Wellfleet-IPSEC-MIB

File: Wellfleet-IPSEC-MIB.mib (63380 bytes)

Imported modules

RFC1155-SMI	RFC-1212	RFC1213-MIB
Wellfleet-COMMON-MIB

Imported symbols

IpAddress	Counter	Gauge
Opaque	OBJECT-TYPE	DisplayString
wfIpsecGroup

Defined Types

WfIpsecSelectorInEntry
SEQUENCE
	wfIpsecSelectorInCreate	INTEGER
	wfIpsecSelectorInEnable	INTEGER
	wfIpsecSelectorInStatus	INTEGER
	wfIpsecSelectorInCounter	Counter
	wfIpsecSelectorInDefinition	Opaque
	wfIpsecSelectorInReserved	INTEGER
	wfIpsecSelectorInInterface	IpAddress
	wfIpsecSelectorInCircuit	INTEGER
	wfIpsecSelectorInPolicyNumber	INTEGER
	wfIpsecSelectorInFragment	INTEGER
	wfIpsecSelectorInName	DisplayString

WfIpsecSelectorOutEntry
SEQUENCE
	wfIpsecSelectorOutCreate	INTEGER
	wfIpsecSelectorOutEnable	INTEGER
	wfIpsecSelectorOutStatus	INTEGER
	wfIpsecSelectorOutCounter	Counter
	wfIpsecSelectorOutDefinition	Opaque
	wfIpsecSelectorOutReserved	INTEGER
	wfIpsecSelectorOutInterface	IpAddress
	wfIpsecSelectorOutCircuit	INTEGER
	wfIpsecSelectorOutPolicyNumber	INTEGER
	wfIpsecSelectorOutFragment	INTEGER
	wfIpsecSelectorOutName	DisplayString

WfIpsecDescriptorEntry
SEQUENCE
	wfIpsecDescriptorCreate	INTEGER
	wfIpsecDescriptorStatus	INTEGER
	wfIpsecDescriptorPolicyNumber	INTEGER
	wfIpsecDescriptorInterface	IpAddress
	wfIpsecDescriptorCircuit	INTEGER
	wfIpsecDescriptorManualSaList	Opaque
	wfIpsecDescriptorSaMode	INTEGER
	wfIpsecDescriptorPfs	INTEGER
	wfIpsecDescriptorProposals	Opaque
	wfIpsecDescriptorSourceForDestAddr	INTEGER
	wfIpsecDescriptorSourceForSrcAddr	INTEGER
	wfIpsecDescriptorSourceForProtocol	INTEGER
	wfIpsecDescriptorStartSourceAddr	IpAddress
	wfIpsecDescriptorEndSourceAddr	IpAddress
	wfIpsecDescriptorStartDestAddr	IpAddress
	wfIpsecDescriptorEndDestAddr	IpAddress
	wfIpsecDescriptorSourcePort	INTEGER
	wfIpsecDescriptorProtocol	INTEGER
	wfIpsecDescriptorPrimarySG	IpAddress
	wfIpsecDescriptorInboundIdleTimer	INTEGER
	wfIpsecDescriptorAntiReplayWindow	INTEGER
	wfIpsecDescriptorDestPort	INTEGER

WfIpsecEspSaEntry
SEQUENCE
	wfIpsecEspSaCreate	INTEGER
	wfIpsecEspSaStatus	INTEGER
	wfIpsecEspSaSrc	IpAddress
	wfIpsecEspSaDest	IpAddress
	wfIpsecEspSaSpi	INTEGER
	wfIpsecEspSaCipherAlg	INTEGER
	wfIpsecEspSaManualCipherKey	OCTET STRING
	wfIpsecEspSaDesKeyStrength	INTEGER
	wfIpsecEspSaIntegrityAlg	INTEGER
	wfIpsecEspSaManualIntegrityKey	OCTET STRING
	wfIpsecEspSaVerifyPad	INTEGER
	wfIpsecEspSaReset	INTEGER
	wfIpsecEspSaBadAuthen	Counter
	wfIpsecEspSaBadDecrypt	Counter
	wfIpsecEspSaBadPad	Counter
	wfIpsecEspSaProtectPkt	Counter
	wfIpsecEspSaUnprotectPkt	Counter
	wfIpsecEspSaEncryptByte	Counter
	wfIpsecEspSaDecryptByte	Counter
	wfIpsecEspSaMode	INTEGER
	wfIpsecEspSaPfs	INTEGER
	wfIpsecEspSaExpiryType	INTEGER
	wfIpsecEspSaExpiryValue	INTEGER

WfIpsecStatsEntry
SEQUENCE
	wfIpsecStatsCreate	INTEGER
	wfIpsecStatsInterface	IpAddress
	wfIpsecStatsCircuit	INTEGER
	wfIpsecStatsReset	INTEGER
	wfIpsecStatsUnprotectPkt	Counter
	wfIpsecStatsProtectPkt	Counter
	wfIpsecStatsBypassPkt	Counter
	wfIpsecStatsDropPkt	Counter
	wfIpsecStatsNoSa	Counter
	wfIpsecStatsLastBadSpi	INTEGER
	wfIpsecStatsNoPolicyMatch	Counter
	wfIpsecStatsSaExpDropBytes	Counter
	wfIpsecStatsOutClips	Counter
	wfIpsecStatsInClips	Counter

WfIpsecRemoteGatewayEntry
SEQUENCE
	wfIpsecRemoteGatewayCreate	INTEGER
	wfIpsecRemoteGatewayEnable	INTEGER
	wfIpsecRemoteGatewayStatus	INTEGER
	wfIpsecRemoteGatewayInterface	IpAddress
	wfIpsecRemoteGatewayCircuit	INTEGER
	wfIpsecRemoteGatewayIndex	INTEGER
	wfIpsecRemoteGatewayIpAddr	IpAddress
	wfIpsecRemoteGatewayRange	OCTET STRING
	wfIpsecRemoteGatewayName	DisplayString

