-- ==================================================================== -- Copyright (c) 2010-2013 Hewlett-Packard Development Company, L.P. -- -- Description: The MIB is designed to get IPsec tunnels' statistic information. -- Reference: -- Version: 1.0 -- History: -- V1.0: The initial version created by Wanghaisheng and Weiyanheng. -- ===================================================================== HPN-ICF-IPSEC-MONITOR-V2-MIB DEFINITIONS ::= BEGIN IMPORTS ifIndex FROM RFC1213-MIB InterfaceIndex FROM IF-MIB DisplayString, TEXTUAL-CONVENTION, TruthValue FROM SNMPv2-TC Integer32, Counter32, Counter64, OBJECT-TYPE, MODULE-IDENTITY, Gauge32, NOTIFICATION-TYPE, Unsigned32 FROM SNMPv2-SMI InetAddressType, InetAddress FROM INET-ADDRESS-MIB MODULE-COMPLIANCE, OBJECT-GROUP, NOTIFICATION-GROUP FROM SNMPv2-CONF hpnicfCommon FROM HPN-ICF-OID-MIB; hpnicfIPsecMonitorV2 MODULE-IDENTITY LAST-UPDATED "201206270000Z" -- Jun. 27, 2012 GMT ORGANIZATION "" CONTACT-INFO "" DESCRIPTION "The MIB is designed to get statistic information of IPsec tunnels. With this MIB, we can get information of a certain tunnel or all tunnels." REVISION "201206270000Z" DESCRIPTION "Initial version." ::= { hpnicfCommon 126 } HpnicfIPsecDiffHellmanGrpV2 ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "The Diffie Hellman Group used in the IKE and IPsec negotiations. invalidGroup(2147483647) is defined as invalid value." SYNTAX INTEGER { none(0), dhGroup1(1), dhGroup2(2), dhGroup5(5), dhGroup14(14), dhGroup24(24), invalidGroup(2147483647) } HpnicfIPsecEncapModeV2 ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "The encapsulation mode used by an IPsec Phase-2 Tunnel. invalidMode(2147483647) is defined as invalid value." SYNTAX INTEGER { tunnel(1), transport(2), invalidMode(2147483647) } HpnicfIPsecEncryptAlgoV2 ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "The encryption algorithm used in the IKE and IPsec negotiations. invalidAlg(2147483647) is defined as invalid value." SYNTAX INTEGER { none(0), desCbc(1), ideaCbc(2), blowfishCbc(3), rc5R16B64Cbc(4), tripleDesCbc(5), castCbc(6), aesCbc(7), nsaCbc(8), aesCbc128(9), aesCbc192(10), aesCbc256(11), aesCtr(12), aesCamelliaCbc(13), rc4(14), invalidAlg(2147483647) } HpnicfIPsecAuthAlgoV2 ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "The authentication algorithm used in the IKE negotiations. invalidAlg(2147483647) is defined as invalid value." SYNTAX INTEGER { none(0), md5(1), sha1(2), sha256(3), sha384(4), sha512(5), invalidAlg(2147483647) } HpnicfIPsecSaProtocolV2 ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "The protocol of security association." SYNTAX INTEGER { reserved(0), ah(2), esp(3), ipcomp(4) } HpnicfIPsecIDTypeV2 ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "The type of IPsec Identity." SYNTAX INTEGER { reserved(0), ipv4Addr(1), fqdn(2), -- fully-qualified domain name userFqdn(3), -- fully-qualified username ipv4AddrSubnet(4), ipv6Addr(5), ipv6AddrSubnet(6), ipv4AddrRange(7), ipv6AddrRange(8), derAsn1Dn(9), -- the binary DER encoding of an ASN.1 X.500 Distinguished -- Name [X.501] of the princIPal whose certificates are -- being exchanged to establish the SA. derAsn1Gn(10), -- the binary DER encoding of an ASN.1 X.500 GeneralName -- [X.509] of the princIPal whose certificates are being -- exchanged to establish the SA. keyId(11) -- specifies an opaque byte stream which may be used to -- pass vendor-specific information necessary to identify -- which pre-shared key should be used to authenticate -- Aggressive mode negotiations. } HpnicfIPsecTrafficTypeV2 ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "The type of the data flow." SYNTAX INTEGER { ipv4Addr(1), ipv4AddrSubnet(4), ipv6Addr(5), ipv6AddrSubnet(6), ipv4AddrRange(7), ipv6AddrRange(8) } HpnicfIPsecNegoTypeV2 ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "The type of key used by an IPsec Phase-2 Tunnel. invalidType(2147483647) is defined as invalid value." SYNTAX INTEGER { ike(1), manual(2), invalidType(2147483647) } HpnicfIPsecTunnelStateV2 ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "The state of IPsec tunnel." SYNTAX INTEGER { active(1), timeout(2) } -- ======================================================================== -- Node definitions -- ======================================================================== -- Begin the node of hpnicfIPsecObjectsV2. hpnicfIPsecObjectsV2 OBJECT IDENTIFIER ::= { hpnicfIPsecMonitorV2 1 } -- ======================================= -- Begin the hpnicfIPsecScalarObjectsV2. -- ======================================= hpnicfIPsecScalarObjectsV2 OBJECT IDENTIFIER ::= { hpnicfIPsecObjectsV2 1 } hpnicfIPsecMIBVersion OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "Version string of this MIB." ::= { hpnicfIPsecScalarObjectsV2 1 } -- =============================================== -- Begin the table of hpnicfIPsecTunnelV2Table. -- =============================================== hpnicfIPsecTunnelV2Table OBJECT-TYPE SYNTAX SEQUENCE OF HpnicfIPsecTunnelV2Entry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The IPsec Phase-2 Tunnel Table. There is one entry in this table for each active IPsec Phase-2 Tunnel." ::= { hpnicfIPsecObjectsV2 2 } hpnicfIPsecTunnelV2Entry OBJECT-TYPE SYNTAX HpnicfIPsecTunnelV2Entry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Information about hpnicfIPsecTunnelV2Table." INDEX { hpnicfIPsecTunIndexV2 } ::= { hpnicfIPsecTunnelV2Table 1 } HpnicfIPsecTunnelV2Entry ::= SEQUENCE { hpnicfIPsecTunIndexV2 Integer32, hpnicfIPsecTunIfIndexV2 InterfaceIndex, hpnicfIPsecTunIKETunnelIndexV2 Integer32, hpnicfIPsecTunIKETunLocalIDTypeV2 HpnicfIPsecIDTypeV2, hpnicfIPsecTunIKETunLocalIDVal1V2 DisplayString, hpnicfIPsecTunIKETunLocalIDVal2V2 DisplayString, hpnicfIPsecTunIKETunRemoteIDTypeV2 HpnicfIPsecIDTypeV2, hpnicfIPsecTunIKETunRemoteIDVal1V2 DisplayString, hpnicfIPsecTunIKETunRemoteIDVal2V2 DisplayString, hpnicfIPsecTunLocalAddrTypeV2 InetAddressType, hpnicfIPsecTunLocalAddrV2 InetAddress, hpnicfIPsecTunRemoteAddrTypeV2 InetAddressType, hpnicfIPsecTunRemoteAddrV2 InetAddress, hpnicfIPsecTunKeyTypeV2 HpnicfIPsecNegoTypeV2, hpnicfIPsecTunEncapModeV2 HpnicfIPsecEncapModeV2, hpnicfIPsecTunInitiatorV2 INTEGER, hpnicfIPsecTunLifeSizeV2 Gauge32, hpnicfIPsecTunLifeTimeV2 