All MIBs › IPSEC-IKEACTION-MIB
Organization: IETF IP Security Policy Working Group
Last Updated: 20060905'
Category: Domain: Security, Standard: IETF, VPN and Security
Description: IETF IPsec IKE action MIB defining SNMP objects for Internet Key Exchange policy actions in IPsec security policy management.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is IPSEC-IKEACTION-MIB?
IPSEC-IKEACTION-MIB is a vendor-neutral IETF MIB module defining the SNMP objects needed to configure Internet Key Exchange (IKE) 'actions' -- the negotiated cryptographic and key-management behaviors -- as part of a broader IPsec Security Policy management framework. It exposes configuration-oriented data describing IKE policy actions rather than live traffic counters, complementing sibling IPsec policy MIBs that define matching conditions and other action types. Its practical monitoring value is confirming the software/configuration state of IKE policy: which key-exchange actions are defined and applied, which matters for validating that VPN tunnels will negotiate as intended rather than for hardware health. It is explicitly designed as part of a suite of IPsec Security Policy MIBs and depends on that broader IPsec policy MIB framework for full context. Deployment context is IPsec-capable routers, firewalls, and VPN gateways where IKE negotiation policy needs to be centrally managed via SNMP. Engineers implementing or auditing this functionality typically reference the IPSEC-IKEACTION-MIB RFC/standard documentation for the authoritative specification.
IPNetwork Monitor allows you to monitor SNMP objects defined in IPSEC-IKEACTION-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- vendor-neutral, standards-based MIB, not tied to a specific manufacturer
- IPsec-capable routers, firewalls, and VPN gateways
Monitoring Examples
No sample object names were provided in the source extract for this module, so specific table or object identifiers cannot be responsibly invented. Based on the module description, a realistic use would be verifying configured IKE action policy entries match the intended VPN negotiation parameters, catching misconfigurations before they cause tunnel establishment failures. Without concrete object names, further detail would be speculative.
This MIB depends on
Related MIBs
Imported Objects
From INET-ADDRESS-MIB
| InetAddress | |
| InetAddressType | |
| InetPortNumber |
| IpsaCredentialType | |
| IpsaIdentityFilter | |
| IpsecDoiIdentType | |
| ipsaSharedGroup | OBJECT-GROUP |
From IPSEC-SPD-MIB
| SpdIPPacketLogging | |
| spdActions | OBJECT-IDENTITY |
| spdEndGroupInterface | OBJECT-TYPE |
From SNMP-FRAMEWORK-MIB
| SnmpAdminString |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| OBJECT-GROUP |
From SNMPv2-SMI
| Integer32 | |
| MODULE-IDENTITY | |
| OBJECT-TYPE | |
| Unsigned32 |
From SNMPv2-TC
| RowStatus | |
| StorageType | |
| TEXTUAL-CONVENTION | |
| TimeStamp | |
| TruthValue | |
| VariablePointer |
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| ipiaMIB | 1.3.6.1.2.1.153.4.2 | The MIB module for defining IKE actions for managing IPsec Security Policy. Copyright (C) The Internet Society (2006). This version of this MIB module is part of RFC YYYY, see the RFC itself for full legal notices. | ||
| ipiaConfigObjects | 1.3.6.1.2.1.153.4.2.1 | |||
| ipiaLocalConfigObjects | 1.3.6.1.2.1.153.4.2.1.1 | |||
| ipiaStaticFilters | 1.3.6.1.2.1.153.4.2.1.2 | |||
| I32 ipiaIkePhase1Filter | 1.3.6.1.2.1.153.4.2.1.2.1 | Integer32 | read-only | This static filter can be used to test if a packet is part of an IKE phase-1 negotiation. |
| I32 ipiaIkePhase2Filter | 1.3.6.1.2.1.153.4.2.1.2.2 | Integer32 | read-only | This static filter can be used to test if a packet is part of an IKE phase-2 negotiation. |
| ipiaCredentialFilterTable | 1.3.6.1.2.1.153.4.2.1.3 | not-accessible | This table is used to provide credentials for IKE identities. It can be used to for filters which are matched to credentials of IKE peers, where the credentials in question have been obtained from an IKE phase 1 exchange. They MAY be X.509 certificates, Kerberos tickets, etc... It can also be used to provide credentials for local IKE identities. | |
| ipiaCredentialFilterEntry | 1.3.6.1.2.1.153.4.2.1.3.1 | not-accessible | A row defining a particular credential filter | |
| STR ipiaCredFiltName | 1.3.6.1.2.1.153.4.2.1.3.1.1 | SnmpAdminString | not-accessible | The administrative name of this filter. |
| IPS ipiaCredFiltCredentialType | 1.3.6.1.2.1.153.4.2.1.3.1.2 | IpsaCredentialType | read-create | The credential type that is expected for this filter to succeed. |
| OCT ipiaCredFiltMatchFieldName | 1.3.6.1.2.1.153.4.2.1.3.1.3 | OCTET STRING | read-create | The piece of the credential to match against. Examples: serialNumber, signatureAlgorithm, issuerName or subjectName. For credential types without fields (e.g. shared secret), this field SHOULD be left empty, and the entire credential will be matched against the ipiaCredFiltMatchFieldValue. |
| OCT ipiaCredFiltMatchFieldValue | 1.3.6.1.2.1.153.4.2.1.3.1.4 | OCTET STRING | read-create | The value that the field indicated by the ipiaCredFiltMatchFieldName MUST match against for the filter to be considered TRUE. |
| OCT ipiaCredFiltAcceptCredFrom | 1.3.6.1.2.1.153.4.2.1.3.1.5 | OCTET STRING | read-create | This value is used to look up a row in the ipiaIpsecCredMngServiceTable for the Certificate Authority (CA) Information. This value is empty if there is no CA used for this filter. |
| TIM ipiaCredFiltLastChanged | 1.3.6.1.2.1.153.4.2.1.3.1.6 | TimeStamp | read-only | The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. |