WfIpsecProposalEntry
SEQUENCE
	wfIpsecProposalCreate	INTEGER
	wfIpsecProposalStatus	INTEGER
	wfIpsecProposalName	DisplayString
	wfIpsecProposalNumber	INTEGER
	wfIpsecProposalSuites	Opaque

WfIpsecSuiteEntry
SEQUENCE
	wfIpsecSuiteCreate	INTEGER
	wfIpsecSuiteStatus	INTEGER
	wfIpsecSuiteName	DisplayString
	wfIpsecSuiteNumber	INTEGER
	wfIpsecSuiteEspProtocol	Opaque
	wfIpsecSuiteAhProtocol	Opaque

WfIpsecEspTransformEntry
SEQUENCE
	wfIpsecEspTransformCreate	INTEGER
	wfIpsecEspTransformStatus	INTEGER
	wfIpsecEspTransformName	DisplayString
	wfIpsecEspTransformNumber	INTEGER
	wfIpsecEspTransformCipherAlg	INTEGER
	wfIpsecEspTransformKeyLength	INTEGER
	wfIpsecEspTransformIntegrityAlg	INTEGER
	wfIpsecEspTransformExpiryTime	INTEGER
	wfIpsecEspTransformExpiryMBytes	INTEGER
	wfIpsecEspTransformExpiryPref	INTEGER

WfIpsecAhTransformEntry
SEQUENCE
	wfIpsecAhTransformCreate	INTEGER
	wfIpsecAhTransformStatus	INTEGER
	wfIpsecAhTransformName	DisplayString
	wfIpsecAhTransformNumber	INTEGER
	wfIpsecAhTransformIntegrityAlg	INTEGER
	wfIpsecAhTransformGroup	INTEGER
	wfIpsecAhTransformExpiryType	INTEGER
	wfIpsecAhTransformExpiryValue	INTEGER

WfIpsecSaStatsEntry
SEQUENCE
	wfIpsecSaStatsStatus	INTEGER
	wfIpsecSaStatsSrc	IpAddress
	wfIpsecSaStatsDest	IpAddress
	wfIpsecSaStatsSpi	Gauge
	wfIpsecSaStatsProto	INTEGER
	wfIpsecSaStatsCipherAlg	INTEGER
	wfIpsecSaStatsIntegrityAlg	INTEGER
	wfIpsecSaStatsBadAuthen	Counter
	wfIpsecSaStatsBadDecrypt	Counter
	wfIpsecSaStatsBadPad	Counter
	wfIpsecSaStatsProtectPkt	Counter
	wfIpsecSaStatsUnprotectPkt	Counter
	wfIpsecSaStatsEncryptByte	Counter
	wfIpsecSaStatsDecryptByte	Counter
	wfIpsecSaStatsMode	INTEGER
	wfIpsecSaStatsPfs	INTEGER
	wfIpsecSaStatsExpiryType	INTEGER
	wfIpsecSaStatsExpiryValue	INTEGER

Defined Values

wfIpsecBase		1.3.6.1.4.1.18.3.5.3.26.1
OBJECT IDENTIFIER

wfIpsecBaseCreate		1.3.6.1.4.1.18.3.5.3.26.1.1
Create/Delete parameter. Default is created. Users perform a set operation on this object in order to create/delete IPSec.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	created(1), deleted(2)

wfIpsecBaseEnable		1.3.6.1.4.1.18.3.5.3.26.1.2
Enable/Disable parameter. Default is enabled. Users perform a set operation on this object in order to enable/disable IPSec.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	enabled(1), disabled(2)

wfIpsecBaseState		1.3.6.1.4.1.18.3.5.3.26.1.3
The current state of IPsec.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER	up(1), down(2), notpresent(3)

wfIpsecBaseEspEncipherEnable		1.3.6.1.4.1.18.3.5.3.26.1.4
Used to control the whether ESP enciphers packets or not. Set this attribute to disable for debugging purposes only. When set to disabled, packets that match a policy that uses ESP to encipher the payload will not be enciphered. This allows one to view the plaintext inner headers for debugging purposes.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	enabled(1), disabled(2)

wfIpsecBaseMaxManualSpi		1.3.6.1.4.1.18.3.5.3.26.1.5
The maximum SPI value that will be accepted for manually configured SAs. The SA values 0 - 255 is reserved. To enter this value add the number of SAs belonging to a particular IPSec protocol ex ESP to 255. The default value is maximum of 32 unique ESP SAs. The value 255 will cause no manual SAs supported
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	256..65535

wfIpsecSelectorInTable		1.3.6.1.4.1.18.3.5.3.26.2
A table of selectors used to identify which IP security policy should be applied to a packet.
Status: mandatory	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		WfIpsecSelectorInEntry

wfIpsecSelectorInEntry		1.3.6.1.4.1.18.3.5.3.26.2.1
IP Security Selectors for a policy
Status: mandatory	Access: not-accessible
OBJECT-TYPE
	WfIpsecSelectorInEntry

wfIpsecSelectorInCreate		1.3.6.1.4.1.18.3.5.3.26.2.1.1
Defines the existence of the policy's selectors: created - instance exists delete - instance should be deleted.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	created(1), deleted(2)

wfIpsecSelectorInEnable		1.3.6.1.4.1.18.3.5.3.26.2.1.2
Defines whether or not the policy should be used: enabled - activate the policy's selectors. disabled - deactivate the policy's selectors.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	enabled(1), disabled(2)

