smilint output for ./IPSEC-TUN-MON-MIB


Message Severities
SeverityCount
error3
change recommended91
warning7
Message Types
TypeCount
date-value (error)2
date-year-2digits (warning)2
group-membership (change recommended)91
invalid-format (error)1
notification-not-reversible (warning)4
sequence-order (warning)1

Messages:

IPSEC-TUN-MON-MIB

   1: -- extracted from draft-jenkins-ipsec-tun-mon-mib-00.txt
   2: -- at Sat Oct  6 06:06:31 2001
   3: 
   4: IPSEC-TUN-MON-MIB DEFINITIONS ::= BEGIN
   5: 
   6:    IMPORTS
   7:        MODULE-IDENTITY, OBJECT-TYPE, Counter32, Counter64, Unsigned32,
   8:         Gauge32, OBJECT-IDENTITY, experimental, NOTIFICATION-TYPE
   9:                                        FROM SNMPv2-SMI
  10:        TEXTUAL-CONVENTION, TruthValue FROM SNMPv2-TC
  11:        InetAddressType, InetAddress   FROM INET-ADDRESS-MIB
  12:        IsakmpCookie                   FROM ISAKMP-DOI-IND-MON-MIB
  13:    ;
  14: 
  15:    ipsecTunMonModule  MODULE-IDENTITY
  16:        LAST-UPDATED   "0010041200Z"
  16: warning - warning: date specification `0010041200Z' contains a two-digit year representing `1900'
  16: error -
date specification `0010041200Z' contains an illegal value
  17:        ORGANIZATION   "IETF IPsec Working Group"
  18:        CONTACT-INFO
  19:                    "Tim Jenkins
  20:                     Catena Networks
  21:                     307 Legget Drive
  22:                     Kanata, ON
  23:                     Canada
  24:                     K2K 3C8
  25:                     +1 (613) 599-6430
  26:                     tjenkins@catena.com "
  27: 
  28:        DESCRIPTION
  29:            "The MIB module to describe logical IPsec channel and tunnel
  30:            objects, and entity level objects and events associated with
  31:            these objects."
  32:        REVISION       "0010041200Z"
  32: warning - warning: date specification `0010041200Z' contains a two-digit year representing `1900'
  32: error -
date specification `0010041200Z' contains an illegal value
  33:        DESCRIPTION
  34:            "Initial revision."
  35:    --  ::= { ? }
  36:        -- bogus value currently in use
  37:       ::= { experimental 1010 }
  38: 
  39:    --
  40:    -- textual conventions
  41:    --
  42: 
  43:    IpsecChanOrTunType ::= TEXTUAL-CONVENTION
  43: error - invalid format specification `d'
  44:        DISPLAY-HINT   "d"
  45:        STATUS     current
  46:        DESCRIPTION
  47:            "A value indicating an implementation specific type for
  48:            channels and tunnels.
  49:            The values below are defined as examples only, and are not
  50:            intended to imply any specific support or capability."
  51:        SYNTAX     INTEGER {
  52:                        unknown(0),
  53:                        permanent(1),
  54:                        transient(2),
  55:                        management(3)
  56:                    }
  57: 
  58:    --
  59:    -- MIB root (trunk?)
  60:    --
  61: 
  62:    ipsecTunnelMonitorMIB OBJECT-IDENTITY
  63:        STATUS current
  64:        DESCRIPTION
  65:            "This is the base object identifier for all branches."
  66:        ::= { ipsecTunMonModule 1 }
  67: 
  68:    -- first level branches
  69: 
  70:    channelObjects OBJECT-IDENTITY
  71:        STATUS     current
  72:        DESCRIPTION
  73:            "This is the base object identifier for all channel related
  74:            objects."
  75:        ::= { ipsecTunnelMonitorMIB 1 }
  76: 
  77:    tunnelObjects OBJECT-IDENTITY
  78:        STATUS     current
  79:        DESCRIPTION
  80:            "This is the base object identifier for all tunnel related
  81:            objects."
  82:        ::= { ipsecTunnelMonitorMIB 2 }
  83: 
  84: 
  85:    -- second level branches
  86: 
  87:     channelTables OBJECT-IDENTITY
  88:        STATUS     current
  89:        DESCRIPTION
  90:            "This is the base object identifier for all objects which are
  91:            tables for channels."
  92:        ::= { channelObjects 1 }
  93: 
  94:     channelStats OBJECT-IDENTITY
  95:        STATUS     current
  96:        DESCRIPTION
  97:            "This is the base object identifier for all objects which are
  98:            global (non-error) counters for channels."
  99:        ::= { channelObjects 2 }
 100: 
 101:    channelErrors OBJECT-IDENTITY
 102:        STATUS     current
 103:        DESCRIPTION
 104:            "This is the base object identifier for all objects which are
 105:            global error counters for channels."
 106:        ::= { channelObjects 3 }
 107: 
 108:    channelTraps OBJECT-IDENTITY
 109:        STATUS     current
 110:        DESCRIPTION
 111:            "This is the base object identifier for all objects which are
 112:            traps for channels."
 113:        ::= { channelObjects 4 }
 114: 
 115:     channelTrapObjects OBJECT-IDENTITY
 116:        STATUS     current
 117:        DESCRIPTION
 118:            "This is the base object identifier for objects which are
 119:            used as part of traps for channels."
 120:        ::= { channelObjects 5 }
 121: 
 122:    channelTrapControl OBJECT-IDENTITY
 123:        STATUS     current
 124:        DESCRIPTION
 125:            "This is the base object identifier for all objects which are
 126:            trap controls for channel traps."
 127:        ::= { channelObjects 6 }
 128: 
 129:    channelGroups  OBJECT-IDENTITY
 130:        STATUS     current
 131:        DESCRIPTION
 132:            "This is the base object identifier for all objects which
 133:            describe the groups in the channel part of this MIB."
 134:        ::= { channelObjects 7 }
 135: 
 136:     channelConformance  OBJECT-IDENTITY
 137:        STATUS     current
 138:        DESCRIPTION
 139:            "This is the base object identifier for all objects which
 140:            describe the conformance in the channel part of this MIB."
 141:        ::= { channelObjects 8 }
 142: 
 143:     tunnelTables OBJECT-IDENTITY
 144:        STATUS     current
 145:        DESCRIPTION
 146:            "This is the base object identifier for all objects which are
 147:            tables for tunnels."
 148:        ::= { tunnelObjects 1 }
 149: 
 150:     tunnelStats OBJECT-IDENTITY
 151:        STATUS     current
 152:        DESCRIPTION
 153:            "This is the base object identifier for all objects which are
 154:            global (non-error) counters for tunnels."
 155:        ::= { tunnelObjects 2 }
 156: 
 157:    tunnelErrors OBJECT-IDENTITY
 158:        STATUS     current
 159:        DESCRIPTION
 160:            "This is the base object identifier for all objects which are
 161:            global error counters for tunnels."
 162:        ::= { tunnelObjects 3 }
 163: 
 164:    tunnelTraps OBJECT-IDENTITY
 165:        STATUS     current
 166:        DESCRIPTION
 167:            "This is the base object identifier for all objects which are
 168:            traps for tunnels."
 169:        ::= { tunnelObjects 4 }
 170: 
 171:     tunnelTrapObjects OBJECT-IDENTITY
 172:        STATUS     current
 173:        DESCRIPTION
 174:            "This is the base object identifier for objects which are
 175:            used as part of traps for tunnels."
 176:        ::= { tunnelObjects 5 }
 177: 
 178:    tunnelTrapControl OBJECT-IDENTITY
 179:        STATUS     current
 180:        DESCRIPTION
 181:            "This is the base object identifier for all objects which are
 182:            trap controls for tunnel traps."
 183:        ::= { tunnelObjects 6 }
 184: 
 185:    tunnelGroups   OBJECT-IDENTITY
 186:        STATUS     current
 187:        DESCRIPTION
 188:            "This is the base object identifier for all objects which
 189:            describe the groups in the tunnel part of this MIB."
 190:        ::= { tunnelObjects 7 }
 191: 
 192:    tunnelConformance  OBJECT-IDENTITY
 193:        STATUS     current
 194:        DESCRIPTION
 195:            "This is the base object identifier for all objects which
 196:            describe the conformance in the tunnel part of this MIB."
 197:        ::= { tunnelObjects 8 }
 198: 
 199: 
 200:    -- the IPsec Channel statistics group
 201:    --
 202:    -- a collection of object providing information about channels
 203:    -- created using IKE SAs
 204: 
 205:    currentChannels    OBJECT-TYPE
 205: change recommended - warning: node `currentChannels' must be contained in at least one conformance group
 206:        SYNTAX     Gauge32
 207:        MAX-ACCESS read-only
 208:        STATUS     current
 209:        DESCRIPTION
 210:            "The total number of channels currently in existence in the
 211:            entity.
 212: 
 213:            This is the same as the number of rows in the channel table,
 214:            whether there are IKE SAs for each row or not."
 215:        ::= { channelStats 1 }
 216: 
 217:    totalChannels  OBJECT-TYPE
 217: change recommended - warning: node `totalChannels' must be contained in at least one conformance group
 218:        SYNTAX     Counter32
 219:        MAX-ACCESS read-only
 220:        STATUS     current
 221:        DESCRIPTION
 222:            "The total number of channels created by the entity since
 223:            system boot.
 224: 
 225:            Channel creation is defined as the addition of a row to the
 226:            channel table, whether an IKE SA was created at the same time
 227:            or not."
 228:        ::= { channelStats 2 }
 229: 
 230:    deletedChannels    OBJECT-TYPE
 230: change recommended - warning: node `deletedChannels' must be contained in at least one conformance group
 231:        SYNTAX     Counter32
 232:        MAX-ACCESS read-only
 233:        STATUS     current
 234:        DESCRIPTION
 235:            "The total number of channels deleted by the entity.
 236: 
 237:            Channel deletion is defined as the removal of a row from the
 238:            channel table, independent of the existence of the IKE SAs
 239:            that may have supported it.
 240:            Note that the sum of 'currentChannels' and 'deletedChannels'
 241:            is equal to 'totalChannels'."
 242:        ::= { channelStats 3 }
 243: 
 244: 
 245:    -- the IPsec Tunnel statistics group
 246:    --
 247:    -- a collection of objects providing information about tunnels
 248:    -- created using IPsec SA suites
 249: 
 250:    currentTunnels OBJECT-TYPE
 250: change recommended - warning: node `currentTunnels' must be contained in at least one conformance group
 251:        SYNTAX     Gauge32
 252:        MAX-ACCESS read-only
 253:        STATUS     current
 254:        DESCRIPTION
 255:            "The total number of tunnels currently in existence in the
 256:            entity.
 257: 
 258:            This is the same as the number of rows in the tunnel table,
 259:            whether there are IPsec SA suites for each row or not."
