Standard view Table view

IPSEC-SPD-MIB

        This MIB module defines configuration objects for managing
IPsec Security Policies.  In general, this MIB can be
implemented anywhere IPsec security services exist (e.g.,
bump-in-the-wire, host, gateway, firewall, router, etc.).
        
Copyright (C) The IETF Trust (2007).  This version of
this MIB module is part of RFC 4807; see the RFC itself for
full legal notices.

Source file: IPSEC-SPD-MIB
Last revised: 7 Feb 2007, 00:00 UTC
Identity: spdMIB
Base OID: 1.3.6.1.2.1.153

Imported Objects

DIFFSERV-MIB	diffServMIBMultiFieldClfrGroup (no object page) diffServMultiFieldClfrNextFree IfDirection
IF-MIB	InterfaceIndex
INET-ADDRESS-MIB	InetAddress InetAddressType
SNMP-FRAMEWORK-MIB	SnmpAdminString
SNMPv2-CONF	MODULE-COMPLIANCE (no object page) NOTIFICATION-GROUP (no object page) OBJECT-GROUP (no object page)
SNMPv2-SMI	Integer32 mib-2 MODULE-IDENTITY (no object page) NOTIFICATION-TYPE (no object page) OBJECT-TYPE (no object page) Unsigned32
SNMPv2-TC	RowStatus StorageType TEXTUAL-CONVENTION (no object page) TimeStamp TruthValue VariablePointer

Net-SNMP examples using the rfc MIB directory Show commands

These commands use the standard Observium installation path and load the selected MIB variant before the RFC and Net-SNMP directories.

Translate the module identity

/usr/bin/snmptranslate -Pud -Ir -On -m 'IPSEC-SPD-MIB' -M '/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'IPSEC-SPD-MIB::spdMIB'

Walk the MIB subtree

/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'IPSEC-SPD-MIB' -M '/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'IPSEC-SPD-MIB::spdMIB'

How SNMP, Net-SNMP, MIB paths, and variants work

Objects (117)