Integer32, hpnicfIPsecTunRemainTimeV2 Integer32, hpnicfIPsecTunActiveTimeV2 Integer32, hpnicfIPsecTunRemainSizeV2 Gauge32, hpnicfIPsecTunTotalRefreshesV2 Counter32, hpnicfIPsecTunCurrentSaInstancesV2 Gauge32, hpnicfIPsecTunInSaEncryptAlgoV2 HpnicfIPsecEncryptAlgoV2, hpnicfIPsecTunInSaAhAuthAlgoV2 HpnicfIPsecAuthAlgoV2, hpnicfIPsecTunInSaEspAuthAlgoV2 HpnicfIPsecAuthAlgoV2, hpnicfIPsecTunDiffHellmanGrpV2 HpnicfIPsecDiffHellmanGrpV2, hpnicfIPsecTunOutSaEncryptAlgoV2 HpnicfIPsecEncryptAlgoV2, hpnicfIPsecTunOutSaAhAuthAlgoV2 HpnicfIPsecAuthAlgoV2, hpnicfIPsecTunOutSaEspAuthAlgoV2 HpnicfIPsecAuthAlgoV2, hpnicfIPsecTunPolicyNameV2 DisplayString, hpnicfIPsecTunPolicyNumV2 Integer32, hpnicfIPsecTunStatusV2 INTEGER } hpnicfIPsecTunIndexV2 OBJECT-TYPE SYNTAX Integer32 (1..2147483647) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The index of IPsec Phase-2 Tunnel Table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The value of this object will wrap at 2147483647." ::= { hpnicfIPsecTunnelV2Entry 1 } hpnicfIPsecTunIfIndexV2 OBJECT-TYPE SYNTAX InterfaceIndex MAX-ACCESS read-only STATUS current DESCRIPTION "The interface index( the ifIndex of ifTable )." ::= { hpnicfIPsecTunnelV2Entry 2 } hpnicfIPsecTunIKETunnelIndexV2 OBJECT-TYPE SYNTAX Integer32 (1..2147483647) MAX-ACCESS read-only STATUS current DESCRIPTION "The index of the associated IPsec Phase-1 IKE Tunnel (IKETunIndex in the IKETunnelTable). 2147483647 is defined as invalid value. " ::= { hpnicfIPsecTunnelV2Entry 3 } hpnicfIPsecTunIKETunLocalIDTypeV2 OBJECT-TYPE SYNTAX HpnicfIPsecIDTypeV2 MAX-ACCESS read-only STATUS current DESCRIPTION "The type of the local peer identity for the associated IPsec Phase-1 IKE Tunnel (IKETunLocalType in the IKETunnelTable)." ::= { hpnicfIPsecTunnelV2Entry 4 } hpnicfIPsecTunIKETunLocalIDVal1V2 OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "The value of the local peer identity for the associated IPsec Phase-1 IKE Tunnel (IKETunLocalValue1 in the IKETunnelTable). If the local peer type is ipv4Addr/ipv6Addr, this is the IP address used to identify the local peer. If the local peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is the subnet address. If the local peer type is ipv4AddrRange/ipv6AddrRange, this is the beginning IP address of the range. If the local peer type is fqdn/userFqdn, this is the host name used to identify the local peer. If the local peer type is derAsn1Dn, this is the binary DER encoding of an ASN.1 X.500 Distinguished Name [X.501] of the principal whose certificates are being exchanged to establish the SA. If the local peer type is derAsn1Gn, this is the binary DER encoding of an ASN.1 X.500 GeneralName [X.509] of the principal whose certificates are being exchanged to establish the SA. If the local peer type is keyId, this is an opaque byte stream which may be used to pass vendor-specific information necessary to identify which pre-shared key should be used to authenticate Aggressive mode negotiations." ::= { hpnicfIPsecTunnelV2Entry 5 } hpnicfIPsecTunIKETunLocalIDVal2V2 OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "The second specification of the local peer's IP address for the associated IPsec Phase-1 IKE Tunnel (IKETunLocalValue2 in the IKETunnelTable). If the local peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is the subnet mask. If the local peer type is ipv4AddrRange/ipv6AddrRange, this is the ending IP address of the range. If the local peer type is others, this is a zero-length string." ::= { hpnicfIPsecTunnelV2Entry 6 } hpnicfIPsecTunIKETunRemoteIDTypeV2 OBJECT-TYPE SYNTAX HpnicfIPsecIDTypeV2 MAX-ACCESS read-only STATUS current DESCRIPTION "The type of the remote peer identity for the associated IPsec Phase-1 IKE Tunnel (IKETunRemoteType in the IKETunnelTable)." ::= { hpnicfIPsecTunnelV2Entry 7 } hpnicfIPsecTunIKETunRemoteIDVal1V2 OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "The value of the remote peer identity for the associated IPsec Phase-1 IKE Tunnel (IKETunRemoteValue1 in the IKETunnelTable). If the remote peer type is ipv4Addr/ipv6Addr, this is the IP address used to identify the remote peer. If the remote peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is the subnet address. If the remote peer type is ipv4AddrRange/ipv6AddrRange, this is the beginning IP address of the range. If the remote peer type is fqdn/userFqdn, this is the host name used to identify the remote peer. If the remote peer type is derAsn1Dn, this is the binary DER encoding of an ASN.1 X.500 Distinguished Name [X.501] of the principal whose certificates are being exchanged to establish the SA. If the remote peer type is derAsn1Gn, this is the binary DER encoding of an ASN.1 X.500 GeneralName [X.509] of the principal whose certificates are being exchanged to establish the SA. If the remote peer type is keyId, this is an opaque byte stream which may be used to pass vendor-specific information necessary to identify which pre-shared key should be used to authenticate Aggressive mode negotiations." ::= { hpnicfIPsecTunnelV2Entry 8 } hpnicfIPsecTunIKETunRemoteIDVal2V2 OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "The second specification of the remote peer's IP address for the associated IPsec Phase-1 IKE Tunnel(IKETunRemoteValue2 in the IKETunnelTable). If the remote peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is the subnet mask. If the remote peer type is ipv4AddrRange/ipv6AddrRange, this is the ending IP address of the range. If the remote peer type is others, this is a zero-length string." ::= { hpnicfIPsecTunnelV2Entry 9 } hpnicfIPsecTunLocalAddrTypeV2 OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS read-only STATUS current DESCRIPTION "The type of the IP address for the local peer of the IPsec Phase-2 Tunnel." ::= { hpnicfIPsecTunnelV2Entry 10 } hpnicfIPsecTunLocalAddrV2 OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The IP address of the local peer for the IPsec Phase-2 Tunnel." ::= { hpnicfIPsecTunnelV2Entry 11 } hpnicfIPsecTunRemoteAddrTypeV2 OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS read-only STATUS current DESCRIPTION "The type of the IP address for the remote peer of the IPsec Phase-2 Tunnel." ::= { hpnicfIPsecTunnelV2Entry 12 } hpnicfIPsecTunRemoteAddrV2 OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The