1986 lines
72 KiB
Plaintext
1986 lines
72 KiB
Plaintext
-- ====================================================================
|
|
-- Copyright (c) 2010-2013 Hewlett-Packard Development Company, L.P.
|
|
--
|
|
-- Description: The MIB is designed to get IPsec tunnels' statistic information.
|
|
-- Reference:
|
|
-- Version: 1.0
|
|
-- History:
|
|
-- V1.0: The initial version created by Wanghaisheng and Weiyanheng.
|
|
-- =====================================================================
|
|
HPN-ICF-IPSEC-MONITOR-V2-MIB DEFINITIONS ::= BEGIN
|
|
|
|
IMPORTS
|
|
ifIndex
|
|
FROM RFC1213-MIB
|
|
InterfaceIndex
|
|
FROM IF-MIB
|
|
DisplayString, TEXTUAL-CONVENTION, TruthValue
|
|
FROM SNMPv2-TC
|
|
Integer32, Counter32, Counter64, OBJECT-TYPE,
|
|
MODULE-IDENTITY, Gauge32, NOTIFICATION-TYPE, Unsigned32
|
|
FROM SNMPv2-SMI
|
|
InetAddressType, InetAddress
|
|
FROM INET-ADDRESS-MIB
|
|
MODULE-COMPLIANCE, OBJECT-GROUP, NOTIFICATION-GROUP
|
|
FROM SNMPv2-CONF
|
|
hpnicfCommon
|
|
FROM HPN-ICF-OID-MIB;
|
|
|
|
hpnicfIPsecMonitorV2 MODULE-IDENTITY
|
|
LAST-UPDATED "201206270000Z" -- Jun. 27, 2012 GMT
|
|
ORGANIZATION
|
|
""
|
|
CONTACT-INFO
|
|
""
|
|
DESCRIPTION
|
|
"The MIB is designed to get statistic information of IPsec tunnels.
|
|
With this MIB, we can get information of a certain tunnel or all
|
|
tunnels."
|
|
REVISION
|
|
"201206270000Z"
|
|
DESCRIPTION
|
|
"Initial version."
|
|
::= { hpnicfCommon 126 }
|
|
|
|
HpnicfIPsecDiffHellmanGrpV2 ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Diffie Hellman Group used in the IKE and IPsec negotiations.
|
|
invalidGroup(2147483647) is defined as invalid value."
|
|
SYNTAX INTEGER {
|
|
none(0),
|
|
dhGroup1(1),
|
|
dhGroup2(2),
|
|
dhGroup5(5),
|
|
dhGroup14(14),
|
|
dhGroup24(24),
|
|
invalidGroup(2147483647)
|
|
}
|
|
|
|
HpnicfIPsecEncapModeV2 ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The encapsulation mode used by an IPsec Phase-2 Tunnel.
|
|
invalidMode(2147483647) is defined as invalid value."
|
|
SYNTAX INTEGER {
|
|
tunnel(1),
|
|
transport(2),
|
|
invalidMode(2147483647)
|
|
}
|
|
|
|
HpnicfIPsecEncryptAlgoV2 ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The encryption algorithm used in the IKE and IPsec negotiations.
|
|
invalidAlg(2147483647) is defined as invalid value."
|
|
SYNTAX INTEGER {
|
|
none(0),
|
|
desCbc(1),
|
|
ideaCbc(2),
|
|
blowfishCbc(3),
|
|
rc5R16B64Cbc(4),
|
|
tripleDesCbc(5),
|
|
castCbc(6),
|
|
aesCbc(7),
|
|
nsaCbc(8),
|
|
aesCbc128(9),
|
|
aesCbc192(10),
|
|
aesCbc256(11),
|
|
aesCtr(12),
|
|
aesCamelliaCbc(13),
|
|
rc4(14),
|
|
invalidAlg(2147483647)
|
|
}
|
|
|
|
HpnicfIPsecAuthAlgoV2 ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The authentication algorithm used in the IKE negotiations.
|
|
invalidAlg(2147483647) is defined as invalid value."
|
|
SYNTAX INTEGER {
|
|
none(0),
|
|
md5(1),
|
|
sha1(2),
|
|
sha256(3),
|
|
sha384(4),
|
|
sha512(5),
|
|
invalidAlg(2147483647)
|
|
}
|
|
|
|
HpnicfIPsecSaProtocolV2 ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The protocol of security association."
|
|
SYNTAX INTEGER {
|
|
reserved(0),
|
|
ah(2),
|
|
esp(3),
|
|
ipcomp(4)
|
|
}
|
|
|
|
HpnicfIPsecIDTypeV2 ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of IPsec Identity."
|
|
SYNTAX INTEGER {
|
|
reserved(0),
|
|
ipv4Addr(1),
|
|
fqdn(2), -- fully-qualified domain name
|
|
userFqdn(3), -- fully-qualified username
|
|
ipv4AddrSubnet(4),
|
|
ipv6Addr(5),
|
|
ipv6AddrSubnet(6),
|
|
ipv4AddrRange(7),
|
|
ipv6AddrRange(8),
|
|
derAsn1Dn(9), -- the binary DER encoding of an ASN.1 X.500 Distinguished
|
|
-- Name [X.501] of the princIPal whose certificates are
|
|
-- being exchanged to establish the SA.
|
|
derAsn1Gn(10), -- the binary DER encoding of an ASN.1 X.500 GeneralName
|
|
-- [X.509] of the princIPal whose certificates are being
|
|
-- exchanged to establish the SA.
|
|
keyId(11) -- specifies an opaque byte stream which may be used to
|
|
-- pass vendor-specific information necessary to identify
|
|
-- which pre-shared key should be used to authenticate
|
|
-- Aggressive mode negotiations.
|
|
}
|
|
|
|
HpnicfIPsecTrafficTypeV2 ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of the data flow."
|
|
SYNTAX INTEGER {
|
|
ipv4Addr(1),
|
|
ipv4AddrSubnet(4),
|
|
ipv6Addr(5),
|
|
ipv6AddrSubnet(6),
|
|
ipv4AddrRange(7),
|
|
ipv6AddrRange(8)
|
|
}
|
|
|
|
HpnicfIPsecNegoTypeV2 ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of key used by an IPsec Phase-2 Tunnel.
|
|
invalidType(2147483647) is defined as invalid value."
|
|
SYNTAX INTEGER {
|
|
ike(1),
|
|
manual(2),
|
|
invalidType(2147483647)
|
|
}
|
|
|
|
HpnicfIPsecTunnelStateV2 ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The state of IPsec tunnel."
|
|
SYNTAX INTEGER {
|
|
active(1),
|
|
timeout(2)
|
|
}
|
|
|
|
-- ========================================================================
|
|
-- Node definitions
|
|
-- ========================================================================
|
|
-- Begin the node of hpnicfIPsecObjectsV2.
|
|
|
|
hpnicfIPsecObjectsV2 OBJECT IDENTIFIER ::= { hpnicfIPsecMonitorV2 1 }
|
|
|
|
-- =======================================
|
|
-- Begin the hpnicfIPsecScalarObjectsV2.
|
|
-- =======================================
|
|
hpnicfIPsecScalarObjectsV2 OBJECT IDENTIFIER ::= { hpnicfIPsecObjectsV2 1 }
|
|
|
|
hpnicfIPsecMIBVersion OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Version string of this MIB."
|
|
::= { hpnicfIPsecScalarObjectsV2 1 }
|
|
|
|
-- ===============================================
|
|
-- Begin the table of hpnicfIPsecTunnelV2Table.
|
|
-- ===============================================
|
|
|
|
hpnicfIPsecTunnelV2Table OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF HpnicfIPsecTunnelV2Entry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The IPsec Phase-2 Tunnel Table. There is one entry in this
|
|
table for each active IPsec Phase-2 Tunnel."
|
|
::= { hpnicfIPsecObjectsV2 2 }
|
|
|
|
hpnicfIPsecTunnelV2Entry OBJECT-TYPE
|
|
SYNTAX HpnicfIPsecTunnelV2Entry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Information about hpnicfIPsecTunnelV2Table."
