IPSEC-IKEACTION-MIB
AI MIB Summary
The IPSEC-IKEACTION-MIB enables the monitoring and configuration of Internet Key Exchange (IKE) policy actions, specifically tracking the execution status, counters, and state transitions of IPsec security associations managed by IKEv1 or IKEv2 daemons on network security gateways.
The MIB module for defining IKE actions for managing IPsec Security Policy. Copyright (C) The Internet Society (2006). This version of this MIB module is part of RFC YYYY, see the RFC itself for full legal notices.
Main OID:
ipiaMIB.1.3.6.1.2.1.153.4.2
173
Objects
Active
Status
7
Dependencies
Imported Objects
Objects
173 total| Object Name |
|---|
ipiaMIBThe MIB module for defining IKE actions for managing IPsec Security Policy. Copyright (C) The Internet Society (2006). This version of this MIB module is part of RFC YYYY, see the RFC itself for full legal notices. MODULE-IDENTITY .1.3.6.1.2.1.153.4.2 |
ipiaConfigObjects OBJECT IDENTIFIER .1.3.6.1.2.1.153.4.2.1 |
ipiaLocalConfigObjects OBJECT IDENTIFIER .1.3.6.1.2.1.153.4.2.1.1 |
ipiaStaticFilters OBJECT IDENTIFIER .1.3.6.1.2.1.153.4.2.1.2 |
ipiaIkePhase1FilterThis static filter can be used to test if a packet is part of an IKE phase-1 negotiation.ro Integer32 .1.3.6.1.2.1.153.4.2.1.2.1 |
ipiaIkePhase2FilterThis static filter can be used to test if a packet is part of an IKE phase-2 negotiation.ro Integer32 .1.3.6.1.2.1.153.4.2.1.2.2 |
ipiaCredentialFilterTableThis table is used to provide credentials for IKE identities. It can be used to for filters which are matched to credentials of IKE peers, where the credentials in question have been obtained from an IKE phase 1 exchange. They MAY be X.509 certificates, Kerberos tickets, etc... It can also be used to provide credentials for local IKE identities. SEQUENCE OF IpiaCredentialFilterEntry .1.3.6.1.2.1.153.4.2.1.3 |
ipiaCredentialFilterEntryA row defining a particular credential filter IpiaCredentialFilterEntry .1.3.6.1.2.1.153.4.2.1.3.1 |
ipiaCredFiltNameThe administrative name of this filter. SnmpAdminString .1.3.6.1.2.1.153.4.2.1.3.1.1 |
ipiaCredFiltCredentialTypeThe credential type that is expected for this filter to succeed.rw IpsaCredentialType (IPSEC-IPSECACTION-MIB) .1.3.6.1.2.1.153.4.2.1.3.1.2 |
ipiaCredFiltMatchFieldNameThe piece of the credential to match against. Examples: serialNumber, signatureAlgorithm, issuerName or subjectName. For credential types without fields (e.g. shared secret), this field SHOULD be left empty, and the entire credential will be matched against the ipiaCredFiltMatchFieldValue.rw OCTET STRING .1.3.6.1.2.1.153.4.2.1.3.1.3 |
ipiaCredFiltMatchFieldValueThe value that the field indicated by the ipiaCredFiltMatchFieldName MUST match against for the filter to be considered TRUE.rw OCTET STRING .1.3.6.1.2.1.153.4.2.1.3.1.4 |
ipiaCredFiltAcceptCredFromThis value is used to look up a row in the ipiaIpsecCredMngServiceTable for the Certificate Authority (CA) Information. This value is empty if there is no CA used for this filter.rw OCTET STRING .1.3.6.1.2.1.153.4.2.1.3.1.5 |
ipiaCredFiltLastChangedThe value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.ro TimeStamp (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.3.1.6 |
ipiaCredFiltStorageTypeThe storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable.rw StorageType (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.3.1.7 |
ipiaCredFiltRowStatusThis object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object MUST remain active if it is referenced by an active row in another table. An attempt to set it to anything other than active while it is referenced by an active row in another table MUST result in an inconsistentValue error.rw RowStatus (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.3.1.8 |
ipiaPeerIdentityFilterTableThis table defines filters which can be used to match credentials of IKE peers, where the credentials in question have been obtained from an IKE phase 1 exchange. They MAY be X.509 certificates, Kerberos tickets, etc... SEQUENCE OF IpiaPeerIdentityFilterEntry .1.3.6.1.2.1.153.4.2.1.4 |
ipiaPeerIdentityFilterEntryA row defining a particular credential filter IpiaPeerIdentityFilterEntry .1.3.6.1.2.1.153.4.2.1.4.1 |
ipiaPeerIdFiltNameThe administrative name of this filter. SnmpAdminString .1.3.6.1.2.1.153.4.2.1.4.1.1 |
ipiaPeerIdFiltIdentityTypeThe type of identity field in the peer ID payload to match against.rw IpsecDoiIdentType (IPSEC-IPSECACTION-MIB) .1.3.6.1.2.1.153.4.2.1.4.1.2 |
ipiaPeerIdFiltIdentityValueThe string representation of the value that the peer ID payload value MUST match against. Wildcard mechanisms MUST be supported such that: - a ipiaPeerIdFiltIdentityValue of '*@example.com' will match a userFqdn ID payload of 'JDOE@EXAMPLE.COM' - a ipiaPeerIdFiltIdentityValue of '*.example.com' will match a fqdn ID payload of 'WWW.EXAMPLE.COM' - a ipiaPeerIdFiltIdentityValue of: 'cn=*,ou=engineering,o=company,c=us' will match a DER DN ID payload of 'cn=John Doe,ou=engineering,o=company,c=us' - a ipiaPeerIdFiltIdentityValue of '192.0.2.0/24' will match an IPv4 address ID payload of 192.0.2.10 - a ipiaPeerIdFiltIdentityValue of '192.0.2.*' will also match an IPv4 address ID payload of 192.0.2.10. The character '*' replaces 0 or multiple instances of any character.rw IpsaIdentityFilter (IPSEC-IPSECACTION-MIB) .1.3.6.1.2.1.153.4.2.1.4.1.3 |
