ipSecPolMapAceString

The value of this object is the access control 
entry (ACE) within the ACL that caused this IPSec 
tunnel to be established. 
              
For instance, if an ACL defines access for two
traffic streams (FTP and SNMP) as follows:
              
access-list 101 permit tcp 172.16.14.0 0.0.0.255
                 172.16.16.0 0.0.0.255 eq ftp
access-list 101 permit udp 172.16.14.0 0.0.0.255
                 host 172.16.16.1 eq 161
              
              
When associated with an IPSec policy, the second
element of the ACL gives rise to an IPSec tunnel
in the wake of SNMP traffic. The value of the
object 'ipSecPolMapAceString' for the IPSec tunnel
would be then the string
'access-list 101 permit udp 172.16.14.0 0.0.0.255
                 host 172.16.16.1 eq 161'

MIB

CISCO-IPSEC-POLICY-MAP-MIB

OID

.1.3.6.1.4.1.9.9.172.1.2.1.1.5

Type

column

Access

readonly

Status

current

Parent

ipSecPolMapEntry