ActiveXperts Network Monitor 2019##AdminFavorites

Wellfleet-IPSEC-MIB.mib object view, vendor Wellfleet

Introduction

Most network devices and programs ship with so-called MIB files to describe the parameters and meanings (i.e.: friendly names) which are available for monitoring via SNMP.
ActiveXperts Network Monitor 2019 can import vendor-specific MIB files, so it can be used to monitor specific OID's (Object Identifiers). This way, you can monitor your devices, computers, etc. by selecting your relevant OID's by name.

ActiveXperts Network Monitor 2019 can import MIB file Wellfleet-IPSEC-MIB and use it to monitor vendor specific OID's.

Wellfleet-IPSEC-MIB file content

Object view of Wellfleet-IPSEC-MIB:

Scalar Object
wfIpsecBaseCreate .1.3.6.1.4.1.18.3.5.3.26.1.1
Create/Delete parameter. Default is created. Users perform a set operation on this object in order to create/delete IPSec.
wfIpsecBaseEnable .1.3.6.1.4.1.18.3.5.3.26.1.2
Enable/Disable parameter. Default is enabled. Users perform a set operation on this object in order to enable/disable IPSec.
wfIpsecBaseState .1.3.6.1.4.1.18.3.5.3.26.1.3
The current state of IPsec.
wfIpsecBaseEspEncipherEnable .1.3.6.1.4.1.18.3.5.3.26.1.4
Used to control the whether ESP enciphers packets or not. Set this attribute to disable for debugging purposes only. When set to disabled, packets that match a policy that uses ESP to encipher the payload will not be enciphered. This allows one to view the plaintext inner headers for debugging purposes.
wfIpsecBaseMaxManualSpi .1.3.6.1.4.1.18.3.5.3.26.1.5
The maximum SPI value that will be accepted for manually configured SAs. The SA values 0 - 255 is reserved. To enter this value add the number of SAs belonging to a particular IPSec protocol ex ESP to 255. The default value is maximum of 32 unique ESP SAs. The value 255 will cause no manual SAs supported
wfIpsecSelectorInEntry .1.3.6.1.4.1.18.3.5.3.26.2.1
IP Security Selectors for a policy
wfIpsecSelectorOutEntry .1.3.6.1.4.1.18.3.5.3.26.3.1
IP Security Selectors for a policy
wfIpsecDescriptorEntry .1.3.6.1.4.1.18.3.5.3.26.4.1
An IP security Descriptor
wfIpsecEspSaEntry .1.3.6.1.4.1.18.3.5.3.26.5.1
Entry in ESP security association table
wfIpsecStatsEntry .1.3.6.1.4.1.18.3.5.3.26.6.1
Entry in Interface Statistics Table
wfIpsecRemoteGatewayEntry .1.3.6.1.4.1.18.3.5.3.26.7.1
A remote Security Gateway
wfIpsecProposalEntry .1.3.6.1.4.1.18.3.5.3.26.8.1
An IP security Proposal. This is essentially a sequence of protection suites represented by wfIpsecSuiteEntry instances
wfIpsecSuiteEntry .1.3.6.1.4.1.18.3.5.3.26.9.1
An IP security protection suite
wfIpsecEspTransformEntry .1.3.6.1.4.1.18.3.5.3.26.10.1
An IP security ESP Transform
wfIpsecAhTransformEntry .1.3.6.1.4.1.18.3.5.3.26.11.1
An IP security AhTransform
wfIpsecSaStatsEntry .1.3.6.1.4.1.18.3.5.3.26.12.1
Entry in Automated ESP SA table
Tabular Object
wfIpsecSelectorInInterface .1.3.6.1.4.1.18.3.5.3.26.2.1.7
The network address of the IP interface to which the corresponding policy is applied.
wfIpsecSelectorInCircuit .1.3.6.1.4.1.18.3.5.3.26.2.1.8
The ID of the Circuit to which the corresponding policy is applied.
