IPSEC-IPSECACTION-MIB
AI MIB Summary
The IPSEC-IPSECACTION-MIB enables network management systems to configure and monitor specific IPsec security policy actions, such as tunnel encapsulation modes, authentication algorithms, and encryption parameters, across compliant security gateways and routers. It provides granular control over the operational state of IPsec security associations and policy enforcement points to ensure consistent traffic protection and compliance with defined security rules.
The MIB module defines IPsec actions for managing IPsec Security Policy. Copyright (C) The Internet Society (2006). This version of this MIB module is part of RFC XXXX, see the RFC itself for full legal notices.
Main OID:
ipsaMIB.1.3.6.1.2.1.153.4.1
102
Objects
Active
Status
7
Dependencies
Imported Objects
Objects
102 total| Object Name |
|---|
ipsaMIBThe MIB module defines IPsec actions for managing IPsec Security Policy. Copyright (C) The Internet Society (2006). This version of this MIB module is part of RFC XXXX, see the RFC itself for full legal notices. MODULE-IDENTITY .1.3.6.1.2.1.153.4.1 |
ipsaConfigObjects OBJECT IDENTIFIER .1.3.6.1.2.1.153.4.1.1 |
ipsaSaPreconfiguredActionTableThis table is a list of non-negotiated IPsec actions (SAs) that can be performed and contains or indicates the data necessary to create such an SA. SEQUENCE OF IpsaSaPreconfiguredActionEntry .1.3.6.1.2.1.153.4.1.1.1 |
ipsaSaPreconfiguredActionEntryOne entry in the ipsaSaPreconfiguredActionTable. IpsaSaPreconfiguredActionEntry .1.3.6.1.2.1.153.4.1.1.1.1 |
ipsaSaPreActActionNameThis object contains the name of this SaPreconfiguredActionEntry. SnmpAdminString .1.3.6.1.2.1.153.4.1.1.1.1.1 |
ipsaSaPreActSADirectionThis object indicates whether a row applies to egress or ingress SAs IfDirection .1.3.6.1.2.1.153.4.1.1.1.1.2 |
ipsaSaPreActActionDescriptionAn administratively assigned string which can be used to describe what the action does.rw SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.6.1.2.1.153.4.1.1.1.1.3 |
ipsaSaPreActActionLifetimeSecipsaSaPreActActionLifetimeSec specifies how long in seconds the security association derived from this action is used. The default lifetime is 8 hours. Note: the actual lifetime of the preconfigured SA will be the lesser of the value of this object and of the value of the MaxLifetimeSecs property of the associated transform. A value of 0 indicates no time limit on the lifetime of the SA.rw Unsigned32 UNITS "seconds" .1.3.6.1.2.1.153.4.1.1.1.1.4 |
ipsaSaPreActActionLifetimeKBipsaSaPreActActionLifetimeKB specifies how long the security association derived from this action is used. After this value in KiloBytes has passed through the security association, this SA SHOULD be destroyed. Note: the actual lifetime of the preconfigured SA will be the lesser of the value of this object and of the value of the MaxLifetimeKB property of the associated transform. The default value, '0', indicates no kilobyte limit.rw Unsigned32 .1.3.6.1.2.1.153.4.1.1.1.1.5 |
ipsaSaPreActDoActionLoggingipsaSaPreActDoActionLogging specifies whether or not an audit message SHOULD be logged when a preconfigured SA is created.rw TruthValue (SNMPv2-TC) .1.3.6.1.2.1.153.4.1.1.1.1.6 |
ipsaSaPreActDoPacketLoggingipsaSaPreActDoPacketLogging specifies whether or not an audit message SHOULD be logged and if there is logging, how many bytes of the packet to place in the notification.rw SpdIPPacketLogging (IPSEC-SPD-MIB) .1.3.6.1.2.1.153.4.1.1.1.1.7 |
ipsaSaPreActDFHandlingThis object specifies how to process the DF bit in packets sent through the preconfigured SA. This object is not used for transport SAs.rw Enumeration .1.3.6.1.2.1.153.4.1.1.1.1.8 |
