MIB Viewer

IPSEC-IPSECACTION-MIB

109 objects
The MIB module defines IPsec actions for managing IPsec Security Policy. Copyright (C) The Internet Society (2006). This version of this MIB module is part of RFC XXXX, see the RFC itself for full legal notices.
OIDNameAccessStatusDescription
1.3.6.1.2.1.153.4.1IdentityipsaMIBThe MIB module defines IPsec actions for managing IPsec Security Policy. Copyright (C) The Internet Society (2006). This version of this MIB module is part of …
1.3.6.1.2.1.153.4.1.1NodeipsaConfigObjects
1.3.6.1.2.1.153.4.1.1.1TableipsaSaPreconfiguredActionTablenot-accessiblecurrentThis table is a list of non-negotiated IPsec actions (SAs) that can be performed and contains or indicates the data necessary to create such an SA.
1.3.6.1.2.1.153.4.1.1.1.1RowipsaSaPreconfiguredActionEntrynot-accessiblecurrentOne entry in the ipsaSaPreconfiguredActionTable.
1.3.6.1.2.1.153.4.1.1.1.1.1ColumnipsaSaPreActActionNamenot-accessiblecurrentThis object contains the name of this SaPreconfiguredActionEntry.
1.3.6.1.2.1.153.4.1.1.1.1.2ColumnipsaSaPreActSADirectionnot-accessiblecurrentThis object indicates whether a row applies to egress or ingress SAs
1.3.6.1.2.1.153.4.1.1.1.1.3ColumnipsaSaPreActActionDescriptionread-createcurrentAn administratively assigned string which can be used to describe what the action does.
1.3.6.1.2.1.153.4.1.1.1.1.4ColumnipsaSaPreActActionLifetimeSecread-createcurrentipsaSaPreActActionLifetimeSec specifies how long in seconds the security association derived from this action is used. The default lifetime is 8 hours. Note: t…
1.3.6.1.2.1.153.4.1.1.1.1.5ColumnipsaSaPreActActionLifetimeKBread-createcurrentipsaSaPreActActionLifetimeKB specifies how long the security association derived from this action is used. After this value in KiloBytes has passed through the…
1.3.6.1.2.1.153.4.1.1.1.1.6ColumnipsaSaPreActDoActionLoggingread-createcurrentipsaSaPreActDoActionLogging specifies whether or not an audit message SHOULD be logged when a preconfigured SA is created.
1.3.6.1.2.1.153.4.1.1.1.1.7ColumnipsaSaPreActDoPacketLoggingread-createcurrentipsaSaPreActDoPacketLogging specifies whether or not an audit message SHOULD be logged and if there is logging, how many bytes of the packet to place in the no…
1.3.6.1.2.1.153.4.1.1.1.1.8ColumnipsaSaPreActDFHandlingread-createcurrentThis object specifies how to process the DF bit in packets sent through the preconfigured SA. This object is not used for transport SAs.
1.3.6.1.2.1.153.4.1.1.1.1.9ColumnipsaSaPreActActionTyperead-createcurrentThis object specifies the encapsulation mode to use for the preconfigured SA: tunnel or transport mode.
1.3.6.1.2.1.153.4.1.1.1.1.10ColumnipsaSaPreActAHSPIread-createcurrentThis object represents the SPI value for the AH SA.
1.3.6.1.2.1.153.4.1.1.1.1.11ColumnipsaSaPreActAHTransformNameread-createcurrentThis object is the name of the AH transform to use as an index into the AHTransformTable. A zero length value indicates no transform of this type is used.
1.3.6.1.2.1.153.4.1.1.1.1.12ColumnipsaSaPreActAHSharedSecretNameread-createcurrentThis object contains a name value to be used as an index into the ipsaCredentialTable which holds the pertinent keying information for the AH SA.
1.3.6.1.2.1.153.4.1.1.1.1.13ColumnipsaSaPreActESPSPIread-createcurrentThis object represents the SPI value for the ESP SA.
1.3.6.1.2.1.153.4.1.1.1.1.14ColumnipsaSaPreActESPTransformNameread-createcurrentThis object is the name of the ESP transform to use as an index into the ESPTransformTable. A zero length value indicates no transform of this type is used.
1.3.6.1.2.1.153.4.1.1.1.1.15ColumnipsaSaPreActESPEncSecretNameread-createcurrentThis object contains a name value to be used as an index into the ipsaCredentialTable which holds the pertinent keying information for the encryption algorithm…
1.3.6.1.2.1.153.4.1.1.1.1.16ColumnipsaSaPreActESPAuthSecretNameread-createcurrentThis object contains a name value to be used as an index into the ipsaCredentialTable which holds the pertinent keying information for the authentication algor…
1.3.6.1.2.1.153.4.1.1.1.1.17ColumnipsaSaPreActIPCompSPIread-createcurrentThis object represents the SPI value for the IPComp SA.
