6.1.4.1.9.9.171.1.3.2.1.15
The number of security associations which are currently active or expiring.
Status: current Access: read-only
OBJECT-TYPE    
  Gauge32  

cipSecTunInSaDiffHellmanGrp 1.3.6.1.4.1.9.9.171.1.3.2.1.16
The Diffie Hellman Group used by the inbound security association of the IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  DiffHellmanGrp  

cipSecTunInSaEncryptAlgo 1.3.6.1.4.1.9.9.171.1.3.2.1.17
The encryption algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  EncryptAlgo  

cipSecTunInSaAhAuthAlgo 1.3.6.1.4.1.9.9.171.1.3.2.1.18
The authentication algorithm used by the inbound authentication header (AH) security association of the IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  AuthAlgo  

cipSecTunInSaEspAuthAlgo 1.3.6.1.4.1.9.9.171.1.3.2.1.19
The authentication algorithm used by the inbound encapsulation security protocol (ESP) security association of the IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  AuthAlgo  

cipSecTunInSaDecompAlgo 1.3.6.1.4.1.9.9.171.1.3.2.1.20
The decompression algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  CompAlgo  

cipSecTunOutSaDiffHellmanGrp 1.3.6.1.4.1.9.9.171.1.3.2.1.21
The Diffie Hellman Group used by the outbound security association of the IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  DiffHellmanGrp  

cipSecTunOutSaEncryptAlgo 1.3.6.1.4.1.9.9.171.1.3.2.1.22
The encryption algorithm used by the outbound security association of the IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  EncryptAlgo  

cipSecTunOutSaAhAuthAlgo 1.3.6.1.4.1.9.9.171.1.3.2.1.23
The authentication algorithm used by the outbound authentication header (AH) security association of the IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  AuthAlgo  

cipSecTunOutSaEspAuthAlgo 1.3.6.1.4.1.9.9.171.1.3.2.1.24
The authentication algorithm used by the inbound encapsulation security protocol (ESP) security association of the IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  AuthAlgo  

cipSecTunOutSaCompAlgo 1.3.6.1.4.1.9.9.171.1.3.2.1.25
The compression algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  CompAlgo  

cipSecTunInOctets 1.3.6.1.4.1.9.9.171.1.3.2.1.26
The total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed. See also cipSecTunInOctWraps for the number of times this counter has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunHcInOctets 1.3.6.1.4.1.9.9.171.1.3.2.1.27
A high capacity count of the total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

cipSecTunInOctWraps 1.3.6.1.4.1.9.9.171.1.3.2.1.28
The number of times the octets received counter (cipSecTunInOctets) has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunInDecompOctets 1.3.6.1.4.1.9.9.171.1.3.2.1.29
The total number of decompressed octets received by this IPsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of cipSecTunInOctets. See also cipSecTunInDecompOctWraps for the number of times this counter has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunHcInDecompOctets 1.3.6.1.4.1.9.9.171.1.3.2.1.30
A high capacity count of the total number of decompressed octets received by this IPsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of cipSecTunHcInOctets.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

cipSecTunInDecompOctWraps 1.3.6.1.4.1.9.9.171.1.3.2.1.31
The number of times the decompressed octets received counter (cipSecTunInDecompOctets) has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunInPkts 1.3.6.1.4.1.9.9.171.1.3.2.1.32
The total number of packets received by this IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunInDropPkts 1.3.6.1.4.1.9.9.171.1.3.2.1.33
The total number of packets dropped during receive processing by this IPsec Phase-2 Tunnel. This count does NOT include packets dropped due to Anti-Replay processing.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunInReplayDropPkts 1.3.6.1.4.1.9.9.171.1.3.2.1.34
The total number of packets dropped during receive processing due to Anti-Replay processing by this IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunInAuths 1.3.6.1.4.1.9.9.171.1.3.2.1.35
The total number of inbound authentication's performed by this IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunInAuthFails 1.3.6.1.4.1.9.9.171.1.3.2.1.36
The total number of inbound authentication's which ended in failure by this IPsec Phase-2 Tunnel .
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunInDecrypts 1.3.6.1.4.1.9.9.171.1.3.2.1.37
The total number of inbound decryption's performed by this IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunInDecryptFails 1.3.6.1.4.1.9.9.171.1.3.2.1.38
The total number of inbound decryption's which ended in failure by this IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunOutOctets 1.3.6.1.4.1.9.9.171.1.3.2.1.39
The total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed. See also cipSecTunOutOctWraps for the number of times this counter has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunHcOutOctets 1.3.6.1.4.1.9.9.171.1.3.2.1.40
A high capacity count of the total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

cipSecTunOutOctWraps 1.3.6.1.4.1.9.9.171.1.3.2.1.41
The number of times the out octets counter (cipSecTunOutOctets) has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunOutUncompOctets 1.3.6.1.4.1.9.9.171.1.3.2.1.42
The total number of uncompressed octets sent by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of cipSecTunOutOctets. See also cipSecTunOutDecompOctWraps for the number of times this counter has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunHcOutUncompOctets 1.3.6.1.4.1.9.9.171.1.3.2.1.43
A high capacity count of the total number of uncompressed octets sent by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of cipSecTunHcOutOctets.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

cipSecTunOutUncompOctWraps 1.3.6.1.4.1.9.9.171.1.3.2.1.44
The number of times the uncompressed octets sent counter (cipSecTunOutUncompOctets) has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunOutPkts 1.3.6.1.4.1.9.9.171.1.3.2.1.45
The total number of packets sent by this IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunOutDropPkts 1.3.6.1.4.1.9.9.171.1.3.2.1.46
The total number of packets dropped during send processing by this IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunOutAuths 1.3.6.1.4.1.9.9.171.1.3.2.1.47
The total number of outbound authentication's performed by this IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunOutAuthFails 1.3.6.1.4.1.9.9.171.1.3.2.1.48
The total number of outbound authentication's which ended in failure by this IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunOutEncrypts 1.3.6.1.4.1.9.9.171.1.3.2.1.49
The total number of outbound encryption's performed by this IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunOutEncryptFails 1.3.6.1.4.1.9.9.171.1.3.2.1.50
The total number of outbound encryption's which ended in failure by this IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunStatus 1.3.6.1.4.1.9.9.171.1.3.2.1.51
The status of the MIB table row. This object can be used to bring the tunnel down by setting value of this object to destroy(2). When the value is set to destroy(2), the SA bundle is destroyed and this row is deleted from this table. When this MIB value is queried, the value of active(1) is always returned, if the instance exists. This object cannot be used to create a MIB table row.
Status: current Access: read-write
OBJECT-TYPE    
  TunnelStatus  

cipSecEndPtTable 1.3.6.1.4.1.9.9.171.1.3.3
The IPsec Phase-2 Tunnel Endpoint Table. This table contains an entry for each active endpoint associated with an IPsec Phase-2 Tunnel.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    CipSecEndPtEntry

cipSecEndPtEntry 1.3.6.1.4.1.9.9.171.1.3.3.1
An IPsec Phase-2 Tunnel Endpoint entry.
Status: current Access: not-accessible
OBJECT-TYPE    
  CipSecEndPtEntry  

cipSecEndPtIndex 1.3.6.1.4.1.9.9.171.1.3.3.1.1
The number of the Endpoint associated with the IPsec Phase-2 Tunnel Table. The value of this index is a number which begins at one and is incremented with each Endpoint associated with an IPsec Phase-2 Tunnel. The value of this object will wrap at 2,147,483,647.
Status: current Access: not-accessible
OBJECT-TYPE    
  Integer32 1..2147483647  

cipSecEndPtLocalName 1.3.6.1.4.1.9.9.171.1.3.3.1.2
The DNS name of the local Endpoint.
Status: current Access: read-only
OBJECT-TYPE    
  DisplayString  

