ATT-VPN-GATEWAY-MIB: View SNMP OID List / Download MIB

Hardware Version.

Software code version.

The account in Service Manager this device is registered under.

Indicates how many minutes away from UTC time the device is located. Values must be in 30 minute increments. Valid range is -840 to 840.

Indicates if the device is located in an area that observes daylight savings time. Enumeration: 'dstNotAllowed': 0, 'dstAllowed': 1.

Indicates if daylight savings time is current active at this date and time. Enumeration: 'dstActive': 1, 'dstNotActive': 0.

The current primary IPv4 WAN connection setting. This is configured via the web interface and is not read from Service Manager. Enumeration: 'wanConfigISDNPri': 5, 'wanConfigAnalogDial': 4, 'wanConfigDHCP': 2, 'wanConfigCellularDial': 8, 'wanConfigPPPoA': 6, 'wanConfigPPPoE': 3, 'wanConfigCellularPer': 7, 'wanConfigStatic': 1, 'wanConfigUnknown': 0.

The name of the current host.

The (conceptual) table of DNS on the device. An entry shall be placed in the storage table for each DNS.

A (conceptual) entry for one logical DNS area on the host.

A unique value for each logical DNS contained on the device.

The IP address of an indivdual name server in use.

The (conceptual) table of IPv6 DNS on the device. An entry shall be placed in the storage table for each DNS.

A (conceptual) entry for one logical IPv6 DNS area on the host.

A unique value for each logical IPv6 DNS contained on the device.

The IPv6 IP address of an indivdual name server in use.

The current device status. Enumeration: 'deviceActive': 0, 'deviceDiscontinued': 2, 'deviceInActive': 1, 'deviceBadVlanSwitch': 4, 'deviceNotConfigured': 3.

The language that will be displayed on the CGI web interface. The valid values are: EN = English JA = Japanese ES = Spanish BP = Brazil Portuguese FC = French Canadian TC = Traditional Chinese SC = Simplified Chinese

The (conceptual) table of customer info (such as comments) on the device. An entry shall be placed in the storage table for each one.

A (conceptual) entry for one logical customer comment area on the host.

A unique value for each logical customer info.

A free-format field that can be added to the AT&T VPN Gateway's profile at a customer's request. Currently only one comment field can be specified.

The (conceptual) table of ports on the device. An entry shall be placed in the storage table for each port.

A (conceptual) entry for one logical port area on the host.

A unique value for each logical port contained on the device.

The link status of an individual hardware port. Enumeration: 'active': 1, 'unknown': 2, 'inactive': 0.

The currently active IPv4 WAN connection, which may differ from the configured primary IPv4 WAN connection setting. For example, the primary IPv4 WAN is configured for DHCP (wanConfigDHCP), but because of a network outage the PPPoE secondary WAN connection (wanConfigPPPoE2) is currently providing connectivity. Enumeration: 'wanConfigISDNPri': 5, 'wanConfigDHCP2': 10, 'wanConfigAnalogDial': 4, 'wanConfigDHCP': 2, 'wanConfigCellularDial': 8, 'wanConfigPPPoA': 6, 'wanConfigStatic2': 9, 'wanConfigPPPoE2': 11, 'wanConfigPPPoE': 3, 'wanConfigCellularPer': 7, 'wanConfigStatic': 1, 'wanConfigUnknown': 0.

The current primary IPv6 WAN connection setting. This is configured via the web interface and is not read from Service Manager. Enumeration: 'wanConfigIPv6Static': 12, 'wanConfigIPv6PPPoEDHCP': 19, 'wanConfigOff': 15, 'wanConfigIPv6Stateless': 14, 'wanConfigIPv6DHCP': 13, 'wanConfigUnknown': 0.

The currently active IPv6 WAN connection, which may differ from the configured primary IPv6 WAN connection setting. For example, the primary IPv4 WAN is configured for DHCP (wanConfigIPv6DHCP), but because of a network outage the static IP secondary WAN connection (wanConfigIPv6Static2) is currently providing connectivity. Enumeration: 'wanConfigIPv6Stateless2': 18, 'wanConfigIPv6Static': 12, 'wanConfigIPv6PPPoEDHCP': 19, 'wanConfigOff': 15, 'wanConfigIPv6PPPoEDHCP2': 20, 'wanConfigIPv6DHCP2': 17, 'wanConfigIPv6Stateless': 14, 'wanConfigIPv6Static2': 16, 'wanConfigIPv6DHCP': 13, 'wanConfigUnknown': 0.

The last time when the AT&T VPN Gateway was successfully able to retrieve its full profile from an AT&T Administration Server.

The last time when the AT&T VPN Gateway was successfully able to retrieve its profile from an AT&T Administration Server. If this time does not match nghwLastFullQueryTimeDAT then that means only part of the profile was retrieved. This is to prevent any possible reboots if critical portions of the profile were to change.

The last time when the software version of AT&T VPN Gateway was successfully upgraded. Returns January 1 year 0 time 0 when this cannot be determined.

The main WAN MAC address of this device used to identify its profile in Service Manager.

Software code version that will be used if the rollback feature is activated.

Ties to the 'Use as Internet Primary' field in Service Manager. Controls the Dual WAN configuration. Enumeration: 'wan1AndWan2BackupEachOther': 1, 'notEnabled': 0, 'noInetIfEitherWanIsDown': 2.

The current WAN2 IPv4 WAN connection setting. This is not configured via the web interface and is read from Service Manager. Enumeration: 'wanConfigISDNPri': 5, 'wanConfigDHCP2': 10, 'wanConfigAnalogDial': 4, 'wanConfigDHCP': 2, 'wanConfigCellularDial': 8, 'wanConfigPPPoA': 6, 'wanConfigStatic2': 9, 'wanConfigPPPoE2': 11, 'wanConfigPPPoE': 3, 'wanConfigCellularPer': 7, 'wanConfigStatic': 1, 'wanConfigUnknown': 0.