1.3.6.1.2.1.153.4.1.1.1.1.18ColumnipsaSaPreActIPCompTransformNameread-createcurrentThis object is the name of the IPComp transform to use as an index into the IPCompTransformTable. A zero length value indicates no transform of this type is us…
1.3.6.1.2.1.153.4.1.1.1.1.19ColumnipsaSaPreActPeerGatewayIdNameread-createcurrentThis object indicates the peer id name of the peer gateway. This object can be used to look up the peer gateway address in the ipsaPeerIdentityTable. This obje…
1.3.6.1.2.1.153.4.1.1.1.1.20ColumnipsaSaPreActLastChangedread-onlycurrentThe value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. If this row has not been modified s…
1.3.6.1.2.1.153.4.1.1.1.1.21ColumnipsaSaPreActStorageTyperead-createcurrentThe storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storag…
1.3.6.1.2.1.153.4.1.1.1.1.22ColumnipsaSaPreActRowStatusread-createcurrentThis object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified…
1.3.6.1.2.1.153.4.1.1.2TableipsaAhTransformTablenot-accessiblecurrentThis table lists all the AH transforms which can be used to build IPsec proposals.
1.3.6.1.2.1.153.4.1.1.2.1RowipsaAhTransformEntrynot-accessiblecurrentThis entry contains the attributes of one AH transform.
1.3.6.1.2.1.153.4.1.1.2.1.1ColumnipsaAhTranNamenot-accessiblecurrentThis object contains the name of this AH transform. This row will be referred to by an ipsaIpsecTransformsEntry.
1.3.6.1.2.1.153.4.1.1.2.1.2ColumnipsaAhTranMaxLifetimeSecread-createcurrentipsaAhTranMaxLifetimeSec specifies how long in seconds the security association derived from this transform SHOULD be used. A value of 0 indicates that the def…
1.3.6.1.2.1.153.4.1.1.2.1.3ColumnipsaAhTranMaxLifetimeKBread-createcurrentipsaAhTranMaxLifetimeKB specifies how long in kilobytes the security association derived from this transform SHOULD be used.
1.3.6.1.2.1.153.4.1.1.2.1.4ColumnipsaAhTranAlgorithmread-createcurrentThis object specifies the AH algorithm for this transform.
1.3.6.1.2.1.153.4.1.1.2.1.5ColumnipsaAhTranReplayProtectionread-createcurrentipsaAhTranReplayProtection indicates whether or not anti replay service is to be provided by this SA.
1.3.6.1.2.1.153.4.1.1.2.1.6ColumnipsaAhTranReplayWindowSizeread-createcurrentipsaAhTranReplayWindowSize indicates the size, in bits, of the replay window to use if replay protection is true for this transform. The window size is assumed…
1.3.6.1.2.1.153.4.1.1.2.1.7ColumnipsaAhTranLastChangedread-onlycurrentThe value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. If this row has not been modified s…
1.3.6.1.2.1.153.4.1.1.2.1.8ColumnipsaAhTranStorageTyperead-createcurrentThe storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storag…
1.3.6.1.2.1.153.4.1.1.2.1.9ColumnipsaAhTranRowStatusread-createcurrentThis object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified…
1.3.6.1.2.1.153.4.1.1.3TableipsaEspTransformTablenot-accessiblecurrentThis table lists all the ESP transforms which can be used to build IPsec proposals
1.3.6.1.2.1.153.4.1.1.3.1RowipsaEspTransformEntrynot-accessiblecurrentThis entry contains the attributes of one ESP transform.
1.3.6.1.2.1.153.4.1.1.3.1.1ColumnipsaEspTranNamenot-accessiblecurrentThe name of this particular espTransform be referred to by an ipsaIpsecTransformsEntry.
1.3.6.1.2.1.153.4.1.1.3.1.2ColumnipsaEspTranMaxLifetimeSecread-createcurrentipsaEspTranMaxLifetimeSec specifies how long in seconds the security association derived from this transform SHOULD be used. A value of 0 indicates that the de…
1.3.6.1.2.1.153.4.1.1.3.1.3ColumnipsaEspTranMaxLifetimeKBread-createcurrentipsaEspTranMaxLifetimeKB specifies how long in kilobytes the security association derived from this transform is used.