cipSecEndPtLocalType 1.3.6.1.4.1.9.9.171.1.3.3.1.3
The type of identity for the local Endpoint. Possible values are: 1) a single IP address, or 2) an IP address range, or 3) an IP subnet.
Status: current Access: read-only
OBJECT-TYPE    
  EndPtType  

cipSecEndPtLocalAddr1 1.3.6.1.4.1.9.9.171.1.3.3.1.4
The local Endpoint's first IP address specification. If the local Endpoint type is single IP address, then this is the value of the IP address. If the local Endpoint type is IP subnet, then this is the value of the subnet. If the local Endpoint type is IP address range, then this is the value of beginning IP address of the range.
Status: current Access: read-only
OBJECT-TYPE    
  IPSIpAddress  

cipSecEndPtLocalAddr2 1.3.6.1.4.1.9.9.171.1.3.3.1.5
The local Endpoint's second IP address specification. If the local Endpoint type is single IP address, then this is the value of the IP address. If the local Endpoint type is IP subnet, then this is the value of the subnet mask. If the local Endpoint type is IP address range, then this is the value of ending IP address of the range.
Status: current Access: read-only
OBJECT-TYPE    
  IPSIpAddress  

cipSecEndPtLocalProtocol 1.3.6.1.4.1.9.9.171.1.3.3.1.6
The protocol number of the local Endpoint's traffic.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 0..255  

cipSecEndPtLocalPort 1.3.6.1.4.1.9.9.171.1.3.3.1.7
The port number of the local Endpoint's traffic.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 0..65535  

cipSecEndPtRemoteName 1.3.6.1.4.1.9.9.171.1.3.3.1.8
The DNS name of the remote Endpoint.
Status: current Access: read-only
OBJECT-TYPE    
  DisplayString  

cipSecEndPtRemoteType 1.3.6.1.4.1.9.9.171.1.3.3.1.9
The type of identity for the remote Endpoint. Possible values are: 1) a single IP address, or 2) an IP address range, or 3) an IP subnet.
Status: current Access: read-only
OBJECT-TYPE    
  EndPtType  

cipSecEndPtRemoteAddr1 1.3.6.1.4.1.9.9.171.1.3.3.1.10
The remote Endpoint's first IP address specification. If the remote Endpoint type is single IP address, then this is the value of the IP address. If the remote Endpoint type is IP subnet, then this is the value of the subnet. If the remote Endpoint type is IP address range, then this is the value of beginning IP address of the range.
Status: current Access: read-only
OBJECT-TYPE    
  IPSIpAddress  

cipSecEndPtRemoteAddr2 1.3.6.1.4.1.9.9.171.1.3.3.1.11
The remote Endpoint's second IP address specification. If the remote Endpoint type is single IP address, then this is the value of the IP address. If the remote Endpoint type is IP subnet, then this is the value of the subnet mask. If the remote Endpoint type is IP address range, then this is the value of ending IP address of the range.
Status: current Access: read-only
OBJECT-TYPE    
  IPSIpAddress  

cipSecEndPtRemoteProtocol 1.3.6.1.4.1.9.9.171.1.3.3.1.12
The protocol number of the remote Endpoint's traffic.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 0..255  

cipSecEndPtRemotePort 1.3.6.1.4.1.9.9.171.1.3.3.1.13
The port number of the remote Endpoint's traffic.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 0..65535  

cipSecSpiTable 1.3.6.1.4.1.9.9.171.1.3.4
The IPsec Phase-2 Security Protection Index Table. This table contains an entry for each active and expiring security association.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    CipSecSpiEntry

cipSecSpiEntry 1.3.6.1.4.1.9.9.171.1.3.4.1
Each entry contains the attributes associated with active and expiring IPsec Phase-2 security associations.
Status: current Access: not-accessible
OBJECT-TYPE    
  CipSecSpiEntry  

cipSecSpiIndex 1.3.6.1.4.1.9.9.171.1.3.4.1.1
The number of the SPI associated with the Phase-2 Tunnel Table. The value of this index is a number which begins at one and is incremented with each SPI associated with an IPsec Phase-2 Tunnel. The value of this object will wrap at 2,147,483,647.
Status: current Access: not-accessible
OBJECT-TYPE    
  Integer32 1..2147483647  

cipSecSpiDirection 1.3.6.1.4.1.9.9.171.1.3.4.1.2
The direction of the SPI.
Status: current Access: read-only
OBJECT-TYPE    
  INTEGER in(1), out(2)  

cipSecSpiValue 1.3.6.1.4.1.9.9.171.1.3.4.1.3
The value of the SPI.
Status: current Access: read-only
OBJECT-TYPE    
  Unsigned32 1..4294967295  

cipSecSpiProtocol 1.3.6.1.4.1.9.9.171.1.3.4.1.4
The protocol of the SPI.
Status: current Access: read-only
OBJECT-TYPE    
  INTEGER ah(1), esp(2), ipcomp(3)  

cipSecSpiStatus 1.3.6.1.4.1.9.9.171.1.3.4.1.5
The status of the SPI.
Status: current Access: read-only
OBJECT-TYPE    
  INTEGER active(1), expiring(2)  

cipSecPhase2GWStatsTable 1.3.6.1.4.1.9.9.171.1.3.5
Phase-2 IPsec stats information is included in this table. Each entry is related to a specific gateway which is identified by 'cmgwIndex'
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    CipSecPhase2GWStatsEntry

cipSecPhase2GWStatsEntry 1.3.6.1.4.1.9.9.171.1.3.5.1
Each entry contains the attributes of an Phase-2 IPsec stats information for the related gateway. There is only one entry for each gateway. The entry is created when a gateway up and cannot be deleted.
Status: current Access: not-accessible
OBJECT-TYPE    
  CipSecPhase2GWStatsEntry  

cipSecPhase2GWActiveTunnels 1.3.6.1.4.1.9.9.171.1.3.5.1.1
The total number of currently active IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Gauge32  