IP address of the remote peer for the IPsec Phase-2 Tunnel." ::= { hpnicfIPsecTunnelV2Entry 13 } hpnicfIPsecTunKeyTypeV2 OBJECT-TYPE SYNTAX HpnicfIPsecNegoTypeV2 MAX-ACCESS read-only STATUS current DESCRIPTION "The key negotiate mode used by the IPsec Phase-2 Tunnel." ::= { hpnicfIPsecTunnelV2Entry 14 } hpnicfIPsecTunEncapModeV2 OBJECT-TYPE SYNTAX HpnicfIPsecEncapModeV2 MAX-ACCESS read-only STATUS current DESCRIPTION "The encapsulation mode used by the IPsec Phase-2 Tunnel." ::= { hpnicfIPsecTunnelV2Entry 15 } hpnicfIPsecTunInitiatorV2 OBJECT-TYPE SYNTAX INTEGER { local(1), remote(2), none(2147483647) } MAX-ACCESS read-only STATUS current DESCRIPTION "The initiator of this IPsec tunnel. Value none is used for manual IPsec tunnel, for there is no initiator or responder in this method." ::= { hpnicfIPsecTunnelV2Entry 16 } hpnicfIPsecTunLifeSizeV2 OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "The negotiated LifeSize of the IPsec Phase-2 Tunnel in kilobytes. 0 is defined as invalid value." ::= { hpnicfIPsecTunnelV2Entry 17 } hpnicfIPsecTunLifeTimeV2 OBJECT-TYPE SYNTAX Integer32 (1..2147483647) MAX-ACCESS read-only STATUS current DESCRIPTION "The negotiated LifeTime of the IPsec Phase-2 Tunnel in seconds. 2147483647 is defined as invalid value." ::= { hpnicfIPsecTunnelV2Entry 18 } hpnicfIPsecTunRemainTimeV2 OBJECT-TYPE SYNTAX Integer32 (0..2147483647) MAX-ACCESS read-only STATUS current DESCRIPTION "The remain time of SA in seconds. 2147483647 is defined as invalid value." ::= { hpnicfIPsecTunnelV2Entry 19 } hpnicfIPsecTunActiveTimeV2 OBJECT-TYPE SYNTAX Integer32 (0..2147483647) MAX-ACCESS read-only STATUS current DESCRIPTION "The duration the IPsec Phase-2 Tunnel has been active in hundredths of seconds. 2147483647 is defined as invalid value." ::= { hpnicfIPsecTunnelV2Entry 20 } hpnicfIPsecTunRemainSizeV2 OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "The remain LifeSize of SA in kilobytes. 0 is defined as invalid value." ::= { hpnicfIPsecTunnelV2Entry 21 } hpnicfIPsecTunTotalRefreshesV2 OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of security association refreshing performed." ::= { hpnicfIPsecTunnelV2Entry 22 } hpnicfIPsecTunCurrentSaInstancesV2 OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of security associations which are currently active or expiring." ::= { hpnicfIPsecTunnelV2Entry 23 } hpnicfIPsecTunInSaEncryptAlgoV2 OBJECT-TYPE SYNTAX HpnicfIPsecEncryptAlgoV2 MAX-ACCESS read-only STATUS current DESCRIPTION "The encryption algorithm used by the inbound security association of the IPsec Phase-2 Tunnel." ::= { hpnicfIPsecTunnelV2Entry 24 } hpnicfIPsecTunInSaAhAuthAlgoV2 OBJECT-TYPE SYNTAX HpnicfIPsecAuthAlgoV2 MAX-ACCESS read-only STATUS current DESCRIPTION "The authentication algorithm used by the inbound authentication header (AH) security association of the IPsec Phase-2 Tunnel." ::= { hpnicfIPsecTunnelV2Entry 25 } hpnicfIPsecTunInSaEspAuthAlgoV2 OBJECT-TYPE SYNTAX HpnicfIPsecAuthAlgoV2 MAX-ACCESS read-only STATUS current DESCRIPTION "The authentication algorithm used by the inbound encapsulation security protocol(ESP) security association of the IPsec Phase-2 Tunnel." ::= { hpnicfIPsecTunnelV2Entry 26 } hpnicfIPsecTunDiffHellmanGrpV2 OBJECT-TYPE SYNTAX HpnicfIPsecDiffHellmanGrpV2 MAX-ACCESS read-only STATUS current DESCRIPTION "The Diffie Hellman Group used by the security association of the IPsec Phase-2 Tunnel." ::= { hpnicfIPsecTunnelV2Entry 27 } hpnicfIPsecTunOutSaEncryptAlgoV2 OBJECT-TYPE SYNTAX HpnicfIPsecEncryptAlgoV2 MAX-ACCESS read-only STATUS current DESCRIPTION "The encryption algorithm used by the outbound security association of the IPsec Phase-2 Tunnel." ::= { hpnicfIPsecTunnelV2Entry 28 } hpnicfIPsecTunOutSaAhAuthAlgoV2 OBJECT-TYPE SYNTAX HpnicfIPsecAuthAlgoV2 MAX-ACCESS read-only STATUS current DESCRIPTION "The authentication algorithm used by the outbound authentication header (AH) security association of the IPsec Phase-2 Tunnel." ::= { hpnicfIPsecTunnelV2Entry 29 } hpnicfIPsecTunOutSaEspAuthAlgoV2 OBJECT-TYPE SYNTAX HpnicfIPsecAuthAlgoV2 MAX-ACCESS read-only STATUS current DESCRIPTION "The authentication algorithm used by the outbound encapsulation security protocol(ESP) security association of the IPsec Phase-2 Tunnel." ::= { hpnicfIPsecTunnelV2Entry 30 } hpnicfIPsecTunPolicyNameV2 OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS read-only STATUS current DESCRIPTION "The policy name used by this IPsec tunnel." ::= { hpnicfIPsecTunnelV2Entry 31 } hpnicfIPsecTunPolicyNumV2 OBJECT-TYPE SYNTAX Integer32 (1..2147483647) MAX-ACCESS read-only STATUS current DESCRIPTION "The sequence number of policy used by this IPsec tunnel." ::= { hpnicfIPsecTunnelV2Entry 32 } hpnicfIPsecTunStatusV2 OBJECT-TYPE SYNTAX INTEGER { initial(1), ready(2), rekeyed(3), closed(4) } MAX-ACCESS read-only STATUS current DESCRIPTION "The status of the IPsec Tunnel." ::= { hpnicfIPsecTunnelV2Entry 33 } -- =============================================== -- Begin the table of hpnicfIPsecTunnelStatV2Table. -- =============================================== hpnicfIPsecTunnelStatV2Table OBJECT-TYPE SYNTAX SEQUENCE OF HpnicfIPsecTunnelStatV2Entry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The IPsec Phase-2 Tunnel Statistics Table. " ::= { hpnicfIPsecObjectsV2 3 } hpnicfIPsecTunnelStatV2Entry OBJECT-TYPE SYNTAX HpnicfIPsecTunnelStatV2Entry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Information about hpnicfIPsecTunnelStatV2Table." INDEX { hpnicfIPsecTunIndexV2 } ::= { hpnicfIPsecTunnelStatV2Table 1 } HpnicfIPsecTunnelStatV2Entry ::= SEQUENCE { hpnicfIPsecTunInOctetsV2 Counter64, hpnicfIPsecTunInDecompOctetsV2 Counter64, hpnicfIPsecTunInPktsV2 Counter64, hpnicfIPsecTunInDropPktsV2 Counter64, hpnicfIPsecTunInReplayDropPktsV2 Counter64, hpnicfIPsecTunInAuthFailsV2 Counter64, hpnicfIPsecTunInDecryptFailsV2 Counter64, hpnicfIPsecTunOutOctetsV2 Counter64, hpnicfIPsecTunOutUncompOctetsV2 Counter64, hpnicfIPsecTunOutPktsV2 Counter64, hpnicfIPsecTunOutDropPktsV2 Counter64, hpnicfIPsecTunOutEncryptFailsV2 Counter64, hpnicfIPsecTunNoMemoryDropPktsV2 Counter64, hpnicfIPsecTunQueueFullDropPktsV2 Counter64, hpnicfIPsecTunInvalidLenDropPktsV2 Counter64, hpnicfIPsecTunTooLongDropPktsV2 Counter64, hpnicfIPsecTunInvalidSaDropPktsV2 