1.3.6.1.2.1.153.4.1.1.3.1.4ColumnipsaEspTranCipherTransformIdread-createcurrentThis object specifies the transform ID of the ESP cipher algorithm.
1.3.6.1.2.1.153.4.1.1.3.1.5ColumnipsaEspTranCipherKeyLengthread-createcurrentThis object specifies, in bits, the key length for the ESP cipher algorithm.
1.3.6.1.2.1.153.4.1.1.3.1.6ColumnipsaEspTranCipherKeyRoundsread-createcurrentThis object specifies the number of key rounds for the ESP cipher algorithm.
1.3.6.1.2.1.153.4.1.1.3.1.7ColumnipsaEspTranIntegrityAlgorithmIdread-createcurrentThis object specifies the ESP integrity algorithm ID.
1.3.6.1.2.1.153.4.1.1.3.1.8ColumnipsaEspTranReplayPreventionread-createcurrentipsaEspTranReplayPrevention indicates whether or not anti-replay service is to be provided by this SA.
1.3.6.1.2.1.153.4.1.1.3.1.9ColumnipsaEspTranReplayWindowSizeread-createcurrentipsaEspTranReplayWindowSize indicates the size, in bits, of the replay window to use if replay protection is true for this transform. The window size is assume…
1.3.6.1.2.1.153.4.1.1.3.1.10ColumnipsaEspTranLastChangedread-onlycurrentThe value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. If this row has not been modified s…
1.3.6.1.2.1.153.4.1.1.3.1.11ColumnipsaEspTranStorageTyperead-createcurrentThe storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storag…
1.3.6.1.2.1.153.4.1.1.3.1.12ColumnipsaEspTranRowStatusread-createcurrentThis object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified…
1.3.6.1.2.1.153.4.1.1.4TableipsaIpcompTransformTablenot-accessiblecurrentThis table lists all the IP compression transforms which can be used to build IPsec proposals during negotiation of a phase 2 SA.
1.3.6.1.2.1.153.4.1.1.4.1RowipsaIpcompTransformEntrynot-accessiblecurrentThis entry contains the attributes of one IP compression transform.
1.3.6.1.2.1.153.4.1.1.4.1.1ColumnipsaIpcompTranNamenot-accessiblecurrentThe name of this ipsaIpcompTransformEntry.
1.3.6.1.2.1.153.4.1.1.4.1.2ColumnipsaIpcompTranMaxLifetimeSecread-createcurrentipsaIpcompTranMaxLifetimeSec specifies how long in seconds the security association derived from this transform SHOULD be used. A value of 0 indicates that the…
1.3.6.1.2.1.153.4.1.1.4.1.3ColumnipsaIpcompTranMaxLifetimeKBread-createcurrentipsaIpcompTranMaxLifetimeKB specifies how long in kilobytes the security association derived from this transform SHOULD be used.
1.3.6.1.2.1.153.4.1.1.4.1.4ColumnipsaIpcompTranAlgorithmread-createcurrentipsaIpcompTranAlgorithm specifies the transform ID of the IP compression algorithm.
1.3.6.1.2.1.153.4.1.1.4.1.5ColumnipsaIpcompTranDictionarySizeread-createcurrentIf the algorithm in ipsaIpcompTranAlgorithm requires a dictionary size configuration parameter, then this is the place to put it. This object specifies the log…
1.3.6.1.2.1.153.4.1.1.4.1.6ColumnipsaIpcompTranPrivateAlgorithmread-createcurrentIf ipsaIpcompTranPrivateAlgorithm has a value other zero, then it is up to the vendors implementation to determine the meaning of this field and substitute a d…
1.3.6.1.2.1.153.4.1.1.4.1.7ColumnipsaIpcompTranLastChangedread-onlycurrentThe value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. If this row has not been modified s…
1.3.6.1.2.1.153.4.1.1.4.1.8ColumnipsaIpcompTranStorageTyperead-createcurrentThe storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storag…
1.3.6.1.2.1.153.4.1.1.4.1.9ColumnipsaIpcompTranRowStatusread-createcurrentThis object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified…
1.3.6.1.2.1.153.4.1.1.5TableipsaCredentialTablenot-accessiblecurrentA table of credential values. Example of Credentials are shared secrets, certificates or kerberos tickets.
1.3.6.1.2.1.153.4.1.1.5.1RowipsaCredentialEntrynot-accessiblecurrentA row in the ipsaCredentialTable.
1.3.6.1.2.1.153.4.1.1.5.1.1ColumnipsaCredNamenot-accessiblecurrentThis object represents the name for an entry in this table.