|
|
INDEX { hpnicfIPsecTunIndexV2 }
|
|
::= { hpnicfIPsecTunnelV2Table 1 }
|
|
|
|
HpnicfIPsecTunnelV2Entry ::=
|
|
SEQUENCE {
|
|
hpnicfIPsecTunIndexV2
|
|
Integer32,
|
|
hpnicfIPsecTunIfIndexV2
|
|
InterfaceIndex,
|
|
hpnicfIPsecTunIKETunnelIndexV2
|
|
Integer32,
|
|
hpnicfIPsecTunIKETunLocalIDTypeV2
|
|
HpnicfIPsecIDTypeV2,
|
|
hpnicfIPsecTunIKETunLocalIDVal1V2
|
|
DisplayString,
|
|
hpnicfIPsecTunIKETunLocalIDVal2V2
|
|
DisplayString,
|
|
hpnicfIPsecTunIKETunRemoteIDTypeV2
|
|
HpnicfIPsecIDTypeV2,
|
|
hpnicfIPsecTunIKETunRemoteIDVal1V2
|
|
DisplayString,
|
|
hpnicfIPsecTunIKETunRemoteIDVal2V2
|
|
DisplayString,
|
|
hpnicfIPsecTunLocalAddrTypeV2
|
|
InetAddressType,
|
|
hpnicfIPsecTunLocalAddrV2
|
|
InetAddress,
|
|
hpnicfIPsecTunRemoteAddrTypeV2
|
|
InetAddressType,
|
|
hpnicfIPsecTunRemoteAddrV2
|
|
InetAddress,
|
|
hpnicfIPsecTunKeyTypeV2
|
|
HpnicfIPsecNegoTypeV2,
|
|
hpnicfIPsecTunEncapModeV2
|
|
HpnicfIPsecEncapModeV2,
|
|
hpnicfIPsecTunInitiatorV2
|
|
INTEGER,
|
|
hpnicfIPsecTunLifeSizeV2
|
|
Gauge32,
|
|
hpnicfIPsecTunLifeTimeV2
|
|
Integer32,
|
|
hpnicfIPsecTunRemainTimeV2
|
|
Integer32,
|
|
hpnicfIPsecTunActiveTimeV2
|
|
Integer32,
|
|
hpnicfIPsecTunRemainSizeV2
|
|
Gauge32,
|
|
hpnicfIPsecTunTotalRefreshesV2
|
|
Counter32,
|
|
hpnicfIPsecTunCurrentSaInstancesV2
|
|
Gauge32,
|
|
hpnicfIPsecTunInSaEncryptAlgoV2
|
|
HpnicfIPsecEncryptAlgoV2,
|
|
hpnicfIPsecTunInSaAhAuthAlgoV2
|
|
HpnicfIPsecAuthAlgoV2,
|
|
hpnicfIPsecTunInSaEspAuthAlgoV2
|
|
HpnicfIPsecAuthAlgoV2,
|
|
hpnicfIPsecTunDiffHellmanGrpV2
|
|
HpnicfIPsecDiffHellmanGrpV2,
|
|
hpnicfIPsecTunOutSaEncryptAlgoV2
|
|
HpnicfIPsecEncryptAlgoV2,
|
|
hpnicfIPsecTunOutSaAhAuthAlgoV2
|
|
HpnicfIPsecAuthAlgoV2,
|
|
hpnicfIPsecTunOutSaEspAuthAlgoV2
|
|
HpnicfIPsecAuthAlgoV2,
|
|
hpnicfIPsecTunPolicyNameV2
|
|
DisplayString,
|
|
hpnicfIPsecTunPolicyNumV2
|
|
Integer32,
|
|
hpnicfIPsecTunStatusV2
|
|
INTEGER
|
|
}
|
|
|
|
hpnicfIPsecTunIndexV2 OBJECT-TYPE
|
|
SYNTAX Integer32 (1..2147483647)
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The index of IPsec Phase-2 Tunnel Table. The value of
|
|
the index is a number which begins at one and is
|
|
incremented with each tunnel that is created. The
|
|
value of this object will wrap at 2147483647."
|
|
::= { hpnicfIPsecTunnelV2Entry 1 }
|
|
|
|
hpnicfIPsecTunIfIndexV2 OBJECT-TYPE
|
|
SYNTAX InterfaceIndex
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The interface index( the ifIndex of ifTable )."
|
|
::= { hpnicfIPsecTunnelV2Entry 2 }
|
|
|
|
hpnicfIPsecTunIKETunnelIndexV2 OBJECT-TYPE
|
|
SYNTAX Integer32 (1..2147483647)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The index of the associated IPsec Phase-1 IKE Tunnel
|
|
(IKETunIndex in the IKETunnelTable). 2147483647 is defined as
|
|
invalid value. "
|
|
::= { hpnicfIPsecTunnelV2Entry 3 }
|
|
|
|
hpnicfIPsecTunIKETunLocalIDTypeV2 OBJECT-TYPE
|
|
SYNTAX HpnicfIPsecIDTypeV2
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of the local peer identity for the associated IPsec
|
|
Phase-1 IKE Tunnel (IKETunLocalType in the IKETunnelTable)."
|
|
::= { hpnicfIPsecTunnelV2Entry 4 }
|
|
|
|
hpnicfIPsecTunIKETunLocalIDVal1V2 OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The value of the local peer identity for the associated IPsec
|
|
Phase-1 IKE Tunnel (IKETunLocalValue1 in the IKETunnelTable).
|
|
|
|
If the local peer type is ipv4Addr/ipv6Addr, this is the IP address
|
|
used to identify the local peer.
|
|
|
|
If the local peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is
|
|
the subnet address.
|
|
|
|
If the local peer type is ipv4AddrRange/ipv6AddrRange, this is
|
|
the beginning IP address of the range.
|
|
|
|
If the local peer type is fqdn/userFqdn, this is the host name
|
|
used to identify the local peer.
|
|
|
|
If the local peer type is derAsn1Dn, this is the binary DER
|
|
encoding of an ASN.1 X.500 Distinguished Name [X.501] of the
|
|
principal whose certificates are being exchanged to establish
|
|
the SA.
|
|
|
|
If the local peer type is derAsn1Gn, this is the binary DER
|
|
encoding of an ASN.1 X.500 GeneralName [X.509] of the principal
|
|
whose certificates are being exchanged to establish the SA.
|
|
|
|
If the local peer type is keyId, this is an opaque byte
|
|
stream which may be used to pass vendor-specific information
|
|
necessary to identify which pre-shared key should be used to
|
|
authenticate Aggressive mode negotiations."
|
|
::= { hpnicfIPsecTunnelV2Entry 5 }
|
|
|
|
hpnicfIPsecTunIKETunLocalIDVal2V2 OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The second specification of the local peer's IP address for the
|
|
associated IPsec Phase-1 IKE Tunnel (IKETunLocalValue2 in the
|
|
IKETunnelTable).
|
|
|
|
If the local peer type is ipv4AddrSubnet/ipv6AddrSubnet, this
|
|
is the subnet mask.
|
|
|
|
If the local peer type is ipv4AddrRange/ipv6AddrRange, this is
|
|
the ending IP address of the range.
|
|
|
|
If the local peer type is others, this is a zero-length string."
|
|
::= { hpnicfIPsecTunnelV2Entry 6 }
|
|
|
|
hpnicfIPsecTunIKETunRemoteIDTypeV2 OBJECT-TYPE
|
|
SYNTAX HpnicfIPsecIDTypeV2
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of the remote peer identity for the associated IPsec
|
|
Phase-1 IKE Tunnel (IKETunRemoteType in the IKETunnelTable)."
|
|
::= { hpnicfIPsecTunnelV2Entry 7 }
|
|
|
|
hpnicfIPsecTunIKETunRemoteIDVal1V2 OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The value of the remote peer identity for the associated IPsec
|
|
Phase-1 IKE Tunnel (IKETunRemoteValue1 in the IKETunnelTable).
|
|
|
|
If the remote peer type is ipv4Addr/ipv6Addr, this is the IP address
|
|
used to identify the remote peer.
|
|
|
|
If the remote peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is
|
|
the subnet address.
|
|
|
|
If the remote peer type is ipv4AddrRange/ipv6AddrRange, this is
|
|
the beginning IP address of the range.
|
|
|
|
If the remote peer type is fqdn/userFqdn, this is the host name
|
|
used to identify the remote peer.
|
|
|
|
If the remote peer type is derAsn1Dn, this is the binary DER
|
|
encoding of an ASN.1 X.500 Distinguished Name [X.501] of the
|
|
principal whose certificates are being exchanged to establish
|
|
the SA.
|
|
|
|
If the remote peer type is derAsn1Gn, this is the binary DER
|
|
encoding of an ASN.1 X.500 GeneralName [X.509] of the principal
|
|
whose certificates are being exchanged to establish the SA.
|
|
|
|
If the remote peer type is keyId, this is an opaque byte
|
|
stream which may be used to pass vendor-specific information
|
|
necessary to identify which pre-shared key should be used to
|
|
authenticate Aggressive mode negotiations."
|
|
::= { hpnicfIPsecTunnelV2Entry 8 }
|
|
|
|
hpnicfIPsecTunIKETunRemoteIDVal2V2 OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The second specification of the remote peer's IP address for the
|
|
associated IPsec Phase-1 IKE Tunnel(IKETunRemoteValue2 in the
|
|
IKETunnelTable).
|
|
|
|
If the remote peer type is ipv4AddrSubnet/ipv6AddrSubnet, this
|
|
is the subnet mask.
|
|
|
|
If the remote peer type is ipv4AddrRange/ipv6AddrRange, this is
|
|
the ending IP address of the range.
|
|
|
|
If the remote peer type is others, this is a zero-length string."
|
|
::= { hpnicfIPsecTunnelV2Entry 9 }
|
|
|
|
hpnicfIPsecTunLocalAddrTypeV2 OBJECT-TYPE
|
|
SYNTAX InetAddressType
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of the IP address for the local peer of the IPsec Phase-2
|
|
Tunnel."
|
|
::= { hpnicfIPsecTunnelV2Entry 10 }
|
|
|
|
hpnicfIPsecTunLocalAddrV2 OBJECT-TYPE
|
|
SYNTAX InetAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The IP address of the local peer for the IPsec Phase-2 Tunnel."
|
|
::= { hpnicfIPsecTunnelV2Entry 11 }
|
|
|
|
hpnicfIPsecTunRemoteAddrTypeV2 OBJECT-TYPE
|
|
SYNTAX InetAddressType
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of the IP address for the remote peer of the IPsec Phase-2
|
|
Tunnel."
