mirror/librenms-librenms
1
0
Fork 0
mirror of https://github.com/librenms/librenms.git synced 2024-10-07 16:52:45 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

watchguard firebox detection and cpu support

Browse Source 
git-svn-id: http://www.observium.org/svn/observer/trunk@2782 61d68cd4-352d-0410-923a-c4978735b2b8
This commit is contained in:
Adam Amstrong
2011-12-14 22:04:56 +00:00
parent 4badb107dc
commit 378261360c
29 changed files with 9902 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
html/includes/graphs/application/mailscanner_reject.inc.php
View File

@@ -29,8 +29,6 @@ if (is_file($rrd_filename))
$i++;
$x++;
}
} else {
echo("file missing: $file");
}
include("includes/graphs/generic_multi_line.inc.php");

2
html/includes/graphs/application/mailscanner_spam.inc.php
View File

@@ -23,8 +23,6 @@ if (is_file($rrd_filename))
$rrd_list[$i]['colour'] = $vars['colour'];
$i++;
}
} else {
echo("file missing: $file");
}
include("includes/graphs/generic_multi_simplex_seperated.inc.php");

8
includes/discovery/os/watchguard.inc.php Normal file
View File

@@ -0,0 +1,8 @@
<?php
if (!$os)
{
if (preg_match("/^WatchGuard\ Fireware/", $sysDescr)) { $os = "firebox"; }
}
?>

23
includes/discovery/processors/watchguard.inc.php Normal file
View File

@@ -0,0 +1,23 @@
<?php
##
## Hardcoded discovery of cpu usage on WatchGuard devices.
##
## WATCHGUARD-SYSTEM-STATISTICS-MIB::wgSystemCpuUtil5.0 = COUNTER: 123
if ($device['os'] == "firebox")
{
echo("Watchguard Firebox : ");
$descr = "Processor";
$usage = snmp_get($device, ".1.3.6.1.4.1.3097.6.3.78.0", "-OQUvs", "WATCHGUARD-SYSTEM-STATISTICS-MIB", $config['mib_dir'].":".$config['mib_dir']."/watchguard");
if (is_numeric($usage))
{
discover_processor($valid['processor'], $device, "1.3.6.1.4.1.3097.6.3.78.0", "0", "firebox-fixed", $descr, "100", $usage, NULL, NULL);
}
}
unset ($processors_array);
?>

10
includes/polling/os/firebox.inc.php Normal file
View File

@@ -0,0 +1,10 @@
<?php
preg_match("/v(.*)/", $poll_device['sysDescr'], $matches);
$version = (isset($matches[1]) ? $matches[1] : "");
//$hardware = "Still need to figger hardware out!";
//$serial = "Still need to figger serial out!";
//$features = "Still need to figger features out!";
?>

10
includes/static-config.php
View File

@@ -792,6 +792,16 @@ $config['os'][$os]['type'] = "network";
$config['os'][$os]['text'] = "Symbol AP";
$config['os'][$os]['icon'] = "symbol";
$os = "firebox";
$config['os'][$os]['text'] = "Watchguard Firebox";
$config['os'][$os]['type'] = "firewall";
$config['os'][$os]['over'][0]['graph'] = "device_bits";
$config['os'][$os]['over'][0]['text'] = "Traffic";
$config['os'][$os]['over'][1]['graph'] = "device_processor";
$config['os'][$os]['over'][1]['text'] = "CPU Usage";
$config['os'][$os]['icon'] = "watchguard";
foreach ($config['os'] as $this_os => $blah)
{
if (isset($config['os'][$this_os]['group']))

712
mibs/IPSEC-ISAKMP-IKE-DOI-TC Normal file
View File

@@ -0,0 +1,712 @@
IPSEC-ISAKMP-IKE-DOI-TC DEFINITIONS ::= BEGIN
IMPORTS
-- make this mib a temporary watchguard extension before it becomes RFC
watchguard
FROM WATCHGUARD-MIB
-- delete next line before release
experimental,
MODULE-IDENTITY, Unsigned32 FROM SNMPv2-SMI
-- uncomment next line before release
mib-2 FROM RFC1213-MIB
TEXTUAL-CONVENTION FROM SNMPv2-TC;
ipsecIsakmpIkeDoiTC MODULE-IDENTITY
LAST-UPDATED "9907132145Z"
ORGANIZATION "Shiva"
CONTACT-INFO "John Shriver
Intel Corporation
28 Crosby Drive
Bedford, MA 01730
Phone:
+1-781-687-1329
E-mail:
John.Shriver@intel.com"
DESCRIPTION "The MIB module which defines the textual conventions
used in IPSEC MIBs. This includes Internet DOI
numbers defined in RFC 2407, ISAKMP numbers defined
in RFC 2408, and IKE numbers defined in RFC 2409.
These Textual Conventions are defined in a seperate
MIB module since they are protocol numbers managed
by the IANA. Revision control after publication
will be under the authority of the IANA."
REVISION "9902181705Z"
DESCRIPTION "Added IsakmpDOI TEXTUAL-CONVENTION."
REVISION "9903051545Z"
DESCRIPTION "Changed CONTACT-INFO."
REVISION "9907132145Z"
DESCRIPTION "Put in real experimental branch number for module."
REVISION "9910051705Z"
DESCRIPTION "Added exchange types, tracked IKE standard. Split
IkeNotifyMessageType off of IsakmpNotifyMessageType."
REVISION "9910151950Z"
DESCRIPTION "Removed stray comma in IsakmpNotifyMessageType."
-- replace xxx in next line before release, uncomment before release
-- ::= { mib-2 xxx }
-- delete next line before release
-- ::= { experimental 100 }
::= { watchguard 100 }
-- The first group of textual conventions are based on definitions
-- in the IPSEC DOI, RFC 2407.
IpsecDoiSituation ::= TEXTUAL-CONVENTION
DISPLAY-HINT "x"
STATUS current
DESCRIPTION "The IPSEC DOI Situation provides information that
can be used by the responder to make a policy
determination about how to process the incoming
Security Association request.
It is a four (4) octet bitmask, with the following
values:
sitIdentityOnly 0x01
sitSecrecy 0x02
sitIntegrity 0x04
The upper two bits (0x80000000 and 0x40000000) are
reserved for private use amongst cooperating
systems."
REFERENCE "RFC 2407 sections 4.2 and 6.2"
SYNTAX Unsigned32 (0..4294967295)
-- The syntax is not BITS, because we want the representation
-- to be the same here as it is in the ISAKMP/IKE protocols.
IpsecDoiSecProtocolId ::= TEXTUAL-CONVENTION
DISPLAY-HINT "d"
STATUS current
DESCRIPTION "These are the IPSEC DOI values for the Protocol-Id
field in an ISAKMP Proposal Payload, and in all
Notification Payloads.
They are also used as the Protocol-ID In the
Notification Payload and the Delete Payload.
The values 249-255 are reserved for private use
amongst cooperating systems."
REFERENCE "RFC 2407 section 4.4.1"
SYNTAX INTEGER {
reserved(0), -- reserved in DOI
protoIsakmp(1), -- message protection
-- required during Phase I
-- of the IKE protocol
protoIpsecAh(2), -- IP packet authentication
-- via Authentication Header
protoIpsecEsp(3), -- IP packet confidentiality
-- via Encapsulating
-- Security Payload
protoIpcomp(4) -- IP payload compression
}
IpsecDoiTransformIdent ::= TEXTUAL-CONVENTION
DISPLAY-HINT "d"
STATUS current
DESCRIPTION "The IPSEC DOI ISAKMP Transform Identifier is an
8-bit value which identifies a key exchange protocol
to be used for the negotiation. It is used in the
Transform-Id field of an IKE Phase I Transform
Payload.
The values 249-255 are reserved for private use
amongst cooperating systems."
REFERENCE "RFC 2407 sections 4.4.2 and 6.3"
SYNTAX INTEGER {
reserved(0), -- reserved in DOI
keyIke(1) -- the hybrid ISAKMP/Oakley
-- Diffie-Hellman key
-- exchange
}
IpsecDoiAhTransform ::= TEXTUAL-CONVENTION
DISPLAY-HINT "d"
STATUS current
DESCRIPTION "The IPSEC DOI AH Transform Identifier is an 8-bit
value which identifies a particular algorithm to be
used to provide integrity protection for AH. It is
used in the Tranform-ID field of a ISAKMP Transform
Payload for the IPSEC DOI, when the Protocol-Id of
the associated Proposal Payload is 2 (AH).
The values 249-255 are reserved for private use
amongst cooperating systems."
REFERENCE "RFC 2407 sections 4.4.3 and 6.4"
SYNTAX INTEGER {
reserved(0), -- reserved in DOI
reserved1(1), -- reserved
ahMd5(2), -- generic AH transform
-- using MD5
ahSha(3), -- generic AH transform
-- using SHA-1
ahDes(4) -- generic AH transform
-- using DES
}
IpsecDoiEspTransform ::= TEXTUAL-CONVENTION
DISPLAY-HINT "d"
STATUS current
DESCRIPTION "The IPSEC DOI ESP Transform Identifier is an 8-bit
value which identifies a particular algorithm to be
used to provide secrecy protection for ESP. It is
used in the Tranform-ID field of a ISAKMP Transform
Payload for the IPSEC DOI, when the Protocol-Id of
the associated Proposal Payload is 2 (AH), 3 (ESP),
and 4 (IPCOMP).
The values 249-255 are reserved for private use
amongst cooperating systems."
REFERENCE "RFC 2407 sections 4.4.4 and 6.5"
SYNTAX INTEGER {
reserved(0), -- reserved in DOI
espDesIv64(1), -- DES-CBC transform defined
-- in RFC 1827 and RFC 1829
-- using a 64-bit IV
espDes(2), -- generic DES transform
-- using DES-CBC
esp3Des(3), -- generic triple-DES
-- transform
espRc5(4), -- RC5 transform
espIdea(5), -- IDEA transform
espCast(6), -- CAST transform
espBlowfish(7), -- BLOWFISH transform
esp3Idea(8), -- reserved for triple-IDEA
espDesIv32(9), -- DES-CBC transform defined
-- in RFC 1827 and RFC 1829
-- using a 32-bit IV
espRc4(10), -- reserved for RC4
espNull(11) -- no confidentiality
-- provided by ESP
}
IpsecDoiAuthAlgorithm ::= TEXTUAL-CONVENTION
DISPLAY-HINT "d"
STATUS current
DESCRIPTION "The ESP Authentication Algorithm used in the IPSEC
DOI as a SA Attributes definition in the Transform
Payload of Phase II of an IKE negotiation. This
set of values defines the AH authentication
algorithm, when the associated Proposal Payload has
a Protocol-ID of 2 (AH). This set of values
defines the ESP authentication algorithm, when the
associated Proposal Payload has a Protocol-ID
of 3 (ESP).
Values 5-61439 are reserved to IANA.
Values 61440-65535 are for private use.
In a MIB, a value of 0 indicates that ESP
has been negotiated without authentication."
REFERENCE "RFC 2407 section 4.5"
SYNTAX INTEGER {
reserved(0), -- reserved in DOI
hmacMd5(1),
hmacSha(2),
desMac(3),
kpdk(4)
}
IpsecDoiIpcompTransform ::= TEXTUAL-CONVENTION
DISPLAY-HINT "d"
STATUS current
DESCRIPTION "The IPSEC DOI IPCOMP Transform Identifier is an
8-bit value which identifies a particular algorithm
to be used to provide IP-level compression before
ESP. It is used in the Tranform-ID field of a ISAKMP
Transform Payload for the IPSEC DOI, when the
Protocol-Id of the associated Proposal Payload
is 4 (IPCOMP).
The values 1-47 are reserved for algorithms for which
an RFC has been approved for publication.
The values 48-63 are reserved for private use amongst
cooperating systems.
The values 64-255 are reserved for future expansion."
REFERENCE "RFC 2407 sections 4.4.5 and 6.6"
SYNTAX INTEGER {
reserved(0), -- reserved in DOI
ipcompOui(1), -- proprietary compression
-- transform
ipcompDeflate(2), -- "zlib" deflate algorithm
ipcompLzs(3) -- Stac Electronics LZS
}
IpsecDoiEncapsulationMode ::= TEXTUAL-CONVENTION
DISPLAY-HINT "d"
STATUS current
DESCRIPTION "The Encapsulation Mode used as an IPSEC DOI
SA Attributes definition in the Transform Payload
of a Phase II IKE negotiation. This set of
values defines encapsulation modes used for AH,
ESP, and IPCOMP when the associated Proposal Payload
has a Protocol-ID of 3 (ESP).
Values 3-61439 are reserved to IANA.
Values 61440-65535 are for private use."
SYNTAX INTEGER {
reserved(0), -- reserved in DOI
tunnel(1),
transport(2)
}
IpsecDoiIdentType ::= TEXTUAL-CONVENTION
DISPLAY-HINT "d"
STATUS current
DESCRIPTION "The IPSEC DOI Identification Type is an 8-bit value
which is used in the ID Type field as a discriminant
for interpretation of the variable-length
Identification Payload.
The values 249-255 are reserved for private use
amongst cooperating systems."
REFERENCE "RFC 2407 sections 4.4.5, 4.6.2.1, and 6.9"
SYNTAX INTEGER {
reserved(0), -- reserved in DOI
idIpv4Addr(1), -- a single four (4) octet
-- IPv4 address
idFqdn(2), -- fully-qualified domain
-- name string
idUserFqdn(3), -- fully-qualified username
-- string
idIpv4AddrSubnet(4),
-- a range of IPv4 addresses,
-- represented by two
-- four (4) octet values,
-- where the first is an
-- address and the second
-- is a mask
idIpv6Addr(5), -- a single sixteen (16)
-- octet IPv6 address
idIpv6AddrSubnet(6),
-- a range of IPv6 addresses,
-- represented by two
-- sixteen (16) octet values,
-- where the first is an
-- address and the second
-- is a mask
idIpv4AddrRange(7), -- a range of IPv4 addresses,
-- represented by two
-- four (4) octet values,
-- where the first is the
-- beginning IPv4 address
-- and the second is the
-- ending IPv4 address
idIpv6AddrRange(8), -- a range of IPv6 addresses,
-- represented by two
-- sixteen (16) octet values,
-- where the first is the
-- beginning IPv6 address
-- and the second is the
-- ending IPv6 address
idDerAsn1Dn(9), -- the binary DER encoding of
-- ASN1 X.500
-- DistinguishedName
idDerAsn1Gn(10), -- the binary DER encoding of
-- ASN1 X.500 GeneralName
idKeyId(11) -- opaque byte stream which
-- may be used to pass
-- vendor-specific
-- information
}
-- The second group of textual conventions are based on defintions
-- the ISAKMP protocol, RFC 2408.
IsakmpDOI ::= TEXTUAL-CONVENTION
DISPLAY-HINT "d"
STATUS current
DESCRIPTION "These are the domain of interpretation values for
the ISAKMP Protocol. They are a 32-bit value
used in the Domain of Interpretation field of the
Security Association Payload.
Values 2-4294967295 are reserved to the IANA."
REFERENCE "RFC 2048 section 3.4."
SYNTAX INTEGER {
isakmp(0), -- generic ISAKMP SA in
-- Phase 1, which can be
-- used for any protocol
-- in Phase 2
ipsecDOI(1) -- the IPsec DOI as
-- specified in RFC 2407
}
IsakmpCertificateEncoding ::= TEXTUAL-CONVENTION
DISPLAY-HINT "d"
STATUS current
DESCRIPTION "These are the values for the types of
certificate-related information contained in the
Certificate Data field of a Certificate Payload.
They are used in the Cert Encoding field of the
Certificate Payload.
Values 11-255 are reserved."
REFERENCE "RFC 2408 section 3.9"
SYNTAX INTEGER {
pkcs7(1), -- PKCS #7 wrapped
-- X.509 certificate
pgp(2), -- PGP Certificate
dnsSignedKey(3), -- DNS Signed Key
x509Signature(4), -- X.509 Certificate:
-- Signature
x509KeyExchange(5), -- X.509 Certificate:
-- Key Exchange
kerberosTokens(6), -- Kerberos Tokens
crl(7), -- Certificate Revocation
-- List (CRL)
arl(8), -- Authority Revocation
-- List (ARL)
spki(9), -- SPKI Certificate
x509Attribute(10) -- X.509 Certificate:
-- Attribute
}
IsakmpExchangeType ::= TEXTUAL-CONVENTION
--
-- When revising IsakmpExchangeType, consider revising
-- IkeExchangeType as well.
--
DISPLAY-HINT "d"
STATUS current
DESCRIPTION "These are the values used for the exchange types in
the ISAKMP header.
Values up to 31 are reserved for future
DOI-independent assignment for ISAKMP.
The values 240-255 are reserved for private use
amongst cooperating systems."
REFERENCE "RFC 2408 section 3.1"
SYNTAX INTEGER {
reserved(0),
base(1), -- base mode
identityProtect(2), -- identity protection
authOnly(3), -- authentication only
aggressive(4), -- aggressive mode
informational(5) -- informational
}
IsakmpNotifyMessageType ::= TEXTUAL-CONVENTION
--
-- If you change this, you probably want to
-- change IkeNotifyMessageType.
--
DISPLAY-HINT "d"
STATUS current
DESCRIPTION "These are the values for the types of notification
messages. They are used as the Notify Message Type
field in the Notification Payload.
This textual convention merges the types
for error types (in the range 1-16386) and for
notification types (in the range 16384-65535).
The values 16001-16383 are reserved for private use
as error types amongst cooperating systems.
The values 24576-32767 are reserved for use in
each DOI. Each DOI should have a clone of this
textual convention adding local values.
The values 32768-40958 are reserved for private use
as notification types amongst cooperating systems."
REFERENCE "RFC 2408 section 3.14.1"
SYNTAX INTEGER {
-- Values defined for errors in ISAKMP
--
reserved(0), -- reserved in DOI
invalidPayloadType(1),
doiNotSupported(2),
situationNotSupported(3),
invalidCookie(4),
invalidMajorVersion(5),
invalidMinorVersion(6),
invalidExchangeType(7),
invalidFlags(8),
invalidMessageId(9),
invalidProtocolId(10),
invalidSpi(11),
invalidTransformId(12),
attributesNotSupported(13),
noProposalChosen(14),
badProposalSyntax(15),
payloadMalformed(16),
invalidKeyInformation(17),
invalidIdInformation(18),
invalidCertEncoding(19),
invalidCertificate(20),
certTypeUnsupported(21),
invalidCertAuthority(22),
invalidHashInformation(23),
authenticationFailed(24),
invalidSignature(25),
addressNotification(26),
notifySaLifetime(27),
certificateUnavailable(28),
unsupportedExchangeType(29),
unequalPayloadLengths(30)
-- values defined for errors in IPSEC DOI
-- (none)
-- values defined for notification in ISAKMP
-- (none)
-- values defined for notification in
-- each DOI (clone this TC)
}
-- The third group of textual conventions are based on defintions
-- the IKE key exchange protocol, RFC 2409.
IkeExchangeType ::= TEXTUAL-CONVENTION
DISPLAY-HINT "d"
STATUS current
DESCRIPTION "These are the values used for the exchange types in
the ISAKMP header.
The values 32-239 are DOI-specific, these values are
for the IPSec DOI used by IKE.
The values 240-255 are reserved for private use
amongst cooperating systems."
REFERENCE "RFC 2409 Appendix A,
draft-ietf-ipsec-ike-01.txt appendix A"
SYNTAX INTEGER {
reserved(0),
base(1), -- base mode
mainMode(2), -- main mode
authOnly(3), -- authentication only
aggressive(4), -- aggressive mode
informational(5), -- informational
quickMode(32), -- quick mode
newGroupMode(33), -- new group mode
acknowledgedInfo(34)
-- acknowledged informational
}
IkeEncryptionAlgorithm ::= TEXTUAL-CONVENTION
DISPLAY-HINT "d"
STATUS current
DESCRIPTION "Values for encryption algorithms negotiated
for the ISAKMP SA by IKE in Phase I. These are
values for SA Attrbute type Encryption
Algorithm (1).
Values 7-65000 are reserved to IANA.
Values 65001-65535 are for private use among
mutually consenting parties."
REFERENCE "RFC 2409 appendix A"
SYNTAX INTEGER {
reserved(0), -- reserved in IKE
desCbc(1), -- RFC 2405
ideaCbc(2),
blowfishCbc(3),
rc5R16B64Cbc(4), -- RC5 R16 B64 CBC
tripleDesCbc(5), -- 3DES CBC
castCbc(6)
}
IkeHashAlgorithm ::= TEXTUAL-CONVENTION
DISPLAY-HINT "d"
STATUS current
DESCRIPTION "Values for hash algorithms negotiated
for the ISAKMP SA by IKE in Phase I. These are
values for SA Attrbute type Hash Algorithm (2).
Values 4-65000 are reserved to IANA.
Values 65001-65535 are for private use among
mutually consenting parties."
REFERENCE "RFC 2409 appendix A"
SYNTAX INTEGER {
reserved(0), -- reserved in IKE
md5(1), -- RFC 1321
sha(2), -- FIPS 180-1
tiger(3)
}
IkeAuthMethod ::= TEXTUAL-CONVENTION
DISPLAY-HINT "d"
STATUS current
DESCRIPTION "Values for authentication methods negotiated
for the ISAKMP SA by IKE in Phase I. These are
values for SA Attrbute type Authentication
Method (3).
Values 6-65000 are reserved to IANA.
Values 65001-65535 are for private use among
mutually consenting parties."
REFERENCE "RFC 2409 appendix A,
draft-ietf-ipsec-ike-01.txt appendix A"
SYNTAX INTEGER {
reserved(0), -- reserved in IKE
preSharedKey(1),
dssSignatures(2),
rsaSignatures(3),
encryptionWithRsa(4),
revisedEncryptionWithRsa(5),
encryptionWithElGamal(6),
revisedEncryptionWithElGamal(7)
}
IkeGroupDescription ::= TEXTUAL-CONVENTION
DISPLAY-HINT "d"
STATUS current
DESCRIPTION "Values for Oakley key computation groups for
Diffie-Hellman exchange negotiated for the ISAKMP
SA by IKE in Phase I. They are also used in Phase II
when perfect forward secrecy is in use. These are
values for SA Attrbute type Group Description (4)."
REFERENCE "RFC 2409 appendix A,
draft-ietf-ipsec-ike-01.txt appendix A"
SYNTAX INTEGER {
reserved(0), -- reserved in IKE
modp768(1), -- default 768-bit MODP group
modp1024(2), -- alternate 1024-bit MODP
-- group
ec2nGalois2P155(3), -- EC2N group on Galois
-- Field GF[2^155]
ec2nGalois2P185(4), -- EC2N group on Galois
-- Field GF[2^185]
modp1536(5) -- alternate 1536-bit MODP
-- group
}
IkeGroupType ::= TEXTUAL-CONVENTION
DISPLAY-HINT "d"
STATUS current
DESCRIPTION "Values for Oakley key computation group types
negotiated for the ISAKMP SA by IKE in Phase I.
They are also used in Phase II when perfect forward
secrecy is in use. These are values for SA Attribute
type Group Type (5)."
REFERENCE "RFC 2409 appendix A"
SYNTAX INTEGER {
reserved(0), -- reserved in IKE
modp(1), -- modular eponentiation
-- group
ecp(2), -- elliptic curve group over
-- Galois Field GF[P]
ec2n(3) -- elliptic curve group over
-- Galois Field GF[2^N]
}
IkePrf ::= TEXTUAL-CONVENTION
DISPLAY-HINT "d"
STATUS current
DESCRIPTION "Values for Pseudo-Random Functions used with
with the hash algorithm negotiated for the ISAKMP SA
by IKE in Phase I. There are currently no
pseudo-random functions defined, the default HMAC is
always used. These are values for SA Attribute type
PRF (13).
Values 1-65000 are reserved to IANA.
Values 65001-65535 are for private use among
mutually consenting parties."
REFERENCE "RFC 2409 appendix A"
SYNTAX Unsigned32 (0..65535)
IkeNotifyMessageType ::= TEXTUAL-CONVENTION
DISPLAY-HINT "d"
STATUS current
DESCRIPTION "These are the values for the types of notification
messages. They are used as the Notify Message Type
field in the Notification Payload.
This textual convention merges the types
for error types (in the range 1-16386) and for
notification types (in the range 16384-65535).
This textual convention is a merge of values
defined by ISAKMP with the additional values
defined in the IPSEC DOI.
The values 16001-16383 are reserved for private use
as error types amongst cooperating systems.
The values 32001-32767 are reserved for private use
as notification types amongst cooperating systems."
REFERENCE "RFC 2408 section 3.14.1 and RFC 2407 sections 4.6.3
and 6.10"
SYNTAX INTEGER {
-- Values defined for errors in ISAKMP
--
reserved(0), -- reserved in DOI
invalidPayloadType(1),
doiNotSupported(2),
situationNotSupported(3),
invalidCookie(4),
invalidMajorVersion(5),
invalidMinorVersion(6),
invalidExchangeType(7),
invalidFlags(8),
invalidMessageId(9),
invalidProtocolId(10),
invalidSpi(11),
invalidTransformId(12),
attributesNotSupported(13),
noProposalChosen(14),
badProposalSyntax(15),
payloadMalformed(16),
invalidKeyInformation(17),
invalidIdInformation(18),
invalidCertEncoding(19),
invalidCertificate(20),
certTypeUnsupported(21),
invalidCertAuthority(22),
invalidHashInformation(23),
authenticationFailed(24),
invalidSignature(25),
addressNotification(26),
notifySaLifetime(27),
certificateUnavailable(28),
unsupportedExchangeType(29),
unequalPayloadLengths(30),
-- values defined for errors in IPSEC DOI
-- (none)
-- values defined for notification in ISAKMP
-- (none)
-- values defined for notification in IPSEC
-- DOI
responderLifetime(24576),
-- used to communicate IPSEC
-- SA lifetime chosen by the
-- responder
replayStatus(24577),
-- used for positive
-- confirmation of the
-- responder's election on
-- whether or not he is to
-- perform anti-replay
-- detection
initialContact(24578)
-- used when one side wishes
-- to inform the other that
-- this is the first SA being
-- established with the
-- remote system
}
END