1.3.6.1.2.1.153.4.1.1.5.1.2ColumnipsaCredTyperead-createcurrentThis object represents the type of the credential for this row.
1.3.6.1.2.1.153.4.1.1.5.1.3ColumnipsaCredCredentialread-createcurrentThis object represents the credential value. If the size of the credential is greater than 1024, the credential MUST be configured via the ipsaCredSegmentTable…
1.3.6.1.2.1.153.4.1.1.5.1.4ColumnipsaCredSizeread-onlycurrentThis value represents the size of the credential. If this value is greater than 1024, the ipsaCreCredential column will return an empty (0 length) string. In t…
1.3.6.1.2.1.153.4.1.1.5.1.5ColumnipsaCredMngNameread-createcurrentThis value is used as an index into the ipsaIpsecCredMngServiceTable. For IDs that have no credential management service, this value is left blank.
1.3.6.1.2.1.153.4.1.1.5.1.6ColumnipsaCredRemoteIDread-createcurrentThis object represents the Identification (e.g. user name) of the user of the key information on the remote site. If there is no ID associated with this creden…
1.3.6.1.2.1.153.4.1.1.5.1.7ColumnipsaCredAdminStatusread-createcurrentIndicates whether this credential is considered active. Rows with a disabled status MUST NOT be used for any purpose, including IKE or IPSEC processing. For cr…
1.3.6.1.2.1.153.4.1.1.5.1.8ColumnipsaCredLastChangedread-onlycurrentThe value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. If this row has not been modified s…
1.3.6.1.2.1.153.4.1.1.5.1.9ColumnipsaCredStorageTyperead-createcurrentThe storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storag…
1.3.6.1.2.1.153.4.1.1.5.1.10ColumnipsaCredRowStatusread-createcurrentThis object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified…
1.3.6.1.2.1.153.4.1.1.6TableipsaCredentialSegmentTablenot-accessiblecurrentA table of credential segments. This table is used for credentials which are larger than the maximum size allowed for ipsaCredCredential.
1.3.6.1.2.1.153.4.1.1.6.1RowipsaCredentialSegmentEntrynot-accessiblecurrentA row in the ipsaCredentialSegmentTable.
1.3.6.1.2.1.153.4.1.1.6.1.1ColumnipsaCredSegIndexnot-accessiblecurrentThis object represents the segment number for this segment. By default, each segment will be 1024 octets. However, when this table is accessed using a context …
1.3.6.1.2.1.153.4.1.1.6.1.2ColumnipsaCredSegValueread-createcurrentThis object represents one segment of the credential. By default, each complete segment will be 1024 octets. (The last row for a given credential might be smal…
1.3.6.1.2.1.153.4.1.1.6.1.3ColumnipsaCredSegLastChangedread-onlycurrentThe value of sysUpTime when this credential was last modified or created either through SNMP SETs or by some other external means. Note that the last changed t…
1.3.6.1.2.1.153.4.1.1.6.1.4ColumnipsaCredSegStorageTyperead-onlycurrentThe storage type for this row. This object is read-only. Rows in this table have the same value as the ipsaCrendStorageType for the corresponding row in the ip…
1.3.6.1.2.1.153.4.1.1.6.1.5ColumnipsaCredSegRowStatusread-createcurrentThis object indicates the conceptual status of this row. The segment of this object has no effect on whether other objects in this conceptual row can be modifi…
1.3.6.1.2.1.153.4.1.1.7TableipsaPeerIdentityTablenot-accessiblecurrentPeerIdentity is used to represent the identities that are used for peers to identify themselves in IKE phase I/II negotiations. PeerIdentityTable aggregates th…
1.3.6.1.2.1.153.4.1.1.7.1RowipsaPeerIdentityEntrynot-accessiblecurrentpeerIdentity matches a peer's identity to its address.
1.3.6.1.2.1.153.4.1.1.7.1.1ColumnipsaPeerIdNamenot-accessiblecurrentThis is an administratively assigned value that, together with ipsaPeerIdPriority, uniquely identifies an entry in this table.
1.3.6.1.2.1.153.4.1.1.7.1.2ColumnipsaPeerIdPrioritynot-accessiblecurrentThis object, along with ipsaPeerIdName, uniquely identifies an entry in this table. The priority also indicates the ordering of peer gateways from which to ini…
1.3.6.1.2.1.153.4.1.1.7.1.3ColumnipsaPeerIdTyperead-createcurrentipsaPeerIdType is an enumeration identifying the type of the Identity value.
