cipsStaticCryptomapPfs
CISCO-IPSEC-PROVISIONING-MIB ·
.1.3.6.1.4.1.9.9.431.1.4.3.1.11
Object
This object identifies if the tunnels instantiated due to this policy item should use Perfect Forward Secrecy (PFS) and if so, what group of Oakley they should use.
Context
- MIB
- CISCO-IPSEC-PROVISIONING-MIB
- OID
.1.3.6.1.4.1.9.9.431.1.4.3.1.11- Type
- column
- Access
- readwrite
- Status
- current
- Parent
- cipsStaticCryptomapEntry
- Table
- cipsStaticCryptomapTable
- Siblings
- 16
Syntax
CISCO-IPSEC-TCCIPsecDiffHellmanGrp
- Source
- CISCO-IPSEC-TCCIPsecDiffHellmanGrp
- Base type
Enumeration
Values & Constraints
Type Values
1 | other |
2 | notDH |
3 | modp768 |
4 | modp1024 |
5 | ec2nGP155 |
6 | ec2nGP185 |
7 | modp1536 |
8 | ec2nGF163 |
9 | ec2nGF283 |
10 | ec2nGF409 |
11 | ec2nGF571 |
12 | modp2048 |
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| cipsStaticCryptomapSetName The index of the static cryptomap table. The value
of the string is the name string assigned by the
NMS when defining a cryptomap set. | column | OctetString | .1.3.6.1.4.1.9.9.431.1.4.3.1.1 |
| cipsStaticCryptomapCurPAddr The IP address of the peer to which this cryptomap
entry is currently connected.
The value of cipsStaticCryptomapCurPAddrType is
'unknown' and this MIB object is a… | column | INET-ADDRESS-MIBInetAddress | .1.3.6.1.4.1.9.9.431.1.4.3.1.10 |
| cipsStaticCryptomapLifetime This object specifies the lifetime of the IPsec
Security Associations (SA) created using this IPsec
policy entry.
The default value of this object is the current v… | column | seconds CISCO-IPSEC-TCCIPsecLifetime | .1.3.6.1.4.1.9.9.431.1.4.3.1.12 |
| cipsStaticCryptomapLifesize This object identifies the lifesize (maximum traffic
in bytes that may be carried) of the IPSec SAs
created using this IPSec policy entry.
When a Security Association (SA) is crea… | column | KBytes CISCO-IPSEC-TCCIPsecLifesize | .1.3.6.1.4.1.9.9.431.1.4.3.1.13 |
| cipsStaticCryptomapLevelHost This object specifies the granularity of the
IPSec SAs created using this IPSec policy entry.
If this value is 'true', distinct SA bundles are
created for distinct hosts at the e… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.431.1.4.3.1.14 |
| cipsStaticCryptomapIdleTimeout This object specifies the idle time (lack of traffic)
in seconds of a tunnel spawned by this cryptomap after
which the tunnel will be torn down.
The default value … | column | CISCO-IPSEC-TCCIPsecTunnelIdleTime | .1.3.6.1.4.1.9.9.431.1.4.3.1.15 |
| cipsStaticCryptomapAutoPeer If 'true' the destination address is taken as the
peer address, while creating the tunnel.
If 'false' the value shown by the object
cipsStaticCryptomapCurPAddr is being used as
t… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.431.1.4.3.1.16 |
| cipsStaticCryptomapStatus This object identifies the status of the cryptomap
entry represented by this conceptual row. | column | SNMPv2-TCRowStatus | .1.3.6.1.4.1.9.9.431.1.4.3.1.17 |
| cipsStaticCryptomapPriority The priority of the cryptomap entry in the
cryptomap set. A cryptomap entry with smaller
cipsStaticCryptomapPriority value takes
precedence over the ones with larger values. | column | Unsigned32 | .1.3.6.1.4.1.9.9.431.1.4.3.1.2 |
| cipsStaticCryptomapType The type of the cryptomap entry. This can be an ISAKMP
cryptomap or manual. Dynamic cryptomaps are not
counted in this table. | column | CISCO-IPSEC-TCCIPsecCryptomapType | .1.3.6.1.4.1.9.9.431.1.4.3.1.3 |
| cipsStaticCryptomapDescr The description string created by the SNMP agent
while creating this cryptomap. The string generally
identifies a description and the purpose of this
policy. | column | OctetString | .1.3.6.1.4.1.9.9.431.1.4.3.1.4 |
| cipsStaticCryptomapIpFilter This object specifies an IP protocol filter,
cippfIpProfileName
(defined in CISCO-IP-PROTOCOL-FILTER-MIB),
to be secured using this cryptomap entry.
When this objec… | column | OctetString | .1.3.6.1.4.1.9.9.431.1.4.3.1.5 |
| cipsStaticCryptomapXformSetList The list of cipsXformSetId that are members
of this CipsStaticCryptomapEntry.
The value of this object is a concatenation of zero or
more 4-octet strings, where eac… | column | OctetString | .1.3.6.1.4.1.9.9.431.1.4.3.1.6 |
| cipsStaticCryptomapNumPeers This object reflects the number of peers associated
with this cryptomap entry. The other peers listed in
table cipsIPsecCryMapPeerTable are backup peers. | column | Unsigned32 | .1.3.6.1.4.1.9.9.431.1.4.3.1.7 |
| cipsStaticCryotomapNextPIndex This object specifies the next available index for object
cipsCryMapPeerIndex which can be used for
creating an entry in cipsIPsecCryMapPeerTable. | column | Unsigned32 | .1.3.6.1.4.1.9.9.431.1.4.3.1.8 |
| cipsStaticCryptomapCurPAddrType This object represents the address type of
cipsStaticCryptomapCurPAddr to which this cryptomap
entry is currently connected. | column | INET-ADDRESS-MIBInetAddressType | .1.3.6.1.4.1.9.9.431.1.4.3.1.9 |