This OID selects which IPsec security protocol(s) apply to a security profile: esp, ah, or ipcomp; when both ah and esp are set together, the authentication protocol configured elsewhere applies only to AH and ESP gets no authentication. An engineer configures this bit string when defining a named security profile like 'Medium-Security' to specify which IPsec protocol combination its tunnels will use.