OID reference

ipsecTunnelAdminStatus

1.3.6.1.4.1.838.3.14.1.4.1.3

Description

Full description and source information

Identification

Identifier and names

Parent: 1.3.6.1.4.1.838.3.14.1.4.1 (ipsecTunnelEntry)
Node code: 3
Node name: ipsecTunnelAdminStatus
Category: SNMP management object
Numeric OID: 1.3.6.1.4.1.838.3.14.1.4.1.3
URN notation: urn:oid:1.3.6.1.4.1.838.3.14.1.4.1.3
Type: OBJECT-TYPE

ASN.1, OID-IRI and named path variants

ASN.1 notation

{1 3 6 1 4 1 838 3 14 1 4 1 3}

{iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) xedia(838) xediaMibs(3) xediaIpsecMIB(14) ipsecObjects(1) ipsecTunnelTable(4) ipsecTunnelEntry(1) ipsecTunnelAdminStatus(3)}
{iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprises(1) xedia(838) xediaMibs(3) xediaIpsecMIB(14) ipsecObjects(1) ipsecTunnelTable(4) ipsecTunnelEntry(1) ipsecTunnelAdminStatus(3)}
{iso(1) identified-organization(3) dod(6) internet(1) private(4) ldap-enterprise(1) xedia(838) xediaMibs(3) xediaIpsecMIB(14) ipsecObjects(1) ipsecTunnelTable(4) ipsecTunnelEntry(1) ipsecTunnelAdminStatus(3)}
{iso(1) identified-organization(3) dod(6) internet(1) private(4) vendor-objects(1) xedia(838) xediaMibs(3) xediaIpsecMIB(14) ipsecObjects(1) ipsecTunnelTable(4) ipsecTunnelEntry(1) ipsecTunnelAdminStatus(3)}
{iso(1) org(3) dod(6) internet(1) private(4) enterprise(1) xedia(838) xediaMibs(3) xediaIpsecMIB(14) ipsecObjects(1) ipsecTunnelTable(4) ipsecTunnelEntry(1) ipsecTunnelAdminStatus(3)}
{iso(1) org(3) dod(6) internet(1) private(4) enterprises(1) xedia(838) xediaMibs(3) xediaIpsecMIB(14) ipsecObjects(1) ipsecTunnelTable(4) ipsecTunnelEntry(1) ipsecTunnelAdminStatus(3)}
{iso(1) org(3) dod(6) internet(1) private(4) ldap-enterprise(1) xedia(838) xediaMibs(3) xediaIpsecMIB(14) ipsecObjects(1) ipsecTunnelTable(4) ipsecTunnelEntry(1) ipsecTunnelAdminStatus(3)}
{iso(1) org(3) dod(6) internet(1) private(4) vendor-objects(1) xedia(838) xediaMibs(3) xediaIpsecMIB(14) ipsecObjects(1) ipsecTunnelTable(4) ipsecTunnelEntry(1) ipsecTunnelAdminStatus(3)}
{iso(1) iso-identified-organization(3) dod(6) internet(1) private(4) enterprise(1) xedia(838) xediaMibs(3) xediaIpsecMIB(14) ipsecObjects(1) ipsecTunnelTable(4) ipsecTunnelEntry(1) ipsecTunnelAdminStatus(3)}
{iso(1) iso-identified-organization(3) dod(6) internet(1) private(4) enterprises(1) xedia(838) xediaMibs(3) xediaIpsecMIB(14) ipsecObjects(1) ipsecTunnelTable(4) ipsecTunnelEntry(1) ipsecTunnelAdminStatus(3)}
{iso(1) iso-identified-organization(3) dod(6) internet(1) private(4) ldap-enterprise(1) xedia(838) xediaMibs(3) xediaIpsecMIB(14) ipsecObjects(1) ipsecTunnelTable(4) ipsecTunnelEntry(1) ipsecTunnelAdminStatus(3)}
{iso(1) iso-identified-organization(3) dod(6) internet(1) private(4) vendor-objects(1) xedia(838) xediaMibs(3) xediaIpsecMIB(14) ipsecObjects(1) ipsecTunnelTable(4) ipsecTunnelEntry(1) ipsecTunnelAdminStatus(3)}
{iso(1) iso-organization(3) dod(6) internet(1) private(4) enterprise(1) xedia(838) xediaMibs(3) xediaIpsecMIB(14) ipsecObjects(1) ipsecTunnelTable(4) ipsecTunnelEntry(1) ipsecTunnelAdminStatus(3)}
{iso(1) iso-organization(3) dod(6) internet(1) private(4) enterprises(1) xedia(838) xediaMibs(3) xediaIpsecMIB(14) ipsecObjects(1) ipsecTunnelTable(4) ipsecTunnelEntry(1) ipsecTunnelAdminStatus(3)}
{iso(1) iso-organization(3) dod(6) internet(1) private(4) ldap-enterprise(1) xedia(838) xediaMibs(3) xediaIpsecMIB(14) ipsecObjects(1) ipsecTunnelTable(4) ipsecTunnelEntry(1) ipsecTunnelAdminStatus(3)}
{iso(1) iso-organization(3) dod(6) internet(1) private(4) vendor-objects(1) xedia(838) xediaMibs(3) xediaIpsecMIB(14) ipsecObjects(1) ipsecTunnelTable(4) ipsecTunnelEntry(1) ipsecTunnelAdminStatus(3)}

