IPSEC-POLICY-MIB Table View

This table is used to map policy (groupings) onto an endpoint
where traffic is to pass by.  Any policy group assigned to an
endpoint is then used to control access to the traffic
passing by it.
          
If an endpoint has been configured with a policy group and no
contained rule matches the incoming packet, the default
action in this case shall be to drop the packet.
          
If no policy group has been assigned to an endpoint, then the
policy group specified by ipspSystemPolicyGroupName should be
used for the endpoint.

ipspEndpointToGroupEntry row .1.3.6.1.2.1.153.1.2.1

A mapping assigning a policy group to an endpoint.

Indexes

ipspEndGroupIdentType ipspEndGroupAddress

Column	Syntax	OID
ipspEndGroupIdentType The Internet Protocol version of the address associated with a given endpoint. All addresses are represented as an array of octets in network byte order. When combined with the ipspEndGroupAddress these objects can be…	INET-ADDRESS-MIBInetAddressType Type Values: 0 unknown 1 ipv4 2 ipv6 3 ipv4z 4 ipv6z 16 dns 25 l2vpn	.1.3.6.1.2.1.153.1.2.1.1
ipspEndGroupAddress The address of a given endpoint, the format of which is specified by the ipspEndGroupIdentType object.	OctetString Constraints: range: 16-16 range: 4-4	.1.3.6.1.2.1.153.1.2.1.2
ipspEndGroupName The policy group name to apply to this endpoint. The value of the ipspEndGroupName object should then be used as an index into the ipspGroupContentsTable to come up with a list of rules that MUST be applied to this end…	OctetStringr/w Constraints: range: 1-32	.1.3.6.1.2.1.153.1.2.1.3
ipspEndGroupLastChanged The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.	SNMPv2-TCTimeStamp Based On: SNMPv2-SMITimeTicks Description: The value of the sysUpTime object at which a specific occurrence happened. The specific occurrence must be defined in the description of any object defined using this type. If sysUpTime is reset t…	.1.3.6.1.2.1.153.1.2.1.4
ipspEndGroupStorageType The storage type for this row. Rows in this table which were created through an external process may have a storage type of readOnly or permanent.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.2.1.153.1.2.1.5
ipspEndGroupRowStatus This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. This object may not be set t…	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.2.1.153.1.2.1.6

This table contains a list of rules and/or subgroups
contained within a given policy group.  The entries are
sorted by the ipspGroupContPriority object and MUST be
executed in order according to this value, starting with the
lowest value.  Once a group item has been processed, the
processor MUST stop processing this packet if an action was
executed as a result of the processing of a given group.
Iterating into the next policy group item by finding the next
largest ipspGroupContPriority object shall only be done if no
actions were run when processing the last item for a given
packet.

ipspGroupContentsEntry row .1.3.6.1.2.1.153.1.3.1

Defines a given sub-item within a policy group.

Indexes

ipspGroupContName ipspGroupContPriority

Column	Syntax	OID
ipspGroupContName The administrative name of this group.	OctetString Constraints: range: 1-32	.1.3.6.1.2.1.153.1.3.1.1
ipspGroupContPriority The priority (sequence number) of the sub-component in this group.	Integer32 Constraints: range: 0-65536	.1.3.6.1.2.1.153.1.3.1.2
ipspGroupContFilter ipspGroupContFilter points to a filter which is evaluated to determine whether the sub-component within this group should be exercised. Managers can use this object to classify groups of rules or subgroups together in …	SNMPv2-TCVariablePointerr/w Description: A pointer to a specific object instance. For example, sysContact.0 or ifInOctets.3.	.1.3.6.1.2.1.153.1.3.1.3
ipspGroupContComponentType Indicates whether the ipspGroupContComponentName object is the name of another group defined within the ipspGroupContentsTable or is the name of a rule defined within the ipspRuleDefinitionTable.	Enumerationr/w Enumerated Values: 0 reserved 1 group 2 rule	.1.3.6.1.2.1.153.1.3.1.4
ipspGroupContComponentName The name of the policy rule or subgroup contained within this group, as indicated by the ipspGroupContComponentType object.	OctetStringr/w Constraints: range: 1-32	.1.3.6.1.2.1.153.1.3.1.5
ipspGroupContLastChanged The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.	SNMPv2-TCTimeStamp Based On: SNMPv2-SMITimeTicks Description: The value of the sysUpTime object at which a specific occurrence happened. The specific occurrence must be defined in the description of any object defined using this type. If sysUpTime is reset t…	.1.3.6.1.2.1.153.1.3.1.6
ipspGroupContStorageType The storage type for this row. Rows in this table which were created through an external process may have a storage type of readOnly or permanent.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.2.1.153.1.3.1.7
ipspGroupContRowStatus This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. This object may not be set t…	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.2.1.153.1.3.1.8

This table defines a policy rule by associating a filter or a
set of filters to an action to be executed.

ipspRuleDefinitionEntry row .1.3.6.1.2.1.153.1.4.1

A row defining a particular policy definition. A rule
definition binds a filter pointer to an action pointer.

Indexes

ipspRuleDefName

Column	Syntax	OID
ipspRuleDefName ipspRuleDefName is the administratively assigned name of the rule referred to by the ipspGroupContComponentName object.	OctetString Constraints: range: 1-32	.1.3.6.1.2.1.153.1.4.1.1
ipspRuleDefDescription A user definable string. This field may be used for your administrative tracking purposes.	SNMP-FRAMEWORK-MIBSnmpAdminStringr/w Type Constraints: range: 0..255	.1.3.6.1.2.1.153.1.4.1.2
ipspRuleDefFilter ipspRuleDefFilter points to a filter which is used to evaluate whether the action associated with this row should be fired or not. The action will only fire if the filter referenced by this object evaluates to TRUE aft…	SNMPv2-TCVariablePointerr/w Description: A pointer to a specific object instance. For example, sysContact.0 or ifInOctets.3.	.1.3.6.1.2.1.153.1.4.1.3
ipspRuleDefFilterNegated ipspRuleDefFilterNegated specifies whether the filter referenced by the ipspRuleDefFilter object should be negated or not.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.2.1.153.1.4.1.4
ipspRuleDefAction This column points to the action to be taken. It may, but is not limited to, point to a row in one of the following tables: ipspCompoundActionTable ipspSaPreconfiguredActionTable ipspIkeActionTa…	SNMPv2-TCVariablePointerr/w Description: A pointer to a specific object instance. For example, sysContact.0 or ifInOctets.3.	.1.3.6.1.2.1.153.1.4.1.5
ipspRuleDefAdminStatus Indicates whether the current rule definition should be considered active. If enabled, it should be evaluated when processing packets. If disabled, packets should continue to be processed by the rest of the rules defi…	IpspAdminStatusr/w Type Values: 1 enabled 2 disabled	.1.3.6.1.2.1.153.1.4.1.6
ipspRuleDefLastChanged The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.	SNMPv2-TCTimeStamp Based On: SNMPv2-SMITimeTicks Description: The value of the sysUpTime object at which a specific occurrence happened. The specific occurrence must be defined in the description of any object defined using this type. If sysUpTime is reset t…	.1.3.6.1.2.1.153.1.4.1.7
ipspRuleDefStorageType The storage type for this row. Rows in this table which were created through an external process may have a storage type of readOnly or permanent.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.2.1.153.1.4.1.8
ipspRuleDefRowStatus This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. This object may not be set t…	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.2.1.153.1.4.1.9

A table defining a compound set of filters and their
associated parameters.  A row in this table can either be
pointed to by a ipspRuleDefFilter object or by a ficSubFilter
object.