wfIpsecSelectorInStatus		1.3.6.1.4.1.18.3.5.3.26.2.1.3
Defines the current status of the this instance: up: this instance is in use down: this instance is misconfigured inactive: this instance is disabled notpresent: the IPsec code isn't loaded
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER	up(1), down(2), inactive(3), notpresent(4)

wfIpsecSelectorInCounter		1.3.6.1.4.1.18.3.5.3.26.2.1.4
The number of received packets that have matched the selectors.
Status: mandatory	Access: read-only
OBJECT-TYPE
	Counter

wfIpsecSelectorInDefinition		1.3.6.1.4.1.18.3.5.3.26.2.1.5
The policy's selector definition.
Status: mandatory	Access: read-write
OBJECT-TYPE
	Opaque

wfIpsecSelectorInReserved		1.3.6.1.4.1.18.3.5.3.26.2.1.6
Reserved field.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER

wfIpsecSelectorInInterface		1.3.6.1.4.1.18.3.5.3.26.2.1.7
The network address of the IP interface to which the corresponding policy is applied.
Status: mandatory	Access: read-only
OBJECT-TYPE
	IpAddress

wfIpsecSelectorInCircuit		1.3.6.1.4.1.18.3.5.3.26.2.1.8
The ID of the Circuit to which the corresponding policy is applied.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER

wfIpsecSelectorInPolicyNumber		1.3.6.1.4.1.18.3.5.3.26.2.1.9
ID policy's selectors.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER

wfIpsecSelectorInFragment		1.3.6.1.4.1.18.3.5.3.26.2.1.10
Fragment number - for large sets of selectors.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER

wfIpsecSelectorInName		1.3.6.1.4.1.18.3.5.3.26.2.1.11
name of this instance of selectors.
Status: mandatory	Access: read-write
OBJECT-TYPE
	DisplayString

wfIpsecSelectorOutTable		1.3.6.1.4.1.18.3.5.3.26.3
A table of selectors used to identify which IP security policy should be applied to a packet.
Status: mandatory	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		WfIpsecSelectorOutEntry

wfIpsecSelectorOutEntry		1.3.6.1.4.1.18.3.5.3.26.3.1
IP Security Selectors for a policy
Status: mandatory	Access: not-accessible
OBJECT-TYPE
	WfIpsecSelectorOutEntry

wfIpsecSelectorOutCreate		1.3.6.1.4.1.18.3.5.3.26.3.1.1
Defines the existence of the policy's selectors: created - instance exists delete - instance should be deleted.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	created(1), deleted(2)

wfIpsecSelectorOutEnable		1.3.6.1.4.1.18.3.5.3.26.3.1.2
Defines whether or not the policy should be used: enabled - activate the policy's selectors. disabled - deactivate the policy's selectors.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	enabled(1), disabled(2)

wfIpsecSelectorOutStatus		1.3.6.1.4.1.18.3.5.3.26.3.1.3
Defines the current status of the this instance: up: this instance is in use down: this instance is misconfigured inactive: this instance is disabled notpresent: the IPsec code isn't loaded
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER	up(1), down(2), inactive(3), notpresent(4)

wfIpsecSelectorOutCounter		1.3.6.1.4.1.18.3.5.3.26.3.1.4
The number of received packets that have matched the selectors.
Status: mandatory	Access: read-only
OBJECT-TYPE
	Counter

wfIpsecSelectorOutDefinition		1.3.6.1.4.1.18.3.5.3.26.3.1.5
The policy's selector definition.
Status: mandatory	Access: read-write
OBJECT-TYPE
	Opaque

wfIpsecSelectorOutReserved		1.3.6.1.4.1.18.3.5.3.26.3.1.6
Reserved field.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER

wfIpsecSelectorOutInterface		1.3.6.1.4.1.18.3.5.3.26.3.1.7
The network address of the IP interface to which the corresponding policy is applied.
Status: mandatory	Access: read-only
OBJECT-TYPE
	IpAddress

wfIpsecSelectorOutCircuit		1.3.6.1.4.1.18.3.5.3.26.3.1.8
The ID of the Circuit to which the corresponding policy is applied.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER

wfIpsecSelectorOutPolicyNumber		1.3.6.1.4.1.18.3.5.3.26.3.1.9
ID policy's selectors.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER

wfIpsecSelectorOutFragment		1.3.6.1.4.1.18.3.5.3.26.3.1.10
Fragment number - for large sets of selectors.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER

wfIpsecSelectorOutName		1.3.6.1.4.1.18.3.5.3.26.3.1.11
name of this instance of selectors.
Status: mandatory	Access: read-write
OBJECT-TYPE
	DisplayString

wfIpsecDescriptorTable		1.3.6.1.4.1.18.3.5.3.26.4
Table of IP security descriptors
Status: mandatory	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		WfIpsecDescriptorEntry

wfIpsecDescriptorEntry		1.3.6.1.4.1.18.3.5.3.26.4.1
An IP security Descriptor
Status: mandatory	Access: not-accessible
OBJECT-TYPE
	WfIpsecDescriptorEntry

wfIpsecDescriptorCreate		1.3.6.1.4.1.18.3.5.3.26.4.1.1
Create/Delete parameter. Default is created.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	created(1), deleted(2)

wfIpsecDescriptorStatus		1.3.6.1.4.1.18.3.5.3.26.4.1.2
The status of this instance: up: this instance is in use down: this instance is misconfigured inactive: this instance is disabled notpresent: the IPsec code isn't loaded
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER	up(1), down(2), inactive(3), notpresent(4)

wfIpsecDescriptorPolicyNumber		1.3.6.1.4.1.18.3.5.3.26.4.1.3
Allows instance of wfIpsecSelectorOutEntry to be matched with this instance.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER

wfIpsecDescriptorInterface		1.3.6.1.4.1.18.3.5.3.26.4.1.4
The IP address of the security gateway which this descriptor belongs to.
Status: mandatory	Access: read-only
OBJECT-TYPE
	IpAddress

wfIpsecDescriptorCircuit		1.3.6.1.4.1.18.3.5.3.26.4.1.5
The ID of the Circuit to which this instance applies.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER

wfIpsecDescriptorManualSaList		1.3.6.1.4.1.18.3.5.3.26.4.1.6
the octet string represents an ordered list of Security Associations (SAs). the format of each 9 byte sequence is: ------------+-----------+-----------+------------+----------- \| protocol \| Peer IP Address \| ------------+-----------+-----------+------------+----------- \| SPI \| ------------+-----------+-----------+------------+
Status: mandatory	Access: read-write
OBJECT-TYPE
	Opaque

wfIpsecDescriptorSaMode		1.3.6.1.4.1.18.3.5.3.26.4.1.7
Identifies mode of the SA for this policy.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	tunnel(1), transport(2)

wfIpsecDescriptorPfs		1.3.6.1.4.1.18.3.5.3.26.4.1.8
Identifies whether perfect forward secrecy is required or not.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	true(1), false(2)

wfIpsecDescriptorProposals		1.3.6.1.4.1.18.3.5.3.26.4.1.9
the octet string represents an ordered list of proposals. Every 2 octets in the string contains a number which corresponds to an instance I.D. of wfIpsecProposalEntry. The list of proposals is a logically ORed list.
Status: mandatory	Access: read-write
OBJECT-TYPE
	Opaque

wfIpsecDescriptorSourceForDestAddr		1.3.6.1.4.1.18.3.5.3.26.4.1.10
The source for the destination IP address value to be used in the SA. 'packet' limits use of the SA to those packets which have a matching IP addr even if the policy permits a range. 'policy' allows more than one traffic flow to use the SA if the policy permits a range of IP addresses.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	packet(1), policy(2)

wfIpsecDescriptorSourceForSrcAddr		1.3.6.1.4.1.18.3.5.3.26.4.1.11
The source for the destination IP address value to be used in the SA. 'packet' limits use of the SA to those packets which have a matching IP addr even if the policy permits a range. 'policy' allows more than one traffic flow to use the SA if the policy permits a range of IP addresses.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	packet(1), policy(2)

wfIpsecDescriptorSourceForProtocol		1.3.6.1.4.1.18.3.5.3.26.4.1.12
The source for the destination IP address value to be used in the SA. 'packet' limits use of the SA to those packets which have a matching IP addr even if the policy permits a range. 'policy' allows more than one traffic flow to use the SA if the policy permits a range of IP addresses.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	packet(1), policy(2)

wfIpsecDescriptorStartSourceAddr		1.3.6.1.4.1.18.3.5.3.26.4.1.13
The start Source IP address for the dynamic SA.
Status: mandatory	Access: read-write
OBJECT-TYPE
	IpAddress

wfIpsecDescriptorEndSourceAddr		1.3.6.1.4.1.18.3.5.3.26.4.1.14
The end Source IP address for the dynamic SA.
Status: mandatory	Access: read-write
OBJECT-TYPE
	IpAddress

wfIpsecDescriptorStartDestAddr		1.3.6.1.4.1.18.3.5.3.26.4.1.15
The start Destination IP address for the dynamic SA.
Status: mandatory	Access: read-write
OBJECT-TYPE
	IpAddress

wfIpsecDescriptorEndDestAddr		1.3.6.1.4.1.18.3.5.3.26.4.1.16
The end Source IP address for the dynamic SA.
Status: mandatory	Access: read-write
OBJECT-TYPE
	IpAddress

wfIpsecDescriptorSourcePort		1.3.6.1.4.1.18.3.5.3.26.4.1.17
The source port number for the dynamic SA.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER

wfIpsecDescriptorProtocol		1.3.6.1.4.1.18.3.5.3.26.4.1.18
The IP protocol for the dynamic SA.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER

wfIpsecDescriptorPrimarySG		1.3.6.1.4.1.18.3.5.3.26.4.1.19
The address of the remote gateway.
Status: mandatory	Access: read-write
OBJECT-TYPE
	IpAddress

wfIpsecDescriptorInboundIdleTimer		1.3.6.1.4.1.18.3.5.3.26.4.1.20
Inbound (Unprotect) SA inactivity timer, in minutes. If no traffic is received on an automated inbound SA for the indicated time, both SAs for this policy will be deleted. A value of zero disables the timer.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER

wfIpsecDescriptorAntiReplayWindow		1.3.6.1.4.1.18.3.5.3.26.4.1.21
Anti-replay checking implies checking the sequence number of each encrypted packet received and determining if we have received this packet before. Anti-replay checking by receivers of encrypted traffic is optional. It must only happen if authentication is select one of the security services for this flow. Anti-replay even if enabled will not happen for packets which are only encrypted. This MIB attribute controls the number of packets which are kept track of for replay checking. Anything sequence number less than the window size is thrown away.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	disabled(1), pkts32(32), pkts64(64), pkts128(128)

wfIpsecDescriptorDestPort		1.3.6.1.4.1.18.3.5.3.26.4.1.22
The destination port number for the dynamic SA.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER

wfIpsecEspSaTable		1.3.6.1.4.1.18.3.5.3.26.5
The ESP security association table
Status: mandatory	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		WfIpsecEspSaEntry

wfIpsecEspSaEntry		1.3.6.1.4.1.18.3.5.3.26.5.1
Entry in ESP security association table
Status: mandatory	Access: not-accessible
OBJECT-TYPE
	WfIpsecEspSaEntry