OID-IRI notation

/1/3/6/1/4/1/838/3/14/1/4/1/3
/ISO/Identified-Organization/6/1/4/1/838/3/14/1/4/1/3
/ISO/3/6/1/4/1/838/3/14/1/4/1/3

Named path variants

/iso/identified-organization/dod/internet/private/enterprise/xedia/xediaMibs/xediaIpsecMIB/ipsecObjects/ipsecTunnelTable/ipsecTunnelEntry/ipsecTunnelAdminStatus
/iso/identified-organization/dod/internet/private/enterprises/xedia/xediaMibs/xediaIpsecMIB/ipsecObjects/ipsecTunnelTable/ipsecTunnelEntry/ipsecTunnelAdminStatus
/iso/identified-organization/dod/internet/private/ldap-enterprise/xedia/xediaMibs/xediaIpsecMIB/ipsecObjects/ipsecTunnelTable/ipsecTunnelEntry/ipsecTunnelAdminStatus
/iso/identified-organization/dod/internet/private/vendor-objects/xedia/xediaMibs/xediaIpsecMIB/ipsecObjects/ipsecTunnelTable/ipsecTunnelEntry/ipsecTunnelAdminStatus
/iso/org/dod/internet/private/enterprise/xedia/xediaMibs/xediaIpsecMIB/ipsecObjects/ipsecTunnelTable/ipsecTunnelEntry/ipsecTunnelAdminStatus
/iso/org/dod/internet/private/enterprises/xedia/xediaMibs/xediaIpsecMIB/ipsecObjects/ipsecTunnelTable/ipsecTunnelEntry/ipsecTunnelAdminStatus
/iso/org/dod/internet/private/ldap-enterprise/xedia/xediaMibs/xediaIpsecMIB/ipsecObjects/ipsecTunnelTable/ipsecTunnelEntry/ipsecTunnelAdminStatus
/iso/org/dod/internet/private/vendor-objects/xedia/xediaMibs/xediaIpsecMIB/ipsecObjects/ipsecTunnelTable/ipsecTunnelEntry/ipsecTunnelAdminStatus
/iso/iso-identified-organization/dod/internet/private/enterprise/xedia/xediaMibs/xediaIpsecMIB/ipsecObjects/ipsecTunnelTable/ipsecTunnelEntry/ipsecTunnelAdminStatus
/iso/iso-identified-organization/dod/internet/private/enterprises/xedia/xediaMibs/xediaIpsecMIB/ipsecObjects/ipsecTunnelTable/ipsecTunnelEntry/ipsecTunnelAdminStatus
/iso/iso-identified-organization/dod/internet/private/ldap-enterprise/xedia/xediaMibs/xediaIpsecMIB/ipsecObjects/ipsecTunnelTable/ipsecTunnelEntry/ipsecTunnelAdminStatus
/iso/iso-identified-organization/dod/internet/private/vendor-objects/xedia/xediaMibs/xediaIpsecMIB/ipsecObjects/ipsecTunnelTable/ipsecTunnelEntry/ipsecTunnelAdminStatus
/iso/iso-organization/dod/internet/private/enterprise/xedia/xediaMibs/xediaIpsecMIB/ipsecObjects/ipsecTunnelTable/ipsecTunnelEntry/ipsecTunnelAdminStatus
/iso/iso-organization/dod/internet/private/enterprises/xedia/xediaMibs/xediaIpsecMIB/ipsecObjects/ipsecTunnelTable/ipsecTunnelEntry/ipsecTunnelAdminStatus
/iso/iso-organization/dod/internet/private/ldap-enterprise/xedia/xediaMibs/xediaIpsecMIB/ipsecObjects/ipsecTunnelTable/ipsecTunnelEntry/ipsecTunnelAdminStatus
/iso/iso-organization/dod/internet/private/vendor-objects/xedia/xediaMibs/xediaIpsecMIB/ipsecObjects/ipsecTunnelTable/ipsecTunnelEntry/ipsecTunnelAdminStatus