wfIpsecSelectorInPolicyNumber .1.3.6.1.4.1.18.3.5.3.26.2.1.9
ID policy's selectors.
wfIpsecSelectorInFragment .1.3.6.1.4.1.18.3.5.3.26.2.1.10
Fragment number - for large sets of selectors.
wfIpsecSelectorInCreate .1.3.6.1.4.1.18.3.5.3.26.2.1.1
Defines the existence of the policy's selectors: created - instance exists delete - instance should be deleted.
wfIpsecSelectorInEnable .1.3.6.1.4.1.18.3.5.3.26.2.1.2
Defines whether or not the policy should be used: enabled - activate the policy's selectors. disabled - deactivate the policy's selectors.
wfIpsecSelectorInStatus .1.3.6.1.4.1.18.3.5.3.26.2.1.3
Defines the current status of the this instance: up: this instance is in use down: this instance is misconfigured inactive: this instance is disabled notpresent: the IPsec code isn't loaded
wfIpsecSelectorInCounter .1.3.6.1.4.1.18.3.5.3.26.2.1.4
The number of received packets that have matched the selectors.
wfIpsecSelectorInDefinition .1.3.6.1.4.1.18.3.5.3.26.2.1.5
The policy's selector definition.
wfIpsecSelectorInReserved .1.3.6.1.4.1.18.3.5.3.26.2.1.6
Reserved field.
wfIpsecSelectorInName .1.3.6.1.4.1.18.3.5.3.26.2.1.11
name of this instance of selectors.
wfIpsecSelectorOutInterface .1.3.6.1.4.1.18.3.5.3.26.3.1.7
The network address of the IP interface to which the corresponding policy is applied.
wfIpsecSelectorOutCircuit .1.3.6.1.4.1.18.3.5.3.26.3.1.8
The ID of the Circuit to which the corresponding policy is applied.
wfIpsecSelectorOutPolicyNumber .1.3.6.1.4.1.18.3.5.3.26.3.1.9
ID policy's selectors.
wfIpsecSelectorOutFragment .1.3.6.1.4.1.18.3.5.3.26.3.1.10
Fragment number - for large sets of selectors.
wfIpsecSelectorOutCreate .1.3.6.1.4.1.18.3.5.3.26.3.1.1
Defines the existence of the policy's selectors: created - instance exists delete - instance should be deleted.
wfIpsecSelectorOutEnable .1.3.6.1.4.1.18.3.5.3.26.3.1.2
Defines whether or not the policy should be used: enabled - activate the policy's selectors. disabled - deactivate the policy's selectors.
wfIpsecSelectorOutStatus .1.3.6.1.4.1.18.3.5.3.26.3.1.3
Defines the current status of the this instance: up: this instance is in use down: this instance is misconfigured inactive: this instance is disabled notpresent: the IPsec code isn't loaded
wfIpsecSelectorOutCounter .1.3.6.1.4.1.18.3.5.3.26.3.1.4
The number of received packets that have matched the selectors.
wfIpsecSelectorOutDefinition .1.3.6.1.4.1.18.3.5.3.26.3.1.5
The policy's selector definition.
wfIpsecSelectorOutReserved .1.3.6.1.4.1.18.3.5.3.26.3.1.6
Reserved field.
wfIpsecSelectorOutName .1.3.6.1.4.1.18.3.5.3.26.3.1.11
name of this instance of selectors.
wfIpsecDescriptorInterface .1.3.6.1.4.1.18.3.5.3.26.4.1.4
The IP address of the security gateway which this descriptor belongs to.
wfIpsecDescriptorCircuit .1.3.6.1.4.1.18.3.5.3.26.4.1.5
The ID of the Circuit to which this instance applies.
wfIpsecDescriptorPolicyNumber .1.3.6.1.4.1.18.3.5.3.26.4.1.3
Allows instance of wfIpsecSelectorOutEntry to be matched with this instance.
wfIpsecDescriptorCreate .1.3.6.1.4.1.18.3.5.3.26.4.1.1
Create/Delete parameter. Default is created.