316
mibs/RAPID-CLIENT-MIB Normal file
View File

@@ -0,0 +1,316 @@
RAPID-CLIENT-MIB DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY, OBJECT-TYPE,
OBJECT-IDENTITY, enterprises,
IpAddress, Unsigned32, TimeTicks FROM SNMPv2-SMI
DateAndTime FROM SNMPv2-TC
rapidstream FROM RAPID-MIB;
rsInfoModule MODULE-IDENTITY
LAST-UPDATED "0103061200Z"
ORGANIZATION "WatchGuard Technologies, Inc."
CONTACT-INFO
" Ella Yu
WatchGuard Technologies, Inc.
1841 Zanker Road
San Jose, CA 95112
USA
408-519-4888
ella.yu@watchguard.com "
DESCRIPTION
"The MIB module describes client information
of RapidStream system."
REVISION "200104201200Z"
DESCRIPTION
"Initial revision."
REVISION "200211011200Z"
DESCRIPTION
"Changed CONTACT-INFO."
::= { rapidstream 6 }
rsClientMIB OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for DHCP Server, DHCP Client
and PPPoE Client"
::= { rsInfoModule 2 }
rsClientDHCPServer OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all DHCP server related information."
::= { rsClientMIB 1 }
rsClientDHCPClient OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all DHCP client related information."
::= { rsClientMIB 2 }
rsClientPPPoEClient OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all PPPoE client related information."
::= { rsClientMIB 3 }
rsClientDHCPServerEnable OBJECT-TYPE
SYNTAX INTEGER {
disabled(0),
enabled(1),
relay(2)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates whether if DHCP Server has been enabled. "
::= { rsClientDHCPServer 1 }
rsClientDHCPServerStartIpAddress OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The starting IP address of the range of IP addresses leased by the DHCP server."
::= { rsClientDHCPServer 2 }
rsClientDHCPServerEndIpAddress OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The last IP address of the range of IP addresses leased by the DHCP Server. "
::= { rsClientDHCPServer 3 }
rsClientDHCPServerLeaseTime OBJECT-TYPE
SYNTAX TimeTicks
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The lease time of an address assigned to a DHCP client. "
::= { rsClientDHCPServer 4 }
rsClientDHCPServerNum OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of entries in the rsClientDHCPServerTable. "
::= { rsClientDHCPServer 5 }
rsClientDHCPServerConnTable OBJECT-TYPE
SYNTAX SEQUENCE OF RSClientDHCPServerConnEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This is the client lease table of the DHCP Server."
::= { rsClientDHCPServer 6 }
rsClientDHCPServerRelayServer OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The IP address of remote DHCP server to which
DHCP requests should be relayed."
::= { rsClientDHCPServer 7 }
rsClientDHCPServerConnEntry OBJECT-TYPE
SYNTAX RSClientDHCPServerConnEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (conceptual row) containing the leasing
information of an assigned address by the DHCP Server."
INDEX {
rsClientDHCPServerConnIPAddr
}
::= { rsClientDHCPServerConnTable 1 }
RSClientDHCPServerConnEntry ::= SEQUENCE {
rsClientDHCPServerConnIPAddr IpAddress,
rsClientDHCPServerConnClientHostName OCTET STRING,
rsClientDHCPServerConnMACAddr OCTET STRING (SIZE(6)),
rsClientDHCPServerConnLeaseTimeStart DateAndTime,
rsClientDHCPServerConnLeaseTimeEnd DateAndTime
}
rsClientDHCPServerConnClientHostName OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The hostname of the client."
::= { rsClientDHCPServerConnEntry 1 }
rsClientDHCPServerConnIPAddr OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The IP address assigned to the client."
::= { rsClientDHCPServerConnEntry 2 }
rsClientDHCPServerConnMACAddr OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(6))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The MAC address of the client."
::= { rsClientDHCPServerConnEntry 3 }
rsClientDHCPServerConnLeaseTimeStart OBJECT-TYPE
SYNTAX DateAndTime
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The date and time when the lease starts."
::= { rsClientDHCPServerConnEntry 4 }
rsClientDHCPServerConnLeaseTimeEnd OBJECT-TYPE
SYNTAX DateAndTime
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The date and time when the lease ends."
::= { rsClientDHCPServerConnEntry 5 }
-- DHCP Client information
rsClientDHCPClientEnable OBJECT-TYPE
SYNTAX INTEGER {
disabled(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates whether interface 1 (public) is configured to obtain IP address through DHCP."
::= { rsClientDHCPClient 1 }
rsClientDHCPClientDomainName OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The domain name of the DHCP Client."
::= { rsClientDHCPClient 2 }
rsClientDHCPClientDefaultGateway OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The IP address of the default gateway obtained by the DHCP client."
::= { rsClientDHCPClient 3 }
rsClientDHCPClientDNSOne OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The IP address of the primary DNS server obtained by the DHCP client."
::= { rsClientDHCPClient 4 }
rsClientDHCPClientDNSTwo OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The IP address of the secondary DNS server obtained by the DHCP client."
::= { rsClientDHCPClient 5 }
-- PPPoE Client information
rsClientPPPoEClientEnable OBJECT-TYPE
SYNTAX INTEGER {
disabled(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates whether the interface 1 (public) is configured to use PPPoE."
::= { rsClientPPPoEClient 1 }
rsClientPPPoEClientADSLStatus OBJECT-TYPE
SYNTAX INTEGER {
disconnect(0), -- ADSL is disconnected
initialize(1), -- ADSL is initializing
establish(2), -- ASDL is established
authenticate(3), -- ASDL is authenticated
network(4),
running(5) -- ASDL is running
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The current ADSL status of the PPPoE Client. "
::= { rsClientPPPoEClient 2 }
rsClientPPPoEClientLocalIPAddr OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The IP address obtained by the PPPoE Client."
::= { rsClientPPPoEClient 3 }
rsClientPPPoEClientRemoteIPAddr OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The IP Address of the PPP server this PPPoE client connects to."
::= { rsClientPPPoEClient 4 }
rsClientPPPoEClientNetMask OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The subnet mask of the PPPoE client."
::= { rsClientPPPoEClient 5 }
rsClientPPPoEClientDNSOne OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The IP address of the primary DNS server obtained."
::= { rsClientPPPoEClient 6 }
rsClientPPPoEClientDNSTwo OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The IP address of the secondary DNS server obtained."
::= { rsClientPPPoEClient 7 }
rsClientPPPoEADSLPeerMACAddr OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(6))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The MAC Address of the PPP server this client connects to."
::= { rsClientPPPoEClient 8 }
rsClientPPPoEClientConnTime OBJECT-TYPE
SYNTAX TimeTicks
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The connection time of the PPPoE connection."
::= { rsClientPPPoEClient 9 }
END

