path: root/MIBS/comware/HH3C-IKE-MONITOR-MIB

-- ====================================================================
-- Copyright (c) 2004-2021 New H3C Tech. Co., Ltd. All rights reserved.
--
-- Description: The MIB is designed to get IKE tunnels' statistic information.
--
-- Reference:
-- Version: 1.5
-- History:
--     V1.0: The initial version created by Caixiansen, Renweichun and Maoyu.
--     V1.1: modified by liguanmin.2005.1.19
--           In order to describe DPD work parameters if a tunnel enable
--           DPD function, two nodes have added in Hh3cIKETunnelEntry .those nodes are
--           hh3cIKETunDpdIntervalTime and hh3cIKETunDpdTimeOut.
--     V1.2: Modified by Caixiansen Mar.3 2005
--           Two values 'modp1536(5)' and 'modp2048(14)'are added for data type
--           'Hh3cDiffHellmanGrp' .
--     V1.3: Modified by Liukan Dec.8 2008
--           Three values 'aesCbc128(8)', 'aesCbc192(9)' and 'aesCbc256(10)' are added
--           to data type 'Hh3cEncryptAlgo'.
--           Value description of data type 'Hh3cIKENegoMode' is changed from 'aggressive(4)' to
--           'aggressiveMode(4)'.
--     V1.4: Modified by Weiyanheng Jun.28 2012
--           1) 'dsaSignatures(2)' is added to data type 'Hh3cIKEAuthMethod'.
--           2) 'none(0)' 'invalidGroup(2147483647)' and 'dhGroup24(24)' are added
--               to data type 'Hh3cDiffHellmanGrp'.
--           3) Value description of data type 'Hh3cDiffHellmanGrp' is changed
--              from 'modp768(1)' 'modp1024(2)' 'modp1536(5)' 'modp2048(14)'
--              to 'dhGroup1(1)' 'dhGroup2(2)' 'dhGroup5(5)' 'dhGroup14(14)'.
--           4) 'aesCtr(11)', 'aesCamelliaCbc(12)', 'rc4(13)' and 'invalidAlg(2147483647)'
--               are added to data type 'Hh3cEncryptAlgo'.
--           5) Value description of data type 'Hh3cAuthAlgo' is changed from
--              'sha(2)' to 'sha1(2)'.
--           6) 'sha256(3)', 'sha384(4)', 'sha512(5)' and 'invalidAlg(2147483647)'
--              are added to data type 'Hh3cAuthAlgo'.
--           7) In order to describe the IPV4 and IPV6 address of a tunnel, four
--              nodes have added in Hh3cIKETunnelEntry.
--              These nodes are hh3cIKETunLocalInetAddrType, hh3cIKETunLocalInetAddr,
--              hh3cIKETunRemoteInetAddrType and hh3cIKETunRemoteInetAddr.
--           8) 'hh3cIKETunLocalAddr' and 'hh3cIKETunRemoteAddr' are deprecated.
--     V1.5: Modified by Yangbaotao and Zhaoming Apr.25 2021
--           1) One value 'gmMainMode(128)' is added to data type 'Hh3cIKENegoMode'.
--           2) Two values 'rsaDigitalEnvelope(5)' and 'sm2DigitalEnvelope(6)' are added
--              to data type 'Hh3cIKEAuthMethod'.
--           3) Four values 'sm1Cbc128(128)','sm1Cbc192(129)','sm1Cbc256(130)' and 'sm4Cbc(131)'
--              are added to data type 'Hh3cEncryptAlgo'.
--           4) One value 'sm3(128)' is added to data type 'Hh3cAuthAlgo'.
--              Deprecated hh3cIKETunLocalValue1 and hh3cIKETunRemoteValue1,
--              added hh3cIKETunLocalValue3 and hh3cIKETunRemoteValue3.
-- =====================================================================
HH3C-IKE-MONITOR-MIB DEFINITIONS ::= BEGIN

    IMPORTS
        DisplayString,TEXTUAL-CONVENTION
            FROM SNMPv2-TC
        IpAddress, Integer32, Counter32, Counter64, OBJECT-TYPE, MODULE-IDENTITY,
        Gauge32, NOTIFICATION-TYPE
            FROM SNMPv2-SMI
        InetAddressType, InetAddress
            FROM INET-ADDRESS-MIB
        MODULE-COMPLIANCE, OBJECT-GROUP, NOTIFICATION-GROUP
            FROM SNMPv2-CONF
        hh3cCommon
            FROM HH3C-OID-MIB;

    hh3cIKEMonitor MODULE-IDENTITY
        LAST-UPDATED "202104241858Z"            -- Apr. 25, 2021  GMT
        ORGANIZATION
            "New H3C Tech. Co., Ltd."
        CONTACT-INFO
            "Platform Team New H3C Tech. Co., Ltd.
            Hai-Dian District Beijing P.R. China
            http://www.h3c.com
            Zip:100085"
        DESCRIPTION
            "The MIB is designed to get statistic information of
            IKE tunnels. With this MIB, we can get information of a certain IKE tunnel
            or all IKE tunnels"
        REVISION "202104241858Z"
         DESCRIPTION
            "Data type Hh3cIKENegoMode,Hh3cIKEAuthMethod,Hh3cEncryptAlgo and Hh3cAuthAlgo are added.
             Deprecate hh3cIKETunLocalValue1 and hh3cIKETunRemoteValue1,
             add hh3cIKETunLocalValue3 and hh3cIKETunRemoteValue3."
        ::= { hh3cCommon 30 }

        Hh3cIKENegoMode   ::= TEXTUAL-CONVENTION
                   STATUS     current
                   DESCRIPTION
                       "The IKE negotiation mode."
                   SYNTAX INTEGER {
                             mainMode(2),
                             aggressiveMode(4),
                             quickMode(32),
                             gmMainMode(128)

                          }

    Hh3cIKEAuthMethod   ::= TEXTUAL-CONVENTION
        STATUS     current
        DESCRIPTION
        "The authentication method used in IKE negotiations."
        SYNTAX INTEGER {
            preSharedKey(1),
            dsaSignatures(2),
            rsaSignatures(3),
            rsaDigitalEnvelope(5),
            sm2DigitalEnvelope(6)
        }

    Hh3cDiffHellmanGrp   ::= TEXTUAL-CONVENTION
        STATUS     current
        DESCRIPTION
           "The Diffie Hellman Group used in IKE and IPsec negotiations."
        SYNTAX INTEGER {
            none(0),
            dhGroup1(1),
            dhGroup2(2),
            dhGroup5(5),
            dhGroup14(14),
            dhGroup24(24),
            invalidGroup(2147483647)
        }

    Hh3cEncryptAlgo   ::= TEXTUAL-CONVENTION
        STATUS     current
        DESCRIPTION
            "The encryption algorithm used in IKE and IPsec negotiations."
        SYNTAX INTEGER {
            none(0),
            desCbc(1),
            ideaCbc(2),
            blowfishCbc(3),
            rc5R16B64Cbc(4),
            tripleDesCbc(5),
            castCbc(6),
            aesCbc(7),
            aesCbc128(8),
            aesCbc192(9),
            aesCbc256(10),
            aesCtr(11),
            aesCamelliaCbc(12),
            rc4(13),
            sm1Cbc128(128),
            sm1Cbc192(129),
            sm1Cbc256(130),
            sm4Cbc(131),
            invalidAlg(2147483647)
        }

    Hh3cAuthAlgo   ::= TEXTUAL-CONVENTION
        STATUS     current
        DESCRIPTION
            "The authentication algorithm used in IKE negotiations."
        SYNTAX INTEGER {
            none(0),
            md5(1),
            sha1(2),
            sha256(3),
            sha384(4),
            sha512(5),
            sm3(128),
            invalidAlg(2147483647)
        }

        Hh3cTrapStatus   ::= TEXTUAL-CONVENTION
                   STATUS     current
                   DESCRIPTION
                       "The switch which determines whether send a trap or not."
                   SYNTAX INTEGER {
                             enabled(1),
                             disabled(2)
                          }

        Hh3cIKEIDType   ::= TEXTUAL-CONVENTION
                   STATUS     current
                   DESCRIPTION
                       "The type of IKE Identity."
                   SYNTAX INTEGER {
                             reserved(0),
                             ipv4Addr(1),
                             fqdn(2),             -- fully-qualified domain name
                             userFqdn(3),         -- fully-qualified username
                             ipv4AddrSubnet(4),
                             ipv6Addr(5),
                             ipv6AddrSubnet(6),
                             ipv4AddrRange(7),
                             ipv6AddrRange(8),
                             derAsn1Dn(9),        -- the binary DER encoding of an ASN.1 X.500 Distinguished Name
                                                  -- [X.501] of the principal whose certificates are being exchanged
                                                  -- to establish the SA.

