IPSEC-IKEACTION-MIB
178 objects
The MIB module for defining IKE actions for managing IPsec Security Policy. Copyright (C) The Internet Society (2006). This version of this MIB module is part of RFC YYYY, see the RFC itself for full legal notices.
Imported Objects
| INET-ADDRESS-MIB | InetAddress InetAddressType InetPortNumber |
| IPSEC-IPSECACTION-MIB | IpsaCredentialType IpsaIdentityFilter ipsaSharedGroup IpsecDoiIdentType |
| IPSEC-SPD-MIB | spdActions spdEndGroupInterface SpdIPPacketLogging |
| SNMP-FRAMEWORK-MIB | SnmpAdminString |
| SNMPv2-CONF | MODULE-COMPLIANCE OBJECT-GROUP |
| SNMPv2-SMI | Integer32 MODULE-IDENTITY OBJECT-TYPE Unsigned32 |
| SNMPv2-TC | RowStatus StorageType TEXTUAL-CONVENTION TimeStamp TruthValue VariablePointer |
| OID | Name | Access | Status | Description |
|---|---|---|---|---|
| 1.3.6.1.2.1.153.4.2 | IdentityipiaMIB | The MIB module for defining IKE actions for managing IPsec Security Policy. Copyright (C) The Internet Society (2006). This version of this MIB module is part … | ||
| 1.3.6.1.2.1.153.4.2.1 | NodeipiaConfigObjects | |||
| 1.3.6.1.2.1.153.4.2.1.1 | NodeipiaLocalConfigObjects | |||
| 1.3.6.1.2.1.153.4.2.1.2 | NodeipiaStaticFilters | |||
| 1.3.6.1.2.1.153.4.2.1.2.1 | ScalaripiaIkePhase1Filter | read-only | current | This static filter can be used to test if a packet is part of an IKE phase-1 negotiation. |
| 1.3.6.1.2.1.153.4.2.1.2.2 | ScalaripiaIkePhase2Filter | read-only | current | This static filter can be used to test if a packet is part of an IKE phase-2 negotiation. |
| 1.3.6.1.2.1.153.4.2.1.3 | TableipiaCredentialFilterTable | not-accessible | current | This table is used to provide credentials for IKE identities. It can be used to for filters which are matched to credentials of IKE peers, where the credential… |
| 1.3.6.1.2.1.153.4.2.1.3.1 | RowipiaCredentialFilterEntry | not-accessible | current | A row defining a particular credential filter |
| 1.3.6.1.2.1.153.4.2.1.3.1.1 | ColumnipiaCredFiltName | not-accessible | current | The administrative name of this filter. |
| 1.3.6.1.2.1.153.4.2.1.3.1.2 | ColumnipiaCredFiltCredentialType | read-create | current | The credential type that is expected for this filter to succeed. |
| 1.3.6.1.2.1.153.4.2.1.3.1.3 | ColumnipiaCredFiltMatchFieldName | read-create | current | The piece of the credential to match against. Examples: serialNumber, signatureAlgorithm, issuerName or subjectName. For credential types without fields (e.g. … |
| 1.3.6.1.2.1.153.4.2.1.3.1.4 | ColumnipiaCredFiltMatchFieldValue | read-create | current | The value that the field indicated by the ipiaCredFiltMatchFieldName MUST match against for the filter to be considered TRUE. |
| 1.3.6.1.2.1.153.4.2.1.3.1.5 | ColumnipiaCredFiltAcceptCredFrom | read-create | current | This value is used to look up a row in the ipiaIpsecCredMngServiceTable for the Certificate Authority (CA) Information. This value is empty if there is no CA u… |
| 1.3.6.1.2.1.153.4.2.1.3.1.6 | ColumnipiaCredFiltLastChanged | read-only | current | The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. |
| 1.3.6.1.2.1.153.4.2.1.3.1.7 | ColumnipiaCredFiltStorageType | read-create | current | The storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storag… |
| 1.3.6.1.2.1.153.4.2.1.3.1.8 | ColumnipiaCredFiltRowStatus | read-create | current | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified… |
| 1.3.6.1.2.1.153.4.2.1.4 | TableipiaPeerIdentityFilterTable | not-accessible | current | This table defines filters which can be used to match credentials of IKE peers, where the credentials in question have been obtained from an IKE phase 1 exchan… |
| 1.3.6.1.2.1.153.4.2.1.4.1 | RowipiaPeerIdentityFilterEntry | not-accessible | current | A row defining a particular credential filter |
| 1.3.6.1.2.1.153.4.2.1.4.1.1 | ColumnipiaPeerIdFiltName | not-accessible | current | The administrative name of this filter. |
| 1.3.6.1.2.1.153.4.2.1.4.1.2 | ColumnipiaPeerIdFiltIdentityType | read-create | current | The type of identity field in the peer ID payload to match against. |
| 1.3.6.1.2.1.153.4.2.1.4.1.3 | ColumnipiaPeerIdFiltIdentityValue | read-create | current | The string representation of the value that the peer ID payload value MUST match against. Wildcard mechanisms MUST be supported such that: - a ipiaPeerIdFiltId… |
