-
Notifications
You must be signed in to change notification settings - Fork 59
/
Copy pathCISCO-IKE-FLOW-EXT-MIB.mib
273 lines (228 loc) · 9.7 KB
/
CISCO-IKE-FLOW-EXT-MIB.mib
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
-- *------------------------------------------------------------------
-- * CISCO-IKE-FLOW-EXT-MIB.my: Internet Key Exchange(IKE) MIB
-- * extension to CISCO-IKE-FLOW-MIB.
-- *
-- * March 2004, Srini Kode
-- *
-- * Copyright (c) 2004 by cisco Systems, Inc.
-- * All rights reserved.
-- *
-- *------------------------------------------------------------------
CISCO-IKE-FLOW-EXT-MIB DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY,
OBJECT-TYPE FROM SNMPv2-SMI
MODULE-COMPLIANCE,
OBJECT-GROUP FROM SNMPv2-CONF
SnmpAdminString FROM SNMP-FRAMEWORK-MIB
ciscoMgmt FROM CISCO-SMI
cisgIpsSgProtocol,
cisgIpsSgTunIndex FROM CISCO-IPSEC-SIGNALING-MIB
CIKEIsakmpDoi,
CIPsecPhase1PeerIdentityType FROM CISCO-IPSEC-TC;
ciscoIkeFlowExtMIB MODULE-IDENTITY
LAST-UPDATED "200409140000Z"
ORGANIZATION "Cisco Systems, Inc."
CONTACT-INFO
" Cisco Systems
Customer Service
Postal: 170 W Tasman Drive
San Jose, CA 95134
USA
Tel: +1 800 553 -NETS
E-mail: [email protected]"
DESCRIPTION
"This MIB module is an extension to
CISCO-IKE-FLOW-MIB and contains Cisco Specific
extensions for monitoring IKE.
It is for monitoring the structures and status of
IPsec control flows based on Internet Key Exchange
protocol.
Acronyms
The following acronyms are used in this document:
Flow, Tunnel:
An ISAKMP SA can be regarded as representing
a flow of ISAKMP/IKE traffic. Hence an ISAKMP
is referred to as a 'Phase 1 Tunnel' in this
document.
IPsec:
Secure IP Protocol.
ISAKMP:
Internet Security Association and Key
Management Protocol.
IKE:
Internet Key Exchange Protocol.
FCSP:
Fibre Channel Security Protocol.
SA:
Security Association
(ref: rfc2408).
Phase 2 Tunnel:
AN instance of a non-ISAKMP SA bundle in which
all the SA share the same proxy identifiers
protect the same stream of application traffic.
Such an SA bundle is termed a 'Phase 2 Tunnel'.
Note that a Phase 2 tunnel may comprise different
SA bundles and different number of SA bundles at
different times (due to key refresh). "
REVISION "200409140000Z"
DESCRIPTION
"Initial version of this MIB module. "
::= { ciscoMgmt 428 }
-- Objects, Notifications & Conformances
ciscoIkeFlowExtMIBNotifs OBJECT IDENTIFIER
::= { ciscoIkeFlowExtMIB 0 }
ciscoIkeFlowExtMIBObjects OBJECT IDENTIFIER
::= { ciscoIkeFlowExtMIB 1 }
ciscoIkeFlowExtMIBConform OBJECT IDENTIFIER
::= { ciscoIkeFlowExtMIB 2 }
cifeIkeGlobals OBJECT IDENTIFIER
::= { ciscoIkeFlowExtMIBObjects 1 }
cifeClearAllTunnels OBJECT-TYPE
SYNTAX INTEGER {
none(1),
clearIPSec(2),
clearFCSP(3)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Clears all the tunnels of a specific type.
'none' is returned on reading this object.
'clearIPSec' all the IPSec tunnels are cleared.
'clearFCSP' all FCSP tunnels are cleared. "
::= { cifeIkeGlobals 1 }
---
--- cifeTunnelExtTable
---
cifeTunnelExtTable OBJECT-TYPE
SYNTAX SEQUENCE OF CifeTunnelExtEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The Phase-1 Internet Key Exchange Tunnel Table.
There is one entry in this table for each active
IKE tunnel. This table is an extension to
cifIkeTunnelTable defined in CISCO-IKE-FLOW-MIB.
