TIMETRA-IPSEC-MIB: View SNMP OID List / Download MIB

This document is the SNMP MIB module to manage and provision the Alcatel-Lucent SROS device with IPsec tunneling, encryption and other related features. Copyright 2008-2012 Alcatel-Lucent. All rights reserved. Reproduction of this document is authorized on the condition that the foregoing copyright notice is included. This SNMP MIB module (Specification) embodies Alcatel-Lucent's proprietary intellectual property. Alcatel-Lucent retains all title and ownership in the Specification, including any revisions. Alcatel-Lucent grants all interested parties a non-exclusive license to use and distribute an unmodified copy of this Specification in connection with management of Alcatel-Lucent products, and without fee, provided this copyright notice and license appear on all copies. This Specification is supplied `as is', and Alcatel-Lucent makes no warranty, either express or implied, as to the use, operation, condition, or performance of the Specification.

The compliance statement for management of IPsec features on Alcatel-Lucent SROS series systems.

The compliance statement for management of IPsec features on Alcatel-Lucent SROS series systems.

The compliance statement for management of IPsec features on Alcatel-Lucent SROS series systems.

The compliance statement for management of IPsec features on Alcatel-Lucent SROS series systems.

The compliance statement for management of IPsec features on Alcatel-Lucent SROS series systems.

The compliance statement for management of IPsec features on Alcatel-Lucent SROS series systems.

The group of objects supporting the IPsec Feature capabilities on Alcatel-Lucent SROS series systems.

The group of objects for IPsec Mda Data Path Statistics on Alcatel-Lucent SROS series systems.

The group of objects for IPsec tunnel template on Alcatel-Lucent SROS series systems.

The group of objects supporting management of IPSec gateway capabilities for SAP's on Alcatel-Lucnet SROS series systems.

The group of objects supporting management of IPsec notification objects on Alcatel-Lucent SROS series systems.

The group of objects for IPsec Tunnel BFD service on Alcatel-Lucent SROS series systems.

The group of objects supporting management of IPSec IKE specific capabilities on Alcatel-Lucent SROS series systems.

The group of objects supporting management of IPSec X.509 certificate specific capabilities on Alcatel-Lucent SROS series systems.

The group of objects obsoleted related to management of IPSec specific capabilities on Alcatel-Lucent SROS series systems.

The group of objects supporting management of IPSec gateway capabilities for SAP's on Alcatel-Lucnet SROS series systems.

The group of objects for IPsec Mda Data Path Statistics on Alcatel-Lucent SROS series systems.

The group of objects for IPsec Mda Data Path Statistics on Alcatel-Lucent SROS series systems.

The group of additional objects for IPsec feature on Alcatel-Lucent SROS series systems in 10.0 release.

The group of notifications supporting IPsec on the Alcatel-Lucent SROS series systems.

The value of tmnxIPsecTransformTblLastChanged indicates the sysUpTime at the time of the last modification to tmnxIPsecTransformTable by adding, deleting an entry or change to a writable object in the table. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value.

Table to store the IPsec transform entries.

Information about a single IPsec transform entry.

The value of tmnxIPsecTransformId specifies the id of a transform entry and is the primary index for the table tmnxIPsecTransformTable.

The tmnxIPsecTransformRowStatus object is used to create and delete rows in the tmnxIPsecTransformTable.

The value of tmnxIPsecTransformLastChanged indicates the sysUpTime at the time of the last modification of this entry. If no changes were made to the entry since the last re-initialization of the local network management subsystem, then this object contains a zero value.

The value of tmnxIPsecTransformAuthAlgorithm specifies the Hashing algorithm used for the AH (Authentication Header) protocol's authentication function. If 'none' is used then AH protocol will not be used.

The value of tmnxIPsecTransformEncrAlgorithm specifies the Encryption algorithm to be used for the IPsec session. Encryption only applies to ESP(Encapsulating Security Payload) configurations. If encryption is 'null', then ESP will not be used.

The value of tmnxIkePolicyTableLastChanged indicates the sysUpTime at the time of the last modification to tmnxIkePolicyTable by adding, deleting an entry or change to a writable object in the table. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value.

Table to store the Ike policy entries.

Information about a single Ike policy entry.

The value of tmnxIkePolicyId specifies the id of a policy entry and is the primary index for the table tmnxIkePolicyTable.

The tmnxIkePolicyRowStatus object is used to create and delete rows in the tmnxIkePolicyTable.

The value of tmnxIkePolicyLastChanged indicates the sysUpTime at the time of the last modification of this entry. If no changes were made to the entry since the last re-initialization of the local network management subsystem, then this object contains a zero value.

The value of tmnxIkePolicyDescription specifies the user-provided description for each tmnxIkePolicyEntry in the table tmnxIkePolicyTable.

The value of tmnxIkePolicyIkeMode specifies the mode of operation, which determines the number of messages used to establish the session.

The value of tmnxIkePolicyDHGroup specifes the Diffie-Hellman group to be used for calculating session keys which will be used in the Ike proposal.

The value of tmnxIkePolicyPFSEnabled specifies whether PFS(perfect forward secrecy) on the tunnel using this policy is enabled or not. When tmnxIkePolicyPFSDHGroup has a value of 'true', PFS is enabled.

The value of tmnxIkePolicyPFSDHGroup is used only if the value of the tmnxIkePolicyPFSEnabled is 'true'. The value of tmnxIkePolicyPFSDHGroup specifies the new Diffie-hellman key exchange each time the SA(Security Association) key is renegotiated. After the SA expires, the key is forgotten and another key is generated (if the SA remains up). This means that an attacker who cracks part of the exchange can only read the part that used the key before the key changed. There is no advantage of cracking the other parts if the attacker has already cracked one.

The value of tmnxIkePolicyAuthAlgorithm specifies the Hashing algorithm used in the phase 1 SA.

The value of tmnxIkePolicyEncrAlgorithm specifies the Encryption algorithm to be used in the phase 1 SA.

The value of tmnxIkePolicyIsakmpLifeTime specifies the lifetime of the phase 1 Ike key. ISAKMP stands for Internet Security Association and Key Management Protocol

The value of tmnxIkePolicyIPsecLifeTime specifies the lifetime of the phase 2 Ike key.

The value of tmnxIkePolicyNatTraversal specifies whether NAT-T(network address translation traversal) is 'enabled', 'disabled' or in 'forced' mode. Enumeration: 'enable': 1, 'force': 3, 'disable': 2.

