CISCO-IKE-CONFIGURATION-MIB
AI MIB Summary
The CISCO-IKE-CONFIGURATION-MIB enables the configuration and monitoring of Internet Key Exchange (IKE) Phase 1 parameters, including Main Mode settings, Security Associations (SAs), and Security Parameter Indexes (SPIs), on Cisco IOS and NX-OS devices to establish secure tunnels for IPsec VPNs.
This is a MIB Module for configuring and viewing IKE parameters and policies.
Acronyms The following acronyms are used in this document:
IPsec: Secure IP Protocol
VPN: Virtual Private Network
ISAKMP: Internet Security Association and Key Exchange
Protocol
IKE: Internet Key Exchange Protocol
DOI: Domain of Interpretation (of the attributes
of IKE protocol in the context of a specific Phase-2 protocol).
SA: Security Association
(ref: rfc2408).
SPI: Security Parameter Index is the pointer or
identifier used in accessing SA attributes (ref: rfc2408).
MM: Main Mode - the process of setting up
a Phase 1 SA to secure the exchanges required to setup Phase 2 SAs
Phase 1 Tunnel: An ISAKMP SA can be regarded as representing a flow of ISAKMP/IKE traffic. Hence an ISAKMP is referred to as a 'Phase 1 Tunnel' in this document.
Phase 2 Tunnel: A Phase 2 Tunnel is an instance of a non-ISAKMP SA bundle in which all the SA share the same proxy identifiers (IDii,IDir) and protect the same stream of application traffic. Note that a Phase 2 tunnel may comprise one SA bundle at any given point of time, but the SA bundle changes with time due to key refresh.
History of the MIB This MIB was originally written as CISCO-IPSEC-MIB which combined the configuration of IKE and IPsec protocols into a single MIB.
Main OID:
ciscoIkeConfigMIB.1.3.6.1.4.1.9.9.423
77
Objects
Active
Status
6
Dependencies
Imported Objects
Objects
77 total| Object Name |
|---|
ciscoIkeConfigMIBThis is a MIB Module for configuring and viewing IKE
parameters and policies.
Acronyms
The following acronyms are used in this document:
IPsec: Secure IP Protocol
VPN: Virtual Private Network
ISAKMP: Internet Security Association and Key Exchange
Protocol
IKE: Internet Key Exchange Protocol
DOI: Domain of Interpretation (of the attributes
of IKE protocol in the context of a specific
Phase-2 protocol).
SA: Security Association
(ref: rfc2408).
SPI: Security Parameter Index is the pointer or
identifier used in accessing SA attributes
(ref: rfc2408).
MM: Main Mode - the process of setting up
a Phase 1 SA to secure the exchanges
required to setup Phase 2 SAs
Phase 1 Tunnel:
An ISAKMP SA can be regarded as representing
a flow of ISAKMP/IKE traffic. Hence an ISAKMP
is referred to as a 'Phase 1 Tunnel' in this
document.
Phase 2 Tunnel:
A Phase 2 Tunnel is an instance of a
non-ISAKMP SA bundle in which all the SA
share the same proxy identifiers (IDii,IDir)
and protect the same stream of application
traffic.
Note that a Phase 2 tunnel may comprise one
SA bundle at any given point of time, but
the SA bundle changes with time due to
key refresh.
