topic Re: CISCO-IPSEC-FLOW-MONITOR-MIB in Network Security https://community.cisco.com/t5/network-security/cisco-ipsec-flow-monitor-mib/m-p/1556341#M922707 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>I'm not sure if there's a way for you to check. I was one of the reviewers when the IPSec MIB was initially implemented, and I remember those traps were defined but not implemented at the time. </P><P></P><P>Thanks,</P><P>Wen</P></BODY></HTML> Wed, 27 Oct 2010 13:56:36 GMT wzhang 2010-10-27T13:56:36Z CISCO-IPSEC-FLOW-MONITOR-MIB https://community.cisco.com/t5/network-security/cisco-ipsec-flow-monitor-mib/m-p/1556338#M922702 <P>Hi,</P><P></P><P>I have a 7600 used for ipsec encryption.</P><P>I would like to catch the ipsec related trap but the cisco documentation is incomplete.</P><P></P><P>For instance let's consider the "<STRONG>cipSecTunnelStart</STRONG>" trap</P><P></P><P>On the cisco web site</P><P><A class="jive-link-external-small" href="http://tools.cisco.com/Support/SNMP/do/BrowseOID.do?objectInput=cipSecTunnelStart&amp;translate=Translate&amp;submitValue=SUBMIT&amp;submitClicked=true" target="_blank">http://tools.cisco.com/Support/SNMP/do/BrowseOID.do?objectInput=cipSecTunnelStart&amp;translate=Translate&amp;submitValue=SUBMIT&amp;submitClicked=true</A></P><P>it says it has two Components: <SPAN style="text-decoration: underline;">cipSecTunLifeTime</SPAN> &amp; <SPAN style="text-decoration: underline;">cipSecTunLifeSize </SPAN></P><P><BR />while if I run a "debug snmp packet" on the machine I have the following output:</P><P style="padding-left: 30px;"><SPAN style="font-family: courier new,courier;"> sysUpTime.0 = 371592487 <BR /> snmpTrapOID.0 = cipSecTunnelStart <BR /> cipSecTunLifeTime.7 = 3600 <BR /> cipSecTunLifeSize.7 = 4508392 <BR /> cipSecEndPtLocalType.7.1 = 1 <BR /> cipSecEndPtLocalAddr1.7.1 = 0C 11&nbsp; aa E6&nbsp;&nbsp;&nbsp; <BR /> cipSecEndPtLocalAddr2.7.1 = 0C 11&nbsp; aa E6&nbsp;&nbsp;&nbsp; <BR /> cipSecEndPtRemoteType.7.1 = 1 <BR /> cipSecEndPtRemoteAddr1.7.1 = 0C 02&nbsp; bb F2&nbsp;&nbsp;&nbsp; <BR /> cipSecEndPtRemoteAddr2.7.1 = 0C 02&nbsp; bb F2&nbsp;&nbsp;&nbsp; <BR /> cipSecEndPtLocalProtocol.7.1 = 47 <BR /> cipSecEndPtLocalPort.7.1 = 0</SPAN></P><P>which gives more useful informations for the tunnel identification.</P><P></P><P>I would like to know the real strucutre of other traps like <STRONG>cipSecEarlyTunTerm </STRONG>(<EM>"This notification is generated when an an IPsec Phase-2 Tunnel is terminated earily or before expected."</EM>)<STRONG> </STRONG>and <STRONG>cipSecProtocolFailure</STRONG> (<EM>"This notification is generated when the processing for an IPsec Phase-2 Tunnel experiences a protocol related error."</EM>)<STRONG> </STRONG>but I am not able to force their generation from the command line.</P><P></P><P>Do you know how to force their generation?</P><P>or</P><P>Do you know where can I find informations about the real trap returned value?</P><P></P><P>Thank you all!</P> Fri, 21 Feb 2020 12:07:40 GMT https://community.cisco.com/t5/network-security/cisco-ipsec-flow-monitor-mib/m-p/1556338#M922702 lemmocisco 2020-02-21T12:07:40Z Re: CISCO-IPSEC-FLOW-MONITOR-MIB https://community.cisco.com/t5/network-security/cisco-ipsec-flow-monitor-mib/m-p/1556339#M922704 <HTML><HEAD></HEAD><BODY><P>Hi, </P><P></P><P>As far as I know, <STRONG>cipSecEarlyTunTerm </STRONG><SPAN>and</SPAN><STRONG> </STRONG><STRONG>cipSecProtocolFailure</STRONG> traps are not sent in IOS today. Hope this helps.