Hi,
I have a 7600 used for ipsec encryption.
I would like to catch the ipsec related trap but the cisco documentation is incomplete.
For instance let's consider the "cipSecTunnelStart" trap
On the cisco web site
http://tools.cisco.com/Support/SNMP/do/BrowseOID.do?objectInput=cipSecTunnelStart&translate=Translate&submitValue=SUBMIT&submitClicked=true
it says it has two Components: cipSecTunLifeTime & cipSecTunLifeSize
while if I run a "debug snmp packet" on the machine I have the following output:
sysUpTime.0 = 371592487
snmpTrapOID.0 = cipSecTunnelStart
cipSecTunLifeTime.7 = 3600
cipSecTunLifeSize.7 = 4508392
cipSecEndPtLocalType.7.1 = 1
cipSecEndPtLocalAddr1.7.1 = 0C 11 aa E6
cipSecEndPtLocalAddr2.7.1 = 0C 11 aa E6
cipSecEndPtRemoteType.7.1 = 1
cipSecEndPtRemoteAddr1.7.1 = 0C 02 bb F2
cipSecEndPtRemoteAddr2.7.1 = 0C 02 bb F2
cipSecEndPtLocalProtocol.7.1 = 47
cipSecEndPtLocalPort.7.1 = 0
which gives more useful informations for the tunnel identification.
I would like to know the real strucutre of other traps like cipSecEarlyTunTerm ("This notification is generated when an an IPsec Phase-2 Tunnel is terminated earily or before expected.") and cipSecProtocolFailure ("This notification is generated when the processing for an IPsec Phase-2 Tunnel experiences a protocol related error.") but I am not able to force their generation from the command line.
Do you know how to force their generation?
or
Do you know where can I find informations about the real trap returned value?
Thank you all!
