This MIB module is an extension to
CISCO-IKE-FLOW-MIB and contains Cisco Specific
extensions for monitoring IKE.
It is for monitoring the structures and status of
IPsec control flows based on Internet Key Exchange
The following acronyms are used in this document:
An ISAKMP SA can be regarded as representing
a flow of ISAKMP/IKE traffic. Hence an ISAKMP
is referred to as a 'Phase 1 Tunnel' in this
Secure IP Protocol.
Internet Security Association and Key
Internet Key Exchange Protocol.
Fibre Channel Security Protocol.
Phase 2 Tunnel:
AN instance of a non-ISAKMP SA bundle in which
all the SA share the same proxy identifiers
protect the same stream of application traffic.
Such an SA bundle is termed a 'Phase 2 Tunnel'.
Note that a Phase 2 tunnel may comprise different
SA bundles and different number of SA bundles at
different times (due to key refresh).