MAIPU-SECURITY-IPSEC-MIB Table View

The table contains all the crypto tunnels using IKE negotiation, which is configured by the operator.

ikeTunnelEntry row .1.3.6.1.4.1.5651.5.3.1.1.1.1

Each entry contains the attributes associated with one crypto tunnel.

Indexes

ikeTunnelName

Column	Syntax	OID
ikeTunnelName This object defines the name of one crypto tunnel.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.1.1.1
ikeTunnelPeerAddr This object defines the IP address of the peer used by a crypto tunnel.	SNMPv2-SMIIpAddressr/w Type Constraints: range: 4	.1.3.6.1.4.1.5651.5.3.1.1.1.1.2
ikeTunnelPeerName This object defines the hostname of the peer used by a crypto tunnel.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.1.1.3
ikeTunnelLocalAddr This object defines the local IP address used by a crypto tunnel.	SNMPv2-SMIIpAddressr/w Type Constraints: range: 4	.1.3.6.1.4.1.5651.5.3.1.1.1.1.4
ikeTunnelLocalIfName This object defines the local interface name used by a crypto tunnel.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.1.1.5
ikeTunnelPeerIdType This object defines the peer's id used by a crypto tunnel.	Enumerationr/w Enumerated Values: 1 id_ALIAS 2 id_GROUP 3 id_OTHER	.1.3.6.1.4.1.5651.5.3.1.1.1.1.6
ikeTunnelPeerID This object defines the peer's id used by a crypto tunnel.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.1.1.7
ikeTunnelLocalID This object defines the local id used by a crypto tunnel.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.1.1.8
ikeTunnelShareLimit This object defines the maximum number of the connections sharing this crypto tunnel.	Integer32r/w Constraints: range: 0-100000	.1.3.6.1.4.1.5651.5.3.1.1.1.1.9
ikeTunnelSecDomain This object defines the name of the virtual security domain used by a crypto tunnel.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.1.1.10
ikeTunnelPhaseOneMode This object defines the exchange mode used in IKE phase one negotiation.	Enumerationr/w Enumerated Values: 1 mainMode 2 aggressiveMode	.1.3.6.1.4.1.5651.5.3.1.1.1.1.11
ikeTunnelNATActiveTime This object defines the period for keeping alive when carrying ong NAT traversal.	Integer32r/w Constraints: range: 10-3600	.1.3.6.1.4.1.5651.5.3.1.1.1.1.12
ikeTunnelAuthMeans This object defines the authentication mode used in IKE phase one negotiation.	Enumerationr/w Enumerated Values: 1 preSharedKey 2 rsaSignature	.1.3.6.1.4.1.5651.5.3.1.1.1.1.13
ikeTunnelDPDPeriod This object defines the period for sending DPD message.	Integer32r/w Constraints: range: 10-3600	.1.3.6.1.4.1.5651.5.3.1.1.1.1.14
ikeTunnelDPDRetry This object defines the times for trying to detect if the peer is alive using the DPD message.	Integer32r/w Constraints: range: 2-100	.1.3.6.1.4.1.5651.5.3.1.1.1.1.15
ikeTunnelDPDAction This object defines the action will be executed when finding peer is dead using the DPD message. Note: none means no DPD.	Enumerationr/w Enumerated Values: 1 hold 2 clear 3 none	.1.3.6.1.4.1.5651.5.3.1.1.1.1.16
ikeTunnelSecLevel This object defines the security level used by this tunnel in negotiation.	Enumerationr/w Enumerated Values: 1 basic 2 standard 3 high	.1.3.6.1.4.1.5651.5.3.1.1.1.1.17
ikeTunnelIKEProp1 This object defines the IKE proposal used by the tunnel in negotiation.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.1.1.18
ikeTunnelIKEProp2 This object defines the IKE proposal used by the tunnel in negotiation.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.1.1.19
ikeTunnelIKEProp3 This object defines the IKE proposal used by the tunnel in negotiation.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.1.1.20
ikeTunnelIKEProp4 This object defines the IKE proposal used by the tunnel in negotiation.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.1.1.21
ikeTunnelIPsecProp1 This object defines the IPsec proposal used by the tunnel in negotiation.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.1.1.22
ikeTunnelIPsecProp2 This object defines the IPsec proposal used by the tunnel in negotiation.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.1.1.23
ikeTunnelIPsecProp3 This object defines the IPsec proposal used by the tunnel in negotiation.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.1.1.24
ikeTunnelIPsecProp4 This object defines the IPsec proposal used by the tunnel in negotiation.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.1.1.25
ikeTunnelIdleTime This object defines the idle time of the IPsec SAs constructed by the tunnel.	Integer32r/w Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.5651.5.3.1.1.1.1.26
ikeTunnelAutoUp This object defines whether IPsec SAs should have beening constructed by the tunnel right now or not.	Enumerationr/w Enumerated Values: 1 enable 2 disable	.1.3.6.1.4.1.5651.5.3.1.1.1.1.27
ikeTunnelType This object defines the type of the tunnel.	Enumeration Enumerated Values: 1 permanent 2 template 3 instance	.1.3.6.1.4.1.5651.5.3.1.1.1.1.28
ikeTunnelDHCPoIPsec This object defines whether the tunnel can support the function DHCP over IPsec or not.	Enumerationr/w Enumerated Values: 1 enable 2 disable	.1.3.6.1.4.1.5651.5.3.1.1.1.1.29
ikeTunnelParentName This object defines the parent tunnel name of instance tunnel.	OctetString	.1.3.6.1.4.1.5651.5.3.1.1.1.1.30
ikeTunnelSetNMS This object defines the init-server property.	Enumerationr/w Enumerated Values: 1 true 2 false	.1.3.6.1.4.1.5651.5.3.1.1.1.1.31
ikeTunnelAdmin This object defines the administrative property.	Enumerationr/w Enumerated Values: 1 true 2 false	.1.3.6.1.4.1.5651.5.3.1.1.1.1.32
ikeTunnelStatus The object defines the status of the table entry.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.5651.5.3.1.1.1.1.33

