-- *****************************************************************************
-- Juniper-IPsec-Tunnel-MIB
--
-- Juniper Networks Enterprise MIB
-- Extensions for IPsec Tunnel management
--
-- Copyright (c) 2003 Juniper Networks, Inc. All Rights Reserved.
-- *****************************************************************************
Juniper-IPsec-Tunnel-MIB DEFINITIONS::=BEGINIMPORTSMODULE-IDENTITY,OBJECT-TYPE,IpAddress,Counter32,Counter64,Unsigned32FROM SNMPv2-SMI
InterfaceIndexFROM IF-MIB
TEXTUAL-CONVENTION,RowStatus,DisplayStringFROM SNMPv2-TC
MODULE-COMPLIANCE,OBJECT-GROUPFROM SNMPv2-CONF
JuniNextIfIndex, JuniName
FROM Juniper-TC
juniMibs
FROM Juniper-MIBs;juniIpsecTunnelMIB MODULE-IDENTITYLAST-UPDATED"200404062226Z"-- 06-Apr-04 06:26 PM EDTORGANIZATION"Juniper Networks, Inc."CONTACT-INFO" Juniper Networks, Inc.
Postal: 10 Technology Park Drive
Westford, MA 01886-3146
USA
Tel: +1 978 589 5800
Email: mib@Juniper.net"DESCRIPTION"The IPsec Tunnel MIB for the Juniper Networks enterprise."-- Revision HistoryREVISION"200404062226Z"-- 06-Apr-04 06:26 PM EDT - JUNOSe 5.3DESCRIPTION"Initial version of this MIB module."::={ juniMibs 70}
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
-- Textual conventions
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++JuniIpsecIdentityType ::=TEXTUAL-CONVENTIONDISPLAY-HINT"d"STATUScurrentDESCRIPTION"The type of IPsec Phase-1 identity. The Phase-1 identity may be
identified by one of the ID types defined in IPSEC DOI."SYNTAXINTEGER{reserved(0),idIpv4Addr(1),idFqdn(2),idUserFqdn(3),idIpv4AddrSubnet(4),idIpv6Addr(5),idIpv6AddrSubnet(6),idIpv4AddrRange(7),idIpv6AddrRange(8),idDn(9),idDerAsn1Gn(10),idKeyId(11)}
JuniIpsecTransformType ::=TEXTUAL-CONVENTIONDISPLAY-HINT"d"STATUScurrentDESCRIPTION"The transform algorithm for the IPsec tunnel."SYNTAXINTEGER{reserved(0),ahMd5(1),ahSha(2),espDesMd5(3),esp3DesMd5(4),espDesSha(5),esp3DesSha(6),espNullMd5(7),espNullSha(8),espDesNullAuth(9),esp3DesNullAuth(10)}JuniIpsecPfsGroup ::=TEXTUAL-CONVENTIONDISPLAY-HINT"d"STATUScurrentDESCRIPTION"The perfect forward secrecy group.
Group1 - 768-bit DH prime modulus group.
Group2 - 1024-bit DH prime modulus group.
Group5 - 1536-bit DH prime modulus group."SYNTAXINTEGER{noGroup(0),group1(1),group2(2),group5(5)}JuniIpsecTunnelType ::=TEXTUAL-CONVENTIONDISPLAY-HINT"d"STATUScurrentDESCRIPTION"The ipsec tunnel type."SYNTAXINTEGER{signaledTunnel(0),manualTunnel(1)}Spi ::=TEXTUAL-CONVENTIONDISPLAY-HINT"x"STATUScurrentDESCRIPTION"The type of the SPI associated with IPsec Phase-2 security
associations."SYNTAXUnsigned32(0..4294967295)-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
-- Managed objects
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++juniIpsecObjects OBJECTIDENTIFIER::={ juniIpsecTunnelMIB 1}--
-- Major subtrees
--juniIpsecTunnel OBJECTIDENTIFIER::={ juniIpsecObjects 1}juniIpsecSystem OBJECTIDENTIFIER::={ juniIpsecObjects 2}-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
-- IPSEC tunnel group
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
--juniIpsecTunnelNextIfIndex OBJECT IDENTIFIER ::= { juniIpsecTunnel 1 }
--juniIpsecTunnelConfig OBJECT IDENTIFIER ::= { juniIpsecTunnel 2 }
--juniIpsecTunnelStatistics OBJECT IDENTIFIER ::= { juniIpsecTunnel 3 }
--juniIpsecTransformSet OBJECT IDENTIFIER ::= { juniIpsecTunnel 4 }
--juniIpsecGlobalLocalEndpoint OBJECT IDENTIFIER ::= { juniIpsecTunnel 5 }-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
-- IPsec Tunnel Interface Objects
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
--
-- IfIndex selection for creating IPsec tunnel interfaces
--juniIpsecTunnelNextIfIndex OBJECT-TYPESYNTAX JuniNextIfIndex
MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Coordinate ifIndex value allocation for entries in the
juniIpsecTunnelIfTable.