| 1.3.6.1.2.1.153.4.2.1.4.1.4 | ColumnipiaPeerIdFiltLastChanged | read-only | current | The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. |
| 1.3.6.1.2.1.153.4.2.1.4.1.5 | ColumnipiaPeerIdFiltStorageType | read-create | current | The storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storag… |
| 1.3.6.1.2.1.153.4.2.1.4.1.6 | ColumnipiaPeerIdFiltRowStatus | read-create | current | This object indicates the conceptual status of this row. This object can not be considered active unless the ipiaPeerIdFiltIdentityType and ipiaPeerIdFiltIdent… |
| 1.3.6.1.2.1.153.4.2.1.5 | NodeipiaStaticActions | |||
| 1.3.6.1.2.1.153.4.2.1.5.1 | ScalaripiaRejectIKEAction | read-only | current | This scalar indicates that a packet SHOULD be rejected WITHOUT action/packet logging. This object returns a value of 1 for IPsec policy implementations that su… |
| 1.3.6.1.2.1.153.4.2.1.5.2 | ScalaripiaRejectIKEActionLog | read-only | current | This scalar indicates that a packet SHOULD be rejected WITH action/packet logging. This object returns a value of 1 for IPsec policy implementations that suppo… |
| 1.3.6.1.2.1.153.4.2.1.6 | TableipiaIkeActionTable | not-accessible | current | The ipiaIkeActionTable contains a list of the parameters used for an IKE phase 1 SA DOI negotiation. See the corresponding table ipiaIkeActionProposalsTable fo… |
| 1.3.6.1.2.1.153.4.2.1.6.1 | RowipiaIkeActionEntry | not-accessible | current | The ipiaIkeActionEntry lists the IKE negotiation attributes. |
| 1.3.6.1.2.1.153.4.2.1.6.1.1 | ColumnipiaIkeActName | not-accessible | current | This object contains the name of this ikeAction entry. |
| 1.3.6.1.2.1.153.4.2.1.6.1.2 | ColumnipiaIkeActParametersName | read-create | current | This object is administratively assigned to reference a row in the ipiaSaNegotiationParametersTable where additional parameters affecting this action can be fo… |
| 1.3.6.1.2.1.153.4.2.1.6.1.3 | ColumnipiaIkeActThresholdDerivedKeys | read-create | current | ipiaIkeActThresholdDerivedKeys specifies what percentage of the derived key limit (see the LifetimeDerivedKeys property of IKEProposal) can expire before IKE S… |
| 1.3.6.1.2.1.153.4.2.1.6.1.4 | ColumnipiaIkeActExchangeMode | read-create | current | ipiaIkeActExchangeMode specifies the IKE Phase 1 negotiation mode. |
| 1.3.6.1.2.1.153.4.2.1.6.1.5 | ColumnipiaIkeActAgressiveModeGroupId | read-create | current | The values to be used for Diffie-Hellman exchange. |
| 1.3.6.1.2.1.153.4.2.1.6.1.6 | ColumnipiaIkeActIdentityType | read-create | current | This column along with ipiaIkeActIdentityContext and endpoint information is used to refer an ipiaIkeIdentityEntry in the ipiaIkeIdentityTable. |
| 1.3.6.1.2.1.153.4.2.1.6.1.7 | ColumnipiaIkeActIdentityContext | read-create | current | This column, along with ipiaIkeActIdentityType and endpoint information, is used to refer to an ipiaIkeIdentityEntry in the ipiaIkeIdentityTable. |
| 1.3.6.1.2.1.153.4.2.1.6.1.8 | ColumnipiaIkeActPeerName | read-create | current | This object indicates the peer id name of the IKE peer. This object can be used to look up the peer id value, address, credentials and other values in the ipia… |
| 1.3.6.1.2.1.153.4.2.1.6.1.9 | ColumnipiaIkeActDoActionLogging | read-create | current | ikeDoActionLogging specifies whether or not an audit message SHOULD be logged when this ike SA is created. |
| 1.3.6.1.2.1.153.4.2.1.6.1.10 | ColumnipiaIkeActDoPacketLogging | read-create | current | ikeDoPacketLogging specifies whether or not an audit message SHOULD be logged and if there is logging, how many bytes of the packet to place in the notificatio… |
| 1.3.6.1.2.1.153.4.2.1.6.1.11 | ColumnipiaIkeActVendorId | read-create | current | Vendor ID Payload. A value of NULL means that Vendor ID payload will be neither generated nor accepted. A non-NULL value means that a Vendor ID payload will be… |
| 1.3.6.1.2.1.153.4.2.1.6.1.12 | ColumnipiaIkeActLastChanged | read-only | current | The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. |
| 1.3.6.1.2.1.153.4.2.1.6.1.13 | ColumnipiaIkeActStorageType | read-create | current | The storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storag… |