                             derAsn1Gn(10),       -- the binary DER encoding of an ASN.1 X.500 GeneralName [X.509]
                                                  -- of the principal whose certificates are being exchanged to
                                                  -- establish the SA.

                             keyId(11)            -- specifies an opaque byte stream which may be used to pass
                                                  -- vendor-specific information necessary to identify which
                                                  -- pre-shared key should be used to authenticate Aggressive
                                                  -- mode negotiations.
                          }

        Hh3cIKETunnelState   ::= TEXTUAL-CONVENTION
                   STATUS     current
                   DESCRIPTION
                       "The state of the IKE tunnel."
                   SYNTAX INTEGER {
                             active(1),
                             timeout(2)
                          }


-- ========================================================================
-- Node definitions
-- ========================================================================
--Begin the node of hh3cIKEObjects.

        hh3cIKEObjects OBJECT IDENTIFIER ::= { hh3cIKEMonitor 1 }
-- ================================================
-- Begin the table of hh3cIKETunnelTable.
-- ================================================

        hh3cIKETunnelTable OBJECT-TYPE
            SYNTAX SEQUENCE OF Hh3cIKETunnelEntry
            MAX-ACCESS not-accessible
            STATUS current
            DESCRIPTION
                "The IPsec Phase-1 Internet Key Exchange Tunnel Table.
                 There is one entry in this table for each active IPsec Phase-1 IKE Tunnel."
            ::= { hh3cIKEObjects 1 }

        hh3cIKETunnelEntry OBJECT-TYPE
            SYNTAX Hh3cIKETunnelEntry
            MAX-ACCESS not-accessible
            STATUS current
            DESCRIPTION
                "The entry contains the information about hh3cIKETunnelTable, such as negotiate mode,
                 encryption algorithm and authentication algorithm, etc."
            INDEX { hh3cIKETunIndex }
            ::= { hh3cIKETunnelTable 1 }

    Hh3cIKETunnelEntry ::=
        SEQUENCE {
            hh3cIKETunIndex
                Integer32,
            hh3cIKETunLocalType
                Hh3cIKEIDType,
            hh3cIKETunLocalValue1
                DisplayString,
            hh3cIKETunLocalValue2
                DisplayString,
            hh3cIKETunLocalAddr
                IpAddress,
            hh3cIKETunRemoteType
                Hh3cIKEIDType,
            hh3cIKETunRemoteValue1
                DisplayString,
            hh3cIKETunRemoteValue2
                DisplayString,
            hh3cIKETunRemoteAddr
                IpAddress,
            hh3cIKETunInitiator
                INTEGER,
            hh3cIKETunNegoMode
                Hh3cIKENegoMode,
            hh3cIKETunDiffHellmanGrp
                Hh3cDiffHellmanGrp,
            hh3cIKETunEncryptAlgo
                Hh3cEncryptAlgo,
            hh3cIKETunHashAlgo
                Hh3cAuthAlgo,
            hh3cIKETunAuthMethod
                Hh3cIKEAuthMethod,
            hh3cIKETunLifeTime
                Integer32,
            hh3cIKETunActiveTime
                Integer32,
            hh3cIKETunRemainTime
                Integer32,
            hh3cIKETunTotalRefreshes
                Counter32,
            hh3cIKETunState
                Hh3cIKETunnelState,
            hh3cIKETunDpdIntervalTime
                Integer32,
            hh3cIKETunDpdTimeOut
                Integer32,
            hh3cIKETunLocalInetAddrType
                InetAddressType,
            hh3cIKETunLocalInetAddr
                InetAddress,
            hh3cIKETunRemoteInetAddrType
                InetAddressType,
            hh3cIKETunRemoteInetAddr
                InetAddress,
            hh3cIKETunLocalValue3
                OCTET STRING,
            hh3cIKETunRemoteValue3
                OCTET STRING
        }

        hh3cIKETunIndex OBJECT-TYPE
            SYNTAX Integer32 (1..2147483647)
            MAX-ACCESS accessible-for-notify
            STATUS current
            DESCRIPTION
                "The index of the IPsec Phase-1 IKE Tunnel Table.
                 The value of the index is a number which begins
                 at one and is incremented with each tunnel that
                 is created. The value of this object will wrap
                 at 2147483647."
            ::= { hh3cIKETunnelEntry 1 }

        hh3cIKETunLocalType OBJECT-TYPE
            SYNTAX Hh3cIKEIDType
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The type of local peer identity."
            ::= { hh3cIKETunnelEntry 2 }

        hh3cIKETunLocalValue1 OBJECT-TYPE
            SYNTAX DisplayString(SIZE(0..255))
            MAX-ACCESS read-only
            STATUS deprecated
            DESCRIPTION
                "The value of the local peer identity.

                If the local peer type is ipv4Addr/ipv6Addr, this is the IP address
                used to identify the local peer.

                If the local peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is
                the subnet address.

                If the local peer type is ipv4AddrRange/ipv6AddrRange, this is
                the beginning IP address of the range.

                If the local peer type is fqdn/userFqdn, this is the host name
                used to identify the local peer.

                If the local peer type is derAsn1Dn, this is the binary DER
                encoding of an ASN.1 X.500 Distinguished Name [X.501] of the
                principal whose certificates are being exchanged to establish
                the SA.

                If the local peer type is derAsn1Gn, this is the binary DER
                encoding of an ASN.1 X.500 GeneralName [X.509] of the principal
                whose certificates are being exchanged to establish the SA.

                If the local peer type is keyId, this is an opaque byte
                stream which may be used to pass vendor-specific information
                necessary to identify which pre-shared key should be used to
                authenticate Aggressive mode negotiations.

                The local peer identity may not exceed 255 characters in length.
                The complete value will be displayed by hh3cIKETunLocalValue3"
            ::= { hh3cIKETunnelEntry 3 }

        hh3cIKETunLocalValue2 OBJECT-TYPE
            SYNTAX DisplayString(SIZE(0..255))
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The second specification of the local peer's IP address.

                 If the local peer type is ipv4AddrSubnet/ipv6AddrSubnet, this
                 is the subnet mask.

                 If the local peer type is ipv4AddrRange/ipv6AddrRange, this is
                 the ending IP address of the range.

                 If the local peer type are others, this is a zero-length string."
            ::= { hh3cIKETunnelEntry 4 }

        hh3cIKETunLocalAddr OBJECT-TYPE
            SYNTAX IpAddress
            MAX-ACCESS read-only
            STATUS deprecated
            DESCRIPTION
                "The IP address of the local endpoint for the IPsec
                 Phase-1 IKE Tunnel."
            ::= { hh3cIKETunnelEntry 5 }

        hh3cIKETunRemoteType OBJECT-TYPE
            SYNTAX Hh3cIKEIDType
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The type of remote peer identity."
            ::= { hh3cIKETunnelEntry 6 }

        hh3cIKETunRemoteValue1 OBJECT-TYPE
            SYNTAX DisplayString(SIZE(0..255))
            MAX-ACCESS read-only
            STATUS deprecated
            DESCRIPTION
                "The value of the remote peer identity.

                If the remote peer type is ipv4Addr/ipv6Addr, this is the IP address
                used to identify the remote peer.

                If the remote peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is
                the subnet address.

                If the remote peer type is ipv4AddrRange/ipv6AddrRange, this is
                the beginning IP address of the range.

                If the remote peer type is fqdn/userFqdn, this is the host name
                used to identify the remote peer.

                If the remote peer type is derAsn1Dn, this is the binary DER
                encoding of an ASN.1 X.500 Distinguished Name [X.501] of the
                principal whose certificates are being exchanged to establish
                the SA.

                If the remote peer type is derAsn1Gn, this is the binary DER
                encoding of an ASN.1 X.500 GeneralName [X.509] of the principal
                whose certificates are being exchanged to establish the SA.

                If the remote peer type is keyId, this is an opaque byte
                stream which may be used to pass vendor-specific information
                necessary to identify which pre-shared key should be used to
                authenticate Aggressive mode negotiations.

                The remote peer identity may not exceed 255 characters in length.
                The complete value will be displayed by hh3cIKETunRemoteValue3"
            ::= { hh3cIKETunnelEntry 7 }

        hh3cIKETunRemoteValue2 OBJECT-TYPE
            SYNTAX DisplayString(SIZE(0..255))
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The second specification of the remote peer's IP address.

