Initial commitHEADmain

1 files changed, 537 insertions, 0 deletions

diff --git a/MIBS/screenos/NETSCREEN-VPN-MON-MIB b/MIBS/screenos/NETSCREEN-VPN-MON-MIB
new file mode 100644
index 0000000..ea6644c
--- /dev/null
+++ b/MIBS/screenos/NETSCREEN-VPN-MON-MIB
@@ -0,0 +1,537 @@
+-- This module defines enterprise MIBs for VPN tunnel monitoring
+-- 
+-- Copyright (c) 1999-2004, Juniper Networks, Inc.
+-- All rights reserved.
+
+NETSCREEN-VPN-MON-MIB DEFINITIONS ::= BEGIN
+
+IMPORTS
+    netscreenVpn, netscreenVpnMibModule
+        FROM NETSCREEN-SMI
+    Counter32, Integer32, IpAddress, MODULE-IDENTITY, OBJECT-TYPE,
+    TimeTicks
+        FROM SNMPv2-SMI
+    DisplayString
+        FROM SNMPv2-TC
+    ;
+
+netscreenVpnMonMibModule MODULE-IDENTITY
+    LAST-UPDATED  "200405032022Z" -- May 03, 2004
+    ORGANIZATION
+        "Juniper Networks, Inc."
+    CONTACT-INFO
+        "Customer Support
+
+         1194 North Mathilda Avenue 
+         Sunnyvale, California 94089-1206
+         USA
+
+         Tel: 1-800-638-8296
+         E-mail: customerservice@juniper.net
+         HTTP://www.juniper.net"
+    DESCRIPTION
+        "This module defines the object that are used to monitor VPN
+         tunnels"
+    REVISION      "200405030000Z" -- May 03, 2004
+    DESCRIPTION
+        "Modified copyright and contact information"
+    REVISION      "200403030000Z" -- March 03, 2004
+    DESCRIPTION
+        "Converted to SMIv2 by Longview Software"
+    REVISION      "200311130000Z" -- November 13, 2003
+    DESCRIPTION
+        "Correct spelling mistake"
+    REVISION      "200109280000Z" -- September 28, 2001
+    DESCRIPTION
+        "no comment"
+    REVISION      "200008270000Z" -- August 27, 2000
+    DESCRIPTION
+        "Creation Date"
+    ::= { netscreenVpnMibModule 1 }
+
+NsVpnMonEntry ::= SEQUENCE
+{
+    nsVpnMonIndex                Integer32,
+    nsVpnMonInPlyId              Integer32,
+    nsVpnMonOutPlyId             Integer32,
+    nsVpnMonVpnName              DisplayString,
+    nsVpnMonVsysName             DisplayString,
+    nsVpnMonTunnelType           INTEGER,
+    nsVpnMonEspEncAlg            INTEGER,
+    nsVpnMonEspAuthAlg           INTEGER,
+    nsVpnMonAhAlg                INTEGER,
+    nsVpnMonKeyType              INTEGER,
+    nsVpnMonP1Auth               INTEGER,
+    nsVpnMonVpnType              INTEGER,
+    nsVpnMonRmtGwIp              IpAddress,
+    nsVpnMonRmtGwId              DisplayString,
+    nsVpnMonMyGwIp               IpAddress,
+    nsVpnMonMyGwId               DisplayString,
+    nsVpnMonOutSpi               Integer32,
+    nsVpnMonInSpi                Integer32,
+    nsVpnMonMonState             INTEGER,
+    nsVpnMonTunnelState          INTEGER,
+    nsVpnMonP1State              INTEGER,
+    nsVpnMonP1LifeTime           Integer32,
+    nsVpnMonP2State              INTEGER,
+    nsVpnMonP2LifeTime           Integer32,
+    nsVpnMonP2LifeBytes          Integer32,
+    nsVpnMonDelayAvg             Integer32,
+    nsVpnMonDelayLast            Integer32,
+    nsVpnMonAvail                Integer32,
+    nsVpnMonSaId                 Integer32,
+    nsVpnMonGroupId              Integer32,
+    nsVpnMonUsrId                Integer32,
+    nsVpnMonStartSessRequestTime TimeTicks,
+    nsVpnMonStartSessEstTime     TimeTicks,
+    nsVpnMonEndSessTime          TimeTicks,
+    nsVpnMonBytesIn              Counter32,
+    nsVpnMonBytesOut             Counter32,
+    nsVpnMonPacketsIn            Counter32,
+    nsVpnMonPacketsOut           Counter32,
+    nsVpnMonIfIndex              Integer32,
+    nsVpnMonUpdateTime           TimeTicks,
+    nsVpnMonDN                   DisplayString,
+    nsVpnMonIfInfo               Integer32
+}
+
+netscreenVpnMon OBJECT IDENTIFIER ::= { netscreenVpn 1 }
+
+nsVpnMonTable OBJECT-TYPE
+    SYNTAX        SEQUENCE OF NsVpnMonEntry
+    MAX-ACCESS    not-accessible
+    STATUS        current
+    DESCRIPTION
+        "A list of active VPN tunnel entries."