spdMIB		`.1.3.6.1.2.1.153`
spdConfigObjects		`.1.3.6.1.2.1.153.1`
spdLocalConfigObjects		`.1.3.6.1.2.1.153.1.1`
spdIngressPolicyGroupName r/w	OctetString	`.1.3.6.1.2.1.153.1.1.1`
spdEgressPolicyGroupName r/w	OctetString	`.1.3.6.1.2.1.153.1.1.2`
spdIpsoHeaderFilterTable		`.1.3.6.1.2.1.153.1.10`
spdIpsoHeaderFilterEntry	spdIpsoHeadFiltName	`.1.3.6.1.2.1.153.1.10.1`
spdIpsoHeadFiltName	OctetString	`.1.3.6.1.2.1.153.1.10.1.1`
spdIpsoHeadFiltType r/w	Bits	`.1.3.6.1.2.1.153.1.10.1.2`
spdIpsoHeadFiltClassification r/w	Enumeration	`.1.3.6.1.2.1.153.1.10.1.3`
spdIpsoHeadFiltProtectionAuth r/w	Enumeration	`.1.3.6.1.2.1.153.1.10.1.4`
spdIpsoHeadFiltLastChanged	SNMPv2-TCTimeStamp	`.1.3.6.1.2.1.153.1.10.1.5`
spdIpsoHeadFiltStorageType r/w	SNMPv2-TCStorageType	`.1.3.6.1.2.1.153.1.10.1.6`
spdIpsoHeadFiltRowStatus r/w	SNMPv2-TCRowStatus	`.1.3.6.1.2.1.153.1.10.1.7`
spdCompoundActionTable		`.1.3.6.1.2.1.153.1.11`
spdCompoundActionEntry	spdCompActName	`.1.3.6.1.2.1.153.1.11.1`
spdCompActName	OctetString	`.1.3.6.1.2.1.153.1.11.1.1`
spdCompActExecutionStrategy r/w	Enumeration	`.1.3.6.1.2.1.153.1.11.1.2`
spdCompActLastChanged	SNMPv2-TCTimeStamp	`.1.3.6.1.2.1.153.1.11.1.3`
spdCompActStorageType r/w	SNMPv2-TCStorageType	`.1.3.6.1.2.1.153.1.11.1.4`
spdCompActRowStatus r/w	SNMPv2-TCRowStatus	`.1.3.6.1.2.1.153.1.11.1.5`
spdSubactionsTable		`.1.3.6.1.2.1.153.1.12`
spdSubactionsEntry	spdCompActNamespdSubActPriority	`.1.3.6.1.2.1.153.1.12.1`
spdSubActPriority	Integer32	`.1.3.6.1.2.1.153.1.12.1.1`
spdSubActSubActionName r/w	SNMPv2-TCVariablePointer	`.1.3.6.1.2.1.153.1.12.1.2`
spdSubActLastChanged	SNMPv2-TCTimeStamp	`.1.3.6.1.2.1.153.1.12.1.3`
spdSubActStorageType r/w	SNMPv2-TCStorageType	`.1.3.6.1.2.1.153.1.12.1.4`
spdSubActRowStatus r/w	SNMPv2-TCRowStatus	`.1.3.6.1.2.1.153.1.12.1.5`
spdStaticActions		`.1.3.6.1.2.1.153.1.13`
spdDropAction	Integer32	`.1.3.6.1.2.1.153.1.13.1`
spdDropActionLog	Integer32	`.1.3.6.1.2.1.153.1.13.2`
spdAcceptAction	Integer32	`.1.3.6.1.2.1.153.1.13.3`
spdAcceptActionLog	Integer32	`.1.3.6.1.2.1.153.1.13.4`
spdEndpointToGroupTable		`.1.3.6.1.2.1.153.1.2`
spdEndpointToGroupEntry	spdEndGroupDirectionspdEndGroupInterface	`.1.3.6.1.2.1.153.1.2.1`
spdEndGroupDirection	DIFFSERV-MIBIfDirection	`.1.3.6.1.2.1.153.1.2.1.1`
spdEndGroupInterface	IF-MIBInterfaceIndex	`.1.3.6.1.2.1.153.1.2.1.2`
spdEndGroupName r/w	OctetString	`.1.3.6.1.2.1.153.1.2.1.3`
spdEndGroupLastChanged	SNMPv2-TCTimeStamp	`.1.3.6.1.2.1.153.1.2.1.4`