                 If the remote peer type is ipv4AddrSubnet/ipv6AddrSubnet, this
                 is the subnet mask.

                 If the remote peer type is ipv4AddrRange/ipv6AddrRange, this is
                 the ending IP address of the range.

                 If the remote peer type are others, this is a zero-length string."
            ::= { hh3cIKETunnelEntry 8 }

        hh3cIKETunRemoteAddr OBJECT-TYPE
            SYNTAX IpAddress
            MAX-ACCESS read-only
            STATUS deprecated
            DESCRIPTION
                "The IP address of the remote peer for the IPsec
                Phase-1 IKE Tunnel."
            ::= { hh3cIKETunnelEntry 9 }

        hh3cIKETunInitiator OBJECT-TYPE
            SYNTAX INTEGER  {
                                local(1),
                                remote(2)
                            }
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The initiator of this tunnel."
            ::= { hh3cIKETunnelEntry 10 }

        hh3cIKETunNegoMode OBJECT-TYPE
            SYNTAX Hh3cIKENegoMode
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The negotiation mode of the IPsec Phase-1 IKE Tunnel."
            ::= { hh3cIKETunnelEntry 11 }

        hh3cIKETunDiffHellmanGrp OBJECT-TYPE
            SYNTAX Hh3cDiffHellmanGrp
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The Diffie Hellman Group used in the IPsec Phase-1 IKE
                 negotiations."
            ::= { hh3cIKETunnelEntry 12 }

        hh3cIKETunEncryptAlgo OBJECT-TYPE
            SYNTAX Hh3cEncryptAlgo
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The encryption algorithm used in the IPsec Phase-1 IKE
                 negotiations."
            ::= { hh3cIKETunnelEntry 13 }

        hh3cIKETunHashAlgo OBJECT-TYPE
            SYNTAX Hh3cAuthAlgo
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The hash algorithm used in the IPsec Phase-1 IKE
                 negotiations."
            ::= { hh3cIKETunnelEntry 14 }

        hh3cIKETunAuthMethod OBJECT-TYPE
            SYNTAX Hh3cIKEAuthMethod
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The authentication method used in the IPsec Phase-1
                 IKE negotiations."
            ::= { hh3cIKETunnelEntry 15 }

        hh3cIKETunLifeTime OBJECT-TYPE
            SYNTAX Integer32 (1..2147483647)
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The negotiated LifeTime of the IPsec Phase-1
                 IKE Tunnel in seconds."
            ::= { hh3cIKETunnelEntry 16 }

        hh3cIKETunActiveTime OBJECT-TYPE
            SYNTAX Integer32 (1..2147483647)
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The duration the IPsec Phase-1 IKE tunnel
                 has been active in seconds."
            ::= { hh3cIKETunnelEntry 17 }

        hh3cIKETunRemainTime OBJECT-TYPE
            SYNTAX Integer32 (1..2147483647)
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The security association remaining time in
                 seconds."
            ::= { hh3cIKETunnelEntry 18 }

        hh3cIKETunTotalRefreshes OBJECT-TYPE
            SYNTAX Counter32
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of security association
                 refreshing performed."
            ::= { hh3cIKETunnelEntry 19 }

        hh3cIKETunState OBJECT-TYPE
            SYNTAX Hh3cIKETunnelState
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The State of IKE Tunnel."
            ::= { hh3cIKETunnelEntry 20 }

        hh3cIKETunDpdIntervalTime OBJECT-TYPE
            SYNTAX Integer32
            UNITS "second"
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The time that trigger DPD request.
                If ipsec message is expected to be sent out
                and the interval time between current time
                and the last time receiving peer's IPsec
                message is bigger than this time, DPD request
                would be triggered."
            DEFVAL { 10 }
            ::= { hh3cIKETunnelEntry 21 }

        hh3cIKETunDpdTimeOut OBJECT-TYPE
            SYNTAX Integer32
            UNITS "second"
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The overtime of single DPD request.
                If DPD requests are refused three times, all
                security associations related would be deleted."
            DEFVAL { 5 }
            ::= { hh3cIKETunnelEntry 22 }

    hh3cIKETunLocalInetAddrType OBJECT-TYPE
        SYNTAX InetAddressType
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "The type of the local peer's IP address."
        ::= { hh3cIKETunnelEntry 23 }

    hh3cIKETunLocalInetAddr OBJECT-TYPE
        SYNTAX InetAddress
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "The IP address of the local peer for the IPsec Phase-1 IKE Tunnel."
        ::= { hh3cIKETunnelEntry 24 }

    hh3cIKETunRemoteInetAddrType OBJECT-TYPE
        SYNTAX InetAddressType
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "The type of the remote peer's IP address."
        ::= { hh3cIKETunnelEntry 25 }

    hh3cIKETunRemoteInetAddr OBJECT-TYPE
        SYNTAX InetAddress
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "The IP address of the remote peer for the IPsec Phase-1 IKE Tunnel."
        ::= { hh3cIKETunnelEntry 26 }

     hh3cIKETunLocalValue3 OBJECT-TYPE
        SYNTAX OCTET STRING (SIZE(0..2047))
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "The value of the local peer identity.

            If the local peer type is ipv4Addr/ipv6Addr, this is the IP address
            used to identify the local peer.

            If the local peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is
            the subnet address.

            If the local peer type is ipv4AddrRange/ipv6AddrRange, this is
            the beginning IP address of the range.

            If the local peer type is fqdn/userFqdn, this is the host name
            used to identify the local peer.

            If the local peer type is derAsn1Dn, this is the binary DER
            encoding of an ASN.1 X.500 Distinguished Name [X.501] of the
            principal whose certificates are being exchanged to establish
            the SA.

            If the local peer type is derAsn1Gn, this is the binary DER
            encoding of an ASN.1 X.500 GeneralName [X.509] of the principal
            whose certificates are being exchanged to establish the SA.

            If the local peer type is keyId, this is an opaque byte
            stream which may be used to pass vendor-specific information
            necessary to identify which pre-shared key should be used to
            authenticate Aggressive mode negotiations."
        ::= { hh3cIKETunnelEntry 27 }

    hh3cIKETunRemoteValue3 OBJECT-TYPE
        SYNTAX OCTET STRING (SIZE(0..2047))
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "The value of the remote peer identity.

            If the remote peer type is ipv4Addr/ipv6Addr, this is the IP address
            used to identify the remote peer.

            If the remote peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is
            the subnet address.

            If the remote peer type is ipv4AddrRange/ipv6AddrRange, this is
            the beginning IP address of the range.

            If the remote peer type is fqdn/userFqdn, this is the host name
            used to identify the remote peer.

            If the remote peer type is derAsn1Dn, this is the binary DER
            encoding of an ASN.1 X.500 Distinguished Name [X.501] of the
            principal whose certificates are being exchanged to establish
            the SA.

            If the remote peer type is derAsn1Gn, this is the binary DER
            encoding of an ASN.1 X.500 GeneralName [X.509] of the principal
            whose certificates are being exchanged to establish the SA.

            If the remote peer type is keyId, this is an opaque byte
            stream which may be used to pass vendor-specific information
            necessary to identify which pre-shared key should be used to
            authenticate Aggressive mode negotiations."
        ::= { hh3cIKETunnelEntry 28 }
-- =======================================
-- begin the table of hh3cIKETunnelStatTable.
-- =======================================

        hh3cIKETunnelStatTable OBJECT-TYPE
            SYNTAX SEQUENCE OF Hh3cIKETunnelStatEntry
            MAX-ACCESS not-accessible
            STATUS current
            DESCRIPTION
                "The IPsec Phase-1 IKE Tunnel Statistic Table."
            ::= { hh3cIKEObjects 2 }


        hh3cIKETunnelStatEntry OBJECT-TYPE
            SYNTAX Hh3cIKETunnelStatEntry
            MAX-ACCESS not-accessible
            STATUS current
            DESCRIPTION
                "The entry contains the information of hh3cIKETunnelStatTable,
                 such as the number of packets sent and received by the
                 IKE tunnel, etc."
            INDEX { hh3cIKETunIndex }
            ::= { hh3cIKETunnelStatTable 1 }