| STO ipiaCredFiltStorageType | 1.3.6.1.2.1.153.4.2.1.3.1.7 | StorageType | read-create | The storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable. |
| ROW ipiaCredFiltRowStatus | 1.3.6.1.2.1.153.4.2.1.3.1.8 | RowStatus | read-create | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object MUST remain active if it is referenced by an active row in another table. An attempt to set it to anything other than active while it is referenced by an active row in another table MUST result in an inconsistentValue error. |
| ipiaPeerIdentityFilterTable | 1.3.6.1.2.1.153.4.2.1.4 | not-accessible | This table defines filters which can be used to match credentials of IKE peers, where the credentials in question have been obtained from an IKE phase 1 exchange. They MAY be X.509 certificates, Kerberos tickets, etc... | |
| ipiaPeerIdentityFilterEntry | 1.3.6.1.2.1.153.4.2.1.4.1 | not-accessible | A row defining a particular credential filter | |
| STR ipiaPeerIdFiltName | 1.3.6.1.2.1.153.4.2.1.4.1.1 | SnmpAdminString | not-accessible | The administrative name of this filter. |
| IPS ipiaPeerIdFiltIdentityType | 1.3.6.1.2.1.153.4.2.1.4.1.2 | IpsecDoiIdentType | read-create | The type of identity field in the peer ID payload to match against. |
| IPS ipiaPeerIdFiltIdentityValue | 1.3.6.1.2.1.153.4.2.1.4.1.3 | IpsaIdentityFilter | read-create | The string representation of the value that the peer ID payload value MUST match against. Wildcard mechanisms MUST be supported such that: - a ipiaPeerIdFiltIdentityValue of '*@example.com' will match a userFqdn ID payload of 'JDOE@EXAMPLE.COM' - a ipiaPeerIdFiltIdentityValue of '*.example.com' will match a fqdn ID payload of 'WWW.EXAMPLE.COM' - a ipiaPeerIdFiltIdentityValue of: 'cn=*,ou=engineering,o=company,c=us' will match a DER DN ID payload of 'cn=John Doe,ou=engineering,o=company,c=us' - a ipiaPeerIdFiltIdentityValue of '192.0.2.0/24' will match an IPv4 address ID payload of 192.0.2.10 - a ipiaPeerIdFiltIdentityValue of '192.0.2.*' will also match an IPv4 address ID payload of 192.0.2.10. The character '*' replaces 0 or multiple instances of any character. |
| TIM ipiaPeerIdFiltLastChanged | 1.3.6.1.2.1.153.4.2.1.4.1.4 | TimeStamp | read-only | The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. |
| STO ipiaPeerIdFiltStorageType | 1.3.6.1.2.1.153.4.2.1.4.1.5 | StorageType | read-create | The storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable. |
| ROW ipiaPeerIdFiltRowStatus | 1.3.6.1.2.1.153.4.2.1.4.1.6 | RowStatus | read-create | This object indicates the conceptual status of this row. This object can not be considered active unless the ipiaPeerIdFiltIdentityType and ipiaPeerIdFiltIdentityValue column values are defined. The value of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object MUST remain active if it is referenced by an active row in another table. An attempt to set it to anything other than active while it is referenced by an active row in another table MUST result in an inconsistentValue error. |
| ipiaStaticActions | 1.3.6.1.2.1.153.4.2.1.5 | |||
| I32 ipiaRejectIKEAction | 1.3.6.1.2.1.153.4.2.1.5.1 | Integer32 | read-only | This scalar indicates that a packet SHOULD be rejected WITHOUT action/packet logging. This object returns a value of 1 for IPsec policy implementations that support the reject static action. |
| I32 ipiaRejectIKEActionLog | 1.3.6.1.2.1.153.4.2.1.5.2 | Integer32 | read-only | This scalar indicates that a packet SHOULD be rejected WITH action/packet logging. This object returns a value of 1 for IPsec policy implementations that support the reject static action with logging. |
| ipiaIkeActionTable | 1.3.6.1.2.1.153.4.2.1.6 | not-accessible | The ipiaIkeActionTable contains a list of the parameters used for an IKE phase 1 SA DOI negotiation. See the corresponding table ipiaIkeActionProposalsTable for a list of proposals contained within a given IKE Action. | |
| ipiaIkeActionEntry | 1.3.6.1.2.1.153.4.2.1.6.1 | not-accessible | The ipiaIkeActionEntry lists the IKE negotiation attributes. | |
| STR ipiaIkeActName | 1.3.6.1.2.1.153.4.2.1.6.1.1 | SnmpAdminString | not-accessible | This object contains the name of this ikeAction entry. |
| STR ipiaIkeActParametersName | 1.3.6.1.2.1.153.4.2.1.6.1.2 | SnmpAdminString | read-create | This object is administratively assigned to reference a row in the ipiaSaNegotiationParametersTable where additional parameters affecting this action can be found. An attempt to set this object to a value that does not exist in the ipiaSaNegotiationParametersTable MUST result in an inconsistentValue error. |
| I32 ipiaIkeActThresholdDerivedKeys | 1.3.6.1.2.1.153.4.2.1.6.1.3 | Integer32 | read-create | ipiaIkeActThresholdDerivedKeys specifies what percentage of the derived key limit (see the LifetimeDerivedKeys property of IKEProposal) can expire before IKE SHOULD attempt to renegotiate the IKE phase 1 security association. |
| INT ipiaIkeActExchangeMode | 1.3.6.1.2.1.153.4.2.1.6.1.4 | INTEGER | read-create | ipiaIkeActExchangeMode specifies the IKE Phase 1 negotiation mode. |
| IKE ipiaIkeActAgressiveModeGroupId | 1.3.6.1.2.1.153.4.2.1.6.1.5 | IkeGroupDescription | read-create | The values to be used for Diffie-Hellman exchange. |
| IPS ipiaIkeActIdentityType | 1.3.6.1.2.1.153.4.2.1.6.1.6 | IpsecDoiIdentType | read-create | This column along with ipiaIkeActIdentityContext and endpoint information is used to refer an ipiaIkeIdentityEntry in the ipiaIkeIdentityTable. |