A GET of this object returns the next available ifIndex value to be used
to create an entry in the associated interface table; or zero, if no
valid ifIndex value is available. This object also returns a value of
zero when it is the lexicographic successor of a varbind presented in an
SNMP GETNEXT or GETBULK request, for which circumstance it is assumed
that ifIndex allocation is unintended.
Successive GETs will typically return different values, thus avoiding
collisions among cooperating management clients seeking to create table
entries simultaneously."::={ juniIpsecTunnel 1}--
-- The IPsec Tunnel Configuration
--juniIpsecTunnelInterfaceTable OBJECT-TYPESYNTAXSEQUENCEOF JuniIpsecTunnelInterfaceEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"This table contains entries of IPsec Tunnel interfaces."::={ juniIpsecTunnel 2}juniIpsecTunnelInterfaceEntry OBJECT-TYPESYNTAX JuniIpsecTunnelInterfaceEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"Each entry describes the characteristics of a single IPsec Tunnel
interface.
Creating/deleting entries in this table causes corresponding entries for
be created/deleted in ifTable/ifXTable/juniIfTable."INDEX{ juniIpsecTunnelIfIndex }::={ juniIpsecTunnelInterfaceTable 1}
JuniIpsecTunnelInterfaceEntry ::=SEQUENCE{
juniIpsecTunnelIfIndex InterfaceIndex,
juniIpsecTunnelName DisplayString,
juniIpsecTunnelType JuniIpsecTunnelType,
juniIpsecTunnelTransportVirtualRouter JuniName,
juniIpsecTunnelLocalEndPt IpAddress,
juniIpsecTunnelRemoteEndPt IpAddress,
juniIpsecTunnelTransformSet DisplayString,
juniIpsecTunnelSrcType JuniIpsecIdentityType,
juniIpsecTunnelSrcAddr IpAddress,
juniIpsecTunnelSrcName DisplayString,
juniIpsecTunnelDstType JuniIpsecIdentityType,
juniIpsecTunnelDstAddr IpAddress,
juniIpsecTunnelDstName DisplayString,
juniIpsecTunnelBackupDstType JuniIpsecIdentityType,
juniIpsecTunnelBackupDstAddr IpAddress,
juniIpsecTunnelBackupDstName DisplayString,
juniIpsecTunnelLocalIdType JuniIpsecIdentityType,
juniIpsecTunnelLocalIdAddr1 IpAddress,
juniIpsecTunnelLocalIdAddr2 IpAddress,
juniIpsecTunnelRemoteIdType JuniIpsecIdentityType,
juniIpsecTunnelRemoteIdAddr1 IpAddress,
juniIpsecTunnelRemoteIdAddr2 IpAddress,
juniIpsecTunnelLifeTimeSecs Unsigned32,
juniIpsecTunnelLifeTimeKBs Unsigned32,
juniIpsecTunnelPfsGroup JuniIpsecPfsGroup,
juniIpsecTunnelMtu Unsigned32,
juniIpsecTunnelInboundSpi1 Spi,
juniIpsecTunnelInboundTransform1 JuniIpsecTransformType,
juniIpsecTunnelInboundSpi2 Spi,
juniIpsecTunnelInboundTransform2 JuniIpsecTransformType,
juniIpsecTunnelInboundSpi3 Spi,
juniIpsecTunnelInboundTransform3 JuniIpsecTransformType,
juniIpsecTunnelInboundSpi4 Spi,
juniIpsecTunnelInboundTransform4 JuniIpsecTransformType,
juniIpsecTunnelOutboundSpi Spi,
juniIpsecTunnelOutboundTransform JuniIpsecTransformType,
juniIpsecTunnelRowStatus RowStatus}juniIpsecTunnelIfIndex OBJECT-TYPESYNTAXInterfaceIndexMAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The ifIndex of the IPsec tunnel interface. When creating entries in
this table, suitable values for this object are determined by reading
juniIpsecTunnelNextIfIndex."::={ juniIpsecTunnelInterfaceEntry 1}
juniIpsecTunnelName OBJECT-TYPESYNTAXDisplayString(SIZE(0..80))MAX-ACCESSread-createSTATUScurrentDESCRIPTION"The administratively assigned name for this IPsec Tunnel interface.
Before configuring other tunnel attributes, IPsec tunnel has to be
created with minimum attributes (tunnel name and rowStatus)."::={ juniIpsecTunnelInterfaceEntry 2}juniIpsecTunnelType OBJECT-TYPESYNTAX JuniIpsecTunnelType
MAX-ACCESSread-createSTATUScurrentDESCRIPTION"The configured mode for this IPsec Tunnel interface."DEFVAL{ signaledTunnel }::={ juniIpsecTunnelInterfaceEntry 3}juniIpsecTunnelTransportVirtualRouter OBJECT-TYPESYNTAX JuniName
MAX-ACCESSread-createSTATUScurrentDESCRIPTION"The transport virtual router associated with this IPsec tunnel
interface. This object need not be set when creating row entries. Note
that the default when this object is not specified is the router
associated with the agent acting on the management request."
