ALCATEL-ENT1-IPSEC-MIB
113 objects
This module describes an authoritative enterprise-specific Simple Network Management Protocol (SNMP) Management Information Base (MIB): Proprietary IPsec MIB definitions The right to make changes in specification and other information contained in this document without prior notice is reserved. No liability shall be assumed for any incidental, indirect, special, or consequential damages whatsoever arising from or related to this document or the information contained herein. Vendors, end-users, and other interested parties are granted non-exclusive license to use this specification in connection with management of the products for which it is intended to be used. Copyright (C) 1995-2010 Alcatel-Lucent ALL RIGHTS RESERVED WORLDWIDE
Imported Objects
| ALCATEL-ENT1-BASE | softentIND1IPsec |
| INET-ADDRESS-MIB | InetAddress InetAddressType |
| SNMP-FRAMEWORK-MIB | SnmpAdminString |
| SNMPv2-CONF | MODULE-COMPLIANCE OBJECT-GROUP |
| SNMPv2-SMI | Counter32 Integer32 MODULE-IDENTITY OBJECT-TYPE Unsigned32 |
| SNMPv2-TC | RowStatus TEXTUAL-CONVENTION TruthValue |
| OID | Name | Access | Status | Description |
|---|---|---|---|---|
| 1.3.6.1.4.1.6486.801.1.2.1.43.1 | IdentityalcatelIND1IPsecMIB | This module describes an authoritative enterprise-specific Simple Network Management Protocol (SNMP) Management Information Base (MIB): Proprietary IPsec MIB d… | ||
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1 | NodealcatelIND1IPsecMIBObjects | |||
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1 | NodealaIPsecConfig | |||
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.1 | TablealaIPsecSecurityKeyTable | not-accessible | current | Table allowing the configuration of the switch's IPsec security key. The security key is used to encrypt and IPsec related information retained in permanent st… |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.1.1 | RowalaIPsecSecurityKeyEntry | not-accessible | current | The security key entry. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.1.1.1 | ColumnalaIPsecSecurityKeyID | not-accessible | current | The row's identifier. Only one entry is ever present, with an ID value of 1. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.1.1.2 | ColumnalaIPsecSecurityKeyCurrent | read-write | current | The current value of the 16-byte IPsec security key. If an attempt is made to read the value of this object, a zero-length octet string will be returned. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.1.1.3 | ColumnalaIPsecSecurityKeyNew | read-write | current | Used to set a new 16-byte value for the IPsec security key. Both alaIPsecSecurityKeyCurrent (with its correct value) and alaIPsecSecurityKeyNew must be specifi… |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2 | TablealaIPsecStatisticsTable | not-accessible | deprecated | Table allowing the IPv6 statistics to be retrieved. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1 | RowalaIPsecStatisticsEntry | not-accessible | deprecated | The statistics entry. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.1 | ColumnalaIPsecStatisticsProtocol | not-accessible | deprecated | IP protocol version covered by the IPsec statistics. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.2 | ColumnalaIPsecStatisticsInSuccessful | read-only | deprecated | Number of incoming packets requiring IPsec processing that were successfully handled. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.3 | ColumnalaIPsecStatisticsInPolicyViolation | read-only | deprecated | Number of incoming packets that were dropped because of policy violations. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.4 | ColumnalaIPsecStatisticsInNoSA | read-only | deprecated | Number of incoming packets dropped because no matching SA was found. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.5 | ColumnalaIPsecStatisticsInUnknownSPI | read-only | deprecated | Number of incoming packets dropped because the SPI was unknown. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.6 | ColumnalaIPsecStatisticsInAHReplay | read-only | deprecated | Number of incoming packets that failed the AH replay check. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.7 | ColumnalaIPsecStatisticsInESPReplay | read-only | deprecated | Number of incoming packets taht failed the ESP replay check. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.8 | ColumnalaIPsecStatisticsInAHAuthenticationSuccess | read-only | deprecated | Number of incoming packets that successfully passed AH authentication. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.9 | ColumnalaIPsecStatisticsInAHAuthenticationFail | read-only | deprecated | Number of incoming packets that failed AH authentication. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.10 | ColumnalaIPsecStatisticsInESPAuthenticationSuccess | read-only | deprecated | Number of incoming packets that successfully passed ESP authentication. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.11 | ColumnalaIPsecStatisticsInESPAuthenticationFail | read-only | deprecated | Number of incoming packets that failed ESP authentication. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.12 | ColumnalaIPsecStatisticsInBadPacket | read-only | deprecated | Number of incoming packets requiring IPsec processing that were not valid. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.13 | ColumnalaIPsecStatisticsInNoMemory | read-only | deprecated | Number of incoming IPsec packets dropped because no memory was available. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.14 | ColumnalaIPsecStatisticsOutSuccessful | read-only | deprecated | Number of outgoing packets requiring IPsec processing that were successfully handled. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.15 | ColumnalaIPsecStatisticsOutPolicyViolation | read-only | deprecated | Number of outgoing packets dropped because of a policy violation. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.16 | ColumnalaIPsecStatisticsOutNoSA | read-only | deprecated | Number of outgoing packets dropped because no matching SA was found. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.17 | ColumnalaIPsecStatisticsOutBadPacket | read-only | deprecated | Number of outgoing packets requiring IPsec processing that were not valid. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.18 | ColumnalaIPsecStatisticsOutNoMemory | read-only | deprecated | Number of outgoing IPsec packets dropped because no memory was available. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.19 | ColumnalaIPsecStatisticsInDiscarded | read-only | deprecated | Number of incoming packets dropped because they matched a discard policy. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.1.2.1.20 | ColumnalaIPsecStatisticsOutDiscarded | read-only | deprecated | Number of outgoing packets dropped because they matched a discard policy. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2 | TablealaIPsecSecurityPolicyTable | not-accessible | current | Table allowing the configuration of IPsec security policies. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1 | RowalaIPsecSecurityPolicyEntry | not-accessible | current | A security policy entry. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.1 | ColumnalaIPsecSecurityPolicyID | not-accessible | current | A unique identifier for this security policy. When creating a new policy, a zero value must be specified. An available policy ID will then be automatically ass… |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.2 | ColumnalaIPsecSecurityPolicySourceType | read-create | current | The type of source address specified. Currently only ipv6(2) is allowed. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.3 | ColumnalaIPsecSecurityPolicySource | read-create | current | The source of packets covered by this policy. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.4 | ColumnalaIPsecSecurityPolicySourcePrefixLength | read-create | current | The number of bits of the source address used to determine which packets are covered by this policy. The default value varies depending upon the type of source… |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.5 | ColumnalaIPsecSecurityPolicySourcePort | read-create | current | The source port of packets covered by this policy. To match packets from any port, specify the 0 wildcard value. A wildcard policy will only be used when there… |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.6 | ColumnalaIPsecSecurityPolicyDestinationType | read-create | current | The type of destination address specified. Currently only ipv6(2) is allowed. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.7 | ColumnalaIPsecSecurityPolicyDestination | read-create | current | The destination of packets covered by this policy. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.8 | ColumnalaIPsecSecurityPolicyDestinationPrefixLength | read-create | current | The number of bits of the destination prefix used to determine which packets are covered by this policy. The default value varies depending upon the type of de… |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.9 | ColumnalaIPsecSecurityPolicyDestinationPort | read-create | current | The destination port of packets covered by this policy. To match packets from any port, specify the 0 wildcard value. A wildcard policy will only be used when … |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.10 | ColumnalaIPsecSecurityPolicyULProtocol | read-create | current | The upper-layer protocol of packets covered by this policy. To match all protocols, specify the 255 wildcard value. A wildcard policy will only be used when th… |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.11 | ColumnalaIPsecSecurityPolicyICMPv6Type | read-create | current | If the upper-layer protocol is ICMPv6, an ICMPv6 type value may be specified to restrict the policy to a specific packet type. To match all ICMPv6 packets, the… |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.12 | ColumnalaIPsecSecurityPolicyDirection | read-create | current | The direction of traffic covered by this policy. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.13 | ColumnalaIPsecSecurityPolicyName | read-create | current | A name for this policy. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.14 | ColumnalaIPsecSecurityPolicyDescription | read-create | current | A detailed description of this policy. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.15 | ColumnalaIPsecSecurityPolicyAction | read-create | current | The action to take on traffic covered by this policy. discard(0) means that all traffic covered by the policy will be discarded. none(1) means that no IPsec pr… |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.16 | ColumnalaIPsecSecurityPolicyAdminState | read-create | current | Allows a policy to be administratively enabled or disabled. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.17 | ColumnalaIPsecSecurityPolicyOperationalState | read-only | current | The operational state of this policy. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.18 | ColumnalaIPsecSecurityPolicyPriority | read-create | current | The priority for this policy. When traffic would be covered by multiple policies the policy with the highest priority value is used. If two policies have the s… |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.2.1.19 | ColumnalaIPsecSecurityPolicyRowStatus | read-create | current | Used to control the addition and removal of security policy entries. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.3 | TablealaIPsecSecurityPolicyRuleTable | not-accessible | current | Table allowing the configuration of the IPsec rules for a security policy. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.3.1 | RowalaIPsecSecurityPolicyRuleEntry | not-accessible | current | A security policy entry. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.3.1.1 | ColumnalaIPsecSecurityPolicyRuleIndex | not-accessible | current | Index specifying the order in which multiple rules for the same security policy will be applied. Rules are indexed by the order in which they are applied to th… |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.3.1.2 | ColumnalaIPsecSecurityPolicyRuleProtocol | read-create | current | Indicates the type of header required by the rule. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.3.1.3 | ColumnalaIPsecSecurityPolicyRuleMode | read-create | current | The mode in which the rule's protocol is running. At present, only transport(1) is allowed. Until tunnel mode is supported, transport(1) will be treated as the… |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.3.1.4 | ColumnalaIPsecSecurityPolicyRuleRowStatus | read-create | current | Used to control the addition and removal of security policy IPsec rule entries. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4 | TablealaIPsecSAConfigTable | not-accessible | current | Table allowing the manual configuration of Security Associations in the Security Association Database (SAD). |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1 | RowalaIPsecSAConfigEntry | not-accessible | current | Manually configured security association (SA) parameters. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1.1 | ColumnalaIPsecSAConfigID | not-accessible | current | A unique identifier for this manually configured SA. When creating a new SA, a zero value must be specified. An available ID will then be automatically assigne… |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1.2 | ColumnalaIPsecSAConfigType | read-create | current | The type of this SA: AH or ESP. Once set, the type may not be changed. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1.3 | ColumnalaIPsecSAConfigSourceType | read-create | current | The type of source address specified. Currently only ipv6(2) is allowed. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1.4 | ColumnalaIPsecSAConfigSource | read-create | current | The source of packets covered by this SA. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1.5 | ColumnalaIPsecSAConfigDestinationType | read-create | current | The type of destination address specified. Currently only ipv6(2) is allowed. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1.6 | ColumnalaIPsecSAConfigDestination | read-create | current | The destination of packets covered by this SA. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1.7 | ColumnalaIPsecSAConfigSPI | read-create | current | The Security Parameters Index (SPI) of this SA. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1.8 | ColumnalaIPsecSAConfigName | read-create | current | The name of this manually configured SA. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1.9 | ColumnalaIPsecSAConfigDescription | read-create | current | A detailed description for the manually created IPsec SA. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1.10 | ColumnalaIPsecSAConfigEncryptionAlgorithm | read-create | current | For an ESP SA, defines the encryption algorithm to be used. null(11) should be specified if ESP is being used for integrity only. If null(11) is specified, ala… |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1.11 | ColumnalaIPsecSAConfigEncryptionKeyLength | read-create | current | For those algorithms where multiple key lengths are supported, specifies the key length to be used. Zero may be specified to use the default key length. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1.12 | ColumnalaIPsecSAConfigAuthenticationAlgorithm | read-create | current | Defines the authentication algorithm to be used. For ESP SAs, none(0) may be specified for encryption-only ESP. For ESP integrity-only, ESP integrity and encry… |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1.13 | ColumnalaIPsecSAConfigAdminState | read-create | current | Allows a manually configured SA to be administratively enabled or disabled. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1.14 | ColumnalaIPsecSAConfigOperationalState | read-only | current | The operational state of the manually configured SA. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.4.1.15 | ColumnalaIPsecSAConfigRowStatus | read-create | current | Used to control the addition and removal of manually configured IPsec SAs. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.5 | TablealaIPsecKeyTable | not-accessible | current | Table used to configure the keys used by manually configured Security Associations in the IPsec Security Association Configuration table. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.5.1 | RowalaIPsecKeyEntry | not-accessible | current | An IPsec key. Keys in the table must be uniquely identified by the combination of key type and key name. However, since the key name can be up to 255 character… |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.5.1.1 | ColumnalaIPsecKeyID | not-accessible | current | A unique identifier for this key. When creating a new key, a zero value must be specified. An available ID will then be automatically assigned to the key. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.5.1.2 | ColumnalaIPsecKeyType | read-create | current | Indicates if the key is to be used for encryption or authentication by a SA. Once a key is created, its type may not be changed. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.5.1.3 | ColumnalaIPsecKeyName | read-create | current | The name of the key. For manually-configured SA keys, the name is limited to a maximum length of 20 characters and should correspond to an entry in the alaIPse… |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.5.1.4 | ColumnalaIPsecKey | read-create | current | The key value. The value specified must match the required key length for the algorithm using the key. If an attempt is made to read the value of this object a… |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.5.1.5 | ColumnalaIPsecKeyEncrypted | read-create | current | If true, the key value is specified in AOS encrypted form. For example, keys being restored from the configuration file. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.5.1.6 | ColumnalaIPsecKeyRowStatus | read-create | current | Used to control the addition and removal of keys. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.6 | TablealaIPsecErrorsTable | not-accessible | current | Table allowing retrieval of the IPsec error counters. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.6.1 | RowalaIPsecErrorsEntry | not-accessible | current | The error counters entry. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.6.1.1 | ColumnalaIPsecErrorsProtocol | not-accessible | current | IP protocol version covered by the IPsec error counters. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.6.1.2 | ColumnalaIPsecErrorsInPolicyViolation | read-only | current | Number of incoming packets that were dropped because of policy violations. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.6.1.3 | ColumnalaIPsecErrorsInNoSA | read-only | current | Number of incoming packets dropped because no matching SA was found. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.6.1.4 | ColumnalaIPsecErrorsInReplay | read-only | current | Number of incoming packets that failed a replay check. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.6.1.5 | ColumnalaIPsecErrorsInAuthenticationFail | read-only | current | Number of incoming packets that failed authentication. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.6.1.6 | ColumnalaIPsecErrorsInDiscarded | read-only | current | Number of incoming packets dropped because they matched a discard policy. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.6.1.7 | ColumnalaIPsecErrorsInOther | read-only | current | Number of incoming packets dropped for a reason not otherwise counted. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.6.1.8 | ColumnalaIPsecErrorsOutNoSA | read-only | current | Number of outgoing packets dropped because no matching SA was found. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.6.1.9 | ColumnalaIPsecErrorsOutDiscarded | read-only | current | Number of outgoing packets dropped because they matched a discard policy. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.1.6.1.10 | ColumnalaIPsecErrorsOutOther | read-only | current | Number of outgoing packets dropped for a reason not otherwise counted. |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.2 | NodealcatelIND1IPsecMIBConformance | |||
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.2.1 | NodealcatelIND1IPsecMIBCompliances | |||
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.2.1.1 | CompliancealaIPsecCompliance | current | The compliance statement for Alcatel switches implementing ALCATEL-ENT1-IPSEC-MIB. | |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.2.2 | NodealcatelIND1IPsecMIBGroups | |||
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.2.2.1 | GroupalaIPsecConfigGroup | current | A collection of objects to support global configuration of IPsec. | |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.2.2.2 | GroupalaIPsecSecurityPolicyGroup | current | A collection of objects to support management of IPsec security policies. | |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.2.2.3 | GroupalaIPsecSAConfigGroup | current | A collection of objects to support management of manually configured IPsec SAs. | |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.2.2.4 | GroupalaIPsecKeyGroup | current | A collection of objects to support management of keys. | |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.2.2.5 | GroupalaIPsecCountersGroup | current | A collection of objects to support management of IPsec counters. | |
| 1.3.6.1.4.1.6486.801.1.2.1.43.1.2.2.6 | GroupalaIPsecStatisticsGroup | deprecated | A collection of objects to support management of IPsec statistics. |
Type Definitions
| Name | Syntax | Status | Description |
|---|---|---|---|
| IPsecAdminState | INTEGER { enabled(1), disabled(2) } | current | Administrative state. |
| IPsecAHAlgorithm | INTEGER { none(0), hmacmd5(2), hmacsha1(3), aesxcbcmac(9) } | current | AH algorithms. |
| IPsecDescription | OCTET STRING (SIZE(0..200)) | current | Optional description of a table entry. |
| IPsecESPAlgorithm | INTEGER { none(0), descbc(2), des3cbc(3), null(11), aescbc(12), aesctr(13) } | current | ESP algorithms. |
| IPsecOperationalState | INTEGER { enabled(1), disabled(2), dnspending(3) } | current | Operational state. enabled(1) - The entry is enabled. disabled(2) - The entry is administratively disabled or DNS resolution has experienced a permanent failure. dnspending(3) - Awaiting DNS resolution before making the… |
| IPsecPortNumber | Integer32 (0..65535) | current | A port number value. 0 is the wildcard value to match any port. |
| IPsecPrefixLength | Integer32 (0..128) | current | Significant bits in an IPv6 address prefix. 0..32 is the valid range for IPv4 addresses. 0..128 is valid for IPv6 addresses |
| IPsecSAType | INTEGER { ah(2), esp(3) } | current | SA type. |
| IPsecULProtocol | Integer32 (0..255) | current | An upper-layer protocol number. 255 is the wildcard value to match any protocol. |