The table contains all the manual crypto tunnels configured by the operator.

manTunnelEntry row .1.3.6.1.4.1.5651.5.3.1.1.2.1

Each entry contains the attributes associated with one manual crypto tunnel.

Indexes

manTunnelName

Column	Syntax	OID
manTunnelName This object defines the name of one manual crypto tunnel.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.2.1.1
manTunnelPeerAddr This object defines the IP address of the peer used by a crypto tunnel.	SNMPv2-SMIIpAddressr/w Type Constraints: range: 4	.1.3.6.1.4.1.5651.5.3.1.1.2.1.2
manTunnelInAHSPI This object defines the SPI of the inbound SA on protocol AH. Note: 255 means no AH.	Integer32r/w Constraints: range: 255-511	.1.3.6.1.4.1.5651.5.3.1.1.2.1.3
manTunnelInAHKey This object defines the key used by the inbound SA on protocol AH.	OctetStringr/w Constraints: range: 16-254	.1.3.6.1.4.1.5651.5.3.1.1.2.1.4
manTunnelInESPSPI This object defines the SPI of the inbound SA on protocol ESP. Note: 255 means no ESP.	Integer32r/w Constraints: range: 255-511	.1.3.6.1.4.1.5651.5.3.1.1.2.1.5
manTunnelInESPAuthKey This object defines the key used by the inbound SA about authentication algorithm on protocol ESP.	OctetStringr/w Constraints: range: 16-254	.1.3.6.1.4.1.5651.5.3.1.1.2.1.6
manTunnelInESPCiperKey This object defines the key used by the inbound SA about encryption algorithm on protocol ESP.	OctetStringr/w Constraints: range: 16-254	.1.3.6.1.4.1.5651.5.3.1.1.2.1.7
manTunnelOutAHSPI This object defines the SPI of the outbound SA on protocol AH. Note: 255 means no AH.	Integer32r/w Constraints: range: 255-511	.1.3.6.1.4.1.5651.5.3.1.1.2.1.8
manTunnelOutAHKey This object defines the key used by the outbound SA on protocol AH.	OctetStringr/w Constraints: range: 16-254	.1.3.6.1.4.1.5651.5.3.1.1.2.1.9
manTunnelOutESPSPI This object defines the SPI of the outbound SA on protocol ESP. Note: 255 means no ESP.	Integer32r/w Constraints: range: 255-511	.1.3.6.1.4.1.5651.5.3.1.1.2.1.10
manTunnelOutESPAuthKey This object defines the key used by the outbound SA about authentication algorithm on protocol ESP.	OctetStringr/w Constraints: range: 16-254	.1.3.6.1.4.1.5651.5.3.1.1.2.1.11
manTunnelOutESPCiperKey This object defines the key used by the outbound SA about encryption algorithm on protocol ESP.	OctetStringr/w Constraints: range: 16-254	.1.3.6.1.4.1.5651.5.3.1.1.2.1.12
manTunnelInCPI This object defines the CPI of the inbound SA on protocol IPComp. Note: 255 means no IPComp.	Integer32r/w Constraints: range: 255-511	.1.3.6.1.4.1.5651.5.3.1.1.2.1.13
manTunnelOutCPI This object defines the CPI of the outbound SA on protocol IPComp. Note: 255 means no IPComp.	Integer32r/w Constraints: range: 255-511	.1.3.6.1.4.1.5651.5.3.1.1.2.1.14
manTunnelIPsecProp This object defines the IPsec proposal used by the tunnel for constructing IPsec SAs.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.2.1.15
manTunnelLocalIfName This object defines the local interface name used by a crypto tunnel.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.2.1.16
manTunnelStatus The object defines the status of the table entry.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.5651.5.3.1.1.2.1.17

The table contains all the IKE proposals configured by the operator.

ikePropEntry row .1.3.6.1.4.1.5651.5.3.1.1.3.1

Each entry contains the attributes associated with one IKE proposal.