DEFVAL{"default"}::={ juniIpsecTunnelInterfaceEntry 4}juniIpsecTunnelLocalEndPt OBJECT-TYPESYNTAXIpAddressMAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The tunnel local endpoint."::={ juniIpsecTunnelInterfaceEntry 5}juniIpsecTunnelRemoteEndPt OBJECT-TYPESYNTAXIpAddressMAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The tunnel remote endpoint."::={ juniIpsecTunnelInterfaceEntry 6}juniIpsecTunnelTransformSet OBJECT-TYPESYNTAXDisplayString(SIZE(0..64))MAX-ACCESSread-createSTATUScurrentDESCRIPTION"The transform set. It refers to a transform set that is defined in
the transform set table."::={ juniIpsecTunnelInterfaceEntry 7}juniIpsecTunnelSrcType OBJECT-TYPE
SYNTAX JuniIpsecIdentityType
MAX-ACCESSread-createSTATUScurrentDESCRIPTION"The tunnel source type. The tunnel source may be identified by:
1. an IP(V4) address, or
2. a fully qualified domain name string, or
3. a user fully qualified domain name string."DEFVAL{ idIpv4Addr }::={ juniIpsecTunnelInterfaceEntry 8}juniIpsecTunnelSrcAddr OBJECT-TYPESYNTAXIpAddressMAX-ACCESSread-createSTATUScurrentDESCRIPTION"The tunnel source IP(V4) address."::={ juniIpsecTunnelInterfaceEntry 9}juniIpsecTunnelSrcName OBJECT-TYPESYNTAXDisplayString(SIZE(0..80))MAX-ACCESSread-createSTATUScurrentDESCRIPTION"The tunnel source Name."::={ juniIpsecTunnelInterfaceEntry 10}juniIpsecTunnelDstType OBJECT-TYPESYNTAX JuniIpsecIdentityType
MAX-ACCESSread-createSTATUScurrent
DESCRIPTION"The tunnel destination type. The tunnel destination may be identified
by:
1. an IP(V4) address, or
2. a fully qualified domain name string, or
3. a user fully qualified domain name string."DEFVAL{ idIpv4Addr }::={ juniIpsecTunnelInterfaceEntry 11}juniIpsecTunnelDstAddr OBJECT-TYPESYNTAXIpAddressMAX-ACCESSread-createSTATUScurrentDESCRIPTION"The tunnel destination IP(V4) address."::={ juniIpsecTunnelInterfaceEntry 12}juniIpsecTunnelDstName OBJECT-TYPESYNTAXDisplayString(SIZE(0..80))MAX-ACCESSread-createSTATUScurrentDESCRIPTION"The tunnel destination Name."::={ juniIpsecTunnelInterfaceEntry 13}juniIpsecTunnelBackupDstType OBJECT-TYPESYNTAX JuniIpsecIdentityType
MAX-ACCESSread-createSTATUScurrentDESCRIPTION"The tunnel backup destination type. The tunnel backup destination
type has to be the same as the tunnel destination type
The tunnel destination may be identified by:
1. an IP(V4) address, or
2. a fully qualified domain name string,
3. a user fully qualified domain name string."DEFVAL{ idIpv4Addr }::={ juniIpsecTunnelInterfaceEntry 14}juniIpsecTunnelBackupDstAddr OBJECT-TYPESYNTAXIpAddressMAX-ACCESSread-createSTATUScurrentDESCRIPTION"The tunnel backup destination IP(V4) address."::={ juniIpsecTunnelInterfaceEntry 15}juniIpsecTunnelBackupDstName OBJECT-TYPESYNTAXDisplayString(SIZE(0..80))MAX-ACCESSread-createSTATUScurrentDESCRIPTION"The tunnel backup destination Name."::={ juniIpsecTunnelInterfaceEntry 16}juniIpsecTunnelLocalIdType OBJECT-TYPESYNTAX JuniIpsecIdentityType
MAX-ACCESSread-createSTATUScurrentDESCRIPTION
"The tunnel phase-2 local identity type. The tunnel local identity type
may be identified by:
1. an IP address, or
2. an IP address subnet, or
3. an IP address range."DEFVAL{ idIpv4Addr }::={ juniIpsecTunnelInterfaceEntry 17}juniIpsecTunnelLocalIdAddr1 OBJECT-TYPESYNTAXIpAddressMAX-ACCESSread-createSTATUScurrentDESCRIPTION"The tunnel local phase-2 identity IP address 1."::={ juniIpsecTunnelInterfaceEntry 18}juniIpsecTunnelLocalIdAddr2 OBJECT-TYPESYNTAXIpAddressMAX-ACCESSread-createSTATUScurrentDESCRIPTION"The tunnel local phase-2 identity IP address 2 in the
case the identity type is an IP address range.