The current WAN2 IPv6 WAN connection setting. This is not configured via the web interface and is read from Service Manager. Enumeration: 'wanConfigIPv6Stateless': 3, 'wanConfigIPv6PPPoEDHCP': 4, 'wanConfigOff': 0, 'wanConfigIPv6Static': 1, 'wanConfigIPv6DHCP': 2.

This is the MAC Address of the WAN1 Gateway router if it is in use. For MAC Address range from 002704000000 to 002704009999, it is a NetBridge (SX) device. For MAC Address range from 002704010000 to 002704010425, it is a NetBridge (FX) device. For MAC Address range from 002704010426 to 002704019999, it is a Cell Extender (6200-FX) device. For MAC Address range from 002704270000 to 002704279999, it is a Cell Extender (6300-CX) device.

This is the MAC Address of the WAN2 interface if it is in use.

This is the MAC Address of the WAN2 Gateway router if it is in use. For MAC Address range from 002704000000 to 002704009999, it is a NetBridge (SX) device. For MAC Address range from 002704010000 to 002704010425, it is a NetBridge (FX) device. For MAC Address range from 002704010426 to 002704019999, it is a Cell Extender (6200-FX) device. For MAC Address range from 002704270000 to 002704279999, it is a Cell Extender (6300-CX) device.

The interface that is currently in use for the primary connection.

Total bytes in on the active WAN interface.

Total bytes out on the active WAN interface.

How long the current dial connection has been up.

How long the backup connection has been up. This is very similar to ngifTimeInDial. The difference is that ngifTimeInDial isn't necessarily measuring a backup connection. For example, when configured for 'Dial As Primary' ifTimeInBackup will always remain zero because there is no backup for Dial As Primary but ngifTimeInDial will be non-zero when the connection is up. In other WAN configurations (such as DHCP, for example) both ngifTimeInDial and ifTimeInBackup will be non-zero when the backup connection is in use.

Setting from the Service Manager profile that controls SNMP interface persistence. Zero indicates that this feature is not in use. Enumeration: 'none': 0, 'accountANRKSIonly': 4, 'standard': 3.

The (conceptual) table of interface statistics on the device. An entry shall be placed in the storage table for each interface statistic.

A (conceptual) entry for one logical interface statistic area.

A unique value for each logical interface statistic.

The value of this index reported by ifIndex in the standard MIBs. This is needed because index numbers can be skipped in the standard MIBs.

A textual string containing information about the interface.

Received CRC errors for the interface.

Informational string that is pulled from the device profile. Useful for the scenario where the physical connection to the WAN interface will be 10, 100 or 1000 Mbps (depending on the ISP modem/router) but the speed allocated by the ISP will be much lower (2, 4, or 8 Mbps). This field does not control speed and does not indicate a measurement of speed. It is manually entered by an administrator for informational purposes only.

The (conceptual) table of VLANs on the device. An entry shall be placed in the storage table for each VLAN.

A (conceptual) entry for one logical VLAN area on the host.

A unique value for each logical VLAN contained by the device.

This is the number assigned to the VLAN. Please note: A VLAN with an ID of 4070 is a special VLAN used to hold ports that are disabled.

The ports assigned to the VLAN.

This is the speed supported on the VLAN Ethernet interfaces. If the VLAN Ethernet speed is configured for auto negotiation then autoNegot will be reported and the negotiated speed will be reported by ngvlSpeedCurrent. If the VLAN Ethernet speed is configured for a specific speed that speed will be reported. Enumeration: 'speed10MbitHalfDuplex': 2, 'speed1000MbitFullDuplex': 7, 'speed1000MbitHalfDuplex': 6, 'speed100MbitFullDuplex': 5, 'autoNegot': 1, 'speed100MbitHalfDuplex': 4, 'notActive': 0, 'speed10MbitFullDuplex': 3.

The range of IP addresses handed out via DHCP on this VLAN. Values will be 0.0.0.0 0.0.0.0 if DHCP is not enabled on this VLAN. Followed by number of addresses assigned and number of total addresses. NOTE: As of AT&T VPN Gateway version 5.3 the number of addresses assigned will no longer be returned. A zero will be returned for that field.

When the DHCP Type is 'R', this is the address the AT&T VPN Gateway devices uses to relay DHCP requests. This field is required when the DHCP Type is 'R'. A second address can be specified.

This field is required when VRRP Active Indicator is 'Y' and is optional otherwise. If specified, it must be within the local LAN subnet of the AT&T VPN Gateway but cannot fall within the DHCP pool start and end addresses. For the DHCP Default Route on the AT&T VPN Gateway device profile, if entered, the address must be within the network specified by the LAN Address and LAN Subnet, but not within the address range specified by the DHCP Start Address and DHCP End Address.

This is the LAN address for the device on the VLAN.

This is the LAN subnet address for the device on the VLAN.

The start of the range of IPv6 IP addresses handed out via DHCP on this VLAN. Value will be all zeroes if DHCP is not enabled on this VLAN.

The end of the range of IPv6 IP addresses handed out via DHCP on this VLAN. Value will be all zeroes if DHCP is not enabled on this VLAN.

When the DHCP Type is 'R', this is the primary address the AT&T VPN Gateway devices uses to relay DHCP requests. This field is required when the DHCP Type is 'R' and IPv6 is in use.

When the DHCP Type is 'R', this is the primary address the AT&T VPN Gateway devices uses to relay DHCP requests.

This is the IPv6 LAN address for the device on the VLAN.

This is the IPv6 LAN prefix for the device on the VLAN.