</P><P></P><P>Thanks,</P><P>Wen</P></BODY></HTML> Wed, 20 Oct 2010 14:38:17 GMT https://community.cisco.com/t5/network-security/cisco-ipsec-flow-monitor-mib/m-p/1556339#M922704 wzhang 2010-10-20T14:38:17Z Re: CISCO-IPSEC-FLOW-MONITOR-MIB https://community.cisco.com/t5/network-security/cisco-ipsec-flow-monitor-mib/m-p/1556340#M922705 <HTML><HEAD></HEAD><BODY><P>Hi ,</P><P></P><P>thank you for answering.</P><P></P><P>Do you know how I can check wheter they are implemented or not?</P><P>I tried the "<SPAN style="color: #333333; text-decoration: underline; ">show snmp mib</SPAN>" command but id doesn't even show up the "<STRONG>cipSecTunnelStart</STRONG>" mib</P><P></P><P>here is the output of all the lines brginning with cipsec</P><P></P><P></P><P style="padding-left: 30px;"><SPAN style="font-family: courier new,courier;">cipSecMibLevel<BR />cipSecGlobalActiveTunnels<BR />cipSecGlobalPreviousTunnels<BR />cipSecGlobalInOctets<BR />cipSecGlobalHcInOctets<BR />cipSecGlobalInOctWraps<BR />cipSecGlobalInDecompOctets<BR />cipSecGlobalHcInDecompOctets<BR />cipSecGlobalInDecompOctWraps<BR />cipSecGlobalInPkts<BR />cipSecGlobalInDrops<BR />cipSecGlobalInReplayDrops<BR />cipSecGlobalInAuths<BR />cipSecGlobalInAuthFails<BR />cipSecGlobalInDecrypts<BR />cipSecGlobalInDecryptFails<BR />cipSecGlobalOutOctets<BR />cipSecGlobalHcOutOctets<BR />cipSecGlobalOutOctWraps<BR />cipSecGlobalOutUncompOctets<BR />cipSecGlobalHcOutUncompOctets<BR />cipSecGlobalOutUncompOctWraps<BR />cipSecGlobalOutPkts<BR />cipSecGlobalOutDrops<BR />cipSecGlobalOutAuths<BR />cipSecGlobalOutAuthFails<BR />cipSecGlobalOutEncrypts<BR />cipSecGlobalOutEncryptFails<BR />cipSecGlobalProtocolUseFails<BR />cipSecGlobalNoSaFails<BR />cipSecGlobalSysCapFails<BR />cipSecTunIkeTunnelIndex<BR />cipSecTunIkeTunnelAlive<BR />cipSecTunLocalAddr<BR />cipSecTunRemoteAddr<BR />cipSecTunKeyType<BR />cipSecTunEncapMode<BR />cipSecTunLifeSize<BR />cipSecTunLifeTime<BR />cipSecTunActiveTime<BR />cipSecTunSaLifeSizeThreshold<BR />cipSecTunSaLifeTimeThreshold<BR />cipSecTunTotalRefreshes<BR />cipSecTunExpiredSaInstances<BR />cipSecTunCurrentSaInstances<BR />cipSecTunInSaDiffHellmanGrp<BR />cipSecTunInSaEncryptAlgo<BR />cipSecTunInSaAhAuthAlgo<BR />cipSecTunInSaEspAuthAlgo<BR />cipSecTunInSaDecompAlgo<BR />cipSecTunOutSaDiffHellmanGrp<BR />cipSecTunOutSaEncryptAlgo<BR />cipSecTunOutSaAhAuthAlgo<BR />cipSecTunOutSaEspAuthAlgo<BR />cipSecTunOutSaCompAlgo<BR />cipSecTunInOctets<BR />cipSecTunHcInOctets<BR />cipSecTunInOctWraps<BR />cipSecTunInDecompOctets<BR />cipSecTunHcInDecompOctets<BR />cipSecTunInDecompOctWraps<BR />cipSecTunInPkts<BR />cipSecTunInDropPkts<BR />cipSecTunInReplayDropPkts<BR />cipSecTunInAuths<BR />cipSecTunInAuthFails<BR />cipSecTunInDecrypts<BR />cipSecTunInDecryptFails<BR />cipSecTunOutOctets<BR />cipSecTunHcOutOctets<BR />cipSecTunOutOctWraps<BR />cipSecTunOutUncompOctets<BR />cipSecTunHcOutUncompOctets<BR />cipSecTunOutUncompOctWraps<BR />cipSecTunOutPkts<BR />cipSecTunOutDropPkts<BR />cipSecTunOutAuths<BR />cipSecTunOutAuthFails<BR />cipSecTunOutEncrypts<BR />cipSecTunOutEncryptFails<BR />cipSecTunStatus<BR />cipSecEndPtLocalName<BR />cipSecEndPtLocalType<BR />cipSecEndPtLocalAddr1<BR />cipSecEndPtLocalAddr2<BR />cipSecEndPtLocalProtocol<BR />cipSecEndPtLocalPort<BR />cipSecEndPtRemoteName<BR />cipSecEndPtRemoteType<BR />cipSecEndPtRemoteAddr1<BR />cipSecEndPtRemoteAddr2<BR />cipSecEndPtRemoteProtocol<BR />cipSecEndPtRemotePort<BR />cipSecSpiDirection<BR />cipSecSpiValue<BR />cipSecSpiProtocol<BR />cipSecSpiStatus<BR />cipSecHistTableSize<BR />cipSecHistCheckPoint<BR />cipSecTunHistTermReason<BR />cipSecTunHistActiveIndex<BR />cipSecTunHistIkeTunnelIndex<BR />cipSecTunHistLocalAddr<BR />cipSecTunHistRemoteAddr<BR />cipSecTunHistKeyType<BR />cipSecTunHistEncapMode<BR />cipSecTunHistLifeSize<BR />cipSecTunHistLifeTime<BR />cipSecTunHistStartTime<BR />cipSecTunHistActiveTime<BR />cipSecTunHistTotalRefreshes<BR />cipSecTunHistTotalSas<BR />cipSecTunHistInSaDiffHellmanGrp<BR />cipSecTunHistInSaEncryptAlgo<BR />cipSecTunHistInSaAhAuthAlgo<BR />cipSecTunHistInSaEspAuthAlgo<BR />cipSecTunHistInSaDecompAlgo<BR />cipSecTunHistOutSaDiffHellmanGrp<BR />cipSecTunHistOutSaEncryptAlgo<BR />cipSecTunHistOutSaAhAuthAlgo<BR />cipSecTunHistOutSaEspAuthAlgo<BR />cipSecTunHistOutSaCompAlgo<BR />cipSecTunHistInOctets<BR />cipSecTunHistHcInOctets<BR />cipSecTunHistInOctWraps<BR />cipSecTunHistInDecompOctets<BR />cipSecTunHistHcInDecompOctets<BR />cipSecTunHistInDecompOctWraps<BR />cipSecTunHistInPkts<BR />cipSecTunHistInDropPkts<BR />cipSecTunHistInReplayDropPkts<BR />cipSecTunHistInAuths<BR />cipSecTunHistInAuthFails<BR />cipSecTunHistInDecrypts<BR />cipSecTunHistInDecryptFails<BR />cipSecTunHistOutOctets<BR />cipSecTunHistHcOutOctets<BR />cipSecTunHistOutOctWraps<BR />cipSecTunHistOutUncompOctets<BR />cipSecTunHistHcOutUncompOctets<BR />cipSecTunHistOutUncompOctWraps<BR />cipSecTunHistOutPkts<BR />cipSecTunHistOutDropPkts<BR />cipSecTunHistOutAuths<BR />cipSecTunHistOutAuthFails<BR />cipSecTunHistOutEncrypts<BR />cipSecTunHistOutEncryptFails<BR />cipSecEndPtHistTunIndex<BR />cipSecEndPtHistActiveIndex<BR />cipSecEndPtHistLocalName<BR />cipSecEndPtHistLocalType<BR />cipSecEndPtHistLocalAddr1<BR />cipSecEndPtHistLocalAddr2<BR />cipSecEndPtHistLocalProtocol<BR />cipSecEndPtHistLocalPort<BR />cipSecEndPtHistRemoteName<BR />cipSecEndPtHistRemoteType<BR />cipSecEndPtHistRemoteAddr1<BR />cipSecEndPtHistRemoteAddr2<BR />cipSecEndPtHistRemoteProtocol<BR />cipSecEndPtHistRemotePort<BR />cipSecFailTableSize<BR />cipSecFailReason<BR />cipSecFailTime<BR />cipSecFailTunnelIndex<BR />cipSecFailSaSpi<BR />cipSecFailPktSrcAddr<BR />cipSecFailPktDstAddr<BR />cipSecTrapCntlIkeTunnelStart<BR />cipSecTrapCntlIkeTunnelStop<BR />cipSecTrapCntlIkeSysFailure<BR />cipSecTrapCntlIkeCertCrlFailure<BR />cipSecTrapCntlIkeProtocolFail<BR />cipSecTrapCntlIkeNoSa<BR />cipSecTrapCntlIpSecTunnelStart<BR />cipSecTrapCntlIpSecTunnelStop<BR />cipSecTrapCntlIpSecSysFailure<BR />cipSecTrapCntlIpSecSetUpFailure<BR />cipSecTrapCntlIpSecEarlyTunTerm<BR />cipSecTrapCntlIpSecProtocolFail<BR />cipSecTrapCntlIpSecNoSa</SPAN></P></BODY></HTML> Tue, 26 Oct 2010 11:03:01 GMT https://community.cisco.com/t5/network-security/cisco-ipsec-flow-monitor-mib/m-p/1556340#M922705 lemmocisco 2010-10-26T11:03:01Z Re: CISCO-IPSEC-FLOW-MONITOR-MIB https://community.cisco.com/t5/network-security/cisco-ipsec-flow-monitor-mib/m-p/1556341#M922707 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>I'm not sure if there's a way for you to check. I was one of the reviewers when the IPSec MIB was initially implemented, and I remember those traps were defined but not implemented at the time. </P><P></P><P>Thanks,</P><P>Wen</P></BODY></HTML> Wed, 27 Oct 2010 13:56:36 GMT https://community.cisco.com/t5/network-security/cisco-ipsec-flow-monitor-mib/m-p/1556341#M922707 wzhang 2010-10-27T13:56:36Z