ipsecPeerDynAddrMode
FEC-IPSEC-MIB ·
.0.5.1.87
Object
column
r/w
Enumeration
When IP address assignment via IKE Config Mode is configured
(ipsecPeerDynAddrRole != none) this object specifies the used mode:
pull(1), -- the client will request IP address and the gateway
will answer the request
push(2) -- the gateway will set IP address to the client and
the client will accept or deny it
The ipsecPeerDynAddrMode value has to be the same for both sides of
the tunnel. With default value 'pull' the peer (ipsecPeerDynAddrRole ==
client) will request IP address and the gateway (ipsecPeerDynAddrRole ==
server) will answer the request.
The 'push' mode is needed for partner devices that require this mode.
This object matters only when ipsecPeerDynAddrRole != none.
Context
- MIB
- FEC-IPSEC-MIB
- OID
.0.5.1.87- Type
- column
- Access
- readwrite
- Status
- current
- Parent
- ipsecPeerEntry
- Table
- ipsecPeerTable
- Siblings
- 30
Syntax
Enumeration
Values & Constraints
Enumerated Values
1 | pull |
2 | push |
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| ipsecPeerIndex A unique index identifying this entry. | column | Integer32 | .0.5.1.1 |
| ipsecPeerTrafficList This object specifies the first entry of possibly a
chain of traffic entries from the ipsecTrafficTable
which should be protected with IPSec using this peer. | column | Integer32 | .0.5.1.11 |
| ipsecPeerDynamicAddress The IP-address of the peer.
This object may contain either an IP address or a domain name. | column | SNMPv2-TCDisplayString | .0.5.1.14 |
| ipsecPeerVirtualInterface This object specifies if a virtual interface should be created
for this peer. If set to enabled, all traffic routed towards
this peer will be protected. The traffic list for this … | column | Enumeration | .0.5.1.15 |
| ipsecPeerStartMode This object specifies the events which make the IPSec peer go up.
Possible values:
on-demand(1), -- packet triggered start,
-- fall back to dormant if unused
always-up(2) … | column | Enumeration | .0.5.1.16 |
| ipsecPeerPreSharedKey The pre-shared-key used with this peer, if pre-shared-keys
are used for authentication. This field serves only
as an input field and its contents are replaced with
a single asteri… | column | SNMPv2-TCDisplayString | .0.5.1.21 |
| ipsecPeerDescription An optional description for this peer. | column | SNMPv2-TCDisplayString | .0.5.1.3 |
| ipsecPeerIsdnCB Switch for turning ISDN call back feature on and off
specifically for peer.
Default value is disabled. | column | Enumeration | .0.5.1.45 |
| ipsecPeerPriority Defines the matching priority. | column | Integer32 | .0.5.1.47 |
| ipsecPeerIkeProfile When ipsecPeerIkeVersion is set to ikev1 this is an index from
the ikeProfileTable containing a special phase 1 profile to
use for this peer.
When ipsecPeerIkeVersion is set to … | column | Integer32 | .0.5.1.48 |
| ipsecPeerIpsecProfile The index from the ipsecProfileTable containing a special
phase 2 profile to use for this peer. | column | Integer32 | .0.5.1.49 |
| ipsecPeerPeerIds The IDs of the peer which are accepted for authentication.
Syntax:
- X500 distinguished name:
<obj-name=obj-value, obj-ID=obj-value, ...>
- IPV4-Address:
|123.456.789.… | column | SNMPv2-TCDisplayString | .0.5.1.5 |
| ipsecPeerAdminStatus Peer administrative state. | column | Enumeration | .0.5.1.50 |
| ipsecPeerPreSharedKeyData Field used for storing the pre-shared-key permanently. | column | OctetString | .0.5.1.63 |
| ipsecPeerIsdnCBMode Define callback mode.
The following modes are defined:
compat(1) -- compatibility to old callback
auto(2) -- automatically detect best method
auto-d(3) -- automatically… | column | Enumeration | .0.5.1.66 |
| ipsecPeerIsdnCBDChanMode Define callback D channel mode.
The following modes are defined:
llc(1) -- code token into LLC information
element only
subaddr(2) -- code token into SUBADDR inform… | column | Enumeration | .0.5.1.67 |
| ipsecPeerType The type of the peer. Dynamic peer entries are duplicated
whenever an incoming IKE request matches the ID and/or
address information of the remote side.
Note:
- For traffic lis… | column | Enumeration | .0.5.1.73 |
| ipsecPeerDynAddrPoolId Identifier of Dynamic Address Pool if IP address is
assigned via IKE Configuration Method.
A value of -1 means that no Pool is assigned. | column | Integer32 | .0.5.1.78 |
| ipsecPeerDynAddrLocalIp The local IP address used in the IKE communication
when remote IP address is taken from IP address pool. | column | SNMPv2-SMIIpAddress | .0.5.1.79 |
| ipsecPeerLocalAddress The local address used for IPSec encrypted packets. | column | SNMPv2-SMIIpAddress | .0.5.1.8 |
| ipsecPeerXauthProfile The index from the xauthProfileTable containing a special
XAUTH profile to use for this peer.
A value of 0 means that no XAUTH profile is assigned. | column | Unsigned32 | .0.5.1.80 |
| ipsecPeerDynAddrRole Determines if IKE Config Mode is used and which role is performed:
none(1), -- no IP address assignemt via IKE Config Mode
client(2) -- get IP address via IKE Config Mode from re… | column | Enumeration | .0.5.1.81 |
| ipsecPeerIkeVersion Indicates the major version of IKE protocol to use. If set to
ikev1 the value of ipsecPeerIkeProfile is used as index into
ikeProfileTable. If set to ikev2 the value of
ipsecPee… | column | Enumeration | .0.5.1.82 |
| ipsecPeerLocalId The local ID used for authentication with this profile.
Syntax:
- X500 distinguished name:
<obj-name=obj-value, obj-ID=obj-value, ...>
- IPV4-Address:
|123.456.789.012… | column | SNMPv2-TCDisplayString | .0.5.1.83 |
| ipsecPeerAuthMethod This object specifies the authentication method used by default.
If the ipsecPeerAuthMethod field of an ipsecPeerEntry and the
ikePropAuthMethod field of the ikeProposalTableEntr… | column | Enumeration | .0.5.1.84 |
| ipsecPeerCert The index of the certificate used for authentication
in the certTable. Ignored for AuthMethod == pre_shared_key.
(only for IKEv2). | column | Integer32 | .0.5.1.85 |
| ipsecPeerCaCerts Receives a comma separated list with indices (0..32767)
of special certificate authority certificates accepted
for this profile.
(only for IKEv2). | column | SNMPv2-TCDisplayString | .0.5.1.86 |
| ipsecPeerMobike This object indicates whether the peer supports MOBIKE or not.
Only when both sides of a VPN connection support MOBIKE an IP
address change is possible.
Possible values:
ena… | column | Enumeration | .0.5.1.88 |
| ipsecPeerPublicIfIndex The index value which uniquely identifies the physical interface
that should be used for all ipsec traffic as initiator.
When multiple eqivalent routes to the given peer are avail… | column | Integer32 | .0.5.1.90 |
| ipsecPeerPublicIfIndexMode This object defines the mode used in conjunction with
ipsecPeerPublicIfIndex.
force(1), -- the given interface is used, even if a route
with lower metric is available.
prefe… | column | Enumeration | .0.5.1.91 |