Graham McIntire
b4f8b40b7f
- Remove PVC volume mount from k8s/deployment.yaml - Delete k8s/mib-pvc.yaml (no longer needed) - Update .gitignore to commit MIB files to git - Add mix import_mibs task to copy MIBs from LibreNMS - Add all MIB files from priv/mibs/ to git This fixes the multi-attach volume error in Kubernetes where new pods couldn't start because the RWO (ReadWriteOnce) PVC was attached to the old pod. MIBs are now part of the Docker image and can be used by all pods simultaneously.
1831 lines
61 KiB
Text
1831 lines
61 KiB
Text
WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
|
|
|
|
IMPORTS
|
|
MODULE-IDENTITY, OBJECT-TYPE, Counter32, Gauge32,
|
|
Integer32, Integer32, NOTIFICATION-TYPE,
|
|
OBJECT-IDENTITY, enterprises
|
|
FROM SNMPv2-SMI
|
|
TEXTUAL-CONVENTION, TruthValue
|
|
FROM SNMPv2-TC
|
|
ifIndex FROM RFC1213-MIB
|
|
IpsecDoiIdentType,
|
|
IpsecDoiEncapsulationMode,
|
|
IpsecDoiEspTransform,
|
|
IpsecDoiAhTransform,
|
|
IpsecDoiAuthAlgorithm,
|
|
IpsecDoiIpcompTransform,
|
|
IpsecDoiSecProtocolId
|
|
FROM IPSEC-ISAKMP-IKE-DOI-TC
|
|
watchguard
|
|
FROM WATCHGUARD-SMI;
|
|
|
|
wgIpsecSaMonModule MODULE-IDENTITY
|
|
LAST-UPDATED "200701251200Z"
|
|
ORGANIZATION "WatchGuard Technologies, Inc."
|
|
CONTACT-INFO
|
|
" WatchGuard Technologies, Inc.
|
|
505 Fifth Avenue South
|
|
Suite 500
|
|
Seattle, WA 98104
|
|
United States
|
|
|
|
+1.206.613.6600 "
|
|
|
|
DESCRIPTION
|
|
"The MIB module describes generic IPSec objects
|
|
defined in IETF working draft
|
|
'draft-ieft-ipsec-monitor-mib-01' and WatchGuard's
|
|
extension."
|
|
REVISION "200701251200Z"
|
|
DESCRIPTION
|
|
"Initial revision."
|
|
::= { watchguard 3 }
|
|
|
|
IpsecSaCreatorIdent ::= TEXTUAL-CONVENTION
|
|
DISPLAY-HINT "d"
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A value indicating how an SA was created."
|
|
SYNTAX INTEGER {
|
|
unknown(0),
|
|
static(1), -- statically created
|
|
ike(2), -- IKE
|
|
other(3)
|
|
}
|
|
|
|
IpsecIpv6Address ::= TEXTUAL-CONVENTION
|
|
DISPLAY-HINT "2x:2x:2x:2x:2x:2x:1d.1d.1d.1d"
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This data type is used to model IPv6 address prefixes. This
|
|
is a binary string of 16 octets in network byte-order."
|
|
SYNTAX OCTET STRING (SIZE (16))
|
|
|
|
wgIpsecSaMonitorMIB OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This is the base object identifier for all IPSec branches."
|
|
::= { wgIpsecSaMonModule 1 }
|
|
|
|
-- significant branches
|
|
|
|
wgSaTables OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This is the base object identifier for all SA tables."
|
|
::= { wgIpsecSaMonitorMIB 1 }
|
|
|
|
wgSaStatistics OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This is the base object identifier for all objects which
|
|
are global counters for IPSec security associations."
|
|
::= { wgIpsecSaMonitorMIB 2 }
|
|
|
|
wgSaErrors OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This is the base object identifier for all objects which
|
|
are global error counters for IPSec security associations."
|
|
::= { wgIpsecSaMonitorMIB 3 }
|
|
|
|
-- the IPSec Inbound ESP MIB-Group
|
|
--
|
|
-- a collection of objects providing information about
|
|
-- IPSec Inbound ESP SAs
|
|
|
|
wgIpsecSaEspInTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF WGIpsecSaEspInEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The (conceptual) table containing information on IPSec
|
|
inbound ESP SAs.
|
|
|
|
There should be one row for every inbound ESP security
|
|
association that exists in the entity. The maximum number of
|
|
rows is implementation dependent."
|
|
::= { wgSaTables 1 }
|
|
|
|
wgIpsecSaEspInEntry OBJECT-TYPE
|
|
SYNTAX WGIpsecSaEspInEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An entry (conceptual row) containing the information on a
|
|
particular IPSec inbound ESP SA.
|
|
|
|
A row in this table cannot be created or deleted by SNMP
|
|
operations on columns of the table."
|
|
INDEX{ wgIpsecSaEspInAddress, wgIpsecSaEspInSpi }
|
|
::= { wgIpsecSaEspInTable 1 }
|
|
|
|
WGIpsecSaEspInEntry ::= SEQUENCE {
|
|
|
|
wgIpsecSaEspInAddress IpAddress,
|
|
wgIpsecSaEspInSpi Unsigned32,
|
|
|
|
wgIpsecSaEspInDestId OCTET STRING,
|
|
wgIpsecSaEspInDestIdType IpsecDoiIdentType,
|
|
wgIpsecSaEspInSourceId OCTET STRING,
|
|
wgIpsecSaEspInSourceIdType IpsecDoiIdentType,
|
|
wgIpsecSaEspInProtocol Integer32,
|
|
wgIpsecSaEspInDestPort Integer32,
|
|
wgIpsecSaEspInSourcePort Integer32,
|
|
|
|
wgIpsecSaEspInCreator IpsecSaCreatorIdent,
|
|
|
|
wgIpsecSaEspInEncapsulation IpsecDoiEncapsulationMode,
|
|
wgIpsecSaEspInEncAlg IpsecDoiEspTransform,
|
|
wgIpsecSaEspInEncKeyLength Integer32,
|
|
wgIpsecSaEspInAuthAlg IpsecDoiAuthAlgorithm,
|
|
|
|
wgIpsecSaEspInLimitSeconds Integer32,
|
|
wgIpsecSaEspInLimitKbytes Integer32,
|
|
|
|
wgIpsecSaEspInAccSeconds Counter32,
|
|
wgIpsecSaEspInAccKbytes Counter32,
|
|
wgIpsecSaEspInUserOctets Counter32,
|
|
wgIpsecSaEspInPackets Counter32,
|
|
|
|
wgIpsecSaEspInDecryptErrors Counter32,
|
|
wgIpsecSaEspInAuthErrors Counter32,
|
|
wgIpsecSaEspInReplayErrors Counter32,
|
|
wgIpsecSaEspInPolicyErrors Counter32,
|
|
wgIpsecSaEspInPadErrors Counter32,
|
|
wgIpsecSaEspInOtherReceiveErrors Counter32
|
|
|
|
|
|
}
|
|
|
|
wgIpsecSaEspInAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The destination address of the SA.
|
|
|
|
For implementations that do not support IPv6, this address
|
|
should appear as one of the IPv4-mapped IPv6 addresses as
|
|
defined in Section 2.5.4 of [IPV6AA].