spdEndGroupStorageType r/w	SNMPv2-TCStorageType	`.1.3.6.1.2.1.153.1.2.1.5`
spdEndGroupRowStatus r/w	SNMPv2-TCRowStatus	`.1.3.6.1.2.1.153.1.2.1.6`
spdGroupContentsTable		`.1.3.6.1.2.1.153.1.3`
spdGroupContentsEntry	spdGroupContNamespdGroupContPriority	`.1.3.6.1.2.1.153.1.3.1`
spdGroupContName	OctetString	`.1.3.6.1.2.1.153.1.3.1.1`
spdGroupContPriority	Integer32	`.1.3.6.1.2.1.153.1.3.1.2`
spdGroupContFilter r/w	SNMPv2-TCVariablePointer	`.1.3.6.1.2.1.153.1.3.1.3`
spdGroupContComponentType r/w	Enumeration	`.1.3.6.1.2.1.153.1.3.1.4`
spdGroupContComponentName r/w	OctetString	`.1.3.6.1.2.1.153.1.3.1.5`
spdGroupContLastChanged	SNMPv2-TCTimeStamp	`.1.3.6.1.2.1.153.1.3.1.6`
spdGroupContStorageType r/w	SNMPv2-TCStorageType	`.1.3.6.1.2.1.153.1.3.1.7`
spdGroupContRowStatus r/w	SNMPv2-TCRowStatus	`.1.3.6.1.2.1.153.1.3.1.8`
spdRuleDefinitionTable		`.1.3.6.1.2.1.153.1.4`
spdRuleDefinitionEntry	spdRuleDefName	`.1.3.6.1.2.1.153.1.4.1`
spdRuleDefName	OctetString	`.1.3.6.1.2.1.153.1.4.1.1`
spdRuleDefDescription r/w	SNMP-FRAMEWORK-MIBSnmpAdminString	`.1.3.6.1.2.1.153.1.4.1.2`
spdRuleDefFilter r/w	SNMPv2-TCVariablePointer	`.1.3.6.1.2.1.153.1.4.1.3`
spdRuleDefFilterNegated r/w	SNMPv2-TCTruthValue	`.1.3.6.1.2.1.153.1.4.1.4`
spdRuleDefAction r/w	SNMPv2-TCVariablePointer	`.1.3.6.1.2.1.153.1.4.1.5`
spdRuleDefAdminStatus r/w	SpdAdminStatus	`.1.3.6.1.2.1.153.1.4.1.6`
spdRuleDefLastChanged	SNMPv2-TCTimeStamp	`.1.3.6.1.2.1.153.1.4.1.7`
spdRuleDefStorageType r/w	SNMPv2-TCStorageType	`.1.3.6.1.2.1.153.1.4.1.8`
spdRuleDefRowStatus r/w	SNMPv2-TCRowStatus	`.1.3.6.1.2.1.153.1.4.1.9`
spdCompoundFilterTable		`.1.3.6.1.2.1.153.1.5`
spdCompoundFilterEntry	spdCompFiltName	`.1.3.6.1.2.1.153.1.5.1`
spdCompFiltName	OctetString	`.1.3.6.1.2.1.153.1.5.1.1`
spdCompFiltDescription r/w	SNMP-FRAMEWORK-MIBSnmpAdminString	`.1.3.6.1.2.1.153.1.5.1.2`
spdCompFiltLogicType r/w	SpdBooleanOperator	`.1.3.6.1.2.1.153.1.5.1.3`
spdCompFiltLastChanged	SNMPv2-TCTimeStamp	`.1.3.6.1.2.1.153.1.5.1.4`
spdCompFiltStorageType r/w	SNMPv2-TCStorageType	`.1.3.6.1.2.1.153.1.5.1.5`
spdCompFiltRowStatus r/w	SNMPv2-TCRowStatus	`.1.3.6.1.2.1.153.1.5.1.6`
spdSubfiltersTable		`.1.3.6.1.2.1.153.1.6`
spdSubfiltersEntry	spdCompFiltNamespdSubFiltPriority	`.1.3.6.1.2.1.153.1.6.1`
spdSubFiltPriority	Integer32	`.1.3.6.1.2.1.153.1.6.1.1`
spdSubFiltSubfilter r/w	SNMPv2-TCVariablePointer	`.1.3.6.1.2.1.153.1.6.1.2`
spdSubFiltSubfilterIsNegated r/w	SNMPv2-TCTruthValue	`.1.3.6.1.2.1.153.1.6.1.3`
spdSubFiltLastChanged	SNMPv2-TCTimeStamp	`.1.3.6.1.2.1.153.1.6.1.4`
