MIBs Depot

CISCO-IKE-FLOW-EXT-MIB

Registered at
1.3.6.1.4.1.9.9.428
Last updated
2004-09-14 00:00
Organization
Cisco Systems, Inc.
Revisions
2004-09-14 00:00
Namespace
cisco
Source file
CISCO-IKE-FLOW-EXT-MIB
Digest
sha256:f64c61c2d727d47d4d24f48d85ba761a639bc20a4d2a88b7eb0e8631b80c87f5

Description

This MIB module is an extension to CISCO-IKE-FLOW-MIB and contains Cisco Specific extensions for monitoring IKE. It is for monitoring the structures and status of IPsec control flows based on Internet Key Exchange protocol. Acronyms The following acronyms are used in this document: Flow, Tunnel: An ISAKMP SA can be regarded as representing a flow of ISAKMP/IKE traffic. Hence an ISAKMP is referred to as a 'Phase 1 Tunnel' in this document. IPsec: Secure IP Protocol. ISAKMP: Internet Security Association and Key Management Protocol. IKE: Internet Key Exchange Protocol. FCSP: Fibre Channel Security Protocol. SA: Security Association (ref: rfc2408). Phase 2 Tunnel: AN instance of a non-ISAKMP SA bundle in which all the SA share the same proxy identifiers protect the same stream of application traffic. Such an SA bundle is termed a 'Phase 2 Tunnel'. Note that a Phase 2 tunnel may comprise different SA bundles and different number of SA bundles at different times (due to key refresh).

Contact

Cisco Systems Customer Service Postal: 170 W Tasman Drive San Jose, CA 95134 USA Tel: +1 800 553 -NETS E-mail: cs-san@cisco.com

Imports

FromSymbols
CISCO-IPSEC-SIGNALING-MIBcisgIpsSgProtocol, cisgIpsSgTunIndex
CISCO-IPSEC-TCCIKEIsakmpDoi, CIPsecPhase1PeerIdentityType
CISCO-SMIciscoMgmt
SNMP-FRAMEWORK-MIBSnmpAdminString
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP
SNMPv2-SMIMODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, iso
SNMPv2-TCDisplayString, TEXTUAL-CONVENTION

Imported by

Nothing in this corpus imports this module.

Load order

Every file a consumer needs in order to load this module, dependencies first.

CISCO-IKE-FLOW-EXT-MIB
CISCO-IPSEC-SIGNALING-MIB
CISCO-IPSEC-TC
CISCO-SMI
SNMP-FRAMEWORK-MIB
SNMPv2-CONF
SNMPv2-SMI
SNMPv2-TC

Objects

NameOIDSyntaxAccessStatus
ciscoIkeFlowExtMIBNotifs
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.428.0
ciscoIkeFlowExtMIBObjects
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.428.1
cifeIkeGlobals
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.428.1.1
cifeClearAllTunnels
OBJECT-TYPE
Clears all the tunnels of a specific type. 'none' is returned on reading this object. 'clearIPSec' all the IPSec tunnels are cleared. 'clearFCSP' all FCSP tunnels are cleared.
1.3.6.1.4.1.9.9.428.1.1.1INTEGER {none(1), clearIPSec(2), clearFCSP(3)}read-writecurrent
cifeTunnelExtTable
OBJECT-TYPE
The Phase-1 Internet Key Exchange Tunnel Table. There is one entry in this table for each active IKE tunnel. This table is an extension to cifIkeTunnelTable defined in CISCO-IKE-FLOW-MIB. Some information in this table is also present in the cisgIpsSgTunnelTable, but the table is indexed differently so that the rows in this table are grouped/ordered by domain of interpretation (DOI).
1.3.6.1.4.1.9.9.428.1.2not-accessiblecurrent
cifeTunnelExtEntry
OBJECT-TYPE
Each entry contains the attributes associated with an active IKE Tunnel, identified by cisgIpsSgTunIndex, for the IKE protocol, identified by cisgIpsSgProtocol, in this DOI, identified by cifeTunnelExtDoi.
1.3.6.1.4.1.9.9.428.1.2.1not-accessiblecurrent
cifeTunnelExtDoi
OBJECT-TYPE
This identifies the DOI of Phase-2 operations in which this control tunnel operates. This may be used to identify the Phase-2 protocol.
1.3.6.1.4.1.9.9.428.1.2.1.1CIKEIsakmpDoinot-accessiblecurrent
cifeTunnelExtLocalIdenType
OBJECT-TYPE
The type of the identity used by the managed entity authenticating itself to the peer in the setup of the IKE tunnel corresponding to this conceptual row. This object would have same value as cisgIpsSgTunLocalType from CISCO-IPSEC-SIGNALLING-MIB.
1.3.6.1.4.1.9.9.428.1.2.1.2CIPsecPhase1PeerIdentityTyperead-onlycurrent
cifeTunnelExtLocalIdentity
OBJECT-TYPE
The value of the local peer identity. This object would have same value as cisgIpsSgTunLocalValue from CISCO-IPSEC-SIGNALLING-MIB.
1.3.6.1.4.1.9.9.428.1.2.1.3SnmpAdminString (SIZE(1..255))read-onlycurrent
cifeTunnelExtRemoteIdenType
OBJECT-TYPE
The type of the identity used by the peer in authenticating itself to the local entity in the setup of the IKE tunnel corresponding to this conceptual row. This object would have same value as cisgIpsSgTunRemoteType from CISCO-IPSEC-SIGNALLING-MIB.
1.3.6.1.4.1.9.9.428.1.2.1.4CIPsecPhase1PeerIdentityTyperead-onlycurrent
cifeTunnelExtRemoteIdentity
OBJECT-TYPE
The value of the remote peer identity. This object would have same value as cisgIpsSgTunRemoteValue from CISCO-IPSEC-SIGNALLING-MIB.
1.3.6.1.4.1.9.9.428.1.2.1.5SnmpAdminString (SIZE(1..255))read-onlycurrent
ciscoIkeFlowExtMIBConform
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.428.2
cifeMIBConformances
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.428.2.1
cifeMIBGroups
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.428.2.2

Conformance

NameOIDStatus
cifeMIBCompliance
MODULE-COMPLIANCE
The compliance statement for entities which implement the Cisco IKE extension MIB.
1.3.6.1.4.1.9.9.428.2.1.1current
cifeGlobalsGroup
OBJECT-GROUP
A collection of objects providing Global IKE configuration.
1.3.6.1.4.1.9.9.428.2.2.1current
cifeTunnelExtGroup
OBJECT-GROUP
The collection of objects providing IKE tunnels info.
1.3.6.1.4.1.9.9.428.2.2.2current