WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN IMPORTS MODULE-IDENTITY, OBJECT-TYPE, Counter32, Gauge32, Integer32, Integer32, NOTIFICATION-TYPE, OBJECT-IDENTITY, enterprises FROM SNMPv2-SMI TEXTUAL-CONVENTION, TruthValue FROM SNMPv2-TC ifIndex FROM RFC1213-MIB IpsecDoiIdentType, IpsecDoiEncapsulationMode, IpsecDoiEspTransform, IpsecDoiAhTransform, IpsecDoiAuthAlgorithm, IpsecDoiIpcompTransform, IpsecDoiSecProtocolId FROM IPSEC-ISAKMP-IKE-DOI-TC watchguard FROM WATCHGUARD-SMI; wgIpsecSaMonModule MODULE-IDENTITY LAST-UPDATED "200701251200Z" ORGANIZATION "WatchGuard Technologies, Inc." CONTACT-INFO " WatchGuard Technologies, Inc. 505 Fifth Avenue South Suite 500 Seattle, WA 98104 United States +1.206.613.6600 " DESCRIPTION "The MIB module describes generic IPSec objects defined in IETF working draft 'draft-ieft-ipsec-monitor-mib-01' and WatchGuard's extension." REVISION "200701251200Z" DESCRIPTION "Initial revision." ::= { watchguard 3 } IpsecSaCreatorIdent ::= TEXTUAL-CONVENTION DISPLAY-HINT "d" STATUS current DESCRIPTION "A value indicating how an SA was created." SYNTAX INTEGER { unknown(0), static(1), -- statically created ike(2), -- IKE other(3) } IpsecIpv6Address ::= TEXTUAL-CONVENTION DISPLAY-HINT "2x:2x:2x:2x:2x:2x:1d.1d.1d.1d" STATUS current DESCRIPTION "This data type is used to model IPv6 address prefixes. This is a binary string of 16 octets in network byte-order." SYNTAX OCTET STRING (SIZE (16)) wgIpsecSaMonitorMIB OBJECT-IDENTITY STATUS current DESCRIPTION "This is the base object identifier for all IPSec branches." ::= { wgIpsecSaMonModule 1 } -- significant branches wgSaTables OBJECT-IDENTITY STATUS current DESCRIPTION "This is the base object identifier for all SA tables." ::= { wgIpsecSaMonitorMIB 1 } wgSaStatistics OBJECT-IDENTITY STATUS current DESCRIPTION "This is the base object identifier for all objects which are global counters for IPSec security associations." ::= { wgIpsecSaMonitorMIB 2 } wgSaErrors OBJECT-IDENTITY STATUS current DESCRIPTION "This is the base object identifier for all objects which are global error counters for IPSec security associations." ::= { wgIpsecSaMonitorMIB 3 } -- the IPSec Inbound ESP MIB-Group -- -- a collection of objects providing information about -- IPSec Inbound ESP SAs wgIpsecSaEspInTable OBJECT-TYPE SYNTAX SEQUENCE OF WGIpsecSaEspInEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The (conceptual) table containing information on IPSec inbound ESP SAs. There should be one row for every inbound ESP security association that exists in the entity. The maximum number of rows is implementation dependent." ::= { wgSaTables 1 } wgIpsecSaEspInEntry OBJECT-TYPE SYNTAX WGIpsecSaEspInEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An entry (conceptual row) containing the information on a particular IPSec inbound ESP SA. A row in this table cannot be created or deleted by SNMP operations on columns of the table." INDEX{ wgIpsecSaEspInAddress, wgIpsecSaEspInSpi } ::= { wgIpsecSaEspInTable 1 } WGIpsecSaEspInEntry ::= SEQUENCE { wgIpsecSaEspInAddress IpAddress, wgIpsecSaEspInSpi Unsigned32, wgIpsecSaEspInDestId OCTET STRING, wgIpsecSaEspInDestIdType IpsecDoiIdentType, wgIpsecSaEspInSourceId OCTET STRING, wgIpsecSaEspInSourceIdType IpsecDoiIdentType, wgIpsecSaEspInProtocol Integer32, wgIpsecSaEspInDestPort Integer32, wgIpsecSaEspInSourcePort Integer32, wgIpsecSaEspInCreator IpsecSaCreatorIdent, wgIpsecSaEspInEncapsulation IpsecDoiEncapsulationMode, wgIpsecSaEspInEncAlg IpsecDoiEspTransform, wgIpsecSaEspInEncKeyLength Integer32, wgIpsecSaEspInAuthAlg IpsecDoiAuthAlgorithm, wgIpsecSaEspInLimitSeconds Integer32, wgIpsecSaEspInLimitKbytes Integer32, wgIpsecSaEspInAccSeconds Counter32, wgIpsecSaEspInAccKbytes Counter32, wgIpsecSaEspInUserOctets Counter32, wgIpsecSaEspInPackets Counter32, wgIpsecSaEspInDecryptErrors Counter32, wgIpsecSaEspInAuthErrors Counter32, wgIpsecSaEspInReplayErrors Counter32, wgIpsecSaEspInPolicyErrors Counter32, wgIpsecSaEspInPadErrors Counter32, wgIpsecSaEspInOtherReceiveErrors Counter32 } wgIpsecSaEspInAddress OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The destination address of the SA. For implementations that do not support IPv6, this address should appear as one of the IPv4-mapped IPv6 addresses as defined in Section 2.5.4 of [IPV6AA]. Specifically, the prefix '0000:0000:0000:0000:0000:FFFF:' is used for IPv4 only nodes, while the prefix '0000:0000:0000:0000:0000:0000:' is used for bi-lingual nodes." ::= { wgIpsecSaEspInEntry 1 } wgIpsecSaEspInSpi OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The security parameters index of the SA." REFERENCE "RFC 2406 Section 2.1" ::= { wgIpsecSaEspInEntry 2 } wgIpsecSaEspInDestId OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..255)) MAX-ACCESS read-only STATUS current DESCRIPTION "The destination identifier of the SA, or 0 if unknown or if the SA uses transport mode encapsulation. This value is taken directly from the optional ID payloads that are exchanged during SA creation negotiation." ::= { wgIpsecSaEspInEntry 3 } wgIpsecSaEspInDestIdType OBJECT-TYPE SYNTAX IpsecDoiIdentType MAX-ACCESS read-only STATUS current DESCRIPTION "The type of identifier presented by 'wgIpsecSaEspInDestId', or 0 if unknown or if the SA uses transport mode encapsulation." ::= { wgIpsecSaEspInEntry 4 } wgIpsecSaEspInSourceId OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..255)) MAX-ACCESS read-only STATUS current DESCRIPTION "The source identifier of the SA, or 0 if unknown or if the SA uses transport mode encapsulation. This value is taken directly from the optional ID payloads that are exchange during SA creation negotiation." ::= { wgIpsecSaEspInEntry 5 } wgIpsecSaEspInSourceIdType OBJECT-TYPE SYNTAX IpsecDoiIdentType MAX-ACCESS read-only STATUS current DESCRIPTION "The type of identifier presented by 'wgIpsecSaEspInSourceId', or 0 if unknown or if the SA uses transport mode encapsulation." ::= { wgIpsecSaEspInEntry 6 } wgIpsecSaEspInProtocol OBJECT-TYPE SYNTAX Integer32 (0..255) MAX-ACCESS read-only STATUS current DESCRIPTION "The transport-layer protocol number that this SA carries, or 0 if it carries any protocol." REFERENCE "RFC2401 section 4.4.2" ::= { wgIpsecSaEspInEntry 7 } wgIpsecSaEspInDestPort OBJECT-TYPE SYNTAX Integer32 (0.. 65535) MAX-ACCESS read-only STATUS current DESCRIPTION "The destination port number of the protocol that this SA carries, or 0 if it carries any port number." REFERENCE "RFC2401 section 4.4.2" ::= { wgIpsecSaEspInEntry 8 } wgIpsecSaEspInSourcePort OBJECT-TYPE SYNTAX Integer32 (0.. 65535) MAX-ACCESS read-only STATUS current DESCRIPTION "The source port number of the protocol that this SA carries, or 0 if it carries any port number." REFERENCE "RFC2401 section 4.4.2" ::= { wgIpsecSaEspInEntry 9 } wgIpsecSaEspInCreator OBJECT-TYPE SYNTAX IpsecSaCreatorIdent MAX-ACCESS read-only STATUS current DESCRIPTION "The creator of this SA. This MIB makes no assumptions about how the SAs are created. They may be created statically, or by a key exchange protocol such as IKE, or by some other method." ::= { wgIpsecSaEspInEntry 10 } wgIpsecSaEspInEncapsulation OBJECT-TYPE SYNTAX IpsecDoiEncapsulationMode MAX-ACCESS read-only STATUS current DESCRIPTION "The type of encapsulation used by this SA." ::= { wgIpsecSaEspInEntry 11 } wgIpsecSaEspInEncAlg OBJECT-TYPE SYNTAX IpsecDoiEspTransform MAX-ACCESS read-only STATUS current DESCRIPTION "A unique value representing the encryption algorithm applied to traffic or 0 if there is no encryption used." ::= { wgIpsecSaEspInEntry 12 } wgIpsecSaEspInEncKeyLength OBJECT-TYPE SYNTAX Integer32 (0..65531) UNITS "bits" MAX-ACCESS read-only STATUS current DESCRIPTION "The length of the encryption key in bits used for the algorithm specified in the 'wgIpsecSaEspInEncAlg' object, or 0 if the key length is implicit in the specified algorithm or there is no encryption specified." ::= { wgIpsecSaEspInEntry 13 } wgIpsecSaEspInAuthAlg OBJECT-TYPE SYNTAX IpsecDoiAuthAlgorithm MAX-ACCESS read-only STATUS current DESCRIPTION "A unique value representing the hash algorithm applied to traffic or 0 if there is no authentication used." ::= { wgIpsecSaEspInEntry 14 } wgIpsecSaEspInLimitSeconds OBJECT-TYPE SYNTAX Integer32 UNITS "seconds" MAX-ACCESS read-only STATUS current DESCRIPTION "The maximum lifetime in seconds of the SA, or 0 if there is no time constraint on its expiration. The display value is limited to 4294967295 seconds (more than 136 years); values greater than that value will be truncated." ::= { wgIpsecSaEspInEntry 15 } wgIpsecSaEspInLimitKbytes OBJECT-TYPE SYNTAX Integer32 UNITS "kilobytes" MAX-ACCESS read-only STATUS current DESCRIPTION "The maximum traffic in kilobytes that the SA is allowed to support, or 0 if there is no traffic constraint on its expiration. The display value is limited to 4294967295 kilobytes; values greater than that value will be truncated." ::= { wgIpsecSaEspInEntry 16 } wgIpsecSaEspInAccSeconds OBJECT-TYPE SYNTAX Counter32 UNITS "seconds" MAX-ACCESS read-only STATUS current DESCRIPTION "The number of seconds accumulated against the SA's expiration by time. This is also the number of seconds that the SA has existed." ::= { wgIpsecSaEspInEntry 17 } wgIpsecSaEspInAccKbytes OBJECT-TYPE SYNTAX Counter32 UNITS "kilobytes" MAX-ACCESS read-only STATUS current DESCRIPTION "The amount of traffic accumulated that counts against the SA's expiration by traffic limitation, measured in Kbytes. This value may be 0 if the SA does not expire based on traffic." ::= { wgIpsecSaEspInEntry 18 } wgIpsecSaEspInUserOctets OBJECT-TYPE SYNTAX Counter32 UNITS "bytes" MAX-ACCESS read-only STATUS current DESCRIPTION "The amount of user level traffic measured in bytes handled by the SA. This is not necessarily the same as the amount of traffic applied against the traffic expiration limit." ::= { wgIpsecSaEspInEntry 19 } wgIpsecSaEspInPackets OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of packets handled by the SA." ::= { wgIpsecSaEspInEntry 20 } wgIpsecSaEspInDecryptErrors OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaEspInEntry 21 } wgIpsecSaEspInAuthErrors OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of packets discarded by the SA due to authentication errors." ::= { wgIpsecSaEspInEntry 22 } wgIpsecSaEspInReplayErrors OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of packets discarded by the SA due to replay errors." ::= { wgIpsecSaEspInEntry 23 } wgIpsecSaEspInPolicyErrors OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaEspInEntry 24 } wgIpsecSaEspInPadErrors OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaEspInEntry 25 } wgIpsecSaEspInOtherReceiveErrors OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaEspInEntry 26 } -- the IPSec Inbound AH MIB-Group -- -- a collection of objects providing information about -- IPSec Inbound AH SAs wgIpsecSaAhInTable OBJECT-TYPE SYNTAX SEQUENCE OF WGIpsecSaAhInEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The (conceptual) table containing information on IPSec inbound AH SAs. There should be one row for every inbound AH security association that exists in the entity. The maximum number of rows is implementation dependent." ::= { wgSaTables 2 } wgIpsecSaAhInEntry OBJECT-TYPE SYNTAX WGIpsecSaAhInEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An entry (conceptual row) containing the information on a particular IPSec inbound AH SA. A row in this table cannot be created or deleted by SNMP operations on columns of the table." INDEX{ wgIpsecSaAhInAddress, wgIpsecSaAhInSpi } ::= { wgIpsecSaAhInTable 1 } WGIpsecSaAhInEntry ::= SEQUENCE { wgIpsecSaAhInAddress IpAddress, wgIpsecSaAhInSpi Integer32, wgIpsecSaAhInDestId OCTET STRING, wgIpsecSaAhInDestIdType IpsecDoiIdentType, wgIpsecSaAhInSourceId OCTET STRING, wgIpsecSaAhInSourceIdType IpsecDoiIdentType, wgIpsecSaAhInProtocol Integer32, wgIpsecSaAhInDestPort Integer32, wgIpsecSaAhInSourcePort Integer32, wgIpsecSaAhInCreator IpsecSaCreatorIdent, wgIpsecSaAhInEncapsulation IpsecDoiEncapsulationMode, wgIpsecSaAhInAuthAlg IpsecDoiAhTransform, wgIpsecSaAhInLimitSeconds Integer32, wgIpsecSaAhInLimitKbytes Integer32, wgIpsecSaAhInAccSeconds Counter32, wgIpsecSaAhInAccKbytes Counter32, wgIpsecSaAhInUserOctets Counter32, wgIpsecSaAhInPackets Counter32, -- error statistics wgIpsecSaAhInAuthErrors Counter32, wgIpsecSaAhInReplayErrors Counter32, wgIpsecSaAhInPolicyErrors Counter32, wgIpsecSaAhInOtherReceiveErrors Counter32 } wgIpsecSaAhInAddress OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The destination address of the SA. For implementations that do not support IPv6, this address should appear as one of the IPv4-mapped IPv6 addresses as defined in Section 2.5.4 of [IPV6AA]. Specifically, the prefix '0000:0000:0000:0000:0000:FFFF:' is used for IPv4 only nodes, while the prefix '0000:0000:0000:0000:0000:0000:' is used for bi-lingual nodes." ::= { wgIpsecSaAhInEntry 1 } wgIpsecSaAhInSpi OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS current DESCRIPTION "The security parameters index of the SA." REFERENCE "RFC 2402 Section 2.4" ::= { wgIpsecSaAhInEntry 2 } wgIpsecSaAhInDestId OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..255)) MAX-ACCESS read-only STATUS current DESCRIPTION "The destination identifier of the SA, or 0 if unknown or if the SA uses transport mode encapsulation. This value is taken directly from the optional ID payloads that are exchange during SA creation negotiation." ::= { wgIpsecSaAhInEntry 3 } wgIpsecSaAhInDestIdType OBJECT-TYPE SYNTAX IpsecDoiIdentType MAX-ACCESS read-only STATUS current DESCRIPTION "The type of identifier presented by 'wgIpsecSaAhInDestId', or 0 if unknown or if the SA uses transport mode encapsulation." ::= { wgIpsecSaAhInEntry 4 } wgIpsecSaAhInSourceId OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..255)) MAX-ACCESS read-only STATUS current DESCRIPTION "The source identifier of the SA, or 0 if unknown or if the SA uses transport mode encapsulation. This value is taken directly from the optional ID payloads that are exchange during SA creation negotiation." ::= { wgIpsecSaAhInEntry 5 } wgIpsecSaAhInSourceIdType OBJECT-TYPE SYNTAX IpsecDoiIdentType MAX-ACCESS read-only STATUS current DESCRIPTION "The type of identifier presented by 'wgIpsecSaAhInSourceId', or 0 if unknown or if the SA uses transport mode encapsulation." ::= { wgIpsecSaAhInEntry 6 } wgIpsecSaAhInProtocol OBJECT-TYPE SYNTAX Integer32 (0..255) MAX-ACCESS read-only STATUS current DESCRIPTION "The transport-layer protocol number that this SA carries, or 0 if it carries any protocol." REFERENCE "RFC2401 section 4.4.2" ::= { wgIpsecSaAhInEntry 7 } wgIpsecSaAhInDestPort OBJECT-TYPE SYNTAX Integer32 (0.. 65535) MAX-ACCESS read-only STATUS current DESCRIPTION "The destination port number of the protocol that this SA carries, or 0 if it carries any port number." REFERENCE "RFC2401 section 4.4.2" ::= { wgIpsecSaAhInEntry 8 } wgIpsecSaAhInSourcePort OBJECT-TYPE SYNTAX Integer32 (0.. 65535) MAX-ACCESS read-only STATUS current DESCRIPTION "The source port number of the protocol that this SA carries, or 0 if it carries any port number." REFERENCE "RFC2401 section 4.4.2" ::= { wgIpsecSaAhInEntry 9 } wgIpsecSaAhInCreator OBJECT-TYPE SYNTAX IpsecSaCreatorIdent MAX-ACCESS read-only STATUS current DESCRIPTION "The creator of this SA. This MIB makes no assumptions about how the SAs are created. They may be created statically, or by a key exchange protocol such as IKE, or by some other method." ::= { wgIpsecSaAhInEntry 10 } wgIpsecSaAhInEncapsulation OBJECT-TYPE SYNTAX IpsecDoiEncapsulationMode MAX-ACCESS read-only STATUS current DESCRIPTION "The type of encapsulation used by this SA." ::= { wgIpsecSaAhInEntry 11 } wgIpsecSaAhInAuthAlg OBJECT-TYPE SYNTAX IpsecDoiAhTransform MAX-ACCESS read-only STATUS current DESCRIPTION "A unique value representing the hash algorithm applied to traffic carried by this SA if it uses ESP or 0 if there is no authentication applied by ESP." ::= { wgIpsecSaAhInEntry 12 } wgIpsecSaAhInLimitSeconds OBJECT-TYPE SYNTAX Integer32 UNITS "seconds" MAX-ACCESS read-only STATUS current DESCRIPTION "The maximum lifetime in seconds of the SA, or 0 if there is no time constraint on its expiration. The display value is limited to 4294967295 seconds (more than 136 years); values greater than that value will be truncated." ::= { wgIpsecSaAhInEntry 13 } wgIpsecSaAhInLimitKbytes OBJECT-TYPE SYNTAX Integer32 UNITS "kilobytes" MAX-ACCESS read-only STATUS current DESCRIPTION "The maximum traffic in Kbytes that the SA is allowed to support, or 0 if there is no traffic constraint on its expiration. The display value is limited to 4294967295 kilobytes; values greater than that value will be truncated." ::= { wgIpsecSaAhInEntry 14 } wgIpsecSaAhInAccSeconds OBJECT-TYPE SYNTAX Counter32 UNITS "seconds" MAX-ACCESS read-only STATUS current DESCRIPTION "The number of seconds accumulated against the SA's expiration by time. This is also the number of seconds that the SA has existed." ::= { wgIpsecSaAhInEntry 15 } wgIpsecSaAhInAccKbytes OBJECT-TYPE SYNTAX Counter32 UNITS "kilobytes" MAX-ACCESS read-only STATUS current DESCRIPTION "The amount of traffic accumulated that counts against the SA's expiration by traffic limitation, measured in Kbytes. This value may be 0 if the SA does not expire based on traffic." ::= { wgIpsecSaAhInEntry 16 } wgIpsecSaAhInUserOctets OBJECT-TYPE SYNTAX Counter32 UNITS "bytes" MAX-ACCESS read-only STATUS current DESCRIPTION "The amount of user level traffic measured in bytes handled by the SA. This is not necessarily the same as the amount of traffic applied against the traffic expiration limit." ::= { wgIpsecSaAhInEntry 17 } wgIpsecSaAhInPackets OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of packets handled by the SA." ::= { wgIpsecSaAhInEntry 18 } wgIpsecSaAhInAuthErrors OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of packets discarded by the SA due to authentication errors." ::= { wgIpsecSaAhInEntry 19 } wgIpsecSaAhInReplayErrors OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of packets discarded by the SA due to replay errors." ::= { wgIpsecSaAhInEntry 20 } wgIpsecSaAhInPolicyErrors OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaAhInEntry 21 } wgIpsecSaAhInOtherReceiveErrors OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaAhInEntry 22 } -- the IPSec Inbound IPCOMP MIB-Group -- -- a collection of objects providing information about -- IPSec Inbound IPCOMP SAs wgIpsecSaIpcompInTable OBJECT-TYPE SYNTAX SEQUENCE OF WGIpsecSaIpcompInEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The (conceptual) table containing information on IPSec inbound IPCOMP SAs. There should be one row for every inbound IPCOMP (security) association that exists in the entity. The maximum number of rows is implementation dependent." ::= { wgSaTables 3 } wgIpsecSaIpcompInEntry OBJECT-TYPE SYNTAX WGIpsecSaIpcompInEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An entry (conceptual row) containing the information on a particular IPSec inbound IPCOMP SA. A row in this table cannot be created or deleted by SNMP operations on columns of the table." INDEX{ wgIpsecSaIpcompInAddress, wgIpsecSaIpcompInCpi } ::= { wgIpsecSaIpcompInTable 1 } WGIpsecSaIpcompInEntry ::= SEQUENCE { wgIpsecSaIpcompInAddress IpAddress, wgIpsecSaIpcompInCpi IpsecDoiIpcompTransform, wgIpsecSaIpcompInDestId OCTET STRING, wgIpsecSaIpcompInDestIdType IpsecDoiIdentType, wgIpsecSaIpcompInSourceId OCTET STRING, wgIpsecSaIpcompInSourceIdType IpsecDoiIdentType, wgIpsecSaIpcompInProtocol Integer32, wgIpsecSaIpcompInDestPort Integer32, wgIpsecSaIpcompInSourcePort Integer32, wgIpsecSaIpcompInCreator IpsecSaCreatorIdent, wgIpsecSaIpcompInEncapsulation IpsecDoiEncapsulationMode, wgIpsecSaIpcompInDecompAlg IpsecDoiIpcompTransform, wgIpsecSaIpcompInSeconds Counter32, wgIpsecSaIpcompInUserOctets Counter32, wgIpsecSaIpcompInPackets Counter32, wgIpsecSaIpcompInDecompErrors Counter32, wgIpsecSaIpcompInOtherReceiveErrors Counter32 } wgIpsecSaIpcompInAddress OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaIpcompInEntry 1 } wgIpsecSaIpcompInCpi OBJECT-TYPE SYNTAX IpsecDoiIpcompTransform MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." REFERENCE "RFC 2393 Section 3.3" ::= { wgIpsecSaIpcompInEntry 2 } wgIpsecSaIpcompInDestId OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..255)) MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaIpcompInEntry 3 } wgIpsecSaIpcompInDestIdType OBJECT-TYPE SYNTAX IpsecDoiIdentType MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaIpcompInEntry 4 } wgIpsecSaIpcompInSourceId OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..255)) MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaIpcompInEntry 5 } wgIpsecSaIpcompInSourceIdType OBJECT-TYPE SYNTAX IpsecDoiIdentType MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaIpcompInEntry 6 } wgIpsecSaIpcompInProtocol OBJECT-TYPE SYNTAX Integer32 (0..255) MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaIpcompInEntry 7 } wgIpsecSaIpcompInDestPort OBJECT-TYPE SYNTAX Integer32 (0.. 65535) MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaIpcompInEntry 8 } wgIpsecSaIpcompInSourcePort OBJECT-TYPE SYNTAX Integer32 (0.. 