History of the MIB
This MIB was originally written as CISCO-IPSEC-MIB
which combined the configuration of IKE and IPsec
protocols into a single MIB. MODULE-IDENTITY .1.3.6.1.4.1.9.9.423 |
cicIkeConfigMIBNotifs OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.423.0 |
ciscoIkeConfigOperStateChangedThe notification is generated when the operational
state of IKE entity on the managed device has
been changed. NOTIFICATION-TYPE .1.3.6.1.4.1.9.9.423.0.1 |
ciscoIkeConfigPskAddedThis notification is generated when a new preshared
key is configured on the managed device. NOTIFICATION-TYPE .1.3.6.1.4.1.9.9.423.0.2 |
ciscoIkeConfigPskDeletedThis notification is generated when an existing
preshared key is configured on the managed device is
about to be deleted. NOTIFICATION-TYPE .1.3.6.1.4.1.9.9.423.0.3 |
ciscoIkeConfigPolicyAddedThis notification is generated when a new ISAKMP
policy is configured on the managed device. NOTIFICATION-TYPE .1.3.6.1.4.1.9.9.423.0.4 |
ciscoIkeConfigPolicyDeletedThis notification is issued when an existing ISAKMP
policy configured on the managed device is about
to be deleted. NOTIFICATION-TYPE .1.3.6.1.4.1.9.9.423.0.5 |
cicIkeConfigMIBObjects OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.423.1 |
cicIkeCfgOperations OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.423.1.1 |
cicIkeEnabledThis object reflects the operational status (enabled/
disabled) of the IKE entity on the managed device.
'true' - IKE is enabled.
'false' - IKE is disabled.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.423.1.1.1 |
cicIkeAggressModeEnabledThis object reflects if the IKE entity on the managed
device performs aggressive mode negotiations.
'true' - IKE entity performs aggressive mode
negotiations.
'false' - IKE entity does not perform aggressive mode
negotiations.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.423.1.1.2 |
cicIkeCfgIdentities OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.423.1.2 |
cicIkeCfgIdentityTableThe table containing the list of Phase-1 identities
used by the IKE protocol for the different Phase-2
DOIs it operates in. SEQUENCE OF CicIkeCfgIdentityEntry .1.3.6.1.4.1.9.9.423.1.2.1 |
cicIkeCfgIdentityEntryEach entry represents a Phase-1 identity
used by IKE for a specific Phase-2 DOI. CicIkeCfgIdentityEntry .1.3.6.1.4.1.9.9.423.1.2.1.1 |
cicIkeCfgIdentityDoiThis is the DOI type that is supported
by this IKE entity on the managed device and
for which the Phase-1 identity corresponding to this
conceptual row is being defined. CIKEIsakmpDoi (CISCO-IPSEC-TC) .1.3.6.1.4.1.9.9.423.1.2.1.1.1 |
cicIkeCfgIdentityTypeThe Phase I identity type used by the Phase-2 DOI
corresponding to this conceptual row.rw CIPsecPhase1PeerIdentityType (CISCO-IPSEC-TC) .1.3.6.1.4.1.9.9.423.1.2.1.1.2 |
cicIkeCfgInitiatorNextAvailTableThe table providing the next available index for
the cicIkeCfgInitiatorTable, in a domain of
interpretation(DOI), identified by
cicIkeCfgIdentityDoi. This value is only a
recommended value, but the user can choose to
use a different value to create an entry
in the cicIkeCfgInitiatorTable. SEQUENCE OF CicIkeCfgInitiatorNextAvailEntry .1.3.6.1.4.1.9.9.423.1.2.2 |
cicIkeCfgInitiatorNextAvailEntryEach entry represents a next available index
for the cicIkeCfgInitiatorTable. CicIkeCfgInitiatorNextAvailEntry .1.3.6.1.4.1.9.9.423.1.2.2.1 |
cicIkeCfgInitiatorNextAvailIndexThe object specifies the next available index for
object cicIkeCfgInitiatorIndex which can be used for
creating an entry in cicIkeCfgInitiatorTable.ro CicIkeConfigInitiatorIndex .1.3.6.1.4.1.9.9.423.1.2.2.1.1 |
cicIkeCfgInitiatorTableThe table containing the IKE version initiators
for peers. SEQUENCE OF CicIkeCfgInitiatorEntry .1.3.6.1.4.1.9.9.423.1.2.3 |
cicIkeCfgInitiatorEntryEach entry represents the IKE protocol version
initiated when connecting to a remote peer. CicIkeCfgInitiatorEntry .1.3.6.1.4.1.9.9.423.1.2.3.1 |
cicIkeCfgInitiatorIndexAn arbitrary value identifying the configured
IKE version initiated for a peer in this domain of
interpretation, identified by cicIkeCfgIdentityDoi,
on a managed device. This object could have the
same value as cicIkeCfgInitiatorNextAvailIndex. CicIkeConfigInitiatorIndex .1.3.6.1.4.1.9.9.423.1.2.3.1.1 |
cicIkeCfgInitiatorPAddrTypeThe Phase 1 ID type of the remote peer for which
this IKE protocol initiator is configured.