 260:        ::= { tunnelStats 1 }
 261: 
 262:    totalTunnels   OBJECT-TYPE
 262: change recommended - warning: node `totalTunnels' must be contained in at least one conformance group
 263:        SYNTAX     Counter32
 264:        MAX-ACCESS read-only
 265:        STATUS     current
 266:        DESCRIPTION
 267:            "The total number of tunnels created by the entity since
 268:            system boot.
 269: 
 270:            Tunnel creation is defined as the addition of a row to the
 271:            tunnel table, whether an IPsec SA was created at the same
 272:            time or not."
 273:        ::= { tunnelStats 2 }
 274: 
 275:    deletedTunnels OBJECT-TYPE
 275: change recommended - warning: node `deletedTunnels' must be contained in at least one conformance group
 276:        SYNTAX     Counter32
 277:        MAX-ACCESS read-only
 278:        STATUS     current
 279:        DESCRIPTION
 280:            "The total number of tunnels deleted by the entity.
 281: 
 282:            Tunnel deletion is defined as the removal of a row from the
 283:            tunnel table, independent of the existence of the phase 2 SA
 284:            suites that may have supported it.
 285: 
 286:            Note that the sum of 'currentTunnels' and 'deletedTunnels'
 287:            should is to 'totalTunnels'."
 288:        ::= { tunnelStats 3 }
 289: 
 290:    -- the IPsec Control Channel MIB-Group
 291:    --
 292:    -- a collection of objects providing information about
 293:    -- IPsec's control channels
 294: 
 295: 
 296:    ipsecChannelTable OBJECT-TYPE
 297:        SYNTAX     SEQUENCE OF IpsecChannelEntry
 298:        MAX-ACCESS not-accessible
 299:        STATUS     current
 300:        DESCRIPTION
 301:            "The (conceptual) table containing information on control
 302:            channels.
 303: 
 304:            The number of rows in this table is, at a minimum, the same
 305:            as the number of IKE SAs that have the same phase 1 ID pairs.
 306:            Additional rows for channels without active phase 1 SAs may
 307:            also appear in the table.
 308: 
 309:            The maximum number of rows is implementation dependent."
 310:        ::= { channelTables 1 }
 311: 
 312:    ipsecChannelEntry OBJECT-TYPE
 313:        SYNTAX     IpsecChannelEntry
 314:        MAX-ACCESS not-accessible
 315:        STATUS     current
 316:        DESCRIPTION
 317:            "An entry (conceptual row) containing the information on a
 318:            particular control channel.
 319: 
 320:            A row in this table cannot be created or deleted by SNMP
 321:            operations on columns of the table."
 322:        INDEX  {
 323:                    ipsecChannelType,
 324:                    ipsecChannelLocalEndpoint,
 325:                    ipsecChannelRemoteEndpoint
 326:                }
 327:        ::= { ipsecChannelTable 1 }
 328: 
 329:    IpsecChannelEntry  ::= SEQUENCE {
 330:    -- indices
 331:        ipsecChannelType                   IpsecChanOrTunType,
 332:        ipsecChannelLocalEndpoint          Unsigned32,
 333:        ipsecChannelRemoteEndpoint         Unsigned32,
 334: 
 335:    -- virtual channel status
 336:        ipsecChannelCurrentSAs             Gauge32,
 337:        ipsecChannelTotalSAs               Counter32,
 338:        ipsecChannelDeletedSAs             Counter32,
 339:        ipsecChannelTimeUpSeconds          Counter32, -- since SAs > 0
 340:        ipsecChannelTimeDownSeconds        Counter32, -- since SAs = 0
 341: 
 342:    -- aggregate statistics (all SAs)
 343:        ipsecChannelInboundOctets          Counter32,
 344:        ipsecChannelOutboundOctets         Counter32,
 345:        ipsecChannelInboundPackets         Counter32,
 346:        ipsecChannelOutboundPackets        Counter32,
 347: 
 348:    -- aggregate error statistics
 349:        ipsecChannelReceiveErrors          Counter32,
 350:        ipsecChannelSendErrors             Counter32,
 351: 
 352:    -- IPsec tunnel (Phase 2) statistics
 353:        ipsecChannelCurrentTunnels         Gauge32,
 354:        ipsecChannelTotalTunnels           Counter32,
 355:        ipsecChannelDeletedTunnels         Counter32,
 356: 
 357:    -- IPsec tunnel (Phase 2) statistics (aggregate)
 358:        ipsecChannelTunnelInboundOctets    Counter64,
 359:        ipsecChannelTunnelOutboundOctets   Counter64,
 360:        ipsecChannelTunnelInboundPackets   Counter64,
 361:        ipsecChannelTunnelOutboundPackets  Counter64,
 362: 
 363:    -- IPsec SA (Phase 2) error statistics (aggregate)
 364:        ipsecChannelTunnelReceiveErrors    Counter32,
 365:        ipsecChannelTunnelSendErrors       Counter32
 366:    }
 367: 
 368: 
 369:    ipsecChannelType OBJECT-TYPE
 370:        SYNTAX     IpsecChanOrTunType
 371:        MAX-ACCESS not-accessible
 372:        STATUS     current
 373:        DESCRIPTION
 374:            "The type of control channel represented by this row.
 375: 
 376:            This is an implementation dependent value, used to assist in
 377:            controlling how channels are sorted."
 378:        ::= { ipsecChannelEntry 1 }
 379: 
 380:    ipsecChannelLocalEndpoint OBJECT-TYPE
 381:        SYNTAX     Unsigned32
 382:        MAX-ACCESS not-accessible
 383:        STATUS     current
 384:        DESCRIPTION
 385:            "The index value of the row of the IKE Monitoring MIB's
 386:            endpoint table corresponding to the local endpoint."
 387:        ::= { ipsecChannelEntry 2 }
 388: 
 389:    ipsecChannelRemoteEndpoint OBJECT-TYPE
 390:        SYNTAX     Unsigned32
 391:        MAX-ACCESS not-accessible
 392:        STATUS     current
 393:        DESCRIPTION
 394:            "The index value of the row of the IKE Monitoring MIB's
 395:            endpoint table corresponding to the remote endpoint."
 396:        ::= { ipsecChannelEntry 3 }
 397: 
 398:    ipsecChannelCurrentSAs OBJECT-TYPE
 398: change recommended - warning: node `ipsecChannelCurrentSAs' must be contained in at least one conformance group
 399:        SYNTAX     Gauge32
 400:        MAX-ACCESS read-only
 401:        STATUS     current
 402:        DESCRIPTION
 403:            "The number of IKE SAs that are currently active that make up
 404:            this channel.
 405: 
 406:            This value may be 0 if the channel has not yet been set up,
 407:            or the implementation does not require the existence of IKE
 408:            SAs for the channel to exist, or if the channel is considered
 409:            a permanent entry in the table by the implementation.
 410: 
 411:            This value should not include SA establishment attempts in
 412:            progress."
 413:        ::= { ipsecChannelEntry 4 }
 414: 
 415:    ipsecChannelTotalSAs OBJECT-TYPE
 415: change recommended - warning: node `ipsecChannelTotalSAs' must be contained in at least one conformance group
 416:        SYNTAX     Counter32
 417:        MAX-ACCESS read-only
 418:        STATUS     current
 419:        DESCRIPTION
 420:            "The total number of IKE SAs that are part of this channel
 421:            that have been created in the entity since boot time.
 422: 
 423:            This value should not include failed SA establishment
 424:            attempts."
 425:        ::= { ipsecChannelEntry 5 }
 426: 
 427:    ipsecChannelDeletedSAs OBJECT-TYPE
 427: change recommended - warning: node `ipsecChannelDeletedSAs' must be contained in at least one conformance group
 428:        SYNTAX     Counter32
 429:        MAX-ACCESS read-only
 430:        STATUS     current
 431:        DESCRIPTION
 432:            "The total number of IKE SAs that are part of this channel
 433:            that have been deleted in the entity since boot time.
 434: 
 435:            The sum of 'ipsecChannelCurrentSAs' and this value should
 436:            equal ipsecChannelTotalSAs."
 437:        ::= { ipsecChannelEntry 6 }
 438: 
 439:    ipsecChannelTimeUpSeconds OBJECT-TYPE
 439: change recommended - warning: node `ipsecChannelTimeUpSeconds' must be contained in at least one conformance group
 440:        SYNTAX     Counter32
 441:        UNITS      "seconds"
 442:        MAX-ACCESS read-only
 443:        STATUS     current
 444:        DESCRIPTION
 445:            "The total number of seconds since there has been at least
 446:            one valid IKE SA supporting the channel. In other words, the
 447:            number of seconds since the value of 'ipsecChannelCurrentSAs'
 448:            changed from 0 to any other value."
 449:        ::= { ipsecChannelEntry 7 }
 450: 
 451:    ipsecChannelTimeDownSeconds OBJECT-TYPE
 451: change recommended - warning: node `ipsecChannelTimeDownSeconds' must be contained in at least one conformance group
 452:        SYNTAX     Counter32
 453:        UNITS      "seconds"
 454:        MAX-ACCESS read-only
 455:        STATUS     current
 456:        DESCRIPTION
 457:            "The total number of seconds since the last valid IKE SA
 458:            supporting the channel was deleted. In other words, the
 459:            number of seconds since the value of 'ipsecChannelCurrentSAs'
 460:            changed to 0 from any other value."
 461:        ::= { ipsecChannelEntry 8 }
 462: 
 463:    ipsecChannelInboundOctets OBJECT-TYPE
 463: change recommended - warning: node `ipsecChannelInboundOctets' must be contained in at least one conformance group
 464:        SYNTAX     Counter32
 465:        UNITS      "bytes"
 466:        MAX-ACCESS read-only
 467:        STATUS     current
 468:        DESCRIPTION
 469:            "The amount of traffic measured in bytes received by the
 470:            channel. This is the sum of 'saInOctets' from the 'saEntry'
 471:            of each IKE SA in 'saTable' that is part of this channel."
 472:        ::= { ipsecChannelEntry 9 }
 473: 
 474:    ipsecChannelOutboundOctets OBJECT-TYPE
 474: change recommended - warning: node `ipsecChannelOutboundOctets' must be contained in at least one conformance group
 475:        SYNTAX     Counter32
 476:        UNITS      "bytes"
 477:        MAX-ACCESS read-only
 478:        STATUS     current
 479:        DESCRIPTION
 480:            "The amount of traffic measured in bytes sent by the channel.
 481:            This is the sum of 'saOutOctets' from the 'saEntry' of each
 482:            IKE SA in 'saTable' that is part of this channel."
