Initial start on better watchguard support

This commit is contained in:
laf
2015-04-14 17:45:56 +01:00
parent 4739254fbe
commit a64fb5e802
14 changed files with 475 additions and 502 deletions

View File

@@ -1014,6 +1014,15 @@ $config['os'][$os]['over'][1]['graph'] = "device_processor";
$config['os'][$os]['over'][1]['text'] = "CPU Usage";
$config['os'][$os]['icon'] = "watchguard";
$os = "fireware";
$config['os'][$os]['text'] = "Watchguard Fireware";
$config['os'][$os]['type'] = "firewall";
$config['os'][$os]['over'][0]['graph'] = "device_bits";
$config['os'][$os]['over'][0]['text'] = "Traffic";
$config['os'][$os]['over'][1]['graph'] = "device_processor";
$config['os'][$os]['over'][1]['text'] = "CPU Usage";
$config['os'][$os]['icon'] = "watchguard";
$os = "panos";
$config['os'][$os]['text'] = "PanOS";
$config['os'][$os]['type'] = "firewall";

View File

@@ -0,0 +1,21 @@
<?php
/*
* LibreNMS
*
* Copyright (c) 2014 Neil Lathwood <https://github.com/laf/ http://www.lathwood.co.uk/fa>
*
* This program is free software: you can redistribute it and/or modify it
* under the terms of the GNU General Public License as published by the
* Free Software Foundation, either version 3 of the License, or (at your
* option) any later version. Please see LICENSE.txt at the top level of
* the source code distribution for details.
*/
if (preg_match("/^(XTM|FBX)/i", $sysDescr)) {
$product = snmp_get($device, "WATCHGUARD-PRODUCTS-MIB::wgProducts.0", "-Oqv", "");
if (!empty($product)) {
$os = "fireware";
}
}

View File

@@ -1,8 +1,9 @@
<?php
if (!$os)
{
if (preg_match("/^WatchGuard\ Fireware/", $sysDescr)) { $os = "firebox"; }
if (!$os) {
if (preg_match("/^WatchGuard\ Fireware/", $sysDescr)) {
$os = "firebox";
}
}
?>

View File

@@ -0,0 +1,34 @@
<?php
/*
* LibreNMS
*
* Copyright (c) 2014 Neil Lathwood <https://github.com/laf/ http://www.lathwood.co.uk/fa>
*
* This program is free software: you can redistribute it and/or modify it
* under the terms of the GNU General Public License as published by the
* Free Software Foundation, either version 3 of the License, or (at your
* option) any later version. Please see LICENSE.txt at the top level of
* the source code distribution for details.
*/
$oids = "entPhysicalModelName.1 entPhysicalContainedIn.1 entPhysicalName.1 entPhysicalSoftwareRev.1 entPhysicalModelName.1001 entPhysicalContainedIn.1001 cardDescr.1 cardSlotNumber.1";
$data = snmp_get_multi($device, $oids, "-OQUs", "ENTITY-MIB:OLD-CISCO-CHASSIS-MIB");
if ($data[1]['entPhysicalContainedIn'] == "0")
{
if (!empty($data[1]['entPhysicalSoftwareRev']))
{
$version = $data[1]['entPhysicalSoftwareRev'];
}
if (!empty($data[1]['entPhysicalName']))
{
$hardware = $data[1]['entPhysicalName'];
}
if (!empty($data[1]['entPhysicalModelName']))
{
$hardware = $data[1]['entPhysicalModelName'];
}
}

View File

@@ -5,20 +5,20 @@ WATCHGUARD-CLIENT-MIB DEFINITIONS ::= BEGIN
OBJECT-IDENTITY, enterprises,
IpAddress, Unsigned32, TimeTicks FROM SNMPv2-SMI
DateAndTime FROM SNMPv2-TC
watchguard FROM WATCHGUARD-MIB;
watchguard FROM WATCHGUARD-SMI;
wgInfoModule MODULE-IDENTITY
LAST-UPDATED "200701251200Z"
ORGANIZATION "WatchGuard Technologies, Inc."
CONTACT-INFO
" Ella Yu
WatchGuard Technologies, Inc.
1841 Zanker Road
San Jose, CA 95112
USA
408-519-4888
ella.yu@watchguard.com "
" WatchGuard Technologies, Inc.
505 Fifth Avenue South
Suite 500
Seattle, WA 98104
United States
+1.206.613.6600 "
DESCRIPTION
"The MIB module describes client information

View File

@@ -4,20 +4,20 @@ WATCHGUARD-INFO-SYSTEM-MIB DEFINITIONS ::= BEGIN
MODULE-IDENTITY, OBJECT-TYPE,
OBJECT-IDENTITY, enterprises FROM SNMPv2-SMI
DateAndTime FROM SNMPv2-TC
watchguard FROM WATCHGUARD-MIB;
watchguard FROM WATCHGUARD-SMI;
wgInfoModule MODULE-IDENTITY
LAST-UPDATED "200701251200Z"
ORGANIZATION "WatchGuard Technologies, Inc."
CONTACT-INFO
" Ella Yu
WatchGuard Technologies, Inc.
1841 Zanker Road
San Jose, CA 95112
USA
408-519-4888
ella.yu@watchguard.com "
" WatchGuard Technologies, Inc.
505 Fifth Avenue South
Suite 500
Seattle, WA 98104
United States
+1.206.613.6600 "
DESCRIPTION
"The MIB module describes general information
@@ -47,4 +47,19 @@ WATCHGUARD-INFO-SYSTEM-MIB DEFINITIONS ::= BEGIN
"The host's notion of the local date and time of day."
::= {wgInfoSystem 1}
wgInfoGavService OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(0..64))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Version and update time of Gateway Antivirus Service"
::= {wgInfoSystem 3}
wgInfoIpsService OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(0..64))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Version and update time of Intrusion Prevention Service"
::= {wgInfoSystem 4}
END