wfIpsecEspSaCreate		1.3.6.1.4.1.18.3.5.3.26.5.1.1
Create/Delete parameter.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	created(1), deleted(2)

wfIpsecEspSaStatus		1.3.6.1.4.1.18.3.5.3.26.5.1.2
The current status of this Security Association: up: this SA is in use down: this SA is misconfigured inactive: this SA is disabled notpresent: the IPsec code isn't loaded
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER	up(1), down(2), inactive(3), notpresent(4)

wfIpsecEspSaSrc		1.3.6.1.4.1.18.3.5.3.26.5.1.3
The IP address of the SA's source.
Status: mandatory	Access: read-only
OBJECT-TYPE
	IpAddress

wfIpsecEspSaDest		1.3.6.1.4.1.18.3.5.3.26.5.1.4
The IP address of the SA's destination.
Status: mandatory	Access: read-only
OBJECT-TYPE
	IpAddress

wfIpsecEspSaSpi		1.3.6.1.4.1.18.3.5.3.26.5.1.5
The security parameters index
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER

wfIpsecEspSaCipherAlg		1.3.6.1.4.1.18.3.5.3.26.5.1.6
Identifies cipher algorithm for this SA.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	none(1), des(2), desede(3)

wfIpsecEspSaManualCipherKey		1.3.6.1.4.1.18.3.5.3.26.5.1.7
The key for a manually-keyed SA's cipher algorithm
Status: mandatory	Access: read-write
OBJECT-TYPE
	OCTET STRING

wfIpsecEspSaDesKeyStrength		1.3.6.1.4.1.18.3.5.3.26.5.1.8
The strength of the cipher key.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	fortybit(1), fiftysixbit(2)

wfIpsecEspSaIntegrityAlg		1.3.6.1.4.1.18.3.5.3.26.5.1.9
The algorithm for ESP Auth.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	none(1), hmacMd5(2), hmacSha1(3)

wfIpsecEspSaManualIntegrityKey		1.3.6.1.4.1.18.3.5.3.26.5.1.10
The key for a manually-keyed SA's integrity algorithm
Status: mandatory	Access: read-write
OBJECT-TYPE
	OCTET STRING

wfIpsecEspSaVerifyPad		1.3.6.1.4.1.18.3.5.3.26.5.1.11
This attribute enables checking of the pad field of ESP packets making sure it is in expected numeric ascending order. Packets with bad padding are discarded.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	enabled(1), disabled(2)

wfIpsecEspSaReset		1.3.6.1.4.1.18.3.5.3.26.5.1.12
Reset IPSec SA statistics indicator.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER

wfIpsecEspSaBadAuthen		1.3.6.1.4.1.18.3.5.3.26.5.1.13
The number of received encrypted packets that could not be properly authenticated.
Status: mandatory	Access: read-only
OBJECT-TYPE
	Counter

wfIpsecEspSaBadDecrypt		1.3.6.1.4.1.18.3.5.3.26.5.1.14
The number of received packets that could not be properly decrypted.
Status: mandatory	Access: read-only
OBJECT-TYPE
	Counter

wfIpsecEspSaBadPad		1.3.6.1.4.1.18.3.5.3.26.5.1.15
The number of received packets that contained bad padding information.
Status: mandatory	Access: read-only
OBJECT-TYPE
	Counter

wfIpsecEspSaProtectPkt		1.3.6.1.4.1.18.3.5.3.26.5.1.16
The number of successfully encrypted packets.
Status: mandatory	Access: read-only
OBJECT-TYPE
	Counter

wfIpsecEspSaUnprotectPkt		1.3.6.1.4.1.18.3.5.3.26.5.1.17
The number of successfully decrypted packets.
Status: mandatory	Access: read-only
OBJECT-TYPE
	Counter

wfIpsecEspSaEncryptByte		1.3.6.1.4.1.18.3.5.3.26.5.1.18
The number of successfully encrypted bytes.
Status: mandatory	Access: read-only
OBJECT-TYPE
	Counter

wfIpsecEspSaDecryptByte		1.3.6.1.4.1.18.3.5.3.26.5.1.19
The number of successfully encrypted bytes.
Status: mandatory	Access: read-only
OBJECT-TYPE
	Counter

wfIpsecEspSaMode		1.3.6.1.4.1.18.3.5.3.26.5.1.20
Identifies mode of the SA.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	tunnel(1), transport(2)

wfIpsecEspSaPfs		1.3.6.1.4.1.18.3.5.3.26.5.1.21
Identifies whether this SA has perfect forward secrecy or not.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	true(1), false(2)

wfIpsecEspSaExpiryType		1.3.6.1.4.1.18.3.5.3.26.5.1.22
The units used to interpret the expiry value. The SA's keys don't expire when this is set to none.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	seconds(1), kilobytes(2), none(3)

wfIpsecEspSaExpiryValue		1.3.6.1.4.1.18.3.5.3.26.5.1.23
The value used to determine when the keys for this SA expire.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER

wfIpsecStatsTable		1.3.6.1.4.1.18.3.5.3.26.6
The interface statistics table
Status: mandatory	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		WfIpsecStatsEntry

wfIpsecStatsEntry		1.3.6.1.4.1.18.3.5.3.26.6.1
Entry in Interface Statistics Table
Status: mandatory	Access: not-accessible
OBJECT-TYPE
	WfIpsecStatsEntry

wfIpsecStatsCreate		1.3.6.1.4.1.18.3.5.3.26.6.1.1
Create/Delete parameter.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER	created(1), deleted(2)

wfIpsecStatsInterface		1.3.6.1.4.1.18.3.5.3.26.6.1.2
The IP address of the security gateway which these statistics belong to.
Status: mandatory	Access: read-only
OBJECT-TYPE
	IpAddress