This is the current speed in use on the VLAN Ethernet interfaces. This is helpful to determine what was chosen if the speed was set to auto negotiate. If the VLAN Ethernet speed is configured for auto negotiation then the negotiated speed will be reported. If the VLAN Ethernet speed is configured for auto negotiation and there is no link then noLink will be reported. If the VLAN Ethernet speed is configured for a specific speed that speed will be reported. Enumeration: 'speed10MbitHalfDuplex': 2, 'noLink': 0, 'speed1000MbitFullDuplex': 7, 'speed1000MbitHalfDuplex': 6, 'speed100MbitFullDuplex': 5, 'speed100MbitHalfDuplex': 4, 'speed10MbitFullDuplex': 3.

The (conceptual) table of VRRPs on the device. An entry shall be placed in the storage table for each VRRP.

A (conceptual) entry for one logical VRRP area on the host.

A unique value for each logical VRRP contained by the device.

The interface associated with this VRRP.

Virtual router ID.

Shows what the status is (master, backup, not active). Enumeration: 'vrrpMasterState': 1, 'vrrpBackupState': 2, 'vrrpNotRunning': 0, 'vrrpFaultState': 3.

VRRP_PRIO_OWNER 255 /* priority of the ip owner -- rfc2338.5.3.4 */ VRRP_PRIO_DFL 100 /* default priority -- rfc2338.5.3.4 */ VRRP_PRIO_STOP 0 /* priority to stop -- rfc2338.5.3.4 */ Enumeration: 'default': 100, 'owner': 255, 'stop': 0.

The (conceptual) table of 3G cards on the device. An entry shall be placed in the storage table for each 3G card.

A (conceptual) entry for one logical 3G card area on the host.

A unique value for each logical 3G card contained by the device.

The slot the card is plugged into. Returns -1 if no card is found. NOTE: this refers to PCMCIA slots, not USB ports.

The modem type.

The 3G card manufacturer.

The 3G card model.

The 3G card revision.

Either the IMEI or ESN depending on the card.

Signal Strength at the connect. This value will remain zero if cellBars is non-zero.

Information about the carrier.

The IMSI attach status.

The connected network.

The cell phone number.

The access point name.

The APN userid. Only populated when the access point name exists.

The APN password. Only populated when the access point name exists.

If the cellular modem is a supported unit that allows the AT&T VPN Gateway to query its current status then this value will indicate whether or not the unit is physically present. Unsupported units will always have a value of 'unknown'. Enumeration: 'unknown': 0, 'present': 1, 'missing': 2.

The SIM number of the card.

The type of hardware of the cellular modem. Enumeration: 'unknown': 0, 'pcmcia': 1, 'usb': 2.

The date and time the cell stats were collected. Not set if the date and time on the device hasn't been set yet.

The current status of the cellular connection.

Cell network technology.

Cellular carrier.

A mobile country code (MCC) is used in combination with a mobile network code (MNC) (also known as a MCC / MNC tuple) to uniquely identify a mobile phone operator (carrier) using the GSM, UMTS, LTE, and iDEN public land mobile networks as well as some CDMA, TETRA, and satellite mobile networks.

Mobile network code

Tower location area code.

A GSM Cell ID (CID) is a generally unique number used to identify each Base transceiver station (BTS) or sector of a BTS within a Location area code (LAC) if not within a GSM network. In some cases the last digit of CID represents cells' Sector ID. A valid CID ranges from 0 to 65535 on GSM and CDMA networks and from 0 to 268435455 on UMTS and LTE networks.

A number indicating the signal strength as a bar count. If this value is non-zero then ng3gSignalStrength will return zero.

Received signal strength indicator.

EC/IO measurement.

References LTE signals: Reference Signal Received Power is the average power of resource elements that carry cellular specific reference signals over the entire bandwidth. Valid values : all values are valid. Typical values are between -199 and -85. The larger the number (-85 for instance) the better the signal.

References LTE Signals: represents the Cell Quality.

References LTE signals: LTE - The signal-to-interference-plus-noise ratio of the modem.

References LTE signals: The signal-to-noise ratio of the modem.

The interface on the device associated with this cell modem.

The (conceptual) table of tunnels on the device. An entry shall be placed in the storage table for each tunnel.

A (conceptual) entry for one logical tunnel area on the host.

A unique value for each logical tunnel contained by the device.

The ipsec interface associated with the tunnel.

An internal state used to indicate the tunnel's current operation. Enumeration: 'attXAuthPending': 12, 'attXAuthFailedPendingResp': 13, 'attSASetup': 17, 'attDialRequestingTok': 20, 'attISAKMPNegPending': 5, 'attRunning': 9, 'attSentLogon': 2, 'attRigAuthPending': 3, 'attRigAuthFailedPendingResp': 25, 'attDialingDone': 16, 'attModeCfgPending': 23, 'attAuthReqAckPending': 7, 'attLogoffPending': 10, 'attXAuthReqPending': 14, 'attAuthReqPending': 8, 'attDialing': 15, 'attQuiesed': 11, 'attReset': 1, 'attRetrySIG': 21, 'attAllTunPingsFailed': 24, 'attDialPendingResponse': 19, 'attNotSetYet': 0, 'attCertLoginPending': 4, 'attRigAuthReqPending': 26, 'attProtocolNegPending': 6, 'attTryNextTun': 22, 'attXAuthTimeout': 18.

An internal state used to indicate the tunnel's status. This state was created because the ngtuAuthState can change while the tunnel is still up. For example, when the clock is being set. This state is always attTunnelUp when the tunnel is up. Enumeration: 'attTunnelPendingDialConnection': 2, 'attTunnelComingUp': 1, 'attTunnelRestarting': 5, 'attTunnelUp': 3, 'attTunnelDown': 0, 'attTunnelComingDown': 4.

How long the tunnel has been up.

IP of the endpoint the tunnel is connected to. Populated if the ngtuState is 'up'.

Type of the endpoint the tunnel is connected to. Populated if the ngtuState is 'up'. Enumeration: 'none': 0, 'cisco': 9, 'vig': 20, 'generic': 21, 'nortel': 3, 'gig': 5, 'linuxFrameSig': 4, 'linuxSig': 6.

Bulk encryption mode. Enumeration: 'disabled': 0, 'enabled': 1.

