ceipSecTunInSaDHGrp
CISCO-ENHANCED-IPSEC-FLOW-MIB ·
.1.3.6.1.4.1.9.9.432.1.1.2.1.19
Object
column
CISCO-IPSEC-TCCIPsecDiffHellmanGrp
The Diffie Hellman Group used
by the inbound security association of the
IPsec Phase-2 Tunnel.
If the tunnel was setup manually, the value of this
MIB element would be `none'.
Context
- MIB
- CISCO-ENHANCED-IPSEC-FLOW-MIB
- OID
.1.3.6.1.4.1.9.9.432.1.1.2.1.19- Type
- column
- Access
- readonly
- Status
- current
- Parent
- ceipSecTunnelEntry
- Table
- ceipSecTunnelTable
- Siblings
- 53
Syntax
CISCO-IPSEC-TCCIPsecDiffHellmanGrp
- Source
- CISCO-IPSEC-TCCIPsecDiffHellmanGrp
- Base type
Enumeration
Values & Constraints
Type Values
1 | other |
2 | notDH |
3 | modp768 |
4 | modp1024 |
5 | ec2nGP155 |
6 | ec2nGP185 |
7 | modp1536 |
8 | ec2nGF163 |
9 | ec2nGF283 |
10 | ec2nGF409 |
11 | ec2nGF571 |
12 | modp2048 |
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| ceipSecTunIndex The index of the IPsec Phase-2 Tunnel Table.
The value of the index is a number which begins
at 1 and is incremented with each tunnel that is
created. The value of this object wil… | column | CISCO-IPSEC-TCCIPsecPhase2TunnelIndex | .1.3.6.1.4.1.9.9.432.1.1.2.1.1 |
| ceipSecTunNATTraversalMode The encapsulation used by the IPsec Phase-2
tunnel for NAT traversal.
The value of this object is constrained based on
the value of the column 'ceipSecTunEncapMode'… | column | CISCO-IPSEC-TCCIPsecNATTraversalMode | .1.3.6.1.4.1.9.9.432.1.1.2.1.10 |
| ceipSecTunLifeSize The negotiated LifeSize of the
IPsec Phase-2 Tunnel in kilobytes. | column | KBytes Unsigned32 | .1.3.6.1.4.1.9.9.432.1.1.2.1.11 |
| ceipSecTunLifeTime The negotiated LifeTime of the IPsec Phase-2
Tunnel in seconds.
If the tunnel was setup manually, the value of this
MIB element should be 0. | column | Seconds SNMPv2-SMIUnsigned32 | .1.3.6.1.4.1.9.9.432.1.1.2.1.12 |
| ceipSecTunActiveTime The length of time the IPsec Phase-2
Tunnel has been active in hundredths of seconds. | column | SNMPv2-TCTimeInterval | .1.3.6.1.4.1.9.9.432.1.1.2.1.13 |
| ceipSecTunSaLifeSizeThreshold The security association LifeSize refresh
threshold in kilobytes.
If the tunnel was setup manually, the value of this
MIB element should be 0. | column | KBytes SNMPv2-SMIUnsigned32 | .1.3.6.1.4.1.9.9.432.1.1.2.1.14 |
| ceipSecTunSaLifeTimeThreshold The security association LifeTime refresh
threshold in seconds.
If the tunnel was setup manually, the value of this
MIB element should be 0. | column | Seconds SNMPv2-SMIUnsigned32 | .1.3.6.1.4.1.9.9.432.1.1.2.1.15 |
| ceipSecTunTotalRefreshes The total number of security
association refreshes performed. | column | QM Exchanges SNMPv2-SMICounter32 | .1.3.6.1.4.1.9.9.432.1.1.2.1.16 |
| ceipSecTunExpiredSaInstances The total number of security associations
which have expired.
