wfIpsecSelectorInInterface |
.1.3.6.1.4.1.18.3.5.3.26.2.1.7 |
The network address of the IP
interface to which the corresponding policy is applied.
|
wfIpsecSelectorInCircuit |
.1.3.6.1.4.1.18.3.5.3.26.2.1.8 |
The ID of the Circuit to which the
corresponding policy is applied.
|
wfIpsecSelectorInPolicyNumber |
.1.3.6.1.4.1.18.3.5.3.26.2.1.9 |
ID policy's selectors.
|
wfIpsecSelectorInFragment |
.1.3.6.1.4.1.18.3.5.3.26.2.1.10 |
Fragment number - for large sets of selectors.
|
wfIpsecSelectorInCreate |
.1.3.6.1.4.1.18.3.5.3.26.2.1.1 |
Defines the existence of the policy's selectors:
created - instance exists
delete - instance should be deleted.
|
wfIpsecSelectorInEnable |
.1.3.6.1.4.1.18.3.5.3.26.2.1.2 |
Defines whether or not the policy should be used:
enabled - activate the policy's selectors.
disabled - deactivate the policy's selectors.
|
wfIpsecSelectorInStatus |
.1.3.6.1.4.1.18.3.5.3.26.2.1.3 |
Defines the current status of the this instance:
up: this instance is in use
down: this instance is misconfigured
inactive: this instance is disabled
notpresent: the IPsec code isn't loaded
|
wfIpsecSelectorInCounter |
.1.3.6.1.4.1.18.3.5.3.26.2.1.4 |
The number of received packets that have
matched the selectors.
|
wfIpsecSelectorInDefinition |
.1.3.6.1.4.1.18.3.5.3.26.2.1.5 |
The policy's selector definition.
|
wfIpsecSelectorInReserved |
.1.3.6.1.4.1.18.3.5.3.26.2.1.6 |
Reserved field.
|
wfIpsecSelectorInName |
.1.3.6.1.4.1.18.3.5.3.26.2.1.11 |
name of this instance of selectors.
|
wfIpsecSelectorOutInterface |
.1.3.6.1.4.1.18.3.5.3.26.3.1.7 |
The network address of the IP
interface to which the corresponding policy is applied.
|
wfIpsecSelectorOutCircuit |
.1.3.6.1.4.1.18.3.5.3.26.3.1.8 |
The ID of the Circuit to which the
corresponding policy is applied.
|
wfIpsecSelectorOutPolicyNumber |
.1.3.6.1.4.1.18.3.5.3.26.3.1.9 |
ID policy's selectors.
|
wfIpsecSelectorOutFragment |
.1.3.6.1.4.1.18.3.5.3.26.3.1.10 |
Fragment number - for large sets of selectors.
|
wfIpsecSelectorOutCreate |
.1.3.6.1.4.1.18.3.5.3.26.3.1.1 |
Defines the existence of the policy's selectors:
created - instance exists
delete - instance should be deleted.
|
wfIpsecSelectorOutEnable |
.1.3.6.1.4.1.18.3.5.3.26.3.1.2 |
Defines whether or not the policy should be used:
enabled - activate the policy's selectors.
disabled - deactivate the policy's selectors.
|
wfIpsecSelectorOutStatus |
.1.3.6.1.4.1.18.3.5.3.26.3.1.3 |
Defines the current status of the this instance:
up: this instance is in use
down: this instance is misconfigured
inactive: this instance is disabled
notpresent: the IPsec code isn't loaded
|
wfIpsecSelectorOutCounter |
.1.3.6.1.4.1.18.3.5.3.26.3.1.4 |
The number of received packets that have
matched the selectors.
|
wfIpsecSelectorOutDefinition |
.1.3.6.1.4.1.18.3.5.3.26.3.1.5 |
The policy's selector definition.
|
wfIpsecSelectorOutReserved |
.1.3.6.1.4.1.18.3.5.3.26.3.1.6 |
Reserved field.
|
wfIpsecSelectorOutName |
.1.3.6.1.4.1.18.3.5.3.26.3.1.11 |
name of this instance of selectors.
