Initial commitHEADmain

1 files changed, 2361 insertions, 0 deletions

diff --git a/MIBS/comware/HH3C-IPSEC-MONITOR-V2-MIB b/MIBS/comware/HH3C-IPSEC-MONITOR-V2-MIB
new file mode 100644
index 0000000..04d28da
--- /dev/null
+++ b/MIBS/comware/HH3C-IPSEC-MONITOR-V2-MIB
@@ -0,0 +1,2361 @@
+-- ====================================================================
+-- Copyright (c) 2004-2021 New H3C Tech. Co., Ltd.  All rights reserved.
+--
+-- Description: The MIB is designed to get IPsec tunnels' statistic information.
+-- Reference:
+-- Version: 1.2
+-- History:
+--   V1.0: The initial version created by Wanghaisheng and Weiyanheng.
+--   V1.1: 2017-10-31 Added hh3cIPsecTunnelStatByDescripV2Table,hh3cIPsecConnectionStopV2,
+--         hh3cIPsecConnectionStartV2,hh3cIPsecConnectionStopCntlV2 and
+--         hh3cIPsecConnectionStartCntlV2 by shihaohao
+--   V1.2: 2021-04-23 Added by Yangbaotao. This revision is about the node
+--         Hh3cIPsecEncryptAlgoV2 and Hh3cIPsecAuthAlgoV2.
+--         Deprecated hh3cIPsecTunIKETunLocalIDVal1V2,
+--         hh3cIPsecTunIKETunRemoteIDVal1V2,added hh3cIPsecTunIKETunLocalIDVal3V2
+--         hh3cIPsecTunIKETunRemoteIDVal3V2 by Zhaoming.
+-- =====================================================================
+HH3C-IPSEC-MONITOR-V2-MIB DEFINITIONS ::= BEGIN
+
+    IMPORTS
+        ifIndex
+            FROM RFC1213-MIB
+        InterfaceIndex
+            FROM IF-MIB
+        DisplayString, TEXTUAL-CONVENTION, TruthValue
+            FROM SNMPv2-TC
+        Integer32, Counter32, Counter64, OBJECT-TYPE,
+        MODULE-IDENTITY, Gauge32, NOTIFICATION-TYPE, Unsigned32
+            FROM SNMPv2-SMI
+        InetAddressType, InetAddress
+            FROM INET-ADDRESS-MIB
+        MODULE-COMPLIANCE, OBJECT-GROUP, NOTIFICATION-GROUP
+            FROM SNMPv2-CONF
+        hh3cCommon
+            FROM HH3C-OID-MIB;
+
+    hh3cIPsecMonitorV2 MODULE-IDENTITY
+        LAST-UPDATED "202104231730Z"
+        ORGANIZATION
+            "New H3C Tech. Co., Ltd."
+        CONTACT-INFO
+            "Platform Team New H3C Tech. Co., Ltd.
+            Hai-Dian District Beijing P.R. China
+            http://www.h3c.com
+            Zip:100085"
+        DESCRIPTION
+            "The MIB is designed to get statistic information of IPsec tunnels.
+             With this MIB, we can get information of a certain tunnel or all
+             tunnels."
+         REVISION "202104231730Z"
+         DESCRIPTION
+            "This revision is about the node Hh3cIPsecEncryptAlgoV2
+             and Hh3cIPsecAuthAlgoV2.Deprecate hh3cIPsecTunIKETunLocalIDVal1V2,
+             hh3cIPsecTunIKETunRemoteIDVal1V2, add hh3cIPsecTunIKETunLocalIDVal3V2
+             and hh3cIPsecTunIKETunRemoteIDVal3V2."
+         REVISION "201710311650Z"
+         DESCRIPTION
+            "Add the objects of hh3cIPsecTunnelStatByDescripV2Table,hh3cIPsecConnectionStopV2,
+            hh3cIPsecConnectionStartV2,hh3cIPsecConnectionStopCntlV2 and
+            hh3cIPsecConnectionStartCntlV2."
+        REVISION
+            "201206270000Z"
+        DESCRIPTION
+            "Initial version."
+        ::= { hh3cCommon 126 }
+
+    Hh3cIPsecDiffHellmanGrpV2   ::= TEXTUAL-CONVENTION
+        STATUS     current
+        DESCRIPTION
+            "The Diffie Hellman Group used in the IKE and IPsec negotiations.
+             invalidGroup(2147483647) is defined as invalid value."
+        SYNTAX INTEGER {
+            none(0),
+            dhGroup1(1),
+            dhGroup2(2),
+            dhGroup5(5),
+            dhGroup14(14),
+            dhGroup24(24),
+            invalidGroup(2147483647)
+        }
+
+    Hh3cIPsecEncapModeV2        ::= TEXTUAL-CONVENTION
+        STATUS     current
+        DESCRIPTION
+            "The encapsulation mode used by an IPsec Phase-2 Tunnel.
+             invalidMode(2147483647) is defined as invalid value."
+        SYNTAX INTEGER {
+            tunnel(1),
+            transport(2),
+            invalidMode(2147483647)
+        }
+
+    Hh3cIPsecEncryptAlgoV2   ::= TEXTUAL-CONVENTION
+        STATUS     current
+        DESCRIPTION
+            "The encryption algorithm used in the IKE and IPsec negotiations.
+             invalidAlg(2147483647) is defined as invalid value."
+        SYNTAX INTEGER {
+            none(0),
+            desCbc(1),
+            ideaCbc(2),
+            blowfishCbc(3),
+            rc5R16B64Cbc(4),
+            tripleDesCbc(5),
+            castCbc(6),
+            aesCbc(7),
+            nsaCbc(8),
+            aesCbc128(9),
+            aesCbc192(10),
+            aesCbc256(11),
+            aesCtr(12),
+            aesCamelliaCbc(13),
+            rc4(14),
+            sm1Cbc128(128),
+            sm1Cbc192(129),
+            sm1Cbc256(130),
+            sm4Cbc(131),
+            invalidAlg(2147483647)
+        }
+
+    Hh3cIPsecAuthAlgoV2   ::= TEXTUAL-CONVENTION
+        STATUS     current
+        DESCRIPTION
+            "The authentication algorithm used in the IKE negotiations.
+             invalidAlg(2147483647) is defined as invalid value."
+        SYNTAX INTEGER {
+            none(0),
+            md5(1),
+            sha1(2),
+            sha256(3),
+            sha384(4),
+            sha512(5),
+            sm3(128),
+            invalidAlg(2147483647)
+        }
+
+    Hh3cIPsecSaProtocolV2   ::= TEXTUAL-CONVENTION
+        STATUS     current
+        DESCRIPTION
+            "The protocol of security association."
+        SYNTAX INTEGER {
+            reserved(0),
+            ah(2),
+            esp(3),
+            ipcomp(4)
+        }
+
+    Hh3cIPsecIDTypeV2   ::= TEXTUAL-CONVENTION
+        STATUS     current
+        DESCRIPTION
+            "The type of IPsec Identity."
+        SYNTAX INTEGER {
+            reserved(0),
+            ipv4Addr(1),
+            fqdn(2),         -- fully-qualified domain name
+            userFqdn(3),     -- fully-qualified username
+            ipv4AddrSubnet(4),
+            ipv6Addr(5),
+            ipv6AddrSubnet(6),
+            ipv4AddrRange(7),
+            ipv6AddrRange(8),
+            derAsn1Dn(9),    -- the binary DER encoding of an ASN.1 X.500 Distinguished
+                             -- Name [X.501] of the princIPal whose certificates are
+                             -- being exchanged to establish the SA.
+            derAsn1Gn(10),   -- the binary DER encoding of an ASN.1 X.500 GeneralName
+                             -- [X.509] of the princIPal whose certificates are being
+                             -- exchanged to establish the SA.
+            keyId(11)        -- specifies an opaque byte stream which may be used to
+                             -- pass vendor-specific information necessary to identify
+                             -- which pre-shared key should be used to authenticate
+                             -- Aggressive mode negotiations.
+        }
+
+    Hh3cIPsecTrafficTypeV2   ::= TEXTUAL-CONVENTION
+        STATUS     current
+        DESCRIPTION
+            "The type of the data flow."
+        SYNTAX INTEGER {
+            ipv4Addr(1),
+            ipv4AddrSubnet(4),
+            ipv6Addr(5),
+            ipv6AddrSubnet(6),
+            ipv4AddrRange(7),
+            ipv6AddrRange(8)
+        }
+
+    Hh3cIPsecNegoTypeV2   ::= TEXTUAL-CONVENTION
+        STATUS     current
+        DESCRIPTION
+            "The type of key used by an IPsec Phase-2 Tunnel.
+            invalidType(2147483647) is defined as invalid value."
+        SYNTAX INTEGER {
+            ike(1),
+            manual(2),
+            invalidType(2147483647)
+        }
+
+    Hh3cIPsecTunnelStateV2   ::= TEXTUAL-CONVENTION
+        STATUS     current
+        DESCRIPTION
+            "The state of IPsec tunnel."
+        SYNTAX INTEGER {
+            active(1),
+            timeout(2)
+        }
+
+-- ========================================================================
+-- Node definitions
+-- ========================================================================
+-- Begin the node of hh3cIPsecObjectsV2.
+
+    hh3cIPsecObjectsV2 OBJECT IDENTIFIER ::= { hh3cIPsecMonitorV2 1 }
+
+-- =======================================
+-- Begin the hh3cIPsecScalarObjectsV2.
+-- =======================================
+    hh3cIPsecScalarObjectsV2 OBJECT IDENTIFIER ::= { hh3cIPsecObjectsV2 1 }
+
+    hh3cIPsecMIBVersion OBJECT-TYPE
+        SYNTAX DisplayString(SIZE(0..255))
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "Version string of this MIB."
+        ::= { hh3cIPsecScalarObjectsV2 1 }
+
+-- ===============================================
+-- Begin the table of hh3cIPsecTunnelV2Table.
+-- ===============================================
+
+    hh3cIPsecTunnelV2Table OBJECT-TYPE
+        SYNTAX SEQUENCE OF Hh3cIPsecTunnelV2Entry
+        MAX-ACCESS not-accessible
+        STATUS current
+        DESCRIPTION
+            "The IPsec Phase-2 Tunnel Table.  There is one entry in this
+             table for each active IPsec Phase-2 Tunnel."
+        ::= { hh3cIPsecObjectsV2 2 }
+
+    hh3cIPsecTunnelV2Entry OBJECT-TYPE
+        SYNTAX Hh3cIPsecTunnelV2Entry
+        MAX-ACCESS not-accessible
+        STATUS current
+        DESCRIPTION
+            "Information about hh3cIPsecTunnelV2Table."