wfIpsecStatsCircuit		1.3.6.1.4.1.18.3.5.3.26.6.1.3
The ID of the Circuit to which this instance applies.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER

wfIpsecStatsReset		1.3.6.1.4.1.18.3.5.3.26.6.1.4
Reset IPSec statistics indicator.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER

wfIpsecStatsUnprotectPkt		1.3.6.1.4.1.18.3.5.3.26.6.1.5
The number of received packets successfully decrypted.
Status: mandatory	Access: read-only
OBJECT-TYPE
	Counter

wfIpsecStatsProtectPkt		1.3.6.1.4.1.18.3.5.3.26.6.1.6
The number of received packets successfully encrypted.
Status: mandatory	Access: read-only
OBJECT-TYPE
	Counter

wfIpsecStatsBypassPkt		1.3.6.1.4.1.18.3.5.3.26.6.1.7
The number of received packets that have bypassed.
Status: mandatory	Access: read-only
OBJECT-TYPE
	Counter

wfIpsecStatsDropPkt		1.3.6.1.4.1.18.3.5.3.26.6.1.8
The number of received packets that have been dropped.
Status: mandatory	Access: read-only
OBJECT-TYPE
	Counter

wfIpsecStatsNoSa		1.3.6.1.4.1.18.3.5.3.26.6.1.9
The number of received packets for which no SA was found.
Status: mandatory	Access: read-only
OBJECT-TYPE
	Counter

wfIpsecStatsLastBadSpi		1.3.6.1.4.1.18.3.5.3.26.6.1.10
The last security parameters index for which no SA could be found.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER

wfIpsecStatsNoPolicyMatch		1.3.6.1.4.1.18.3.5.3.26.6.1.11
The number of received packets for which no policy match could be found.
Status: mandatory	Access: read-only
OBJECT-TYPE
	Counter

wfIpsecStatsSaExpDropBytes		1.3.6.1.4.1.18.3.5.3.26.6.1.12
The number of bytes discarded owing to SA Expiry
Status: mandatory	Access: read-only
OBJECT-TYPE
	Counter

wfIpsecStatsOutClips		1.3.6.1.4.1.18.3.5.3.26.6.1.13
The number of outbound packets clipped due to buffer congestion.
Status: mandatory	Access: read-only
OBJECT-TYPE
	Counter

wfIpsecStatsInClips		1.3.6.1.4.1.18.3.5.3.26.6.1.14
The number of inbound packets clipped due to buffer congestion.
Status: mandatory	Access: read-only
OBJECT-TYPE
	Counter

wfIpsecRemoteGatewayTable		1.3.6.1.4.1.18.3.5.3.26.7
A table of known remote Security Gateways.
Status: mandatory	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		WfIpsecRemoteGatewayEntry

wfIpsecRemoteGatewayEntry		1.3.6.1.4.1.18.3.5.3.26.7.1
A remote Security Gateway
Status: mandatory	Access: not-accessible
OBJECT-TYPE
	WfIpsecRemoteGatewayEntry

wfIpsecRemoteGatewayCreate		1.3.6.1.4.1.18.3.5.3.26.7.1.1
creates or deletes an instance.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	created(1), deleted(2)

wfIpsecRemoteGatewayEnable		1.3.6.1.4.1.18.3.5.3.26.7.1.2
enables and disables this instance.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	enabled(1), disabled(2)

wfIpsecRemoteGatewayStatus		1.3.6.1.4.1.18.3.5.3.26.7.1.3
Defines the current status of the instance: inactive - ? active - ? error - ?
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER	active(1), error(2), inactive(3), notpresent(4)

wfIpsecRemoteGatewayInterface		1.3.6.1.4.1.18.3.5.3.26.7.1.4
The address of the IP interface to which this instance applies.
Status: mandatory	Access: read-only
OBJECT-TYPE
	IpAddress

wfIpsecRemoteGatewayCircuit		1.3.6.1.4.1.18.3.5.3.26.7.1.5
The ID of the Circuit to which the instance applies.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER

wfIpsecRemoteGatewayIndex		1.3.6.1.4.1.18.3.5.3.26.7.1.6
An index used to differentiate remote gateway instances.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER

wfIpsecRemoteGatewayIpAddr		1.3.6.1.4.1.18.3.5.3.26.7.1.7
The address of the remote gateway.
Status: mandatory	Access: read-write
OBJECT-TYPE
	IpAddress

wfIpsecRemoteGatewayRange		1.3.6.1.4.1.18.3.5.3.26.7.1.8
The range of destination IP addresses that the remote security gateway represents.
Status: mandatory	Access: read-write
OBJECT-TYPE
	OCTET STRING

wfIpsecRemoteGatewayName		1.3.6.1.4.1.18.3.5.3.26.7.1.9
name of the remote security gateway.
Status: mandatory	Access: read-write
OBJECT-TYPE
	DisplayString

wfIpsecProposalTable		1.3.6.1.4.1.18.3.5.3.26.8
Table of IP security proposals
Status: mandatory	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		WfIpsecProposalEntry

wfIpsecProposalEntry		1.3.6.1.4.1.18.3.5.3.26.8.1
An IP security Proposal. This is essentially a sequence of protection suites represented by wfIpsecSuiteEntry instances
Status: mandatory	Access: not-accessible
OBJECT-TYPE
	WfIpsecProposalEntry

wfIpsecProposalCreate		1.3.6.1.4.1.18.3.5.3.26.8.1.1
Create/Delete parameter. Default is created.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	created(1), deleted(2)

wfIpsecProposalStatus		1.3.6.1.4.1.18.3.5.3.26.8.1.2
The status of this Proposal.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER	active(1), error(2), inactive(3), notpresent(4)