View File

@@ -4,20 +4,20 @@ WATCHGUARD-IPSEC-ENDPOINT-PAIR-MIB DEFINITIONS ::= BEGIN
MODULE-IDENTITY, OBJECT-TYPE, Unsigned32, Gauge32,
OBJECT-IDENTITY, enterprises,
IpAddress FROM SNMPv2-SMI
watchguard FROM WATCHGUARD-MIB;
watchguard FROM WATCHGUARD-SMI;
wgIpsecEndpointPairModule MODULE-IDENTITY
LAST-UPDATED "200701251200Z"
ORGANIZATION "WatchGuard Technologies, Inc."
CONTACT-INFO
" Ella Yu
WatchGuard Technologies, Inc.
1841 Zanker Road
San Jose, CA 95112
USA
" WatchGuard Technologies, Inc.
505 Fifth Avenue South
Suite 500
Seattle, WA 98104
United States
408-519-4888
ella.yu@watchguard.com "
+1.206.613.6600 "
DESCRIPTION
"The MIB module describes generic Ipsec Endpoint Pair information
@@ -149,7 +149,10 @@ WATCHGUARD-IPSEC-ENDPOINT-PAIR-MIB DEFINITIONS ::= BEGIN
STATUS current
DESCRIPTION
"The number of inbound IPSEC SA's within this
IPSec endpoint pair."
IPSec endpoint pair.If IKE rekeys and no data
stream to activate new SA, the SA statistics
may be include the old SA, then the total number
is the double of the active SA"
::= { wgIpsecEndpointPairEntry 4 }
wgIpsecEndpointPairOutSAs OBJECT-TYPE
@@ -158,7 +161,10 @@ WATCHGUARD-IPSEC-ENDPOINT-PAIR-MIB DEFINITIONS ::= BEGIN
STATUS current
DESCRIPTION
"The number of outbound IPSEC SA's within this
IPSec endpoint pair."
IPSec endpoint pair.If IKE rekeys and no data
stream to activate new SA, the SA statistics
may be include the old SA, then the total number
is the double of the active SA"
::= { wgIpsecEndpointPairEntry 5 }
wgIpsecEndpointPairInAccKbytes OBJECT-TYPE
@@ -204,8 +210,7 @@ WATCHGUARD-IPSEC-ENDPOINT-PAIR-MIB DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to decryption
error since the establish of this connection."
"Deprecated, currently unused."
::= { wgIpsecEndpointPairEntry 10 }
wgIpsecEndpointPairAuthErrors OBJECT-TYPE
@@ -231,8 +236,7 @@ WATCHGUARD-IPSEC-ENDPOINT-PAIR-MIB DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to policy
error since the establish of this connection."
"Deprecated, currently unused."
::= { wgIpsecEndpointPairEntry 13 }
wgIpsecEndpointPairPadErrors OBJECT-TYPE
@@ -240,8 +244,7 @@ WATCHGUARD-IPSEC-ENDPOINT-PAIR-MIB DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to pad value
error since the establish of this connection."
"Deprecated, currently unused."
::= { wgIpsecEndpointPairEntry 14 }
wgIpsecEndpointPairOtherReceiveErrors OBJECT-TYPE
@@ -249,11 +252,7 @@ WATCHGUARD-IPSEC-ENDPOINT-PAIR-MIB DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets discarded due to errors
other than decryption, authentication or replay errors. This
may include packets dropped due to a lack of receive
buffers, and may include packets dropped due to congestion
at the decryption element."
"Deprecated, currently unused."
::= { wgIpsecEndpointPairEntry 15 }
wgIpsecEndpointPairSendErrors OBJECT-TYPE
@@ -261,8 +260,7 @@ WATCHGUARD-IPSEC-ENDPOINT-PAIR-MIB DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets discarded due to any error.
This may include errors due to a lack of transmit buffers."
"Deprecated, currently unused."
::= { wgIpsecEndpointPairEntry 16 }
@@ -324,8 +322,7 @@ WATCHGUARD-IPSEC-ENDPOINT-PAIR-MIB DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets on this entity discarded due to encryption
error."
"Deprecated, currently unused."
::= { wgIpsecEndpointPairStatistics 7 }
wgIpsecEndpointPairTotalAuthErrors OBJECT-TYPE
@@ -351,8 +348,7 @@ WATCHGUARD-IPSEC-ENDPOINT-PAIR-MIB DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to policy
errors on this entity."
"Deprecated, currently unused."
::= { wgIpsecEndpointPairStatistics 10 }
wgIpsecEndpointPairTotalPadErrors OBJECT-TYPE
@@ -360,8 +356,7 @@ WATCHGUARD-IPSEC-ENDPOINT-PAIR-MIB DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets on this entity discarded due to pad value
error."
"Deprecated, currently unused."
::= { wgIpsecEndpointPairStatistics 11 }
wgIpsecEndpointPairTotalOtherReceiveErrors OBJECT-TYPE
@@ -369,11 +364,7 @@ WATCHGUARD-IPSEC-ENDPOINT-PAIR-MIB DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of packets on this entity discarded due to errors
other than decryption, authentication or replay errors. This
may include packets dropped due to a lack of receive
buffers, and may include packets dropped due to congestion
at the decryption element."
"Deprecated, currently unused."
::= { wgIpsecEndpointPairStatistics 12 }
wgIpsecEndpointPairTotalSendErrors OBJECT-TYPE
@@ -381,9 +372,7 @@ WATCHGUARD-IPSEC-ENDPOINT-PAIR-MIB DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of packets discarded due to any error on
this entity."
"Deprecated, currently unused."
::= { wgIpsecEndpointPairStatistics 13 }
wgIpsecEndpointPairPeerIPToTunnel OBJECT-IDENTITY
@@ -425,7 +414,7 @@ WATCHGUARD-IPSEC-ENDPOINT-PAIR-MIB DEFINITIONS ::= BEGIN
WGIpsecEndpointPairPeerIPToTunnelEntry ::= SEQUENCE {
wgIpsecEndpointPairPeerIPToTunnelPeerIP IpAddress,
wgIpsecEndpointPairPeerIPToTunnelTunnelID Integer32
wgIpsecEndpointPairPeerIPToTunnelTunnelID Unsigned32
}
wgIpsecEndpointPairPeerIPToTunnelPeerIP OBJECT-TYPE
@@ -437,7 +426,7 @@ WATCHGUARD-IPSEC-ENDPOINT-PAIR-MIB DEFINITIONS ::= BEGIN
::= {wgIpsecEndpointPairPeerIPToTunnelEntry 1}
wgIpsecEndpointPairPeerIPToTunnelTunnelID OBJECT-TYPE
SYNTAX Integer32
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION

View File

@@ -17,20 +17,19 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
IpsecDoiSecProtocolId
FROM IPSEC-ISAKMP-IKE-DOI-TC
watchguard
FROM WATCHGUARD-MIB;
FROM WATCHGUARD-SMI;
wgIpsecSaMonModule MODULE-IDENTITY
LAST-UPDATED "200701251200Z"
ORGANIZATION "WatchGuard Technologies, Inc."
CONTACT-INFO
" Ella Yu
WatchGuard Technologies, Inc.
1841 Zanker Road
San Jose, CA 95112
USA
" WatchGuard Technologies, Inc.
505 Fifth Avenue South
Suite 500
Seattle, WA 98104
United States
408-519-4888
ella.yu@watchguard.com "
+1.206.613.6600 "
DESCRIPTION
"The MIB module describes generic IPSec objects
@@ -124,7 +123,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
WGIpsecSaEspInEntry ::= SEQUENCE {
wgIpsecSaEspInAddress IpAddress,
wgIpsecSaEspInSpi Integer32,
wgIpsecSaEspInSpi Unsigned32,
wgIpsecSaEspInDestId OCTET STRING,
wgIpsecSaEspInDestIdType IpsecDoiIdentType,
@@ -177,7 +176,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
::= { wgIpsecSaEspInEntry 1 }
wgIpsecSaEspInSpi OBJECT-TYPE
SYNTAX Integer32
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
@@ -387,8 +386,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets discarded by the SA due to decryption
errors."
"Deprecated, currently unused."
::= { wgIpsecSaEspInEntry 21 }
wgIpsecSaEspInAuthErrors OBJECT-TYPE
@@ -414,9 +412,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets discarded by the SA due to policy
errors. This includes packets where the next protocol is
invalid."
"Deprecated, currently unused."
::= { wgIpsecSaEspInEntry 24 }
wgIpsecSaEspInPadErrors OBJECT-TYPE
@@ -424,12 +420,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets discarded by the SA due to pad value
errors.
Implementations that do not check this must not support this
object."
REFERENCE "RFC 2406 section 2.4"
"Deprecated, currently unused."
::= { wgIpsecSaEspInEntry 25 }
wgIpsecSaEspInOtherReceiveErrors OBJECT-TYPE
@@ -437,11 +428,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets discarded by the SA due to errors
other than decryption, authentication or replay errors. This
may include packets dropped due to a lack of receive
buffers, and may include packets dropped due to congestion
at the decryption element."
"Deprecated, currently unused."
::= { wgIpsecSaEspInEntry 26 }
-- the IPSec Inbound AH MIB-Group
@@ -733,9 +720,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets discarded by the SA due to policy
errors. This includes packets where the next protocol is
invalid."
"Deprecated, currently unused."
::= { wgIpsecSaAhInEntry 21 }
wgIpsecSaAhInOtherReceiveErrors OBJECT-TYPE
@@ -743,11 +728,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets discarded by the SA due to errors
other than decryption, authentication or replay errors. This
may include packets dropped due to a lack of receive
buffers, and may include packets dropped due to congestion
at the authentication element."
"Deprecated, currently unused."
::= { wgIpsecSaAhInEntry 22 }
@@ -812,15 +793,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The destination address of the SA.
For implementations that do not support IPv6, this address
should appear as one of the IPv4-mapped IPv6 addresses as
defined in Section 2.5.4 of [IPV6AA].
Specifically, the prefix '0000:0000:0000:0000:0000:FFFF:' is
used for IPv4 only nodes, while the prefix
'0000:0000:0000:0000:0000:0000:' is used for bi-lingual
nodes."
"Deprecated, currently unused."
::= { wgIpsecSaIpcompInEntry 1 }
wgIpsecSaIpcompInCpi OBJECT-TYPE
@@ -828,9 +801,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The CPI of the SA. Since the lower values of CPIs are
reserved to be the same as the algorithm, the syntax for
this object is the same as the transform."
"Deprecated, currently unused."
REFERENCE "RFC 2393 Section 3.3"
::= { wgIpsecSaIpcompInEntry 2 }
@@ -839,13 +810,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The destination identifier of the SA, or 0 if unknown or if
the SA uses transport mode, or 0 if this SA is used with
multiple SAs in protection suites.
This value, if non-zero, is taken directly from the optional
ID payloads that are exchange during SA creation
negotiation."
"Deprecated, currently unused."
::= { wgIpsecSaIpcompInEntry 3 }
wgIpsecSaIpcompInDestIdType OBJECT-TYPE
@@ -853,10 +818,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The type of identifier presented by
'wgIpsecSaIpcompInDestId', or 0 if unknown or if the SA uses
transport mode, or 0 if this SA is used with multiple SAs in
protection suites."
"Deprecated, currently unused."
::= { wgIpsecSaIpcompInEntry 4 }
wgIpsecSaIpcompInSourceId OBJECT-TYPE
@@ -864,13 +826,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The source identifier of the SA, or 0 if unknown or if the
SA uses transport mode encapsulation, or 0 if this SA is
used with multiple SAs in protection suites.
This value, if non-zero, is taken directly from the optional
ID payloads that are exchange during SA creation
negotiation."
"Deprecated, currently unused."
::= { wgIpsecSaIpcompInEntry 5 }
wgIpsecSaIpcompInSourceIdType OBJECT-TYPE
@@ -878,10 +834,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The type of identifier presented by
'wgIpsecSaIpcompInSourceId', or 0 if unknown or if the SA uses
transport mode encapsulation, or 0 if this SA is used with
multiple SAs in protection suites."
"Deprecated, currently unused."
::= { wgIpsecSaIpcompInEntry 6 }
wgIpsecSaIpcompInProtocol OBJECT-TYPE
@@ -889,9 +842,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The transport-layer protocol number that this SA carries,
or 0 if it carries any protocol."
REFERENCE "RFC2401 section 4.4.2"
"Deprecated, currently unused."
::= { wgIpsecSaIpcompInEntry 7 }
wgIpsecSaIpcompInDestPort OBJECT-TYPE
@@ -899,9 +850,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The destination port number of the protocol that this SA
carries, or 0 if it carries any port number."
REFERENCE "RFC2401 section 4.4.2"
"Deprecated, currently unused."
::= { wgIpsecSaIpcompInEntry 8 }
wgIpsecSaIpcompInSourcePort OBJECT-TYPE
@@ -909,9 +858,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The source port number of the protocol that this SA
carries, or 0 if it carries any port number."
REFERENCE "RFC2401 section 4.4.2"
"Deprecated, currently unused."
::= { wgIpsecSaIpcompInEntry 9 }
wgIpsecSaIpcompInCreator OBJECT-TYPE
@@ -919,11 +866,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The creator of this SA.
This MIB makes no assumptions about how the SAs are created.
They may be created statically, or by a key exchange
protocol such as IKE, or by some other method."
"Deprecated, currently unused."
::= { wgIpsecSaIpcompInEntry 10 }
wgIpsecSaIpcompInEncapsulation OBJECT-TYPE
@@ -931,7 +874,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The type of encapsulation used by this SA."
"Deprecated, currently unused."
::= { wgIpsecSaIpcompInEntry 11 }
wgIpsecSaIpcompInDecompAlg OBJECT-TYPE
@@ -939,8 +882,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"A unique value representing the decompression algorithm
applied to traffic."
"Deprecated, currently unused."
::= { wgIpsecSaIpcompInEntry 12 }
wgIpsecSaIpcompInSeconds OBJECT-TYPE
@@ -949,7 +891,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of seconds that the SA has existed."
"Deprecated, currently unused."
::= { wgIpsecSaIpcompInEntry 13 }
wgIpsecSaIpcompInUserOctets OBJECT-TYPE
@@ -958,8 +900,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The amount of user level traffic measured in bytes handled
by the SA."
"Deprecated, currently unused."
::= { wgIpsecSaIpcompInEntry 14 }
wgIpsecSaIpcompInPackets OBJECT-TYPE
@@ -967,7 +908,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets handled by the SA."
"Deprecated, currently unused."
::= { wgIpsecSaIpcompInEntry 15 }
wgIpsecSaIpcompInDecompErrors OBJECT-TYPE
@@ -975,8 +916,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets discarded by the SA due to
decompression errors."
"Deprecated, currently unused."
::= { wgIpsecSaIpcompInEntry 16 }
wgIpsecSaIpcompInOtherReceiveErrors OBJECT-TYPE
@@ -984,10 +924,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets discarded by the SA due to errors
other than decompression errors. This may include packets
dropped due to a lack of receive buffers, and packets
dropped due to congestion at the decompression element."
"Deprecated, currently unused."
::= { wgIpsecSaIpcompInEntry 17 }
@@ -1025,7 +962,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
WGIpsecSaEspOutEntry ::= SEQUENCE {
wgIpsecSaEspOutAddress IpAddress,
wgIpsecSaEspOutSpi Integer32,
wgIpsecSaEspOutSpi Unsigned32,
wgIpsecSaEspOutSourceId OCTET STRING,
wgIpsecSaEspOutSourceIdType IpsecDoiIdentType,
@@ -1072,7 +1009,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
::= { wgIpsecSaEspOutEntry 1 }
wgIpsecSaEspOutSpi OBJECT-TYPE
SYNTAX Integer32
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
@@ -1283,8 +1220,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets discarded by the SA due to any error.
This may include errors due to a lack of transmit buffers."
"Deprecated, currently unused."
::= { wgIpsecSaEspOutEntry 21 }
@@ -1557,8 +1493,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets discarded by the SA due to any error.
This may include errors due to a lack of transmit buffers."