ipiaPeerIdFiltLastChangedThe value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.ro TimeStamp (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.4.1.4 |
ipiaPeerIdFiltStorageTypeThe storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable.rw StorageType (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.4.1.5 |
ipiaPeerIdFiltRowStatusThis object indicates the conceptual status of this row. This object can not be considered active unless the ipiaPeerIdFiltIdentityType and ipiaPeerIdFiltIdentityValue column values are defined. The value of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object MUST remain active if it is referenced by an active row in another table. An attempt to set it to anything other than active while it is referenced by an active row in another table MUST result in an inconsistentValue error.rw RowStatus (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.4.1.6 |
ipiaStaticActions OBJECT IDENTIFIER .1.3.6.1.2.1.153.4.2.1.5 |
ipiaRejectIKEActionThis scalar indicates that a packet SHOULD be rejected WITHOUT action/packet logging. This object returns a value of 1 for IPsec policy implementations that support the reject static action.ro Integer32 .1.3.6.1.2.1.153.4.2.1.5.1 |
ipiaRejectIKEActionLogThis scalar indicates that a packet SHOULD be rejected WITH action/packet logging. This object returns a value of 1 for IPsec policy implementations that support the reject static action with logging.ro Integer32 .1.3.6.1.2.1.153.4.2.1.5.2 |
ipiaIkeActionTableThe ipiaIkeActionTable contains a list of the parameters used for an IKE phase 1 SA DOI negotiation. See the corresponding table ipiaIkeActionProposalsTable for a list of proposals contained within a given IKE Action. SEQUENCE OF IpiaIkeActionEntry .1.3.6.1.2.1.153.4.2.1.6 |
ipiaIkeActionEntryThe ipiaIkeActionEntry lists the IKE negotiation attributes. IpiaIkeActionEntry .1.3.6.1.2.1.153.4.2.1.6.1 |
ipiaIkeActNameThis object contains the name of this ikeAction entry. SnmpAdminString .1.3.6.1.2.1.153.4.2.1.6.1.1 |
ipiaIkeActParametersNameThis object is administratively assigned to reference a row in the ipiaSaNegotiationParametersTable where additional parameters affecting this action can be found. An attempt to set this object to a value that does not exist in the ipiaSaNegotiationParametersTable MUST result in an inconsistentValue error.rw SnmpAdminString .1.3.6.1.2.1.153.4.2.1.6.1.2 |
ipiaIkeActThresholdDerivedKeysipiaIkeActThresholdDerivedKeys specifies what percentage of the derived key limit (see the LifetimeDerivedKeys property of IKEProposal) can expire before IKE SHOULD attempt to renegotiate the IKE phase 1 security association.rw Integer32 .1.3.6.1.2.1.153.4.2.1.6.1.3 |
ipiaIkeActExchangeModeipiaIkeActExchangeMode specifies the IKE Phase 1 negotiation mode.rw Enumeration .1.3.6.1.2.1.153.4.2.1.6.1.4 |
ipiaIkeActAgressiveModeGroupIdThe values to be used for Diffie-Hellman exchange.rw IkeGroupDescription .1.3.6.1.2.1.153.4.2.1.6.1.5 |
ipiaIkeActIdentityTypeThis column along with ipiaIkeActIdentityContext and endpoint information is used to refer an ipiaIkeIdentityEntry in the ipiaIkeIdentityTable.rw IpsecDoiIdentType (IPSEC-IPSECACTION-MIB) .1.3.6.1.2.1.153.4.2.1.6.1.6 |
ipiaIkeActIdentityContextThis column, along with ipiaIkeActIdentityType and endpoint information, is used to refer to an ipiaIkeIdentityEntry in the ipiaIkeIdentityTable.rw SnmpAdminString .1.3.6.1.2.1.153.4.2.1.6.1.7 |
ipiaIkeActPeerNameThis object indicates the peer id name of the IKE peer. This object can be used to look up the peer id value, address, credentials and other values in the ipiaPeerIdentityTable.rw SnmpAdminString .1.3.6.1.2.1.153.4.2.1.6.1.8 |
ipiaIkeActDoActionLoggingikeDoActionLogging specifies whether or not an audit message SHOULD be logged when this ike SA is created.rw TruthValue (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.6.1.9 |
ipiaIkeActDoPacketLoggingikeDoPacketLogging specifies whether or not an audit message SHOULD be logged and if there is logging, how many bytes of the packet to place in the notification.rw SpdIPPacketLogging (IPSEC-SPD-MIB) .1.3.6.1.2.1.153.4.2.1.6.1.10 |
ipiaIkeActVendorIdVendor ID Payload. A value of NULL means that Vendor ID payload will be neither generated nor accepted. A non-NULL value means that a Vendor ID payload will be generated (when acting as an initiator) or is expected (when acting as a responder).rw OCTET STRING .1.3.6.1.2.1.153.4.2.1.6.1.11 |
ipiaIkeActLastChangedThe value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.ro TimeStamp (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.6.1.12 |
ipiaIkeActStorageTypeThe storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable.rw StorageType (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.6.1.13 |