Indexes

ikePropName

Column	Syntax	OID
ikePropName This object defines the name of one IKE proposal.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.3.1.1
ikePropEncyptoAlg This object defines the encryption algorithm for one IKE proposal.	Enumerationr/w Enumerated Values: 1 trides 2 des 3 aes128 4 aes192 5 aes256 6 blowfish 7 cast	.1.3.6.1.4.1.5651.5.3.1.1.3.1.2
ikePropAuthAlg This object defines the authentication algorithm for one IKE proposal.	Enumerationr/w Enumerated Values: 1 md5 2 sha1 3 sha256 4 sha512	.1.3.6.1.4.1.5651.5.3.1.1.3.1.3
ikePropDHGroup This object defines the DH groupware for one IKE proposal.	Enumerationr/w Enumerated Values: 1 group1 2 group2 3 group5 4 group14 5 group15 6 group16 7 group17 8 group18	.1.3.6.1.4.1.5651.5.3.1.1.3.1.4
ikePropLifetime This object defines the lifetime for one IKE proposal.	Integer32r/w Constraints: range: 180-31536000	.1.3.6.1.4.1.5651.5.3.1.1.3.1.5
ikePropStatus The object defines the status of the table entry.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.5651.5.3.1.1.3.1.6

The table contains all the IPsec proposals configured by the operator.

ipsecPropEntry row .1.3.6.1.4.1.5651.5.3.1.1.4.1

Each entry contains the attributes associated with one IPsec proposal.

Indexes

ipsecPropName

Column	Syntax	OID
ipsecPropName This object defines the name of one IPsec proposal.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.4.1.1
ipsecPropEncyptoAlg This object defines the encryption algorithm for one IPsec proposal.	Enumerationr/w Enumerated Values: 1 trides 2 des 3 aes128 4 aes192 5 aes256 6 blowfish 7 cast 8 serpent 9 twofish 10 ssp02 11 null 12 none	.1.3.6.1.4.1.5651.5.3.1.1.4.1.2
ipsecPropESPAuthAlg This object defines the encryption algorithm for one IPsec proposal.	Enumerationr/w Enumerated Values: 1 md5 2 sha1 3 sha256 4 sha512 5 rmd160 6 aesmac 7 none	.1.3.6.1.4.1.5651.5.3.1.1.4.1.3
ipsecPropAHAuthAlg This object defines the authentication algorithm for one IPsec proposal.	Enumerationr/w Enumerated Values: 1 md5 2 sha1 3 sha256 4 sha512 5 none	.1.3.6.1.4.1.5651.5.3.1.1.4.1.4
ipsecPropCompAlg This object defines the compression algorithm for one IPsec proposal.	Enumerationr/w Enumerated Values: 1 lzs 2 deflate 3 none	.1.3.6.1.4.1.5651.5.3.1.1.4.1.5
ipsecPropEncapMode This object defines the encapsulation mode for one IPsec proposal.	Enumerationr/w Enumerated Values: 1 tunnel 2 transport	.1.3.6.1.4.1.5651.5.3.1.1.4.1.6
ipsecPropDHGroup This object defines the DH groupware for one IPsec proposal.	Enumerationr/w Enumerated Values: 1 group1 2 group2 3 group5 4 group14 5 group15 6 group16 7 group17 8 group18 9 none	.1.3.6.1.4.1.5651.5.3.1.1.4.1.7
ipsecPropLifeSeconds This object defines the lifetime for one IPsec proposal.	Integer32r/w Constraints: range: 180-31536000	.1.3.6.1.4.1.5651.5.3.1.1.4.1.8
ipsecPropLifeKBytes This object defines the lifetime for one IPsec proposal.	Integer32r/w Constraints: range: 204800-2147483647	.1.3.6.1.4.1.5651.5.3.1.1.4.1.9
ipsecPropStatus The object defines the status of the table entry.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.5651.5.3.1.1.4.1.10

The table contains all the security level suits which can be customed by the operator.

secLevelEntry row .1.3.6.1.4.1.5651.5.3.1.1.5.1

Each entry contains the attributes associated with one security level suit.

Indexes

secLevelID

Column	Syntax	OID
secLevelID This object defines the index of one security level suit.	Enumerationr/w Enumerated Values: 1 basic 2 standard 3 high	.1.3.6.1.4.1.5651.5.3.1.1.5.1.1
secLevelIKEProp1 This object defines the name of one IKE proposal in this security level suit.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.5.1.2
secLevelIKEProp2 This object defines the name of one IKE proposal in this security level suit.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.5.1.3
secLevelIKEProp3 This object defines the name of one IKE proposal in this security level suit.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.5.1.4
secLevelIKEProp4 This object defines the name of one IKE proposal in this security level suit.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.5.1.5
secLevelIPsecProp1 This object defines the name of one IPsec proposal in this security level suit.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.5.1.6
secLevelIPsecProp2 This object defines the name of one IPsec proposal in this security level suit.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.5.1.7
secLevelIPsecProp3 This object defines the name of one IPsec proposal in this security level suit.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.5.1.8
secLevelIPsecProp4 This object defines the name of one IPsec proposal in this security level suit.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.5.1.9
secLevelStatus The object defines the status of the table entry.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.5651.5.3.1.1.5.1.10

The table contains all the preshared keys configured by the operator.

preshKeyEntry row .1.3.6.1.4.1.5651.5.3.1.1.6.1

Each entry contains the attributes associated with one preshared key.