        Hh3cIKETunnelStatEntry ::=
            SEQUENCE {
                                hh3cIKETunInOctets
                                    Counter64,
                                hh3cIKETunInPkts
                                    Counter64,
                                hh3cIKETunInDropPkts
                                    Counter64,
                                hh3cIKETunInP2Exchgs
                                    Counter64,
                                hh3cIKETunInP2ExchgRejets
                                    Counter64,
                                hh3cIKETunInP2SaDelRequests
                                    Counter64,
                                hh3cIKETunInP1SaDelRequests
                                    Counter64,
                                hh3cIKETunInNotifys
                                    Counter32,
                                hh3cIKETunOutOctets
                                    Counter64,
                                hh3cIKETunOutPkts
                                    Counter64,
                                hh3cIKETunOutDropPkts
                                    Counter64,
                                hh3cIKETunOutP2Exchgs
                                    Counter64,
                                hh3cIKETunOutP2ExchgRejects
                                    Counter64,
                                hh3cIKETunOutP2SaDelRequests
                                    Counter64,
                                hh3cIKETunOutP1SaDelRequests
                                    Counter64,
                                hh3cIKETunOutNotifys
                                    Counter32
             }

        hh3cIKETunInOctets OBJECT-TYPE
            SYNTAX Counter64
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of octets received by
                 this IPsec Phase-1 IKE Tunnel."
            ::= { hh3cIKETunnelStatEntry 1 }

        hh3cIKETunInPkts OBJECT-TYPE
            SYNTAX Counter64
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of packets received by
                 this IPsec Phase-1 IKE Tunnel."
            ::= { hh3cIKETunnelStatEntry 2 }

        hh3cIKETunInDropPkts OBJECT-TYPE
            SYNTAX Counter64
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of packets dropped  by this
                 IPsec Phase-1 IKE Tunnel during receiving process."
            ::= { hh3cIKETunnelStatEntry 3 }

        hh3cIKETunInP2Exchgs OBJECT-TYPE
            SYNTAX Counter64
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of IPsec Phase-2 exchanges
                 received by this IPsec Phase-1 IKE Tunnel."
            ::= { hh3cIKETunnelStatEntry 4 }

        hh3cIKETunInP2ExchgRejets OBJECT-TYPE
            SYNTAX Counter64
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of IPsec Phase-2 exchanges
                 received and rejected by this IPsec Phase-1 Tunnel."
            ::= { hh3cIKETunnelStatEntry 5 }

        hh3cIKETunInP2SaDelRequests OBJECT-TYPE
            SYNTAX Counter64
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of IPsec Phase-2 security association
                 deleting requests received by this IPsec Phase-1 IKE Tunnel."
            ::= { hh3cIKETunnelStatEntry 6 }

        hh3cIKETunInP1SaDelRequests OBJECT-TYPE
            SYNTAX Counter64
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of IPsec Phase-1
                 security association deleting requests."
            ::= { hh3cIKETunnelStatEntry 7 }

        hh3cIKETunInNotifys OBJECT-TYPE
            SYNTAX Counter32
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of notifications received by this
                 IPsec Phase-1 IKE Tunnel."
            ::= { hh3cIKETunnelStatEntry 8 }

        hh3cIKETunOutOctets OBJECT-TYPE
            SYNTAX Counter64
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of octets sent by this IPsec
                 Phase-1 IKE Tunnel."
            ::= { hh3cIKETunnelStatEntry 9 }

        hh3cIKETunOutPkts OBJECT-TYPE
            SYNTAX Counter64
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of packets sent by this IPsec
                 Phase-1 IKE Tunnel."
            ::= { hh3cIKETunnelStatEntry 10 }

        hh3cIKETunOutDropPkts OBJECT-TYPE
            SYNTAX Counter64
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of packets dropped by this
                 IPsec Phase-1 IKE Tunnel during sending process."
            ::= { hh3cIKETunnelStatEntry 11 }

        hh3cIKETunOutP2Exchgs OBJECT-TYPE
            SYNTAX Counter64
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of IPsec Phase-2 exchanges sent
                 by this IPsec Phase-1 IKE Tunnel."
            ::= { hh3cIKETunnelStatEntry 12 }

        hh3cIKETunOutP2ExchgRejects OBJECT-TYPE
            SYNTAX Counter64
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of IPsec Phase-2 exchanges sent
                 and rejected by this IPsec Phase-1 IKE Tunnel."
            ::= { hh3cIKETunnelStatEntry 13 }

        hh3cIKETunOutP2SaDelRequests OBJECT-TYPE
            SYNTAX Counter64
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of IPsec Phase-2 security
                 association deleting requests sent by this
                 IPsec Phase-1 IKE Tunnel."
            ::= { hh3cIKETunnelStatEntry 14 }

        hh3cIKETunOutP1SaDelRequests OBJECT-TYPE
            SYNTAX Counter64
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of IPsec Phase-1 security
                 association deleting requests sent by this
                 IPsec Phase-1 IKE Tunnel."
            ::= { hh3cIKETunnelStatEntry 15 }

        hh3cIKETunOutNotifys OBJECT-TYPE
            SYNTAX Counter32
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of notifications sent by this IPsec
                 Phase-1 Tunnel."
            ::= { hh3cIKETunnelStatEntry 16 }

-- =======================================
-- Begin the hh3cIKEGlobalStats.
-- =======================================

        hh3cIKEGlobalStats OBJECT IDENTIFIER ::= { hh3cIKEObjects 3 }

        hh3cIKEGlobalActiveTunnels OBJECT-TYPE
            SYNTAX Gauge32
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The number of currently active IPsec Phase-1 IKE Tunnels."
            ::= { hh3cIKEGlobalStats 1 }

        hh3cIKEGlobalInOctets OBJECT-TYPE
            SYNTAX Counter64
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of octets received by all currently and
                 previously active IPsec Phase-1 IKE Tunnels."
            ::= { hh3cIKEGlobalStats 2 }

        hh3cIKEGlobalInPkts OBJECT-TYPE
            SYNTAX Counter64
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of packets received by all
                 currently and previously active IPsec Phase-1 IKE Tunnels."
            ::= { hh3cIKEGlobalStats 3 }

        hh3cIKEGlobalInDropPkts OBJECT-TYPE
            SYNTAX Counter64
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of packets which were dropped during receiving
                 process by all currently and previously active IPsec Phase-1
                 IKE Tunnels."
            ::= { hh3cIKEGlobalStats 4 }

        hh3cIKEGlobalInP2Exchgs OBJECT-TYPE
            SYNTAX Counter64
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of IPsec Phase-2 exchanges received by all
                 currently and previously active IPsec Phase-1 IKE Tunnels."
            ::= { hh3cIKEGlobalStats 5 }

        hh3cIKEGlobalInP2ExchgRejects OBJECT-TYPE
            SYNTAX Counter64
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of IPsec Phase-2 exchanges which were
                 received and rejected by all currently and previously
                 active IPsec Phase-1 IKE Tunnels."
            ::= { hh3cIKEGlobalStats 6 }

        hh3cIKEGlobalInP2SaDelRequests OBJECT-TYPE
            SYNTAX Counter64
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of IPsec Phase-2 security association
                 deleting requests received by all currently and previously
                 active IPsec Phase-1 IKE Tunnels."
            ::= { hh3cIKEGlobalStats 7 }

        hh3cIKEGlobalInNotifys OBJECT-TYPE
            SYNTAX Counter32
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of notifications received by all IPsec
                 Phase-1 IKE Tunnels."
            ::= { hh3cIKEGlobalStats 8 }

        hh3cIKEGlobalOutOctets OBJECT-TYPE
            SYNTAX Counter64
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of octets sent by all currently
                 and previously active and IPsec Phase-1 IKE Tunnels. "
            ::= { hh3cIKEGlobalStats 9 }

        hh3cIKEGlobalOutPkts OBJECT-TYPE
            SYNTAX Counter64
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of packets sent by all currently
                 and previously active and IPsec Phase-1 Tunnels."
            ::= { hh3cIKEGlobalStats 10 }

        hh3cIKEGlobalOutDropPkts OBJECT-TYPE
            SYNTAX Counter64
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of packets which were dropped during
                 sending process by all currently and previously active
                 IPsec Phase-1 IKE Tunnels."
            ::= { hh3cIKEGlobalStats 11 }

        hh3cIKEGlobalOutP2Exchgs OBJECT-TYPE
            SYNTAX Counter64
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of IPsec Phase-2 exchanges which were
                 sent by all currently and previously active IPsec
                 Phase-1 IKE Tunnels."
            ::= { hh3cIKEGlobalStats 12 }

        hh3cIKEGlobalOutP2ExchgRejects OBJECT-TYPE
            SYNTAX Counter64
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of IPsec Phase-2 exchanges which
                 were sent and rejected by all currently and previously
                 active IPsec Phase-1 IKE Tunnels."
            ::= { hh3cIKEGlobalStats 13 }

