-
Notifications
You must be signed in to change notification settings - Fork 59
/
Copy pathCISCO-CRYPTO-ACCELERATOR-MIB.mib
1335 lines (1169 loc) · 43.2 KB
/
CISCO-CRYPTO-ACCELERATOR-MIB.mib
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
-- *****************************************************************
-- CISCO-CRYPTO-ACCELERATOR-MIB.my: A MIB to instrument status and
-- performance of crypto accelerator
-- modules.
--
-- Jan 2005, S Ramakrishnan
--
-- Copyright (c) 2005 by cisco Systems, Inc.
-- All rights reserved.
-- *****************************************************************
CISCO-CRYPTO-ACCELERATOR-MIB DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY,
NOTIFICATION-TYPE,
OBJECT-TYPE,
Unsigned32,
Integer32,
Counter64,
TimeTicks
FROM SNMPv2-SMI
MODULE-COMPLIANCE,
OBJECT-GROUP,
NOTIFICATION-GROUP
FROM SNMPv2-CONF
TruthValue,
TEXTUAL-CONVENTION
FROM SNMPv2-TC
SnmpAdminString
FROM SNMP-FRAMEWORK-MIB
EntPhysicalIndexOrZero
FROM CISCO-TC
ciscoMgmt
FROM CISCO-SMI
ModuleOperType
FROM CISCO-ENTITY-FRU-CONTROL-MIB;
ciscoCryptoAcceleratorMIB MODULE-IDENTITY
LAST-UPDATED "200503080000Z"
ORGANIZATION "Cisco Systems, Inc."
CONTACT-INFO
" Cisco Systems
Customer Service
Postal: 170 W Tasman Drive
San Jose, CA 95134
USA
Tel: +1 800 553-NETS
E-mail: [email protected]
"
DESCRIPTION
"The MIB module for monitoring the identity, status,
activity and faults of crypto accelerator (CA) modules
used in devices implementing security services.
The purpose of this MIB is to facilitate the following:
1) facilitate the discovery of hardware crypto
accelerator modules installed in a security device
2) monitor the activity, faults and performance of
hardware crypto accelerators and help the Network
Management Station (NMS) correlate the performance
of the CA modules with that of the security services
(IPsec, SSL, SSH, PKI etc) using the modules.
"
REVISION "200503080000Z"
DESCRIPTION
"Initial version of this module."
::= { ciscoMgmt 467 }
-- +++++++++++++++++++++++++++++++++++++++++++++++++++
-- Local Textual Conventions
-- +++++++++++++++++++++++++++++++++++++++++++++++++++
CAModuleType ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"
This type yields the marketing label of the module
type and supplements the corresponding
entPhysicalVendorType MIB variable, if the crypto
accelerator has an entry in entPhysicalTable.
The value 'other' has been provided to keep the MIB
still applicable while new crypto accelerators
emerge.
'software' denotes the software implementation of
crypto functions.
'integrated' denotes crypto accelerator modules which
are integrated into the managed entity and are hence
not modular.
'sep' and 'sepe' are scalable encryption processors
used in VPN3000 series concentrators.
'a1700VpnModule' identifies the crypto accelerator
used in in 1700 series routers.
'aimVpn' series of crypto accelerators are designed
specifically for 2600 and 3700 platforms. Further,
the aimVpnII series also function on 2800 series
routers.
'aimVpn' series of crypto accelerators are designed
specifically for 2600 and 2700 platforms.
'isa' is designed for 7200 series routers.
'vam' series of crypto accelerators are to be used
on 7200 and 7300 series routers.
'vpnsm' denotes the Catalyst 6500 VPN service module,
which is deemed a sophisticated 'crypto accelerator'.
The 'caviumNitrox' series of crypto accelerators
represent the crypto accelerator chipsets used in
ASA devices.
"
SYNTAX INTEGER {
other(1),
software(2),
integrated(3),
sep(4),
sepe(5),
a1700VpnModule(6),
aimVpnIBp(7),
aimVpnIEp(8),
aimVpnIIBp(9),
aimVpnIIEp(10),
aimVpnIIHp(11),
isa(12),
vam(13),
vam2(14),
vam2plus(15),
vpnsm(16),
caviumNitrox(17),
caviumNitroxII(18),
caviumNitroxLite(19)
}
CAModuleCount ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"This type denotes the count of crypto accelerators."