Bulk encryption CE address.

ESP algorithm.

AUTH algorithm.

COMPRESSION algorithm.

Indicates the authentication server that will be used by the tunnel endpoint. Enumeration: 'noTunnelYet': 999, 'customerDirect': 2, 'customerDirectSm': 4, 'serviceManager': 1, 'internetOnly': 0, 'branchOffice': 3.

The authentication protocol. Enumeration: 'custRadius': 1, 'none': 0, 'custAxent': 3, 'custSecureID': 2, 'custCert': 4, 'branchSharedSecret': 7, 'custLDAP': 5, 'custInternal': 6, 'agnsManaged': 8.

A numeric value that indicates why an inbound or outbound tunnel came down. The one exception is tnlAlive, which is sent for the tunnel 'alive' message for a tunnel that is still up. Enumeration: 'inbShutdownMsg': 555, 'eth1Lost': 258, 'powerLost': 503, 'inbIdleTimeout': 563, 'noReasonGiven': 599, 'deviceStatusInactiveWasActive': 506, 'inbIsakmpDelMsgFromClient': 565, 'inbIpsecSaDelMsgFromClient': 564, 'dialIdleTimeout': 509, 'tnlIdleTimeout': 508, 'tnlInitiatedDisco': 226, 'vrrpStateChange': 553, 'discoButton': 0, 'inbLostKeepalives': 562, 'missedHeartBts': 227, 'tnlAlive': 504, 'maxSessionTimeout': 510, 'eth1Restored': 259, 'noTunnInInetOnlyMode': 507.

AGNS managed or not. Enumeration: 'nonAgnsManaged': 0, 'agnsManaged': 1.

What initiated the tunnel. Enumeration: 'attPersistentLogon': 3, 'attUnknown': 0, 'attVpnctl': 4, 'attAutoLogon': 2, 'attFromUser': 1.

The tunnel control mode. Enumeration: 'tunnelUserViewOnly': 2, 'tunnelUnknown': 0, 'tunnelHidden': 3, 'tunnelWSSInternet': 5, 'tunnelMaintenance': 4, 'tunnelUserControl': 1.

IPv6 IP of the endpoint the tunnel is connected to. Populated if the ngtuState is 'up' and IPv6 is in use.

The tunnel automation that is currently in use and whether or not it is currently active. NOTE: Active does not necessarily mean that the tunnel is up. It could mean that the tunnel is up, in the process of coming up, or is in a state where it will be brought up if the right conditions are met. There is no automation for User Initiated mode. Enumeration: 'tunCurVrrpNotActive': 8, 'tunCurPersistentNotActive': 5, 'tunCurVrrpActive': 6, 'tunCurTrafficInitNotActive': 3, 'tunCurVrrpActiveNotMaster': 7, 'tunCurPersistentActive': 4, 'tunCurUserInit': 1, 'tunCurTrafficInitActive': 2, 'tunCurNone': 0.

The tunnel automation (if any) configured for the primary connection in Service Manager. If configured for User Initiated the user can choose to override that setting from the CGI interface and select Persistent or Traffic Initiated instead. Enumeration: 'tunInitTrafficInitiated': 2, 'tunInitUserOverrideTraffic': 6, 'tunInitPersistent': 3, 'tunInitUnknown': 7, 'tunInitUserInitiated': 1, 'tunInitVrrp': 4, 'tunInitUserOverridePersist': 5, 'tunInitNotSet': -1, 'tunInitNeverConnected': 0.

Similar to tunInitVpnCon except that this controls tunnel automation via the backup connection. Enumeration: 'tunInitTrafficInitiated': 2, 'tunInitUserOverrideTraffic': 6, 'tunInitPersistent': 3, 'tunInitUnknown': 7, 'tunInitUserInitiated': 1, 'tunInitVrrp': 4, 'tunInitUserOverridePersist': 5, 'tunInitNotSet': -1, 'tunInitNeverConnected': 0.

The tunnel connection ID is a unique value assigned to each instance of a tunnel. It is used to associate the tunnel up, tunnel alive, and tunnel down traps together. When a tunnel goes down and is then re-established it will be assigned a new tunnel connection ID. This is the same value reported by ngevTunConnectionId in traps.

The name associated with this tunnel. Note that the name will be 'settings' if multi-tunnel is disabled.

Indicates whether this is an inbound or outbound tunnel. Enumeration: 'tunnelOutbound': 2, 'tunnelInbound': 1, 'tunnelUnknown': 0.

Indicates if COS is enabled or not. As of version 6.2 bandwidth testing can be active without COS being enabled. When that happens ngcoEnabled will return zero (notActive) but ngcoNextTestTimeDAT will not return January 1 year 0 time 0 for the time. Enumeration: 'notActive': 0, 'activeWithoutDscpRemarking': 2, 'activeWithDscpRemarking': 1.

When the next bandwidth test is scheduled to run. MM/DD/YYYY HH:MM:SS. Returns '00/00/0000 00:00:00' when no test is scheduled. The time returned is the local time on the AT&T VPN Gateway. To determine how the AT&T VPN Gateway's local time relates to UTC view the following OIDs: nghwUtcOffset (current UTC offset), nghwDstAllowed (daylight saving time allowed), nghwDstActive (daylight savings time active). NOTE: This entry is made obsolete by ngcoNextTestTimeDAT.

Current WAN interface MTU value.

Current upstream bandwidth high water mark in use.

Current downstream bandwidth high water mark in use.

When the next bandwidth test is scheduled to run. Returns January 1 year 0 time 0 when no test is scheduled. NOTE: This entry replaces ngcoNextTestTime.

The date and time of when the last bandwidth test was performed. NOTE: The date and time of high water marks retained after a reboot will return January 1 year 0 time 0 for the time.

The upstream bandwidth measured when the last bandwidth test was performed.

The downstream bandwidth measured when the last bandwidth test was performed.

