mirror of
https://github.com/librenms/librenms.git
synced 2024-10-07 16:52:45 +00:00
378261360c
git-svn-id: http://www.observium.org/svn/observer/trunk@2782 61d68cd4-352d-0410-923a-c4978735b2b8
564 lines
19 KiB
Plaintext
564 lines
19 KiB
Plaintext
WATCHGUARD-IPSEC-TUNNEL-MIB DEFINITIONS ::= BEGIN
|
|
|
|
IMPORTS
|
|
MODULE-IDENTITY, OBJECT-TYPE, Unsigned32, Counter64,
|
|
OBJECT-IDENTITY, enterprises,
|
|
IpAddress, TimeTicks FROM SNMPv2-SMI
|
|
DateAndTime FROM SNMPv2-TC
|
|
watchguard FROM WATCHGUARD-MIB;
|
|
|
|
wgInfoModule MODULE-IDENTITY
|
|
LAST-UPDATED "200701251200Z"
|
|
ORGANIZATION "WatchGuard Technologies, Inc."
|
|
CONTACT-INFO
|
|
" Ella Yu
|
|
WatchGuard Technologies, Inc.
|
|
1841 Zanker Road
|
|
San Jose, CA 95112
|
|
USA
|
|
|
|
408-519-4888
|
|
ella.yu@watchguard.com "
|
|
|
|
DESCRIPTION
|
|
"The MIB module describes various tunnel objects
|
|
of WatchGuard system."
|
|
|
|
|
|
REVISION "200701251200Z"
|
|
DESCRIPTION
|
|
"Initial revision."
|
|
::= { watchguard 6 }
|
|
|
|
wgIpsecTunnelMIB OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This is the base object identifier for all tunnel
|
|
branches."
|
|
::= { wgInfoModule 5 }
|
|
|
|
wgIpsecTunnel OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This is the base object identifier for all
|
|
tunnel information."
|
|
::= { wgIpsecTunnelMIB 1 }
|
|
|
|
wgIpsecTunnelNum OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of entries in the wgIpsecTunnelTable. "
|
|
::= { wgIpsecTunnel 1 }
|
|
|
|
wgIpsecTunnelTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF WGIpsecTunnelEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This is the connection table describing all current
|
|
tunnels exist on this entity."
|
|
::= { wgIpsecTunnel 2 }
|
|
|
|
|
|
wgIpsecTunnelEntry OBJECT-TYPE
|
|
SYNTAX WGIpsecTunnelEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"An entry (conceptual row) containing the information on a
|
|
tunnel between two security gateways."
|
|
INDEX{ wgIpsecTunnelID }
|
|
::= { wgIpsecTunnelTable 1 }
|
|
|
|
WGIpsecTunnelEntry ::= SEQUENCE {
|
|
|
|
wgIpsecTunnelID Integer32,
|
|
|
|
wgIpsecTunnelLocalAddr IpAddress,
|
|
wgIpsecTunnelPeerAddr IpAddress,
|
|
|
|
|
|
wgIpsecTunnelInSpi Integer32,
|
|
wgIpsecTunnelOutSpi Integer32,
|
|
wgIpsecTunnelCreateTime DateAndTime,
|
|
wgIpsecTunnelDeviceID Unsigned32,
|
|
wgIpsecTunnelEspEncryptAlg INTEGER,
|
|
wgIpsecTunnelEspAuthAlg INTEGER,
|
|
wgIpsecTunnelAhAuthAlg INTEGER,
|
|
wgIpsecTunnelMode INTEGER,
|
|
wgIpsecTunnelKeyMode INTEGER,
|
|
wgIpsecTunnelLifeTime TimeTicks,
|
|
wgIpsecTunnelLifeLength Counter32,
|
|
wgIpsecTunnelInSaBytes Counter32,
|
|
wgIpsecTunnelOutSaBytes Counter32,
|
|
wgIpsecTunnelAccSecs Counter32,
|
|
wgIpsecTunnelSelectorProtocol INTEGER,
|
|
wgIpsecTunnelSelectorRemoteIPType INTEGER,
|
|
wgIpsecTunnelSelectorRemoteIPOne IpAddress,
|
|
wgIpsecTunnelSelectorRemoteIPTwo IpAddress,
|
|
wgIpsecTunnelSelectorRemotePort INTEGER,
|
|
wgIpsecTunnelSelectorLocalIPType INTEGER,
|
|
wgIpsecTunnelSelectorLocalIPOne IpAddress,
|
|
wgIpsecTunnelSelectorLocalIPTwo IpAddress,
|
|
wgIpsecTunnelSelectorLocalPort INTEGER,
|
|
wgIpsecTunnelNumRekey Counter32,
|
|