SYNTAX Unsigned32
CAProtocolType ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"The security protocol using the services of the
crypto accelerator module. The list of protocols
supported commonly by crypto accelerators include
Internet Key Exchange (ike), IP Security Phase-2
protocols (ipsec), Secure Shell (ssh), Secure Socket
Layer (ssl) and Secure Real-time Transport Protocol
(srtp).
The value 'other' has been provided so that the MIB
may still be valid while new protocols emerge and
the MIB has not been updated to enumerate them."
SYNTAX INTEGER {
other(1),
ikev1(2),
ikev2(3),
ipsec(4),
ssl(5),
ssh(6),
srtp(7)
}
-- Crypto Accelerator MIB object definitions
ciscoCryAcceleratorMIBNotifs OBJECT IDENTIFIER
::= { ciscoCryptoAcceleratorMIB 0}
ciscoCryAcceleratorMIBObjects OBJECT IDENTIFIER
::= { ciscoCryptoAcceleratorMIB 1 }
ciscoCryAccleratorMIBConform OBJECT IDENTIFIER
::= { ciscoCryptoAcceleratorMIB 2 }
-- Capability objects
ccaCapability OBJECT IDENTIFIER
::= { ciscoCryAcceleratorMIBObjects 1 }
-- Activity/Statstics objects
ccaActivity OBJECT IDENTIFIER
::= { ciscoCryAcceleratorMIBObjects 2 }
ccaGlobalStats OBJECT IDENTIFIER
::= { ccaActivity 1 }
-- Protocol-specific Activity/Statstics objects
ccaProtocolActivity OBJECT IDENTIFIER
::= { ccaActivity 3 }
-- Control of Notifications
ccaAcNotifCntl OBJECT IDENTIFIER
::= { ciscoCryAcceleratorMIBObjects 3 }
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++
-- Objects to instrument the capabilities of the feature.
--
-- This group defines the capacity of the managed device
-- in terms of the crypto accelerators
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++
ccaSupportsHwCrypto OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This MIB object assumes the value of True if the
managed device is capable of including hardware crypto
accelerator.
"
::= { ccaCapability 1 }
ccaSupportsModularHwCrypto OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This MIB object assumes the value of True if the
managed device supports field removable hardware
crypto accelerators.
"
::= { ccaCapability 2 }
ccaMaxAccelerators OBJECT-TYPE
SYNTAX Integer32 (-1..50)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The maximum number of hardware crypto accelerators
which may be simultaneously operational in this device.
If the managed device can support only software
encryption, the value of this MIB object should be set
to zero.
If there is not set limit on the maximum number of
crypto accelerator modules which the managed device
can support, the agent should return a value of '-1'
for this MIB variable.
"
::= { ccaCapability 3 }
ccaMaxCryptoThroughput OBJECT-TYPE
SYNTAX Unsigned32
UNITS "megabits per second"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The maximum crypto throughput that may be supported
by the managed device with the current number of active
crypto accelerators.
If this value cannot be determined, the agent should
return a value of 0.
"
::= { ccaCapability 4 }
ccaMaxCryptoConnections OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The maximum number of VPN flows (connections) the managed
device can support with the current number of active
crypto accelerators.
If this value cannot be determined, the agent should
return a value of 0.
"
::= { ccaCapability 5 }
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++
-- Activity objects
--
-- This group defines the current activity and performance of
-- of the crypto accelerators on the managed device.
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++
ccaGlobalNumActiveAccelerators OBJECT-TYPE
SYNTAX CAModuleCount
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of crypto accelerators which are in state
'active'."
::= { ccaGlobalStats 1 }
ccaGlobalNumNonOperAccelerators OBJECT-TYPE
SYNTAX CAModuleCount
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of crypto accelerators which are in a state
other than 'active'.
"
::= { ccaGlobalStats 2 }
ccaGlobalInOctets OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of octets input to all the crypto
accelerators installed in the device.
The value is cumulative from last reboot of the
managed entity.
"
::= { ccaGlobalStats 3 }
ccaGlobalOutOctets OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of octets output by all the crypto
accelerators installed in the device.
The value is cumulative from last reboot of the
managed entity.
"
::= { ccaGlobalStats 4 }
ccaGlobalInPkts OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of packets input to all the crypto
accelerators installed in the device.
The value is cumulative from last reboot of the
managed entity.
"
::= { ccaGlobalStats 5 }
ccaGlobalOutPkts OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of packets output by all the crypto
accelerators installed in the device.
The value is cumulative from last reboot of the
managed entity.
"
::= { ccaGlobalStats 6 }
ccaGlobalOutErrPkts OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The total number of packets output by all the crypto
accelerators installed in the device which were found
to be generated with errors (checksum errors, other
errors).