ipiaIkeActRowStatusThis object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. This object MUST NOT be set to destroy if referred to by other rows in other action tables. An attempt to set it to anything other than active while it is referenced by an active row in another table MUST result in an inconsistentValue error.rw RowStatus (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.6.1.14 |
ipiaIpsecActionTableThe ipiaIpsecActionTable contains a list of the parameters used for an IKE phase 2 IPsec DOI negotiation. SEQUENCE OF IpiaIpsecActionEntry .1.3.6.1.2.1.153.4.2.1.7 |
ipiaIpsecActionEntryThe ipiaIpsecActionEntry lists the IPsec negotiation attributes. IpiaIpsecActionEntry .1.3.6.1.2.1.153.4.2.1.7.1 |
ipiaIpsecActNameipiaIpsecActName is the name of the ipsecAction entry. SnmpAdminString .1.3.6.1.2.1.153.4.2.1.7.1.1 |
ipiaIpsecActParametersNameThis object is used to reference a row in the ipiaSaNegotiationParametersTable where additional parameters affecting this action can be found. An attempt to set this column to a value that does not exist in the ipiaSaNegotiationParametersTable MUST result in an inconsistentValue error.rw SnmpAdminString .1.3.6.1.2.1.153.4.2.1.7.1.2 |
ipiaIpsecActProposalsNameThis object is used to reference one or more rows in the ipiaIpsecProposalsTable where an ordered list of proposals affecting this action can be found. An attempt to set this column to a value that does not exist in the ipiaIpsecProposalsTable MUST result in an inconsistentValue error.rw SnmpAdminString .1.3.6.1.2.1.153.4.2.1.7.1.3 |
ipiaIpsecActUsePfsThis MIB object specifies whether or not perfect forward secrecy is used when refreshing keys. A value of true indicates that PFS SHOULD be used.rw TruthValue (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.7.1.4 |
ipiaIpsecActVendorIdThe VendorID property is used to identify vendor-defined key exchange GroupIDs.rw OCTET STRING .1.3.6.1.2.1.153.4.2.1.7.1.5 |
ipiaIpsecActGroupIdThis object specifies the Diffie-Hellman group to use for phase 2 when the object ipiaIpsecActUsePfs is true and the object ipiaIpsecActUseIkeGroup is false. If the GroupID number is from the vendor-specific range (32768-65535), the VendorID qualifies the group number.rw IkeGroupDescription .1.3.6.1.2.1.153.4.2.1.7.1.6 |
ipiaIpsecActPeerGatewayIdNameThis object indicates the peer id name of the peer gateway. This object can be used to look up the peer id value, address and other values in the ipiaPeerIdentityTable. This object is used when initiating a tunnel SA. This object is not used for transport SAs. If no value is set and ipiaIpsecActMode is tunnel, the peer gateway is determined from the source or destination address of the packet.rw OCTET STRING .1.3.6.1.2.1.153.4.2.1.7.1.7 |
ipiaIpsecActUseIkeGroupThis object specifies whether or not to use the same GroupId for phase 2 as was used in phase 1. If UsePFS is false, this entry SHOULD be ignored.rw TruthValue (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.7.1.8 |
ipiaIpsecActGranularityThis object specifies how the proposed selector for the security association will be created. The selector is created by using the FilterList information. The selector can be subnet, address, porotocol, or port.rw Enumeration .1.3.6.1.2.1.153.4.2.1.7.1.9 |
ipiaIpsecActModeThis object specifies the encapsulation of the IPsec SA to be negotiated.rw Enumeration .1.3.6.1.2.1.153.4.2.1.7.1.10 |
ipiaIpsecActDFHandlingThis object specifies the processing of DF bit by the negotiated IPsec tunnel. 1 - DF bit is copied. 2 - DF bit is set. 3 - DF bit is cleared.rw Enumeration .1.3.6.1.2.1.153.4.2.1.7.1.11 |
ipiaIpsecActDoActionLoggingipiaIpsecActDoActionLogging specifies whether or not an audit message SHOULD be logged when this ipsec SA is created.rw TruthValue (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.7.1.12 |
ipiaIpsecActDoPacketLoggingipiaIpsecActDoPacketLogging specifies whether or not an audit message SHOULD be logged and if there is logging, how many bytes of the packet to place in the notification.rw SpdIPPacketLogging (IPSEC-SPD-MIB) .1.3.6.1.2.1.153.4.2.1.7.1.13 |
ipiaIpsecActLastChangedThe value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.ro TimeStamp (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.7.1.14 |
ipiaIpsecActStorageTypeThe storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable.rw StorageType (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.7.1.15 |
ipiaIpsecActRowStatusThis object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object MUST remain active if it is referenced by an active row in another table. An attempt to set it to anything other than active while it is referenced by an active row in another table MUST result in an inconsistentValue error.rw RowStatus (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.7.1.16 |
ipiaSaNegotiationParametersTableThis table contains reusable parameters that can be pointed to by the ipiaIkeActionTable and ipiaIpsecActionTable. These parameters are reusable since it is likely an administrator will want to make global policy changes to lifetime parameters that apply to multiple actions. This table allows multiple rows in the other actions tables to reuse global lifetime parameters in this table by repeatedly pointing to a row cointained within this table. SEQUENCE OF IpiaSaNegotiationParametersEntry .1.3.6.1.2.1.153.4.2.1.8 |