| 1.3.6.1.2.1.153.4.2.1.6.1.14 | ColumnipiaIkeActRowStatus | read-create | current | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified… |
| 1.3.6.1.2.1.153.4.2.1.7 | TableipiaIpsecActionTable | not-accessible | current | The ipiaIpsecActionTable contains a list of the parameters used for an IKE phase 2 IPsec DOI negotiation. |
| 1.3.6.1.2.1.153.4.2.1.7.1 | RowipiaIpsecActionEntry | not-accessible | current | The ipiaIpsecActionEntry lists the IPsec negotiation attributes. |
| 1.3.6.1.2.1.153.4.2.1.7.1.1 | ColumnipiaIpsecActName | not-accessible | current | ipiaIpsecActName is the name of the ipsecAction entry. |
| 1.3.6.1.2.1.153.4.2.1.7.1.2 | ColumnipiaIpsecActParametersName | read-create | current | This object is used to reference a row in the ipiaSaNegotiationParametersTable where additional parameters affecting this action can be found. An attempt to se… |
| 1.3.6.1.2.1.153.4.2.1.7.1.3 | ColumnipiaIpsecActProposalsName | read-create | current | This object is used to reference one or more rows in the ipiaIpsecProposalsTable where an ordered list of proposals affecting this action can be found. An atte… |
| 1.3.6.1.2.1.153.4.2.1.7.1.4 | ColumnipiaIpsecActUsePfs | read-create | current | This MIB object specifies whether or not perfect forward secrecy is used when refreshing keys. A value of true indicates that PFS SHOULD be used. |
| 1.3.6.1.2.1.153.4.2.1.7.1.5 | ColumnipiaIpsecActVendorId | read-create | current | The VendorID property is used to identify vendor-defined key exchange GroupIDs. |
| 1.3.6.1.2.1.153.4.2.1.7.1.6 | ColumnipiaIpsecActGroupId | read-create | current | This object specifies the Diffie-Hellman group to use for phase 2 when the object ipiaIpsecActUsePfs is true and the object ipiaIpsecActUseIkeGroup is false. I… |
| 1.3.6.1.2.1.153.4.2.1.7.1.7 | ColumnipiaIpsecActPeerGatewayIdName | read-create | current | This object indicates the peer id name of the peer gateway. This object can be used to look up the peer id value, address and other values in the ipiaPeerIdent… |
| 1.3.6.1.2.1.153.4.2.1.7.1.8 | ColumnipiaIpsecActUseIkeGroup | read-create | current | This object specifies whether or not to use the same GroupId for phase 2 as was used in phase 1. If UsePFS is false, this entry SHOULD be ignored. |
| 1.3.6.1.2.1.153.4.2.1.7.1.9 | ColumnipiaIpsecActGranularity | read-create | current | This object specifies how the proposed selector for the security association will be created. The selector is created by using the FilterList information. The … |
| 1.3.6.1.2.1.153.4.2.1.7.1.10 | ColumnipiaIpsecActMode | read-create | current | This object specifies the encapsulation of the IPsec SA to be negotiated. |
| 1.3.6.1.2.1.153.4.2.1.7.1.11 | ColumnipiaIpsecActDFHandling | read-create | current | This object specifies the processing of DF bit by the negotiated IPsec tunnel. 1 - DF bit is copied. 2 - DF bit is set. 3 - DF bit is cleared. |
| 1.3.6.1.2.1.153.4.2.1.7.1.12 | ColumnipiaIpsecActDoActionLogging | read-create | current | ipiaIpsecActDoActionLogging specifies whether or not an audit message SHOULD be logged when this ipsec SA is created. |
| 1.3.6.1.2.1.153.4.2.1.7.1.13 | ColumnipiaIpsecActDoPacketLogging | read-create | current | ipiaIpsecActDoPacketLogging specifies whether or not an audit message SHOULD be logged and if there is logging, how many bytes of the packet to place in the no… |
| 1.3.6.1.2.1.153.4.2.1.7.1.14 | ColumnipiaIpsecActLastChanged | read-only | current | The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. |
| 1.3.6.1.2.1.153.4.2.1.7.1.15 | ColumnipiaIpsecActStorageType | read-create | current | The storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storag… |
| 1.3.6.1.2.1.153.4.2.1.7.1.16 | ColumnipiaIpsecActRowStatus | read-create | current | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified… |
| 1.3.6.1.2.1.153.4.2.1.8 | TableipiaSaNegotiationParametersTable | not-accessible | current | This table contains reusable parameters that can be pointed to by the ipiaIkeActionTable and ipiaIpsecActionTable. These parameters are reusable since it is li… |
| 1.3.6.1.2.1.153.4.2.1.8.1 | RowipiaSaNegotiationParametersEntry | not-accessible | current | Contains the attributes of one row in the ipiaSaNegotiationParametersTable. |
