BIANCA-BRICK-IPSEC-MIB
AI MIB Summary
Standard SNMP MIB module defining data structures for BIANCA-BRICK-IPSEC-MIB.
101
Objects
Active
Status
2
Dependencies
Imported Objects
Objects
101 total| Object Name |
|---|
org OBJECT IDENTIFIER .1.3 |
RFC1155-SMI Unknown .1.3 |
dod OBJECT IDENTIFIER .1.3.6 |
internet OBJECT IDENTIFIER .1.3.6.1 |
private OBJECT IDENTIFIER .1.3.6.1.4 |
enterprises OBJECT IDENTIFIER .1.3.6.1.4.1 |
bintec OBJECT IDENTIFIER .1.3.6.1.4.1.272 |
bibo OBJECT IDENTIFIER .1.3.6.1.4.1.272.4 |
ipsec OBJECT IDENTIFIER .1.3.6.1.4.1.272.4.26 |
ipsecGlobals OBJECT IDENTIFIER .1.3.6.1.4.1.272.4.26.1 |
ipsecGlobPeerIndexIndex of first IPsec peer in ipsecPeerTable.
If this object is set to a Value <= 0, IPSec is switched
explicitly off. If the peer referenced by this object does not
exist in the table, all packets will be dropped.rw INTEGER .1.3.6.1.4.1.272.4.26.1.1 |
ipsecGlobDefaultAuthMethodThe authentication method used by default. If the
ipsecPeerAuthMethod field of an ipsecPeerEntry is set
to 'default', this value is assumed.
Possible values:
pre-sh-key(1),
dss-sig(2),
rsa-sig(3),
rsa-enc(4)
::= { ipsecGlobals 2 }
ipsecGlobDefaultCertificate OBJECT-TYPE
SYNTAX INTEGER
ACCESS read-write
STATUS mandatory
DESCRIPTIONrw Enumeration .1.3.6.1.4.1.272.4.26.1.11 |
ipsecGlobDefaultPh1ModeThis object specifies the default exchange mode used for IKE
SA negotiation.
Possible values:
id-protect(1),
aggressive(2)
::= { ipsecGlobals 12 }
ipsecGlobDefaultPfsGroup OBJECT-TYPE
SYNTAX INTEGER
ACCESS read-write
STATUS mandatory
DESCRIPTIONrw Enumeration .1.3.6.1.4.1.272.4.26.1.27 |
ipsecGlobLocalSecretPeriodsecThis object specifies the period of time in seconds after which
a new secret for creating local anti-clogging tokens is
created. The previous secret is remembered, so that the
anti-clogging tokens created with the previous secret are
also recognized as valid. After the local secret is recreated
again, the old tokens are not recognized anymore and all IKE
packets belonging to the old security associations are
discarded. This means that the maximum lifetime of an ISAKMP SA
is twice the value of this timer.rw INTEGER .1.3.6.1.4.1.272.4.26.1.28 |
ipsecGlobIgnoreCrPayloadsThis object specifies whether certificate request payloads
should be ignored by IKE.
Possible values:
true(1),
false(2)
::= { ipsecGlobals 29 }
ipsecGlobNoCrPayloads OBJECT-TYPE
SYNTAX INTEGER {
true(1),
false(2)
}
ACCESS read-write
STATUS mandatory
DESCRIPTIONrw Enumeration .1.3.6.1.4.1.272.4.26.1.30 |
ipsecGlobNoKeyHashPayloadsThis object specifies whether IKE should suppress key hash
payloads.
Possible values:
true(1),
false(2)
::= { ipsecGlobals 31 }
ipsecGlobNoCrls OBJECT-TYPE
SYNTAX INTEGER {
true(1),
false(2)
}
ACCESS read-write
STATUS mandatory
DESCRIPTIONrw Enumeration .1.3.6.1.4.1.272.4.26.1.32 |
ipsecGlobSendFullCertChainsThis object specifies whether IKE should send full certificate
chains.
Possible values:
true(1),
false(2)
::= { ipsecGlobals 33 }
ipsecGlobTrustIcmpMsg OBJECT-TYPE
SYNTAX INTEGER {
true(1),
false(2)
}
ACCESS read-write
STATUS mandatory
DESCRIPTIONrw Enumeration .1.3.6.1.4.1.272.4.26.1.34 |
ipsecGlobSpiSizeA compatibility flag that specifies the length of the SPI in
bytes, which is used when an ISAKMP SA SPI (Cookie) is sent to
the remote peer.