+    ::= { netscreenVpnMon 1 }
+
+nsVpnMonEntry OBJECT-TYPE
+    SYNTAX        NsVpnMonEntry
+    MAX-ACCESS    not-accessible
+    STATUS        current
+    DESCRIPTION
+        "A VPN tunnel entry containing attributes for both IKE Phase 1
+         and Phase 2 as well as associated policy"
+    INDEX
+        { nsVpnMonIndex }
+    ::= { nsVpnMonTable 1 }
+
+nsVpnMonIndex OBJECT-TYPE
+    SYNTAX        Integer32 (0..2147483647)
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "A unique value for each active VPN tunnel.  Its value ranges
+         between 1 and 65535 and may not be contiguous.  Due to the
+         dynamic nature of active VPN tunnels, the index  has no other
+         meaning but a pure index"
+    ::= { nsVpnMonEntry 1 }
+
+nsVpnMonInPlyId OBJECT-TYPE
+    SYNTAX        Integer32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "The incoming policy ID for which this tunnel is created for.
+         -1 means no policy associates with this SA."
+    ::= { nsVpnMonEntry 2 }
+
+nsVpnMonOutPlyId OBJECT-TYPE
+    SYNTAX        Integer32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "The outgoing policy ID for which this tunnel is created for.
+         -1 means no policy associates with this SA."
+    ::= { nsVpnMonEntry 3 }
+
+nsVpnMonVpnName OBJECT-TYPE
+    SYNTAX        DisplayString (SIZE(0..32))
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "A textual string contains information about the VPN entity
+         from which this tunnel was derived."
+    ::= { nsVpnMonEntry 4 }
+
+nsVpnMonVsysName OBJECT-TYPE
+    SYNTAX        DisplayString (SIZE(0..32))
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "A textual string contains the Virtual system to which this
+         tunnel belongs."
+    ::= { nsVpnMonEntry 5 }
+
+nsVpnMonTunnelType OBJECT-TYPE
+    SYNTAX        INTEGER {
+        reserved(0),
+        proto-isakmp(1),
+        proto-ipsec-ah(2),
+        proto-ipsec-esp(3),
+        proto-ipcomp(4)
+    }
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Protocol type used for the tunnel"
+    ::= { nsVpnMonEntry 6 }
+
+nsVpnMonEspEncAlg OBJECT-TYPE
+    SYNTAX        INTEGER {
+        reserved(0),
+        esp-des-iv64(1),
+        esp-des(2),
+        esp-3des(3),
+        esp-rc5(4),
+        esp-idea(5),
+        esp-cast(6),
+        esp-blowfish(7),
+        esp-3idea(8),
+        esp-des-iv32(9),
+        esp-rc4(10),
+        esp-null(11),
+        esp-aes(12),
+		esp-aes192(20),
+		esp-aes256(21)
+    }
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "a value which identifies a particular algorithm to be used to
+         provide secrecy protection for ESP."
+    ::= { nsVpnMonEntry 7 }
+
+nsVpnMonEspAuthAlg OBJECT-TYPE
+    SYNTAX        INTEGER {
+        reserved(0),
+        hmac-md5(1),
+        hmac-sha(2),
+        des-mac(3),
+        ipdk(4)
+    }
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "The ESP Authentication Algorithm used in the IPsec."