SNMP properties

Value type: IpsecConnectionMode, INTEGER
Maximum access defined by MIB: read-create
Status in MIB: current
Default value: up

Definitions may combine these properties differently.

Compare 2 source variants

Variant 1 — MIBdepot

Value type: IpsecConnectionMode
Maximum access defined by MIB: read-create
Status in MIB: current
Default value: up

Variant 2 — Circitor

Value type: INTEGER
Maximum access defined by MIB: read-create
Status in MIB: current
Default value: up

Enumerated values

Numbers refer to source variants above. Each value is shown only for variants that define it.

Value	Name	Source variants
1	up	2
2	down	2

Properties come from available MIB definitions. Actual device support and access can differ. See source records below for original files and qualifications.

Meaning

Descriptions

2 unique

Identical descriptions are grouped. Different wording and device-specific notes are retained.

Description 1

This object is the desired state of the tunnel and is
similar to interface administrative state. The default is
'up(1)'. When the ipsecTunnelAdminStatus is set to 'up(1)' for
a dialin parent tunnel, it enables remote clients in this
group to connect to the VPN gateway. When the
ipsecTunnelAdminStatus is set to 'down(2)' for a dialin parent
tunnel, it disables remote clients in this group from
connecting to the VPN gateway. When tunnelAdminStatus is set
to up for siteToSiteStatic, it enables use of statically
configured SAs. Setting it to down, effectively disables use
of statically configured SAs. When tunnelAdminStatus is set
to up for siteToSiteDynamic, it enables the VPN gateway to
start establishments of SAs via ISAKMP. If the ISAKMP failed
to setup SA (for example when the peer is not ready) it will
periodically retry SA establishment indefinetly until it
succeeds. Setting it to down, disables initiation of SAs and
it also disables responding to remote ISAKMP initiation
requests.

Sources for this description

Circitor

Parsed from XEDIA-IPSEC-MIB.mib · XEDIA-IPSEC-MIB

Source file: Download XEDIA-IPSEC-MIB.mib

Source data warning: The file uses BIT STRING rather than the SMI BITS construct. The published spelling and declared bit positions are retained; no wire type or unspecified bit positions are inferred.

Browse all files from Circitor

Description 2

This object is the desired state of the tunnel. The default
is 'up(1)'.

When the ipsecTunnelAdminStatus is set to 'up(1)' for a clientGroup
tunnel, it enables remote clients in this group to connect to the
VPN gateway. When set to 'down(2)', it prevents remote clients
within the clientGroup from connecting to the VPN gateway.

After a successful client connection, a client tunnel is created
within the clientGroup tunnel. If the ipsecTunnelAdminStatus of the
client tunnel is set to 'down(2)', the connection is broken and the
client tunnel is removed.

When tunnelAdminStatus is set to 'up(1)' for siteToSiteStatic,
it enables use of statically configured SAs. Setting it to
'down(2) effectively disables use of statically configured SAs.

When tunnelAdminStatus is set to 'up(1)' for siteToSiteDynamic,
it enables the VPN gateway to start establishments of SAs via IKE.
If IKE failed to setup SA (for example when the peer is not ready)
it will periodically retry SA establishment indefinetly until it
succeeds. Setting it to 'down(2)', disables initiation of SAs
and it also disables responding to remote IKE initiation requests.

Sources for this description

MIBdepot

Source file: Download ipsec.mi2.txt

Browse all files from MIBdepot

Historical records

Additional source information

Information from OID Repository

Vendor: Lucent
Module: XEDIA-IPSEC-MIB (ipsec.mi2)
Type: TABULAR
Access: read-create
Syntax: IpsecConnectionMode

Automatically extracted from www.mibdepot.com

Information from MIBdepot

ipsecTunnelAdminStatus OBJECT-TYPE
    SYNTAX      IpsecConnectionMode
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
        "This object is the desired state of the tunnel. The default
        is 'up(1)'. 