spdSubFiltStorageType r/w	SNMPv2-TCStorageType	`.1.3.6.1.2.1.153.1.6.1.5`
spdSubFiltRowStatus r/w	SNMPv2-TCRowStatus	`.1.3.6.1.2.1.153.1.6.1.6`
spdStaticFilters		`.1.3.6.1.2.1.153.1.7`
spdTrueFilter	Integer32	`.1.3.6.1.2.1.153.1.7.1`
spdTrueFilterInstance		`.1.3.6.1.2.1.153.1.7.1.0`
spdIpOffsetFilterTable		`.1.3.6.1.2.1.153.1.8`
spdIpOffsetFilterEntry	spdIpOffFiltName	`.1.3.6.1.2.1.153.1.8.1`
spdIpOffFiltName	OctetString	`.1.3.6.1.2.1.153.1.8.1.1`
spdIpOffFiltOffset r/w	Unsigned32	`.1.3.6.1.2.1.153.1.8.1.2`
spdIpOffFiltType r/w	Enumeration	`.1.3.6.1.2.1.153.1.8.1.3`
spdIpOffFiltValue r/w	OctetString	`.1.3.6.1.2.1.153.1.8.1.4`
spdIpOffFiltLastChanged	SNMPv2-TCTimeStamp	`.1.3.6.1.2.1.153.1.8.1.5`
spdIpOffFiltStorageType r/w	SNMPv2-TCStorageType	`.1.3.6.1.2.1.153.1.8.1.6`
spdIpOffFiltRowStatus r/w	SNMPv2-TCRowStatus	`.1.3.6.1.2.1.153.1.8.1.7`
spdTimeFilterTable		`.1.3.6.1.2.1.153.1.9`
spdTimeFilterEntry	spdTimeFiltName	`.1.3.6.1.2.1.153.1.9.1`
spdTimeFiltName	OctetString	`.1.3.6.1.2.1.153.1.9.1.1`
spdTimeFiltPeriod r/w	SpdTimePeriod	`.1.3.6.1.2.1.153.1.9.1.2`
spdTimeFiltMonthOfYearMask r/w	Bits	`.1.3.6.1.2.1.153.1.9.1.3`
spdTimeFiltDayOfMonthMask r/w	OctetString	`.1.3.6.1.2.1.153.1.9.1.4`
spdTimeFiltDayOfWeekMask r/w	Bits	`.1.3.6.1.2.1.153.1.9.1.5`
spdTimeFiltTimeOfDayMask r/w	SpdTimePeriod	`.1.3.6.1.2.1.153.1.9.1.6`
spdTimeFiltLastChanged	SNMPv2-TCTimeStamp	`.1.3.6.1.2.1.153.1.9.1.7`
spdTimeFiltStorageType r/w	SNMPv2-TCStorageType	`.1.3.6.1.2.1.153.1.9.1.8`
spdTimeFiltRowStatus r/w	SNMPv2-TCRowStatus	`.1.3.6.1.2.1.153.1.9.1.9`
spdNotificationObjects		`.1.3.6.1.2.1.153.2`
spdNotifications		`.1.3.6.1.2.1.153.2.0`
spdNotificationVariables		`.1.3.6.1.2.1.153.2.1`
spdActionExecuted	SNMPv2-TCVariablePointer	`.1.3.6.1.2.1.153.2.1.1`
spdIPEndpointAddType	INET-ADDRESS-MIBInetAddressType	`.1.3.6.1.2.1.153.2.1.2`
spdIPEndpointAddress	INET-ADDRESS-MIBInetAddress	`.1.3.6.1.2.1.153.2.1.3`
spdIPSourceType	INET-ADDRESS-MIBInetAddressType	`.1.3.6.1.2.1.153.2.1.4`
spdIPSourceAddress	INET-ADDRESS-MIBInetAddress	`.1.3.6.1.2.1.153.2.1.5`
spdIPDestinationType	INET-ADDRESS-MIBInetAddressType	`.1.3.6.1.2.1.153.2.1.6`
spdIPDestinationAddress	INET-ADDRESS-MIBInetAddress	`.1.3.6.1.2.1.153.2.1.7`
spdPacketDirection	DIFFSERV-MIBIfDirection	`.1.3.6.1.2.1.153.2.1.8`
spdPacketPart	OctetString	`.1.3.6.1.2.1.153.2.1.9`
spdConformanceObjects		`.1.3.6.1.2.1.153.3`
spdCompliances		`.1.3.6.1.2.1.153.3.1`
spdGroups		`.1.3.6.1.2.1.153.3.2`
spdActions		`.1.3.6.1.2.1.153.4`