Indexes

preshKeyID preshKeyAny

Column	Syntax	OID
preshKeyID This object defines the identity of one preshared key.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.6.1.1
preshKeyAny This object defines if the key is for any peer or not.	Enumerationr/w Enumerated Values: 1 yes 2 no	.1.3.6.1.4.1.5651.5.3.1.1.6.1.2
preshKeyData This object defines the data of one preshared key.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.6.1.3
preshKeySeed This object defines if the key is seed one or not.	Enumerationr/w Enumerated Values: 1 yes 2 no	.1.3.6.1.4.1.5651.5.3.1.1.6.1.4
preshKeyStatus The object defines the status of the table entry.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.5651.5.3.1.1.6.1.5

The table contains all the IPsec policies configured by the operator.

ipsecPolEntry row .1.3.6.1.4.1.5651.5.3.1.1.7.1

Each entry contains the attributes associated with one IPsec policy.

Indexes

ipsecPolName

Column	Syntax	OID
ipsecPolName This object defines the name of one IPsec policy.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.7.1.1
ipsecPolSrcAddr This object defines the source address for the IPsec policy.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.7.1.2
ipsecPolSrcMask This object defines the source address mask for the IPsec policy.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.7.1.3
ipsecPolDstAddr This object defines the destination address for the IPsec policy.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.7.1.4
ipsecPolDstMask This object defines the destination address mask for the IPsec policy.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.7.1.5
ipsecPolProto This object defines the protocol of the data flow for the IPsec policy.	Enumerationr/w Enumerated Values: 1 ip 2 tcp 3 udp 4 icmp 5 igmp	.1.3.6.1.4.1.5651.5.3.1.1.7.1.6
ipsecPolSrcPortType This object defines the type of source port number of the flow for one IPsec policy, which determined whether the following two source ports is meaningful or not.	Enumerationr/w Enumerated Values: 1 single 2 range 3 any	.1.3.6.1.4.1.5651.5.3.1.1.7.1.7
ipsecPolSrcPort1 This object defines the source port number of the flow for one IPsec policy. If the prot range is specified, it is the first port for starting.	Integer32r/w Constraints: range: 1-65535	.1.3.6.1.4.1.5651.5.3.1.1.7.1.8
ipsecPolSrcPort2 This object defines the source port number of the flow for one IPsec policy. If the prot range is specified, it is the last port for ending.	Integer32r/w Constraints: range: 1-65535	.1.3.6.1.4.1.5651.5.3.1.1.7.1.9
ipsecPolDstPortType This object defines the type of destination port number of the flow for one IPsec policy, which determined whether the following two destination ports is meaningful or not.	Enumerationr/w Enumerated Values: 1 single 2 range 3 any	.1.3.6.1.4.1.5651.5.3.1.1.7.1.10
ipsecPolDstPort1 This object defines the destination port number of the flow for one IPsec policy. If the prot range is specified, it is the first port for starting.	Integer32r/w Constraints: range: 1-65535	.1.3.6.1.4.1.5651.5.3.1.1.7.1.11
ipsecPolDstPort2 This object defines the destination port number of the flow for one IPsec policy. If the prot range is specified, it is the last port for ending.	Integer32r/w Constraints: range: 1-65535	.1.3.6.1.4.1.5651.5.3.1.1.7.1.12
ipsecPolAction This object defines what action will be executed for this IPsec policy.	Enumerationr/w Enumerated Values: 1 permit 2 deny 3 tunnel	.1.3.6.1.4.1.5651.5.3.1.1.7.1.13
ipsecPolTunnel1 This object defines the IPsec tunnel for this policy.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.7.1.14
ipsecPolTunnel2 This object defines the IPsec tunnel for this policy.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.7.1.15
ipsecPolTunnel3 This object defines the IPsec tunnel for this policy.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.7.1.16
ipsecPolTunnel4 This object defines the IPsec tunnel for this policy.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.7.1.17
ipsecPolLoadBalance This object defines whether the IPsec tunnels is for payload balance on this policy.	Enumerationr/w Enumerated Values: 1 yes 2 no	.1.3.6.1.4.1.5651.5.3.1.1.7.1.18
ipsecPolBypass This object defines whether the packets could be bypass when the ipsec sa for it is not existed.	Enumerationr/w Enumerated Values: 1 yes 2 no	.1.3.6.1.4.1.5651.5.3.1.1.7.1.19
ipsecPolIPsecProp1 This object defines the IPsec proposal used by this policy.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.7.1.20
ipsecPolIPsecProp2 This object defines the IPsec proposal used by this policy.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.7.1.21
ipsecPolIPsecProp3 This object defines the IPsec proposal used by this policy.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.7.1.22
ipsecPolIPsecProp4 This object defines the IPsec proposal used by this policy.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.7.1.23
ipsecPolType This object defines the type of this policy. Note: subpolicy means this policy is generated during IKE negotiation.	Enumeration Enumerated Values: 1 original 2 subpolicy	.1.3.6.1.4.1.5651.5.3.1.1.7.1.24
ipsecPolParentName This object defines the parent policy name of sub-policy.	OctetString	.1.3.6.1.4.1.5651.5.3.1.1.7.1.25
ipsecPolTimeRange This object defines the time range of the policy.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.7.1.26
ipsecPolStatus The object defines the status of the table entry.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.5651.5.3.1.1.7.1.27
ipsecPolRTReverse This object defines whether set the reverse route while sa is established .	Enumerationr/w Enumerated Values: 1 yes 2 no	.1.3.6.1.4.1.5651.5.3.1.1.7.1.28