|
|
|
|
Specifically, the prefix '0000:0000:0000:0000:0000:FFFF:' is
|
|
used for IPv4 only nodes, while the prefix
|
|
'0000:0000:0000:0000:0000:0000:' is used for bi-lingual
|
|
nodes."
|
|
::= { wgIpsecSaEspInEntry 1 }
|
|
|
|
wgIpsecSaEspInSpi OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The security parameters index of the SA."
|
|
REFERENCE "RFC 2406 Section 2.1"
|
|
::= { wgIpsecSaEspInEntry 2 }
|
|
|
|
wgIpsecSaEspInDestId OBJECT-TYPE
|
|
SYNTAX OCTET STRING (SIZE (1..255))
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The destination identifier of the SA, or 0 if unknown or if
|
|
the SA uses transport mode encapsulation.
|
|
|
|
This value is taken directly from the optional ID payloads
|
|
that are exchanged during SA creation negotiation."
|
|
::= { wgIpsecSaEspInEntry 3 }
|
|
|
|
wgIpsecSaEspInDestIdType OBJECT-TYPE
|
|
SYNTAX IpsecDoiIdentType
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of identifier presented by 'wgIpsecSaEspInDestId',
|
|
or 0 if unknown or if the SA uses transport mode
|
|
encapsulation."
|
|
::= { wgIpsecSaEspInEntry 4 }
|
|
|
|
wgIpsecSaEspInSourceId OBJECT-TYPE
|
|
SYNTAX OCTET STRING (SIZE (1..255))
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The source identifier of the SA, or 0 if unknown or if the
|
|
SA uses transport mode encapsulation.
|
|
|
|
This value is taken directly from the optional ID payloads
|
|
that are exchange during SA creation negotiation."
|
|
::= { wgIpsecSaEspInEntry 5 }
|
|
|
|
wgIpsecSaEspInSourceIdType OBJECT-TYPE
|
|
SYNTAX IpsecDoiIdentType
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of identifier presented by 'wgIpsecSaEspInSourceId',
|
|
or 0 if unknown or if the SA uses transport mode
|
|
encapsulation."
|
|
::= { wgIpsecSaEspInEntry 6 }
|
|
|
|
wgIpsecSaEspInProtocol OBJECT-TYPE
|
|
SYNTAX Integer32 (0..255)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The transport-layer protocol number that this SA carries,
|
|
or 0 if it carries any protocol."
|
|
REFERENCE "RFC2401 section 4.4.2"
|
|
::= { wgIpsecSaEspInEntry 7 }
|
|
|
|
wgIpsecSaEspInDestPort OBJECT-TYPE
|
|
SYNTAX Integer32 (0.. 65535)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The destination port number of the protocol that this SA
|
|
carries, or 0 if it carries any port number."
|
|
REFERENCE "RFC2401 section 4.4.2"
|
|
::= { wgIpsecSaEspInEntry 8 }
|
|
|
|
wgIpsecSaEspInSourcePort OBJECT-TYPE
|
|
SYNTAX Integer32 (0.. 65535)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The source port number of the protocol that this SA
|
|
carries, or 0 if it carries any port number."
|
|
REFERENCE "RFC2401 section 4.4.2"
|
|
::= { wgIpsecSaEspInEntry 9 }
|
|
|
|
wgIpsecSaEspInCreator OBJECT-TYPE
|
|
SYNTAX IpsecSaCreatorIdent
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The creator of this SA.
|
|
|
|
This MIB makes no assumptions about how the SAs are created.
|
|
They may be created statically, or by a key exchange
|
|
protocol such as IKE, or by some other method."
|
|
::= { wgIpsecSaEspInEntry 10 }
|
|
|
|
wgIpsecSaEspInEncapsulation OBJECT-TYPE
|
|
SYNTAX IpsecDoiEncapsulationMode
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of encapsulation used by this SA."
|
|
::= { wgIpsecSaEspInEntry 11 }
|
|
|
|
wgIpsecSaEspInEncAlg OBJECT-TYPE
|
|
SYNTAX IpsecDoiEspTransform
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A unique value representing the encryption algorithm
|
|
applied to traffic or 0 if there is no encryption used."
|
|
::= { wgIpsecSaEspInEntry 12 }
|
|
|
|
wgIpsecSaEspInEncKeyLength OBJECT-TYPE
|
|
SYNTAX Integer32 (0..65531)
|
|
UNITS "bits"
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The length of the encryption key in bits used for the
|
|
algorithm specified in the 'wgIpsecSaEspInEncAlg' object, or 0
|
|
if the key length is implicit in the specified algorithm or
|
|
there is no encryption specified."
|
|
::= { wgIpsecSaEspInEntry 13 }
|
|
|
|
wgIpsecSaEspInAuthAlg OBJECT-TYPE
|
|
SYNTAX IpsecDoiAuthAlgorithm
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A unique value representing the hash algorithm applied to
|
|
traffic or 0 if there is no authentication used."
|
|
::= { wgIpsecSaEspInEntry 14 }
|
|
|
|
wgIpsecSaEspInLimitSeconds OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
UNITS "seconds"
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The maximum lifetime in seconds of the SA, or 0 if there is
|
|
no time constraint on its expiration.
|
|
The display value is limited to 4294967295 seconds (more
|
|
than 136 years); values greater than that value will be
|
|
truncated."
|
|
::= { wgIpsecSaEspInEntry 15 }
|
|
|
|
wgIpsecSaEspInLimitKbytes OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
UNITS "kilobytes"
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The maximum traffic in kilobytes that the SA is allowed to
|
|
support, or 0 if there is no traffic constraint on its
|
|
expiration.
|
|
|
|
The display value is limited to 4294967295 kilobytes; values
|
|
greater than that value will be truncated."
|
|
::= { wgIpsecSaEspInEntry 16 }
|
|
|
|
wgIpsecSaEspInAccSeconds OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
UNITS "seconds"
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of seconds accumulated against the SA's
|
|
expiration by time.
|
|
|
|
This is also the number of seconds that the SA has existed."
|
|
::= { wgIpsecSaEspInEntry 17 }
|
|
|
|
wgIpsecSaEspInAccKbytes OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
UNITS "kilobytes"
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The amount of traffic accumulated that counts against the
|
|
SA's expiration by traffic limitation, measured in Kbytes.
|
|
|
|
This value may be 0 if the SA does not expire based on
|
|
traffic."
|
|
::= { wgIpsecSaEspInEntry 18 }
|
|
|
|
wgIpsecSaEspInUserOctets OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
UNITS "bytes"
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The amount of user level traffic measured in bytes handled
|
|
by the SA.
|
|
|
|
This is not necessarily the same as the amount of traffic
|
|
applied against the traffic expiration limit."
|
|
::= { wgIpsecSaEspInEntry 19 }
|
|
|
|
wgIpsecSaEspInPackets OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of packets handled by the SA."
|
|
::= { wgIpsecSaEspInEntry 20 }
|
|
|
|
wgIpsecSaEspInDecryptErrors OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaEspInEntry 21 }
|
|
|
|
wgIpsecSaEspInAuthErrors OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of packets discarded by the SA due to
|
|
authentication errors."
