mirror of
https://github.com/librenms/librenms.git
synced 2024-09-21 18:38:25 +00:00
11147d3bbf
* Extract DiscoveryItem and move some things to better places. Extract model class Fix up model construction. I have problem with construction... Makeshift model working. Switch constructor to factory. discover() and create() Support legacy discovery. Remove uneeded custom pollers Remove netonix custom detection as we try ucd on all os now. Add a few yaml procs. Fix a couple things. More processor discovery conversions Move Calix e7 to standard hrProcessorLoad, but it doesn't fully implement the HR-MIB, move things around to make it work. Add a few yaml procs. Fix a couple things. Correct some stupid mib stuff. Move more, drop php 5.3 Add netscaler which uses string indexes. Port fiberhome to yaml and use skip_values More conversions. BroadcomProcessorUsage Trait Serveriron and Ironware share some mibs. Create a common abstract os for them. Add yaml support for mib specification in each data entry Make legacy discover_processor() set 0 for hrDeviceIndex Untangle Dell switch OS processors Use use shared OS for groups if they don't have a specific group. fix silly mib mistake Make index optional Move HR and UCD to Traits and out of Processor. * forgot to update the fortiswitch index * Make sgos and avaya-ers match the old index. * fix comware test data * fix merge errors * fix dsm and remove pointless empty modules * file not found exception is in the wrong place. * Updated processor development docs
538 lines
14 KiB
Plaintext
538 lines
14 KiB
Plaintext
-- This module defines enterprise MIBs for VPN tunnel monitoring
|
|
--
|
|
-- Copyright (c) 1999-2004, Juniper Networks, Inc.
|
|
-- All rights reserved.
|
|
|
|
NETSCREEN-VPN-MON-MIB DEFINITIONS ::= BEGIN
|
|
|
|
IMPORTS
|
|
netscreenVpn, netscreenVpnMibModule
|
|
FROM NETSCREEN-SMI
|
|
Counter32, Integer32, IpAddress, MODULE-IDENTITY, OBJECT-TYPE,
|
|
TimeTicks
|
|
FROM SNMPv2-SMI
|
|
DisplayString
|
|
FROM SNMPv2-TC
|
|
;
|
|
|
|
netscreenVpnMonMibModule MODULE-IDENTITY
|
|
LAST-UPDATED "200405032022Z" -- May 03, 2004
|
|
ORGANIZATION
|
|
"Juniper Networks, Inc."
|
|
CONTACT-INFO
|
|
"Customer Support
|
|
|
|
1194 North Mathilda Avenue
|
|
Sunnyvale, California 94089-1206
|
|
USA
|
|
|
|
Tel: 1-800-638-8296
|
|
E-mail: customerservice@juniper.net
|
|
HTTP://www.juniper.net"
|
|
DESCRIPTION
|
|
"This module defines the object that are used to monitor VPN
|
|
tunnels"
|
|
REVISION "200405030000Z" -- May 03, 2004
|
|
DESCRIPTION
|
|
"Modified copyright and contact information"
|
|
REVISION "200403030000Z" -- March 03, 2004
|
|
DESCRIPTION
|
|
"Converted to SMIv2 by Longview Software"
|
|
REVISION "200311130000Z" -- November 13, 2003
|
|
DESCRIPTION
|
|
"Correct spelling mistake"
|
|
REVISION "200109280000Z" -- September 28, 2001
|
|
DESCRIPTION
|
|
"no comment"
|
|
REVISION "200008270000Z" -- August 27, 2000
|
|
DESCRIPTION
|
|
"Creation Date"
|
|
::= { netscreenVpnMibModule 1 }
|
|
|
|
NsVpnMonEntry ::= SEQUENCE
|
|
{
|
|
nsVpnMonIndex Integer32,
|
|
nsVpnMonInPlyId Integer32,
|
|
nsVpnMonOutPlyId Integer32,