+        INDEX { hh3cIPsecTunIndexV2 }
+        ::= { hh3cIPsecTunnelV2Table 1 }
+
+    Hh3cIPsecTunnelV2Entry ::=
+        SEQUENCE {
+            hh3cIPsecTunIndexV2
+                Integer32,
+            hh3cIPsecTunIfIndexV2
+                InterfaceIndex,
+            hh3cIPsecTunIKETunnelIndexV2
+                Integer32,
+            hh3cIPsecTunIKETunLocalIDTypeV2
+                Hh3cIPsecIDTypeV2,
+            hh3cIPsecTunIKETunLocalIDVal1V2
+                DisplayString,
+            hh3cIPsecTunIKETunLocalIDVal2V2
+                DisplayString,
+            hh3cIPsecTunIKETunRemoteIDTypeV2
+                Hh3cIPsecIDTypeV2,
+            hh3cIPsecTunIKETunRemoteIDVal1V2
+                DisplayString,
+            hh3cIPsecTunIKETunRemoteIDVal2V2
+                DisplayString,
+            hh3cIPsecTunLocalAddrTypeV2
+                InetAddressType,
+            hh3cIPsecTunLocalAddrV2
+                InetAddress,
+            hh3cIPsecTunRemoteAddrTypeV2
+                InetAddressType,
+            hh3cIPsecTunRemoteAddrV2
+                InetAddress,
+            hh3cIPsecTunKeyTypeV2
+                Hh3cIPsecNegoTypeV2,
+            hh3cIPsecTunEncapModeV2
+                Hh3cIPsecEncapModeV2,
+            hh3cIPsecTunInitiatorV2
+                INTEGER,
+            hh3cIPsecTunLifeSizeV2
+                Gauge32,
+            hh3cIPsecTunLifeTimeV2
+                Integer32,
+            hh3cIPsecTunRemainTimeV2
+                Integer32,
+            hh3cIPsecTunActiveTimeV2
+                Integer32,
+            hh3cIPsecTunRemainSizeV2
+                Gauge32,
+            hh3cIPsecTunTotalRefreshesV2
+                Counter32,
+            hh3cIPsecTunCurrentSaInstancesV2
+                Gauge32,
+            hh3cIPsecTunInSaEncryptAlgoV2
+                Hh3cIPsecEncryptAlgoV2,
+            hh3cIPsecTunInSaAhAuthAlgoV2
+                Hh3cIPsecAuthAlgoV2,
+            hh3cIPsecTunInSaEspAuthAlgoV2
+                Hh3cIPsecAuthAlgoV2,
+            hh3cIPsecTunDiffHellmanGrpV2
+                Hh3cIPsecDiffHellmanGrpV2,
+            hh3cIPsecTunOutSaEncryptAlgoV2
+                Hh3cIPsecEncryptAlgoV2,
+            hh3cIPsecTunOutSaAhAuthAlgoV2
+                Hh3cIPsecAuthAlgoV2,
+            hh3cIPsecTunOutSaEspAuthAlgoV2
+                Hh3cIPsecAuthAlgoV2,
+            hh3cIPsecTunPolicyNameV2
+                OCTET STRING,
+            hh3cIPsecTunPolicyNumV2
+                Integer32,
+            hh3cIPsecTunStatusV2
+                INTEGER,
+            hh3cIPsecTunPolicyDescriptionV2
+                OCTET STRING,
+            hh3cIPsecTunIKETunLocalIDVal3V2
+                OCTET STRING,
+            hh3cIPsecTunIKETunRemoteIDVal3V2
+                OCTET STRING
+        }
+
+    hh3cIPsecTunIndexV2 OBJECT-TYPE
+        SYNTAX Integer32 (1..2147483647)
+        MAX-ACCESS accessible-for-notify
+        STATUS current
+        DESCRIPTION
+            "The index of IPsec Phase-2 Tunnel Table.  The value of
+             the index is a number which begins at one and is
+             incremented with each tunnel that is created.  The
+             value of this object will wrap at 2147483647."
+        ::= { hh3cIPsecTunnelV2Entry 1 }
+
+    hh3cIPsecTunIfIndexV2 OBJECT-TYPE
+        SYNTAX InterfaceIndex
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The interface index( the ifIndex of ifTable )."
+        ::= { hh3cIPsecTunnelV2Entry 2 }
+
+    hh3cIPsecTunIKETunnelIndexV2 OBJECT-TYPE
+        SYNTAX Integer32 (1..2147483647)
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The index of the associated IPsec Phase-1 IKE Tunnel
+             (IKETunIndex in the IKETunnelTable).  2147483647 is defined as
+             invalid value."
+        ::= { hh3cIPsecTunnelV2Entry 3 }
+
+    hh3cIPsecTunIKETunLocalIDTypeV2 OBJECT-TYPE
+        SYNTAX Hh3cIPsecIDTypeV2
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The type of the local peer identity for the associated IPsec
+             Phase-1 IKE Tunnel (IKETunLocalType in the IKETunnelTable)."
+        ::= { hh3cIPsecTunnelV2Entry 4 }
+
+    hh3cIPsecTunIKETunLocalIDVal1V2 OBJECT-TYPE
+        SYNTAX DisplayString(SIZE(0..255))
+        MAX-ACCESS read-only
+        STATUS deprecated
+        DESCRIPTION
+            "The value of the local peer identity for the associated IPsec
+             Phase-1 IKE Tunnel (IKETunLocalValue1 in the IKETunnelTable).
+
+             If the local peer type is ipv4Addr/ipv6Addr, this is the IP address
+             used to identify the local peer.
+
+             If the local peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is
+             the subnet address.
+
+             If the local peer type is ipv4AddrRange/ipv6AddrRange, this is
+             the beginning IP address of the range.
+
+             If the local peer type is fqdn/userFqdn, this is the host name
+             used to identify the local peer.
+
+             If the local peer type is derAsn1Dn, this is the binary DER
+             encoding of an ASN.1 X.500 Distinguished Name [X.501] of the
+             principal whose certificates are being exchanged to establish
+             the SA.
+
+             If the local peer type is derAsn1Gn, this is the binary DER
+             encoding of an ASN.1 X.500 GeneralName [X.509] of the principal
+             whose certificates are being exchanged to establish the SA.
+
+             If the local peer type is keyId, this is an opaque byte
+             stream which may be used to pass vendor-specific information
+             necessary to identify which pre-shared key should be used to
+             authenticate Aggressive mode negotiations.
+
+             The local peer identity may not exceed 255 characters in length.
+             The complete value will be displayed by hh3cIPsecTunIKETunLocalIDVal3V2"
+        ::= { hh3cIPsecTunnelV2Entry 5 }
+
+    hh3cIPsecTunIKETunLocalIDVal2V2 OBJECT-TYPE
+        SYNTAX DisplayString(SIZE(0..255))
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The second specification of the local peer's IP address for the
+             associated IPsec Phase-1 IKE Tunnel (IKETunLocalValue2 in the
+             IKETunnelTable).
+
+             If the local peer type is ipv4AddrSubnet/ipv6AddrSubnet, this
+             is the subnet mask.
+
+             If the local peer type is ipv4AddrRange/ipv6AddrRange, this is
+             the ending IP address of the range.
+
+             If the local peer type is others, this is a zero-length string."
+        ::= { hh3cIPsecTunnelV2Entry 6 }
+
+    hh3cIPsecTunIKETunRemoteIDTypeV2 OBJECT-TYPE
+        SYNTAX Hh3cIPsecIDTypeV2
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The type of the remote peer identity for the associated IPsec
+             Phase-1 IKE Tunnel (IKETunRemoteType in the IKETunnelTable)."
+        ::= { hh3cIPsecTunnelV2Entry 7 }
+
+    hh3cIPsecTunIKETunRemoteIDVal1V2 OBJECT-TYPE
+        SYNTAX DisplayString(SIZE(0..255))
+        MAX-ACCESS read-only
+        STATUS deprecated
+        DESCRIPTION
+            "The value of the remote peer identity for the associated IPsec
+             Phase-1 IKE Tunnel (IKETunRemoteValue1 in the IKETunnelTable).
+
+             If the remote peer type is ipv4Addr/ipv6Addr, this is the IP address
+             used to identify the remote peer.
+
+             If the remote peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is
+             the subnet address.
+
+             If the remote peer type is ipv4AddrRange/ipv6AddrRange, this is
+             the beginning IP address of the range.
+
+             If the remote peer type is fqdn/userFqdn, this is the host name
+             used to identify the remote peer.
+
+             If the remote peer type is derAsn1Dn, this is the binary DER
+             encoding of an ASN.1 X.500 Distinguished Name [X.501] of the
+             principal whose certificates are being exchanged to establish
+             the SA.
+
+             If the remote peer type is derAsn1Gn, this is the binary DER
+             encoding of an ASN.1 X.500 GeneralName [X.509] of the principal
+             whose certificates are being exchanged to establish the SA.
+
+             If the remote peer type is keyId, this is an opaque byte
+             stream which may be used to pass vendor-specific information
+             necessary to identify which pre-shared key should be used to
+             authenticate Aggressive mode negotiations.
+
+             The remote peer identity may not exceed 255 characters in length.
+             The complete value will be displayed by hh3cIPsecTunIKETunRemoteIDVal3V2"
+        ::= { hh3cIPsecTunnelV2Entry 8 }
+
+    hh3cIPsecTunIKETunRemoteIDVal2V2 OBJECT-TYPE
+        SYNTAX DisplayString(SIZE(0..255))
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The second specification of the remote peer's IP address for the
+             associated IPsec Phase-1 IKE Tunnel(IKETunRemoteValue2 in the
+             IKETunnelTable).
+
+             If the remote peer type is ipv4AddrSubnet/ipv6AddrSubnet, this
+             is the subnet mask.
+
+             If the remote peer type is ipv4AddrRange/ipv6AddrRange, this is
+             the ending IP address of the range.
+
+             If the remote peer type is others, this is a zero-length string."
+        ::= { hh3cIPsecTunnelV2Entry 9 }
+
+    hh3cIPsecTunLocalAddrTypeV2 OBJECT-TYPE
+        SYNTAX InetAddressType
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The type of the IP address for the local peer of the IPsec Phase-2
+            Tunnel."
+        ::= { hh3cIPsecTunnelV2Entry 10 }
+
+    hh3cIPsecTunLocalAddrV2 OBJECT-TYPE
+        SYNTAX InetAddress
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The IP address of the local peer for the IPsec Phase-2 Tunnel."
+        ::= { hh3cIPsecTunnelV2Entry 11 }
+
+    hh3cIPsecTunRemoteAddrTypeV2 OBJECT-TYPE
+        SYNTAX InetAddressType
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The type of the IP address for the remote peer of the IPsec Phase-2
+             Tunnel."
+        ::= { hh3cIPsecTunnelV2Entry 12 }
+
+    hh3cIPsecTunRemoteAddrV2 OBJECT-TYPE
+        SYNTAX InetAddress
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The IP address of the remote peer for the IPsec Phase-2 Tunnel."
+        ::= { hh3cIPsecTunnelV2Entry 13 }
+
+    hh3cIPsecTunKeyTypeV2 OBJECT-TYPE
+        SYNTAX Hh3cIPsecNegoTypeV2
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The key negotiate mode used by the IPsec Phase-2 Tunnel."
+        ::= { hh3cIPsecTunnelV2Entry 14 }
+
+    hh3cIPsecTunEncapModeV2 OBJECT-TYPE
+        SYNTAX Hh3cIPsecEncapModeV2
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The encapsulation mode used by the IPsec Phase-2 Tunnel."