ipspCompoundFilterEntry row .1.3.6.1.2.1.153.1.5.1

An entry in the ipspCompoundFilterTable. A filter defined by
this table is considered to have a TRUE return value if and
only if:

ipspCompFiltLogicType is AND and all of the sub-filters
associated with…

Indexes

ipspCompFiltName

Column	Syntax	OID
ipspCompFiltName A user definable string. You may use this field for your administrative tracking purposes.	OctetString Constraints: range: 1-32	.1.3.6.1.2.1.153.1.5.1.1
ipspCompFiltDescription A user definable string. You may use this field for your administrative tracking purposes.	SNMP-FRAMEWORK-MIBSnmpAdminStringr/w Type Constraints: range: 0..255	.1.3.6.1.2.1.153.1.5.1.2
ipspCompFiltLogicType Indicates whether the filters contained within this filter are functionally ANDed or ORed together.	IpspBooleanOperatorr/w Type Values: 1 or 2 and	.1.3.6.1.2.1.153.1.5.1.3
ipspCompFiltLastChanged The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.	SNMPv2-TCTimeStamp Based On: SNMPv2-SMITimeTicks Description: The value of the sysUpTime object at which a specific occurrence happened. The specific occurrence must be defined in the description of any object defined using this type. If sysUpTime is reset t…	.1.3.6.1.2.1.153.1.5.1.4
ipspCompFiltStorageType The storage type for this row. Rows in this table which were created through an external process may have a storage type of readOnly or permanent.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.2.1.153.1.5.1.5
ipspCompFiltRowStatus This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. Once active, it may not have…	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.2.1.153.1.5.1.6

This table defines a list of filters contained within a given
compound filter set defined in the ipspCompoundFilterTable.

ipspSubfiltersEntry row .1.3.6.1.2.1.153.1.6.1

An entry into the list of filters for a given compound
filter.

Indexes

ipspCompFiltName ipspSubFiltPriority

Column	Syntax	OID
ipspSubFiltPriority The priority of a given filter within a condition. Implementations MAY choose to follow the ordering indicated by the manager that created the rows in order to allow the manager to intelligently construct filter lists s…	Integer32 Constraints: range: 0-65536	.1.3.6.1.2.1.153.1.6.1.1
ipspSubFiltSubfilter The location of the contained filter. The value of this column should be a VariablePointer which references the properties for the filter to be included in this compound filter. This MIB defines the foll…	SNMPv2-TCVariablePointerr/w Description: A pointer to a specific object instance. For example, sysContact.0 or ifInOctets.3.	.1.3.6.1.2.1.153.1.6.1.2
ipspSubFiltSubfilterIsNegated Indicates whether the result of applying this subfilter should be negated or not.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.2.1.153.1.6.1.3
ipspSubFiltLastChanged The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.	SNMPv2-TCTimeStamp Based On: SNMPv2-SMITimeTicks Description: The value of the sysUpTime object at which a specific occurrence happened. The specific occurrence must be defined in the description of any object defined using this type. If sysUpTime is reset t…	.1.3.6.1.2.1.153.1.6.1.4
ipspSubFiltStorageType The storage type for this row. Rows in this table which were created through an external process may have a storage type of readOnly or permanent.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.2.1.153.1.6.1.5
ipspSubFiltRowStatus This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. This object can not be made …	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.2.1.153.1.6.1.6

This table contains a list of filter definitions to be used
within the ipspRuleDefinitionTable or the
ipspSubfilterTable table.

ipspIpHeaderFilterEntry row .1.3.6.1.2.1.153.1.8.1

A definition of a particular filter.

Indexes

ipspIpHeadFiltName

Column	Syntax	OID
ipspIpHeadFiltName The administrative name for this filter.	OctetString Constraints: range: 1-32	.1.3.6.1.2.1.153.1.8.1.1
ipspIpHeadFiltType This defines the various tests that are used when evaluating a given filter. The results of each test are ANDed together to produce the result of the entire filter. When processing this filter, it is recommended for e…	Bitsr/w Enumerated Values: 0 sourceAddress 1 destinationAddress 2 sourcePort 3 destinationPort 4 protocol 5 ipv6FlowLabel	.1.3.6.1.2.1.153.1.8.1.2
ipspIpHeadFiltIPVersion The Internet Protocol version the addresses are to match against. The value of this property determines the size and format of the ipspIpHeadFiltSrcAddressBegin, ipspIpHeadFiltSrcAddressEnd, ipspIpHeadFiltDstAddressBeg…	INET-ADDRESS-MIBInetAddressTyper/w Type Values: 0 unknown 1 ipv4 2 ipv6 3 ipv4z 4 ipv6z 16 dns 25 l2vpn	.1.3.6.1.2.1.153.1.8.1.3
ipspIpHeadFiltSrcAddressBegin The starting address of a source address range that the packet must match against for this filter to be considered TRUE. This object is only used if sourceAddress is set in ipspIpHeadFiltType.	INET-ADDRESS-MIBInetAddressr/w Type Constraints: range: 0..255	.1.3.6.1.2.1.153.1.8.1.4
ipspIpHeadFiltSrcAddressEnd The ending address of a source address range to check a packet against, where the starting is specified by the ipspIpHeadFiltSrcAddressBegin object. Set this column to the same value as the ipspIpHeadFiltSrcAddressBegi…	INET-ADDRESS-MIBInetAddressr/w Type Constraints: range: 0..255	.1.3.6.1.2.1.153.1.8.1.5
ipspIpHeadFiltDstAddressBegin The starting address of a destination address range that the packet must match against for this filter to be considered TRUE. This object is only used if destinationAddress is set in ipspIpHeadFiltType.	INET-ADDRESS-MIBInetAddressr/w Type Constraints: range: 0..255	.1.3.6.1.2.1.153.1.8.1.6
ipspIpHeadFiltDstAddressEnd The ending address of a destination address range to check a packet against, where the first is specified by the ipspIpHeadFiltDstAddressBegin object. Set this column to the same value as the ipspIpHeadFiltDstAddressBe…	INET-ADDRESS-MIBInetAddressr/w Type Constraints: range: 0..255	.1.3.6.1.2.1.153.1.8.1.7
ipspIpHeadFiltSrcLowPort The low port of the port range a packet's source must match against. To match, the port number must be greater than or equal to this value. This object is only used if sourcePort is set in ipspIpHeadFilt…	INET-ADDRESS-MIBInetPortNumberr/w Type Constraints: range: 0..65535	.1.3.6.1.2.1.153.1.8.1.8
ipspIpHeadFiltSrcHighPort The high port of the port range a packet's source must match against. To match, the port number must be less than or equal to this value. This object is only used if sourcePort is set in ipspIpHeadFiltTy…	INET-ADDRESS-MIBInetPortNumberr/w Type Constraints: range: 0..65535	.1.3.6.1.2.1.153.1.8.1.9
ipspIpHeadFiltDstLowPort The low port of the port range a packet's destination must match against. To match, the port number must be greater than or equal to this value. This object is only used if destinationPort is set in ipsp…	INET-ADDRESS-MIBInetPortNumberr/w Type Constraints: range: 0..65535	.1.3.6.1.2.1.153.1.8.1.10
ipspIpHeadFiltDstHighPort The high port of the port range a packet's destination must match against. To match, the port number must be less than or equal to this value. This object is only used if destinationPort is set in ipspIp…	INET-ADDRESS-MIBInetPortNumberr/w Type Constraints: range: 0..65535	.1.3.6.1.2.1.153.1.8.1.11
ipspIpHeadFiltProtocol The protocol number the incoming packet must match against for this filter to be evaluated as true. This object is only used if protocol is set in ipspIpHeadFiltType.	Integer32r/w Constraints: range: 0-255	.1.3.6.1.2.1.153.1.8.1.12
ipspIpHeadFiltIPv6FlowLabel The IPv6 Flow Label that the packet must match against. This object is only used if ipv6FlowLabel is set in ipspIpHeadFiltType.	Integer32r/w Constraints: range: 0-1048575	.1.3.6.1.2.1.153.1.8.1.13
ipspIpHeadFiltLastChanged The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.	SNMPv2-TCTimeStamp Based On: SNMPv2-SMITimeTicks Description: The value of the sysUpTime object at which a specific occurrence happened. The specific occurrence must be defined in the description of any object defined using this type. If sysUpTime is reset t…	.1.3.6.1.2.1.153.1.8.1.14
ipspIpHeadFiltStorageType The storage type for this row. Rows in this table which were created through an external process may have a storage type of readOnly or permanent.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.2.1.153.1.8.1.15
ipspIpHeadFiltRowStatus This object indicates the conceptual status of this row. This object may not be set to active if the requirements of the ipspIpHeadFiltType object are not met. In other words, if the associated value col…	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.2.1.153.1.8.1.16

This table contains a list of filter definitions to be used
within the ipspRuleDefinitionTable or the
ipspSubfilterTable.

ipspIpOffsetFilterEntry row .1.3.6.1.2.1.153.1.9.1

A definition of a particular filter.