|
|
nsVpnMonVpnName DisplayString,
|
|
nsVpnMonVsysName DisplayString,
|
|
nsVpnMonTunnelType INTEGER,
|
|
nsVpnMonEspEncAlg INTEGER,
|
|
nsVpnMonEspAuthAlg INTEGER,
|
|
nsVpnMonAhAlg INTEGER,
|
|
nsVpnMonKeyType INTEGER,
|
|
nsVpnMonP1Auth INTEGER,
|
|
nsVpnMonVpnType INTEGER,
|
|
nsVpnMonRmtGwIp IpAddress,
|
|
nsVpnMonRmtGwId DisplayString,
|
|
nsVpnMonMyGwIp IpAddress,
|
|
nsVpnMonMyGwId DisplayString,
|
|
nsVpnMonOutSpi Integer32,
|
|
nsVpnMonInSpi Integer32,
|
|
nsVpnMonMonState INTEGER,
|
|
nsVpnMonTunnelState INTEGER,
|
|
nsVpnMonP1State INTEGER,
|
|
nsVpnMonP1LifeTime Integer32,
|
|
nsVpnMonP2State INTEGER,
|
|
nsVpnMonP2LifeTime Integer32,
|
|
nsVpnMonP2LifeBytes Integer32,
|
|
nsVpnMonDelayAvg Integer32,
|
|
nsVpnMonDelayLast Integer32,
|
|
nsVpnMonAvail Integer32,
|
|
nsVpnMonSaId Integer32,
|
|
nsVpnMonGroupId Integer32,
|
|
nsVpnMonUsrId Integer32,
|
|
nsVpnMonStartSessRequestTime TimeTicks,
|
|
nsVpnMonStartSessEstTime TimeTicks,
|
|
nsVpnMonEndSessTime TimeTicks,
|
|
nsVpnMonBytesIn Counter32,
|
|
nsVpnMonBytesOut Counter32,
|
|
nsVpnMonPacketsIn Counter32,
|
|
nsVpnMonPacketsOut Counter32,
|
|
nsVpnMonIfIndex Integer32,
|
|
nsVpnMonUpdateTime TimeTicks,
|
|
nsVpnMonDN DisplayString,
|
|
nsVpnMonIfInfo Integer32
|
|
}
|
|
|
|
netscreenVpnMon OBJECT IDENTIFIER ::= { netscreenVpn 1 }
|
|
|
|
nsVpnMonTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF NsVpnMonEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A list of active VPN tunnel entries."
|
|
::= { netscreenVpnMon 1 }
|
|
|
|
nsVpnMonEntry OBJECT-TYPE
|
|
SYNTAX NsVpnMonEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A VPN tunnel entry containing attributes for both IKE Phase 1
|
|
and Phase 2 as well as associated policy"
|
|
INDEX
|
|
{ nsVpnMonIndex }
|
|
::= { nsVpnMonTable 1 }
|
|
|
|
nsVpnMonIndex OBJECT-TYPE
|
|
SYNTAX Integer32 (0..2147483647)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A unique value for each active VPN tunnel. Its value ranges
|
|
between 1 and 65535 and may not be contiguous. Due to the
|
|
dynamic nature of active VPN tunnels, the index has no other
|
|
meaning but a pure index"
|
|
::= { nsVpnMonEntry 1 }
|
|
|
|
nsVpnMonInPlyId OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The incoming policy ID for which this tunnel is created for.
|
|
-1 means no policy associates with this SA."
|
|
::= { nsVpnMonEntry 2 }
|
|
|
|
nsVpnMonOutPlyId OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The outgoing policy ID for which this tunnel is created for.
|
|
-1 means no policy associates with this SA."
|
|
::= { nsVpnMonEntry 3 }
|
|
|
|
nsVpnMonVpnName OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..32))
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A textual string contains information about the VPN entity
|
|
from which this tunnel was derived."
|
|
::= { nsVpnMonEntry 4 }
|
|
|
|
nsVpnMonVsysName OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..32))
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A textual string contains the Virtual system to which this
|
|
tunnel belongs."