+        ::= { hh3cIPsecTunnelV2Entry 15 }
+
+    hh3cIPsecTunInitiatorV2 OBJECT-TYPE
+        SYNTAX INTEGER
+            {
+                local(1),
+                remote(2),
+                none(2147483647)
+            }
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The initiator of this IPsec tunnel.  Value none is used for manual
+             IPsec tunnel, for there is no initiator or responder in this method."
+        ::= { hh3cIPsecTunnelV2Entry 16 }
+
+    hh3cIPsecTunLifeSizeV2 OBJECT-TYPE
+        SYNTAX Gauge32
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The negotiated LifeSize of the IPsec Phase-2 Tunnel in kilobytes.
+             0 is defined as invalid value."
+        ::= { hh3cIPsecTunnelV2Entry 17 }
+
+    hh3cIPsecTunLifeTimeV2 OBJECT-TYPE
+        SYNTAX Integer32 (1..2147483647)
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The negotiated LifeTime of the IPsec Phase-2 Tunnel in seconds.
+             2147483647 is defined as invalid value."
+        ::= { hh3cIPsecTunnelV2Entry 18 }
+
+    hh3cIPsecTunRemainTimeV2 OBJECT-TYPE
+        SYNTAX Integer32 (0..2147483647)
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The remain time of SA in seconds.  2147483647 is defined as invalid
+            value."
+        ::= { hh3cIPsecTunnelV2Entry 19 }
+
+    hh3cIPsecTunActiveTimeV2 OBJECT-TYPE
+        SYNTAX Integer32 (0..2147483647)
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The duration the IPsec Phase-2 Tunnel has been active in
+             hundredths of seconds.  2147483647 is defined as invalid value."
+        ::= { hh3cIPsecTunnelV2Entry 20 }
+
+    hh3cIPsecTunRemainSizeV2 OBJECT-TYPE
+        SYNTAX Gauge32
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The remain LifeSize of SA in kilobytes.  0 is defined as
+            invalid value."
+        ::= { hh3cIPsecTunnelV2Entry 21 }
+
+    hh3cIPsecTunTotalRefreshesV2 OBJECT-TYPE
+        SYNTAX Counter32
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of security association refreshing performed."
+        ::= { hh3cIPsecTunnelV2Entry 22 }
+
+    hh3cIPsecTunCurrentSaInstancesV2 OBJECT-TYPE
+        SYNTAX Gauge32
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The number of security associations which are currently active
+             or expiring."
+        ::= { hh3cIPsecTunnelV2Entry 23 }
+
+    hh3cIPsecTunInSaEncryptAlgoV2 OBJECT-TYPE
+        SYNTAX Hh3cIPsecEncryptAlgoV2
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The encryption algorithm used by the inbound security association
+             of the IPsec Phase-2 Tunnel."
+        ::= { hh3cIPsecTunnelV2Entry 24 }
+
+    hh3cIPsecTunInSaAhAuthAlgoV2 OBJECT-TYPE
+        SYNTAX Hh3cIPsecAuthAlgoV2
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The authentication algorithm used by the inbound authentication
+             header (AH) security association of the IPsec Phase-2 Tunnel."
+        ::= { hh3cIPsecTunnelV2Entry 25 }
+
+    hh3cIPsecTunInSaEspAuthAlgoV2 OBJECT-TYPE
+        SYNTAX Hh3cIPsecAuthAlgoV2
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The authentication algorithm used by the inbound encapsulation
+             security protocol(ESP) security association of the IPsec
+             Phase-2 Tunnel."
+        ::= { hh3cIPsecTunnelV2Entry 26 }
+
+    hh3cIPsecTunDiffHellmanGrpV2 OBJECT-TYPE
+        SYNTAX Hh3cIPsecDiffHellmanGrpV2
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The Diffie Hellman Group used by the security association of the
+             IPsec Phase-2 Tunnel."
+        ::= { hh3cIPsecTunnelV2Entry 27 }
+
+    hh3cIPsecTunOutSaEncryptAlgoV2 OBJECT-TYPE
+        SYNTAX Hh3cIPsecEncryptAlgoV2
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The encryption algorithm used by the outbound security
+             association of the IPsec Phase-2 Tunnel."
+        ::= { hh3cIPsecTunnelV2Entry 28 }
+
+    hh3cIPsecTunOutSaAhAuthAlgoV2 OBJECT-TYPE
+        SYNTAX Hh3cIPsecAuthAlgoV2
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The authentication algorithm used by the outbound
+             authentication header (AH) security association of
+             the IPsec Phase-2 Tunnel."
+        ::= { hh3cIPsecTunnelV2Entry 29 }
+
+    hh3cIPsecTunOutSaEspAuthAlgoV2 OBJECT-TYPE
+        SYNTAX Hh3cIPsecAuthAlgoV2
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The authentication algorithm used by the outbound encapsulation
+             security protocol(ESP) security association of the IPsec
+             Phase-2 Tunnel."
+        ::= { hh3cIPsecTunnelV2Entry 30 }
+
+    hh3cIPsecTunPolicyNameV2 OBJECT-TYPE
+        SYNTAX OCTET STRING (SIZE(1..63))
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The policy name used by this IPsec tunnel."
+        ::= { hh3cIPsecTunnelV2Entry 31 }
+
+    hh3cIPsecTunPolicyNumV2 OBJECT-TYPE
+        SYNTAX Integer32 (1..2147483647)
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The sequence number of policy used by this IPsec tunnel."
+        ::= { hh3cIPsecTunnelV2Entry 32 }
+
+    hh3cIPsecTunStatusV2 OBJECT-TYPE
+        SYNTAX INTEGER
+            {
+                initial(1),
+                ready(2),
+                rekeyed(3),
+                closed(4)
+            }
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The status of the IPsec Tunnel."
+        ::= { hh3cIPsecTunnelV2Entry 33 }
+
+    hh3cIPsecTunPolicyDescriptionV2 OBJECT-TYPE
+        SYNTAX OCTET STRING (SIZE(1..80))
+        MAX-ACCESS  read-only
+        STATUS      current
+        DESCRIPTION
+            "IPsec policy description of an IPsec tunne."
+        ::= { hh3cIPsecTunnelV2Entry 34 }
+
+    hh3cIPsecTunIKETunLocalIDVal3V2 OBJECT-TYPE
+        SYNTAX OCTET STRING (SIZE(0..2047))
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The value of the local peer identity for the associated IPsec
+             Phase-1 IKE Tunnel (IKETunLocalValue1 in the IKETunnelTable).
+
+             If the local peer type is ipv4Addr/ipv6Addr, this is the IP address
+             used to identify the local peer.
+
+             If the local peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is
+             the subnet address.
+
+             If the local peer type is ipv4AddrRange/ipv6AddrRange, this is
+             the beginning IP address of the range.
+
+             If the local peer type is fqdn/userFqdn, this is the host name
+             used to identify the local peer.
+
+             If the local peer type is derAsn1Dn, this is the binary DER
+             encoding of an ASN.1 X.500 Distinguished Name [X.501] of the
+             principal whose certificates are being exchanged to establish
+             the SA.
+
+             If the local peer type is derAsn1Gn, this is the binary DER
+             encoding of an ASN.1 X.500 GeneralName [X.509] of the principal
+             whose certificates are being exchanged to establish the SA.
+
+             If the local peer type is keyId, this is an opaque byte
+             stream which may be used to pass vendor-specific information
+             necessary to identify which pre-shared key should be used to
+             authenticate Aggressive mode negotiations."
+        ::= { hh3cIPsecTunnelV2Entry 35 }
+
+    hh3cIPsecTunIKETunRemoteIDVal3V2 OBJECT-TYPE
+        SYNTAX OCTET STRING (SIZE(0..2047))
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The value of the remote peer identity for the associated IPsec
+             Phase-1 IKE Tunnel (IKETunRemoteValue1 in the IKETunnelTable).
+
+             If the remote peer type is ipv4Addr/ipv6Addr, this is the IP address
+             used to identify the remote peer.
+
+             If the remote peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is
+             the subnet address.
+
+             If the remote peer type is ipv4AddrRange/ipv6AddrRange, this is
+             the beginning IP address of the range.
+
+             If the remote peer type is fqdn/userFqdn, this is the host name
+             used to identify the remote peer.
+
+             If the remote peer type is derAsn1Dn, this is the binary DER
+             encoding of an ASN.1 X.500 Distinguished Name [X.501] of the
+             principal whose certificates are being exchanged to establish
+             the SA.
+
+             If the remote peer type is derAsn1Gn, this is the binary DER
+             encoding of an ASN.1 X.500 GeneralName [X.509] of the principal
+             whose certificates are being exchanged to establish the SA.
+
+             If the remote peer type is keyId, this is an opaque byte
+             stream which may be used to pass vendor-specific information
+             necessary to identify which pre-shared key should be used to
+             authenticate Aggressive mode negotiations."
+        ::= { hh3cIPsecTunnelV2Entry 36 }
+
+
+-- ===============================================
+-- Begin the table of hh3cIPsecTunnelStatV2Table.
+-- ===============================================
+
+    hh3cIPsecTunnelStatV2Table OBJECT-TYPE
+        SYNTAX SEQUENCE OF Hh3cIPsecTunnelStatV2Entry
+        MAX-ACCESS not-accessible
+        STATUS current
+        DESCRIPTION
+            "The IPsec Phase-2 Tunnel Statistics Table."
+        ::= { hh3cIPsecObjectsV2 3 }
+
+    hh3cIPsecTunnelStatV2Entry OBJECT-TYPE
+        SYNTAX Hh3cIPsecTunnelStatV2Entry
+        MAX-ACCESS not-accessible
+        STATUS current
+        DESCRIPTION
+            "Information about hh3cIPsecTunnelStatV2Table."
+        INDEX { hh3cIPsecTunIndexV2 }
+        ::= { hh3cIPsecTunnelStatV2Table 1 }
+
+    Hh3cIPsecTunnelStatV2Entry ::=
+        SEQUENCE {
+            hh3cIPsecTunInOctetsV2
+                Counter64,
+            hh3cIPsecTunInDecompOctetsV2
+                Counter64,
+            hh3cIPsecTunInPktsV2
+                Counter64,
+            hh3cIPsecTunInDropPktsV2
+                Counter64,
+            hh3cIPsecTunInReplayDropPktsV2
+                Counter64,
+            hh3cIPsecTunInAuthFailsV2
+                Counter64,
+            hh3cIPsecTunInDecryptFailsV2
+                Counter64,
+            hh3cIPsecTunOutOctetsV2
+                Counter64,
+            hh3cIPsecTunOutUncompOctetsV2
+                Counter64,
+            hh3cIPsecTunOutPktsV2
+                Counter64,
+            hh3cIPsecTunOutDropPktsV2
+                Counter64,
+            hh3cIPsecTunOutEncryptFailsV2
+                Counter64,
+            hh3cIPsecTunNoMemoryDropPktsV2
+                Counter64,
+            hh3cIPsecTunQueueFullDropPktsV2
+                Counter64,
+            hh3cIPsecTunInvalidLenDropPktsV2
+                Counter64,
+            hh3cIPsecTunTooLongDropPktsV2
+                Counter64,
+            hh3cIPsecTunInvalidSaDropPktsV2
+                Counter64
+        }
+
+    hh3cIPsecTunInOctetsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of octets received by this IPsec Phase-2 Tunnel.
