CISCO-IPSEC-FLOW-MONITOR-MIB

  • Organization Tivoli Systems and Cisco Systems
  • Last update 2007-10-24

This is a MIB Module for monitoring the structures in IPSec-based Virtual Private Networks. The MIB has been designed to be adopted as an IETF standard. Hence Cisco-specific features of IPSec protocol are excluded from this MIB. Acronyms The following acronyms are used in this document: IPSec: Secure IP Protocol VPN: Virtual Private Network ISAKMP: Internet Security Association and Key Exchange Protocol IKE: Internet Key Exchange Protocol SA: Security Association MM: Main Mode - the process of setting up a Phase 1 SA to secure the exchanges required to setup Phase 2 SAs QM: Quick Mode - the process of setting up Phase 2 Security Associations using a Phase 1 SA. Overview of IPsec MIB The MIB contains six major groups of objects which are used to manage the IPSec Protocol. These groups include a Levels Group, a Phase-1 Group, a Phase-2 Group, a History Group, a Failure Group and a TRAP Control Group. The following table illustrates the structure of the IPSec MIB. The Phase 1 group models objects pertaining to IKE negotiations and tunnels. The Phase 2 group models objects pertaining to IPSec data tunnels. The History group is to aid applications that do trending analysis. The Failure group is to enable an operator to do troubleshooting and debugging of the VPN Router. Further, counters are supported to aid Intrusion Detection. In addition to the five major MIB Groups, there are a number of Notifications. The following table illustrates the name and description of the IPSec TRAPs. For a detailed discussion, please refer to the IETF draft draft-ietf-ipsec-flow-monitoring-mib-00.txt.

MIB content

824 objects
Advertisement

Notifications

26 objects
  • 1.3.6.1.4.1.9.9.171.2.0.1 cikeTunnelStart (current)
  • 1.3.6.1.4.1.9.9.171.2.0.2 cikeTunnelStop (current)
  • 1.3.6.1.4.1.9.9.171.2.0.3 cikeSysFailure (current)
  • 1.3.6.1.4.1.9.9.171.2.0.4 cikeCertCrlFailure (current)
  • 1.3.6.1.4.1.9.9.171.2.0.5 cikeProtocolFailure (current)
  • 1.3.6.1.4.1.9.9.171.2.0.6 cikeNoSa (current)
  • 1.3.6.1.4.1.9.9.171.2.0.7 cipSecTunnelStart (current)
  • 1.3.6.1.4.1.9.9.171.2.0.8 cipSecTunnelStop (current)
  • 1.3.6.1.4.1.9.9.171.2.0.9 cipSecSysFailure (current)
  • 1.3.6.1.4.1.9.9.171.2.0.10 cipSecSetUpFailure (current)
  • 1.3.6.1.4.1.9.9.171.2.0.11 cipSecEarlyTunTerm (current)
  • 1.3.6.1.4.1.9.9.171.2.0.12 cipSecProtocolFailure (current)
  • 1.3.6.1.4.1.9.9.171.2.0.13 cipSecNoSa (current)
  • 1.3.6.1.4.1.9.9.171.2.0.1 cikeTunnelStart (current)
  • 1.3.6.1.4.1.9.9.171.2.0.2 cikeTunnelStop (current)
  • 1.3.6.1.4.1.9.9.171.2.0.3 cikeSysFailure (current)
  • 1.3.6.1.4.1.9.9.171.2.0.4 cikeCertCrlFailure (current)
  • 1.3.6.1.4.1.9.9.171.2.0.5 cikeProtocolFailure (current)
  • 1.3.6.1.4.1.9.9.171.2.0.6 cikeNoSa (current)
  • 1.3.6.1.4.1.9.9.171.2.0.7 cipSecTunnelStart (current)
  • 1.3.6.1.4.1.9.9.171.2.0.8 cipSecTunnelStop (current)
  • 1.3.6.1.4.1.9.9.171.2.0.9 cipSecSysFailure (current)
  • 1.3.6.1.4.1.9.9.171.2.0.10 cipSecSetUpFailure (current)
  • 1.3.6.1.4.1.9.9.171.2.0.11 cipSecEarlyTunTerm (current)
  • 1.3.6.1.4.1.9.9.171.2.0.12 cipSecProtocolFailure (current)
  • 1.3.6.1.4.1.9.9.171.2.0.13 cipSecNoSa (current)

Conformance groups

16 objects
  • 1.3.6.1.4.1.9.9.171.3.1.1 cipSecLevelsGroup (1 members)
  • 1.3.6.1.4.1.9.9.171.3.1.2 cipSecPhaseOneGroup (65 members)
  • 1.3.6.1.4.1.9.9.171.3.1.3 cipSecPhaseTwoGroup (96 members)
  • 1.3.6.1.4.1.9.9.171.3.1.4 cipSecHistoryGroup (101 members)
  • 1.3.6.1.4.1.9.9.171.3.1.5 cipSecFailuresGroup (15 members)
  • 1.3.6.1.4.1.9.9.171.3.1.6 cipSecTrapCntlGroup (13 members)
  • 1.3.6.1.4.1.9.9.171.3.1.7 cipSecNotificationGroup (0 members)
  • 1.3.6.1.4.1.9.9.171.3.1.8 cipSecGWStatsGroup (52 members)
  • 1.3.6.1.4.1.9.9.171.3.1.1 cipSecLevelsGroup (1 members)
  • 1.3.6.1.4.1.9.9.171.3.1.2 cipSecPhaseOneGroup (65 members)
  • 1.3.6.1.4.1.9.9.171.3.1.3 cipSecPhaseTwoGroup (96 members)
  • 1.3.6.1.4.1.9.9.171.3.1.4 cipSecHistoryGroup (101 members)
  • 1.3.6.1.4.1.9.9.171.3.1.5 cipSecFailuresGroup (15 members)
  • 1.3.6.1.4.1.9.9.171.3.1.6 cipSecTrapCntlGroup (13 members)
  • 1.3.6.1.4.1.9.9.171.3.1.7 cipSecNotificationGroup (0 members)
  • 1.3.6.1.4.1.9.9.171.3.1.8 cipSecGWStatsGroup (52 members)

Informations

Last update
2007-10-24
Organization
Tivoli Systems and Cisco Systems
Contact info
Tivoli Systems Research Triangle Park, NC Cisco Systems 170 W Tasman Drive San Jose, CA 95134 USA Tel: +1 800 553-NETS E-mail: cs-ipsecurity@cisco.com

Imports

Revisions

2007-10-24
In the description of cipSecTunHistHcInDecompOctets, cipSecTunHcInOctets has been changed to cipSecTunHistHcInOctets. In the description of cipSecTunHistOutUncompOctets, cipSecTunOutOctets has been changed to cipSecTunHistOutOctets. In the description of cipSecTunHistHcOutUncompOctets, cipSecTunHcOutOctets has been changed to cipSecTunHistHcOutOctets. In the description of cipSecTunHistInDecompOctets, cipSecTunInOctets has been changed to cipSecTunHistInOctets.
2004-10-12
Added two table for media gateway stats information: cikePhase1GWStatsTable (phase-1 IKE) cipSecPhase2GWStatsTable (phase-2 IPsec)
2000-10-13
Changed cipSecSpiValue to Unsigned32. Changed Protocol ranges to start at 0 instead of 1. Removed comment(s) incorrectly indicating this MIB was CiscoExperiment.
2000-08-17
Initial version of this MIB module.
Advertisement