cipSecPhase2GWPreviousTunnels 1.3.6.1.4.1.9.9.171.1.3.5.1.2
The total number of previously active IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecPhase2GWInOctets 1.3.6.1.4.1.9.9.171.1.3.5.1.3
The total number of octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE determining whether or not the packet should be decompressed. See also cipSecGlobalInOctWraps for the number of times this counter has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecPhase2GWInOctWraps 1.3.6.1.4.1.9.9.171.1.3.5.1.4
The number of times the global octets received counter (cipSecGlobalInOctets) has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecPhase2GWInDecompOctets 1.3.6.1.4.1.9.9.171.1.3.5.1.5
The total number of decompressed octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of cipSecGlobalInOctets. See also cipSecGlobalInDecompOctWraps for the number of times this counter has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecPhase2GWInDecompOctWraps 1.3.6.1.4.1.9.9.171.1.3.5.1.6
The number of times the global decompressed octets received counter (cipSecGlobalInDecompOctets) has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecPhase2GWInPkts 1.3.6.1.4.1.9.9.171.1.3.5.1.7
The total number of packets received by all current and previous IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecPhase2GWInDrops 1.3.6.1.4.1.9.9.171.1.3.5.1.8
The total number of packets dropped during receive processing by all current and previous IPsec Phase-2 Tunnels. This count does NOT include packets dropped due to Anti-Replay processing.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecPhase2GWInReplayDrops 1.3.6.1.4.1.9.9.171.1.3.5.1.9
The total number of packets dropped during receive processing due to Anti-Replay processing by all current and previous IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecPhase2GWInAuths 1.3.6.1.4.1.9.9.171.1.3.5.1.10
The total number of inbound authentication's performed by all current and previous IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecPhase2GWInAuthFails 1.3.6.1.4.1.9.9.171.1.3.5.1.11
The total number of inbound authentication's which ended in failure by all current and previous IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecPhase2GWInDecrypts 1.3.6.1.4.1.9.9.171.1.3.5.1.12
The total number of inbound decryption's performed by all current and previous IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecPhase2GWInDecryptFails 1.3.6.1.4.1.9.9.171.1.3.5.1.13
The total number of inbound decryption's which ended in failure by all current and previous IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecPhase2GWOutOctets 1.3.6.1.4.1.9.9.171.1.3.5.1.14
The total number of octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER determining whether or not the packet should be compressed. See also cipSecGlobalOutOctWraps for the number of times this counter has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecPhase2GWOutOctWraps 1.3.6.1.4.1.9.9.171.1.3.5.1.15
The number of times the global octets sent counter (cipSecGlobalOutOctets) has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecPhase2GWOutUncompOctets 1.3.6.1.4.1.9.9.171.1.3.5.1.16
The total number of uncompressed octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of cipSecGlobalOutOctets. See also cipSecGlobalOutDecompOctWraps for the number of times this counter has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecPhase2GWOutUncompOctWraps 1.3.6.1.4.1.9.9.171.1.3.5.1.17
The number of times the global uncompressed octets sent counter (cipSecGlobalOutUncompOctets) has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecPhase2GWOutPkts 1.3.6.1.4.1.9.9.171.1.3.5.1.18
The total number of packets sent by all current and previous IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecPhase2GWOutDrops 1.3.6.1.4.1.9.9.171.1.3.5.1.19
The total number of packets dropped during send processing by all current and previous IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecPhase2GWOutAuths 1.3.6.1.4.1.9.9.171.1.3.5.1.20
The total number of outbound authentication's performed by all current and previous IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecPhase2GWOutAuthFails 1.3.6.1.4.1.9.9.171.1.3.5.1.21
The total number of outbound authentication's which ended in failure by all current and previous IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecPhase2GWOutEncrypts 1.3.6.1.4.1.9.9.171.1.3.5.1.22
The total number of outbound encryption's performed by all current and previous IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecPhase2GWOutEncryptFails 1.3.6.1.4.1.9.9.171.1.3.5.1.23
The total number of outbound encryption's which ended in failure by all current and previous IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecPhase2GWProtocolUseFails 1.3.6.1.4.1.9.9.171.1.3.5.1.24
The total number of protocol use failures which occurred during processing of all current and previously active IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecPhase2GWNoSaFails 1.3.6.1.4.1.9.9.171.1.3.5.1.25
The total number of non-existent Security Association in failures which occurred during processing of all current and previous IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecPhase2GWSysCapFails 1.3.6.1.4.1.9.9.171.1.3.5.1.26
The total number of system capacity failures which occurred during processing of all current and previously active IPsec Phase-2 Tunnels.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecHistGlobal 1.3.6.1.4.1.9.9.171.1.4.1
OBJECT IDENTIFIER    

cipSecHistPhaseOne 1.3.6.1.4.1.9.9.171.1.4.2
OBJECT IDENTIFIER    

cipSecHistPhaseTwo 1.3.6.1.4.1.9.9.171.1.4.3
OBJECT IDENTIFIER    

cipSecHistGlobalCntl 1.3.6.1.4.1.9.9.171.1.4.1.1
OBJECT IDENTIFIER    

cipSecHistTableSize 1.3.6.1.4.1.9.9.171.1.4.1.1.1
The window size of the IPsec Phase-1 and Phase-2 History Tables. The IPsec Phase-1 and Phase-2 History Tables are implemented as a sliding window in which only the last n entries are maintained. This object is used specify the number of entries which will be maintained in the IPsec Phase-1 and Phase-2 History Tables. An implementation may choose suitable minimum and maximum values for this element based on the local policy and available resources. If an SNMP SET request specifies a value outside this window for this element, a BAD VALUE may be returned.
Status: current Access: read-write
OBJECT-TYPE    
  Integer32 1..2147483647  

cipSecHistCheckPoint 1.3.6.1.4.1.9.9.171.1.4.1.1.2
The current state of check point processing. This object will return ready when the agent is ready to create on-demand history entries for active IPsec Tunnels or checkPoint when the agent is currently creating on-demand history entries for active IPsec Tunnels. By setting this value to checkPoint, the agent will create: a) an entry in the IPsec Phase-1 Tunnel History for each active IPsec Phase-1 Tunnel and b) an entry in the IPsec Phase-2 Tunnel History Table and an entry in the IPsec Phase-2 Tunnel EndPoint History Table for each active IPsec Phase-2 Tunnel.
Status: current Access: read-write
OBJECT-TYPE    
  INTEGER ready(1), checkPoint(2)  

cikeTunnelHistTable 1.3.6.1.4.1.9.9.171.1.4.2.1
The IPsec Phase-1 Internet Key Exchange Tunnel History Table. This table is implemented as a sliding window in which only the last n entries are maintained. The maximum number of entries is specified by the cipSecHistTableSize object.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    CikeTunnelHistEntry

cikeTunnelHistEntry 1.3.6.1.4.1.9.9.171.1.4.2.1.1
Each entry contains the attributes associated with a previously active IPsec Phase-1 IKE Tunnel.
Status: current Access: not-accessible
OBJECT-TYPE    
  CikeTunnelHistEntry  

cikeTunHistIndex 1.3.6.1.4.1.9.9.171.1.4.2.1.1.1
The index of the IPsec Phase-1 IKE Tunnel History Table. The value of the index is a number which begins at one and is incremented with each tunnel that ends. The value of this object will wrap at 2,147,483,647.
Status: current Access: not-accessible
OBJECT-TYPE    
  Integer32 1..2147483647  

cikeTunHistTermReason 1.3.6.1.4.1.9.9.171.1.4.2.1.1.2
The reason the IPsec Phase-1 IKE Tunnel was terminated. Possible reasons include: 1 = other 2 = normal termination 3 = operator request 4 = peer delete request was received 5 = contact with peer was lost 6 = local failure occurred. 7 = operator initiated check point request
Status: current Access: read-only
OBJECT-TYPE    
  INTEGER other(1), normal(2), operRequest(3), peerDelRequest(4), peerLost(5), localFailure(6), checkPointReg(7)  

cikeTunHistActiveIndex 1.3.6.1.4.1.9.9.171.1.4.2.1.1.3
The index of the previously active IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 1..2147483647  

cikeTunHistPeerLocalType 1.3.6.1.4.1.9.9.171.1.4.2.1.1.4
The type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. a host name.
Status: current Access: read-only
OBJECT-TYPE    
  IkePeerType  

cikeTunHistPeerLocalValue 1.3.6.1.4.1.9.9.171.1.4.2.1.1.5
The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is a host name, then this is the host name used to identify the local peer.
Status: current Access: read-only
OBJECT-TYPE    
  DisplayString  

cikeTunHistPeerIntIndex 1.3.6.1.4.1.9.9.171.1.4.2.1.1.6
The internal index of the local-remote peer association. This internal index is used to uniquely identify multiple associations between the local and remote peer.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 1..2147483647  

cikeTunHistPeerRemoteType 1.3.6.1.4.1.9.9.171.1.4.2.1.1.7
The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. a host name.
Status: current Access: read-only
OBJECT-TYPE    
  IkePeerType  

cikeTunHistPeerRemoteValue 1.3.6.1.4.1.9.9.171.1.4.2.1.1.8
The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is a host name, then this is the host name used to identify the remote peer.
Status: current Access: read-only
OBJECT-TYPE    
  DisplayString  

cikeTunHistLocalAddr 1.3.6.1.4.1.9.9.171.1.4.2.1.1.9
The IP address of the local endpoint for the IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  IPSIpAddress  