+             This value is accumulated BEFORE determining whether or not the
+             packet should be decompressed."
+        ::= { hh3cIPsecTunnelStatV2Entry 1 }
+
+    hh3cIPsecTunInDecompOctetsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of decompressed octets received by this IPsec
+             Phase-2 Tunnel.  This value is accumulated AFTER the packet
+             is decompressed."
+        ::= { hh3cIPsecTunnelStatV2Entry 2 }
+
+    hh3cIPsecTunInPktsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of packets received by this IPsec Phase-2 Tunnel."
+        ::= { hh3cIPsecTunnelStatV2Entry 3 }
+
+    hh3cIPsecTunInDropPktsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of packets dropped during receiving process
+             by this IPsec Phase-2 Tunnel."
+        ::= { hh3cIPsecTunnelStatV2Entry 4 }
+
+    hh3cIPsecTunInReplayDropPktsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of packets dropped during
+             receiving process due to Anti-Replay process
+             by this IPsec Phase-2 Tunnel."
+        ::= { hh3cIPsecTunnelStatV2Entry 5 }
+
+    hh3cIPsecTunInAuthFailsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of inbound authentication's
+             which ended in failure by this IPsec Phase-2 Tunnel."
+        ::= { hh3cIPsecTunnelStatV2Entry 6 }
+
+    hh3cIPsecTunInDecryptFailsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of inbound decryption's
+             which ended in failure by this IPsec Phase-2 Tunnel."
+        ::= { hh3cIPsecTunnelStatV2Entry 7 }
+
+    hh3cIPsecTunOutOctetsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of octets sent by this IPsec Phase-2 Tunnel.
+             This value is accumulated AFTER determining whether or not
+             the packet should be compressed."
+        ::= { hh3cIPsecTunnelStatV2Entry 8 }
+
+    hh3cIPsecTunOutUncompOctetsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of uncompressed octets sent by this IPsec Phase-2
+             Tunnel.  This value is accumulated BEFORE the packet is compressed."
+        ::= { hh3cIPsecTunnelStatV2Entry 9 }
+
+    hh3cIPsecTunOutPktsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of packets sent by this IPsec Phase-2 Tunnel."
+        ::= { hh3cIPsecTunnelStatV2Entry 10 }
+
+    hh3cIPsecTunOutDropPktsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of packets dropped during sending process
+             by this IPsec Phase-2 Tunnel."
+        ::= { hh3cIPsecTunnelStatV2Entry 11 }
+
+    hh3cIPsecTunOutEncryptFailsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of outbound encryption's which ended in failure
+             by this IPsec Phase-2 Tunnel."
+        ::= { hh3cIPsecTunnelStatV2Entry 12 }
+
+    hh3cIPsecTunNoMemoryDropPktsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of packets dropped due to no enough memory by this
+             IPsec Phase-2 Tunnel."
+        ::= { hh3cIPsecTunnelStatV2Entry 13 }
+
+    hh3cIPsecTunQueueFullDropPktsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of packets dropped due to queue full by this
+             IPsec Phase-2 Tunnel."
+        ::= { hh3cIPsecTunnelStatV2Entry 14 }
+
+    hh3cIPsecTunInvalidLenDropPktsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of packets dropped due to invalid length packet
+             by this IPsec Phase-2 Tunnel."
+        ::= { hh3cIPsecTunnelStatV2Entry 15 }
+
+    hh3cIPsecTunTooLongDropPktsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of packets dropped due to too long packet by this
+             IPsec Phase-2 Tunnel."
+        ::= { hh3cIPsecTunnelStatV2Entry 16 }
+
+    hh3cIPsecTunInvalidSaDropPktsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of packets dropped due to invalid SA by this
+             IPsec Phase-2 Tunnel."
+        ::= { hh3cIPsecTunnelStatV2Entry 17 }
+
+-- ===============================================
+-- Begin the table of hh3cIPsecSaV2Table.
+-- ===============================================
+
+    hh3cIPsecSaV2Table OBJECT-TYPE
+        SYNTAX SEQUENCE OF Hh3cIPsecSaV2Entry
+        MAX-ACCESS not-accessible
+        STATUS current
+        DESCRIPTION
+            "The IPsec Phase-2 Security Protection Index Table.  This table
+             contains an entry for each active and expiring security association."
+        ::= { hh3cIPsecObjectsV2 4 }
+
+    hh3cIPsecSaV2Entry OBJECT-TYPE
+        SYNTAX Hh3cIPsecSaV2Entry
+        MAX-ACCESS not-accessible
+        STATUS current
+        DESCRIPTION
+            "Information about hh3cIPsecSaV2Table."
+        INDEX { hh3cIPsecTunIndexV2,hh3cIPsecSaIndexV2 }
+        ::= { hh3cIPsecSaV2Table 1 }
+
+    Hh3cIPsecSaV2Entry ::=
+        SEQUENCE {
+            hh3cIPsecSaIndexV2
+                Integer32,
+            hh3cIPsecSaDirectionV2
+                INTEGER,
+            hh3cIPsecSaSpiValueV2
+                Unsigned32,
+            hh3cIPsecSaSecProtocolV2
+                Hh3cIPsecSaProtocolV2,
+            hh3cIPsecSaEncryptAlgoV2
+                Hh3cIPsecEncryptAlgoV2,
+            hh3cIPsecSaAuthAlgoV2
+                Hh3cIPsecAuthAlgoV2,
+            hh3cIPsecSaStatusV2
+                INTEGER
+        }
+
+    hh3cIPsecSaIndexV2 OBJECT-TYPE
+        SYNTAX Integer32 (1..2147483647)
+        MAX-ACCESS accessible-for-notify
+        STATUS current
+        DESCRIPTION
+            "The number of the Sa associated with the Phase-2 Tunnel
+             Table.  The value of this index is a number which begins
+             at one and is incremented with each Sa associated with
+             an IPsec Phase-2 Tunnel.  The value of this object will
+             wrap at 2,147,483,647."
+        ::= { hh3cIPsecSaV2Entry 1 }
+
+    hh3cIPsecSaDirectionV2 OBJECT-TYPE
+        SYNTAX INTEGER {
+            in(1),
+            out(2)
+        }
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The direction of the SA."
+        ::= { hh3cIPsecSaV2Entry 2 }
+
+    hh3cIPsecSaSpiValueV2 OBJECT-TYPE
+        SYNTAX Unsigned32 (1..4294967295)
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The value of the SPI."
+        ::= { hh3cIPsecSaV2Entry 3 }
+
+    hh3cIPsecSaSecProtocolV2 OBJECT-TYPE
+        SYNTAX Hh3cIPsecSaProtocolV2
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The security protocol of the SA."
+        ::= { hh3cIPsecSaV2Entry 4 }
+
+    hh3cIPsecSaEncryptAlgoV2 OBJECT-TYPE
+        SYNTAX Hh3cIPsecEncryptAlgoV2
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The encryption algorithm used by the security association
+             of the IPsec Phase-2 Tunnel."
+        ::= { hh3cIPsecSaV2Entry 5 }
+
+    hh3cIPsecSaAuthAlgoV2 OBJECT-TYPE
+        SYNTAX Hh3cIPsecAuthAlgoV2
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The authentication algorithm used by the SA."
+        ::= { hh3cIPsecSaV2Entry 6 }
+
+    hh3cIPsecSaStatusV2 OBJECT-TYPE
+        SYNTAX INTEGER {
+            active(1),
+            expiring(2)
+        }
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The status of the SA."
+        ::= { hh3cIPsecSaV2Entry 7 }
+
+-- ===============================================
+-- Begin the table of hh3cIPsecTrafficV2Table.
+-- ===============================================
+
+    hh3cIPsecTrafficV2Table OBJECT-TYPE
+        SYNTAX SEQUENCE OF Hh3cIPsecTrafficV2Entry
+        MAX-ACCESS not-accessible
+        STATUS current
+        DESCRIPTION
+            "The IPsec Phase-2 Tunnel Traffic Table."
+        ::= { hh3cIPsecObjectsV2 5 }
+
+    hh3cIPsecTrafficV2Entry OBJECT-TYPE
+        SYNTAX Hh3cIPsecTrafficV2Entry
+        MAX-ACCESS not-accessible
+        STATUS current
+        DESCRIPTION
+            "Information about hh3cIPsecTrafficV2Table."
+        INDEX { hh3cIPsecTunIndexV2 }
+        ::= { hh3cIPsecTrafficV2Table 1 }
+
+    Hh3cIPsecTrafficV2Entry ::=
+        SEQUENCE {
+            hh3cIPsecTrafficLocalTypeV2
+                Hh3cIPsecTrafficTypeV2,
+            hh3cIPsecTrafficLocalAddr1TypeV2
+                InetAddressType,
+            hh3cIPsecTrafficLocalAddr1V2
+                InetAddress,
+            hh3cIPsecTrafficLocalAddr2TypeV2
+                InetAddressType,
+            hh3cIPsecTrafficLocalAddr2V2
+                InetAddress,
+            hh3cIPsecTrafficLocalProtocol1V2
+                Integer32,
+            hh3cIPsecTrafficLocalProtocol2V2
+                Integer32,
+            hh3cIPsecTrafficLocalPort1V2
+                Integer32,
+            hh3cIPsecTrafficLocalPort2V2
+                Integer32,
+            hh3cIPsecTrafficRemoteTypeV2
+                Hh3cIPsecTrafficTypeV2,
+            hh3cIPsecTrafficRemAddr1TypeV2
+                InetAddressType,
+            hh3cIPsecTrafficRemAddr1V2
+                InetAddress,
+            hh3cIPsecTrafficRemAddr2TypeV2
+                InetAddressType,
+            hh3cIPsecTrafficRemAddr2V2
+                InetAddress,
+            hh3cIPsecTrafficRemoPro1V2
+                Integer32,
+            hh3cIPsecTrafficRemoPro2V2
+                Integer32,
+            hh3cIPsecTrafficRemPort1V2
+                Integer32,
+            hh3cIPsecTrafficRemPort2V2
+                Integer32
+    }
+
+    hh3cIPsecTrafficLocalTypeV2 OBJECT-TYPE
+        SYNTAX Hh3cIPsecTrafficTypeV2
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The type of the local peer's traffic.  Possible values are:
+            1) A single IP address
+            2) An IP address range
+            3) An IP subnet"
+        ::= { hh3cIPsecTrafficV2Entry 1 }
+
+    hh3cIPsecTrafficLocalAddr1TypeV2 OBJECT-TYPE
+        SYNTAX InetAddressType
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The type of the first IP address specification for the local peer's
+             traffic."