wgIpsecTunnelInKbytes Counter32,
|
|
wgIpsecTunnelOutKbytes Counter32,
|
|
wgIpsecTunnelInPackets Counter32,
|
|
wgIpsecTunnelOutPackets Counter32,
|
|
wgIpsecTunnelInDecryptErrors Counter32,
|
|
wgIpsecTunnelInAuthErrors Counter32,
|
|
wgIpsecTunnelInReplayErrors Counter32,
|
|
wgIpsecTunnelInOtherErrors Counter32,
|
|
wgIpsecTunnelOutDecryptErrors Counter32,
|
|
wgIpsecTunnelOutAuthErrors Counter32,
|
|
wgIpsecTunnelOutReplayErrors Counter32,
|
|
wgIpsecTunnelOutOtherErrors Counter32,
|
|
wgIpsecTunnelUdpEncap INTEGER,
|
|
wgIpsecTunnelPeerUdpPort INTEGER,
|
|
wgIpsecTunnelOrigPeerAddr IpAddress
|
|
}
|
|
|
|
wgIpsecTunnelID OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The running index of this tunnel."
|
|
::= { wgIpsecTunnelEntry 1 }
|
|
|
|
wgIpsecTunnelLocalAddr OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The local IP address of the current tunnel."
|
|
::= { wgIpsecTunnelEntry 2 }
|
|
|
|
wgIpsecTunnelPeerAddr OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The remote IP address of the current tunnel."
|
|
::= { wgIpsecTunnelEntry 3 }
|
|
|
|
wgIpsecTunnelInSpi OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The security parameters index of inbound SA's within this
|
|
tunnel."
|
|
::= { wgIpsecTunnelEntry 4 }
|
|
|
|
wgIpsecTunnelOutSpi OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The security parameters index of outbound SA's within this
|
|
tunnel."
|
|
::= { wgIpsecTunnelEntry 5 }
|
|
|
|
wgIpsecTunnelCreateTime OBJECT-TYPE
|
|
SYNTAX DateAndTime
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The date and time when the tunnel is created."
|
|
::= { wgIpsecTunnelEntry 6 }
|
|
|
|
wgIpsecTunnelDeviceID OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The identifier of target device where the SA resides."
|
|
::= { wgIpsecTunnelEntry 7 }
|
|
|
|
wgIpsecTunnelEspEncryptAlg OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
unknown(0),
|
|
des(2),
|
|
three-des(3)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The encryption algorithm used in the tunnel. It's 0
|
|
if ESP is not used."
|
|
::= { wgIpsecTunnelEntry 8 }
|
|
|
|
wgIpsecTunnelEspAuthAlg OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
unknown(0),
|
|
md5(2),
|
|
sha(3)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The authentication algorithm used in the tunnel. It's
|
|
0 if ESP is not used."
|
|
::= { wgIpsecTunnelEntry 9 }
|
|
|
|
wgIpsecTunnelAhAuthAlg OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
unknown(0),
|
|
md5(2),
|
|
sha(3)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The AH authentication algorithm used in the tunnel.
|
|
It's 0 if AH is not used."
|
|
::= { wgIpsecTunnelEntry 10 }
|
|
|
|
wgIpsecTunnelMode OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
unknown(0),
|
|
tunnel(1),
|
|
transport(2)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The tunnel/transport mode of the tunnel."
|
|
::= { wgIpsecTunnelEntry 11 }
|
|
|
|
wgIpsecTunnelKeyMode OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
unknown(0),
|
|
manual(1),
|
|
auto-ike(2),
|
|
other(3)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The key mode of the tunnel."