|
|
::= { hpnicfIPsecTunnelV2Entry 12 }
|
|
|
|
hpnicfIPsecTunRemoteAddrV2 OBJECT-TYPE
|
|
SYNTAX InetAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The IP address of the remote peer for the IPsec Phase-2 Tunnel."
|
|
::= { hpnicfIPsecTunnelV2Entry 13 }
|
|
|
|
hpnicfIPsecTunKeyTypeV2 OBJECT-TYPE
|
|
SYNTAX HpnicfIPsecNegoTypeV2
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The key negotiate mode used by the IPsec Phase-2 Tunnel."
|
|
::= { hpnicfIPsecTunnelV2Entry 14 }
|
|
|
|
hpnicfIPsecTunEncapModeV2 OBJECT-TYPE
|
|
SYNTAX HpnicfIPsecEncapModeV2
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The encapsulation mode used by the IPsec Phase-2 Tunnel."
|
|
::= { hpnicfIPsecTunnelV2Entry 15 }
|
|
|
|
hpnicfIPsecTunInitiatorV2 OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
{
|
|
local(1),
|
|
remote(2),
|
|
none(2147483647)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The initiator of this IPsec tunnel. Value none is used for manual
|
|
IPsec tunnel, for there is no initiator or responder in this method."
|
|
::= { hpnicfIPsecTunnelV2Entry 16 }
|
|
|
|
hpnicfIPsecTunLifeSizeV2 OBJECT-TYPE
|
|
SYNTAX Gauge32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The negotiated LifeSize of the IPsec Phase-2 Tunnel in kilobytes.
|
|
0 is defined as invalid value."
|
|
::= { hpnicfIPsecTunnelV2Entry 17 }
|
|
|
|
hpnicfIPsecTunLifeTimeV2 OBJECT-TYPE
|
|
SYNTAX Integer32 (1..2147483647)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The negotiated LifeTime of the IPsec Phase-2 Tunnel in seconds.
|
|
2147483647 is defined as invalid value."
|
|
::= { hpnicfIPsecTunnelV2Entry 18 }
|
|
|
|
hpnicfIPsecTunRemainTimeV2 OBJECT-TYPE
|
|
SYNTAX Integer32 (0..2147483647)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The remain time of SA in seconds. 2147483647 is defined as invalid
|
|
value."
|
|
::= { hpnicfIPsecTunnelV2Entry 19 }
|
|
|
|
hpnicfIPsecTunActiveTimeV2 OBJECT-TYPE
|
|
SYNTAX Integer32 (0..2147483647)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The duration the IPsec Phase-2 Tunnel has been active in
|
|
hundredths of seconds. 2147483647 is defined as invalid value."
|
|
::= { hpnicfIPsecTunnelV2Entry 20 }
|
|
|
|
hpnicfIPsecTunRemainSizeV2 OBJECT-TYPE
|
|
SYNTAX Gauge32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The remain LifeSize of SA in kilobytes. 0 is defined as
|
|
invalid value."
|
|
::= { hpnicfIPsecTunnelV2Entry 21 }
|
|
|
|
hpnicfIPsecTunTotalRefreshesV2 OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of security association refreshing performed."
|
|
::= { hpnicfIPsecTunnelV2Entry 22 }
|
|
|
|
hpnicfIPsecTunCurrentSaInstancesV2 OBJECT-TYPE
|
|
SYNTAX Gauge32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of security associations which are currently active
|
|
or expiring."
|
|
::= { hpnicfIPsecTunnelV2Entry 23 }
|
|
|
|
hpnicfIPsecTunInSaEncryptAlgoV2 OBJECT-TYPE
|
|
SYNTAX HpnicfIPsecEncryptAlgoV2
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The encryption algorithm used by the inbound security association
|
|
of the IPsec Phase-2 Tunnel."
|
|
::= { hpnicfIPsecTunnelV2Entry 24 }
|
|
|
|
hpnicfIPsecTunInSaAhAuthAlgoV2 OBJECT-TYPE
|
|
SYNTAX HpnicfIPsecAuthAlgoV2
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The authentication algorithm used by the inbound authentication
|
|
header (AH) security association of the IPsec Phase-2 Tunnel."
|
|
::= { hpnicfIPsecTunnelV2Entry 25 }
|
|
|
|
hpnicfIPsecTunInSaEspAuthAlgoV2 OBJECT-TYPE
|
|
SYNTAX HpnicfIPsecAuthAlgoV2
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The authentication algorithm used by the inbound encapsulation
|
|
security protocol(ESP) security association of the IPsec
|
|
Phase-2 Tunnel."
|
|
::= { hpnicfIPsecTunnelV2Entry 26 }
|
|
|
|
hpnicfIPsecTunDiffHellmanGrpV2 OBJECT-TYPE
|
|
SYNTAX HpnicfIPsecDiffHellmanGrpV2
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The Diffie Hellman Group used by the security association of the
|
|
IPsec Phase-2 Tunnel."
|
|
::= { hpnicfIPsecTunnelV2Entry 27 }
|
|
|
|
hpnicfIPsecTunOutSaEncryptAlgoV2 OBJECT-TYPE
|
|
SYNTAX HpnicfIPsecEncryptAlgoV2
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The encryption algorithm used by the outbound security
|
|
association of the IPsec Phase-2 Tunnel."
|
|
::= { hpnicfIPsecTunnelV2Entry 28 }
|
|
|
|
hpnicfIPsecTunOutSaAhAuthAlgoV2 OBJECT-TYPE
|
|
SYNTAX HpnicfIPsecAuthAlgoV2
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The authentication algorithm used by the outbound
|
|
authentication header (AH) security association of
|
|
the IPsec Phase-2 Tunnel."
|
|
::= { hpnicfIPsecTunnelV2Entry 29 }
|
|
|
|
hpnicfIPsecTunOutSaEspAuthAlgoV2 OBJECT-TYPE
|
|
SYNTAX HpnicfIPsecAuthAlgoV2
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The authentication algorithm used by the outbound encapsulation
|
|
security protocol(ESP) security association of the IPsec
|
|
Phase-2 Tunnel."
|
|
::= { hpnicfIPsecTunnelV2Entry 30 }
|
|
|
|
hpnicfIPsecTunPolicyNameV2 OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The policy name used by this IPsec tunnel."
|
|
::= { hpnicfIPsecTunnelV2Entry 31 }
|
|
|
|
hpnicfIPsecTunPolicyNumV2 OBJECT-TYPE
|
|
SYNTAX Integer32 (1..2147483647)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The sequence number of policy used by this IPsec tunnel."
|
|
::= { hpnicfIPsecTunnelV2Entry 32 }
|
|
|
|
hpnicfIPsecTunStatusV2 OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
{
|
|
initial(1),
|
|
ready(2),
|
|
rekeyed(3),
|
|
closed(4)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The status of the IPsec Tunnel."
|
|
::= { hpnicfIPsecTunnelV2Entry 33 }
|
|
|
|
-- ===============================================
|
|
-- Begin the table of hpnicfIPsecTunnelStatV2Table.
|
|
-- ===============================================
|
|
|
|
hpnicfIPsecTunnelStatV2Table OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF HpnicfIPsecTunnelStatV2Entry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The IPsec Phase-2 Tunnel Statistics Table. "
|
|
::= { hpnicfIPsecObjectsV2 3 }
|
|
|
|
hpnicfIPsecTunnelStatV2Entry OBJECT-TYPE
|
|
SYNTAX HpnicfIPsecTunnelStatV2Entry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Information about hpnicfIPsecTunnelStatV2Table."
|
|
INDEX { hpnicfIPsecTunIndexV2 }
|
|
::= { hpnicfIPsecTunnelStatV2Table 1 }
|
|
|
|
HpnicfIPsecTunnelStatV2Entry ::=
|
|
SEQUENCE {
|
|
hpnicfIPsecTunInOctetsV2
|
|
Counter64,
|
|
hpnicfIPsecTunInDecompOctetsV2
|
|
Counter64,
|
|
hpnicfIPsecTunInPktsV2
|
|
Counter64,
|
|
hpnicfIPsecTunInDropPktsV2
|
|
Counter64,
|
|
hpnicfIPsecTunInReplayDropPktsV2
|
|
Counter64,
|
|
hpnicfIPsecTunInAuthFailsV2
|
|
Counter64,
|
|
hpnicfIPsecTunInDecryptFailsV2
|
|
Counter64,
|
|
hpnicfIPsecTunOutOctetsV2
|
|
Counter64,
|
|
hpnicfIPsecTunOutUncompOctetsV2
|
|
Counter64,
|
|
hpnicfIPsecTunOutPktsV2
|
|
Counter64,
|
|
hpnicfIPsecTunOutDropPktsV2
|
|
Counter64,
|
|
hpnicfIPsecTunOutEncryptFailsV2
|
|
Counter64,
|
|
hpnicfIPsecTunNoMemoryDropPktsV2
|
|
Counter64,
|
|
hpnicfIPsecTunQueueFullDropPktsV2
|
|
Counter64,
|
|
hpnicfIPsecTunInvalidLenDropPktsV2
|
|
Counter64,
|
|
hpnicfIPsecTunTooLongDropPktsV2
|
|
Counter64,
|
|
hpnicfIPsecTunInvalidSaDropPktsV2
|
|
Counter64
|
|
}
|
|
|
|
hpnicfIPsecTunInOctetsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of octets received by this IPsec Phase-2 Tunnel.