Indexes

ipspIpOffFiltName

Column	Syntax	OID
ipspIpOffFiltName The administrative name for this filter.	OctetString Constraints: range: 1-32	.1.3.6.1.2.1.153.1.9.1.1
ipspIpOffFiltOffset This is the byte offset from the front of the IP packet where the value or arithmetic comparison is done. A value of '0' indicates the first byte in the packet.	Integer32r/w Constraints: range: 0-65536	.1.3.6.1.2.1.153.1.9.1.2
ipspIpOffFiltType This defines the various tests that are used when evaluating a given filter. Once a row is 'active', this object's value may not be changed unless the appropriate columns, ipspIpOffFiltNumber or ipspIpOff…	Enumerationr/w Enumerated Values: 1 valueMatch 2 valueNotMatch 3 arithmeticEqual 4 arithmeticNotEqual 5 arithmeticLess 6 arithmeticGreaterOrEqual 7 arithmeticGreater 8 arithmeticLessOrEqual	.1.3.6.1.2.1.153.1.9.1.3
ipspIpOffFiltNumber ipspIpOffFiltNumber is used for arithmetic matching of a packets at ipspIpOffFiltOffset. This object is only used if one of the arithmetic types is chosen in ipspIpOffFiltType.	Integer32r/w Constraints: range: 0-65536	.1.3.6.1.2.1.153.1.9.1.4
ipspIpOffFiltValue ipspIpOffFiltValue is used for match comparisons of a packet at ipspIpOffFiltOffset. This object is only used if one of the match types is chosen in ipspIpOffFiltType.	OctetStringr/w Constraints: range: 0-1024	.1.3.6.1.2.1.153.1.9.1.5
ipspIpOffFiltLastChanged The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.	SNMPv2-TCTimeStamp Based On: SNMPv2-SMITimeTicks Description: The value of the sysUpTime object at which a specific occurrence happened. The specific occurrence must be defined in the description of any object defined using this type. If sysUpTime is reset t…	.1.3.6.1.2.1.153.1.9.1.6
ipspIpOffFiltStorageType The storage type for this row. Rows in this table which were created through an external process may have a storage type of readOnly or permanent.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.2.1.153.1.9.1.7
ipspIpOffFiltRowStatus This object indicates the conceptual status of this row. This object may not be set to active if the requirements of the ipspIpOffFiltType object are not met. In other words, if the associated value colu…	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.2.1.153.1.9.1.8

Defines a table of filters which can be used to effectively
enable or disable policies based on a valid time range.

ipspTimeFilterEntry row .1.3.6.1.2.1.153.1.10.1

A row describing a given time frame for which a policy may be
filtered on to place the rule active or inactive.

Indexes

ipspTimeFiltName

Column	Syntax	OID
ipspTimeFiltName An administratively assigned name for this filter.	OctetString Constraints: range: 1-32	.1.3.6.1.2.1.153.1.10.1.1
ipspTimeFiltPeriodStart The starting time period for this filter. In addition to a normal DateAndTime string, this object may be set to the OCTET STRING value THISANDPRIOR which indicates that the filter is valid from any time before now up u…	SNMPv2-TCDateAndTimer/w Type Constraints: range: 8 range: 11 Description: A date-time specification. field octets contents range ----- ------ -------- ----- 1 1-2 year* 0..65536 2 3 month …	.1.3.6.1.2.1.153.1.10.1.2
ipspTimeFiltPeriodEnd The ending time period for this filter. In addition to a normal DateAndTime string, this object may be set to the OCTET STRING value THISANDFUTURE which indicates that the filter is valid without an ending date and/or …	SNMPv2-TCDateAndTimer/w Type Constraints: range: 8 range: 11 Description: A date-time specification. field octets contents range ----- ------ -------- ----- 1 1-2 year* 0..65536 2 3 month …	.1.3.6.1.2.1.153.1.10.1.3
ipspTimeFiltMonthOfYearMask A bit mask which overlays the ipspTimeFiltPeriodStart to ipspTimeFiltPeriodEnd date range to further restrict the time period to a restricted set of months of the year.	Bitsr/w Enumerated Values: 0 january 1 february 2 march 3 april 4 may 5 june 6 july 7 august 8 september 9 october 10 november 11 december	.1.3.6.1.2.1.153.1.10.1.4
ipspTimeFiltDayOfMonthMask Defines which days of the month this time period is valid for. It is a sequence of 32 BITS, where each BIT represents a corresponding day of the month starting from the left most bit being equal to the first day of the…	OctetStringr/w Constraints: range: 4-4	.1.3.6.1.2.1.153.1.10.1.5
ipspTimeFiltDayOfWeekMask A bit mask which overlays the ipspTimeFiltPeriodStart to ipspTimeFiltPeriodEnd date range to further restrict the time period to a restricted set of days within a given week.	Bitsr/w Enumerated Values: 0 monday 1 tuesday 2 wednesday 3 thursday 4 friday 5 saturday 6 sunday	.1.3.6.1.2.1.153.1.10.1.6
ipspTimeFiltTimeOfDayMaskStart Indicates the starting time of day for which this filter evaluates to true. The date portions of the DateAndTime TC are ignored for purposes of evaluating this mask and only the time specific portions are used.	SNMPv2-TCDateAndTimer/w Type Constraints: range: 8 range: 11 Description: A date-time specification. field octets contents range ----- ------ -------- ----- 1 1-2 year* 0..65536 2 3 month …	.1.3.6.1.2.1.153.1.10.1.7
ipspTimeFiltTimeOfDayMaskEnd Indicates the ending time of day for which this filter evaluates to true. The date portions of the DateAndTime TC are ignored for purposes of evaluating this mask and only the time specific portions are used. If this …	SNMPv2-TCDateAndTimer/w Type Constraints: range: 8 range: 11 Description: A date-time specification. field octets contents range ----- ------ -------- ----- 1 1-2 year* 0..65536 2 3 month …	.1.3.6.1.2.1.153.1.10.1.8
ipspTimeFiltLastChanged The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.	SNMPv2-TCTimeStamp Based On: SNMPv2-SMITimeTicks Description: The value of the sysUpTime object at which a specific occurrence happened. The specific occurrence must be defined in the description of any object defined using this type. If sysUpTime is reset t…	.1.3.6.1.2.1.153.1.10.1.9
ipspTimeFiltStorageType The storage type for this row. Rows in this table which were created through an external process may have a storage type of readOnly or permanent.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.2.1.153.1.10.1.10
ipspTimeFiltRowStatus This object indicates the conceptual status of this row.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.2.1.153.1.10.1.11

This table contains a list of IPSO header filter definitions
to be used within the ipspRuleDefinitionTable or the
ipspSubfilterTable.  IPSO headers and their values
are described in RFC1108.

ipspIpsoHeaderFilterEntry row .1.3.6.1.2.1.153.1.11.1

A definition of a particular filter.