+        ::= { hh3cIPsecTrafficV2Entry 2 }
+
+    hh3cIPsecTrafficLocalAddr1V2 OBJECT-TYPE
+        SYNTAX InetAddress
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The first IP address specification of the local peer's traffic.
+
+            If the local peer's traffic type is single IP address, this is the
+            IP address.
+
+            If the local peer's traffic type is IP subnet, this is the subnet address.
+
+            If the local peer's traffic type is IP address range, this is the
+            beginning IP address of the range."
+        ::= { hh3cIPsecTrafficV2Entry 3 }
+
+    hh3cIPsecTrafficLocalAddr2TypeV2 OBJECT-TYPE
+        SYNTAX InetAddressType
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The type of the second IP address specification for the local peer's
+             traffic."
+        ::= { hh3cIPsecTrafficV2Entry 4 }
+
+    hh3cIPsecTrafficLocalAddr2V2 OBJECT-TYPE
+        SYNTAX InetAddress
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The second IP address specification of the local peer's traffic.
+
+            If the local peer's traffic type is single IP address, this is the
+            IP address.
+
+            If the local peer's traffic type is IP subnet, this is the subnet mask.
+
+            If the local peer's traffic type is IP address range, this is the
+            ending IP address of the range."
+        ::= { hh3cIPsecTrafficV2Entry 5 }
+
+    hh3cIPsecTrafficLocalProtocol1V2 OBJECT-TYPE
+        SYNTAX Integer32 (0..255)
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The first protocol number specification of the local peer's traffic.
+
+            If the protocol type of the local peer's traffic is single protocol,
+            this is the protocol number.
+
+            If the protocol type of the local peer's traffic is protocol range,
+            this is the beginning protocol number of the range."
+        ::= { hh3cIPsecTrafficV2Entry 6 }
+
+    hh3cIPsecTrafficLocalProtocol2V2 OBJECT-TYPE
+        SYNTAX Integer32 (0..255)
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The second protocol number specification of the local peer's traffic.
+
+            If the protocol type of the local peer's traffic is single protocol,
+            this is the protocol number.
+
+            If the protocol type of the local peer's traffic is protocol range,
+            this is the ending protocol number of the range."
+        ::= { hh3cIPsecTrafficV2Entry 7 }
+
+    hh3cIPsecTrafficLocalPort1V2 OBJECT-TYPE
+        SYNTAX Integer32 (0..65535)
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The first port number specification of the local peer's traffic.
+
+            If the port type of the local peer's traffic is single port, this is
+            the port number.
+
+            If the port type of the local peer's traffic is port range, this is
+            the beginning port number of the range."
+        ::= { hh3cIPsecTrafficV2Entry 8 }
+
+    hh3cIPsecTrafficLocalPort2V2 OBJECT-TYPE
+        SYNTAX Integer32 (0..65535)
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The second port number specification of the local peer's traffic.
+
+            If the port type of the local peer's traffic is single port, this is
+            the port number.
+
+            If the port type of the local peer's traffic is port range, this is
+            the ending port number of the range."
+        ::= { hh3cIPsecTrafficV2Entry 9 }
+
+    hh3cIPsecTrafficRemoteTypeV2 OBJECT-TYPE
+        SYNTAX Hh3cIPsecTrafficTypeV2
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The type of the remote peer's traffic.  Possible values are:
+            1) A single IP address
+            2) An IP address range
+            3) An IP subnet"
+        ::= { hh3cIPsecTrafficV2Entry 10 }
+
+    hh3cIPsecTrafficRemAddr1TypeV2 OBJECT-TYPE
+        SYNTAX InetAddressType
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The type of the first IP address specification for the remote peer's
+             traffic."
+        ::= { hh3cIPsecTrafficV2Entry 11 }
+
+    hh3cIPsecTrafficRemAddr1V2 OBJECT-TYPE
+        SYNTAX InetAddress
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The first IP address specification of the remote peer's traffic.
+
+            If the remote traffic type is single IP address, this is the IP address.
+
+            If the remote traffic type is IP subnet, this is the subnet address.
+
+            If the remote traffic type is IP address range, this is the beginning
+            IP address of the range."
+        ::= { hh3cIPsecTrafficV2Entry 12 }
+
+    hh3cIPsecTrafficRemAddr2TypeV2 OBJECT-TYPE
+        SYNTAX InetAddressType
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The type of the second IP address specification for the remote peer's
+             traffic."
+        ::= { hh3cIPsecTrafficV2Entry 13 }
+
+    hh3cIPsecTrafficRemAddr2V2 OBJECT-TYPE
+        SYNTAX InetAddress
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The second IP address specification of the remote peer's traffic.
+
+            If the remote traffic type is single IP address, this is the IP address.
+
+            If the remote traffic type is IP subnet, this is the subnet mask.
+
+            If the remote traffic type is IP address range, this is the ending IP
+            address of the range."
+        ::= { hh3cIPsecTrafficV2Entry 14 }
+
+    hh3cIPsecTrafficRemoPro1V2 OBJECT-TYPE
+        SYNTAX Integer32 (0..255)
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The first protocol number specification of the remote peer's traffic.
+
+            If the protocol type of the remote peer's traffic is single protocol,
+            this is the protocol number.
+
+            If the protocol type of the remote peer's traffic is protocol range,
+            this is the beginning protocol number of the range."
+        ::= { hh3cIPsecTrafficV2Entry 15 }
+
+    hh3cIPsecTrafficRemoPro2V2 OBJECT-TYPE
+        SYNTAX Integer32 (0..255)
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The second protocol number specification of the remote peer's traffic.
+
+            If the protocol type of the remote peer's traffic is single protocol,
+            this is the protocol number.
+
+            If the protocol type of the remote peer's traffic is protocol range,
+            this is the ending protocol number of the range."
+        ::= { hh3cIPsecTrafficV2Entry 16 }
+
+    hh3cIPsecTrafficRemPort1V2 OBJECT-TYPE
+        SYNTAX Integer32 (0..65535)
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The first port number specification of the remote peer's traffic.
+
+            If the port type of the remote peer's traffic is single port,
+            this is the port number.
+
+            If the port type of the remote peer's traffic is port range,
+            this is the beginning port number of the range."
+        ::= { hh3cIPsecTrafficV2Entry 17 }
+
+    hh3cIPsecTrafficRemPort2V2 OBJECT-TYPE
+        SYNTAX Integer32 (0..65535)
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The second port number specification of the remote peer's traffic.
+
+            If the port type of the remote peer's traffic is single port,
+            this is the port number.
+
+            If the port type of the remote peer's traffic is port range,
+            this is the ending port number of the range."
+        ::= { hh3cIPsecTrafficV2Entry 18 }
+
+-- ===============================================
+-- Begin the hh3cIPsecGlobalStatsV2.
+-- ===============================================
+
+    hh3cIPsecGlobalStatsV2 OBJECT IDENTIFIER ::= { hh3cIPsecObjectsV2 6 }
+
+    hh3cIPsecGlobalActiveTunnelsV2 OBJECT-TYPE
+        SYNTAX Gauge32
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of currently active IPsec Phase-2 Tunnels."
+        ::= { hh3cIPsecGlobalStatsV2 1 }
+
+    hh3cIPsecGlobalActiveSasV2 OBJECT-TYPE
+        SYNTAX Gauge32
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of currently active or expiring IPsec Phase-2 SA."
+        ::= { hh3cIPsecGlobalStatsV2 2 }
+
+    hh3cIPsecGlobalInOctetsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of octets received by all current and previous
+             IPsec Phase-2 Tunnels.  This value is accumulated BEFORE determining
+             whether or not the packet should be decompressed."
+        ::= { hh3cIPsecGlobalStatsV2 3 }
+
+    hh3cIPsecGlobalInDecompOctetsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of decompressed octets received by all current
+             and previous IPsec Phase-2 Tunnels.  This value is accumulated
+             AFTER the packet is decompressed."
+        ::= { hh3cIPsecGlobalStatsV2 4 }
+
+    hh3cIPsecGlobalInPktsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of packets received by all current and
+             previous IPsec Phase-2 Tunnels."
+        ::= { hh3cIPsecGlobalStatsV2 5 }
+
+    hh3cIPsecGlobalInDropsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of packets dropped during receiving
+             process by all current and previous IPsec Phase-2
+             Tunnels."
+        ::= { hh3cIPsecGlobalStatsV2 6 }
+
+    hh3cIPsecGlobalInReplayDropsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of packets dropped during receiving
+             process due to Anti-Replay process by all
+             current and previous IPsec Phase-2 Tunnels."
+        ::= { hh3cIPsecGlobalStatsV2 7 }
+
+    hh3cIPsecGlobalInAuthFailsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of inbound authentication's which ended
+             in failure by all current and previous IPsec Phase-2 Tunnels."
+        ::= { hh3cIPsecGlobalStatsV2 8 }
+
+    hh3cIPsecGlobalInDecryptFailsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of inbound decryption's which ended in
+             failure by all current and previous IPsec Phase-2 Tunnels."
+        ::= { hh3cIPsecGlobalStatsV2 9 }
+
+    hh3cIPsecGlobalOutOctetsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of octets sent by all current and previous
+             IPsec Phase-2 Tunnels.  This value is accumulated AFTER
+             determining whether or not the packet should be compressed."
+        ::= { hh3cIPsecGlobalStatsV2 10 }
+
+    hh3cIPsecGlobalOutUncompOctetsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of uncompressed octets sent by all current
+             and previous IPsec Phase-2 Tunnels.  This value is accumulated
+             BEFORE the packet is compressed."
+        ::= { hh3cIPsecGlobalStatsV2 11 }
+
+    hh3cIPsecGlobalOutPktsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of packets sent by all current and previous
+             IPsec Phase-2 Tunnels."
+        ::= { hh3cIPsecGlobalStatsV2 12 }
+
+    hh3cIPsecGlobalOutDropsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of packets dropped during sending process
+             by all current and previous IPsec Phase-2 Tunnels."
+        ::= { hh3cIPsecGlobalStatsV2 13 }
+
+    hh3cIPsecGlobalOutEncryptFailsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of outbound encryption's which ended in failure
+             by all current and previous IPsec Phase-2 Tunnels."
+        ::= { hh3cIPsecGlobalStatsV2 14 }
+
+    hh3cIPsecGlobalNoMemoryDropsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of packets dropped due to no enough memory
+             by all current and previous IPsec Phase-2 Tunnels."
+        ::= { hh3cIPsecGlobalStatsV2 15 }
+
+    hh3cIPsecGlobalNoFindSaDropsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of packets dropped due to not find SA by
+             all current and previous IPsec Phase-2 Tunnels."
+        ::= { hh3cIPsecGlobalStatsV2 16 }
+
+    hh3cIPsecGlobalQueueFullDropsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of packets dropped due to queue full by
+             all current and previous IPsec Phase-2 Tunnels."
+        ::= { hh3cIPsecGlobalStatsV2 17 }
+
+    hh3cIPsecGlobalInvalidLenDropsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of packets dropped due to invalid packet
+             length by all current and previous IPsec Phase-2 Tunnels."