|
|
This value is accumulated BEFORE determining whether or not the
|
|
packet should be decompressed."
|
|
::= { hpnicfIPsecTunnelStatV2Entry 1 }
|
|
|
|
hpnicfIPsecTunInDecompOctetsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of decompressed octets received by this IPsec
|
|
Phase-2 Tunnel. This value is accumulated AFTER the packet
|
|
is decompressed."
|
|
::= { hpnicfIPsecTunnelStatV2Entry 2 }
|
|
|
|
hpnicfIPsecTunInPktsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of packets received by this IPsec Phase-2 Tunnel."
|
|
::= { hpnicfIPsecTunnelStatV2Entry 3 }
|
|
|
|
hpnicfIPsecTunInDropPktsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of packets dropped during receiving process
|
|
by this IPsec Phase-2 Tunnel."
|
|
::= { hpnicfIPsecTunnelStatV2Entry 4 }
|
|
|
|
hpnicfIPsecTunInReplayDropPktsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of packets dropped during
|
|
receiving process due to Anti-Replay process
|
|
by this IPsec Phase-2 Tunnel."
|
|
::= { hpnicfIPsecTunnelStatV2Entry 5 }
|
|
|
|
hpnicfIPsecTunInAuthFailsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of inbound authentication's
|
|
which ended in failure by this IPsec Phase-2 Tunnel."
|
|
::= { hpnicfIPsecTunnelStatV2Entry 6 }
|
|
|
|
hpnicfIPsecTunInDecryptFailsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of inbound decryption's
|
|
which ended in failure by this IPsec Phase-2 Tunnel."
|
|
::= { hpnicfIPsecTunnelStatV2Entry 7 }
|
|
|
|
hpnicfIPsecTunOutOctetsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of octets sent by this IPsec Phase-2 Tunnel.
|
|
This value is accumulated AFTER determining whether or not
|
|
the packet should be compressed."
|
|
::= { hpnicfIPsecTunnelStatV2Entry 8 }
|
|
|
|
hpnicfIPsecTunOutUncompOctetsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of uncompressed octets sent by this IPsec Phase-2
|
|
Tunnel. This value is accumulated BEFORE the packet is compressed."
|
|
::= { hpnicfIPsecTunnelStatV2Entry 9 }
|
|
|
|
hpnicfIPsecTunOutPktsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of packets sent by this IPsec Phase-2 Tunnel."
|
|
::= { hpnicfIPsecTunnelStatV2Entry 10 }
|
|
|
|
hpnicfIPsecTunOutDropPktsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of packets dropped during sending process
|
|
by this IPsec Phase-2 Tunnel."
|
|
::= { hpnicfIPsecTunnelStatV2Entry 11 }
|
|
|
|
hpnicfIPsecTunOutEncryptFailsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of outbound encryption's which ended in failure
|
|
by this IPsec Phase-2 Tunnel."
|
|
::= { hpnicfIPsecTunnelStatV2Entry 12 }
|
|
|
|
hpnicfIPsecTunNoMemoryDropPktsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of packets dropped due to no enough memory by this
|
|
IPsec Phase-2 Tunnel."
|
|
::= { hpnicfIPsecTunnelStatV2Entry 13 }
|
|
|
|
hpnicfIPsecTunQueueFullDropPktsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of packets dropped due to queue full by this
|
|
IPsec Phase-2 Tunnel."
|
|
::= { hpnicfIPsecTunnelStatV2Entry 14 }
|
|
|
|
hpnicfIPsecTunInvalidLenDropPktsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of packets dropped due to invalid length packet
|
|
by this IPsec Phase-2 Tunnel."
|
|
::= { hpnicfIPsecTunnelStatV2Entry 15 }
|
|
|
|
hpnicfIPsecTunTooLongDropPktsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of packets dropped due to too long packet by this
|
|
IPsec Phase-2 Tunnel."
|
|
::= { hpnicfIPsecTunnelStatV2Entry 16 }
|
|
|
|
hpnicfIPsecTunInvalidSaDropPktsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of packets dropped due to invalid SA by this
|
|
IPsec Phase-2 Tunnel."
|
|
::= { hpnicfIPsecTunnelStatV2Entry 17 }
|
|
|
|
-- ===============================================
|
|
-- Begin the table of hpnicfIPsecSaV2Table.
|
|
-- ===============================================
|
|
|
|
hpnicfIPsecSaV2Table OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF HpnicfIPsecSaV2Entry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The IPsec Phase-2 Security Protection Index Table. This table
|
|
contains an entry for each active and expiring security association."
|
|
::= { hpnicfIPsecObjectsV2 4 }
|
|
|
|
hpnicfIPsecSaV2Entry OBJECT-TYPE
|
|
SYNTAX HpnicfIPsecSaV2Entry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Information about hpnicfIPsecSaV2Table."
|
|
INDEX { hpnicfIPsecTunIndexV2,hpnicfIPsecSaIndexV2 }
|
|
::= { hpnicfIPsecSaV2Table 1 }
|
|
|
|
HpnicfIPsecSaV2Entry ::=
|
|
SEQUENCE {
|
|
hpnicfIPsecSaIndexV2
|
|
Integer32,
|
|
hpnicfIPsecSaDirectionV2
|
|
INTEGER,
|
|
hpnicfIPsecSaSpiValueV2
|
|
Unsigned32,
|
|
hpnicfIPsecSaSecProtocolV2
|
|
HpnicfIPsecSaProtocolV2,
|
|
hpnicfIPsecSaEncryptAlgoV2
|
|
HpnicfIPsecEncryptAlgoV2,
|
|
hpnicfIPsecSaAuthAlgoV2
|
|
HpnicfIPsecAuthAlgoV2,
|
|
hpnicfIPsecSaStatusV2
|
|
INTEGER
|
|
}
|
|
|
|
hpnicfIPsecSaIndexV2 OBJECT-TYPE
|
|
SYNTAX Integer32 (1..2147483647)
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of the Sa associated with the Phase-2 Tunnel
|
|
Table. The value of this index is a number which begins
|
|
at one and is incremented with each Sa associated with
|
|
an IPsec Phase-2 Tunnel. The value of this object will
|
|
wrap at 2,147,483,647."
|
|
::= { hpnicfIPsecSaV2Entry 1 }
|
|
|
|
hpnicfIPsecSaDirectionV2 OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
in(1),
|
|
out(2)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The direction of the SA."
|
|
::= { hpnicfIPsecSaV2Entry 2 }
|
|
|
|
hpnicfIPsecSaSpiValueV2 OBJECT-TYPE
|
|
SYNTAX Unsigned32 (1..4294967295)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The value of the SPI."
|
|
::= { hpnicfIPsecSaV2Entry 3 }
|
|
|
|
hpnicfIPsecSaSecProtocolV2 OBJECT-TYPE
|
|
SYNTAX HpnicfIPsecSaProtocolV2
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The security protocol of the SA."
|
|
::= { hpnicfIPsecSaV2Entry 4 }
|
|
|
|
hpnicfIPsecSaEncryptAlgoV2 OBJECT-TYPE
|
|
SYNTAX HpnicfIPsecEncryptAlgoV2
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The encryption algorithm used by the security association
|
|
of the IPsec Phase-2 Tunnel."
|
|
::= { hpnicfIPsecSaV2Entry 5 }
|
|
|
|
hpnicfIPsecSaAuthAlgoV2 OBJECT-TYPE
|
|
SYNTAX HpnicfIPsecAuthAlgoV2
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The authentication algorithm used by the SA."
|
|
::= { hpnicfIPsecSaV2Entry 6 }
|
|
|
|
hpnicfIPsecSaStatusV2 OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
active(1),
|
|
expiring(2)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The status of the SA."
|
|
::= { hpnicfIPsecSaV2Entry 7 }
|
|
|
|
-- ===============================================
|
|
-- Begin the table of hpnicfIPsecTrafficV2Table.
|
|
-- ===============================================
|
|
|
|
hpnicfIPsecTrafficV2Table OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF HpnicfIPsecTrafficV2Entry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The IPsec Phase-2 Tunnel Traffic Table. "
|
|
::= { hpnicfIPsecObjectsV2 5 }
|
|
|
|
hpnicfIPsecTrafficV2Entry OBJECT-TYPE
|
|
SYNTAX HpnicfIPsecTrafficV2Entry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Information about hpnicfIPsecTrafficV2Table."