If the tunnel was setup manually, the value of this
MIB element should be 0. | column | SAs SNMPv2-SMICounter32 | .1.3.6.1.4.1.9.9.432.1.1.2.1.17 |
| ceipSecTunCurrentSaInstances The number of security associations
which are currently active or expiring. | column | SNMPv2-SMIGauge32 | .1.3.6.1.4.1.9.9.432.1.1.2.1.18 |
| ceipSecTunLocalAddressType The type of the IP address of the local endpoint
for the IPsec Phase-2 Tunnel. | column | INET-ADDRESS-MIBInetAddressType | .1.3.6.1.4.1.9.9.432.1.1.2.1.2 |
| ceipSecTunInSaEncryptAlgo The encryption algorithm used by the inbound security
association of the IPsec Phase-2 Tunnel. | column | CISCO-IPSEC-TCCIPsecEncryptAlgorithm | .1.3.6.1.4.1.9.9.432.1.1.2.1.20 |
| ceipSecTunInSaEncryptKeySize The key size in bits of the negotiated key to be
used with the algorithm denoted by
'ceipSecTunInSaEncryptAlgo'.
For DES and 3DES the key size is respectively 56 a… | column | Bits CISCO-IPSEC-TCCIPsecEncryptionKeySize | .1.3.6.1.4.1.9.9.432.1.1.2.1.21 |
| ceipSecTunInSaAhAuthAlgo The authentication algorithm used by the inbound
authentication header (AH) security association of
the IPsec Phase-2 Tunnel. | column | CISCO-IPSEC-TCCIPsecAuthAlgorithm | .1.3.6.1.4.1.9.9.432.1.1.2.1.22 |
| ceipSecTunInSaEspAuthAlgo The authentication algorithm used by the inbound
ecapsulation security protocol (ESP) security
association of the IPsec Phase-2 Tunnel. | column | CISCO-IPSEC-TCCIPsecAuthAlgorithm | .1.3.6.1.4.1.9.9.432.1.1.2.1.23 |
| ceipSecTunInSaDecompAlgo The decompression algorithm used by the inbound
security association of the IPsec Phase-2 Tunnel. | column | CISCO-IPSEC-TCCIPsecCompAlgorithm | .1.3.6.1.4.1.9.9.432.1.1.2.1.24 |
| ceipSecTunOutSaDHGrp The Diffie Hellman Group used by the outbound security
association of the IPsec Phase-2 Tunnel.
If the tunnel was setup manually, the value of this
MIB element woul… | column | CISCO-IPSEC-TCCIPsecDiffHellmanGrp | .1.3.6.1.4.1.9.9.432.1.1.2.1.25 |
| ceipSecTunOutSaEncryptAlgo The encryption algorithm used by the outbound security
association of the IPsec Phase-2 Tunnel. | column | CISCO-IPSEC-TCCIPsecEncryptAlgorithm | .1.3.6.1.4.1.9.9.432.1.1.2.1.26 |
| ceipSecTunOutSaEncryptKeySize The key size in bits of the negotiated key to be
used with the algorithm denoted by
'ceipSecTunOutSaEncryptAlgo'.
For DES and 3DES the key size is respectively 56 … | column | Bits CISCO-IPSEC-TCCIPsecEncryptionKeySize | .1.3.6.1.4.1.9.9.432.1.1.2.1.27 |
| ceipSecTunOutSaAhAuthAlgo The authentication algorithm used by the outbound
authentication header (AH) security association of
the IPsec Phase-2 Tunnel. | column | CISCO-IPSEC-TCCIPsecAuthAlgorithm | .1.3.6.1.4.1.9.9.432.1.1.2.1.28 |
| ceipSecTunOutSaEspAuthAlgo The authentication algorithm used by the inbound
encapsulation security protocol (ESP)
security association of the IPsec Phase-2 Tunnel. | column | CISCO-IPSEC-TCCIPsecAuthAlgorithm | .1.3.6.1.4.1.9.9.432.1.1.2.1.29 |
| ceipSecTunLocalAddress The IP address of the local endpoint
for the IPsec Phase-2 Tunnel. | column | INET-ADDRESS-MIBInetAddress | .1.3.6.1.4.1.9.9.432.1.1.2.1.3 |
| ceipSecTunOutSaCompAlgo The compression algorithm used by the inbound
security association of the IPsec Phase-2 Tunnel. | column | CISCO-IPSEC-TCCIPsecCompAlgorithm | .1.3.6.1.4.1.9.9.432.1.1.2.1.30 |