The tunnel local phase-2 identity netmask in the
case the identity type is an IP address subnet."::={ juniIpsecTunnelInterfaceEntry 19}juniIpsecTunnelRemoteIdType OBJECT-TYPESYNTAX JuniIpsecIdentityType
MAX-ACCESSread-createSTATUScurrentDESCRIPTION"The tunnel phase-2 remote identity type. The tunnel remote identity
type may be identified by:
1. an IP address, or
2. an IP address subnet, or
3. an IP address range."DEFVAL{ idIpv4Addr }::={ juniIpsecTunnelInterfaceEntry 20}juniIpsecTunnelRemoteIdAddr1 OBJECT-TYPESYNTAXIpAddressMAX-ACCESSread-createSTATUScurrentDESCRIPTION"The tunnel remote phase-2 identity IP address 1."::={ juniIpsecTunnelInterfaceEntry 21}juniIpsecTunnelRemoteIdAddr2 OBJECT-TYPESYNTAXIpAddressMAX-ACCESSread-createSTATUScurrentDESCRIPTION"The tunnel remote phase-2 identity IP address 2 in the
case the identity type is an IP address range.
The tunnel remote phase-2 identity netmask in the
case the identity type is an IP address subnet."::={ juniIpsecTunnelInterfaceEntry 22}juniIpsecTunnelLifeTimeSecs OBJECT-TYPESYNTAXUnsigned32(1800..864000)UNITS"seconds"MAX-ACCESSread-createSTATUScurrentDESCRIPTION
"The tunnel lifetime in seconds."::={ juniIpsecTunnelInterfaceEntry 23}juniIpsecTunnelLifeTimeKBs OBJECT-TYPESYNTAXUnsigned32(102400..4294967295)UNITS"kilobytes"MAX-ACCESSread-createSTATUScurrentDESCRIPTION"The tunnel lifetime in kilobytes."::={ juniIpsecTunnelInterfaceEntry 24}juniIpsecTunnelPfsGroup OBJECT-TYPESYNTAX JuniIpsecPfsGroup
MAX-ACCESSread-createSTATUScurrentDESCRIPTION"The tunnel perfect forward secrecty group."::={ juniIpsecTunnelInterfaceEntry 25}juniIpsecTunnelMtu OBJECT-TYPESYNTAXUnsigned32(160..9000)MAX-ACCESSread-createSTATUScurrentDESCRIPTION"The tunnel MTU."::={ juniIpsecTunnelInterfaceEntry 26}juniIpsecTunnelInboundSpi1 OBJECT-TYPE
SYNTAX Spi
MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The tunnel inbound SPI 1."::={ juniIpsecTunnelInterfaceEntry 27}juniIpsecTunnelInboundTransform1 OBJECT-TYPESYNTAX JuniIpsecTransformType
MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The tunnel inbound transform 1."::={ juniIpsecTunnelInterfaceEntry 28}juniIpsecTunnelInboundSpi2 OBJECT-TYPESYNTAX Spi
MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The tunnel inbound SPI 2."::={ juniIpsecTunnelInterfaceEntry 29}juniIpsecTunnelInboundTransform2 OBJECT-TYPESYNTAX JuniIpsecTransformType
MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The tunnel inbound transform 2."::={ juniIpsecTunnelInterfaceEntry 30}juniIpsecTunnelInboundSpi3 OBJECT-TYPESYNTAX Spi
MAX-ACCESSread-only
STATUScurrentDESCRIPTION"The tunnel inbound SPI 3."::={ juniIpsecTunnelInterfaceEntry 31}juniIpsecTunnelInboundTransform3 OBJECT-TYPESYNTAX JuniIpsecTransformType
MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The tunnel inbound transform 3."::={ juniIpsecTunnelInterfaceEntry 32}juniIpsecTunnelInboundSpi4 OBJECT-TYPESYNTAX Spi
MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The tunnel inbound SPI 4."::={ juniIpsecTunnelInterfaceEntry 33}juniIpsecTunnelInboundTransform4 OBJECT-TYPESYNTAX JuniIpsecTransformType
MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The tunnel inbound transform 4."::={ juniIpsecTunnelInterfaceEntry 34}juniIpsecTunnelOutboundSpi OBJECT-TYPESYNTAX Spi
MAX-ACCESSread-onlySTATUScurrentDESCRIPTION
"The tunnel outbound SPI."::={ juniIpsecTunnelInterfaceEntry 35}juniIpsecTunnelOutboundTransform OBJECT-TYPESYNTAX JuniIpsecTransformType
MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The tunnel outbound transform."::={ juniIpsecTunnelInterfaceEntry 36}juniIpsecTunnelRowStatus OBJECT-TYPESYNTAXRowStatusMAX-ACCESSread-createSTATUScurrentDESCRIPTION"Controls creation/deletion of entries in this table according to the
RowStatus textual convention, constrained to support the following
values only:
createAndGo
destroy
To create an entry in this table, the following entry objects MUST be
explicitly configured:
juniIpsecTunnelIfRowStatus
juniIpsecTunnelName
In addition, when creating an entry the following condition must hold:
A value for juniIpsecTunnelIfIndex must have been determined
previously, typically by reading juniIpsecTunnelNextIfIndex.