Counter64 } hpnicfIPsecTunInOctetsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed." ::= { hpnicfIPsecTunnelStatV2Entry 1 } hpnicfIPsecTunInDecompOctetsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of decompressed octets received by this IPsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed." ::= { hpnicfIPsecTunnelStatV2Entry 2 } hpnicfIPsecTunInPktsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of packets received by this IPsec Phase-2 Tunnel." ::= { hpnicfIPsecTunnelStatV2Entry 3 } hpnicfIPsecTunInDropPktsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of packets dropped during receiving process by this IPsec Phase-2 Tunnel." ::= { hpnicfIPsecTunnelStatV2Entry 4 } hpnicfIPsecTunInReplayDropPktsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of packets dropped during receiving process due to Anti-Replay process by this IPsec Phase-2 Tunnel." ::= { hpnicfIPsecTunnelStatV2Entry 5 } hpnicfIPsecTunInAuthFailsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of inbound authentication's which ended in failure by this IPsec Phase-2 Tunnel." ::= { hpnicfIPsecTunnelStatV2Entry 6 } hpnicfIPsecTunInDecryptFailsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of inbound decryption's which ended in failure by this IPsec Phase-2 Tunnel." ::= { hpnicfIPsecTunnelStatV2Entry 7 } hpnicfIPsecTunOutOctetsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed." ::= { hpnicfIPsecTunnelStatV2Entry 8 } hpnicfIPsecTunOutUncompOctetsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of uncompressed octets sent by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed." ::= { hpnicfIPsecTunnelStatV2Entry 9 } hpnicfIPsecTunOutPktsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of packets sent by this IPsec Phase-2 Tunnel." ::= { hpnicfIPsecTunnelStatV2Entry 10 } hpnicfIPsecTunOutDropPktsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of packets dropped during sending process by this IPsec Phase-2 Tunnel." ::= { hpnicfIPsecTunnelStatV2Entry 11 } hpnicfIPsecTunOutEncryptFailsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of outbound encryption's which ended in failure by this IPsec Phase-2 Tunnel." ::= { hpnicfIPsecTunnelStatV2Entry 12 } hpnicfIPsecTunNoMemoryDropPktsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of packets dropped due to no enough memory by this IPsec Phase-2 Tunnel." ::= { hpnicfIPsecTunnelStatV2Entry 13 } hpnicfIPsecTunQueueFullDropPktsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of packets dropped due to queue full by this IPsec Phase-2 Tunnel." ::= { hpnicfIPsecTunnelStatV2Entry 14 } hpnicfIPsecTunInvalidLenDropPktsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of packets dropped due to invalid length packet by this IPsec Phase-2 Tunnel." ::= { hpnicfIPsecTunnelStatV2Entry 15 } hpnicfIPsecTunTooLongDropPktsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of packets dropped due to too long packet by this IPsec Phase-2 Tunnel." ::= { hpnicfIPsecTunnelStatV2Entry 16 } hpnicfIPsecTunInvalidSaDropPktsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of packets dropped due to invalid SA by this IPsec Phase-2 Tunnel." ::= { hpnicfIPsecTunnelStatV2Entry 17 } -- =============================================== -- Begin the table of hpnicfIPsecSaV2Table. -- =============================================== hpnicfIPsecSaV2Table OBJECT-TYPE SYNTAX SEQUENCE OF HpnicfIPsecSaV2Entry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The IPsec Phase-2 Security Protection Index Table. This table contains an entry for each active and expiring security association." ::= { hpnicfIPsecObjectsV2 4 } hpnicfIPsecSaV2Entry OBJECT-TYPE SYNTAX HpnicfIPsecSaV2Entry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Information about hpnicfIPsecSaV2Table." INDEX { hpnicfIPsecTunIndexV2,hpnicfIPsecSaIndexV2 } ::= { hpnicfIPsecSaV2Table 1 } HpnicfIPsecSaV2Entry ::= SEQUENCE { hpnicfIPsecSaIndexV2 Integer32, hpnicfIPsecSaDirectionV2 INTEGER, hpnicfIPsecSaSpiValueV2 Unsigned32, hpnicfIPsecSaSecProtocolV2 HpnicfIPsecSaProtocolV2, hpnicfIPsecSaEncryptAlgoV2 HpnicfIPsecEncryptAlgoV2, hpnicfIPsecSaAuthAlgoV2 HpnicfIPsecAuthAlgoV2, hpnicfIPsecSaStatusV2 INTEGER } hpnicfIPsecSaIndexV2 OBJECT-TYPE SYNTAX Integer32 (1..2147483647) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The number of the Sa associated with the Phase-2 Tunnel Table. The value of this index is a number which begins at one and is incremented with each Sa associated with an IPsec Phase-2 Tunnel. The value of this object will wrap at 2,147,483,647." ::= { hpnicfIPsecSaV2Entry 1 } hpnicfIPsecSaDirectionV2 OBJECT-TYPE SYNTAX INTEGER { in(1), out(2) } MAX-ACCESS read-only STATUS current DESCRIPTION "The direction of the SA." ::= { hpnicfIPsecSaV2Entry 2 } hpnicfIPsecSaSpiValueV2 OBJECT-TYPE SYNTAX Unsigned32 (1..4294967295) MAX-ACCESS read-only STATUS current DESCRIPTION "The value of the SPI." ::= { hpnicfIPsecSaV2Entry 3 } hpnicfIPsecSaSecProtocolV2 OBJECT-TYPE SYNTAX HpnicfIPsecSaProtocolV2 MAX-ACCESS read-only STATUS current DESCRIPTION "The security protocol of the SA." ::= { hpnicfIPsecSaV2Entry 4 } hpnicfIPsecSaEncryptAlgoV2 OBJECT-TYPE SYNTAX HpnicfIPsecEncryptAlgoV2 MAX-ACCESS read-only STATUS current DESCRIPTION "The encryption algorithm used by the security association of the IPsec Phase-2 Tunnel." ::= { hpnicfIPsecSaV2Entry 5 } hpnicfIPsecSaAuthAlgoV2 OBJECT-TYPE SYNTAX HpnicfIPsecAuthAlgoV2 MAX-ACCESS read-only STATUS current DESCRIPTION "The authentication algorithm used by the SA." ::= { hpnicfIPsecSaV2Entry 6 } hpnicfIPsecSaStatusV2 OBJECT-TYPE SYNTAX INTEGER { active(1), expiring(2) } MAX-ACCESS read-only STATUS current DESCRIPTION "The status of the SA." ::= { hpnicfIPsecSaV2Entry 7 } -- =============================================== -- Begin the table of hpnicfIPsecTrafficV2Table. -- =============================================== hpnicfIPsecTrafficV2Table OBJECT-TYPE SYNTAX SEQUENCE OF HpnicfIPsecTrafficV2Entry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The IPsec Phase-2 Tunnel Traffic Table. " ::= { hpnicfIPsecObjectsV2 5 } hpnicfIPsecTrafficV2Entry OBJECT-TYPE SYNTAX HpnicfIPsecTrafficV2Entry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Information about hpnicfIPsecTrafficV2Table." INDEX { hpnicfIPsecTunIndexV2 } ::= { hpnicfIPsecTrafficV2Table 1 } HpnicfIPsecTrafficV2Entry ::= SEQUENCE { hpnicfIPsecTrafficLocalTypeV2 HpnicfIPsecTrafficTypeV2, hpnicfIPsecTrafficLocalAddr1TypeV2 InetAddressType, hpnicfIPsecTrafficLocalAddr1V2 InetAddress, hpnicfIPsecTrafficLocalAddr2TypeV2 InetAddressType, hpnicfIPsecTrafficLocalAddr2V2 InetAddress, hpnicfIPsecTrafficLocalProtocol1V2 Integer32, hpnicfIPsecTrafficLocalProtocol2V2 Integer32, hpnicfIPsecTrafficLocalPort1V2 Integer32, hpnicfIPsecTrafficLocalPort2V2 Integer32, hpnicfIPsecTrafficRemoteTypeV2 HpnicfIPsecTrafficTypeV2, hpnicfIPsecTrafficRemAddr1TypeV2 InetAddressType, hpnicfIPsecTrafficRemAddr1V2 InetAddress, hpnicfIPsecTrafficRemAddr2TypeV2 InetAddressType, hpnicfIPsecTrafficRemAddr2V2 InetAddress, hpnicfIPsecTrafficRemoPro1V2 Integer32, hpnicfIPsecTrafficRemoPro2V2 Integer32, hpnicfIPsecTrafficRemPort1V2 Integer32, hpnicfIPsecTrafficRemPort2V2 Integer32 } hpnicfIPsecTrafficLocalTypeV2 OBJECT-TYPE SYNTAX HpnicfIPsecTrafficTypeV2 MAX-ACCESS read-only STATUS current DESCRIPTION "The type of the local peer's traffic. Possible values are: 1) A single IP address 2) An IP address range 3) An IP subnet" ::= { hpnicfIPsecTrafficV2Entry 1 } hpnicfIPsecTrafficLocalAddr1TypeV2 OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS read-only STATUS current DESCRIPTION "The type of the first IP address specification for the local peer's traffic." ::= { hpnicfIPsecTrafficV2Entry 2 } hpnicfIPsecTrafficLocalAddr1V2 OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The first IP address specification of the local peer's traffic. If the local peer's traffic type is single IP address, this is the IP address. If the local peer's traffic type is IP subnet, this is the subnet address. If the local peer's traffic type is IP address range, this is the beginning IP address of the range." ::= { hpnicfIPsecTrafficV2Entry 3 } hpnicfIPsecTrafficLocalAddr2TypeV2 OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS read-only STATUS current DESCRIPTION "The type of the second IP address specification for the local peer's traffic." ::= { hpnicfIPsecTrafficV2Entry 4 } hpnicfIPsecTrafficLocalAddr2V2 OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The second IP address specification of the local peer's traffic. If the local peer's traffic type is single IP address, this is the IP address. If the local peer's traffic type is IP subnet, this is the subnet mask. If the local peer's traffic type is IP address range, this is the ending IP address of the range." ::= { hpnicfIPsecTrafficV2Entry 5 } hpnicfIPsecTrafficLocalProtocol1V2 OBJECT-TYPE SYNTAX Integer32 (0..255) MAX-ACCESS read-only STATUS current DESCRIPTION "The first protocol number specification of the local peer's traffic. If the protocol type of the local peer's traffic is single protocol, this is the protocol number. If the protocol type of the local peer's traffic is protocol range, this is the beginning protocol number of the range." ::= { hpnicfIPsecTrafficV2Entry 6 } hpnicfIPsecTrafficLocalProtocol2V2 OBJECT-TYPE SYNTAX Integer32 (0..255) MAX-ACCESS read-only STATUS current DESCRIPTION "The second protocol number specification of the local peer's traffic. If the protocol type of the local peer's traffic is single protocol, this is the protocol number. If the protocol type of the local peer's traffic is protocol range, this is the ending protocol number of the range." ::= { hpnicfIPsecTrafficV2Entry 7 } hpnicfIPsecTrafficLocalPort1V2 OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS read-only STATUS current DESCRIPTION "The first port number specification of the local peer's traffic. If the port type of the local peer's traffic is single port, this is the port number. If the port type of the local peer's traffic is port range, this is the beginning port number of the range." ::= { hpnicfIPsecTrafficV2Entry 8 } hpnicfIPsecTrafficLocalPort2V2 OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS read-only STATUS current DESCRIPTION "The second port number specification of the local peer's traffic. If the port type of the local peer's traffic is single port, this is the port number. If the port type of the local peer's traffic is port range, this is the ending port number of the range." ::= { hpnicfIPsecTrafficV2Entry 9 } hpnicfIPsecTrafficRemoteTypeV2 OBJECT-TYPE SYNTAX HpnicfIPsecTrafficTypeV2 MAX-ACCESS read-only STATUS current DESCRIPTION "The type of the remote peer's traffic. Possible values are: 1) A single IP address 2) An IP address range 3) An IP subnet" ::= { hpnicfIPsecTrafficV2Entry 10 } hpnicfIPsecTrafficRemAddr1TypeV2 OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS read-only STATUS current DESCRIPTION "The type of the first IP address specification for the remote peer's traffic." ::= { hpnicfIPsecTrafficV2Entry 11 } hpnicfIPsecTrafficRemAddr1V2 OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The first IP address specification of the remote peer's traffic. If the remote traffic type is single IP address, this is the IP address. If the remote traffic type is IP subnet, this is the subnet address. If the remote traffic type is IP address range, this is the beginning IP address of the range." ::= { hpnicfIPsecTrafficV2Entry 12 } hpnicfIPsecTrafficRemAddr2TypeV2 OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS read-only STATUS current DESCRIPTION "The type of the second IP address specification for the remote peer's traffic." ::= { hpnicfIPsecTrafficV2Entry 13 } hpnicfIPsecTrafficRemAddr2V2 OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The second IP address specification of the remote peer's traffic. If the remote traffic type is single IP address, this is the IP address. If the remote traffic type is IP subnet, this is the subnet mask. If the remote traffic type is IP address range, this is the ending IP address of the range." ::= { hpnicfIPsecTrafficV2Entry 14 } hpnicfIPsecTrafficRemoPro1V2 OBJECT-TYPE SYNTAX Integer32 (0..255) MAX-ACCESS read-only STATUS current DESCRIPTION "The first protocol number specification of the remote peer's traffic. If the protocol type of the remote peer's traffic is single protocol, this is the protocol number. If the protocol type of the remote peer's traffic is protocol range, this is the beginning protocol number