+        ::= { hh3cIPsecGlobalStatsV2 18 }
+
+    hh3cIPsecGlobalTooLongDropsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of packets dropped due to too long packet by
+             all current and previous IPsec Phase-2 Tunnels."
+        ::= { hh3cIPsecGlobalStatsV2 19 }
+
+    hh3cIPsecGlobalInvalidSaDropsV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of packets dropped due to invalid SA by all
+             current and previous IPsec Phase-2 Tunnels."
+        ::= { hh3cIPsecGlobalStatsV2 20 }
+
+-- ===============================================
+-- Begin the hh3cIPsecTrapObjectV2.
+-- ===============================================
+
+    hh3cIPsecTrapObjectV2 OBJECT IDENTIFIER ::= { hh3cIPsecObjectsV2 7 }
+
+    hh3cIPsecPolicyNameV2 OBJECT-TYPE
+        SYNTAX OCTET STRING (SIZE(1..63))
+        MAX-ACCESS accessible-for-notify
+        STATUS current
+        DESCRIPTION
+            "The IPsec policy name with a trap."
+        ::= { hh3cIPsecTrapObjectV2 1 }
+
+    hh3cIPsecPolicySeqNumV2 OBJECT-TYPE
+        SYNTAX Integer32
+        MAX-ACCESS accessible-for-notify
+        STATUS current
+        DESCRIPTION
+            "The IPsec policy sequence number with a trap."
+        ::= { hh3cIPsecTrapObjectV2 2 }
+
+    hh3cIPsecPolicySizeV2 OBJECT-TYPE
+        SYNTAX Integer32
+        MAX-ACCESS accessible-for-notify
+        STATUS current
+        DESCRIPTION
+            "The number of IPsec policies with a trap."
+        ::= { hh3cIPsecTrapObjectV2 3 }
+
+-- ===============================================
+-- Begin the hh3cIPsecTrapCntlV2.
+-- ===============================================
+
+
+    hh3cIPsecTrapCntlV2 OBJECT IDENTIFIER ::= { hh3cIPsecObjectsV2 8 }
+
+    hh3cIPsecTrapGlobalCntlV2 OBJECT-TYPE
+        SYNTAX TruthValue
+        MAX-ACCESS read-write
+        STATUS current
+        DESCRIPTION
+            "Indicates whether all IPsec traps should be generated."
+        ::= { hh3cIPsecTrapCntlV2 1 }
+
+    hh3cIPsecTunnelStartTrapCntlV2 OBJECT-TYPE
+        SYNTAX TruthValue
+        MAX-ACCESS read-write
+        STATUS current
+        DESCRIPTION
+            "Indicates whether hh3cIPsecTunnelStartV2 traps should be generated."
+        ::= { hh3cIPsecTrapCntlV2 2 }
+
+    hh3cIPsecTunnelStopTrapCntlV2 OBJECT-TYPE
+        SYNTAX TruthValue
+        MAX-ACCESS read-write
+        STATUS current
+        DESCRIPTION
+            "Indicates whether hh3cIPsecTunnelStopV2 traps should be generated."
+        ::= { hh3cIPsecTrapCntlV2 3 }
+
+    hh3cIPsecNoSaTrapCntlV2 OBJECT-TYPE
+        SYNTAX TruthValue
+        MAX-ACCESS read-write
+        STATUS current
+        DESCRIPTION
+            "Indicates whether hh3cIPsecNoSaFailureV2 traps should be generated."
+        ::= { hh3cIPsecTrapCntlV2 4 }
+
+    hh3cIPsecAuthFailureTrapCntlV2 OBJECT-TYPE
+        SYNTAX TruthValue
+        MAX-ACCESS read-write
+        STATUS current
+        DESCRIPTION
+            "Indicates whether hh3cIPsecAuthFailFailureV2 traps should be generated."
+        ::= { hh3cIPsecTrapCntlV2 5 }
+
+    hh3cIPsecEncryFailureTrapCntlV2 OBJECT-TYPE
+        SYNTAX TruthValue
+        MAX-ACCESS read-write
+        STATUS current
+        DESCRIPTION
+            "Indicates whether hh3cIPsecEncryFailFailureV2 traps should be generated."
+        ::= { hh3cIPsecTrapCntlV2 6 }
+
+    hh3cIPsecDecryFailureTrapCntlV2 OBJECT-TYPE
+        SYNTAX TruthValue
+        MAX-ACCESS read-write
+        STATUS current
+        DESCRIPTION
+            "Indicates whether hh3cIPsecDecryFailFailureV2 traps should be generated."
+        ::= { hh3cIPsecTrapCntlV2 7 }
+
+    hh3cIPsecInvalidSaTrapCntlV2 OBJECT-TYPE
+        SYNTAX TruthValue
+        MAX-ACCESS read-write
+        STATUS current
+        DESCRIPTION
+            "Indicates whether hh3cIPsecInvalidSaFailureV2 traps should be generated."
+        ::= { hh3cIPsecTrapCntlV2 8 }
+
+    hh3cIPsecPolicyAddTrapCntlV2 OBJECT-TYPE
+        SYNTAX TruthValue
+        MAX-ACCESS read-write
+        STATUS current
+        DESCRIPTION
+            "Indicates whether hh3cIPsecPolicyAddV2 traps should be generated."
+        ::= { hh3cIPsecTrapCntlV2 9 }
+
+    hh3cIPsecPolicyDelTrapCntlV2 OBJECT-TYPE
+        SYNTAX TruthValue
+        MAX-ACCESS read-write
+        STATUS current
+        DESCRIPTION
+            "Indicates whether hh3cIPsecPolicyDelV2 traps should be generated."
+        ::= { hh3cIPsecTrapCntlV2 10 }
+
+    hh3cIPsecPolicyAttachTrapCntlV2 OBJECT-TYPE
+        SYNTAX TruthValue
+        MAX-ACCESS read-write
+        STATUS current
+        DESCRIPTION
+            "Indicates whether hh3cIPsecPolicyAttachV2 traps should be generated."
+        ::= { hh3cIPsecTrapCntlV2 11 }
+
+    hh3cIPsecPolicyDetachTrapCntlV2 OBJECT-TYPE
+        SYNTAX TruthValue
+        MAX-ACCESS read-write
+        STATUS current
+        DESCRIPTION
+            "Indicates whether hh3cIPsecPolicyDetachV2 traps should be generated."
+        ::= { hh3cIPsecTrapCntlV2 12 }
+
+    hh3cIPsecConnectionStartCntlV2 OBJECT-TYPE
+        SYNTAX TruthValue
+        MAX-ACCESS read-write
+        STATUS current
+        DESCRIPTION
+            "Indicates whether hh3cIPsecConnectionStartV2 traps should be generated."
+        ::= { hh3cIPsecTrapCntlV2 13 }
+
+    hh3cIPsecConnectionStopCntlV2 OBJECT-TYPE
+        SYNTAX TruthValue
+        MAX-ACCESS read-write
+        STATUS current
+        DESCRIPTION
+            "Indicates whether hh3cIPsecConnectionStopV2 traps should be generated."
+        ::= { hh3cIPsecTrapCntlV2 14 }
+
+-- ===============================================
+-- definition of traps.
+-- ===============================================
+
+    hh3cIPsecTrapV2 OBJECT IDENTIFIER ::= { hh3cIPsecObjectsV2 9 }
+
+    hh3cIPsecNotificationsV2 OBJECT IDENTIFIER ::= { hh3cIPsecTrapV2 0 }
+
+    hh3cIPsecTunnelStartV2 NOTIFICATION-TYPE
+        OBJECTS {
+                    hh3cIPsecTunIndexV2,
+                    hh3cIPsecTunLocalAddrTypeV2,
+                    hh3cIPsecTunLocalAddrV2,
+                    hh3cIPsecTunRemoteAddrTypeV2,
+                    hh3cIPsecTunRemoteAddrV2,
+                    hh3cIPsecTunLifeTimeV2,
+                    hh3cIPsecTunLifeSizeV2
+                }
+        STATUS     current
+        DESCRIPTION
+            "This notification is generated when an IPsec Phase-2
+             Tunnel is created."
+        ::= { hh3cIPsecNotificationsV2 1 }
+
+    hh3cIPsecTunnelStopV2 NOTIFICATION-TYPE
+        OBJECTS {
+                    hh3cIPsecTunIndexV2,
+                    hh3cIPsecTunLocalAddrTypeV2,
+                    hh3cIPsecTunLocalAddrV2,
+                    hh3cIPsecTunRemoteAddrTypeV2,
+                    hh3cIPsecTunRemoteAddrV2,
+                    hh3cIPsecTunActiveTimeV2
+                }
+        STATUS     current
+        DESCRIPTION
+            "This notification is generated when an IPsec Phase-2
+             Tunnel is deleted."
+        ::= { hh3cIPsecNotificationsV2 2 }
+
+    hh3cIPsecNoSaFailureV2 NOTIFICATION-TYPE
+        OBJECTS {
+                    hh3cIPsecTunIndexV2,
+                    hh3cIPsecTunLocalAddrTypeV2,
+                    hh3cIPsecTunLocalAddrV2,
+                    hh3cIPsecTunRemoteAddrTypeV2,
+                    hh3cIPsecTunRemoteAddrV2
+                }
+        STATUS     current
+        DESCRIPTION
+            "This notification is generated when an IPsec Phase-2
+             non-existent SA error occurs."
+        ::= { hh3cIPsecNotificationsV2 3 }
+
+    hh3cIPsecAuthFailFailureV2 NOTIFICATION-TYPE
+        OBJECTS {
+                    hh3cIPsecTunIndexV2,
+                    hh3cIPsecTunLocalAddrTypeV2,
+                    hh3cIPsecTunLocalAddrV2,
+                    hh3cIPsecTunRemoteAddrTypeV2,
+                    hh3cIPsecTunRemoteAddrV2
+                  }
+        STATUS     current
+        DESCRIPTION
+            "This notification is generated when the IPsec phase-2
+             authentication failure occurs."
+        ::= { hh3cIPsecNotificationsV2 4 }
+
+    hh3cIPsecEncryFailFailureV2 NOTIFICATION-TYPE
+        OBJECTS {
+                    hh3cIPsecTunIndexV2,
+                    hh3cIPsecTunLocalAddrTypeV2,
+                    hh3cIPsecTunLocalAddrV2,
+                    hh3cIPsecTunRemoteAddrTypeV2,
+                    hh3cIPsecTunRemoteAddrV2
+                }
+        STATUS     current
+        DESCRIPTION
+            "This notification is generated when the IPsec phase-2
+             tunnel has an encrypting failure."
+        ::= { hh3cIPsecNotificationsV2 5 }
+
+    hh3cIPsecDecryFailFailureV2 NOTIFICATION-TYPE
+        OBJECTS {
+                    hh3cIPsecTunIndexV2,
+                    hh3cIPsecTunLocalAddrTypeV2,
+                    hh3cIPsecTunLocalAddrV2,
+                    hh3cIPsecTunRemoteAddrTypeV2,
+                    hh3cIPsecTunRemoteAddrV2
+                }
+        STATUS     current
+        DESCRIPTION
+            "This notification is generated when the IPsec phase-2
+             tunnel has a decrypting failure."