|
|
INDEX { hpnicfIPsecTunIndexV2 }
|
|
::= { hpnicfIPsecTrafficV2Table 1 }
|
|
|
|
HpnicfIPsecTrafficV2Entry ::=
|
|
SEQUENCE {
|
|
hpnicfIPsecTrafficLocalTypeV2
|
|
HpnicfIPsecTrafficTypeV2,
|
|
hpnicfIPsecTrafficLocalAddr1TypeV2
|
|
InetAddressType,
|
|
hpnicfIPsecTrafficLocalAddr1V2
|
|
InetAddress,
|
|
hpnicfIPsecTrafficLocalAddr2TypeV2
|
|
InetAddressType,
|
|
hpnicfIPsecTrafficLocalAddr2V2
|
|
InetAddress,
|
|
hpnicfIPsecTrafficLocalProtocol1V2
|
|
Integer32,
|
|
hpnicfIPsecTrafficLocalProtocol2V2
|
|
Integer32,
|
|
hpnicfIPsecTrafficLocalPort1V2
|
|
Integer32,
|
|
hpnicfIPsecTrafficLocalPort2V2
|
|
Integer32,
|
|
hpnicfIPsecTrafficRemoteTypeV2
|
|
HpnicfIPsecTrafficTypeV2,
|
|
hpnicfIPsecTrafficRemAddr1TypeV2
|
|
InetAddressType,
|
|
hpnicfIPsecTrafficRemAddr1V2
|
|
InetAddress,
|
|
hpnicfIPsecTrafficRemAddr2TypeV2
|
|
InetAddressType,
|
|
hpnicfIPsecTrafficRemAddr2V2
|
|
InetAddress,
|
|
hpnicfIPsecTrafficRemoPro1V2
|
|
Integer32,
|
|
hpnicfIPsecTrafficRemoPro2V2
|
|
Integer32,
|
|
hpnicfIPsecTrafficRemPort1V2
|
|
Integer32,
|
|
hpnicfIPsecTrafficRemPort2V2
|
|
Integer32
|
|
}
|
|
|
|
hpnicfIPsecTrafficLocalTypeV2 OBJECT-TYPE
|
|
SYNTAX HpnicfIPsecTrafficTypeV2
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of the local peer's traffic. Possible values are:
|
|
1) A single IP address
|
|
2) An IP address range
|
|
3) An IP subnet"
|
|
::= { hpnicfIPsecTrafficV2Entry 1 }
|
|
|
|
hpnicfIPsecTrafficLocalAddr1TypeV2 OBJECT-TYPE
|
|
SYNTAX InetAddressType
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of the first IP address specification for the local peer's
|
|
traffic."
|
|
::= { hpnicfIPsecTrafficV2Entry 2 }
|
|
|
|
hpnicfIPsecTrafficLocalAddr1V2 OBJECT-TYPE
|
|
SYNTAX InetAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The first IP address specification of the local peer's traffic.
|
|
|
|
If the local peer's traffic type is single IP address, this is the
|
|
IP address.
|
|
|
|
If the local peer's traffic type is IP subnet, this is the subnet address.
|
|
|
|
If the local peer's traffic type is IP address range, this is the
|
|
beginning IP address of the range."
|
|
::= { hpnicfIPsecTrafficV2Entry 3 }
|
|
|
|
hpnicfIPsecTrafficLocalAddr2TypeV2 OBJECT-TYPE
|
|
SYNTAX InetAddressType
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of the second IP address specification for the local peer's
|
|
traffic."
|
|
::= { hpnicfIPsecTrafficV2Entry 4 }
|
|
|
|
hpnicfIPsecTrafficLocalAddr2V2 OBJECT-TYPE
|
|
SYNTAX InetAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The second IP address specification of the local peer's traffic.
|
|
|
|
If the local peer's traffic type is single IP address, this is the
|
|
IP address.
|
|
|
|
If the local peer's traffic type is IP subnet, this is the subnet mask.
|
|
|
|
If the local peer's traffic type is IP address range, this is the
|
|
ending IP address of the range."
|
|
::= { hpnicfIPsecTrafficV2Entry 5 }
|
|
|
|
hpnicfIPsecTrafficLocalProtocol1V2 OBJECT-TYPE
|
|
SYNTAX Integer32 (0..255)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The first protocol number specification of the local peer's traffic.
|
|
|
|
If the protocol type of the local peer's traffic is single protocol,
|
|
this is the protocol number.
|
|
|
|
If the protocol type of the local peer's traffic is protocol range,
|
|
this is the beginning protocol number of the range."
|
|
::= { hpnicfIPsecTrafficV2Entry 6 }
|
|
|
|
hpnicfIPsecTrafficLocalProtocol2V2 OBJECT-TYPE
|
|
SYNTAX Integer32 (0..255)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The second protocol number specification of the local peer's traffic.
|
|
|
|
If the protocol type of the local peer's traffic is single protocol,
|
|
this is the protocol number.
|
|
|
|
If the protocol type of the local peer's traffic is protocol range,
|
|
this is the ending protocol number of the range."
|
|
::= { hpnicfIPsecTrafficV2Entry 7 }
|
|
|
|
hpnicfIPsecTrafficLocalPort1V2 OBJECT-TYPE
|
|
SYNTAX Integer32 (0..65535)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The first port number specification of the local peer's traffic.
|
|
|
|
If the port type of the local peer's traffic is single port, this is
|
|
the port number.
|
|
|
|
If the port type of the local peer's traffic is port range, this is
|
|
the beginning port number of the range."
|
|
::= { hpnicfIPsecTrafficV2Entry 8 }
|
|
|
|
hpnicfIPsecTrafficLocalPort2V2 OBJECT-TYPE
|
|
SYNTAX Integer32 (0..65535)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The second port number specification of the local peer's traffic.
|
|
|
|
If the port type of the local peer's traffic is single port, this is
|
|
the port number.
|
|
|
|
If the port type of the local peer's traffic is port range, this is
|
|
the ending port number of the range."
|
|
::= { hpnicfIPsecTrafficV2Entry 9 }
|
|
|
|
hpnicfIPsecTrafficRemoteTypeV2 OBJECT-TYPE
|
|
SYNTAX HpnicfIPsecTrafficTypeV2
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of the remote peer's traffic. Possible values are:
|
|
1) A single IP address
|
|
2) An IP address range
|
|
3) An IP subnet"
|
|
::= { hpnicfIPsecTrafficV2Entry 10 }
|
|
|
|
hpnicfIPsecTrafficRemAddr1TypeV2 OBJECT-TYPE
|
|
SYNTAX InetAddressType
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of the first IP address specification for the remote peer's
|
|
traffic."
|
|
::= { hpnicfIPsecTrafficV2Entry 11 }
|
|
|
|
hpnicfIPsecTrafficRemAddr1V2 OBJECT-TYPE
|
|
SYNTAX InetAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The first IP address specification of the remote peer's traffic.
|
|
|
|
If the remote traffic type is single IP address, this is the IP address.
|
|
|
|
If the remote traffic type is IP subnet, this is the subnet address.
|
|
|
|
If the remote traffic type is IP address range, this is the beginning
|
|
IP address of the range."
|
|
::= { hpnicfIPsecTrafficV2Entry 12 }
|
|
|
|
hpnicfIPsecTrafficRemAddr2TypeV2 OBJECT-TYPE
|
|
SYNTAX InetAddressType
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of the second IP address specification for the remote peer's
|
|
traffic."
|
|
::= { hpnicfIPsecTrafficV2Entry 13 }
|
|
|
|
hpnicfIPsecTrafficRemAddr2V2 OBJECT-TYPE
|
|
SYNTAX InetAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The second IP address specification of the remote peer's traffic.
|
|
|
|
If the remote traffic type is single IP address, this is the IP address.
|
|
|
|
If the remote traffic type is IP subnet, this is the subnet mask.
|
|
|
|
If the remote traffic type is IP address range, this is the ending IP
|
|
address of the range."
|
|
::= { hpnicfIPsecTrafficV2Entry 14 }
|
|
|
|
hpnicfIPsecTrafficRemoPro1V2 OBJECT-TYPE
|
|
SYNTAX Integer32 (0..255)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The first protocol number specification of the remote peer's traffic.
|
|
|
|
If the protocol type of the remote peer's traffic is single protocol,
|
|
this is the protocol number.
|
|
|
|
If the protocol type of the remote peer's traffic is protocol range,
|
|
this is the beginning protocol number of the range."
|
|
::= { hpnicfIPsecTrafficV2Entry 15 }
|
|
|
|
hpnicfIPsecTrafficRemoPro2V2 OBJECT-TYPE
|
|
SYNTAX Integer32 (0..255)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The second protocol number specification of the remote peer's traffic.
|
|
|
|
If the protocol type of the remote peer's traffic is single protocol,
|
|
this is the protocol number.
|
|
|
|
If the protocol type of the remote peer's traffic is protocol range,
|
|
this is the ending protocol number of the range."
|
|
::= { hpnicfIPsecTrafficV2Entry 16 }
|
|
|
|
hpnicfIPsecTrafficRemPort1V2 OBJECT-TYPE
|
|
SYNTAX Integer32 (0..65535)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The first port number specification of the remote peer's traffic.
|
|
|
|
If the port type of the remote peer's traffic is single port,
|
|
this is the port number.
|
|
|
|
If the port type of the remote peer's traffic is port range,
|
|
this is the beginning port number of the range."
|
|
::= { hpnicfIPsecTrafficV2Entry 17 }
|
|
|
|
hpnicfIPsecTrafficRemPort2V2 OBJECT-TYPE
|
|
SYNTAX Integer32 (0..65535)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The second port number specification of the remote peer's traffic.
|
|
|
|
If the port type of the remote peer's traffic is single port,
|
|
this is the port number.
|
|
|
|
If the port type of the remote peer's traffic is port range,
|
|
this is the ending port number of the range."
|
|
::= { hpnicfIPsecTrafficV2Entry 18 }
|
|
|
|
-- ===============================================
|
|
-- Begin the hpnicfIPsecGlobalStatsV2.