wfIpsecDescriptorStatus .1.3.6.1.4.1.18.3.5.3.26.4.1.2
The status of this instance: up: this instance is in use down: this instance is misconfigured inactive: this instance is disabled notpresent: the IPsec code isn't loaded
wfIpsecDescriptorManualSaList .1.3.6.1.4.1.18.3.5.3.26.4.1.6
the octet string represents an ordered list of Security Associations (SAs). the format of each 9 byte sequence is: ------------+-----------+-----------+------------+----------- | protocol | Peer IP Address | ------------+-----------+-----------+------------+----------- | SPI | ------------+-----------+-----------+------------+
wfIpsecDescriptorSaMode .1.3.6.1.4.1.18.3.5.3.26.4.1.7
Identifies mode of the SA for this policy.
wfIpsecDescriptorPfs .1.3.6.1.4.1.18.3.5.3.26.4.1.8
Identifies whether perfect forward secrecy is required or not.
wfIpsecDescriptorProposals .1.3.6.1.4.1.18.3.5.3.26.4.1.9
the octet string represents an ordered list of proposals. Every 2 octets in the string contains a number which corresponds to an instance I.D. of wfIpsecProposalEntry. The list of proposals is a logically ORed list.
wfIpsecDescriptorSourceForDestAddr .1.3.6.1.4.1.18.3.5.3.26.4.1.10
The source for the destination IP address value to be used in the SA. 'packet' limits use of the SA to those packets which have a matching IP addr even if the policy permits a range. 'policy' allows more than one traffic flow to use the SA if the policy permits a range of IP addresses.
wfIpsecDescriptorSourceForSrcAddr .1.3.6.1.4.1.18.3.5.3.26.4.1.11
The source for the destination IP address value to be used in the SA. 'packet' limits use of the SA to those packets which have a matching IP addr even if the policy permits a range. 'policy' allows more than one traffic flow to use the SA if the policy permits a range of IP addresses.
wfIpsecDescriptorSourceForProtocol .1.3.6.1.4.1.18.3.5.3.26.4.1.12
The source for the destination IP address value to be used in the SA. 'packet' limits use of the SA to those packets which have a matching IP addr even if the policy permits a range. 'policy' allows more than one traffic flow to use the SA if the policy permits a range of IP addresses.
wfIpsecDescriptorStartSourceAddr .1.3.6.1.4.1.18.3.5.3.26.4.1.13
The start Source IP address for the dynamic SA.
wfIpsecDescriptorEndSourceAddr .1.3.6.1.4.1.18.3.5.3.26.4.1.14
The end Source IP address for the dynamic SA.
wfIpsecDescriptorStartDestAddr .1.3.6.1.4.1.18.3.5.3.26.4.1.15
The start Destination IP address for the dynamic SA.
wfIpsecDescriptorEndDestAddr .1.3.6.1.4.1.18.3.5.3.26.4.1.16
The end Source IP address for the dynamic SA.
wfIpsecDescriptorPort .1.3.6.1.4.1.18.3.5.3.26.4.1.17
The port number for the dynamic SA.
wfIpsecDescriptorProtocol .1.3.6.1.4.1.18.3.5.3.26.4.1.18
The IP protocol for the dynamic SA.
wfIpsecDescriptorPrimarySG .1.3.6.1.4.1.18.3.5.3.26.4.1.19
The address of the remote gateway.
wfIpsecDescriptorInboundIdleTimer .1.3.6.1.4.1.18.3.5.3.26.4.1.20
Inbound (Unprotect) SA inactivity timer, in minutes. If no traffic is received on an automated inbound SA for the indicated time, both SAs for this policy will be deleted. A value of zero disables the timer.
wfIpsecEspSaSrc .1.3.6.1.4.1.18.3.5.3.26.5.1.3
The IP address of the SA's source.
wfIpsecEspSaDest .1.3.6.1.4.1.18.3.5.3.26.5.1.4
The IP address of the SA's destination.
