ipspGroupContentsTable
IPSEC-POLICY-MIB ·
.1.3.6.1.2.1.153.1.3
Object
table
This table contains a list of rules and/or subgroups contained within a given policy group. The entries are sorted by the ipspGroupContPriority object and MUST be executed in order according to this value, starting with the lowest value. Once a group item has been processed, the processor MUST stop processing this packet if an action was executed as a result of the processing of a given group. Iterating into the next policy group item by finding the next largest ipspGroupContPriority object shall only be done if no actions were run when processing the last item for a given packet.
Context
- MIB
- IPSEC-POLICY-MIB
- OID
.1.3.6.1.2.1.153.1.3- Type
- table
- Status
- current
- Parent
- ipspConfigObjects
- Siblings
- 34
- Children
- 1
Syntax
No syntax metadata recorded.
Values & Constraints
No enumerated values or constraints recorded.
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| ipspLocalConfigObjects | node | - | .1.3.6.1.2.1.153.1.1 |
| ipspTimeFilterTable Defines a table of filters which can be used to effectively
enable or disable policies based on a valid time range. | table | - | .1.3.6.1.2.1.153.1.10 |
| ipspIpsoHeaderFilterTable This table contains a list of IPSO header filter definitions
to be used within the ipspRuleDefinitionTable or the
ipspSubfilterTable. IPSO headers and their values
are described … | table | - | .1.3.6.1.2.1.153.1.11 |
| ipspCredentialFilterTable This table defines filters which can be used to match
credentials of IKE peers, where the credentials in question
have been obtained from an IKE phase 1 exchange. They may be
X.5… | table | - | .1.3.6.1.2.1.153.1.12 |
| ipspPeerIdentityFilterTable This table defines filters which can be used to match
credentials of IKE peers, where the credentials in question
have been obtained from an IKE phase 1 exchange. They may be
X.5… | table | - | .1.3.6.1.2.1.153.1.13 |
| ipspCompoundActionTable Table used to allow multiple actions to be associated with a
rule. It uses the ipspSubactionsTable to do this. | table | - | .1.3.6.1.2.1.153.1.14 |
| ipspSubactionsTable This table contains a list of the sub-actions within a given
compound action. Compound actions executing these actions
MUST execute them in series based on the ipspSubActPriority… | table | - | .1.3.6.1.2.1.153.1.15 |
| ipspStaticActions | node | - | .1.3.6.1.2.1.153.1.16 |
| ipspSaPreconfiguredActionTable This table is a list of non-negotiated IPsec actions (SAs)
that can be performed and contains or indicates the data
necessary to create such an SA. | table | - | .1.3.6.1.2.1.153.1.17 |
| ipspSaNegotiationParametersTable This table contains reusable parameters that can be pointed
to by the ipspIkeActionTable and ipspIpsecActionTable. These
parameters are reusable since it is likely an administrat… | table | - | .1.3.6.1.2.1.153.1.18 |
| ipspIkeActionTable The ipspIkeActionTable contains a list of the parameters used
for an IKE phase 1 SA DOI negotiation. See the corresponding
table ipspIkeActionProposalsTable for a list of proposa… | table | - | .1.3.6.1.2.1.153.1.19 |
| ipspEndpointToGroupTable This table is used to map policy (groupings) onto an endpoint
where traffic is to pass by. Any policy group assigned to an
endpoint is then used to control access to the traffic
… | table | - | .1.3.6.1.2.1.153.1.2 |
| ipspIkeActionProposalsTable This table contains a list of all ike proposal names found
within a given IKE Action. | table | - | .1.3.6.1.2.1.153.1.20 |
| ipspIkeProposalTable This table contains a list of IKE proposals which are used in
an IKE negotiation. | table | - | .1.3.6.1.2.1.153.1.21 |
| ipspIpsecActionTable The ipspIpsecActionTable contains a list of the parameters
used for an IKE phase 2 IPsec DOI negotiation. | table | - | .1.3.6.1.2.1.153.1.22 |