wfIpsecProposalName		1.3.6.1.4.1.18.3.5.3.26.8.1.3
Proposal name.
Status: mandatory	Access: read-write
OBJECT-TYPE
	DisplayString

wfIpsecProposalNumber		1.3.6.1.4.1.18.3.5.3.26.8.1.4
A number that identifies this proposal.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER

wfIpsecProposalSuites		1.3.6.1.4.1.18.3.5.3.26.8.1.5
the octet string contains a list of ordered, 2 byte numbers that correspond to wfIpsecSuiteEntry instance ID's. The list of protection suites is a logically ANDed list. This allows multiple protocols to be used for a policy.
Status: mandatory	Access: read-write
OBJECT-TYPE
	Opaque

wfIpsecSuiteTable		1.3.6.1.4.1.18.3.5.3.26.9
Table of IP security protection suites
Status: mandatory	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		WfIpsecSuiteEntry

wfIpsecSuiteEntry		1.3.6.1.4.1.18.3.5.3.26.9.1
An IP security protection suite
Status: mandatory	Access: not-accessible
OBJECT-TYPE
	WfIpsecSuiteEntry

wfIpsecSuiteCreate		1.3.6.1.4.1.18.3.5.3.26.9.1.1
Create/Delete parameter. Default is created.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	created(1), deleted(2)

wfIpsecSuiteStatus		1.3.6.1.4.1.18.3.5.3.26.9.1.2
The status of this Suite.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER	active(1), error(2), inactive(3), notpresent(4)

wfIpsecSuiteName		1.3.6.1.4.1.18.3.5.3.26.9.1.3
Suite name.
Status: mandatory	Access: read-write
OBJECT-TYPE
	DisplayString

wfIpsecSuiteNumber		1.3.6.1.4.1.18.3.5.3.26.9.1.4
A number that identifies this protection suite.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER

wfIpsecSuiteEspProtocol		1.3.6.1.4.1.18.3.5.3.26.9.1.5
The ordered sequence of wfIpsecEspTransformEntry instances that comprise this protection suite.
Status: mandatory	Access: read-write
OBJECT-TYPE
	Opaque

wfIpsecSuiteAhProtocol		1.3.6.1.4.1.18.3.5.3.26.9.1.6
The ordered sequence of wfIpsecAhProposalEntry instances that comprise this protection suite.
Status: mandatory	Access: read-write
OBJECT-TYPE
	Opaque

wfIpsecEspTransformTable		1.3.6.1.4.1.18.3.5.3.26.10
Table of IP security policies
Status: mandatory	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		WfIpsecEspTransformEntry

wfIpsecEspTransformEntry		1.3.6.1.4.1.18.3.5.3.26.10.1
An IP security ESP Transform
Status: mandatory	Access: not-accessible
OBJECT-TYPE
	WfIpsecEspTransformEntry

wfIpsecEspTransformCreate		1.3.6.1.4.1.18.3.5.3.26.10.1.1
Create/Delete parameter. Default is created.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	created(1), deleted(2)

wfIpsecEspTransformStatus		1.3.6.1.4.1.18.3.5.3.26.10.1.2
The status of this ESP Transform.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER	active(1), error(2), inactive(3), notpresent(4)

wfIpsecEspTransformName		1.3.6.1.4.1.18.3.5.3.26.10.1.3
ESP Transform name.
Status: mandatory	Access: read-write
OBJECT-TYPE
	DisplayString

wfIpsecEspTransformNumber		1.3.6.1.4.1.18.3.5.3.26.10.1.4
A number that identifies this ESP proposal.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER

wfIpsecEspTransformCipherAlg		1.3.6.1.4.1.18.3.5.3.26.10.1.5
The cipher algorithm for ESP.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	none(1), des(2), desede(3)

wfIpsecEspTransformKeyLength		1.3.6.1.4.1.18.3.5.3.26.10.1.6
The key length for the ESP cipher algorithm.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER

wfIpsecEspTransformIntegrityAlg		1.3.6.1.4.1.18.3.5.3.26.10.1.7
The algorithm for ESP Auth.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	none(1), hmacMd5(2), hmacSha1(3)

wfIpsecEspTransformExpiryTime		1.3.6.1.4.1.18.3.5.3.26.10.1.8
The value used to determine when the keys for this SA expire due to the passage of time. The units are minutes. The minium recommended value is 10 min.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER

wfIpsecEspTransformExpiryMBytes		1.3.6.1.4.1.18.3.5.3.26.10.1.9
The value used to determine when the keys for this SA expire due to the number of bytes processed. The units are mega-bytes. The minium recommended value is 10 Mbytes. A value of 0 indicates that MByte expiry is not desired.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER

wfIpsecEspTransformExpiryPref		1.3.6.1.4.1.18.3.5.3.26.10.1.10
The value used to determine precedence between time/kbyte expiry
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	minutes(1), mbytes(2)

wfIpsecAhTransformTable		1.3.6.1.4.1.18.3.5.3.26.11
Table of IP security policies
Status: mandatory	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		WfIpsecAhTransformEntry

wfIpsecAhTransformEntry		1.3.6.1.4.1.18.3.5.3.26.11.1
An IP security AhTransform
Status: mandatory	Access: not-accessible
OBJECT-TYPE
	WfIpsecAhTransformEntry

wfIpsecAhTransformCreate		1.3.6.1.4.1.18.3.5.3.26.11.1.1
Create/Delete parameter. Default is created.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	created(1), deleted(2)

wfIpsecAhTransformStatus		1.3.6.1.4.1.18.3.5.3.26.11.1.2
The status of this AhTransform.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER	active(1), error(2), inactive(3), notpresent(4)