of the range." ::= { hpnicfIPsecTrafficV2Entry 15 } hpnicfIPsecTrafficRemoPro2V2 OBJECT-TYPE SYNTAX Integer32 (0..255) MAX-ACCESS read-only STATUS current DESCRIPTION "The second protocol number specification of the remote peer's traffic. If the protocol type of the remote peer's traffic is single protocol, this is the protocol number. If the protocol type of the remote peer's traffic is protocol range, this is the ending protocol number of the range." ::= { hpnicfIPsecTrafficV2Entry 16 } hpnicfIPsecTrafficRemPort1V2 OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS read-only STATUS current DESCRIPTION "The first port number specification of the remote peer's traffic. If the port type of the remote peer's traffic is single port, this is the port number. If the port type of the remote peer's traffic is port range, this is the beginning port number of the range." ::= { hpnicfIPsecTrafficV2Entry 17 } hpnicfIPsecTrafficRemPort2V2 OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS read-only STATUS current DESCRIPTION "The second port number specification of the remote peer's traffic. If the port type of the remote peer's traffic is single port, this is the port number. If the port type of the remote peer's traffic is port range, this is the ending port number of the range." ::= { hpnicfIPsecTrafficV2Entry 18 } -- =============================================== -- Begin the hpnicfIPsecGlobalStatsV2. -- =============================================== hpnicfIPsecGlobalStatsV2 OBJECT IDENTIFIER ::= { hpnicfIPsecObjectsV2 6 } hpnicfIPsecGlobalActiveTunnelsV2 OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of currently active IPsec Phase-2 Tunnels." ::= { hpnicfIPsecGlobalStatsV2 1 } hpnicfIPsecGlobalActiveSasV2 OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of currently active or expiring IPsec Phase-2 SA." ::= { hpnicfIPsecGlobalStatsV2 2 } hpnicfIPsecGlobalInOctetsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE determining whether or not the packet should be decompressed." ::= { hpnicfIPsecGlobalStatsV2 3 } hpnicfIPsecGlobalInDecompOctetsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of decompressed octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER the packet is decompressed." ::= { hpnicfIPsecGlobalStatsV2 4 } hpnicfIPsecGlobalInPktsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of packets received by all current and previous IPsec Phase-2 Tunnels." ::= { hpnicfIPsecGlobalStatsV2 5 } hpnicfIPsecGlobalInDropsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of packets dropped during receiving process by all current and previous IPsec Phase-2 Tunnels. " ::= { hpnicfIPsecGlobalStatsV2 6 } hpnicfIPsecGlobalInReplayDropsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of packets dropped during receiving process due to Anti-Replay process by all current and previous IPsec Phase-2 Tunnels." ::= { hpnicfIPsecGlobalStatsV2 7 } hpnicfIPsecGlobalInAuthFailsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of inbound authentication's which ended in failure by all current and previous IPsec Phase-2 Tunnels." ::= { hpnicfIPsecGlobalStatsV2 8 } hpnicfIPsecGlobalInDecryptFailsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of inbound decryption's which ended in failure by all current and previous IPsec Phase-2 Tunnels." ::= { hpnicfIPsecGlobalStatsV2 9 } hpnicfIPsecGlobalOutOctetsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER determining whether or not the packet should be compressed." ::= { hpnicfIPsecGlobalStatsV2 10 } hpnicfIPsecGlobalOutUncompOctetsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of uncompressed octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE the packet is compressed." ::= { hpnicfIPsecGlobalStatsV2 11 } hpnicfIPsecGlobalOutPktsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of packets sent by all current and previous IPsec Phase-2 Tunnels." ::= { hpnicfIPsecGlobalStatsV2 12 } hpnicfIPsecGlobalOutDropsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of packets dropped during sending process by all current and previous IPsec Phase-2 Tunnels." ::= { hpnicfIPsecGlobalStatsV2 13 } hpnicfIPsecGlobalOutEncryptFailsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of outbound encryption's which ended in failure by all current and previous IPsec Phase-2 Tunnels." ::= { hpnicfIPsecGlobalStatsV2 14 } hpnicfIPsecGlobalNoMemoryDropsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of packets dropped due to no enough memory by all current and previous IPsec Phase-2 Tunnels." ::= { hpnicfIPsecGlobalStatsV2 15 } hpnicfIPsecGlobalNoFindSaDropsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of packets dropped due to not find SA by all current and previous IPsec Phase-2 Tunnels." ::= { hpnicfIPsecGlobalStatsV2 16 } hpnicfIPsecGlobalQueueFullDropsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of packets dropped due to queue full by all current and previous IPsec Phase-2 Tunnels." ::= { hpnicfIPsecGlobalStatsV2 17 } hpnicfIPsecGlobalInvalidLenDropsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of packets dropped due to invalid packet length by all current and previous IPsec Phase-2 Tunnels." ::= { hpnicfIPsecGlobalStatsV2 18 } hpnicfIPsecGlobalTooLongDropsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of packets dropped due to too long packet by all current and previous IPsec Phase-2 Tunnels." ::= { hpnicfIPsecGlobalStatsV2 19 } hpnicfIPsecGlobalInvalidSaDropsV2 OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The total number of packets dropped due to invalid SA by all current and previous IPsec Phase-2 Tunnels." ::= { hpnicfIPsecGlobalStatsV2 20 } -- =============================================== -- Begin the hpnicfIPsecTrapObjectV2. -- =============================================== hpnicfIPsecTrapObjectV2 OBJECT IDENTIFIER ::= { hpnicfIPsecObjectsV2 7 } hpnicfIPsecPolicyNameV2 OBJECT-TYPE SYNTAX DisplayString MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The IPsec policy name with a trap." ::= { hpnicfIPsecTrapObjectV2 1 } hpnicfIPsecPolicySeqNumV2 OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The IPsec policy sequence number with a trap." ::= { hpnicfIPsecTrapObjectV2 2 } hpnicfIPsecPolicySizeV2 OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The