"Deprecated, currently unused."
::= { wgIpsecSaAhOutEntry 19 }
@@ -1572,12 +1507,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The (conceptual) table containing information on IPSec
Outbound IPCOMP SAs.
There should be one row for every outbound IPCOMP (security)
association that exists in the entity. The maximum number of
rows is implementation dependent."
"Deprecated, currently unused."
::= { wgSaTables 6 }
wgIpsecSaIpcompOutEntry OBJECT-TYPE
@@ -1585,11 +1515,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (conceptual row) containing the information on a
particular IPSec Outbound IPCOMP SA.
A row in this table cannot be created or deleted by SNMP
operations on columns of the table."
"Deprecated, currently unused."
INDEX{ wgIpsecSaIpcompOutAddress, wgIpsecSaIpcompOutCpi }
::= { wgIpsecSaIpcompOutTable 1 }
@@ -1621,19 +1547,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The destination address of the SA.
If the IPCOMP SA is shared across multiple SAs in protection
suites, this value may be 0.
For implementations that do not support IPv6, this address
should appear as one of the IPv4-mapped IPv6 addresses as
defined in Section 2.5.4 of [IPV6AA].
Specifically, the prefix '0000:0000:0000:0000:0000:FFFF:' is
used for IPv4 only nodes, while the prefix
'0000:0000:0000:0000:0000:0000:' is used for bi-lingual
nodes."
"Deprecated, currently unused."
::= { wgIpsecSaIpcompOutEntry 1 }
wgIpsecSaIpcompOutCpi OBJECT-TYPE
@@ -1641,10 +1555,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The CPI of the SA. Since the lower values of CPIs are
reserved to be the same as the algorithm, the syntax for
this object is the same as the transform."
REFERENCE "RFC 2393 Section 3.3"
"Deprecated, currently unused."
::= { wgIpsecSaIpcompOutEntry 2 }
wgIpsecSaIpcompOutSourceId OBJECT-TYPE
@@ -1652,12 +1563,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The source identifier of the SA, or 0 if unknown or if the
SA uses transport mode encapsulation, or 0 if this SA is
used with multiple SAs in protection suites.
This value, if non-zero, is taken directly from the optional
ID payloads that are exchange during phase 2 negotiations."
"Deprecated, currently unused."
::= { wgIpsecSaIpcompOutEntry 3 }
wgIpsecSaIpcompOutSourceIdType OBJECT-TYPE
@@ -1665,10 +1571,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The type of identifier presented by
'wgIpsecSaIpcompOutSourceId', or 0 if unknown or if the SA
uses transport mode encapsulation, or 0 if this SA is used
with multiple SAs in protection suites."
"Deprecated, currently unused."
::= { wgIpsecSaIpcompOutEntry 4 }
wgIpsecSaIpcompOutDestId OBJECT-TYPE
@@ -1676,12 +1579,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The destination identifier of the SA, or 0 if unknown or if
the SA uses transport mode encapsulation, or 0 if this SA is
used with multiple SAs in protection suites.
This value, if non-zero, is taken directly from the optional
ID payloads that are exchange during phase 2 negotiations."
"Deprecated, currently unused."
::= { wgIpsecSaIpcompOutEntry 5 }
wgIpsecSaIpcompOutDestIdType OBJECT-TYPE
@@ -1689,10 +1587,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The type of identifier presented by
'wgIpsecSaIpcompOutDestId', or 0 if unknown or if the SA uses
transport mode encapsulation, or 0 if this SA is used with
multiple SAs in protection suites."
"Deprecated, currently unused."
::= { wgIpsecSaIpcompOutEntry 6 }
wgIpsecSaIpcompOutProtocol OBJECT-TYPE
@@ -1710,9 +1605,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The source port number of the protocol that this SA
carries, or 0 if it carries any port number."
REFERENCE "RFC2401 section 4.4.2"
"Deprecated, currently unused."
::= { wgIpsecSaIpcompOutEntry 8 }
wgIpsecSaIpcompOutDestPort OBJECT-TYPE
@@ -1720,9 +1613,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The destination port number of the protocol that this SA
carries, or 0 if it carries any port number."
REFERENCE "RFC2401 section 4.4.2"
"Deprecated, currently unused."
::= { wgIpsecSaIpcompOutEntry 9 }
wgIpsecSaIpcompOutCreator OBJECT-TYPE
@@ -1730,11 +1621,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The creator of this SA.
This MIB makes no assumptions about how the SAs are created.
They may be created statically, or by a key exchange
protocol such as IKE, or by some other method."
"Deprecated, currently unused."
::= { wgIpsecSaIpcompOutEntry 10 }
wgIpsecSaIpcompOutEncapsulation OBJECT-TYPE
@@ -1742,7 +1629,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The type of encapsulation used by this SA."
"Deprecated, currently unused."
::= { wgIpsecSaIpcompOutEntry 11 }
wgIpsecSaIpcompOutCompAlg OBJECT-TYPE
@@ -1750,8 +1637,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"A unique value representing the compression algorithm
applied to traffic."
"Deprecated, currently unused."
::= { wgIpsecSaIpcompOutEntry 12 }
wgIpsecSaIpcompOutSeconds OBJECT-TYPE
@@ -1760,7 +1646,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of seconds that the SA has existed."
"Deprecated, currently unused."
::= { wgIpsecSaIpcompOutEntry 13 }
wgIpsecSaIpcompOutUserOctets OBJECT-TYPE
@@ -1769,11 +1655,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The amount of user level traffic measured in bytes handled
by the SA.
This is not necessarily the same as the amount of traffic
applied against the traffic expiration limit."
"Deprecated, currently unused."
::= { wgIpsecSaIpcompOutEntry 14 }
wgIpsecSaIpcompOutPackets OBJECT-TYPE
@@ -1801,8 +1683,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of inbound ESP SAs created in the entity
since boot time."
"Deprecated, currently unused."
::= { wgSaStatistics 2 }
wgIpsecEspCurrentOutboundSAs OBJECT-TYPE
@@ -1818,8 +1699,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of outbound ESP SAs created in the entity
since boot time."
"Deprecated, currently unused."
::= { wgSaStatistics 4 }
wgIpsecAhCurrentInboundSAs OBJECT-TYPE
@@ -1835,8 +1715,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of inbound AH SAs created in the entity
since boot time."
"Deprecated, currently unused."
::= { wgSaStatistics 6 }
wgIpsecAhCurrentOutboundSAs OBJECT-TYPE
@@ -1852,8 +1731,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of outbound AH SAs created in the entity
since boot time."
"Deprecated, currently unused."
::= { wgSaStatistics 8 }
wgIpsecIpcompCurrentInboundSAs OBJECT-TYPE
@@ -1861,7 +1739,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The current number of inbound IPCOMP SAs in the entity."
"Deprecated, currently unused."
::= { wgSaStatistics 9 }
wgIpsecIpcompTotalInboundSAs OBJECT-TYPE
@@ -1869,8 +1747,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of inbound IPCOMP SAs created in the
entity since boot time."
"Deprecated, currently unused."
::= { wgSaStatistics 10 }
wgIpsecIpcompCurrentOutboundSAs OBJECT-TYPE
@@ -1878,7 +1755,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The current number of outbound IPCOMP SAs in the entity."
"Deprecated, currently unused."
::= { wgSaStatistics 11 }
wgIpsecIpcompTotalOutboundSAs OBJECT-TYPE
@@ -1886,8 +1763,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of outbound IPCOMP SAs created in the
entity since boot time."
"Deprecated, currently unused."
::= { wgSaStatistics 12 }
@@ -1900,8 +1776,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of packets received by the entity in SAs
since boot time with decryption errors."
"Deprecated, currently unused."
::= { wgSaErrors 1 }
wgIpsecAuthenticationErrors OBJECT-TYPE
@@ -1909,11 +1784,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of packets received by the entity in SAs
since boot time with authentication errors.
This includes all packets in which the hash value is
determined to be invalid, for both ESP and AH SAs."
"Deprecated, currently unused."
::= { wgSaErrors 2 }
wgIpsecReplayErrors OBJECT-TYPE
@@ -1921,8 +1792,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of packets received by the entity in SAs
since boot time with replay errors."
"Deprecated, currently unused."
::= { wgSaErrors 3 }
wgIpsecPolicyErrors OBJECT-TYPE
@@ -1930,10 +1800,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of packets received by the entity in SAs
since boot time and discarded due to policy errors. This
includes packets that had selectors that were invalid for
the SA that carried them."
"Deprecated, currently unused."
::= { wgSaErrors 4 }
wgIpsecOtherReceiveErrors OBJECT-TYPE
@@ -1941,9 +1808,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of packets received by the entity in SAs
since boot time and discarded due to errors not due to
decryption, authentication, replay or policy."
"Deprecated, currently unused."
::= { wgSaErrors 5 }
wgIpsecSendErrors OBJECT-TYPE
@@ -1951,8 +1816,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of packets to be sent by the entity in SAs
since boot time and discarded due to errors."
"Deprecated, currently unused."
::= { wgSaErrors 6 }
wgIpsecUnknownSpiErrors OBJECT-TYPE
@@ -1960,8 +1824,7 @@ WATCHGUARD-IPSEC-SA-MON-MIB-EXT DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of packets received by the entity since
boot time with SPIs or CPIs that were not valid."
"Deprecated, currently unused."
::= { wgSaErrors 7 }
END