372
mibs/RAPID-HA-MIB Normal file
View File

@@ -0,0 +1,372 @@
RAPID-HA-MIB DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY, OBJECT-TYPE, Unsigned32, Integer32, Counter64, Gauge32,
OBJECT-IDENTITY, enterprises,
IpAddress, TimeTicks FROM SNMPv2-SMI
DateAndTime FROM SNMPv2-TC
rapidstream FROM RAPID-MIB;
rsInfoModule MODULE-IDENTITY
LAST-UPDATED "0211011200Z"
ORGANIZATION "WatchGuard Technologies, Inc."
CONTACT-INFO
" Ella Yu
WatchGuard Technologies, Inc.
1841 Zanker Road
San Jose, CA 95112
USA
408-519-4888
ella.yu@watchguard.com "
DESCRIPTION
"The MIB module describes general information
of RapidStream system. Mainly, the information
obtained from this MIB is used by rsInfoSystemMIB,
rsClientMIB, rsSystemStatisticsMIB, rsIpsecTunnelMIB,
rsHAMIB."
REVISION "200211011200Z"
DESCRIPTION
"Initial revision."
::= { rapidstream 6 }
rsHAMIB OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all HA related
branches."
::= { rsInfoModule 6 }
rsHALocal OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all objects which are
belong to local appliance."
::= { rsHAMIB 1 }
rsHAPeer OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all objects which are
belong to peer appliance."
::= { rsHAMIB 2 }
rsHAStatus OBJECT-TYPE
SYNTAX INTEGER {
disabled(0),
unknown(1),
as-primary-active(2),
as-secondary-active(3),
aa-primary-ative(4),
aa-secondary-active(5),
aa-primary-takeover(6),
aa-secondary-takeover(7),
standby(8),
admin(9),
failed(10),
unavailable(11)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates current status of local appliance.
disabled: The local appliance of HA system is not enabled.
unknown: The local appliance of HA system is in initialization
as-primary-active: The local appliance that is the primary appliance of
HA/AS system is in active mode. This status is also called
MASTER in some systems.
as-secondary-active: The local appliance that is the secondary appliance of
HA/AS system is in active mode. This status is also called
BACKUP in some systems.
aa-primary-ative: The local appliance that is the primary appliance of
HA/AA system is in active mode.
aa-secondary-active: The local appliance that is the secondary appliance of
HA/AA system is in active mode.
aa-primary-takeover: The local appliance that is the primary appliance of
HA/AA system has taken over the peer's duty.
aa-secondary-takeover: The local appliance of the secondary appliance of
HA/AA system has taken over the peer's duty.
standby: The local appliance of HA/AS system is in standby mode.
admin: The local appliance of HA system detects an mismatched
configuration and waits for system administrator to reslove
the conflict.
failed: The local appliance of the HA system is down due to forced failover
or other reasons.
unavailable: It's reported when local appliance of HA system is unabled
to get status information.
"
::= { rsHALocal 1 }
rsHAPeerStatus OBJECT-TYPE
SYNTAX INTEGER {
unavailable(0),
active(1),
standby(2),
admin(3),
failed(4)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates current status of peer appliance.
unavailable: It's reported when peer appliance of HA system is unabled
to get status information.
active: The peer applicance of HA system is in active mode.
standby: The peer applicance of HA system is in standby mode.
admin: The peer applicance of HA system dectects an mismatched
configuration and waits for system administrator to reslove the conflict.
failed: The peer appliance of HA system is down due to forced failover or other reasons.
"
::= {rsHALocal 2 }
rsHALastDBSyncTime OBJECT-TYPE
SYNTAX DateAndTime
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The last DB synchronized time of local appliance."
::= { rsHALocal 3 }
rsHAError OBJECT-TYPE
SYNTAX INTEGER {
no-error(0),
mismatched-ha-id(1),
mismatched-software(2),
mismatched-database(3),
mismatched-hardware(4),
forced-fail(5),
invalid-ha-role(6),
link-down(7),
lost-mia-heartbeat(8),
mia-not-responding(9),
admin-command-failed(10),
detect-ha-error(11),
unavailable(12),
hotsync-failed(13),
config-sync-failed(14)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Reports the current error that occurred in local appliance ."
::= { rsHALocal 4 }
rsHAPeerError OBJECT-TYPE
SYNTAX INTEGER {
no-error(0),
mismatched-ha-id(1),
mismatched-software(2),
mismatched-database(3),
mismatched-hardware(4),
forced-fail(5),
invalid-ha-role(6),
link-down(7),
lost-mia-heartbeat(8),
mia-not-responding(9),
admin-command-failed(10),
detect-ha-error(11),
unavailable(12),
hotsync-failed(13),
config-sync-failed(14)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Reports the current error that occurred in peer appliance."
::= { rsHALocal 5 }
rsHAPeerSerialNumber OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The serial number of peer appliance."
::= { rsHAPeer 1 }
rsHAPeerLastDBSyncTime OBJECT-TYPE
SYNTAX DateAndTime
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The last DB synchronized time of peer appliance."
::= { rsHAPeer 2}
rsHAPeerDevice OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object for parameters and configuration
data of devices in this entity."
::= { rsHAPeer 3 }
rsHAPeerCounters OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object for parameters and configuration
data of devices in this entity."
::= { rsHAPeer 4 }
rsHAPeerIfNumber OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RapidCard installed in this entity."
::= { rsHAPeerDevice 1 }
rsHAPeerIfTable OBJECT-TYPE
SYNTAX SEQUENCE OF RSHAPeerIfEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A list of RapidCard entries. The number of
entries is given by the value of rsHAPeerDeviceNumber."
::= { rsHAPeerDevice 2 }
rsHAPeerIfEntry OBJECT-TYPE
SYNTAX RSHAPeerIfEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A RapidCard entry containing objects for a
particular RapidCard."
INDEX { rsHAPeerIfIndex }
::= { rsHAPeerIfTable 1 }
RSHAPeerIfEntry ::= SEQUENCE {
rsHAPeerIfIndex Unsigned32,
rsHAPeerIfIpAddr IpAddress,
rsHAPeerIfLinkStatus INTEGER
}
rsHAPeerIfIndex OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The unique value for each interface."
::= { rsHAPeerIfEntry 1 }
rsHAPeerIfIpAddr OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The ip address of the interface."
::= { rsHAPeerIfEntry 4 }
rsHAPeerIfLinkStatus OBJECT-TYPE
SYNTAX INTEGER {
down(0),
up(1),
other(2)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The current state of the interface."
::= { rsHAPeerIfEntry 9 }
rsHAPeerSystemCpuUtil OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The CPU utilization of the peer system in last 5
seconds."
::= { rsHAPeerCounters 1 }
rsHAPeerSystemTotalSendBytes OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of bytes sent since peer system
is up."
::= { rsHAPeerCounters 2 }
rsHAPeerSystemTotalRecvBytes OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of bytes received since peer system
is up."
::= { rsHAPeerCounters 3 }
rsHAPeerSystemTotalSendPackets OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of packets sent since peer system is
up."
::= { rsHAPeerCounters 4 }
rsHAPeerSystemTotalRecvPackets OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of packets received since peer
system is up."
::= { rsHAPeerCounters 5 }
rsHAPeerSystemStreamReqTotal OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of the connection requests since
system is up."
::= { rsHAPeerCounters 6 }
rsHAPeerSystemStreamReqDrop OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of the connection requests being
dropped since system is up."
::= { rsHAPeerCounters 7 }
rsHAPeerSystemCurrIpsecTunnels OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of ipsec tunnels in the peer system
currently."
::= {rsHAPeerCounters 8 }
rsHAPeerSystemCpuUtil1 OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The CPU utilization of the peer system in last 1
minute."
::= { rsHAPeerCounters 9 }
rsHAPeerSystemCpuUtil5 OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The CPU utilization of the peer system in last 5
minutes."
::= { rsHAPeerCounters 10 }
rsHAPeerSystemCpuUtil15 OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The CPU utilization of the peer system in last 15
minutes."
::= { rsHAPeerCounters 11 }
END

53
mibs/RAPID-INFO-SYSTEM-MIB Normal file
View File

@@ -0,0 +1,53 @@
RAPID-INFO-SYSTEM-MIB DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY, OBJECT-TYPE,
OBJECT-IDENTITY, enterprises FROM SNMPv2-SMI
DateAndTime FROM SNMPv2-TC
rapidstream FROM RAPID-MIB;
rsInfoModule MODULE-IDENTITY
LAST-UPDATED "0103061200Z"
ORGANIZATION "WatchGuard Technologies, Inc."
CONTACT-INFO
" Ella Yu
WatchGuard Technologies, Inc.
1841 Zanker Road
San Jose, CA 95112
USA
408-519-4888
ella.yu@watchguard.com "
DESCRIPTION
"The MIB module describes general information
of RapidStream system. Mainly, the information
obtained from this MIB is used by rsInfoSystemMIB,
rsClientMIB, rsSystemStatisticsMIB, rsIpsecTunnelMIB."
REVISION "200104201200Z"
DESCRIPTION
"Initial revision."
REVISION "200211011200Z"
DESCRIPTION
"Changed CONTACT-INFO."
::= { rapidstream 6 }
rsInfoSystem OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base system information for all rs Client
branches."
::= { rsInfoModule 1 }
rsInfoSystemCurrentTime OBJECT-TYPE
SYNTAX DateAndTime
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The host's notion of the local date and time of day."
::= {rsInfoSystem 1}
END

455
mibs/RAPID-IPSEC-ENDPOINT-PAIR-MIB Normal file
View File

@@ -0,0 +1,455 @@
RAPID-IPSEC-ENDPOINT-PAIR-MIB DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY, OBJECT-TYPE, Unsigned32, Gauge32,
OBJECT-IDENTITY, enterprises,
IpAddress FROM SNMPv2-SMI
rapidstream FROM RAPID-MIB;
rsIpsecEndpointPairModule MODULE-IDENTITY
LAST-UPDATED "9909081200Z"
ORGANIZATION "WatchGuard Technologies, Inc."
CONTACT-INFO
" Ella Yu
WatchGuard Technologies, Inc.
1841 Zanker Road
San Jose, CA 95112
USA
408-519-4888
ella.yu@watchguard.com "
DESCRIPTION
"The MIB module describes generic Ipsec Endpoint Pair information
of RapidStream system. Mainly, the information
obtained from this MIB is used to constructed topological
view of IPSec security gateways that are connected by
IPSec tunnels.
An IPSec Endpoint Pair is a pair of security gateways that
are connected with 0 or more IPSec SA's in tunnel mode.
It contains information of aggregated information
of tunnel mode SA's between two security gateways.
An IPSec Endpoint Pair is identified by a pair of IP addresses.
Therefore, if an IPSec security gateway X has 2 external
IP addresses while IPsec secruity gateway Y has 3 external
IP addresses, there are potentially 6 IPsec Endpoint Pairs
between X and Y."
REVISION "200003211200Z"
DESCRIPTION
"Initial revision."
REVISION "200211011200Z"
DESCRIPTION
"Changed CONTACT-INFO."
::= { rapidstream 5 }
rsIpsecEndpointPairMIB OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all IPSec tunnel
branches."
::= { rsIpsecEndpointPairModule 1 }
rsIpsecEndpointPair OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all IPSec
tunnel information."
::= { rsIpsecEndpointPairMIB 1 }
rsIpsecEndpointPairStatistics OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all objects which
are global counters for IPSec tunnels."
::= { rsIpsecEndpointPairMIB 2 }
rsIpsecEndpointPairNum OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of entries in the rsIpsecEndpointPairTable. "
::= { rsIpsecEndpointPair 1 }
rsIpsecEndpointPairTable OBJECT-TYPE
SYNTAX SEQUENCE OF RSIpsecEndpointPairEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This is the connection table describing all current
IPSec tunnels exist on this entity."
::= { rsIpsecEndpointPair 2 }
rsIpsecEndpointPairEntry OBJECT-TYPE
SYNTAX RSIpsecEndpointPairEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (conceptual row) containing the information on a
IPSec tunnel between two IPSec security gateways."
INDEX{ rsIpsecEndpointPairIndex }
::= { rsIpsecEndpointPairTable 1 }
RSIpsecEndpointPairEntry ::= SEQUENCE {
rsIpsecEndpointPairIndex Integer32,
rsIpsecEndpointPairLocalAddr IpAddress,
rsIpsecEndpointPairPeerAddr IpAddress,
rsIpsecEndpointPairInSAs Unsigned32,
rsIpsecEndpointPairOutSAs Unsigned32,
rsIpsecEndpointPairInAccKbytes Counter32,
rsIpsecEndpointPairOutAccKbytes Counter32,
rsIpsecEndpointPairInPackets Counter32,
rsIpsecEndpointPairOutPackets Counter32,
rsIpsecEndpointPairDecryptErrors Counter32,
rsIpsecEndpointPairAuthErrors Counter32,
rsIpsecEndpointPairReplayErrors Counter32,
rsIpsecEndpointPairPolicyErrors Counter32,
rsIpsecEndpointPairPadErrors Counter32,
rsIpsecEndpointPairOtherReceiveErrors Counter32,
rsIpsecEndpointPairSendErrors Counter32
}
rsIpsecEndpointPairIndex OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The running index of this IPSec endpoint pair."
::= { rsIpsecEndpointPairEntry 1 }
rsIpsecEndpointPairLocalAddr OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The local IP address of the current IPSec ednpoint pair."
::= { rsIpsecEndpointPairEntry 2 }
rsIpsecEndpointPairPeerAddr OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The remote IP address of the current IPSec endpoint pair."
::= { rsIpsecEndpointPairEntry 3 }
rsIpsecEndpointPairInSAs OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of inbound IPSEC SA's within this
IPSec endpoint pair."
::= { rsIpsecEndpointPairEntry 4 }
rsIpsecEndpointPairOutSAs OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of outbound IPSEC SA's within this
IPSec endpoint pair."
::= { rsIpsecEndpointPairEntry 5 }
rsIpsecEndpointPairInAccKbytes OBJECT-TYPE
SYNTAX Counter32
UNITS "Kbytes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total inbound traffic in Kbytes since the establish of
this connection."
::= { rsIpsecEndpointPairEntry 6 }
rsIpsecEndpointPairOutAccKbytes OBJECT-TYPE
SYNTAX Counter32
UNITS "Kbytes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total outound traffic in Kbytes since the establish of
this connection."
::= { rsIpsecEndpointPairEntry 7 }
rsIpsecEndpointPairInPackets OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of inbound packets since the establish of
this connection."
::= { rsIpsecEndpointPairEntry 8 }
rsIpsecEndpointPairOutPackets OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of outound packets since the establish of
this connection."
::= { rsIpsecEndpointPairEntry 9 }
rsIpsecEndpointPairDecryptErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to decryption
error since the establish of this connection."
::= { rsIpsecEndpointPairEntry 10 }
rsIpsecEndpointPairAuthErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to authentication
error since the establish of this connection."
::= { rsIpsecEndpointPairEntry 11 }
rsIpsecEndpointPairReplayErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to replay
error since the establish of this connection."
::= { rsIpsecEndpointPairEntry 12}
rsIpsecEndpointPairPolicyErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to policy
error since the establish of this connection."
::= { rsIpsecEndpointPairEntry 13 }
rsIpsecEndpointPairPadErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to pad value
error since the establish of this connection."
::= { rsIpsecEndpointPairEntry 14 }
rsIpsecEndpointPairOtherReceiveErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets discarded due to errors
other than decryption, authentication or replay errors. This
may include packets dropped due to a lack of receive
buffers, and may include packets dropped due to congestion
at the decryption element."
::= { rsIpsecEndpointPairEntry 15 }
rsIpsecEndpointPairSendErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets discarded due to any error.
This may include errors due to a lack of transmit buffers."
::= { rsIpsecEndpointPairEntry 16 }
-- global statistics
rsIpsecEndpointPairTotalInSAs OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of active inbound SA's in the entity."
::= { rsIpsecEndpointPairStatistics 1 }
rsIpsecEndpointPairTotalOutSAs OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of active outbound SA's in the entity."
::= { rsIpsecEndpointPairStatistics 2 }
rsIpsecEndpointPairTotalInAccKbytes OBJECT-TYPE
SYNTAX Counter32
UNITS "Kbytes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total inbound IPsec traffic of this entity."
::= { rsIpsecEndpointPairStatistics 3 }
rsIpsecEndpointPairTotalOutAccKbytes OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total outbound IPsec traffic of this entity."
::= { rsIpsecEndpointPairStatistics 4 }
rsIpsecEndpointPairTotalInPackets OBJECT-TYPE
SYNTAX Counter32
UNITS "Kbytes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total inbound IPsec packets of this entity."
::= { rsIpsecEndpointPairStatistics 5 }
rsIpsecEndpointPairTotalOutPackets OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total outbound IPsec packets of this entity."
::= { rsIpsecEndpointPairStatistics 6 }
rsIpsecEndpointPairTotalDecryptErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets on this entity discarded due to encryption
error."
::= { rsIpsecEndpointPairStatistics 7 }
rsIpsecEndpointPairTotalAuthErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets on this entity discarded
due to authentication errors."
::= { rsIpsecEndpointPairStatistics 8 }
rsIpsecEndpointPairTotalReplayErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to replay
errors on this entity."
::= { rsIpsecEndpointPairStatistics 9 }
rsIpsecEndpointPairTotalPolicyErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to policy
errors on this entity."
::= { rsIpsecEndpointPairStatistics 10 }
rsIpsecEndpointPairTotalPadErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets on this entity discarded due to pad value
error."
::= { rsIpsecEndpointPairStatistics 11 }
rsIpsecEndpointPairTotalOtherReceiveErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of packets on this entity discarded due to errors
other than decryption, authentication or replay errors. This
may include packets dropped due to a lack of receive
buffers, and may include packets dropped due to congestion
at the decryption element."
::= { rsIpsecEndpointPairStatistics 12 }
rsIpsecEndpointPairTotalSendErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of packets discarded due to any error on
this entity."
::= { rsIpsecEndpointPairStatistics 13 }
rsIpsecEndpointPairPeerIPToTunnel OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all tunnels
information of the policies."
::= {rsIpsecEndpointPairMIB 3}
rsIpsecEndpointPairPeerIPToTunnelNum OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of tunnels in the peeriptotunnel table. "
::= { rsIpsecEndpointPairPeerIPToTunnel 1 }
rsIpsecEndpointPairPeerIPToTunnelTable OBJECT-TYPE
SYNTAX SEQUENCE OF RSIpsecEndpointPairPeerIPToTunnelEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The peeriptotunnel table in the endpointpair mib."
::= { rsIpsecEndpointPairPeerIPToTunnel 2 }
rsIpsecEndpointPairPeerIPToTunnelEntry OBJECT-TYPE
SYNTAX RSIpsecEndpointPairPeerIPToTunnelEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (conceptual row) containing the peer ip and tunnel
information."
INDEX {
rsIpsecEndpointPairPeerIPToTunnelPeerIP,
rsIpsecEndpointPairPeerIPToTunnelTunnelID
}
::= { rsIpsecEndpointPairPeerIPToTunnelTable 1 }
RSIpsecEndpointPairPeerIPToTunnelEntry ::= SEQUENCE {
rsIpsecEndpointPairPeerIPToTunnelPeerIP IpAddress,
rsIpsecEndpointPairPeerIPToTunnelTunnelID Integer32
}
rsIpsecEndpointPairPeerIPToTunnelPeerIP OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The peer ip of the peeriptotunnel table."
::= {rsIpsecEndpointPairPeerIPToTunnelEntry 1}
rsIpsecEndpointPairPeerIPToTunnelTunnelID OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The tunnel id of the peeriptotunnel table."
::= {rsIpsecEndpointPairPeerIPToTunnelEntry 2}
END