65535) MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaIpcompInEntry 9 } wgIpsecSaIpcompInCreator OBJECT-TYPE SYNTAX IpsecSaCreatorIdent MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaIpcompInEntry 10 } wgIpsecSaIpcompInEncapsulation OBJECT-TYPE SYNTAX IpsecDoiEncapsulationMode MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaIpcompInEntry 11 } wgIpsecSaIpcompInDecompAlg OBJECT-TYPE SYNTAX IpsecDoiIpcompTransform MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaIpcompInEntry 12 } wgIpsecSaIpcompInSeconds OBJECT-TYPE SYNTAX Counter32 UNITS "seconds" MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaIpcompInEntry 13 } wgIpsecSaIpcompInUserOctets OBJECT-TYPE SYNTAX Counter32 UNITS "bytes" MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaIpcompInEntry 14 } wgIpsecSaIpcompInPackets OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaIpcompInEntry 15 } wgIpsecSaIpcompInDecompErrors OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaIpcompInEntry 16 } wgIpsecSaIpcompInOtherReceiveErrors OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaIpcompInEntry 17 } -- the IPSec Outbound ESP MIB-Group -- -- a collection of objects providing information about -- IPSec Outbound ESP SAs wgIpsecSaEspOutTable OBJECT-TYPE SYNTAX SEQUENCE OF WGIpsecSaEspOutEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The (conceptual) table containing information on IPSec Outbound ESP SAs. There should be one row for every outbound ESP security association that exists in the entity. The maximum number of rows is implementation dependent." ::= { wgSaTables 4 } wgIpsecSaEspOutEntry OBJECT-TYPE SYNTAX WGIpsecSaEspOutEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An entry (conceptual row) containing the information on a particular IPSec Outbound ESP SA. A row in this table cannot be created or deleted by SNMP operations on columns of the table." INDEX{ wgIpsecSaEspOutAddress, wgIpsecSaEspOutSpi } ::= { wgIpsecSaEspOutTable 1 } WGIpsecSaEspOutEntry ::= SEQUENCE { wgIpsecSaEspOutAddress IpAddress, wgIpsecSaEspOutSpi Unsigned32, wgIpsecSaEspOutSourceId OCTET STRING, wgIpsecSaEspOutSourceIdType IpsecDoiIdentType, wgIpsecSaEspOutDestId OCTET STRING, wgIpsecSaEspOutDestIdType IpsecDoiIdentType, wgIpsecSaEspOutProtocol Integer32, wgIpsecSaEspOutSourcePort Integer32, wgIpsecSaEspOutDestPort Integer32, wgIpsecSaEspOutCreator IpsecSaCreatorIdent, wgIpsecSaEspOutEncapsulation IpsecDoiEncapsulationMode, wgIpsecSaEspOutEncAlg IpsecDoiEspTransform, wgIpsecSaEspOutEncKeyLength Integer32, wgIpsecSaEspOutAuthAlg IpsecDoiAuthAlgorithm, wgIpsecSaEspOutLimitSeconds Integer32, wgIpsecSaEspOutLimitKbytes Integer32, wgIpsecSaEspOutAccSeconds Counter32, wgIpsecSaEspOutAccKbytes Counter32, wgIpsecSaEspOutUserOctets Counter32, wgIpsecSaEspOutPackets Counter32, wgIpsecSaEspOutSendErrors Counter32 } wgIpsecSaEspOutAddress OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The destination address of the SA. For implementations that do not support IPv6, this address should appear as one of the IPv4-mapped IPv6 addresses as defined in Section 2.5.4 of [IPV6AA]. Specifically, the prefix '0000:0000:0000:0000:0000:FFFF:' is used for IPv4 only nodes, while the prefix '0000:0000:0000:0000:0000:0000:' is used for bi-lingual nodes." ::= { wgIpsecSaEspOutEntry 1 } wgIpsecSaEspOutSpi OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The security parameters index of the SA." REFERENCE "RFC 2406 Section 2.1" ::= { wgIpsecSaEspOutEntry 2 } wgIpsecSaEspOutSourceId OBJECT-TYPE SYNTAX OCTET STRING (SIZE (4..255)) MAX-ACCESS read-only STATUS current DESCRIPTION "The source identifier of the SA, or 0 if unknown or if the SA uses transport mode encapsulation. This value is taken directly from the optional ID payloads that are exchange during phase 2 negotiations." ::= { wgIpsecSaEspOutEntry 3 } wgIpsecSaEspOutSourceIdType OBJECT-TYPE SYNTAX IpsecDoiIdentType MAX-ACCESS read-only STATUS current DESCRIPTION "The type of identifier presented by 'wgIpsecSaEspOutSourceId', or 0 if unknown or if the SA uses transport mode encapsulation." ::= { wgIpsecSaEspOutEntry 4 } wgIpsecSaEspOutDestId OBJECT-TYPE SYNTAX OCTET STRING (SIZE (4..255)) MAX-ACCESS read-only STATUS current DESCRIPTION "The destination identifier of the SA, or 0 if unknown or if the SA uses transport mode encapsulation. This value is taken directly from the optional ID payloads that are exchange during phase 2 negotiations." ::= { wgIpsecSaEspOutEntry 5 } wgIpsecSaEspOutDestIdType OBJECT-TYPE SYNTAX IpsecDoiIdentType MAX-ACCESS read-only STATUS current DESCRIPTION "The type of identifier presented by 'wgIpsecSaEspOutDestId', or 0 if unknown or if the SA uses transport mode encapsulation." ::= { wgIpsecSaEspOutEntry 6 } wgIpsecSaEspOutProtocol OBJECT-TYPE SYNTAX Integer32 (0..255) MAX-ACCESS read-only STATUS current DESCRIPTION "The transport-layer protocol number that this SA carries, or 0 if it carries any protocol." REFERENCE "RFC2401 section 4.4.2" ::= { wgIpsecSaEspOutEntry 7 } wgIpsecSaEspOutSourcePort OBJECT-TYPE SYNTAX Integer32 (0.. 65535) MAX-ACCESS read-only STATUS current DESCRIPTION "The source port number of the protocol that this SA carries, or 0 if it carries any port number." REFERENCE "RFC2401 section 4.4.2" ::= { wgIpsecSaEspOutEntry 8 } wgIpsecSaEspOutDestPort OBJECT-TYPE SYNTAX Integer32 (0.. 