wfIpsecEspSaSpi .1.3.6.1.4.1.18.3.5.3.26.5.1.5
The security parameters index
wfIpsecEspSaCreate .1.3.6.1.4.1.18.3.5.3.26.5.1.1
Create/Delete parameter.
wfIpsecEspSaStatus .1.3.6.1.4.1.18.3.5.3.26.5.1.2
The current status of this Security Association: up: this SA is in use down: this SA is misconfigured inactive: this SA is disabled notpresent: the IPsec code isn't loaded
wfIpsecEspSaCipherAlg .1.3.6.1.4.1.18.3.5.3.26.5.1.6
Identifies cipher algorithm for this SA.
wfIpsecEspSaManualCipherKey .1.3.6.1.4.1.18.3.5.3.26.5.1.7
The key for a manually-keyed SA's cipher algorithm
wfIpsecEspSaDesKeyStrength .1.3.6.1.4.1.18.3.5.3.26.5.1.8
The strength of the cipher key.
wfIpsecEspSaIntegrityAlg .1.3.6.1.4.1.18.3.5.3.26.5.1.9
The algorithm for ESP Auth.
wfIpsecEspSaManualIntegrityKey .1.3.6.1.4.1.18.3.5.3.26.5.1.10
The key for a manually-keyed SA's integrity algorithm
wfIpsecEspSaVerifyPad .1.3.6.1.4.1.18.3.5.3.26.5.1.11
This attribute enables checking of the pad field of ESP packets making sure it is in expected numeric ascending order. Packets with bad padding are discarded.
wfIpsecEspSaReset .1.3.6.1.4.1.18.3.5.3.26.5.1.12
Reset IPSec SA statistics indicator.
wfIpsecEspSaBadAuthen .1.3.6.1.4.1.18.3.5.3.26.5.1.13
The number of received encrypted packets that could not be properly authenticated.
wfIpsecEspSaBadDecrypt .1.3.6.1.4.1.18.3.5.3.26.5.1.14
The number of received packets that could not be properly decrypted.
wfIpsecEspSaBadPad .1.3.6.1.4.1.18.3.5.3.26.5.1.15
The number of received packets that contained bad padding information.
wfIpsecEspSaProtectPkt .1.3.6.1.4.1.18.3.5.3.26.5.1.16
The number of successfully encrypted packets.
wfIpsecEspSaUnprotectPkt .1.3.6.1.4.1.18.3.5.3.26.5.1.17
The number of successfully decrypted packets.
wfIpsecEspSaEncryptByte .1.3.6.1.4.1.18.3.5.3.26.5.1.18
The number of successfully encrypted bytes.
wfIpsecEspSaDecryptByte .1.3.6.1.4.1.18.3.5.3.26.5.1.19
The number of successfully encrypted bytes.
wfIpsecEspSaMode .1.3.6.1.4.1.18.3.5.3.26.5.1.20
Identifies mode of the SA.
wfIpsecEspSaPfs .1.3.6.1.4.1.18.3.5.3.26.5.1.21
Identifies whether this SA has perfect forward secrecy or not.
wfIpsecEspSaExpiryType .1.3.6.1.4.1.18.3.5.3.26.5.1.22
The units used to interpret the expiry value. The SA's keys don't expire when this is set to none.
wfIpsecEspSaExpiryValue .1.3.6.1.4.1.18.3.5.3.26.5.1.23
The value used to determine when the keys for this SA expire.
wfIpsecStatsInterface .1.3.6.1.4.1.18.3.5.3.26.6.1.2
The IP address of the security gateway which these statistics belong to.
wfIpsecStatsCircuit .1.3.6.1.4.1.18.3.5.3.26.6.1.3
The ID of the Circuit to which this instance applies.
wfIpsecStatsCreate .1.3.6.1.4.1.18.3.5.3.26.6.1.1
Create/Delete parameter.
wfIpsecStatsReset .1.3.6.1.4.1.18.3.5.3.26.6.1.4
Reset IPSec statistics indicator.