ipsaSaPreActActionTypeThis object specifies the encapsulation mode to use for the preconfigured SA: tunnel or transport mode.rw IpsecDoiEncapsulationMode .1.3.6.1.2.1.153.4.1.1.1.1.9 |
ipsaSaPreActAHSPIThis object represents the SPI value for the AH SA.rw Integer32 .1.3.6.1.2.1.153.4.1.1.1.1.10 |
ipsaSaPreActAHTransformNameThis object is the name of the AH transform to use as an index into the AHTransformTable. A zero length value indicates no transform of this type is used.rw SnmpAdminString .1.3.6.1.2.1.153.4.1.1.1.1.11 |
ipsaSaPreActAHSharedSecretNameThis object contains a name value to be used as an index into the ipsaCredentialTable which holds the pertinent keying information for the AH SA.rw SnmpAdminString .1.3.6.1.2.1.153.4.1.1.1.1.12 |
ipsaSaPreActESPSPIThis object represents the SPI value for the ESP SA.rw Integer32 .1.3.6.1.2.1.153.4.1.1.1.1.13 |
ipsaSaPreActESPTransformNameThis object is the name of the ESP transform to use as an index into the ESPTransformTable. A zero length value indicates no transform of this type is used.rw SnmpAdminString .1.3.6.1.2.1.153.4.1.1.1.1.14 |
ipsaSaPreActESPEncSecretNameThis object contains a name value to be used as an index into the ipsaCredentialTable which holds the pertinent keying information for the encryption algorithm of the ESP SA.rw SnmpAdminString .1.3.6.1.2.1.153.4.1.1.1.1.15 |
ipsaSaPreActESPAuthSecretNameThis object contains a name value to be used as an index into the ipsaCredentialTable which holds the pertinent keying information for the authentication algorithm of the ESP SA.rw SnmpAdminString .1.3.6.1.2.1.153.4.1.1.1.1.16 |
ipsaSaPreActIPCompSPIThis object represents the SPI value for the IPComp SA.rw Integer32 .1.3.6.1.2.1.153.4.1.1.1.1.17 |
ipsaSaPreActIPCompTransformNameThis object is the name of the IPComp transform to use as an index into the IPCompTransformTable. A zero length value indicates no transform of this type is used.rw SnmpAdminString .1.3.6.1.2.1.153.4.1.1.1.1.18 |
ipsaSaPreActPeerGatewayIdNameThis object indicates the peer id name of the peer gateway. This object can be used to look up the peer gateway address in the ipsaPeerIdentityTable. This object is only used when initiating a tunnel SA, and is not used for transport SAs. If ipsaSaPreActActionType specifies tunnel mode and this object is empty, the peer gateway is determined from the source or destination of the packet.rw SnmpAdminString .1.3.6.1.2.1.153.4.1.1.1.1.19 |
ipsaSaPreActLastChangedThe value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. If this row has not been modified since the last re-initialization of the network management subsystem, this object SHOULD have a zero value.ro TimeStamp (SNMPv2-TC) .1.3.6.1.2.1.153.4.1.1.1.1.20 |
ipsaSaPreActStorageTypeThe storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable.rw StorageType (SNMPv2-TC) .1.3.6.1.2.1.153.4.1.1.1.1.21 |
ipsaSaPreActRowStatusThis object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object MUST remain active if it is referenced by an active row in another table. An attempt to set it to anything other than active while it is referenced by an active row in another table MUST result in an inconsistentValue error.rw RowStatus (SNMPv2-TC) .1.3.6.1.2.1.153.4.1.1.1.1.22 |
ipsaAhTransformTableThis table lists all the AH transforms which can be used to build IPsec proposals. SEQUENCE OF IpsaAhTransformEntry .1.3.6.1.2.1.153.4.1.1.2 |
ipsaAhTransformEntryThis entry contains the attributes of one AH transform. IpsaAhTransformEntry .1.3.6.1.2.1.153.4.1.1.2.1 |