        hh3cIKEGlobalOutP2SaDelRequests OBJECT-TYPE
            SYNTAX Counter64
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of IPsec Phase-2 SA deleting requests sent
                 by all currently and previously active IPsec Phase-1 IKE Tunnels."
            ::= { hh3cIKEGlobalStats 14 }

        hh3cIKEGlobalOutNotifys OBJECT-TYPE
            SYNTAX Counter32
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of notifications sent by all active IPsec
                 Phase-1 IKE Tunnels."
            ::= { hh3cIKEGlobalStats 15 }

        hh3cIKEGlobalInitTunnels OBJECT-TYPE
            SYNTAX Counter32
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of IPsec Phase-1 IKE Tunnels which
                 were locally initiated."
            ::= { hh3cIKEGlobalStats 16 }

        hh3cIKEGlobalInitTunnelFails OBJECT-TYPE
            SYNTAX Counter32
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of IPsec Phase-1 IKE Tunnels which
                 were locally initiated and failed to activate."
            ::= { hh3cIKEGlobalStats 17 }

        hh3cIKEGlobalRespTunnels OBJECT-TYPE
            SYNTAX Counter32
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of IPsec Phase-1 IKE Tunnels which
                 were remotely initiated."
            ::= { hh3cIKEGlobalStats 18 }

        hh3cIKEGlobalRespTunnelFails OBJECT-TYPE
            SYNTAX Counter32
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of IPsec Phase-1 IKE Tunnels which
                 were remotely initiated and failed to activate."
            ::= { hh3cIKEGlobalStats 19 }

        hh3cIKEGlobalAuthFails OBJECT-TYPE
            SYNTAX Counter32
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of authentications which ended in
                 failure by all current and previous IPsec Phase-1 IKE Tunnels."
            ::= { hh3cIKEGlobalStats 20 }

        hh3cIKEGlobalNoSaFails OBJECT-TYPE
            SYNTAX Counter32
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of non-existent Security Association
                 in failures which occurred during processing of all
                 current and previous IPsec Phase-1 IKE Tunnels."
            ::= { hh3cIKEGlobalStats 21 }

        hh3cIKEGlobalInvalidCookieFails OBJECT-TYPE
            SYNTAX Counter32
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of invalid cookie in failures which
                 occurred during processing of all current and previous
                 IPsec Phase-1 IKE Tunnels."
            ::= { hh3cIKEGlobalStats 22 }

        hh3cIKEGlobalAttrNotSuppFails OBJECT-TYPE
            SYNTAX Counter32
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of attributes not supported in failures
                 which occurred during processing of all current and previous
                 IPsec Phase-1 IKE Tunnels."
            ::= { hh3cIKEGlobalStats 23 }

        hh3cIKEGlobalNoProposalChosenFails OBJECT-TYPE
            SYNTAX Counter32
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of no proposal chosen in failures which
                 occurred during processing of all current and previous
                 IPsec Phase-1 IKE Tunnels."
            ::= { hh3cIKEGlobalStats 24 }

        hh3cIKEGlobalUnsportExchTypeFails OBJECT-TYPE
            SYNTAX Counter32
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of unsupported exchange type in failures
                 which occurred during processing of all current and
                 previous IPsec Phase-1 IKE Tunnels."
            ::= { hh3cIKEGlobalStats 25 }

        hh3cIKEGlobalInvalidIdFails OBJECT-TYPE
            SYNTAX Counter32
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of invalid id Information in failures
                 which occurred during processing of all current and
                 previous IPsec Phase-1 IKE Tunnels."
            ::= { hh3cIKEGlobalStats 26 }

            hh3cIKEGlobalInvalidProFails OBJECT-TYPE
            SYNTAX Counter32
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of invalid protocol id in failures which
                 occurred during processing of all current and previous
                 IPsec Phase-1 IKE Tunnels."
            ::= { hh3cIKEGlobalStats 27 }

            hh3cIKEGlobalCertTypeUnsuppFails OBJECT-TYPE
            SYNTAX Counter32
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of certificate type unsupported in failures
                 which occurred during processing of all current and
                 previous IPsec Phase-1 IKE Tunnels."
            ::= { hh3cIKEGlobalStats 28 }

        hh3cIKEGlobalInvalidCertAuthFails OBJECT-TYPE
            SYNTAX Counter32
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                   "The total number of failures because of invalid certificate authority
                 which occurred during processing of all current and
                 previous IPsec Phase-1 IKE Tunnels."
            ::= { hh3cIKEGlobalStats 29 }

        hh3cIKEGlobalInvalidSignFails OBJECT-TYPE
            SYNTAX Counter32
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of failures because of the invalid signature which
                 occurred during processing of all current and previous
                 IPsec Phase-1 IKE Tunnels."
            ::= { hh3cIKEGlobalStats 30 }

        hh3cIKEGlobalCertUnavailableFails OBJECT-TYPE
            SYNTAX Counter32
            MAX-ACCESS read-only
            STATUS current
            DESCRIPTION
                "The total number of certificate unavailable in failures
                 which occurred during processing of all current and
                 previous IPsec Phase-1 IKE Tunnels."
            ::= { hh3cIKEGlobalStats 31 }

-- =======================================
-- Begin the hh3cIKETrapObject.
-- =======================================

        hh3cIKETrapObject OBJECT IDENTIFIER ::= { hh3cIKEObjects 4 }

        hh3cIKEProposalNumber OBJECT-TYPE
            SYNTAX Integer32
            MAX-ACCESS accessible-for-notify
            STATUS current
            DESCRIPTION
                "The IKE proposal's number with a trap."
            ::= { hh3cIKETrapObject 1 }

        hh3cIKEProposalSize OBJECT-TYPE
            SYNTAX Integer32
            MAX-ACCESS accessible-for-notify
            STATUS current
            DESCRIPTION
                "The number of IKE proposals with a trap."
            ::= { hh3cIKETrapObject 2 }

        hh3cIKEIdInformation OBJECT-TYPE
            SYNTAX DisplayString(SIZE(0..255))
            MAX-ACCESS accessible-for-notify
            STATUS current
            DESCRIPTION
                "The id information with a trap."
            ::= { hh3cIKETrapObject 3 }

        hh3cIKEProtocolNum OBJECT-TYPE
            SYNTAX Integer32
            MAX-ACCESS accessible-for-notify
            STATUS current
            DESCRIPTION
                "The protocol number with a trap"
            ::= { hh3cIKETrapObject 4 }

        hh3cIKECertInformation OBJECT-TYPE
            SYNTAX DisplayString(SIZE(0..255))
            MAX-ACCESS accessible-for-notify
            STATUS current
            DESCRIPTION
                "The certificate information with a trap."
            ::= { hh3cIKETrapObject 5 }


-- =======================================
-- Begin the hh3cIKETrapCntl.
-- =======================================

        hh3cIKETrapCntl OBJECT IDENTIFIER ::= { hh3cIKEObjects 5 }

        hh3cIKETrapGlobalCntl OBJECT-TYPE
            SYNTAX Hh3cTrapStatus
            MAX-ACCESS read-write
            STATUS current
            DESCRIPTION
                "Indicates whether all IKE traps should be generated."
            ::= { hh3cIKETrapCntl 1 }


        hh3cIKETunnelStartTrapCntl OBJECT-TYPE
            SYNTAX Hh3cTrapStatus
            MAX-ACCESS read-write
            STATUS current
            DESCRIPTION
                "Indicates whether hh3cIKETunnelStart traps should be generated."
            ::= { hh3cIKETrapCntl 2 }

        hh3cIKETunnelStopTrapCntl OBJECT-TYPE
            SYNTAX Hh3cTrapStatus
            MAX-ACCESS read-write
            STATUS current
            DESCRIPTION
                        "Indicates whether hh3cIKETunnelStop traps should be generated."
            ::= { hh3cIKETrapCntl 3 }

        hh3cIKENoSaTrapCntl OBJECT-TYPE
            SYNTAX Hh3cTrapStatus
            MAX-ACCESS read-write
            STATUS current
            DESCRIPTION
                "Indicates whether hh3cIKENoSaFailure traps should be generated."
            ::= { hh3cIKETrapCntl 4 }

        hh3cIKEEncryFailureTrapCntl OBJECT-TYPE
            SYNTAX Hh3cTrapStatus
            MAX-ACCESS read-write
            STATUS current
            DESCRIPTION
                "Indicates whether hh3cIKEEncryFailFailure traps should be generated."
            ::= { hh3cIKETrapCntl 5 }