Dependencies (11) 7 direct · 4 transitive Show tree and compile order Hide dependency details

Each imported module is resolved in the importing module's source directory first, then through the normal default-variant rules.

Dependency tree

IPSEC-SPD-MIBrfcselected
- DIFFSERV-MIBrfc3 symbols
  - DIFFSERV-DSCP-TCrfc2 symbols
    - SNMPv2-SMIrfc3 symbols
    - SNMPv2-TCrfc1 symbol
      - SNMPv2-SMIrfcshared1 symbol
  - IF-MIBrfc3 symbols
    - IANAifType-MIBrfc1 symbol
      - SNMPv2-SMIrfcshared2 symbols
      - SNMPv2-TCrfcshared1 symbol
    - SNMPv2-CONFrfc3 symbols
      - SNMPv2-SMIrfcshared3 symbols
    - SNMPv2-MIBrfc1 symbol
      - SNMPv2-CONFrfcshared3 symbols
      - SNMPv2-SMIrfcshared7 symbols
      - SNMPv2-TCrfcshared3 symbols
    - SNMPv2-SMIrfcshared9 symbols
    - SNMPv2-TCrfcshared8 symbols
  - INET-ADDRESS-MIBrfc4 symbols
    - SNMPv2-SMIrfcshared3 symbols
    - SNMPv2-TCrfcshared1 symbol
  - INTEGRATED-SERVICES-MIBrfc1 symbol
    - IF-MIBrfcshared2 symbols
    - SNMPv2-CONFrfcshared2 symbols
    - SNMPv2-SMIrfcshared6 symbols
    - SNMPv2-TCrfcshared4 symbols
  - SNMPv2-CONFrfcshared2 symbols
  - SNMPv2-SMIrfcshared7 symbols
  - SNMPv2-TCrfcshared5 symbols
- IF-MIBrfcshared1 symbol
- INET-ADDRESS-MIBrfcshared2 symbols
- SNMP-FRAMEWORK-MIBrfc1 symbol
  - SNMPv2-CONFrfcshared2 symbols
  - SNMPv2-SMIrfcshared4 symbols
  - SNMPv2-TCrfcshared1 symbol
- SNMPv2-CONFrfcshared3 symbols
- SNMPv2-SMIrfcshared6 symbols
- SNMPv2-TCrfcshared6 symbols

Dependency-first compile order

Type Definitions (4)

SpdAdminStatus	Enumeration	`enabled(1)` `disabled(2)`
SpdBooleanOperator	Enumeration	`or(1)` `and(2)`
SpdIPPacketLogging	Integer32	`range: -1..65535`
SpdTimePeriod	OctetString	`range: 0..31`

Conformance Groups (13)

spdEndpointGroup	spdEndGroupName spdEndGroupLastChanged spdEndGroupStorageType spdEndGroupRowStatus This group is made up of objects from the IPsec Policy Endpoint Table.	`.1.3.6.1.2.1.153.3.2.1`
spdGroupContentsGroup	spdGroupContComponentType spdGroupContFilter spdGroupContComponentName spdGroupContLastChanged spdGroupContStorageType spdGroupContRowStatus This group is made up of objects from the IPsec Policy Group Contents Table.	`.1.3.6.1.2.1.153.3.2.2`
spdIpsecSystemPolicyNameGroup	spdIngressPolicyGroupName spdEgressPolicyGroupName This group is made up of objects represent the System Policy Group Names.	`.1.3.6.1.2.1.153.3.2.3`
spdRuleDefinitionGroup	spdRuleDefDescription spdRuleDefFilter spdRuleDefFilterNegated spdRuleDefAction spdRuleDefAdminStatus spdRuleDefLastChanged spdRuleDefStorageType spdRuleDefRowStatus This group is made up of objects from the IPsec Policy Rule Definition Table.	`.1.3.6.1.2.1.153.3.2.4`
spdCompoundFilterGroup	spdCompFiltDescription spdCompFiltLogicType spdCompFiltLastChanged spdCompFiltStorageType spdCompFiltRowStatus spdSubFiltSubfilter spdSubFiltSubfilterIsNegated spdSubFiltLastChanged spdSubFiltStorageType spdSubFiltRowStatus This group is made up of objects from the IPsec Policy Compound Filter Table and Sub-Filter Table Group.	`.1.3.6.1.2.1.153.3.2.5`
spdStaticFilterGroup	spdTrueFilter The static filter group. Currently this is just a true filter.	`.1.3.6.1.2.1.153.3.2.6`
spdIPOffsetFilterGroup	spdIpOffFiltOffset spdIpOffFiltType spdIpOffFiltValue spdIpOffFiltLastChanged spdIpOffFiltStorageType spdIpOffFiltRowStatus This group is made up of objects from the IPsec Policy IP Offset Filter Table.	`.1.3.6.1.2.1.153.3.2.7`
spdTimeFilterGroup	spdTimeFiltPeriod spdTimeFiltMonthOfYearMask spdTimeFiltDayOfMonthMask spdTimeFiltDayOfWeekMask spdTimeFiltTimeOfDayMask spdTimeFiltLastChanged spdTimeFiltStorageType spdTimeFiltRowStatus This group is made up of objects from the IPsec Policy Time Filter Table.	`.1.3.6.1.2.1.153.3.2.8`
spdIpsoHeaderFilterGroup	spdIpsoHeadFiltType spdIpsoHeadFiltClassification spdIpsoHeadFiltProtectionAuth spdIpsoHeadFiltLastChanged spdIpsoHeadFiltStorageType spdIpsoHeadFiltRowStatus This group is made up of objects from the IPsec Policy IPSO Header Filter Table.	`.1.3.6.1.2.1.153.3.2.9`
spdStaticActionGroup	spdDropAction spdAcceptAction spdDropActionLog spdAcceptActionLog This group is made up of objects from the IPsec Policy Static Actions.	`.1.3.6.1.2.1.153.3.2.10`
spdCompoundActionGroup	spdCompActExecutionStrategy spdCompActLastChanged spdCompActStorageType spdCompActRowStatus spdSubActSubActionName spdSubActLastChanged spdSubActStorageType spdSubActRowStatus The IPsec Policy Compound Action Table and Actions In Compound Action Table Group.	`.1.3.6.1.2.1.153.3.2.11`
spdActionLoggingObjectGroup	spdActionExecuted spdIPEndpointAddType spdIPEndpointAddress spdIPSourceType spdIPSourceAddress spdIPDestinationType spdIPDestinationAddress spdPacketDirection spdPacketPart This group is made up of all the Notification objects for this MIB.	`.1.3.6.1.2.1.153.3.2.12`
spdActionNotificationGroup	spdActionNotification spdPacketNotification This group is made up of all the Notifications for this MIB.	`.1.3.6.1.2.1.153.3.2.13`