|
wfIpsecDescriptorInterface |
.1.3.6.1.4.1.18.3.5.3.26.4.1.4 |
The IP address of the security gateway which this descriptor
belongs to.
|
wfIpsecDescriptorCircuit |
.1.3.6.1.4.1.18.3.5.3.26.4.1.5 |
The ID of the Circuit to which this
instance applies.
|
wfIpsecDescriptorPolicyNumber |
.1.3.6.1.4.1.18.3.5.3.26.4.1.3 |
Allows instance of wfIpsecSelectorOutEntry to be matched with
this instance.
|
wfIpsecDescriptorCreate |
.1.3.6.1.4.1.18.3.5.3.26.4.1.1 |
Create/Delete parameter. Default is created.
|
wfIpsecDescriptorStatus |
.1.3.6.1.4.1.18.3.5.3.26.4.1.2 |
The status of this instance:
up: this instance is in use
down: this instance is misconfigured
inactive: this instance is disabled
notpresent: the IPsec code isn't loaded
|
wfIpsecDescriptorManualSaList |
.1.3.6.1.4.1.18.3.5.3.26.4.1.6 |
the octet string represents an ordered list of Security
Associations (SAs). the format of each 9 byte sequence is:
------------+-----------+-----------+------------+-----------
| protocol | Peer IP Address |
------------+-----------+-----------+------------+-----------
| SPI |
------------+-----------+-----------+------------+
|
wfIpsecDescriptorSaMode |
.1.3.6.1.4.1.18.3.5.3.26.4.1.7 |
Identifies mode of the SA for this policy.
|
wfIpsecDescriptorPfs |
.1.3.6.1.4.1.18.3.5.3.26.4.1.8 |
Identifies whether perfect forward secrecy is required
or not.
|
wfIpsecDescriptorProposals |
.1.3.6.1.4.1.18.3.5.3.26.4.1.9 |
the octet string represents an ordered list of proposals.
Every 2 octets in the string contains a number which
corresponds to an instance I.D. of wfIpsecProposalEntry.
The list of proposals is a logically ORed list.
|
wfIpsecDescriptorSourceForDestAddr |
.1.3.6.1.4.1.18.3.5.3.26.4.1.10 |
The source for the destination IP address value to be used
in the SA. 'packet' limits use of the SA to those packets
which have a matching IP addr even if the policy permits a
range. 'policy' allows more than one traffic flow to use
the SA if the policy permits a range of IP addresses.
|
wfIpsecDescriptorSourceForSrcAddr |
.1.3.6.1.4.1.18.3.5.3.26.4.1.11 |
The source for the destination IP address value to be used
in the SA. 'packet' limits use of the SA to those packets
which have a matching IP addr even if the policy permits a
range. 'policy' allows more than one traffic flow to use
the SA if the policy permits a range of IP addresses.
|
wfIpsecDescriptorSourceForProtocol |
.1.3.6.1.4.1.18.3.5.3.26.4.1.12 |
The source for the destination IP address value to be used
in the SA. 'packet' limits use of the SA to those packets
which have a matching IP addr even if the policy permits a
range. 'policy' allows more than one traffic flow to use
the SA if the policy permits a range of IP addresses.
|
wfIpsecDescriptorStartSourceAddr |
.1.3.6.1.4.1.18.3.5.3.26.4.1.13 |
The start Source IP address for the dynamic SA.
|
wfIpsecDescriptorEndSourceAddr |
.1.3.6.1.4.1.18.3.5.3.26.4.1.14 |
The end Source IP address for the dynamic SA.
|
wfIpsecDescriptorStartDestAddr |
.1.3.6.1.4.1.18.3.5.3.26.4.1.15 |
The start Destination IP address for the dynamic SA.
|
wfIpsecDescriptorEndDestAddr |
.1.3.6.1.4.1.18.3.5.3.26.4.1.16 |
The end Source IP address for the dynamic SA.
|
wfIpsecDescriptorPort |
.1.3.6.1.4.1.18.3.5.3.26.4.1.17 |
The port number for the dynamic SA.
|
wfIpsecDescriptorProtocol |
.1.3.6.1.4.1.18.3.5.3.26.4.1.18 |
The IP protocol for the dynamic SA.
|
wfIpsecDescriptorPrimarySG |
.1.3.6.1.4.1.18.3.5.3.26.4.1.19 |
The address of the remote gateway.
|
wfIpsecDescriptorInboundIdleTimer |
.1.3.6.1.4.1.18.3.5.3.26.4.1.20 |
Inbound (Unprotect) SA inactivity timer, in minutes.