| STR ipiaIkeActIdentityContext | 1.3.6.1.2.1.153.4.2.1.6.1.7 | SnmpAdminString | read-create | This column, along with ipiaIkeActIdentityType and endpoint information, is used to refer to an ipiaIkeIdentityEntry in the ipiaIkeIdentityTable. |
| STR ipiaIkeActPeerName | 1.3.6.1.2.1.153.4.2.1.6.1.8 | SnmpAdminString | read-create | This object indicates the peer id name of the IKE peer. This object can be used to look up the peer id value, address, credentials and other values in the ipiaPeerIdentityTable. |
| T/F ipiaIkeActDoActionLogging | 1.3.6.1.2.1.153.4.2.1.6.1.9 | TruthValue | read-create | ikeDoActionLogging specifies whether or not an audit message SHOULD be logged when this ike SA is created. |
| SPD ipiaIkeActDoPacketLogging | 1.3.6.1.2.1.153.4.2.1.6.1.10 | SpdIPPacketLogging | read-create | ikeDoPacketLogging specifies whether or not an audit message SHOULD be logged and if there is logging, how many bytes of the packet to place in the notification. |
| OCT ipiaIkeActVendorId | 1.3.6.1.2.1.153.4.2.1.6.1.11 | OCTET STRING | read-create | Vendor ID Payload. A value of NULL means that Vendor ID payload will be neither generated nor accepted. A non-NULL value means that a Vendor ID payload will be generated (when acting as an initiator) or is expected (when acting as a responder). |
| TIM ipiaIkeActLastChanged | 1.3.6.1.2.1.153.4.2.1.6.1.12 | TimeStamp | read-only | The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. |
| STO ipiaIkeActStorageType | 1.3.6.1.2.1.153.4.2.1.6.1.13 | StorageType | read-create | The storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable. |
| ROW ipiaIkeActRowStatus | 1.3.6.1.2.1.153.4.2.1.6.1.14 | RowStatus | read-create | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. This object MUST NOT be set to destroy if referred to by other rows in other action tables. An attempt to set it to anything other than active while it is referenced by an active row in another table MUST result in an inconsistentValue error. |
| ipiaIpsecActionTable | 1.3.6.1.2.1.153.4.2.1.7 | not-accessible | The ipiaIpsecActionTable contains a list of the parameters used for an IKE phase 2 IPsec DOI negotiation. | |
| ipiaIpsecActionEntry | 1.3.6.1.2.1.153.4.2.1.7.1 | not-accessible | The ipiaIpsecActionEntry lists the IPsec negotiation attributes. | |
| STR ipiaIpsecActName | 1.3.6.1.2.1.153.4.2.1.7.1.1 | SnmpAdminString | not-accessible | ipiaIpsecActName is the name of the ipsecAction entry. |
| STR ipiaIpsecActParametersName | 1.3.6.1.2.1.153.4.2.1.7.1.2 | SnmpAdminString | read-create | This object is used to reference a row in the ipiaSaNegotiationParametersTable where additional parameters affecting this action can be found. An attempt to set this column to a value that does not exist in the ipiaSaNegotiationParametersTable MUST result in an inconsistentValue error. |
| STR ipiaIpsecActProposalsName | 1.3.6.1.2.1.153.4.2.1.7.1.3 | SnmpAdminString | read-create | This object is used to reference one or more rows in the ipiaIpsecProposalsTable where an ordered list of proposals affecting this action can be found. An attempt to set this column to a value that does not exist in the ipiaIpsecProposalsTable MUST result in an inconsistentValue error. |
| T/F ipiaIpsecActUsePfs | 1.3.6.1.2.1.153.4.2.1.7.1.4 | TruthValue | read-create | This MIB object specifies whether or not perfect forward secrecy is used when refreshing keys. A value of true indicates that PFS SHOULD be used. |
| OCT ipiaIpsecActVendorId | 1.3.6.1.2.1.153.4.2.1.7.1.5 | OCTET STRING | read-create | The VendorID property is used to identify vendor-defined key exchange GroupIDs. |
| IKE ipiaIpsecActGroupId | 1.3.6.1.2.1.153.4.2.1.7.1.6 | IkeGroupDescription | read-create | This object specifies the Diffie-Hellman group to use for phase 2 when the object ipiaIpsecActUsePfs is true and the object ipiaIpsecActUseIkeGroup is false. If the GroupID number is from the vendor-specific range (32768-65535), the VendorID qualifies the group number. |
| OCT ipiaIpsecActPeerGatewayIdName | 1.3.6.1.2.1.153.4.2.1.7.1.7 | OCTET STRING | read-create | This object indicates the peer id name of the peer gateway. This object can be used to look up the peer id value, address and other values in the ipiaPeerIdentityTable. This object is used when initiating a tunnel SA. This object is not used for transport SAs. If no value is set and ipiaIpsecActMode is tunnel, the peer gateway is determined from the source or destination address of the packet. |
| T/F ipiaIpsecActUseIkeGroup | 1.3.6.1.2.1.153.4.2.1.7.1.8 | TruthValue | read-create | This object specifies whether or not to use the same GroupId for phase 2 as was used in phase 1. If UsePFS is false, this entry SHOULD be ignored. |
| INT ipiaIpsecActGranularity | 1.3.6.1.2.1.153.4.2.1.7.1.9 | INTEGER | read-create | This object specifies how the proposed selector for the security association will be created. The selector is created by using the FilterList information. The selector can be subnet, address, porotocol, or port. |
| INT ipiaIpsecActMode | 1.3.6.1.2.1.153.4.2.1.7.1.10 | INTEGER | read-create | This object specifies the encapsulation of the IPsec SA to be negotiated. |
| INT ipiaIpsecActDFHandling | 1.3.6.1.2.1.153.4.2.1.7.1.11 | INTEGER | read-create | This object specifies the processing of DF bit by the negotiated IPsec tunnel. 1 - DF bit is copied. 2 - DF bit is set. 3 - DF bit is cleared. |
| T/F ipiaIpsecActDoActionLogging | 1.3.6.1.2.1.153.4.2.1.7.1.12 | TruthValue | read-create | ipiaIpsecActDoActionLogging specifies whether or not an audit message SHOULD be logged when this ipsec SA is created. |