This object cannot be modified while the
corresponding value of cicIkeCfgInitiatorStatus is
equal to 'active'.rw CIPsecPhase1PeerIdentityType (CISCO-IPSEC-TC) .1.3.6.1.4.1.9.9.423.1.2.3.1.2 |
cicIkeCfgInitiatorPAddrThis object represents the address of the remote
peer corresponding to this conceptual row.
This object cannot be modified while the
corresponding value of cicIkeCfgInitiatorStatus is
equal to 'active'.rw OCTET STRING .1.3.6.1.4.1.9.9.423.1.2.3.1.3 |
cicIkeCfgInitiatorVerThis object represents the IKE protocol version
used when connecting to a remote peer specified in
cicIkeCfgInitiatorPAddr.
This object cannot be modified while the
corresponding value of cicIkeCfgInitiatorStatus is
equal to 'active'.rw CIPsecControlProtocol (CISCO-IPSEC-TC) .1.3.6.1.4.1.9.9.423.1.2.3.1.4 |
cicIkeCfgInitiatorStatusThe status of this conceptual row. To configure an
IKE version initiator entry, the NMS must do a
multivarbind set containing
cicIkeCfgInitiatorPAddrType, cicIkeCfgInitiatorPAddr
and cicIkeCfgInitiatorVer.
Creation of row can only be done via 'createAndGo'.
To remove a row, set this object value to 'destroy'.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.9.9.423.1.2.3.1.5 |
cicIkeCfgFailureRecovery OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.423.1.3 |
cicIkeCfgFailureRecovConfigTableThe table containing the failure recovery
configuration for IKE per supported DOI in the
managed entity. SEQUENCE OF CicIkeCfgFailureRecovConfigEntry .1.3.6.1.4.1.9.9.423.1.3.1 |
cicIkeCfgFailureRecovConfigEntryEach entry represents a Phase I failure recovery
configuration for the Phase 2 DOI corresponding
to the conceptual row. CicIkeCfgFailureRecovConfigEntry .1.3.6.1.4.1.9.9.423.1.3.1.1 |
cicIkeKeepAliveEnabledThis object reflects if the IKE entity in the
managed device performs keepalives with all the
peers for the DOI corresponding to this
conceptual row.
'true' - keepalives are performed.
'false' - no keepalives are performed.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.423.1.3.1.1.1 |
cicIkeKeepAliveTypeThis object reflects the type of keepalives to be used
by the IKE entity on the managed device with all the
peers for the DOI corresponding to this conceptual row.rw Enumeration .1.3.6.1.4.1.9.9.423.1.3.1.1.2 |
cicIkeKeepAliveIntervalThis object reflects the keepalive interval in
seconds used by the IKE entity on the managed
device with all the peers for the DOI corresponding
to this conceptual row.rw Unsigned32 .1.3.6.1.4.1.9.9.423.1.3.1.1.3 |
cicIkeKeepAliveRetryIntervalThis object reflects the keepalive retry interval
in seconds used by the IKE entity on the managed
device with all the peers for the DOI corresponding
to this conceptual row.rw Unsigned32 .1.3.6.1.4.1.9.9.423.1.3.1.1.4 |
cicIkeInvalidSpiNotifyThis object reflects if the IKE entity on the managed
device notifies any peer when an IPsec Phase-1 or
Phase-2 packet with an invalid SPI is received from
that peer for the DOI corresponding to this
conceptual row.