wfIpsecStatsUnprotectPkt .1.3.6.1.4.1.18.3.5.3.26.6.1.5
The number of received packets successfully decrypted.
wfIpsecStatsProtectPkt .1.3.6.1.4.1.18.3.5.3.26.6.1.6
The number of received packets successfully encrypted.
wfIpsecStatsBypassPkt .1.3.6.1.4.1.18.3.5.3.26.6.1.7
The number of received packets that have bypassed.
wfIpsecStatsDropPkt .1.3.6.1.4.1.18.3.5.3.26.6.1.8
The number of received packets that have been dropped.
wfIpsecStatsNoSa .1.3.6.1.4.1.18.3.5.3.26.6.1.9
The number of received packets for which no SA was found.
wfIpsecStatsLastBadSpi .1.3.6.1.4.1.18.3.5.3.26.6.1.10
The last security parameters index for which no SA could be found.
wfIpsecStatsNoPolicyMatch .1.3.6.1.4.1.18.3.5.3.26.6.1.11
The number of received packets for which no policy match could be found.
wfIpsecStatsSaExpDropBytes .1.3.6.1.4.1.18.3.5.3.26.6.1.12
The number of bytes discarded owing to SA Expiry
wfIpsecStatsOutClips .1.3.6.1.4.1.18.3.5.3.26.6.1.13
The number of outbound packets clipped due to buffer congestion.
wfIpsecStatsInClips .1.3.6.1.4.1.18.3.5.3.26.6.1.14
The number of inbound packets clipped due to buffer congestion.
wfIpsecRemoteGatewayInterface .1.3.6.1.4.1.18.3.5.3.26.7.1.4
The address of the IP interface to which this instance applies.
wfIpsecRemoteGatewayCircuit .1.3.6.1.4.1.18.3.5.3.26.7.1.5
The ID of the Circuit to which the instance applies.
wfIpsecRemoteGatewayIndex .1.3.6.1.4.1.18.3.5.3.26.7.1.6
An index used to differentiate remote gateway instances.
wfIpsecRemoteGatewayCreate .1.3.6.1.4.1.18.3.5.3.26.7.1.1
creates or deletes an instance.
wfIpsecRemoteGatewayEnable .1.3.6.1.4.1.18.3.5.3.26.7.1.2
enables and disables this instance.
wfIpsecRemoteGatewayStatus .1.3.6.1.4.1.18.3.5.3.26.7.1.3
Defines the current status of the instance: inactive - ? active - ? error - ?
wfIpsecRemoteGatewayIpAddr .1.3.6.1.4.1.18.3.5.3.26.7.1.7
The address of the remote gateway.
wfIpsecRemoteGatewayRange .1.3.6.1.4.1.18.3.5.3.26.7.1.8
The range of destination IP addresses that the remote security gateway represents.
wfIpsecRemoteGatewayName .1.3.6.1.4.1.18.3.5.3.26.7.1.9
name of the remote security gateway.
wfIpsecProposalNumber .1.3.6.1.4.1.18.3.5.3.26.8.1.4
A number that identifies this proposal.
wfIpsecProposalCreate .1.3.6.1.4.1.18.3.5.3.26.8.1.1
Create/Delete parameter. Default is created.
wfIpsecProposalStatus .1.3.6.1.4.1.18.3.5.3.26.8.1.2
The status of this Proposal.
wfIpsecProposalName .1.3.6.1.4.1.18.3.5.3.26.8.1.3
Proposal name.
wfIpsecProposalSuites .1.3.6.1.4.1.18.3.5.3.26.8.1.5
the octet string contains a list of ordered, 2 byte numbers that correspond to wfIpsecSuiteEntry instance ID's. The list of protection suites is a logically ANDed list. This allows multiple protocols to be used for a policy.
wfIpsecSuiteNumber .1.3.6.1.4.1.18.3.5.3.26.9.1.4
A number that identifies this protection suite.
wfIpsecSuiteCreate .1.3.6.1.4.1.18.3.5.3.26.9.1.1
Create/Delete parameter. Default is created.