 483:        ::= { ipsecChannelEntry 10 }
 484: 
 485:    ipsecChannelInboundPackets OBJECT-TYPE
 485: change recommended - warning: node `ipsecChannelInboundPackets' must be contained in at least one conformance group
 486:        SYNTAX     Counter32
 487:        MAX-ACCESS read-only
 488:        STATUS     current
 489:        DESCRIPTION
 490:            "The total number of packets received by the channel. This is
 491:            the sum of 'saInPackets' from the 'saEntry' of each IKE SA in
 492:            'saTable' that is part of this channel."
 493:        ::= { ipsecChannelEntry 11 }
 494: 
 495:    ipsecChannelOutboundPackets OBJECT-TYPE
 495: change recommended - warning: node `ipsecChannelOutboundPackets' must be contained in at least one conformance group
 496:        SYNTAX     Counter32
 497:        MAX-ACCESS read-only
 498:        STATUS     current
 499:        DESCRIPTION
 500:            "The total number of packets sent by the channel. This is the
 501:            sum of 'saOutPackets' from the 'saEntry' of each IKE SA in
 502:            'saTable' that is part of this channel."
 503:        ::= { ipsecChannelEntry 12 }
 504: 
 505:    ipsecChannelReceiveErrors OBJECT-TYPE
 505: change recommended - warning: node `ipsecChannelReceiveErrors' must be contained in at least one conformance group
 506:        SYNTAX     Counter32
 507:        MAX-ACCESS read-only
 508:        STATUS     current
 509:        DESCRIPTION
 510:            "The total number of receive errors incurred in the channel.
 511:            This is the sum of all receive errors from the 'saEntry' of
 512:            each IKE SA in 'saTable' that is part of this channel."
 513:        ::= { ipsecChannelEntry 13 }
 514: 
 515:    ipsecChannelSendErrors OBJECT-TYPE
 515: change recommended - warning: node `ipsecChannelSendErrors' must be contained in at least one conformance group
 516:        SYNTAX     Counter32
 517:        MAX-ACCESS read-only
 518:        STATUS     current
 519:        DESCRIPTION
 520:            "The total number of send errors incurred in the channel.
 521:            This is the sum of all send errors from the 'saEntry' of each
 522:            IKE SA in 'saTable' that is part of this channel."
 523:        ::= { ipsecChannelEntry 14 }
 524: 
 525:    ipsecChannelCurrentTunnels OBJECT-TYPE
 525: change recommended - warning: node `ipsecChannelCurrentTunnels' must be contained in at least one conformance group
 526:        SYNTAX     Gauge32
 527:        MAX-ACCESS read-only
 528:        STATUS     current
 529:        DESCRIPTION
 530:            "The number of IPsec tunnels that are currently active that
 531:            were created by this channel.
 532: 
 533:            This value should not include tunnel establishment attempts
 534:            that are in progress."
 535:        ::= { ipsecChannelEntry 15 }
 536: 
 537:    ipsecChannelTotalTunnels OBJECT-TYPE
 537: change recommended - warning: node `ipsecChannelTotalTunnels' must be contained in at least one conformance group
 538:        SYNTAX     Counter32
 539:        MAX-ACCESS read-only
 540:        STATUS     current
 541:        DESCRIPTION
 542:            "The total number of IPsec tunnels that have been created in
 543:            the entity by this channel since boot time.
 544: 
 545:            This value should not include failed tunnel establishment
 546:            attempts."
 547:        ::= { ipsecChannelEntry 16 }
 548: 
 549:    ipsecChannelDeletedTunnels OBJECT-TYPE
 549: change recommended - warning: node `ipsecChannelDeletedTunnels' must be contained in at least one conformance group
 550:        SYNTAX     Counter32
 551:        MAX-ACCESS read-only
 552:        STATUS     current
 553:        DESCRIPTION
 554:            "The total number of IPsec tunnels that have been deleted by
 555:            this channel in the entity since boot time.
 556: 
 557:            The sum of 'ipsecChannelCurrentTunnels' and this value should
 558:            equal 'ipsecChannelTotalTunnels'."
 559:        ::= { ipsecChannelEntry 17 }
 560: 
 561:    ipsecChannelTunnelInboundOctets OBJECT-TYPE
 561: change recommended - warning: node `ipsecChannelTunnelInboundOctets' must be contained in at least one conformance group
 562:        SYNTAX     Counter64
 563:        UNITS      "bytes"
 564:        MAX-ACCESS read-only
 565:        STATUS     current
 566:        DESCRIPTION
 567:            "The amount of traffic measured in bytes received by all
 568:            tunnels created by the channel."
 569:        ::= { ipsecChannelEntry 18 }
 570: 
 571:    ipsecChannelTunnelOutboundOctets OBJECT-TYPE
 571: change recommended - warning: node `ipsecChannelTunnelOutboundOctets' must be contained in at least one conformance group
 572:        SYNTAX     Counter64
 573:        UNITS      "bytes"
 574:        MAX-ACCESS read-only
 575:        STATUS     current
 576:        DESCRIPTION
 577:            "The amount of traffic measured in bytes sent by all tunnels
 578:            created by the channel."
 579:        ::= { ipsecChannelEntry 19 }
 580: 
 581:    ipsecChannelTunnelInboundPackets OBJECT-TYPE
 581: change recommended - warning: node `ipsecChannelTunnelInboundPackets' must be contained in at least one conformance group
 582:        SYNTAX     Counter64
 583:        MAX-ACCESS read-only
 584:        STATUS     current
 585:        DESCRIPTION
 586:            "The total number of packets received by all tunnels created
 587:            by the channel."
 588:        ::= { ipsecChannelEntry 20 }
 589: 
 590:    ipsecChannelTunnelOutboundPackets OBJECT-TYPE
 590: change recommended - warning: node `ipsecChannelTunnelOutboundPackets' must be contained in at least one conformance group
 591:        SYNTAX     Counter64
 592:        MAX-ACCESS read-only
 593:        STATUS     current
 594:        DESCRIPTION
 595:            "The total number of packets sent by all tunnels created by
 596:            the channel."
 597:        ::= { ipsecChannelEntry 21 }
 598: 
 599:    ipsecChannelTunnelReceiveErrors OBJECT-TYPE
 599: change recommended - warning: node `ipsecChannelTunnelReceiveErrors' must be contained in at least one conformance group
 600:        SYNTAX     Counter32
 601:        MAX-ACCESS read-only
 602:        STATUS     current
 603:        DESCRIPTION
 604:            "The total number of receive errors incurred in all tunnels
 605:            created by the channel."
 606:        ::= { ipsecChannelEntry 22 }
 607: 
 608:    ipsecChannelTunnelSendErrors OBJECT-TYPE
 608: change recommended - warning: node `ipsecChannelTunnelSendErrors' must be contained in at least one conformance group
 609:        SYNTAX     Counter32
 610:        MAX-ACCESS read-only
 611:        STATUS     current
 612:        DESCRIPTION
 613:            "The total number of send errors incurred in all tunnels
 614:            created the channel."
 615:        ::= { ipsecChannelEntry 23 }
 616: 
 617: 
 618:    -- the IPsec channel SA table
 619:    --
 620:    -- a table providing a reference to specific IKE SAs as used by
 621:    -- IPsec channels
 622:    ipsecChannelSaTable OBJECT-TYPE
 623:        SYNTAX     SEQUENCE OF IpsecChannelSaEntry
 624:        MAX-ACCESS not-accessible
 625:        STATUS     current
 626:        DESCRIPTION
 627:            "The (conceptual) table containing information on which IKE
 628:            SAs are used in channels.
 629: 
 630:            The number of rows is the same as the number of IKE SAs in
 631:            the entity.
 632: 
 633:            The maximum number of rows is implementation dependent."
 634:        ::= { channelTables 2 }
 635: 
 636:    ipsecChannelSaEntry OBJECT-TYPE
 637:        SYNTAX     IpsecChannelSaEntry
 638:        MAX-ACCESS not-accessible
 639:        STATUS     current
 640:        DESCRIPTION
 641:            "An entry (conceptual row) containing the identifiers of a
 642:            specific IKE SA.
 643: 
 644:            A row in this table cannot be created or deleted by SNMP
 645:            operations on columns of the table."
 646:        INDEX  {
 647:                    ipsecChannelType,
 648:                    ipsecChannelLocalEndpoint,
 649:                    ipsecChannelRemoteEndpoint,
 650:                    ipsecChannelSaIndex
 651:                }
 652:        ::= { ipsecChannelSaTable 1 }
 653: 
 654:    IpsecChannelSaEntry ::= SEQUENCE {
 655: 
 656:    -- additional index to augment channel table
 657:        ipsecChannelSaIndex                    Unsigned32,
 658: 
 659:    -- the SA specifiers
 660:        ipsecChannelSaLocalIpAddrType          InetAddressType,
 661:        ipsecChannelSaLocalIpAddress           InetAddress,
 662:        ipsecChannelSaRemoteIpAddrType         InetAddressType,
 663:        ipsecChannelSaRemoteIpAddress          InetAddress,
 664:        ipsecChannelSaInitiatorCookie          IsakmpCookie,
 665:        ipsecChannelSaResponderCookie          IsakmpCookie
 666:    }
 667: 
 668: 
 669:    ipsecChannelSaIndex OBJECT-TYPE
 670:        SYNTAX     Unsigned32 (1..16777215)
 671:        MAX-ACCESS not-accessible
 672:        STATUS     current
 673:        DESCRIPTION
 674:            "A unique value, greater than zero, for each IKE SA in the
 675:            channel. It is recommended that values are assigned
 676:            contiguously starting from 1."
 677:        ::= { ipsecChannelSaEntry 1 }
 678: 
 679:    ipsecChannelSaLocalIpAddrType OBJECT-TYPE
 679: change recommended - warning: node `ipsecChannelSaLocalIpAddrType' must be contained in at least one conformance group
 680:        SYNTAX     InetAddressType
 681:        MAX-ACCESS read-only
 682:        STATUS     current
 683:        DESCRIPTION
 684:            "The type of the local address used to negotiate the IKE SA
 685:            in the channel. (The value of 'saIkeLocalIpAddressType' from
 686:            'ikeMonModule' for this row.)"
 687:        ::= { ipsecChannelSaEntry 2 }
 688: 
 689:    ipsecChannelSaLocalIpAddress OBJECT-TYPE
 689: change recommended - warning: node `ipsecChannelSaLocalIpAddress' must be contained in at least one conformance group
 690:        SYNTAX     InetAddress (SIZE(4|16|20))
 691:        MAX-ACCESS read-only
 692:        STATUS     current
 693:        DESCRIPTION
 694:            "The local address used to negotiate the IKE SA in the
 695:            channel. (The value of 'saIkeLocalIpAddress' from
 696:            'ikeMonModule' for this row.)"