ipiaSaNegotiationParametersEntryContains the attributes of one row in the ipiaSaNegotiationParametersTable. IpiaSaNegotiationParametersEntry .1.3.6.1.2.1.153.4.2.1.8.1 |
ipiaSaNegParamNameThis object contains the administrative name of this SaNegotiationParametersEntry. This row can be referred to by this name in other policy action tables. SnmpAdminString .1.3.6.1.2.1.153.4.2.1.8.1.1 |
ipiaSaNegParamMinLifetimeSecsipiaSaNegParamMinLifetimeSecs specifies the minimum seconds lifetime that will be accepted from the peer.rw Unsigned32 UNITS "seconds" .1.3.6.1.2.1.153.4.2.1.8.1.2 |
ipiaSaNegParamMinLifetimeKBipiaSaNegParamMinLifetimeKB specifies the minimum kilobyte lifetime that will be accepted from the peer.rw Unsigned32 .1.3.6.1.2.1.153.4.2.1.8.1.3 |
ipiaSaNegParamRefreshThreshSecsipiaSaNegParamRefreshThreshSecs specifies what percentage of the seconds lifetime can expire before IKE SHOULD attempt to renegotiate the IPsec security association. A value between 1 and 100 representing a percentage. A value of 100 indicates that the IPsec security association SHOULD not be renegotiated until the seconds lifetime has been completely reached.rw Unsigned32 .1.3.6.1.2.1.153.4.2.1.8.1.4 |
ipiaSaNegParamRefreshThresholdKBipiaSaNegParamRefreshThresholdKB specifies what percentage of the kilobyte lifetime can expire before IKE SHOULD attempt to renegotiate the IPsec security association. A value between 1 and 100 representing a percentage. A value of 100 indicates that the IPsec security association SHOULD not be renegotiated until the kilobyte lifetime has been reached.rw Unsigned32 .1.3.6.1.2.1.153.4.2.1.8.1.5 |
ipiaSaNegParamIdleDurationSecsipiaSaNegParamIdleDurationSecs specifies how many seconds a security association MAY remain idle (i.e., no traffic protected using the security association) before it is deleted. A value of zero indicates that idle detection SHOULD NOT be used for the security association. Any non-zero value indicates the number of seconds the security association can remain unused.rw Unsigned32 UNITS "seconds" .1.3.6.1.2.1.153.4.2.1.8.1.6 |
ipiaSaNegParamLastChangedThe value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.ro TimeStamp (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.8.1.7 |
ipiaSaNegParamStorageTypeThe storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable.rw StorageType (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.8.1.8 |
ipiaSaNegParamRowStatusThis object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object MUST remain active if it is referenced by an active row in another table. An attempt to set it to anything other than active while it is referenced by an active row in another table MUST result in an inconsistentValue error.rw RowStatus (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.8.1.9 |
ipiaIkeActionProposalsTableThis table contains a list of all ike proposal names found within a given IKE Action. SEQUENCE OF IpiaIkeActionProposalsEntry .1.3.6.1.2.1.153.4.2.1.9 |
ipiaIkeActionProposalsEntrya row containing one ike proposal reference IpiaIkeActionProposalsEntry .1.3.6.1.2.1.153.4.2.1.9.1 |
ipiaIkeActPropPriorityThe numeric priority of a given contained proposal inside an ike Action. This index SHOULD be used to order the proposals in an IKE Phase I negotiation, lowest value first (i.e. 0 first, then 1,2,etc...). Integer32 .1.3.6.1.2.1.153.4.2.1.9.1.1 |
ipiaIkeActPropNameThe administratively assigned name that can be used to reference a set of values contained within the ipiaIkeProposalTable. An attempt to set this object to a value that doesn't exist in the ipiaIkeProposalTable MUST result in an inconsistentValue error.rw SnmpAdminString .1.3.6.1.2.1.153.4.2.1.9.1.2 |
ipiaIkeActPropLastChangedThe value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.ro TimeStamp (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.9.1.3 |
ipiaIkeActPropStorageTypeThe storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable.rw StorageType (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.9.1.4 |
ipiaIkeActPropRowStatusThis object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object MUST remain active unless one of the following two conditions are met. An attempt to set it to anything other than active while the following conditions are not met MUST result in an inconsistentValue error. The two conditions are: I. No active row in the ipiaIkeActionTable exists which has a matching ipiaIkeActName. II. Or at least one other active row in this table has a matching ipiaIkeActName.rw RowStatus (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.9.1.5 |
ipiaIkeProposalTableThis table contains a list of IKE proposals which are used in an IKE negotiation. SEQUENCE OF IpiaIkeProposalEntry .1.3.6.1.2.1.153.4.2.1.10 |
ipiaIkeProposalEntryOne IKE proposal entry. IpiaIkeProposalEntry .1.3.6.1.2.1.153.4.2.1.10.1 |
ipiaIkePropLifetimeDerivedKeysipiaIkePropLifetimeDerivedKeys specifies the number of times that a phase 1 key will be used to derive a phase 2 key before the phase 1 security association needs renegotiated.rw Unsigned32 .1.3.6.1.2.1.153.4.2.1.10.1.1 |
