CISCO-IPSEC-TC
35 objects
This MIB module defines the textual conventions used in the IPsec suite of MIBs. This includes Internet DOI numbers defined in RFC 2407, ISAKMP numbers defined in RFC 2408, and IKE numbers defined in RFC 2409.
Imported Objects
| CISCO-SMI | ciscoMgmt |
| SNMPv2-SMI | Gauge32 MODULE-IDENTITY Unsigned32 |
| SNMPv2-TC | TEXTUAL-CONVENTION |
| OID | Name | Access | Status | Description |
|---|---|---|---|---|
| 1.3.6.1.4.1.9.9.422 | IdentityciscoIPsecTc | This MIB module defines the textual conventions used in the IPsec suite of MIBs. This includes Internet DOI numbers defined in RFC 2407, ISAKMP numbers defined… |
Type Definitions
| Name | Syntax | Status | Description |
|---|---|---|---|
| CCryptoMD5Hash | OCTET STRING(SIZE(16)) | current | This type denotes a 128-bit MD5 output string of an input string |
| CIKEIsakmpDoi | INTEGER { isakmpDoiUnknown(1), isakmpDoiOther(2), isakmpDoiIPsec(3), isakmpDoiFcsp(4), isakmpDoiCps(5), isakmpDoiFcCtAuth(6) } | current | The Domain of Interpretation of the IKE implementation. This type is used to implement distinctions between the configuration of the IKE implementation for distinct Phase 2 protocols that use IKE. Description of enum co… |
| CIKELifesize | Unsigned32(2560..4294967295) | current | This type corresponds to the lifesize of a ISAKMP security association in the number of kilobytes of data that has been processed by the security association. The unit of information is kilobytes. |
| CIKELifetime | Unsigned32(60..86400) | current | This type corresponds to the lifetime of ISAKMP security associations. The unit of information is seconds. |
| CIPsecAuthAlgorithm | INTEGER{ none(1), other(2), hmacMd5(3), hmacSha(4), desMac(5), hmacSha256(6), hmacSha384(7), hmacSha512(8), ripemd(9) } | current | The authentication algorithm used by a security association of an IPsec Phase-2 Tunnel. Description of enum constants of this type: hmacMd5: Hash validation using HMAC MD5. hmacSha: Hash validation using HMAC SHA-1. des… |
| CIPsecCompAlgorithm | INTEGER{ none(1), other(2), compOui(3), compDeflate(4), compLzs(5), compLzjh(6) } | current | The compression algorithm used by a security association of an IPsec Phase-2 Tunnel. Description of enum constants of this type: compOui: IP payload compression using a proprietary algorithm identified using an Organiza… |
| CIPsecControlProtocol | INTEGER { cpUnknown(1), cpAll(2), cpOther(3), cpManual(4), cpIkev1(5), cpIkev2(6), cpKink(7), cpPhoturis(8) } | current | The protocol used for keying and control in IPsec connections. The value of 'cpManual' indicates manual administration of IPsec tunnels. This enumeration will be expanded as new keying protocols are standardized. The va… |
| CIPsecCryptomapSetBindStatus | INTEGER { unknown(1), attached(2), detached(3) } | current | The status of the binding of a cryptomap set to the specified interface. The value when queried is always 'attached'. When set to 'detached', the cryptomap set if detached from the specified interface. Setting the value… |
| CIPsecCryptomapType | INTEGER { cryptomapTypeNONE(1), cryptomapTypeMANUAL(2), cryptomapTypeISAKMP(3), cryptomapTypeCET(4), cryptomapTypeDYNAMIC(5), cryptomapTypeDYNAMICDISCOVERY(6) } | current | The type of a cryptomap entry. Cryptomap is a unit of IOS IPSec policy specification. Description of enum constants of this type: cryptomapTypeMANUAL: The cryptomap entry uses manual keying. cryptomapTypeISAKMP: The cry… |
| CIPsecDiffHellmanGrp | INTEGER { other(1), notDH(2), modp768(3), modp1024(4), ec2nGP155(5), ec2nGP185(6), modp1536(7), ec2nGF163(8), ec2nGF283(9), ec2nGF409(10), ec2nGF571(11), modp2048(12) } | current | An indication of whether a Diffie Hellman Group has been specified to be used in negotiations and the type of group as follows. 'notDH' 'modp768' 'modp1024' 'modp1536' 'ec2nGP155' 'ec2nGP185' 'ec2nGF163' 'ec2nGF283' 'ec… |