        hh3cIKEDecryFailureTrapCntl OBJECT-TYPE
            SYNTAX Hh3cTrapStatus
            MAX-ACCESS read-write
            STATUS current
            DESCRIPTION
                "Indicates whether hh3cIKEDecryFailFailure traps should be generated."
            ::= { hh3cIKETrapCntl 6 }

        hh3cIKEInvalidProposalTrapCntl OBJECT-TYPE
            SYNTAX Hh3cTrapStatus
            MAX-ACCESS read-write
            STATUS current
            DESCRIPTION
                "Indicates whether hh3cIKEInvalidProposalFailure traps should be generated."
            ::= { hh3cIKETrapCntl 7 }

        hh3cIKEAuthFailTrapCntl OBJECT-TYPE
            SYNTAX Hh3cTrapStatus
            MAX-ACCESS read-write
            STATUS current
            DESCRIPTION
                "Indicates whether hh3cIKEAuthFailFailure traps should be generated."
            ::= { hh3cIKETrapCntl 8 }

        hh3cIKEInvalidCookieTrapCntl OBJECT-TYPE
            SYNTAX Hh3cTrapStatus
            MAX-ACCESS read-write
            STATUS current
            DESCRIPTION
                "Indicates whether hh3cIKEInvalidCookieFailure traps should be generated."
            ::= { hh3cIKETrapCntl 9 }

        hh3cIKEInvalidSpiTrapCntl OBJECT-TYPE
            SYNTAX Hh3cTrapStatus
            MAX-ACCESS read-write
            STATUS current
            DESCRIPTION
                "Indicates whether hh3cIKEInvalidSpiFailure traps should be generated."
            ::= { hh3cIKETrapCntl 10 }

        hh3cIKEAttrNotSuppTrapCntl OBJECT-TYPE
            SYNTAX Hh3cTrapStatus
            MAX-ACCESS read-write
            STATUS current
            DESCRIPTION
                "Indicates whether hh3cIKEAttrNotSuppFailure traps should be generated."
            ::= { hh3cIKETrapCntl 11 }

        hh3cIKEUnsportExchTypeTrapCntl OBJECT-TYPE
            SYNTAX Hh3cTrapStatus
            MAX-ACCESS read-write
            STATUS current
            DESCRIPTION
                "Indicates whether hh3cIKEUnsportExchTypeFailure traps should be generated."
            ::= { hh3cIKETrapCntl 12 }

        hh3cIKEInvalidIdTrapCntl OBJECT-TYPE
            SYNTAX Hh3cTrapStatus
            MAX-ACCESS read-write
            STATUS current
            DESCRIPTION
                "Indicates whether hh3cIKEInvalidIdFailure traps should be generated."
            ::= { hh3cIKETrapCntl 13 }

        hh3cIKEInvalidProtocolTrapCntl OBJECT-TYPE
            SYNTAX Hh3cTrapStatus
            MAX-ACCESS read-write
            STATUS current
            DESCRIPTION
                "Indicates whether hh3cIKEInvalidProtocolFailure traps should be generated."
            ::= { hh3cIKETrapCntl 14 }

        hh3cIKECertTypeUnsuppTrapCntl OBJECT-TYPE
            SYNTAX Hh3cTrapStatus
            MAX-ACCESS read-write
            STATUS current
            DESCRIPTION
                "Indicates whether hh3cIKECertTypeUnsuppFailure traps should be generated."
            ::= { hh3cIKETrapCntl 15 }

        hh3cIKEInvalidCertAuthTrapCntl OBJECT-TYPE
            SYNTAX Hh3cTrapStatus
            MAX-ACCESS read-write
            STATUS current
            DESCRIPTION
                "Indicates whether hh3cIKEInvalidCertAuthFailure traps should be generated."
            ::= { hh3cIKETrapCntl 16 }

        hh3cIKEInvalidSignTrapCntl OBJECT-TYPE
            SYNTAX Hh3cTrapStatus
            MAX-ACCESS read-write
            STATUS current
            DESCRIPTION
                "Indicates whether hh3cIKEInvalidSignFailure traps should be generated."
            ::= { hh3cIKETrapCntl 17 }

        hh3cIKECertUnavailableTrapCntl OBJECT-TYPE
            SYNTAX Hh3cTrapStatus
            MAX-ACCESS read-write
            STATUS current
            DESCRIPTION
                "Indicates whether hh3cIKECertUnavailableFailure traps should be generated."
            ::= { hh3cIKETrapCntl 18 }

        hh3cIKEProposalAddTrapCntl OBJECT-TYPE
            SYNTAX Hh3cTrapStatus
            MAX-ACCESS read-write
            STATUS current
            DESCRIPTION
                "Indicates whether hh3cIKEProposalAdd traps should be generated."
            ::= { hh3cIKETrapCntl 19 }

        hh3cIKEProposalDelTrapCntl OBJECT-TYPE
            SYNTAX Hh3cTrapStatus
            MAX-ACCESS read-write
            STATUS current
            DESCRIPTION
                "Indicates whether hh3cIKEProposalDel traps should be generated."
            ::= { hh3cIKETrapCntl 20 }

-- ================================================
-- definition of traps.
-- ================================================

        hh3cIKETrap OBJECT IDENTIFIER ::= { hh3cIKEObjects 6 }
        hh3cIKENotifications OBJECT IDENTIFIER ::= { hh3cIKETrap 1 }

        hh3cIKETunnelStart NOTIFICATION-TYPE
            OBJECTS {
                        hh3cIKETunLocalAddr,
                        hh3cIKETunRemoteAddr,
                        hh3cIKETunLifeTime,
                        hh3cIKETunIndex,
                        hh3cIKETunLocalInetAddrType,
                        hh3cIKETunLocalInetAddr,
                        hh3cIKETunRemoteInetAddrType,
                        hh3cIKETunRemoteInetAddr
                    }
            STATUS     current
            DESCRIPTION
                 "This notification is generated when an IPsec Phase-1
                  IKE Tunnel is created."
                    ::= { hh3cIKENotifications 1 }

        hh3cIKETunnelStop NOTIFICATION-TYPE
            OBJECTS {
                        hh3cIKETunLocalAddr,
                        hh3cIKETunRemoteAddr,
                        hh3cIKETunActiveTime,
                        hh3cIKETunIndex,
                        hh3cIKETunLocalInetAddrType,
                        hh3cIKETunLocalInetAddr,
                        hh3cIKETunRemoteInetAddrType,
                        hh3cIKETunRemoteInetAddr
                    }
            STATUS     current
            DESCRIPTION
                "This notification is generated when an IPsec Phase-1
                IKE Tunnel is deleted."
                    ::= { hh3cIKENotifications 2 }

        hh3cIKENoSaFailure NOTIFICATION-TYPE
            OBJECTS {
                        hh3cIKETunLocalAddr,
                        hh3cIKETunRemoteAddr,
                        hh3cIKETunIndex,
                        hh3cIKETunLocalInetAddrType,
                        hh3cIKETunLocalInetAddr,
                        hh3cIKETunRemoteInetAddrType,
                        hh3cIKETunRemoteInetAddr
                    }
            STATUS     current
            DESCRIPTION
                "This notification is generated when the IKE tunnel
                 has a non-existent SA error."
        ::= { hh3cIKENotifications 3 }

        hh3cIKEEncryFailFailure NOTIFICATION-TYPE
            OBJECTS {
                        hh3cIKETunLocalAddr,
                        hh3cIKETunRemoteAddr,
                        hh3cIKETunIndex,
                        hh3cIKETunLocalInetAddrType,
                        hh3cIKETunLocalInetAddr,
                        hh3cIKETunRemoteInetAddrType,
                        hh3cIKETunRemoteInetAddr
                    }
            STATUS     current
            DESCRIPTION
                "This notification is generated when the IKE tunnel
                 has an encrypting failure."
                    ::= { hh3cIKENotifications 4 }

        hh3cIKEDecryFailFailure NOTIFICATION-TYPE
            OBJECTS {
                        hh3cIKETunLocalAddr,
                        hh3cIKETunRemoteAddr,
                        hh3cIKETunIndex,
                        hh3cIKETunLocalInetAddrType,
                        hh3cIKETunLocalInetAddr,
                        hh3cIKETunRemoteInetAddrType,
                        hh3cIKETunRemoteInetAddr
                    }
            STATUS     current
                    DESCRIPTION
                "This notification is generated when the IKE tunnel
                has a decrypting failure."
                    ::= { hh3cIKENotifications 5 }

