Standard view Table view

CISCO-IPSEC-MIB

        The MIB module for modeling Cisco-specific 
IPsec attributes
        
Overview of Cisco IPsec MIB
        
MIB description
        
This MIB models the Cisco implementation-specific 
attributes of a Cisco entity that implements IPsec. 
This MIB is complementary to the standard IPsec MIB 
proposed jointly by Tivoli and Cisco.
        
The ciscoIPsec MIB provides the operational information 
on Cisco's IPsec tunnelling implementation.  
The following entities are managed:
1) ISAKMP Group:
a) ISAKMP global parameters
b) ISAKMP Policy Table
        
2) IPSec Group:
a) IPSec Global Parameters
b) IPSec Global Traffic Parameters
c) Cryptomap Group
- Cryptomap Set Table
- Cryptomap Table
- CryptomapSet Binding Table
        
3) System Capacity & Capability Group:
a) Capacity Parameters
b) Capability Parameters
        
4) Trap Control Group
5) Notifications Group
ciscoIPsecMIB 1.3.6.1.4.1.9.10.62
Imported Objects
CISCO-SMI ciscoExperiment
IF-MIB ifIndex
SNMPv2-CONF MODULE-COMPLIANCE OBJECT-GROUP
SNMPv2-SMI Counter32 Gauge32 Integer32 MODULE-IDENTITY NOTIFICATION-TYPE OBJECT-TYPE
SNMPv2-TC DisplayString TEXTUAL-CONVENTION TruthValue
Type Definitions (12)
CIPsecLifesize Unsigned32 range: 2560..536870912
CIPsecLifetime Unsigned32 range: 120..86400
CIPsecNumCryptoMaps Unsigned32 range: 0..2147483647
CryptomapSetBindStatus Enumeration
unknown(0)
attached(1)
detached(2)
CryptomapType Enumeration
cryptomapTypeNONE(0)
cryptomapTypeMANUAL(1)
cryptomapTypeISAKMP(2)
cryptomapTypeCET(3)
cryptomapTypeDYNAMIC(4)
cryptomapTypeDYNAMICDISCOVERY(5)
DiffHellmanGrp Enumeration
none(1)
dhGroup1(2)
dhGroup2(3)
EncryptAlgo Enumeration
none(1)
des(2)
des3(3)
IkeAuthMethod Enumeration
none(1)
preSharedKey(2)
rsaSig(3)
rsaEncrypt(4)
revPublicKey(5)
IkeHashAlgo Enumeration
none(1)
md5(2)
sha(3)
IkeIdentityType Enumeration
isakmpIdTypeUNKNOWN(0)
isakmpIdTypeADDRESS(1)
isakmpIdTypeHOSTNAME(2)
IPSIpAddress OctetString range: 4range: 16
TrapStatus Enumeration
enabled(1)
disabled(2)
Objects (74)
ciscoIPsecMIB .1.3.6.1.4.1.9.10.62
ciscoIPsecMIBObjects .1.3.6.1.4.1.9.10.62.1
cipsIsakmpGroup .1.3.6.1.4.1.9.10.62.1.1
cipsIsakmpEnabled SNMPv2-TCTruthValue .1.3.6.1.4.1.9.10.62.1.1.1
cipsIsakmpIdentity IkeIdentityType .1.3.6.1.4.1.9.10.62.1.1.2
cipsIsakmpKeepaliveInterval secondsInteger32 .1.3.6.1.4.1.9.10.62.1.1.3
cipsNumIsakmpPolicies Integer32 .1.3.6.1.4.1.9.10.62.1.1.4
cipsIsakmpPolicyTable .1.3.6.1.4.1.9.10.62.1.1.5
cipsIsakmpPolicyEntry cipsIsakmpPolPriority .1.3.6.1.4.1.9.10.62.1.1.5.1
cipsIsakmpPolPriority Integer32 .1.3.6.1.4.1.9.10.62.1.1.5.1.1
cipsIsakmpPolEncr EncryptAlgo .1.3.6.1.4.1.9.10.62.1.1.5.1.2
cipsIsakmpPolHash IkeHashAlgo .1.3.6.1.4.1.9.10.62.1.1.5.1.3
cipsIsakmpPolAuth IkeAuthMethod .1.3.6.1.4.1.9.10.62.1.1.5.1.4
cipsIsakmpPolGroup DiffHellmanGrp .1.3.6.1.4.1.9.10.62.1.1.5.1.5
cipsIsakmpPolLifetime secondsInteger32 .1.3.6.1.4.1.9.10.62.1.1.5.1.6
cipsIPsecGroup .1.3.6.1.4.1.9.10.62.1.2
cipsIPsecGlobals .1.3.6.1.4.1.9.10.62.1.2.1