ipsaAhTranNameThis object contains the name of this AH transform. This row will be referred to by an ipsaIpsecTransformsEntry. SnmpAdminString .1.3.6.1.2.1.153.4.1.1.2.1.1 |
ipsaAhTranMaxLifetimeSecipsaAhTranMaxLifetimeSec specifies how long in seconds the security association derived from this transform SHOULD be used. A value of 0 indicates that the default lifetime of 8 hours SHOULD be used.rw Unsigned32 UNITS "seconds" .1.3.6.1.2.1.153.4.1.1.2.1.2 |
ipsaAhTranMaxLifetimeKBipsaAhTranMaxLifetimeKB specifies how long in kilobytes the security association derived from this transform SHOULD be used.rw Unsigned32 .1.3.6.1.2.1.153.4.1.1.2.1.3 |
ipsaAhTranAlgorithmThis object specifies the AH algorithm for this transform.rw IpsecDoiAuthAlgorithm .1.3.6.1.2.1.153.4.1.1.2.1.4 |
ipsaAhTranReplayProtectionipsaAhTranReplayProtection indicates whether or not anti replay service is to be provided by this SA.rw TruthValue (SNMPv2-TC) .1.3.6.1.2.1.153.4.1.1.2.1.5 |
ipsaAhTranReplayWindowSizeipsaAhTranReplayWindowSize indicates the size, in bits, of the replay window to use if replay protection is true for this transform. The window size is assumed to be a power of two. If Replay Protection is false, this value can be ignored.rw Unsigned32 .1.3.6.1.2.1.153.4.1.1.2.1.6 |
ipsaAhTranLastChangedThe value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. If this row has not been modified since the last re-initialization of the network management subsystem, this object SHOULD have a zero value.ro TimeStamp (SNMPv2-TC) .1.3.6.1.2.1.153.4.1.1.2.1.7 |
ipsaAhTranStorageTypeThe storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable.rw StorageType (SNMPv2-TC) .1.3.6.1.2.1.153.4.1.1.2.1.8 |
ipsaAhTranRowStatusThis object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object MUST remain active if it is referenced by an active row in another table. An attempt to set it to anything other than active while it is referenced by an active row in another table MUST result in an inconsistentValue error.rw RowStatus (SNMPv2-TC) .1.3.6.1.2.1.153.4.1.1.2.1.9 |
ipsaEspTransformTableThis table lists all the ESP transforms which can be used to build IPsec proposals SEQUENCE OF IpsaEspTransformEntry .1.3.6.1.2.1.153.4.1.1.3 |
ipsaEspTransformEntryThis entry contains the attributes of one ESP transform. IpsaEspTransformEntry .1.3.6.1.2.1.153.4.1.1.3.1 |
ipsaEspTranNameThe name of this particular espTransform be referred to by an ipsaIpsecTransformsEntry. SnmpAdminString .1.3.6.1.2.1.153.4.1.1.3.1.1 |
ipsaEspTranMaxLifetimeSecipsaEspTranMaxLifetimeSec specifies how long in seconds the security association derived from this transform SHOULD be used. A value of 0 indicates that the default lifetime of 8 hours SHOULD be used.rw Unsigned32 UNITS "seconds" .1.3.6.1.2.1.153.4.1.1.3.1.2 |
ipsaEspTranMaxLifetimeKBipsaEspTranMaxLifetimeKB specifies how long in kilobytes the security association derived from this transform is used.rw Unsigned32 .1.3.6.1.2.1.153.4.1.1.3.1.3 |
ipsaEspTranCipherTransformIdThis object specifies the transform ID of the ESP cipher algorithm.rw IpsecDoiEspTransform .1.3.6.1.2.1.153.4.1.1.3.1.4 |
ipsaEspTranCipherKeyLengthThis object specifies, in bits, the key length for the ESP cipher algorithm.rw Unsigned32 .1.3.6.1.2.1.153.4.1.1.3.1.5 |
ipsaEspTranCipherKeyRoundsThis object specifies the number of key rounds for the ESP cipher algorithm.rw Unsigned32 .1.3.6.1.2.1.153.4.1.1.3.1.6 |
ipsaEspTranIntegrityAlgorithmIdThis object specifies the ESP integrity algorithm ID.rw IpsecDoiAuthAlgorithm .1.3.6.1.2.1.153.4.1.1.3.1.7 |
ipsaEspTranReplayPreventionipsaEspTranReplayPrevention indicates whether or not anti-replay service is to be provided by this SA.rw TruthValue (SNMPv2-TC) .1.3.6.1.2.1.153.4.1.1.3.1.8 |