|
|
::= { nsVpnMonEntry 5 }
|
|
|
|
nsVpnMonTunnelType OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
reserved(0),
|
|
proto-isakmp(1),
|
|
proto-ipsec-ah(2),
|
|
proto-ipsec-esp(3),
|
|
proto-ipcomp(4)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Protocol type used for the tunnel"
|
|
::= { nsVpnMonEntry 6 }
|
|
|
|
nsVpnMonEspEncAlg OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
reserved(0),
|
|
esp-des-iv64(1),
|
|
esp-des(2),
|
|
esp-3des(3),
|
|
esp-rc5(4),
|
|
esp-idea(5),
|
|
esp-cast(6),
|
|
esp-blowfish(7),
|
|
esp-3idea(8),
|
|
esp-des-iv32(9),
|
|
esp-rc4(10),
|
|
esp-null(11),
|
|
esp-aes(12),
|
|
esp-aes192(20),
|
|
esp-aes256(21)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"a value which identifies a particular algorithm to be used to
|
|
provide secrecy protection for ESP."
|
|
::= { nsVpnMonEntry 7 }
|
|
|
|
nsVpnMonEspAuthAlg OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
reserved(0),
|
|
hmac-md5(1),
|
|
hmac-sha(2),
|
|
des-mac(3),
|
|
ipdk(4)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The ESP Authentication Algorithm used in the IPsec."
|
|
::= { nsVpnMonEntry 8 }
|
|
|
|
nsVpnMonAhAlg OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
reserved(0),
|
|
ah-md5(2),
|
|
ah-sha(3),
|
|
ah-des(4)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"a value which identifies a particular algorithm to be used to
|
|
provide integrity protection for AH."
|
|
::= { nsVpnMonEntry 9 }
|
|
|
|
nsVpnMonKeyType OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
manual(0),
|
|
auto-ike(1)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"a value which identifies a key exchange protocol to be used
|
|
for the negotiation"
|
|
::= { nsVpnMonEntry 10 }
|
|
|
|
nsVpnMonP1Auth OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
unused(0),
|
|
preshared-key(1),
|
|
dss-Signature(2),
|
|
rsa-Signature(3),
|
|
rsa-Encryption1(4),
|
|
rsa-Encryption2(5)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"a value which identifies Phase 1 authentication method"
|
|
::= { nsVpnMonEntry 11 }
|
|
|
|
nsVpnMonVpnType OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
reserved(0),
|
|
dialup(1),
|
|
site-to-site(2)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The type of this VPN tunnel, either a dialup or site-to-site"
|
|
::= { nsVpnMonEntry 12 }
|
|
|
|
nsVpnMonRmtGwIp OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The peer Gateway's IP address"
|
|
::= { nsVpnMonEntry 13 }
|
|
|
|
nsVpnMonRmtGwId OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The peer Gateway's ID"
|
|
::= { nsVpnMonEntry 14 }
|
|
|
|
nsVpnMonMyGwIp OBJECT-TYPE
|
|
SYNTAX IpAddress
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The local Gateway's IP address"
|
|
::= { nsVpnMonEntry 15 }
|
|
|
|
nsVpnMonMyGwId OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The local Gateway's ID"
|
|
::= { nsVpnMonEntry 16 }
|
|
|
|
nsVpnMonOutSpi OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The SPI for outgoing packets"
|
|
::= { nsVpnMonEntry 17 }
|
|
|
|
nsVpnMonInSpi OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The SPI for incoming packets"
|
|
::= { nsVpnMonEntry 18 }
|
|
|
|
nsVpnMonMonState OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
off(0),
|
|
on(1)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The monitoring status, if it is on, an icmp ping will be sent
|
|
over the tunnel periodically to test the connectivity and
|
|
latency"
|
|
::= { nsVpnMonEntry 19 }
|
|
|
|
nsVpnMonTunnelState OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
down(0),
|
|
up(1)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The current tunnel status determined by the icmp ping if The
|
|
monitoring status is on."