View File

@@ -5,20 +5,20 @@ WATCHGUARD-IPSEC-TUNNEL-MIB DEFINITIONS ::= BEGIN
OBJECT-IDENTITY, enterprises,
IpAddress, TimeTicks FROM SNMPv2-SMI
DateAndTime FROM SNMPv2-TC
watchguard FROM WATCHGUARD-MIB;
watchguard FROM WATCHGUARD-SMI;
wgInfoModule MODULE-IDENTITY
LAST-UPDATED "200701251200Z"
ORGANIZATION "WatchGuard Technologies, Inc."
CONTACT-INFO
" Ella Yu
WatchGuard Technologies, Inc.
1841 Zanker Road
San Jose, CA 95112
USA
" WatchGuard Technologies, Inc.
505 Fifth Avenue South
Suite 500
Seattle, WA 98104
United States
408-519-4888
ella.yu@watchguard.com "
+1.206.613.6600 "
DESCRIPTION
"The MIB module describes various tunnel objects
@@ -80,8 +80,8 @@ WATCHGUARD-IPSEC-TUNNEL-MIB DEFINITIONS ::= BEGIN
wgIpsecTunnelPeerAddr IpAddress,
wgIpsecTunnelInSpi Integer32,
wgIpsecTunnelOutSpi Integer32,
wgIpsecTunnelInSpi Unsigned32,
wgIpsecTunnelOutSpi Unsigned32,
wgIpsecTunnelCreateTime DateAndTime,
wgIpsecTunnelDeviceID Unsigned32,
wgIpsecTunnelEspEncryptAlg INTEGER,
@@ -134,7 +134,7 @@ WATCHGUARD-IPSEC-TUNNEL-MIB DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The local IP address of the current tunnel."
"The local gateway IP address of the current tunnel."
::= { wgIpsecTunnelEntry 2 }
wgIpsecTunnelPeerAddr OBJECT-TYPE
@@ -142,11 +142,11 @@ WATCHGUARD-IPSEC-TUNNEL-MIB DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The remote IP address of the current tunnel."
"The remote gateway IP address of the current tunnel."
::= { wgIpsecTunnelEntry 3 }
wgIpsecTunnelInSpi OBJECT-TYPE
SYNTAX Integer32
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
@@ -155,7 +155,7 @@ WATCHGUARD-IPSEC-TUNNEL-MIB DEFINITIONS ::= BEGIN
::= { wgIpsecTunnelEntry 4 }
wgIpsecTunnelOutSpi OBJECT-TYPE
SYNTAX Integer32
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
@@ -183,7 +183,8 @@ WATCHGUARD-IPSEC-TUNNEL-MIB DEFINITIONS ::= BEGIN
SYNTAX INTEGER {
unknown(0),
des(2),
three-des(3)
three-des(3),
aes(4)
}
MAX-ACCESS read-only
STATUS current
@@ -313,7 +314,7 @@ WATCHGUARD-IPSEC-TUNNEL-MIB DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The ip protocol number that this SA selector carries, or
"The ip protocol number that this SA(Tunnel) selector carries, or
0 if it carries any protocol."
::= { wgIpsecTunnelEntry 18 }
@@ -326,7 +327,7 @@ WATCHGUARD-IPSEC-TUNNEL-MIB DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The type of remote IP address of the SA selector in
"The type of remote IP address of the SA(Tunnel) selector in
the entity."
::= { wgIpsecTunnelEntry 19 }
@@ -335,7 +336,7 @@ WATCHGUARD-IPSEC-TUNNEL-MIB DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The first remote IP address of the SA selector in the entity.
"The first remote IP address of the SA(Tunnel) selector in the entity.
It's IP address if remote IP of this selector only has one address.
It's IP address of subnet if the remote IP of this selector is IP subnet.
It's the start IP address if the remote IP of this selector
@@ -347,7 +348,7 @@ WATCHGUARD-IPSEC-TUNNEL-MIB DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The second remote IP address of the SA selector in the entity.
"The second remote IP address of the SA(Tunnel) selector in the entity.
It's 0 if remote IP of this selector only has one address.
It's netmask of subnet if the remote IP of this selector is IP subnet.
It's the end IP address if the remote IP of this selector
@@ -359,7 +360,7 @@ WATCHGUARD-IPSEC-TUNNEL-MIB DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The remote port used by this selector in the entity."
"The remote port used by the SA(Tunnel) selector in the entity."
::= { wgIpsecTunnelEntry 22 }
wgIpsecTunnelSelectorLocalIPType OBJECT-TYPE
@@ -371,7 +372,7 @@ WATCHGUARD-IPSEC-TUNNEL-MIB DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The type of local IP address of the SA selector in
"The type of local IP address of the SA(Tunnel) selector in
the entity."
::= { wgIpsecTunnelEntry 23 }
@@ -380,7 +381,7 @@ WATCHGUARD-IPSEC-TUNNEL-MIB DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The first local IP address of the SA selector in the entity.
"The first local IP address of the SA(Tunnel) selector in the entity.
It's IP address if local IP of this selector only has one address.
It's IP address of subnet if the local IP of this selector is IP subnet.
It's the start IP address if the local IP of this selector
@@ -392,7 +393,7 @@ WATCHGUARD-IPSEC-TUNNEL-MIB DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The second local IP address of the SA selector in the entity.
"The second local IP address of the SA(Tunnel) selector in the entity.
It's 0 if local IP of this selector only has one address.
It's netmask of subnet if the local IP of this selector is IP subnet.
It's the end IP address if the local IP of this selector
@@ -404,7 +405,7 @@ WATCHGUARD-IPSEC-TUNNEL-MIB DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The local port used by this selector in the entity."
"The local port used by the SA(Tunnel) selector in the entity."
::= { wgIpsecTunnelEntry 26 }
wgIpsecTunnelNumRekey OBJECT-TYPE
@@ -458,8 +459,7 @@ WATCHGUARD-IPSEC-TUNNEL-MIB DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to decryption
error since the establish of this connection."
"Deprecated, currently unused."
::= { wgIpsecTunnelEntry 32 }
wgIpsecTunnelInAuthErrors OBJECT-TYPE
@@ -485,11 +485,7 @@ WATCHGUARD-IPSEC-TUNNEL-MIB DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets discarded due to errors
other than decryption, authentication or replay errors. This
may include packets dropped due to a lack of receive
buffers, and may include packets dropped due to congestion
at the decryption element."
"Deprecated, currently unused."
::= { wgIpsecTunnelEntry 35 }
wgIpsecTunnelOutDecryptErrors OBJECT-TYPE
@@ -497,8 +493,7 @@ WATCHGUARD-IPSEC-TUNNEL-MIB DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total number of packets discarded due to decryption
error since the establish of this connection."
"Deprecated, currently unused."
::= { wgIpsecTunnelEntry 36 }
wgIpsecTunnelOutAuthErrors OBJECT-TYPE
@@ -524,11 +519,7 @@ WATCHGUARD-IPSEC-TUNNEL-MIB DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets discarded due to errors
other than decryption, authentication or replay errors. This
may include packets dropped due to a lack of receive
buffers, and may include packets dropped due to congestion
at the decryption element."
"Deprecated, currently unused."
::= { wgIpsecTunnelEntry 39 }
wgIpsecTunnelUdpEncap OBJECT-TYPE
@@ -539,7 +530,7 @@ WATCHGUARD-IPSEC-TUNNEL-MIB DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates whether if UDP encapsulated IPSec has been enabled."
"Deprecated, currently unused."
::= { wgIpsecTunnelEntry 40 }
wgIpsecTunnelPeerUdpPort OBJECT-TYPE
@@ -547,8 +538,7 @@ WATCHGUARD-IPSEC-TUNNEL-MIB DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The peer's UDP port of current tunnel when UDP encapsulated IPSec
is enabled."
"Deprecated, currently unused."
::= { wgIpsecTunnelEntry 41 }
wgIpsecTunnelOrigPeerAddr OBJECT-TYPE
@@ -556,8 +546,7 @@ WATCHGUARD-IPSEC-TUNNEL-MIB DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The original peer ip address of current tunnel when UDP encapsulated
IPSec is enabled"
"Deprecated, currently unused."
::= { wgIpsecTunnelEntry 42 }
END