This field takes effect only if ipsecGlobZeroIsakmpCookies
is true.rw INTEGER .1.3.6.1.4.1.272.4.26.1.35 |
ipsecGlobZeroIsakmpCookiesThis object specifies whether zeroed ISAKMP cookies should be
sent.
Possible Values:
true(1),
false(2)
::= { ipsecGlobals 36 }
ipsecGlobMaxKeyLength OBJECT-TYPE
SYNTAX INTEGER
ACCESS read-write
STATUS mandatory
DESCRIPTIONrw Enumeration .1.3.6.1.4.1.272.4.26.1.38 |
ipsecSaTableThis table contains the list of currently active IPSec security
associations. SEQUENCE OF IpsecSaEntry .1.3.6.1.4.1.272.4.26.3 |
ipsecSaEntryThis object contains an IPSec security association. IpsecSaEntry .1.3.6.1.4.1.272.4.26.3.1 |
ipsecSaIndexA unique index for this entry.ro INTEGER .1.3.6.1.4.1.272.4.26.3.1.1 |
ipsecSaStateThe current state of the security association
Possible values:
alive(1),
expired(2),
delete (3)
::= { ipsecSaEntry 3 }
ipsecSaCreator OBJECT-TYPE
SYNTAX INTEGER {
manual(1),
ike(2)
}
ACCESS read-only
STATUS mandatory
DESCRIPTIONrw Enumeration .1.3.6.1.4.1.272.4.26.3.1.4 |
ipsecSaDirThis object specifies whether the SA is used for inbound or
outbound processing.
Possible values:
inbound(1),
outbound(2)
::= { ipsecSaEntry 5 }
ipsecSaMode OBJECT-TYPE
SYNTAX INTEGER {
tunnel(1),
transport(2)
}
ACCESS read-only
STATUS mandatory
DESCRIPTIONro Enumeration .1.3.6.1.4.1.272.4.26.3.1.6 |
ipsecSaSecProtoThis object specifies the security protocol applied by this SA.
Possible values:
esp(50),
ah(51),
ipcomp(108)
::= { ipsecSaEntry 7 }
ipsecSaLocalIp OBJECT-TYPE
SYNTAX IpAddress
ACCESS read-only
STATUS mandatory
DESCRIPTIONro Enumeration .1.3.6.1.4.1.272.4.26.3.1.18 |
ikeProposalTableThis table contains the list of IKE proposals. The
entries may be concatenated on a logical or basis
using the NextChoice field to choices of multiple
proposals. SEQUENCE OF IkeProposalEntry .1.3.6.1.4.1.272.4.26.6 |
ikeProposalEntryThis object contains an IKE proposal, i.e. the
encryption algorithm and the hash algorithm used to
protect traffic sent over an IKE SA. IkeProposalEntry .1.3.6.1.4.1.272.4.26.6.1 |
ikePropIndexA unique index identifying this entry.ro INTEGER .1.3.6.1.4.1.272.4.26.6.1.1 |
ikePropNextChoiceThis object specifies the index of the next proposal
of a choice of proposals. If this object is 0, this
marks the end of a proposal chain.rw INTEGER .1.3.6.1.4.1.272.4.26.6.1.2 |
ikePropDescriptionAn optional textual description of the proposal chain
beginning at this entry.rw DisplayString (SNMPv2-TC) .1.3.6.1.4.1.272.4.26.6.1.3 |
ikePropEncAlgThis object specifies the encryption algorithm used
to protect traffic sent over an IKE SA.