The value of tmnxIkePolicyNatTKeepAliveIntvl specifies the keep alive interval for NAT-T. If the value of tmnxIkePolicyNatTKeepAliveIntvl is '0', then keep alives are disabled.

The value of tmnxIkePolicyNatTBehindNatOnly specifies whether the keep alive packets should be sent only when behind a NAT.

The value of tmnxIkePolicyDpd specifies whether DPD (dead peer detection) is 'enable', 'disable' or in 'replyOnly' mode. The DPD vendor ID is always advertised to the peer. To the extent that the peer advertises DPD support as well, the service-router will always reply to the peer's 'Are-You-There' messages. If tmnxIkePolicyDpd object is set to 'enable' the service-router will also send its own 'Are-You-There' message to the peer at the interval specified by tmnxIkePolicyDpdInterval. If tmnxIkePolicyDpd object is set to 'disable' the service-router will never send its own 'Are-You-There' message to the peer. If tmnxIkePolicyDpd object is set to 'replyOnly' the service-router will take the peer's 'Are-You-There' message as proof of 'liveliness' and will suppress the sending of its own 'Are-You-There' messages. Once it stops receiving 'Are-You-There' messages from the peer, it will start sending its own to determine if the peer is dead. The service-router will only send an 'Are-You-There' message when the other side has been idle (no traffic was forwarded through it) since the last tmnxIkePolicyDpdInterval. If the other side is active (as determined by its traffic counters) it is assumed the peer is alive and the 'Are-You-There' message is suppressed. Enumeration: 'replyOnly': 3, 'enable': 1, 'disable': 2.

The value of tmnxIkePolicyDpdInterval specifies the dead peer detection interval.

The value of tmnxIkePolicyDpdMaxRetries specifies the number of retries done before the peer is determined dead.

The value of tmnxIkePolicyAuthMethod specifies the authentication method used with this IKE policy for the remote-peer.

The value of tmnxIkePolicyIkeVersion specifies the IKE version to be used with this IKE policy.

The value of tmnxIkePolicyOwnAuthMethod specifies the authentication method used with this IKE policy on its own side.

The value of tmnxIPsecTunnelTableLastChanged indicates the sysUpTime at the time of the last modification to tmnxIPsecTunnelTable by adding, deleting an entry or change to a writable object in the table. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value.

Table to store the IPsec Tunnel entries.

Information about a single IPsec Tunnel entry.

The value of tmnxIPsecTunnelName specifies the name of the tunnel and is part of the index for the table tmnxIPsecTunnelTable.

The tmnxIPsecTunnelRowStatus object is used to create and delete rows in the tmnxIPsecTunnelTable.

The value of tmnxIPsecTunnelLastChanged indicates the sysUpTime at the time of the last modification of this entry. If no changes were made to the entry since the last re-initialization of the local network management subsystem, then this object contains a zero value.

The value of tmnxIPsecTunnelDescription specifies the user-provided description for each tmnxIPsecTunnelEntry in the table tmnxIPsecTunnelTable.

The value of tmnxIPsecTunnelLclGwAddrType specifies the address type of address in tmnxIPsecTunnelLclGwAddr.

The value of tmnxIPsecTunnelLclGwAddr specifies the address of the interface on the local node of this IPsec tunnel.

The value of tmnxIPsecTunnelRemGwAddrType specifies the address type of address in tmnxIPsecTunnelRemGwAddr.

The value of tmnxIPsecTunnelRemGwAddr specifies the address of the interface on the remote node of this IPsec tunnel.

The value of tmnxIPsecTunnelPublicSvcId specifies the service-id of the tunnel delivery service. The TIMETRA-SERV-MIB::svcType of the delivery service must be 'ies (5)' or 'vprn (4)', otherwise the set request will fail with an 'inconsistentValue' error.

The value of tmnxIPsecTunnelSecurityPolicyId specifies the IPsec security policy entry in the tmnxIPsecPolicyTable that this tunnel will use.

The value of tmnxIPsecTunnelKeyingType specifies the keying type that this tunnel will use.

The value of tmnxIPsecTunnelDynTransformId1 specifies the first IPsec transform entry in the table tmnxIPsecTransformTable that this tunnel will use.

The value of tmnxIPsecTunnelDynTransformId2 specifies the second IPsec transform entry in the table tmnxIPsecTransformTable that this tunnel will use. The value of tmnxIPsecTunnelDynTransformId2 is valid and greater than 0, only if the value of tmnxIPsecTunnelKeyingType is 'dynamic'.

The value of tmnxIPsecTunnelDynTransformId3 specifies the third IPsec transform entry in the table tmnxIPsecTransformTable that this tunnel will use. The value of tmnxIPsecTunnelDynTransformId3 is valid and greater than 0, only if the value of tmnxIPsecTunnelKeyingType is 'dynamic'.

The value of tmnxIPsecTunnelDynTransformId4 specifies the fourth IPsec transform entry in the table tmnxIPsecTransformTable that this tunnel will use. The value of tmnxIPsecTunnelDynTransformId3 is valid and greater than 0, only if the value of tmnxIPsecTunnelKeyingType is 'dynamic'.

The object tmnxIPsecTunnelIkePolicyId specifies the IKE policy entry that this tunnel will use. The value of tmnxIPsecTunnelIkePolicyId is valid and greater than 0, only if the value of tmnxIPsecTunnelKeyingType is 'dynamic'.

The value of tmnxIPsecTunnelIkePreSharedKey specifies the shared secret between the two peers forming the tunnel. The value of tmnxIPsecTunnelIkePreSharedKey is a valid and non null string only if the value of tmnxIPsecTunnelKeyingType is 'dynamic'.

The value of tmnxIPsecTunnelAdminState specifies the administrative state of the tmnxIPsecTunnelEntry.

The value of tmnxIPsecTunnelOperState indicates the operational status of tmnxIPsecTunnelEntry.

The value of tmnxIPsecTunnelOperFlags indicates the reason why the tunnel is operationally down. Bits: 'invalidCertFile': 7, 'unresolvedPublicSvc': 3, 'unresolvedLocalIp': 0, 'sapDown': 2, 'tunnelAdminDown': 1, 'invalidKeyFile': 8, 'bfdSessionDown': 4, 'reserved1': 5, 'reserved2': 6.

The value of tmnxIPsecTunnelReplayWindow specifies the size of the anti-replay window. If the value of tmnxIPsecTunnelReplayWindow is set to 0, then the anti-replay feature is disabled.