cipsSALifetime SecondsCIPsecLifetime .1.3.6.1.4.1.9.10.62.1.2.1.1
cipsSALifesize KBytesCIPsecLifesize .1.3.6.1.4.1.9.10.62.1.2.1.2
cipsNumStaticCryptomapSets Integral UnitsCIPsecNumCryptoMaps .1.3.6.1.4.1.9.10.62.1.2.1.3
cipsNumCETCryptomapSets Integral UnitsCIPsecNumCryptoMaps .1.3.6.1.4.1.9.10.62.1.2.1.4
cipsNumDynamicCryptomapSets Integral UnitsCIPsecNumCryptoMaps .1.3.6.1.4.1.9.10.62.1.2.1.5
cipsNumTEDCryptomapSets Integral UnitsCIPsecNumCryptoMaps .1.3.6.1.4.1.9.10.62.1.2.1.6
cipsIPsecStatistics .1.3.6.1.4.1.9.10.62.1.2.2
cipsNumTEDProbesReceived Integral UnitsSNMPv2-SMICounter32 .1.3.6.1.4.1.9.10.62.1.2.2.1
cipsNumTEDProbesSent Integral UnitsSNMPv2-SMICounter32 .1.3.6.1.4.1.9.10.62.1.2.2.2
cipsNumTEDFailures Integral UnitsSNMPv2-SMICounter32 .1.3.6.1.4.1.9.10.62.1.2.2.3
cipsCryptomapGroup .1.3.6.1.4.1.9.10.62.1.2.3
cipsStaticCryptomapSetTable .1.3.6.1.4.1.9.10.62.1.2.3.1
cipsStaticCryptomapSetEntry cipsStaticCryptomapSetName .1.3.6.1.4.1.9.10.62.1.2.3.1.1
cipsStaticCryptomapSetName SNMPv2-TCDisplayString .1.3.6.1.4.1.9.10.62.1.2.3.1.1.1
cipsStaticCryptomapSetSize SNMPv2-SMIGauge32 .1.3.6.1.4.1.9.10.62.1.2.3.1.1.2
cipsStaticCryptomapSetNumIsakmp SNMPv2-SMIGauge32 .1.3.6.1.4.1.9.10.62.1.2.3.1.1.3
cipsStaticCryptomapSetNumManual SNMPv2-SMIGauge32 .1.3.6.1.4.1.9.10.62.1.2.3.1.1.4
cipsStaticCryptomapSetNumCET SNMPv2-SMIGauge32 .1.3.6.1.4.1.9.10.62.1.2.3.1.1.5
cipsStaticCryptomapSetNumDynamic SNMPv2-SMIGauge32 .1.3.6.1.4.1.9.10.62.1.2.3.1.1.6
cipsStaticCryptomapSetNumDisc SNMPv2-SMIGauge32 .1.3.6.1.4.1.9.10.62.1.2.3.1.1.7
cipsStaticCryptomapSetNumSAs SNMPv2-SMIGauge32 .1.3.6.1.4.1.9.10.62.1.2.3.1.1.8
cipsDynamicCryptomapSetTable .1.3.6.1.4.1.9.10.62.1.2.3.2
cipsDynamicCryptomapSetEntry cipsDynamicCryptomapSetName .1.3.6.1.4.1.9.10.62.1.2.3.2.1
cipsDynamicCryptomapSetName SNMPv2-TCDisplayString .1.3.6.1.4.1.9.10.62.1.2.3.2.1.1
cipsDynamicCryptomapSetSize SNMPv2-SMIGauge32 .1.3.6.1.4.1.9.10.62.1.2.3.2.1.2
cipsDynamicCryptomapSetNumAssoc SNMPv2-SMIGauge32 .1.3.6.1.4.1.9.10.62.1.2.3.2.1.3
cipsStaticCryptomapTable .1.3.6.1.4.1.9.10.62.1.2.3.3
cipsStaticCryptomapEntry cipsStaticCryptomapSetNamecipsStaticCryptomapPriority .1.3.6.1.4.1.9.10.62.1.2.3.3.1
cipsStaticCryptomapPriority Integer32 .1.3.6.1.4.1.9.10.62.1.2.3.3.1.1
cipsStaticCryptomapType CryptomapType .1.3.6.1.4.1.9.10.62.1.2.3.3.1.2
cipsStaticCryptomapDescr SNMPv2-TCDisplayString .1.3.6.1.4.1.9.10.62.1.2.3.3.1.3
cipsStaticCryptomapPeer IPSIpAddress .1.3.6.1.4.1.9.10.62.1.2.3.3.1.4
cipsStaticCryptomapNumPeers Integer32 .1.3.6.1.4.1.9.10.62.1.2.3.3.1.5
cipsStaticCryptomapPfs DiffHellmanGrp .1.3.6.1.4.1.9.10.62.1.2.3.3.1.6
cipsStaticCryptomapLifetime Integer32 .1.3.6.1.4.1.9.10.62.1.2.3.3.1.7
cipsStaticCryptomapLifesize Integer32 .1.3.6.1.4.1.9.10.62.1.2.3.3.1.8
cipsStaticCryptomapLevelHost SNMPv2-TCTruthValue .1.3.6.1.4.1.9.10.62.1.2.3.3.1.9
cipsCryptomapSetIfTable .1.3.6.1.4.1.9.10.62.1.2.3.4
cipsCryptomapSetIfEntry IF-MIBifIndexcipsStaticCryptomapSetName .1.3.6.1.4.1.9.10.62.1.2.3.4.1