+        ::= { hh3cIPsecNotificationsV2 6 }
+
+    hh3cIPsecInvalidSaFailureV2 NOTIFICATION-TYPE
+        OBJECTS {
+                    hh3cIPsecTunIndexV2,
+                    hh3cIPsecSaIndexV2,
+                    hh3cIPsecTunLocalAddrTypeV2,
+                    hh3cIPsecTunLocalAddrV2,
+                    hh3cIPsecTunRemoteAddrTypeV2,
+                    hh3cIPsecTunRemoteAddrV2,
+                    hh3cIPsecSaSpiValueV2
+                }
+        STATUS     current
+        DESCRIPTION
+            "This notification is generated when the IPsec phase-2
+             invalid SA failure occurs."
+        ::= { hh3cIPsecNotificationsV2 7 }
+
+    hh3cIPsecPolicyAddV2 NOTIFICATION-TYPE
+        OBJECTS { hh3cIPsecPolicyNameV2,
+                  hh3cIPsecPolicySeqNumV2,
+                  hh3cIPsecPolicySizeV2
+                }
+        STATUS     current
+        DESCRIPTION
+            "This notification is generated when an IPsec policy is added."
+        ::= { hh3cIPsecNotificationsV2 8 }
+
+    hh3cIPsecPolicyDelV2 NOTIFICATION-TYPE
+        OBJECTS { hh3cIPsecPolicyNameV2,
+                  hh3cIPsecPolicySeqNumV2,
+                  hh3cIPsecPolicySizeV2
+                }
+        STATUS     current
+        DESCRIPTION
+            "This notification is generated when an IPsec policy is deleted."
+        ::= { hh3cIPsecNotificationsV2 9 }
+
+    hh3cIPsecPolicyAttachV2 NOTIFICATION-TYPE
+        OBJECTS { hh3cIPsecPolicyNameV2,
+                  hh3cIPsecPolicySizeV2,
+                  ifIndex
+                }
+        STATUS     current
+        DESCRIPTION
+            "This notification is generated when an IPsec policy is attached
+             with one interface."
+        ::= { hh3cIPsecNotificationsV2 10 }
+
+    hh3cIPsecPolicyDetachV2 NOTIFICATION-TYPE
+        OBJECTS { hh3cIPsecPolicyNameV2,
+                  hh3cIPsecPolicySizeV2,
+                  ifIndex
+                }
+        STATUS     current
+        DESCRIPTION
+            "This notification is generated when an IPsec policy is detached
+             with one interface."
+        ::= { hh3cIPsecNotificationsV2 11 }
+
+    hh3cIPsecConnectionStartV2 NOTIFICATION-TYPE
+        OBJECTS {
+                    hh3cIPsecPolicyDescripV2
+                }
+        STATUS     current
+        DESCRIPTION
+            "This notification is generated when an IPsec connection
+             is created."
+        ::= { hh3cIPsecNotificationsV2 12 }
+
+    hh3cIPsecConnectionStopV2 NOTIFICATION-TYPE
+        OBJECTS {
+                    hh3cIPsecPolicyDescripV2
+                }
+        STATUS     current
+        DESCRIPTION
+            "This notification is generated when an IPsec connection
+             is terminated."
+        ::= { hh3cIPsecNotificationsV2 13 }
+
+-- ===============================================
+-- Begin the table of hh3cIPsecTunnelStatByDescripV2Table.
+-- ===============================================
+
+    hh3cIPsecTunnelStatByDescripV2Table OBJECT-TYPE
+        SYNTAX SEQUENCE OF Hh3cIPsecTunnelStatByDescripV2Entry
+        MAX-ACCESS not-accessible
+        STATUS current
+        DESCRIPTION
+            "This table contains IPsec phase-2 tunnel statistics by description."
+        ::= { hh3cIPsecObjectsV2 10 }
+
+    hh3cIPsecTunnelStatByDescripV2Entry OBJECT-TYPE
+        SYNTAX Hh3cIPsecTunnelStatByDescripV2Entry
+        MAX-ACCESS not-accessible
+        STATUS current
+        DESCRIPTION
+            "An entry of IPsec phase-2 tunnels statistics by description table."
+        INDEX { hh3cIPsecPolicyDescripV2 }
+        ::= { hh3cIPsecTunnelStatByDescripV2Table 1 }
+
+    Hh3cIPsecTunnelStatByDescripV2Entry ::=
+        SEQUENCE {
+            hh3cIPsecPolicyDescripV2
+                OCTET STRING,
+            hh3cIPsecTunInOctetsByDescripV2
+                Counter64,
+            hh3cIPsecTunInDecompOctetsByDescripV2
+                Counter64,
+            hh3cIPsecTunInPktsByDescripV2
+                Counter64,
+            hh3cIPsecTunInDropPktsByDescripV2
+                Counter64,
+            hh3cIPsecTunInReplayDropPktsByDescripV2
+                Counter64,
+            hh3cIPsecTunInAuthFailsByDescripV2
+                Counter64,
+            hh3cIPsecTunInDecryptFailsByDescripV2
+                Counter64,
+            hh3cIPsecTunOutOctetsByDescripV2
+                Counter64,
+            hh3cIPsecTunOutUncompOctetsByDescripV2
+                Counter64,
+            hh3cIPsecTunOutPktsByDescripV2
+                Counter64,
+            hh3cIPsecTunOutDropPktsByDescripV2
+                Counter64,
+            hh3cIPsecTunOutEncryptFailsByDescripV2
+                Counter64,
+            hh3cIPsecTunNoMemoryDropPktsByDescripV2
+                Counter64,
+            hh3cIPsecTunQueueFullDropPktsByDescripV2
+                Counter64,
+            hh3cIPsecTunInvalidLenDropPktsByDescripV2
+                Counter64,
+            hh3cIPsecTunTooLongDropPktsByDescripV2
+                Counter64,
+            hh3cIPsecTunInvalidSaDropPktsByDescripV2
+                Counter64
+        }
+
+    hh3cIPsecPolicyDescripV2 OBJECT-TYPE
+        SYNTAX OCTET STRING (SIZE(1..80))
+        MAX-ACCESS accessible-for-notify
+        STATUS current
+        DESCRIPTION
+            "The IPsec policy's description."
+        ::= { hh3cIPsecTunnelStatByDescripV2Entry 1 }
+
+    hh3cIPsecTunInOctetsByDescripV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of octets received by IPsec phase-2 tunnels.
+             This value is accumulated BEFORE determining whether or not the
+             packet should be decompressed."
+        ::= { hh3cIPsecTunnelStatByDescripV2Entry 2 }
+
+    hh3cIPsecTunInDecompOctetsByDescripV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of decompressed octets received by IPsec
+             phase-2 tunnels.  This value is accumulated AFTER the packet
+             is decompressed."
+        ::= { hh3cIPsecTunnelStatByDescripV2Entry 3 }
+
+    hh3cIPsecTunInPktsByDescripV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of packets received by IPsec phase-2 tunnels."
+        ::= { hh3cIPsecTunnelStatByDescripV2Entry 4 }
+
+    hh3cIPsecTunInDropPktsByDescripV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of packets dropped by IPsec phase-2 tunnels during receiving process."
+        ::= { hh3cIPsecTunnelStatByDescripV2Entry 5 }
+
+    hh3cIPsecTunInReplayDropPktsByDescripV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of receive  packets dropped by IPsec phase-2 tunnels
+            due to Anti-Replay processing."
+        ::= { hh3cIPsecTunnelStatByDescripV2Entry 6 }
+
+    hh3cIPsecTunInAuthFailsByDescripV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of inbound authentication
+             failures on IPsec phase-2 tunnels."
+        ::= { hh3cIPsecTunnelStatByDescripV2Entry 7 }
+
+    hh3cIPsecTunInDecryptFailsByDescripV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of inbound decryption
+             failures on IPsec phase-2 tunnels."
+        ::= { hh3cIPsecTunnelStatByDescripV2Entry 8 }
+
+    hh3cIPsecTunOutOctetsByDescripV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of octets sent by IPsec phase-2 tunnels.
+             This value is accumulated AFTER determining whether or not
+             the packet should be compressed."
+        ::= { hh3cIPsecTunnelStatByDescripV2Entry 9 }
+
+    hh3cIPsecTunOutUncompOctetsByDescripV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of uncompressed octets sent by IPsec phase-2
+             tunnels.  This value is accumulated BEFORE the packet is compressed."
+        ::= { hh3cIPsecTunnelStatByDescripV2Entry 10 }
+
+    hh3cIPsecTunOutPktsByDescripV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of packets sent by IPsec phase-2 tunnels."
+        ::= { hh3cIPsecTunnelStatByDescripV2Entry 11 }
+
+    hh3cIPsecTunOutDropPktsByDescripV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of packets dropped by IPsec phase-2 tunnels during sending process."
+        ::= { hh3cIPsecTunnelStatByDescripV2Entry 12 }
+
+    hh3cIPsecTunOutEncryptFailsByDescripV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of outbound encryption failures
+             on IPsec Phase-2 Tunnels."
+        ::= { hh3cIPsecTunnelStatByDescripV2Entry 13 }
+
+    hh3cIPsecTunNoMemoryDropPktsByDescripV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of packets dropped by IPsec phase-2 tunnels due to no enough memory."
+        ::= { hh3cIPsecTunnelStatByDescripV2Entry 14 }
+
+    hh3cIPsecTunQueueFullDropPktsByDescripV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of packets dropped by
+             IPsec phase-2 tunnels due to queue full."
+        ::= { hh3cIPsecTunnelStatByDescripV2Entry 15 }
+
+    hh3cIPsecTunInvalidLenDropPktsByDescripV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of packets dropped by IPsec phase-2 tunnels due to invalid length packet."
+        ::= { hh3cIPsecTunnelStatByDescripV2Entry 16 }
+
+    hh3cIPsecTunTooLongDropPktsByDescripV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of packets dropped by IPsec phase-2 tunnels due to packet."
+        ::= { hh3cIPsecTunnelStatByDescripV2Entry 17 }
+
+    hh3cIPsecTunInvalidSaDropPktsByDescripV2 OBJECT-TYPE
+        SYNTAX Counter64
+        MAX-ACCESS read-only
+        STATUS current
+        DESCRIPTION
+            "The total number of packets dropped by IPsec phase-2 tunnels due to invalid SA."