Indexes

ipspIpsoHeadFiltName

Column	Syntax	OID
ipspIpsoHeadFiltName The administrative name for this filter.	OctetString Constraints: range: 1-32	.1.3.6.1.2.1.153.1.11.1.1
ipspIpsoHeadFiltType The IPSO header fields to match the value against.	Bitsr/w Enumerated Values: 0 classificationLevel 1 protectionAuthority	.1.3.6.1.2.1.153.1.11.1.2
ipspIpsoHeadFiltClassification The IPSO classification header field value must match the value in this column if the classificationLevel bit is set in the ipspIpsoHeadFiltType field. The values of these enumerations are defined by RFC1…	Enumerationr/w Enumerated Values: 61 topSecret 90 secret 150 confidential 171 unclassified	.1.3.6.1.2.1.153.1.11.1.3
ipspIpsoHeadFiltProtectionAuth The IPSO protection authority header field value must match the value in this column if the protection authority bit is set in the ipspIpsoHeadFiltType field. The values of these enumerations are defined …	Enumerationr/w Enumerated Values: 0 genser 1 siopesi 2 sci 3 nsa 4 doe	.1.3.6.1.2.1.153.1.11.1.4
ipspIpsoHeadFiltLastChanged The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.	SNMPv2-TCTimeStamp Based On: SNMPv2-SMITimeTicks Description: The value of the sysUpTime object at which a specific occurrence happened. The specific occurrence must be defined in the description of any object defined using this type. If sysUpTime is reset t…	.1.3.6.1.2.1.153.1.11.1.5
ipspIpsoHeadFiltStorageType The storage type for this row. Rows in this table which were created through an external process may have a storage type of readOnly or permanent.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.2.1.153.1.11.1.6
ipspIpsoHeadFiltRowStatus This object indicates the conceptual status of this row. This object may not be set to active if the requirements of the ipspIpsoHeadFiltType object are not met. In other words, if the associated value c…	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.2.1.153.1.11.1.7

This table defines filters which can be used to match
credentials of IKE peers, where the credentials in question
have been obtained from an IKE phase 1 exchange.  They may be
X.509 certificates, Kerberos tickets, etc...

ipspCredentialFilterEntry row .1.3.6.1.2.1.153.1.12.1

A row defining a particular credential filter

Indexes

ipspCredFiltName

Column	Syntax	OID
ipspCredFiltName The administrative name of this filter.	OctetString Constraints: range: 1-32	.1.3.6.1.2.1.153.1.12.1.1
ipspCredFiltCredentialType The credential type that is expected for this filter to succeed.	IpspCredentialTyper/w Type Values: 0 reserved 1 unknown 2 sharedSecret 3 x509 4 kerberos	.1.3.6.1.2.1.153.1.12.1.2
ipspCredFiltMatchFieldName The piece of the credential to match against. Examples: serialNumber, signatureAlgorithm, issuerName or subjectName. For credential types without fields (e.g. shared secrec), this field should be left em…	OctetStringr/w Constraints: range: 0-256	.1.3.6.1.2.1.153.1.12.1.3
ipspCredFiltMatchFieldValue The value that the field indicated by the ipspCredFiltMatchFieldName must match against for the filter to be considered TRUE.	OctetStringr/w Constraints: range: 1-4096	.1.3.6.1.2.1.153.1.12.1.4
ipspCredFiltAcceptCredFrom This value is used to look up a row in the ipspIpsecCredMngServiceTable for the Certificate Authority (CA) Information. This value is empty if there is no CA used for this filter.	OctetStringr/w Constraints: range: 1-117	.1.3.6.1.2.1.153.1.12.1.5
ipspCredFiltLastChanged The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.	SNMPv2-TCTimeStamp Based On: SNMPv2-SMITimeTicks Description: The value of the sysUpTime object at which a specific occurrence happened. The specific occurrence must be defined in the description of any object defined using this type. If sysUpTime is reset t…	.1.3.6.1.2.1.153.1.12.1.6
ipspCredFiltStorageType The storage type for this row. Rows in this table which were created through an external process may have a storage type of readOnly or permanent.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.2.1.153.1.12.1.7
ipspCredFiltRowStatus This object indicates the conceptual status of this row.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.2.1.153.1.12.1.8

This table defines filters which can be used to match
credentials of IKE peers, where the credentials in question
have been obtained from an IKE phase 1 exchange.  They may be
X.509 certificates, Kerberos tickets, etc...

ipspPeerIdentityFilterEntry row .1.3.6.1.2.1.153.1.13.1

A row defining a particular credential filter

Indexes

ipspPeerIdFiltName

Column	Syntax	OID
ipspPeerIdFiltName The administrative name of this filter.	OctetString Constraints: range: 1-32	.1.3.6.1.2.1.153.1.13.1.1
ipspPeerIdFiltIdentityType The type of identity field in the peer ID payload to match against.	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIdentTyper/w Type Values: 0 reserved 1 idIpv4Addr 2 idFqdn 3 idUserFqdn 4 idIpv4AddrSubnet 5 idIpv6Addr 6 idIpv6AddrSubnet 7 idIpv4AddrRange 8 idIpv6AddrRange 9 idDerAsn1Dn 10 idDerAsn1Gn 11 idKeyId	.1.3.6.1.2.1.153.1.13.1.2
ipspPeerIdFiltIdentityValue The string representation of the value that the peer ID payload value must match against. Wildcard mechanisms MUST be supported such that: - a ipspPeerIdFiltIdentityValue of '*@example.com' will match a…	IpspIdentityFilterr/w Type Constraints: range: 1..256	.1.3.6.1.2.1.153.1.13.1.3
ipspPeerIdFiltLastChanged The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.	SNMPv2-TCTimeStamp Based On: SNMPv2-SMITimeTicks Description: The value of the sysUpTime object at which a specific occurrence happened. The specific occurrence must be defined in the description of any object defined using this type. If sysUpTime is reset t…	.1.3.6.1.2.1.153.1.13.1.4
ipspPeerIdFiltStorageType The storage type for this row. Rows in this table which were created through an external process may have a storage type of readOnly or permanent.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.2.1.153.1.13.1.5
ipspPeerIdFiltRowStatus This object indicates the conceptual status of this row. This object can not be considered active unless the ipspPeerIdFiltIdentityType and ipspPeerIdFiltIdentityValue column values are defined.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.2.1.153.1.13.1.6

Table used to allow multiple actions to be associated with a
rule.  It uses the ipspSubactionsTable to do this.

ipspCompoundActionEntry row .1.3.6.1.2.1.153.1.14.1

A row in the ipspCompoundActionTable.

Indexes

ipspCompActName

Column	Syntax	OID
ipspCompActName This is an administratively assigned name of this compound action.	OctetString Constraints: range: 1-32	.1.3.6.1.2.1.153.1.14.1.1
ipspCompActExecutionStrategy This object indicates how the sub-actions are executed based on the success of the actions as they finish executing. doAll - run each sub-action regardless of the exit status o…	Enumerationr/w Enumerated Values: 0 reserved 1 doAll 2 doUntilSuccess 3 doUntilFailure	.1.3.6.1.2.1.153.1.14.1.2
ipspCompActLastChanged The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.	SNMPv2-TCTimeStamp Based On: SNMPv2-SMITimeTicks Description: The value of the sysUpTime object at which a specific occurrence happened. The specific occurrence must be defined in the description of any object defined using this type. If sysUpTime is reset t…	.1.3.6.1.2.1.153.1.14.1.3
ipspCompActStorageType The storage type for this row. Rows in this table which were created through an external process may have a storage type of readOnly or permanent.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.2.1.153.1.14.1.4
ipspCompActRowStatus This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. Once a row in the ipspCompou…	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.2.1.153.1.14.1.5

This table contains a list of the sub-actions within a given
compound action.  Compound actions executing these actions
MUST execute them in series based on the ipspSubActPriority
value, with the lowest value executing first.

ipspSubactionsEntry row .1.3.6.1.2.1.153.1.15.1

A row containing a reference to a given compound-action
sub-action.

Indexes

ipspCompActName ipspSubActPriority

Column	Syntax	OID
ipspSubActPriority The priority of a given sub-action within a compound action. The order in which sub-actions should be executed are based on the value from this column, with the lowest numeric value executing first.	Integer32 Constraints: range: 0-65536	.1.3.6.1.2.1.153.1.15.1.1
ipspSubActSubActionName This column points to the action to be taken. It may, but is not limited to, point to a row in one of the following tables: ipspCompoundActionTable - Allowing recursion ipspSaPreconfigured…	SNMPv2-TCVariablePointerr/w Description: A pointer to a specific object instance. For example, sysContact.0 or ifInOctets.3.	.1.3.6.1.2.1.153.1.15.1.2
aiipspCompActLastChanged The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.	SNMPv2-TCTimeStamp Based On: SNMPv2-SMITimeTicks Description: The value of the sysUpTime object at which a specific occurrence happened. The specific occurrence must be defined in the description of any object defined using this type. If sysUpTime is reset t…	.1.3.6.1.2.1.153.1.15.1.3
aiipspCompActStorageType The storage type for this row. Rows in this table which were created through an external process may have a storage type of readOnly or permanent.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.2.1.153.1.15.1.4
aiipspCompActRowStatus This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.2.1.153.1.15.1.5

This table is a list of non-negotiated IPsec actions (SAs)
that can be performed and contains or indicates the data
necessary to create such an SA.

ipspSaPreconfiguredActionEntry row .1.3.6.1.2.1.153.1.17.1

One entry in the ipspSaPreconfiguredActionTable.

