CISCO-IKE-FLOW-EXT-MIB
AI MIB Summary
The CISCO-IKE-FLOW-EXT-MIB monitors Cisco-specific Internet Key Exchange (IKE) Phase 1 and Phase 2 Security Association (SA) structures, tunnel states, and flow statistics on IPsec control planes. It provides granular visibility into ISAKMP/IKE session lifecycle events, key refresh cycles, and Fibre Channel Security Protocol (FCSP) associations for troubleshooting IPsec tunnel establishment and maintenance.
This MIB module is an extension to CISCO-IKE-FLOW-MIB and contains Cisco Specific extensions for monitoring IKE.
It is for monitoring the structures and status of IPsec control flows based on Internet Key Exchange protocol.
Acronyms The following acronyms are used in this document:
Flow, Tunnel: An ISAKMP SA can be regarded as representing a flow of ISAKMP/IKE traffic. Hence an ISAKMP is referred to as a 'Phase 1 Tunnel' in this document.
IPsec:
Secure IP Protocol.
ISAKMP:
Internet Security Association and Key Management Protocol.
IKE:
Internet Key Exchange Protocol.
FCSP:
Fibre Channel Security Protocol.
SA:
Security Association (ref: rfc2408).
Phase 2 Tunnel: AN instance of a non-ISAKMP SA bundle in which all the SA share the same proxy identifiers protect the same stream of application traffic. Such an SA bundle is termed a 'Phase 2 Tunnel'. Note that a Phase 2 tunnel may comprise different SA bundles and different number of SA bundles at different times (due to key refresh).
Main OID:
ciscoIkeFlowExtMIB.1.3.6.1.4.1.9.9.428
15
Objects
Active
Status
6
Dependencies
Imported Objects
Objects
15 total| Object Name |
|---|
ciscoIkeFlowExtMIBThis MIB module is an extension to
CISCO-IKE-FLOW-MIB and contains Cisco Specific
extensions for monitoring IKE.
It is for monitoring the structures and status of
IPsec control flows based on Internet Key Exchange
protocol.
Acronyms
The following acronyms are used in this document:
Flow, Tunnel:
An ISAKMP SA can be regarded as representing
a flow of ISAKMP/IKE traffic. Hence an ISAKMP
is referred to as a 'Phase 1 Tunnel' in this
document.
IPsec:
Secure IP Protocol.
ISAKMP:
Internet Security Association and Key
Management Protocol.
IKE:
Internet Key Exchange Protocol.
FCSP:
Fibre Channel Security Protocol.
SA:
Security Association
(ref: rfc2408).
Phase 2 Tunnel:
AN instance of a non-ISAKMP SA bundle in which
all the SA share the same proxy identifiers
protect the same stream of application traffic.
Such an SA bundle is termed a 'Phase 2 Tunnel'.
Note that a Phase 2 tunnel may comprise different
SA bundles and different number of SA bundles at
different times (due to key refresh). MODULE-IDENTITY .1.3.6.1.4.1.9.9.428 |
ciscoIkeFlowExtMIBNotifs OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.428.0 |
ciscoIkeFlowExtMIBObjects OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.428.1 |
cifeIkeGlobals OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.428.1.1 |
cifeClearAllTunnelsClears all the tunnels of a specific type.
'none' is returned on reading this object.
'clearIPSec' all the IPSec tunnels are cleared.
'clearFCSP' all FCSP tunnels are cleared.rw Enumeration .1.3.6.1.4.1.9.9.428.1.1.1 |
cifeTunnelExtTableThe Phase-1 Internet Key Exchange Tunnel Table.
There is one entry in this table for each active
IKE tunnel. This table is an extension to
cifIkeTunnelTable defined in CISCO-IKE-FLOW-MIB.
Some information in this table is also present in
the cisgIpsSgTunnelTable, but the table is indexed
differently so that the rows in this table are
grouped/ordered by domain of interpretation (DOI). SEQUENCE OF CifeTunnelExtEntry .1.3.6.1.4.1.9.9.428.1.2 |
cifeTunnelExtEntryEach entry contains the attributes associated with
an active IKE Tunnel, identified by
cisgIpsSgTunIndex, for the IKE protocol, identified
by cisgIpsSgProtocol, in this DOI, identified by
cifeTunnelExtDoi. CifeTunnelExtEntry .1.3.6.1.4.1.9.9.428.1.2.1 |
cifeTunnelExtDoiThis identifies the DOI of Phase-2 operations in
which this control tunnel operates. This may be
used to identify the Phase-2 protocol. CIKEIsakmpDoi (CISCO-IPSEC-TC) .1.3.6.1.4.1.9.9.428.1.2.1.1 |
cifeTunnelExtLocalIdenTypeThe type of the identity used by the managed entity
authenticating itself to the peer in the setup of the
IKE tunnel corresponding to this conceptual row.
This object would have same value as
cisgIpsSgTunLocalType from
CISCO-IPSEC-SIGNALLING-MIB.ro CIPsecPhase1PeerIdentityType (CISCO-IPSEC-TC) .1.3.6.1.4.1.9.9.428.1.2.1.2 |
cifeTunnelExtLocalIdentityThe value of the local peer identity.
This object would have same value as
cisgIpsSgTunLocalValue from
CISCO-IPSEC-SIGNALLING-MIB.ro SnmpAdminString .1.3.6.1.4.1.9.9.428.1.2.1.3 |
cifeTunnelExtRemoteIdenTypeThe type of the identity used by the peer in
authenticating itself to the local entity in the
setup of the IKE tunnel corresponding to this
conceptual row.
This object would have same value as
cisgIpsSgTunRemoteType from
CISCO-IPSEC-SIGNALLING-MIB.ro CIPsecPhase1PeerIdentityType (CISCO-IPSEC-TC) .1.3.6.1.4.1.9.9.428.1.2.1.4 |
cifeTunnelExtRemoteIdentityThe value of the remote peer identity.
This object would have same value as
cisgIpsSgTunRemoteValue from
CISCO-IPSEC-SIGNALLING-MIB.ro SnmpAdminString .1.3.6.1.4.1.9.9.428.1.2.1.5 |
ciscoIkeFlowExtMIBConform OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.428.2 |
cifeMIBConformances OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.428.2.1 |
cifeMIBGroups OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.428.2.2 |