ipiaIkePropCipherAlgorithmipiaIkePropCipherAlgorithm specifies the proposed phase 1 security association encryption algorithm.rw IkeEncryptionAlgorithm .1.3.6.1.2.1.153.4.2.1.10.1.2 |
ipiaIkePropCipherKeyLengthThis object specifies, in bits, the key length for the cipher algorithm used in IKE Phase 1 negotiation.rw Unsigned32 .1.3.6.1.2.1.153.4.2.1.10.1.3 |
ipiaIkePropCipherKeyRoundsThis object specifies the number of key rounds for the cipher algorithm used in IKE Phase 1 negotiation.rw Unsigned32 .1.3.6.1.2.1.153.4.2.1.10.1.4 |
ipiaIkePropHashAlgorithmipiaIkePropHashAlgorithm specifies the proposed phase 1 security assocation hash algorithm.rw IkeHashAlgorithm .1.3.6.1.2.1.153.4.2.1.10.1.5 |
ipiaIkePropPrfAlgorithmipPRFAlgorithm specifies the proposed phase 1 security association psuedo-random function. Note: currently no prf algorithms are defined.rw Enumeration .1.3.6.1.2.1.153.4.2.1.10.1.6 |
ipiaIkePropVendorIdThe VendorID property is used to identify vendor-defined key exchange GroupIDs.rw OCTET STRING .1.3.6.1.2.1.153.4.2.1.10.1.7 |
ipiaIkePropDhGroupThis object specifies the proposed phase 1 security association Diffie-Hellman grouprw IkeGroupDescription .1.3.6.1.2.1.153.4.2.1.10.1.8 |
ipiaIkePropAuthenticationMethodThis object specifies the proposed authentication method for the phase 1 security association.rw IkeAuthMethod .1.3.6.1.2.1.153.4.2.1.10.1.9 |
ipiaIkePropMaxLifetimeSecsipiaIkePropMaxLifetimeSecs specifies the maximum amount of time to propose a security association remain valid. A value of 0 indicates that the default lifetime of 8 hours SHOULD be used.rw Unsigned32 .1.3.6.1.2.1.153.4.2.1.10.1.10 |
ipiaIkePropMaxLifetimeKBipiaIkePropMaxLifetimeKB specifies the maximum kilobyte lifetime to propose a security association remain valid.rw Unsigned32 .1.3.6.1.2.1.153.4.2.1.10.1.11 |
ipiaIkePropLastChangedThe value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.ro TimeStamp (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.10.1.12 |
ipiaIkePropStorageTypeThe storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable.rw StorageType (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.10.1.13 |
ipiaIkePropRowStatusThis object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object MUST remain active if it is referenced by an active row in another table. An attempt to set it to anything other than active while it is referenced by an active row in another table MUST result in an inconsistentValue error.rw RowStatus (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.10.1.14 |
ipiaIpsecProposalsTableThis table lists one or more IPsec proposals for IPsec actions. SEQUENCE OF IpiaIpsecProposalsEntry .1.3.6.1.2.1.153.4.2.1.11 |
ipiaIpsecProposalsEntryAn entry containing (possibly a portion of) a proposal. IpiaIpsecProposalsEntry .1.3.6.1.2.1.153.4.2.1.11.1 |
ipiaIpsecPropNameThe name of this proposal. SnmpAdminString .1.3.6.1.2.1.153.4.2.1.11.1.1 |
ipiaIpsecPropPriorityThe priority level (AKA sequence level) of this proposal. A lower number indicates a higher precedence (0 before 1, etc..). Integer32 .1.3.6.1.2.1.153.4.2.1.11.1.2 |
ipiaIpsecPropProtocolIdThe protocol Id for the transforms for this proposal. The protoIsakmp(1) value is not valid for this object. This object, along with the ipiaIpsecPropTransformsName, is the index into the ipiaIpsecTransformsTable. IpsecDoiSecProtocolId .1.3.6.1.2.1.153.4.2.1.11.1.3 |
ipiaIpsecPropTransformsNameThe name of the transform or group of transforms for this protocol. This object, along with the ipiaIpsecPropProtocolId, is the index into the ipiaIpsecTransformsTable. An attempt to set this object to a value that does not exist in the ipiaIpsecTransformTable MUST result in an inconsistentValue error.rw SnmpAdminString .1.3.6.1.2.1.153.4.2.1.11.1.4 |
ipiaIpsecPropLastChangedThe value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.ro TimeStamp (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.11.1.5 |
ipiaIpsecPropStorageTypeThe storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable.rw StorageType (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.11.1.6 |
ipiaIpsecPropRowStatusThis object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. This row MUST NOT be set to active until the corresponding row(s) in the ipiaIpsecTransformsTable exists and is active. If active, this object MUST remain active unless one of the following two conditions are met. An attempt to set it to anything other than active while the following conditions are not met MUST result in an inconsistentValue error. The two conditions are: I. No active row in the ipiaIkeActionProposalTable exists which has a matching ipiaIpsecPropName. II. Or at least one other active row in this table has a matching ipiaIpsecPropName.rw RowStatus (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.11.1.7 |
ipiaIpsecTransformsTableThis table lists the IPsec proposals contained within a given IPsec action and the transforms within each of those proposals. These proposals and transforms can then be used to create phase 2 negotiation proposals. SEQUENCE OF IpiaIpsecTransformsEntry .1.3.6.1.2.1.153.4.2.1.12 |