Indexes

ipspSaPreActActionName ipspSaPreActSADirection

Column	Syntax	OID
ipspSaPreActActionName This object contains the name of this SaPreconfiguredActionEntry.	OctetString Constraints: range: 1-32	.1.3.6.1.2.1.153.1.17.1.1
ipspSaPreActSADirection This object indicates whether a row should apply to outgoing or incoming SAs	IpspSADirection Type Values: 1 outgoing 2 incoming	.1.3.6.1.2.1.153.1.17.1.2
ipspSaPreActActionDescription An administratively assigned string which may be used to describe what the action does.	SNMP-FRAMEWORK-MIBSnmpAdminStringr/w Type Constraints: range: 0..255	.1.3.6.1.2.1.153.1.17.1.3
ipspSaPreActActionLifetimeSec ipspSaPreActActionLifetimeSec specifies how long in seconds the security association derived from this action should be used. The default lifetime is 8 hours. Note: the actual lifetime of the preconfigured SA will be th…	SNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.2.1.153.1.17.1.4
ipspSaPreActActionLifetimeKB ipspSaPreActActionLifetimeKB specifies how long the security association derived from this action should be used. After this value in KiloBytes has passed through the security association, it should no longer be used. …	SNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.2.1.153.1.17.1.5
ipspSaPreActDoActionLogging ipspSaPreActDoActionLogging specifies whether or not an audit message should be logged when a preconfigured SA is created.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.2.1.153.1.17.1.6
ipspSaPreActDoPacketLogging ipspSaPreActDoPacketLogging specifies whether or not an audit message should be logged and if there is logging, how many bytes of the packet to place in the notification.	IpspIPPacketLoggingr/w Type Constraints: range: -1..65536	.1.3.6.1.2.1.153.1.17.1.7
ipspSaPreActDFHandling This object specifies how to process the DF bit in packets sent through the preconfigured SA. This object is not used for transport SAs.	Enumerationr/w Enumerated Values: 0 reserved 1 copy 2 set 3 clear	.1.3.6.1.2.1.153.1.17.1.8
ipspSaPreActActionType This object specifies the encapsulation mode to use for the preconfigured SA: tunnel or transport mode.	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiEncapsulationModer/w Type Values: 0 reserved 1 tunnel 2 transport	.1.3.6.1.2.1.153.1.17.1.9
ipspSaPreActAHSPI This object represents the SPI value for the AH SA.	SNMPv2-SMIInteger32r/w Type Constraints: range: -2147483648..2147483647	.1.3.6.1.2.1.153.1.17.1.10
ipspSaPreActAHTransformName This object is the name of the AH transform to use as an index into the AHTransformTable. A zero length value indicates no transform of this type is used.	OctetStringr/w Constraints: range: 0-32	.1.3.6.1.2.1.153.1.17.1.11
ipspSaPreActAHSharedSecretName This object contains a name value to be used as an index into the ipspCredentialTable which holds the pertinent keying information for the AH SA.	OctetStringr/w Constraints: range: 0-32	.1.3.6.1.2.1.153.1.17.1.12
ipspSaPreActESPSPI This object represents the SPI value for the ESP SA.	SNMPv2-SMIInteger32r/w Type Constraints: range: -2147483648..2147483647	.1.3.6.1.2.1.153.1.17.1.13
ipspSaPreActESPTransformName This object is the name of the ESP transform to use as an index into the ESPTransformTable. A zero length value indicates no transform of this type is used.	OctetStringr/w Constraints: range: 0-32	.1.3.6.1.2.1.153.1.17.1.14
ipspSaPreActESPEncSecretName This object contains a name value to be used as an index into the ipspCredentialTable which holds the pertinent keying information for the encryption algorithm of the ESP SA.	OctetStringr/w Constraints: range: 0-32	.1.3.6.1.2.1.153.1.17.1.15
ipspSaPreActESPAuthSecretName This object contains a name value to be used as an index into the ipspCredentialTable which holds the pertinent keying information for the authentication algorithm of the ESP SA.	OctetStringr/w Constraints: range: 0-32	.1.3.6.1.2.1.153.1.17.1.16
ipspSaPreActIPCompSPI This object represents the SPI value for the IPComp SA.	SNMPv2-SMIInteger32r/w Type Constraints: range: -2147483648..2147483647	.1.3.6.1.2.1.153.1.17.1.17
ipspSaPreActIPCompTransformName This object is the name of the IPComp transform to use as an index into the IPCompTransformTable. A zero length value indicates no transform of this type is used.	OctetStringr/w Constraints: range: 0-32	.1.3.6.1.2.1.153.1.17.1.18
ipspSaPreActPeerGatewayIdName This object indicates the peer id name of the peer gateway. This object can be used to look up the peer gateway address in the ipspPeerIdentityTable. This object is only used when initiating a tunnel SA,…	OctetStringr/w Constraints: range: 0-32	.1.3.6.1.2.1.153.1.17.1.19
ipspSaPreActLastChanged The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.	SNMPv2-TCTimeStamp Based On: SNMPv2-SMITimeTicks Description: The value of the sysUpTime object at which a specific occurrence happened. The specific occurrence must be defined in the description of any object defined using this type. If sysUpTime is reset t…	.1.3.6.1.2.1.153.1.17.1.20
ipspSaPreActStorageType The storage type for this row. Rows in this table which were created through an external process may have a storage type of readOnly or permanent.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.2.1.153.1.17.1.21
ipspSaPreActRowStatus This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object must …	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.2.1.153.1.17.1.22

This table contains reusable parameters that can be pointed
to by the ipspIkeActionTable and ipspIpsecActionTable.  These
parameters are reusable since it is likely an administrator
will want to make global policy changes to lifetime
parameters that apply to multiple actions.  This table allows
multiple rows in the other actions tables to reuse global
lifetime parameters in this table by repeatedly pointing to a
row cointained within this table.

ipspSaNegotiationParametersEntry row .1.3.6.1.2.1.153.1.18.1

Contains the attributes of one row in the
ipspSaNegotiationParametersTable.

Indexes

ipspSaNegParamName

Column	Syntax	OID
ipspSaNegParamName This object contains the administrative name of this SaNegotiationParametersEntry. This row can be referred to by this name in other policy action tables.	OctetString Constraints: range: 1-32	.1.3.6.1.2.1.153.1.18.1.1
ipspSaNegParamMinLifetimeSecs ipspSaNegParamMinLifetimeSecs specifies the minimum seconds lifetime that will be accepted from the peer.	SNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.2.1.153.1.18.1.2
ipspSaNegParamMinLifetimeKB ipspSaNegParamMinLifetimeKB specifies the minimum kilobyte lifetime that will be accepted from the peer.	SNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.2.1.153.1.18.1.3
ipspSaNegParamRefreshThreshSecs ipspSaNegParamRefreshThreshSecs specifies what percentage of the seconds lifetime can expire before IKE should attempt to renegotiate the IPsec security association. A value between 1 and 100 representing a percentage. …	Unsigned32r/w Constraints: range: 1-100	.1.3.6.1.2.1.153.1.18.1.4
ipspSaNegParamRefreshThresholdKB ipspSaNegParamRefreshThresholdKB specifies what percentage of the kilobyte lifetime can expire before IKE should attempt to renegotiate the IPsec security association. A value between 1 and 100 representing a percentag…	Unsigned32r/w Constraints: range: 1-100	.1.3.6.1.2.1.153.1.18.1.5
ipspSaNegParamIdleDurationSecs ipspSaNegParamIdleDurationSecs specifies how many seconds a security association may remain idle (i.e., no traffic protected using the security association) before it is deleted. A value of zero indicates that idle det…	SNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.2.1.153.1.18.1.6
ipspSaNegParamLastChanged The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.	SNMPv2-TCTimeStamp Based On: SNMPv2-SMITimeTicks Description: The value of the sysUpTime object at which a specific occurrence happened. The specific occurrence must be defined in the description of any object defined using this type. If sysUpTime is reset t…	.1.3.6.1.2.1.153.1.18.1.7
ipspSaNegParamStorageType The storage type for this row. Rows in this table which were created through an external process may have a storage type of readOnly or permanent.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.2.1.153.1.18.1.8
ipspSaNegParamRowStatus This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. This object may not be set t…	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.2.1.153.1.18.1.9

The ipspIkeActionTable contains a list of the parameters used
for an IKE phase 1 SA DOI negotiation.  See the corresponding
table ipspIkeActionProposalsTable for a list of proposals
contained within a given IKE Action.

ipspIkeActionEntry row .1.3.6.1.2.1.153.1.19.1

The ipspIkeActionEntry lists the IKE negotiation attributes.