Compliance Statements (3)

OID .1.3.6.1.2.1.153.3.1.1

The compliance statement for SNMP entities that include
an IPsec MIB implementation with Endpoint, Rules, and
filters support.

When this MIB is implemented with support for read-create,
then such an implementation can claim full compliance. Such
devices can then be both monitored and configured with this
MIB.

Required groups

mandatory	spdEndpointGroup
mandatory	spdGroupContentsGroup
mandatory	spdRuleDefinitionGroup
mandatory	spdStaticFilterGroup
mandatory	spdStaticActionGroup
mandatory	DIFFSERV-MIB::diffServMIBMultiFieldClfrGroup
optional	spdIpsecSystemPolicyNameGroup	This group is mandatory for IPsec Policy implementations that support a system policy group name.
optional	spdCompoundFilterGroup	This group is mandatory for IPsec Policy implementations that support compound filters.
optional	spdIPOffsetFilterGroup	This group is mandatory for IPsec Policy implementations that support IP Offset filters. In general, this SHOULD be supported by a compliant IPsec Policy implementation.
optional	spdTimeFilterGroup	This group is mandatory for IPsec Policy implementations that support time filters.
optional	spdIpsoHeaderFilterGroup	This group is mandatory for IPsec Policy implementations that support IPSO Header filters.
optional	spdCompoundActionGroup	This group is mandatory for IPsec Policy implementations that support compound actions.

Object refinements

Object	Access	Syntax	Description
spdEndGroupLastChanged	noaccess		This object not required for compliance.
spdGroupContComponentType		Enumeration rule(2)	Support of the value group(1) is only required for implementations that support Policy Groups within Policy Groups.
spdGroupContLastChanged	noaccess		This object not required for compliance.
spdRuleDefLastChanged	noaccess		This object not required for compliance.
spdCompFiltLastChanged	noaccess		This object not required for compliance.
spdSubFiltLastChanged	noaccess		This object not required for compliance.
spdIpOffFiltLastChanged	noaccess		This object not required for compliance.
spdTimeFiltLastChanged	noaccess		This object not required for compliance.
spdIpsoHeadFiltLastChanged	noaccess		This object not required for compliance.
spdCompActLastChanged	noaccess		This object not required for compliance.
spdSubActLastChanged	noaccess		This object not required for compliance.
DIFFSERV-MIBdiffServMultiFieldClfrNextFree	noaccess		This object is not required for compliance.