The MIB module for the AT&T VPN Gateway.

The compliance statement for AT&T VPN Gateway entities which implement this MIB module.

The hardware group.

The interface group.

The VLAN group.

The VRRP group.

The 3G group.

The tunnel group.

The COS group.

The firewall group.

The Rogue MAC group.

The dial group.

The DHCP leases group.

The Captive Portal group.

The Inbound Tunnel group.

The Inbound Tunnel Network group.

Sent if the Firewall Connection table reaches the specified threshold.

Indicates the firewall Connection table has reached capacity.

The device has been in dial backup longer than the allowed threshold.

The IP address associated with the active WAN interface has changed. For example, dial backup was initiated because WAN connectivity was lost. Another example is that a PPPoE connection changed its IP address.

The unauthorized MAC detection feature is enabled and an unauthorized MAC address was detected.

The unauthorized MAC detection feature is enabled and the authorized MAC file doesn't exist.

The AT&T VPN Gateway cannot bring up a tunnel to any of the tunnel endpoints.

Sent if the AT&T VPN Gateway profile is not found. If the AT&T VPN Gateway goes too long without finding its device profile then the device will switch its status to discontinued, which will also trigger a trap/inform.

Information about the results of a tunnel connection attempt.

Information about a tunnel disconnect. The one exception is a tunnel 'alive' message, which is sent for a tunnel that is still up. Tunnel 'alive' messages have a ngtuReasonCode of tnlAlive.

The Dial Autotest (and all specified retries) failed.

Sent when the device reboots. Requestor IP will be set to loopback if an automated process caused the reboot.

Sent when the device shuts down.

Sent when a user accesses the device via SSH.

Sent when a VLAN's DHCP pool is full.

Only for use by QA and development for testing.

Sent when a secondary login attempt occurs. Secondary logins are performed when someone tries to ssh into the AT&T VPN Gateway.

Sent when a user who is ssh'ed into the AT&T VPN Gateway tries to switch to another userid.

Sent when either port 7 or 8 is determined to be not active. Only used by the AT&T VPN Gateway 8200V.

Sent when either the AT&T VPN Gateway boots without a cell modem present or when the AT&T VPN Gateway detects that the cell modem has been removed. The cellular modem must be a supported unit that allows the AT&T VPN Gateway to query its current status.

Sent when there is a VRRP state change.

Sent when the AT&T VPN Gateway is configured to also use the second WAN port as Internet Primary and one of the interfaces could not be brought up.

Optional USB cables allow out of bound (OOB) access to the AT&T VPN Gateway. The number of OOB cables expected to be plugged into the AT&T VPN Gateway is controlled by a setting in Service Manager. This event is sent when either the AT&T VPN Gateway boots without the expected number of cables present, when the AT&T VPN Gateway detects that a cable was present but has been removed, or when all missing cables are returned.

Sent when the tunnel configuration has changed. All tunnels (if any) are restarted when this occurs.

Reporting of average bandwidth along with high water mark calculations.

Sent to indicate the result of a ping test.

Sent to indicate that there are no available IP addresses in the customer direct pool.

Sent to indicate that there are no inbound tunnels available.

Sent to report on the IP addresses in use when both Dual WAN interfaces are up.

The MAC address in Service Manager this device is registered under.

The MAC address of the unauthorized machine detected when MAC monitoring is enabled.

The IP address of the active WAN interface. When viewing the output of the SNMP tree this can be determined from the interface statistics. However, for traps the active WAN interface might not be used to send the trap (i.e. it could be down the tunnel. Set to zero if not used.

An alert will be sent when the ip_conntrack table is within this percentage of the maximum.

The ip_conntrack table is currently at this percentage of the maximum.

The number of minutes the device has been connected via dial.

Used to indicate what type of problem is happening with the device's status. profileNotFound means that a profile for the device was not found on an AT&T Administration Server in any region. discontinuingTheDevice means that the device has gone too long without having a valid profile in any region. bandwNoResults means that a bandwidth test failed and no previous bandwidth test results have been found, which results in the device being marked as discontinued until a bandwidth test works. Enumeration: 'bandwNoResults': 2, 'profileNotFound': 0, 'discontinuingTheDevice': 1.

The tunnel connection ID is a unique value assigned to each instance of a tunnel. It is used to associate the tunnel up, tunnel alive, and tunnel down traps together. When a tunnel goes down and is then re-established it will be assigned a new tunnel connection ID.

The timestamp from when the tunnel came up, tried to come up, or came down.

Indicates whether the tunnel is via broadband or dial. Enumeration: 'connTypeBroadband': 0, 'connTypeAgnsDial': 1, 'connTypeOtherIspDial': 2.

In the tunnel up/down trap it is the customer account used to start the tunnel. In the secondary auth attempt trap it is the account used for the login attempt.

In the tunnel up/down trap it is the customer userid used to start the tunnel. In the secondary auth attempt trap it is the userid used for the login attempt.

String that shows a message that explains the results of a tunnel connection attempt.

String that shows why the dial test failed.

The IP address of the client that ssh'ed into the device.

The IP address of the machine that initiated a particular request (reboot, shutdown, secondary auth attempt, etc.). Will be set to loopback if an automated process caused the reboot.

Shows what type of category the dial test failure would be put in. For example, a busy signal would be a warning but a bad password would be an error. Enumeration: 'dialProblemNoCategory': 3, 'dialProblemMessage': 2, 'dialProblemWarning': 1, 'dialProblemError': 0.

The IP address of the unauthorized machine detected when MAC monitoring is enabled. Set to zero if not used.

The interface of the unauthorized machine detected when MAC monitoring is enabled.

For MAC monitoring this is the Service Manager description field. Other traps may use this field for other purposes.

Specifies the result of the secondary login attempt when someone tries to ssh into the AT&T VPN Gateway. Enumeration: 'failure': 0, 'success': 1.