The value of tmnxIPsecTunnelAutoEstablish specifies whether to attempt to establish a phase 1 exchange automatically.

The value of tmnxIPsecTunnelBfdDesignate specifies whether this IPSec tunnel is the BFD designated tunnel.

The value of tmnxIPsecTunnelCertTrustAnchor specifies the name for Certificate-Authority Profile name associated with this SAP IPSec tunnel certificate. An 'inconsistentValue' error is returned if this object is modified when tmnxIPsecTunnelAdminState is in 'inService' state.

The value of tmnxIPsecTunnelCertFile specifies the local file URL of the certifiate to be used with this SAP IPSec tunnel.

The value of tmnxIPsecTunnelKeyFile specifies the key-pair file to be used for X.509 certificate authentication with this SAP IPSec tunnel.

The value of tmnxIPsecTunnelLocalIdType specifies the local-identifier type used for IDi or IDr for IKEv2. An 'inconsistentValue' error is returned if this object is modified when tmnxIPsecTunnelAdminState is in 'inService' state.

The value of tmnxIPsecTunnelLocalIdValue specifies the value associated with tmnxIPsecTunnelLocalIdType object. Value is extracted from the configured certificate when tmnxIPsecTunnelLocalIdType is set to 'dn'.

The value of tmnxIPsecTunnelClearDfBit specifies whether to clear Do not Fragment (DF) bit in the outgoing packets in this tunnel.

The value of tmnxIPsecTunnelIpMtu specifies the MTU size for IP packets for this tunnel. A value set to zero indicates maximum supported MTU size on the SAP for this tunnel.

The value of tmnxIPsecTunnelHostISA indicates the active ISA that is being used to host this IPsec tunnel. This object will have a value of zero when this tunnel is operationally down.

Table to store IPsec Tunnel statistics

Statistics for a single IPsec Tunnel.

The value of tmnxIPsecTunnelIsakmpState indicates the state of phase 1 IPsec negotiation. Enumeration: 'down': 2, 'up': 1.

The value of tmnxIPsecTunnelIsakmpEstabTime indicates the sysUpTime at the time the IPsec phase 1 negotiation completed.

The value of tmnxIPsecTunnelIsakmpNegLifeTime indicates the lifetime negotiated for phase1 Ike key.

The value of tmnxIPsecTunnelNumDpdTx indicates the number of Dead-Peer-Detection packets transmitted.

The value of tmnxIPsecTunnelNumDpdRx indicates the number of Dead-Peer-Detection packets received.

The value of tmnxIPsecTunnelNumDpdAckTx indicates the number of Dead-Peer-Detection acknowledgement packets transmitted.

The value of tmnxIPsecTunnelNumDpdAckRx indicates the number of Dead-Peer-Detection acknowledgement packets received.

The value of tmnxIPsecTunnelNumExpRx indicates the number of DPD R-U-THERE packets that have not been acknowledged.

The value of tmnxIPsecTunnelNumInvalidDpdRx indicates the number of malformed DPD R-U-THERE acknowledgement packets received.

The value of tmnxIPsecTunnelNumCtrlPktsTx indicates the number of control packets this IPsec Tunnel has sent.

The value of tmnxIPsecTunnelNumCtrlPktsRx indicates the number of control packets this IPsec Tunnel has received.

The value of tmnxIPsecTunnelNumCtrlTxErrors indicates the number of control packet transmit errors.

The value of tmnxIPsecTunnelNumCtrlRxErrors indicates the number of control packet receive errors.

The value of tmnxIPsecPolicyTableLastChanged indicates the sysUpTime at the time of the last modification to tmnxIPsecPolicyTable by adding, deleting an entry or change to a writable object in the table. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value.

Table to store the IPsec Security Policy entries.

Information about a single IPsec Security Policy entry.

The value of tmnxIPsecPolicyId specifies the id of a Security Policy entry and is the primary index for the table.

The tmnxIPsecPolicyRowStatus object is used to create and delete rows in the tmnxIPsecPolicyTable.

The value of tmnxIPsecPolicyLastChanged indicates the sysUpTime at the time of the last modification of this entry. If no changes were made to the entry since the last re-initialization of the local network management subsystem, then this object contains a zero value.

The value of tmnxIPsecPlcyParamsTblLastChangd indicates the sysUpTime at the time of the last modification to tmnxIPsecPolicyParamsTable by adding, deleting an entry or change to a writable object in the table. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value.

Table to store the IPsec Security Policy Params entries.

Information about a single IPsec Security policy params entry.

The value of tmnxIPsecPolicyParamsId specifies the id of an IPsec policy params entry and is part of the index for the tmnxIPsecPolicyParamsTable.

The tmnxIPsecPolicyParamsRowStatus object is used to create and delete rows in the tmnxIPsecPolicyParamsTable.

The value of tmnxIPsecPolicyParamsLastChanged indicates the sysUpTime at the time of the last modification of this entry. If no changes were made to the entry since the last re-initialization of the local network management subsystem, then this object contains a zero value.

The value of tmnxIPsecPolicyParamsLclAddrAny specifies whether the ip address on the vpn side can be any ip address. If the value is 'true' then local ip address can be any ip address. Please look at the following chart for more details: tmnxIPsecPolicyParamsLclAddrAny true false ----------------------------------------------------------------- tmnxIPsecPolicyParamsLclAddrType unknown unknown or ipv4 tmnxIPsecPolicyParamsLclAddr ''H ''H or valid ipv4 tmnxIPsecPolicyParamsLclAPrefLen 0 0 to 32

The value of tmnxIPsecPolicyParamsLclAddrType specifies the address type of address in tmnxIPsecPolicyParamsLclAddr. If the value of tmnxIPsecPolicyParamsLclAddrAny is 'true' then the value of tmnxIPsecPolicyParamsLclAddrType will be 'unknown'.

The value of tmnxIPsecPolicyParamsLclAddr specifies the ip address on the vpn side. If the value of tmnxIPsecPolicyParamsLclAddrAny is 'true' then the value of tmnxIPsecPolicyParamsLclAddr will be empty(''H).

The value of tmnxIPsecPolicyParamsLclAPrefLen specifies the number of bits to match of the tmnxIPsecPolicyParamsLclAddr. If the value of tmnxIPsecPolicyParamsLclAddrAny is 'true' then the value of tmnxIPsecPolicyParamsLclAPrefLen will be 0.