ipiaIpsecTransformsEntryAn entry containing the information on an IPsec transform. IpiaIpsecTransformsEntry .1.3.6.1.2.1.153.4.2.1.12.1 |
ipiaIpsecTranTypeThe protocol type for this transform. The protoIsakmp(1) value is not valid for this object. IpsecDoiSecProtocolId .1.3.6.1.2.1.153.4.2.1.12.1.1 |
ipiaIpsecTranNameThe name for this transform or group of transforms. SnmpAdminString .1.3.6.1.2.1.153.4.2.1.12.1.2 |
ipiaIpsecTranPriorityThe priority level (AKA sequence level) of the this transform within the group of transforms (0 before 1, etc...). This indicates the preference for which algorithms are requested when the list of transforms are sent to the remote host. A lower number indicates a higher precedence. Integer32 .1.3.6.1.2.1.153.4.2.1.12.1.3 |
ipiaIpsecTranTransformNameThe name for the given transform. Depending on the value of ipiaIpsecTranType, this value is used to lookup the transform's specific parameters in the ipiaAhTransformTable, the ipiaEspTransformTable or the ipiaIpcompTransformTable.rw SnmpAdminString .1.3.6.1.2.1.153.4.2.1.12.1.4 |
ipiaIpsecTranLastChangedThe value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.ro TimeStamp (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.12.1.5 |
ipiaIpsecTranStorageTypeThe storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable.rw StorageType (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.12.1.6 |
ipiaIpsecTranRowStatusThis object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. This row MUST NOT be set to active until the corresponding row in the ipiaAhTransformTable, ipiaEspTransformTable or the ipiaIpcompTransformTable exists. If active, this object MUST remain active unless one of the following two conditions are met. An attempt to set it to anything other than active while the following conditions are not met MUST result in an inconsistentValue error. The two conditions are: I. No active row in the IpiaIpsecProposalsTable exists which has a matching ipiaIpsecPropTransformsName. II. Or at least one other active row in this table has a matching ipiaIpsecPropTransformsName.rw RowStatus (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.12.1.7 |
ipiaIkeIdentityTableIKEIdentity is used to represent the identities that are used for an IPProtocolEndpoint (or collection of IPProtocolEndpoints) to identify itself in IKE phase 1 negotiations. The column ipiaIkeActIdentityType and ipiaIkeIdentityContext in an ipiaIkeActionEntry together with the spdEndGroupInterface in the spdEndpointToGroupTable specifies the unique identity to use in a negotiation exchange. SEQUENCE OF IpiaIkeIdentityEntry .1.3.6.1.2.1.153.4.2.1.13 |
ipiaIkeIdentityEntryikeIdentity lists the attributes of an IKE identity. IpiaIkeIdentityEntry .1.3.6.1.2.1.153.4.2.1.13.1 |
ipiaIkeIdCredentialNameThis value is used as an index into the ipiaCredentialFilterTable to look up the actual credential value and other credential information. For ID's without associated credential information, this value is left blank. For ID's that are address types, this value MAY be left blank and the associated IPProtocolEndpoint or appropriate member of the Collection of endpoints is used.rw SnmpAdminString .1.3.6.1.2.1.153.4.2.1.13.1.1 |
ipiaIkeIdLastChangedThe value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.ro TimeStamp (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.13.1.2 |
ipiaIkeIdStorageTypeThe storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable.rw StorageType (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.13.1.3 |
ipiaIkeIdRowStatusThis object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object MUST remain active if it is referenced by an active row in another table. An attempt to set it to anything other than active while it is referenced by an active row in another table MUST result in an inconsistentValue error.rw RowStatus (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.13.1.4 |
ipiaAutostartIkeTableThe parameters in the autostart IKE Table are used to automatically initiate IKE phaes I and II (i.e. IPsec) negotiations on startup. It also will initiate IKE phase I and II negotiations for a row at the time of that row's creation SEQUENCE OF IpiaAutostartIkeEntry .1.3.6.1.2.1.153.4.2.1.14 |
ipiaAutostartIkeEntryautostart ike provides the set of parameters to automatically start IKE and IPsec SA's. IpiaAutostartIkeEntry .1.3.6.1.2.1.153.4.2.1.14.1 |
ipiaAutoIkePriorityipiaAutoIkePriority is an index into the autostartIkeAction table and can be used to order the autostart IKE actions (0 before 1, etc...). Integer32 .1.3.6.1.2.1.153.4.2.1.14.1.1 |
ipiaAutoIkeActionThis pointer is used to point to the action or compound action that is initiated by this row. This value can be used to indicate a scalar or a row in a table. When indicating a row in a table, this value MUST point to the first column instance in that row. If this column is set to a VariablePointer value which references a non-existent row in an otherwise supported table or if the table or scalar pointed to by the VariablePointer is not supported at all, the inconsistentValue exception MUST be returned. If during packet processing this column has a value that references a non-existent or non-supported object, the packet MUST be dropped.rw VariablePointer (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.14.1.2 |