 697:        ::= { ipsecChannelSaEntry 3 }
 698: 
 699:    ipsecChannelSaRemoteIpAddrType OBJECT-TYPE
 699: change recommended - warning: node `ipsecChannelSaRemoteIpAddrType' must be contained in at least one conformance group
 700:        SYNTAX     InetAddressType
 701:        MAX-ACCESS read-only
 702:        STATUS     current
 703:        DESCRIPTION
 704:            "The type of the remote address used to negotiate the IKE SA
 705:            in the channel. (The value of 'saIkeRemoteIpAddressType' from
 706:            'ikeMonModule' for this row.)"
 707:        ::= { ipsecChannelSaEntry 4 }
 708: 
 709:    ipsecChannelSaRemoteIpAddress OBJECT-TYPE
 709: change recommended - warning: node `ipsecChannelSaRemoteIpAddress' must be contained in at least one conformance group
 710:        SYNTAX     InetAddress (SIZE(4|16|20))
 711:        MAX-ACCESS read-only
 712:        STATUS     current
 713:        DESCRIPTION
 714:            "The remote address used to negotiate the IKE SA in the
 715:            channel. (The value of 'saIkeRemoteIpAddress' from
 716:            'ikeMonModule' for this row.)"
 717:        ::= { ipsecChannelSaEntry 5 }
 718: 
 719:    ipsecChannelSaInitiatorCookie OBJECT-TYPE
 719: change recommended - warning: node `ipsecChannelSaInitiatorCookie' must be contained in at least one conformance group
 720:        SYNTAX     IsakmpCookie
 721:        MAX-ACCESS read-only
 722:        STATUS     current
 723:        DESCRIPTION
 724:            "The value of the cookie used by the initiator for the IKE SA
 725:            in the channel. (The value of 'saIkeInitiatorCookie' from
 726:            'ikeMonModule' for this row.)"
 727:        ::= { ipsecChannelSaEntry 6 }
 728: 
 729:    ipsecChannelSaResponderCookie OBJECT-TYPE
 729: change recommended - warning: node `ipsecChannelSaResponderCookie' must be contained in at least one conformance group
 730:        SYNTAX     IsakmpCookie
 731:        MAX-ACCESS read-only
 732:        STATUS     current
 733:        DESCRIPTION
 734:            "The value of the cookie used by the responder for the IKE SA
 735:            in the channel. (The value of 'saIkeResponderCookie' from
 736:            'ikeMonModule' for this row.)"
 737:        ::= { ipsecChannelSaEntry 7 }
 738: 
 739: 
 740: 
 741:    -- the IPsec channel SA aggregates table
 742:    --
 743:    -- a table providing aggregate statistics for the user-defined
 744:    -- channel types
 745: 
 746: 
 747:    ipsecChanAggTable OBJECT-TYPE
 748:        SYNTAX     SEQUENCE OF IpsecChanAggEntry
 749:        MAX-ACCESS not-accessible
 750:        STATUS     current
 751:        DESCRIPTION
 752:            "The optional (conceptual) table containing information on
 753:            aggregate statistics for the channel types.
 754: 
 755:            The number of rows is the same as the number of channel types
 756:            supported by the entity.
 757: 
 758:            The maximum number of rows is implementation dependent."
 759:        ::= { channelTables 3 }
 760: 
 761:    ipsecChanAggEntry OBJECT-TYPE
 762:        SYNTAX     IpsecChanAggEntry
 763:        MAX-ACCESS not-accessible
 764:        STATUS     current
 765:        DESCRIPTION
 766:            "An entry (conceptual row) containing the aggregate
 767:            statistics for a specific channel type.
 768:            A row in this table cannot be created or deleted by SNMP
 769:            operations on columns of the table."
 770:        INDEX  { ipsecChanAggType }
 771:        ::= { ipsecChanAggTable 1 }
 772: 
 773:    IpsecChanAggEntry ::= SEQUENCE {
 774:    -- index
 775:        ipsecChanAggType               IpsecChanOrTunType,
 776: 
 777:    -- channel counts
 778:        ipsecChanAggCurrentChannels    Gauge32,
 779:        ipsecChanAggTotalChannels      Counter32,
 780:        ipsecChanAggDeletedChannels    Counter32,
 781: 
 782:    -- aggregate statistics (all SAs)
 783:        ipsecChanAggInboundOctets      Counter64,
 784:        ipsecChanAggOutboundOctets     Counter64,
 785:        ipsecChanAggInboundPackets     Counter64,
 786:        ipsecChanAggOutboundPackets    Counter64,
 787: 
 788:    -- aggregate error statistics
 789:        ipsecChanAggReceiveErrors      Counter32,
 790:        ipsecChanAggSendErrors         Counter32,
 791: 
 792:    -- IPsec tunnel (Phase 2) statistics
 793:        ipsecChanAggCurrentTunnels     Gauge32,
 794:        ipsecChanAggTotalTunnels       Counter32,
 795:        ipsecChanAggDeletedTunnels     Counter32,
 796: 
 797:    -- IPsec tunnel (Phase 2) statistics (aggregate)
 798:        ipsecChanAggTnlInboundOctets   Counter64,
 799:        ipsecChanAggTnlOutboundOctets  Counter64,
 800:        ipsecChanAggTnlInboundPackets  Counter64,
 801:        ipsecChanAggTnlOutboundPackets Counter64,
 802: 
 803:    -- IPsec SA (Phase 2) error statistics (aggregate)
 804:        ipsecChanAggTnlReceiveErrors   Counter32,
 805:        ipsecChanAggTnlSendErrors      Counter32
 806: 
 807:    }
 808: 
 809: 
 810:    ipsecChanAggType OBJECT-TYPE
 811:        SYNTAX     IpsecChanOrTunType
 812:        MAX-ACCESS not-accessible
 813:        STATUS     current
 814:        DESCRIPTION
 815:            "The type of control channel for which this row aggregrates
 816:            statistics."
 817:        ::= { ipsecChanAggEntry 1 }
 818: 
 819:    ipsecChanAggCurrentChannels OBJECT-TYPE
 819: change recommended - warning: node `ipsecChanAggCurrentChannels' must be contained in at least one conformance group
 820:        SYNTAX     Gauge32
 821:        MAX-ACCESS read-only
 822:        STATUS     current
 823:        DESCRIPTION
 824:            "The number of channels that are currently active that are of
 825:            the specified type.
 826: 
 827:            This value should not include channel establishment attempts
 828:            in progress."
 829:        ::= { ipsecChanAggEntry 2 }
 830: 
 831:    ipsecChanAggTotalChannels OBJECT-TYPE
 831: change recommended - warning: node `ipsecChanAggTotalChannels' must be contained in at least one conformance group
 832:        SYNTAX     Counter32
 833:        MAX-ACCESS read-only
 834:        STATUS     current
 835:        DESCRIPTION
 836:            "The total number of channels of this type that have been
 837:            created in the entity since boot time.
 838: 
 839:            This value should not include failed channel establishment
 840:            attempts."
 841:        ::= { ipsecChanAggEntry 3 }
 842: 
 843:    ipsecChanAggDeletedChannels OBJECT-TYPE
 843: change recommended - warning: node `ipsecChanAggDeletedChannels' must be contained in at least one conformance group
 844:        SYNTAX     Counter32
 845:        MAX-ACCESS read-only
 846:        STATUS     current
 847:        DESCRIPTION
 848:            "The total number of channels of this type that have been
 849:            deleted in the entity since boot time.
 850: 
 851:            The sum of 'ipsecChanAggCurrentChannels' and this value
 852:            should equal 'ipsecChanAggTotalChannels'."
 853:        ::= { ipsecChanAggEntry 4 }
 854: 
 855:    ipsecChanAggInboundOctets OBJECT-TYPE
 855: change recommended - warning: node `ipsecChanAggInboundOctets' must be contained in at least one conformance group
 856:        SYNTAX     Counter64
 857:        UNITS      "bytes"
 858:        MAX-ACCESS read-only
 859:        STATUS     current
 860:        DESCRIPTION
 861:            "The total amount of traffic measured in bytes received by
 862:            all channels of this type. This is the sum of
 863:            'ipsecChannelInboundOctets' from the 'ipsecChannelEntry' of
 864:            each channel in 'ipsecChannelTable' that is of this type."
 865:        ::= { ipsecChanAggEntry 5 }
 866: 
 867:    ipsecChanAggOutboundOctets OBJECT-TYPE
 867: change recommended - warning: node `ipsecChanAggOutboundOctets' must be contained in at least one conformance group
 868:        SYNTAX     Counter64
 869:        UNITS      "bytes"
 870:        MAX-ACCESS read-only
 871:        STATUS     current
 872:        DESCRIPTION
 873:            "The total amount of traffic measured in bytes sent by all
 874:            channels of this type. This is the sum of
 875:            'ipsecChannelOutboundOctets' from the 'ipsecChannelEntry' of
 876:            each channel in 'ipsecChannelTable' that is of this type."
 877:        ::= { ipsecChanAggEntry 6 }
 878: 
 879:    ipsecChanAggInboundPackets OBJECT-TYPE
 879: change recommended - warning: node `ipsecChanAggInboundPackets' must be contained in at least one conformance group
 880:        SYNTAX     Counter64
 881:        MAX-ACCESS read-only
 882:        STATUS     current
 883:        DESCRIPTION
 884:            "The total number of packets received by all channels of this
 885:            type. This is the sum of 'ipsecChannelInboundPackets' from
 886:            the 'ipsecChannelEntry' of each channel in
 887:            'ipsecChannelTable' that is of this type."
 888:        ::= { ipsecChanAggEntry 7 }
 889: 
 890:    ipsecChanAggOutboundPackets OBJECT-TYPE
 890: change recommended - warning: node `ipsecChanAggOutboundPackets' must be contained in at least one conformance group
 891:        SYNTAX     Counter64
 892:        MAX-ACCESS read-only
 893:        STATUS     current
 894:        DESCRIPTION
 895:            "The total number of packets sent by all channels of this
 896:            type. This is the sum of 'ipsecChannelOutboundPackets' from
 897:            the 'ipsecChannelEntry' of each channel in
 898:            'ipsecChannelTable' that is of this type."
 899:        ::= { ipsecChanAggEntry 8 }
 900: 
 901:    ipsecChanAggReceiveErrors OBJECT-TYPE
 901: change recommended - warning: node `ipsecChanAggReceiveErrors' must be contained in at least one conformance group
 902:        SYNTAX     Counter32
 903:        MAX-ACCESS read-only
 904:        STATUS     current
 905:        DESCRIPTION
 906:            "The total number of receive errors incurred by all channels
 907:            of this type. This is the sum of 'ipsecChannelReceiveErrors'
 908:            from the 'ipsecChannelEntry' of each channel in
 909:            'ipsecChannelTable' that is of this type."