The value of tmnxIPsecPolicyParamsRemAddrAny specifies whether the ip address on the tunnel side can be any ip address. If the value is 'true' then remote ip address can be any ip address. Please look at the following chart for more details: tmnxIPsecPolicyParamsLclAddrAny true false ----------------------------------------------------------------- tmnxIPsecPolicyParamsRemAddrType unknown unknown or ipv4 tmnxIPsecPolicyParamsRemAddr ''H ''H or valid ipv4 tmnxIPsecPolicyParamsRemAPrefLen 0 0 to 32

The value of tmnxIPsecPolicyParamsRemAddrType specifies the address type of address in tmnxIPsecPolicyParamsRemAddr. If the value of tmnxIPsecPolicyParamsRemAddrAny is 'true' then the value of tmnxIPsecPolicyParamsRemAddrType will be 'unknown'.

The value of tmnxIPsecPolicyParamsRemAddr specifies the ip address on the tunnel side. If the value of tmnxIPsecPolicyParamsRemAddrAny is 'true' then the value of tmnxIPsecPolicyParamsRemAddr will be empty(''H).

The value of tmnxIPsecPolicyParamsRemAPrefLen specifies the number of bits to match of the tmnxIPsecPolicyParamsRemAddr. If the value of tmnxIPsecPolicyParamsRemAddrAny is 'true' then the value of tmnxIPsecPolicyParamsRemAPrefLen will be 0.

The value of tmnxIPsecSATableLastChanged indicates the sysUpTime at the time of the last modification to tmnxIPsecSATable by adding, deleting an entry or change to a writable object in the table. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value.

Table to store the IPsec manual and dynamic SA entries.

Information about a single IPsec SA entry.

The value of tmnxIPsecSAId specifies the id of an SA entry and is part of the index for the tmnxIPsecSATable.

The value of tmnxIPsecSAIndex specifies an additional index to uniquely indentify the SA entry in the tmnxIPsecSATable. The value of tmnxIPsecSAIndex is limited to a value of '1' when tmnxIPsecTunnelKeyingType corresponding to the tunnel specified tmnxIPsecTunnelName is set to 'static'.

The value of tmnxIPsecSADirection specifies the direction on the IPsec tunnel to which this SA entry can be applied. The value of tmnxIPsecSADirection is also part of the index for the table tmnxIPsecSATable

The tmnxIPsecSARowStatus object is used to create and delete rows in the tmnxIPsecSATable. When creating an entry in tmnxIPsecSATable, the value of tmnxIPsecSARowStatus must be 'createAndGo' and the objects tmnxIPsecSAEncryptionKey, tmnxIPsecSAAuthenticationKey, tmnxIPsecSASpi, tmnxIPsecSAManualTransformId are required to be set in the same request.

The value of tmnxIPsecSALastChanged indicates the sysUpTime at the time of the last modification of this entry. If no changes were made to the entry since the last re-initialization of the local network management subsystem, then this object contains a zero value.

The value of tmnxIPsecSAType indicates whether this SA entry is created manually by the user or dynamically by the IPsec sub-system.

The value of tmnxIPsecSAEncryptionKey specifies the key used for the encryption algorithm defined by the tmnxIPsecTransformEncrAlgorithm in the IPsec transform indexed by tmnxIPsecSAManualTransformId. The length of the key must match the length required by the encryption algorithm. If a key of another length is set, the request will fail with an 'inconsistentValue' error. There is no default value for tmnxIPsecSAEncryptionKey and this is a required object when creating an entry in tmnxIPsecSATable. If tmnxIPsecSAEncryptionKey is not specified when creating an entry, the request will fail with an 'inconsistentValue' error.

The value of tmnxIPsecSAAuthenticationKey specifies the key used for the authentication algorithm defined by the tmnxIPsecTransformAuthAlgorithm in the IPsec transform indexed by tmnxIPsecSAManualTransformId. The length of the key must match the length required by the authentication algorithm. If a key of another length is set, the request will fail with an 'inconsistentValue' error. There is no default value for tmnxIPsecSAAuthenticationKey and this is a required object when creating an entry in tmnxIPsecSATable. If tmnxIPsecSAAuthenticationKey is not specified when creating an entry, the request will fail with an 'inconsistentValue' error.

The value of tmnxIPsecSASpi specifies the SPI (Security Parameter Index) used to lookup the instruction to verify and decrypt the incoming IPsec packets when the value of tmnxIPsecSADirection is 'inbound'. The value of tmnxIPsecSASpi specifies the SPI that will be used in the encoding of the outgoing packets when the value of tmnxIPsecSADirection is 'outbound'. The remote node can use this SPI to lookup the instruction to verify and decrypt the packet. There is no default value for tmnxIPsecSASpi and this is a required object when creating an entry in tmnxIPsecSATable. If tmnxIPsecSAAuthenticationKey is not specified when creating an entry, the request will fail with an 'inconsistentValue' error.

The value of tmnxIPsecSAManualTransformId specifies the transform entry that will be used by this SA entry. This object should be specified for all the entries created by the user which are manual SAs. If the value of tmnxIPsecSAType is 'dynamic', then the value of tmnxIPsecSAManualTransformId is irrelevant and will be zero. There is no default value for tmnxIPsecSAManualTransformId and this is a required object when creating an entry in tmnxIPsecSATable. If tmnxIPsecSAManualTransformId is not specified when creating an entry, the request will fail with an 'inconsistentValue' error.

The value of tmnxIPsecSAAuthAlgorithm indicates the authentication algorithm used with this SA.

The value of tmnxIPsecSAEncrAlgorithm indicates the encryption algorithm used with this SA.

The value of tmnxIPsecSAStorageType indicates how the row is stored. Entries with tmnxIPsecSAStorageType of 'read-only' are dynamic SAs and are created by the IPsec sub-system and cannot be modified or destroyed. All the entries created by the user are manual SAs and will have the tmnxIPsecSAStorageType as 'nonVolatile'.

The value of tmnxIPsecSAEstablishedTime indicates the sysUpTime at the time the IPsec phase 2 negotiation completed.

The value of tmnxIPsecSANegotiatedLifeTime indicates the lifetime negotiated for phase2 Ike key.

Table to retrieve the IPsec SA Statistics entries.

Information about a single IPsec SA Statistics entry.

The value of tmnxIPsecSAStatsBytesProcessed indicates the number of bytes successfully processed for this SA.