|
|
::= { wgIpsecSaEspInEntry 22 }
|
|
|
|
wgIpsecSaEspInReplayErrors OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of packets discarded by the SA due to replay
|
|
errors."
|
|
::= { wgIpsecSaEspInEntry 23 }
|
|
|
|
wgIpsecSaEspInPolicyErrors OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaEspInEntry 24 }
|
|
|
|
wgIpsecSaEspInPadErrors OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaEspInEntry 25 }
|
|
|
|
wgIpsecSaEspInOtherReceiveErrors OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaEspInEntry 26 }
|
|
|
|
-- the IPSec Inbound AH MIB-Group
|
|
--
|
|
-- a collection of objects providing information about
|
|
-- IPSec Inbound AH SAs
|
|
|
|
wgIpsecSaAhInTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF WGIpsecSaAhInEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The (conceptual) table containing information on IPSec
|
|
inbound AH SAs.
|
|
There should be one row for every inbound AH security
|
|
association that exists in the entity. The maximum number of
|
|
rows is implementation dependent."
|
|
::= { wgSaTables 2 }
|
|
|
|
wgIpsecSaAhInEntry OBJECT-TYPE
|
|
SYNTAX WGIpsecSaAhInEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An entry (conceptual row) containing the information on a
|
|
particular IPSec inbound AH SA.
|
|
|
|
A row in this table cannot be created or deleted by SNMP
|
|
operations on columns of the table."
|
|
INDEX{ wgIpsecSaAhInAddress, wgIpsecSaAhInSpi }
|
|
::= { wgIpsecSaAhInTable 1 }
|
|
|
|
WGIpsecSaAhInEntry ::= SEQUENCE {
|
|
|
|
wgIpsecSaAhInAddress IpAddress,
|
|
wgIpsecSaAhInSpi Integer32,
|
|
|
|
wgIpsecSaAhInDestId OCTET STRING,
|
|
wgIpsecSaAhInDestIdType IpsecDoiIdentType,
|
|
wgIpsecSaAhInSourceId OCTET STRING,
|
|
wgIpsecSaAhInSourceIdType IpsecDoiIdentType,
|
|
wgIpsecSaAhInProtocol Integer32,
|
|
wgIpsecSaAhInDestPort Integer32,
|
|
wgIpsecSaAhInSourcePort Integer32,
|
|
|
|
wgIpsecSaAhInCreator IpsecSaCreatorIdent,
|
|
|
|
wgIpsecSaAhInEncapsulation IpsecDoiEncapsulationMode,
|
|
wgIpsecSaAhInAuthAlg IpsecDoiAhTransform,
|
|
|
|
wgIpsecSaAhInLimitSeconds Integer32,
|
|
wgIpsecSaAhInLimitKbytes Integer32,
|
|
|
|
wgIpsecSaAhInAccSeconds Counter32,
|
|
wgIpsecSaAhInAccKbytes Counter32,
|
|
wgIpsecSaAhInUserOctets Counter32,
|
|
wgIpsecSaAhInPackets Counter32,
|
|
|
|
-- error statistics
|
|
wgIpsecSaAhInAuthErrors Counter32,
|
|
wgIpsecSaAhInReplayErrors Counter32,
|
|
wgIpsecSaAhInPolicyErrors Counter32,
|
|
wgIpsecSaAhInOtherReceiveErrors Counter32
|
|
}
|
|
|
|
wgIpsecSaAhInAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The destination address of the SA.
|
|
|
|
For implementations that do not support IPv6, this address
|
|
should appear as one of the IPv4-mapped IPv6 addresses as
|
|
defined in Section 2.5.4 of [IPV6AA].
|
|
|
|
Specifically, the prefix '0000:0000:0000:0000:0000:FFFF:' is
|
|
used for IPv4 only nodes, while the prefix
|
|
'0000:0000:0000:0000:0000:0000:' is used for bi-lingual
|
|
nodes."
|
|
::= { wgIpsecSaAhInEntry 1 }
|
|
|
|
wgIpsecSaAhInSpi OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The security parameters index of the SA."
|
|
REFERENCE "RFC 2402 Section 2.4"
|
|
::= { wgIpsecSaAhInEntry 2 }
|
|
|
|
wgIpsecSaAhInDestId OBJECT-TYPE
|
|
SYNTAX OCTET STRING (SIZE (1..255))
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The destination identifier of the SA, or 0 if unknown or if
|
|
the SA uses transport mode encapsulation.
|
|
|
|
This value is taken directly from the optional ID payloads
|
|
that are exchange during SA creation negotiation."
|
|
::= { wgIpsecSaAhInEntry 3 }
|
|
|
|
wgIpsecSaAhInDestIdType OBJECT-TYPE
|
|
SYNTAX IpsecDoiIdentType
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of identifier presented by 'wgIpsecSaAhInDestId', or
|
|
0 if unknown or if the SA uses transport mode
|
|
encapsulation."
|
|
::= { wgIpsecSaAhInEntry 4 }
|
|
|
|
wgIpsecSaAhInSourceId OBJECT-TYPE
|
|
SYNTAX OCTET STRING (SIZE (1..255))
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The source identifier of the SA, or 0 if unknown or if the
|
|
SA uses transport mode encapsulation.
|
|
|
|
This value is taken directly from the optional ID payloads
|
|
that are exchange during SA creation negotiation."
|
|
::= { wgIpsecSaAhInEntry 5 }
|
|
|
|
wgIpsecSaAhInSourceIdType OBJECT-TYPE
|
|
SYNTAX IpsecDoiIdentType
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of identifier presented by 'wgIpsecSaAhInSourceId',
|
|
or 0 if unknown or if the SA uses transport mode
|
|
encapsulation."
|
|
::= { wgIpsecSaAhInEntry 6 }
|
|
|
|
wgIpsecSaAhInProtocol OBJECT-TYPE
|
|
SYNTAX Integer32 (0..255)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The transport-layer protocol number that this SA carries,
|
|
or 0 if it carries any protocol."
|
|
REFERENCE "RFC2401 section 4.4.2"
|
|
::= { wgIpsecSaAhInEntry 7 }
|
|
|
|
wgIpsecSaAhInDestPort OBJECT-TYPE
|
|
SYNTAX Integer32 (0.. 65535)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The destination port number of the protocol that this SA
|
|
carries, or 0 if it carries any port number."
|
|
REFERENCE "RFC2401 section 4.4.2"
|
|
::= { wgIpsecSaAhInEntry 8 }
|
|
|
|
wgIpsecSaAhInSourcePort OBJECT-TYPE
|
|
SYNTAX Integer32 (0.. 65535)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The source port number of the protocol that this SA
|
|
carries, or 0 if it carries any port number."
|
|
REFERENCE "RFC2401 section 4.4.2"
|
|
::= { wgIpsecSaAhInEntry 9 }
|
|
|
|
wgIpsecSaAhInCreator OBJECT-TYPE
|
|
SYNTAX IpsecSaCreatorIdent
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The creator of this SA.
|
|
|
|
This MIB makes no assumptions about how the SAs are created.