number of IPsec policies with a trap." ::= { hpnicfIPsecTrapObjectV2 3 } -- =============================================== -- Begin the hpnicfIPsecTrapCntlV2. -- =============================================== hpnicfIPsecTrapCntlV2 OBJECT IDENTIFIER ::= { hpnicfIPsecObjectsV2 8 } hpnicfIPsecTrapGlobalCntlV2 OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "Indicates whether all IPsec traps should be generated." ::= { hpnicfIPsecTrapCntlV2 1 } hpnicfIPsecTunnelStartTrapCntlV2 OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "Indicates whether hpnicfIPsecTunnelStartV2 traps should be generated." ::= { hpnicfIPsecTrapCntlV2 2 } hpnicfIPsecTunnelStopTrapCntlV2 OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "Indicates whether hpnicfIPsecTunnelStopV2 traps should be generated." ::= { hpnicfIPsecTrapCntlV2 3 } hpnicfIPsecNoSaTrapCntlV2 OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "Indicates whether hpnicfIPsecNoSaFailureV2 traps should be generated." ::= { hpnicfIPsecTrapCntlV2 4 } hpnicfIPsecAuthFailureTrapCntlV2 OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "Indicates whether hpnicfIPsecAuthFailFailureV2 traps should be generated." ::= { hpnicfIPsecTrapCntlV2 5 } hpnicfIPsecEncryFailureTrapCntlV2 OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "Indicates whether hpnicfIPsecEncryFailFailureV2 traps should be generated." ::= { hpnicfIPsecTrapCntlV2 6 } hpnicfIPsecDecryFailureTrapCntlV2 OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "Indicates whether hpnicfIPsecDecryFailFailureV2 traps should be generated." ::= { hpnicfIPsecTrapCntlV2 7 } hpnicfIPsecInvalidSaTrapCntlV2 OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "Indicates whether hpnicfIPsecInvalidSaFailureV2 traps should be generated." ::= { hpnicfIPsecTrapCntlV2 8 } hpnicfIPsecPolicyAddTrapCntlV2 OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "Indicates whether hpnicfIPsecPolicyAddV2 traps should be generated." ::= { hpnicfIPsecTrapCntlV2 9 } hpnicfIPsecPolicyDelTrapCntlV2 OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "Indicates whether hpnicfIPsecPolicyDelV2 traps should be generated." ::= { hpnicfIPsecTrapCntlV2 10 } hpnicfIPsecPolicyAttachTrapCntlV2 OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "Indicates whether hpnicfIPsecPolicyAttachV2 traps should be generated." ::= { hpnicfIPsecTrapCntlV2 11 } hpnicfIPsecPolicyDetachTrapCntlV2 OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "Indicates whether hpnicfIPsecPolicyDetachV2 traps should be generated." ::= { hpnicfIPsecTrapCntlV2 12 } -- =============================================== -- definition of traps. -- =============================================== hpnicfIPsecTrapV2 OBJECT IDENTIFIER ::= { hpnicfIPsecObjectsV2 9 } hpnicfIPsecNotificationsV2 OBJECT IDENTIFIER ::= { hpnicfIPsecTrapV2 0 } hpnicfIPsecTunnelStartV2 NOTIFICATION-TYPE OBJECTS { hpnicfIPsecTunIndexV2, hpnicfIPsecTunLocalAddrTypeV2, hpnicfIPsecTunLocalAddrV2, hpnicfIPsecTunRemoteAddrTypeV2, hpnicfIPsecTunRemoteAddrV2, hpnicfIPsecTunLifeTimeV2, hpnicfIPsecTunLifeSizeV2 } STATUS current DESCRIPTION "This notification is generated when an IPsec Phase-2 Tunnel is created." ::= { hpnicfIPsecNotificationsV2 1 } hpnicfIPsecTunnelStopV2 NOTIFICATION-TYPE OBJECTS { hpnicfIPsecTunIndexV2, hpnicfIPsecTunLocalAddrTypeV2, hpnicfIPsecTunLocalAddrV2, hpnicfIPsecTunRemoteAddrTypeV2, hpnicfIPsecTunRemoteAddrV2, hpnicfIPsecTunActiveTimeV2 } STATUS current DESCRIPTION "This notification is generated when an IPsec Phase-2 Tunnel is deleted." ::= { hpnicfIPsecNotificationsV2 2 } hpnicfIPsecNoSaFailureV2 NOTIFICATION-TYPE OBJECTS { hpnicfIPsecTunIndexV2, hpnicfIPsecTunLocalAddrTypeV2, hpnicfIPsecTunLocalAddrV2, hpnicfIPsecTunRemoteAddrTypeV2, hpnicfIPsecTunRemoteAddrV2 } STATUS current DESCRIPTION "This notification is generated when an IPsec Phase-2 non-existent SA error occurs." ::= { hpnicfIPsecNotificationsV2 3 } hpnicfIPsecAuthFailFailureV2 NOTIFICATION-TYPE OBJECTS { hpnicfIPsecTunIndexV2, hpnicfIPsecTunLocalAddrTypeV2, hpnicfIPsecTunLocalAddrV2, hpnicfIPsecTunRemoteAddrTypeV2, hpnicfIPsecTunRemoteAddrV2 } STATUS current DESCRIPTION "This notification is generated when the IPsec phase-2 authentication failure occurs." ::= { hpnicfIPsecNotificationsV2 4 } hpnicfIPsecEncryFailFailureV2 NOTIFICATION-TYPE OBJECTS { hpnicfIPsecTunIndexV2, hpnicfIPsecTunLocalAddrTypeV2, hpnicfIPsecTunLocalAddrV2, hpnicfIPsecTunRemoteAddrTypeV2, hpnicfIPsecTunRemoteAddrV2 } STATUS current DESCRIPTION "This notification is generated when the IPsec phase-2 tunnel has an encrypting failure." ::= { hpnicfIPsecNotificationsV2 5 } hpnicfIPsecDecryFailFailureV2 NOTIFICATION-TYPE OBJECTS { hpnicfIPsecTunIndexV2, hpnicfIPsecTunLocalAddrTypeV2, hpnicfIPsecTunLocalAddrV2, hpnicfIPsecTunRemoteAddrTypeV2, hpnicfIPsecTunRemoteAddrV2 } STATUS current DESCRIPTION "This notification is generated when the IPsec phase-2 tunnel has a decrypting failure." ::= { hpnicfIPsecNotificationsV2 6 } hpnicfIPsecInvalidSaFailureV2 NOTIFICATION-TYPE OBJECTS { hpnicfIPsecTunIndexV2, hpnicfIPsecSaIndexV2, hpnicfIPsecTunLocalAddrTypeV2, hpnicfIPsecTunLocalAddrV2, hpnicfIPsecTunRemoteAddrTypeV2, hpnicfIPsecTunRemoteAddrV2, hpnicfIPsecSaSpiValueV2 } STATUS current DESCRIPTION "This notification is generated when the IPsec phase-2 invalid SA failure occurs." ::= { hpnicfIPsecNotificationsV2 7 } hpnicfIPsecPolicyAddV2 NOTIFICATION-TYPE OBJECTS { hpnicfIPsecPolicyNameV2, hpnicfIPsecPolicySeqNumV2, hpnicfIPsecPolicySizeV2 } STATUS current DESCRIPTION "This notification is generated when an IPsec policy is added." ::= { hpnicfIPsecNotificationsV2 8 } hpnicfIPsecPolicyDelV2 NOTIFICATION-TYPE OBJECTS { hpnicfIPsecPolicyNameV2, hpnicfIPsecPolicySeqNumV2, hpnicfIPsecPolicySizeV2 } STATUS current DESCRIPTION "This notification is generated when an IPsec policy is deleted." ::= { hpnicfIPsecNotificationsV2 9 } hpnicfIPsecPolicyAttachV2 NOTIFICATION-TYPE OBJECTS { hpnicfIPsecPolicyNameV2, hpnicfIPsecPolicySizeV2, ifIndex } STATUS current DESCRIPTION "This notification is generated when an IPsec policy is attached with one interface." ::= { hpnicfIPsecNotificationsV2 10 } hpnicfIPsecPolicyDetachV2 NOTIFICATION-TYPE OBJECTS { hpnicfIPsecPolicyNameV2, hpnicfIPsecPolicySizeV2, ifIndex } STATUS