| ceipSecTunPmtu The Path MTU for this IPsec Phase-2 tunnel, which has
been either learnt from the network or which has been
specified by the administrator. The lower end of the
range is 68 which … | column | Octets CISCO-IPSEC-TCCIPsecPmtu | .1.3.6.1.4.1.9.9.432.1.1.2.1.31 |
| ceipSecTunInOctets A high capacity count of the total number of octets
received by this IPsec Phase-2 Tunnel. This value is
accumulated BEFORE determining whether or not the packet
should be decomp… | column | Octets SNMPv2-SMICounter64 | .1.3.6.1.4.1.9.9.432.1.1.2.1.32 |
| ceipSecTunInDecompOctets A high capacity count of the total number of decompressed
octets received by this IPsec Phase-2 Tunnel. This value
is accumulated AFTER the packet is decompressed. If
compression… | column | SNMPv2-SMICounter64 | .1.3.6.1.4.1.9.9.432.1.1.2.1.33 |
| ceipSecTunInPkts The total number of packets received by this IPsec
Phase-2 Tunnel. | column | Packets SNMPv2-SMICounter32 | .1.3.6.1.4.1.9.9.432.1.1.2.1.34 |
| ceipSecTunInDropPkts The total number of packets dropped
during receive processing by this IPsec Phase-2
Tunnel. This count does NOT include
packets dropped due to Anti-Replay processing. | column | Packets SNMPv2-SMICounter32 | .1.3.6.1.4.1.9.9.432.1.1.2.1.35 |
| ceipSecTunInReplayDropPkts The total number of packets dropped during
receive processing due to Anti-Replay processing
by this IPsec Phase-2 Tunnel. | column | Packets SNMPv2-SMICounter32 | .1.3.6.1.4.1.9.9.432.1.1.2.1.36 |
| ceipSecTunInAuths The total number of inbound
authentication's performed by this
IPsec Phase-2 Tunnel. | column | Events SNMPv2-SMICounter32 | .1.3.6.1.4.1.9.9.432.1.1.2.1.37 |
| ceipSecTunInAuthFails The total number of inbound authentication's
which ended in failure by this IPsec Phase-2 Tunnel . | column | Failures SNMPv2-SMICounter32 | .1.3.6.1.4.1.9.9.432.1.1.2.1.38 |
| ceipSecTunInDecrypts The total number of inbound decryption's performed
by this IPsec Phase-2 Tunnel. | column | Packets SNMPv2-SMICounter32 | .1.3.6.1.4.1.9.9.432.1.1.2.1.39 |
| ceipSecTunRemoteAddressType The type of the IP address of the remote
endpoint for the IPsec Phase-2 Tunnel. | column | INET-ADDRESS-MIBInetAddressType | .1.3.6.1.4.1.9.9.432.1.1.2.1.4 |
| ceipSecTunInDecryptFails The total number of inbound decryption's
which ended in failure by this IPsec Phase-2 Tunnel. | column | Failures SNMPv2-SMICounter32 | .1.3.6.1.4.1.9.9.432.1.1.2.1.40 |
| ceipSecTunOutOctets A high capacity count of the total number of octets
sent by this IPsec Phase-2 Tunnel. This value is
accumulated AFTER determining whether or not the
packet should be compressed. | column | SNMPv2-SMICounter64 | .1.3.6.1.4.1.9.9.432.1.1.2.1.41 |
| ceipSecTunOutUncompOctets A high capacity count of the total number
of uncompressed octets sent by this IPsec
Phase-2 Tunnel. This value is accumulated BEFORE
the packet is compressed. If compression
is n… | column | SNMPv2-SMICounter64 | .1.3.6.1.4.1.9.9.432.1.1.2.1.42 |
| ceipSecTunOutPkts The total number of packets sent by this
IPsec Phase-2 Tunnel. | column | Packets SNMPv2-SMICounter32 | .1.3.6.1.4.1.9.9.432.1.1.2.1.43 |
| ceipSecTunOutDropPkts The total number of packets dropped during
send processing by this IPsec Phase-2 Tunnel. | column | Packets SNMPv2-SMICounter32 | .1.3.6.1.4.1.9.9.432.1.1.2.1.44 |