|
|
They may be created statically, or by a key exchange
|
|
protocol such as IKE, or by some other method."
|
|
::= { wgIpsecSaAhInEntry 10 }
|
|
|
|
wgIpsecSaAhInEncapsulation OBJECT-TYPE
|
|
SYNTAX IpsecDoiEncapsulationMode
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of encapsulation used by this SA."
|
|
::= { wgIpsecSaAhInEntry 11 }
|
|
|
|
wgIpsecSaAhInAuthAlg OBJECT-TYPE
|
|
SYNTAX IpsecDoiAhTransform
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A unique value representing the hash algorithm applied to
|
|
traffic carried by this SA if it uses ESP or 0 if there is
|
|
no authentication applied by ESP."
|
|
::= { wgIpsecSaAhInEntry 12 }
|
|
|
|
wgIpsecSaAhInLimitSeconds OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
UNITS "seconds"
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The maximum lifetime in seconds of the SA, or 0 if there is
|
|
no time constraint on its expiration.
|
|
|
|
The display value is limited to 4294967295 seconds (more
|
|
than 136 years); values greater than that value will be
|
|
truncated."
|
|
::= { wgIpsecSaAhInEntry 13 }
|
|
|
|
wgIpsecSaAhInLimitKbytes OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
UNITS "kilobytes"
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The maximum traffic in Kbytes that the SA is allowed to
|
|
support, or 0 if there is no traffic constraint on its
|
|
expiration.
|
|
|
|
The display value is limited to 4294967295 kilobytes; values
|
|
greater than that value will be truncated."
|
|
::= { wgIpsecSaAhInEntry 14 }
|
|
|
|
wgIpsecSaAhInAccSeconds OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
UNITS "seconds"
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of seconds accumulated against the SA's
|
|
expiration by time.
|
|
|
|
This is also the number of seconds that the SA has existed."
|
|
::= { wgIpsecSaAhInEntry 15 }
|
|
|
|
wgIpsecSaAhInAccKbytes OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
UNITS "kilobytes"
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The amount of traffic accumulated that counts against the
|
|
SA's expiration by traffic limitation, measured in Kbytes.
|
|
This value may be 0 if the SA does not expire based on
|
|
traffic."
|
|
::= { wgIpsecSaAhInEntry 16 }
|
|
|
|
wgIpsecSaAhInUserOctets OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
UNITS "bytes"
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The amount of user level traffic measured in bytes handled
|
|
by the SA.
|
|
|
|
This is not necessarily the same as the amount of traffic
|
|
applied against the traffic expiration limit."
|
|
::= { wgIpsecSaAhInEntry 17 }
|
|
|
|
wgIpsecSaAhInPackets OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of packets handled by the SA."
|
|
::= { wgIpsecSaAhInEntry 18 }
|
|
|
|
wgIpsecSaAhInAuthErrors OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of packets discarded by the SA due to
|
|
authentication errors."
|
|
::= { wgIpsecSaAhInEntry 19 }
|
|
|
|
wgIpsecSaAhInReplayErrors OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of packets discarded by the SA due to replay
|
|
errors."
|
|
::= { wgIpsecSaAhInEntry 20 }
|
|
|
|
wgIpsecSaAhInPolicyErrors OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaAhInEntry 21 }
|
|
|
|
wgIpsecSaAhInOtherReceiveErrors OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaAhInEntry 22 }
|
|
|
|
|
|
-- the IPSec Inbound IPCOMP MIB-Group
|
|
--
|
|
-- a collection of objects providing information about
|
|
-- IPSec Inbound IPCOMP SAs
|
|
|
|
wgIpsecSaIpcompInTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF WGIpsecSaIpcompInEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The (conceptual) table containing information on IPSec
|
|
inbound IPCOMP SAs.
|
|
|
|
There should be one row for every inbound IPCOMP (security)
|
|
association that exists in the entity. The maximum number of
|
|
rows is implementation dependent."
|
|
::= { wgSaTables 3 }
|
|
|
|
wgIpsecSaIpcompInEntry OBJECT-TYPE
|
|
SYNTAX WGIpsecSaIpcompInEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An entry (conceptual row) containing the information on a
|
|
particular IPSec inbound IPCOMP SA.
|
|
A row in this table cannot be created or deleted by SNMP
|
|
operations on columns of the table."
|
|
INDEX{ wgIpsecSaIpcompInAddress, wgIpsecSaIpcompInCpi }
|
|
::= { wgIpsecSaIpcompInTable 1 }
|
|
|
|
WGIpsecSaIpcompInEntry ::= SEQUENCE {
|
|
|
|
wgIpsecSaIpcompInAddress IpAddress,
|
|
wgIpsecSaIpcompInCpi IpsecDoiIpcompTransform,
|
|
|
|
wgIpsecSaIpcompInDestId OCTET STRING,
|
|
wgIpsecSaIpcompInDestIdType IpsecDoiIdentType,
|
|
wgIpsecSaIpcompInSourceId OCTET STRING,
|
|
wgIpsecSaIpcompInSourceIdType IpsecDoiIdentType,
|
|
wgIpsecSaIpcompInProtocol Integer32,
|
|
wgIpsecSaIpcompInDestPort Integer32,
|
|
wgIpsecSaIpcompInSourcePort Integer32,
|
|
|
|
wgIpsecSaIpcompInCreator IpsecSaCreatorIdent,
|
|
|
|
wgIpsecSaIpcompInEncapsulation IpsecDoiEncapsulationMode,
|
|
wgIpsecSaIpcompInDecompAlg IpsecDoiIpcompTransform,
|
|
|
|
wgIpsecSaIpcompInSeconds Counter32,
|
|
wgIpsecSaIpcompInUserOctets Counter32,
|
|
wgIpsecSaIpcompInPackets Counter32,
|
|
|
|
wgIpsecSaIpcompInDecompErrors Counter32,
|
|
wgIpsecSaIpcompInOtherReceiveErrors Counter32
|
|
}
|
|
|
|
wgIpsecSaIpcompInAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaIpcompInEntry 1 }
|
|
|
|
wgIpsecSaIpcompInCpi OBJECT-TYPE
|
|
SYNTAX IpsecDoiIpcompTransform
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
REFERENCE "RFC 2393 Section 3.3"
|
|
::= { wgIpsecSaIpcompInEntry 2 }
|
|
|
|
wgIpsecSaIpcompInDestId OBJECT-TYPE
|
|
SYNTAX OCTET STRING (SIZE (1..255))
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaIpcompInEntry 3 }
|
|
|
|
wgIpsecSaIpcompInDestIdType OBJECT-TYPE
|
|
SYNTAX IpsecDoiIdentType
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaIpcompInEntry 4 }
|
|
|
|
wgIpsecSaIpcompInSourceId OBJECT-TYPE
|
|
SYNTAX OCTET STRING (SIZE (1..255))
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaIpcompInEntry 5 }
|
|
|
|
wgIpsecSaIpcompInSourceIdType OBJECT-TYPE
|
|
SYNTAX IpsecDoiIdentType
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaIpcompInEntry 6 }
|
|
|
|
wgIpsecSaIpcompInProtocol OBJECT-TYPE
|
|
SYNTAX Integer32 (0..255)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaIpcompInEntry 7 }
|
|
|
|
wgIpsecSaIpcompInDestPort OBJECT-TYPE
|
|
SYNTAX Integer32 (0.. 65535)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaIpcompInEntry 8 }
|
|
|
|
wgIpsecSaIpcompInSourcePort OBJECT-TYPE
|
|
SYNTAX Integer32 (0.. 65535)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaIpcompInEntry 9 }
|
|
|
|
wgIpsecSaIpcompInCreator OBJECT-TYPE
|
|
SYNTAX IpsecSaCreatorIdent
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaIpcompInEntry 10 }
|
|
|
|
wgIpsecSaIpcompInEncapsulation OBJECT-TYPE
|
|
SYNTAX IpsecDoiEncapsulationMode
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaIpcompInEntry 11 }
|
|
|
|
wgIpsecSaIpcompInDecompAlg OBJECT-TYPE
|
|
SYNTAX IpsecDoiIpcompTransform
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaIpcompInEntry 12 }
|
|
|
|
wgIpsecSaIpcompInSeconds OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
UNITS "seconds"
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaIpcompInEntry 13 }
|
|
|
|
wgIpsecSaIpcompInUserOctets OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
UNITS "bytes"
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaIpcompInEntry 14 }
|
|
|
|
wgIpsecSaIpcompInPackets OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaIpcompInEntry 15 }
|
|
|
|
wgIpsecSaIpcompInDecompErrors OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaIpcompInEntry 16 }
|
|
|
|
wgIpsecSaIpcompInOtherReceiveErrors OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaIpcompInEntry 17 }
|
|
|
|
|
|
-- the IPSec Outbound ESP MIB-Group
|
|
--
|
|
-- a collection of objects providing information about
|
|
-- IPSec Outbound ESP SAs
|
|
|
|
wgIpsecSaEspOutTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF WGIpsecSaEspOutEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The (conceptual) table containing information on IPSec
|
|
Outbound ESP SAs.