| 1.3.6.1.2.1.153.4.2.1.8.1.1 | ColumnipiaSaNegParamName | not-accessible | current | This object contains the administrative name of this SaNegotiationParametersEntry. This row can be referred to by this name in other policy action tables. |
| 1.3.6.1.2.1.153.4.2.1.8.1.2 | ColumnipiaSaNegParamMinLifetimeSecs | read-create | current | ipiaSaNegParamMinLifetimeSecs specifies the minimum seconds lifetime that will be accepted from the peer. |
| 1.3.6.1.2.1.153.4.2.1.8.1.3 | ColumnipiaSaNegParamMinLifetimeKB | read-create | current | ipiaSaNegParamMinLifetimeKB specifies the minimum kilobyte lifetime that will be accepted from the peer. |
| 1.3.6.1.2.1.153.4.2.1.8.1.4 | ColumnipiaSaNegParamRefreshThreshSecs | read-create | current | ipiaSaNegParamRefreshThreshSecs specifies what percentage of the seconds lifetime can expire before IKE SHOULD attempt to renegotiate the IPsec security associ… |
| 1.3.6.1.2.1.153.4.2.1.8.1.5 | ColumnipiaSaNegParamRefreshThresholdKB | read-create | current | ipiaSaNegParamRefreshThresholdKB specifies what percentage of the kilobyte lifetime can expire before IKE SHOULD attempt to renegotiate the IPsec security asso… |
| 1.3.6.1.2.1.153.4.2.1.8.1.6 | ColumnipiaSaNegParamIdleDurationSecs | read-create | current | ipiaSaNegParamIdleDurationSecs specifies how many seconds a security association MAY remain idle (i.e., no traffic protected using the security association) be… |
| 1.3.6.1.2.1.153.4.2.1.8.1.7 | ColumnipiaSaNegParamLastChanged | read-only | current | The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. |
| 1.3.6.1.2.1.153.4.2.1.8.1.8 | ColumnipiaSaNegParamStorageType | read-create | current | The storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storag… |
| 1.3.6.1.2.1.153.4.2.1.8.1.9 | ColumnipiaSaNegParamRowStatus | read-create | current | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified… |
| 1.3.6.1.2.1.153.4.2.1.9 | TableipiaIkeActionProposalsTable | not-accessible | current | This table contains a list of all ike proposal names found within a given IKE Action. |
| 1.3.6.1.2.1.153.4.2.1.9.1 | RowipiaIkeActionProposalsEntry | not-accessible | current | a row containing one ike proposal reference |
| 1.3.6.1.2.1.153.4.2.1.9.1.1 | ColumnipiaIkeActPropPriority | not-accessible | current | The numeric priority of a given contained proposal inside an ike Action. This index SHOULD be used to order the proposals in an IKE Phase I negotiation, lowest… |
| 1.3.6.1.2.1.153.4.2.1.9.1.2 | ColumnipiaIkeActPropName | read-create | current | The administratively assigned name that can be used to reference a set of values contained within the ipiaIkeProposalTable. An attempt to set this object to a … |
| 1.3.6.1.2.1.153.4.2.1.9.1.3 | ColumnipiaIkeActPropLastChanged | read-only | current | The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. |
| 1.3.6.1.2.1.153.4.2.1.9.1.4 | ColumnipiaIkeActPropStorageType | read-create | current | The storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storag… |
| 1.3.6.1.2.1.153.4.2.1.9.1.5 | ColumnipiaIkeActPropRowStatus | read-create | current | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified… |
| 1.3.6.1.2.1.153.4.2.1.10 | TableipiaIkeProposalTable | not-accessible | current | This table contains a list of IKE proposals which are used in an IKE negotiation. |
| 1.3.6.1.2.1.153.4.2.1.10.1 | RowipiaIkeProposalEntry | not-accessible | current | One IKE proposal entry. |
| 1.3.6.1.2.1.153.4.2.1.10.1.1 | ColumnipiaIkePropLifetimeDerivedKeys | read-create | current | ipiaIkePropLifetimeDerivedKeys specifies the number of times that a phase 1 key will be used to derive a phase 2 key before the phase 1 security association ne… |
| 1.3.6.1.2.1.153.4.2.1.10.1.2 | ColumnipiaIkePropCipherAlgorithm | read-create | current | ipiaIkePropCipherAlgorithm specifies the proposed phase 1 security association encryption algorithm. |
| 1.3.6.1.2.1.153.4.2.1.10.1.3 | ColumnipiaIkePropCipherKeyLength | read-create | current | This object specifies, in bits, the key length for the cipher algorithm used in IKE Phase 1 negotiation. |
| 1.3.6.1.2.1.153.4.2.1.10.1.4 | ColumnipiaIkePropCipherKeyRounds | read-create | current | This object specifies the number of key rounds for the cipher algorithm used in IKE Phase 1 negotiation. |