View File

@@ -5,20 +5,20 @@ WATCHGUARD-POLICY-MIB DEFINITIONS ::= BEGIN
OBJECT-IDENTITY, enterprises,
IpAddress, TimeTicks FROM SNMPv2-SMI
DateAndTime FROM SNMPv2-TC
watchguard FROM WATCHGUARD-MIB;
watchguard FROM WATCHGUARD-SMI;
wgPolicyMIB MODULE-IDENTITY
LAST-UPDATED "200701251200Z"
ORGANIZATION "WatchGuard Technologies, Inc."
CONTACT-INFO
" Ella Yu
WatchGuard Technologies, Inc.
1841 Zanker Road
San Jose, CA 95112
USA
408-519-4888
ella.yu@watchguard.com "
" WatchGuard Technologies, Inc.
505 Fifth Avenue South
Suite 500
Seattle, WA 98104
United States
+1.206.613.6600 "
DESCRIPTION
"The MIB module describes various policy objects
@@ -145,7 +145,7 @@ WATCHGUARD-POLICY-MIB DEFINITIONS ::= BEGIN
wgPolicyDisc Counter64,
wgPolicyNumTunl Counter64,
wgPolicySingleCntrNum Counter64,
wgPolicyLogging INTEGER,
wgPolicyLogging Unsigned32,
wgPolicyCurrActiveConns Counter64
}
@@ -166,12 +166,12 @@ WATCHGUARD-POLICY-MIB DEFINITIONS ::= BEGIN
"The policy name of this policy"
::= {wgPolicyEntry 2}
wgPolicyBytes OBJECT-TYPE
wgPolicyL3PackageBytes OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total traffic in bytes since setting up this policy."
"Total traffic in bytes (counted from L3 head) since setting up this policy."
::= {wgPolicyEntry 3}
wgPolicyPackets OBJECT-TYPE
@@ -291,7 +291,7 @@ WATCHGUARD-POLICY-MIB DEFINITIONS ::= BEGIN
::= {wgPolicyEntry 16}
wgPolicyLogging OBJECT-TYPE
SYNTAX INTEGER {
SYNTAX Unsigned32 {
disabled(0),
enabled(1)
}
@@ -309,4 +309,12 @@ WATCHGUARD-POLICY-MIB DEFINITIONS ::= BEGIN
"Total number of currently active connections for this policy."
::= {wgPolicyEntry 18}
wgPolicyL2PackageBytes OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total traffic in bytes(counted from L2 head) since setting up this policy."
::= {wgPolicyEntry 19}
END