|
|
|
|
There should be one row for every outbound ESP security
|
|
association that exists in the entity. The maximum number of
|
|
rows is implementation dependent."
|
|
::= { wgSaTables 4 }
|
|
|
|
wgIpsecSaEspOutEntry OBJECT-TYPE
|
|
SYNTAX WGIpsecSaEspOutEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An entry (conceptual row) containing the information on a
|
|
particular IPSec Outbound ESP SA.
|
|
|
|
A row in this table cannot be created or deleted by SNMP
|
|
operations on columns of the table."
|
|
INDEX{ wgIpsecSaEspOutAddress, wgIpsecSaEspOutSpi }
|
|
::= { wgIpsecSaEspOutTable 1 }
|
|
|
|
WGIpsecSaEspOutEntry ::= SEQUENCE {
|
|
|
|
wgIpsecSaEspOutAddress IpAddress,
|
|
wgIpsecSaEspOutSpi Unsigned32,
|
|
|
|
wgIpsecSaEspOutSourceId OCTET STRING,
|
|
wgIpsecSaEspOutSourceIdType IpsecDoiIdentType,
|
|
wgIpsecSaEspOutDestId OCTET STRING,
|
|
wgIpsecSaEspOutDestIdType IpsecDoiIdentType,
|
|
wgIpsecSaEspOutProtocol Integer32,
|
|
wgIpsecSaEspOutSourcePort Integer32,
|
|
wgIpsecSaEspOutDestPort Integer32,
|
|
|
|
wgIpsecSaEspOutCreator IpsecSaCreatorIdent,
|
|
|
|
wgIpsecSaEspOutEncapsulation IpsecDoiEncapsulationMode,
|
|
wgIpsecSaEspOutEncAlg IpsecDoiEspTransform,
|
|
wgIpsecSaEspOutEncKeyLength Integer32,
|
|
wgIpsecSaEspOutAuthAlg IpsecDoiAuthAlgorithm,
|
|
|
|
wgIpsecSaEspOutLimitSeconds Integer32,
|
|
wgIpsecSaEspOutLimitKbytes Integer32,
|
|
|
|
wgIpsecSaEspOutAccSeconds Counter32,
|
|
wgIpsecSaEspOutAccKbytes Counter32,
|
|
wgIpsecSaEspOutUserOctets Counter32,
|
|
wgIpsecSaEspOutPackets Counter32,
|
|
|
|
wgIpsecSaEspOutSendErrors Counter32
|
|
}
|
|
|
|
|
|
wgIpsecSaEspOutAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The destination address of the SA.
|
|
|
|
For implementations that do not support IPv6, this address
|
|
should appear as one of the IPv4-mapped IPv6 addresses as
|
|
defined in Section 2.5.4 of [IPV6AA].
|
|
|
|
Specifically, the prefix '0000:0000:0000:0000:0000:FFFF:' is
|
|
used for IPv4 only nodes, while the prefix
|
|
'0000:0000:0000:0000:0000:0000:' is used for bi-lingual
|
|
nodes."
|
|
::= { wgIpsecSaEspOutEntry 1 }
|
|
|
|
wgIpsecSaEspOutSpi OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The security parameters index of the SA."
|
|
REFERENCE "RFC 2406 Section 2.1"
|
|
::= { wgIpsecSaEspOutEntry 2 }
|
|
|
|
wgIpsecSaEspOutSourceId OBJECT-TYPE
|
|
SYNTAX OCTET STRING (SIZE (4..255))
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The source identifier of the SA, or 0 if unknown or if the
|
|
SA uses transport mode encapsulation.
|
|
|
|
This value is taken directly from the optional ID payloads
|
|
that are exchange during phase 2 negotiations."
|
|
::= { wgIpsecSaEspOutEntry 3 }
|
|
|
|
wgIpsecSaEspOutSourceIdType OBJECT-TYPE
|
|
SYNTAX IpsecDoiIdentType
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of identifier presented by
|
|
'wgIpsecSaEspOutSourceId', or 0 if unknown or if the SA uses
|
|
transport mode encapsulation."
|
|
::= { wgIpsecSaEspOutEntry 4 }
|
|
|
|
wgIpsecSaEspOutDestId OBJECT-TYPE
|
|
SYNTAX OCTET STRING (SIZE (4..255))
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The destination identifier of the SA, or 0 if unknown or if
|
|
the SA uses transport mode encapsulation.
|
|
|
|
This value is taken directly from the optional ID payloads
|
|
that are exchange during phase 2 negotiations."
|
|
::= { wgIpsecSaEspOutEntry 5 }
|
|
|
|
wgIpsecSaEspOutDestIdType OBJECT-TYPE
|
|
SYNTAX IpsecDoiIdentType
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of identifier presented by 'wgIpsecSaEspOutDestId',
|
|
or 0 if unknown or if the SA uses transport mode
|
|
encapsulation."
|
|
::= { wgIpsecSaEspOutEntry 6 }
|
|
|
|
wgIpsecSaEspOutProtocol OBJECT-TYPE
|
|
SYNTAX Integer32 (0..255)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The transport-layer protocol number that this SA carries,
|
|
or 0 if it carries any protocol."