'true' - IKE entity notifies peer.
'false' - IKE entity does not notify peer.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.423.1.3.1.1.5 |
cicIkeCfgPeerAuth OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.423.1.4 |
cicIkeCfgPskAuthConfig OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.423.1.4.1 |
cicIkeCfgPskNextAvailTableThe table providing the next available index for the
cicIkeCfgPskTable, in a domain of interpretation(DOI),
identified by cicIkeCfgIdentityDoi.
This value is only a recommended value, but the user
can choose to use a different value to create an
entry in the cicIkeCfgPskTable. SEQUENCE OF CicIkeCfgPskNextAvailEntry .1.3.6.1.4.1.9.9.423.1.4.1.1 |
cicIkeCfgPskNextAvailEntryEach entry represents a next available index for the
cicIkeCfgPskTable. CicIkeCfgPskNextAvailEntry .1.3.6.1.4.1.9.9.423.1.4.1.1.1 |
cicIkeCfgPskNextAvailIndexThe object specifies the next available index for
object cicIkeCfgPskIndex which can be used for
creating an entry in cicIkeCfgPskTable.ro CicIkeConfigPskIndex .1.3.6.1.4.1.9.9.423.1.4.1.1.1.1 |
cicIkeCfgPskTableThe table containing the list of pre shared
authentication keys configured to be used by
IKE protocol catalogued by the DOI and the peer
identity. It is possible to have
multiple peers per DOI. SEQUENCE OF CicIkeCfgPskEntry .1.3.6.1.4.1.9.9.423.1.4.1.2 |
cicIkeCfgPskEntryEach entry represents a configured pre-shared
authentication key for a specific peer. CicIkeCfgPskEntry .1.3.6.1.4.1.9.9.423.1.4.1.2.1 |
cicIkeCfgPskIndexAn arbitrary value identifying the configured
pre-shared keys for IKE entity in this domain of
interpretation, identified by cicIkeCfgIdentityDoi,
on a managed device. This object could have the
same value as cicIkeCfgPskNextAvailIndex. CicIkeConfigPskIndex .1.3.6.1.4.1.9.9.423.1.4.1.2.1.1 |
cicIkeCfgPskKeyThe pre-shared authorization key used in
authenticating the peer corresponding to this
conceptual row.
This object cannot be modified while the
corresponding value of cicIkeCfgPskStatus is equal
to 'active'.rw OCTET STRING .1.3.6.1.4.1.9.9.423.1.4.1.2.1.2 |
cicIkeCfgPskRemIdentTypeThe Phase 1 ID type of the remote peer identity for
which this preshared key is configured.
This object cannot be modified while the
corresponding value of cicIkeCfgPskStatus is equal
to 'active'.rw CIPsecPhase1PeerIdentityType (CISCO-IPSEC-TC) .1.3.6.1.4.1.9.9.423.1.4.1.2.1.3 |
cicIkeCfgPskRemIdentTypeStandIf the object 'cicIkeCfgPskRemIdentType' is one
of
idIpv4Addr
idIpv6Addr
idIpv4AddrRange
idIpv6AddrRange
idIpv4AddrSubnet
idIpv6AddrSubnet
then this object contains the type of InetAddress
for the corresponding value(s) of
cicIkeCfgPskRemIdAddrOrRg1OrSn,
cicIkeCfgPskRemIdAddrRange2 and/or
cicIkeCfgPskRemIdSubnetMask.
This object would have a value 'unknown', for other
values of cicIkeCfgPskRemIdentType.ro InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.423.1.4.1.2.1.4 |
cicIkeCfgPskRemIdentityThe Phase 1 ID identity of the peer for which
this preshared key is configured on the local entity.