65535) MAX-ACCESS read-only STATUS current DESCRIPTION "The destination port number of the protocol that this SA carries, or 0 if it carries any port number." REFERENCE "RFC2401 section 4.4.2" ::= { wgIpsecSaEspOutEntry 9 } wgIpsecSaEspOutCreator OBJECT-TYPE SYNTAX IpsecSaCreatorIdent MAX-ACCESS read-only STATUS current DESCRIPTION "The creator of this SA. This MIB makes no assumptions about how the SAs are created. They may be created statically, or by a key exchange protocol such as IKE, or by some other method." ::= { wgIpsecSaEspOutEntry 10 } wgIpsecSaEspOutEncapsulation OBJECT-TYPE SYNTAX IpsecDoiEncapsulationMode MAX-ACCESS read-only STATUS current DESCRIPTION "The type of encapsulation used by this SA." ::= { wgIpsecSaEspOutEntry 11 } wgIpsecSaEspOutEncAlg OBJECT-TYPE SYNTAX IpsecDoiEspTransform MAX-ACCESS read-only STATUS current DESCRIPTION "A unique value representing the encryption algorithm applied to traffic or 0 if there is no encryption used." ::= { wgIpsecSaEspOutEntry 12 } wgIpsecSaEspOutEncKeyLength OBJECT-TYPE SYNTAX Integer32 (0..65531) UNITS "bits" MAX-ACCESS read-only STATUS current DESCRIPTION "The length of the encryption key in bits used for the algorithm specified in the 'wgIpsecSaEspOutEncAlg' object, or 0 if the key length is implicit in the specified algorithm or there is no encryption specified." ::= { wgIpsecSaEspOutEntry 13 } wgIpsecSaEspOutAuthAlg OBJECT-TYPE SYNTAX IpsecDoiAuthAlgorithm MAX-ACCESS read-only STATUS current DESCRIPTION "A unique value representing the hash algorithm applied to traffic or 0 if there is no authentication used." ::= { wgIpsecSaEspOutEntry 14 } wgIpsecSaEspOutLimitSeconds OBJECT-TYPE SYNTAX Integer32 UNITS "seconds" MAX-ACCESS read-only STATUS current DESCRIPTION "The maximum lifetime in seconds of the SA, or 0 if there is no time constraint on its expiration. The display value is limited to 4294967295 seconds (more than 136 years); values greater than that value will be truncated." ::= { wgIpsecSaEspOutEntry 15 } wgIpsecSaEspOutLimitKbytes OBJECT-TYPE SYNTAX Integer32 UNITS "kilobytes" MAX-ACCESS read-only STATUS current DESCRIPTION "The maximum traffic in kbytes that the SA is allowed to support, or 0 if there is no traffic constraint on its expiration. The display value is limited to 4294967295 kilobytes; values greater than that value will be truncated." ::= { wgIpsecSaEspOutEntry 16 } wgIpsecSaEspOutAccSeconds OBJECT-TYPE SYNTAX Counter32 UNITS "seconds" MAX-ACCESS read-only STATUS current DESCRIPTION "The number of seconds accumulated against the SA's expiration by time. This is also the number of seconds that the SA has existed." ::= { wgIpsecSaEspOutEntry 17 } wgIpsecSaEspOutAccKbytes OBJECT-TYPE SYNTAX Counter32 UNITS "kilobytes" MAX-ACCESS read-only STATUS current DESCRIPTION "The amount of traffic accumulated that counts against the SA's expiration by traffic limitation, measured in Kbytes. This value may be 0 if the SA does not expire based on traffic." ::= { wgIpsecSaEspOutEntry 18 } wgIpsecSaEspOutUserOctets OBJECT-TYPE SYNTAX Counter32 UNITS "bytes" MAX-ACCESS read-only STATUS current DESCRIPTION "The amount of user level traffic measured in bytes handled by the SA. This is not necessarily the same as the amount of traffic applied against the traffic expiration limit." ::= { wgIpsecSaEspOutEntry 19 } wgIpsecSaEspOutPackets OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of packets handled by the SA." ::= { wgIpsecSaEspOutEntry 20 } wgIpsecSaEspOutSendErrors OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaEspOutEntry 21 } -- the IPSec Outbound AH MIB-Group -- -- a collection of objects providing information about -- IPSec Outbound AH SAs wgIpsecSaAhOutTable OBJECT-TYPE SYNTAX SEQUENCE OF WGIpsecSaAhOutEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The (conceptual) table containing information on IPSec Outbound AH SAs. There should be one row for every outbound AH security association that exists in the entity. The maximum number of rows is implementation dependent." ::= { wgSaTables 5 } wgIpsecSaAhOutEntry OBJECT-TYPE SYNTAX WGIpsecSaAhOutEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An entry (conceptual row) containing the information on a particular IPSec Outbound AH SA. A row in this table cannot be created or deleted by SNMP operations on columns of the table." INDEX{ wgIpsecSaAhOutAddress, wgIpsecSaAhOutSpi } ::= { wgIpsecSaAhOutTable 1 } WGIpsecSaAhOutEntry ::= SEQUENCE { wgIpsecSaAhOutAddress IpAddress, wgIpsecSaAhOutSpi Integer32, wgIpsecSaAhOutSourceId OCTET STRING, wgIpsecSaAhOutSourceIdType IpsecDoiIdentType, wgIpsecSaAhOutDestId OCTET STRING, wgIpsecSaAhOutDestIdType IpsecDoiIdentType, wgIpsecSaAhOutProtocol Integer32, wgIpsecSaAhOutSourcePort Integer32, wgIpsecSaAhOutDestPort Integer32, wgIpsecSaAhOutCreator IpsecSaCreatorIdent, wgIpsecSaAhOutEncapsulation IpsecDoiEncapsulationMode, wgIpsecSaAhOutAuthAlg IpsecDoiAhTransform, wgIpsecSaAhOutLimitSeconds Integer32, wgIpsecSaAhOutLimitKbytes Integer32, wgIpsecSaAhOutAccSeconds Counter32, wgIpsecSaAhOutAccKbytes Counter32, wgIpsecSaAhOutUserOctets Counter32, wgIpsecSaAhOutPackets Counter32, wgIpsecSaAhOutSendErrors Counter32 } wgIpsecSaAhOutAddress OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-only STATUS current DESCRIPTION "The destination address of the SA. For implementations that do not support IPv6, this address should appear as one of the IPv4-mapped IPv6 addresses as defined in Section 2.5.4 of [IPV6AA]. Specifically, the prefix '0000:0000:0000:0000:0000:FFFF:' is used for IPv4 only nodes, while