2259
mibs/RAPID-IPSEC-SA-MON-MIB-EXT Normal file
View File

File diff suppressed because it is too large Load Diff

566
mibs/RAPID-IPSEC-TUNNEL-MIB Normal file
View File

@@ -0,0 +1,566 @@
RAPID-IPSEC-TUNNEL-MIB DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY, OBJECT-TYPE, Unsigned32, Counter64,
OBJECT-IDENTITY, enterprises,
IpAddress, TimeTicks FROM SNMPv2-SMI
DateAndTime FROM SNMPv2-TC
rapidstream FROM RAPID-MIB;
rsInfoModule MODULE-IDENTITY
LAST-UPDATED "0103061200Z"
ORGANIZATION "WatchGuard Technologies, Inc."
CONTACT-INFO
" Ella Yu
WatchGuard Technologies, Inc.
1841 Zanker Road
San Jose, CA 95112
USA
408-519-4888
ella.yu@watchguard.com "
DESCRIPTION
"The MIB module describes various tunnel objects
of RapidStream system."
REVISION "200104201200Z"
DESCRIPTION
"Initial revision."
REVISION "200211011200Z"
DESCRIPTION
"Changed CONTACT-INFO."
::= { rapidstream 6 }
rsIpsecTunnelMIB OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all tunnel
branches."
::= { rsInfoModule 5 }
rsIpsecTunnel OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all
tunnel information."
::= { rsIpsecTunnelMIB 1 }
rsIpsecTunnelNum OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of entries in the rsIpsecTunnelTable. "
::= { rsIpsecTunnel 1 }
rsIpsecTunnelTable OBJECT-TYPE
SYNTAX SEQUENCE OF RSIpsecTunnelEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This is the connection table describing all current
tunnels exist on this entity."
::= { rsIpsecTunnel 2 }
rsIpsecTunnelEntry OBJECT-TYPE
SYNTAX RSIpsecTunnelEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (conceptual row) containing the information on a
tunnel between two security gateways."
INDEX{ rsIpsecTunnelID }
::= { rsIpsecTunnelTable 1 }
RSIpsecTunnelEntry ::= SEQUENCE {
rsIpsecTunnelID Integer32,
rsIpsecTunnelLocalAddr IpAddress,
rsIpsecTunnelPeerAddr IpAddress,
rsIpsecTunnelInSpi Integer32,
rsIpsecTunnelOutSpi Integer32,
rsIpsecTunnelCreateTime DateAndTime,
rsIpsecTunnelDeviceID Unsigned32,
rsIpsecTunnelEspEncryptAlg INTEGER,
rsIpsecTunnelEspAuthAlg INTEGER,
rsIpsecTunnelAhAuthAlg INTEGER,
rsIpsecTunnelMode INTEGER,
rsIpsecTunnelKeyMode INTEGER,
rsIpsecTunnelLifeTime TimeTicks,
rsIpsecTunnelLifeLength Counter32,
rsIpsecTunnelInSaBytes Counter32,
rsIpsecTunnelOutSaBytes Counter32,
rsIpsecTunnelAccSecs Counter32,
rsIpsecTunnelSelectorProtocol INTEGER,
rsIpsecTunnelSelectorRemoteIPType INTEGER,
rsIpsecTunnelSelectorRemoteIPOne IpAddress,
rsIpsecTunnelSelectorRemoteIPTwo IpAddress,
rsIpsecTunnelSelectorRemotePort INTEGER,
rsIpsecTunnelSelectorLocalIPType INTEGER,
rsIpsecTunnelSelectorLocalIPOne IpAddress,
rsIpsecTunnelSelectorLocalIPTwo IpAddress,
rsIpsecTunnelSelectorLocalPort INTEGER,
rsIpsecTunnelNumRekey Counter32,
rsIpsecTunnelInKbytes Counter32,
rsIpsecTunnelOutKbytes Counter32,
rsIpsecTunnelInPackets Counter32,
rsIpsecTunnelOutPackets Counter32,
rsIpsecTunnelInDecryptErrors Counter32,
rsIpsecTunnelInAuthErrors Counter32,
rsIpsecTunnelInReplayErrors Counter32,
rsIpsecTunnelInOtherErrors Counter32,
rsIpsecTunnelOutDecryptErrors Counter32,
rsIpsecTunnelOutAuthErrors Counter32,
rsIpsecTunnelOutReplayErrors Counter32,
rsIpsecTunnelOutOtherErrors Counter32,
rsIpsecTunnelUdpEncap INTEGER,
rsIpsecTunnelPeerUdpPort INTEGER,
rsIpsecTunnelOrigPeerAddr IpAddress
}
rsIpsecTunnelID OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The running index of this tunnel."
::= { rsIpsecTunnelEntry 1 }
rsIpsecTunnelLocalAddr OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The local IP address of the current tunnel."
::= { rsIpsecTunnelEntry 2 }
rsIpsecTunnelPeerAddr OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The remote IP address of the current tunnel."
::= { rsIpsecTunnelEntry 3 }
rsIpsecTunnelInSpi OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The security parameters index of inbound SA's within this
tunnel."
::= { rsIpsecTunnelEntry 4 }
rsIpsecTunnelOutSpi OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The security parameters index of outbound SA's within this
tunnel."
::= { rsIpsecTunnelEntry 5 }
rsIpsecTunnelCreateTime OBJECT-TYPE
SYNTAX DateAndTime
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The date and time when the tunnel is created."
::= { rsIpsecTunnelEntry 6 }
rsIpsecTunnelDeviceID OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The identifier of target device where the SA resides."
::= { rsIpsecTunnelEntry 7 }
rsIpsecTunnelEspEncryptAlg OBJECT-TYPE
SYNTAX INTEGER {
unknown(0),
des(2),
three-des(3)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The encryption algorithm used in the tunnel. It's 0
if ESP is not used."
::= { rsIpsecTunnelEntry 8 }
rsIpsecTunnelEspAuthAlg OBJECT-TYPE
SYNTAX INTEGER {
unknown(0),
md5(2),
sha(3)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The authentication algorithm used in the tunnel. It's
0 if ESP is not used."
::= { rsIpsecTunnelEntry 9 }
rsIpsecTunnelAhAuthAlg OBJECT-TYPE
SYNTAX INTEGER {
unknown(0),
md5(2),
sha(3)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The AH authentication algorithm used in the tunnel.
It's 0 if AH is not used."
::= { rsIpsecTunnelEntry 10 }
rsIpsecTunnelMode OBJECT-TYPE
SYNTAX INTEGER {
unknown(0),
tunnel(1),
transport(2)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The tunnel/transport mode of the tunnel."
::= { rsIpsecTunnelEntry 11 }
rsIpsecTunnelKeyMode OBJECT-TYPE
SYNTAX INTEGER {
unknown(0),
manual(1),
auto-ike(2),
other(3)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The key mode of the tunnel."
::= { rsIpsecTunnelEntry 12 }
rsIpsecTunnelLifeTime OBJECT-TYPE
SYNTAX TimeTicks
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The life time (in hundredths of a second) of the tunnel."
::= { rsIpsecTunnelEntry 13 }
rsIpsecTunnelLifeLength OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The maximum traffic in bytes that the tunnel is allowed to support."
::= { rsIpsecTunnelEntry 14 }
rsIpsecTunnelInSaBytes OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Current active inbound SA bytes of the tunnel."
::= { rsIpsecTunnelEntry 15 }
rsIpsecTunnelOutSaBytes OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Current active outbound SA bytes of the tunnel."
::= { rsIpsecTunnelEntry 16 }
rsIpsecTunnelAccSecs OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of seconds that the tunnel has existed."
::= { rsIpsecTunnelEntry 17 }
rsIpsecTunnelSelectorProtocol OBJECT-TYPE
SYNTAX INTEGER {
any(0),
icmp(1),
igmp(2),
ipip(4),
tcp(6),
egp(8),
pup(12),
udp(17),
idp(22),
tp(29),
ipv6(41),
ipv6-routing(43),
ipv6-fragmentation(44),
rsvp(46),
gre(47),
esp(50),
ah(51),
icmpv6(58),
none(59),
dstopts(60),
mtp(92),
encap(98),
pim(103),
raw(255)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The ip protocol number that this SA selector carries, or
0 if it carries any protocol."
::= { rsIpsecTunnelEntry 18 }
rsIpsecTunnelSelectorRemoteIPType OBJECT-TYPE
SYNTAX INTEGER {
ip-addr-single(1),
ip-addr-subnet(2),
ip-addr-range(3)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The type of remote IP address of the SA selector in
the entity."
::= { rsIpsecTunnelEntry 19 }
rsIpsecTunnelSelectorRemoteIPOne OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The first remote IP address of the SA selector in the entity.
It's IP address if remote IP of this selector only has one address.
It's IP address of subnet if the remote IP of this selector is IP subnet.
It's the start IP address if the remote IP of this selector
has a range of addresses."
::= { rsIpsecTunnelEntry 20 }
rsIpsecTunnelSelectorRemoteIPTwo OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The second remote IP address of the SA selector in the entity.
It's 0 if remote IP of this selector only has one address.
It's netmask of subnet if the remote IP of this selector is IP subnet.
It's the end IP address if the remote IP of this selector
has a range of addresses."
::= { rsIpsecTunnelEntry 21 }
rsIpsecTunnelSelectorRemotePort OBJECT-TYPE
SYNTAX INTEGER (0..65535)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The remote port used by this selector in the entity."
::= { rsIpsecTunnelEntry 22 }
rsIpsecTunnelSelectorLocalIPType OBJECT-TYPE
SYNTAX INTEGER {
ip-addr-single(1),
ip-addr-subnet(2),
ip-addr-range(3)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The type of local IP address of the SA selector in
the entity."
::= { rsIpsecTunnelEntry 23 }
rsIpsecTunnelSelectorLocalIPOne OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The first local IP address of the SA selector in the entity.
It's IP address if local IP of this selector only has one address.
It's IP address of subnet if the local IP of this selector is IP subnet.
It's the start IP address if the local IP of this selector
has a range of IP addresses."
::= { rsIpsecTunnelEntry 24 }
rsIpsecTunnelSelectorLocalIPTwo OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The second local IP address of the SA selector in the entity.
It's 0 if local IP of this selector only has one address.
It's netmask of subnet if the local IP of this selector is IP subnet.
It's the end IP address if the local IP of this selector
has a range of IP addresses."
::= { rsIpsecTunnelEntry 25 }
rsIpsecTunnelSelectorLocalPort OBJECT-TYPE
SYNTAX INTEGER (0..65535)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The local port used by this selector in the entity."
::= { rsIpsecTunnelEntry 26 }
rsIpsecTunnelNumRekey OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of rekeys of the tunnel."
::= { rsIpsecTunnelEntry 27 }
rsIpsecTunnelInKbytes OBJECT-TYPE
SYNTAX Counter32
UNITS "Kbytes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total inbound traffic in Kbytes since the establish of
this tunnel."
::= { rsIpsecTunnelEntry 28 }
rsIpsecTunnelOutKbytes OBJECT-TYPE
SYNTAX Counter32
UNITS "Kbytes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total outound traffic in Kbytes since the establish of
this connection."
::= { rsIpsecTunnelEntry 29 }
rsIpsecTunnelInPackets OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of inbound packets since the establish of
this connection."
::= { rsIpsecTunnelEntry 30 }
rsIpsecTunnelOutPackets OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of outound packets since the establish of
this connection."
::= { rsIpsecTunnelEntry 31 }
rsIpsecTunnelInDecryptErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to decryption
error since the establish of this connection."
::= { rsIpsecTunnelEntry 32 }
rsIpsecTunnelInAuthErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to authentication
error since the establish of this connection."
::= { rsIpsecTunnelEntry 33 }
rsIpsecTunnelInReplayErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to replay
error since the establish of this connection."
::= { rsIpsecTunnelEntry 34}
rsIpsecTunnelInOtherErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets discarded due to errors
other than decryption, authentication or replay errors. This
may include packets dropped due to a lack of receive
buffers, and may include packets dropped due to congestion
at the decryption element."
::= { rsIpsecTunnelEntry 35 }
rsIpsecTunnelOutDecryptErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to decryption
error since the establish of this connection."
::= { rsIpsecTunnelEntry 36 }
rsIpsecTunnelOutAuthErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to authentication
error since the establish of this connection."
::= { rsIpsecTunnelEntry 37 }
rsIpsecTunnelOutReplayErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to replay
error since the establish of this connection."
::= { rsIpsecTunnelEntry 38 }
rsIpsecTunnelOutOtherErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets discarded due to errors
other than decryption, authentication or replay errors. This
may include packets dropped due to a lack of receive
buffers, and may include packets dropped due to congestion
at the decryption element."
::= { rsIpsecTunnelEntry 39 }
rsIpsecTunnelUdpEncap OBJECT-TYPE
SYNTAX INTEGER {
disabled(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates whether if UDP encapsulated IPSec has been enabled."
::= { rsIpsecTunnelEntry 40 }
rsIpsecTunnelPeerUdpPort OBJECT-TYPE
SYNTAX INTEGER (0..65535)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The peer's UDP port of current tunnel when UDP encapsulated IPSec
is enabled."
::= { rsIpsecTunnelEntry 41 }
rsIpsecTunnelOrigPeerAddr OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The original peer ip address of current tunnel when UDP encapsulated
IPSec is enabled"
::= { rsIpsecTunnelEntry 42 }
END

29
mibs/RAPID-MIB Normal file
View File

@@ -0,0 +1,29 @@
RAPID-MIB DEFINITIONS ::= BEGIN
IMPORTS
enterprises FROM SNMPv2-SMI;
rapidstream OBJECT IDENTIFIER ::= { enterprises 4355 }
rsProducts OBJECT IDENTIFIER ::= { rapidstream 1 }
fbXSeries OBJECT IDENTIFIER ::= { rsProducts 4 }
-- fbX series
fbX500 OBJECT IDENTIFIER ::= { fbXSeries 1 }
fbX550e OBJECT IDENTIFIER ::= { fbXSeries 2 }
fbX700 OBJECT IDENTIFIER ::= { fbXSeries 3 }
fbX750e OBJECT IDENTIFIER ::= { fbXSeries 4 }
fbX1000 OBJECT IDENTIFIER ::= { fbXSeries 5 }
fbX1250e OBJECT IDENTIFIER ::= { fbXSeries 6 }
fbX2500 OBJECT IDENTIFIER ::= { fbXSeries 7 }
fbX5000 OBJECT IDENTIFIER ::= { fbXSeries 8 }
fbX5500e OBJECT IDENTIFIER ::= { fbXSeries 9 }
fbX6000 OBJECT IDENTIFIER ::= { fbXSeries 10 }
fbX6500e OBJECT IDENTIFIER ::= { fbXSeries 11 }
fbX8000 OBJECT IDENTIFIER ::= { fbXSeries 12 }
fbX8500e OBJECT IDENTIFIER ::= { fbXSeries 13 }
fbX8500e-F OBJECT IDENTIFIER ::= { fbXSeries 14 }
END