 910:        ::= { ipsecChanAggEntry 9 }
 911: 
 912:    ipsecChanAggSendErrors OBJECT-TYPE
 912: change recommended - warning: node `ipsecChanAggSendErrors' must be contained in at least one conformance group
 913:        SYNTAX     Counter32
 914:        MAX-ACCESS read-only
 915:        STATUS     current
 916:        DESCRIPTION
 917:            "The total number of send errors incurred by all channels of
 918:            this type. This is the sum of 'ipsecChannelSendErrors' from
 919:            the 'ipsecChannelEntry' of each channel in
 920:            'ipsecChannelTable' that is of this type."
 921:        ::= { ipsecChanAggEntry 10 }
 922: 
 923:    ipsecChanAggCurrentTunnels OBJECT-TYPE
 923: change recommended - warning: node `ipsecChanAggCurrentTunnels' must be contained in at least one conformance group
 924:        SYNTAX     Gauge32
 925:        MAX-ACCESS read-only
 926:        STATUS     current
 927:        DESCRIPTION
 928:            "The current number of active IPsec tunnels that have been
 929:            created by all channels of this type. This is the sum of
 930:            'ipsecChannelCurrentTunnels' from the 'ipsecChannelEntry' of
 931:            each channel in 'ipsecChannelTable' that is of this type."
 932:        ::= { ipsecChanAggEntry 11 }
 933: 
 934:    ipsecChanAggTotalTunnels OBJECT-TYPE
 934: change recommended - warning: node `ipsecChanAggTotalTunnels' must be contained in at least one conformance group
 935:        SYNTAX     Counter32
 936:        MAX-ACCESS read-only
 937:        STATUS     current
 938:        DESCRIPTION
 939:            "The total number of IPsec tunnels that have been created by
 940:            all channels of this type. This is the sum of
 941:            'ipsecChannelTotalTunnels' from the 'ipsecChannelEntry' of
 942:            each channel in 'ipsecChannelTable' that is of this type."
 943:        ::= { ipsecChanAggEntry 12 }
 944: 
 945:    ipsecChanAggDeletedTunnels OBJECT-TYPE
 945: change recommended - warning: node `ipsecChanAggDeletedTunnels' must be contained in at least one conformance group
 946:        SYNTAX     Counter32
 947:        MAX-ACCESS read-only
 948:        STATUS     current
 949:        DESCRIPTION
 950:            "The total number of IPsec tunnels that have been deleted by
 951:            all channels of this type. This is the sum of
 952:            'ipsecChannelDeletedTunnels' from the 'ipsecChannelEntry' of
 953:            each channel in 'ipsecChannelTable' that is of this type.
 954: 
 955:            The sum of 'ipsecChanAggCurrentTunnels' and this value should
 956:            equal 'ipsecChanAggTotalTunnels'."
 957:        ::= { ipsecChanAggEntry 13 }
 958: 
 959:    ipsecChanAggTnlInboundOctets OBJECT-TYPE
 959: change recommended - warning: node `ipsecChanAggTnlInboundOctets' must be contained in at least one conformance group
 960:        SYNTAX     Counter64
 961:        UNITS      "bytes"
 962:        MAX-ACCESS read-only
 963:        STATUS     current
 964:        DESCRIPTION
 965:            "The amount of traffic measured in bytes received by all
 966:            tunnels created by all channels of this type. This is the sum
 967:            of 'ipsecChannelTunnelInboundOctets' from the
 968:            'ipsecChannelEntry' of each channel in 'ipsecChannelTable'
 969:            that is of this type."
 970:        ::= { ipsecChanAggEntry 14 }
 971: 
 972:    ipsecChanAggTnlOutboundOctets OBJECT-TYPE
 972: change recommended - warning: node `ipsecChanAggTnlOutboundOctets' must be contained in at least one conformance group
 973:        SYNTAX     Counter64
 974:        UNITS      "bytes"
 975:        MAX-ACCESS read-only
 976:        STATUS     current
 977:        DESCRIPTION
 978:            "The amount of traffic measured in bytes sent by all tunnels
 979:            created by all channels of this type. This is the sum of
 980:            'ipsecChannelTunnelOutboundOctets' from the
 981:            'ipsecChannelEntry' of each channel in 'ipsecChannelTable'
 982:            that is of this type."
 983:        ::= { ipsecChanAggEntry 15 }
 984: 
 985:    ipsecChanAggTnlInboundPackets OBJECT-TYPE
 985: change recommended - warning: node `ipsecChanAggTnlInboundPackets' must be contained in at least one conformance group
 986:        SYNTAX     Counter64
 987:        MAX-ACCESS read-only
 988:        STATUS     current
 989:        DESCRIPTION
 990:            "The total number of packets received by all tunnels created
 991:            by all channels of this type. This is the sum of
 992:            'ipsecChannelTunnelInboundPackets' from the
 993:            'ipsecChannelEntry' of each channel in 'ipsecChannelTable'
 994:            that is of this type."
 995:        ::= { ipsecChanAggEntry 16 }
 996: 
 997:    ipsecChanAggTnlOutboundPackets OBJECT-TYPE
 997: change recommended - warning: node `ipsecChanAggTnlOutboundPackets' must be contained in at least one conformance group
 998:        SYNTAX     Counter64
 999:        MAX-ACCESS read-only
1000:        STATUS     current
1001:        DESCRIPTION
1002:            "The total number of packets sent by all tunnels created by
1003:            all channels of this type. This is the sum of
1004:            'ipsecChannelTunnelOutboundPackets' from the
1005:            'ipsecChannelEntry' of each channel in 'ipsecChannelTable'
1006:            that is of this type."
1007:        ::= { ipsecChanAggEntry 17 }
1008: 
1009:    ipsecChanAggTnlReceiveErrors OBJECT-TYPE
1009: change recommended - warning: node `ipsecChanAggTnlReceiveErrors' must be contained in at least one conformance group
1010:        SYNTAX     Counter32
1011:        MAX-ACCESS read-only
1012:        STATUS     current
1013:        DESCRIPTION
1014:            "The total number of receive errors incurred in all tunnels
1015:            created by all channels of this type. This is the sum of
1016:            'ipsecChannelTunnelReceiveErrors' from the
1017:            'ipsecChannelEntry' of each channel in 'ipsecChannelTable'
1018:            that is of this type."
1019:        ::= { ipsecChanAggEntry 18 }
1020: 
1021:    ipsecChanAggTnlSendErrors OBJECT-TYPE
1021: change recommended - warning: node `ipsecChanAggTnlSendErrors' must be contained in at least one conformance group
1022:        SYNTAX     Counter32
1023:        MAX-ACCESS read-only
1024:        STATUS     current
1025:        DESCRIPTION
1026:            "The total number of send errors incurred in all tunnels
1027:            created by all channels of this type. This is the sum of
1028:            'ipsecChannelTunnelSendErrors' from the 'ipsecChannelEntry'
1029:            of each channel in 'ipsecChannelTable' that is of this type."
1030:        ::= { ipsecChanAggEntry 19 }
1031: 
1032: 
1033:    -- the IPsec Tunnel MIB-Group
1034:    --
1035:    -- a collection of objects providing information about
1036:    -- IPsec SA suite-based virtual tunnels
1037: 
1038: 
1039:    ipsecTunnelTable OBJECT-TYPE
1040:        SYNTAX     SEQUENCE OF IpsecTunnelEntry
1041:        MAX-ACCESS not-accessible
1042:        STATUS     current
1043:        DESCRIPTION
1044:            "The (conceptual) table containing information on IPsec SA
1045:            suite-based tunnels.
1046: 
1047:            The number of rows is, at a minimum, the same as the number
1048:            of IPsec SA suites in the entity that have identical
1049:            selectors. Additional rows for tunnels without active IPsec
1050:            SA suites may also appear in the table.
1051: 
1052:            The maximum number of rows is implementation dependent."
1053:        ::= { tunnelTables 1 }
1054: 
1055:    ipsecTunnelEntry OBJECT-TYPE
1056:        SYNTAX     IpsecTunnelEntry
1057:        MAX-ACCESS not-accessible
1058:        STATUS     current
1059:        DESCRIPTION
1060:            "An entry (conceptual row) containing the information on a
1061:            particular tunnel.
1062: 
1063:            A row in this table cannot be created or deleted by SNMP
1064:            operations on columns of the table."
1065:        INDEX  { ipsecTunnelType, ipsecTunnelId }
1066:        ::= { ipsecTunnelTable 1 }
1067: 
1068:    IpsecTunnelEntry ::= SEQUENCE {
1068: warning - warning: SEQUENCE element #7 `ipsecTunnelRemoteEndpoint' does not match order of columnar objects under `ipsecTunnelEntry'
1069:        ipsecTunnelType                IpsecChanOrTunType,
1070:        ipsecTunnelId                  Unsigned32,
1071: 
1072:    -- tunnel endpoints
1073:        ipsecTunnelLocalIpAddrType     InetAddressType,
1074:        ipsecTunnelLocalIpAddress      InetAddress,
1075:        ipsecTunnelRemoteIpAddrType    InetAddressType,
1076:        ipsecTunnelRemoteIpAddress     InetAddress,
1077: 
1078:    -- creator identifiers
1079:        ipsecTunnelRemoteEndpoint      Unsigned32,
1080:        ipsecTunnelLocalEndpoint       Unsigned32,
1081: 
1082:    -- operational statistics
1083:        ipsecTunnelCurrentSaSuites     Gauge32,
1084:        ipsecTunnelTotalSaSuites       Counter32,
1085:        ipsecTunnelDeletedSaSuites     Counter32,
1086:        ipsecTunnelTimeUpSeconds       Counter32, -- since suites > 0
1087:        ipsecTunnelTimeDownSeconds     Counter32, -- since suites = 0
1088: 
1089:    -- aggregate statistics
1090:        ipsecTunnelTotalInboundOctets  Counter64,
1091:        ipsecTunnelTotalOutboundOctets Counter64,
1092:        ipsecTunnelTotalInboundPackets Counter64,
1093:        ipsecTunnelTotalOutboundPackets    Counter64,
1094: 
1095:    -- aggregate error statistics
1096:        ipsecTunnelSendErrors          Counter32,
1097:        ipsecTunnelReceiveErrors       Counter32
1098: 
1099:    }
1100: 
1101:    ipsecTunnelType OBJECT-TYPE
1102:        SYNTAX     IpsecChanOrTunType
1103:        MAX-ACCESS not-accessible
1104:        STATUS     current
1105:        DESCRIPTION
1106:            "The type of tunnel represented by this row.
1107:            This is an implementation dependent value, used to assist in
1108:            controlling how tunnels are sorted."
1109:        ::= { ipsecTunnelEntry 1 }
1110: 
1111:    ipsecTunnelId  OBJECT-TYPE
1112:        SYNTAX     Unsigned32
1113:        MAX-ACCESS not-accessible
1114:        STATUS     current
1115:        DESCRIPTION
1116:            "The index value of the selector table row that contains the
1117:            selectors that are the identity of this tunnel.