ipsaEspTranReplayWindowSizeipsaEspTranReplayWindowSize indicates the size, in bits, of the replay window to use if replay protection is true for this transform. The window size is assumed to be a power of two. If Replay Protection is false, this value can be ignored.rw Unsigned32 .1.3.6.1.2.1.153.4.1.1.3.1.9 |
ipsaEspTranLastChangedThe value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. If this row has not been modified since the last re-initialization of the network management subsystem, this object SHOULD have a zero value.ro TimeStamp (SNMPv2-TC) .1.3.6.1.2.1.153.4.1.1.3.1.10 |
ipsaEspTranStorageTypeThe storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable.rw StorageType (SNMPv2-TC) .1.3.6.1.2.1.153.4.1.1.3.1.11 |
ipsaEspTranRowStatusThis object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object MUST remain active if it is referenced by a row in another table. An attempt to set it to anything other than active while it is referenced by an active row in another table MUST result in an inconsistentValue error.rw RowStatus (SNMPv2-TC) .1.3.6.1.2.1.153.4.1.1.3.1.12 |
ipsaIpcompTransformTableThis table lists all the IP compression transforms which can be used to build IPsec proposals during negotiation of a phase 2 SA. SEQUENCE OF IpsaIpcompTransformEntry .1.3.6.1.2.1.153.4.1.1.4 |
ipsaIpcompTransformEntryThis entry contains the attributes of one IP compression transform. IpsaIpcompTransformEntry .1.3.6.1.2.1.153.4.1.1.4.1 |
ipsaIpcompTranNameThe name of this ipsaIpcompTransformEntry. SnmpAdminString .1.3.6.1.2.1.153.4.1.1.4.1.1 |
ipsaIpcompTranMaxLifetimeSecipsaIpcompTranMaxLifetimeSec specifies how long in seconds the security association derived from this transform SHOULD be used. A value of 0 indicates that the default lifetime of 8 hours SHOULD be used.rw Unsigned32 UNITS "seconds" .1.3.6.1.2.1.153.4.1.1.4.1.2 |
ipsaIpcompTranMaxLifetimeKBipsaIpcompTranMaxLifetimeKB specifies how long in kilobytes the security association derived from this transform SHOULD be used.rw Unsigned32 .1.3.6.1.2.1.153.4.1.1.4.1.3 |
ipsaIpcompTranAlgorithmipsaIpcompTranAlgorithm specifies the transform ID of the IP compression algorithm.rw IpsecDoiIpcompTransform .1.3.6.1.2.1.153.4.1.1.4.1.4 |
ipsaIpcompTranDictionarySizeIf the algorithm in ipsaIpcompTranAlgorithm requires a dictionary size configuration parameter, then this is the place to put it. This object specifies the log2 maximum size of the dictionary for the compression algorithm.rw Unsigned32 .1.3.6.1.2.1.153.4.1.1.4.1.5 |
ipsaIpcompTranPrivateAlgorithmIf ipsaIpcompTranPrivateAlgorithm has a value other zero, then it is up to the vendors implementation to determine the meaning of this field and substitute a data compression algorithm in place of ipsaIpcompTranAlgorithm.rw Unsigned32 .1.3.6.1.2.1.153.4.1.1.4.1.6 |
ipsaIpcompTranLastChangedThe value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. If this row has not been modified since the last re-initialization of the network management subsystem, this object SHOULD have a zero value.ro TimeStamp (SNMPv2-TC) .1.3.6.1.2.1.153.4.1.1.4.1.7 |
ipsaIpcompTranStorageTypeThe storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable.rw StorageType (SNMPv2-TC) .1.3.6.1.2.1.153.4.1.1.4.1.8 |
ipsaIpcompTranRowStatusThis object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object MUST remain active if it is referenced by an active row in another table. An attempt to set it to anything other than active while it is referenced by an active row in another table MUST result in an inconsistentValue error.rw RowStatus (SNMPv2-TC) .1.3.6.1.2.1.153.4.1.1.4.1.9 |