305
mibs/RAPID-POLICY-MIB Normal file
View File

@@ -0,0 +1,305 @@
RAPID-POLICY-MIB DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY, OBJECT-TYPE, Unsigned32, Counter64,
OBJECT-IDENTITY, enterprises,
IpAddress, TimeTicks FROM SNMPv2-SMI
DateAndTime FROM SNMPv2-TC
rapidstream FROM RAPID-MIB;
rsPolicyMIB MODULE-IDENTITY
LAST-UPDATED "0105211200Z"
ORGANIZATION "WatchGuard Technologies, Inc."
CONTACT-INFO
" Ella Yu
WatchGuard Technologies, Inc.
1841 Zanker Road
San Jose, CA 95112
USA
408-519-4888
ella.yu@watchguard.com "
DESCRIPTION
"The MIB module describes various policy objects
of RapidStream system."
REVISION "200105211200Z"
DESCRIPTION
"Initial revision."
REVISION "200211011200Z"
DESCRIPTION
"Changed CONTACT-INFO."
::= { rapidstream 4 }
rsPolicyToTunnel OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all tunnels
information of the policies."
::= {rsPolicyMIB 1}
rsPolicyStatistics OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all RASVPN user."
::= { rsPolicyMIB 2 }
rsPolicyToTunnelNum OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of tunnels in the policytotunnel table. "
::= { rsPolicyToTunnel 1 }
rsPolicyToTunnelTable OBJECT-TYPE
SYNTAX SEQUENCE OF RSPolicyToTunnelEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This is the policytotunnel table of all the policies."
::= { rsPolicyToTunnel 2 }
rsPolicyToTunnelEntry OBJECT-TYPE
SYNTAX RSPolicyToTunnelEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (conceptual row) containing the tunnels
information."
INDEX {
rsPolicyToTunnelPolicyID,
rsPolicyToTunnelTunnelID
}
::= { rsPolicyToTunnelTable 1 }
RSPolicyToTunnelEntry ::= SEQUENCE {
rsPolicyToTunnelPolicyID Integer32,
rsPolicyToTunnelTunnelID Integer32
}
rsPolicyToTunnelPolicyID OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The policy identifier of this entity."
::= {rsPolicyToTunnelEntry 1}
rsPolicyToTunnelTunnelID OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The tunnel identifier of this entity."
::= {rsPolicyToTunnelEntry 2}
-- counter ID
-- per policy counter
-- 1-24 is reserved
rsPolicyTableNum OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of policies in the policy table. "
::= { rsPolicyStatistics 1 }
rsPolicyTable OBJECT-TYPE
SYNTAX SEQUENCE OF RSPolicyEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This is the policytotunnel table of the policies."
::= { rsPolicyStatistics 2 }
rsPolicyEntry OBJECT-TYPE
SYNTAX RSPolicyEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (conceptual row) containing the policy
information."
INDEX{
rsPolicyID
}
::= { rsPolicyTable 1 }
RSPolicyEntry ::= SEQUENCE {
rsPolicyID Integer32,
rsPolicyName OCTET STRING (SIZE(32)),
rsPolicyBytes Counter64,
rsPolicyPackets Counter64,
rsPolicyIpsecDecryptErr Counter64,
rsPolicyIpsecAuthErr Counter64,
rsPolicyIpsecReplayErr Counter64,
rsPolicyIpsecPadErr Counter64,
rsPolicyIpsecPolicyErr Counter64,
rsPolicyFwDisc Counter64,
rsPolicyOtherDisc Counter64,
rsPolicyActiveStreams Counter64,
rsPolicyIpsecDisc Counter64,
rsPolicyDisc Counter64,
rsPolicyNumTunl Counter64,
rsPolicySingleCntrNum Counter64,
rsPolicyLogging INTEGER
}
rsPolicyID OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The policy identifier of this policy."
::= {rsPolicyEntry 1}
rsPolicyName OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(32))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The policy name of this policy"
::= {rsPolicyEntry 2}
rsPolicyBytes OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total traffic in bytes since setting up this policy."
::= {rsPolicyEntry 3}
rsPolicyPackets OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total traffic in packets since setting up this policy."
::= {rsPolicyEntry 4}
rsPolicyIpsecDecryptErr OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to decryption
errors since setting up this policy."
::= {rsPolicyEntry 5}
rsPolicyIpsecAuthErr OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to authentication
errors since setting up this policy."
::= {rsPolicyEntry 6}
rsPolicyIpsecReplayErr OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to replay
errors since setting up this policy."
::= {rsPolicyEntry 7}
rsPolicyIpsecPadErr OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to pad value
errors since setting up this policy."
::= {rsPolicyEntry 8}
rsPolicyIpsecPolicyErr OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to policy
errors since setting up this policy."
::= {rsPolicyEntry 9}
rsPolicyFwDisc OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded by firewall policies
since setting up this policy."
::= {rsPolicyEntry 10}
rsPolicyOtherDisc OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to errors
other than firewall errors, ipsec errors since setting up
this policy."
::= {rsPolicyEntry 11}
rsPolicyActiveStreams OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of the active connections since setting
up this policy."
::= {rsPolicyEntry 12}
rsPolicyIpsecDisc OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded by IPSEC errors
(decryption error, authentication error, replay error)
since setting up this policy."
::= {rsPolicyEntry 13}
rsPolicyDisc OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded since setting up
this policy."
::= {rsPolicyEntry 14}
rsPolicyNumTunl OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of tunnels belong to this policy"
::= {rsPolicyEntry 15}
rsPolicySingleCntrNum OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of single counters handled by this policy."
::= {rsPolicyEntry 16}
rsPolicyLogging OBJECT-TYPE
SYNTAX INTEGER {
disabled(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates whether if the logging of this policy has been enabled. "
::= { rsPolicyEntry 17 }
END

170
mibs/RAPID-SYSTEM-CONFIG-MIB Normal file
View File

@@ -0,0 +1,170 @@
RAPID-SYSTEM-CONFIG-MIB DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY, OBJECT-TYPE, Counter32,
Integer32, Unsigned32, IpAddress, Gauge32,
enterprises, NOTIFICATION-TYPE FROM SNMPv2-SMI
rapidstream FROM RAPID-MIB;
rsSystemConfigMIB MODULE-IDENTITY
LAST-UPDATED "9906261200Z"
ORGANIZATION "WatchGuard Technologies, Inc."
CONTACT-INFO
" Ella Yu
WatchGuard Technologies, Inc.
1841 Zanker Road
San Jose, CA 95112
USA
408-519-4888
ella.yu@watchguard.com "
DESCRIPTION
"The MIB module to describe WatchGuard Firebox system
configuration."
REVISION "9906261200Z"
DESCRIPTION
"Initial revision."
REVISION "200211011200Z"
DESCRIPTION
"Changed CONTACT-INFO."
REVISION "200406011200Z"
DESCRIPTION
"Removed old MIB objects."
::= { rapidstream 2 }
-- significant branches
rsSysTraps OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object for system wide traps
in this entity."
::= { rsSystemConfigMIB 3 }
rsSysTrapObjects OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object for objects which are used
as part of traps."
::= { rsSystemConfigMIB 4 }
rsSysTrapControl OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all objects
which are trap control for the entity."
::= { rsSystemConfigMIB 5 }
--
-- rsSysTraps
--
-- object used in trap reporting
rsAlarmId OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The id of the alarm that generates a trap."
::= { rsSysTrapObjects 1 }
rsAlarmLabel OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(0..64))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The name of the alarm that generates a trap."
::= { rsSysTrapObjects 2 }
rsAlarmTime OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The date and time of the alarm that generates a trap."
::= { rsSysTrapObjects 3 }
rsAlarmLevel OBJECT-TYPE
SYNTAX INTEGER {
normal(4),
warning(3),
error(2),
critical(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The level of an alarm generated."
::= { rsSysTrapObjects 4 }
rsAlarmHostname OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(0..64))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The host name of the system where alarm occurred"
::= { rsSysTrapObjects 5 }
rsAlarmMsg OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The message describing the nature of this alarm."
::= { rsSysTrapObjects 6 }
--
-- trap control
--
rsAlarmTrapEnable OBJECT-TYPE
SYNTAX INTEGER {
false(0),
true(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates whether rsAlarmTrap trap should be generated."
DEFVAL { true }
::= { rsSysTrapControl 1 }
--
-- traps themselves
--
rsSysTrapsPrefix OBJECT-IDENTITY
STATUS current
DESCRIPTION ""
::= { rsSysTraps 0 }
rsAlarmTrap NOTIFICATION-TYPE
OBJECTS {
rsAlarmId,
rsAlarmLabel,
rsAlarmTime,
rsAlarmLevel,
rsAlarmHostname,
rsAlarmMsg
}
STATUS current
DESCRIPTION
"An alarm was raised by Monitoring Agent of this
RapidStream entity."
::= { rsSysTrapsPrefix 1 }
rsSnmpStart NOTIFICATION-TYPE
STATUS current
DESCRIPTION
"This trap is sent when the snmp starts."
::= { rsSysTrapsPrefix 2 }
rsSnmpShutdown NOTIFICATION-TYPE
STATUS current
DESCRIPTION
"This trap is sent when the snmp terminates."
::= { rsSysTrapsPrefix 3 }
END

135
mibs/RAPID-SYSTEM-STATISTICS-MIB Normal file
View File

@@ -0,0 +1,135 @@
RAPID-SYSTEM-STATISTICS-MIB DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY, OBJECT-TYPE, Counter64,
OBJECT-IDENTITY, enterprises,
IpAddress, TimeTicks FROM SNMPv2-SMI
rapidstream FROM RAPID-MIB;
rsInfoModule MODULE-IDENTITY
LAST-UPDATED "0105161200Z"
ORGANIZATION "WatchGuard Technologies, Inc."
CONTACT-INFO
" Ella Yu
WatchGuard Technologies, Inc.
1841 Zanker Road
San Jose, CA 95112
USA
408-519-4888
ella.yu@watchguard.com "
DESCRIPTION
"The MIB module describes various system statistics information
of RapidStream system."
REVISION "200105161200Z"
DESCRIPTION
"Initial revision."
REVISION "200211011200Z"
DESCRIPTION
"Changed CONTACT-INFO."
::= { rapidstream 6 }
rsSystemStatisticsMIB OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base system information for all system related
statistical counters."
::= { rsInfoModule 3 }
rsSystemCpuUtil OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"CPU utilization of the system in last 5 seconds. The value
is measured in 0.01%. For example, if the value is 234,
then CPU utilization is 2.34%."
::= { rsSystemStatisticsMIB 4 }
rsSystemTotalSendBytes OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of bytes sent since system is up. This
number includes both cut through traffic and host traffic."
::= { rsSystemStatisticsMIB 8 }
rsSystemTotalRecvBytes OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of bytes received since system is up. This
number includes both cut through traffic and host traffic."
::= { rsSystemStatisticsMIB 9 }
rsSystemTotalSendPackets OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of the packets sent since system is up. This
number includes both cut through traffic and host traffic."
::= { rsSystemStatisticsMIB 10 }
rsSystemTotalRecvPackets OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of the packets received since system is up.
The number includes both cut through traffic and host traffic."
::= { rsSystemStatisticsMIB 11 }
rsSystemStreamReqTotal OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of the connection requests since system is up."
::= { rsSystemStatisticsMIB 30 }
rsSystemStreamReqDrop OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of the connection requests being dropped since system is up."
::= { rsSystemStatisticsMIB 34 }
rsSystemCpuUtil1 OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"CPU utilization of the system in last 1 minute. The value
is measured in 0.01%. For example, if the value is 234,
then CPU utilization is 2.34%."
::= { rsSystemStatisticsMIB 77 }
rsSystemCpuUtil5 OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"CPU utilization of the system in last 5 minutes. The value
is measured in 0.01%. For example, if the value is 234,
then CPU utilization is 2.34%."
::= { rsSystemStatisticsMIB 78 }
rsSystemCpuUtil15 OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"CPU utilization of the system in last 15 minutes. The value
is measured in 0.01%. For example, if the value is 234,
then CPU utilization is 2.34%."
::= { rsSystemStatisticsMIB 79 }
END

313
mibs/WATCHGUARD-CLIENT-MIB Normal file
View File

@@ -0,0 +1,313 @@
WATCHGUARD-CLIENT-MIB DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY, OBJECT-TYPE,
OBJECT-IDENTITY, enterprises,
IpAddress, Unsigned32, TimeTicks FROM SNMPv2-SMI
DateAndTime FROM SNMPv2-TC
watchguard FROM WATCHGUARD-MIB;
wgInfoModule MODULE-IDENTITY
LAST-UPDATED "200701251200Z"
ORGANIZATION "WatchGuard Technologies, Inc."
CONTACT-INFO
" Ella Yu
WatchGuard Technologies, Inc.
1841 Zanker Road
San Jose, CA 95112
USA
408-519-4888
ella.yu@watchguard.com "
DESCRIPTION
"The MIB module describes client information
of WatchGuard system."
REVISION "200701251200Z"
DESCRIPTION
"Initial revision."
::= { watchguard 6 }
wgClientMIB OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for DHCP Server, DHCP Client
and PPPoE Client"
::= { wgInfoModule 2 }
wgClientDHCPServer OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all DHCP server related information."
::= { wgClientMIB 1 }
wgClientDHCPClient OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all DHCP client related information."
::= { wgClientMIB 2 }
wgClientPPPoEClient OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all PPPoE client related information."
::= { wgClientMIB 3 }
wgClientDHCPServerEnable OBJECT-TYPE
SYNTAX INTEGER {
disabled(0),
enabled(1),
relay(2)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates whether if DHCP Server has been enabled. "
::= { wgClientDHCPServer 1 }
wgClientDHCPServerStartIpAddress OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The starting IP address of the range of IP addresses leased by the DHCP server."
::= { wgClientDHCPServer 2 }
wgClientDHCPServerEndIpAddress OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The last IP address of the range of IP addresses leased by the DHCP Server. "
::= { wgClientDHCPServer 3 }
wgClientDHCPServerLeaseTime OBJECT-TYPE
SYNTAX TimeTicks
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The lease time of an address assigned to a DHCP client. "
::= { wgClientDHCPServer 4 }
wgClientDHCPServerNum OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of entries in the wgClientDHCPServerTable. "
::= { wgClientDHCPServer 5 }
wgClientDHCPServerConnTable OBJECT-TYPE
SYNTAX SEQUENCE OF WGClientDHCPServerConnEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This is the client lease table of the DHCP Server."
::= { wgClientDHCPServer 6 }
wgClientDHCPServerRelayServer OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The IP address of remote DHCP server to which
DHCP requests should be relayed."
::= { wgClientDHCPServer 7 }
wgClientDHCPServerConnEntry OBJECT-TYPE
SYNTAX WGClientDHCPServerConnEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (conceptual row) containing the leasing
information of an assigned address by the DHCP Server."
INDEX {
wgClientDHCPServerConnIPAddr
}
::= { wgClientDHCPServerConnTable 1 }
WGClientDHCPServerConnEntry ::= SEQUENCE {
wgClientDHCPServerConnIPAddr IpAddress,
wgClientDHCPServerConnClientHostName OCTET STRING,
wgClientDHCPServerConnMACAddr OCTET STRING (SIZE(6)),
wgClientDHCPServerConnLeaseTimeStart DateAndTime,
wgClientDHCPServerConnLeaseTimeEnd DateAndTime
}
wgClientDHCPServerConnClientHostName OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The hostname of the client."
::= { wgClientDHCPServerConnEntry 1 }
wgClientDHCPServerConnIPAddr OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The IP address assigned to the client."
::= { wgClientDHCPServerConnEntry 2 }
wgClientDHCPServerConnMACAddr OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(6))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The MAC address of the client."
::= { wgClientDHCPServerConnEntry 3 }
wgClientDHCPServerConnLeaseTimeStart OBJECT-TYPE
SYNTAX DateAndTime
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The date and time when the lease starts."
::= { wgClientDHCPServerConnEntry 4 }
wgClientDHCPServerConnLeaseTimeEnd OBJECT-TYPE
SYNTAX DateAndTime
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The date and time when the lease ends."
::= { wgClientDHCPServerConnEntry 5 }
-- DHCP Client information
wgClientDHCPClientEnable OBJECT-TYPE
SYNTAX INTEGER {
disabled(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates whether interface 1 (public) is configured to obtain IP address through DHCP."
::= { wgClientDHCPClient 1 }
wgClientDHCPClientDomainName OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The domain name of the DHCP Client."
::= { wgClientDHCPClient 2 }
wgClientDHCPClientDefaultGateway OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The IP address of the default gateway obtained by the DHCP client."
::= { wgClientDHCPClient 3 }
wgClientDHCPClientDNSOne OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The IP address of the primary DNS server obtained by the DHCP client."
::= { wgClientDHCPClient 4 }
wgClientDHCPClientDNSTwo OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The IP address of the secondary DNS server obtained by the DHCP client."
::= { wgClientDHCPClient 5 }
-- PPPoE Client information
wgClientPPPoEClientEnable OBJECT-TYPE
SYNTAX INTEGER {
disabled(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates whether the interface 1 (public) is configured to use PPPoE."
::= { wgClientPPPoEClient 1 }
wgClientPPPoEClientADSLStatus OBJECT-TYPE
SYNTAX INTEGER {
disconnect(0), -- ADSL is disconnected
initialize(1), -- ADSL is initializing
establish(2), -- ASDL is established
authenticate(3), -- ASDL is authenticated
network(4),
running(5) -- ASDL is running
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The current ADSL status of the PPPoE Client. "
::= { wgClientPPPoEClient 2 }
wgClientPPPoEClientLocalIPAddr OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The IP address obtained by the PPPoE Client."
::= { wgClientPPPoEClient 3 }
wgClientPPPoEClientRemoteIPAddr OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The IP Address of the PPP server this PPPoE client connects to."
::= { wgClientPPPoEClient 4 }
wgClientPPPoEClientNetMask OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The subnet mask of the PPPoE client."
::= { wgClientPPPoEClient 5 }
wgClientPPPoEClientDNSOne OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The IP address of the primary DNS server obtained."
::= { wgClientPPPoEClient 6 }
wgClientPPPoEClientDNSTwo OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The IP address of the secondary DNS server obtained."
::= { wgClientPPPoEClient 7 }
wgClientPPPoEADSLPeerMACAddr OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(6))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The MAC Address of the PPP server this client connects to."
::= { wgClientPPPoEClient 8 }
wgClientPPPoEClientConnTime OBJECT-TYPE
SYNTAX TimeTicks
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The connection time of the PPPoE connection."
::= { wgClientPPPoEClient 9 }
END