|
|
-- ===============================================
|
|
|
|
hpnicfIPsecGlobalStatsV2 OBJECT IDENTIFIER ::= { hpnicfIPsecObjectsV2 6 }
|
|
|
|
hpnicfIPsecGlobalActiveTunnelsV2 OBJECT-TYPE
|
|
SYNTAX Gauge32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of currently active IPsec Phase-2 Tunnels."
|
|
::= { hpnicfIPsecGlobalStatsV2 1 }
|
|
|
|
hpnicfIPsecGlobalActiveSasV2 OBJECT-TYPE
|
|
SYNTAX Gauge32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of currently active or expiring IPsec Phase-2 SA."
|
|
::= { hpnicfIPsecGlobalStatsV2 2 }
|
|
|
|
hpnicfIPsecGlobalInOctetsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of octets received by all current and previous
|
|
IPsec Phase-2 Tunnels. This value is accumulated BEFORE determining
|
|
whether or not the packet should be decompressed."
|
|
::= { hpnicfIPsecGlobalStatsV2 3 }
|
|
|
|
hpnicfIPsecGlobalInDecompOctetsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of decompressed octets received by all current
|
|
and previous IPsec Phase-2 Tunnels. This value is accumulated
|
|
AFTER the packet is decompressed."
|
|
::= { hpnicfIPsecGlobalStatsV2 4 }
|
|
|
|
hpnicfIPsecGlobalInPktsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of packets received by all current and
|
|
previous IPsec Phase-2 Tunnels."
|
|
::= { hpnicfIPsecGlobalStatsV2 5 }
|
|
|
|
hpnicfIPsecGlobalInDropsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of packets dropped during receiving
|
|
process by all current and previous IPsec Phase-2
|
|
Tunnels. "
|
|
::= { hpnicfIPsecGlobalStatsV2 6 }
|
|
|
|
hpnicfIPsecGlobalInReplayDropsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of packets dropped during receiving
|
|
process due to Anti-Replay process by all
|
|
current and previous IPsec Phase-2 Tunnels."
|
|
::= { hpnicfIPsecGlobalStatsV2 7 }
|
|
|
|
hpnicfIPsecGlobalInAuthFailsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of inbound authentication's which ended
|
|
in failure by all current and previous IPsec Phase-2 Tunnels."
|
|
::= { hpnicfIPsecGlobalStatsV2 8 }
|
|
|
|
hpnicfIPsecGlobalInDecryptFailsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of inbound decryption's which ended in
|
|
failure by all current and previous IPsec Phase-2 Tunnels."
|
|
::= { hpnicfIPsecGlobalStatsV2 9 }
|
|
|
|
hpnicfIPsecGlobalOutOctetsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of octets sent by all current and previous
|
|
IPsec Phase-2 Tunnels. This value is accumulated AFTER
|
|
determining whether or not the packet should be compressed."
|
|
::= { hpnicfIPsecGlobalStatsV2 10 }
|
|
|
|
hpnicfIPsecGlobalOutUncompOctetsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of uncompressed octets sent by all current
|
|
and previous IPsec Phase-2 Tunnels. This value is accumulated
|
|
BEFORE the packet is compressed."
|
|
::= { hpnicfIPsecGlobalStatsV2 11 }
|
|
|
|
hpnicfIPsecGlobalOutPktsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of packets sent by all current and previous
|
|
IPsec Phase-2 Tunnels."
|
|
::= { hpnicfIPsecGlobalStatsV2 12 }
|
|
|
|
hpnicfIPsecGlobalOutDropsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of packets dropped during sending process
|
|
by all current and previous IPsec Phase-2 Tunnels."
|
|
::= { hpnicfIPsecGlobalStatsV2 13 }
|
|
|
|
hpnicfIPsecGlobalOutEncryptFailsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of outbound encryption's which ended in failure
|
|
by all current and previous IPsec Phase-2 Tunnels."
|
|
::= { hpnicfIPsecGlobalStatsV2 14 }
|
|
|
|
hpnicfIPsecGlobalNoMemoryDropsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of packets dropped due to no enough memory
|
|
by all current and previous IPsec Phase-2 Tunnels."
|
|
::= { hpnicfIPsecGlobalStatsV2 15 }
|
|
|
|
hpnicfIPsecGlobalNoFindSaDropsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of packets dropped due to not find SA by
|
|
all current and previous IPsec Phase-2 Tunnels."
|
|
::= { hpnicfIPsecGlobalStatsV2 16 }
|
|
|
|
hpnicfIPsecGlobalQueueFullDropsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of packets dropped due to queue full by
|
|
all current and previous IPsec Phase-2 Tunnels."
|
|
::= { hpnicfIPsecGlobalStatsV2 17 }
|
|
|
|
hpnicfIPsecGlobalInvalidLenDropsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of packets dropped due to invalid packet
|
|
length by all current and previous IPsec Phase-2 Tunnels."
|
|
::= { hpnicfIPsecGlobalStatsV2 18 }
|
|
|
|
hpnicfIPsecGlobalTooLongDropsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of packets dropped due to too long packet by
|
|
all current and previous IPsec Phase-2 Tunnels."
|
|
::= { hpnicfIPsecGlobalStatsV2 19 }
|
|
|
|
hpnicfIPsecGlobalInvalidSaDropsV2 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of packets dropped due to invalid SA by all
|
|
current and previous IPsec Phase-2 Tunnels."
|
|
::= { hpnicfIPsecGlobalStatsV2 20 }
|
|
|
|
-- ===============================================
|
|
-- Begin the hpnicfIPsecTrapObjectV2.
|
|
-- ===============================================
|
|
|
|
hpnicfIPsecTrapObjectV2 OBJECT IDENTIFIER ::= { hpnicfIPsecObjectsV2 7 }
|
|
|
|
hpnicfIPsecPolicyNameV2 OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The IPsec policy name with a trap."
|
|
::= { hpnicfIPsecTrapObjectV2 1 }
|
|
|
|
hpnicfIPsecPolicySeqNumV2 OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The IPsec policy sequence number with a trap."
|
|
::= { hpnicfIPsecTrapObjectV2 2 }
|
|
|
|
hpnicfIPsecPolicySizeV2 OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of IPsec policies with a trap."
|
|
::= { hpnicfIPsecTrapObjectV2 3 }
|
|
|
|
-- ===============================================
|
|
-- Begin the hpnicfIPsecTrapCntlV2.
|
|
-- ===============================================
|
|
|
|
|
|
hpnicfIPsecTrapCntlV2 OBJECT IDENTIFIER ::= { hpnicfIPsecObjectsV2 8 }
|
|
|
|
hpnicfIPsecTrapGlobalCntlV2 OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Indicates whether all IPsec traps should be generated."
|
|
::= { hpnicfIPsecTrapCntlV2 1 }
|
|
|
|
hpnicfIPsecTunnelStartTrapCntlV2 OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Indicates whether hpnicfIPsecTunnelStartV2 traps should be generated."
|
|
::= { hpnicfIPsecTrapCntlV2 2 }
|
|
|
|
hpnicfIPsecTunnelStopTrapCntlV2 OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Indicates whether hpnicfIPsecTunnelStopV2 traps should be generated."
|
|
::= { hpnicfIPsecTrapCntlV2 3 }
|
|
|
|
hpnicfIPsecNoSaTrapCntlV2 OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Indicates whether hpnicfIPsecNoSaFailureV2 traps should be generated."
|
|
::= { hpnicfIPsecTrapCntlV2 4 }
|
|
|
|
hpnicfIPsecAuthFailureTrapCntlV2 OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Indicates whether hpnicfIPsecAuthFailFailureV2 traps should be generated."
|
|
::= { hpnicfIPsecTrapCntlV2 5 }
|
|
|
|
hpnicfIPsecEncryFailureTrapCntlV2 OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Indicates whether hpnicfIPsecEncryFailFailureV2 traps should be generated."
|
|
::= { hpnicfIPsecTrapCntlV2 6 }
|
|
|
|
hpnicfIPsecDecryFailureTrapCntlV2 OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Indicates whether hpnicfIPsecDecryFailFailureV2 traps should be generated."
|
|
::= { hpnicfIPsecTrapCntlV2 7 }
|
|
|
|
hpnicfIPsecInvalidSaTrapCntlV2 OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Indicates whether hpnicfIPsecInvalidSaFailureV2 traps should be generated."
|
|
::= { hpnicfIPsecTrapCntlV2 8 }
|
|
|
|
hpnicfIPsecPolicyAddTrapCntlV2 OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Indicates whether hpnicfIPsecPolicyAddV2 traps should be generated."
|
|
::= { hpnicfIPsecTrapCntlV2 9 }
|
|
|
|
hpnicfIPsecPolicyDelTrapCntlV2 OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Indicates whether hpnicfIPsecPolicyDelV2 traps should be generated."
|
|
::= { hpnicfIPsecTrapCntlV2 10 }
|
|
|
|
hpnicfIPsecPolicyAttachTrapCntlV2 OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Indicates whether hpnicfIPsecPolicyAttachV2 traps should be generated."
|
|
::= { hpnicfIPsecTrapCntlV2 11 }
|
|
|
|
hpnicfIPsecPolicyDetachTrapCntlV2 OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Indicates whether hpnicfIPsecPolicyDetachV2 traps should be generated."