| SPD ipiaIpsecActDoPacketLogging | 1.3.6.1.2.1.153.4.2.1.7.1.13 | SpdIPPacketLogging | read-create | ipiaIpsecActDoPacketLogging specifies whether or not an audit message SHOULD be logged and if there is logging, how many bytes of the packet to place in the notification. |
| TIM ipiaIpsecActLastChanged | 1.3.6.1.2.1.153.4.2.1.7.1.14 | TimeStamp | read-only | The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. |
| STO ipiaIpsecActStorageType | 1.3.6.1.2.1.153.4.2.1.7.1.15 | StorageType | read-create | The storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable. |
| ROW ipiaIpsecActRowStatus | 1.3.6.1.2.1.153.4.2.1.7.1.16 | RowStatus | read-create | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object MUST remain active if it is referenced by an active row in another table. An attempt to set it to anything other than active while it is referenced by an active row in another table MUST result in an inconsistentValue error. |
| ipiaSaNegotiationParametersTable | 1.3.6.1.2.1.153.4.2.1.8 | not-accessible | This table contains reusable parameters that can be pointed to by the ipiaIkeActionTable and ipiaIpsecActionTable. These parameters are reusable since it is likely an administrator will want to make global policy changes to lifetime parameters that apply to multiple actions. This table allows multiple rows in the other actions tables to reuse global lifetime parameters in this table by repeatedly pointing to a row cointained within this table. | |
| ipiaSaNegotiationParametersEntry | 1.3.6.1.2.1.153.4.2.1.8.1 | not-accessible | Contains the attributes of one row in the ipiaSaNegotiationParametersTable. | |
| STR ipiaSaNegParamName | 1.3.6.1.2.1.153.4.2.1.8.1.1 | SnmpAdminString | not-accessible | This object contains the administrative name of this SaNegotiationParametersEntry. This row can be referred to by this name in other policy action tables. |
| U32 ipiaSaNegParamMinLifetimeSecs | 1.3.6.1.2.1.153.4.2.1.8.1.2 | Unsigned32 | read-create | ipiaSaNegParamMinLifetimeSecs specifies the minimum seconds lifetime that will be accepted from the peer. |
| U32 ipiaSaNegParamMinLifetimeKB | 1.3.6.1.2.1.153.4.2.1.8.1.3 | Unsigned32 | read-create | ipiaSaNegParamMinLifetimeKB specifies the minimum kilobyte lifetime that will be accepted from the peer. |
| U32 ipiaSaNegParamRefreshThreshSecs | 1.3.6.1.2.1.153.4.2.1.8.1.4 | Unsigned32 | read-create | ipiaSaNegParamRefreshThreshSecs specifies what percentage of the seconds lifetime can expire before IKE SHOULD attempt to renegotiate the IPsec security association. A value between 1 and 100 representing a percentage. A value of 100 indicates that the IPsec security association SHOULD not be renegotiated until the seconds lifetime has been completely reached. |
| U32 ipiaSaNegParamRefreshThresholdKB | 1.3.6.1.2.1.153.4.2.1.8.1.5 | Unsigned32 | read-create | ipiaSaNegParamRefreshThresholdKB specifies what percentage of the kilobyte lifetime can expire before IKE SHOULD attempt to renegotiate the IPsec security association. A value between 1 and 100 representing a percentage. A value of 100 indicates that the IPsec security association SHOULD not be renegotiated until the kilobyte lifetime has been reached. |
| U32 ipiaSaNegParamIdleDurationSecs | 1.3.6.1.2.1.153.4.2.1.8.1.6 | Unsigned32 | read-create | ipiaSaNegParamIdleDurationSecs specifies how many seconds a security association MAY remain idle (i.e., no traffic protected using the security association) before it is deleted. A value of zero indicates that idle detection SHOULD NOT be used for the security association. Any non-zero value indicates the number of seconds the security association can remain unused. |
| TIM ipiaSaNegParamLastChanged | 1.3.6.1.2.1.153.4.2.1.8.1.7 | TimeStamp | read-only | The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. |
| STO ipiaSaNegParamStorageType | 1.3.6.1.2.1.153.4.2.1.8.1.8 | StorageType | read-create | The storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable. |
| ROW ipiaSaNegParamRowStatus | 1.3.6.1.2.1.153.4.2.1.8.1.9 | RowStatus | read-create | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object MUST remain active if it is referenced by an active row in another table. An attempt to set it to anything other than active while it is referenced by an active row in another table MUST result in an inconsistentValue error. |
| ipiaIkeActionProposalsTable | 1.3.6.1.2.1.153.4.2.1.9 | not-accessible | This table contains a list of all ike proposal names found within a given IKE Action. | |
| ipiaIkeActionProposalsEntry | 1.3.6.1.2.1.153.4.2.1.9.1 | not-accessible | a row containing one ike proposal reference | |
| I32 ipiaIkeActPropPriority | 1.3.6.1.2.1.153.4.2.1.9.1.1 | Integer32 | not-accessible | The numeric priority of a given contained proposal inside an ike Action. This index SHOULD be used to order the proposals in an IKE Phase I negotiation, lowest value first (i.e. 0 first, then 1,2,etc...). |
| STR ipiaIkeActPropName | 1.3.6.1.2.1.153.4.2.1.9.1.2 | SnmpAdminString | read-create | The administratively assigned name that can be used to reference a set of values contained within the ipiaIkeProposalTable. An attempt to set this object to a value that doesn't exist in the ipiaIkeProposalTable MUST result in an inconsistentValue error. |
| TIM ipiaIkeActPropLastChanged | 1.3.6.1.2.1.153.4.2.1.9.1.3 | TimeStamp | read-only | The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. |
| STO ipiaIkeActPropStorageType | 1.3.6.1.2.1.153.4.2.1.9.1.4 | StorageType | read-create | The storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable. |