View File

@@ -9,15 +9,15 @@ wgProducts MODULE-IDENTITY
LAST-UPDATED "200811100000Z"
ORGANIZATION "WatchGuard Technologies, Inc."
CONTACT-INFO
" Ella Yu
WatchGuard Technologies, Inc.
15901 Red Hill Avenue, Suite 202
Tustin, CA 92780
USA
714-258-4598
ella.yu@watchguard.com
"
" WatchGuard Technologies, Inc.
505 Fifth Avenue South
Suite 500
Seattle, WA 98104
United States
+1.206.613.6600 "
DESCRIPTION
"This MIB module definesthe object identifiers
for WatchGuard Technologies Products."
@@ -56,19 +56,53 @@ fbX55e-W OBJECT IDENTIFIER ::= { fbXSeries 22 }
-- xtm series
xtm1050 OBJECT IDENTIFIER ::= { xtmSeries 1 }
xtm1050-F OBJECT IDENTIFIER ::= { XTMSeries 2 }
xtm830-F OBJECT IDENTIFIER ::= { XTMSeries 3 }
xtm830 OBJECT IDENTIFIER ::= { XTMSeries 4 }
xtm820 OBJECT IDENTIFIER ::= { XTMSeries 5 }
xtm810 OBJECT IDENTIFIER ::= { XTMSeries 6 }
xtm530 OBJECT IDENTIFIER ::= { XTMSeries 7 }
xtm520 OBJECT IDENTIFIER ::= { XTMSeries 8 }
xtm510 OBJECT IDENTIFIER ::= { XTMSeries 9 }
xtm23 OBJECT IDENTIFIER ::= { XTMSeries 10 }
xtm22 OBJECT IDENTIFIER ::= { XTMSeries 11 }
xtm21 OBJECT IDENTIFIER ::= { XTMSeries 12 }
xtm23-W OBJECT IDENTIFIER ::= { XTMSeries 13 }
xtm22-W OBJECT IDENTIFIER ::= { XTMSeries 14 }
xtm21-W OBJECT IDENTIFIER ::= { XTMSeries 15 }
xtm1050-F OBJECT IDENTIFIER ::= { xtmSeries 2 }
xtm830-F OBJECT IDENTIFIER ::= { xtmSeries 3 }
xtm830 OBJECT IDENTIFIER ::= { xtmSeries 4 }
xtm820 OBJECT IDENTIFIER ::= { xtmSeries 5 }
xtm810 OBJECT IDENTIFIER ::= { xtmSeries 6 }
xtm530 OBJECT IDENTIFIER ::= { xtmSeries 7 }
xtm520 OBJECT IDENTIFIER ::= { xtmSeries 8 }
xtm510 OBJECT IDENTIFIER ::= { xtmSeries 9 }
xtm505 OBJECT IDENTIFIER ::= { xtmSeries 10 }
xtm23 OBJECT IDENTIFIER ::= { xtmSeries 11 }
xtm22 OBJECT IDENTIFIER ::= { xtmSeries 12 }
xtm21 OBJECT IDENTIFIER ::= { xtmSeries 13 }
xtm23-W OBJECT IDENTIFIER ::= { xtmSeries 14 }
xtm22-W OBJECT IDENTIFIER ::= { xtmSeries 15 }
xtm21-W OBJECT IDENTIFIER ::= { xtmSeries 16 }
xtm2050 OBJECT IDENTIFIER ::= { xtmSeries 17 }
xtm25 OBJECT IDENTIFIER ::= { xtmSeries 18 }
xtm25-W OBJECT IDENTIFIER ::= { xtmSeries 19 }
xtm26 OBJECT IDENTIFIER ::= { xtmSeries 20 }
xtm26-W OBJECT IDENTIFIER ::= { xtmSeries 21 }
xtm33 OBJECT IDENTIFIER ::= { xtmSeries 22 }
xtm33-W OBJECT IDENTIFIER ::= { xtmSeries 23 }
xtm330 OBJECT IDENTIFIER ::= { xtmSeries 24 }
xtm545 OBJECT IDENTIFIER ::= { xtmSeries 25 }
xtm535 OBJECT IDENTIFIER ::= { xtmSeries 26 }
xtm525 OBJECT IDENTIFIER ::= { xtmSeries 27 }
xtm515 OBJECT IDENTIFIER ::= { xtmSeries 28 }
xtm2050A OBJECT IDENTIFIER ::= { xtmSeries 29 }
xtm850 OBJECT IDENTIFIER ::= { xtmSeries 30 }
xtm860 OBJECT IDENTIFIER ::= { xtmSeries 31 }
xtm870 OBJECT IDENTIFIER ::= { xtmSeries 32 }
xtm870-F OBJECT IDENTIFIER ::= { xtmSeries 33 }
xtm1520 OBJECT IDENTIFIER ::= { xtmSeries 34 }
xtm1525 OBJECT IDENTIFIER ::= { xtmSeries 35 }
xtm2520 OBJECT IDENTIFIER ::= { xtmSeries 36 }
xtmv-SM OBJECT IDENTIFIER ::= { xtmSeries 37 }
xtmv-MED OBJECT IDENTIFIER ::= { xtmSeries 38 }
xtmv-LG OBJECT IDENTIFIER ::= { xtmSeries 39 }
xtmv-DC OBJECT IDENTIFIER ::= { xtmSeries 40 }
xtmv-EXP OBJECT IDENTIFIER ::= { xtmSeries 41 }
xtmv OBJECT IDENTIFIER ::= { xtmSeries 42 }
xtm1520-RP OBJECT IDENTIFIER ::= { xtmSeries 43 }
xtm1525-RP OBJECT IDENTIFIER ::= { xtmSeries 44 }
T10 OBJECT IDENTIFIER ::= { xtmSeries 45 }
M440 OBJECT IDENTIFIER ::= { xtmSeries 46 }
T10-D OBJECT IDENTIFIER ::= { xtmSeries 47 }
T10-W OBJECT IDENTIFIER ::= { xtmSeries 48 }
M400 OBJECT IDENTIFIER ::= { xtmSeries 49 }
M500 OBJECT IDENTIFIER ::= { xtmSeries 50 }
END

View File

@@ -9,14 +9,15 @@ watchguard MODULE-IDENTITY
LAST-UPDATED "200811100000Z"
ORGANIZATION "WatchGuard Technologies, Inc."
CONTACT-INFO
" Ella Yu
WatchGuard Technologies, Inc.
15901 Red Hill Avenue, Suite 202
Tustin, CA 92780
USA
714-258-4598
ella.yu@watchguard.com "
" WatchGuard Technologies, Inc.
505 Fifth Avenue South
Suite 500
Seattle, WA 98104
United States
+1.206.613.6600 "
DESCRIPTION
"The Structure of Management Information for
the WatchGuard enterprise."