Indexes

ipspIkeActName

Column	Syntax	OID
ipspIkeActName This object contains the name of this ikeAction entry.	OctetString Constraints: range: 1-32	.1.3.6.1.2.1.153.1.19.1.1
ipspIkeActParametersName This object is administratively assigned to reference a row in the ipspSaNegotiationParametersTable where additional parameters affecting this action may be found.	OctetStringr/w Constraints: range: 1-32	.1.3.6.1.2.1.153.1.19.1.2
ipspIkeActThresholdDerivedKeys ipspIkeActThresholdDerivedKeys specifies what percentage of the derived key limit (see the LifetimeDerivedKeys property of IKEProposal) can expire before IKE should attempt to renegotiate the IKE phase 1 security associ…	Integer32r/w Constraints: range: 0-100	.1.3.6.1.2.1.153.1.19.1.3
ipspIkeActExchangeMode ipspIkeActExchangeMode specifies the IKE Phase 1 negotiation mode.	Enumerationr/w Enumerated Values: 1 main 2 agressive	.1.3.6.1.2.1.153.1.19.1.4
ipspIkeActAgressiveModeGroupId The values to be used for Diffie-Hellman exchange.	IPSEC-ISAKMP-IKE-DOI-TCIkeGroupDescriptionr/w Type Values: 0 reserved 1 modp768 2 modp1024 3 ec2nGalois2P155 4 ec2nGalois2P185 5 modp1536	.1.3.6.1.2.1.153.1.19.1.5
ipspIkeActIdentityType This column along with ipspIkeActIdentityContext and endpoint information is used to refer an ipspIkeIdentityEntry in the ipspIkeIdentityTable.	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiIdentTyper/w Type Values: 0 reserved 1 idIpv4Addr 2 idFqdn 3 idUserFqdn 4 idIpv4AddrSubnet 5 idIpv6Addr 6 idIpv6AddrSubnet 7 idIpv4AddrRange 8 idIpv6AddrRange 9 idDerAsn1Dn 10 idDerAsn1Gn 11 idKeyId	.1.3.6.1.2.1.153.1.19.1.6
ipspIkeActIdentityContext This column, along with ipspIkeActIdentityType and endpoint information, is used to refer to an ipspIkeIdentityEntry in the ipspIkeIdentityTable.	OctetStringr/w Constraints: range: 1-32	.1.3.6.1.2.1.153.1.19.1.7
ipspIkeActPeerName This object indicates the peer id name of the IKE peer. This object can be used to look up the peer id value, address, credentials and other values in the ipspPeerIdentityTable.	OctetStringr/w Constraints: range: 0-32	.1.3.6.1.2.1.153.1.19.1.8
ipspIkeActDoActionLogging ikeDoActionLogging specifies whether or not an audit message should be logged when this ike SA is created.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.2.1.153.1.19.1.9
ipspIkeActDoPacketLogging ikeDoPacketLogging specifies whether or not an audit message should be logged and if there is logging, how many bytes of the packet to place in the notification.	IpspIPPacketLoggingr/w Type Constraints: range: -1..65536	.1.3.6.1.2.1.153.1.19.1.10
ipspIkeActVendorId Vendor ID Payload. A value of NULL means that Vendor ID payload will be neither generated nor accepted. A non-NULL value means that a Vendor ID payload will be generated (when acting as an initiator) or is expected (w…	OctetStringr/w Constraints: range: 0-65535	.1.3.6.1.2.1.153.1.19.1.11
ipspIkeActLastChanged The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.	SNMPv2-TCTimeStamp Based On: SNMPv2-SMITimeTicks Description: The value of the sysUpTime object at which a specific occurrence happened. The specific occurrence must be defined in the description of any object defined using this type. If sysUpTime is reset t…	.1.3.6.1.2.1.153.1.19.1.12
ipspIkeActStorageType The storage type for this row. Rows in this table which were created through an external process may have a storage type of readOnly or permanent.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.2.1.153.1.19.1.13
ipspIkeActRowStatus This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. This object may not be set t…	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.2.1.153.1.19.1.14

This table contains a list of all ike proposal names found
within a given IKE Action.

ipspIkeActionProposalsEntry row .1.3.6.1.2.1.153.1.20.1

a row containing one ike proposal reference

Indexes

ipspIkeActName ipspIkeActPropPriority

Column	Syntax	OID
ipspIkeActPropPriority The numeric priority of a given contained proposal inside an ike Action. This index should be used to order the proposals in an IKE Phase I negotiation, lowest value first.	Integer32 Constraints: range: 0-65535	.1.3.6.1.2.1.153.1.20.1.1
ipspIkeActPropName The administratively assigned name that can be used to reference a set of values contained within the ipspIkeProposalTable.	OctetStringr/w Constraints: range: 1-32	.1.3.6.1.2.1.153.1.20.1.2
ipspIkeActPropLastChanged The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.	SNMPv2-TCTimeStamp Based On: SNMPv2-SMITimeTicks Description: The value of the sysUpTime object at which a specific occurrence happened. The specific occurrence must be defined in the description of any object defined using this type. If sysUpTime is reset t…	.1.3.6.1.2.1.153.1.20.1.3
ipspIkeActPropStorageType The storage type for this row. Rows in this table which were created through an external process may have a storage type of readOnly or permanent.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.2.1.153.1.20.1.4
ipspIkeActPropRowStatus This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.2.1.153.1.20.1.5

This table contains a list of IKE proposals which are used in
an IKE negotiation.

ipspIkeProposalEntry row .1.3.6.1.2.1.153.1.21.1

One IKE proposal entry.