+        ::= { hh3cIPsecTunnelStatByDescripV2Entry 18 }
+
+-- ===============================================
+-- Conformance Information
+-- ===============================================
+    hh3cIPsecConformanceV2   OBJECT IDENTIFIER
+        ::= { hh3cIPsecMonitorV2 2 }
+    hh3cIPsecCompliancesV2   OBJECT IDENTIFIER
+        ::= { hh3cIPsecConformanceV2 1 }
+    hh3cIPsecGroupsV2        OBJECT IDENTIFIER
+        ::= { hh3cIPsecConformanceV2 2 }
+
+-- ===============================================
+-- Compliance Statements
+-- ===============================================
+    hh3cIPsecComplianceV2 MODULE-COMPLIANCE
+        STATUS current
+        DESCRIPTION
+            " "
+        MODULE -- this module
+        MANDATORY-GROUPS
+            {
+                hh3cIPsecScalarObjectsGroupV2,
+                hh3cIPsecTunnelTableGroupV2,
+                hh3cIPsecTunnelStatGroupV2,
+                hh3cIPsecSaGroupV2,
+                hh3cIPsecTrafficTableGroupV2,
+                hh3cIPsecGlobalStatsGroupV2,
+                hh3cIPsecTrapObjectGroupV2,
+                hh3cIPsecTrapCntlGroupV2,
+                hh3cIPsecTrapGroupV2
+            }
+        ::= { hh3cIPsecCompliancesV2 1 }
+
+    hh3cIPsecScalarObjectsGroupV2 OBJECT-GROUP
+        OBJECTS {
+                    hh3cIPsecMIBVersion
+                }
+        STATUS current
+        DESCRIPTION
+            "The group contains all of scalar objects of the MIB."
+        ::= { hh3cIPsecGroupsV2 1 }
+
+    hh3cIPsecTunnelTableGroupV2 OBJECT-GROUP
+        OBJECTS {
+                    hh3cIPsecTunIfIndexV2,
+                    hh3cIPsecTunIKETunnelIndexV2,
+                    hh3cIPsecTunIKETunLocalIDTypeV2,
+                    hh3cIPsecTunIKETunLocalIDVal1V2,
+                    hh3cIPsecTunIKETunLocalIDVal2V2,
+                    hh3cIPsecTunIKETunRemoteIDTypeV2,
+                    hh3cIPsecTunIKETunRemoteIDVal1V2,
+                    hh3cIPsecTunIKETunRemoteIDVal2V2,
+                    hh3cIPsecTunLocalAddrTypeV2,
+                    hh3cIPsecTunLocalAddrV2,
+                    hh3cIPsecTunRemoteAddrTypeV2,
+                    hh3cIPsecTunRemoteAddrV2,
+                    hh3cIPsecTunKeyTypeV2,
+                    hh3cIPsecTunEncapModeV2,
+                    hh3cIPsecTunInitiatorV2,
+                    hh3cIPsecTunLifeSizeV2,
+                    hh3cIPsecTunLifeTimeV2,
+                    hh3cIPsecTunRemainTimeV2,
+                    hh3cIPsecTunActiveTimeV2,
+                    hh3cIPsecTunRemainSizeV2,
+                    hh3cIPsecTunTotalRefreshesV2,
+                    hh3cIPsecTunCurrentSaInstancesV2,
+                    hh3cIPsecTunInSaEncryptAlgoV2,
+                    hh3cIPsecTunInSaAhAuthAlgoV2,
+                    hh3cIPsecTunInSaEspAuthAlgoV2,
+                    hh3cIPsecTunDiffHellmanGrpV2,
+                    hh3cIPsecTunOutSaEncryptAlgoV2,
+                    hh3cIPsecTunOutSaAhAuthAlgoV2,
+                    hh3cIPsecTunOutSaEspAuthAlgoV2,
+                    hh3cIPsecTunPolicyNameV2,
+                    hh3cIPsecTunPolicyNumV2,
+                    hh3cIPsecTunStatusV2,
+                    hh3cIPsecTunPolicyDescriptionV2,
+                    hh3cIPsecTunIKETunLocalIDVal3V2,
+                    hh3cIPsecTunIKETunRemoteIDVal3V2
+                }
+        STATUS current
+        DESCRIPTION
+            "The group contains the IPsec tunnel's property information."
+        ::= { hh3cIPsecGroupsV2 2 }
+
+    hh3cIPsecTunnelStatGroupV2 OBJECT-GROUP
+        OBJECTS {
+                    hh3cIPsecTunInOctetsV2,
+                    hh3cIPsecTunInDecompOctetsV2,
+                    hh3cIPsecTunInPktsV2,
+                    hh3cIPsecTunInDropPktsV2,
+                    hh3cIPsecTunInReplayDropPktsV2,
+                    hh3cIPsecTunInAuthFailsV2,
+                    hh3cIPsecTunInDecryptFailsV2,
+                    hh3cIPsecTunOutOctetsV2,
+                    hh3cIPsecTunOutUncompOctetsV2,
+                    hh3cIPsecTunOutPktsV2,
+                    hh3cIPsecTunOutDropPktsV2,
+                    hh3cIPsecTunOutEncryptFailsV2,
+                    hh3cIPsecTunNoMemoryDropPktsV2,
+                    hh3cIPsecTunQueueFullDropPktsV2,
+                    hh3cIPsecTunInvalidLenDropPktsV2,
+                    hh3cIPsecTunTooLongDropPktsV2,
+                    hh3cIPsecTunInvalidSaDropPktsV2
+                }
+        STATUS current
+        DESCRIPTION
+            "The group contains the IPsec tunnel's statistic information."
+        ::= { hh3cIPsecGroupsV2 3 }
+
+    hh3cIPsecSaGroupV2 OBJECT-GROUP
+        OBJECTS {
+                    hh3cIPsecSaDirectionV2,
+                    hh3cIPsecSaSpiValueV2,
+                    hh3cIPsecSaSecProtocolV2,
+                    hh3cIPsecSaEncryptAlgoV2,
+                    hh3cIPsecSaAuthAlgoV2,
+                    hh3cIPsecSaStatusV2
+                }
+        STATUS current
+        DESCRIPTION
+            "The group contains the SA's property information."
+        ::= { hh3cIPsecGroupsV2 4 }
+
+    hh3cIPsecTrafficTableGroupV2 OBJECT-GROUP
+        OBJECTS {
+            hh3cIPsecTrafficLocalTypeV2,
+            hh3cIPsecTrafficLocalAddr1TypeV2,
+            hh3cIPsecTrafficLocalAddr1V2,
+            hh3cIPsecTrafficLocalAddr2TypeV2,
+            hh3cIPsecTrafficLocalAddr2V2,
+            hh3cIPsecTrafficLocalProtocol1V2,
+            hh3cIPsecTrafficLocalProtocol2V2,
+            hh3cIPsecTrafficLocalPort1V2,
+            hh3cIPsecTrafficLocalPort2V2,
+            hh3cIPsecTrafficRemoteTypeV2,
+            hh3cIPsecTrafficRemAddr1TypeV2,
+            hh3cIPsecTrafficRemAddr1V2,
+            hh3cIPsecTrafficRemAddr2TypeV2,
+            hh3cIPsecTrafficRemAddr2V2,
+            hh3cIPsecTrafficRemoPro1V2,
+            hh3cIPsecTrafficRemoPro2V2,
+            hh3cIPsecTrafficRemPort1V2,
+            hh3cIPsecTrafficRemPort2V2
+        }
+        STATUS current
+        DESCRIPTION
+            "The group contains the property information of the
+             data flow protected by IPsec tunnel."
+        ::= { hh3cIPsecGroupsV2 5 }
+
+    hh3cIPsecGlobalStatsGroupV2 OBJECT-GROUP
+        OBJECTS {
+                    hh3cIPsecGlobalActiveTunnelsV2,
+                    hh3cIPsecGlobalActiveSasV2,
+                    hh3cIPsecGlobalInOctetsV2,
+                    hh3cIPsecGlobalInDecompOctetsV2,
+                    hh3cIPsecGlobalInPktsV2,
+                    hh3cIPsecGlobalInDropsV2,
+                    hh3cIPsecGlobalInReplayDropsV2,
+                    hh3cIPsecGlobalInAuthFailsV2,
+                    hh3cIPsecGlobalInDecryptFailsV2,
+                    hh3cIPsecGlobalOutOctetsV2,
+                    hh3cIPsecGlobalOutUncompOctetsV2,
+                    hh3cIPsecGlobalOutPktsV2,
+                    hh3cIPsecGlobalOutDropsV2,
+                    hh3cIPsecGlobalOutEncryptFailsV2,
+                    hh3cIPsecGlobalNoMemoryDropsV2,
+                    hh3cIPsecGlobalNoFindSaDropsV2,
+                    hh3cIPsecGlobalQueueFullDropsV2,
+                    hh3cIPsecGlobalInvalidLenDropsV2,
+                    hh3cIPsecGlobalTooLongDropsV2,
+                    hh3cIPsecGlobalInvalidSaDropsV2
+                }
+        STATUS current
+        DESCRIPTION
+            "The group contains all of the IPsec tunnel's statistic
+             information."
+        ::= { hh3cIPsecGroupsV2 6 }
+
+    hh3cIPsecTrapObjectGroupV2 OBJECT-GROUP
+        OBJECTS {
+                    hh3cIPsecPolicyNameV2,
+                    hh3cIPsecPolicySeqNumV2,
+                    hh3cIPsecPolicySizeV2
+                }
+        STATUS current
+        DESCRIPTION
+            "The group contains all of trap objects of IPsec tunnels."
+        ::= { hh3cIPsecGroupsV2 7 }
+
+    hh3cIPsecTrapCntlGroupV2 OBJECT-GROUP
+        OBJECTS {
+                    hh3cIPsecTrapGlobalCntlV2,
+                    hh3cIPsecTunnelStartTrapCntlV2,
+                    hh3cIPsecTunnelStopTrapCntlV2,
+                    hh3cIPsecNoSaTrapCntlV2,
+                    hh3cIPsecAuthFailureTrapCntlV2,
+                    hh3cIPsecEncryFailureTrapCntlV2,
+                    hh3cIPsecDecryFailureTrapCntlV2,
+                    hh3cIPsecInvalidSaTrapCntlV2,
+                    hh3cIPsecPolicyAddTrapCntlV2,
+                    hh3cIPsecPolicyDelTrapCntlV2,
+                    hh3cIPsecPolicyAttachTrapCntlV2,
+                    hh3cIPsecPolicyDetachTrapCntlV2
+                }
+        STATUS current
+        DESCRIPTION
+            "The group contains all of trap switches of IPsec tunnels."
+        ::= { hh3cIPsecGroupsV2 8 }
+
+    hh3cIPsecTrapGroupV2 NOTIFICATION-GROUP
+        NOTIFICATIONS {
+                          hh3cIPsecTunnelStartV2,
+                          hh3cIPsecTunnelStopV2,
+                          hh3cIPsecNoSaFailureV2,
+                          hh3cIPsecAuthFailFailureV2,
+                          hh3cIPsecEncryFailFailureV2,
+                          hh3cIPsecDecryFailFailureV2,
+                          hh3cIPsecInvalidSaFailureV2,
+                          hh3cIPsecPolicyAddV2,
+                          hh3cIPsecPolicyDelV2,
+                          hh3cIPsecPolicyAttachV2,
+                          hh3cIPsecPolicyDetachV2,
+                          hh3cIPsecConnectionStartV2,
+                          hh3cIPsecConnectionStopV2
+                      }
+        STATUS current
+        DESCRIPTION
+            "The group contains all of trap of IPsec tunnels."
+        ::= { hh3cIPsecGroupsV2 9 }
+
+
+END
+