372
mibs/WATCHGUARD-HA-MIB Normal file
View File

@@ -0,0 +1,372 @@
WATCHGUARD-HA-MIB DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY, OBJECT-TYPE, Unsigned32, Integer32, Counter64, Gauge32,
OBJECT-IDENTITY, enterprises,
IpAddress, TimeTicks FROM SNMPv2-SMI
DateAndTime FROM SNMPv2-TC
watchguard FROM WATCHGUARD-MIB;
wgInfoModule MODULE-IDENTITY
LAST-UPDATED "200701251200Z"
ORGANIZATION "WatchGuard Technologies, Inc."
CONTACT-INFO
" Ella Yu
WatchGuard Technologies, Inc.
1841 Zanker Road
San Jose, CA 95112
USA
408-519-4888
ella.yu@watchguard.com "
DESCRIPTION
"The MIB module describes general information
of WatchGuard system. Mainly, the information
obtained from this MIB is used by wgInfoSystemMIB,
wgClientMIB, wgSystemStatisticsMIB, wgIpsecTunnelMIB,
wgHAMIB."
REVISION "200701251200Z"
DESCRIPTION
"Initial revision."
::= { watchguard 6 }
wgHAMIB OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all HA related
branches."
::= { wgInfoModule 6 }
wgHALocal OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all objects which are
belong to local appliance."
::= { wgHAMIB 1 }
wgHAPeer OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all objects which are
belong to peer appliance."
::= { wgHAMIB 2 }
wgHAStatus OBJECT-TYPE
SYNTAX INTEGER {
disabled(0),
unknown(1),
as-primary-active(2),
as-secondary-active(3),
aa-primary-ative(4),
aa-secondary-active(5),
aa-primary-takeover(6),
aa-secondary-takeover(7),
standby(8),
admin(9),
failed(10),
unavailable(11)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates current status of local appliance.
disabled: The local appliance of HA system is not enabled.
unknown: The local appliance of HA system is in initialization
as-primary-active: The local appliance that is the primary appliance of
HA/AS system is in active mode. This status is also called
MASTER in some systems.
as-secondary-active: The local appliance that is the secondary appliance of
HA/AS system is in active mode. This status is also called
BACKUP in some systems.
aa-primary-ative: The local appliance that is the primary appliance of
HA/AA system is in active mode.
aa-secondary-active: The local appliance that is the secondary appliance of
HA/AA system is in active mode.
aa-primary-takeover: The local appliance that is the primary appliance of
HA/AA system has taken over the peer's duty.
aa-secondary-takeover: The local appliance of the secondary appliance of
HA/AA system has taken over the peer's duty.
standby: The local appliance of HA/AS system is in standby mode.
admin: The local appliance of HA system detects an mismatched
configuration and waits for system administrator to reslove
the conflict.
failed: The local appliance of the HA system is down due to forced failover
or other reasons.
unavailable: It's reported when local appliance of HA system is unabled
to get status information.
"
::= { wgHALocal 1 }
wgHAPeerStatus OBJECT-TYPE
SYNTAX INTEGER {
unavailable(0),
active(1),
standby(2),
admin(3),
failed(4)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates current status of peer appliance.
unavailable: It's reported when peer appliance of HA system is unabled
to get status information.
active: The peer applicance of HA system is in active mode.
standby: The peer applicance of HA system is in standby mode.
admin: The peer applicance of HA system dectects an mismatched
configuration and waits for system administrator to reslove the conflict.
failed: The peer appliance of HA system is down due to forced failover or other reasons.
"
::= {wgHALocal 2 }
wgHALastDBSyncTime OBJECT-TYPE
SYNTAX DateAndTime
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The last DB synchronized time of local appliance."
::= { wgHALocal 3 }
wgHAError OBJECT-TYPE
SYNTAX INTEGER {
no-error(0),
mismatched-ha-id(1),
mismatched-software(2),
mismatched-database(3),
mismatched-hardware(4),
forced-fail(5),
invalid-ha-role(6),
link-down(7),
lost-mia-heartbeat(8),
mia-not-responding(9),
admin-command-failed(10),
detect-ha-error(11),
unavailable(12),
hotsync-failed(13),
config-sync-failed(14)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Reports the current error that occurred in local appliance ."
::= { wgHALocal 4 }
wgHAPeerError OBJECT-TYPE
SYNTAX INTEGER {
no-error(0),
mismatched-ha-id(1),
mismatched-software(2),
mismatched-database(3),
mismatched-hardware(4),
forced-fail(5),
invalid-ha-role(6),
link-down(7),
lost-mia-heartbeat(8),
mia-not-responding(9),
admin-command-failed(10),
detect-ha-error(11),
unavailable(12),
hotsync-failed(13),
config-sync-failed(14)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Reports the current error that occurred in peer appliance."
::= { wgHALocal 5 }
wgHAPeerSerialNumber OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The serial number of peer appliance."
::= { wgHAPeer 1 }
wgHAPeerLastDBSyncTime OBJECT-TYPE
SYNTAX DateAndTime
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The last DB synchronized time of peer appliance."
::= { wgHAPeer 2}
wgHAPeerDevice OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object for parameters and configuration
data of devices in this entity."
::= { wgHAPeer 3 }
wgHAPeerCounters OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object for parameters and configuration
data of devices in this entity."
::= { wgHAPeer 4 }
wgHAPeerIfNumber OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of RapidCard installed in this entity."
::= { wgHAPeerDevice 1 }
wgHAPeerIfTable OBJECT-TYPE
SYNTAX SEQUENCE OF WGHAPeerIfEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A list of RapidCard entries. The number of
entries is given by the value of wgHAPeerDeviceNumber."
::= { wgHAPeerDevice 2 }
wgHAPeerIfEntry OBJECT-TYPE
SYNTAX WGHAPeerIfEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A RapidCard entry containing objects for a
particular RapidCard."
INDEX { wgHAPeerIfIndex }
::= { wgHAPeerIfTable 1 }
WGHAPeerIfEntry ::= SEQUENCE {
wgHAPeerIfIndex Unsigned32,
wgHAPeerIfIpAddr IpAddress,
wgHAPeerIfLinkStatus INTEGER
}
wgHAPeerIfIndex OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The unique value for each interface."
::= { wgHAPeerIfEntry 1 }
wgHAPeerIfIpAddr OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The ip address of the interface."
::= { wgHAPeerIfEntry 4 }
wgHAPeerIfLinkStatus OBJECT-TYPE
SYNTAX INTEGER {
down(0),
up(1),
other(2)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The current state of the interface."
::= { wgHAPeerIfEntry 9 }
wgHAPeerSystemCpuUtil OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The CPU utilization of the peer system in last 5
seconds."
::= { wgHAPeerCounters 1 }
wgHAPeerSystemTotalSendBytes OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of bytes sent since peer system
is up."
::= { wgHAPeerCounters 2 }
wgHAPeerSystemTotalRecvBytes OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of bytes received since peer system
is up."
::= { wgHAPeerCounters 3 }
wgHAPeerSystemTotalSendPackets OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of packets sent since peer system is
up."
::= { wgHAPeerCounters 4 }
wgHAPeerSystemTotalRecvPackets OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of packets received since peer
system is up."
::= { wgHAPeerCounters 5 }
wgHAPeerSystemStreamReqTotal OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of the connection requests since
system is up."
::= { wgHAPeerCounters 6 }
wgHAPeerSystemStreamReqDrop OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of the connection requests being
dropped since system is up."
::= { wgHAPeerCounters 7 }
wgHAPeerSystemCurrIpsecTunnels OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of ipsec tunnels in the peer system
currently."
::= {wgHAPeerCounters 8 }
wgHAPeerSystemCpuUtil1 OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The CPU utilization of the peer system in last 1
minute."
::= { wgHAPeerCounters 9 }
wgHAPeerSystemCpuUtil5 OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The CPU utilization of the peer system in last 5
minutes."
::= { wgHAPeerCounters 10 }
wgHAPeerSystemCpuUtil15 OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The CPU utilization of the peer system in last 15
minutes."
::= { wgHAPeerCounters 11 }
END

50
mibs/WATCHGUARD-INFO-SYSTEM-MIB Normal file
View File

@@ -0,0 +1,50 @@
WATCHGUARD-INFO-SYSTEM-MIB DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY, OBJECT-TYPE,
OBJECT-IDENTITY, enterprises FROM SNMPv2-SMI
DateAndTime FROM SNMPv2-TC
watchguard FROM WATCHGUARD-MIB;
wgInfoModule MODULE-IDENTITY
LAST-UPDATED "200701251200Z"
ORGANIZATION "WatchGuard Technologies, Inc."
CONTACT-INFO
" Ella Yu
WatchGuard Technologies, Inc.
1841 Zanker Road
San Jose, CA 95112
USA
408-519-4888
ella.yu@watchguard.com "
DESCRIPTION
"The MIB module describes general information
of WatchGuard system. Mainly, the information
obtained from this MIB is used by wgInfoSystemMIB,
wgClientMIB, wgSystemStatisticsMIB, wgIpsecTunnelMIB."
REVISION "200701251200Z"
DESCRIPTION
"Initial revision."
::= { watchguard 6 }
wgInfoSystem OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base system information for all wg Client
branches."
::= { wgInfoModule 1 }
wgInfoSystemCurrentTime OBJECT-TYPE
SYNTAX DateAndTime
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The host's notion of the local date and time of day."
::= {wgInfoSystem 1}
END

448
mibs/WATCHGUARD-IPSEC-ENDPOINT-PAIR-MIB Normal file
View File

@@ -0,0 +1,448 @@
WATCHGUARD-IPSEC-ENDPOINT-PAIR-MIB DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY, OBJECT-TYPE, Unsigned32, Gauge32,
OBJECT-IDENTITY, enterprises,
IpAddress FROM SNMPv2-SMI
watchguard FROM WATCHGUARD-MIB;
wgIpsecEndpointPairModule MODULE-IDENTITY
LAST-UPDATED "200701251200Z"
ORGANIZATION "WatchGuard Technologies, Inc."
CONTACT-INFO
" Ella Yu
WatchGuard Technologies, Inc.
1841 Zanker Road
San Jose, CA 95112
USA
408-519-4888
ella.yu@watchguard.com "
DESCRIPTION
"The MIB module describes generic Ipsec Endpoint Pair information
of WatchGuard system. Mainly, the information
obtained from this MIB is used to constructed topological
view of IPSec security gateways that are connected by
IPSec tunnels.
An IPSec Endpoint Pair is a pair of security gateways that
are connected with 0 or more IPSec SA's in tunnel mode.
It contains information of aggregated information
of tunnel mode SA's between two security gateways.
An IPSec Endpoint Pair is identified by a pair of IP addresses.
Therefore, if an IPSec security gateway X has 2 external
IP addresses while IPsec secruity gateway Y has 3 external
IP addresses, there are potentially 6 IPsec Endpoint Pairs
between X and Y."
REVISION "200701251200Z"
DESCRIPTION
"Initial revision."
::= { watchguard 5 }
wgIpsecEndpointPairMIB OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all IPSec tunnel
branches."
::= { wgIpsecEndpointPairModule 1 }
wgIpsecEndpointPair OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all IPSec
tunnel information."
::= { wgIpsecEndpointPairMIB 1 }
wgIpsecEndpointPairStatistics OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all objects which
are global counters for IPSec tunnels."
::= { wgIpsecEndpointPairMIB 2 }
wgIpsecEndpointPairNum OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of entries in the wgIpsecEndpointPairTable. "
::= { wgIpsecEndpointPair 1 }
wgIpsecEndpointPairTable OBJECT-TYPE
SYNTAX SEQUENCE OF WGIpsecEndpointPairEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This is the connection table describing all current
IPSec tunnels exist on this entity."
::= { wgIpsecEndpointPair 2 }
wgIpsecEndpointPairEntry OBJECT-TYPE
SYNTAX WGIpsecEndpointPairEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (conceptual row) containing the information on a
IPSec tunnel between two IPSec security gateways."
INDEX{ wgIpsecEndpointPairIndex }
::= { wgIpsecEndpointPairTable 1 }
WGIpsecEndpointPairEntry ::= SEQUENCE {
wgIpsecEndpointPairIndex Integer32,
wgIpsecEndpointPairLocalAddr IpAddress,
wgIpsecEndpointPairPeerAddr IpAddress,
wgIpsecEndpointPairInSAs Unsigned32,
wgIpsecEndpointPairOutSAs Unsigned32,
wgIpsecEndpointPairInAccKbytes Counter32,
wgIpsecEndpointPairOutAccKbytes Counter32,
wgIpsecEndpointPairInPackets Counter32,
wgIpsecEndpointPairOutPackets Counter32,
wgIpsecEndpointPairDecryptErrors Counter32,
wgIpsecEndpointPairAuthErrors Counter32,
wgIpsecEndpointPairReplayErrors Counter32,
wgIpsecEndpointPairPolicyErrors Counter32,
wgIpsecEndpointPairPadErrors Counter32,
wgIpsecEndpointPairOtherReceiveErrors Counter32,
wgIpsecEndpointPairSendErrors Counter32
}
wgIpsecEndpointPairIndex OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The running index of this IPSec endpoint pair."
::= { wgIpsecEndpointPairEntry 1 }
wgIpsecEndpointPairLocalAddr OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The local IP address of the current IPSec ednpoint pair."
::= { wgIpsecEndpointPairEntry 2 }
wgIpsecEndpointPairPeerAddr OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The remote IP address of the current IPSec endpoint pair."
::= { wgIpsecEndpointPairEntry 3 }
wgIpsecEndpointPairInSAs OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of inbound IPSEC SA's within this
IPSec endpoint pair."
::= { wgIpsecEndpointPairEntry 4 }
wgIpsecEndpointPairOutSAs OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of outbound IPSEC SA's within this
IPSec endpoint pair."
::= { wgIpsecEndpointPairEntry 5 }
wgIpsecEndpointPairInAccKbytes OBJECT-TYPE
SYNTAX Counter32
UNITS "Kbytes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total inbound traffic in Kbytes since the establish of
this connection."
::= { wgIpsecEndpointPairEntry 6 }
wgIpsecEndpointPairOutAccKbytes OBJECT-TYPE
SYNTAX Counter32
UNITS "Kbytes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total outound traffic in Kbytes since the establish of
this connection."
::= { wgIpsecEndpointPairEntry 7 }
wgIpsecEndpointPairInPackets OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of inbound packets since the establish of
this connection."
::= { wgIpsecEndpointPairEntry 8 }
wgIpsecEndpointPairOutPackets OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of outound packets since the establish of
this connection."
::= { wgIpsecEndpointPairEntry 9 }
wgIpsecEndpointPairDecryptErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to decryption
error since the establish of this connection."
::= { wgIpsecEndpointPairEntry 10 }
wgIpsecEndpointPairAuthErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to authentication
error since the establish of this connection."
::= { wgIpsecEndpointPairEntry 11 }
wgIpsecEndpointPairReplayErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to replay
error since the establish of this connection."
::= { wgIpsecEndpointPairEntry 12}
wgIpsecEndpointPairPolicyErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to policy
error since the establish of this connection."
::= { wgIpsecEndpointPairEntry 13 }
wgIpsecEndpointPairPadErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to pad value
error since the establish of this connection."
::= { wgIpsecEndpointPairEntry 14 }
wgIpsecEndpointPairOtherReceiveErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets discarded due to errors
other than decryption, authentication or replay errors. This
may include packets dropped due to a lack of receive
buffers, and may include packets dropped due to congestion
at the decryption element."
::= { wgIpsecEndpointPairEntry 15 }
wgIpsecEndpointPairSendErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets discarded due to any error.
This may include errors due to a lack of transmit buffers."
::= { wgIpsecEndpointPairEntry 16 }
-- global statistics
wgIpsecEndpointPairTotalInSAs OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of active inbound SA's in the entity."
::= { wgIpsecEndpointPairStatistics 1 }
wgIpsecEndpointPairTotalOutSAs OBJECT-TYPE
SYNTAX Gauge32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of active outbound SA's in the entity."
::= { wgIpsecEndpointPairStatistics 2 }
wgIpsecEndpointPairTotalInAccKbytes OBJECT-TYPE
SYNTAX Counter32
UNITS "Kbytes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total inbound IPsec traffic of this entity."
::= { wgIpsecEndpointPairStatistics 3 }
wgIpsecEndpointPairTotalOutAccKbytes OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total outbound IPsec traffic of this entity."
::= { wgIpsecEndpointPairStatistics 4 }
wgIpsecEndpointPairTotalInPackets OBJECT-TYPE
SYNTAX Counter32
UNITS "Kbytes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total inbound IPsec packets of this entity."
::= { wgIpsecEndpointPairStatistics 5 }
wgIpsecEndpointPairTotalOutPackets OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total outbound IPsec packets of this entity."
::= { wgIpsecEndpointPairStatistics 6 }
wgIpsecEndpointPairTotalDecryptErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets on this entity discarded due to encryption
error."
::= { wgIpsecEndpointPairStatistics 7 }
wgIpsecEndpointPairTotalAuthErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets on this entity discarded
due to authentication errors."
::= { wgIpsecEndpointPairStatistics 8 }
wgIpsecEndpointPairTotalReplayErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to replay
errors on this entity."
::= { wgIpsecEndpointPairStatistics 9 }
wgIpsecEndpointPairTotalPolicyErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to policy
errors on this entity."
::= { wgIpsecEndpointPairStatistics 10 }
wgIpsecEndpointPairTotalPadErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets on this entity discarded due to pad value
error."
::= { wgIpsecEndpointPairStatistics 11 }
wgIpsecEndpointPairTotalOtherReceiveErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of packets on this entity discarded due to errors
other than decryption, authentication or replay errors. This
may include packets dropped due to a lack of receive
buffers, and may include packets dropped due to congestion
at the decryption element."
::= { wgIpsecEndpointPairStatistics 12 }
wgIpsecEndpointPairTotalSendErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of packets discarded due to any error on
this entity."
::= { wgIpsecEndpointPairStatistics 13 }
wgIpsecEndpointPairPeerIPToTunnel OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all tunnels
information of the policies."
::= {wgIpsecEndpointPairMIB 3}
wgIpsecEndpointPairPeerIPToTunnelNum OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of tunnels in the peeriptotunnel table. "
::= { wgIpsecEndpointPairPeerIPToTunnel 1 }
wgIpsecEndpointPairPeerIPToTunnelTable OBJECT-TYPE
SYNTAX SEQUENCE OF WGIpsecEndpointPairPeerIPToTunnelEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The peeriptotunnel table in the endpointpair mib."
::= { wgIpsecEndpointPairPeerIPToTunnel 2 }
wgIpsecEndpointPairPeerIPToTunnelEntry OBJECT-TYPE
SYNTAX WGIpsecEndpointPairPeerIPToTunnelEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (conceptual row) containing the peer ip and tunnel
information."
INDEX {
wgIpsecEndpointPairPeerIPToTunnelPeerIP,
wgIpsecEndpointPairPeerIPToTunnelTunnelID
}
::= { wgIpsecEndpointPairPeerIPToTunnelTable 1 }
WGIpsecEndpointPairPeerIPToTunnelEntry ::= SEQUENCE {
wgIpsecEndpointPairPeerIPToTunnelPeerIP IpAddress,
wgIpsecEndpointPairPeerIPToTunnelTunnelID Integer32
}
wgIpsecEndpointPairPeerIPToTunnelPeerIP OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The peer ip of the peeriptotunnel table."
::= {wgIpsecEndpointPairPeerIPToTunnelEntry 1}
wgIpsecEndpointPairPeerIPToTunnelTunnelID OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The tunnel id of the peeriptotunnel table."
::= {wgIpsecEndpointPairPeerIPToTunnelEntry 2}
END