Indexes

ipspIkeActPropName

Column	Syntax	OID
ipspIkePropLifetimeDerivedKeys ipspIkePropLifetimeDerivedKeys specifies the number of times that a phase 1 key will be used to derive a phase 2 key before the phase 1 security association needs renegotiated.	SNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.2.1.153.1.21.1.1
ipspIkePropCipherAlgorithm ipspIkePropCipherAlgorithm specifies the proposed phase 1 security association encryption algorithm.	IPSEC-ISAKMP-IKE-DOI-TCIkeEncryptionAlgorithmr/w Type Values: 0 reserved 1 desCbc 2 ideaCbc 3 blowfishCbc 4 rc5R16B64Cbc 5 tripleDesCbc 6 castCbc	.1.3.6.1.2.1.153.1.21.1.2
ipspIkePropCipherKeyLength This object specifies, in bits, the key length for the cipher algorithm used in IKE Phase 1 negotiation.	SNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.2.1.153.1.21.1.3
ipspIkePropCipherKeyRounds This object specifies the number of key rounds for the cipher algorithm used in IKE Phase 1 negotiation.	SNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.2.1.153.1.21.1.4
ipspIkePropHashAlgorithm ipspIkePropHashAlgorithm specifies the proposed phase 1 security assocation hash algorithm.	IPSEC-ISAKMP-IKE-DOI-TCIkeHashAlgorithmr/w Type Values: 0 reserved 1 md5 2 sha 3 tiger	.1.3.6.1.2.1.153.1.21.1.5
ipspIkePropPrfAlgorithm ipPRFAlgorithm specifies the proposed phase 1 security association psuedo-random function. Note: currently no prf algorithms are defined.	Enumerationr/w Enumerated Values: 0 reserved	.1.3.6.1.2.1.153.1.21.1.6
ipspIkePropVendorId The VendorID property is used to identify vendor-defined key exchange GroupIDs.	OctetStringr/w Constraints: range: 0-255	.1.3.6.1.2.1.153.1.21.1.7
ipspIkePropDhGroup This object specifies the proposed phase 1 security association Diffie-Hellman group	IPSEC-ISAKMP-IKE-DOI-TCIkeGroupDescriptionr/w Type Values: 0 reserved 1 modp768 2 modp1024 3 ec2nGalois2P155 4 ec2nGalois2P185 5 modp1536	.1.3.6.1.2.1.153.1.21.1.8
ipspIkePropAuthenticationMethod This object specifies the proposed authentication method for the phase 1 security association.	IPSEC-ISAKMP-IKE-DOI-TCIkeAuthMethodr/w Type Values: 0 reserved 1 preSharedKey 2 dssSignatures 3 rsaSignatures 4 encryptionWithRsa 5 revisedEncryptionWithRsa 6 encryptionWithElGamal 7 revisedEncryptionWithElGamal	.1.3.6.1.2.1.153.1.21.1.9
ipspIkePropMaxLifetimeSecs ipspIkePropMaxLifetimeSecs specifies the maximum amount of time to propose a security association remain valid. A value of 0 indicates that the default lifetime of 8 hours should be used.	SNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.2.1.153.1.21.1.10
ipspIkePropMaxLifetimeKB ipspIkePropMaxLifetimeKB specifies the maximum kilobyte lifetime to propose a security association remain valid.	SNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.2.1.153.1.21.1.11
ipspIkePropProposalLastChanged The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.	SNMPv2-TCTimeStamp Based On: SNMPv2-SMITimeTicks Description: The value of the sysUpTime object at which a specific occurrence happened. The specific occurrence must be defined in the description of any object defined using this type. If sysUpTime is reset t…	.1.3.6.1.2.1.153.1.21.1.12
ipspIkePropProposalStorageType The storage type for this row. Rows in this table which were created through an external process may have a storage type of readOnly or permanent.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.2.1.153.1.21.1.13
ipspIkePropProposalRowStatus This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.2.1.153.1.21.1.14

The ipspIpsecActionTable contains a list of the parameters
used for an IKE phase 2 IPsec DOI negotiation.

ipspIpsecActionEntry row .1.3.6.1.2.1.153.1.22.1

The ipspIpsecActionEntry lists the IPsec negotiation
attributes.

Indexes

ipspIpsecActName

Column	Syntax	OID
ipspIpsecActName ipspIpsecActName is the name of the ipsecAction entry.	OctetString Constraints: range: 1-32	.1.3.6.1.2.1.153.1.22.1.1
ipspIpsecActParametersName This object is used to reference a row in the ipspSaNegotiationParametersTable where additional parameters affecting this action may be found.	OctetStringr/w Constraints: range: 1-32	.1.3.6.1.2.1.153.1.22.1.2
ipspIpsecActProposalsName This object is used to reference one or more rows in the ipspIpsecProposalsTable where an ordered list of proposals affecting this action may be found.	OctetStringr/w Constraints: range: 1-32	.1.3.6.1.2.1.153.1.22.1.3
ipspIpsecActUsePfs This MIB object specifies whether or not perfect forward secrecy should be used when refreshing keys. A value of true indicates that PFS should be used.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.2.1.153.1.22.1.4
ipspIpsecActVendorId The VendorID property is used to identify vendor-defined key exchange GroupIDs.	OctetStringr/w Constraints: range: 0-255	.1.3.6.1.2.1.153.1.22.1.5
ipspIpsecActGroupId This object specifies the Diffie-Hellman group to use for phase 2 when the object ipspIpsecActUsePfs is true and the object ipspIpsecActUseIkeGroup is false. If the GroupID number is from the vendor-specific range (327…	IPSEC-ISAKMP-IKE-DOI-TCIkeGroupDescriptionr/w Type Values: 0 reserved 1 modp768 2 modp1024 3 ec2nGalois2P155 4 ec2nGalois2P185 5 modp1536	.1.3.6.1.2.1.153.1.22.1.6
ipspIpsecActPeerGatewayIdName This object indicates the peer id name of the peer gateway. This object can be used to look up the peer id value, address and other values in the ipspPeerIdentityTable. This object is used when initiating a tunnel SA. …	OctetStringr/w Constraints: range: 0-116	.1.3.6.1.2.1.153.1.22.1.7
ipspIpsecActUseIkeGroup This object specifies whether or not to use the same GroupId for phase 2 as was used in phase 1. If UsePFS is false, this entry should be ignored.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.2.1.153.1.22.1.8
ipspIpsecActGranularity This object specifies how the proposed selector for the security association will be created. The selector is created by using the FilterList information. The selector can be subnet, address, porotocol, or port.	Enumerationr/w Enumerated Values: 1 subnet 2 address 3 protocol 4 port	.1.3.6.1.2.1.153.1.22.1.9
ipspIpsecActMode This object specifies the encapsulation of the IPsec SA to be negotiated.	Enumerationr/w Enumerated Values: 1 tunnel 2 transport	.1.3.6.1.2.1.153.1.22.1.10
ipspIpsecActDFHandling This object specifies the processing of DF bit by the negotiated IPsec tunnel. 1 - DF bit is copied. 2 - DF bit is set. 3 - DF bit is cleared.	Enumerationr/w Enumerated Values: 1 copy 2 set 3 clear	.1.3.6.1.2.1.153.1.22.1.11
ipspIpsecActDoActionLogging ipspIpsecActDoActionLogging specifies whether or not an audit message should be logged when this ipsec SA is created.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.2.1.153.1.22.1.12
ipspIpsecActDoPacketLogging ipspIpsecActDoPacketLogging specifies whether or not an audit message should be logged and if there is logging, how many bytes of the packet to place in the notification.	IpspIPPacketLoggingr/w Type Constraints: range: -1..65536	.1.3.6.1.2.1.153.1.22.1.13
ipspIpsecActLastChanged The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.	SNMPv2-TCTimeStamp Based On: SNMPv2-SMITimeTicks Description: The value of the sysUpTime object at which a specific occurrence happened. The specific occurrence must be defined in the description of any object defined using this type. If sysUpTime is reset t…	.1.3.6.1.2.1.153.1.22.1.14
ipspIpsecActStorageType The storage type for this row. Rows in this table which were created through an external process may have a storage type of readOnly or permanent.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.2.1.153.1.22.1.15
ipspIpsecActRowStatus This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object must …	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.2.1.153.1.22.1.16

This table lists one or more IPsec proposals for
IPsec actions.

ipspIpsecProposalsEntry row .1.3.6.1.2.1.153.1.23.1

An entry containing (possibly a portion of) a proposal.

Indexes

ipspIpsecPropName ipspIpsecPropPriority ipspIpsecPropProtocolId

Column	Syntax	OID
ipspIpsecPropName The name of this proposal.	OctetString Constraints: range: 1-32	.1.3.6.1.2.1.153.1.23.1.1
ipspIpsecPropPriority The priority level (AKA sequence level) of this proposal. A lower number indicates a higher precedence.	Integer32 Constraints: range: 0-65535	.1.3.6.1.2.1.153.1.23.1.2
ipspIpsecPropProtocolId The protocol Id for the transforms for this proposal. The protoIsakmp(1) value is not valid for this object. This object, along with the ipspIpsecPropTransformsName, is the index into the ipspIpsecTransformsTable.	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiSecProtocolId Type Values: 0 reserved 1 protoIsakmp 2 protoIpsecAh 3 protoIpsecEsp 4 protoIpcomp	.1.3.6.1.2.1.153.1.23.1.3
ipspIpsecPropTransformsName The name of the transform or group of transforms for this protocol. This object, along with the ipspIpsecPropProtocolId, is the index into the ipspIpsecTransformsTable.	OctetStringr/w Constraints: range: 1-32	.1.3.6.1.2.1.153.1.23.1.4
ipspIpsecPropLastChanged The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.	SNMPv2-TCTimeStamp Based On: SNMPv2-SMITimeTicks Description: The value of the sysUpTime object at which a specific occurrence happened. The specific occurrence must be defined in the description of any object defined using this type. If sysUpTime is reset t…	.1.3.6.1.2.1.153.1.23.1.5
ipspIpsecPropStorageType The storage type for this row. Rows in this table which were created through an external process may have a storage type of readOnly or permanent.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.2.1.153.1.23.1.6
ipspIpsecPropRowStatus This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. This row may not be set to a…	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.2.1.153.1.23.1.7

This table lists the IPsec proposals contained within a given
IPsec action and the transforms within each of those
proposals.  These proposals and transforms can then be used
to create phase 2 negotiation proposals.

ipspIpsecTransformsEntry row .1.3.6.1.2.1.153.1.24.1

An entry containing the information on an IPsec transform.