| 1.3.6.1.2.1.153.4.2.1.10.1.5 | ColumnipiaIkePropHashAlgorithm | read-create | current | ipiaIkePropHashAlgorithm specifies the proposed phase 1 security assocation hash algorithm. |
| 1.3.6.1.2.1.153.4.2.1.10.1.6 | ColumnipiaIkePropPrfAlgorithm | read-create | current | ipPRFAlgorithm specifies the proposed phase 1 security association psuedo-random function. Note: currently no prf algorithms are defined. |
| 1.3.6.1.2.1.153.4.2.1.10.1.7 | ColumnipiaIkePropVendorId | read-create | current | The VendorID property is used to identify vendor-defined key exchange GroupIDs. |
| 1.3.6.1.2.1.153.4.2.1.10.1.8 | ColumnipiaIkePropDhGroup | read-create | current | This object specifies the proposed phase 1 security association Diffie-Hellman group |
| 1.3.6.1.2.1.153.4.2.1.10.1.9 | ColumnipiaIkePropAuthenticationMethod | read-create | current | This object specifies the proposed authentication method for the phase 1 security association. |
| 1.3.6.1.2.1.153.4.2.1.10.1.10 | ColumnipiaIkePropMaxLifetimeSecs | read-create | current | ipiaIkePropMaxLifetimeSecs specifies the maximum amount of time to propose a security association remain valid. A value of 0 indicates that the default lifetim… |
| 1.3.6.1.2.1.153.4.2.1.10.1.11 | ColumnipiaIkePropMaxLifetimeKB | read-create | current | ipiaIkePropMaxLifetimeKB specifies the maximum kilobyte lifetime to propose a security association remain valid. |
| 1.3.6.1.2.1.153.4.2.1.10.1.12 | ColumnipiaIkePropLastChanged | read-only | current | The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. |
| 1.3.6.1.2.1.153.4.2.1.10.1.13 | ColumnipiaIkePropStorageType | read-create | current | The storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storag… |
| 1.3.6.1.2.1.153.4.2.1.10.1.14 | ColumnipiaIkePropRowStatus | read-create | current | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified… |
| 1.3.6.1.2.1.153.4.2.1.11 | TableipiaIpsecProposalsTable | not-accessible | current | This table lists one or more IPsec proposals for IPsec actions. |
| 1.3.6.1.2.1.153.4.2.1.11.1 | RowipiaIpsecProposalsEntry | not-accessible | current | An entry containing (possibly a portion of) a proposal. |
| 1.3.6.1.2.1.153.4.2.1.11.1.1 | ColumnipiaIpsecPropName | not-accessible | current | The name of this proposal. |
| 1.3.6.1.2.1.153.4.2.1.11.1.2 | ColumnipiaIpsecPropPriority | not-accessible | current | The priority level (AKA sequence level) of this proposal. A lower number indicates a higher precedence (0 before 1, etc..). |
| 1.3.6.1.2.1.153.4.2.1.11.1.3 | ColumnipiaIpsecPropProtocolId | not-accessible | current | The protocol Id for the transforms for this proposal. The protoIsakmp(1) value is not valid for this object. This object, along with the ipiaIpsecPropTransform… |
| 1.3.6.1.2.1.153.4.2.1.11.1.4 | ColumnipiaIpsecPropTransformsName | read-create | current | The name of the transform or group of transforms for this protocol. This object, along with the ipiaIpsecPropProtocolId, is the index into the ipiaIpsecTransfo… |
| 1.3.6.1.2.1.153.4.2.1.11.1.5 | ColumnipiaIpsecPropLastChanged | read-only | current | The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. |
| 1.3.6.1.2.1.153.4.2.1.11.1.6 | ColumnipiaIpsecPropStorageType | read-create | current | The storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storag… |
| 1.3.6.1.2.1.153.4.2.1.11.1.7 | ColumnipiaIpsecPropRowStatus | read-create | current | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified… |
| 1.3.6.1.2.1.153.4.2.1.12 | TableipiaIpsecTransformsTable | not-accessible | current | This table lists the IPsec proposals contained within a given IPsec action and the transforms within each of those proposals. These proposals and transforms ca… |
| 1.3.6.1.2.1.153.4.2.1.12.1 | RowipiaIpsecTransformsEntry | not-accessible | current | An entry containing the information on an IPsec transform. |
| 1.3.6.1.2.1.153.4.2.1.12.1.1 | ColumnipiaIpsecTranType | not-accessible | current | The protocol type for this transform. The protoIsakmp(1) value is not valid for this object. |
| 1.3.6.1.2.1.153.4.2.1.12.1.2 | ColumnipiaIpsecTranName | not-accessible | current | The name for this transform or group of transforms. |