+    ::= { nsVpnMonEntry 8 }
+
+nsVpnMonAhAlg OBJECT-TYPE
+    SYNTAX        INTEGER {
+        reserved(0),
+        ah-md5(2),
+        ah-sha(3),
+        ah-des(4)
+    }
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "a value which identifies a particular algorithm to be used to
+         provide integrity protection for AH."
+    ::= { nsVpnMonEntry 9 }
+
+nsVpnMonKeyType OBJECT-TYPE
+    SYNTAX        INTEGER {
+        manual(0),
+        auto-ike(1)
+    }
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "a value which identifies a key exchange protocol to be used
+         for the negotiation"
+    ::= { nsVpnMonEntry 10 }
+
+nsVpnMonP1Auth OBJECT-TYPE
+    SYNTAX        INTEGER {
+        unused(0),
+        preshared-key(1),
+        dss-Signature(2),
+        rsa-Signature(3),
+        rsa-Encryption1(4),
+        rsa-Encryption2(5)
+    }
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "a value which identifies Phase 1 authentication method"
+    ::= { nsVpnMonEntry 11 }
+
+nsVpnMonVpnType OBJECT-TYPE
+    SYNTAX        INTEGER {
+        reserved(0),
+        dialup(1),
+        site-to-site(2)
+    }
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "The type of this VPN tunnel, either a dialup or site-to-site"
+    ::= { nsVpnMonEntry 12 }
+
+nsVpnMonRmtGwIp OBJECT-TYPE
+    SYNTAX        IpAddress
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "The peer Gateway's IP address"
+    ::= { nsVpnMonEntry 13 }
+
+nsVpnMonRmtGwId OBJECT-TYPE
+    SYNTAX        DisplayString
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "The peer Gateway's ID"
+    ::= { nsVpnMonEntry 14 }
+
+nsVpnMonMyGwIp OBJECT-TYPE
+    SYNTAX        IpAddress
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "The local Gateway's IP address"
+    ::= { nsVpnMonEntry 15 }
+
+nsVpnMonMyGwId OBJECT-TYPE
+    SYNTAX        DisplayString
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "The local Gateway's ID"
+    ::= { nsVpnMonEntry 16 }
+
+nsVpnMonOutSpi OBJECT-TYPE
+    SYNTAX        Integer32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "The SPI for outgoing packets"
+    ::= { nsVpnMonEntry 17 }
+
+nsVpnMonInSpi OBJECT-TYPE
+    SYNTAX        Integer32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "The SPI for incoming packets"
+    ::= { nsVpnMonEntry 18 }
+
+nsVpnMonMonState OBJECT-TYPE
+    SYNTAX        INTEGER {
+        off(0),
+        on(1)
+    }
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "The monitoring status, if it is on, an icmp ping will be sent
+         over the tunnel periodically to test the connectivity and
+         latency"
+    ::= { nsVpnMonEntry 19 }
+
+nsVpnMonTunnelState OBJECT-TYPE
+    SYNTAX        INTEGER {
+        down(0),
+        up(1)
+    }
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "The current tunnel status determined by the icmp ping  if The
+         monitoring status is on."
+    ::= { nsVpnMonEntry 20 }
+
+nsVpnMonP1State OBJECT-TYPE
+    SYNTAX        INTEGER {
+        inactive(0),
+        active(1)
+    }
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "The IKE's Phase 1 status"
+    ::= { nsVpnMonEntry 21 }
+
+nsVpnMonP1LifeTime OBJECT-TYPE
+    SYNTAX        Integer32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "an active Phase 1 sa's time left before re-key. -1 means
+         unlimited lifetime."
+    ::= { nsVpnMonEntry 22 }
+
+nsVpnMonP2State OBJECT-TYPE
+    SYNTAX        INTEGER {
+        inactive(0),
+        active(1)
+    }
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "The IKE's Phase 2 status"
+    ::= { nsVpnMonEntry 23 }
+
+nsVpnMonP2LifeTime OBJECT-TYPE
+    SYNTAX        Integer32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "an active Phase 2 sa's time left before re-key. -1 means
+         unlimited life time."