The value of tmnxIPsecSAStatsBytesProcLow32 indicates the lower 32 bits of the value of tmnxIPsecSAStatsBytesProcessed.

The value of tmnxIPsecSAStatsBytesProcHigh32 indicates the higher 32 bits of the value of tmnxIPsecSAStatsBytesProcessed.

The value of tmnxIPsecSAStatsPktsProcessed indicates the number of packets successfully processed for this SA.

The value of tmnxIPsecSAStatsPktsProcLow32 indicates the lower 32 bits of the value of tmnxIPsecSAStatsPktsProcessed.

The value of tmnxIPsecSAStatsPktsProcHigh32 indicates the higher 32 bits of the value of tmnxIPsecSAStatsPktsProcessed.

The value of tmnxIPsecSAStatsCryptoErrors indicates the number of crypto errors encountered on this SA. The crypto errors include errors on packets where protocol does not match or if the check on authentication header length failed.

The value of tmnxIPsecSAStatsReplayErrors indicates the number of replay errors encountered on this SA.

The value of tmnxIPsecSAStatsSAErrors indicates the number of SA errors encountered on this SA. The SA errors include sequence number failure, invalid SA, ploicy version mismatch, illegal authentication algorithm, expanded packet too big, illegal configured algorithm and ttl decrement error.

The value of tmnxIPsecSAStatsPolicyErrors indicates the number of policy errors encountered on this SA. The policy errors include bundled SA, selector check and policy direction error.

Table to retrieve the IPsec Mda Data Path Statistics entries.

Information about a single IPsec Mda Data Path Statistics entry.

The value of tmnxIPsecMdaDpStatsEncryptPkts indicates the number of packets encrypted by the IPsec data path.

The value of tmnxIPsecMdaDpStatsEncryptPktsLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpStatsEncryptPkts.

The value of tmnxIPsecMdaDpStatsEncryptPktsHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpStatsEncryptPkts.

The value of tmnxIPsecMdaDpStatsEncryptBytes indicates the number of bytes encrypted by the IPsec data path.

The value of tmnxIPsecMdaDpStatsEncryptBytesLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpStatsEncryptBytes.

The value of tmnxIPsecMdaDpStatsEncryptBytesHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpStatsEncryptBytes.

The value of tmnxIPsecMdaDpStatsDecryptPkts indicates the number of packets encrypted by the IPsec data path.

The value of tmnxIPsecMdaDpStatsDecryptPktsLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpStatsDecryptPkts.

The value of tmnxIPsecMdaDpStatsDecryptPktsHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpStatsDecryptPkts.

The value of tmnxIPsecMdaDpStatsDecryptBytes indicates the number of bytes encrypted by the IPsec data path.

The value of tmnxIPsecMdaDpStatsDecryptBytesLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpStatsDecryptBytes.

The value of tmnxIPsecMdaDpStatsDecryptBytesHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpStatsDecryptBytes.

The value of tmnxIPsecMdaDpStatsTxPktErrs indicates the number of packets transmit failures by the IPsec data path.

The value of tmnxIPsecMdaDpStatsOutBDropPkts indicates the number of packets dropped before and during outbound (encryption) processing by the IPsec data path.

The value of tmnxIPsecMdaDpStatsOutBDropPktsLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpStatsOutBDropPkts.

The value of tmnxIPsecMdaDpStatsOutBDropPktsHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpStatsOutBDropPkts.

The value of tmnxIPsecMdaDpStatsOutBSAMisses indicates the number of packets dropped before outbound (encryption) processing by the IPsec data path due to no SA (security association) present.

The value of tmnxIPsecMdaDpStatsOutBSAMissesLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpStatsOutBSAMisses.

The value of tmnxIPsecMdaDpStatsOutBSAMissesHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpStatsOutBSAMisses.

The value of tmnxIPsecMdaDpStatsOutBPolicyEntryMisses indicates the number of packets dropped before outbound (encryption) processing by the IPsec data path due to no matching Policy Entry.

The value of tmnxIPsecMdaDpStatsInBDropPkts indicates the number of packets dropped before and during inbound (decryption) processing by the IPsec data path.

The value of tmnxIPsecMdaDpStatsInBDropPktsLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpStatsInBDropPkts.

The value of tmnxIPsecMdaDpStatsInBDropPktsHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpStatsInBDropPkts.

The value of tmnxIPsecMdaDpStatsInBSAMisses indicates the number of packets dropped before inbound (decryption) processing by the IPsec data path due to no SA (security association) present.

The value of tmnxIPsecMdaDpStatsInBSAMissesLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpStatsInBSAMisses.

The value of tmnxIPsecMdaDpStatsInBSAMissesHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpStatsInBSAMisses.

The value of tmnxIPsecMdaDpStatsInBIPDstSrcMismatches indicates the number of packets dropped before inbound (decryption) processing by the IPsec data path due to the received packet's outer IP destination or source address does not match the Tunnel's local or peer gateway address.

The value of tmnxIPsecMdaDpInFragments indicates the number of fragments received by the IPsec data path.

The value of tmnxIPsecMdaDpInFragmentsLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpInFragments.

The value of tmnxIPsecMdaDpInFragmentsHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpInFragments.

The value of tmnxIPsecMdaDpPktsReassem indicates the number of packets reassembled by the IPsec data path.

The value of tmnxIPsecMdaDpPktsReassemLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpPktsReassem.

The value of tmnxIPsecMdaDpPktsReassemHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpPktsReassem.

The value of tmnxIPsecMdaDpFragDropTime indicates the number of fragments dropped due to time-out by the IPsec data path.

The value of tmnxIPsecMdaDpFragDropTimeLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpFragDropTime.

The value of tmnxIPsecMdaDpFragDropTimeHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpFragDropTime.

The value of tmnxIPsecMdaDpFragDropped indicates the number of total fragments dropped by the IPsec data path.

The value of tmnxIPsecMdaDpFragDroppedLow32 indicates the lower 32 bits of the value of tmnxIPsecMdaDpFragDropped.

The value of tmnxIPsecMdaDpFragDroppedHigh32 indicates the higher 32 bits of the value of tmnxIPsecMdaDpFragDropped.

The value of tmnxIPsecMdaDpGreTnlInPkts indicates the number of packets received by the GRE tunnel data path.

The value of tmnxIPsecMdaDpGreTnlInPktsLo indicates the lower 32 bits of the number of packets received by the GRE tunnel data path.

The value of tmnxIPsecMdaDpGreTnlInPktsHi indicates the higher 32 bits of the number of packets received by the GRE tunnel data path.