Possible values:
none(1),
des-cbc(2),
des3-cbc(3),
blowfish-cbc(4),
cast128-cbc(5)
::= { ikeProposalEntry 4 }
ikePropHashAlg OBJECT-TYPE
SYNTAX INTEGER {
delete(1),
none(2),
md5(3),
sha1(4)
}
ACCESS read-write
STATUS mandatory
DESCRIPTIONrw Enumeration .1.3.6.1.4.1.272.4.26.6.1.5 |
ipsecTrafficTableThis table contains lists of Traffic and the actions
which should be applied to it, together with the
necessary parameters. SEQUENCE OF IpsecTrafficEntry .1.3.6.1.4.1.272.4.26.7 |
ipsecTrafficEntryThis object contains a description of a type of IP
traffic and the action which should be applied to it
together with the necessary parameters. IpsecTrafficEntry .1.3.6.1.4.1.272.4.26.7.1 |
ipsecTrIndexA unique index identifying this entry.ro INTEGER .1.3.6.1.4.1.272.4.26.7.1.1 |
ipsecTrNextIndexThis object specifies the index of the next traffic
entry in hierarchy.rw INTEGER .1.3.6.1.4.1.272.4.26.7.1.2 |
ipsecTrDescriptionAn optional human readable description for this traffic entry.rw DisplayString (SNMPv2-TC) .1.3.6.1.4.1.272.4.26.7.1.3 |
ipsecTrLocalAddressThe source IP-address of this traffic entry. It maybe
either a single address, a network address (in
combination with ipsecTrSrcMask), or the first address
of an address range (in combination with
ipsecTrLocalRange).rw IpAddress .1.3.6.1.4.1.272.4.26.7.1.4 |
ipsecTrLocalMaskLenThe length of the network mask for a source network.rw INTEGER .1.3.6.1.4.1.272.4.26.7.1.5 |
ipsecTrLocalRangeThe last address of a source address range. If this
field is nonzero, the ipsecTrLocalMaskLen field is
ignored and the source is considered as a range of
addresses beginning with ipsecTrLocalAddress and ending
with ipsecTrLocalRange.rw IpAddress .1.3.6.1.4.1.272.4.26.7.1.6 |
ipsecTrRemoteAddressThe destination IP-address of this traffic entry. It maybe
either a single address, a network address (in
combination with ipsecTrDstMask), or the first address
of an address range (in combination with
ipsecTrRemoteRange).rw IpAddress .1.3.6.1.4.1.272.4.26.7.1.7 |
ipsecTrRemoteMaskLenThe length of the network mask for a destination network.rw INTEGER .1.3.6.1.4.1.272.4.26.7.1.8 |
ipsecTrRemoteRangeThe last address of a destination address range. If
this field is nonzero, the ipsecTrRemoteMaskLen field is
ignored and the source is considered as a range of
addresses beginning with ipsecTrRemoteAddress and ending
with ipsecTrRemoteRange.rw IpAddress .1.3.6.1.4.1.272.4.26.7.1.9 |
ipsecTrProtoThe transport protocol defined for this entry.rw Enumeration .1.3.6.1.4.1.272.4.26.7.1.10 |
ipsecTrLocalPortThe source port defined for this traffic entry.rw INTEGER .1.3.6.1.4.1.272.4.26.7.1.11 |
ipsecTrRemotePortThe destination port defined for this traffic entry.rw INTEGER .1.3.6.1.4.1.272.4.26.7.1.12 |
ipsecTrActionThe action to be applied to traffic matching this entry.
Possible values:
delete(1),
always-plain(2),
pass(3),
protect(4),
drop(5)
::= { ipsecTrafficEntry 13 }
ipsecTrProposal OBJECT-TYPE
SYNTAX INTEGER
ACCESS read-write
STATUS mandatory
DESCRIPTIONrw Enumeration .1.3.6.1.4.1.272.4.26.7.1.15 |
ipsecTrLifeTimeThis object specifies an index in the
ipsecLifeTimeTable. This lifetime overwrites the
lifetimes specified for all proposals referenced by
this traffic entry. It may itself be overwritten by
an explicit lifetime specified for the peer entry
referencing this traffic entry. If the lifetime
pointed to by this index does not exist or is
inappropriate, the default lifetime from the
ipsecGlobalsTable is used.rw INTEGER .1.3.6.1.4.1.272.4.26.7.1.16 |
ipsecTrGranularityThis object specifies the granularity with which SA's
must be created for this kind of traffic.
Possible values:
default(1),
coarse(2),
ip(3),
proto(4),
port(5)
::= { ipsecTrafficEntry 17 }
ipsecTrKeepAlive OBJECT-TYPE
SYNTAX INTEGER {
true(1),
false(2),
default(3)
}
ACCESS read-write
STATUS mandatory
DESCRIPTIONrw Enumeration .1.3.6.1.4.1.272.4.26.7.1.18 |
ipsecProposalTableThis table contains the list of IPSec proposals. The
entries may be concatenated on a logical 'or' or a
logical 'and' basis -depending on the setting of the
'BoolOp' field- using the 'Next' field. This makes
the configuration of multiple choices of proposal
bundles possible.