        hh3cIKEInvalidProposalFailure NOTIFICATION-TYPE
            OBJECTS {
                        hh3cIKETunLocalAddr,
                        hh3cIKETunRemoteAddr,
                        hh3cIKETunIndex,
                        hh3cIKETunLocalInetAddrType,
                        hh3cIKETunLocalInetAddr,
                        hh3cIKETunRemoteInetAddrType,
                        hh3cIKETunRemoteInetAddr
                    }
            STATUS     current
            DESCRIPTION
                "This notification is generated when the IPsec phase-1
                invalid proposal occurs."
                    ::= { hh3cIKENotifications 6 }

        hh3cIKEAuthFailFailure NOTIFICATION-TYPE
            OBJECTS {
                        hh3cIKETunLocalAddr,
                        hh3cIKETunRemoteAddr,
                        hh3cIKETunIndex,
                        hh3cIKETunLocalInetAddrType,
                        hh3cIKETunLocalInetAddr,
                        hh3cIKETunRemoteInetAddrType,
                        hh3cIKETunRemoteInetAddr
                    }
            STATUS     current
            DESCRIPTION
                "This notification is generated when the IPsec phase-1
                authentication failure occurs."
            ::= { hh3cIKENotifications 7 }

        hh3cIKEInvalidCookieFailure NOTIFICATION-TYPE
            OBJECTS {
                        hh3cIKETunLocalAddr,
                        hh3cIKETunRemoteAddr,
                        hh3cIKETunIndex,
                        hh3cIKETunLocalInetAddrType,
                        hh3cIKETunLocalInetAddr,
                        hh3cIKETunRemoteInetAddrType,
                        hh3cIKETunRemoteInetAddr
                    }
            STATUS     current
            DESCRIPTION
                "This notification is generated when the IPsec phase-1
                invalid cookie failure occurs."
            ::= { hh3cIKENotifications 8 }

        hh3cIKEAttrNotSuppFailure NOTIFICATION-TYPE
            OBJECTS {
                        hh3cIKETunLocalAddr,
                        hh3cIKETunRemoteAddr,
                        hh3cIKETunIndex,
                        hh3cIKETunLocalInetAddrType,
                        hh3cIKETunLocalInetAddr,
                        hh3cIKETunRemoteInetAddrType,
                        hh3cIKETunRemoteInetAddr
                    }
            STATUS     current
            DESCRIPTION
                "This notification is generated when the IPsec phase-1 unsupported
                attribute failure occurs."
            ::= { hh3cIKENotifications 9 }

        hh3cIKEUnsportExchTypeFailure NOTIFICATION-TYPE
            OBJECTS {
                        hh3cIKETunLocalAddr,
                        hh3cIKETunRemoteAddr,
                        hh3cIKETunIndex,
                        hh3cIKETunLocalInetAddrType,
                        hh3cIKETunLocalInetAddr,
                        hh3cIKETunRemoteInetAddrType,
                        hh3cIKETunRemoteInetAddr
                    }
            STATUS     current
            DESCRIPTION
                "This notification is generated when the IPsec phase-1
                unsupported exchange type failure occurs."
            ::= { hh3cIKENotifications 10 }

        hh3cIKEInvalidIdFailure NOTIFICATION-TYPE
            OBJECTS {
                        hh3cIKETunLocalAddr,
                        hh3cIKETunRemoteAddr,
                        hh3cIKEIdInformation,
                        hh3cIKETunIndex,
                        hh3cIKETunLocalInetAddrType,
                        hh3cIKETunLocalInetAddr,
                        hh3cIKETunRemoteInetAddrType,
                        hh3cIKETunRemoteInetAddr
                    }
            STATUS     current
            DESCRIPTION
                "This notification is generated when the IPsec phase-1
                invalid id failure occurs."
            ::= { hh3cIKENotifications 11 }

        hh3cIKEInvalidProtocolFailure NOTIFICATION-TYPE
            OBJECTS {
                        hh3cIKETunLocalAddr,
                        hh3cIKETunRemoteAddr,
                        hh3cIKEProtocolNum,
                        hh3cIKETunIndex,
                        hh3cIKETunLocalInetAddrType,
                        hh3cIKETunLocalInetAddr,
                        hh3cIKETunRemoteInetAddrType,
                        hh3cIKETunRemoteInetAddr
                        }
            STATUS     current
            DESCRIPTION
                "This notification is generated when the processing for
                an IPsec Phase-1 IKE Tunnel has a protocol related errors."
            ::= { hh3cIKENotifications 12 }

        hh3cIKECertTypeUnsuppFailure NOTIFICATION-TYPE
            OBJECTS {
                        hh3cIKETunLocalAddr,
                        hh3cIKETunRemoteAddr,
                        hh3cIKECertInformation,
                        hh3cIKETunIndex,
                        hh3cIKETunLocalInetAddrType,
                        hh3cIKETunLocalInetAddr,
                        hh3cIKETunRemoteInetAddrType,
                        hh3cIKETunRemoteInetAddr
                    }
            STATUS     current
            DESCRIPTION
                "This notification is generated when the IPsec phase-1
                unsupported certificate type failure occurs."
            ::= { hh3cIKENotifications 13 }

        hh3cIKEInvalidCertAuthFailure NOTIFICATION-TYPE
            OBJECTS {
                        hh3cIKETunLocalAddr,
                        hh3cIKETunRemoteAddr,
                        hh3cIKECertInformation,
                        hh3cIKETunIndex,
                        hh3cIKETunLocalInetAddrType,
                        hh3cIKETunLocalInetAddr,
                        hh3cIKETunRemoteInetAddrType,
                        hh3cIKETunRemoteInetAddr
                    }
            STATUS     current
            DESCRIPTION
                "This notification is generated when the IPsec phase-1
                invalid certificate authorization failure occurs."
            ::= { hh3cIKENotifications 14 }

        hh3cIKElInvalidSignFailure NOTIFICATION-TYPE
            OBJECTS {
                        hh3cIKETunLocalAddr,
                        hh3cIKETunRemoteAddr,
                        hh3cIKECertInformation,
                        hh3cIKETunIndex,
                        hh3cIKETunLocalInetAddrType,
                        hh3cIKETunLocalInetAddr,
                        hh3cIKETunRemoteInetAddrType,
                        hh3cIKETunRemoteInetAddr
                    }
            STATUS     current
            DESCRIPTION
                "This notification is generated when the IPsec phase-1
                invalid signature failure occurs."
            ::= { hh3cIKENotifications 15 }

        hh3cIKECertUnavailableFailure NOTIFICATION-TYPE
            OBJECTS {
                        hh3cIKETunLocalAddr,
                        hh3cIKETunRemoteAddr,
                        hh3cIKECertInformation,
                        hh3cIKETunIndex,
                        hh3cIKETunLocalInetAddrType,
                        hh3cIKETunLocalInetAddr,
                        hh3cIKETunRemoteInetAddrType,
                        hh3cIKETunRemoteInetAddr
                    }
            STATUS     current
            DESCRIPTION
                "This notification is generated when the IPsec phase-1
                certificate unavailable failure occurs."
            ::= { hh3cIKENotifications 16 }

        hh3cIKEProposalAdd NOTIFICATION-TYPE
                    OBJECTS { hh3cIKEProposalNumber,
                              hh3cIKEProposalSize
                            }
                    STATUS     current
                    DESCRIPTION
                "This notification is generated when an IKE proposal is added."
                    ::= { hh3cIKENotifications 17 }

        hh3cIKEProposalDel NOTIFICATION-TYPE
                    OBJECTS { hh3cIKEProposalNumber,
                              hh3cIKEProposalSize
                            }
                    STATUS     current
                    DESCRIPTION
                "This notification is generated when an IKE proposal is deleted."
                    ::= { hh3cIKENotifications 18 }

-- =======================================
-- Begin the hh3cIKEScalarObjects.
-- =======================================
    hh3cIKEScalarObjects OBJECT IDENTIFIER ::= { hh3cIKEObjects 7 }

    hh3cIKEMIBVersion OBJECT-TYPE
        SYNTAX DisplayString(SIZE(0..255))
        MAX-ACCESS read-only
        STATUS current
        DESCRIPTION
            "Version string of this MIB."
        ::= { hh3cIKEScalarObjects 1 }

-- =======================================
-- Conformance Information
-- =======================================
        hh3cIKEConformance   OBJECT IDENTIFIER
                                 ::= { hh3cIKEMonitor 2 }
        hh3cIKECompliances   OBJECT IDENTIFIER
                                 ::= { hh3cIKEConformance 1 }
        hh3cIKEGroups        OBJECT IDENTIFIER
                                 ::= { hh3cIKEConformance 2 }