|
|
::= { wgIpsecTunnelEntry 12 }
|
|
|
|
wgIpsecTunnelLifeTime OBJECT-TYPE
|
|
SYNTAX TimeTicks
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The life time (in hundredths of a second) of the tunnel."
|
|
::= { wgIpsecTunnelEntry 13 }
|
|
|
|
wgIpsecTunnelLifeLength OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The maximum traffic in bytes that the tunnel is allowed to support."
|
|
::= { wgIpsecTunnelEntry 14 }
|
|
|
|
wgIpsecTunnelInSaBytes OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Current active inbound SA bytes of the tunnel."
|
|
::= { wgIpsecTunnelEntry 15 }
|
|
|
|
wgIpsecTunnelOutSaBytes OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Current active outbound SA bytes of the tunnel."
|
|
::= { wgIpsecTunnelEntry 16 }
|
|
|
|
wgIpsecTunnelAccSecs OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of seconds that the tunnel has existed."
|
|
::= { wgIpsecTunnelEntry 17 }
|
|
|
|
wgIpsecTunnelSelectorProtocol OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
any(0),
|
|
icmp(1),
|
|
igmp(2),
|
|
ipip(4),
|
|
tcp(6),
|
|
egp(8),
|
|
pup(12),
|
|
udp(17),
|
|
idp(22),
|
|
tp(29),
|
|
ipv6(41),
|
|
ipv6-routing(43),
|
|
ipv6-fragmentation(44),
|
|
rsvp(46),
|
|
gre(47),
|
|
esp(50),
|
|
ah(51),
|
|
icmpv6(58),
|
|
none(59),
|
|
dstopts(60),
|
|
mtp(92),
|
|
encap(98),
|
|
pim(103),
|
|
raw(255)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The ip protocol number that this SA selector carries, or
|
|
0 if it carries any protocol."
|
|
::= { wgIpsecTunnelEntry 18 }
|
|
|
|
wgIpsecTunnelSelectorRemoteIPType OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
ip-addr-single(1),
|
|
ip-addr-subnet(2),
|
|
ip-addr-range(3)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of remote IP address of the SA selector in
|
|
the entity."
|
|
::= { wgIpsecTunnelEntry 19 }
|
|
|
|
wgIpsecTunnelSelectorRemoteIPOne OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The first remote IP address of the SA selector in the entity.
|
|
It's IP address if remote IP of this selector only has one address.
|
|
It's IP address of subnet if the remote IP of this selector is IP subnet.
|
|
It's the start IP address if the remote IP of this selector
|
|
has a range of addresses."
|
|
::= { wgIpsecTunnelEntry 20 }
|
|
|
|
wgIpsecTunnelSelectorRemoteIPTwo OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The second remote IP address of the SA selector in the entity.
|
|
It's 0 if remote IP of this selector only has one address.
|
|
It's netmask of subnet if the remote IP of this selector is IP subnet.
|
|
It's the end IP address if the remote IP of this selector
|
|
has a range of addresses."
|
|
::= { wgIpsecTunnelEntry 21 }
|
|
|
|
wgIpsecTunnelSelectorRemotePort OBJECT-TYPE
|
|
SYNTAX INTEGER (0..65535)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The remote port used by this selector in the entity."
|
|
::= { wgIpsecTunnelEntry 22 }
|
|
|
|
wgIpsecTunnelSelectorLocalIPType OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
ip-addr-single(1),
|
|
ip-addr-subnet(2),
|
|
ip-addr-range(3)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of local IP address of the SA selector in
|
|
the entity."
|
|
::= { wgIpsecTunnelEntry 23 }
|
|
|
|
wgIpsecTunnelSelectorLocalIPOne OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The first local IP address of the SA selector in the entity.
|
|
It's IP address if local IP of this selector only has one address.
|
|
It's IP address of subnet if the local IP of this selector is IP subnet.
|
|
It's the start IP address if the local IP of this selector
|
|
has a range of IP addresses."
|
|
::= { wgIpsecTunnelEntry 24 }
|
|
|
|
wgIpsecTunnelSelectorLocalIPTwo OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The second local IP address of the SA selector in the entity.
|
|
It's 0 if local IP of this selector only has one address.
|
|
It's netmask of subnet if the local IP of this selector is IP subnet.