        When the ipsecTunnelAdminStatus is set to 'up(1)' for a clientGroup 
        tunnel, it enables remote clients in this group to connect to the 
        VPN gateway. When set to 'down(2)', it prevents remote clients 
        within the clientGroup from connecting to the VPN gateway.  

        After a successful client connection, a client tunnel is created
        within the clientGroup tunnel. If the ipsecTunnelAdminStatus of the
        client tunnel is set to 'down(2)', the connection is broken and the
        client tunnel is removed.

        When tunnelAdminStatus is set to 'up(1)' for siteToSiteStatic, 
        it enables use of statically configured SAs. Setting it to 
        'down(2) effectively disables use of statically configured SAs.  

        When tunnelAdminStatus is set to 'up(1)' for siteToSiteDynamic, 
        it enables the VPN gateway to start establishments of SAs via IKE. 
        If IKE failed to setup SA (for example when the peer is not ready) 
        it will periodically retry SA establishment indefinetly until it
        succeeds.  Setting it to 'down(2)', disables initiation of SAs 
        and it also disables responding to remote IKE initiation requests."
    DEFVAL      { up }
    ::= { ipsecTunnelEntry 3 }

Information from Circitor

ipsecTunnelAdminStatus OBJECT-TYPE
    SYNTAX      INTEGER {
                    up(1),
                    down(2)
                }
    MAX-ACCESS  read-create
    STATUS      current
    DESCRIPTION
        "This object is the desired state of the tunnel and is
        similar to interface administrative state. The default is
        'up(1)'. When the ipsecTunnelAdminStatus is set to 'up(1)' for
        a dialin parent tunnel, it enables remote clients in this
        group to connect to the VPN gateway. When the
        ipsecTunnelAdminStatus is set to 'down(2)' for a dialin parent
        tunnel, it disables remote clients in this group from
        connecting to the VPN gateway.  When tunnelAdminStatus is set
        to up for siteToSiteStatic, it enables use of statically
        configured SAs. Setting it to down, effectively disables use
        of statically configured SAs.  When tunnelAdminStatus is set
        to up for siteToSiteDynamic, it enables the VPN gateway to
        start establishments of SAs via ISAKMP. If the ISAKMP failed
        to setup SA (for example when the peer is not ready) it will
        periodically retry SA establishment indefinetly until it
        succeeds.  Setting it to down, disables initiation of SAs and
        it also disables responding to remote ISAKMP initiation
        requests."
    DEFVAL      { up }
    ::= { ipsecTunnelEntry 3 }

Registration

Registration authorities

First Registration Authority (inferred from ancestor 1.3.6.1.4.1.838)

Kincaid Colin

Siblings (30)