The value is cumulative from last reboot of the
managed entity.
"
::= { ccaGlobalStats 7 }
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++
-- Crypto Accelerator table: yields the status, type and activity
-- per card
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++
ccaAcceleratorTable OBJECT-TYPE
SYNTAX SEQUENCE OF CcaAcceleratorEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The crypto accelerator table. There is one entry
in this table for each crypto accelerator installed
in the managed device."
::= { ccaActivity 2 }
ccaAcceleratorEntry OBJECT-TYPE
SYNTAX CcaAcceleratorEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Each entry contains the attributes and statistics
of a crypto accelerator module installed on the managed
device."
INDEX { ccaAcclIndex }
::= { ccaAcceleratorTable 1 }
CcaAcceleratorEntry ::= SEQUENCE {
ccaAcclIndex Unsigned32,
ccaAcclEntPhysicalIndex EntPhysicalIndexOrZero,
ccaAcclStatus ModuleOperType,
ccaAcclType CAModuleType,
ccaAcclVersion SnmpAdminString,
ccaAcclSlot Unsigned32,
ccaAcclActiveTime TimeTicks,
ccaAcclInPkts Counter64,
ccaAcclOutPkts Counter64,
ccaAcclOutBadPkts Counter64,
ccaAcclInOctets Counter64,
ccaAcclOutOctets Counter64,
ccaAcclHashOutboundPkts Counter64,
ccaAcclHashOutboundOctets Counter64,
ccaAcclHashInboundPkts Counter64,
ccaAcclHashInboundOctets Counter64,
ccaAcclEncryptPkts Counter64,
ccaAcclEncryptOctets Counter64,
ccaAcclDecryptPkts Counter64,
ccaAcclDecryptOctets Counter64,
ccaAcclTransformsTotal Counter64,
ccaAcclDropsPkts Counter64,
ccaAcclRandRequests Counter64,
ccaAcclRandReqFails Counter64,
ccaAcclDHKeysGenerated Counter64,
ccaAcclDHDerivedSecretKeys Counter64,
ccaAcclRSAKeysGenerated Counter64,
ccaAcclRSASignings Counter64,
ccaAcclRSAVerifications Counter64,
ccaAcclRSAEncryptPkts Counter64,
ccaAcclRSAEncryptOctets Counter64,
ccaAcclRSADecryptPkts Counter64,
ccaAcclRSADecryptOctets Counter64,
ccaAcclDSAKeysGenerated Counter64,
ccaAcclDSASignings Counter64,
ccaAcclDSAVerifications Counter64,
ccaAcclOutboundSSLRecords Counter64,
ccaAcclInboundSSLRecords Counter64
}
ccaAcclIndex OBJECT-TYPE
SYNTAX Unsigned32 (1..50)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The index uniquely identifying a specific crypto
accelerator."
::= { ccaAcceleratorEntry 1 }
ccaAcclEntPhysicalIndex OBJECT-TYPE
SYNTAX EntPhysicalIndexOrZero
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The value of entPhysicalIndex of the module
corresponding to this conceptual row or zero,
if the module is not an entity listed in
'entPhysicalTable' of rfc2737."
::= { ccaAcceleratorEntry 2 }
ccaAcclStatus OBJECT-TYPE
SYNTAX ModuleOperType
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The state of the crypto accelerator corresponding
to this row."
::= { ccaAcceleratorEntry 3 }
ccaAcclType OBJECT-TYPE
SYNTAX CAModuleType
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The type of the crypto accelerator corresponding to
this row."
::= { ccaAcceleratorEntry 4 }
ccaAcclVersion OBJECT-TYPE
SYNTAX SnmpAdminString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The version string of the firmware of the crypto
accelerator corresponding to this row."
::= { ccaAcceleratorEntry 5 }
ccaAcclSlot OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The slot number of the crypto accelerator
corresponding to this row."
::= { ccaAcceleratorEntry 6 }
ccaAcclActiveTime OBJECT-TYPE
SYNTAX TimeTicks
UNITS "seconds"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of seconds elapsed since the crypto
accelerator corresponding to this row transitioned
into the 'active' state."
::= { ccaAcceleratorEntry 7 }
ccaAcclInPkts OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets input to this module for
processing since the last reboot of the device."
::= { ccaAcceleratorEntry 8 }
ccaAcclOutPkts OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets output by this module after
processing, since last reboot of the device."
::= { ccaAcceleratorEntry 9 }
ccaAcclOutBadPkts OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets output by this module after
processing which had crypto errors, since last reboot
of the device."