|
|
::= { hpnicfIPsecTrapCntlV2 12 }
|
|
|
|
-- ===============================================
|
|
-- definition of traps.
|
|
-- ===============================================
|
|
|
|
hpnicfIPsecTrapV2 OBJECT IDENTIFIER ::= { hpnicfIPsecObjectsV2 9 }
|
|
|
|
hpnicfIPsecNotificationsV2 OBJECT IDENTIFIER ::= { hpnicfIPsecTrapV2 0 }
|
|
|
|
hpnicfIPsecTunnelStartV2 NOTIFICATION-TYPE
|
|
OBJECTS {
|
|
hpnicfIPsecTunIndexV2,
|
|
hpnicfIPsecTunLocalAddrTypeV2,
|
|
hpnicfIPsecTunLocalAddrV2,
|
|
hpnicfIPsecTunRemoteAddrTypeV2,
|
|
hpnicfIPsecTunRemoteAddrV2,
|
|
hpnicfIPsecTunLifeTimeV2,
|
|
hpnicfIPsecTunLifeSizeV2
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This notification is generated when an IPsec Phase-2
|
|
Tunnel is created."
|
|
::= { hpnicfIPsecNotificationsV2 1 }
|
|
|
|
hpnicfIPsecTunnelStopV2 NOTIFICATION-TYPE
|
|
OBJECTS {
|
|
hpnicfIPsecTunIndexV2,
|
|
hpnicfIPsecTunLocalAddrTypeV2,
|
|
hpnicfIPsecTunLocalAddrV2,
|
|
hpnicfIPsecTunRemoteAddrTypeV2,
|
|
hpnicfIPsecTunRemoteAddrV2,
|
|
hpnicfIPsecTunActiveTimeV2
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This notification is generated when an IPsec Phase-2
|
|
Tunnel is deleted."
|
|
::= { hpnicfIPsecNotificationsV2 2 }
|
|
|
|
hpnicfIPsecNoSaFailureV2 NOTIFICATION-TYPE
|
|
OBJECTS {
|
|
hpnicfIPsecTunIndexV2,
|
|
hpnicfIPsecTunLocalAddrTypeV2,
|
|
hpnicfIPsecTunLocalAddrV2,
|
|
hpnicfIPsecTunRemoteAddrTypeV2,
|
|
hpnicfIPsecTunRemoteAddrV2
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This notification is generated when an IPsec Phase-2
|
|
non-existent SA error occurs."
|
|
::= { hpnicfIPsecNotificationsV2 3 }
|
|
|
|
hpnicfIPsecAuthFailFailureV2 NOTIFICATION-TYPE
|
|
OBJECTS {
|
|
hpnicfIPsecTunIndexV2,
|
|
hpnicfIPsecTunLocalAddrTypeV2,
|
|
hpnicfIPsecTunLocalAddrV2,
|
|
hpnicfIPsecTunRemoteAddrTypeV2,
|
|
hpnicfIPsecTunRemoteAddrV2
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This notification is generated when the IPsec phase-2
|
|
authentication failure occurs."
|
|
::= { hpnicfIPsecNotificationsV2 4 }
|
|
|
|
hpnicfIPsecEncryFailFailureV2 NOTIFICATION-TYPE
|
|
OBJECTS {
|
|
hpnicfIPsecTunIndexV2,
|
|
hpnicfIPsecTunLocalAddrTypeV2,
|
|
hpnicfIPsecTunLocalAddrV2,
|
|
hpnicfIPsecTunRemoteAddrTypeV2,
|
|
hpnicfIPsecTunRemoteAddrV2
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This notification is generated when the IPsec phase-2
|
|
tunnel has an encrypting failure."
|
|
::= { hpnicfIPsecNotificationsV2 5 }
|
|
|
|
hpnicfIPsecDecryFailFailureV2 NOTIFICATION-TYPE
|
|
OBJECTS {
|
|
hpnicfIPsecTunIndexV2,
|
|
hpnicfIPsecTunLocalAddrTypeV2,
|
|
hpnicfIPsecTunLocalAddrV2,
|
|
hpnicfIPsecTunRemoteAddrTypeV2,
|
|
hpnicfIPsecTunRemoteAddrV2
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This notification is generated when the IPsec phase-2
|
|
tunnel has a decrypting failure."
|
|
::= { hpnicfIPsecNotificationsV2 6 }
|
|
|
|
hpnicfIPsecInvalidSaFailureV2 NOTIFICATION-TYPE
|
|
OBJECTS {
|
|
hpnicfIPsecTunIndexV2,
|
|
hpnicfIPsecSaIndexV2,
|
|
hpnicfIPsecTunLocalAddrTypeV2,
|
|
hpnicfIPsecTunLocalAddrV2,
|
|
hpnicfIPsecTunRemoteAddrTypeV2,
|
|
hpnicfIPsecTunRemoteAddrV2,
|
|
hpnicfIPsecSaSpiValueV2
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This notification is generated when the IPsec phase-2
|
|
invalid SA failure occurs."
|
|
::= { hpnicfIPsecNotificationsV2 7 }
|
|
|
|
hpnicfIPsecPolicyAddV2 NOTIFICATION-TYPE
|
|
OBJECTS { hpnicfIPsecPolicyNameV2,
|
|
hpnicfIPsecPolicySeqNumV2,
|
|
hpnicfIPsecPolicySizeV2
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This notification is generated when an IPsec policy is added."
|
|
::= { hpnicfIPsecNotificationsV2 8 }
|
|
|
|
hpnicfIPsecPolicyDelV2 NOTIFICATION-TYPE
|
|
OBJECTS { hpnicfIPsecPolicyNameV2,
|
|
hpnicfIPsecPolicySeqNumV2,
|
|
hpnicfIPsecPolicySizeV2
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This notification is generated when an IPsec policy is deleted."
|
|
::= { hpnicfIPsecNotificationsV2 9 }
|
|
|
|
hpnicfIPsecPolicyAttachV2 NOTIFICATION-TYPE
|
|
OBJECTS { hpnicfIPsecPolicyNameV2,
|
|
hpnicfIPsecPolicySizeV2,
|
|
ifIndex
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This notification is generated when an IPsec policy is attached
|
|
with one interface."
|
|
::= { hpnicfIPsecNotificationsV2 10 }
|
|
|
|
hpnicfIPsecPolicyDetachV2 NOTIFICATION-TYPE
|
|
OBJECTS { hpnicfIPsecPolicyNameV2,
|
|
hpnicfIPsecPolicySizeV2,
|
|
ifIndex
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This notification is generated when an IPsec policy is detached
|
|
with one interface."
|
|
::= { hpnicfIPsecNotificationsV2 11 }
|
|
|
|
-- ===============================================
|
|
-- Conformance Information
|
|
-- ===============================================
|
|
hpnicfIPsecConformanceV2 OBJECT IDENTIFIER
|
|
::= { hpnicfIPsecMonitorV2 2 }
|
|
hpnicfIPsecCompliancesV2 OBJECT IDENTIFIER
|
|
::= { hpnicfIPsecConformanceV2 1 }
|
|
hpnicfIPsecGroupsV2 OBJECT IDENTIFIER
|
|
::= { hpnicfIPsecConformanceV2 2 }
|
|
|
|
-- ===============================================
|
|
-- Compliance Statements
|
|
-- ===============================================
|
|
hpnicfIPsecComplianceV2 MODULE-COMPLIANCE
|
|
STATUS current
|
|
DESCRIPTION
|
|
" "
|
|
MODULE -- this module
|
|
MANDATORY-GROUPS
|
|
{
|
|
hpnicfIPsecScalarObjectsGroupV2,
|
|
hpnicfIPsecTunnelTableGroupV2,
|
|
hpnicfIPsecTunnelStatGroupV2,
|
|
hpnicfIPsecSaGroupV2,
|
|
hpnicfIPsecTrafficTableGroupV2,
|
|
hpnicfIPsecGlobalStatsGroupV2,
|
|
hpnicfIPsecTrapObjectGroupV2,
|
|
hpnicfIPsecTrapCntlGroupV2,
|
|
hpnicfIPsecTrapGroupV2
|
|
}
|
|
::= { hpnicfIPsecCompliancesV2 1 }
|
|
|
|
hpnicfIPsecScalarObjectsGroupV2 OBJECT-GROUP
|
|
OBJECTS {
|
|
hpnicfIPsecMIBVersion
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The group contains all of scalar objects of the MIB."