This object cannot be modified while the
corresponding value of cicIkeCfgPskStatus is equal to
'active'.rw OCTET STRING .1.3.6.1.4.1.9.9.423.1.4.1.2.1.5 |
cicIkeCfgPskRemIdAddrOrRg1OrSnIf the object cicIkeCfgPskRemIdentType is one
of
idIpv4Addr
idIpv6Addr
idIpv4AddrRange
idIpv6AddrRange
idIpv4AddrSubnet
idIpv6AddrSubnet
then this object contains the first or only
component of the Phase 1 identity. Otherwise, the
value contained in this object will be a zero
length string which should be disregarded.rw InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.423.1.4.1.2.1.6 |
cicIkeCfgPskRemIdAddrRange2If the object cicIkeCfgPskRemIdentType is one
of
idIpv4AddrRange
idIpv6AddrRange
then this object contains the second component of
the Phase 1 identity. Otherwise, the
value contained in this object will be a zero
length string which should be disregarded.rw InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.423.1.4.1.2.1.7 |
cicIkeCfgPskRemIdSubnetMaskIf the object 'cicIkeCfgPskRemIdentType' is one of
idIpv4AddrSubnet
idIpv6AddrSubnet
then this object contains the second component of
the Phase 1 identity.
Otherwise, the value contained in this object will
be zero which should be disregarded.rw InetAddressPrefixLength (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.423.1.4.1.2.1.8 |
cicIkeCfgPskStatusThe status of this conceptual row. To configure
an pre shared authentication key entry, the NMS must
do a multivarbind set containing cicIkeCfgPskKey,
cicIkeCfgPskRemIdentType,cicIkeCfgPskRemIdentity.
Creation of row can only be done via 'createAndGo'.
To remove a row, set this object value to 'destroy'.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.9.9.423.1.4.1.2.1.9 |
cicIkeCfgNonceAuthConfig OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.423.1.4.2 |
cicIkeCfgPkiAuthConfig OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.423.1.4.3 |
cicIkeCfgPolicies OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.423.1.5 |
cicIkeCfgPolicyTableThe table containing the list of all
ISAKMP policy entries configured by the operator. SEQUENCE OF CicIkeCfgPolicyEntry .1.3.6.1.4.1.9.9.423.1.5.1 |
cicIkeCfgPolicyEntryEach entry contains the attributes associated with
a single ISAKMP Policy entry. CicIkeCfgPolicyEntry .1.3.6.1.4.1.9.9.423.1.5.1.1 |
cicIkeCfgPolicyPriorityThe priority of this ISAKMP Policy entry. The policy
with lower value would take precedence over
the policy with higher value in the same DOI. Unsigned32 .1.3.6.1.4.1.9.9.423.1.5.1.1.1 |
cicIkeCfgPolicyEncrThe encryption transform specified by this
ISAKMP policy specification. The Internet Key
Exchange (IKE) tunnels setup using this policy item
would use the specified encryption transform to protect
the ISAKMP PDUs.rw CIPsecEncryptAlgorithm (CISCO-IPSEC-TC) .1.3.6.1.4.1.9.9.423.1.5.1.1.2 |
cicIkeCfgPolicyHashThe hash transform specified by this
ISAKMP policy specification. The IKE tunnels
setup using this policy item would use the
specified hash transform to protect the
ISAKMP PDUs.rw CIPsecIkeHashAlgorithm (CISCO-IPSEC-TC) .1.3.6.1.4.1.9.9.423.1.5.1.1.3 |
cicIkeCfgPolicyPRFThe Pseudo Random Function algorithm specified by
this ISAKMP policy specification. The value of this
object would only be used for IKEv2.rw CIPsecIkePRFAlgorithm (CISCO-IPSEC-TC) .1.3.6.1.4.1.9.9.423.1.5.1.1.4 |
cicIkeCfgPolicyAuthThe peer authentication method specified by
this ISAKMP policy specification. If this policy
entity is selected for negotiation with a peer,
the local entity would authenticate the peer using
the method specified by this object.rw CIPsecIkeAuthMethod (CISCO-IPSEC-TC) .1.3.6.1.4.1.9.9.423.1.5.1.1.5 |
cicIkeCfgPolicyDHGroupThis object specifies the Oakley group used
for Diffie Hellman exchange in the Main Mode.