cikeTunHistLocalName 1.3.6.1.4.1.9.9.171.1.4.2.1.1.10
The DNS name of the local IP address for the IPsec Phase-1 IKE Tunnel. If the DNS name associated with the local tunnel endpoint is not known, then the value of this object will be a NULL string.
Status: current Access: read-only
OBJECT-TYPE    
  DisplayString  

cikeTunHistRemoteAddr 1.3.6.1.4.1.9.9.171.1.4.2.1.1.11
The IP address of the remote endpoint for the IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  IPSIpAddress  

cikeTunHistRemoteName 1.3.6.1.4.1.9.9.171.1.4.2.1.1.12
The DNS name of the remote IP address of IPsec Phase-1 IKE Tunnel. If the DNS name associated with the remote tunnel endpoint is not known, then the value of this object will be a NULL string.
Status: current Access: read-only
OBJECT-TYPE    
  DisplayString  

cikeTunHistNegoMode 1.3.6.1.4.1.9.9.171.1.4.2.1.1.13
The negotiation mode of the IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  IkeNegoMode  

cikeTunHistDiffHellmanGrp 1.3.6.1.4.1.9.9.171.1.4.2.1.1.14
The Diffie Hellman Group used in IPsec Phase-1 IKE negotiations.
Status: current Access: read-only
OBJECT-TYPE    
  DiffHellmanGrp  

cikeTunHistEncryptAlgo 1.3.6.1.4.1.9.9.171.1.4.2.1.1.15
The encryption algorithm used in IPsec Phase-1 IKE negotiations.
Status: current Access: read-only
OBJECT-TYPE    
  EncryptAlgo  

cikeTunHistHashAlgo 1.3.6.1.4.1.9.9.171.1.4.2.1.1.16
The hash algorithm used in IPsec Phase-1 IKE negotiations.
Status: current Access: read-only
OBJECT-TYPE    
  IkeHashAlgo  

cikeTunHistAuthMethod 1.3.6.1.4.1.9.9.171.1.4.2.1.1.17
The authentication method used in IPsec Phase-1 IKE negotiations.
Status: current Access: read-only
OBJECT-TYPE    
  IkeAuthMethod  

cikeTunHistLifeTime 1.3.6.1.4.1.9.9.171.1.4.2.1.1.18
The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel in seconds.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 1..2147483647  

cikeTunHistStartTime 1.3.6.1.4.1.9.9.171.1.4.2.1.1.19
The value of sysUpTime in hundredths of seconds when the IPsec Phase-1 IKE tunnel was started.
Status: current Access: read-only
OBJECT-TYPE    
  TimeStamp  

cikeTunHistActiveTime 1.3.6.1.4.1.9.9.171.1.4.2.1.1.20
The length of time the IPsec Phase-1 IKE tunnel was been active in hundredths of seconds.
Status: current Access: read-only
OBJECT-TYPE    
  TimeInterval  

cikeTunHistTotalRefreshes 1.3.6.1.4.1.9.9.171.1.4.2.1.1.21
The total number of security associations refreshes performed.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunHistTotalSas 1.3.6.1.4.1.9.9.171.1.4.2.1.1.22
The total number of security associations used during the life of the IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunHistInOctets 1.3.6.1.4.1.9.9.171.1.4.2.1.1.23
The total number of octets received by this IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunHistInPkts 1.3.6.1.4.1.9.9.171.1.4.2.1.1.24
The total number of packets received by this IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunHistInDropPkts 1.3.6.1.4.1.9.9.171.1.4.2.1.1.25
The total number of packets dropped by this IPsec Phase-1 IKE Tunnel during receive processing.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunHistInNotifys 1.3.6.1.4.1.9.9.171.1.4.2.1.1.26
The total number of notifys received by this IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunHistInP2Exchgs 1.3.6.1.4.1.9.9.171.1.4.2.1.1.27
The total number of IPsec Phase-2 exchanges received by this IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunHistInP2ExchgInvalids 1.3.6.1.4.1.9.9.171.1.4.2.1.1.28
The total number of IPsec Phase-2 exchanges received and found to be invalid by this IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunHistInP2ExchgRejects 1.3.6.1.4.1.9.9.171.1.4.2.1.1.29
The total number of IPsec Phase-2 exchanges received and rejected by this IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunHistInP2SaDelRequests 1.3.6.1.4.1.9.9.171.1.4.2.1.1.30
The total number of IPsec Phase-2 security association delete requests received by this IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunHistOutOctets 1.3.6.1.4.1.9.9.171.1.4.2.1.1.31
The total number of octets sent by this IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunHistOutPkts 1.3.6.1.4.1.9.9.171.1.4.2.1.1.32
The total number of packets sent by this IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunHistOutDropPkts 1.3.6.1.4.1.9.9.171.1.4.2.1.1.33
The total number of packets dropped by this IPsec Phase-1 IKE Tunnel during send processing.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunHistOutNotifys 1.3.6.1.4.1.9.9.171.1.4.2.1.1.34
The total number of notifys sent by this IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunHistOutP2Exchgs 1.3.6.1.4.1.9.9.171.1.4.2.1.1.35
The total number of IPsec Phase-2 exchanges sent by this IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunHistOutP2ExchgInvalids 1.3.6.1.4.1.9.9.171.1.4.2.1.1.36
The total number of IPsec Phase-2 exchanges sent and found to be invalid by this IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunHistOutP2ExchgRejects 1.3.6.1.4.1.9.9.171.1.4.2.1.1.37
The total number of IPsec Phase-2 exchanges sent and rejected by this IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cikeTunHistOutP2SaDelRequests 1.3.6.1.4.1.9.9.171.1.4.2.1.1.38
The total number of IPsec Phase-2 security association delete requests sent by this IPsec Phase-1 IKE Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunnelHistTable 1.3.6.1.4.1.9.9.171.1.4.3.1
The IPsec Phase-2 Tunnel History Table. This table is implemented as a sliding window in which only the last n entries are maintained. The maximum number of entries is specified by the cipSecHistTableSize object.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    CipSecTunnelHistEntry

cipSecTunnelHistEntry 1.3.6.1.4.1.9.9.171.1.4.3.1.1
Each entry contains the attributes associated with a previously active IPsec Phase-2 Tunnel.
Status: current Access: not-accessible
OBJECT-TYPE    
  CipSecTunnelHistEntry  

cipSecTunHistIndex 1.3.6.1.4.1.9.9.171.1.4.3.1.1.1
The index of the IPsec Phase-2 Tunnel History Table. The value of the index is a number which begins at one and is incremented with each tunnel that ends. The value of this object will wrap at 2,147,483,647.
Status: current Access: not-accessible
OBJECT-TYPE    
  Integer32 1..2147483647  

cipSecTunHistTermReason 1.3.6.1.4.1.9.9.171.1.4.3.1.1.2
The reason the IPsec Phase-2 Tunnel was terminated. Possible reasons include: 1 = other 2 = normal termination 3 = operator request 4 = peer delete request was received 5 = contact with peer was lost 6 = local failure occurred 7 = operator initiated check point request
Status: current Access: read-only
OBJECT-TYPE    
  INTEGER other(1), normal(2), operRequest(3), peerDelRequest(4), peerLost(5), seqNumRollOver(6), checkPointReq(7)  

cipSecTunHistActiveIndex 1.3.6.1.4.1.9.9.171.1.4.3.1.1.3
The index of the previously active IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 1..2147483647  

cipSecTunHistIkeTunnelIndex 1.3.6.1.4.1.9.9.171.1.4.3.1.1.4
The index of the associated IPsec Phase-1 Tunnel (cikeTunIndex in the cikeTunnelTable).
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 1..2147483647  

cipSecTunHistLocalAddr 1.3.6.1.4.1.9.9.171.1.4.3.1.1.5
The IP address of the local endpoint for the IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  IPSIpAddress  