OID	Name	Description
1.3.6.1.4.1.838.3.14.1.4.1.1	ipsecTunnelName	Name of the tunnel. For example, Boston-to-LA (site-to-site), XediaEnginnering (remote client dial-in group), etc. The name must…
1.3.6.1.4.1.838.3.14.1.4.1.2	ipsecTunnelType	The tunnel type. When 'dialinGroup(1)', 'dialinClient(2)' or 'siteToSiteDynamic(4)' is specified, ISAKMP is responsible for SA cr…
1.3.6.1.4.1.838.3.14.1.4.1.4	ipsecTunnelOperStatus	This is the operational state (the actual state of the tunnel. This object is similar to interface operational state.
1.3.6.1.4.1.838.3.14.1.4.1.5	ipsecTunnelLastChange	The value of sysUpTime the last time the ipsecTunnelOperStatus changed. On re-initialization of the system, this object contains …
1.3.6.1.4.1.838.3.14.1.4.1.6	ipsecTunnelLocalAddress	The local address and mask define the local trusted subnet (or single host if mask is all 1's) for the tunnel. The local trusted …
1.3.6.1.4.1.838.3.14.1.4.1.7	ipsecTunnelLocalAddressMask	The local trusted address mask of the tunnel. Refer to ipsecTunnelLocalAddress.
1.3.6.1.4.1.838.3.14.1.4.1.8	ipsecTunnelRemoteAddress	The remote address and mask define the remote trusted subnet (or single host if mask is all 1's) for the tunnel. The remote trust…
1.3.6.1.4.1.838.3.14.1.4.1.9	ipsecTunnelRemoteAddressMask	The remote trusted address mask of the tunnel. Refer to ipsecTunnelRemoteAddress. For dialin client tunnels, the ipsecTunnelRemot…
1.3.6.1.4.1.838.3.14.1.4.1.10	ipsecTunnelRemoteGateway	The IP address of the remote security gateway. For 'siteToSite' tunnels, this object is a copy of the associated ipsecIfRemoteGat…
1.3.6.1.4.1.838.3.14.1.4.1.11	ipsecTunnelSecurityProfile	Defines which Security Profile to use for this tunnel. This is a name of Security Profile entry in the Security Profile table.
1.3.6.1.4.1.838.3.14.1.4.1.12	ipsecTunnelIkeAuthentMethod	Defines authentication method which was used to establish the current IKE tunnel connection. Not applicable for static tunnels. N…
1.3.6.1.4.1.838.3.14.1.4.1.13	ipsecTunnelClientAddressAssign	Address assignment method is configured for dialin group tunnels and determines how clients within the group will be assigned an …
1.3.6.1.4.1.838.3.14.1.4.1.14	ipsecTunnelCurSAs	The current number of security associations (SAs) for this tunnel. Typically there will be 2 SAs (1 inbound and 1 outbound) for a…
1.3.6.1.4.1.838.3.14.1.4.1.15	ipsecTunnelTotSAs	The total number of security associations (SAs) created for this tunnel since the tunnel was configured. For dynamic tunnels, thi…
1.3.6.1.4.1.838.3.14.1.4.1.16	ipsecTunnelInPkts	The total number of packets received on the tunnel since it was created.
1.3.6.1.4.1.838.3.14.1.4.1.17	ipsecTunnelInOctets	The total number of bytes received on the tunnel since it was created.
1.3.6.1.4.1.838.3.14.1.4.1.18	ipsecTunnelInDiscardsQueFull	The total number of packets received on the tunnel which had to be dropped because of a full queue.
1.3.6.1.4.1.838.3.14.1.4.1.19	ipsecTunnelInErrsInvalidMac	The total number of packets received on the tunnel with invalid authentication data.
1.3.6.1.4.1.838.3.14.1.4.1.20	ipsecTunnelInErrsInvalidSeq	The total number of packets received on the tunnel with an invalid sequence number.
1.3.6.1.4.1.838.3.14.1.4.1.21	ipsecTunnelInErrsInvalidFormat	The total number of packets received on the tunnel with a valid sequence number and authentication data (if applicable), but an i…
1.3.6.1.4.1.838.3.14.1.4.1.22	ipsecTunnelOutPkts	The total number of packets transmitted out the tunnel since it was created.
1.3.6.1.4.1.838.3.14.1.4.1.23	ipsecTunnelOutOctets	The total number of bytes transmitted out the tunnel since it was created.
1.3.6.1.4.1.838.3.14.1.4.1.24	ipsecTunnelOutDiscardsStateNotUp	The total number of packets that could not be sent out the tunnel because the tunnel state was not up.
1.3.6.1.4.1.838.3.14.1.4.1.25	ipsecTunnelOutDiscardsNoSA	The total number of packets that could not be sent out the tunnel because there was no security association (SA).
1.3.6.1.4.1.838.3.14.1.4.1.26	ipsecTunnelOutDiscardsQueFull	The total number of packets that could not be sent out the tunnel because the transform engine's queue was full.
1.3.6.1.4.1.838.3.14.1.4.1.27	ipsecTunnelRowStatus	This object allows entries to be created and deleted in this table.
1.3.6.1.4.1.838.3.14.1.4.1.28	ipsecTunnelInCompressedPkts	The total number of compressed packets received on the tunnel since it was created.
1.3.6.1.4.1.838.3.14.1.4.1.29	ipsecTunnelInCompressedOctets	The total number of bytes after decompression in compressed packets received on the tunnel since it was created.
1.3.6.1.4.1.838.3.14.1.4.1.30	ipsecTunnelOutCompressedPkts	The total number of compressed packets transmitted out the tunnel since it was created.
1.3.6.1.4.1.838.3.14.1.4.1.31	ipsecTunnelOutCompressedOctets	The total number of bytes prior to compression in compressed packets transmitted out the tunnel since it was created.