the prefix '0000:0000:0000:0000:0000:0000:' is used for bi-lingual nodes." ::= { wgIpsecSaAhOutEntry 1 } wgIpsecSaAhOutSpi OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS current DESCRIPTION "The security parameters index of the SA." REFERENCE "RFC 2402 Section 2.4" ::= { wgIpsecSaAhOutEntry 2 } wgIpsecSaAhOutSourceId OBJECT-TYPE SYNTAX OCTET STRING (SIZE (4..255)) MAX-ACCESS read-only STATUS current DESCRIPTION "The source identifier of the SA, or 0 if unknown or if the SA uses transport mode encapsulation. This value is taken directly from the optional ID payloads that are exchange during phase 2 negotiations." ::= { wgIpsecSaAhOutEntry 3 } wgIpsecSaAhOutSourceIdType OBJECT-TYPE SYNTAX IpsecDoiIdentType MAX-ACCESS read-only STATUS current DESCRIPTION "The type of identifier presented by 'wgIpsecSaAhOutSourceId', or 0 if unknown or if the SA uses transport mode encapsulation." ::= { wgIpsecSaAhOutEntry 4 } wgIpsecSaAhOutDestId OBJECT-TYPE SYNTAX OCTET STRING (SIZE (4..255)) MAX-ACCESS read-only STATUS current DESCRIPTION "The destination identifier of the SA, or 0 if unknown or if the SA uses transport mode encapsulation. This value is taken directly from the optional ID payloads that are exchange during phase 2 negotiations." ::= { wgIpsecSaAhOutEntry 5 } wgIpsecSaAhOutDestIdType OBJECT-TYPE SYNTAX IpsecDoiIdentType MAX-ACCESS read-only STATUS current DESCRIPTION "The type of identifier presented by 'wgIpsecSaAhOutDestId', or 0 if unknown or if the SA uses transport mode encapsulation." ::= { wgIpsecSaAhOutEntry 6 } wgIpsecSaAhOutProtocol OBJECT-TYPE SYNTAX Integer32 (0..255) MAX-ACCESS read-only STATUS current DESCRIPTION "The transport-layer protocol number that this SA carries, or 0 if it carries any protocol." REFERENCE "RFC2401 section 4.4.2" ::= { wgIpsecSaAhOutEntry 7 } wgIpsecSaAhOutSourcePort OBJECT-TYPE SYNTAX Integer32 (0.. 65535) MAX-ACCESS read-only STATUS current DESCRIPTION "The source port number of the protocol that this SA carries, or 0 if it carries any port number." REFERENCE "RFC2401 section 4.4.2" ::= { wgIpsecSaAhOutEntry 8 } wgIpsecSaAhOutDestPort OBJECT-TYPE SYNTAX Integer32 (0.. 65535) MAX-ACCESS read-only STATUS current DESCRIPTION "The destination port number of the protocol that this SA carries, or 0 if it carries any port number." REFERENCE "RFC2401 section 4.4.2" ::= { wgIpsecSaAhOutEntry 9 } wgIpsecSaAhOutCreator OBJECT-TYPE SYNTAX IpsecSaCreatorIdent MAX-ACCESS read-only STATUS current DESCRIPTION "The creator of this SA. This MIB makes no assumptions about how the SAs are created. They may be created statically, or by a key exchange protocol such as IKE, or by some other method." ::= { wgIpsecSaAhOutEntry 10 } wgIpsecSaAhOutEncapsulation OBJECT-TYPE SYNTAX IpsecDoiEncapsulationMode MAX-ACCESS read-only STATUS current DESCRIPTION "The type of encapsulation used by this SA." ::= { wgIpsecSaAhOutEntry 11 } wgIpsecSaAhOutAuthAlg OBJECT-TYPE SYNTAX IpsecDoiAhTransform MAX-ACCESS read-only STATUS current DESCRIPTION "A unique value representing the hash algorithm applied to traffic or 0 if there is no authentication used." ::= { wgIpsecSaAhOutEntry 12 } wgIpsecSaAhOutLimitSeconds OBJECT-TYPE SYNTAX Integer32 UNITS "seconds" MAX-ACCESS read-only STATUS current DESCRIPTION "The maximum lifetime in seconds of the SA, or 0 if there is no time constraint on its expiration. The display value is limited to 4294967295 seconds (more than 136 years); values greater than that value will be truncated." ::= { wgIpsecSaAhOutEntry 13 } wgIpsecSaAhOutLimitKbytes OBJECT-TYPE SYNTAX Integer32 UNITS "kilobytes" MAX-ACCESS read-only STATUS current DESCRIPTION "The maximum traffic in Kbytes that the SA is allowed to support, or 0 if there is no traffic constraint on its expiration. The display value is limited to 4294967295 kilobytes; values greater than that value will be truncated." ::= { wgIpsecSaAhOutEntry 14 } wgIpsecSaAhOutAccSeconds OBJECT-TYPE SYNTAX Counter32 UNITS "seconds" MAX-ACCESS read-only STATUS current DESCRIPTION "The number of seconds accumulated against the SA's expiration by time. This is also the number of seconds that the SA has existed." ::= { wgIpsecSaAhOutEntry 15 } wgIpsecSaAhOutAccKbytes OBJECT-TYPE SYNTAX Counter32 UNITS "kilobytes" MAX-ACCESS read-only STATUS current DESCRIPTION "The amount of traffic accumulated that counts against the SA's expiration by traffic limitation, measured in Kbytes. This value may be 0 if the SA does not expire based on traffic." ::= { wgIpsecSaAhOutEntry 16 } wgIpsecSaAhOutUserOctets OBJECT-TYPE SYNTAX Counter32 UNITS "bytes" MAX-ACCESS read-only STATUS current DESCRIPTION "The amount of user level traffic measured in bytes handled by the SA. This is not necessarily the same as the amount of traffic applied against the traffic expiration limit." ::= { wgIpsecSaAhOutEntry 17 } wgIpsecSaAhOutPackets OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of packets handled by the SA." ::= { wgIpsecSaAhOutEntry 18 } wgIpsecSaAhOutSendErrors OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaAhOutEntry 19 } -- the IPSec Outbound IPCOMP MIB-Group -- -- a collection of objects providing information about -- IPSec Outbound IPCOMP SAs wgIpsecSaIpcompOutTable OBJECT-TYPE SYNTAX SEQUENCE OF WGIpsecSaIpcompOutEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgSaTables 6 } wgIpsecSaIpcompOutEntry