Once created, the following objects may not be modified:
juniIpsecTunnelName
juniIpsecTunnelVirtualRouter
A corresponding entry in ifTable/ifXTable/juniIfTable is created/
destroyed as a result of creating/destroying an entry in this table."::={ juniIpsecTunnelInterfaceEntry 37}--
-- Ipsec tunnel interface statistics
--juniIpsecTunnelStatTable OBJECT-TYPESYNTAXSEQUENCEOF JuniIpsecTunnelStatEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The IPsec tunnel interface statistics table. Describes the IPsec
tunnel inbound/outbound statistics on IPsec de/encapsulation,
de/encryption, and related error statistics."::={ juniIpsecTunnel 3}juniIpsecTunnelStatEntry OBJECT-TYPESYNTAX JuniIpsecTunnelStatEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"Describes the ipsec traffic statistics of the ipsec tunnel interface."INDEX{ juniIpsecTunnelStatIfIndex }::={ juniIpsecTunnelStatTable 1}
JuniIpsecTunnelStatEntry ::=SEQUENCE{
juniIpsecTunnelStatIfIndex InterfaceIndex,
juniIpsecTunnelStatInbUserRecvPkts Counter64,
juniIpsecTunnelStatInbUserRecvOctets Counter64,
juniIpsecTunnelStatInbAccRecvPkts Counter64,
juniIpsecTunnelStatInbAccRecvOctets Counter64,
juniIpsecTunnelStatInbAuthErrs Counter32,
juniIpsecTunnelStatInbReplayErrs Counter32,
juniIpsecTunnelStatInbPolicyErrs Counter32,
juniIpsecTunnelStatInbOtherRecvErrs Counter32,
juniIpsecTunnelStatInbDecryptErrs Counter32,
juniIpsecTunnelStatInbPadErrs Counter32,
juniIpsecTunnelStatOutbUserRecvPkts Counter64,
juniIpsecTunnelStatOutbUserRecvOctets Counter64,
juniIpsecTunnelStatOutbAccRecvPkts Counter64,
juniIpsecTunnelStatOutbAccRecvOctets Counter64,
juniIpsecTunnelOutbOtherTxErrs Counter32,
juniIpsecTunnelOutbPolicyErrs Counter32}juniIpsecTunnelStatIfIndex OBJECT-TYPESYNTAXInterfaceIndexMAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"Same value as ifIndex for the corresponding entry in Interfaces
MIB ifTable."::={ juniIpsecTunnelStatEntry 1}juniIpsecTunnelStatInbUserRecvPkts OBJECT-TYPESYNTAXCounter64MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The total number of inbound user packets (non-error) received
for this IPsec tunnel."::={ juniIpsecTunnelStatEntry 2}juniIpsecTunnelStatInbUserRecvOctets OBJECT-TYPESYNTAXCounter64MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The total number of inbound user octets (non-error) received
for this IPsec tunnel."::={ juniIpsecTunnelStatEntry 3}juniIpsecTunnelStatInbAccRecvPkts OBJECT-TYPESYNTAXCounter64MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The total number of inbound encapsulated packets received for
this IPsec tunnel."::={ juniIpsecTunnelStatEntry 4}juniIpsecTunnelStatInbAccRecvOctets OBJECT-TYPESYNTAXCounter64MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The total number of inbound encapsulated octets received for
this IPsec tunnel."::={ juniIpsecTunnelStatEntry 5}juniIpsecTunnelStatInbAuthErrs OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-only
STATUScurrentDESCRIPTION"The total number of inbound packets with authentication errors
received for this IPsec tunnel."::={ juniIpsecTunnelStatEntry 6}juniIpsecTunnelStatInbReplayErrs OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The total number of inbound packets with replay errors received
for this IPsec tunnel."::={ juniIpsecTunnelStatEntry 7}juniIpsecTunnelStatInbPolicyErrs OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The total number of inbound packets with inbound policy errors
received for this IPsec tunnel."::={ juniIpsecTunnelStatEntry 8}juniIpsecTunnelStatInbOtherRecvErrs OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The total number of inbound packets with other Rx errors
received for this IPsec tunnel."::={ juniIpsecTunnelStatEntry 9}
juniIpsecTunnelStatInbDecryptErrs OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The total number of inbound packets with decryption errors
received for this IPsec tunnel."::={ juniIpsecTunnelStatEntry 10}juniIpsecTunnelStatInbPadErrs OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The total number of inbound packets with pad errors