cipSecTunHistRemoteAddr 1.3.6.1.4.1.9.9.171.1.4.3.1.1.6
The IP address of the remote endpoint for the IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  IPSIpAddress  

cipSecTunHistKeyType 1.3.6.1.4.1.9.9.171.1.4.3.1.1.7
The type of key used by the IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  KeyType  

cipSecTunHistEncapMode 1.3.6.1.4.1.9.9.171.1.4.3.1.1.8
The encapsulation mode used by the IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  EncapMode  

cipSecTunHistLifeSize 1.3.6.1.4.1.9.9.171.1.4.3.1.1.9
The negotiated LifeSize of the IPsec Phase-2 Tunnel in kilobytes.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 1..2147483647  

cipSecTunHistLifeTime 1.3.6.1.4.1.9.9.171.1.4.3.1.1.10
The negotiated LifeTime of the IPsec Phase-2 Tunnel in seconds.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 1..2147483647  

cipSecTunHistStartTime 1.3.6.1.4.1.9.9.171.1.4.3.1.1.11
The value of sysUpTime in hundredths of seconds when the IPsec Phase-2 Tunnel was started.
Status: current Access: read-only
OBJECT-TYPE    
  TimeStamp  

cipSecTunHistActiveTime 1.3.6.1.4.1.9.9.171.1.4.3.1.1.12
The length of time the IPsec Phase-2 Tunnel has been active in hundredths of seconds.
Status: current Access: read-only
OBJECT-TYPE    
  TimeInterval  

cipSecTunHistTotalRefreshes 1.3.6.1.4.1.9.9.171.1.4.3.1.1.13
The total number of security association refreshes performed.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunHistTotalSas 1.3.6.1.4.1.9.9.171.1.4.3.1.1.14
The total number of security associations used during the life of the IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunHistInSaDiffHellmanGrp 1.3.6.1.4.1.9.9.171.1.4.3.1.1.15
The Diffie Hellman Group used by the inbound security association of the IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  DiffHellmanGrp  

cipSecTunHistInSaEncryptAlgo 1.3.6.1.4.1.9.9.171.1.4.3.1.1.16
The encryption algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  EncryptAlgo  

cipSecTunHistInSaAhAuthAlgo 1.3.6.1.4.1.9.9.171.1.4.3.1.1.17
The authentication algorithm used by the inbound authentication header (AH) security association of the IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  AuthAlgo  

cipSecTunHistInSaEspAuthAlgo 1.3.6.1.4.1.9.9.171.1.4.3.1.1.18
The authentication algorithm used by the inbound encapsulation security protocol (ESP) security association of the IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  AuthAlgo  

cipSecTunHistInSaDecompAlgo 1.3.6.1.4.1.9.9.171.1.4.3.1.1.19
The decompression algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  CompAlgo  

cipSecTunHistOutSaDiffHellmanGrp 1.3.6.1.4.1.9.9.171.1.4.3.1.1.20
The Diffie Hellman Group used by the outbound security association of the IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  DiffHellmanGrp  

cipSecTunHistOutSaEncryptAlgo 1.3.6.1.4.1.9.9.171.1.4.3.1.1.21
The encryption algorithm used by the outbound security association of the IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  EncryptAlgo  

cipSecTunHistOutSaAhAuthAlgo 1.3.6.1.4.1.9.9.171.1.4.3.1.1.22
The authentication algorithm used by the outbound authentication header (AH) security association of the IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  AuthAlgo  

cipSecTunHistOutSaEspAuthAlgo 1.3.6.1.4.1.9.9.171.1.4.3.1.1.23
The authentication algorithm used by the inbound encapsulation security protocol (ESP) security association of the IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  AuthAlgo  

cipSecTunHistOutSaCompAlgo 1.3.6.1.4.1.9.9.171.1.4.3.1.1.24
The compression algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  CompAlgo  

cipSecTunHistInOctets 1.3.6.1.4.1.9.9.171.1.4.3.1.1.25
The total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed. See also cipSecTunInOctWraps for the number of times this counter has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunHistHcInOctets 1.3.6.1.4.1.9.9.171.1.4.3.1.1.26
A high capacity count of the total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

cipSecTunHistInOctWraps 1.3.6.1.4.1.9.9.171.1.4.3.1.1.27
The number of times the octets received counter (cipSecTunInOctets) has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunHistInDecompOctets 1.3.6.1.4.1.9.9.171.1.4.3.1.1.28
The total number of decompressed octets received by this IPsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of cipSecTunHistInOctets. See also cipSecTunInDecompOctWraps for the number of times this counter has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunHistHcInDecompOctets 1.3.6.1.4.1.9.9.171.1.4.3.1.1.29
A high capacity count of the total number of decompressed octets received by this IPsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of cipSecTunHistHcInOctets.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

cipSecTunHistInDecompOctWraps 1.3.6.1.4.1.9.9.171.1.4.3.1.1.30
The number of times the decompressed octets received counter (cipSecTunInDecompOctets) has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunHistInPkts 1.3.6.1.4.1.9.9.171.1.4.3.1.1.31
The total number of packets received by this IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunHistInDropPkts 1.3.6.1.4.1.9.9.171.1.4.3.1.1.32
The total number of packets dropped during receive processing by this IPsec Phase-2 Tunnel. This count does NOT include packets dropped due to Anti-Replay processing.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunHistInReplayDropPkts 1.3.6.1.4.1.9.9.171.1.4.3.1.1.33
The total number of packets dropped during receive processing due to Anti-Replay processing by this IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunHistInAuths 1.3.6.1.4.1.9.9.171.1.4.3.1.1.34
The total number of inbound authentication's performed by this IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunHistInAuthFails 1.3.6.1.4.1.9.9.171.1.4.3.1.1.35
The total number of inbound authentication's which ended in failure by this IPsec Phase-2 Tunnel .
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunHistInDecrypts 1.3.6.1.4.1.9.9.171.1.4.3.1.1.36
The total number of inbound decryption's performed by this IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunHistInDecryptFails 1.3.6.1.4.1.9.9.171.1.4.3.1.1.37
The total number of inbound decryption's which ended in failure by this IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunHistOutOctets 1.3.6.1.4.1.9.9.171.1.4.3.1.1.38
The total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed. See also cipSecTunOutOctWraps for the number of times this counter has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunHistHcOutOctets 1.3.6.1.4.1.9.9.171.1.4.3.1.1.39
A high capacity count of the total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

cipSecTunHistOutOctWraps 1.3.6.1.4.1.9.9.171.1.4.3.1.1.40
The number of times the octets sent counter (cipSecTunOutOctets) has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunHistOutUncompOctets 1.3.6.1.4.1.9.9.171.1.4.3.1.1.41
The total number of uncompressed octets sent by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of cipSecTunHistOutOctets. See also cipSecTunOutDecompOctWraps for the number of times this counter has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunHistHcOutUncompOctets 1.3.6.1.4.1.9.9.171.1.4.3.1.1.42
A high capacity count of the total number of uncompressed octets sent by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of cipSecTunHistHcOutOctets.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

cipSecTunHistOutUncompOctWraps 1.3.6.1.4.1.9.9.171.1.4.3.1.1.43
The number of times the uncompressed octets sent counter (cipSecTunOutUncompOctets) has wrapped.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunHistOutPkts 1.3.6.1.4.1.9.9.171.1.4.3.1.1.44
The total number of packets sent by this IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunHistOutDropPkts 1.3.6.1.4.1.9.9.171.1.4.3.1.1.45
The total number of packets dropped during send processing by this IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunHistOutAuths 1.3.6.1.4.1.9.9.171.1.4.3.1.1.46
The total number of outbound authentication's performed by this IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunHistOutAuthFails 1.3.6.1.4.1.9.9.171.1.4.3.1.1.47
The total number of outbound authentication's which ended in failure by this IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunHistOutEncrypts 1.3.6.1.4.1.9.9.171.1.4.3.1.1.48
The total number of outbound encryption's performed by this IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecTunHistOutEncryptFails 1.3.6.1.4.1.9.9.171.1.4.3.1.1.49
The total number of outbound encryption's which ended in failure by this IPsec Phase-2 Tunnel.
Status: current Access: read-only
OBJECT-TYPE    
  Counter32  