1118: 
1119:            Specifically, this is the value of 'selectorIndex' from the
1120:            appropriate row ('selectorEntry') from the table
1121:            'selectorTable' from the MIB 'ipsecMonModule'.
1122:            (NOTE: Should this be an OBJECT IDENTIFIER instead?)"
1123:        ::= { ipsecTunnelEntry 2 }
1124: 
1125:    ipsecTunnelLocalIpAddrType OBJECT-TYPE
1125: change recommended - warning: node `ipsecTunnelLocalIpAddrType' must be contained in at least one conformance group
1126:        SYNTAX     InetAddressType
1127:        MAX-ACCESS read-only
1128:        STATUS     current
1129:        DESCRIPTION
1130:            "The type of address used by the local endpoint of the
1131:            tunnel."
1132:        ::= { ipsecTunnelEntry 3 }
1133: 
1134:    ipsecTunnelLocalIpAddress  OBJECT-TYPE
1134: change recommended - warning: node `ipsecTunnelLocalIpAddress' must be contained in at least one conformance group
1135:        SYNTAX     InetAddress (SIZE(4|16|20))
1136:        MAX-ACCESS read-only
1137:        STATUS     current
1138:        DESCRIPTION
1139:            "The address used by the local endpoint of the tunnel."
1140:        ::= { ipsecTunnelEntry 4 }
1141: 
1142:    ipsecTunnelRemoteIpAddrType    OBJECT-TYPE
1142: change recommended - warning: node `ipsecTunnelRemoteIpAddrType' must be contained in at least one conformance group
1143:        SYNTAX     InetAddressType
1144:        MAX-ACCESS read-only
1145:        STATUS     current
1146:        DESCRIPTION
1147:            "The type of address used by the remote endpoint of the
1148:            tunnel."
1149:        ::= { ipsecTunnelEntry 5 }
1150: 
1151:    ipsecTunnelRemoteIpAddress OBJECT-TYPE
1151: change recommended - warning: node `ipsecTunnelRemoteIpAddress' must be contained in at least one conformance group
1152:        SYNTAX     InetAddress (SIZE(4|16|20))
1153:        MAX-ACCESS read-only
1154:        STATUS     current
1155:        DESCRIPTION
1156:            "The address used by the remote endpoint of the tunnel."
1157:        ::= { ipsecTunnelEntry 6 }
1158: 
1159:    ipsecTunnelLocalEndpoint   OBJECT-TYPE
1159: change recommended - warning: node `ipsecTunnelLocalEndpoint' must be contained in at least one conformance group
1160:        SYNTAX     Unsigned32
1161:        MAX-ACCESS read-only
1162:        STATUS     current
1163:        DESCRIPTION
1164:            "The index of the local endpoint that negotiated this tunnel.
1165: 
1166:            It is the value of 'endpointIndex' from the correct row
1167:            ('IkeEndpointEntry') of the 'ikeEndpointTable' from
1168:            'ikeMonModule'.
1169:            (NOTE: Should this be an OBJECT IDENTIFIER instead?)"
1170:        ::= { ipsecTunnelEntry 7 }
1171: 
1172:    ipsecTunnelRemoteEndpoint  OBJECT-TYPE
1172: change recommended - warning: node `ipsecTunnelRemoteEndpoint' must be contained in at least one conformance group
1173:        SYNTAX     Unsigned32
1174:        MAX-ACCESS read-only
1175:        STATUS     current
1176:        DESCRIPTION
1177:            "The index of the remote endpoint that negotiated this
1178:            tunnel.
1179: 
1180:            It is the value of 'endpointIndex' from the correct row
1181:            ('IkeEndpointEntry') of the 'ikeEndpointTable' from
1182:            'ikeMonModule'."
1183:        ::= { ipsecTunnelEntry 8 }
1184: 
1185:    ipsecTunnelCurrentSaSuites OBJECT-TYPE
1185: change recommended - warning: node `ipsecTunnelCurrentSaSuites' must be contained in at least one conformance group
1186:        SYNTAX     Gauge32
1187:        MAX-ACCESS read-only
1188:        STATUS     current
1189:        DESCRIPTION
1190:            "The number of phase 2 SA suites that are currently active
1191:            that make up this tunnel.
1192: 
1193:            This value may be 0 if the tunnel has not yet been set up, or
1194:            the implementation does not require the existence of phase 2
1195:            SA suites for the tunnel to exist, or if the tunnel is
1196:            considered a permanent entry in the table by the
1197:            implementation.
1198: 
1199:            This value should not include phase 2 SA suite establishment
1200:            attempts in progress."
1201:        ::= { ipsecTunnelEntry 9 }
1202: 
1203:    ipsecTunnelTotalSaSuites OBJECT-TYPE
1203: change recommended - warning: node `ipsecTunnelTotalSaSuites' must be contained in at least one conformance group
1204:        SYNTAX     Counter32
1205:        MAX-ACCESS read-only
1206:        STATUS     current
1207:        DESCRIPTION
1208:            "The total number of phase 2 SA suites that are part of this
1209:            tunnel that have been created in the entity since boot time.
1210: 
1211:            This value should not include failed phase 2 SA suite
1212:            establishment attempts."
1213:        ::= { ipsecTunnelEntry 10 }
1214: 
1215:    ipsecTunnelDeletedSaSuites OBJECT-TYPE
1215: change recommended - warning: node `ipsecTunnelDeletedSaSuites' must be contained in at least one conformance group
1216:        SYNTAX     Counter32
1217:        MAX-ACCESS read-only
1218:        STATUS     current
1219:        DESCRIPTION
1220:            "The total number of phase 2 SA suites that are part of this
1221:            channel that have been deleted in the entity since boot time.
1222: 
1223:            The sum of 'ipsecTunnelCurrentSaSuites' and this value should
1224:            equal 'ipsecTunnelTotalSaSuites'."
1225:        ::= { ipsecTunnelEntry 11 }
1226: 
1227:    ipsecTunnelTimeUpSeconds OBJECT-TYPE
1227: change recommended - warning: node `ipsecTunnelTimeUpSeconds' must be contained in at least one conformance group
1228:        SYNTAX     Counter32
1229:        UNITS      "seconds"
1230:        MAX-ACCESS read-only
1231:        STATUS     current
1232:        DESCRIPTION
1233:            "The total number of seconds since there has been at least
1234:            one valid phase 2 SA suite supporting the channel. In other
1235:            words, the number of seconds since the value of
1236:            'ipsecTunnelCurrentSaSuites' changed from 0 to any other
1237:            value."
1238:        ::= { ipsecTunnelEntry 12 }
1239: 
1240:    ipsecTunnelTimeDownSeconds OBJECT-TYPE
1240: change recommended - warning: node `ipsecTunnelTimeDownSeconds' must be contained in at least one conformance group
1241:        SYNTAX     Counter32
1242:        UNITS      "seconds"
1243:        MAX-ACCESS read-only
1244:        STATUS     current
1245:        DESCRIPTION
1246:            "The total number of seconds since the last valid phase 2 SA
1247:            suite supporting the channel was deleted. In other words, the
1248:            number of seconds since the value of
1249:            'ipsecTunnelCurrentSaSuites' changed to 0 from any other
1250:            value."
1251:        ::= { ipsecTunnelEntry 13 }
1252: 
1253:    ipsecTunnelTotalInboundOctets OBJECT-TYPE
1253: change recommended - warning: node `ipsecTunnelTotalInboundOctets' must be contained in at least one conformance group
1254:        SYNTAX     Counter64
1255:        UNITS      "bytes"
1256:        MAX-ACCESS read-only
1257:        STATUS     current
1258:        DESCRIPTION
1259:            "The total amount of traffic measured in bytes received by
1260:            the tunnel. This is the sum of 'suiteInUserOctets' from the
1261:            'suiteEntry' of each phase 2 SA suite in 'suiteTable' that is
1262:            part of this tunnel."
1263:        ::= { ipsecTunnelEntry 14 }
1264: 
1265:    ipsecTunnelTotalOutboundOctets OBJECT-TYPE
1265: change recommended - warning: node `ipsecTunnelTotalOutboundOctets' must be contained in at least one conformance group
1266:        SYNTAX     Counter64
1267:        UNITS      "bytes"
1268:        MAX-ACCESS read-only
1269:        STATUS     current
1270:        DESCRIPTION
1271:            "The total amount of traffic measured in bytes sent by the
1272:            tunnel. This is the sum of 'suiteOutUserOctets' from the
1273:            'suiteEntry' of each phase 2 SA suite in 'suiteTable' that is
1274:            part of this tunnel."
1275:        ::= { ipsecTunnelEntry 15 }
1276: 
1277:    ipsecTunnelTotalInboundPackets OBJECT-TYPE
1277: change recommended - warning: node `ipsecTunnelTotalInboundPackets' must be contained in at least one conformance group
1278:        SYNTAX     Counter64
1279:        MAX-ACCESS read-only
1280:        STATUS     current
1281:        DESCRIPTION
1282:            "The total number of packets received by the tunnel. This is
1283:            the sum of 'suiteInPackets' from the 'suiteEntry' of each
1284:            phase 2 SA suite in 'suiteTable' that is part of this
1285:            tunnel."
1286:        ::= { ipsecTunnelEntry 16 }
1287: 
1288:    ipsecTunnelTotalOutboundPackets OBJECT-TYPE
1288: change recommended - warning: node `ipsecTunnelTotalOutboundPackets' must be contained in at least one conformance group
1289:        SYNTAX     Counter64
1290:        MAX-ACCESS read-only
1291:        STATUS     current
1292:        DESCRIPTION
1293:            "The total number of packets sent by the tunnel. This is the
1294:            sum of 'suiteOutPackets' from the 'suiteEntry' of each phase
1295:            2 SA suite in 'suiteTable' that is part of this tunnel."
1296:        ::= { ipsecTunnelEntry 17 }
1297: 
1298:    ipsecTunnelSendErrors OBJECT-TYPE
1298: change recommended - warning: node `ipsecTunnelSendErrors' must be contained in at least one conformance group
1299:        SYNTAX     Counter32
1300:        MAX-ACCESS read-only
1301:        STATUS     current
1302:        DESCRIPTION
1303:            "The total number of send errors in the tunnel. This is the
1304:            sum of 'suiteSendErrors' from the 'suiteEntry' of each phase
1305:            2 SA suite in 'suiteTable' that is part of this tunnel."