If no traffic is received on an automated inbound SA
for the indicated time, both SAs for this policy will
be deleted. A value of zero disables the timer.
|
wfIpsecEspSaSrc |
.1.3.6.1.4.1.18.3.5.3.26.5.1.3 |
The IP address of the SA's source.
|
wfIpsecEspSaDest |
.1.3.6.1.4.1.18.3.5.3.26.5.1.4 |
The IP address of the SA's destination.
|
wfIpsecEspSaSpi |
.1.3.6.1.4.1.18.3.5.3.26.5.1.5 |
The security parameters index
|
wfIpsecEspSaCreate |
.1.3.6.1.4.1.18.3.5.3.26.5.1.1 |
Create/Delete parameter.
|
wfIpsecEspSaStatus |
.1.3.6.1.4.1.18.3.5.3.26.5.1.2 |
The current status of this Security Association:
up: this SA is in use
down: this SA is misconfigured
inactive: this SA is disabled
notpresent: the IPsec code isn't loaded
|
wfIpsecEspSaCipherAlg |
.1.3.6.1.4.1.18.3.5.3.26.5.1.6 |
Identifies cipher algorithm for this SA.
|
wfIpsecEspSaManualCipherKey |
.1.3.6.1.4.1.18.3.5.3.26.5.1.7 |
The key for a manually-keyed SA's cipher algorithm
|
wfIpsecEspSaDesKeyStrength |
.1.3.6.1.4.1.18.3.5.3.26.5.1.8 |
The strength of the cipher key.
|
wfIpsecEspSaIntegrityAlg |
.1.3.6.1.4.1.18.3.5.3.26.5.1.9 |
The algorithm for ESP Auth.
|
wfIpsecEspSaManualIntegrityKey |
.1.3.6.1.4.1.18.3.5.3.26.5.1.10 |
The key for a manually-keyed SA's integrity algorithm
|
wfIpsecEspSaVerifyPad |
.1.3.6.1.4.1.18.3.5.3.26.5.1.11 |
This attribute enables checking of the pad field of ESP
packets making sure it is in expected numeric ascending
order. Packets with bad padding are discarded.
|
wfIpsecEspSaReset |
.1.3.6.1.4.1.18.3.5.3.26.5.1.12 |
Reset IPSec SA statistics indicator.
|
wfIpsecEspSaBadAuthen |
.1.3.6.1.4.1.18.3.5.3.26.5.1.13 |
The number of received encrypted packets that could
not be properly authenticated.
|
wfIpsecEspSaBadDecrypt |
.1.3.6.1.4.1.18.3.5.3.26.5.1.14 |
The number of received packets that could
not be properly decrypted.
|
wfIpsecEspSaBadPad |
.1.3.6.1.4.1.18.3.5.3.26.5.1.15 |
The number of received packets that contained
bad padding information.
|
wfIpsecEspSaProtectPkt |
.1.3.6.1.4.1.18.3.5.3.26.5.1.16 |
The number of successfully encrypted packets.
|
wfIpsecEspSaUnprotectPkt |
.1.3.6.1.4.1.18.3.5.3.26.5.1.17 |
The number of successfully decrypted packets.
|
wfIpsecEspSaEncryptByte |
.1.3.6.1.4.1.18.3.5.3.26.5.1.18 |
The number of successfully encrypted bytes.
|
wfIpsecEspSaDecryptByte |
.1.3.6.1.4.1.18.3.5.3.26.5.1.19 |
The number of successfully encrypted bytes.
|
wfIpsecEspSaMode |
.1.3.6.1.4.1.18.3.5.3.26.5.1.20 |
Identifies mode of the SA.
|
wfIpsecEspSaPfs |
.1.3.6.1.4.1.18.3.5.3.26.5.1.21 |
Identifies whether this SA has perfect forward secrecy or
not.