cipsCryptomapSetIfVirtual SNMPv2-TCTruthValue .1.3.6.1.4.1.9.10.62.1.2.3.4.1.1
cipsCryptomapSetIfStatus r/w CryptomapSetBindStatus .1.3.6.1.4.1.9.10.62.1.2.3.4.1.2
cipsSysCapacityGroup .1.3.6.1.4.1.9.10.62.1.3
cipsMaxSAs Integral UnitsInteger32 .1.3.6.1.4.1.9.10.62.1.3.1
cips3DesCapable SNMPv2-TCTruthValue .1.3.6.1.4.1.9.10.62.1.3.2
cipsTrapCntlGroup .1.3.6.1.4.1.9.10.62.1.4
cipsCntlIsakmpPolicyAdded r/w TrapStatus .1.3.6.1.4.1.9.10.62.1.4.1
cipsCntlIsakmpPolicyDeleted r/w TrapStatus .1.3.6.1.4.1.9.10.62.1.4.2
cipsCntlCryptomapAdded r/w TrapStatus .1.3.6.1.4.1.9.10.62.1.4.3
cipsCntlCryptomapDeleted r/w TrapStatus .1.3.6.1.4.1.9.10.62.1.4.4
cipsCntlCryptomapSetAttached r/w TrapStatus .1.3.6.1.4.1.9.10.62.1.4.5
cipsCntlCryptomapSetDetached r/w TrapStatus .1.3.6.1.4.1.9.10.62.1.4.6
cipsCntlTooManySAs r/w TrapStatus .1.3.6.1.4.1.9.10.62.1.4.7
ciscoIPsecMIBNotificationPrefix .1.3.6.1.4.1.9.10.62.2
cipsMIBNotifications .1.3.6.1.4.1.9.10.62.2.0
ciscoIPsecMIBConformance .1.3.6.1.4.1.9.10.62.3
cipsMIBConformances .1.3.6.1.4.1.9.10.62.3.1
cipsMIBGroups .1.3.6.1.4.1.9.10.62.3.2
Notifications / Traps (7)
NameOIDDescription
cipsIsakmpPolicyAdded
cipsNumIsakmpPolicies
.1.3.6.1.4.1.9.10.62.2.0.1 
This trap is generated when a new ISAKMP
policy element is defined on the managed entity.
The context of the event includes the updated
number of ISAKMP policy elements currently available.
cipsIsakmpPolicyDeleted
cipsNumIsakmpPolicies
.1.3.6.1.4.1.9.10.62.2.0.2 
This trap is generated when an existing ISAKMP
policy element is deleted on the managed entity.
The context of the event includes the updated
number of ISAKMP policy elements currently available.
cipsCryptomapAdded
cipsStaticCryptomapType cipsStaticCryptomapSetSize
.1.3.6.1.4.1.9.10.62.2.0.3 
This trap is generated when a new cryptomap is
added to the specified cryptomap set.
cipsCryptomapDeleted
cipsStaticCryptomapSetSize
.1.3.6.1.4.1.9.10.62.2.0.4 
This trap is generated when a cryptomap is
removed from the specified cryptomap set.
cipsCryptomapSetAttached
cipsStaticCryptomapSetSize cipsStaticCryptomapSetNumIsakmp cipsStaticCryptomapSetNumDynamic
.1.3.6.1.4.1.9.10.62.2.0.5 
A cryptomap set must be attached to an interface
of the device in order for it to be operational.
This trap is generated when the cryptomap set 
attached to an active interface of the managed entity.
          
The context of the notification includes:
   Size of the attached cryptomap set,
   Number of ISAKMP cryptomaps in the set and
   Number of Dynamic cryptomaps in the set.
cipsCryptomapSetDetached
cipsStaticCryptomapSetSize
.1.3.6.1.4.1.9.10.62.2.0.6 
This trap is generated when a cryptomap set is
detached from an interafce to which it was
bound earlier. The context of the event identifies the
size of the cryptomap set.
cipsTooManySAs
cipsMaxSAs
.1.3.6.1.4.1.9.10.62.2.0.7 
This trap is generated when a new SA is attempted 
to be setup while the number of currently active SAs 
equals the maximum configurable.  The variables are:
	     cipsMaxSAs