View File

@@ -1,164 +1,167 @@
WATCHGUARD-SYSTEM-CONFIG-MIB DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY, OBJECT-TYPE, Counter32,
Integer32, Unsigned32, IpAddress, Gauge32,
enterprises, NOTIFICATION-TYPE FROM SNMPv2-SMI
watchguard FROM WATCHGUARD-MIB;
IMPORTS
MODULE-IDENTITY, OBJECT-TYPE, Counter32,
Integer32, Unsigned32, IpAddress, Gauge32,
enterprises, NOTIFICATION-TYPE FROM SNMPv2-SMI
watchguard FROM WATCHGUARD-SMI;
wgSystemConfigMIB MODULE-IDENTITY
LAST-UPDATED "200701251200Z"
ORGANIZATION "WatchGuard Technologies, Inc."
CONTACT-INFO
" Ella Yu
WatchGuard Technologies, Inc.
1841 Zanker Road
San Jose, CA 95112
USA
wgSystemConfigMIB MODULE-IDENTITY
LAST-UPDATED "200811100000Z"
ORGANIZATION "WatchGuard Technologies, Inc."
CONTACT-INFO
" WatchGuard Technologies, Inc.
505 Fifth Avenue South
Suite 500
Seattle, WA 98104
United States
+1.206.613.6600 "
DESCRIPTION
"This MIB module defines WatchGuard Firebox system
configuration."
REVISION "200701251200Z"
DESCRIPTION
"Initial revision."
REVISION "200811100000Z"
DESCRIPTION
"Updated CONTACT-INFO."
::= { watchguard 2 }
408-519-4888
ella.yu@watchguard.com "
-- significant branches
wgSysTraps OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object for system wide traps
in this entity."
::= { wgSystemConfigMIB 3 }
DESCRIPTION
"The MIB module to describe WatchGuard Firebox system
configuration."
REVISION "200701251200Z"
DESCRIPTION
"Initial revision."
::= { watchguard 2 }
wgSysTrapObjects OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object for objects which are used
as part of traps."
::= { wgSystemConfigMIB 4 }
-- significant branches
wgSysTraps OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object for system wide traps
in this entity."
::= { wgSystemConfigMIB 3 }
wgSysTrapControl OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all objects
which are trap control for the entity."
::= { wgSystemConfigMIB 5 }
wgSysTrapObjects OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object for objects which are used
as part of traps."
::= { wgSystemConfigMIB 4 }
--
-- wgSysTraps
--
-- object used in trap reporting
wgSysTrapControl OBJECT-IDENTITY
STATUS current
DESCRIPTION
"This is the base object identifier for all objects
which are trap control for the entity."
::= { wgSystemConfigMIB 5 }
wgAlarmId OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The id of the alarm that generates a trap."
::= { wgSysTrapObjects 1 }
--
-- wgSysTraps
--
-- object used in trap reporting
wgAlarmLabel OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(0..64))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The name of the alarm that generates a trap."
::= { wgSysTrapObjects 2 }
wgAlarmId OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The id of the alarm that generates a trap."
::= { wgSysTrapObjects 1 }
wgAlarmTime OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The date and time of the alarm that generates a trap."
::= { wgSysTrapObjects 3 }
wgAlarmLabel OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(0..64))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The name of the alarm that generates a trap."
::= { wgSysTrapObjects 2 }
wgAlarmLevel OBJECT-TYPE
SYNTAX INTEGER {
normal(4),
warning(3),
error(2),
critical(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The level of an alarm generated."
::= { wgSysTrapObjects 4 }
wgAlarmTime OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The date and time of the alarm that generates a trap."
::= { wgSysTrapObjects 3 }
wgAlarmHostname OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(0..64))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The host name of the system where alarm occurred"
::= { wgSysTrapObjects 5 }
wgAlarmLevel OBJECT-TYPE
SYNTAX INTEGER {
normal(4),
warning(3),
error(2),
critical(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The level of an alarm generated."
::= { wgSysTrapObjects 4 }
wgAlarmHostname OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(0..64))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The host name of the system where alarm occurred"
::= { wgSysTrapObjects 5 }
wgAlarmMsg OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The message describing the nature of this alarm."
::= { wgSysTrapObjects 6 }
wgAlarmMsg OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The message describing the nature of this alarm."
::= { wgSysTrapObjects 6 }
--
-- trap control
--
wgAlarmTrapEnable OBJECT-TYPE
SYNTAX INTEGER {
false(0),
true(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates whether wgAlarmTrap trap should be generated."
DEFVAL { true }
::= { wgSysTrapControl 1 }
--
-- trap control
--
wgAlarmTrapEnable OBJECT-TYPE
SYNTAX INTEGER {
false(0),
true(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates whether wgAlarmTrap trap should be generated."
DEFVAL { true }
::= { wgSysTrapControl 1 }
--
-- traps themselves
--
--
-- traps themselves
--
wgSysTrapsPrefix OBJECT-IDENTITY
wgSysTrapsPrefix OBJECT-IDENTITY
STATUS current
DESCRIPTION ""
::= { wgSysTraps 0 }
wgAlarmTrap NOTIFICATION-TYPE
OBJECTS {
wgAlarmId,
wgAlarmLabel,
wgAlarmTime,
wgAlarmLevel,
wgAlarmHostname,
wgAlarmMsg
}
STATUS current
DESCRIPTION
"An alarm was raised by Monitoring Agent of this
WatchGuard entity."
::= { wgSysTrapsPrefix 1 }
wgAlarmTrap NOTIFICATION-TYPE
OBJECTS {
wgAlarmId,
wgAlarmLabel,
wgAlarmTime,
wgAlarmLevel,
wgAlarmHostname,
wgAlarmMsg
}
STATUS current
DESCRIPTION
"An alarm was raised by Monitoring Agent of this
WatchGuard entity."
::= { wgSysTrapsPrefix 1 }
wgSnmpStart NOTIFICATION-TYPE
STATUS current
DESCRIPTION
"This trap is sent when the snmp starts."
::= { wgSysTrapsPrefix 2 }
wgSnmpShutdown NOTIFICATION-TYPE
STATUS current
DESCRIPTION
"This trap is sent when the snmp terminates."
::= { wgSysTrapsPrefix 2 }
wgSnmpShutdown NOTIFICATION-TYPE
STATUS current
DESCRIPTION
"This trap is sent when the snmp terminates."
::= { wgSysTrapsPrefix 3 }
wgSnmpStart NOTIFICATION-TYPE
STATUS current
DESCRIPTION
"This trap is sent when the snmp starts."
::= { wgSysTrapsPrefix 3 }
END

View File

@@ -4,20 +4,20 @@ WATCHGUARD-SYSTEM-STATISTICS-MIB DEFINITIONS ::= BEGIN
MODULE-IDENTITY, OBJECT-TYPE, Counter64,
OBJECT-IDENTITY, enterprises,
IpAddress, TimeTicks FROM SNMPv2-SMI
watchguard FROM WATCHGUARD-MIB;
watchguard FROM WATCHGUARD-SMI;
wgInfoModule MODULE-IDENTITY
LAST-UPDATED "200701251200Z"
ORGANIZATION "WatchGuard Technologies, Inc."
CONTACT-INFO
" Ella Yu
WatchGuard Technologies, Inc.
1841 Zanker Road
San Jose, CA 95112
USA
" WatchGuard Technologies, Inc.
408-519-4888
ella.yu@watchguard.com "
505 Fifth Avenue South
Suite 500
Seattle, WA 98104
United States
+1.206.613.6600 "
DESCRIPTION
@@ -38,14 +38,20 @@ WATCHGUARD-SYSTEM-STATISTICS-MIB DEFINITIONS ::= BEGIN
statistical counters."
::= { wgInfoModule 3 }
wgSoftwareVersion OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(0..64))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Software version of sysA and sysB"
::= { wgSystemStatisticsMIB 1 }
wgSystemCpuUtil OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"CPU utilization of the system in last 5 seconds. The value
is measured in 0.01%. For example, if the value is 234,
then CPU utilization is 2.34%."
"Deprecated, currently unused."
::= { wgSystemStatisticsMIB 4 }
wgSystemTotalSendBytes OBJECT-TYPE
@@ -89,7 +95,7 @@ WATCHGUARD-SYSTEM-STATISTICS-MIB DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of the connection requests since system is up."
"Deprecated, currently unused."
::= { wgSystemStatisticsMIB 30 }
wgSystemStreamReqDrop OBJECT-TYPE
@@ -97,7 +103,7 @@ WATCHGUARD-SYSTEM-STATISTICS-MIB DEFINITIONS ::= BEGIN
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of the connection requests being dropped since system is up."
"Deprecated, currently unused."
::= { wgSystemStatisticsMIB 34 }
wgSystemCpuUtil1 OBJECT-TYPE