| 1.3.6.1.2.1.153.4.2.1.12.1.3 | ColumnipiaIpsecTranPriority | not-accessible | current | The priority level (AKA sequence level) of the this transform within the group of transforms (0 before 1, etc...). This indicates the preference for which algo… |
| 1.3.6.1.2.1.153.4.2.1.12.1.4 | ColumnipiaIpsecTranTransformName | read-create | current | The name for the given transform. Depending on the value of ipiaIpsecTranType, this value is used to lookup the transform's specific parameters in the ipiaAhTr… |
| 1.3.6.1.2.1.153.4.2.1.12.1.5 | ColumnipiaIpsecTranLastChanged | read-only | current | The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. |
| 1.3.6.1.2.1.153.4.2.1.12.1.6 | ColumnipiaIpsecTranStorageType | read-create | current | The storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storag… |
| 1.3.6.1.2.1.153.4.2.1.12.1.7 | ColumnipiaIpsecTranRowStatus | read-create | current | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified… |
| 1.3.6.1.2.1.153.4.2.1.13 | TableipiaIkeIdentityTable | not-accessible | current | IKEIdentity is used to represent the identities that are used for an IPProtocolEndpoint (or collection of IPProtocolEndpoints) to identify itself in IKE phase … |
| 1.3.6.1.2.1.153.4.2.1.13.1 | RowipiaIkeIdentityEntry | not-accessible | current | ikeIdentity lists the attributes of an IKE identity. |
| 1.3.6.1.2.1.153.4.2.1.13.1.1 | ColumnipiaIkeIdCredentialName | read-create | current | This value is used as an index into the ipiaCredentialFilterTable to look up the actual credential value and other credential information. For ID's without ass… |
| 1.3.6.1.2.1.153.4.2.1.13.1.2 | ColumnipiaIkeIdLastChanged | read-only | current | The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. |
| 1.3.6.1.2.1.153.4.2.1.13.1.3 | ColumnipiaIkeIdStorageType | read-create | current | The storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storag… |
| 1.3.6.1.2.1.153.4.2.1.13.1.4 | ColumnipiaIkeIdRowStatus | read-create | current | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified… |
| 1.3.6.1.2.1.153.4.2.1.14 | TableipiaAutostartIkeTable | not-accessible | current | The parameters in the autostart IKE Table are used to automatically initiate IKE phaes I and II (i.e. IPsec) negotiations on startup. It also will initiate IKE… |
| 1.3.6.1.2.1.153.4.2.1.14.1 | RowipiaAutostartIkeEntry | not-accessible | current | autostart ike provides the set of parameters to automatically start IKE and IPsec SA's. |
| 1.3.6.1.2.1.153.4.2.1.14.1.1 | ColumnipiaAutoIkePriority | not-accessible | current | ipiaAutoIkePriority is an index into the autostartIkeAction table and can be used to order the autostart IKE actions (0 before 1, etc...). |
| 1.3.6.1.2.1.153.4.2.1.14.1.2 | ColumnipiaAutoIkeAction | read-create | current | This pointer is used to point to the action or compound action that is initiated by this row. This value can be used to indicate a scalar or a row in a table. … |
| 1.3.6.1.2.1.153.4.2.1.14.1.3 | ColumnipiaAutoIkeAddressType | read-create | current | The property ipiaAutoIkeAddressType specifies the format of the autoIke source and destination Address values. |
| 1.3.6.1.2.1.153.4.2.1.14.1.4 | ColumnipiaAutoIkeSourceAddress | read-create | current | The property autoIkeSourecAddress specifies Source IP address for autostarting IKE SA's, formatted according to the appropriate convention as defined in the ip… |
| 1.3.6.1.2.1.153.4.2.1.14.1.5 | ColumnipiaAutoIkeSourcePort | read-create | current | The property ipiaAutoIkeSourcePort specifies the port number for the source port for auotstarting IKE SA's. The value of 0 for this object is illegal. |
| 1.3.6.1.2.1.153.4.2.1.14.1.6 | ColumnipiaAutoIkeDestAddress | read-create | current | The property ipiaAutoIkeDestAddress specifies the Destination IP address for autostarting IKE SA's, formatted according to the appropriate convention as define… |
| 1.3.6.1.2.1.153.4.2.1.14.1.7 | ColumnipiaAutoIkeDestPort | read-create | current | The property ipiaAutoIkeDestPort specifies the port number for the destination port for auotstarting IKE SA's. The value of 0 for this object is illegal. |
| 1.3.6.1.2.1.153.4.2.1.14.1.8 | ColumnipiaAutoIkeProtocol | read-create | current | The property Protocol specifies the protocol number used in comparing with policy filter entries and used in any phase 2 negotiations. |