| ipspIpsecProposalsTable This table lists one or more IPsec proposals for
IPsec actions. | table | - | .1.3.6.1.2.1.153.1.23 |
| ipspIpsecTransformsTable This table lists the IPsec proposals contained within a given
IPsec action and the transforms within each of those
proposals. These proposals and transforms can then be used
to c… | table | - | .1.3.6.1.2.1.153.1.24 |
| ipspAhTransformTable This table lists all the AH transforms which can be used to
build IPsec proposals. | table | - | .1.3.6.1.2.1.153.1.25 |
| ipspEspTransformTable This table lists all the ESP transforms which can be used to
build IPsec proposals | table | - | .1.3.6.1.2.1.153.1.26 |
| ipspIpcompTransformTable This table lists all the IP compression transforms which
can be used to build IPsec proposals during negotiation of
a phase 2 SA. | table | - | .1.3.6.1.2.1.153.1.27 |
| ipspIkeIdentityTable IKEIdentity is used to represent the identities that may be
used for an IPProtocolEndpoint (or collection of
IPProtocolEndpoints) to identify itself in IKE phase 1
negotiations. … | table | - | .1.3.6.1.2.1.153.1.28 |
| ipspPeerIdentityTable PeerIdentity is used to represent the identities that may be
used for peers to identify themselves in IKE phase I/II
negotiations. PeerIdentityTable aggregates the table entries
… | table | - | .1.3.6.1.2.1.153.1.29 |
| ipspAutostartIkeTable The parameters in the autostart IKE Table are used to
automatically initiate IKE phaes I and II (i.e. IPsec)
negotiations on startup. It also will initiate IKE phase I
and II neg… | table | - | .1.3.6.1.2.1.153.1.30 |
| ipspIpsecCredMngServiceTable A table of Credential Management Service values. This table
is usually used for credential/certificate values that are
used with a management service (e.g. Certificate
Authoritie… | table | - | .1.3.6.1.2.1.153.1.31 |
| ipspCredMngCRLTable A table of the Credential Revocation Lists (CRL) for
credential managment services. | table | - | .1.3.6.1.2.1.153.1.32 |
| ipspRevokedCertificateTable A table of Credentials revoked by credential managment
services. That is, this table is a table of Certificates
that are on CRL's, Credential Revocation Lists. | table | - | .1.3.6.1.2.1.153.1.33 |
| ipspCredentialTable A table of credential values. Example of Credentials are
shared secrets, certificates or kerberos tickets. | table | - | .1.3.6.1.2.1.153.1.34 |
| ipspCredentialSegmentTable A table of credential segments. This table is used for
credentials which are larger than the maximum size allowed
for ipspCredCredential. | table | - | .1.3.6.1.2.1.153.1.35 |
| ipspRuleDefinitionTable This table defines a policy rule by associating a filter or a
set of filters to an action to be executed. | table | - | .1.3.6.1.2.1.153.1.4 |
| ipspCompoundFilterTable A table defining a compound set of filters and their
associated parameters. A row in this table can either be
pointed to by a ipspRuleDefFilter object or by a ficSubFilter
object. | table | - | .1.3.6.1.2.1.153.1.5 |
| ipspSubfiltersTable This table defines a list of filters contained within a given
compound filter set defined in the ipspCompoundFilterTable. | table | - | .1.3.6.1.2.1.153.1.6 |
| ipspStaticFilters | node | - | .1.3.6.1.2.1.153.1.7 |
| ipspIpHeaderFilterTable This table contains a list of filter definitions to be used
within the ipspRuleDefinitionTable or the
ipspSubfilterTable table. | table | - | .1.3.6.1.2.1.153.1.8 |
| ipspIpOffsetFilterTable This table contains a list of filter definitions to be used
within the ipspRuleDefinitionTable or the
ipspSubfilterTable. | table | - | .1.3.6.1.2.1.153.1.9 |
Child Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| ipspGroupContentsEntry Defines a given sub-item within a policy group. | row | - | .1.3.6.1.2.1.153.1.3.1 |