+    ::= { nsVpnMonEntry 24 }
+
+nsVpnMonP2LifeBytes OBJECT-TYPE
+    SYNTAX        Integer32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "an active Phase 2 sa's bytes left before re-key. -1 means
+         unlimited life bytes."
+    ::= { nsVpnMonEntry 25 }
+
+nsVpnMonDelayAvg OBJECT-TYPE
+    SYNTAX        Integer32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "a kind of rolling average of latency, in milliseconds. -1 has
+         no meaning here, which means nsVpnMonDelayAvg  has not been
+         calculated yet."
+    ::= { nsVpnMonEntry 26 }
+
+nsVpnMonDelayLast OBJECT-TYPE
+    SYNTAX        Integer32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "latency in last sample, in milliseconds.
+         -1 means either vpn tunnel is inactive or vpn tunnel monitor is
+         not turned on."
+    ::= { nsVpnMonEntry 27 }
+
+nsVpnMonAvail OBJECT-TYPE
+    SYNTAX        Integer32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "percentage over 30 samples"
+    ::= { nsVpnMonEntry 28 }
+
+nsVpnMonSaId OBJECT-TYPE
+    SYNTAX        Integer32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "SA identifier, also used as table index"
+    ::= { nsVpnMonEntry 29 }
+
+nsVpnMonGroupId OBJECT-TYPE
+    SYNTAX        Integer32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Group Identifier"
+    ::= { nsVpnMonEntry 30 }
+
+nsVpnMonUsrId OBJECT-TYPE
+    SYNTAX        Integer32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "User Identifier"
+    ::= { nsVpnMonEntry 31 }
+
+nsVpnMonStartSessRequestTime OBJECT-TYPE
+    SYNTAX        TimeTicks
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Start Session request timestamp"
+    ::= { nsVpnMonEntry 32 }
+
+nsVpnMonStartSessEstTime OBJECT-TYPE
+    SYNTAX        TimeTicks
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Start Session establish timestamp"
+    ::= { nsVpnMonEntry 33 }
+
+nsVpnMonEndSessTime OBJECT-TYPE
+    SYNTAX        TimeTicks
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "End Session timestamp [when session terminates]"
+    ::= { nsVpnMonEntry 34 }
+
+nsVpnMonBytesIn OBJECT-TYPE
+    SYNTAX        Counter32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Incoming bytes through this sa."
+    ::= { nsVpnMonEntry 35 }
+
+nsVpnMonBytesOut OBJECT-TYPE
+    SYNTAX        Counter32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Outgoing bytes through this sa."
+    ::= { nsVpnMonEntry 36 }
+
+nsVpnMonPacketsIn OBJECT-TYPE
+    SYNTAX        Counter32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Incoming packets through this sa."
+    ::= { nsVpnMonEntry 37 }
+
+nsVpnMonPacketsOut OBJECT-TYPE
+    SYNTAX        Counter32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Outgoing packets through this sa."
+    ::= { nsVpnMonEntry 38 }
+
+nsVpnMonIfIndex OBJECT-TYPE
+    SYNTAX        Integer32
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "interface index."
+    ::= { nsVpnMonEntry 39 }
+
+nsVpnMonUpdateTime OBJECT-TYPE
+    SYNTAX        TimeTicks
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Timestamp [Whenever any member of the row gets updated, the
+         timestamp is updated]"
+    ::= { nsVpnMonEntry 40 }
+
+nsVpnMonDN OBJECT-TYPE
+    SYNTAX        DisplayString (SIZE(0..64))
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "DN name"
+    ::= { nsVpnMonEntry 41 }
+
+nsVpnMonIfInfo OBJECT-TYPE
+    SYNTAX        Integer32 (0..2147483647)
+    MAX-ACCESS    read-only
+    STATUS        current
+    DESCRIPTION
+        "Internal id assigned to this interface. Stays persistent across resets."
+    ::= { nsVpnMonEntry 42 }
+
+END
+
+