|
wfIpsecEspSaExpiryType |
.1.3.6.1.4.1.18.3.5.3.26.5.1.22 |
The units used to interpret the expiry value. The SA's
keys don't expire when this is set to none.
|
wfIpsecEspSaExpiryValue |
.1.3.6.1.4.1.18.3.5.3.26.5.1.23 |
The value used to determine when the keys for this SA
expire.
|
wfIpsecStatsInterface |
.1.3.6.1.4.1.18.3.5.3.26.6.1.2 |
The IP address of the security gateway which these statistics
belong to.
|
wfIpsecStatsCircuit |
.1.3.6.1.4.1.18.3.5.3.26.6.1.3 |
The ID of the Circuit to which this
instance applies.
|
wfIpsecStatsCreate |
.1.3.6.1.4.1.18.3.5.3.26.6.1.1 |
Create/Delete parameter.
|
wfIpsecStatsReset |
.1.3.6.1.4.1.18.3.5.3.26.6.1.4 |
Reset IPSec statistics indicator.
|
wfIpsecStatsUnprotectPkt |
.1.3.6.1.4.1.18.3.5.3.26.6.1.5 |
The number of received packets successfully
decrypted.
|
wfIpsecStatsProtectPkt |
.1.3.6.1.4.1.18.3.5.3.26.6.1.6 |
The number of received packets successfully
encrypted.
|
wfIpsecStatsBypassPkt |
.1.3.6.1.4.1.18.3.5.3.26.6.1.7 |
The number of received packets that have
bypassed.
|
wfIpsecStatsDropPkt |
.1.3.6.1.4.1.18.3.5.3.26.6.1.8 |
The number of received packets that have
been dropped.
|
wfIpsecStatsNoSa |
.1.3.6.1.4.1.18.3.5.3.26.6.1.9 |
The number of received packets for which
no SA was found.
|
wfIpsecStatsLastBadSpi |
.1.3.6.1.4.1.18.3.5.3.26.6.1.10 |
The last security parameters index for which
no SA could be found.
|
wfIpsecStatsNoPolicyMatch |
.1.3.6.1.4.1.18.3.5.3.26.6.1.11 |
The number of received packets for which
no policy match could be found.
|
wfIpsecStatsSaExpDropBytes |
.1.3.6.1.4.1.18.3.5.3.26.6.1.12 |
The number of bytes discarded owing to SA Expiry
|
wfIpsecStatsOutClips |
.1.3.6.1.4.1.18.3.5.3.26.6.1.13 |
The number of outbound packets clipped due to
buffer congestion.
|
wfIpsecStatsInClips |
.1.3.6.1.4.1.18.3.5.3.26.6.1.14 |
The number of inbound packets clipped due to
buffer congestion.
|
wfIpsecRemoteGatewayInterface |
.1.3.6.1.4.1.18.3.5.3.26.7.1.4 |
The address of the IP interface to which this
instance applies.
|
wfIpsecRemoteGatewayCircuit |
.1.3.6.1.4.1.18.3.5.3.26.7.1.5 |
The ID of the Circuit to which the instance applies.
|
wfIpsecRemoteGatewayIndex |
.1.3.6.1.4.1.18.3.5.3.26.7.1.6 |
An index used to differentiate remote gateway instances.
|
wfIpsecRemoteGatewayCreate |
.1.3.6.1.4.1.18.3.5.3.26.7.1.1 |
creates or deletes an instance.
|
wfIpsecRemoteGatewayEnable |
.1.3.6.1.4.1.18.3.5.3.26.7.1.2 |
enables and disables this instance.
|
wfIpsecRemoteGatewayStatus |
.1.3.6.1.4.1.18.3.5.3.26.7.1.3 |
Defines the current status of the instance:
inactive - ?
active - ?
error - ?
|
wfIpsecRemoteGatewayIpAddr |
.1.3.6.1.4.1.18.3.5.3.26.7.1.7 |
The address of the remote gateway.
|
wfIpsecRemoteGatewayRange |
.1.3.6.1.4.1.18.3.5.3.26.7.1.8 |
The range of destination IP addresses that the remote
security gateway represents.
|
wfIpsecRemoteGatewayName |
.1.3.6.1.4.1.18.3.5.3.26.7.1.9 |
name of the remote security gateway.