cipSecEndPtHistTable 1.3.6.1.4.1.9.9.171.1.4.3.2
The IPsec Phase-2 Tunnel Endpoint History Table. This table is implemented as a sliding window in which only the last n entries are maintained. The maximum number of entries is specified by the cipSecHistTableSize object.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    CipSecEndPtHistEntry

cipSecEndPtHistEntry 1.3.6.1.4.1.9.9.171.1.4.3.2.1
Each entry contains the attributes associated with a previously active IPsec Phase-2 Tunnel Endpoint.
Status: current Access: not-accessible
OBJECT-TYPE    
  CipSecEndPtHistEntry  

cipSecEndPtHistIndex 1.3.6.1.4.1.9.9.171.1.4.3.2.1.1
The number of the previously active Endpoint associated with a IPsec Phase-2 Tunnel Table. The value of this index is a number which begins at one and is incremented with each Endpoint associated with an IPsec Phase-2 Tunnel. The value of this object will wrap at 2,147,483,647.
Status: current Access: not-accessible
OBJECT-TYPE    
  Integer32 1..2147483647  

cipSecEndPtHistTunIndex 1.3.6.1.4.1.9.9.171.1.4.3.2.1.2
The index of the previously active IPsec Phase-2 Tunnel Table.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 1..2147483647  

cipSecEndPtHistActiveIndex 1.3.6.1.4.1.9.9.171.1.4.3.2.1.3
The index of the previously active Endpoint.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 1..2147483647  

cipSecEndPtHistLocalName 1.3.6.1.4.1.9.9.171.1.4.3.2.1.4
The DNS name of the local Endpoint.
Status: current Access: read-only
OBJECT-TYPE    
  DisplayString  

cipSecEndPtHistLocalType 1.3.6.1.4.1.9.9.171.1.4.3.2.1.5
The type of identity for the local Endpoint. Possible values are: 1) a single IP address, or 2) an IP address range, or 3) an IP subnet.
Status: current Access: read-only
OBJECT-TYPE    
  EndPtType  

cipSecEndPtHistLocalAddr1 1.3.6.1.4.1.9.9.171.1.4.3.2.1.6
The local Endpoint's first IP address specification. If the local Endpoint type is single IP address, then this is the value of the IP address. If the local Endpoint type is IP subnet, then this is the value of the subnet. If the local Endpoint type is IP address range, then this is the value of beginning IP address of the range.
Status: current Access: read-only
OBJECT-TYPE    
  IPSIpAddress  

cipSecEndPtHistLocalAddr2 1.3.6.1.4.1.9.9.171.1.4.3.2.1.7
The local Endpoint's second IP address specification. If the local Endpoint type is single IP address, then this is the value of the IP address. If the local Endpoint type is IP subnet, then this is the value of the subnet mask. If the local Endpoint type is IP address range, then this is the value of ending IP address of the range.
Status: current Access: read-only
OBJECT-TYPE    
  IPSIpAddress  

cipSecEndPtHistLocalProtocol 1.3.6.1.4.1.9.9.171.1.4.3.2.1.8
The protocol number of the local Endpoint's traffic.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 0..255  

cipSecEndPtHistLocalPort 1.3.6.1.4.1.9.9.171.1.4.3.2.1.9
The port number of the local Endpoint's traffic.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 0..65535  

cipSecEndPtHistRemoteName 1.3.6.1.4.1.9.9.171.1.4.3.2.1.10
The DNS name of the remote Endpoint.
Status: current Access: read-only
OBJECT-TYPE    
  DisplayString  

cipSecEndPtHistRemoteType 1.3.6.1.4.1.9.9.171.1.4.3.2.1.11
The type of identity for the remote Endpoint. Possible values are: 1) a single IP address, or 2) an IP address range, or 3) an IP subnet.
Status: current Access: read-only
OBJECT-TYPE    
  EndPtType  

cipSecEndPtHistRemoteAddr1 1.3.6.1.4.1.9.9.171.1.4.3.2.1.12
The remote Endpoint's first IP address specification. If the remote Endpoint type is single IP address, then this is the value of the IP address. If the remote Endpoint type is IP subnet, then this is the value of the subnet. If the remote Endpoint type is IP address range, then this is the value of beginning IP address of the range.
Status: current Access: read-only
OBJECT-TYPE    
  IPSIpAddress  

cipSecEndPtHistRemoteAddr2 1.3.6.1.4.1.9.9.171.1.4.3.2.1.13
The remote Endpoint's second IP address specification. If the remote Endpoint type is single IP address, then this is the value of the IP address. If the remote Endpoint type is IP subnet, then this is the value of the subnet mask. If the remote Endpoint type is IP address range, then this is the value of ending IP address of the range.
Status: current Access: read-only
OBJECT-TYPE    
  IPSIpAddress  

cipSecEndPtHistRemoteProtocol 1.3.6.1.4.1.9.9.171.1.4.3.2.1.14
The protocol number of the remote Endpoint's traffic.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 0..255  

cipSecEndPtHistRemotePort 1.3.6.1.4.1.9.9.171.1.4.3.2.1.15
The port number of the remote Endpoint's traffic.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 0..65535  

cipSecFailGlobal 1.3.6.1.4.1.9.9.171.1.5.1
OBJECT IDENTIFIER    

cipSecFailPhaseOne 1.3.6.1.4.1.9.9.171.1.5.2
OBJECT IDENTIFIER    

cipSecFailPhaseTwo 1.3.6.1.4.1.9.9.171.1.5.3
OBJECT IDENTIFIER    

cipSecFailGlobalCntl 1.3.6.1.4.1.9.9.171.1.5.1.1
OBJECT IDENTIFIER    

cipSecFailTableSize 1.3.6.1.4.1.9.9.171.1.5.1.1.1
The window size of the IPsec Phase-1 and Phase-2 Failure Tables. The IPsec Phase-1 and Phase-2 Failure Tables are implemented as a sliding window in which only the last n entries are maintained. This object is used specify the number of entries which will be maintained in the IPsec Phase-1 and Phase-2 Failure Tables. An implementation may choose suitable minimum and maximum values for this element based on the local policy and available resources. If an SNMP SET request specifies a value outside this window for this element, a BAD VALUE may be returned.
Status: current Access: read-write
OBJECT-TYPE    
  Integer32 1..2147483647  

cikeFailTable 1.3.6.1.4.1.9.9.171.1.5.2.1
The IPsec Phase-1 Failure Table. This table is implemented as a sliding window in which only the last n entries are maintained. The maximum number of entries is specified by the cipSecFailTableSize object.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    CikeFailEntry

cikeFailEntry 1.3.6.1.4.1.9.9.171.1.5.2.1.1
Each entry contains the attributes associated with an IPsec Phase-1 failure.
Status: current Access: not-accessible
OBJECT-TYPE    
  CikeFailEntry  

cikeFailIndex 1.3.6.1.4.1.9.9.171.1.5.2.1.1.1
The IPsec Phase-1 Failure Table index. The value of the index is a number which begins at one and is incremented with each IPsec Phase-1 failure. The value of this object will wrap at 2,147,483,647.
Status: current Access: not-accessible
OBJECT-TYPE    
  Integer32 1..2147483647  