|
|
REFERENCE "RFC2401 section 4.4.2"
|
|
::= { wgIpsecSaEspOutEntry 7 }
|
|
|
|
wgIpsecSaEspOutSourcePort OBJECT-TYPE
|
|
SYNTAX Integer32 (0.. 65535)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The source port number of the protocol that this SA
|
|
carries, or 0 if it carries any port number."
|
|
REFERENCE "RFC2401 section 4.4.2"
|
|
::= { wgIpsecSaEspOutEntry 8 }
|
|
|
|
wgIpsecSaEspOutDestPort OBJECT-TYPE
|
|
SYNTAX Integer32 (0.. 65535)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The destination port number of the protocol that this SA
|
|
carries, or 0 if it carries any port number."
|
|
REFERENCE "RFC2401 section 4.4.2"
|
|
::= { wgIpsecSaEspOutEntry 9 }
|
|
|
|
wgIpsecSaEspOutCreator OBJECT-TYPE
|
|
SYNTAX IpsecSaCreatorIdent
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The creator of this SA.
|
|
|
|
This MIB makes no assumptions about how the SAs are created.
|
|
They may be created statically, or by a key exchange
|
|
protocol such as IKE, or by some other method."
|
|
::= { wgIpsecSaEspOutEntry 10 }
|
|
|
|
wgIpsecSaEspOutEncapsulation OBJECT-TYPE
|
|
SYNTAX IpsecDoiEncapsulationMode
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of encapsulation used by this SA."
|
|
::= { wgIpsecSaEspOutEntry 11 }
|
|
|
|
wgIpsecSaEspOutEncAlg OBJECT-TYPE
|
|
SYNTAX IpsecDoiEspTransform
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A unique value representing the encryption algorithm
|
|
applied to traffic or 0 if there is no encryption used."
|
|
::= { wgIpsecSaEspOutEntry 12 }
|
|
|
|
wgIpsecSaEspOutEncKeyLength OBJECT-TYPE
|
|
SYNTAX Integer32 (0..65531)
|
|
UNITS "bits"
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The length of the encryption key in bits used for the
|
|
algorithm specified in the 'wgIpsecSaEspOutEncAlg' object, or
|
|
0 if the key length is implicit in the specified algorithm
|
|
or there is no encryption specified."
|
|
::= { wgIpsecSaEspOutEntry 13 }
|
|
|
|
wgIpsecSaEspOutAuthAlg OBJECT-TYPE
|
|
SYNTAX IpsecDoiAuthAlgorithm
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A unique value representing the hash algorithm applied to
|
|
traffic or 0 if there is no authentication used."
|
|
::= { wgIpsecSaEspOutEntry 14 }
|
|
|
|
wgIpsecSaEspOutLimitSeconds OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
UNITS "seconds"
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The maximum lifetime in seconds of the SA, or 0 if there is
|
|
no time constraint on its expiration.
|
|
|
|
The display value is limited to 4294967295 seconds (more
|
|
than 136 years); values greater than that value will be
|
|
truncated."
|
|
::= { wgIpsecSaEspOutEntry 15 }
|
|
|
|
wgIpsecSaEspOutLimitKbytes OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
UNITS "kilobytes"
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The maximum traffic in kbytes that the SA is allowed to
|
|
support, or 0 if there is no traffic constraint on its
|
|
expiration.
|
|
|
|
The display value is limited to 4294967295 kilobytes; values
|
|
greater than that value will be truncated."
|
|
::= { wgIpsecSaEspOutEntry 16 }
|
|
|
|
wgIpsecSaEspOutAccSeconds OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
UNITS "seconds"
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of seconds accumulated against the SA's
|
|
expiration by time.
|
|
|
|
This is also the number of seconds that the SA has existed."
|
|
::= { wgIpsecSaEspOutEntry 17 }
|
|
|
|
wgIpsecSaEspOutAccKbytes OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
UNITS "kilobytes"
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The amount of traffic accumulated that counts against the
|
|
SA's expiration by traffic limitation, measured in Kbytes.
|
|
|
|
This value may be 0 if the SA does not expire based on
|
|
traffic."
|
|
::= { wgIpsecSaEspOutEntry 18 }
|
|
|
|
wgIpsecSaEspOutUserOctets OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
UNITS "bytes"
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The amount of user level traffic measured in bytes handled
|
|
by the SA.
|
|
|
|
This is not necessarily the same as the amount of traffic
|
|
applied against the traffic expiration limit."
|
|
::= { wgIpsecSaEspOutEntry 19 }
|
|
|
|
wgIpsecSaEspOutPackets OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of packets handled by the SA."
|
|
::= { wgIpsecSaEspOutEntry 20 }
|
|
|
|
wgIpsecSaEspOutSendErrors OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaEspOutEntry 21 }
|
|
|
|
|
|
-- the IPSec Outbound AH MIB-Group
|
|
--
|
|
-- a collection of objects providing information about
|
|
-- IPSec Outbound AH SAs
|
|
|
|
wgIpsecSaAhOutTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF WGIpsecSaAhOutEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The (conceptual) table containing information on IPSec
|
|
Outbound AH SAs.
|
|
|
|
There should be one row for every outbound AH security
|
|
association that exists in the entity. The maximum number of
|
|
rows is implementation dependent."
|
|
::= { wgSaTables 5 }
|
|
|
|
wgIpsecSaAhOutEntry OBJECT-TYPE
|
|
SYNTAX WGIpsecSaAhOutEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An entry (conceptual row) containing the information on a
|
|
particular IPSec Outbound AH SA.
|
|
|
|
A row in this table cannot be created or deleted by SNMP
|
|
operations on columns of the table."
|
|
INDEX{ wgIpsecSaAhOutAddress, wgIpsecSaAhOutSpi }
|
|
::= { wgIpsecSaAhOutTable 1 }
|
|
|
|
WGIpsecSaAhOutEntry ::= SEQUENCE {
|
|
|
|
wgIpsecSaAhOutAddress IpAddress,
|
|
wgIpsecSaAhOutSpi Integer32,
|
|
|
|
wgIpsecSaAhOutSourceId OCTET STRING,
|
|
wgIpsecSaAhOutSourceIdType IpsecDoiIdentType,
|
|
wgIpsecSaAhOutDestId OCTET STRING,
|
|
wgIpsecSaAhOutDestIdType IpsecDoiIdentType,
|
|
wgIpsecSaAhOutProtocol Integer32,
|
|
wgIpsecSaAhOutSourcePort Integer32,
|
|
wgIpsecSaAhOutDestPort Integer32,
|
|
|
|
wgIpsecSaAhOutCreator IpsecSaCreatorIdent,
|
|
|
|
wgIpsecSaAhOutEncapsulation IpsecDoiEncapsulationMode,
|
|
wgIpsecSaAhOutAuthAlg IpsecDoiAhTransform,
|
|
|
|
wgIpsecSaAhOutLimitSeconds Integer32,
|
|
wgIpsecSaAhOutLimitKbytes Integer32,
|
|
|
|
wgIpsecSaAhOutAccSeconds Counter32,
|
|
wgIpsecSaAhOutAccKbytes Counter32,
|
|
wgIpsecSaAhOutUserOctets Counter32,
|
|
wgIpsecSaAhOutPackets Counter32,
|
|
|
|
wgIpsecSaAhOutSendErrors Counter32
|
|
}
|
|
|
|
|
|
wgIpsecSaAhOutAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The destination address of the SA.