The table contains all the ID alias configured by the operator.

idAliasEntry row .1.3.6.1.4.1.5651.5.3.1.1.8.1

Each entry contains the attributes associated with one ID alias.

Indexes

idAliasName

Column	Syntax	OID
idAliasName This object defines the name of the ID alias.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.8.1.1
idAliasId This object defines the id of the ID alias.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.8.1.2
idRsetPoolName This object defines the name of the pool name in remote settings.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.8.1.3
idRsetAddr This object defines the ip address in remote settings.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.8.1.4
idRsetMask This object defines the ip address mask in remote settings.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.8.1.5
idRsetFirstWinsAddr This object defines the first wins address in remote settings.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.8.1.6
idRsetSecondWinsAddr This object defines the second wins address in remote settings.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.8.1.7
idRsetFirstDnsAddr This object defines the first dns address in remote settings.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.8.1.8
idRsetSecondDnsAddr This object defines the second dns address in remote settings.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.8.1.9
idAuthListName This object defines the authentication list name in remote settings.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.8.1.10
idAuthUserName This object defines the user name of authentication in remote settings.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.8.1.11
idAuthUserGroupName This object defines the user group name of authentication in remote settings.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.8.1.12
idAuthorListName This object defines the authorization list name in remote settings.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.8.1.13
idAliasDisable This object defines the disable flag of ID alias.	Enumerationr/w Enumerated Values: 1 true 2 false	.1.3.6.1.4.1.5651.5.3.1.1.8.1.14
idAliasRef This object defines the reference number of ID alias.	Integer32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.5651.5.3.1.1.8.1.15
idAliasTimeRange This object defines the time range of alias.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.8.1.16
idAliasStatus The object defines the status of the table entry.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.5651.5.3.1.1.8.1.17
idAliasVrcCfgVer The object defines the version of the config_file of vrc.	Integer32r/w Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.5651.5.3.1.1.8.1.18
idAliasVrcOption The object defines the binding information of vrc.	Integer32r/w Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.5651.5.3.1.1.8.1.19

The table contains all the excluded ID in ID alias.

excludedIdEntry row .1.3.6.1.4.1.5651.5.3.1.1.9.1

Each entry contains the attributes associated with excluded ID.

Indexes

idAliasName excludedId

Column	Syntax	OID
idAliasName This object defines the name of the ID alias.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.9.1.1
excludedId This object defines the excluded ID.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.9.1.2
excludedIdStatus The object defines the status of the table entry.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.5651.5.3.1.1.9.1.3

The table contains all the ID group.

idGroupEntry row .1.3.6.1.4.1.5651.5.3.1.1.10.1

Each entry contains the attributes associated with ID group.

Indexes

idGroupName

Column	Syntax	OID
idGroupName This object defines the name of the ID group.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.10.1.1
idGroupRef This object defines the referenced number.	Integer32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.5651.5.3.1.1.10.1.2
idGroupStatus The object defines the status of the table entry.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.5651.5.3.1.1.10.1.3

The table contains all the ID group.

aliasInGroupEntry row .1.3.6.1.4.1.5651.5.3.1.1.11.1

Each entry contains the alias used by group.

Indexes

idGroupName idAliasName

Column	Syntax	OID
idGroupName This object defines the name of the ID group.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.11.1.1
idAliasName This object defines the ID alias.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.1.11.1.2
aliasInGroupStatus The object defines the status of the table entry.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.5651.5.3.1.1.11.1.3

The table contains all of special action for IPsec module.

specialActionEntry row .1.3.6.1.4.1.5651.5.3.1.2.3.1

Each entry contains the attributes associated with excluded ID.