-- =======================================
-- Compliance Statements
-- =======================================
        hh3cIKECompliance MODULE-COMPLIANCE
            STATUS current
            DESCRIPTION
                " "
            MODULE -- this module
            MANDATORY-GROUPS
                {
                    hh3cIKETunnelTableGroup,
                    hh3cIKETunnelStatTableGroup,
                    hh3cIKEGlobalStatsGroup,
                    hh3cIKETrapObjectGroup,
                    hh3cIKETrapCntlGroup,
                    hh3cIKETrapGroup,
                    hh3cIKEScalarObjectsGroup
                }
            ::= { hh3cIKECompliances 1 }

    hh3cIKETunnelTableGroup OBJECT-GROUP
        OBJECTS {
            hh3cIKETunLocalType,
            hh3cIKETunLocalValue1,
            hh3cIKETunLocalValue2,
            hh3cIKETunLocalAddr,
            hh3cIKETunRemoteType,
            hh3cIKETunRemoteValue1,
            hh3cIKETunRemoteValue2,
            hh3cIKETunRemoteAddr,
            hh3cIKETunInitiator,
            hh3cIKETunNegoMode,
            hh3cIKETunDiffHellmanGrp,
            hh3cIKETunEncryptAlgo,
            hh3cIKETunHashAlgo,
            hh3cIKETunAuthMethod,
            hh3cIKETunLifeTime,
            hh3cIKETunActiveTime,
            hh3cIKETunRemainTime,
            hh3cIKETunTotalRefreshes,
            hh3cIKETunState,
            hh3cIKETunDpdIntervalTime,
            hh3cIKETunDpdTimeOut,
            hh3cIKETunLocalInetAddrType,
            hh3cIKETunLocalInetAddr,
            hh3cIKETunRemoteInetAddrType,
            hh3cIKETunRemoteInetAddr,
            hh3cIKETunLocalValue3,
            hh3cIKETunRemoteValue3
        }
        STATUS current
        DESCRIPTION
            "The group contains the IKE tunnel's property information."
        ::= { hh3cIKEGroups 1 }


        hh3cIKETunnelStatTableGroup OBJECT-GROUP
            OBJECTS {
                                hh3cIKETunInOctets ,
                                hh3cIKETunInPkts,
                                hh3cIKETunInDropPkts,
                                hh3cIKETunInP2Exchgs,
                                hh3cIKETunInP2ExchgRejets,
                                hh3cIKETunInP2SaDelRequests,
                                hh3cIKETunInP1SaDelRequests,
                                hh3cIKETunInNotifys,
                                hh3cIKETunOutOctets,
                                hh3cIKETunOutPkts,
                                hh3cIKETunOutDropPkts,
                                hh3cIKETunOutP2Exchgs,
                                hh3cIKETunOutP2ExchgRejects,
                                hh3cIKETunOutP2SaDelRequests,
                                hh3cIKETunOutP1SaDelRequests,
                                hh3cIKETunOutNotifys
                                }
            STATUS current
            DESCRIPTION
                "The group contains the IKE tunnel's statistic information."
            ::= { hh3cIKEGroups 2 }

        hh3cIKEGlobalStatsGroup OBJECT-GROUP
            OBJECTS {
                                hh3cIKEGlobalActiveTunnels,
                                hh3cIKEGlobalInOctets,
                                hh3cIKEGlobalInPkts,
                                hh3cIKEGlobalInDropPkts,
                                hh3cIKEGlobalInP2Exchgs,
                                hh3cIKEGlobalInP2ExchgRejects,
                                hh3cIKEGlobalInP2SaDelRequests,
                                hh3cIKEGlobalInNotifys,
                                hh3cIKEGlobalOutOctets,
                                hh3cIKEGlobalOutPkts,
                                hh3cIKEGlobalOutDropPkts,
                                hh3cIKEGlobalOutP2Exchgs,
                                hh3cIKEGlobalOutP2ExchgRejects,
                                hh3cIKEGlobalOutP2SaDelRequests,
                                hh3cIKEGlobalOutNotifys,
                                hh3cIKEGlobalInitTunnels,
                                hh3cIKEGlobalInitTunnelFails,
                                hh3cIKEGlobalRespTunnels,
                                hh3cIKEGlobalRespTunnelFails,
                                hh3cIKEGlobalAuthFails,
                                hh3cIKEGlobalNoSaFails,
                                hh3cIKEGlobalInvalidCookieFails,
                                hh3cIKEGlobalAttrNotSuppFails,
                                hh3cIKEGlobalNoProposalChosenFails,
                                hh3cIKEGlobalUnsportExchTypeFails,
                                hh3cIKEGlobalInvalidIdFails,
                                hh3cIKEGlobalInvalidProFails,
                                hh3cIKEGlobalCertTypeUnsuppFails,
                                hh3cIKEGlobalInvalidCertAuthFails,
                                hh3cIKEGlobalInvalidSignFails,
                                hh3cIKEGlobalCertUnavailableFails
                                }
            STATUS current
            DESCRIPTION
                "The group contains all of the IKE tunnel's statistic information."
            ::= { hh3cIKEGroups 3 }

        hh3cIKETrapObjectGroup OBJECT-GROUP
            OBJECTS {
                                hh3cIKEProposalNumber,
                                hh3cIKEProposalSize,
                                hh3cIKEIdInformation,
                                hh3cIKEProtocolNum,
                                hh3cIKECertInformation
                    }
            STATUS current
            DESCRIPTION
                "The group contains all of trap objects of IKE tunnels."
            ::= { hh3cIKEGroups 4 }

        hh3cIKETrapCntlGroup OBJECT-GROUP
            OBJECTS {
                                hh3cIKETrapGlobalCntl,
                                hh3cIKETunnelStartTrapCntl,
                                hh3cIKETunnelStopTrapCntl,
                                hh3cIKENoSaTrapCntl,
                                hh3cIKEEncryFailureTrapCntl,
                                hh3cIKEDecryFailureTrapCntl,
                                hh3cIKEInvalidProposalTrapCntl,
                                hh3cIKEAuthFailTrapCntl,
                                hh3cIKEInvalidCookieTrapCntl,
                                hh3cIKEInvalidSpiTrapCntl,
                                hh3cIKEAttrNotSuppTrapCntl,
                                hh3cIKEUnsportExchTypeTrapCntl,
                                hh3cIKEInvalidIdTrapCntl,
                                hh3cIKEInvalidProtocolTrapCntl,
                                hh3cIKECertTypeUnsuppTrapCntl,
                                hh3cIKEInvalidCertAuthTrapCntl,
                                hh3cIKEInvalidSignTrapCntl,
                                hh3cIKECertUnavailableTrapCntl,
                                hh3cIKEProposalAddTrapCntl,
                                hh3cIKEProposalDelTrapCntl
                                }
            STATUS current
            DESCRIPTION
                "The group contains all of trap switches of IKE tunnels."
            ::= { hh3cIKEGroups 5 }

        hh3cIKETrapGroup  NOTIFICATION-GROUP
            NOTIFICATIONS {
                                hh3cIKETunnelStart,
                                hh3cIKETunnelStop,
                                hh3cIKENoSaFailure,
                                hh3cIKEEncryFailFailure,
                                hh3cIKEDecryFailFailure,
                                hh3cIKEInvalidProposalFailure,
                                hh3cIKEAuthFailFailure,
                                hh3cIKEInvalidCookieFailure,
                                hh3cIKEAttrNotSuppFailure,
                                hh3cIKEUnsportExchTypeFailure,
                                hh3cIKEInvalidIdFailure,
                                hh3cIKEInvalidProtocolFailure,
                                hh3cIKECertTypeUnsuppFailure,
                                hh3cIKEInvalidCertAuthFailure,
                                hh3cIKElInvalidSignFailure,
                                hh3cIKECertUnavailableFailure,
                                hh3cIKEProposalAdd,
                                hh3cIKEProposalDel
                           }
            STATUS current
            DESCRIPTION
                "The group contains all of trap of IKE tunnels."
            ::= { hh3cIKEGroups 6 }

        hh3cIKEScalarObjectsGroup OBJECT-GROUP
            OBJECTS {
                        hh3cIKEMIBVersion
                    }
            STATUS current
            DESCRIPTION
                "The group contains all of scalar objects of the MIB."
            ::= { hh3cIKEGroups 7 }

    END