|
|
|
|
For implementations that do not support IPv6, this address
|
|
should appear as one of the IPv4-mapped IPv6 addresses as
|
|
defined in Section 2.5.4 of [IPV6AA].
|
|
|
|
Specifically, the prefix '0000:0000:0000:0000:0000:FFFF:' is
|
|
used for IPv4 only nodes, while the prefix
|
|
'0000:0000:0000:0000:0000:0000:' is used for bi-lingual
|
|
nodes."
|
|
::= { wgIpsecSaAhOutEntry 1 }
|
|
|
|
wgIpsecSaAhOutSpi OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The security parameters index of the SA."
|
|
REFERENCE "RFC 2402 Section 2.4"
|
|
::= { wgIpsecSaAhOutEntry 2 }
|
|
|
|
wgIpsecSaAhOutSourceId OBJECT-TYPE
|
|
SYNTAX OCTET STRING (SIZE (4..255))
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The source identifier of the SA, or 0 if unknown or if the
|
|
SA uses transport mode encapsulation.
|
|
|
|
This value is taken directly from the optional ID payloads
|
|
that are exchange during phase 2 negotiations."
|
|
::= { wgIpsecSaAhOutEntry 3 }
|
|
|
|
wgIpsecSaAhOutSourceIdType OBJECT-TYPE
|
|
SYNTAX IpsecDoiIdentType
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of identifier presented by 'wgIpsecSaAhOutSourceId',
|
|
or 0 if unknown or if the SA uses transport mode
|
|
encapsulation."
|
|
::= { wgIpsecSaAhOutEntry 4 }
|
|
|
|
wgIpsecSaAhOutDestId OBJECT-TYPE
|
|
SYNTAX OCTET STRING (SIZE (4..255))
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The destination identifier of the SA, or 0 if unknown or if
|
|
the SA uses transport mode encapsulation.
|
|
|
|
This value is taken directly from the optional ID payloads
|
|
that are exchange during phase 2 negotiations."
|
|
::= { wgIpsecSaAhOutEntry 5 }
|
|
|
|
wgIpsecSaAhOutDestIdType OBJECT-TYPE
|
|
SYNTAX IpsecDoiIdentType
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of identifier presented by 'wgIpsecSaAhOutDestId',
|
|
or 0 if unknown or if the SA uses transport mode
|
|
encapsulation."
|
|
::= { wgIpsecSaAhOutEntry 6 }
|
|
|
|
wgIpsecSaAhOutProtocol OBJECT-TYPE
|
|
SYNTAX Integer32 (0..255)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The transport-layer protocol number that this SA carries,
|
|
or 0 if it carries any protocol."
|
|
REFERENCE "RFC2401 section 4.4.2"
|
|
::= { wgIpsecSaAhOutEntry 7 }
|
|
|
|
wgIpsecSaAhOutSourcePort OBJECT-TYPE
|
|
SYNTAX Integer32 (0.. 65535)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The source port number of the protocol that this SA
|
|
carries, or 0 if it carries any port number."
|
|
REFERENCE "RFC2401 section 4.4.2"
|
|
::= { wgIpsecSaAhOutEntry 8 }
|
|
|
|
wgIpsecSaAhOutDestPort OBJECT-TYPE
|
|
SYNTAX Integer32 (0.. 65535)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The destination port number of the protocol that this SA
|
|
carries, or 0 if it carries any port number."
|
|
REFERENCE "RFC2401 section 4.4.2"
|
|
::= { wgIpsecSaAhOutEntry 9 }
|
|
|
|
wgIpsecSaAhOutCreator OBJECT-TYPE
|
|
SYNTAX IpsecSaCreatorIdent
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The creator of this SA.
|
|
|
|
This MIB makes no assumptions about how the SAs are created.
|
|
They may be created statically, or by a key exchange
|
|
protocol such as IKE, or by some other method."
|
|
::= { wgIpsecSaAhOutEntry 10 }
|
|
|
|
wgIpsecSaAhOutEncapsulation OBJECT-TYPE
|
|
SYNTAX IpsecDoiEncapsulationMode
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of encapsulation used by this SA."
|
|
::= { wgIpsecSaAhOutEntry 11 }
|
|
|
|
wgIpsecSaAhOutAuthAlg OBJECT-TYPE
|
|
SYNTAX IpsecDoiAhTransform
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A unique value representing the hash algorithm applied to
|
|
traffic or 0 if there is no authentication used."
|
|
::= { wgIpsecSaAhOutEntry 12 }
|
|
|
|
wgIpsecSaAhOutLimitSeconds OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
UNITS "seconds"
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The maximum lifetime in seconds of the SA, or 0 if there is
|
|
no time constraint on its expiration.
|
|
|
|
The display value is limited to 4294967295 seconds (more
|
|
than 136 years); values greater than that value will be
|
|
truncated."
|
|
::= { wgIpsecSaAhOutEntry 13 }
|
|
|
|
wgIpsecSaAhOutLimitKbytes OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
UNITS "kilobytes"
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The maximum traffic in Kbytes that the SA is allowed to
|
|
support, or 0 if there is no traffic constraint on its
|
|
expiration.
|
|
|
|
The display value is limited to 4294967295 kilobytes; values
|
|
greater than that value will be truncated."
|
|
::= { wgIpsecSaAhOutEntry 14 }
|
|
|
|
wgIpsecSaAhOutAccSeconds OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
UNITS "seconds"
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of seconds accumulated against the SA's
|
|
expiration by time.
|
|
|
|
This is also the number of seconds that the SA has existed."
|
|
::= { wgIpsecSaAhOutEntry 15 }
|
|
|
|
wgIpsecSaAhOutAccKbytes OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
UNITS "kilobytes"
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The amount of traffic accumulated that counts against the
|
|
SA's expiration by traffic limitation, measured in Kbytes.
|
|
|
|
This value may be 0 if the SA does not expire based on
|
|
traffic."
|
|
::= { wgIpsecSaAhOutEntry 16 }
|
|
|
|
wgIpsecSaAhOutUserOctets OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
UNITS "bytes"
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The amount of user level traffic measured in bytes handled
|
|
by the SA.
|
|
|
|
This is not necessarily the same as the amount of traffic
|
|
applied against the traffic expiration limit."
|
|
::= { wgIpsecSaAhOutEntry 17 }
|
|
|
|
wgIpsecSaAhOutPackets OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of packets handled by the SA."