The userid that the user became after their secondary login attempt was successful. Secondary logins are performed when someone tries to ssh into the AT&T VPN Gateway. The userid that the user became (or tried to become) for their switch user attempt.

The userid that was in use when the user made their switch user attempt.

The max number of minutes the device can be connected via dial without a trap being sent for excessive dial. Once this maximum is reached a trap will be sent.

An individual port that is currently not active. Only used by the AT&T VPN Gateway 8200V.

The IP address of the active IPv6 WAN interface. When viewing the output of the SNMP tree this can be determined from the interface statistics. However, for traps the active WAN interface might not be used to send the trap (i.e. it could be down the tunnel. Set to zero if not used.

The IPv6 IP address of the unauthorized machine detected when MAC monitoring is enabled. Set to zero if not used.

The IPv6 IP address of the machine that initiated a particular request (reboot, shutdown, secondary auth attempt, etc.). Will be set to loopback if an automated process caused the reboot.

The timestamp that indicates when the AT&T VPN Gateway noted that the required cellular card was missing.

The VPN Service Address assigned for this tunnel connetion. Will be not set if this is an IPv6 tunnel or the tunnel did not come up.

The VPN Service Address assigned for this tunnel connetion. Will be not set if this is an IPv4 tunnel or the tunnel did not come up.

A numeric value that indicates the results of an inbound or outbound tunnel connection attempt. Enumeration: 'wanConnectionLost': 505, 'sigCantAuthAtThisTime': 318, 'errTunNotAllowedViaDial': 552, 'attCertificateErr': 222, 'ikeUnableToAccessCertSvcs': 221, 'rigCommunicationErr': 260, 'ikeProtoclNegFailed': 250, 'gigCantAuthAtThisTime': 40, 'errSvcMgrProfileChanged': 550, 'ikeMemoryAlloc': 218, 'inbAuthErr': 558, 'errUnknown': 599, 'attEntrustLoginErr': 215, 'ikeSocketsErr': 254, 'dialAttemptFailed': 540, 'ikePhase2Failed': 212, 'inetNoTunnelHosts': 466, 'errSendingModeConfigReq': 268, 'userIdNotAuthorized': 316, 'inbLocalAuthFailed': 557, 'errAttemptToSendXauthChal': 266, 'timeoutWaitingForServerRespond': 402, 'errAssigningPrivateIPonSIG': 302, 'deviceStatusInactive': 261, 'protocolNegTimeout': 263, 'attEntrustErr': 216, 'alreadyLoggedOntoSIG': 303, 'inbSAFromOldConWithSameClientAddr': 556, 'internalErrMsg': 224, 'ikeInitFailed': 220, 'iuthTunnelSvrNotResp': 256, 'excNotReset': 545, 'errRigAuth': 547, 'errMissingLoginInfo': 549, 'errMissingGroupIdOrPwd': 271, 'inbGroupIdNotFound': 560, 'enterValidAcctAndUser': 314, 'ikeTunnelSvrNotResp': 255, 'userHitCancelButton': 502, 'isakmpNegTimeout': 262, 'errUnexpectedXauthMessage': 269, 'ikeGenericErrMsg': 252, 'errXauthTimeout': 267, 'ikeConnectionRefused': 253, 'dialSetupFailed': 541, 'errExpectedXauthMethod': 270, 'vigInternalError': 311, 'success': 0, 'errGettingRigAddr': 546, 'errTunSrvNotReachable': 548, 'inbIkePhase1NegTimeout': 561, 'ikePhase1Failed': 211, 'errCreateEspAuthData': 265, 'ikeIsakmpSaMissing': 257, 'alreadyLoggedOntoGIG': 73, 'errSettingUpSa': 264, 'inbOverlappingNetw': 559, 'tunSrvAuthFailed': 228, 'errParsingAuthResp': 542, 'ikeProtocolNotChosen': 251.

The interface in question for this event.

The timestamp that indicates when the AT&T VPN Gateway noted that the item in question was missing.

The timestamp that indicates when the trap was actually generated. If informs are in use and the server is temporarily not reachable it could be a long time before the inform is actually received.

Used to help indicate why IPv4 WAN2 could not be brought up when configured for Dual WAN. The generic 'dwTrapGeneralErr' is used when a specific reason isn't available. 'dwTrapNone' means that there was no error. Enumeration: 'dwTrapMissingStaticIP': 4, 'dwTrapConTypeNotFound': 2, 'dwTrapMissingPPPoEPass': 8, 'dwTrapUnsuppConType': 3, 'dwTrapMissingPPPoEUser': 7, 'dwTrapMissingStaticIPGway': 6, 'dwTrapNone': 0, 'dwTrapWAN2TestFailed': 9, 'dwTrapGeneralErr': 1, 'dwTrapMissingStaticIPMask': 5.

Used to help indicate why IPv6 WAN2 could not be brought up when configured for Dual WAN. The generic 'dwTrapGeneralErr' is used when a specific reason isn't available. 'dwTrapNone' means that there was no error. Enumeration: 'dwTrapMissingStaticIP': 4, 'dwTrapConTypeNotFound': 2, 'dwTrapUnsuppConType': 3, 'dwTrapMissingStaticIPGway': 6, 'dwTrapNone': 0, 'dwTrapWAN2TestFailed': 9, 'dwTrapGeneralErr': 1, 'dwTrapMissingStaticIPMask': 5.

How many OOB cables were detected when at least one was found to be missing.

How many OOB cables were expected when at least one was found to be missing.

Generic field to indicate a result. Enumeration: 'failure': 0, 'success': 1.

Generic source IPv4 address.

Generic destination IPv4 address.

Generic source IPv6 address.

Generic destination IPv6 address.

Generic field to indicate how long a test waited for a response.

Generic field to indicate how many failures occurred before this event was generated.

Generic field for description.

Generic field used to indicate when to send a trap after a test is performed. Enumeration: 'failure': 0, 'unknown': 3, 'success': 1, 'always': 2.