1306:        ::= { ipsecTunnelEntry 18 }
1307: 
1308:    ipsecTunnelReceiveErrors OBJECT-TYPE
1308: change recommended - warning: node `ipsecTunnelReceiveErrors' must be contained in at least one conformance group
1309:        SYNTAX     Counter32
1310:        MAX-ACCESS read-only
1311:        STATUS     current
1312:        DESCRIPTION
1313:            "The total number of receive errors in the tunnel. This is
1314:            the sum of 'suiteReceiveErrors' from the 'suiteEntry' of each
1315:            phase 2 SA suite in 'suiteTable' that is part of this
1316:            tunnel."
1317:        ::= { ipsecTunnelEntry 19 }
1318: 
1319: 
1320:    -- the IPsec SA Suite MIB-Group
1321:    --
1322:    -- a collection of objects providing information about
1323:    -- IPsec SA suites used in virtual tunnels
1324: 
1325: 
1326:    ipsecTunnelSuiteTable OBJECT-TYPE
1327:        SYNTAX     SEQUENCE OF IpsecTunnelSuiteEntry
1328:        MAX-ACCESS not-accessible
1329:        STATUS     current
1330:        DESCRIPTION
1331:            "The (conceptual) table containing information on IPsec SA
1332:            suites.
1333: 
1334:            The number of rows is the same as the number of IPsec SA
1335:            suites in the entity.
1336: 
1337:            The maximum number of rows is implementation dependent."
1338:        ::= { tunnelTables 2 }
1339: 
1340:    ipsecTunnelSuiteEntry OBJECT-TYPE
1341:        SYNTAX     IpsecTunnelSuiteEntry
1342:        MAX-ACCESS not-accessible
1343:        STATUS     current
1344:        DESCRIPTION
1345:            "An entry (conceptual row) containing the identifiers to a
1346:            particular SA suite.
1347: 
1348:            A row in this table cannot be created or deleted by SNMP
1349:            operations on columns of the table."
1350: 
1351:        INDEX  {
1352:                    ipsecTunnelType,
1353:                    ipsecTunnelId,
1354:                    ipsecTunnelSuiteIndex
1355:                }
1356:        ::= { ipsecTunnelSuiteTable 1 }
1357: 
1358:    IpsecTunnelSuiteEntry ::= SEQUENCE {
1359: 
1360:    -- additional index
1361:        ipsecTunnelSuiteIndex      Unsigned32,
1362: 
1363:    -- identifier of suite
1364:        ipsecTunnelSuiteReference  OBJECT IDENTIFIER
1365:    }
1366: 
1367:    ipsecTunnelSuiteIndex  OBJECT-TYPE
1368:        SYNTAX     Unsigned32 (1..16777215)
1369:        MAX-ACCESS not-accessible
1370:        STATUS     current
1371:        DESCRIPTION
1372:            "A unique value, greater than zero, for each SA suite in the
1373:            tunnel. It is recommended that values are assigned
1374:            contiguously starting from 1."
1375:        ::= { ipsecTunnelSuiteEntry 1 }
1376: 
1377:    ipsecTunnelSuiteReference  OBJECT-TYPE
1377: change recommended - warning: node `ipsecTunnelSuiteReference' must be contained in at least one conformance group
1378:        SYNTAX     OBJECT IDENTIFIER
1379:        MAX-ACCESS read-only
1380:        STATUS     current
1381:        DESCRIPTION
1382:            "The object identifier of the IPsec SA suite row that
1383:            represents the IPsec SA suite in the tunnel.
1384: 
1385:            Specifically, the value of this object is the object
1386:            identifier of 'suiteIndex' of the appropriate row
1387:            ('SuiteEntry') in 'suiteTable' from 'ikeMonModule'."
1388:        ::= { ipsecTunnelSuiteEntry 2 }
1389: 
1390: 
1391: 
1392:    -- the IPsec tunnel aggregates table
1393:    --
1394:    -- a table providing aggregate statistics for the user-defined
1395:    -- tunnel types
1396: 
1397: 
1398:    ipsecTunAggTable OBJECT-TYPE
1399:        SYNTAX     SEQUENCE OF IpsecTunAggEntry
1400:        MAX-ACCESS not-accessible
1401:        STATUS     current
1402:        DESCRIPTION
1403:            "The optional (conceptual) table containing information on
1404:            aggregate statistics for the tunnel types.
1405: 
1406:            The number of rows is the same as the number of tunnel types
1407:            supported by the entity.
1408: 
1409:            The maximum number of rows is implementation dependent."
1410:        ::= { tunnelTables 3 }
1411: 
1412:    ipsecTunAggEntry OBJECT-TYPE
1413:        SYNTAX     IpsecTunAggEntry
1414:        MAX-ACCESS not-accessible
1415:        STATUS     current
1416:        DESCRIPTION
1417:            "An entry (conceptual row) containing the aggregate
1418:            statistics for a specific tunnel type.
1419: 
1420:            A row in this table cannot be created or deleted by SNMP
1421:            operations on columns of the table."
1422:        INDEX  { ipsecTunnelType }
1423:        ::= { ipsecTunAggTable 1 }
1424: 
1425:    IpsecTunAggEntry ::= SEQUENCE {
1426: 
1427:    -- tunnel counts of this type
1428:        ipsecTunAggCurrentTunnels      Gauge32,
1429:        ipsecTunAggTotalTunnels        Counter32,
1430:        ipsecTunAggDeletedTunnels      Counter32,
1431: 
1432:    -- aggregate statistics
1433:        ipsecTunAggInboundOctets       Counter64,
1434:        ipsecTunAggOutboundOctets      Counter64,
1435:        ipsecTunAggInboundPackets      Counter64,
1436:        ipsecTunAggOutboundPackets     Counter64,
1437: 
1438:    -- aggregate error statistics
1439:        ipsecTunAggSendErrors          Counter32,
1440:        ipsecTunAggReceiveErrors       Counter32
1441:    }
1442: 
1443: 
1444:    ipsecTunAggCurrentTunnels OBJECT-TYPE
1444: change recommended - warning: node `ipsecTunAggCurrentTunnels' must be contained in at least one conformance group
1445:        SYNTAX     Gauge32
1446:        MAX-ACCESS read-only
1447:        STATUS     current
1448:        DESCRIPTION
1449:            "The number of tunnels that are currently active that are of
1450:            the specified type.
1451: 
1452:            This value should not include tunnel establishment attempts
1453:            in progress."
1454:        ::= { ipsecTunAggEntry 1 }
1455: 
1456:    ipsecTunAggTotalTunnels OBJECT-TYPE
1456: change recommended - warning: node `ipsecTunAggTotalTunnels' must be contained in at least one conformance group
1457:        SYNTAX     Counter32
1458:        MAX-ACCESS read-only
1459:        STATUS     current
1460:        DESCRIPTION
1461:            "The total number of tunnels of this type that have been
1462:            created in the entity since boot time.
1463: 
1464:            This value should not include failed tunnel establishment
1465:            attempts."
1466:        ::= { ipsecTunAggEntry 2 }
1467: 
1468:    ipsecTunAggDeletedTunnels OBJECT-TYPE
1468: change recommended - warning: node `ipsecTunAggDeletedTunnels' must be contained in at least one conformance group
1469:        SYNTAX     Counter32
1470:        MAX-ACCESS read-only
1471:        STATUS     current
1472:        DESCRIPTION
1473:            "The total number of tunnels of this type that have been
1474:            deleted in the entity since boot time.
1475: 
1476:            The sum of 'ipsecTunAggCurrentTunnels' and this value should
1477:            equal 'ipsecTunAggTotalTunnels'."
1478:        ::= { ipsecTunAggEntry 3 }
1479: 
1480:    ipsecTunAggInboundOctets OBJECT-TYPE
1480: change recommended - warning: node `ipsecTunAggInboundOctets' must be contained in at least one conformance group
1481:        SYNTAX     Counter64
1482:        UNITS      "bytes"
1483:        MAX-ACCESS read-only
1484:        STATUS     current
1485:        DESCRIPTION
1486:            "The total amount of traffic measured in bytes received by
1487:            all tunnels of this type. This is the sum of
1488:            'ipsecTunnelInboundOctets' from the 'ipsecTunnelEntry' of
1489:            each tunnel in 'ipsecTunnelTable' that is of this type."
1490:        ::= { ipsecTunAggEntry 4 }
1491: 
1492:    ipsecTunAggOutboundOctets OBJECT-TYPE
1492: change recommended - warning: node `ipsecTunAggOutboundOctets' must be contained in at least one conformance group
1493:        SYNTAX     Counter64
1494:        UNITS      "bytes"
1495:        MAX-ACCESS read-only
1496:        STATUS     current
1497:        DESCRIPTION
1498:            "The total amount of traffic measured in bytes sent by all
1499:            tunnels of this type. This is the sum of
1500:            'ipsecTunnelOutboundOctets' from the 'ipsecTunnelEntry' of
1501:            each tunnel in 'ipsecTunnelTable' that is of this type."
1502:        ::= { ipsecTunAggEntry 5 }
1503: 
1504:    ipsecTunAggInboundPackets OBJECT-TYPE
1504: change recommended - warning: node `ipsecTunAggInboundPackets' must be contained in at least one conformance group
1505:        SYNTAX     Counter64
1506:        MAX-ACCESS read-only
1507:        STATUS     current
1508:        DESCRIPTION
1509:            "The total number of packets received by all tunnels of this
1510:            type. This is the sum of 'ipsecTunnelInboundPackets' from the
1511:            'ipsecTunnelEntry' of each tunnel in 'ipsecTunnelTable' that
1512:            is of this type."
1513:        ::= { ipsecTunAggEntry 6 }
1514: 
1515:    ipsecTunAggOutboundPackets OBJECT-TYPE
1515: change recommended - warning: node `ipsecTunAggOutboundPackets' must be contained in at least one conformance group
1516:        SYNTAX     Counter64
1517:        MAX-ACCESS read-only
1518:        STATUS     current
1519:        DESCRIPTION
1520:            "The total number of packets sent by all tunnels of this
1521:            type. This is the sum of 'ipsecTunnelOutboundPackets' from
1522:            the 'ipsecTunnelEntry' of each tunnel in 'ipsecTunnelTable'
1523:            that is of this type."
1524:        ::= { ipsecTunAggEntry 7 }
1525: 
1526:    ipsecTunAggSendErrors OBJECT-TYPE
1526: change recommended - warning: node `ipsecTunAggSendErrors' must be contained in at least one conformance group
1527:        SYNTAX     Counter32
1528:        MAX-ACCESS read-only
1529:        STATUS     current
1530:        DESCRIPTION
1531:            "The total number of send errors incurred by all tunnels of
1532:            this type. This is the sum of 'ipsecTunnelSendErrors' from
1533:            the 'ipsecTunnelEntry' of each tunnel in 'ipsecTunnelTable'
1534:            that is of this type."