| 1.3.6.1.2.1.153.4.2.1.14.1.9 | ColumnipiaAutoIkeLastChanged | read-only | current | The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. |
| 1.3.6.1.2.1.153.4.2.1.14.1.10 | ColumnipiaAutoIkeStorageType | read-create | current | The storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storag… |
| 1.3.6.1.2.1.153.4.2.1.14.1.11 | ColumnipiaAutoIkeRowStatus | read-create | current | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified… |
| 1.3.6.1.2.1.153.4.2.1.15 | TableipiaIpsecCredMngServiceTable | not-accessible | current | A table of Credential Management Service values. This table is usually used for credential/certificate values that are used with a management service (e.g. Cer… |
| 1.3.6.1.2.1.153.4.2.1.15.1 | RowipiaIpsecCredMngServiceEntry | not-accessible | current | A row in the ipiaIpsecCredMngServiceTable. |
| 1.3.6.1.2.1.153.4.2.1.15.1.1 | ColumnipiaIcmsName | not-accessible | current | This is an administratively assigned string used to index this table. |
| 1.3.6.1.2.1.153.4.2.1.15.1.2 | ColumnipiaIcmsDistinguishedName | read-create | current | This value represents the Distinguished Name of the Credential Management Service. |
| 1.3.6.1.2.1.153.4.2.1.15.1.3 | ColumnipiaIcmsPolicyStatement | read-create | current | This Value represents the Credential Management Service Policy Statement, or a reference describing how to obtain it (e.g., a URL). If one doesn't exist, this … |
| 1.3.6.1.2.1.153.4.2.1.15.1.4 | ColumnipiaIcmsMaxChainLength | read-create | current | This value is the maximum length of the chain allowble from the Credential Management Service to the credential in question. |
| 1.3.6.1.2.1.153.4.2.1.15.1.5 | ColumnipiaIcmsCredentialName | read-create | current | This value is used as an index into the ipiaCredentialFilterTable to look up the actual credential value. |
| 1.3.6.1.2.1.153.4.2.1.15.1.6 | ColumnipiaIcmsLastChanged | read-only | current | The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. |
| 1.3.6.1.2.1.153.4.2.1.15.1.7 | ColumnipiaIcmsStorageType | read-create | current | The storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storag… |
| 1.3.6.1.2.1.153.4.2.1.15.1.8 | ColumnipiaIcmsRowStatus | read-create | current | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified… |
| 1.3.6.1.2.1.153.4.2.1.16 | TableipiaCredMngCRLTable | not-accessible | current | A table of the Credential Revocation Lists (CRL) for credential managment services. |
| 1.3.6.1.2.1.153.4.2.1.16.1 | RowipiaCredMngCRLEntry | not-accessible | current | A row in the ipiaCredMngCRLTable. |
| 1.3.6.1.2.1.153.4.2.1.16.1.1 | ColumnipiaCmcCRLName | not-accessible | current | This is an administratively assigned string used to index this table. It represents a CRL for a given CA from a given distribution point. |
| 1.3.6.1.2.1.153.4.2.1.16.1.2 | ColumnipiaCmcDistributionPoint | read-create | current | This Value represents a Distribution Point for a Credential Revocation List. It can be relative to the Credential Management Service or a full name (URL, e-mai… |
| 1.3.6.1.2.1.153.4.2.1.16.1.3 | ColumnipiaCmcThisUpdate | read-create | current | This value is the issue date of this CRL. This SHOULD be in utctime or generalizedtime. |
| 1.3.6.1.2.1.153.4.2.1.16.1.4 | ColumnipiaCmcNextUpdate | read-create | current | This value indicates the date the next version of this CRL will be issued. This SHOULD be in utctime or generalizedtime. |
| 1.3.6.1.2.1.153.4.2.1.16.1.5 | ColumnipiaCmcLastChanged | read-only | current | The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. |
| 1.3.6.1.2.1.153.4.2.1.16.1.6 | ColumnipiaCmcStorageType | read-create | current | The storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storag… |
| 1.3.6.1.2.1.153.4.2.1.16.1.7 | ColumnipiaCmcRowStatus | read-create | current | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified… |
| 1.3.6.1.2.1.153.4.2.1.17 | TableipiaRevokedCertificateTable | not-accessible | current | A table of Credentials revoked by credential managment services. That is, this table is a table of Certificates that are on CRL's, Credential Revocation Lists. |
| 1.3.6.1.2.1.153.4.2.1.17.1 | RowipiaRevokedCertificateEntry | not-accessible | current | A row in the ipiaRevokedCertificateTable. |