ipiaAutoIkeAddressTypeThe property ipiaAutoIkeAddressType specifies the format of the autoIke source and destination Address values.rw InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.2.1.153.4.2.1.14.1.3 |
ipiaAutoIkeSourceAddressThe property autoIkeSourecAddress specifies Source IP address for autostarting IKE SA's, formatted according to the appropriate convention as defined in the ipiaAutoIkeAddressType property.rw InetAddress (INET-ADDRESS-MIB) .1.3.6.1.2.1.153.4.2.1.14.1.4 |
ipiaAutoIkeSourcePortThe property ipiaAutoIkeSourcePort specifies the port number for the source port for auotstarting IKE SA's. The value of 0 for this object is illegal.rw InetPortNumber (INET-ADDRESS-MIB) .1.3.6.1.2.1.153.4.2.1.14.1.5 |
ipiaAutoIkeDestAddressThe property ipiaAutoIkeDestAddress specifies the Destination IP address for autostarting IKE SA's, formatted according to the appropriate convention as defined in the ipiaAutoIkeAddressType property.rw InetAddress (INET-ADDRESS-MIB) .1.3.6.1.2.1.153.4.2.1.14.1.6 |
ipiaAutoIkeDestPortThe property ipiaAutoIkeDestPort specifies the port number for the destination port for auotstarting IKE SA's. The value of 0 for this object is illegal.rw InetPortNumber (INET-ADDRESS-MIB) .1.3.6.1.2.1.153.4.2.1.14.1.7 |
ipiaAutoIkeProtocolThe property Protocol specifies the protocol number used in comparing with policy filter entries and used in any phase 2 negotiations.rw Unsigned32 .1.3.6.1.2.1.153.4.2.1.14.1.8 |
ipiaAutoIkeLastChangedThe value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.ro TimeStamp (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.14.1.9 |
ipiaAutoIkeStorageTypeThe storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable.rw StorageType (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.14.1.10 |
ipiaAutoIkeRowStatusThis object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. This object MUST NOT be set to active until the object to which the ipiaAutoIkeAction points to exists and is active. If active, this object MUST remain active if it is referenced by an active row in another table. An attempt to set it to anything other than active while it is referenced by an active row in another table MUST result in an inconsistentValue error.rw RowStatus (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.14.1.11 |
ipiaIpsecCredMngServiceTableA table of Credential Management Service values. This table is usually used for credential/certificate values that are used with a management service (e.g. Certificate Authorities). SEQUENCE OF IpiaIpsecCredMngServiceEntry .1.3.6.1.2.1.153.4.2.1.15 |
ipiaIpsecCredMngServiceEntryA row in the ipiaIpsecCredMngServiceTable. IpiaIpsecCredMngServiceEntry .1.3.6.1.2.1.153.4.2.1.15.1 |
ipiaIcmsNameThis is an administratively assigned string used to index this table. SnmpAdminString .1.3.6.1.2.1.153.4.2.1.15.1.1 |
ipiaIcmsDistinguishedNameThis value represents the Distinguished Name of the Credential Management Service.rw OCTET STRING .1.3.6.1.2.1.153.4.2.1.15.1.2 |
ipiaIcmsPolicyStatementThis Value represents the Credential Management Service Policy Statement, or a reference describing how to obtain it (e.g., a URL). If one doesn't exist, this value can be left blankrw OCTET STRING .1.3.6.1.2.1.153.4.2.1.15.1.3 |
ipiaIcmsMaxChainLengthThis value is the maximum length of the chain allowble from the Credential Management Service to the credential in question.rw Integer32 .1.3.6.1.2.1.153.4.2.1.15.1.4 |
ipiaIcmsCredentialNameThis value is used as an index into the ipiaCredentialFilterTable to look up the actual credential value.rw SnmpAdminString .1.3.6.1.2.1.153.4.2.1.15.1.5 |
ipiaIcmsLastChangedThe value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.ro TimeStamp (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.15.1.6 |
ipiaIcmsStorageTypeThe storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable.rw StorageType (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.15.1.7 |
ipiaIcmsRowStatusThis object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object MUST remain active if it is referenced by an active row in another table. An attempt to set it to anything other than active while it is referenced by an active row in another table MUST result in an inconsistentValue error.rw RowStatus (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.15.1.8 |
ipiaCredMngCRLTableA table of the Credential Revocation Lists (CRL) for credential managment services. SEQUENCE OF IpiaCredMngCRLEntry .1.3.6.1.2.1.153.4.2.1.16 |
ipiaCredMngCRLEntryA row in the ipiaCredMngCRLTable. IpiaCredMngCRLEntry .1.3.6.1.2.1.153.4.2.1.16.1 |
ipiaCmcCRLNameThis is an administratively assigned string used to index this table. It represents a CRL for a given CA from a given distribution point. SnmpAdminString .1.3.6.1.2.1.153.4.2.1.16.1.1 |
ipiaCmcDistributionPointThis Value represents a Distribution Point for a Credential Revocation List. It can be relative to the Credential Management Service or a full name (URL, e-mail, etc...).rw OCTET STRING .1.3.6.1.2.1.153.4.2.1.16.1.2 |