The value of tmnxIPsecMdaDpGreTnlInBytes indicates the number of packets received by the GRE tunnel data path.

The value of tmnxIPsecMdaDpGreTnlInBytesLo indicates the lower 32 bits of the number of packets received by the GRE tunnel data path.

The value of tmnxIPsecMdaDpGreTnlInBytesHi indicates the higher 32 bits of the number of packets received by the GRE tunnel data path.

The value of tmnxIPsecMdaDpGreTnlInErrs indicates the number of packets received by the GRE tunnel data path.

The value of tmnxIPsecMdaDpGreTnlInErrsLo indicates the lower 32 bits of the number of packets received by the GRE tunnel data path.

The value of tmnxIPsecMdaDpGreTnlInErrsHi indicates the higher 32 bits of the number of packets received by the GRE tunnel data path.

The value of tmnxIPsecMdaDpGreTnlOutPkts indicates the number of packets received by the GRE tunnel data path.

The value of tmnxIPsecMdaDpGreTnlOutPktsLo indicates the lower 32 bits of the number of packets received by the GRE tunnel data path.

The value of tmnxIPsecMdaDpGreTnlOutPktsHi indicates the higher 32 bits of the number of packets received by the GRE tunnel data path.

The value of tmnxIPsecMdaDpGreTnlOutBytes indicates the number of packets received by the GRE tunnel data path.

The value of tmnxIPsecMdaDpGreTnlOutBytesLo indicates the lower 32 bits of the number of packets received by the GRE tunnel data path.

The value of tmnxIPsecMdaDpGreTnlOutBytesHi indicates the higher 32 bits of the number of packets received by the GRE tunnel data path.

The value of tmnxIPsecMdaDpGreTnlOutErrs indicates the number of packets received by the GRE tunnel data path.

The value of tmnxIPsecMdaDpGreTnlOutErrsLo indicates the lower 32 bits of the number of packets received by the GRE tunnel data path.

The value of tmnxIPsecMdaDpGreTnlOutErrsHi indicates the higher 32 bits of the number of packets received by the GRE tunnel data path.

The value of tmnxIPsecMdaDpPktsDropDfSet indicates the number of packets with DF bit set dropped in this Tunnel exceeding MTU size and with clear tunnel DF bit not set.

The value of tmnxIPsecMdaDpPktsDropDfSetLo indicates lower 32 bits of the value of tmnxIPsecMdaDpPktsDropDfSet object.

The value of tmnxIPsecMdaDpPktsDropDfSetHi indicates higher 32 bits of the value of tmnxIPsecMdaDpPktsDropDfSet object.

The value of tmnxIPsecMdaDpStaticIPsecTnls indicates number of configured static IPsec tunnels on the MDA.

The value of tmnxIPsecMdaDpDynIPsecTnls indicates number of dynamic IPsec tunnels in use on the MDA.

The value of tmnxIPsecMdaDpIpGreTnls indicates number of configured IP tunnels (with GRE headers) on the MDA.

The value of tmnxIPsecMdaDpIpv4Tnls indicates number of configured IPv4 tunnels on the MDA.

The value of tIPsecTnlTempTblLastChanged indicates the sysUpTime at the time of the last modification to tIPsecTnlTempTable by adding, deleting an entry or change to a writable object in the table. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value.

Table to store the IPsec tunnel template entries.

Information about a single IPsec tunnel template entry.

The value of tIPsecTnlTempId specifies the id of a tunnel template entry and is the primary index for the table tIPsecTnlTempTable.

The tIPsecTnlTempRowStatus object is used to create and delete rows in the tIPsecTnlTempTable.

The value of tIPsecTnlTempLastChanged indicates the sysUpTime at the time of the last modification of this entry. If no changes were made to the entry since the last re-initialization of the local network management subsystem, then this object contains a zero value.

The value of tIPsecTnlTempDescr specifies the user-provided description for the template.

The value of tIPsecTnlTempReverseRoute specifies whether node using this template will accept framed-routes sent by radius server and install them for the lifetime of the tunnel as managed routes. If this object is set to 'useSecurityPolicy' then the node using this template will add a route to every client-side-protected-subnet as signaled by the client. Enumeration: 'reverseRoute': 1, 'none': 0, 'useSecurityPolicy': 2.

The value of tIPsecTnlTempDynKeyTransformId1 specifies the first transform-id for this IPSec Tunnel template to use.

The value of tIPsecTnlTempDynKeyTransformId2 specifies the second transform-id for this IPSec Tunnel template to use.

The value of tIPsecTnlTempDynKeyTransformId3 specifies the third transform-id for this IPSec Tunnel template to use.

The value of tIPsecTnlTempDynKeyTransformId4 specifies the fourth transform-id for this IPSec Tunnel template to use.

The value of tIPsecTnlTempReplayWindow specifies the size of the anti-replay window for the template. If the value of tmnxIPsecTunnelReplayWindow is set to 0, then the anti-replay feature is disabled.

The value of tmnxIPsecGWTblLastChgd indicates the sysUpTime at the time of the last modification of tmnxIPsecGWTable. If no changes were made to the entry since the last re-initialization of the local network management subsystem, then this object contains a zero value.

A table that contains SAP IPSec gateway information.

Information about a SAP IPSec gateway.

The value of tmnxIPsecGWRowStatus controls the creation and deletion of rows in this table.

The value of tmnxIPsecGWLastMgmtChange indicates the value of sysUpTime at the time of the last management change of any writable object of this row.

The value of the object tmnxIPsecGWAdminState specifies the administrative state of SAP IPSec gateway entry.

The value of the object tmnxIPsecGWOperState indicates the operating state of the SAP IPSec gateway.

The value of the object tmnxIPsecGWTunnelPolicyTemp specifies the TIMETRA-IPSEC-MIB::tIPsecTnlTempId used by this SAP IPSec gateway.

The value of the object tmnxIPsecGWSecureService specifies the service-id of the default security service used by this SAP IPSec gateway.

The value of the object tmnxIPsecGWIfName specifies the IPSec interface used by the SAP.

The value of the object tmnxIPsecGWInetAddrType specifies the address type of the SAP IPSec gateway.

This value of tmnxIPsecGWInetAddress specifies the IPv4 address of the SAP IPSec gateway.

The value of tmnxIPsecGWIkePolicyId specifies the policy id for this SAP IPSec gateway.