ipsaCredentialTableA table of credential values. Example of Credentials are shared secrets, certificates or kerberos tickets. SEQUENCE OF IpsaCredentialEntry .1.3.6.1.2.1.153.4.1.1.5 |
ipsaCredentialEntryA row in the ipsaCredentialTable. IpsaCredentialEntry .1.3.6.1.2.1.153.4.1.1.5.1 |
ipsaCredNameThis object represents the name for an entry in this table. SnmpAdminString .1.3.6.1.2.1.153.4.1.1.5.1.1 |
ipsaCredTypeThis object represents the type of the credential for this row.rw IpsaCredentialType .1.3.6.1.2.1.153.4.1.1.5.1.2 |
ipsaCredCredentialThis object represents the credential value. If the size of the credential is greater than 1024, the credential MUST be configured via the ipsaCredSegmentTable. For credential type where the disclosure of the credential would compromise the credential (e.g. shared secrets), when this object is accessed for reading, it MUST return a null length (0 length) string and MUST NOT return the configured credential.rw OCTET STRING .1.3.6.1.2.1.153.4.1.1.5.1.3 |
ipsaCredSizeThis value represents the size of the credential. If this value is greater than 1024, the ipsaCreCredential column will return an empty (0 length) string. In this case, the value of the credential is retrived from the ipsaCredSegmentTable. For credential type where the disclosure of the credential would compromise the credential (e.g. shared secrets), when this object is accessed for reading, it MUST return a value of 0 and MUST NOT return the size credential.ro Integer32 .1.3.6.1.2.1.153.4.1.1.5.1.4 |
ipsaCredMngNameThis value is used as an index into the ipsaIpsecCredMngServiceTable. For IDs that have no credential management service, this value is left blank.rw SnmpAdminString .1.3.6.1.2.1.153.4.1.1.5.1.5 |
ipsaCredRemoteIDThis object represents the Identification (e.g. user name) of the user of the key information on the remote site. If there is no ID associated with this credential, the value of this object SHOULD be the null string.rw OCTET STRING .1.3.6.1.2.1.153.4.1.1.5.1.6 |
ipsaCredAdminStatusIndicates whether this credential is considered active. Rows with a disabled status MUST NOT be used for any purpose, including IKE or IPSEC processing. For credentials whose size does not execeed the maximum size for the ipsaCredCredential, it MAY be set to enabled during row creation. For larger credentials, it SHOULD be left as disabled until all rows have been uploaded to the ipsaCredSegmentTable.rw SpdAdminStatus (IPSEC-SPD-MIB) .1.3.6.1.2.1.153.4.1.1.5.1.7 |
ipsaCredLastChangedThe value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. If this row has not been modified since the last re-initialization of the network management subsystem, this object SHOULD have a zero value.ro TimeStamp (SNMPv2-TC) .1.3.6.1.2.1.153.4.1.1.5.1.8 |
ipsaCredStorageTypeThe storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable.rw StorageType (SNMPv2-TC) .1.3.6.1.2.1.153.4.1.1.5.1.9 |
ipsaCredRowStatusThis object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object MUST remain active if it is referenced by an active row in another table. An attempt to set it to anything other than active while it is referenced by an active row in another table MUST result in an inconsistentValue error.rw RowStatus (SNMPv2-TC) .1.3.6.1.2.1.153.4.1.1.5.1.10 |
ipsaCredentialSegmentTableA table of credential segments. This table is used for credentials which are larger than the maximum size allowed for ipsaCredCredential. SEQUENCE OF IpsaCredentialSegmentEntry .1.3.6.1.2.1.153.4.1.1.6 |