If this policy item is selected to negotiate
Main Mode with an IKE peer, the local entity
chooses the group specified by this object to
perform Diffie Hellman exchange with the
peer.rw CIPsecDiffHellmanGrp (CISCO-IPSEC-TC) .1.3.6.1.4.1.9.9.423.1.5.1.1.6 |
cicIkeCfgPolicyLifetimeThis object specifies the lifetime in seconds
of the IKE tunnels generated using this
policy specification.rw CIKELifetime UNITS "seconds" .1.3.6.1.4.1.9.9.423.1.5.1.1.7 |
cicIkeCfgPolicyLifesizeThis object specifies the life size in Kbytes
of the IKE tunnels generated using this
policy specification.rw CIKELifesize UNITS "kbytes" .1.3.6.1.4.1.9.9.423.1.5.1.1.8 |
cicIkeCfgPolicyStatusThis object specifies the status of the ISAKMP
policy corresponding to this conceptual row.
Creation of row can only be done via 'createAndGo'.
To remove a row, set this object value to 'destroy'.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.9.9.423.1.5.1.1.9 |
cicIkeCfgServiceControl OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.423.1.6 |
cicIkeCfgCallAdmssionnCtrl OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.423.1.6.1 |
cicIkeCfgQoSControl OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.423.1.6.2 |
cicIkeConfigMibNotifCntl OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.423.1.7 |
cicNotifCntlIkeAllNotifsThis value of this object must be 'true' to enable
any notification in addition to the
notification-specific control variables
defined below.
A notification <foo> defined in this module is
enabled if and only if the expression
(cicNotifCntlIkeAllNotifs && cicNotifCntlIke<foo>)
evaluates to 'true'.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.423.1.7.1 |
cicNotifCntlIkeOperStateChangedWhen cicNotifCntlIkeAllNotifs has the value
'true', this variable controls the generation of
the ciscoIkeConfigOperStateChanged notification.
When this variable is set to 'true', generation
of the notification is enabled. When this variable
is set to 'false', generation of the notification
is disabled.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.423.1.7.2 |
cicNotifCntlIkePskAddedWhen cicNotifCntlIkeAllNotifs has the value 'true',
this variable controls the generation of
cicNotifCntlIkePskAdded notification.
When this variable is set to 'true', generation
of the notification is enabled. When this variable
is set to 'false', generation of the notification
is disabled.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.423.1.7.3 |
cicNotifCntlIkePskDeletedWhen cicNotifCntlIkeAllNotifs has the value 'true',
this variable controls the generation of
cicNotifCntlIkePskDeleted notification.
When this variable is set to 'true', generation
of the notification is enabled. When this variable
is set to 'false', generation of the notification
is disabled.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.423.1.7.4 |
cicNotifCntlIkePolicyAddedWhen cicNotifCntlIkeAllNotifs has the value 'true',
this variable controls the generation of
cicNotifCntlIkePolicyAdded notification.
When this variable is set to 'true', generation
of the notification is enabled. When this variable
is set to 'false', generation of the notification
is disabled.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.423.1.7.5 |
cicNotifCntlIkePolicyDeletedWhen cicNotifCntlIkeAllNotifs has the value 'true',
this variable controls the generation of
cicNotifCntlIkePolicyDeleted notification.
When this variable is set to 'true', generation
of the notification is enabled. When this variable
is set to 'false', generation of the notification
is disabled.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.423.1.7.6 |
cicIkeConfigMIBConform OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.423.2 |
cicIkeCfgMIBGroups OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.423.2.1 |
cicIkeCfgMIBCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.423.2.2 |