|
|
It's the end IP address if the local IP of this selector
|
|
has a range of IP addresses."
|
|
::= { wgIpsecTunnelEntry 25 }
|
|
|
|
wgIpsecTunnelSelectorLocalPort OBJECT-TYPE
|
|
SYNTAX INTEGER (0..65535)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The local port used by this selector in the entity."
|
|
::= { wgIpsecTunnelEntry 26 }
|
|
|
|
wgIpsecTunnelNumRekey OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of rekeys of the tunnel."
|
|
::= { wgIpsecTunnelEntry 27 }
|
|
|
|
wgIpsecTunnelInKbytes OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
UNITS "Kbytes"
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Total inbound traffic in Kbytes since the establish of
|
|
this tunnel."
|
|
::= { wgIpsecTunnelEntry 28 }
|
|
|
|
wgIpsecTunnelOutKbytes OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
UNITS "Kbytes"
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Total outound traffic in Kbytes since the establish of
|
|
this connection."
|
|
::= { wgIpsecTunnelEntry 29 }
|
|
|
|
wgIpsecTunnelInPackets OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Total number of inbound packets since the establish of
|
|
this connection."
|
|
::= { wgIpsecTunnelEntry 30 }
|
|
|
|
wgIpsecTunnelOutPackets OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Total number of outound packets since the establish of
|
|
this connection."
|
|
::= { wgIpsecTunnelEntry 31 }
|
|
|
|
wgIpsecTunnelInDecryptErrors OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Total number of packets discarded due to decryption
|
|
error since the establish of this connection."
|
|
::= { wgIpsecTunnelEntry 32 }
|
|
|
|
wgIpsecTunnelInAuthErrors OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Total number of packets discarded due to authentication
|
|
error since the establish of this connection."
|
|
::= { wgIpsecTunnelEntry 33 }
|
|
|
|
wgIpsecTunnelInReplayErrors OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Total number of packets discarded due to replay
|
|
error since the establish of this connection."
|
|
::= { wgIpsecTunnelEntry 34}
|
|
|
|
wgIpsecTunnelInOtherErrors OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of packets discarded due to errors
|
|
other than decryption, authentication or replay errors. This
|
|
may include packets dropped due to a lack of receive
|
|
buffers, and may include packets dropped due to congestion
|
|
at the decryption element."
|
|
::= { wgIpsecTunnelEntry 35 }
|
|
|
|
wgIpsecTunnelOutDecryptErrors OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Total number of packets discarded due to decryption
|
|
error since the establish of this connection."
|
|
::= { wgIpsecTunnelEntry 36 }
|
|
|
|
wgIpsecTunnelOutAuthErrors OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Total number of packets discarded due to authentication
|
|
error since the establish of this connection."
|
|
::= { wgIpsecTunnelEntry 37 }
|
|
|
|
wgIpsecTunnelOutReplayErrors OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Total number of packets discarded due to replay
|
|
error since the establish of this connection."
|
|
::= { wgIpsecTunnelEntry 38 }
|
|
|
|
wgIpsecTunnelOutOtherErrors OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of packets discarded due to errors
|
|
other than decryption, authentication or replay errors. This
|
|
may include packets dropped due to a lack of receive
|
|
buffers, and may include packets dropped due to congestion
|
|
at the decryption element."
|
|
::= { wgIpsecTunnelEntry 39 }
|
|
|
|
wgIpsecTunnelUdpEncap OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
disabled(0),
|
|
enabled(1)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Indicates whether if UDP encapsulated IPSec has been enabled."
|
|
::= { wgIpsecTunnelEntry 40 }
|
|
|
|
wgIpsecTunnelPeerUdpPort OBJECT-TYPE
|
|
SYNTAX INTEGER (0..65535)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The peer's UDP port of current tunnel when UDP encapsulated IPSec
|
|
is enabled."
|
|
::= { wgIpsecTunnelEntry 41 }
|
|
|
|
wgIpsecTunnelOrigPeerAddr OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The original peer ip address of current tunnel when UDP encapsulated
|
|
IPSec is enabled"
|
|
::= { wgIpsecTunnelEntry 42 }
|
|
|
|
END
|