The value of tmnxIPsecGWIkePreShared specifies the shared secret between the two peers forming the tunnel for the SAP IPSec gateway.

The value of tmnxIPsecGWLclX509Cert specifies the path-name of the local X509 Certificate to be used with this SAP IPSec gateway.

The value of tmnxIPsecGWLclPrivateKey specifies the path-name of the local private key to be used with this SAP IPSec gateway.

The value of tmnxIPsecGWOperFlags indicates the reason why the gateway is operationally down. Bits: 'privateKeyUnavailable': 3, 'localIpUnreachable': 0, 'x509CertUnavailable': 2, 'caCertUnavailable': 4, 'caCRLUnavailable': 5, 'gatewayAdminDown': 1.

The value of tmnxIPsecGWCACert specifies the path-name of the Certificate from the Certificate-Authority to be used with this SAP IPSec gateway.

The value of tmnxIPsecGWCACertRevocList specifies the path-name of the Certificate Revocation List (CRL) from Certificate-Authority to be used with this SAP IPSec gateway.

The value of the object tmnxIPsecGWIfName specifies the name for this IPSec gateway. An 'inconsistentValue' error is returned if value of this object is not set to unique value at the time of creation.

The value of tmnxIPsecGWCertTrustAnchor specifies the name for Certificate-Authority Profile name associated with this SAP IPSec gateway certificate. An 'inconsistentValue' error is returned if this object is modified when tmnxIPsecGWAdminState is in 'inService' state.

The value of tmnxIPsecGWLocalIdType specifies the local-identifier of 7750 used for IDi or IDr for IKEv2. An 'inconsistentValue' error is returned if this object is modified when tmnxIPsecGWAdminState is in 'inService' state.

The value of tmnxIPsecGWLocalIdValue specifies the value associated with tmnxIPsecGWLocalIdType object. Value is extracted from the configured certificate when tmnxIPsecGWLocalIdType is set to 'dn'.

Table to store dynamic IPsec Remote-User Tunnel entries.

Information about a single dynamic IPsec Remote-User Tunnel entry.

The value of the object tIPsecRUTnlInetAddrType indicates the address type of the SAP IPsec gateway to the tunnel.

This value of tIPsecRUTnlInetAddress indicates the address of of the SAP IPsec gateway to the tunnel.

The value of tIPsecRUTnlPort indicates the UDP port of the SAP IPsec gateway to the tunnel.

The value of the object tIPsecRUTnlPrivateIpAddrType indicates the address type of the private IP Address in the tunnel.

The value of tIPsecRUTnlPrivateIpAddr indicates the private ip address on the IPsec gateway tunnel.

The value of tIPsecRUTnlPrivateIpPrefixLen indicates the number of bits to match on the tIPsecRUTnlPrivateIpAddr.

The value of tIPsecRUTnlTempId indicates the id of a tunnel template entry used for the tunnel.

The value of tIPsecRUTnlIPsecSALifeTime indicates the lifetime of the phase 2 Ike key.

The value of tIPsecRUTnlPfsDHGroup indicates the new Diffie-hellman key exchange each time the SA(Security Association) key is renegotiated. After the SA expires, the key is forgotten and another key is generated (if the SA remains up). This means that an attacker who cracks part of the exchange can only read the part that used the key before the key changed. There is no advantage of cracking the other parts if the attacker has already cracked one.

The value of tIPsecRUTnlReplayWindow indicates the size of the anti-replay window.

The value of tIPsecRUTnlPrivateSvcId indicates the service-id of the Tunnel delivery service.

The value of tIPsecRUTnlPrivateIfIndex indicates the private interface index used by the tunnel.

The value of tIPsecRUTnlHasBiDirectionalSA indicates whether this tunnel has bi-directional Security-Association entries.

The value of tIPsecRUTnlHostISA indicates the active ISA that is being used to host this tunnel. This object will have a value of zero when this tunnel is operationally down.

Table to store IPsec Remote User Tunnel statistics

Statistics for a single IPsec Remote User Tunnel.

The value of tIPsecRUTnlIsakmpState indicates the state of phase 1 IPsec negotiation. Enumeration: 'down': 2, 'up': 1.

The value of tIPsecRUTnlIsakmpEstabTime indicates the sysUpTime at the time the IPsec phase 1 negotiation completed.

The value of tIPsecRUTnlIsakmpNegLifeTime indicates the lifetime negotiated for phase1 Ike key.

The value of tIPsecRUTnlNumDpdTx indicates the number of Dead-Peer-Detection packets transmitted.

The value of tIPsecRUTnlNumDpdRx indicates the number of Dead-Peer-Detection packets received.

The value of tIPsecRUTnlNumDpdAckTx indicates the number of Dead-Peer-Detection acknowledgement packets transmitted.

The value of tIPsecRUTnlNumDpdAckRx indicates the number of Dead-Peer-Detection acknowledgement packets received.

The value of tIPsecRUTnlNumExpRx indicates the number of DPD R-U-THERE packets that have not been acknowledged.

The value of tIPsecRUTnlNumInvalidDpdRx indicates the number of malformed DPD R-U-THERE acknowledgement packets received.

The value of tIPsecRUTnlNumCtrlPktsTx indicates the number of control packets this IPsec Tunnel has sent.

The value of tIPsecRUTnlNumCtrlPktsRx indicates the number of control packets this IPsec Tunnel has received.

The value of tIPsecRUTnlNumCtrlTxErrors indicates the number of control packet transmit errors.

The value of tIPsecRUTnlNumCtrlRxErrors indicates the number of control packet receive errors.

Table to store the IPsec remote-user dynamic SA entries.

Information about a single IPsec remote-user SA entry.

The value of tIPsecRUSAId indicates the id of an SA entry and is part of the index for the tIPsecRUSATable.

The value of tIPsecRUSAIndex indicates an additional index to uniquely indentify the SA entry in the tIPsecRUSATable.

The value of tIPsecRUSADirection indicates the direction on the IPsec Tunnel to which this SA entry can be applied. The value of tIPsecRUSADirection is also part of the index for the table tIPsecRUSATable

The value of tIPsecRUSAEncryptionKey indicates the key used for the encryption algorithm defined by the tIPsecRUSAEncrAlgorithm in the IPsec transform.

The value of tIPsecRUSAAuthenticationKey indicates the key used for the authentication algorithm defined by the tIPsecRUSAAuthAlgorithm in the IPsec transform.