|
|
::= { nsVpnMonEntry 20 }
|
|
|
|
nsVpnMonP1State OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
inactive(0),
|
|
active(1)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The IKE's Phase 1 status"
|
|
::= { nsVpnMonEntry 21 }
|
|
|
|
nsVpnMonP1LifeTime OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"an active Phase 1 sa's time left before re-key. -1 means
|
|
unlimited lifetime."
|
|
::= { nsVpnMonEntry 22 }
|
|
|
|
nsVpnMonP2State OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
inactive(0),
|
|
active(1)
|
|
}
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The IKE's Phase 2 status"
|
|
::= { nsVpnMonEntry 23 }
|
|
|
|
nsVpnMonP2LifeTime OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"an active Phase 2 sa's time left before re-key. -1 means
|
|
unlimited life time."
|
|
::= { nsVpnMonEntry 24 }
|
|
|
|
nsVpnMonP2LifeBytes OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"an active Phase 2 sa's bytes left before re-key. -1 means
|
|
unlimited life bytes."
|
|
::= { nsVpnMonEntry 25 }
|
|
|
|
nsVpnMonDelayAvg OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"a kind of rolling average of latency, in milliseconds. -1 has
|
|
no meaning here, which means nsVpnMonDelayAvg has not been
|
|
calculated yet."
|
|
::= { nsVpnMonEntry 26 }
|
|
|
|
nsVpnMonDelayLast OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"latency in last sample, in milliseconds.
|
|
-1 means either vpn tunnel is inactive or vpn tunnel monitor is
|
|
not turned on."
|
|
::= { nsVpnMonEntry 27 }
|
|
|
|
nsVpnMonAvail OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"percentage over 30 samples"
|
|
::= { nsVpnMonEntry 28 }
|
|
|
|
nsVpnMonSaId OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"SA identifier, also used as table index"
|
|
::= { nsVpnMonEntry 29 }
|
|
|
|
nsVpnMonGroupId OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Group Identifier"
|
|
::= { nsVpnMonEntry 30 }
|
|
|
|
nsVpnMonUsrId OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"User Identifier"
|
|
::= { nsVpnMonEntry 31 }
|
|
|
|
nsVpnMonStartSessRequestTime OBJECT-TYPE
|
|
SYNTAX TimeTicks
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Start Session request timestamp"
|
|
::= { nsVpnMonEntry 32 }
|
|
|
|
nsVpnMonStartSessEstTime OBJECT-TYPE
|
|
SYNTAX TimeTicks
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Start Session establish timestamp"
|
|
::= { nsVpnMonEntry 33 }
|
|
|
|
nsVpnMonEndSessTime OBJECT-TYPE
|
|
SYNTAX TimeTicks
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"End Session timestamp [when session terminates]"
|
|
::= { nsVpnMonEntry 34 }
|
|
|
|
nsVpnMonBytesIn OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Incoming bytes through this sa."
|
|
::= { nsVpnMonEntry 35 }
|
|
|
|
nsVpnMonBytesOut OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Outgoing bytes through this sa."
|
|
::= { nsVpnMonEntry 36 }
|
|
|
|
nsVpnMonPacketsIn OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Incoming packets through this sa."
|
|
::= { nsVpnMonEntry 37 }
|
|
|
|
nsVpnMonPacketsOut OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Outgoing packets through this sa."
|
|
::= { nsVpnMonEntry 38 }
|
|
|
|
nsVpnMonIfIndex OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"interface index."
|
|
::= { nsVpnMonEntry 39 }
|
|
|
|
nsVpnMonUpdateTime OBJECT-TYPE
|
|
SYNTAX TimeTicks
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Timestamp [Whenever any member of the row gets updated, the
|
|
timestamp is updated]"
|
|
::= { nsVpnMonEntry 40 }
|
|
|
|
nsVpnMonDN OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(0..64))
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"DN name"
|
|
::= { nsVpnMonEntry 41 }
|
|
|
|
nsVpnMonIfInfo OBJECT-TYPE
|
|
SYNTAX Integer32 (0..2147483647)
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Internal id assigned to this interface. Stays persistent across resets."
|
|
::= { nsVpnMonEntry 42 }
|
|
|
|
END
|
|
|
|
|