ipsaCredentialSegmentEntryA row in the ipsaCredentialSegmentTable. IpsaCredentialSegmentEntry .1.3.6.1.2.1.153.4.1.1.6.1 |
ipsaCredSegIndexThis object represents the segment number for this segment. By default, each segment will be 1024 octets. However, when this table is accessed using a context of 'ipsa4096', 'ipsa8192' or 'ipsa16384' a segment size of 4096, 8192 or 16384 (respectively) will be used instead. The number of rows which need to be retrieved or set can be calculated by obtaining the value of the ipsaCredSize column from the corresponding ipsaCredentialTable row and dividing it by the segment size. Integer32 .1.3.6.1.2.1.153.4.1.1.6.1.1 |
ipsaCredSegValueThis object represents one segment of the credential. By default, each complete segment will be 1024 octets. (The last row for a given credential might be smaller, if the credential size is not a multiple of the segment size). An implementation MAY optionally support segment sizes of 256, 4096, 8192 or the full object size when this table is is accessed using a context of 'ipsaCred256', 'ipsaCred4096', 'ipsaCred8192' or 'ipsaCredFull' (respectively). The number of rows which need to be retrieved or set can be calculated by obtaining the value of the ipsaCredSize column from the corresponding ipsaCredentialTable row and dividing it by the segment size.rw OCTET STRING .1.3.6.1.2.1.153.4.1.1.6.1.2 |
ipsaCredSegLastChangedThe value of sysUpTime when this credential was last modified or created either through SNMP SETs or by some other external means. Note that the last changed type will be the same for all segemnts of the credential. If this row has not been modified since the last re-initialization of the network management subsystem, this object SHOULD have a zero value.ro TimeStamp (SNMPv2-TC) .1.3.6.1.2.1.153.4.1.1.6.1.3 |
ipsaCredSegStorageTypeThe storage type for this row. This object is read-only. Rows in this table have the same value as the ipsaCrendStorageType for the corresponding row in the ipsaCredentialTable. For a storage type of permanent, none of the columns have to be writable.ro StorageType (SNMPv2-TC) .1.3.6.1.2.1.153.4.1.1.6.1.4 |
ipsaCredSegRowStatusThis object indicates the conceptual status of this row. The segment of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object MUST remain active if it is referenced by an active row in another table. An attempt to set it to anything other than active while it is referenced by an active row in another table MUST result in an inconsistentValue error.rw RowStatus (SNMPv2-TC) .1.3.6.1.2.1.153.4.1.1.6.1.5 |
ipsaPeerIdentityTablePeerIdentity is used to represent the identities that are used for peers to identify themselves in IKE phase I/II negotiations. PeerIdentityTable aggregates the table entries that provide mappings between identities and their addresses. SEQUENCE OF IpsaPeerIdentityEntry .1.3.6.1.2.1.153.4.1.1.7 |
ipsaPeerIdentityEntrypeerIdentity matches a peer's identity to its address. IpsaPeerIdentityEntry .1.3.6.1.2.1.153.4.1.1.7.1 |
ipsaPeerIdNameThis is an administratively assigned value that, together with ipsaPeerIdPriority, uniquely identifies an entry in this table. SnmpAdminString .1.3.6.1.2.1.153.4.1.1.7.1.1 |
ipsaPeerIdPriorityThis object, along with ipsaPeerIdName, uniquely identifies an entry in this table. The priority also indicates the ordering of peer gateways from which to initiate or accept SAs. The priority value is ordered from low to high. For example, a row with a priority of 0 is used before a row with a priority of 1, a 1 before a 2, etc.... Integer32 .1.3.6.1.2.1.153.4.1.1.7.1.2 |
ipsaPeerIdTypeipsaPeerIdType is an enumeration identifying the type of the Identity value.rw IpsecDoiIdentType .1.3.6.1.2.1.153.4.1.1.7.1.3 |