|
wfIpsecProposalNumber |
.1.3.6.1.4.1.18.3.5.3.26.8.1.4 |
A number that identifies this proposal.
|
wfIpsecProposalCreate |
.1.3.6.1.4.1.18.3.5.3.26.8.1.1 |
Create/Delete parameter. Default is created.
|
wfIpsecProposalStatus |
.1.3.6.1.4.1.18.3.5.3.26.8.1.2 |
The status of this Proposal.
|
wfIpsecProposalName |
.1.3.6.1.4.1.18.3.5.3.26.8.1.3 |
Proposal name.
|
wfIpsecProposalSuites |
.1.3.6.1.4.1.18.3.5.3.26.8.1.5 |
the octet string contains a list of ordered, 2 byte numbers
that correspond to wfIpsecSuiteEntry instance ID's.
The list of protection suites is a logically ANDed list.
This allows multiple protocols to be used for a policy.
|
wfIpsecSuiteNumber |
.1.3.6.1.4.1.18.3.5.3.26.9.1.4 |
A number that identifies this protection suite.
|
wfIpsecSuiteCreate |
.1.3.6.1.4.1.18.3.5.3.26.9.1.1 |
Create/Delete parameter. Default is created.
|
wfIpsecSuiteStatus |
.1.3.6.1.4.1.18.3.5.3.26.9.1.2 |
The status of this Suite.
|
wfIpsecSuiteName |
.1.3.6.1.4.1.18.3.5.3.26.9.1.3 |
Suite name.
|
wfIpsecSuiteEspProtocol |
.1.3.6.1.4.1.18.3.5.3.26.9.1.5 |
The ordered sequence of wfIpsecEspTransformEntry instances that
comprise this protection suite.
|
wfIpsecSuiteAhProtocol |
.1.3.6.1.4.1.18.3.5.3.26.9.1.6 |
The ordered sequence of wfIpsecAhProposalEntry instances that
comprise this protection suite.
|
wfIpsecEspTransformNumber |
.1.3.6.1.4.1.18.3.5.3.26.10.1.4 |
A number that identifies this ESP proposal.
|
wfIpsecEspTransformCreate |
.1.3.6.1.4.1.18.3.5.3.26.10.1.1 |
Create/Delete parameter. Default is created.
|
wfIpsecEspTransformStatus |
.1.3.6.1.4.1.18.3.5.3.26.10.1.2 |
The status of this ESP Transform.
|
wfIpsecEspTransformName |
.1.3.6.1.4.1.18.3.5.3.26.10.1.3 |
ESP Transform name.
|
wfIpsecEspTransformCipherAlg |
.1.3.6.1.4.1.18.3.5.3.26.10.1.5 |
The cipher algorithm for ESP.
|
wfIpsecEspTransformKeyLength |
.1.3.6.1.4.1.18.3.5.3.26.10.1.6 |
The key length for the ESP cipher algorithm.
|
wfIpsecEspTransformIntegrityAlg |
.1.3.6.1.4.1.18.3.5.3.26.10.1.7 |
The algorithm for ESP Auth.
|
wfIpsecEspTransformExpiryTime |
.1.3.6.1.4.1.18.3.5.3.26.10.1.8 |
The value used to determine when the keys for this SA
expire due to the passage of time. The units are minutes.
The minium recommended value is 10 min.
|
wfIpsecEspTransformExpiryMBytes |
.1.3.6.1.4.1.18.3.5.3.26.10.1.9 |
The value used to determine when the keys for this SA
expire due to the number of bytes processed. The units are
mega-bytes. The minium recommended value is 10 Mbytes. A
value of 0 indicates that MByte expiry is not desired.
|
wfIpsecEspTransformExpiryPref |
.1.3.6.1.4.1.18.3.5.3.26.10.1.10 |
The value used to determine precedence between time/kbyte
expiry
|
wfIpsecAhTransformNumber |
.1.3.6.1.4.1.18.3.5.3.26.11.1.4 |
A number that identifies this AH proposal.
|
wfIpsecAhTransformCreate |
.1.3.6.1.4.1.18.3.5.3.26.11.1.1 |
Create/Delete parameter. Default is created.