| 1.3.6.1.2.1.153.4.2.1.17.1.1 | ColumnipiaRctCertSerialNumber | not-accessible | current | This value is the serial number of the revoked certificate. |
| 1.3.6.1.2.1.153.4.2.1.17.1.2 | ColumnipiaRctRevokedDate | read-create | current | This value is the revocation date of the certificate. This SHOULD be in utctime or generaltime. |
| 1.3.6.1.2.1.153.4.2.1.17.1.3 | ColumnipiaRctRevokedReason | read-create | current | This value is the reason this certificate was revoked. |
| 1.3.6.1.2.1.153.4.2.1.17.1.4 | ColumnipiaRctLastChanged | read-only | current | The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. |
| 1.3.6.1.2.1.153.4.2.1.17.1.5 | ColumnipiaRctStorageType | read-create | current | The storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storag… |
| 1.3.6.1.2.1.153.4.2.1.17.1.6 | ColumnipiaRctRowStatus | read-create | current | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified… |
| 1.3.6.1.2.1.153.4.2.2 | NodeipiaNotificationObjects | |||
| 1.3.6.1.2.1.153.4.2.2.0 | NodeipiaNotifications | |||
| 1.3.6.1.2.1.153.4.2.2.1 | NodeipiaNotificationVariables | |||
| 1.3.6.1.2.1.153.4.2.3 | NodeipiaConformanceObjects | |||
| 1.3.6.1.2.1.153.4.2.3.1 | NodeipiaCompliances | |||
| 1.3.6.1.2.1.153.4.2.3.1.1 | ComplianceipiaIKECompliance | not-accessible | current | The compliance statement for SNMP entities that include an IPsec MIB implementation and supports IKE actions. MODULE MANDATORY-GROUPS { ipiaIpsecGroup, ipiaIke… |
| 1.3.6.1.2.1.153.4.2.3.1.2 | ComplianceipiaRuleFilterCompliance | not-accessible | current | The compliance statement for SNMP entities that include an IKEACTION MIB implementation with IKE filters support. |
| 1.3.6.1.2.1.153.4.2.3.2 | NodeipiaGroups | |||
| 1.3.6.1.2.1.153.4.2.3.2.1 | GroupipiaStaticFilterGroup | current | The static filter group. Currently this is just a true filter. | |
| 1.3.6.1.2.1.153.4.2.3.2.2 | GroupipiaCredentialFilterGroup | current | This group is made up of objects from the IPsec Policy Credential Filter Table. | |
| 1.3.6.1.2.1.153.4.2.3.2.3 | GroupipiaPeerIdFilterGroup | current | This group is made up of objects from the IPsec Policy Peer Identity Filter Table. | |
| 1.3.6.1.2.1.153.4.2.3.2.4 | GroupipiaStaticActionGroup | current | This group is made up of IPsec Policy Static Actions objects. | |
| 1.3.6.1.2.1.153.4.2.3.2.5 | GroupipiaIkeGroup | current | This group is the set of objects that support IKE actions. These objects are from The IPsec Policy IKE Action Table, The IKE Action Proposals Table, The IKE Pr… | |
| 1.3.6.1.2.1.153.4.2.3.2.6 | GroupipiaIpsecGroup | current | This group is the set of objects that support IPsec actions. These objects are from The IPsec Policy IPsec Actions Table, The IPsec Proposal Table, and The IPs… |
Type Definitions
| Name | Syntax | Status | Description |
|---|---|---|---|
| IkeAuthMethod | Unsigned32 (0..65535) | current | Values for authentication methods negotiated for the ISAKMP SA by IKE in Phase I. These are values for SA Attrbute type Authentication Method (3). Unused values <= 65000 are reserved to IANA. reserved(0), preSharedKey(1… |
| IkeEncryptionAlgorithm | Unsigned32 (0..65535) | current | Values for encryption algorithms negotiated for the ISAKMP SA by IKE in Phase I. These are values for SA Attrbute type Encryption Algorithm (1). Unused values <= 65000 are reserved to IANA. Currently assigned values at … |
| IkeGroupDescription | Unsigned32 (0..65535) | current | Values for Oakley key computation groups for Diffie-Hellman exchange negotiated for the ISAKMP SA by IKE in Phase I. They are also used in Phase II when perfect forward secrecy is in use. These are values for SA Attrbut… |
| IkeHashAlgorithm | Unsigned32 (0..65535) | current | Values for hash algorithms negotiated for the ISAKMP SA by IKE in Phase I. These are values for SA Attrbute type Hash Algorithm (2). Unused values <= 65000 are reserved to IANA. Currently assigned values at the time of … |
| IpsecDoiSecProtocolId | Unsigned32 (0..255) | current | These are the IPsec DOI values for the Protocol-Id field in an ISAKMP Proposal Payload, and in all Notification Payloads. They are also used as the Protocol-ID In the Notification Payload and the Delete Payload. Current… |