1.3.6.1.2.1.153.4.1.1.7.1.4ColumnipsaPeerIdValueread-createcurrentipsaPeerIdValue contains an Identity filter to be used to match against the identity payload in an IKE request, or blank otherwise. If this value matches the v…
1.3.6.1.2.1.153.4.1.1.7.1.5ColumnipsaPeerIdAddressTyperead-createcurrentThe property ipsaPeerIdAddressType specifies the format of the ipsaPeerIdAddress property value.
1.3.6.1.2.1.153.4.1.1.7.1.6ColumnipsaPeerIdAddressread-createcurrentThe property PeerAddress specifies the IP address of the peer. The format is specified by the ipsaPeerIdAddressType.
1.3.6.1.2.1.153.4.1.1.7.1.7ColumnipsaPeerIdCredentialNameread-createcurrentThis value is used as an index into the ipsaCredentialTable to look up the actual credential value and other credential information. For peer IDs that have no …
1.3.6.1.2.1.153.4.1.1.7.1.8ColumnipsaPeerIdLastChangedread-onlycurrentThe value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. If this row has not been modified s…
1.3.6.1.2.1.153.4.1.1.7.1.9ColumnipsaPeerIdStorageTyperead-createcurrentThe storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storag…
1.3.6.1.2.1.153.4.1.1.7.1.10ColumnipsaPeerIdRowStatusread-createcurrentThis object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified…
1.3.6.1.2.1.153.4.1.2NodeipsaNotificationObjects
1.3.6.1.2.1.153.4.1.2.0NodeipsaNotifications
1.3.6.1.2.1.153.4.1.2.1NodeipsaNotificationVariables
1.3.6.1.2.1.153.4.1.3NodeipsaConformanceObjects
1.3.6.1.2.1.153.4.1.3.1NodeipsaCompliances
1.3.6.1.2.1.153.4.1.3.1.1ComplianceipsaIPsecCompliancenot-accessiblecurrentThe compliance statement for SNMP entities that include an IPsec MIB implementation and supports IPsec actions. There are a number of INDEX objects that cannot…
1.3.6.1.2.1.153.4.1.3.2NodeipsaGroups
1.3.6.1.2.1.153.4.1.3.2.1GroupipsaPreconfiguredGroupcurrentThis group is the set of objects that support preconfigured IPsec actions. These objects are from The Preconfigured Action Table. This group also includes obje…
1.3.6.1.2.1.153.4.1.3.2.2GroupipsaSharedGroupcurrentThis group includes objects from tables expected to be shared by other modules: Peer Identity Table, Credential Table, Credential Management Service Table and …
Type Definitions
NameSyntaxStatusDescription
IpsaCredentialTypeINTEGER { reserved(0), unknown(1), sharedSecret(2), x509(3), kerberos(4) }currentIpsaCredentialType identifies the type of credential contained in a corresponding IpsaIdentityFilter object.
IpsaIdentityFilterOCTET STRING (SIZE(1..256))currentIpsaIdentityFilter contains a string encoded Identity Type value to be used in comparisons against an IKE Identity payload. Wherever this TC is used, there SHOULD be an accompanying column which uses the IpsecDoiIdentTy…
IpsecDoiAuthAlgorithmUnsigned32 (0..65535)currentThe ESP Authentication Algorithm used in the IPsec DOI as a SA Attributes definition in the Transform Payload of Phase II of an IKE negotiation. This set of values defines the AH authentication algorithm, when the assoc…
IpsecDoiEncapsulationModeUnsigned32 (0..65535)currentThe Encapsulation Mode used as an IPsec DOI SA Attributes definition in the Transform Payload of a Phase II IKE negotiation. This set of values defines encapsulation modes used for AH, ESP, and IPCOMP when the associate…
IpsecDoiEspTransformUnsigned32 (0..255)currentThe values of the IPsec DOI ESP Transform Identifier which identify a particular algorithm to be used to provide secrecy protection for ESP. It is used in the Tranform-ID field of a ISAKMP Transform Payload for the IPse…
IpsecDoiIdentTypeUnsigned32 (0..255)currentThe IPsec DOI Identification Type is an 8-bit value which is used in the ID Type field as a discriminant for interpretation of the variable-length Identification Payload. Currently assigned values at the time of this wr…
IpsecDoiIpcompTransformUnsigned32 (0..255)currentThe IPsec DOI IPCOMP Transform Identifier is an 8-bit value which identifies a particular algorithm to be used to provide IP-level compression before ESP. It is used in the Tranform-ID field of a ISAKMP Transform Payloa…