ipsaPeerIdValueipsaPeerIdValue contains an Identity filter to be used to match against the identity payload in an IKE request, or blank otherwise. If this value matches the value in the identity payload, the credential for the peer can be found using the ipsaPeerIdCredentialName as an index into the credential table.rw IpsaIdentityFilter .1.3.6.1.2.1.153.4.1.1.7.1.4 |
ipsaPeerIdAddressTypeThe property ipsaPeerIdAddressType specifies the format of the ipsaPeerIdAddress property value.rw InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.2.1.153.4.1.1.7.1.5 |
ipsaPeerIdAddressThe property PeerAddress specifies the IP address of the peer. The format is specified by the ipsaPeerIdAddressType.rw InetAddress (INET-ADDRESS-MIB) .1.3.6.1.2.1.153.4.1.1.7.1.6 |
ipsaPeerIdCredentialNameThis value is used as an index into the ipsaCredentialTable to look up the actual credential value and other credential information. For peer IDs that have no associated credential information, this value is left blank.rw SnmpAdminString .1.3.6.1.2.1.153.4.1.1.7.1.7 |
ipsaPeerIdLastChangedThe value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. If this row has not been modified since the last re-initialization of the network management subsystem, this object SHOULD have a zero value.ro TimeStamp (SNMPv2-TC) .1.3.6.1.2.1.153.4.1.1.7.1.8 |
ipsaPeerIdStorageTypeThe storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable.rw StorageType (SNMPv2-TC) .1.3.6.1.2.1.153.4.1.1.7.1.9 |
ipsaPeerIdRowStatusThis object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object MUST remain active if it is referenced by an active row in another table. An attempt to set it to anything other than active while it is referenced by an active row in another table MUST result in an inconsistentValue error.rw RowStatus (SNMPv2-TC) .1.3.6.1.2.1.153.4.1.1.7.1.10 |
ipsaNotificationObjects OBJECT IDENTIFIER .1.3.6.1.2.1.153.4.1.2 |
ipsaNotifications OBJECT IDENTIFIER .1.3.6.1.2.1.153.4.1.2.0 |
ipsaNotificationVariables OBJECT IDENTIFIER .1.3.6.1.2.1.153.4.1.2.1 |
ipsaConformanceObjects OBJECT IDENTIFIER .1.3.6.1.2.1.153.4.1.3 |
ipsaCompliances OBJECT IDENTIFIER .1.3.6.1.2.1.153.4.1.3.1 |
ipsaIPsecComplianceThe compliance statement for SNMP entities that include an IPsec MIB implementation and supports IPsec actions. There are a number of INDEX objects that cannot be represented in the form of OBJECT clauses in SMIv2, but for which we have the following compliance requirements, expressed in OBJECT clause form in this description clause: -- OBJECT ipsaPeerIdAddressType -- SYNTAX InetAddressType { ipv4(1), ipv6(2) } -- DESCRIPTION -- Only support for global IPv4 and IPv6 address -- types is required. -- -- OBJECT ipsaPeerIdAddress -- SYNTAX InetAddress (SIZE(4|16)) -- DESCRIPTION -- Only support for global IPv4 and IPv6 address -- types is required. -- Unknown .1.3.6.1.2.1.153.4.1.3.1.1 |
ipsaGroups OBJECT IDENTIFIER .1.3.6.1.2.1.153.4.1.3.2 |
ipsaPreconfiguredGroupThis group is the set of objects that support preconfigured IPsec actions. These objects are from The Preconfigured Action Table. This group also includes objects from the shared tables: Peer Identity Table, Credential Table, Credential Management Service Table and the AH, ESP, and IPComp Transform Tables. Unknown .1.3.6.1.2.1.153.4.1.3.2.1 |
ipsaSharedGroupThis group includes objects from tables expected to be shared by other modules: Peer Identity Table, Credential Table, Credential Management Service Table and the AH, ESP, and IPComp Transform Tables. Unknown .1.3.6.1.2.1.153.4.1.3.2.2 |