|
|
::= { hpnicfIPsecGroupsV2 1 }
|
|
|
|
hpnicfIPsecTunnelTableGroupV2 OBJECT-GROUP
|
|
OBJECTS {
|
|
hpnicfIPsecTunIfIndexV2,
|
|
hpnicfIPsecTunIKETunnelIndexV2,
|
|
hpnicfIPsecTunIKETunLocalIDTypeV2,
|
|
hpnicfIPsecTunIKETunLocalIDVal1V2,
|
|
hpnicfIPsecTunIKETunLocalIDVal2V2,
|
|
hpnicfIPsecTunIKETunRemoteIDTypeV2,
|
|
hpnicfIPsecTunIKETunRemoteIDVal1V2,
|
|
hpnicfIPsecTunIKETunRemoteIDVal2V2,
|
|
hpnicfIPsecTunLocalAddrTypeV2,
|
|
hpnicfIPsecTunLocalAddrV2,
|
|
hpnicfIPsecTunRemoteAddrTypeV2,
|
|
hpnicfIPsecTunRemoteAddrV2,
|
|
hpnicfIPsecTunKeyTypeV2,
|
|
hpnicfIPsecTunEncapModeV2,
|
|
hpnicfIPsecTunInitiatorV2,
|
|
hpnicfIPsecTunLifeSizeV2,
|
|
hpnicfIPsecTunLifeTimeV2,
|
|
hpnicfIPsecTunRemainTimeV2,
|
|
hpnicfIPsecTunActiveTimeV2,
|
|
hpnicfIPsecTunRemainSizeV2,
|
|
hpnicfIPsecTunTotalRefreshesV2,
|
|
hpnicfIPsecTunCurrentSaInstancesV2,
|
|
hpnicfIPsecTunInSaEncryptAlgoV2,
|
|
hpnicfIPsecTunInSaAhAuthAlgoV2,
|
|
hpnicfIPsecTunInSaEspAuthAlgoV2,
|
|
hpnicfIPsecTunDiffHellmanGrpV2,
|
|
hpnicfIPsecTunOutSaEncryptAlgoV2,
|
|
hpnicfIPsecTunOutSaAhAuthAlgoV2,
|
|
hpnicfIPsecTunOutSaEspAuthAlgoV2,
|
|
hpnicfIPsecTunPolicyNameV2,
|
|
hpnicfIPsecTunPolicyNumV2,
|
|
hpnicfIPsecTunStatusV2
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The group contains the IPsec tunnel's property information."
|
|
::= { hpnicfIPsecGroupsV2 2 }
|
|
|
|
hpnicfIPsecTunnelStatGroupV2 OBJECT-GROUP
|
|
OBJECTS {
|
|
hpnicfIPsecTunInOctetsV2,
|
|
hpnicfIPsecTunInDecompOctetsV2,
|
|
hpnicfIPsecTunInPktsV2,
|
|
hpnicfIPsecTunInDropPktsV2,
|
|
hpnicfIPsecTunInReplayDropPktsV2,
|
|
hpnicfIPsecTunInAuthFailsV2,
|
|
hpnicfIPsecTunInDecryptFailsV2,
|
|
hpnicfIPsecTunOutOctetsV2,
|
|
hpnicfIPsecTunOutUncompOctetsV2,
|
|
hpnicfIPsecTunOutPktsV2,
|
|
hpnicfIPsecTunOutDropPktsV2,
|
|
hpnicfIPsecTunOutEncryptFailsV2,
|
|
hpnicfIPsecTunNoMemoryDropPktsV2,
|
|
hpnicfIPsecTunQueueFullDropPktsV2,
|
|
hpnicfIPsecTunInvalidLenDropPktsV2,
|
|
hpnicfIPsecTunTooLongDropPktsV2,
|
|
hpnicfIPsecTunInvalidSaDropPktsV2
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The group contains the IPsec tunnel's statistic information."
|
|
::= { hpnicfIPsecGroupsV2 3 }
|
|
|
|
hpnicfIPsecSaGroupV2 OBJECT-GROUP
|
|
OBJECTS {
|
|
hpnicfIPsecSaDirectionV2,
|
|
hpnicfIPsecSaSpiValueV2,
|
|
hpnicfIPsecSaSecProtocolV2,
|
|
hpnicfIPsecSaEncryptAlgoV2,
|
|
hpnicfIPsecSaAuthAlgoV2,
|
|
hpnicfIPsecSaStatusV2
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The group contains the SA's property information."
|
|
::= { hpnicfIPsecGroupsV2 4 }
|
|
|
|
hpnicfIPsecTrafficTableGroupV2 OBJECT-GROUP
|
|
OBJECTS {
|
|
hpnicfIPsecTrafficLocalTypeV2,
|
|
hpnicfIPsecTrafficLocalAddr1TypeV2,
|
|
hpnicfIPsecTrafficLocalAddr1V2,
|
|
hpnicfIPsecTrafficLocalAddr2TypeV2,
|
|
hpnicfIPsecTrafficLocalAddr2V2,
|
|
hpnicfIPsecTrafficLocalProtocol1V2,
|
|
hpnicfIPsecTrafficLocalProtocol2V2,
|
|
hpnicfIPsecTrafficLocalPort1V2,
|
|
hpnicfIPsecTrafficLocalPort2V2,
|
|
hpnicfIPsecTrafficRemoteTypeV2,
|
|
hpnicfIPsecTrafficRemAddr1TypeV2,
|
|
hpnicfIPsecTrafficRemAddr1V2,
|
|
hpnicfIPsecTrafficRemAddr2TypeV2,
|
|
hpnicfIPsecTrafficRemAddr2V2,
|
|
hpnicfIPsecTrafficRemoPro1V2,
|
|
hpnicfIPsecTrafficRemoPro2V2,
|
|
hpnicfIPsecTrafficRemPort1V2,
|
|
hpnicfIPsecTrafficRemPort2V2
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The group contains the property information of the
|
|
data flow protected by IPsec tunnel."
|
|
::= { hpnicfIPsecGroupsV2 5 }
|
|
|
|
hpnicfIPsecGlobalStatsGroupV2 OBJECT-GROUP
|
|
OBJECTS {
|
|
hpnicfIPsecGlobalActiveTunnelsV2,
|
|
hpnicfIPsecGlobalActiveSasV2,
|
|
hpnicfIPsecGlobalInOctetsV2,
|
|
hpnicfIPsecGlobalInDecompOctetsV2,
|
|
hpnicfIPsecGlobalInPktsV2,
|
|
hpnicfIPsecGlobalInDropsV2,
|
|
hpnicfIPsecGlobalInReplayDropsV2,
|
|
hpnicfIPsecGlobalInAuthFailsV2,
|
|
hpnicfIPsecGlobalInDecryptFailsV2,
|
|
hpnicfIPsecGlobalOutOctetsV2,
|
|
hpnicfIPsecGlobalOutUncompOctetsV2,
|
|
hpnicfIPsecGlobalOutPktsV2,
|
|
hpnicfIPsecGlobalOutDropsV2,
|
|
hpnicfIPsecGlobalOutEncryptFailsV2,
|
|
hpnicfIPsecGlobalNoMemoryDropsV2,
|
|
hpnicfIPsecGlobalNoFindSaDropsV2,
|
|
hpnicfIPsecGlobalQueueFullDropsV2,
|
|
hpnicfIPsecGlobalInvalidLenDropsV2,
|
|
hpnicfIPsecGlobalTooLongDropsV2,
|
|
hpnicfIPsecGlobalInvalidSaDropsV2
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The group contains all of the IPsec tunnel's statistic
|
|
information."
|
|
::= { hpnicfIPsecGroupsV2 6 }
|
|
|
|
hpnicfIPsecTrapObjectGroupV2 OBJECT-GROUP
|
|
OBJECTS {
|
|
hpnicfIPsecPolicyNameV2,
|
|
hpnicfIPsecPolicySeqNumV2,
|
|
hpnicfIPsecPolicySizeV2
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The group contains all of trap objects of IPsec tunnels."
|
|
::= { hpnicfIPsecGroupsV2 7 }
|
|
|
|
hpnicfIPsecTrapCntlGroupV2 OBJECT-GROUP
|
|
OBJECTS {
|
|
hpnicfIPsecTrapGlobalCntlV2,
|
|
hpnicfIPsecTunnelStartTrapCntlV2,
|
|
hpnicfIPsecTunnelStopTrapCntlV2,
|
|
hpnicfIPsecNoSaTrapCntlV2,
|
|
hpnicfIPsecAuthFailureTrapCntlV2,
|
|
hpnicfIPsecEncryFailureTrapCntlV2,
|
|
hpnicfIPsecDecryFailureTrapCntlV2,
|
|
hpnicfIPsecInvalidSaTrapCntlV2,
|
|
hpnicfIPsecPolicyAddTrapCntlV2,
|
|
hpnicfIPsecPolicyDelTrapCntlV2,
|
|
hpnicfIPsecPolicyAttachTrapCntlV2,
|
|
hpnicfIPsecPolicyDetachTrapCntlV2
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The group contains all of trap switches of IPsec tunnels."
|
|
::= { hpnicfIPsecGroupsV2 8 }
|
|
|
|
hpnicfIPsecTrapGroupV2 NOTIFICATION-GROUP
|
|
NOTIFICATIONS {
|
|
hpnicfIPsecTunnelStartV2,
|
|
hpnicfIPsecTunnelStopV2,
|
|
hpnicfIPsecNoSaFailureV2,
|
|
hpnicfIPsecAuthFailFailureV2,
|
|
hpnicfIPsecEncryFailFailureV2,
|
|
hpnicfIPsecDecryFailFailureV2,
|
|
hpnicfIPsecInvalidSaFailureV2,
|
|
hpnicfIPsecPolicyAddV2,
|
|
hpnicfIPsecPolicyDelV2,
|
|
hpnicfIPsecPolicyAttachV2,
|
|
hpnicfIPsecPolicyDetachV2
|
|
}
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The group contains all of trap of IPsec tunnels."
|
|
::= { hpnicfIPsecGroupsV2 9 }
|
|
|
|
|
|
END
|
|
|