Indexes

mpSpecActObjName mpSpecActOptCode

Column	Syntax	OID
mpSpecActObjName This object defines the object name of special action.	OctetStringr/w	.1.3.6.1.4.1.5651.5.3.1.2.3.1.1
mpSpecActOptCode This object defines the option code of special action.	Enumerationr/w Enumerated Values: 1 delete_tunnel	.1.3.6.1.4.1.5651.5.3.1.2.3.1.2
mpSpecActStatus The object defines the status of the table entry.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.5651.5.3.1.2.3.1.4

The table contains all the detail about ISAKMP SAs including the connected IPSec SAs.
It corresponds to cmd: show crypto isa sa. When showing the simple information, it only 
shows the four fields of the table: IkeSaLocalAddress, IkeSaRemoteAddress, IkeSaStatus, IkeSASerialNo.

ikeSaInfoEntry row .1.3.6.1.4.1.5651.5.3.1.3.1.1

Each entry contains all the fields connected with one IKE SA.

Indexes

ikeSASerialNo

Column	Syntax	OID
ikeSASerialNo The object defines serial number of an IKE SA, which is also the index of the table.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.5651.5.3.1.3.1.1.1
ikeSaStatus The object defines the state of an IKE SA, which also shows the state of IKE exchange for building IPSec SA.	OctetString	.1.3.6.1.4.1.5651.5.3.1.3.1.1.2
ikeSaStatusDetail The object defines the detail about IkeSaStatus object, which can be easily understood.	OctetString	.1.3.6.1.4.1.5651.5.3.1.3.1.1.3
ikeSaState The object defines three type of state.	Enumeration Enumerated Values: 1 current 2 negotiation 3 replaced	.1.3.6.1.4.1.5651.5.3.1.3.1.1.4
ikeSaLocalAddress The object defines the local IP address of the tunnel.	SNMPv2-SMIIpAddress Type Constraints: range: 4	.1.3.6.1.4.1.5651.5.3.1.3.1.1.5
ikeSaRemoteAddress The object defines the peer IP address of the tunnel.	SNMPv2-SMIIpAddress Type Constraints: range: 4	.1.3.6.1.4.1.5651.5.3.1.3.1.1.6
ikeSaTunnelName The object defines the identifier nubmer of the tunnel corresponding to the IKE SA.	OctetString	.1.3.6.1.4.1.5651.5.3.1.3.1.1.7
ikeSaRemoteCfgIdentity The object defines the identity of the remote end.	OctetString	.1.3.6.1.4.1.5651.5.3.1.3.1.1.8
ikeSaRemoteInstIdentity The object defines the identity of the remote end.	OctetString	.1.3.6.1.4.1.5651.5.3.1.3.1.1.9
ikeSaLocalCfgIdentity The object defines the identity of the local end.	OctetString	.1.3.6.1.4.1.5651.5.3.1.3.1.1.10
ikeSaLocalInstIdentity The object defines the identity of the local end.	OctetString	.1.3.6.1.4.1.5651.5.3.1.3.1.1.11
ikeFlowName The object defines the identifier nubmer of the policy corresponding to the IKE SA.	OctetString	.1.3.6.1.4.1.5651.5.3.1.3.1.1.12
ikeSaTimerEvent1 The object defines the type of the timer event connected with an IKE SA.	OctetString	.1.3.6.1.4.1.5651.5.3.1.3.1.1.13
ikeSaTimerRemain1 The object defines the remainder time of the timer event connected with an IKE SA.		.1.3.6.1.4.1.5651.5.3.1.3.1.1.14
ikeSaTimerEvent2 The object defines the type of the timer event connected with an IKE SA.	OctetString	.1.3.6.1.4.1.5651.5.3.1.3.1.1.15
ikeSaTimerRemain2 The object defines the remainder time of the timer event connected with an IKE SA.		.1.3.6.1.4.1.5651.5.3.1.3.1.1.16
ikeSaTimerEvent3 The object defines the type of the timer event connected with an IKE SA.	OctetString	.1.3.6.1.4.1.5651.5.3.1.3.1.1.17
ikeSaTimerRemain3 The object defines the remainder time of the timer event connected with an IKE SA.		.1.3.6.1.4.1.5651.5.3.1.3.1.1.18
ikeSaTimerEvent4 The object defines the type of the timer event connected with an IKE SA.	OctetString	.1.3.6.1.4.1.5651.5.3.1.3.1.1.19
ikeSaTimerRemain4 The object defines the remainder time of the timer event connected with an IKE SA.		.1.3.6.1.4.1.5651.5.3.1.3.1.1.20
ikeSaIpsecAhOutSpi The object defines the SPI which is one part of an outbound IPSec SA identifier corresponding to AH protocol when the IPSec SA is already builded, that is to say, the value of IkeSaState is newestIPSec.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.5651.5.3.1.3.1.1.21
ikeSaIpsecAhInSpi The object defines the SPI which is one part of an inbound IPSec SA identifier corresponding to AH protocol when the IPSec SA is already builded, that is to say, the value of IkeSaState is newestIPSec.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.5651.5.3.1.3.1.1.22
ikeSaIpsecEspOutSpi The object defines the SPI which is one part of an outbound IPSec SA identifier corresponding to ESP protocol when the IPSec SA is already builded, that is to say, the value of IkeSaState is newestIPSec.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.5651.5.3.1.3.1.1.23
ikeSaIpsecEspInSpi The object defines the SPI which is one part of an inbound IPSec SA identifier corresponding to ESP protocol when the IPSec SA is already builded, that is to say, the value of IkeSaState is newestIPSec.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.5651.5.3.1.3.1.1.24

The table contains the detail information about all the IPSec SAs, which is only for being displayed.

ipsecSAInfoEntry row .1.3.6.1.4.1.5651.5.3.1.3.2.1

Each entry contains all the attributes about one pair of IPSec SAs.