Possible concatenation:
(proposal1 or propsal2 or ... proposaln)
and
(proposal1 or propsal2 or ... proposaln)
and
:
:
(proposal1 or propsal2 or ... proposaln)
This table also includes manually
keyed security associations, which may not be
concatenated to choices with BoolOp set to 'or' SEQUENCE OF IpsecProposalEntry .1.3.6.1.4.1.272.4.26.8 |
ipsecProposalEntryThis object contains an IPSec proposal, i.e. a
proposed set of security parameters applied to
traffic sent over an IPSec security association. IpsecProposalEntry .1.3.6.1.4.1.272.4.26.8.1 |
ipsecPropIndexA unique index for this entry.ro INTEGER .1.3.6.1.4.1.272.4.26.8.1.1 |
ipsecPropNextThe index of the next Proposal in the actual chain.rw INTEGER .1.3.6.1.4.1.272.4.26.8.1.2 |
ipsecPropBoolOpThis object specifies how the proposal referenced by
Next should be concatenated.
Possible values:
delete(1),
or(2),
and(3)
::= { ipsecProposalEntry 3 }
ipsecPropDescription OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-write
STATUS mandatory
DESCRIPTIONrw Enumeration .1.3.6.1.4.1.272.4.26.8.1.6 |
ipsecPropEncAlgThe encryption algorithm to apply, if any.
Possible values:
none(1),
des-cbc(2),
des3-cbc(3),
blowfish(4),
cast128-cbc(5)
::= { ipsecProposalEntry 7 }
ipsecPropAuthAlg OBJECT-TYPE
SYNTAX INTEGER {
none(2),
md5-96(4),
sha1-96(6)
}
ACCESS read-write
STATUS mandatory
DESCRIPTIONrw Enumeration .1.3.6.1.4.1.272.4.26.8.1.8 |
ipsecPropLifeTimeThe index in the ipsecLifeTimeTable containing the
lifetime values ued for an SA created from this
proposal. This field may be overwritten by an
explicit lifetime specified for the traffic entry
which references this proposal entry, or by an
explicit lifetime specified for the peer entry
referencing that traffic entry. If this field is
empty or points to a nonexistent or inappropriate
lifetime entry, the default life time from the
ipsecGlobalsTable is used.rw INTEGER .1.3.6.1.4.1.272.4.26.8.1.10 |
ipsecPropInSpiThis object specifies the Security Parameters Index
(SPI) which should be used for the inbound SA of a
manually keyed Proposal. The SPI is used to
distinguish between multiple IPSec connections to the
same peer with the same security protocol. The
outbound SPI of the remote sides' corresponding
proposal entry has to be equal to this value. This
object is ignored for automatically keyed SAs, as it
is chosen randomly by the initiator.rw HexValue .1.3.6.1.4.1.272.4.26.8.1.11 |
ipsecPropOutSpiThis object specifies the Security Parameters Index
(SPI) which should be used for the outbound SA of a
manually keyed Proposal. The SPI is used to
distinguish between multiple IPSec connections to the
same peer with the same security protocol. The
inbound SPI of the remote sides' corresponding
proposal entry has to be equal to this value. This
object is ignored for automatically keyed SAs, as it
is chosen randomly by the initiator.rw HexValue .1.3.6.1.4.1.272.4.26.8.1.12 |
ipsecPropEncKeyInThis object serves as an input field for the inbound
encryption key used with manually keyed SAs. Its
contents are reset to a single asterisk immediately
after the set operation (or input via the
console). It is not evaluated for automatic proposals
or for proposals which do not require an encryption
key.rw DisplayString (SNMPv2-TC) .1.3.6.1.4.1.272.4.26.8.1.14 |
ipsecPropEncKeyOutThis object serves as an input field for the outbound
encryption key used with manually keyed SAs. Its
contents are reset to a single asterisk immediately
after the set operation (or input via the
console). It is not evaluated for automatic proposals
or for proposals which do not require an encryption
key.rw DisplayString (SNMPv2-TC) .1.3.6.1.4.1.272.4.26.8.1.15 |
ipsecPropAuthKeyInThis object serves as an input field for the inbound