| ROW ipiaIkeActPropRowStatus | 1.3.6.1.2.1.153.4.2.1.9.1.5 | RowStatus | read-create | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object MUST remain active unless one of the following two conditions are met. An attempt to set it to anything other than active while the following conditions are not met MUST result in an inconsistentValue error. The two conditions are: I. No active row in the ipiaIkeActionTable exists which has a matching ipiaIkeActName. II. Or at least one other active row in this table has a matching ipiaIkeActName. |
| ipiaIkeProposalTable | 1.3.6.1.2.1.153.4.2.1.10 | not-accessible | This table contains a list of IKE proposals which are used in an IKE negotiation. | |
| ipiaIkeProposalEntry | 1.3.6.1.2.1.153.4.2.1.10.1 | not-accessible | One IKE proposal entry. | |
| U32 ipiaIkePropLifetimeDerivedKeys | 1.3.6.1.2.1.153.4.2.1.10.1.1 | Unsigned32 | read-create | ipiaIkePropLifetimeDerivedKeys specifies the number of times that a phase 1 key will be used to derive a phase 2 key before the phase 1 security association needs renegotiated. |
| IKE ipiaIkePropCipherAlgorithm | 1.3.6.1.2.1.153.4.2.1.10.1.2 | IkeEncryptionAlgorithm | read-create | ipiaIkePropCipherAlgorithm specifies the proposed phase 1 security association encryption algorithm. |
| U32 ipiaIkePropCipherKeyLength | 1.3.6.1.2.1.153.4.2.1.10.1.3 | Unsigned32 | read-create | This object specifies, in bits, the key length for the cipher algorithm used in IKE Phase 1 negotiation. |
| U32 ipiaIkePropCipherKeyRounds | 1.3.6.1.2.1.153.4.2.1.10.1.4 | Unsigned32 | read-create | This object specifies the number of key rounds for the cipher algorithm used in IKE Phase 1 negotiation. |
| IKE ipiaIkePropHashAlgorithm | 1.3.6.1.2.1.153.4.2.1.10.1.5 | IkeHashAlgorithm | read-create | ipiaIkePropHashAlgorithm specifies the proposed phase 1 security assocation hash algorithm. |
| INT ipiaIkePropPrfAlgorithm | 1.3.6.1.2.1.153.4.2.1.10.1.6 | INTEGER | read-create | ipPRFAlgorithm specifies the proposed phase 1 security association psuedo-random function. Note: currently no prf algorithms are defined. |
| OCT ipiaIkePropVendorId | 1.3.6.1.2.1.153.4.2.1.10.1.7 | OCTET STRING | read-create | The VendorID property is used to identify vendor-defined key exchange GroupIDs. |
| IKE ipiaIkePropDhGroup | 1.3.6.1.2.1.153.4.2.1.10.1.8 | IkeGroupDescription | read-create | This object specifies the proposed phase 1 security association Diffie-Hellman group |
| IKE ipiaIkePropAuthenticationMethod | 1.3.6.1.2.1.153.4.2.1.10.1.9 | IkeAuthMethod | read-create | This object specifies the proposed authentication method for the phase 1 security association. |
| U32 ipiaIkePropMaxLifetimeSecs | 1.3.6.1.2.1.153.4.2.1.10.1.10 | Unsigned32 | read-create | ipiaIkePropMaxLifetimeSecs specifies the maximum amount of time to propose a security association remain valid. A value of 0 indicates that the default lifetime of 8 hours SHOULD be used. |
| U32 ipiaIkePropMaxLifetimeKB | 1.3.6.1.2.1.153.4.2.1.10.1.11 | Unsigned32 | read-create | ipiaIkePropMaxLifetimeKB specifies the maximum kilobyte lifetime to propose a security association remain valid. |
| TIM ipiaIkePropLastChanged | 1.3.6.1.2.1.153.4.2.1.10.1.12 | TimeStamp | read-only | The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. |
| STO ipiaIkePropStorageType | 1.3.6.1.2.1.153.4.2.1.10.1.13 | StorageType | read-create | The storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable. |
| ROW ipiaIkePropRowStatus | 1.3.6.1.2.1.153.4.2.1.10.1.14 | RowStatus | read-create | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object MUST remain active if it is referenced by an active row in another table. An attempt to set it to anything other than active while it is referenced by an active row in another table MUST result in an inconsistentValue error. |
| ipiaIpsecProposalsTable | 1.3.6.1.2.1.153.4.2.1.11 | not-accessible | This table lists one or more IPsec proposals for IPsec actions. | |
| ipiaIpsecProposalsEntry | 1.3.6.1.2.1.153.4.2.1.11.1 | not-accessible | An entry containing (possibly a portion of) a proposal. | |
| STR ipiaIpsecPropName | 1.3.6.1.2.1.153.4.2.1.11.1.1 | SnmpAdminString | not-accessible | The name of this proposal. |
| I32 ipiaIpsecPropPriority | 1.3.6.1.2.1.153.4.2.1.11.1.2 | Integer32 | not-accessible | The priority level (AKA sequence level) of this proposal. A lower number indicates a higher precedence (0 before 1, etc..). |
| IPS ipiaIpsecPropProtocolId | 1.3.6.1.2.1.153.4.2.1.11.1.3 | IpsecDoiSecProtocolId | not-accessible | The protocol Id for the transforms for this proposal. The protoIsakmp(1) value is not valid for this object. This object, along with the ipiaIpsecPropTransformsName, is the index into the ipiaIpsecTransformsTable. |
| STR ipiaIpsecPropTransformsName | 1.3.6.1.2.1.153.4.2.1.11.1.4 | SnmpAdminString | read-create | The name of the transform or group of transforms for this protocol. This object, along with the ipiaIpsecPropProtocolId, is the index into the ipiaIpsecTransformsTable. An attempt to set this object to a value that does not exist in the ipiaIpsecTransformTable MUST result in an inconsistentValue error. |
| TIM ipiaIpsecPropLastChanged | 1.3.6.1.2.1.153.4.2.1.11.1.5 | TimeStamp | read-only | The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. |
| STO ipiaIpsecPropStorageType | 1.3.6.1.2.1.153.4.2.1.11.1.6 | StorageType | read-create | The storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable. |