received for this IPsec tunnel."::={ juniIpsecTunnelStatEntry 11}juniIpsecTunnelStatOutbUserRecvPkts OBJECT-TYPESYNTAXCounter64MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The total number of outbound user packets received
for this IPsec tunnel."::={ juniIpsecTunnelStatEntry 12}juniIpsecTunnelStatOutbUserRecvOctets OBJECT-TYPESYNTAXCounter64MAX-ACCESSread-onlySTATUScurrentDESCRIPTION
"The total number of outbound user octets received
for this IPsec tunnel."::={ juniIpsecTunnelStatEntry 13}juniIpsecTunnelStatOutbAccRecvPkts OBJECT-TYPESYNTAXCounter64MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The total number of encapsulated outbound packets received for
this IPsec tunnel."::={ juniIpsecTunnelStatEntry 14}juniIpsecTunnelStatOutbAccRecvOctets OBJECT-TYPESYNTAXCounter64MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The total number of encapsulated outbound octets received for
this IPsec tunnel."::={ juniIpsecTunnelStatEntry 15}juniIpsecTunnelOutbOtherTxErrs OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The total number of outbound packets with other TX errors
for this IPsec tunnel."::={ juniIpsecTunnelStatEntry 16}juniIpsecTunnelOutbPolicyErrs OBJECT-TYPESYNTAXCounter32
MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The total number of outbound packets with outbound policy
errors for this IPsec tunnel."::={ juniIpsecTunnelStatEntry 17}--
-- IPsec Transform Set
--juniIpsecTunnelTransformSetTable OBJECT-TYPESYNTAXSEQUENCEOF JuniIpsecTunnelTransformSetEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"This table contains entries of IPsec transform sets defined
for this router."::={ juniIpsecTunnel 4}juniIpsecTunnelTransformSetEntry OBJECT-TYPESYNTAX JuniIpsecTunnelTransformSetEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"Each entry describes a transform set that contains up to 6 IPsec
transforms. The transform set name is referenced by the IPsec tunnel
as its local IPsec policy."INDEX{ juniIpsecTunnelTransformSetName }::={ juniIpsecTunnelTransformSetTable 1}
JuniIpsecTunnelTransformSetEntry ::=SEQUENCE{
juniIpsecTunnelTransformSetName DisplayString,
juniIpsecTunnelTransform1 JuniIpsecTransformType,
juniIpsecTunnelTransform2 JuniIpsecTransformType,
juniIpsecTunnelTransform3 JuniIpsecTransformType,
juniIpsecTunnelTransform4 JuniIpsecTransformType,
juniIpsecTunnelTransform5 JuniIpsecTransformType,
juniIpsecTunnelTransform6 JuniIpsecTransformType,
juniIpsecTunnelTransformSetRowStatus RowStatus}juniIpsecTunnelTransformSetName OBJECT-TYPESYNTAXDisplayString(SIZE(0..64))MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The name of the IPsec tunnel transform set."::={ juniIpsecTunnelTransformSetEntry 1}juniIpsecTunnelTransform1 OBJECT-TYPESYNTAX JuniIpsecTransformType
MAX-ACCESSread-createSTATUScurrentDESCRIPTION"The first IPsec transform in the transform set."DEFVAL{ reserved }::={ juniIpsecTunnelTransformSetEntry 2}juniIpsecTunnelTransform2 OBJECT-TYPESYNTAX JuniIpsecTransformType
MAX-ACCESSread-createSTATUScurrentDESCRIPTION"The second IPsec transform in the transform set."DEFVAL{ reserved }::={ juniIpsecTunnelTransformSetEntry 3}juniIpsecTunnelTransform3 OBJECT-TYPESYNTAX JuniIpsecTransformType
MAX-ACCESSread-createSTATUScurrentDESCRIPTION"The third IPsec transform in the transform set."DEFVAL{ reserved }::={ juniIpsecTunnelTransformSetEntry 4}juniIpsecTunnelTransform4 OBJECT-TYPESYNTAX JuniIpsecTransformType
MAX-ACCESSread-createSTATUScurrentDESCRIPTION"The fourth IPsec transform in the transform set."::={ juniIpsecTunnelTransformSetEntry 5}juniIpsecTunnelTransform5 OBJECT-TYPESYNTAX JuniIpsecTransformType
MAX-ACCESSread-createSTATUScurrentDESCRIPTION"The fifth IPsec transform in the transform set."DEFVAL{ reserved }
::={ juniIpsecTunnelTransformSetEntry 6}juniIpsecTunnelTransform6 OBJECT-TYPESYNTAX JuniIpsecTransformType