cikeFailReason 1.3.6.1.4.1.9.9.171.1.5.2.1.1.2
The reason for the failure. Possible reasons include: 1 = other 2 = peer delete request was received 3 = contact with peer was lost 4 = local failure occurred 5 = authentication failure 6 = hash validation failure 7 = encryption failure 8 = internal error occurred 9 = system capacity failure 10 = proposal failure 11 = peer's certificate is unavailable 12 = peer's certificate was found invalid 13 = local certificate expired 14 = certificate revoke list (crl) failure 15 = peer encoding error 16 = non-existent security association 17 = operator requested termination.
Status: current Access: read-only
OBJECT-TYPE    
  INTEGER other(1), peerDelRequest(2), peerLost(3), localFailure(4), authFailure(5), hashValidation(6), encryptFailure(7), internalError(8), sysCapExceeded(9), proposalFailure(10), peerCertUnavailable(11), peerCertNotValid(12), localCertExpired(13), crlFailure(14), peerEncodingError(15), nonExistentSa(16), operRequest(17)  

cikeFailTime 1.3.6.1.4.1.9.9.171.1.5.2.1.1.3
The value of sysUpTime in hundredths of seconds at the time of the failure.
Status: current Access: read-only
OBJECT-TYPE    
  TimeStamp  

cikeFailLocalType 1.3.6.1.4.1.9.9.171.1.5.2.1.1.4
The type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. a host name.
Status: current Access: read-only
OBJECT-TYPE    
  IkePeerType  

cikeFailLocalValue 1.3.6.1.4.1.9.9.171.1.5.2.1.1.5
The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is a host name, then this is the host name used to identify the local peer.
Status: current Access: read-only
OBJECT-TYPE    
  DisplayString  

cikeFailRemoteType 1.3.6.1.4.1.9.9.171.1.5.2.1.1.6
The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. a host name.
Status: current Access: read-only
OBJECT-TYPE    
  IkePeerType  

cikeFailRemoteValue 1.3.6.1.4.1.9.9.171.1.5.2.1.1.7
The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is a host name, then this is the host name used to identify the remote peer.
Status: current Access: read-only
OBJECT-TYPE    
  DisplayString  

cikeFailLocalAddr 1.3.6.1.4.1.9.9.171.1.5.2.1.1.8
The IP address of the local peer.
Status: current Access: read-only
OBJECT-TYPE    
  IPSIpAddress  

cikeFailRemoteAddr 1.3.6.1.4.1.9.9.171.1.5.2.1.1.9
The IP address of the remote peer.
Status: current Access: read-only
OBJECT-TYPE    
  IPSIpAddress  

cipSecFailTable 1.3.6.1.4.1.9.9.171.1.5.3.1
The IPsec Phase-2 Failure Table. This table is implemented as a sliding window in which only the last n entries are maintained. The maximum number of entries is specified by the cipSecFailTableSize object.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    CipSecFailEntry

cipSecFailEntry 1.3.6.1.4.1.9.9.171.1.5.3.1.1
Each entry contains the attributes associated with an IPsec Phase-1 failure.
Status: current Access: not-accessible
OBJECT-TYPE    
  CipSecFailEntry  

cipSecFailIndex 1.3.6.1.4.1.9.9.171.1.5.3.1.1.1
The IPsec Phase-2 Failure Table index. The value of the index is a number which begins at one and is incremented with each IPsec Phase-1 failure. The value of this object will wrap at 2,147,483,647.
Status: current Access: not-accessible
OBJECT-TYPE    
  Integer32 1..2147483647  

cipSecFailReason 1.3.6.1.4.1.9.9.171.1.5.3.1.1.2
The reason for the failure. Possible reasons include: 1 = other 2 = internal error occurred 3 = peer encoding error 4 = proposal failure 5 = protocol use failure 6 = non-existent security association 7 = decryption failure 8 = encryption failure 9 = inbound authentication failure 10 = outbound authentication failure 11 = compression failure 12 = system capacity failure 13 = peer delete request was received 14 = contact with peer was lost 15 = sequence number rolled over 16 = operator requested termination.
Status: current Access: read-only
OBJECT-TYPE    
  INTEGER other(1), internalError(2), peerEncodingError(3), proposalFailure(4), protocolUseFail(5), nonExistentSa(6), decryptFailure(7), encryptFailure(8), inAuthFailure(9), outAuthFailure(10), compression(11), sysCapExceeded(12), peerDelRequest(13), peerLost(14), seqNumRollOver(15), operRequest(16)  

cipSecFailTime 1.3.6.1.4.1.9.9.171.1.5.3.1.1.3
The value of sysUpTime in hundredths of seconds at the time of the failure.
Status: current Access: read-only
OBJECT-TYPE    
  TimeStamp  

cipSecFailTunnelIndex 1.3.6.1.4.1.9.9.171.1.5.3.1.1.4
The Phase-2 Tunnel index (cipSecTunIndex).
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 1..2147483647  

cipSecFailSaSpi 1.3.6.1.4.1.9.9.171.1.5.3.1.1.5
The security association SPI value.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 0..2147483647  

cipSecFailPktSrcAddr 1.3.6.1.4.1.9.9.171.1.5.3.1.1.6
The packet's source IP address.
Status: current Access: read-only
OBJECT-TYPE    
  IPSIpAddress  

cipSecFailPktDstAddr 1.3.6.1.4.1.9.9.171.1.5.3.1.1.7
The packet's destination IP address.
Status: current Access: read-only
OBJECT-TYPE    
  IPSIpAddress  

cipSecTrapCntlIkeTunnelStart 1.3.6.1.4.1.9.9.171.1.6.1
This object defines the administrative state of sending the IPsec IKE Phase-1 Tunnel Start TRAP
Status: current Access: read-write
OBJECT-TYPE    
  TrapStatus  

cipSecTrapCntlIkeTunnelStop 1.3.6.1.4.1.9.9.171.1.6.2
This object defines the administrative state of sending the IPsec IKE Phase-1 Tunnel Stop TRAP
Status: current Access: read-write
OBJECT-TYPE    
  TrapStatus  

cipSecTrapCntlIkeSysFailure 1.3.6.1.4.1.9.9.171.1.6.3
This object defines the administrative state of sending the IPsec IKE Phase-1 System Failure TRAP
Status: current Access: read-write
OBJECT-TYPE    
  TrapStatus  

cipSecTrapCntlIkeCertCrlFailure 1.3.6.1.4.1.9.9.171.1.6.4
This object defines the administrative state of sending the IPsec IKE Phase-1 Certificate/CRL Failure TRAP
Status: current Access: read-write
OBJECT-TYPE    
  TrapStatus  

cipSecTrapCntlIkeProtocolFail 1.3.6.1.4.1.9.9.171.1.6.5
This object defines the administrative state of sending the IPsec IKE Phase-1 Protocol Failure TRAP
Status: current Access: read-write
OBJECT-TYPE    
  TrapStatus  

cipSecTrapCntlIkeNoSa 1.3.6.1.4.1.9.9.171.1.6.6
This object defines the administrative state of sending the IPsec IKE Phase-1 No Security Association TRAP
Status: current Access: read-write
OBJECT-TYPE    
  TrapStatus  

cipSecTrapCntlIpSecTunnelStart 1.3.6.1.4.1.9.9.171.1.6.7
This object defines the administrative state of sending the IPsec Phase-2 Tunnel Start TRAP
Status: current Access: read-write
OBJECT-TYPE    
  TrapStatus  

cipSecTrapCntlIpSecTunnelStop 1.3.6.1.4.1.9.9.171.1.6.8
This object defines the administrative state of sending the IPsec Phase-2 Tunnel Stop TRAP
Status: current Access: read-write
OBJECT-TYPE    
  TrapStatus  