| ROW ipiaIpsecPropRowStatus | 1.3.6.1.2.1.153.4.2.1.11.1.7 | RowStatus | read-create | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. This row MUST NOT be set to active until the corresponding row(s) in the ipiaIpsecTransformsTable exists and is active. If active, this object MUST remain active unless one of the following two conditions are met. An attempt to set it to anything other than active while the following conditions are not met MUST result in an inconsistentValue error. The two conditions are: I. No active row in the ipiaIkeActionProposalTable exists which has a matching ipiaIpsecPropName. II. Or at least one other active row in this table has a matching ipiaIpsecPropName. |
| ipiaIpsecTransformsTable | 1.3.6.1.2.1.153.4.2.1.12 | not-accessible | This table lists the IPsec proposals contained within a given IPsec action and the transforms within each of those proposals. These proposals and transforms can then be used to create phase 2 negotiation proposals. | |
| ipiaIpsecTransformsEntry | 1.3.6.1.2.1.153.4.2.1.12.1 | not-accessible | An entry containing the information on an IPsec transform. | |
| IPS ipiaIpsecTranType | 1.3.6.1.2.1.153.4.2.1.12.1.1 | IpsecDoiSecProtocolId | not-accessible | The protocol type for this transform. The protoIsakmp(1) value is not valid for this object. |
| STR ipiaIpsecTranName | 1.3.6.1.2.1.153.4.2.1.12.1.2 | SnmpAdminString | not-accessible | The name for this transform or group of transforms. |
| I32 ipiaIpsecTranPriority | 1.3.6.1.2.1.153.4.2.1.12.1.3 | Integer32 | not-accessible | The priority level (AKA sequence level) of the this transform within the group of transforms (0 before 1, etc...). This indicates the preference for which algorithms are requested when the list of transforms are sent to the remote host. A lower number indicates a higher precedence. |
| STR ipiaIpsecTranTransformName | 1.3.6.1.2.1.153.4.2.1.12.1.4 | SnmpAdminString | read-create | The name for the given transform. Depending on the value of ipiaIpsecTranType, this value is used to lookup the transform's specific parameters in the ipiaAhTransformTable, the ipiaEspTransformTable or the ipiaIpcompTransformTable. |
| TIM ipiaIpsecTranLastChanged | 1.3.6.1.2.1.153.4.2.1.12.1.5 | TimeStamp | read-only | The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. |
| STO ipiaIpsecTranStorageType | 1.3.6.1.2.1.153.4.2.1.12.1.6 | StorageType | read-create | The storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable. |
| ROW ipiaIpsecTranRowStatus | 1.3.6.1.2.1.153.4.2.1.12.1.7 | RowStatus | read-create | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. This row MUST NOT be set to active until the corresponding row in the ipiaAhTransformTable, ipiaEspTransformTable or the ipiaIpcompTransformTable exists. If active, this object MUST remain active unless one of the following two conditions are met. An attempt to set it to anything other than active while the following conditions are not met MUST result in an inconsistentValue error. The two conditions are: I. No active row in the IpiaIpsecProposalsTable exists which has a matching ipiaIpsecPropTransformsName. II. Or at least one other active row in this table has a matching ipiaIpsecPropTransformsName. |
| ipiaIkeIdentityTable | 1.3.6.1.2.1.153.4.2.1.13 | not-accessible | IKEIdentity is used to represent the identities that are used for an IPProtocolEndpoint (or collection of IPProtocolEndpoints) to identify itself in IKE phase 1 negotiations. The column ipiaIkeActIdentityType and ipiaIkeIdentityContext in an ipiaIkeActionEntry together with the spdEndGroupInterface in the spdEndpointToGroupTable specifies the unique identity to use in a negotiation exchange. | |
| ipiaIkeIdentityEntry | 1.3.6.1.2.1.153.4.2.1.13.1 | not-accessible | ikeIdentity lists the attributes of an IKE identity. | |
| STR ipiaIkeIdCredentialName | 1.3.6.1.2.1.153.4.2.1.13.1.1 | SnmpAdminString | read-create | This value is used as an index into the ipiaCredentialFilterTable to look up the actual credential value and other credential information. For ID's without associated credential information, this value is left blank. For ID's that are address types, this value MAY be left blank and the associated IPProtocolEndpoint or appropriate member of the Collection of endpoints is used. |
| TIM ipiaIkeIdLastChanged | 1.3.6.1.2.1.153.4.2.1.13.1.2 | TimeStamp | read-only | The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. |
| STO ipiaIkeIdStorageType | 1.3.6.1.2.1.153.4.2.1.13.1.3 | StorageType | read-create | The storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable. |
| ROW ipiaIkeIdRowStatus | 1.3.6.1.2.1.153.4.2.1.13.1.4 | RowStatus | read-create | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object MUST remain active if it is referenced by an active row in another table. An attempt to set it to anything other than active while it is referenced by an active row in another table MUST result in an inconsistentValue error. |
| ipiaAutostartIkeTable | 1.3.6.1.2.1.153.4.2.1.14 | not-accessible | The parameters in the autostart IKE Table are used to automatically initiate IKE phaes I and II (i.e. IPsec) negotiations on startup. It also will initiate IKE phase I and II negotiations for a row at the time of that row's creation | |
| ipiaAutostartIkeEntry | 1.3.6.1.2.1.153.4.2.1.14.1 | not-accessible | autostart ike provides the set of parameters to automatically start IKE and IPsec SA's. | |
| I32 ipiaAutoIkePriority | 1.3.6.1.2.1.153.4.2.1.14.1.1 | Integer32 | not-accessible | ipiaAutoIkePriority is an index into the autostartIkeAction table and can be used to order the autostart IKE actions (0 before 1, etc...). |