| CIPsecEncapMode | INTEGER{ encapTunnel(1), encapTransport(2) } | current | The encapsulation mode used by an IPsec Phase-2 Tunnel. The type enumerates values to denote the two modes of encapsulation of payload used by IPsec, viz., transport mode (encapTunnel) and tunnel mode (encapTransport). |
| CIPsecEncryptAlgorithm | INTEGER { none(1), other(2), espDes(3), esp3des(4), espRc5(5), espIdea(6), espCast(7), espTwofish(8), espBlowfish(9), esp3idea(10), espRc4(11), espNull(12), espAes128(13), espAes192(14), espAes256(15), espAesCtr128(16), espAesCtr192(17), espAesCtr256(18) } | current | The encryption algorithm used in negotiations. Since payload encryption is done by the ESP protocol, these enums are prefixed with 'esp'. Description of enum constants of this type: espDes: Payload encryption using 56-b… |
| CIPsecEncryptionKeySize | Unsigned32 (0..65535) | current | This type is used by objects that denote the size in bits of key of an encryption transform. The value of 0 has been allowed to provide for 'NULL' encryption transforms. |
| CIPsecEndPtType | INTEGER { other(1), idIpv4Addr(2), idIpv4AddrRange(3), idIpv4AddrSubnet(4), idFqdn(5), idUserFqdn(6), idIpv6Addr(7), idIpv6AddrRange(8), idIpv6AddrSubnet(9), idDerAsn1Dn(10), idDerAsn1Gn(11), idKeyId(12) } | current | The type of identity use to specify an IPsec End Point. For a description of the enum values, please refer to the description of type 'CIPsecPhase1PeerIdentityType'. |
| CIPsecIkeAuthMethod | INTEGER { other(1), preSharedKey(2), rsaSignature(3), rsaEncryption(4), revRsaEncryption(5), dssSignature(6), elGamalEncryption(7), revElGamalEncryption(8), ecsdaSignature(9), gssApiV1(10), gssApiV2(11) } | current | The authentication method used in IPsec Phase-1 IKE negotiations. Description of enum constants of this type: preSharedKey: Peer authentication using pre-shared keys. rsaSignature: Peer authentication using digital sign… |
| CIPsecIkeHashAlgorithm | INTEGER { none(1), other(2), md5(3), sha(4), tiger(5), sha256(6), sha384(7), sha512(8), aesMac(9) } | current | The hash algorithm used in IPsec Phase-1 IKE negotiations. Description of enum constants of this type: md5: Hash payload using MD5 algorithm. sha: Hash payload using 96-bit SHA-1 algorithm as defined in FIPS 180-1. tige… |
| CIPsecIkeNegoMode | INTEGER { mainMode(1), aggressiveMode(2) } | current | The negotiation mode used by IKE protocol in Phase-1. The type enumerates constants to denote the two distinct modes of operation of ISAKMP-based IPsec signaling in Phase-2, viz., Main Mode (mainMode) and Aggressive Mod… |
| CIPsecIkePRFAlgorithm | INTEGER{ none(1), other(2), prfHmacMd5(3), prfHmacSha1(4) } | current | The Pseudo Random Function algorithm used in IPsec Phase-1 IKEv2 negotiations. Description of enum constants of this type: prfHmacMd5: HMAC version of MDS. prfHmacSha1: HMAC version of SHA-1 algorithm |
| CIPsecLifesize | Unsigned32(0|2560..4294967295) | current | This type corresponds to the life-size of a Phase-2 security association in the number of kilobytes of data that has been processed by the security association. |
| CIPsecLifetime | Unsigned32 (0|120..86400) | current | This type corresponds to the lifetime in seconds of IPsec Phase-2 security associations. |
| CIPsecNATTraversalMode | INTEGER{ natEncapNone(1), natEncapOther(2), natEncapIPsecOverUdp(3), natEncapIPsecOverTcp(4), natEncapNATT(5) } | current | The encapsulation mode used to implement NAT traversal. Both 'EncapMode' and 'NATTraversalMode' are attributes of a Phase-2 IPsec tunnel. Value of an object of this type is constrained based on the value of its tunnel e… |
| CIPsecNumCryptoMaps | Gauge32(0..2147483647) | current | Integral units representing count of cryptomaps. |
| CIPsecPhase1PeerIdentityType | INTEGER { idOther(1), idIpv4Addr(2), idFqdn(3), idDn(4), idIpv6Addr(5), idUserFqdn(6), idIpv4AddrSubnet(7), idIpv6AddrSubnet(8), idIpv4AddrRange(9), idIpv6AddrRange(10), idDerAsn1Gn(11), idKeyId(12), idWwn(13) } | current | The type of IPsec Phase-1 peer identity. The peer may be identified by one of the ID types defined in IPSEC DOI. Description of enum constants of this type: idIpv4Addr: IPv4 address idFqdn: Fully QUalified Domain Name i… |