wfIpsecAhTransformName		1.3.6.1.4.1.18.3.5.3.26.11.1.3
AhTransform name.
Status: mandatory	Access: read-write
OBJECT-TYPE
	DisplayString

wfIpsecAhTransformNumber		1.3.6.1.4.1.18.3.5.3.26.11.1.4
A number that identifies this AH proposal.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER

wfIpsecAhTransformIntegrityAlg		1.3.6.1.4.1.18.3.5.3.26.11.1.5
The algorithm for AH.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	none(1), hmacMd5(2), hmacSha1(3)

wfIpsecAhTransformGroup		1.3.6.1.4.1.18.3.5.3.26.11.1.6
The DH group
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	one(1)

wfIpsecAhTransformExpiryType		1.3.6.1.4.1.18.3.5.3.26.11.1.7
The units used to interpret the expiry value. The SA's keys don't expire when this is set to none.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER	seconds(1), kilobytes(2), none(3)

wfIpsecAhTransformExpiryValue		1.3.6.1.4.1.18.3.5.3.26.11.1.8
The value used to determine when the keys for this SA expire.
Status: mandatory	Access: read-write
OBJECT-TYPE
	INTEGER

wfIpsecSaStatsTable		1.3.6.1.4.1.18.3.5.3.26.12
The Ipsec automated SA table
Status: mandatory	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		WfIpsecSaStatsEntry

wfIpsecSaStatsEntry		1.3.6.1.4.1.18.3.5.3.26.12.1
Entry in Automated ESP SA table
Status: mandatory	Access: not-accessible
OBJECT-TYPE
	WfIpsecSaStatsEntry

wfIpsecSaStatsStatus		1.3.6.1.4.1.18.3.5.3.26.12.1.1
The current status of this Security Association: up: this SA is in use down: this SA is misconfigured ??? inactive: this SA is disabled ??? notpresent: the IPsec code isn't loaded ???
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER	up(1), down(2), inactive(3), notpresent(4)

wfIpsecSaStatsSrc		1.3.6.1.4.1.18.3.5.3.26.12.1.2
The IP address of the SA's source.
Status: mandatory	Access: read-only
OBJECT-TYPE
	IpAddress

wfIpsecSaStatsDest		1.3.6.1.4.1.18.3.5.3.26.12.1.3
The IP address of the SA's destination.
Status: mandatory	Access: read-only
OBJECT-TYPE
	IpAddress

wfIpsecSaStatsSpi		1.3.6.1.4.1.18.3.5.3.26.12.1.4
The security parameters index
Status: mandatory	Access: read-only
OBJECT-TYPE
	Gauge

wfIpsecSaStatsProto		1.3.6.1.4.1.18.3.5.3.26.12.1.5
The protocol used by this SA.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER	none(1), esp(2), ah(3)

wfIpsecSaStatsCipherAlg		1.3.6.1.4.1.18.3.5.3.26.12.1.6
Identifies cipher algorithm for this SA.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER	none(1), des(2), desede(3)

wfIpsecSaStatsIntegrityAlg		1.3.6.1.4.1.18.3.5.3.26.12.1.7
The algorithm for ESP Auth.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER	none(1), hmacMd5(2), hmacSha1(3)

wfIpsecSaStatsBadAuthen		1.3.6.1.4.1.18.3.5.3.26.12.1.8
The number of received encrypted packets that could not be properly authenticated.
Status: mandatory	Access: read-only
OBJECT-TYPE
	Counter

wfIpsecSaStatsBadDecrypt		1.3.6.1.4.1.18.3.5.3.26.12.1.9
The number of received packets that could not be properly decrypted.
Status: mandatory	Access: read-only
OBJECT-TYPE
	Counter

wfIpsecSaStatsBadPad		1.3.6.1.4.1.18.3.5.3.26.12.1.10
The number of received packets that contained bad padding information.
Status: mandatory	Access: read-only
OBJECT-TYPE
	Counter

wfIpsecSaStatsProtectPkt		1.3.6.1.4.1.18.3.5.3.26.12.1.11
The number of successfully encrypted packets.
Status: mandatory	Access: read-only
OBJECT-TYPE
	Counter

wfIpsecSaStatsUnprotectPkt		1.3.6.1.4.1.18.3.5.3.26.12.1.12
The number of successfully decrypted packets.
Status: mandatory	Access: read-only
OBJECT-TYPE
	Counter

wfIpsecSaStatsEncryptByte		1.3.6.1.4.1.18.3.5.3.26.12.1.13
The number of successfully encrypted bytes.
Status: mandatory	Access: read-only
OBJECT-TYPE
	Counter

wfIpsecSaStatsDecryptByte		1.3.6.1.4.1.18.3.5.3.26.12.1.14
The number of successfully encrypted bytes.
Status: mandatory	Access: read-only
OBJECT-TYPE
	Counter

wfIpsecSaStatsMode		1.3.6.1.4.1.18.3.5.3.26.12.1.15
Identifies mode of the SA.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER	tunnel(1), transport(2)

wfIpsecSaStatsPfs		1.3.6.1.4.1.18.3.5.3.26.12.1.16
Identifies whether this SA has perfect forward secrecy or not.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER	true(1), false(2)

wfIpsecSaStatsExpiryType		1.3.6.1.4.1.18.3.5.3.26.12.1.17
The units used to interpret the expiry value. The SA's keys don't expire when this is set to none.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER	seconds(1), kilobytes(2), none(3)

wfIpsecSaStatsExpiryValue		1.3.6.1.4.1.18.3.5.3.26.12.1.18
The value used to determine when the keys for this SA expire.
Status: mandatory	Access: read-only
OBJECT-TYPE
	INTEGER