Description: This MIB module is an extension to CISCO-IKE-FLOW-MIB and contains Cisco Specific extensions for monitoring IKE.

It is for monitoring the structures and status of IPsec control flows based on Internet Key Exchange protocol.

Acronyms The following acronyms are used in this document:

Flow, Tunnel: An ISAKMP SA can be regarded as representing a flow of ISAKMP/IKE traffic. Hence an ISAKMP is referred to as a 'Phase 1 Tunnel' in this document.

IPsec: Secure IP Protocol.

ISAKMP: Internet Security Association and Key Management Protocol.

IKE: Internet Key Exchange Protocol.

FCSP: Fibre Channel Security Protocol.

SA: Security Association (ref: rfc2408).

Phase 2 Tunnel: AN instance of a non-ISAKMP SA bundle in which all the SA share the same proxy identifiers protect the same stream of application traffic. Such an SA bundle is termed a 'Phase 2 Tunnel'. Note that a Phase 2 tunnel may comprise different SA bundles and different number of SA bundles at different times (due to key refresh).