1968
mibs/WATCHGUARD-IPSEC-SA-MON-MIB-EXT Normal file
View File

File diff suppressed because it is too large Load Diff

563
mibs/WATCHGUARD-IPSEC-TUNNEL-MIB Normal file
View File

@@ -0,0 +1,563 @@
WATCHGUARD-IPSEC-TUNNEL-MIB DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY, OBJECT-TYPE, Unsigned32, Counter64,
OBJECT-IDENTITY, enterprises,
IpAddress, TimeTicks FROM SNMPv2-SMI
DateAndTime FROM SNMPv2-TC
watchguard FROM WATCHGUARD-MIB;
wgInfoModule MODULE-IDENTITY
LAST-UPDATED "200701251200Z"
ORGANIZATION "WatchGuard Technologies, Inc."
CONTACT-INFO
" Ella Yu
WatchGuard Technologies, Inc.
1841 Zanker Road
San Jose, CA 95112
USA
408-519-4888
ella.yu@watchguard.com "
DESCRIPTION
"The MIB module describes various tunnel objects
of WatchGuard system."
REVISION "200701251200Z"
DESCRIPTION
"Initial revision."
::= { watchguard 6 }
wgIpsecTunnelMIB OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all tunnel
branches."
::= { wgInfoModule 5 }
wgIpsecTunnel OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all
tunnel information."
::= { wgIpsecTunnelMIB 1 }
wgIpsecTunnelNum OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of entries in the wgIpsecTunnelTable. "
::= { wgIpsecTunnel 1 }
wgIpsecTunnelTable OBJECT-TYPE
SYNTAX SEQUENCE OF WGIpsecTunnelEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This is the connection table describing all current
tunnels exist on this entity."
::= { wgIpsecTunnel 2 }
wgIpsecTunnelEntry OBJECT-TYPE
SYNTAX WGIpsecTunnelEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (conceptual row) containing the information on a
tunnel between two security gateways."
INDEX{ wgIpsecTunnelID }
::= { wgIpsecTunnelTable 1 }
WGIpsecTunnelEntry ::= SEQUENCE {
wgIpsecTunnelID Integer32,
wgIpsecTunnelLocalAddr IpAddress,
wgIpsecTunnelPeerAddr IpAddress,
wgIpsecTunnelInSpi Integer32,
wgIpsecTunnelOutSpi Integer32,
wgIpsecTunnelCreateTime DateAndTime,
wgIpsecTunnelDeviceID Unsigned32,
wgIpsecTunnelEspEncryptAlg INTEGER,
wgIpsecTunnelEspAuthAlg INTEGER,
wgIpsecTunnelAhAuthAlg INTEGER,
wgIpsecTunnelMode INTEGER,
wgIpsecTunnelKeyMode INTEGER,
wgIpsecTunnelLifeTime TimeTicks,
wgIpsecTunnelLifeLength Counter32,
wgIpsecTunnelInSaBytes Counter32,
wgIpsecTunnelOutSaBytes Counter32,
wgIpsecTunnelAccSecs Counter32,
wgIpsecTunnelSelectorProtocol INTEGER,
wgIpsecTunnelSelectorRemoteIPType INTEGER,
wgIpsecTunnelSelectorRemoteIPOne IpAddress,
wgIpsecTunnelSelectorRemoteIPTwo IpAddress,
wgIpsecTunnelSelectorRemotePort INTEGER,
wgIpsecTunnelSelectorLocalIPType INTEGER,
wgIpsecTunnelSelectorLocalIPOne IpAddress,
wgIpsecTunnelSelectorLocalIPTwo IpAddress,
wgIpsecTunnelSelectorLocalPort INTEGER,
wgIpsecTunnelNumRekey Counter32,
wgIpsecTunnelInKbytes Counter32,
wgIpsecTunnelOutKbytes Counter32,
wgIpsecTunnelInPackets Counter32,
wgIpsecTunnelOutPackets Counter32,
wgIpsecTunnelInDecryptErrors Counter32,
wgIpsecTunnelInAuthErrors Counter32,
wgIpsecTunnelInReplayErrors Counter32,
wgIpsecTunnelInOtherErrors Counter32,
wgIpsecTunnelOutDecryptErrors Counter32,
wgIpsecTunnelOutAuthErrors Counter32,
wgIpsecTunnelOutReplayErrors Counter32,
wgIpsecTunnelOutOtherErrors Counter32,
wgIpsecTunnelUdpEncap INTEGER,
wgIpsecTunnelPeerUdpPort INTEGER,
wgIpsecTunnelOrigPeerAddr IpAddress
}
wgIpsecTunnelID OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The running index of this tunnel."
::= { wgIpsecTunnelEntry 1 }
wgIpsecTunnelLocalAddr OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The local IP address of the current tunnel."
::= { wgIpsecTunnelEntry 2 }
wgIpsecTunnelPeerAddr OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The remote IP address of the current tunnel."
::= { wgIpsecTunnelEntry 3 }
wgIpsecTunnelInSpi OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The security parameters index of inbound SA's within this
tunnel."
::= { wgIpsecTunnelEntry 4 }
wgIpsecTunnelOutSpi OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The security parameters index of outbound SA's within this
tunnel."
::= { wgIpsecTunnelEntry 5 }
wgIpsecTunnelCreateTime OBJECT-TYPE
SYNTAX DateAndTime
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The date and time when the tunnel is created."
::= { wgIpsecTunnelEntry 6 }
wgIpsecTunnelDeviceID OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The identifier of target device where the SA resides."
::= { wgIpsecTunnelEntry 7 }
wgIpsecTunnelEspEncryptAlg OBJECT-TYPE
SYNTAX INTEGER {
unknown(0),
des(2),
three-des(3)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The encryption algorithm used in the tunnel. It's 0
if ESP is not used."
::= { wgIpsecTunnelEntry 8 }
wgIpsecTunnelEspAuthAlg OBJECT-TYPE
SYNTAX INTEGER {
unknown(0),
md5(2),
sha(3)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The authentication algorithm used in the tunnel. It's
0 if ESP is not used."
::= { wgIpsecTunnelEntry 9 }
wgIpsecTunnelAhAuthAlg OBJECT-TYPE
SYNTAX INTEGER {
unknown(0),
md5(2),
sha(3)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The AH authentication algorithm used in the tunnel.
It's 0 if AH is not used."
::= { wgIpsecTunnelEntry 10 }
wgIpsecTunnelMode OBJECT-TYPE
SYNTAX INTEGER {
unknown(0),
tunnel(1),
transport(2)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The tunnel/transport mode of the tunnel."
::= { wgIpsecTunnelEntry 11 }
wgIpsecTunnelKeyMode OBJECT-TYPE
SYNTAX INTEGER {
unknown(0),
manual(1),
auto-ike(2),
other(3)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The key mode of the tunnel."
::= { wgIpsecTunnelEntry 12 }
wgIpsecTunnelLifeTime OBJECT-TYPE
SYNTAX TimeTicks
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The life time (in hundredths of a second) of the tunnel."
::= { wgIpsecTunnelEntry 13 }
wgIpsecTunnelLifeLength OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The maximum traffic in bytes that the tunnel is allowed to support."
::= { wgIpsecTunnelEntry 14 }
wgIpsecTunnelInSaBytes OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Current active inbound SA bytes of the tunnel."
::= { wgIpsecTunnelEntry 15 }
wgIpsecTunnelOutSaBytes OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Current active outbound SA bytes of the tunnel."
::= { wgIpsecTunnelEntry 16 }
wgIpsecTunnelAccSecs OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of seconds that the tunnel has existed."
::= { wgIpsecTunnelEntry 17 }
wgIpsecTunnelSelectorProtocol OBJECT-TYPE
SYNTAX INTEGER {
any(0),
icmp(1),
igmp(2),
ipip(4),
tcp(6),
egp(8),
pup(12),
udp(17),
idp(22),
tp(29),
ipv6(41),
ipv6-routing(43),
ipv6-fragmentation(44),
rsvp(46),
gre(47),
esp(50),
ah(51),
icmpv6(58),
none(59),
dstopts(60),
mtp(92),
encap(98),
pim(103),
raw(255)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The ip protocol number that this SA selector carries, or
0 if it carries any protocol."
::= { wgIpsecTunnelEntry 18 }
wgIpsecTunnelSelectorRemoteIPType OBJECT-TYPE
SYNTAX INTEGER {
ip-addr-single(1),
ip-addr-subnet(2),
ip-addr-range(3)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The type of remote IP address of the SA selector in
the entity."
::= { wgIpsecTunnelEntry 19 }
wgIpsecTunnelSelectorRemoteIPOne OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The first remote IP address of the SA selector in the entity.
It's IP address if remote IP of this selector only has one address.
It's IP address of subnet if the remote IP of this selector is IP subnet.
It's the start IP address if the remote IP of this selector
has a range of addresses."
::= { wgIpsecTunnelEntry 20 }
wgIpsecTunnelSelectorRemoteIPTwo OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The second remote IP address of the SA selector in the entity.
It's 0 if remote IP of this selector only has one address.
It's netmask of subnet if the remote IP of this selector is IP subnet.
It's the end IP address if the remote IP of this selector
has a range of addresses."
::= { wgIpsecTunnelEntry 21 }
wgIpsecTunnelSelectorRemotePort OBJECT-TYPE
SYNTAX INTEGER (0..65535)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The remote port used by this selector in the entity."
::= { wgIpsecTunnelEntry 22 }
wgIpsecTunnelSelectorLocalIPType OBJECT-TYPE
SYNTAX INTEGER {
ip-addr-single(1),
ip-addr-subnet(2),
ip-addr-range(3)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The type of local IP address of the SA selector in
the entity."
::= { wgIpsecTunnelEntry 23 }
wgIpsecTunnelSelectorLocalIPOne OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The first local IP address of the SA selector in the entity.
It's IP address if local IP of this selector only has one address.
It's IP address of subnet if the local IP of this selector is IP subnet.
It's the start IP address if the local IP of this selector
has a range of IP addresses."
::= { wgIpsecTunnelEntry 24 }
wgIpsecTunnelSelectorLocalIPTwo OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The second local IP address of the SA selector in the entity.
It's 0 if local IP of this selector only has one address.
It's netmask of subnet if the local IP of this selector is IP subnet.
It's the end IP address if the local IP of this selector
has a range of IP addresses."
::= { wgIpsecTunnelEntry 25 }
wgIpsecTunnelSelectorLocalPort OBJECT-TYPE
SYNTAX INTEGER (0..65535)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The local port used by this selector in the entity."
::= { wgIpsecTunnelEntry 26 }
wgIpsecTunnelNumRekey OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of rekeys of the tunnel."
::= { wgIpsecTunnelEntry 27 }
wgIpsecTunnelInKbytes OBJECT-TYPE
SYNTAX Counter32
UNITS "Kbytes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total inbound traffic in Kbytes since the establish of
this tunnel."
::= { wgIpsecTunnelEntry 28 }
wgIpsecTunnelOutKbytes OBJECT-TYPE
SYNTAX Counter32
UNITS "Kbytes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total outound traffic in Kbytes since the establish of
this connection."
::= { wgIpsecTunnelEntry 29 }
wgIpsecTunnelInPackets OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of inbound packets since the establish of
this connection."
::= { wgIpsecTunnelEntry 30 }
wgIpsecTunnelOutPackets OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of outound packets since the establish of
this connection."
::= { wgIpsecTunnelEntry 31 }
wgIpsecTunnelInDecryptErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to decryption
error since the establish of this connection."
::= { wgIpsecTunnelEntry 32 }
wgIpsecTunnelInAuthErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to authentication
error since the establish of this connection."
::= { wgIpsecTunnelEntry 33 }
wgIpsecTunnelInReplayErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to replay
error since the establish of this connection."
::= { wgIpsecTunnelEntry 34}
wgIpsecTunnelInOtherErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets discarded due to errors
other than decryption, authentication or replay errors. This
may include packets dropped due to a lack of receive
buffers, and may include packets dropped due to congestion
at the decryption element."
::= { wgIpsecTunnelEntry 35 }
wgIpsecTunnelOutDecryptErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to decryption
error since the establish of this connection."
::= { wgIpsecTunnelEntry 36 }
wgIpsecTunnelOutAuthErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to authentication
error since the establish of this connection."
::= { wgIpsecTunnelEntry 37 }
wgIpsecTunnelOutReplayErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to replay
error since the establish of this connection."
::= { wgIpsecTunnelEntry 38 }
wgIpsecTunnelOutOtherErrors OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets discarded due to errors
other than decryption, authentication or replay errors. This
may include packets dropped due to a lack of receive
buffers, and may include packets dropped due to congestion
at the decryption element."
::= { wgIpsecTunnelEntry 39 }
wgIpsecTunnelUdpEncap OBJECT-TYPE
SYNTAX INTEGER {
disabled(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates whether if UDP encapsulated IPSec has been enabled."
::= { wgIpsecTunnelEntry 40 }
wgIpsecTunnelPeerUdpPort OBJECT-TYPE
SYNTAX INTEGER (0..65535)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The peer's UDP port of current tunnel when UDP encapsulated IPSec
is enabled."
::= { wgIpsecTunnelEntry 41 }
wgIpsecTunnelOrigPeerAddr OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The original peer ip address of current tunnel when UDP encapsulated
IPSec is enabled"
::= { wgIpsecTunnelEntry 42 }
END

31
mibs/WATCHGUARD-MIB Normal file
View File

@@ -0,0 +1,31 @@
WATCHGUARD-MIB DEFINITIONS ::= BEGIN
IMPORTS
enterprises FROM SNMPv2-SMI;
watchguard OBJECT IDENTIFIER ::= { enterprises 3097 }
wgProducts OBJECT IDENTIFIER ::= { watchguard 1 }
fbXSeries OBJECT IDENTIFIER ::= { wgProducts 4 }
-- fbX series
fbX500 OBJECT IDENTIFIER ::= { fbXSeries 1 }
fbX550e OBJECT IDENTIFIER ::= { fbXSeries 2 }
fbX700 OBJECT IDENTIFIER ::= { fbXSeries 3 }
fbX750e OBJECT IDENTIFIER ::= { fbXSeries 4 }
fbX750e-4 OBJECT IDENTIFIER ::= { fbXSeries 5 }
fbX1000 OBJECT IDENTIFIER ::= { fbXSeries 6 }
fbX1250e OBJECT IDENTIFIER ::= { fbXSeries 7 }
fbX1250e-4 OBJECT IDENTIFIER ::= { fbXSeries 8 }
fbX2500 OBJECT IDENTIFIER ::= { fbXSeries 9 }
fbX5000 OBJECT IDENTIFIER ::= { fbXSeries 10 }
fbX5500e OBJECT IDENTIFIER ::= { fbXSeries 11 }
fbX6000 OBJECT IDENTIFIER ::= { fbXSeries 12 }
fbX6500e OBJECT IDENTIFIER ::= { fbXSeries 13 }
fbX8000 OBJECT IDENTIFIER ::= { fbXSeries 14 }
fbX8500e OBJECT IDENTIFIER ::= { fbXSeries 15 }
fbX8500e-F OBJECT IDENTIFIER ::= { fbXSeries 16 }
END