MAX-ACCESSread-createSTATUScurrentDESCRIPTION"The sixth IPsec transform in the transform set."DEFVAL{ reserved }::={ juniIpsecTunnelTransformSetEntry 7}juniIpsecTunnelTransformSetRowStatus OBJECT-TYPESYNTAXRowStatusMAX-ACCESSread-createSTATUScurrentDESCRIPTION"Controls creation/deletion of entries in this table according to the
RowStatus textual convention, constrained to support the following
values only:
createAndGo
destroy
To create an entry in this table, the following entry objects MUST be
explicitly configured:
juniIpsecTunnelTransformSetRowStatus
juniIpsecTunnelTransformSetName
juniIpsecTunnelTransform1."::={ juniIpsecTunnelTransformSetEntry 8}--
-- IPsec Global Local Endpoint
--juniIpsecTunnelGlobalLocalEndpointTable OBJECT-TYPESYNTAXSEQUENCEOF JuniIpsecTunnelGlobalLocalEndpointEntry
MAX-ACCESSnot-accessible
STATUScurrentDESCRIPTION"This table contains entries of global local endpoint for the IPsec
tunnel. There is one global local endpoint for each transport virtual
router if configured."::={ juniIpsecTunnel 5}juniIpsecTunnelGlobalLocalEndpointEntry OBJECT-TYPESYNTAX JuniIpsecTunnelGlobalLocalEndpointEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"Each entry defines the global local endpoint for the transport virtual
router."INDEX{ juniIpsecTunnelTransportVrRouterIdx }::={ juniIpsecTunnelGlobalLocalEndpointTable 1}
JuniIpsecTunnelGlobalLocalEndpointEntry ::=SEQUENCE{
juniIpsecTunnelTransportVrRouterIdx Unsigned32,
juniIpsecTunnelGlobalLocalEndpoint IpAddress,
juniIpsecTunnelGlobalLocalEndpointRowStatus RowStatus}juniIpsecTunnelTransportVrRouterIdx OBJECT-TYPESYNTAXUnsigned32MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The transport virtual router for the global local endpoint."::={ juniIpsecTunnelGlobalLocalEndpointEntry 1}
juniIpsecTunnelGlobalLocalEndpoint OBJECT-TYPESYNTAXIpAddressMAX-ACCESSread-createSTATUScurrentDESCRIPTION"The global local endpoint for the transport virtual router."::={ juniIpsecTunnelGlobalLocalEndpointEntry 2}juniIpsecTunnelGlobalLocalEndpointRowStatus OBJECT-TYPESYNTAXRowStatusMAX-ACCESSread-createSTATUScurrentDESCRIPTION"Controls creation/deletion of entries in this table according to the
RowStatus textual convention, constrained to support the following
values only:
createAndGo
destroy
To create an entry in this table, the following entry objects MUST be
explicitly configured:
juniIpsecTunnelGlobalLocalEndpoint
juniIpsecTunnelTransportVrRouterIdx
Once created, the global local endpoint can not be changed unless there
is no IPsec tunnel references to the local endpoint."::={ juniIpsecTunnelGlobalLocalEndpointEntry 3}-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
-- IPsec System Group
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++juniIpsecTunnelSystemStats OBJECTIDENTIFIER::={ juniIpsecSystem 1}--
-- IPsec System-level Status
--juniIpsecSummaryStatsTotalTunnels OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The total number of tunnels"::={ juniIpsecTunnelSystemStats 1}juniIpsecSummaryStatsAdminStatusEnabled OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The total number of tunnels with administrative status enabled"::={ juniIpsecTunnelSystemStats 2}juniIpsecSummaryStatsAdminStatusDisabled OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The total number of tunnels with administrative status disabled"::={ juniIpsecTunnelSystemStats 3}juniIpsecSummaryStatsOperStatusUp OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The total number of tunnels with operational status up"::={ juniIpsecTunnelSystemStats 4}
juniIpsecSummaryStatsOperStatusDown OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The total number of tunnels with operational status down"::={ juniIpsecTunnelSystemStats 5}juniIpsecSummaryStatsOperStatusNotPresent OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The total number of tunnels with operational status not-present"::={ juniIpsecTunnelSystemStats 6}-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
-- Conformance information