OID .1.3.6.1.2.1.153.3.1.2

The compliance statement for SNMP entities that support
sending notifications when actions are invoked.

Required groups

mandatory	spdActionLoggingObjectGroup
mandatory	spdActionNotificationGroup

OID .1.3.6.1.2.1.153.3.1.3

The compliance statement for SNMP entities that include
an IPsec MIB implementation with Endpoint, Rules, and
filters support.

If this MIB is implemented without support for read-create
(i.e., in read-only), it is not in full compliance, but it
can claim read-only compliance. Such a device can then be
monitored, but cannot be configured with this MIB.

Required groups

mandatory	spdEndpointGroup
mandatory	spdGroupContentsGroup
mandatory	spdRuleDefinitionGroup
mandatory	spdStaticFilterGroup
mandatory	spdStaticActionGroup
mandatory	DIFFSERV-MIB::diffServMIBMultiFieldClfrGroup
optional	spdIpsecSystemPolicyNameGroup	This group is mandatory for IPsec Policy implementations that support a system policy group name.
optional	spdCompoundFilterGroup	This group is mandatory for IPsec Policy implementations that support compound filters.
optional	spdIPOffsetFilterGroup	This group is mandatory for IPsec Policy implementations that support IP Offset filters. In general, this SHOULD be supported by a compliant IPsec Policy implementation.
optional	spdTimeFilterGroup	This group is mandatory for IPsec Policy implementations that support time filters.
optional	spdIpsoHeaderFilterGroup	This group is mandatory for IPsec Policy implementations that support IPSO Header filters.
optional	spdCompoundActionGroup	This group is mandatory for IPsec Policy implementations that support compound actions.

Object refinements

Object	Access	Description
spdCompActExecutionStrategy	readonly	Write access is not required.
spdCompActLastChanged		This object is not required for compliance.
spdCompActRowStatus	readonly	Write access is not required.
spdCompActStorageType	readonly	Write access is not required.
spdCompFiltDescription	readonly	Write access is not required.
spdCompFiltLastChanged		This object is not required for compliance.
spdCompFiltLogicType	readonly	Write access is not required.
spdCompFiltRowStatus	readonly	Write access is not required.
spdCompFiltStorageType	readonly	Write access is not required.
spdEgressPolicyGroupName	readonly	Write access is not required.
spdEndGroupLastChanged		This object is not required for compliance.
spdEndGroupName	readonly	Write access is not required.
spdEndGroupRowStatus	readonly	Write access is not required.
spdEndGroupStorageType	readonly	Write access is not required.
spdGroupContComponentName	readonly	Write access is not required.
spdGroupContComponentType	readonly	Write access is not required.
spdGroupContFilter	readonly	Write access is not required.
spdGroupContLastChanged		This object is not required for compliance.
spdGroupContRowStatus	readonly	Write access is not required.
spdGroupContStorageType	readonly	Write access is not required.
spdIngressPolicyGroupName	readonly	Write access is not required.
spdIpOffFiltLastChanged		This object is not required for compliance.
spdIpOffFiltOffset	readonly	Write access is not required.
spdIpOffFiltRowStatus	readonly	Write access is not required.
spdIpOffFiltStorageType	readonly	Write access is not required.
spdIpOffFiltType	readonly	Write access is not required.
spdIpOffFiltValue	readonly	Write access is not required.
spdIpsoHeadFiltClassification	readonly	Write access is not required.
spdIpsoHeadFiltLastChanged		This object is not required for compliance.
spdIpsoHeadFiltProtectionAuth	readonly	Write access is not required.
spdIpsoHeadFiltRowStatus	readonly	Write access is not required.
spdIpsoHeadFiltStorageType	readonly	Write access is not required.
spdIpsoHeadFiltType	readonly	Write access is not required.
spdRuleDefAction	readonly	Write access is not required.
spdRuleDefAdminStatus	readonly	Write access is not required.
spdRuleDefDescription	readonly	Write access is not required.
spdRuleDefFilter	readonly	Write access is not required.
spdRuleDefFilterNegated	readonly	Write access is not required.
spdRuleDefLastChanged		This object is not required for compliance.
spdRuleDefRowStatus	readonly	Write access is not required.
spdRuleDefStorageType	readonly	Write access is not required.
spdSubActLastChanged		This object is not required for compliance.
spdSubActRowStatus	readonly	Write access is not required.
spdSubActStorageType	readonly	Write access is not required.
spdSubActSubActionName	readonly	Write access is not required.
spdSubFiltLastChanged		This object is not required for compliance.
spdSubFiltRowStatus	readonly	Write access is not required.
spdSubFiltStorageType	readonly	Write access is not required.
spdSubFiltSubfilter	readonly	Write access is not required.
spdSubFiltSubfilterIsNegated	readonly	Write access is not required.
spdTimeFiltDayOfMonthMask	readonly	Write access is not required.
spdTimeFiltDayOfWeekMask	readonly	Write access is not required.
spdTimeFiltLastChanged		This object is not required for compliance.
spdTimeFiltMonthOfYearMask	readonly	Write access is not required.
spdTimeFiltPeriod	readonly	Write access is not required.
spdTimeFiltRowStatus	readonly	Write access is not required.
spdTimeFiltTimeOfDayMask	readonly	Write access is not required.
spdTimeFiltStorageType	readonly	Write access is not required.