current DESCRIPTION "This notification is generated when an IPsec policy is detached with one interface." ::= { hpnicfIPsecNotificationsV2 11 } -- =============================================== -- Conformance Information -- =============================================== hpnicfIPsecConformanceV2 OBJECT IDENTIFIER ::= { hpnicfIPsecMonitorV2 2 } hpnicfIPsecCompliancesV2 OBJECT IDENTIFIER ::= { hpnicfIPsecConformanceV2 1 } hpnicfIPsecGroupsV2 OBJECT IDENTIFIER ::= { hpnicfIPsecConformanceV2 2 } -- =============================================== -- Compliance Statements -- =============================================== hpnicfIPsecComplianceV2 MODULE-COMPLIANCE STATUS current DESCRIPTION " " MODULE -- this module MANDATORY-GROUPS { hpnicfIPsecScalarObjectsGroupV2, hpnicfIPsecTunnelTableGroupV2, hpnicfIPsecTunnelStatGroupV2, hpnicfIPsecSaGroupV2, hpnicfIPsecTrafficTableGroupV2, hpnicfIPsecGlobalStatsGroupV2, hpnicfIPsecTrapObjectGroupV2, hpnicfIPsecTrapCntlGroupV2, hpnicfIPsecTrapGroupV2 } ::= { hpnicfIPsecCompliancesV2 1 } hpnicfIPsecScalarObjectsGroupV2 OBJECT-GROUP OBJECTS { hpnicfIPsecMIBVersion } STATUS current DESCRIPTION "The group contains all of scalar objects of the MIB." ::= { hpnicfIPsecGroupsV2 1 } hpnicfIPsecTunnelTableGroupV2 OBJECT-GROUP OBJECTS { hpnicfIPsecTunIfIndexV2, hpnicfIPsecTunIKETunnelIndexV2, hpnicfIPsecTunIKETunLocalIDTypeV2, hpnicfIPsecTunIKETunLocalIDVal1V2, hpnicfIPsecTunIKETunLocalIDVal2V2, hpnicfIPsecTunIKETunRemoteIDTypeV2, hpnicfIPsecTunIKETunRemoteIDVal1V2, hpnicfIPsecTunIKETunRemoteIDVal2V2, hpnicfIPsecTunLocalAddrTypeV2, hpnicfIPsecTunLocalAddrV2, hpnicfIPsecTunRemoteAddrTypeV2, hpnicfIPsecTunRemoteAddrV2, hpnicfIPsecTunKeyTypeV2, hpnicfIPsecTunEncapModeV2, hpnicfIPsecTunInitiatorV2, hpnicfIPsecTunLifeSizeV2, hpnicfIPsecTunLifeTimeV2, hpnicfIPsecTunRemainTimeV2, hpnicfIPsecTunActiveTimeV2, hpnicfIPsecTunRemainSizeV2, hpnicfIPsecTunTotalRefreshesV2, hpnicfIPsecTunCurrentSaInstancesV2, hpnicfIPsecTunInSaEncryptAlgoV2, hpnicfIPsecTunInSaAhAuthAlgoV2, hpnicfIPsecTunInSaEspAuthAlgoV2, hpnicfIPsecTunDiffHellmanGrpV2, hpnicfIPsecTunOutSaEncryptAlgoV2, hpnicfIPsecTunOutSaAhAuthAlgoV2, hpnicfIPsecTunOutSaEspAuthAlgoV2, hpnicfIPsecTunPolicyNameV2, hpnicfIPsecTunPolicyNumV2, hpnicfIPsecTunStatusV2 } STATUS current DESCRIPTION "The group contains the IPsec tunnel's property information." ::= { hpnicfIPsecGroupsV2 2 } hpnicfIPsecTunnelStatGroupV2 OBJECT-GROUP OBJECTS { hpnicfIPsecTunInOctetsV2, hpnicfIPsecTunInDecompOctetsV2, hpnicfIPsecTunInPktsV2, hpnicfIPsecTunInDropPktsV2, hpnicfIPsecTunInReplayDropPktsV2, hpnicfIPsecTunInAuthFailsV2, hpnicfIPsecTunInDecryptFailsV2, hpnicfIPsecTunOutOctetsV2, hpnicfIPsecTunOutUncompOctetsV2, hpnicfIPsecTunOutPktsV2, hpnicfIPsecTunOutDropPktsV2, hpnicfIPsecTunOutEncryptFailsV2, hpnicfIPsecTunNoMemoryDropPktsV2, hpnicfIPsecTunQueueFullDropPktsV2, hpnicfIPsecTunInvalidLenDropPktsV2, hpnicfIPsecTunTooLongDropPktsV2, hpnicfIPsecTunInvalidSaDropPktsV2 } STATUS current DESCRIPTION "The group contains the IPsec tunnel's statistic information." ::= { hpnicfIPsecGroupsV2 3 } hpnicfIPsecSaGroupV2 OBJECT-GROUP OBJECTS { hpnicfIPsecSaDirectionV2, hpnicfIPsecSaSpiValueV2, hpnicfIPsecSaSecProtocolV2, hpnicfIPsecSaEncryptAlgoV2, hpnicfIPsecSaAuthAlgoV2, hpnicfIPsecSaStatusV2 } STATUS current DESCRIPTION "The group contains the SA's property information." ::= { hpnicfIPsecGroupsV2 4 } hpnicfIPsecTrafficTableGroupV2 OBJECT-GROUP OBJECTS { hpnicfIPsecTrafficLocalTypeV2, hpnicfIPsecTrafficLocalAddr1TypeV2, hpnicfIPsecTrafficLocalAddr1V2, hpnicfIPsecTrafficLocalAddr2TypeV2, hpnicfIPsecTrafficLocalAddr2V2, hpnicfIPsecTrafficLocalProtocol1V2, hpnicfIPsecTrafficLocalProtocol2V2, hpnicfIPsecTrafficLocalPort1V2, hpnicfIPsecTrafficLocalPort2V2, hpnicfIPsecTrafficRemoteTypeV2, hpnicfIPsecTrafficRemAddr1TypeV2, hpnicfIPsecTrafficRemAddr1V2, hpnicfIPsecTrafficRemAddr2TypeV2, hpnicfIPsecTrafficRemAddr2V2, hpnicfIPsecTrafficRemoPro1V2, hpnicfIPsecTrafficRemoPro2V2, hpnicfIPsecTrafficRemPort1V2, hpnicfIPsecTrafficRemPort2V2 } STATUS current DESCRIPTION "The group contains the property information of the data flow protected by IPsec tunnel." ::= { hpnicfIPsecGroupsV2 5 } hpnicfIPsecGlobalStatsGroupV2 OBJECT-GROUP OBJECTS { hpnicfIPsecGlobalActiveTunnelsV2, hpnicfIPsecGlobalActiveSasV2, hpnicfIPsecGlobalInOctetsV2, hpnicfIPsecGlobalInDecompOctetsV2, hpnicfIPsecGlobalInPktsV2, hpnicfIPsecGlobalInDropsV2, hpnicfIPsecGlobalInReplayDropsV2, hpnicfIPsecGlobalInAuthFailsV2, hpnicfIPsecGlobalInDecryptFailsV2, hpnicfIPsecGlobalOutOctetsV2, hpnicfIPsecGlobalOutUncompOctetsV2, hpnicfIPsecGlobalOutPktsV2, hpnicfIPsecGlobalOutDropsV2, hpnicfIPsecGlobalOutEncryptFailsV2, hpnicfIPsecGlobalNoMemoryDropsV2, hpnicfIPsecGlobalNoFindSaDropsV2, hpnicfIPsecGlobalQueueFullDropsV2, hpnicfIPsecGlobalInvalidLenDropsV2, hpnicfIPsecGlobalTooLongDropsV2, hpnicfIPsecGlobalInvalidSaDropsV2 } STATUS current DESCRIPTION "The group contains all of the IPsec tunnel's statistic information." ::= { hpnicfIPsecGroupsV2 6 } hpnicfIPsecTrapObjectGroupV2 OBJECT-GROUP OBJECTS { hpnicfIPsecPolicyNameV2, hpnicfIPsecPolicySeqNumV2, hpnicfIPsecPolicySizeV2 } STATUS current DESCRIPTION "The group contains all of trap objects of IPsec tunnels." ::= { hpnicfIPsecGroupsV2 7 } hpnicfIPsecTrapCntlGroupV2 OBJECT-GROUP OBJECTS { hpnicfIPsecTrapGlobalCntlV2, hpnicfIPsecTunnelStartTrapCntlV2, hpnicfIPsecTunnelStopTrapCntlV2, hpnicfIPsecNoSaTrapCntlV2, hpnicfIPsecAuthFailureTrapCntlV2, hpnicfIPsecEncryFailureTrapCntlV2, hpnicfIPsecDecryFailureTrapCntlV2, hpnicfIPsecInvalidSaTrapCntlV2, hpnicfIPsecPolicyAddTrapCntlV2, hpnicfIPsecPolicyDelTrapCntlV2, hpnicfIPsecPolicyAttachTrapCntlV2, hpnicfIPsecPolicyDetachTrapCntlV2 } STATUS current DESCRIPTION "The group contains all of trap switches of IPsec tunnels." ::= { hpnicfIPsecGroupsV2 8 } hpnicfIPsecTrapGroupV2 NOTIFICATION-GROUP NOTIFICATIONS { hpnicfIPsecTunnelStartV2, hpnicfIPsecTunnelStopV2, hpnicfIPsecNoSaFailureV2, hpnicfIPsecAuthFailFailureV2, hpnicfIPsecEncryFailFailureV2, hpnicfIPsecDecryFailFailureV2, hpnicfIPsecInvalidSaFailureV2, hpnicfIPsecPolicyAddV2, hpnicfIPsecPolicyDelV2, hpnicfIPsecPolicyAttachV2, hpnicfIPsecPolicyDetachV2 } STATUS current DESCRIPTION "The group contains all of trap of IPsec tunnels." ::= { hpnicfIPsecGroupsV2 9 } END