::= { ccaAcceleratorEntry 10 }
ccaAcclInOctets OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of octets input to this module for
processing since last reboot of the device."
::= { ccaAcceleratorEntry 11 }
ccaAcclOutOctets OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of octets output by this module after
processing since last reboot of the device."
::= { ccaAcceleratorEntry 12 }
ccaAcclHashOutboundPkts OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets output by this module which
were prepared for hash validation since the last
reboot of the device.
Hash validation is a cryptographic operation used
to verify the integrity of a block of data received
from a trusted source.
"
::= { ccaAcceleratorEntry 13 }
ccaAcclHashOutboundOctets OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of octets output by this module which were
prepared for hash validation since the last reboot of
the device."
::= { ccaAcceleratorEntry 14 }
ccaAcclHashInboundPkts OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets input to this module which
required hash validation since the last reboot of
the device."
::= { ccaAcceleratorEntry 15 }
ccaAcclHashInboundOctets OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of octets input to this module which were
authenticated using hash validation since the last
reboot of the device."
::= { ccaAcceleratorEntry 16 }
ccaAcclEncryptPkts OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets input to this module which
required encryption since the last reboot of the
device."
::= { ccaAcceleratorEntry 17 }
ccaAcclEncryptOctets OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of octets input to this module which
required encryption since the last reboot of the
device."
::= { ccaAcceleratorEntry 18 }
ccaAcclDecryptPkts OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets input to this module which
required decryption since the last reboot of the
device."
::= { ccaAcceleratorEntry 19 }
ccaAcclDecryptOctets OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of octets input to this module which
required decryption since the last reboot of the
device."
::= { ccaAcceleratorEntry 20 }
ccaAcclTransformsTotal OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of cryptographic transformations performed
by this crypto accelerator since the last reboot of the
device."
::= { ccaAcceleratorEntry 21 }
ccaAcclDropsPkts OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets input to this module which were
dropped prior to processing since the last reboot of
the device."
::= { ccaAcceleratorEntry 22 }
ccaAcclRandRequests OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of requests received by this crypto
accelerator to generate random numbers since the last
reboot of the device."
::= { ccaAcceleratorEntry 23 }
ccaAcclRandReqFails OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of random number requests received by this
module which were not fulfilled, counted since the last
reboot of the device."
::= { ccaAcceleratorEntry 24 }
ccaAcclDHKeysGenerated OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of Diffie Hellman key pairs generated by
this module since the last reboot."
::= { ccaAcceleratorEntry 25 }
ccaAcclDHDerivedSecretKeys OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of times this module has derived Diffie Hellman
secret keys since the last reboot of the device."
::= { ccaAcceleratorEntry 26 }
ccaAcclRSAKeysGenerated OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of times a new RSA key pair was generated
by this module, counted since the last time this module
assumed 'active' status."
::= { ccaAcceleratorEntry 27 }
ccaAcclRSASignings OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of times an RSA Digital Signature has been
generated by this module, counted since the last time
this module assumed 'active' status."
::= { ccaAcceleratorEntry 28 }
ccaAcclRSAVerifications OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of times an RSA Digital Signature has
been verified by this module, counted since the last
time this module assumed 'active' status."
::= { ccaAcceleratorEntry 29 }
ccaAcclRSAEncryptPkts OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets input to this module which
required RSA encryption, counted since the last time
this module assumed 'active' status."
::= { ccaAcceleratorEntry 30 }
ccaAcclRSAEncryptOctets OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of octets input to this module which
required RSA encryption, counted since the last time
this module assumed 'active' status."
::= { ccaAcceleratorEntry 31 }
ccaAcclRSADecryptPkts OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets input to this module which
required RSA decryption, counted since the last time
this module assumed 'active' status."
::= { ccaAcceleratorEntry 32 }
ccaAcclRSADecryptOctets OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of octets input to this module which
required RSA decryption, counted since the last time
this module assumed 'active' status."
::= { ccaAcceleratorEntry 33 }
ccaAcclDSAKeysGenerated OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of times DSA key pair has been generated by
this module, counted since the last time this module
assumed 'active' status."
::= { ccaAcceleratorEntry 34 }
ccaAcclDSASignings OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of times DSA signature has been generated
by this module, counted since the last time this module
assumed 'active' status."
::= { ccaAcceleratorEntry 35 }
ccaAcclDSAVerifications OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of times DSA signature has been verified
by this module, counted since the last time this module
assumed 'active' status."