| CIPsecPhase1TunnelIndex | Unsigned32 (1..2147483647) | current | The index of the IPsec Phase-1 (IKE) Tunnel Table. An index of this type is a number which begins at 1 and is incremented with each tunnel that is created. The value of this object will wrap at 2,147,483,647. |
| CIPsecPhase1TunnelIndexOrZero | Unsigned32 (0..2147483647) | current | This type defines a range of values for index of the IPsec Phase-1 (IKE) Tunnel Table, including the invalid index '0'. An object of this type is used to implement a soft reference to an IKE tunnel. The value of zero is… |
| CIPsecPhase2SaDirection | INTEGER { saDirectionUnknown(1), saDirectionIn(2), saDirectionOut(3) } | current | Phase-2 IPsec security associations are simplex. This textual convention is used as the type of attribute(s) of a Phase-2 security association. Description of enum constants of this type: saDirectionIn: The IPsec securi… |
| CIPsecPhase2TunnelIndex | Unsigned32 (1..2147483647) | current | The type of the index of the IPsec Phase-2 Tunnel Table. An index of this type is a number which begins at one and is incremented with each tunnel that is created. The value of this object will wrap at 2,147,483,647. |
| CIPsecPmtu | Unsigned32 (68..1500) | current | The type of the Path MTU (Maximum Transmission Unit) of an IPsec Phase-2 Tunnel. |
| CIPsecProtocol | INTEGER { ipsecProtUnknown(1), ipsecProtAh(2), ipsecProtEsp(3), ipsecProtIPcomp(4) } | current | A protocol used for encapsulating the Phase-2 tunneled traffic. The enumerations correspond to Authentication Header, Encapsulating Security Payload and IP compression protocols. The enum constants used in this denote t… |
| CIPsecSecuritySuite | INTEGER{ suiteOther(1), suiteConfEsp(2), suiteIntegEsp(3), suiteIntegAh(4), suiteConfComp(5), suiteIntegEspComp(6), suiteIntegAhComp(7), suiteConfAh(8), suiteConfAhComp(9), suiteIntegEspAh(10), suiteIntegEspAhComp(11), suiteConfIntegEsp(12), suiteConfIntegEspComp(13), suiteConfIntegEspAh(14), suiteConfIntegEspAhComp(15) } | current | The combination of IPsec Phase-2 protocols. suiteConfEsp: Confidentiality using ESP. suiteIntegEsp: Confidentiality and Integrity check using ESP. suiteIntegAh: Integrity check with AH. suiteConfComp: Confidentiality us… |
| CIPsecSpi | Unsigned32 (256..4294967295) | current | The type of the SPI (Security Parameter Index) associated with IPsec Phase-2 security associations. |
| CIPsecTransform | INTEGER{ xformNONE(1), xformOTHER(2), xformAhRFC1829(3), xformAhMD5(4), xformAhSHA1(5), xformEspNULL(6), xformEspDES(7), xformEsp3DES(8), xformEspAES128(9), xformEspAES192(10), xformEspAES256(11), xformEspMD5(12), xformEspSHA1(13), xformCompLZS(14), xformEspAESCtr128(15), xformEspAESCtr192(16), xformEspAESCtr256(17), xformEspRc5(18), xformEspIdea(19), xformEspCast(20), xformEspTwofish(21), xformEspBlowfish(22), xformEsp3idea(23), xformEspRc4(24), xformEspDesMac(25), xformEspHmacSha256(26), xformEspHmacSha384(27), xformEspHmacSha512(28), xformEspRipemd(29), xformAHDesMac(30), xformAHHmacSha256(31), xformAHHmacSha384(32), xformAHHmacSha512(33), xformAHRipemd(34), xformEspAESXCbcMac(35), xformAHAESXCbcMac(36) } | current | The transform to be used by an IPsec Phase-2 protocol (ESP or AH or IPCP). Description of enum constants of this type: xformAhRFC1829: Authentication Header per RFC1829 xformAhMD5: Authentication Header using MD5 xformA… |
| CIPsecTunnelIdleTime | Unsigned32 (0|60..86400) | current | This type corresponds to the time interval specified in seconds during which no traffic has been processed by a Phase-2 security association. |
| CIPsecTunnelStatus | INTEGER { initializePhase1(1), awaitXauth(2), awaitCommit(3), active(4), destroy(5), rekey(6) } | current | This type represents the status of an IPsec Phase-1 or Phase-2 Tunnel. Objects of this type may be used to bring down the tunnel they represent by setting value of the object to destroy(5). Objects of this type cannot b… |