cipSecTrapCntlIpSecSysFailure 1.3.6.1.4.1.9.9.171.1.6.9
This object defines the administrative state of sending the IPsec Phase-2 System Failure TRAP
Status: current Access: read-write
OBJECT-TYPE    
  TrapStatus  

cipSecTrapCntlIpSecSetUpFailure 1.3.6.1.4.1.9.9.171.1.6.10
This object defines the administrative state of sending the IPsec Phase-2 Set Up Failure TRAP
Status: current Access: read-write
OBJECT-TYPE    
  TrapStatus  

cipSecTrapCntlIpSecEarlyTunTerm 1.3.6.1.4.1.9.9.171.1.6.11
This object defines the administrative state of sending the IPsec Phase-2 Early Tunnel Termination TRAP
Status: current Access: read-write
OBJECT-TYPE    
  TrapStatus  

cipSecTrapCntlIpSecProtocolFail 1.3.6.1.4.1.9.9.171.1.6.12
This object defines the administrative state of sending the IPsec Phase-2 Protocol Failure TRAP
Status: current Access: read-write
OBJECT-TYPE    
  TrapStatus  

cipSecTrapCntlIpSecNoSa 1.3.6.1.4.1.9.9.171.1.6.13
This object defines the administrative state of sending the IPsec Phase-2 No Security Association TRAP
Status: current Access: read-write
OBJECT-TYPE    
  TrapStatus  

cipSecMIBNotificationPrefix 1.3.6.1.4.1.9.9.171.2
OBJECT IDENTIFIER    

cipSecMIBNotifications 1.3.6.1.4.1.9.9.171.2.0
OBJECT IDENTIFIER    

cikeTunnelStart 1.3.6.1.4.1.9.9.171.2.0.1
This notification is generated when an IPsec Phase-1 IKE Tunnel becomes active.
Status: current Access: read-write
NOTIFICATION-TYPE    

cikeTunnelStop 1.3.6.1.4.1.9.9.171.2.0.2
This notification is generated when an IPsec Phase-1 IKE Tunnel becomes inactive.
Status: current Access: read-write
NOTIFICATION-TYPE    

cikeSysFailure 1.3.6.1.4.1.9.9.171.2.0.3
This notification is generated when the processing for an IPsec Phase-1 IKE Tunnel experiences an internal or system capacity error.
Status: current Access: read-write
NOTIFICATION-TYPE    

cikeCertCrlFailure 1.3.6.1.4.1.9.9.171.2.0.4
This notification is generated when the processing for an IPsec Phase-1 IKE Tunnel experiences a Certificate or a Certificate Revoke List (CRL) related error.
Status: current Access: read-write
NOTIFICATION-TYPE    

cikeProtocolFailure 1.3.6.1.4.1.9.9.171.2.0.5
This notification is generated when the processing for an IPsec Phase-1 IKE Tunnel experiences a protocol related error.
Status: current Access: read-write
NOTIFICATION-TYPE    

cikeNoSa 1.3.6.1.4.1.9.9.171.2.0.6
This notification is generated when the processing for an IPsec Phase-1 IKE Tunnel experiences a non-existent security association error.
Status: current Access: read-write
NOTIFICATION-TYPE    

cipSecTunnelStart 1.3.6.1.4.1.9.9.171.2.0.7
This notification is generated when an IPsec Phase-2 Tunnel becomes active.
Status: current Access: read-write
NOTIFICATION-TYPE    

cipSecTunnelStop 1.3.6.1.4.1.9.9.171.2.0.8
This notification is generated when an IPsec Phase-2 Tunnel becomes inactive.
Status: current Access: read-write
NOTIFICATION-TYPE    

cipSecSysFailure 1.3.6.1.4.1.9.9.171.2.0.9
This notification is generated when the processing for an IPsec Phase-2 Tunnel experiences an internal or system capacity error.
Status: current Access: read-write
NOTIFICATION-TYPE    

cipSecSetUpFailure 1.3.6.1.4.1.9.9.171.2.0.10
This notification is generated when the setup for an IPsec Phase-2 Tunnel fails.
Status: current Access: read-write
NOTIFICATION-TYPE    

cipSecEarlyTunTerm 1.3.6.1.4.1.9.9.171.2.0.11
This notification is generated when an an IPsec Phase-2 Tunnel is terminated earily or before expected.
Status: current Access: read-write
NOTIFICATION-TYPE    

cipSecProtocolFailure 1.3.6.1.4.1.9.9.171.2.0.12
This notification is generated when the processing for an IPsec Phase-2 Tunnel experiences a protocol related error.
Status: current Access: read-write
NOTIFICATION-TYPE    

cipSecNoSa 1.3.6.1.4.1.9.9.171.2.0.13
This notification is generated when the processing for an IPsec Phase-2 Tunnel experiences a non-existent security association error.
Status: current Access: read-write
NOTIFICATION-TYPE    

cipSecMIBConformance 1.3.6.1.4.1.9.9.171.3
OBJECT IDENTIFIER    

cipSecMIBGroups 1.3.6.1.4.1.9.9.171.3.1
OBJECT IDENTIFIER    

cipSecMIBCompliances 1.3.6.1.4.1.9.9.171.3.2
OBJECT IDENTIFIER    

cipSecMIBCompliance 1.3.6.1.4.1.9.9.171.3.2.1
The compliance statement for SNMP entities the IP Security Protocol. This has been replaced by cipSecMIBComplianceRev1.
Status: deprecated Access: read-only
MODULE-COMPLIANCE    

cipSecMIBComplianceRev1 1.3.6.1.4.1.9.9.171.3.2.2
The compliance statement for SNMP entities the IP Security Protocol.
Status: current Access: read-only
MODULE-COMPLIANCE    

cipSecLevelsGroup 1.3.6.1.4.1.9.9.171.3.1.1
This group consists of a: 1) IPsec MIB Level
Status: current Access: read-only
OBJECT-GROUP    

cipSecPhaseOneGroup 1.3.6.1.4.1.9.9.171.3.1.2
This group consists of: 1) IPsec Phase-1 Global Objects 2) IPsec Phase-1 Peer Table 3) IPsec Phase-1 Tunnel Table 4) IPsec Phase-1 Correlation Table
Status: current Access: read-only
OBJECT-GROUP    

cipSecPhaseTwoGroup 1.3.6.1.4.1.9.9.171.3.1.3
This group consists of: 1) IPsec Phase-2 Global Statistics 2) IPsec Phase-2 Tunnel Table 3) IPsec Phase-2 Endpoint Table 4) IPsec Phase-2 Security Protection Index Table
Status: current Access: read-only
OBJECT-GROUP    

cipSecHistoryGroup 1.3.6.1.4.1.9.9.171.3.1.4
This group consists of: 1) IPsec History Global Objects 2) IPsec Phase-1 History Objects 3) IPsec Phase-2 History Objects
Status: current Access: read-only
OBJECT-GROUP    

cipSecFailuresGroup 1.3.6.1.4.1.9.9.171.3.1.5
This group consists of: 1) IPsec Failure Global Objects 2) IPsec Phase-1 Tunnel Failure Table 3) IPsec Phase-2 Tunnel Failure Table
Status: current Access: read-only
OBJECT-GROUP    

cipSecTrapCntlGroup 1.3.6.1.4.1.9.9.171.3.1.6
This group of objects controls the sending of IPsec TRAPs.
Status: current Access: read-only
OBJECT-GROUP    

cipSecNotificationGroup 1.3.6.1.4.1.9.9.171.3.1.7
This group contains the notifications for the IPsec MIB.
Status: current Access: read-only
NOTIFICATION-GROUP    

cipSecGWStatsGroup 1.3.6.1.4.1.9.9.171.3.1.8
Tok_String
Status: current Access: read-only
OBJECT-GROUP