IPSEC-POLICY-MIB Table View

This table is used to map policy (groupings) onto an endpoint
where traffic is to pass by.  Any policy group assigned to an
endpoint is then used to control access to the traffic
passing by it.
          
If an endpoint has been configured with a policy group and no
contained rule matches the incoming packet, the default
action in this case shall be to drop the packet.
          
If no policy group has been assigned to an endpoint, then the
policy group specified by ipspSystemPolicyGroupName should be
used for the endpoint.

This table contains a list of rules and/or subgroups
contained within a given policy group.  The entries are
sorted by the ipspGroupContPriority object and MUST be
executed in order according to this value, starting with the
lowest value.  Once a group item has been processed, the
processor MUST stop processing this packet if an action was
executed as a result of the processing of a given group.
Iterating into the next policy group item by finding the next
largest ipspGroupContPriority object shall only be done if no
actions were run when processing the last item for a given
packet.

This table defines a policy rule by associating a filter or a
set of filters to an action to be executed.

A table defining a compound set of filters and their
associated parameters.  A row in this table can either be
pointed to by a ipspRuleDefFilter object or by a ficSubFilter
object.

This table defines a list of filters contained within a given
compound filter set defined in the ipspCompoundFilterTable.

This table contains a list of filter definitions to be used
within the ipspRuleDefinitionTable or the
ipspSubfilterTable table.

This table contains a list of filter definitions to be used
within the ipspRuleDefinitionTable or the
ipspSubfilterTable.

Defines a table of filters which can be used to effectively
enable or disable policies based on a valid time range.

This table contains a list of IPSO header filter definitions
to be used within the ipspRuleDefinitionTable or the
ipspSubfilterTable.  IPSO headers and their values
are described in RFC1108.

This table defines filters which can be used to match
credentials of IKE peers, where the credentials in question
have been obtained from an IKE phase 1 exchange.  They may be
X.509 certificates, Kerberos tickets, etc...

This table defines filters which can be used to match
credentials of IKE peers, where the credentials in question
have been obtained from an IKE phase 1 exchange.  They may be
X.509 certificates, Kerberos tickets, etc...

Table used to allow multiple actions to be associated with a
rule.  It uses the ipspSubactionsTable to do this.

This table contains a list of the sub-actions within a given
compound action.  Compound actions executing these actions
MUST execute them in series based on the ipspSubActPriority
value, with the lowest value executing first.

This table is a list of non-negotiated IPsec actions (SAs)
that can be performed and contains or indicates the data
necessary to create such an SA.

This table contains reusable parameters that can be pointed
to by the ipspIkeActionTable and ipspIpsecActionTable.  These
parameters are reusable since it is likely an administrator
will want to make global policy changes to lifetime
parameters that apply to multiple actions.  This table allows
multiple rows in the other actions tables to reuse global
lifetime parameters in this table by repeatedly pointing to a
row cointained within this table.

The ipspIkeActionTable contains a list of the parameters used
for an IKE phase 1 SA DOI negotiation.  See the corresponding
table ipspIkeActionProposalsTable for a list of proposals
contained within a given IKE Action.

This table contains a list of all ike proposal names found
within a given IKE Action.

This table contains a list of IKE proposals which are used in
an IKE negotiation.

The ipspIpsecActionTable contains a list of the parameters
used for an IKE phase 2 IPsec DOI negotiation.

This table lists one or more IPsec proposals for
IPsec actions.

This table lists the IPsec proposals contained within a given
IPsec action and the transforms within each of those
proposals.  These proposals and transforms can then be used
to create phase 2 negotiation proposals.

This table lists all the AH transforms which can be used to
build IPsec proposals.

This table lists all the ESP transforms which can be used to
build IPsec proposals

This table lists all the IP compression transforms which
can be used to build IPsec proposals during negotiation of
a phase 2 SA.

IKEIdentity is used to represent the identities that may be
used for an IPProtocolEndpoint (or collection of
IPProtocolEndpoints) to identify itself in IKE phase 1
negotiations.  The column ikeIdentityName in an
ipspIkeActionEntry together with the ipspEndGroupIdentType
and the ipspEndGroupAddress in the PolicyEndpointToGroupTable
specifies the unique identity to use in a negotiation
exchange.

PeerIdentity is used to represent the identities that may be
used for peers to identify themselves in IKE phase I/II
negotiations.  PeerIdentityTable aggregates the table entries
that provide mappings between identities and their
addresses.