| ceipSecTunOutAuths The total number of outbound authentication's performed
by this IPsec Phase-2 Tunnel. | column | Events SNMPv2-SMICounter32 | .1.3.6.1.4.1.9.9.432.1.1.2.1.45 |
| ceipSecTunOutAuthFails The total number of outbound
authentication's which ended in failure
by this IPsec Phase-2 Tunnel. | column | Failures SNMPv2-SMICounter32 | .1.3.6.1.4.1.9.9.432.1.1.2.1.46 |
| ceipSecTunOutEncrypts The total number of outbound encryption's performed
by this IPsec Phase-2 Tunnel. | column | Packets SNMPv2-SMICounter32 | .1.3.6.1.4.1.9.9.432.1.1.2.1.47 |
| ceipSecTunOutEncryptFails The total number of outbound encryption's
which ended in failure by this IPsec Phase-2 Tunnel. | column | Failures SNMPv2-SMICounter32 | .1.3.6.1.4.1.9.9.432.1.1.2.1.48 |
| ceipSecTunOutCompressedPkts The total number of outbound packets
which were successfully compressed. | column | Packets SNMPv2-SMICounter32 | .1.3.6.1.4.1.9.9.432.1.1.2.1.49 |
| ceipSecTunRemoteAddress The IP address of the remote endpoint for
the IPsec Phase-2 Tunnel. | column | INET-ADDRESS-MIBInetAddress | .1.3.6.1.4.1.9.9.432.1.1.2.1.5 |
| ceipSecTunOutCompSkippedPkts The total number of outbound packets that were to be
compressed but which were skipped due to the compression
hysteresis. | column | Packets SNMPv2-SMICounter32 | .1.3.6.1.4.1.9.9.432.1.1.2.1.50 |
| ceipSecTunOutCompFailPkts The total number of outbound packets that failed
compression because they grew in size after compression. | column | Packets SNMPv2-SMICounter32 | .1.3.6.1.4.1.9.9.432.1.1.2.1.51 |
| ceipSecTunOutCompTooSmallPkts The total number of outbound packets that were to be
compressed but were smaller than the compression threshold
size. | column | Packets SNMPv2-SMICounter32 | .1.3.6.1.4.1.9.9.432.1.1.2.1.52 |
| ceipSecIfIndex This object represents the ifIndex of an interface
where this tunnel is created.
Multiple IPsec tunnels can be created using the same
interface. | column | IF-MIBInterfaceIndex | .1.3.6.1.4.1.9.9.432.1.1.2.1.53 |
| ceipSecTunStatus The status of the MIB table row.
This object can be used to bring the tunnel down
or force a rekeying.
When the value is set to destroy(5), the SA
bundle is destroy… | column | CISCO-IPSEC-TCCIPsecTunnelStatus | .1.3.6.1.4.1.9.9.432.1.1.2.1.54 |
| ceipSecTunControlProtocol Identifies the protocol used to setup and
administer this Phase-2 IPsec tunnel.
In case this tunnel was spawned by an IPsec
signaling protocol, this MIB object co… | column | CISCO-IPSEC-TCCIPsecControlProtocol | .1.3.6.1.4.1.9.9.432.1.1.2.1.6 |
| ceipSecTunControlTunnelIndex The index of the associated IPsec Phase-1
Tunnel. In case this tunnel was spawned by an
IPsec signaling protocol, this MIB object
contains the value of the object 'cisgIpsSgTunInd… | column | CISCO-IPSEC-TCCIPsecPhase1TunnelIndexOrZero | .1.3.6.1.4.1.9.9.432.1.1.2.1.7 |
| ceipSecTunControlTunnelAlive An indicator which specifies whether or not the
IPsec Phase-1 Tunnel that spawned this Phase-2
tunnel currently exists. | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.432.1.1.2.1.8 |
| ceipSecTunEncapMode The encapsulation mode used by the
IPsec Phase-2 Tunnel. | column | CISCO-IPSEC-TCCIPsecEncapMode | .1.3.6.1.4.1.9.9.432.1.1.2.1.9 |