Some information in this table is also present in
the cisgIpsSgTunnelTable, but the table is indexed
differently so that the rows in this table are
grouped/ordered by domain of interpretation (DOI). "
::= { ciscoIkeFlowExtMIBObjects 2 }
cifeTunnelExtEntry OBJECT-TYPE
SYNTAX CifeTunnelExtEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Each entry contains the attributes associated with
an active IKE Tunnel, identified by
cisgIpsSgTunIndex, for the IKE protocol, identified
by cisgIpsSgProtocol, in this DOI, identified by
cifeTunnelExtDoi. "
INDEX { cifeTunnelExtDoi, cisgIpsSgProtocol,
cisgIpsSgTunIndex }
::= { cifeTunnelExtTable 1}
CifeTunnelExtEntry ::= SEQUENCE {
cifeTunnelExtDoi CIKEIsakmpDoi,
cifeTunnelExtLocalIdenType CIPsecPhase1PeerIdentityType,
cifeTunnelExtLocalIdentity SnmpAdminString,
cifeTunnelExtRemoteIdenType CIPsecPhase1PeerIdentityType,
cifeTunnelExtRemoteIdentity SnmpAdminString
}
cifeTunnelExtDoi OBJECT-TYPE
SYNTAX CIKEIsakmpDoi
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This identifies the DOI of Phase-2 operations in
which this control tunnel operates. This may be
used to identify the Phase-2 protocol. "
::= { cifeTunnelExtEntry 1 }
cifeTunnelExtLocalIdenType OBJECT-TYPE
SYNTAX CIPsecPhase1PeerIdentityType
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The type of the identity used by the managed entity
authenticating itself to the peer in the setup of the
IKE tunnel corresponding to this conceptual row.
This object would have same value as
cisgIpsSgTunLocalType from
CISCO-IPSEC-SIGNALLING-MIB. "
::= { cifeTunnelExtEntry 2 }
cifeTunnelExtLocalIdentity OBJECT-TYPE
SYNTAX SnmpAdminString(SIZE(1..255))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The value of the local peer identity.
This object would have same value as
cisgIpsSgTunLocalValue from
CISCO-IPSEC-SIGNALLING-MIB. "
::= { cifeTunnelExtEntry 3 }
cifeTunnelExtRemoteIdenType OBJECT-TYPE
SYNTAX CIPsecPhase1PeerIdentityType
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The type of the identity used by the peer in
authenticating itself to the local entity in the
setup of the IKE tunnel corresponding to this
conceptual row.
This object would have same value as
cisgIpsSgTunRemoteType from
CISCO-IPSEC-SIGNALLING-MIB. "
::= { cifeTunnelExtEntry 4 }
cifeTunnelExtRemoteIdentity OBJECT-TYPE
SYNTAX SnmpAdminString(SIZE(1..255))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The value of the remote peer identity.
This object would have same value as
cisgIpsSgTunRemoteValue from
CISCO-IPSEC-SIGNALLING-MIB. "
::= { cifeTunnelExtEntry 5 }
--
-- Cisco IKE extension Module Compliance
--
cifeMIBConformances OBJECT IDENTIFIER
::= { ciscoIkeFlowExtMIBConform 1 }
cifeMIBGroups OBJECT IDENTIFIER
::= { ciscoIkeFlowExtMIBConform 2 }
cifeMIBCompliance MODULE-COMPLIANCE
STATUS current
DESCRIPTION
"The compliance statement for entities which
implement the Cisco IKE extension MIB. "
MODULE -- this module
MANDATORY-GROUPS {
cifeGlobalsGroup,
cifeTunnelExtGroup
}
::= { cifeMIBConformances 1 }
--
-- MIB Groups (Units of Conformance)
--
cifeGlobalsGroup OBJECT-GROUP
OBJECTS {
cifeClearAllTunnels
}
STATUS current
DESCRIPTION
"A collection of objects providing Global
IKE configuration. "
::= { cifeMIBGroups 1 }
cifeTunnelExtGroup OBJECT-GROUP
OBJECTS {
cifeTunnelExtLocalIdenType,
cifeTunnelExtLocalIdentity,
cifeTunnelExtRemoteIdenType,
cifeTunnelExtRemoteIdentity
}
STATUS current
DESCRIPTION
"The collection of objects providing IKE tunnels
info. "
::= { cifeMIBGroups 2 }
END