The value of tIPsecRUSASpi indicates the SPI (Security Parameter Index) used to lookup the instruction to verify and decrypt the incoming IPsec packets when the value of tIPsecRUSADirection is 'inbound'.

The value of tIPsecRUSAAuthAlgorithm indicates the authentication algorithm used with this SA.

The value of tIPsecRUSAEncrAlgorithm indicates the encryption algorithm used with this SA.

The value of tIPsecRUSAEstablishedTime indicates the sysUpTime at the time the IPsec phase 2 negotiation completed.

The value of tIPsecRUSANegotiatedLifeTime indicates the lifetime negotiated for phase2 Ike key.

The value of tIPsecRUSALclAddrType indicates the address type of address in tIPsecRUSALclAddr.

The value of tIPsecRUSALclAddr indicates the ip address on the vpn side.

The value of tIPsecRUSALclAPrefLen indicates the number of bits to match of the tIPsecRUSALclAddr.

The value of tIPsecRUSARemAddrType indicates the address type of address in tIPsecRUSARemAddr.

The value of tIPsecRUSARemAddr indicates the ip address on the tunnel side.

The value of tIPsecRUSARemAPrefLen indicates the number of bits to match of the tIPsecRUSARemAddr.

Table to retrieve the IPsec Remote-User SA Statistics entries.

Information about a single IPsec Remote-User SA Statistics entry.

The value of tIPsecRUSAStatsBytesProcessed indicates the number of bytes successfully processed for this SA.

The value of tIPsecRUSAStatsBytesProcLow32 indicates the lower 32 bits of the value of tIPsecRUSAStatsBytesProcessed.

The value of tIPsecRUSAStatsBytesProcHigh32 indicates the higher 32 bits of the value of tIPsecRUSAStatsBytesProcessed.

The value of tIPsecRUSAStatsPktsProcessed indicates the number of packets successfully processed for this SA.

The value of tIPsecRUSAStatsPktsProcLow32 indicates the lower 32 bits of the value of tIPsecRUSAStatsPktsProcessed.

The value of tIPsecRUSAStatsPktsProcHigh32 indicates the higher 32 bits of the value of tIPsecRUSAStatsPktsProcessed.

The value of tIPsecRUSAStatsCryptoErrors indicates the number of crypto errors encountered on this SA. The crypto errors include errors on packets where protocol does not match or if the check on authentication header length failed.

The value of tIPsecRUSAStatsReplayErrors indicates the number of replay errors encountered on this SA.

The value of tIPsecRUSAStatsSAErrors indicates the number of SA errors encountered on this SA. The SA errors include sequence number failure, invalid SA, policy version mismatch, illegal authentication algorithm, expanded packet too big, illegal configured algorithm and ttl decrement error.

The value of tIPsecRUSAStatsPolicyErrors indicates the number of policy errors encountered on this SA. The policy errors include bundled SA, selector check and policy direction error.

The value of tmnxIPsecPskTunnels indicates the number of IPSec tunnels with tmnxIkePolicyAuthMethod set to 'psk'.

The value of tmnxIPsecGWPskTunnels indicates the number of IPSec gateway tunnels with tmnxIkePolicyAuthMethod set to 'psk'.

The value of tmnxIPsecGWPskXAuthTunnels indicates the number of IPSec gateway tunnels with tmnxIkePolicyAuthMethod set to 'plainPskXAuth'.

The value of tmnxIPsecGWCertTunnels indicates the number of IPSec gateway tunnels with tmnxIkePolicyAuthMethod set to 'cert'.

The value of tmnxIPsecTunnelBfdTableLastChgd indicates the sysUpTime at the time of the last modification to tmnxIPsecTunnelBfdTable by adding, deleting an entry or change to a writable object in the table. If no changes were made to the table since the last re-initialization of the local network management subsystem, then this object contains a zero value.

Table to store the IPsec Tunnel BFD session entries.

Information about a single IPsec Tunnel BFD session entry.

The value of the object tmnxIPsecTunnelBfdSvcId specifies the service-id of the interface running BFD.

The value of the object tmnxIPsecTunnelBfdIfName specifies the IPSec interface used by the BFD session.

The value of tmnxIPsecTunnelBfdDstAddrType specifies the address type of address in tmnxIPsecTunnelBfdDstAddr.

The value of tmnxIPsecTunnelBfdDstAddr specifies the destination ipaddress to be used for the BFD session.

The tmnxIPsecTunnelBfdRowStatus object is used to create and delete rows in the tmnxIPsecTunnelBfdTable.

The value of tmnxIPsecTunnelBfdLastChanged indicates the sysUpTime at the time of the last modification of this entry. If no changes were made to the entry since the last re-initialization of the local network management subsystem, then this object contains a zero value.

The value of tmnxIPsecTunnelBfdSrcAddrType indicates the address type of tmnxIPsecTunnelBfdSrcAddr object.

The value of tmnxIPsecTunnelBfdSrcAddr indicates the source IP address on the interface running BFD.

The value of tmnxIPsecTunnelBfdSessOperState indicates the operational state of the BFD session the IPsec tunnel is relying upon for its fast triggering mechanism.

The value of the object tIPsecNotifRUTnlInetAddrType indicates address type of tIPsecNotifRUTnlInetAddress object.

This value of tIPsecNotifRUTnlInetAddress indicates the address of of the SAP IPsec gateway to the tunnel.

The value of tIPsecNotifRUTnlPort indicates the UDP port of the SAP IPsec gateway to the tunnel.

The value of tIPsecNotifReason indicates the reason for the IPsec notification.

The value of tIPsecNotifBfdIntfSvcId specifies the service ID of the interface running BFD in the notification.

The value of tIPsecNotifBfdIntfIfName specifies the name of the interface running BFD in the notification.

The value of tIPsecNotifBfdIntfDestIpType specifies the address type of tIPsecNotifBfdIntfDestIp object.

The value of tIPsecNotifBfdIntfDestIp specifies the destination IP address on the interface running BFD in the notification.

The value of tIPsecNotifBfdIntfSessState indicates the operational state of BFD session on the interface in the notification.

The trap tIPsecRUTnlFailToCreate is sent when creation of a remote-user tunnel fails with reason indicated by tIPsecNotifReason.

The trap tIPsecRUSAFailToAddRoute is sent when adding route to tIPsecRUSARemAddr for the remote-user tunnel fails with reason indicated by tIPsecNotifReason.

The notification tIPsecBfdIntfSessStateChgd is generated when the operational state of BFD session of the IPSec instance changes.