This MIB module is an extension to
CISCO-IKE-FLOW-MIB and contains Cisco Specific
extensions for monitoring IKE.
It is for monitoring the structures and status of
IPsec control flows based on Internet Key Exchange
protocol.
Acronyms
The following acronyms are used in this document:
Flow, Tunnel:
An ISAKMP SA can be regarded as representing
a flow of ISAKMP/IKE traffic. Hence an ISAKMP
is referred to as a 'Phase 1 Tunnel' in this
document.
IPsec:
Secure IP Protocol.
ISAKMP:
Internet Security Association and Key
Management Protocol.
IKE:
Internet Key Exchange Protocol.
FCSP:
Fibre Channel Security Protocol.
SA:
Security Association
(ref: rfc2408).
Phase 2 Tunnel:
AN instance of a non-ISAKMP SA bundle in which
all the SA share the same proxy identifiers
protect the same stream of application traffic.
Such an SA bundle is termed a 'Phase 2 Tunnel'.
Note that a Phase 2 tunnel may comprise different
SA bundles and different number of SA bundles at
different times (due to key refresh). |