Indexes

ipsecSAIndex

Column	Syntax	OID
ipsecSAIndex The object defines the index of pairs of IPSec SAs, which is only the index of the table and not has actual meaning.		.1.3.6.1.4.1.5651.5.3.1.3.2.1.1
ipsecSAStateIndex The object defines the id number of the phase2 ike sa.		.1.3.6.1.4.1.5651.5.3.1.3.2.1.2
ipsecSAFlowName The object defines the name of the flow corresponding to the IPSec SAs.	OctetString	.1.3.6.1.4.1.5651.5.3.1.3.2.1.3
ipsecSAProtoName The object defines the switch of anti-replaying associated with the IPSec SAs.	Enumeration Enumerated Values: 1 esp 2 ah 3 ipcomp	.1.3.6.1.4.1.5651.5.3.1.3.2.1.4
ipsecSAEncAlgName The object defines the name of the encryption algorithm.	OctetString	.1.3.6.1.4.1.5651.5.3.1.3.2.1.5
ipsecSAAuthAlgName The object defines the name of the authentication algorithm.	OctetString	.1.3.6.1.4.1.5651.5.3.1.3.2.1.6
ipsecSAIPCompAlgName The object defines the name of the compression algorithm.	OctetString	.1.3.6.1.4.1.5651.5.3.1.3.2.1.7
ipsecSAInSPI The object defines the SPI of the inbound IPSec SA.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.5651.5.3.1.3.2.1.8
ipsecSAInExpTime The object defines the expired time of the inbound IPSec SA.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.5651.5.3.1.3.2.1.9
ipsecSAInRemainTime The object defines the remaining time of the inbound IPSec SA.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.5651.5.3.1.3.2.1.10
ipsecSAInPackets The object defines the total number of the input packets protected by the inbound IPSec SA.		.1.3.6.1.4.1.5651.5.3.1.3.2.1.11
ipsecSAInKiloBytes The object defines all the input data protected by the inbound IPSec SA.		.1.3.6.1.4.1.5651.5.3.1.3.2.1.12
ipsecSAInLeftKBytes The object defines the remained lifetime measured as kilobytes about the inbound IPSec SA.		.1.3.6.1.4.1.5651.5.3.1.3.2.1.13
ipsecSAInCompedBytes The object defines all the input compressed data measured as kilobytes.		.1.3.6.1.4.1.5651.5.3.1.3.2.1.14
ipsecSAInDecompedBytes The object defines all the input decompressed data measured as kilobytes.		.1.3.6.1.4.1.5651.5.3.1.3.2.1.15
ipsecSAInGroupSASPI The object defines the SPI of the IPSec SA which protects the same input data flow with the inbound IPSec SA. In current its value is usually null.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.5651.5.3.1.3.2.1.16
ipsecSAInGroupID The group identity of inbound SA.	Integer32 Constraints: range: 1-65535	.1.3.6.1.4.1.5651.5.3.1.3.2.1.17
ipsecSAOutSPI The object defines the SPI of the outbound IPSec SA.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.5651.5.3.1.3.2.1.18
ipsecSAOutExpTime The object defines the expired time of the outbound IPSec SA.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.5651.5.3.1.3.2.1.19
ipsecSAOutRemainTime The object defines the remaining time of the outbound IPSec SA.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.5651.5.3.1.3.2.1.20
ipsecSAOutPackets The object defines the total number of the output packets protected by the outbound IPSec SA.		.1.3.6.1.4.1.5651.5.3.1.3.2.1.21
ipsecSAOutKiloBytes The object defines all the output data measured as kilobytes protected by the outbound IPSec SA.		.1.3.6.1.4.1.5651.5.3.1.3.2.1.22
ipsecSAOutLeftKBytes The object defines the remained lifetime measured as kilobytes about the outbound IPSec SA.		.1.3.6.1.4.1.5651.5.3.1.3.2.1.23
ipsecSAOutCompedBytes The object defines all the output compressed data measured as kilobytes.		.1.3.6.1.4.1.5651.5.3.1.3.2.1.24
ipsecSAOutDecompedBytes The object defines all the output decompressed data measured as kilobytes.		.1.3.6.1.4.1.5651.5.3.1.3.2.1.25
ipsecSAOutGroupSASPI The object defines the SPI of the IPSec SA which protects the same output data flow with the outbound IPSec SA.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.5651.5.3.1.3.2.1.26
ipsecSAOutGroupID The group identity of outbound SA.	Integer32 Constraints: range: 1-65535	.1.3.6.1.4.1.5651.5.3.1.3.2.1.27

The table contains the detail information about all the IPSec SAs, which is only for being displayed.

ipsecSASimpleInfoEntry row .1.3.6.1.4.1.5651.5.3.1.3.3.1

Each entry contains all the attributes about one pair of IPSec SAs.