authentication key used with manually keyed SAs. Its
contents are reset to a single asterisk immediately
after the set operation (or input via the
console). It is not evaluated for automatic proposals
or for proposals which do not require an authentication
key.rw DisplayString (SNMPv2-TC) .1.3.6.1.4.1.272.4.26.8.1.17 |
ipsecPropAuthKeyOutThis object serves as an input field for the outbound
authentication key used with manually keyed SAs. Its
contents are reset to a single asterisk immediately
after the set operation (or input via the
console). It is not evaluated for automatic proposals
or for proposals which do not require an authentication
key.rw DisplayString (SNMPv2-TC) .1.3.6.1.4.1.272.4.26.8.1.18 |
ipsecPropEncKeyDataIn OCTET STRING .1.3.6.1.4.1.272.4.26.8.1.33 |
ipsecPropEncKeyDataOut OCTET STRING .1.3.6.1.4.1.272.4.26.8.1.34 |
ipsecPropAuthKeyDataIn OCTET STRING .1.3.6.1.4.1.272.4.26.8.1.35 |
ipsecPropAuthKeyDataOut OCTET STRING .1.3.6.1.4.1.272.4.26.8.1.36 |
ipsecLifeTimeTableThis table contains the list of defined lifetimes for IPsec
and IKE SAs. SEQUENCE OF IpsecLifeTimeEntry .1.3.6.1.4.1.272.4.26.9 |
ipsecLifeTimeEntryThis object contains a lifetime, i.e. the soft and hard
expiry limits for IPsec and IKE SA's. IpsecLifeTimeEntry .1.3.6.1.4.1.272.4.26.9.1 |
ipsecLifeIndexA unique index identifying this entry.ro INTEGER .1.3.6.1.4.1.272.4.26.9.1.1 |
ipsecLifeTypeThis object specifies the type of a lifetime entry.rw Enumeration .1.3.6.1.4.1.272.4.26.9.1.2 |
ipsecLifeSoftKbThe maximum amount of data (in KB) which may be protected
by an SA before it is refreshed.rw INTEGER .1.3.6.1.4.1.272.4.26.9.1.3 |
ipsecLifeSoftSecThe maximum time (in seconds) after which an SA will be
refreshed,.rw INTEGER .1.3.6.1.4.1.272.4.26.9.1.4 |
ipsecLifeHardKbThe maximum amount of data (in KB) which may be protected
by an SA before it is deleted.rw INTEGER .1.3.6.1.4.1.272.4.26.9.1.5 |
ipsecLifeHardSecThe maximum time (in seconds) after which an SA will be
refreshed,.rw INTEGER .1.3.6.1.4.1.272.4.26.9.1.6 |
ipsecStats OBJECT IDENTIFIER .1.3.6.1.4.1.272.4.26.10 |
ipsecStatsCurrentIkeSasCurrent number of IKE SA's.ro INTEGER .1.3.6.1.4.1.272.4.26.10.1 |
ipsecStatsCurrentIpsecSasCurrent number of IPSec SA's.ro INTEGER .1.3.6.1.4.1.272.4.26.10.2 |
ipsecStatsIpNumber of IP packets processed.ro INTEGER .1.3.6.1.4.1.272.4.26.10.3 |
ipsecStatsNonIpNumber of non-IP packets processed.ro INTEGER .1.3.6.1.4.1.272.4.26.10.4 |
ipsecStatsAhNumber of AH packets processed.ro INTEGER .1.3.6.1.4.1.272.4.26.10.5 |
ipsecStatsEspNumber of ESP packets processed.ro INTEGER .1.3.6.1.4.1.272.4.26.10.6 |
ipsecStatsDropNumber of packets dropped.ro INTEGER .1.3.6.1.4.1.272.4.26.10.7 |
ipsecStatsPassNumber of packets passed plain.ro INTEGER .1.3.6.1.4.1.272.4.26.10.8 |
ipsecStatsTrigNumber of packets which triggered an IKE negotiation.ro INTEGER .1.3.6.1.4.1.272.4.26.10.9 |
ipsecStatsFragPktNumber of partial packets currently being reassembled.ro INTEGER .1.3.6.1.4.1.272.4.26.10.10 |
ipsecStatsFragBytesTotal size of the partial packets currently being reassembled.ro INTEGER .1.3.6.1.4.1.272.4.26.10.11 |
ipsecStatsFragNonfirstNumber of non-first fragments currently queued.ro INTEGER .1.3.6.1.4.1.272.4.26.10.12 |
ipsecGlobalsContinued OBJECT IDENTIFIER .1.3.6.1.4.1.272.4.26.11 |
ipsecGlobContPreIpsecRulesThis object specifies an index in the IPsec traffic
table containing a list of traffic definitions which
has to be considered prior to the traffic lists of
the IPSec peers in IPSec traffic processing.
It may contain either pass or drop entries (protect entries
are ignored, if erroneously configured).rw INTEGER .1.3.6.1.4.1.272.4.26.11.1 |
ipsecSaEncAlgThe encryption algorithm used, if any.