wfIpsecSuiteStatus .1.3.6.1.4.1.18.3.5.3.26.9.1.2
The status of this Suite.
wfIpsecSuiteName .1.3.6.1.4.1.18.3.5.3.26.9.1.3
Suite name.
wfIpsecSuiteEspProtocol .1.3.6.1.4.1.18.3.5.3.26.9.1.5
The ordered sequence of wfIpsecEspTransformEntry instances that comprise this protection suite.
wfIpsecSuiteAhProtocol .1.3.6.1.4.1.18.3.5.3.26.9.1.6
The ordered sequence of wfIpsecAhProposalEntry instances that comprise this protection suite.
wfIpsecEspTransformNumber .1.3.6.1.4.1.18.3.5.3.26.10.1.4
A number that identifies this ESP proposal.
wfIpsecEspTransformCreate .1.3.6.1.4.1.18.3.5.3.26.10.1.1
Create/Delete parameter. Default is created.
wfIpsecEspTransformStatus .1.3.6.1.4.1.18.3.5.3.26.10.1.2
The status of this ESP Transform.
wfIpsecEspTransformName .1.3.6.1.4.1.18.3.5.3.26.10.1.3
ESP Transform name.
wfIpsecEspTransformCipherAlg .1.3.6.1.4.1.18.3.5.3.26.10.1.5
The cipher algorithm for ESP.
wfIpsecEspTransformKeyLength .1.3.6.1.4.1.18.3.5.3.26.10.1.6
The key length for the ESP cipher algorithm.
wfIpsecEspTransformIntegrityAlg .1.3.6.1.4.1.18.3.5.3.26.10.1.7
The algorithm for ESP Auth.
wfIpsecEspTransformExpiryTime .1.3.6.1.4.1.18.3.5.3.26.10.1.8
The value used to determine when the keys for this SA expire due to the passage of time. The units are minutes. The minium recommended value is 10 min.
wfIpsecEspTransformExpiryMBytes .1.3.6.1.4.1.18.3.5.3.26.10.1.9
The value used to determine when the keys for this SA expire due to the number of bytes processed. The units are mega-bytes. The minium recommended value is 10 Mbytes. A value of 0 indicates that MByte expiry is not desired.
wfIpsecEspTransformExpiryPref .1.3.6.1.4.1.18.3.5.3.26.10.1.10
The value used to determine precedence between time/kbyte expiry
wfIpsecAhTransformNumber .1.3.6.1.4.1.18.3.5.3.26.11.1.4
A number that identifies this AH proposal.
wfIpsecAhTransformCreate .1.3.6.1.4.1.18.3.5.3.26.11.1.1
Create/Delete parameter. Default is created.
wfIpsecAhTransformStatus .1.3.6.1.4.1.18.3.5.3.26.11.1.2
The status of this AhTransform.
wfIpsecAhTransformName .1.3.6.1.4.1.18.3.5.3.26.11.1.3
AhTransform name.
wfIpsecAhTransformIntegrityAlg .1.3.6.1.4.1.18.3.5.3.26.11.1.5
The algorithm for AH.
wfIpsecAhTransformGroup .1.3.6.1.4.1.18.3.5.3.26.11.1.6
The DH group
wfIpsecAhTransformExpiryType .1.3.6.1.4.1.18.3.5.3.26.11.1.7
The units used to interpret the expiry value. The SA's keys don't expire when this is set to none.
wfIpsecAhTransformExpiryValue .1.3.6.1.4.1.18.3.5.3.26.11.1.8
The value used to determine when the keys for this SA expire.
wfIpsecSaStatsSrc .1.3.6.1.4.1.18.3.5.3.26.12.1.2
The IP address of the SA's source.
wfIpsecSaStatsDest .1.3.6.1.4.1.18.3.5.3.26.12.1.3
The IP address of the SA's destination.