ipiaCmcThisUpdateThis value is the issue date of this CRL. This SHOULD be in utctime or generalizedtime.rw OCTET STRING .1.3.6.1.2.1.153.4.2.1.16.1.3 |
ipiaCmcNextUpdateThis value indicates the date the next version of this CRL will be issued. This SHOULD be in utctime or generalizedtime.rw OCTET STRING .1.3.6.1.2.1.153.4.2.1.16.1.4 |
ipiaCmcLastChangedThe value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.ro TimeStamp (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.16.1.5 |
ipiaCmcStorageTypeThe storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable.rw StorageType (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.16.1.6 |
ipiaCmcRowStatusThis object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object MUST remain active if it is referenced by an active row in another table. An attempt to set it to anything other than active while it is referenced by an active row in another table MUST result in an inconsistentValue error.rw RowStatus (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.16.1.7 |
ipiaRevokedCertificateTableA table of Credentials revoked by credential managment services. That is, this table is a table of Certificates that are on CRL's, Credential Revocation Lists. SEQUENCE OF IpiaRevokedCertificateEntry .1.3.6.1.2.1.153.4.2.1.17 |
ipiaRevokedCertificateEntryA row in the ipiaRevokedCertificateTable. IpiaRevokedCertificateEntry .1.3.6.1.2.1.153.4.2.1.17.1 |
ipiaRctCertSerialNumberThis value is the serial number of the revoked certificate. Unsigned32 .1.3.6.1.2.1.153.4.2.1.17.1.1 |
ipiaRctRevokedDateThis value is the revocation date of the certificate. This SHOULD be in utctime or generaltime.rw OCTET STRING .1.3.6.1.2.1.153.4.2.1.17.1.2 |
ipiaRctRevokedReasonThis value is the reason this certificate was revoked.rw Enumeration .1.3.6.1.2.1.153.4.2.1.17.1.3 |
ipiaRctLastChangedThe value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.ro TimeStamp (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.17.1.4 |
ipiaRctStorageTypeThe storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable.rw StorageType (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.17.1.5 |
ipiaRctRowStatusThis object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object MUST remain active if it is referenced by an active row in another table. An attempt to set it to anything other than active while it is referenced by an active row in another table MUST result in an inconsistentValue error.rw RowStatus (SNMPv2-TC) .1.3.6.1.2.1.153.4.2.1.17.1.6 |
ipiaNotificationObjects OBJECT IDENTIFIER .1.3.6.1.2.1.153.4.2.2 |
ipiaNotifications OBJECT IDENTIFIER .1.3.6.1.2.1.153.4.2.2.0 |
ipiaNotificationVariables OBJECT IDENTIFIER .1.3.6.1.2.1.153.4.2.2.1 |
ipiaConformanceObjects OBJECT IDENTIFIER .1.3.6.1.2.1.153.4.2.3 |
ipiaCompliances OBJECT IDENTIFIER .1.3.6.1.2.1.153.4.2.3.1 |
ipiaIKEComplianceThe compliance statement for SNMP entities that include an IPsec MIB implementation and supports IKE actions. -- OBJECT ipiaAutoIkeAddressType -- SYNTAX InetAddreessType { ipv4(1), ipv6(2) } -- DESCRIPTION -- Only support for global IPv4 and IPv6 address -- types is required. -- -- OBJECT ipiaAutoIkeSourceAddress -- SYNTAX InetAddress (SIZE(4|16)) -- DESCRIPTION -- Only support for global IPv4 and IPv6 address -- types is required. -- OBJECT ipiaAutoIkeDestAddress -- SYNTAX InetAddress (SIZE(4|16)) -- DESCRIPTION -- Only support for global IPv4 and IPv6 address -- types is required. -- Unknown .1.3.6.1.2.1.153.4.2.3.1.1 |
ipiaRuleFilterComplianceThe compliance statement for SNMP entities that include an IKEACTION MIB implementation with IKE filters support. Unknown .1.3.6.1.2.1.153.4.2.3.1.2 |
ipiaGroups OBJECT IDENTIFIER .1.3.6.1.2.1.153.4.2.3.2 |
ipiaStaticFilterGroupThe static filter group. Currently this is just a true filter. Unknown .1.3.6.1.2.1.153.4.2.3.2.1 |
ipiaCredentialFilterGroupThis group is made up of objects from the IPsec Policy Credential Filter Table. Unknown .1.3.6.1.2.1.153.4.2.3.2.2 |
ipiaPeerIdFilterGroupThis group is made up of objects from the IPsec Policy Peer Identity Filter Table. Unknown .1.3.6.1.2.1.153.4.2.3.2.3 |
ipiaStaticActionGroupThis group is made up of IPsec Policy Static Actions objects. Unknown .1.3.6.1.2.1.153.4.2.3.2.4 |
ipiaIkeGroupThis group is the set of objects that support IKE actions. These objects are from The IPsec Policy IKE Action Table, The IKE Action Proposals Table, The IKE Proposal Table, The autostart IKE Table and The IKE Identity Table, The Peer Identity Table, The Credential Management Service Table, and the shared table Negotiation Parameters Table (from the IPSEC-IPSECACTION-MIB. Unknown .1.3.6.1.2.1.153.4.2.3.2.5 |
ipiaIpsecGroupThis group is the set of objects that support IPsec actions. These objects are from The IPsec Policy IPsec Actions Table, The IPsec Proposal Table, and The IPsec Transform Table. This group also includes objects from the shared tables: Peer Identity Table, Credential Table, Negotiation Parameters Table, Credential Management Service Table and the AH, ESP, and IPComp Transform Table. Unknown .1.3.6.1.2.1.153.4.2.3.2.6 |