Field used to report on the IP of the first interface if it is using IPv4.

Field used to report on the name of the first interface if it is using IPv4.

Generic field used to report on the IP of the first interface if it is using IPv6.

Field used to report on the name of the first interface if it is using IPv6.

Generic field used to report on the IP of the second interface if it is using IPv4.

Field used to report on the name of the second interface if it is using IPv4.

Generic field used to report on the IP of the second interface if it is using IPv6.

Field used to report on the name of the second interface if it is using IPv6.

Tunnel field that indicates whether or not Nat-T is in use. Enumeration: 'disabled': 0, 'enabled': 1.

Tunnel field that indicates the ESP Algorithm.

Tunnel field that indicates the Auth Algorithm.

Tunnel field that indicates the (optional) Compression Algorithm.

The compliance statement for AT&T VPN Gateway entities which implement this MIB module.

The event notifications

The event ojects.

The event ojects used only for data usage statistics.

The upstream high water mark to be used for the calculations.

The downstream high water mark to be used for the calculations.

Average upstream bandwidth measured over a certain time period.

Average downstream bandwidth measured over a certain time period.

Average upstream bandwidth measured over a certain time period.

Average downstream bandwidth measured over a certain time period.

Average upstream bandwidth measured over a certain time period.

Average downstream bandwidth measured over a certain time period.

Average upstream bandwidth measured over a certain time period.

Average downstream bandwidth measured over a certain time period.

Average upstream bandwidth measured over a certain time period.

Average downstream bandwidth measured over a certain time period.

Average upstream bandwidth measured over a certain time period.

Average downstream bandwidth measured over a certain time period.

Average upstream bandwidth measured over a certain time period.

Average downstream bandwidth measured over a certain time period.

Average upstream bandwidth measured over a certain time period.

Average downstream bandwidth measured over a certain time period.

Average upstream bandwidth measured over a certain time period.

Average downstream bandwidth measured over a certain time period.

Average upstream bandwidth measured over a certain time period.

Average downstream bandwidth measured over a certain time period.

Average upstream bandwidth measured over a certain time period.

Average downstream bandwidth measured over a certain time period.

Average upstream bandwidth measured over a certain time period.

Average downstream bandwidth measured over a certain time period.

The (conceptual) table of firewall tables on the device. An entry shall be placed in the storage table for each table.

A (conceptual) entry for one logical firewall table area on the host.

A unique value for each logical firewall table contained by the device.

The name of this table.

The number of chains in this particular table.

The (conceptual) chain of firewall chains on the device. An entry shall be placed in the storage chain for each chain.

A (conceptual) entry for one logical firewall chain area on the host.

A unique value for each logical firewall chain contained by the device.

Shows what table this chain belongs to. Corresponds to ngfwTableIndex in ngFirewallTable.

The name of this chain.

The number of rules in this particular chain.

The (conceptual) table of firewall rules on the device. An entry shall be placed in the storage rule for each rule.

A (conceptual) entry for one logical firewall rule area on the host.

A unique value for each logical firewall rule contained by the device.

Shows what table this rule belongs to. Corresponds to ngfwTableIndex in ngFirewallTable.

Shows what chain this rule belongs to. Corresponds to ngfwChainIndex in ngFirewallChainTable.

Total packets for this rule.

Total bytes for this rule.

The rule target.

The rule protocol.

The rule input interface.

The rule output interface.

The rule source IP.

The rule source mask in CIDR-compliant format.

The rule destination IP.

The rule destination mask in CIDR-compliant format.

The rule MISC section.

The number entries in the ip_conntrack file.

The maximum number of entries in the ip_conntrack file.

The (conceptual) table of IPv6 firewall tables on the device. An entry shall be placed in the storage table for each table.

A (conceptual) entry for one logical IPv6 firewall table area on the host.

A unique value for each logical IPv6 firewall table contained by the device.

The name of this table.

The number of chains in this particular table.

The (conceptual) chain of IPv6 firewall chains on the device. An entry shall be placed in the storage chain for each chain.

A (conceptual) entry for one logical IPv6 firewall chain area on the host.

A unique value for each logical IPv6 firewall chain contained by the device.

Shows what table this chain belongs to. Corresponds to ngfwIPv6TableIndex in ngIPv6FirewallTable.

The name of this chain.

The number of rules in this particular chain.

The (conceptual) table of IPv6 firewall rules on the device. An entry shall be placed in the storage rule for each rule.

A (conceptual) entry for one logical IPv6 firewall rule area on the host.

A unique value for each logical IPv6 firewall rule contained by the device.

Shows what table this rule belongs to. Corresponds to ngfwIPv6TableIndex in ngIPv6FirewallTable.

Shows what chain this rule belongs to. Corresponds to ngfwIPv6ChainIndex in ngIPv6FirewallChainTable.

Total packets for this rule.

Total bytes for this rule.

The rule target.

The rule protocol.

The rule input interface.

The rule output interface.

The rule source IP. Not used and set to all zeroes for IPv4 firewall output.

The rule source mask in CIDR-compliant format. Not used and set to all zeroes for IPv4 firewall output.

The rule source IP. Not used and set to all zeroes for IPv4 firewall output.

The rule source mask in CIDR-compliant format. Not used and set to all zeroes for IPv4 firewall output.

The rule MISC section.

Inidicates whether or not Rogue MAC detection has been enabled in Service Manager. Enumeration: 'disabled': 0, 'enabled': 1.

The (conceptual) table of rogue MACs detected by the device. An entry shall be placed in the storage table for each rogue MAC.

A (conceptual) entry for one logical rogue MAC area on the host.

A unique value for each logical rogue MAC detected by the device.

The MAC address of this detected rogue MAC. One entry that is zeroed out is returned when there are no rogue MACs detected.