wfIpsecSaStatsSpi .1.3.6.1.4.1.18.3.5.3.26.12.1.4
The security parameters index
wfIpsecSaStatsStatus .1.3.6.1.4.1.18.3.5.3.26.12.1.1
The current status of this Security Association: up: this SA is in use down: this SA is misconfigured ??? inactive: this SA is disabled ??? notpresent: the IPsec code isn't loaded ???
wfIpsecSaStatsProto .1.3.6.1.4.1.18.3.5.3.26.12.1.5
The protocol used by this SA.
wfIpsecSaStatsCipherAlg .1.3.6.1.4.1.18.3.5.3.26.12.1.6
Identifies cipher algorithm for this SA.
wfIpsecSaStatsIntegrityAlg .1.3.6.1.4.1.18.3.5.3.26.12.1.7
The algorithm for ESP Auth.
wfIpsecSaStatsBadAuthen .1.3.6.1.4.1.18.3.5.3.26.12.1.8
The number of received encrypted packets that could not be properly authenticated.
wfIpsecSaStatsBadDecrypt .1.3.6.1.4.1.18.3.5.3.26.12.1.9
The number of received packets that could not be properly decrypted.
wfIpsecSaStatsBadPad .1.3.6.1.4.1.18.3.5.3.26.12.1.10
The number of received packets that contained bad padding information.
wfIpsecSaStatsProtectPkt .1.3.6.1.4.1.18.3.5.3.26.12.1.11
The number of successfully encrypted packets.
wfIpsecSaStatsUnprotectPkt .1.3.6.1.4.1.18.3.5.3.26.12.1.12
The number of successfully decrypted packets.
wfIpsecSaStatsEncryptByte .1.3.6.1.4.1.18.3.5.3.26.12.1.13
The number of successfully encrypted bytes.
wfIpsecSaStatsDecryptByte .1.3.6.1.4.1.18.3.5.3.26.12.1.14
The number of successfully encrypted bytes.
wfIpsecSaStatsMode .1.3.6.1.4.1.18.3.5.3.26.12.1.15
Identifies mode of the SA.
wfIpsecSaStatsPfs .1.3.6.1.4.1.18.3.5.3.26.12.1.16
Identifies whether this SA has perfect forward secrecy or not.
wfIpsecSaStatsExpiryType .1.3.6.1.4.1.18.3.5.3.26.12.1.17
The units used to interpret the expiry value. The SA's keys don't expire when this is set to none.
wfIpsecSaStatsExpiryValue .1.3.6.1.4.1.18.3.5.3.26.12.1.18
The value used to determine when the keys for this SA expire.
Table
wfIpsecSelectorInTable .1.3.6.1.4.1.18.3.5.3.26.2
A table of selectors used to identify which IP security policy should be applied to a packet.
wfIpsecSelectorOutTable .1.3.6.1.4.1.18.3.5.3.26.3
A table of selectors used to identify which IP security policy should be applied to a packet.
wfIpsecDescriptorTable .1.3.6.1.4.1.18.3.5.3.26.4
Table of IP security descriptors
wfIpsecEspSaTable .1.3.6.1.4.1.18.3.5.3.26.5
The ESP security association table
wfIpsecStatsTable .1.3.6.1.4.1.18.3.5.3.26.6
The interface statistics table
wfIpsecRemoteGatewayTable .1.3.6.1.4.1.18.3.5.3.26.7
A table of known remote Security Gateways.
wfIpsecProposalTable .1.3.6.1.4.1.18.3.5.3.26.8
Table of IP security proposals
wfIpsecSuiteTable .1.3.6.1.4.1.18.3.5.3.26.9
Table of IP security protection suites
wfIpsecEspTransformTable .1.3.6.1.4.1.18.3.5.3.26.10
Table of IP security policies
wfIpsecAhTransformTable .1.3.6.1.4.1.18.3.5.3.26.11
Table of IP security policies
wfIpsecSaStatsTable .1.3.6.1.4.1.18.3.5.3.26.12
The Ipsec automated SA table
Object Identifier
wfIpsecBase .1.3.6.1.4.1.18.3.5.3.26.1