|
wfIpsecAhTransformStatus |
.1.3.6.1.4.1.18.3.5.3.26.11.1.2 |
The status of this AhTransform.
|
wfIpsecAhTransformName |
.1.3.6.1.4.1.18.3.5.3.26.11.1.3 |
AhTransform name.
|
wfIpsecAhTransformIntegrityAlg |
.1.3.6.1.4.1.18.3.5.3.26.11.1.5 |
The algorithm for AH.
|
wfIpsecAhTransformGroup |
.1.3.6.1.4.1.18.3.5.3.26.11.1.6 |
The DH group
|
wfIpsecAhTransformExpiryType |
.1.3.6.1.4.1.18.3.5.3.26.11.1.7 |
The units used to interpret the expiry value. The SA's
keys don't expire when this is set to none.
|
wfIpsecAhTransformExpiryValue |
.1.3.6.1.4.1.18.3.5.3.26.11.1.8 |
The value used to determine when the keys for this SA
expire.
|
wfIpsecSaStatsSrc |
.1.3.6.1.4.1.18.3.5.3.26.12.1.2 |
The IP address of the SA's source.
|
wfIpsecSaStatsDest |
.1.3.6.1.4.1.18.3.5.3.26.12.1.3 |
The IP address of the SA's destination.
|
wfIpsecSaStatsSpi |
.1.3.6.1.4.1.18.3.5.3.26.12.1.4 |
The security parameters index
|
wfIpsecSaStatsStatus |
.1.3.6.1.4.1.18.3.5.3.26.12.1.1 |
The current status of this Security Association:
up: this SA is in use
down: this SA is misconfigured ???
inactive: this SA is disabled ???
notpresent: the IPsec code isn't loaded ???
|
wfIpsecSaStatsProto |
.1.3.6.1.4.1.18.3.5.3.26.12.1.5 |
The protocol used by this SA.
|
wfIpsecSaStatsCipherAlg |
.1.3.6.1.4.1.18.3.5.3.26.12.1.6 |
Identifies cipher algorithm for this SA.
|
wfIpsecSaStatsIntegrityAlg |
.1.3.6.1.4.1.18.3.5.3.26.12.1.7 |
The algorithm for ESP Auth.
|
wfIpsecSaStatsBadAuthen |
.1.3.6.1.4.1.18.3.5.3.26.12.1.8 |
The number of received encrypted packets that could
not be properly authenticated.
|
wfIpsecSaStatsBadDecrypt |
.1.3.6.1.4.1.18.3.5.3.26.12.1.9 |
The number of received packets that could
not be properly decrypted.
|
wfIpsecSaStatsBadPad |
.1.3.6.1.4.1.18.3.5.3.26.12.1.10 |
The number of received packets that contained
bad padding information.
|
wfIpsecSaStatsProtectPkt |
.1.3.6.1.4.1.18.3.5.3.26.12.1.11 |
The number of successfully encrypted packets.
|
wfIpsecSaStatsUnprotectPkt |
.1.3.6.1.4.1.18.3.5.3.26.12.1.12 |
The number of successfully decrypted packets.
|
wfIpsecSaStatsEncryptByte |
.1.3.6.1.4.1.18.3.5.3.26.12.1.13 |
The number of successfully encrypted bytes.
|
wfIpsecSaStatsDecryptByte |
.1.3.6.1.4.1.18.3.5.3.26.12.1.14 |
The number of successfully encrypted bytes.
|
wfIpsecSaStatsMode |
.1.3.6.1.4.1.18.3.5.3.26.12.1.15 |
Identifies mode of the SA.
|
wfIpsecSaStatsPfs |
.1.3.6.1.4.1.18.3.5.3.26.12.1.16 |
Identifies whether this SA has perfect forward secrecy or
not.
|
wfIpsecSaStatsExpiryType |
.1.3.6.1.4.1.18.3.5.3.26.12.1.17 |
The units used to interpret the expiry value. The SA's
keys don't expire when this is set to none.
|
wfIpsecSaStatsExpiryValue |
.1.3.6.1.4.1.18.3.5.3.26.12.1.18 |
The value used to determine when the keys for this SA
expire.
|