1535:        ::= { ipsecTunAggEntry 8 }
1536: 
1537:    ipsecTunAggReceiveErrors OBJECT-TYPE
1537: change recommended - warning: node `ipsecTunAggReceiveErrors' must be contained in at least one conformance group
1538:        SYNTAX     Counter32
1539:        MAX-ACCESS read-only
1540:        STATUS     current
1541:        DESCRIPTION
1542:            "The total number of receive errors incurred by all tunnels
1543:            of this type. This is the sum of 'ipsecTunnelReceiveErrors'
1544:            from the 'ipsecTunnelEntry' of each tunnel in
1545:            'ipsecTunnelTable' that is of this type."
1546:        ::= { ipsecTunAggEntry 9 }
1547: 
1548: 
1549: 
1550:    --
1551:    -- table to find tunnels based on the tunnel identifiers
1552:    --
1553: 
1554:    tunnelBySelectorsTable OBJECT-TYPE
1555:        SYNTAX     SEQUENCE OF TunnelBySelectorsEntry
1556:        MAX-ACCESS not-accessible
1557:        STATUS     current
1558:        DESCRIPTION
1559:            "The (conceptual) table that sorts the tunnels by the
1560:            selectors.
1561: 
1562:            The number of rows in this table is the same as the number of
1563:            tunnels in the entity."
1564:        ::= { tunnelTables 4 }
1565: 
1566:    tunnelBySelectorsEntry OBJECT-TYPE
1567:        SYNTAX     TunnelBySelectorsEntry
1568:        MAX-ACCESS not-accessible
1569:        STATUS     current
1570:        DESCRIPTION
1571:            "An entry (conceptual row) referencing a particular tunnel.
1572: 
1573:            A row in this table cannot be created or deleted by SNMP
1574:            operations on columns of the table."
1575:        INDEX  {
1576:                    tunnelBySelectorsHash,
1577:                    tunnelBySelectorsIndex
1578:                }
1579:        ::= { tunnelBySelectorsTable 1 }
1580: 
1581:    TunnelBySelectorsEntry ::= SEQUENCE {
1582:    -- index
1583:        tunnelBySelectorsHash          OCTET STRING,
1584:        tunnelBySelectorsIndex         Unsigned32,
1585: 
1586:    -- real tunnel identifiers
1587:        tunnelBySelectorsId            Unsigned32,
1588: 
1589:    -- tunnel reference
1590:        tunnelBySelectorsType          IpsecChanOrTunType,
1591:        tunnelBySelectorsRef           OBJECT IDENTIFIER
1592:    }
1593: 
1594:    tunnelBySelectorsHash  OBJECT-TYPE
1595:        SYNTAX     OCTET STRING (SIZE(4))
1596:        MAX-ACCESS not-accessible
1597:        STATUS     current
1598:        DESCRIPTION
1599:            "The hash result of the full identifer of the tunnel. Precise
1600:            definition to be completed."
1601:        ::= { tunnelBySelectorsEntry 1 }
1602: 
1603:    tunnelBySelectorsIndex OBJECT-TYPE
1604:        SYNTAX     Unsigned32 (1..16777215)
1605:        MAX-ACCESS not-accessible
1606:        STATUS     current
1607:        DESCRIPTION
1608:            "A unique value, greater than zero, for each tunnel in the
1609:            table where the hash results of the tunnel identifiers
1610:            collide. It is recommended that values are assigned
1611:            contiguously starting from 1."
1612:        ::= { tunnelBySelectorsEntry 2 }
1613: 
1614:    tunnelBySelectorsId OBJECT-TYPE
1614: change recommended - warning: node `tunnelBySelectorsId' must be contained in at least one conformance group
1615:        SYNTAX     Unsigned32
1616:        MAX-ACCESS read-only
1617:        STATUS     current
1618:        DESCRIPTION
1619:            "The identifier of the tunnel.
1620: 
1621:            The value of this object is the index of the selector
1622:            ('selectorIndex') row ('SelectorEntry') from the
1623:            'selectorTable' that identifies this tunnel."
1624:        ::= { tunnelBySelectorsEntry 3 }
1625: 
1626:    tunnelBySelectorsType  OBJECT-TYPE
1626: change recommended - warning: node `tunnelBySelectorsType' must be contained in at least one conformance group
1627:        SYNTAX     IpsecChanOrTunType
1628:        MAX-ACCESS read-only
1629:        STATUS     current
1630:        DESCRIPTION
1631:            "The type assigned to the tunnel for which this row refers."
1632:        ::= { tunnelBySelectorsEntry 4 }
1633: 
1634:    tunnelBySelectorsRef   OBJECT-TYPE
1634: change recommended - warning: node `tunnelBySelectorsRef' must be contained in at least one conformance group
1635:        SYNTAX     OBJECT IDENTIFIER
1636:        MAX-ACCESS read-only
1637:        STATUS     current
1638:        DESCRIPTION
1639:            "The object identifier of 'tunnelIndex' in the row
1640:            ('tunnelEntry') of the 'tunnelTable' to which this row
1641:            refers."
1642:        ::= { tunnelBySelectorsEntry 5 }
1643: 
1644: 
1645: 
1646:    --
1647:    -- trap parameters, traps and control
1648:    --
1649: 
1650:    channelTrapLocalEndpoint OBJECT-TYPE
1650: change recommended - warning: node `channelTrapLocalEndpoint' must be contained in at least one conformance group
1651:        SYNTAX     Unsigned32
1652:        MAX-ACCESS accessible-for-notify
1653:        STATUS     current
1654:        DESCRIPTION
1655:            "The index to an endpoint that is the local endpoint of a
1656:            channel in a trap."
1657:        ::= { channelTrapObjects 1 }
1658: 
1659:    channelTrapRemoteEndpoint OBJECT-TYPE
1659: change recommended - warning: node `channelTrapRemoteEndpoint' must be contained in at least one conformance group
1660:        SYNTAX     Unsigned32
1661:        MAX-ACCESS accessible-for-notify
1662:        STATUS     current
1663:        DESCRIPTION
1664:            "The index to an endpoint that is the remote endpoint of a
1665:            channel in a trap."
1666:        ::= { channelTrapObjects 2 }
1667: 
1668:    tunnelTrapIdentifier OBJECT-TYPE
1668: change recommended - warning: node `tunnelTrapIdentifier' must be contained in at least one conformance group
1669:        SYNTAX     Unsigned32
1670:        MAX-ACCESS accessible-for-notify
1671:        STATUS     current
1672:        DESCRIPTION
1673:            "The index to a selector that is the identifier of a tunnel
1674:            in a trap."
1675:        ::= { tunnelTrapObjects 1 }
1676: 
1677: 
1678:    channelUpTrapEnable OBJECT-TYPE
1678: change recommended - warning: node `channelUpTrapEnable' must be contained in at least one conformance group
1679:        SYNTAX     TruthValue
1680:        MAX-ACCESS read-write
1681:        STATUS     current
1682:        DESCRIPTION
1683:            "Indicates whether channelUp traps should be generated."
1684:        DEFVAL { false }
1685:        ::= { channelTrapControl 1 }
1686: 
1687:    channelDownTrapEnable OBJECT-TYPE
1687: change recommended - warning: node `channelDownTrapEnable' must be contained in at least one conformance group
1688:        SYNTAX     TruthValue
1689:        MAX-ACCESS read-write
1690:        STATUS     current
1691:        DESCRIPTION
1692:            "Indicates whether channelDown traps should be generated."
1693:        DEFVAL { false }
1694:        ::= { channelTrapControl 2 }
1695: 
1696:    channelUp NOTIFICATION-TYPE
1696: warning - warning: notification `channelUp' is not reverse mappable
1696: change recommended -
warning: notification `channelUp' must be contained in at least one conformance group
1697:        OBJECTS
1698:        {
1699:            channelTrapLocalEndpoint,
1700:            channelTrapRemoteEndpoint
1701:        }
1702:        STATUS current
1703:        DESCRIPTION
1704:            "The specified channel is now up. (In other words, the number
1705:            of current IKE SAs supporting the channel has changed from
1706:            zero to a non-zero value.)"
1707:        ::= { channelTraps 1 }
1708: 
1709:    channelDown NOTIFICATION-TYPE
1709: warning - warning: notification `channelDown' is not reverse mappable
1709: change recommended -
warning: notification `channelDown' must be contained in at least one conformance group
1710:        OBJECTS
1711:        {
1712:            channelTrapLocalEndpoint,
1713:            channelTrapRemoteEndpoint
1714:        }
1715:        STATUS current
1716:        DESCRIPTION
1717:            "The specified channel is now down. (In other words, the
1718:            number of current IKE SAs supporting the channel has changed
1719:            to zero from a non-zero value.)"
1720:        ::= { channelTraps 2 }
1721: 
1722:    tunnelUpTrapEnable OBJECT-TYPE
1722: change recommended - warning: node `tunnelUpTrapEnable' must be contained in at least one conformance group
1723:        SYNTAX     TruthValue
1724:        MAX-ACCESS read-write
1725:        STATUS     current
1726:        DESCRIPTION
1727:            "Indicates whether tunnelUp traps should be generated."
1728:        DEFVAL { false }
1729:        ::= { tunnelTrapControl 1 }
1730: 
1731:    tunnelDownTrapEnable OBJECT-TYPE
1731: change recommended - warning: node `tunnelDownTrapEnable' must be contained in at least one conformance group
1732:        SYNTAX     TruthValue
1733:        MAX-ACCESS read-write
1734:        STATUS     current
1735:        DESCRIPTION
1736:            "Indicates whether tunnelDown traps should be generated."
1737:        DEFVAL { false }
1738:        ::= { tunnelTrapControl 2 }
1739: 
1740:    tunnelUp NOTIFICATION-TYPE
1740: warning - warning: notification `tunnelUp' is not reverse mappable
1740: change recommended -
warning: notification `tunnelUp' must be contained in at least one conformance group
1741:        OBJECTS
1742:        {
1743:            tunnelTrapIdentifier
1744:        }
1745:        STATUS current
1746:        DESCRIPTION
1747:            "The specified tunnel is now up. (In other words, the number
1748:            of current phase 2 SA suites supporting the tunnel has
1749:            changed from zero to a non-zero value.)"
1750:        ::= { tunnelTraps 1 }
1751: 
1752:    tunnelDown NOTIFICATION-TYPE
1752: warning - warning: notification `tunnelDown' is not reverse mappable
1752: change recommended -
warning: notification `tunnelDown' must be contained in at least one conformance group
1753:        OBJECTS
1754:        {
1755:            tunnelTrapIdentifier
1756:        }
1757:        STATUS current
1758:        DESCRIPTION
1759:            "The specified tunnel is now down. (In other words, the
1760:            number of current phase 2 SA suites supporting the tunnel has
1761:            changed to zero from a non-zero value.)"
1762:        ::= { tunnelTraps 2 }
1763: 
1764: 
1765:    END