Indexes

mpIPsecSimpIndex

Column	Syntax	OID
mpIPsecSimpIndex The object defines the index of pairs of IPSec SAs, which is only the index of the table and not has actual meaning.		.1.3.6.1.4.1.5651.5.3.1.3.3.1.1
mpIPsecSimpPeerAddr The object defines the peer address.	OctetString	.1.3.6.1.4.1.5651.5.3.1.3.3.1.2
mpIPsecSimpLocalAddr The object defines the local address.	OctetString	.1.3.6.1.4.1.5651.5.3.1.3.3.1.3
mpIPsecSimpPeerID The object defines the peer identity.	OctetString	.1.3.6.1.4.1.5651.5.3.1.3.3.1.4
mpIPsecSimpLocalID The object defines the local identity.	OctetString	.1.3.6.1.4.1.5651.5.3.1.3.3.1.5
mpIPsecSimpSrcAddr The object defines the source address.	OctetString	.1.3.6.1.4.1.5651.5.3.1.3.3.1.6
mpIPsecSimpSrcMask The object defines the source mask.	OctetString	.1.3.6.1.4.1.5651.5.3.1.3.3.1.7
mpIPsecSimpDstAddr The object defines the destination address.	OctetString	.1.3.6.1.4.1.5651.5.3.1.3.3.1.8
mpIPsecSimpDstMask The object defines the destination mask.	OctetString	.1.3.6.1.4.1.5651.5.3.1.3.3.1.9
mpIPsecSimpInExpTime The object defines the expiration time of inbound IPsec SA.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.5651.5.3.1.3.3.1.10
mpIPsecSimpInRemainTime The object defines the remaining time of inbound IPsec SA.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.5651.5.3.1.3.3.1.11
mpIPsecSimpInPackets The object defines the packets number of inbound IPsec SA.		.1.3.6.1.4.1.5651.5.3.1.3.3.1.12
mpIPsecSimpInKiloBytes The object defines all the input data protected by the inbound IPSec SA.		.1.3.6.1.4.1.5651.5.3.1.3.3.1.13
mpIPsecSimpInLeftKBytes The object defines the remained lifetime measured as kilobytes about the inbound IPSec SA.		.1.3.6.1.4.1.5651.5.3.1.3.3.1.14
mpIPsecSimpOutExpTime The object defines the expired time of the outbound IPSec SA.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.5651.5.3.1.3.3.1.15
mpIPsecSimpOutRemainTime The object defines the remaining time of the outbound IPSec SA.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.5651.5.3.1.3.3.1.16
mpIPsecSimpOutPackets The object defines the total number of the output packets protected by the outbound IPSec SA.		.1.3.6.1.4.1.5651.5.3.1.3.3.1.17
mpIPsecSimpOutKiloBytes The object defines all the output data measured as kilobytes protected by the outbound IPSec SA.		.1.3.6.1.4.1.5651.5.3.1.3.3.1.18
mpIPsecSimpOutLeftKBytes The object defines the remained lifetime measured as kilobytes about the outbound IPSec SA.		.1.3.6.1.4.1.5651.5.3.1.3.3.1.19
mpIPsecSimpFlowName The object defines the policy name.	OctetString	.1.3.6.1.4.1.5651.5.3.1.3.3.1.20
mpIPsecStateId The object defines the state id of IPsec SA.		.1.3.6.1.4.1.5651.5.3.1.3.3.1.21
mpIPsecSimpPFlowName The object defines the parent policy name.	OctetString	.1.3.6.1.4.1.5651.5.3.1.3.3.1.22

The table contains all IPsec diagnostic informations for all policy-tunnel pairs.

ipsecDiagInfoEntry row .1.3.6.1.4.1.5651.5.3.1.3.5.1

Each entry contains the diagnostic informations for one policy-tunnel pair.

Indexes

ipsecDiagInfoPolicyId ipsecDiagInfoTunnelId

Column	Syntax	OID
ipsecDiagInfoPolicyId The object defines the policy id.		.1.3.6.1.4.1.5651.5.3.1.3.5.1.1
ipsecDiagInfoTunnelId The object defines the tunnel id.		.1.3.6.1.4.1.5651.5.3.1.3.5.1.2
ipsecDiagInfoPolicyName The object defines the policy name.	OctetString Constraints: range: 0-32	.1.3.6.1.4.1.5651.5.3.1.3.5.1.3
ipsecDiagInfoTunnelName The object defines the tunnel name.	OctetString Constraints: range: 0-32	.1.3.6.1.4.1.5651.5.3.1.3.5.1.4
ipsecDiagInfoStatus The object defines the status of specify policy-tunnel pair.		.1.3.6.1.4.1.5651.5.3.1.3.5.1.5