Notifications / Traps (2)

Name	OID	Description
spdActionNotification spdActionExecuted spdIPEndpointAddType spdIPEndpointAddress spdIPSourceType spdIPSourceAddress spdIPDestinationType spdIPDestinationAddress spdPacketDirection	`.1.3.6.1.2.1.153.2.0.1`	Notification that an action was executed by a rule. Only actions with logging enabled will result in this notification getting sent. The object includes the spdActionExecuted object, which will indicate which action was executed within the scope of the rule. Additionally, the spdIPSourceType, spdIPSourceAddress, spdIPDestinationType, and spdIPDestinationAddress objects are included to indicate the packet source and destination of the packet that triggered the action. Finally, the spdIPEndpointAddType, spdIPEndpointAddress, and spdPacketDirection objects indicate which interface the executed action was associated with, and if the packet was ingress or egress through the endpoint. A spdActionNotification SHOULD be limited to a maximum of one notification sent per minute for any action notifications that do not have any other configuration controlling their send rate. Note that compound actions with multiple executed sub-actions may result in multiple notifications being sent from a single rule execution.
spdPacketNotification spdActionExecuted spdIPEndpointAddType spdIPEndpointAddress spdIPSourceType spdIPSourceAddress spdIPDestinationType spdIPDestinationAddress spdPacketDirection spdPacketPart	`.1.3.6.1.2.1.153.2.0.2`	Notification that a packet passed through a Security Association (SA). Only SAs created by actions with packet logging enabled will result in this notification getting sent. The objects sent MUST include the spdActionExecuted, which will indicate which action was executed within the scope of the rule. Additionally, the spdIPSourceType, spdIPSourceAddress, spdIPDestinationType, and spdIPDestinationAddress objects MUST be included to indicate the packet source and destination of the packet that triggered the action. The spdIPEndpointAddType, spdIPEndpointAddress, and spdPacketDirection objects are included to indicate which endpoint the packet was associated with. Finally, spdPacketPart is included to enable sending a variable sized part of the front of the packet with the size dependent on the value of the object of TC syntax 'SpdIPPacketLogging', which indicated that logging should be done. A spdPacketNotification SHOULD be limited to a maximum of one notification sent per minute for any action notifications that do not have any other configuration controlling their send rate. An action notification SHOULD be limited to a maximum of one notification sent per minute for any action notifications that do not have any other configuration controlling their send rate.

IPSEC-SPD-MIB

Imported Objects

Objects (117)

Dependency tree

Dependency-first compile order

Type Definitions (4)

Conformance Groups (13)

Compliance Statements (3)

spdRuleFilterFullCompliance

spdLoggingCompliance

spdRuleFilterReadOnlyCompliance

Notifications / Traps (2)