::= { ccaAcceleratorEntry 36 }
ccaAcclOutboundSSLRecords OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of combined outbound hash/encrypt SSL
records processed by this module, counted since the
last time this module assumed 'active' status."
::= { ccaAcceleratorEntry 37 }
ccaAcclInboundSSLRecords OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of combined inbound hash/encrypt SSL
records processed by this module, counted since the
last time this module assumed 'active' status."
::= { ccaAcceleratorEntry 38 }
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++
-- Protocol-specific crypto accelerator stats: only IKE, IPsec
-- SSL, SSH and sRTP are supported at this time.
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++
ccaProtocolStatsTable OBJECT-TYPE
SYNTAX SEQUENCE OF CcaProtocolStatsEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The crypto accelerator statistics catalogued by
security protocol causing the activity. There is only
entry in this table for each security protocol listed
in the textual convention 'CAProtocolType'."
::= { ccaProtocolActivity 1 }
ccaProtocolStatsEntry OBJECT-TYPE
SYNTAX CcaProtocolStatsEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Each entry contains the statistics corresponding to
a specific security protocol."
INDEX { ccaProtId }
::= { ccaProtocolStatsTable 1 }
CcaProtocolStatsEntry ::= SEQUENCE {
ccaProtId CAProtocolType,
ccaProtPktEncryptsReqs Counter64,
ccaProtPktDecryptsReqs Counter64,
ccaProtHmacCalcReqs Counter64,
ccaProtSaCreateReqs Counter64,
ccaProtSaRekeyReqs Counter64,
ccaProtSaDeleteReqs Counter64,
ccaProtPktEncapReqs Counter64,
ccaProtPktDecapReqs Counter64,
ccaProtNextPhaseKeyAllocReqs Counter64,
ccaProtRndGenReqs Counter64,
ccaProtFailedReqs Counter64
}
ccaProtId OBJECT-TYPE
SYNTAX CAProtocolType
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The index uniquely identifies the security protocol
for which this row summarizes the statistics."
::= { ccaProtocolStatsEntry 1 }
ccaProtPktEncryptsReqs OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of payload encrypt requests received by
the crypto accelerators from this security protocol,
counted since the last reboot of the device."
::= { ccaProtocolStatsEntry 2 }
ccaProtPktDecryptsReqs OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of payload decrypt requests received by
the crypto accelerators from this security protocol,
counted since the last reboot of the device."
::= { ccaProtocolStatsEntry 3 }
ccaProtHmacCalcReqs OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of times keyed HMAC calculation requests
were received by the crypto accelerators due to the
operation of this security protocol, counted since
the last reboot of the device."
::= { ccaProtocolStatsEntry 4 }
ccaProtSaCreateReqs OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of times requests for creation of
security associations were received by the crypto
accelerators from this security protocol, counted
since the last reboot of the device."
::= { ccaProtocolStatsEntry 5 }
ccaProtSaRekeyReqs OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of times requests for rekeying of
existing security associations were received by
the crypto accelerators from this security protocol,
counted since the last reboot of the device."
::= { ccaProtocolStatsEntry 6 }
ccaProtSaDeleteReqs OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of times requests for deletion of
security associations were received by the crypto
accelerators from this security protocol, counted
since the last reboot of the device."
::= { ccaProtocolStatsEntry 7 }
ccaProtPktEncapReqs OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of times requests for payload
encapsulation were received by the crypto accelerators
from this security protocol, counted since the last
reboot of the device."
::= { ccaProtocolStatsEntry 8 }
ccaProtPktDecapReqs OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of times requests for payload decapsulation
were received by the crypto accelerators from this
security protocol, counted since the last reboot of
the device."
::= { ccaProtocolStatsEntry 9 }
ccaProtNextPhaseKeyAllocReqs OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of times requests for allocation of
keys for the next phase of the protocol operation
which were received by the crypto accelerators from
this security protocol, counted since the last reboot
of the device.
As an example, for IKE, this would identify the number
of times key allocation requests for Quick Mode were
received by the crypto accelerator from the IKE protocol
engine."
::= { ccaProtocolStatsEntry 10 }
ccaProtRndGenReqs OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of times requests for generation of
random number(s) were received by the crypto
accelerators from this security protocol, counted
since the last reboot of the device."
::= { ccaProtocolStatsEntry 11 }
ccaProtFailedReqs OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of times requests received from this
security protocol could not be fulfilled, counted
since the last reboot of the device."
::= { ccaProtocolStatsEntry 12 }
--