| NUM ipiaAutoIkeAction | 1.3.6.1.2.1.153.4.2.1.14.1.2 | VariablePointer | read-create | This pointer is used to point to the action or compound action that is initiated by this row. This value can be used to indicate a scalar or a row in a table. When indicating a row in a table, this value MUST point to the first column instance in that row. If this column is set to a VariablePointer value which references a non-existent row in an otherwise supported table or if the table or scalar pointed to by the VariablePointer is not supported at all, the inconsistentValue exception MUST be returned. If during packet processing this column has a value that references a non-existent or non-supported object, the packet MUST be dropped. |
| IPt ipiaAutoIkeAddressType | 1.3.6.1.2.1.153.4.2.1.14.1.3 | InetAddressType | read-create | The property ipiaAutoIkeAddressType specifies the format of the autoIke source and destination Address values. |
| IP ipiaAutoIkeSourceAddress | 1.3.6.1.2.1.153.4.2.1.14.1.4 | InetAddress | read-create | The property autoIkeSourecAddress specifies Source IP address for autostarting IKE SA's, formatted according to the appropriate convention as defined in the ipiaAutoIkeAddressType property. |
| INE ipiaAutoIkeSourcePort | 1.3.6.1.2.1.153.4.2.1.14.1.5 | InetPortNumber | read-create | The property ipiaAutoIkeSourcePort specifies the port number for the source port for auotstarting IKE SA's. The value of 0 for this object is illegal. |
| IP ipiaAutoIkeDestAddress | 1.3.6.1.2.1.153.4.2.1.14.1.6 | InetAddress | read-create | The property ipiaAutoIkeDestAddress specifies the Destination IP address for autostarting IKE SA's, formatted according to the appropriate convention as defined in the ipiaAutoIkeAddressType property. |
| INE ipiaAutoIkeDestPort | 1.3.6.1.2.1.153.4.2.1.14.1.7 | InetPortNumber | read-create | The property ipiaAutoIkeDestPort specifies the port number for the destination port for auotstarting IKE SA's. The value of 0 for this object is illegal. |
| U32 ipiaAutoIkeProtocol | 1.3.6.1.2.1.153.4.2.1.14.1.8 | Unsigned32 | read-create | The property Protocol specifies the protocol number used in comparing with policy filter entries and used in any phase 2 negotiations. |
| TIM ipiaAutoIkeLastChanged | 1.3.6.1.2.1.153.4.2.1.14.1.9 | TimeStamp | read-only | The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. |
| STO ipiaAutoIkeStorageType | 1.3.6.1.2.1.153.4.2.1.14.1.10 | StorageType | read-create | The storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable. |
| ROW ipiaAutoIkeRowStatus | 1.3.6.1.2.1.153.4.2.1.14.1.11 | RowStatus | read-create | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. This object MUST NOT be set to active until the object to which the ipiaAutoIkeAction points to exists and is active. If active, this object MUST remain active if it is referenced by an active row in another table. An attempt to set it to anything other than active while it is referenced by an active row in another table MUST result in an inconsistentValue error. |
| ipiaIpsecCredMngServiceTable | 1.3.6.1.2.1.153.4.2.1.15 | not-accessible | A table of Credential Management Service values. This table is usually used for credential/certificate values that are used with a management service (e.g. Certificate Authorities). | |
| ipiaIpsecCredMngServiceEntry | 1.3.6.1.2.1.153.4.2.1.15.1 | not-accessible | A row in the ipiaIpsecCredMngServiceTable. | |
| STR ipiaIcmsName | 1.3.6.1.2.1.153.4.2.1.15.1.1 | SnmpAdminString | not-accessible | This is an administratively assigned string used to index this table. |
| OCT ipiaIcmsDistinguishedName | 1.3.6.1.2.1.153.4.2.1.15.1.2 | OCTET STRING | read-create | This value represents the Distinguished Name of the Credential Management Service. |
| OCT ipiaIcmsPolicyStatement | 1.3.6.1.2.1.153.4.2.1.15.1.3 | OCTET STRING | read-create | This Value represents the Credential Management Service Policy Statement, or a reference describing how to obtain it (e.g., a URL). If one doesn't exist, this value can be left blank |
| I32 ipiaIcmsMaxChainLength | 1.3.6.1.2.1.153.4.2.1.15.1.4 | Integer32 | read-create | This value is the maximum length of the chain allowble from the Credential Management Service to the credential in question. |
| STR ipiaIcmsCredentialName | 1.3.6.1.2.1.153.4.2.1.15.1.5 | SnmpAdminString | read-create | This value is used as an index into the ipiaCredentialFilterTable to look up the actual credential value. |
| TIM ipiaIcmsLastChanged | 1.3.6.1.2.1.153.4.2.1.15.1.6 | TimeStamp | read-only | The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. |
| STO ipiaIcmsStorageType | 1.3.6.1.2.1.153.4.2.1.15.1.7 | StorageType | read-create | The storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable. |
| ROW ipiaIcmsRowStatus | 1.3.6.1.2.1.153.4.2.1.15.1.8 | RowStatus | read-create | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object MUST remain active if it is referenced by an active row in another table. An attempt to set it to anything other than active while it is referenced by an active row in another table MUST result in an inconsistentValue error. |
| ipiaCredMngCRLTable | 1.3.6.1.2.1.153.4.2.1.16 | not-accessible | A table of the Credential Revocation Lists (CRL) for credential managment services. | |
| ipiaCredMngCRLEntry | 1.3.6.1.2.1.153.4.2.1.16.1 | not-accessible | A row in the ipiaCredMngCRLTable. | |
| STR ipiaCmcCRLName | 1.3.6.1.2.1.153.4.2.1.16.1.1 | SnmpAdminString | not-accessible | This is an administratively assigned string used to index this table. It represents a CRL for a given CA from a given distribution point. |
| OCT ipiaCmcDistributionPoint | 1.3.6.1.2.1.153.4.2.1.16.1.2 | OCTET STRING | read-create | This Value represents a Distribution Point for a Credential Revocation List. It can be relative to the Credential Management Service or a full name (URL, e-mail, etc...). |