312
mibs/WATCHGUARD-POLICY-MIB Normal file
View File

@@ -0,0 +1,312 @@
WATCHGUARD-POLICY-MIB DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY, OBJECT-TYPE, Unsigned32, Counter64,
OBJECT-IDENTITY, enterprises,
IpAddress, TimeTicks FROM SNMPv2-SMI
DateAndTime FROM SNMPv2-TC
watchguard FROM WATCHGUARD-MIB;
wgPolicyMIB MODULE-IDENTITY
LAST-UPDATED "200701251200Z"
ORGANIZATION "WatchGuard Technologies, Inc."
CONTACT-INFO
" Ella Yu
WatchGuard Technologies, Inc.
1841 Zanker Road
San Jose, CA 95112
USA
408-519-4888
ella.yu@watchguard.com "
DESCRIPTION
"The MIB module describes various policy objects
of WatchGuard system."
REVISION "200701251200Z"
DESCRIPTION
"Initial revision."
::= { watchguard 4 }
wgPolicyToTunnel OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all tunnels
information of the policies."
::= {wgPolicyMIB 1}
wgPolicyStatistics OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all policy related
statistical counters."
::= { wgPolicyMIB 2 }
wgPolicyToTunnelNum OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of tunnels in the policytotunnel table. "
::= { wgPolicyToTunnel 1 }
wgPolicyToTunnelTable OBJECT-TYPE
SYNTAX SEQUENCE OF WGPolicyToTunnelEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This is the policytotunnel table of all the policies."
::= { wgPolicyToTunnel 2 }
wgPolicyToTunnelEntry OBJECT-TYPE
SYNTAX WGPolicyToTunnelEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (conceptual row) containing the tunnels
information."
INDEX {
wgPolicyToTunnelPolicyID,
wgPolicyToTunnelTunnelID
}
::= { wgPolicyToTunnelTable 1 }
WGPolicyToTunnelEntry ::= SEQUENCE {
wgPolicyToTunnelPolicyID Integer32,
wgPolicyToTunnelTunnelID Integer32
}
wgPolicyToTunnelPolicyID OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The policy identifier of this entity."
::= {wgPolicyToTunnelEntry 1}
wgPolicyToTunnelTunnelID OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The tunnel identifier of this entity."
::= {wgPolicyToTunnelEntry 2}
-- counter ID
-- per policy counter
-- 1-24 is reserved
wgPolicyTableNum OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of policies in the policy table. "
::= { wgPolicyStatistics 1 }
wgPolicyTable OBJECT-TYPE
SYNTAX SEQUENCE OF WGPolicyEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This is the policytotunnel table of the policies."
::= { wgPolicyStatistics 2 }
wgPolicyEntry OBJECT-TYPE
SYNTAX WGPolicyEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (conceptual row) containing the policy
information."
INDEX{
wgPolicyID
}
::= { wgPolicyTable 1 }
WGPolicyEntry ::= SEQUENCE {
wgPolicyID Integer32,
wgPolicyName OCTET STRING (SIZE(32)),
wgPolicyBytes Counter64,
wgPolicyPackets Counter64,
wgPolicyIpsecDecryptErr Counter64,
wgPolicyIpsecAuthErr Counter64,
wgPolicyIpsecReplayErr Counter64,
wgPolicyIpsecPadErr Counter64,
wgPolicyIpsecPolicyErr Counter64,
wgPolicyFwDisc Counter64,
wgPolicyOtherDisc Counter64,
wgPolicyActiveStreams Counter64,
wgPolicyIpsecDisc Counter64,
wgPolicyDisc Counter64,
wgPolicyNumTunl Counter64,
wgPolicySingleCntrNum Counter64,
wgPolicyLogging INTEGER,
wgPolicyCurrActiveConns Counter64
}
wgPolicyID OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The policy identifier of this policy."
::= {wgPolicyEntry 1}
wgPolicyName OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(32))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The policy name of this policy"
::= {wgPolicyEntry 2}
wgPolicyBytes OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total traffic in bytes since setting up this policy."
::= {wgPolicyEntry 3}
wgPolicyPackets OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total traffic in packets since setting up this policy."
::= {wgPolicyEntry 4}
wgPolicyIpsecDecryptErr OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to decryption
errors since setting up this policy."
::= {wgPolicyEntry 5}
wgPolicyIpsecAuthErr OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to authentication
errors since setting up this policy."
::= {wgPolicyEntry 6}
wgPolicyIpsecReplayErr OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to replay
errors since setting up this policy."
::= {wgPolicyEntry 7}
wgPolicyIpsecPadErr OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to pad value
errors since setting up this policy."
::= {wgPolicyEntry 8}
wgPolicyIpsecPolicyErr OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to policy
errors since setting up this policy."
::= {wgPolicyEntry 9}
wgPolicyFwDisc OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded by firewall policies
since setting up this policy."
::= {wgPolicyEntry 10}
wgPolicyOtherDisc OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to errors
other than firewall errors, ipsec errors since setting up
this policy."
::= {wgPolicyEntry 11}
wgPolicyActiveStreams OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of the active connections since setting
up this policy."
::= {wgPolicyEntry 12}
wgPolicyIpsecDisc OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded by IPSEC errors
(decryption error, authentication error, replay error)
since setting up this policy."
::= {wgPolicyEntry 13}
wgPolicyDisc OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded since setting up
this policy."
::= {wgPolicyEntry 14}
wgPolicyNumTunl OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of tunnels belong to this policy"
::= {wgPolicyEntry 15}
wgPolicySingleCntrNum OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of single counters handled by this policy."
::= {wgPolicyEntry 16}
wgPolicyLogging OBJECT-TYPE
SYNTAX INTEGER {
disabled(0),
enabled(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates whether if the logging of this policy has been enabled. "
::= { wgPolicyEntry 17 }
wgPolicyCurrActiveConns OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of currently active connections for this policy."
::= {wgPolicyEntry 18}
END

74
mibs/WATCHGUARD-PRODUCTS-MIB Normal file
View File

@@ -0,0 +1,74 @@
WATCHGUARD-PRODUCTS-MIB DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY FROM SNMPv2-SMI
watchguard FROM WATCHGUARD-SMI;
wgProducts MODULE-IDENTITY
LAST-UPDATED "200811100000Z"
ORGANIZATION "WatchGuard Technologies, Inc."
CONTACT-INFO
" Ella Yu
WatchGuard Technologies, Inc.
15901 Red Hill Avenue, Suite 202
Tustin, CA 92780
USA
714-258-4598
ella.yu@watchguard.com
"
DESCRIPTION
"This MIB module definesthe object identifiers
for WatchGuard Technologies Products."
REVISION
"200811100000Z"
DESCRIPTION
"Initial version."
::= { watchguard 1 }
fbXSeries OBJECT IDENTIFIER ::= { wgProducts 4 }
xtmSeries OBJECT IDENTIFIER ::= { wgProducts 5 }
-- fbX series
fbX500 OBJECT IDENTIFIER ::= { fbXSeries 1 }
fbX550e OBJECT IDENTIFIER ::= { fbXSeries 2 }
fbX700 OBJECT IDENTIFIER ::= { fbXSeries 3 }
fbX750e OBJECT IDENTIFIER ::= { fbXSeries 4 }
fbX750e-4 OBJECT IDENTIFIER ::= { fbXSeries 5 }
fbX1000 OBJECT IDENTIFIER ::= { fbXSeries 6 }
fbX1250e OBJECT IDENTIFIER ::= { fbXSeries 7 }
fbX1250e-4 OBJECT IDENTIFIER ::= { fbXSeries 8 }
fbX2500 OBJECT IDENTIFIER ::= { fbXSeries 9 }
fbX5000 OBJECT IDENTIFIER ::= { fbXSeries 10 }
fbX5500e OBJECT IDENTIFIER ::= { fbXSeries 11 }
fbX6000 OBJECT IDENTIFIER ::= { fbXSeries 12 }
fbX6500e OBJECT IDENTIFIER ::= { fbXSeries 13 }
fbX8000 OBJECT IDENTIFIER ::= { fbXSeries 14 }
fbX8500e OBJECT IDENTIFIER ::= { fbXSeries 15 }
fbX8500e-F OBJECT IDENTIFIER ::= { fbXSeries 16 }
fbX10e OBJECT IDENTIFIER ::= { fbXSeries 17 }
fbX10e-W OBJECT IDENTIFIER ::= { fbXSeries 18 }
fbX20e OBJECT IDENTIFIER ::= { fbXSeries 19 }
fbX20e-W OBJECT IDENTIFIER ::= { fbXSeries 20 }
fbX55e OBJECT IDENTIFIER ::= { fbXSeries 21 }
fbX55e-W OBJECT IDENTIFIER ::= { fbXSeries 22 }
-- xtm series
xtm1050 OBJECT IDENTIFIER ::= { xtmSeries 1 }
xtm1050-F OBJECT IDENTIFIER ::= { XTMSeries 2 }
xtm830-F OBJECT IDENTIFIER ::= { XTMSeries 3 }
xtm830 OBJECT IDENTIFIER ::= { XTMSeries 4 }
xtm820 OBJECT IDENTIFIER ::= { XTMSeries 5 }
xtm810 OBJECT IDENTIFIER ::= { XTMSeries 6 }
xtm530 OBJECT IDENTIFIER ::= { XTMSeries 7 }
xtm520 OBJECT IDENTIFIER ::= { XTMSeries 8 }
xtm510 OBJECT IDENTIFIER ::= { XTMSeries 9 }
xtm23 OBJECT IDENTIFIER ::= { XTMSeries 10 }
xtm22 OBJECT IDENTIFIER ::= { XTMSeries 11 }
xtm21 OBJECT IDENTIFIER ::= { XTMSeries 12 }
xtm23-W OBJECT IDENTIFIER ::= { XTMSeries 13 }
xtm22-W OBJECT IDENTIFIER ::= { XTMSeries 14 }
xtm21-W OBJECT IDENTIFIER ::= { XTMSeries 15 }
END

42
mibs/WATCHGUARD-SMI Normal file
View File

@@ -0,0 +1,42 @@
WATCHGUARD-SMI DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY, OBJECT-IDENTITY, enterprises
FROM SNMPv2-SMI;
watchguard MODULE-IDENTITY
LAST-UPDATED "200811100000Z"
ORGANIZATION "WatchGuard Technologies, Inc."
CONTACT-INFO
" Ella Yu
WatchGuard Technologies, Inc.
15901 Red Hill Avenue, Suite 202
Tustin, CA 92780
USA
714-258-4598
ella.yu@watchguard.com "
DESCRIPTION
"The Structure of Management Information for
the WatchGuard enterprise."
REVISION "200811100000Z"
DESCRIPTION
"Initial version."
::= { enterprises 3097 }
wgProducts OBJECT-IDENTITY
STATUS current
DESCRIPTION
"wgProducts is the root OBJECT IDENTIFIER of
WatchGuard Product OIDs."
::= { watchguard 1 }
wgSystemConfigMIB OBJECT-IDENTITY
STATUS current
DESCRIPTION
"wgSystemConfig is the root OBJECT IDENTIFIER of
WatchGuard Firebox system configurations."
::= { watchguard 2 }
END

164
mibs/WATCHGUARD-SYSTEM-CONFIG-MIB Normal file
View File

@@ -0,0 +1,164 @@
WATCHGUARD-SYSTEM-CONFIG-MIB DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY, OBJECT-TYPE, Counter32,
Integer32, Unsigned32, IpAddress, Gauge32,
enterprises, NOTIFICATION-TYPE FROM SNMPv2-SMI
watchguard FROM WATCHGUARD-MIB;
wgSystemConfigMIB MODULE-IDENTITY
LAST-UPDATED "200701251200Z"
ORGANIZATION "WatchGuard Technologies, Inc."
CONTACT-INFO
" Ella Yu
WatchGuard Technologies, Inc.
1841 Zanker Road
San Jose, CA 95112
USA
408-519-4888
ella.yu@watchguard.com "
DESCRIPTION
"The MIB module to describe WatchGuard Firebox system
configuration."
REVISION "200701251200Z"
DESCRIPTION
"Initial revision."
::= { watchguard 2 }
-- significant branches
wgSysTraps OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object for system wide traps
in this entity."
::= { wgSystemConfigMIB 3 }
wgSysTrapObjects OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object for objects which are used
as part of traps."
::= { wgSystemConfigMIB 4 }
wgSysTrapControl OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all objects
which are trap control for the entity."
::= { wgSystemConfigMIB 5 }
--
-- wgSysTraps
--
-- object used in trap reporting
wgAlarmId OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The id of the alarm that generates a trap."
::= { wgSysTrapObjects 1 }
wgAlarmLabel OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(0..64))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The name of the alarm that generates a trap."
::= { wgSysTrapObjects 2 }
wgAlarmTime OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The date and time of the alarm that generates a trap."
::= { wgSysTrapObjects 3 }
wgAlarmLevel OBJECT-TYPE
SYNTAX INTEGER {
normal(4),
warning(3),
error(2),
critical(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The level of an alarm generated."
::= { wgSysTrapObjects 4 }
wgAlarmHostname OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(0..64))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The host name of the system where alarm occurred"
::= { wgSysTrapObjects 5 }
wgAlarmMsg OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The message describing the nature of this alarm."
::= { wgSysTrapObjects 6 }
--
-- trap control
--
wgAlarmTrapEnable OBJECT-TYPE
SYNTAX INTEGER {
false(0),
true(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates whether wgAlarmTrap trap should be generated."
DEFVAL { true }
::= { wgSysTrapControl 1 }
--
-- traps themselves
--
wgSysTrapsPrefix OBJECT-IDENTITY
STATUS current
DESCRIPTION ""
::= { wgSysTraps 0 }
wgAlarmTrap NOTIFICATION-TYPE
OBJECTS {
wgAlarmId,
wgAlarmLabel,
wgAlarmTime,
wgAlarmLevel,
wgAlarmHostname,
wgAlarmMsg
}
STATUS current
DESCRIPTION
"An alarm was raised by Monitoring Agent of this
WatchGuard entity."
::= { wgSysTrapsPrefix 1 }
wgSnmpStart NOTIFICATION-TYPE
STATUS current
DESCRIPTION
"This trap is sent when the snmp starts."
::= { wgSysTrapsPrefix 2 }
wgSnmpShutdown NOTIFICATION-TYPE
STATUS current
DESCRIPTION
"This trap is sent when the snmp terminates."
::= { wgSysTrapsPrefix 3 }
END

142
mibs/WATCHGUARD-SYSTEM-STATISTICS-MIB Normal file
View File

@@ -0,0 +1,142 @@
WATCHGUARD-SYSTEM-STATISTICS-MIB DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY, OBJECT-TYPE, Counter64,
OBJECT-IDENTITY, enterprises,
IpAddress, TimeTicks FROM SNMPv2-SMI
watchguard FROM WATCHGUARD-MIB;
wgInfoModule MODULE-IDENTITY
LAST-UPDATED "200701251200Z"
ORGANIZATION "WatchGuard Technologies, Inc."
CONTACT-INFO
" Ella Yu
WatchGuard Technologies, Inc.
1841 Zanker Road
San Jose, CA 95112
USA
408-519-4888
ella.yu@watchguard.com "
DESCRIPTION
"The MIB module describes various system statistics information
of WatchGuard system."
REVISION "200701251200Z"
DESCRIPTION
"Initial revision."
::= { watchguard 6 }
wgSystemStatisticsMIB OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base system information for all system related
statistical counters."
::= { wgInfoModule 3 }
wgSystemCpuUtil OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"CPU utilization of the system in last 5 seconds. The value
is measured in 0.01%. For example, if the value is 234,
then CPU utilization is 2.34%."
::= { wgSystemStatisticsMIB 4 }
wgSystemTotalSendBytes OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of bytes sent since system is up. This
number includes both cut through traffic and host traffic."
::= { wgSystemStatisticsMIB 8 }
wgSystemTotalRecvBytes OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of bytes received since system is up. This
number includes both cut through traffic and host traffic."
::= { wgSystemStatisticsMIB 9 }
wgSystemTotalSendPackets OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of the packets sent since system is up. This
number includes both cut through traffic and host traffic."
::= { wgSystemStatisticsMIB 10 }
wgSystemTotalRecvPackets OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of the packets received since system is up.
The number includes both cut through traffic and host traffic."
::= { wgSystemStatisticsMIB 11 }
wgSystemStreamReqTotal OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of the connection requests since system is up."
::= { wgSystemStatisticsMIB 30 }
wgSystemStreamReqDrop OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of the connection requests being dropped since system is up."
::= { wgSystemStatisticsMIB 34 }
wgSystemCpuUtil1 OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"CPU utilization of the system in last 1 minute. The value
is measured in 0.01%. For example, if the value is 234,
then CPU utilization is 2.34%."
::= { wgSystemStatisticsMIB 77 }
wgSystemCpuUtil5 OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"CPU utilization of the system in last 5 minutes. The value
is measured in 0.01%. For example, if the value is 234,
then CPU utilization is 2.34%."
::= { wgSystemStatisticsMIB 78 }
wgSystemCpuUtil15 OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"CPU utilization of the system in last 15 minutes. The value
is measured in 0.01%. For example, if the value is 234,
then CPU utilization is 2.34%."
::= { wgSystemStatisticsMIB 79 }
wgSystemCurrActiveConns OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of currently active connections of the system."
::= { wgSystemStatisticsMIB 80 }
END