The date and time of when this rogue MAC was detected. Returned as a regular string in the format MM/DD/YYYY HH:MM:SS. Returns '00/00/0000 00:00:00' when there are no rogue MACs detected. The time returned is the local time on the AT&T VPN Gateway. To determine how the AT&T VPN Gateway's local time relates to UTC view the following OIDs: nghwUtcOffset (current UTC offset), nghwDstAllowed (daylight saving time allowed), nghwDstActive (daylight savings time active). NOTE: This entry is made obsolete by ngrmTimestampDAT.

The interface this rogue MAC was detected on. One entry that with a value of 'NONE' and a msg is returned when there are no rogue MACs detected.

The date and time of when this rogue MAC was detected. Returns January 1 year 0 time 0 when there are no rogue MACs detected or the time is unknown. NOTE: This entry replaces ngrmTimestamp.

The full phone number that will be dialed by the AT&T VPN Gateway. This also includes dial prefix information. For example, the AT&T VPN Gateway might have to dial the number nine and then a comma to access an outside line. The nine and the comma will be included in this entry.

The result of the last dial test. If no dial test has been performed yet then 'failure' is returned. If a dial test is not needed because dial is currently up then 'success' is returned. Enumeration: 'failure': 0, 'success': 1.

The approximate time the last dial test completed given in the format MM/DD/YYYY HH:MM:SS. Returns '00/00/0000 00:00:00' when no test is scheduled. or when no test has run yet. If the dial connection is currently in use then the dial test is not needed (since dial is obviously already working). ngdiLastTestCompleteTime is simply updated to the recent time whent the AT&T VPN Gateway last verified that the dial connection was still up. The time returned is the local time on the AT&T VPN Gateway. To determine how the AT&T VPN Gateway's local time relates to UTC view the following OIDs: nghwUtcOffset (current UTC offset), nghwDstAllowed (daylight saving time allowed), nghwDstActive (daylight savings time active). NOTE: This entry is made obsolete by ngdiLastTestCompleteTimeDAT.

Shows what type of category the dial test failure would be put in. For example, a busy signal would return dialProblemWarning but a bad password would return dialProblemError. If a dial test is not needed because dial is currently up then dialProblemMessage is returned. Enumeration: 'dialProblemNoCategory': 3, 'dialProblemMessage': 2, 'dialProblemWarning': 1, 'dialProblemError': 0.

String that shows why the dial test failed. If the test was successful or the dial connection is currently up then 'success' is returned.

If the dial connection is currently in use then the dial test is not needed (since dial is obviously already working). ngdiLastTestCompleteTimeDAT is simply updated to the recent time whent the AT&T VPN Gateway last verified that the dial connection was still up. Returns January 1 year 0 time 0 when no test is scheduled or when no test has run yet. The time returned is the local time on the AT&T VPN Gateway. To determine how the AT&T VPN Gateway's local time relates to UTC view the following OIDs: nghwUtcOffset (current UTC offset), nghwDstAllowed (daylight saving time allowed), nghwDstActive (daylight savings time active). NOTE: This entry replaces ngdiLastTestCompleteTime.

Specifies the secondary phone number to be tried for Dial Backup in case the primary Dial Backup phone number is not available.

The (conceptual) table of all current, active DHCP leases on the device. An entry shall be placed in the storage table for each DHCP lease.

A (conceptual) entry for one logical DHCP lease on the host.

A unique value for each logical DHCP lease contained by the device.

The IP address associated with an indivdual DHCP lease.

The MAC address associated with an indivdual DHCP lease.

The hostname associated with an indivdual DHCP lease.

The physical port (if valid) on the device associated with an indivdual DHCP lease.

The VLAN ID on the device associated with an indivdual DHCP lease.

The (conceptual) table of all current, active DHCP leases on the device. An entry shall be placed in the storage table for each DHCP lease.

A (conceptual) entry for one logical DHCP lease on the host.

A unique value for each logical DHCP lease contained by the device.

The IP address associated with an indivdual DHCP lease.

The MAC address associated with an indivdual DHCP lease.

The hostname associated with an indivdual DHCP lease.

The physical port (if valid) on the device associated with an indivdual DHCP lease.

The physical port (if valid) on the device associated with an indivdual DHCP lease.

The physical port (if valid) on the device associated with an indivdual DHCP lease.

The physical port (if valid) on the device associated with an indivdual DHCP lease.

The physical port (if valid) on the device associated with an indivdual DHCP lease.

The physical port (if valid) on the device associated with an indivdual DHCP lease.

The VLAN ID on the device associated with an indivdual DHCP lease.

The (conceptual) table of inbound tunnels on the device. An entry shall be placed in the storage table for each inbound tunnel.

A (conceptual) entry for one logical inbound tunnel area on the host.

A unique value for each logical inbound tunnel contained by the device.

The client transport address of this inbound tunnel.

The IPsec interface associated with this inbound tunnel.

The tunnel type of this inbound tunnel.

The userid associated with this inbound tunnel.

The Service Manager profile associated with this inbound tunnel.

Time this inbound tunnel was established.

How long this inbound tunnel has been up.

This inbound tunnel's idle timeout setting.

How long this inbound tunnel has been idle.

This inbound tunnel's negotiated IKE Phase 1 lifetime.

Is NAT-T negotiated for this inbound tunnel? Enumeration: 'yes': 1, 'no': 0.

Active client SA's negotiated for this inbound tunnel.

The (conceptual) table of inbound tunnel networks on the device. An entry shall be placed in the storage table for each inbound tunnel network.

A (conceptual) entry for one logical inbound tunnel network area on the host.

A unique value for each logical inbound tunnel's network contained by the device.

This inbound tunnel network.

Time this inbound tunnel network was established.

This inbound tunnel network's negotiated IKE Phase 2 lifetime.

This inbound tunnel network's ESP algorithm.

Is compression negotiated for this inbound tunnel? Enumeration: 'yes': 1, 'no': 0.

Shows what inbound tunnel this network belongs to. Corresponds to inbTunClientTransAddr in attInbTunEntry.