| OCT ipiaCmcThisUpdate | 1.3.6.1.2.1.153.4.2.1.16.1.3 | OCTET STRING | read-create | This value is the issue date of this CRL. This SHOULD be in utctime or generalizedtime. |
| OCT ipiaCmcNextUpdate | 1.3.6.1.2.1.153.4.2.1.16.1.4 | OCTET STRING | read-create | This value indicates the date the next version of this CRL will be issued. This SHOULD be in utctime or generalizedtime. |
| TIM ipiaCmcLastChanged | 1.3.6.1.2.1.153.4.2.1.16.1.5 | TimeStamp | read-only | The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. |
| STO ipiaCmcStorageType | 1.3.6.1.2.1.153.4.2.1.16.1.6 | StorageType | read-create | The storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable. |
| ROW ipiaCmcRowStatus | 1.3.6.1.2.1.153.4.2.1.16.1.7 | RowStatus | read-create | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object MUST remain active if it is referenced by an active row in another table. An attempt to set it to anything other than active while it is referenced by an active row in another table MUST result in an inconsistentValue error. |
| ipiaRevokedCertificateTable | 1.3.6.1.2.1.153.4.2.1.17 | not-accessible | A table of Credentials revoked by credential managment services. That is, this table is a table of Certificates that are on CRL's, Credential Revocation Lists. | |
| ipiaRevokedCertificateEntry | 1.3.6.1.2.1.153.4.2.1.17.1 | not-accessible | A row in the ipiaRevokedCertificateTable. | |
| U32 ipiaRctCertSerialNumber | 1.3.6.1.2.1.153.4.2.1.17.1.1 | Unsigned32 | not-accessible | This value is the serial number of the revoked certificate. |
| OCT ipiaRctRevokedDate | 1.3.6.1.2.1.153.4.2.1.17.1.2 | OCTET STRING | read-create | This value is the revocation date of the certificate. This SHOULD be in utctime or generaltime. |
| INT ipiaRctRevokedReason | 1.3.6.1.2.1.153.4.2.1.17.1.3 | INTEGER | read-create | This value is the reason this certificate was revoked. |
| TIM ipiaRctLastChanged | 1.3.6.1.2.1.153.4.2.1.17.1.4 | TimeStamp | read-only | The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means. |
| STO ipiaRctStorageType | 1.3.6.1.2.1.153.4.2.1.17.1.5 | StorageType | read-create | The storage type for this row. Rows in this table which were created through an external process MAY have a storage type of readOnly or permanent. For a storage type of permanent, none of the columns have to be writable. |
| ROW ipiaRctRowStatus | 1.3.6.1.2.1.153.4.2.1.17.1.6 | RowStatus | read-create | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object MUST remain active if it is referenced by an active row in another table. An attempt to set it to anything other than active while it is referenced by an active row in another table MUST result in an inconsistentValue error. |
| ipiaNotificationObjects | 1.3.6.1.2.1.153.4.2.2 | |||
| ipiaNotifications | 1.3.6.1.2.1.153.4.2.2.0 | |||
| ipiaNotificationVariables | 1.3.6.1.2.1.153.4.2.2.1 | |||
| ipiaConformanceObjects | 1.3.6.1.2.1.153.4.2.3 | |||
| ipiaCompliances | 1.3.6.1.2.1.153.4.2.3.1 | |||
| ipiaIKECompliance | 1.3.6.1.2.1.153.4.2.3.1.1 | The compliance statement for SNMP entities that include an IPsec MIB implementation and supports IKE actions. -- OBJECT ipiaAutoIkeAddressType -- SYNTAX InetAddreessType { ipv4(1), ipv6(2) } -- DESCRIPTION -- Only support for global IPv4 and IPv6 address -- types is required. -- -- OBJECT ipiaAutoIkeSourceAddress -- SYNTAX InetAddress (SIZE(4|16)) -- DESCRIPTION -- Only support for global IPv4 and IPv6 address -- types is required. -- OBJECT ipiaAutoIkeDestAddress -- SYNTAX InetAddress (SIZE(4|16)) -- DESCRIPTION -- Only support for global IPv4 and IPv6 address -- types is required. -- | ||
| ipiaRuleFilterCompliance | 1.3.6.1.2.1.153.4.2.3.1.2 | The compliance statement for SNMP entities that include an IKEACTION MIB implementation with IKE filters support. | ||
| ipiaGroups | 1.3.6.1.2.1.153.4.2.3.2 | |||
| ipiaStaticFilterGroup | 1.3.6.1.2.1.153.4.2.3.2.1 | The static filter group. Currently this is just a true filter. | ||
| ipiaCredentialFilterGroup | 1.3.6.1.2.1.153.4.2.3.2.2 | This group is made up of objects from the IPsec Policy Credential Filter Table. | ||
| ipiaPeerIdFilterGroup | 1.3.6.1.2.1.153.4.2.3.2.3 | This group is made up of objects from the IPsec Policy Peer Identity Filter Table. | ||
| ipiaStaticActionGroup | 1.3.6.1.2.1.153.4.2.3.2.4 | This group is made up of IPsec Policy Static Actions objects. | ||
| ipiaIkeGroup | 1.3.6.1.2.1.153.4.2.3.2.5 | This group is the set of objects that support IKE actions. These objects are from The IPsec Policy IKE Action Table, The IKE Action Proposals Table, The IKE Proposal Table, The autostart IKE Table and The IKE Identity Table, The Peer Identity Table, The Credential Management Service Table, and the shared table Negotiation Parameters Table (from the IPSEC-IPSECACTION-MIB. | ||
| ipiaIpsecGroup | 1.3.6.1.2.1.153.4.2.3.2.6 | This group is the set of objects that support IPsec actions. These objects are from The IPsec Policy IPsec Actions Table, The IPsec Proposal Table, and The IPsec Transform Table. This group also includes objects from the shared tables: Peer Identity Table, Credential Table, Negotiation Parameters Table, Credential Management Service Table and the AH, ESP, and IPComp Transform Table. |
RFC description
IETF IPsec IKE action policy MIB for configuring IKE phase 1 and 2 parameters in IPsec security policies (draft).
Start monitoring Vendor-neutral IETF standard (IPsec-capable router/firewall/VPN gateway, IKE policy actions) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.