JUNIPER-IPSEC-FLOW-MON-MIB Table View

The IPsec Phase-1 Internet Key Exchange Tunnel Table.
There is one entry in this table for each active IPsec
Phase-1 IKE Tunnel.

The IKE Key Exchange Peer Address Table. There is one entry in this table
for each IKE peer with which the managed entity is currently associated.

The IKE Key Exchange Peer ID Table. There is one entry in this table
for each IKE peer with which the managed entity is currently associated.
In the index truncated value for Remote ID value, Local ID value and AAA
username is used to restrict the length of the SNMP index to a legal
size. In the index, for jnxIkePeerIdRemoteId and jnxIkePeerIdLocalId, any
string longer than 41 bytes will be truncated and only 41 bytes would be
considered. Similarly in the index, for jnxIkePeerIdAAAUserName, any
string longer than 25 bytes will be truncated and only 25 bytes would be
considered. Because of the truncation, the index may become same for
different peers, to keep the index unique, jnxIkePeerInternalIndex is
used to uniquely identify each peer.

The IKE Key Exchange Peer Stats Table. There is one entry in this table
for each IKE peer with which the managed entity is currently associated.

The Peer Association to active IKE SA - Correlation Table.
There is one entry in this table for each active IKE SA.

The Peer Association to IPSec Tunnel Correlation Table.
There is one entry in this table
for each active IPSec Tunnel.

The IPsec Phase-2 Tunnel Table.
There is one entry in this table for each active IPsec Phase-2 
Tunnel.  If the tunnel is terminated, then the entry is no longer 
available after the table has been refreshed.

The IPsec Phase-2 Security Association Table.
This table identifies the structure (in terms of
component SAs) of each active Phase-2 IPsec tunnel.
This table contains an entry for each active and
expiring security association and maps each entry
in the active Phase-2 tunnel table (ipSecTunTable)
into a number of entries in this table. 
          
SA contains the information negotiated by IKE. The SA 
is like a contract laying out the rules of the VPN 
connection for the duration of the SA. An SA is assigned 
a 32-bit number that, when used in conjunction with the 
destination IP address, uniquely identifies the SA. This 
number is called the Security Parameters Index or SPI.
          
IPSec SAs area unidirectional and they are unique in 
each security protocol. A set of SAs are needed for a 
protected data pipe, one per direction per protocol.