|
|
::= { wgIpsecSaAhOutEntry 18 }
|
|
|
|
wgIpsecSaAhOutSendErrors OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaAhOutEntry 19 }
|
|
|
|
|
|
-- the IPSec Outbound IPCOMP MIB-Group
|
|
--
|
|
-- a collection of objects providing information about
|
|
-- IPSec Outbound IPCOMP SAs
|
|
|
|
wgIpsecSaIpcompOutTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF WGIpsecSaIpcompOutEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgSaTables 6 }
|
|
|
|
wgIpsecSaIpcompOutEntry OBJECT-TYPE
|
|
SYNTAX WGIpsecSaIpcompOutEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
INDEX{ wgIpsecSaIpcompOutAddress, wgIpsecSaIpcompOutCpi }
|
|
::= { wgIpsecSaIpcompOutTable 1 }
|
|
|
|
WGIpsecSaIpcompOutEntry ::= SEQUENCE {
|
|
|
|
wgIpsecSaIpcompOutAddress IpAddress,
|
|
wgIpsecSaIpcompOutCpi IpsecDoiIpcompTransform,
|
|
|
|
wgIpsecSaIpcompOutSourceId OCTET STRING,
|
|
wgIpsecSaIpcompOutSourceIdType IpsecDoiIdentType,
|
|
wgIpsecSaIpcompOutDestId OCTET STRING,
|
|
wgIpsecSaIpcompOutDestIdType IpsecDoiIdentType,
|
|
wgIpsecSaIpcompOutProtocol Integer32,
|
|
wgIpsecSaIpcompOutSourcePort Integer32,
|
|
wgIpsecSaIpcompOutDestPort Integer32,
|
|
|
|
wgIpsecSaIpcompOutCreator IpsecSaCreatorIdent,
|
|
|
|
wgIpsecSaIpcompOutEncapsulation IpsecDoiEncapsulationMode,
|
|
wgIpsecSaIpcompOutCompAlg IpsecDoiIpcompTransform,
|
|
|
|
wgIpsecSaIpcompOutSeconds Counter32,
|
|
wgIpsecSaIpcompOutUserOctets Counter32,
|
|
wgIpsecSaIpcompOutPackets Counter32
|
|
}
|
|
|
|
wgIpsecSaIpcompOutAddress OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaIpcompOutEntry 1 }
|
|
|
|
wgIpsecSaIpcompOutCpi OBJECT-TYPE
|
|
SYNTAX IpsecDoiIpcompTransform
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaIpcompOutEntry 2 }
|
|
|
|
wgIpsecSaIpcompOutSourceId OBJECT-TYPE
|
|
SYNTAX OCTET STRING (SIZE (4..255))
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaIpcompOutEntry 3 }
|
|
|
|
wgIpsecSaIpcompOutSourceIdType OBJECT-TYPE
|
|
SYNTAX IpsecDoiIdentType
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaIpcompOutEntry 4 }
|
|
|
|
wgIpsecSaIpcompOutDestId OBJECT-TYPE
|
|
SYNTAX OCTET STRING (SIZE (4..255))
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaIpcompOutEntry 5 }
|
|
|
|
wgIpsecSaIpcompOutDestIdType OBJECT-TYPE
|
|
SYNTAX IpsecDoiIdentType
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaIpcompOutEntry 6 }
|
|
|
|
wgIpsecSaIpcompOutProtocol OBJECT-TYPE
|
|
SYNTAX Integer32 (0..255)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The transport-layer protocol number that this SA carries,
|
|
or 0 if it carries any protocol."
|
|
REFERENCE "RFC2401 section 4.4.2"
|
|
::= { wgIpsecSaIpcompOutEntry 7 }
|
|
|
|
wgIpsecSaIpcompOutSourcePort OBJECT-TYPE
|
|
SYNTAX Integer32 (0.. 65535)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaIpcompOutEntry 8 }
|
|
|
|
wgIpsecSaIpcompOutDestPort OBJECT-TYPE
|
|
SYNTAX Integer32 (0.. 65535)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaIpcompOutEntry 9 }
|
|
|
|
wgIpsecSaIpcompOutCreator OBJECT-TYPE
|
|
SYNTAX IpsecSaCreatorIdent
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaIpcompOutEntry 10 }
|
|
|
|
wgIpsecSaIpcompOutEncapsulation OBJECT-TYPE
|
|
SYNTAX IpsecDoiEncapsulationMode
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaIpcompOutEntry 11 }
|
|
|
|
wgIpsecSaIpcompOutCompAlg OBJECT-TYPE
|
|
SYNTAX IpsecDoiIpcompTransform
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaIpcompOutEntry 12 }
|
|
|
|
wgIpsecSaIpcompOutSeconds OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
UNITS "seconds"
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaIpcompOutEntry 13 }
|
|
|
|
wgIpsecSaIpcompOutUserOctets OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
UNITS "bytes"
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgIpsecSaIpcompOutEntry 14 }
|
|
|
|
wgIpsecSaIpcompOutPackets OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of packets handled by the SA."
|
|
::= { wgIpsecSaIpcompOutEntry 15 }
|
|
|
|
|
|
--
|
|
-- entity IPSec statistics
|
|
--
|
|
wgIpsecEspCurrentInboundSAs OBJECT-TYPE
|
|
SYNTAX Gauge32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The current number of inbound ESP SAs in the entity."
|
|
::= { wgSaStatistics 1 }
|
|
|
|
wgIpsecEspTotalInboundSAs OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgSaStatistics 2 }
|
|
|
|
wgIpsecEspCurrentOutboundSAs OBJECT-TYPE
|
|
SYNTAX Gauge32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The current number of outbound ESP SAs in the entity."
|
|
::= { wgSaStatistics 3 }
|
|
|
|
wgIpsecEspTotalOutboundSAs OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgSaStatistics 4 }
|
|
|
|
wgIpsecAhCurrentInboundSAs OBJECT-TYPE
|
|
SYNTAX Gauge32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The current number of inbound AH SAs in the entity."
|
|
::= { wgSaStatistics 5 }
|
|
|
|
wgIpsecAhTotalInboundSAs OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgSaStatistics 6 }
|
|
|
|
wgIpsecAhCurrentOutboundSAs OBJECT-TYPE
|
|
SYNTAX Gauge32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The current number of outbound AH SAs in the entity."
|
|
::= { wgSaStatistics 7 }
|
|
|
|
wgIpsecAhTotalOutboundSAs OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgSaStatistics 8 }
|
|
|
|
wgIpsecIpcompCurrentInboundSAs OBJECT-TYPE
|
|
SYNTAX Gauge32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgSaStatistics 9 }
|
|
|
|
wgIpsecIpcompTotalInboundSAs OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgSaStatistics 10 }
|
|
|
|
wgIpsecIpcompCurrentOutboundSAs OBJECT-TYPE
|
|
SYNTAX Gauge32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgSaStatistics 11 }
|
|
|
|
wgIpsecIpcompTotalOutboundSAs OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgSaStatistics 12 }
|
|
|
|
|
|
--
|
|
-- IPSec error counts
|
|
--
|
|
|
|
wgIpsecDecryptionErrors OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgSaErrors 1 }
|
|
|
|
wgIpsecAuthenticationErrors OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgSaErrors 2 }
|
|
|
|
wgIpsecReplayErrors OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgSaErrors 3 }
|
|
|
|
wgIpsecPolicyErrors OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgSaErrors 4 }
|
|
|
|
wgIpsecOtherReceiveErrors OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgSaErrors 5 }
|
|
|
|
wgIpsecSendErrors OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgSaErrors 6 }
|
|
|
|
wgIpsecUnknownSpiErrors OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Deprecated, currently unused."
|
|
::= { wgSaErrors 7 }
|
|
|
|
END
|
|
|