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++juniIpsecTunnelMIBConformance OBJECTIDENTIFIER::={ juniIpsecTunnelMIB 2}juniIpsecTunnelMIBCompliances OBJECTIDENTIFIER::={ juniIpsecTunnelMIBConformance 1}juniIpsecTunnelMIBGroups OBJECTIDENTIFIER::={ juniIpsecTunnelMIBConformance 2}
--
-- compliance statements
--juniIpsecTunnelCompliance MODULE-COMPLIANCESTATUSobsoleteDESCRIPTION"The compliance statement for SNMPv2 entities which implement the IPsec
Tunnel MIB."MODULE-- this moduleMANDATORY-GROUPS{
juniIpsecTunnelConfigGroup,
juniIpsecTunnelStatsGroup,
juniIpsecTransformSetGroup,
juniIpsecGlobalLocalEndpointGroup }::={ juniIpsecTunnelMIBCompliances 1}juniIpsecTunnelCompliance2 MODULE-COMPLIANCESTATUScurrentDESCRIPTION"The compliance statement for SNMPv2 entities which implement the IPsec
Tunnel MIB."MODULE-- this moduleMANDATORY-GROUPS{
juniIpsecTunnelConfigGroup,
juniIpsecTunnelStatsGroup,
juniIpsecTransformSetGroup,
juniIpsecGlobalLocalEndpointGroup,
juniIpsecTunnelSystemStatsGroup }::={ juniIpsecTunnelMIBCompliances 2}--
-- units of conformance
--juniIpsecTunnelConfigGroup OBJECT-GROUPOBJECTS{
juniIpsecTunnelNextIfIndex,
juniIpsecTunnelName,
juniIpsecTunnelType,
juniIpsecTunnelTransportVirtualRouter,
juniIpsecTunnelLocalEndPt,
juniIpsecTunnelRemoteEndPt,
juniIpsecTunnelTransformSet,
juniIpsecTunnelSrcType,
juniIpsecTunnelSrcAddr,
juniIpsecTunnelSrcName,
juniIpsecTunnelDstType,
juniIpsecTunnelDstAddr,
juniIpsecTunnelDstName,
juniIpsecTunnelBackupDstType,
juniIpsecTunnelBackupDstAddr,
juniIpsecTunnelBackupDstName,
juniIpsecTunnelLocalIdType,
juniIpsecTunnelLocalIdAddr1,
juniIpsecTunnelLocalIdAddr2,
juniIpsecTunnelRemoteIdType,
juniIpsecTunnelRemoteIdAddr1,
juniIpsecTunnelRemoteIdAddr2,
juniIpsecTunnelLifeTimeSecs,
juniIpsecTunnelLifeTimeKBs,
juniIpsecTunnelPfsGroup,
juniIpsecTunnelMtu,
juniIpsecTunnelInboundSpi1,
juniIpsecTunnelInboundTransform1,
juniIpsecTunnelInboundSpi2,
juniIpsecTunnelInboundTransform2,
juniIpsecTunnelInboundSpi3,
juniIpsecTunnelInboundTransform3,
juniIpsecTunnelInboundSpi4,
juniIpsecTunnelInboundTransform4,
juniIpsecTunnelOutboundSpi,
juniIpsecTunnelOutboundTransform,
juniIpsecTunnelRowStatus }STATUScurrentDESCRIPTION
"A collection of objects providing configuration information of the
IPsec tunnel."::={ juniIpsecTunnelMIBGroups 1}juniIpsecTunnelStatsGroup OBJECT-GROUPOBJECTS{
juniIpsecTunnelStatInbUserRecvPkts,
juniIpsecTunnelStatInbUserRecvOctets,
juniIpsecTunnelStatInbAccRecvPkts,
juniIpsecTunnelStatInbAccRecvOctets,
juniIpsecTunnelStatInbAuthErrs,
juniIpsecTunnelStatInbReplayErrs,
juniIpsecTunnelStatInbPolicyErrs,
juniIpsecTunnelStatInbOtherRecvErrs,
juniIpsecTunnelStatInbDecryptErrs,
juniIpsecTunnelStatInbPadErrs,
juniIpsecTunnelStatOutbUserRecvPkts,
juniIpsecTunnelStatOutbUserRecvOctets,
juniIpsecTunnelStatOutbAccRecvPkts,
juniIpsecTunnelStatOutbAccRecvOctets,
juniIpsecTunnelOutbOtherTxErrs,
juniIpsecTunnelOutbPolicyErrs }STATUScurrentDESCRIPTION"A collection of objects providing satistics information of the IPsec
tunnel."::={ juniIpsecTunnelMIBGroups 2}juniIpsecTransformSetGroup OBJECT-GROUPOBJECTS{
juniIpsecTunnelTransform1,
juniIpsecTunnelTransform2,
juniIpsecTunnelTransform3,
juniIpsecTunnelTransform4,
juniIpsecTunnelTransform5,
juniIpsecTunnelTransform6,
juniIpsecTunnelTransformSetRowStatus }STATUScurrentDESCRIPTION"A collection of objects providing transform set information of the
IPsec tunnel."::={ juniIpsecTunnelMIBGroups 3}juniIpsecGlobalLocalEndpointGroup OBJECT-GROUPOBJECTS{
juniIpsecTunnelGlobalLocalEndpoint,
juniIpsecTunnelGlobalLocalEndpointRowStatus }STATUScurrentDESCRIPTION"A collection of objects providing the global local endpoint for the
IPsec tunnel."::={ juniIpsecTunnelMIBGroups 4}juniIpsecTunnelSystemStatsGroup OBJECT-GROUPOBJECTS{
juniIpsecSummaryStatsTotalTunnels,
juniIpsecSummaryStatsAdminStatusEnabled,
juniIpsecSummaryStatsAdminStatusDisabled,
juniIpsecSummaryStatsOperStatusUp,
juniIpsecSummaryStatsOperStatusDown,
juniIpsecSummaryStatsOperStatusNotPresent }STATUScurrentDESCRIPTION"A collection of objects providing summary statistics information
for IPsec tunnels in one system."::={ juniIpsecTunnelMIBGroups 5}
END