OBJECT-TYPE SYNTAX WGIpsecSaIpcompOutEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Deprecated, currently unused." INDEX{ wgIpsecSaIpcompOutAddress, wgIpsecSaIpcompOutCpi } ::= { wgIpsecSaIpcompOutTable 1 } WGIpsecSaIpcompOutEntry ::= SEQUENCE { wgIpsecSaIpcompOutAddress IpAddress, wgIpsecSaIpcompOutCpi IpsecDoiIpcompTransform, wgIpsecSaIpcompOutSourceId OCTET STRING, wgIpsecSaIpcompOutSourceIdType IpsecDoiIdentType, wgIpsecSaIpcompOutDestId OCTET STRING, wgIpsecSaIpcompOutDestIdType IpsecDoiIdentType, wgIpsecSaIpcompOutProtocol Integer32, wgIpsecSaIpcompOutSourcePort Integer32, wgIpsecSaIpcompOutDestPort Integer32, wgIpsecSaIpcompOutCreator IpsecSaCreatorIdent, wgIpsecSaIpcompOutEncapsulation IpsecDoiEncapsulationMode, wgIpsecSaIpcompOutCompAlg IpsecDoiIpcompTransform, wgIpsecSaIpcompOutSeconds Counter32, wgIpsecSaIpcompOutUserOctets Counter32, wgIpsecSaIpcompOutPackets Counter32 } wgIpsecSaIpcompOutAddress OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaIpcompOutEntry 1 } wgIpsecSaIpcompOutCpi OBJECT-TYPE SYNTAX IpsecDoiIpcompTransform MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaIpcompOutEntry 2 } wgIpsecSaIpcompOutSourceId OBJECT-TYPE SYNTAX OCTET STRING (SIZE (4..255)) MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaIpcompOutEntry 3 } wgIpsecSaIpcompOutSourceIdType OBJECT-TYPE SYNTAX IpsecDoiIdentType MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaIpcompOutEntry 4 } wgIpsecSaIpcompOutDestId OBJECT-TYPE SYNTAX OCTET STRING (SIZE (4..255)) MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaIpcompOutEntry 5 } wgIpsecSaIpcompOutDestIdType OBJECT-TYPE SYNTAX IpsecDoiIdentType MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaIpcompOutEntry 6 } wgIpsecSaIpcompOutProtocol OBJECT-TYPE SYNTAX Integer32 (0..255) MAX-ACCESS read-only STATUS current DESCRIPTION "The transport-layer protocol number that this SA carries, or 0 if it carries any protocol." REFERENCE "RFC2401 section 4.4.2" ::= { wgIpsecSaIpcompOutEntry 7 } wgIpsecSaIpcompOutSourcePort OBJECT-TYPE SYNTAX Integer32 (0.. 65535) MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaIpcompOutEntry 8 } wgIpsecSaIpcompOutDestPort OBJECT-TYPE SYNTAX Integer32 (0.. 65535) MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaIpcompOutEntry 9 } wgIpsecSaIpcompOutCreator OBJECT-TYPE SYNTAX IpsecSaCreatorIdent MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaIpcompOutEntry 10 } wgIpsecSaIpcompOutEncapsulation OBJECT-TYPE SYNTAX IpsecDoiEncapsulationMode MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaIpcompOutEntry 11 } wgIpsecSaIpcompOutCompAlg OBJECT-TYPE SYNTAX IpsecDoiIpcompTransform MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaIpcompOutEntry 12 } wgIpsecSaIpcompOutSeconds OBJECT-TYPE SYNTAX Counter32 UNITS "seconds" MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaIpcompOutEntry 13 } wgIpsecSaIpcompOutUserOctets OBJECT-TYPE SYNTAX Counter32 UNITS "bytes" MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgIpsecSaIpcompOutEntry 14 } wgIpsecSaIpcompOutPackets OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of packets handled by the SA." ::= { wgIpsecSaIpcompOutEntry 15 } -- -- entity IPSec statistics -- wgIpsecEspCurrentInboundSAs OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "The current number of inbound ESP SAs in the entity." ::= { wgSaStatistics 1 } wgIpsecEspTotalInboundSAs OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgSaStatistics 2 } wgIpsecEspCurrentOutboundSAs OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "The current number of outbound ESP SAs in the entity." ::= { wgSaStatistics 3 } wgIpsecEspTotalOutboundSAs OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgSaStatistics 4 } wgIpsecAhCurrentInboundSAs OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "The current number of inbound AH SAs in the entity." ::= { wgSaStatistics 5 } wgIpsecAhTotalInboundSAs OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgSaStatistics 6 } wgIpsecAhCurrentOutboundSAs OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "The current number of outbound AH SAs in the entity." ::= { wgSaStatistics 7 } wgIpsecAhTotalOutboundSAs OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgSaStatistics 8 } wgIpsecIpcompCurrentInboundSAs OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgSaStatistics 9 } wgIpsecIpcompTotalInboundSAs OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgSaStatistics 10 } wgIpsecIpcompCurrentOutboundSAs OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgSaStatistics 11 } wgIpsecIpcompTotalOutboundSAs OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgSaStatistics 12 } -- -- IPSec error counts -- wgIpsecDecryptionErrors OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgSaErrors 1 } wgIpsecAuthenticationErrors OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgSaErrors 2 } wgIpsecReplayErrors OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgSaErrors 3 } wgIpsecPolicyErrors OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgSaErrors 4 } wgIpsecOtherReceiveErrors OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgSaErrors 5 } wgIpsecSendErrors OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgSaErrors 6 } wgIpsecUnknownSpiErrors OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "Deprecated, currently unused." ::= { wgSaErrors 7 } END