Possible Values:
none(1),
des-cbc(2),
des3-cbc(3),
blowfish-cbc(4),
cast128-cbc(5)
::= { ipsecSaEntry 19 }
ipsecSaAuthKeyLen OBJECT-TYPE
SYNTAX INTEGER
ACCESS read-only
STATUS mandatory
DESCRIPTIONro Enumeration .1.3.6.1.4.1.3551.4.1.16.1.1.1.1.1.3 |
ikeSaXchTypeThe exchange mode used to create the SA.
Possible values:
base(1),
id-protect(2),
authentication-only(3),
aggressive(4),
info(5),
quick(32),
new-group(33),
any(256)
::= { ikeSaEntry 4 }
ikeSaAuthMethod OBJECT-TYPE
SYNTAX INTEGER {
pre-sh-key(1),
dss-sig(2),
rsa-sig(3),
rsa-enc(4)
}
ACCESS read-only
STATUS mandatory
DESCRIPTIONro Enumeration .1.3.6.1.4.1.3551.4.1.16.1.1.1.1.1.5 |
ikeSaAlgsThe names of the encryption and hash algorithm and of the prf.ro DisplayString (SNMPv2-TC) .1.3.6.1.4.1.3551.4.1.16.1.1.1.1.1.6 |
ikeSaRoleThis object specifies by which side the SA
negotiation was initiated.
Possible values:
true(1),
false(2)
::= { ikeSaEntry 7 }
ikeSaLocalId OBJECT-TYPE
SYNTAX DisplayString
ACCESS read-only
STATUS mandatory
DESCRIPTIONro Enumeration .ipsecPeerEntry.20 |
ipsecPeerPreSharedKeyThe pre-shared-key used with this peer, if pre-shared-keys
are used for authentication. This field serves only
as an input field and its contents are replaced with
a single asterisk immediately after it is set.rw DisplayString (SNMPv2-TC) .ipsecPeerEntry.21 |
ipsecPeerIkeGroupThe Group used for Diffie Hellman key agreement algorithm.
Possible values:
0: use default value from ipsecGlobals table
1: a 768-bit MODP group
2: a 1024-bit MODP group
3: a GF[2^155] group
4: a GF[2^185] group
5: a 1536-bit MODP grouprw INTEGER .ipsecPeerEntry.22 |
ipsecPeerPfsGroupThe Diffie Hellman group used for additional Perfect
Forward Secrecy (PFS) DH exponentiations.
Possible values:
-1: explicitly do not use PFS
(overrides ipsecGlob2DefaultPfsGroup),
0: use default value from ipsecGlob2DefaultPfsGroup,
1: a 768-bit MODP group,
2: a 1024-bit MODP group,
5: a 1536-bit MODP group.rw INTEGER .ipsecPeerEntry.23 |
ipsecPeerPh1ModeThis object specifies the exchange mode used for IKE
SA negotiation.
Possible values:
id-protect(1),
aggressive(2),
default(3)
::= { ipsecPeerEntry 24 }
ipsecPeerIkeLifeTime OBJECT-TYPE
SYNTAX INTEGER
ACCESS read-write
STATUS mandatory
DESCRIPTIONrw Enumeration .ipsecPeerEntry.29 |
ipsecPeerGranularityThis object specifies the granularity with which SA's
with this peer are created.
Possible values:
default(1),
coarse(2),
ip(3),
proto(4),
port(5)
::= { ipsecPeerEntry 30 }
ipsecPeerDontVerifyPad OBJECT-TYPE
SYNTAX INTEGER {
false(1),
true(2)
}
ACCESS read-write
STATUS mandatory
DESCRIPTIONrw Enumeration .ipsecPeerEntry.31 |
ipsecPeerDefaultIpsecProposalsThe index of the default IPSec proposal used for
encrypting all the traffic bound to the (optional)
logical interface created for this peer.rw INTEGER .ipsecPeerEntry.42 |
ipsecPeerPreSharedKeyDataField used for storing the pre-shared-key permanently. OCTET STRING .ipsecPeerEntry.63 |
ipsecGlobContDefaultRuleThis object specifies how to treat packets which do not match
any entry in the traffic lists of the active peers.
Possible values:
drop(1),
pass(2)
::= { ipsecGlobalsContinued 2 }
ipsecPublicKeyTable OBJECT-TYPE
SYNTAX SEQUENCE OF IpsecPubKeyEntry
ACCESS not-accessible
STATUS mandatory
DESCRIPTIONrw Enumeration .ipsecPubKeyEntry.3 |
ipsecPubKeyKeyLengthThe size of the public and private keys in bits.ro INTEGER .ipsecPubKeyEntry.4 |