Indexes

ipspIpsecTranType ipspIpsecTranName ipspIpsecTranPriority

Column	Syntax	OID
ipspIpsecTranType The protocol type for this transform. The protoIsakmp(1) value is not valid for this object.	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiSecProtocolId Type Values: 0 reserved 1 protoIsakmp 2 protoIpsecAh 3 protoIpsecEsp 4 protoIpcomp	.1.3.6.1.2.1.153.1.24.1.1
ipspIpsecTranName The name for this transform or group of transforms.	OctetString Constraints: range: 1-32	.1.3.6.1.2.1.153.1.24.1.2
ipspIpsecTranPriority The priority level (AKA sequence level) of the this transform within the group of transforms. This indicates the preference for which algorithms are requested when the list of transforms are sent to the remote host. A…	Integer32 Constraints: range: 0-65535	.1.3.6.1.2.1.153.1.24.1.3
ipspIpsecTranTransformName The name for the given transform. Depending on the value of ipspIpsecTranType, this value should be used to lookup the transform's specific parameters in the ipspAhTransformTable, the ipspEspTransformTable or the ipspI…	OctetStringr/w Constraints: range: 1-32	.1.3.6.1.2.1.153.1.24.1.4
ipspIpsecTranLastChanged The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.	SNMPv2-TCTimeStamp Based On: SNMPv2-SMITimeTicks Description: The value of the sysUpTime object at which a specific occurrence happened. The specific occurrence must be defined in the description of any object defined using this type. If sysUpTime is reset t…	.1.3.6.1.2.1.153.1.24.1.5
ipspIpsecTranStorageType The storage type for this row. Rows in this table which were created through an external process may have a storage type of readOnly or permanent.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.2.1.153.1.24.1.6
ipspIpsecTranRowStatus This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. This row may not be set to a…	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.2.1.153.1.24.1.7

This table lists all the AH transforms which can be used to
build IPsec proposals.

ipspAhTransformEntry row .1.3.6.1.2.1.153.1.25.1

This entry contains the attributes of one AH transform.

Indexes

ipspAhTranName

Column	Syntax	OID
ipspAhTranName This object contains the name of this AH transform. This row will be referred to by an ipspIpsecTransformsEntry.	OctetString Constraints: range: 1-32	.1.3.6.1.2.1.153.1.25.1.1
ipspAhTranMaxLifetimeSec ipspAhTranMaxLifetimeSec specifies how long in seconds the security association derived from this transform should be used. A value of 0 indicates that the default lifetime of 8 hours should be used.	SNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.2.1.153.1.25.1.2
ipspAhTranMaxLifetimeKB ipspAhTranMaxLifetimeKB specifies how long in kilobytes the security association derived from this transform should be used.	SNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.2.1.153.1.25.1.3
ipspAhTranAlgorithm This object specifies the AH algorithm for this transform.	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiAuthAlgorithmr/w Type Values: 0 reserved 1 hmacMd5 2 hmacSha 3 desMac 4 kpdk	.1.3.6.1.2.1.153.1.25.1.4
ipspAhTranReplayProtection ipspAhTranReplayProtection indicates whether or not anti replay service is to be provided by this SA.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.2.1.153.1.25.1.5
ipspAhTranReplayWindowSize ipspAhTranReplayWindowSize indicates the size, in bits, of the replay window to use if replay protection is true for this transform. The window size is assumed to be a power of two. If Replay Protection is false, this…	SNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.2.1.153.1.25.1.6
ipspAhTranLastChanged The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.	SNMPv2-TCTimeStamp Based On: SNMPv2-SMITimeTicks Description: The value of the sysUpTime object at which a specific occurrence happened. The specific occurrence must be defined in the description of any object defined using this type. If sysUpTime is reset t…	.1.3.6.1.2.1.153.1.25.1.7
ipspAhTranStorageType The storage type for this row. Rows in this table which were created through an external process may have a storage type of readOnly or permanent.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.2.1.153.1.25.1.8
ipspAhTranRowStatus This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object must …	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.2.1.153.1.25.1.9

This table lists all the ESP transforms which can be used to
build IPsec proposals

ipspEspTransformEntry row .1.3.6.1.2.1.153.1.26.1

This entry contains the attributes of one ESP transform.

Indexes

ipspEspTranName

Column	Syntax	OID
ipspEspTranName The name of this particular espTransform be referred to by an ipspIpsecTransformsEntry.	OctetString Constraints: range: 1-32	.1.3.6.1.2.1.153.1.26.1.1
ipspEspTranMaxLifetimeSec ipspEspTranMaxLifetimeSec specifies how long in seconds the security association derived from this transform should be used. A value of 0 indicates that the default lifetime of 8 hours should be used.	SNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.2.1.153.1.26.1.2
ipspEspTranMaxLifetimeKB ipspEspTranMaxLifetimeKB specifies how long in kilobytes the security association derived from this transform should be used.	SNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.2.1.153.1.26.1.3
ipspEspTranCipherTransformId This object specifies the transform ID of the ESP cipher algorithm.	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiEspTransformr/w Type Values: 0 reserved 1 espDesIv64 2 espDes 3 esp3Des 4 espRc5 5 espIdea 6 espCast 7 espBlowfish 8 esp3Idea 9 espDesIv32 10 espRc4 11 espNull	.1.3.6.1.2.1.153.1.26.1.4
ipspEspTranCipherKeyLength This object specifies, in bits, the key length for the ESP cipher algorithm.	SNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.2.1.153.1.26.1.5
ipspEspTranCipherKeyRounds This object specifies the number of key rounds for the ESP cipher algorithm.	SNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.2.1.153.1.26.1.6
ipspEspTranIntegrityAlgorithmId This object specifies the ESP integrity algorithm ID.	IPSEC-ISAKMP-IKE-DOI-TCIpsecDoiAuthAlgorithmr/w Type Values: 0 reserved 1 hmacMd5 2 hmacSha 3 desMac 4 kpdk	.1.3.6.1.2.1.153.1.26.1.7
ipspEspTranReplayPrevention ipspEspTranReplayPrevention indicates whether or not anti-replay service is to be provided by this SA.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.2.1.153.1.26.1.8
ipspEspTranReplayWindowSize ipspEspTranReplayWindowSize indicates the size, in bits, of the replay window to use if replay protection is true for this transform. The window size is assumed to be a power of two. If Replay Protection is false, thi…	SNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.2.1.153.1.26.1.9
ipspEspTranLastChanged The value of sysUpTime when this row was last modified or created either through SNMP SETs or by some other external means.	SNMPv2-TCTimeStamp Based On: SNMPv2-SMITimeTicks Description: The value of the sysUpTime object at which a specific occurrence happened. The specific occurrence must be defined in the description of any object defined using this type. If sysUpTime is reset t…	.1.3.6.1.2.1.153.1.26.1.10
ipspEspTranStorageType The storage type for this row. Rows in this table which were created through an external process may have a storage type of readOnly or permanent.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.2.1.153.1.26.1.11
ipspEspTranRowStatus This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. If active, this object must …	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.2.1.153.1.26.1.12