{ "openapi": "3.0.0", "info": { "title": "CISCO-IPSEC-FLOW-MONITOR-MIB MIB API", "version": "1.0.0", "description": "SNMP MIB translated to YANG data model\n\nāš ļø **IMPORTANT - MIB DATA ACCESS**:\nThis YANG model exists for SMIv2-to-YANG translation purposes, but MIB data on IOS-XE devices is primarily accessed via **SNMP protocol**, not RESTCONF.\n\n**RESTCONF Limitation**: Many MIB paths may return 404 errors via RESTCONF `/data` endpoints because the device exposes MIB data through SNMP, not the YANG datastore.\n\n**Recommended Access Methods**:\n- Use SNMP (v2c/v3) to query MIB data directly\n- Use NETCONF `` operations for devices supporting YANG-modeled MIB access\n- Check device capabilities: some newer IOS-XE versions may support limited RESTCONF access to specific MIBs\n\n**YANG Model Purpose**: These YANG models define the structure of SNMP MIBs in YANG format for tooling compatibility, but do not guarantee RESTCONF data availability.\n\n\n**šŸ“Š YANG Tree:** [View CISCO-IPSEC-FLOW-MONITOR-MIB structure](https://jeremycohoe.github.io/cisco-ios-xe-openapi-swagger/yang-trees/CISCO-IPSEC-FLOW-MONITOR-MIB.html)", "contact": { "name": "Cisco DevNet", "url": "https://developer.cisco.com" }, "x-yang-module": "CISCO-IPSEC-FLOW-MONITOR-MIB", "x-model-type": "mib" }, "servers": [ { "url": "https://{device}/restconf", "description": "RESTCONF server", "variables": { "device": { "default": "10.1.1.1", "description": "Device hostname or IP address" } } } ], "paths": { "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecLevels": { "get": { "summary": "Get cipSecLevels data", "description": "Retrieve cipSecLevels operational data from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "description": "The level of the IPsec MIB.", "properties": { "cipSecMibLevel": { "type": "integer", "description": "The level of the IPsec MIB.", "minimum": -2147483648, "maximum": 2147483647 } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecLevels": { "cipSecMibLevel": -2147483648 } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecLevels", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cipSecLevels", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikeGlobalStats": { "get": { "summary": "Get cikeGlobalStats data", "description": "Retrieve cikeGlobalStats operational data from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "description": "The number of currently active IPsec\n Phase-1 IKE Tunnels.", "properties": { "cikeGlobalActiveTunnels": { "type": "integer", "description": "The number of currently active IPsec\n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikeGlobalPreviousTunnels": { "type": "integer", "description": "The total number of previously active\n IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikeGlobalInOctets": { "type": "integer", "description": "The total number of octets received by all currently\n and previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikeGlobalInPkts": { "type": "integer", "description": "The total number of packets received by all\n currently and previously active IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikeGlobalInDropPkts": { "type": "integer", "description": "The total number of packets which were\n dropped during receive processing by all \n currently and previously\n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikeGlobalInNotifys": { "type": "integer", "description": "The total number of notifys received by\n all currently and previously active IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikeGlobalInP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n received by all currently and previously \n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikeGlobalInP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were received and found to be invalid \n by all currently and previously active IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikeGlobalInP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were received and rejected by all \n currently and previously active IPsec Phase-1 \n IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikeGlobalInP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 security\n association delete requests received by all \n currently and previously\n active and IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikeGlobalOutOctets": { "type": "integer", "description": "The total number of octets sent by all currently\n and previously active and IPsec Phase-1 \n IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikeGlobalOutPkts": { "type": "integer", "description": "The total number of packets sent by all currently\n and previously active and IPsec Phase-1 \n Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikeGlobalOutDropPkts": { "type": "integer", "description": "The total number of packets which were dropped\n during send processing by all currently \n and previously\n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikeGlobalOutNotifys": { "type": "integer", "description": "The total number of notifys sent by all currently\n and previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikeGlobalOutP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were sent by all currently and previously \n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikeGlobalOutP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were sent and found to be invalid by \n all currently and previously active IPsec Phase-1 \n Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikeGlobalOutP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were sent and rejected by all currently and\n previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikeGlobalOutP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 SA\n delete requests sent by all currently and \n previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikeGlobalInitTunnels": { "type": "integer", "description": "The total number of IPsec Phase-1 IKE\n Tunnels which were locally initiated.", "minimum": 0, "maximum": 4294967295 }, "cikeGlobalInitTunnelFails": { "type": "integer", "description": "The total number of IPsec Phase-1 IKE Tunnels\n which were locally initiated and failed to activate.", "minimum": 0, "maximum": 4294967295 }, "cikeGlobalRespTunnelFails": { "type": "integer", "description": "The total number of IPsec Phase-1 IKE Tunnels\n which were remotely initiated and failed to activate.", "minimum": 0, "maximum": 4294967295 }, "cikeGlobalSysCapFails": { "type": "integer", "description": "The total number of system capacity failures\n which occurred during processing of all current \n and previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikeGlobalAuthFails": { "type": "integer", "description": "The total number of authentications which ended\n in failure by all current and previous IPsec Phase-1\n IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikeGlobalDecryptFails": { "type": "integer", "description": "The total number of decryptions which ended\n in failure by all current and previous IPsec Phase-1\n IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikeGlobalHashValidFails": { "type": "integer", "description": "The total number of hash validations which ended\n in failure by all current and previous IPsec Phase-1\n IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikeGlobalNoSaFails": { "type": "integer", "description": "The total number of non-existent Security Association\n in failures which occurred during processing of \n all current and previous IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikeGlobalStats": { "cikeGlobalActiveTunnels": 0, "cikeGlobalPreviousTunnels": 0, "cikeGlobalInOctets": 1234567890, "cikeGlobalInPkts": 0, "cikeGlobalInDropPkts": 0, "cikeGlobalInNotifys": 0, "cikeGlobalInP2Exchgs": 0, "cikeGlobalInP2ExchgInvalids": 0, "cikeGlobalInP2ExchgRejects": 0, "cikeGlobalInP2SaDelRequests": 0, "cikeGlobalOutOctets": 1234567890, "cikeGlobalOutPkts": 0, "cikeGlobalOutDropPkts": 0, "cikeGlobalOutNotifys": 0, "cikeGlobalOutP2Exchgs": 0, "cikeGlobalOutP2ExchgInvalids": 0, "cikeGlobalOutP2ExchgRejects": 0, "cikeGlobalOutP2SaDelRequests": 0, "cikeGlobalInitTunnels": 0, "cikeGlobalInitTunnelFails": 0, "cikeGlobalRespTunnelFails": 0, "cikeGlobalSysCapFails": 0, "cikeGlobalAuthFails": 0, "cikeGlobalDecryptFails": 0, "cikeGlobalHashValidFails": 0, "cikeGlobalNoSaFails": 0 } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikeGlobalStats", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cikeGlobalStats", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecGlobalStats": { "get": { "summary": "Get cipSecGlobalStats data", "description": "Retrieve cipSecGlobalStats operational data from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "description": "The total number of currently active\n IPsec Phase-2 Tunnels.", "properties": { "cipSecGlobalActiveTunnels": { "type": "integer", "description": "The total number of currently active\n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecGlobalPreviousTunnels": { "type": "integer", "description": "The total number of previously active\n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecGlobalInOctets": { "type": "integer", "description": "The total number of octets received by all\n current and previous IPsec Phase-2 Tunnels. \n This value is\n accumulated BEFORE determining whether or not\n the packet should be decompressed. See also\n cipSecGlobalInOctWraps for the number of times\n this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecGlobalHcInOctets": { "type": "integer", "description": "A high capacity count of the total number of\n octets received by all current and previous\n IPsec Phase-2 Tunnels. This value is accumulated\n BEFORE determining whether or not the packet\n should be decompressed.", "minimum": 0 }, "cipSecGlobalInOctWraps": { "type": "integer", "description": "The number of times the global octets received\n counter (cipSecGlobalInOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecGlobalInDecompOctets": { "type": "integer", "description": "The total number of decompressed octets received\n by all current and previous IPsec Phase-2 Tunnels. \n This value is accumulated AFTER the packet is \n decompressed. If compression is not being used, \n this value will match the value of cipSecGlobalInOctets. \n See also cipSecGlobalInDecompOctWraps\n for the number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecGlobalHcInDecompOctets": { "type": "integer", "description": "A high capacity count of the total number\n of decompressed octets received by all current \n and previous IPsec Phase-2 Tunnels. This value \n is accumulated AFTER the packet is decompressed.\n If compression is not being used, this value \n will match the value of cipSecGlobalHcInOctets.", "minimum": 0 }, "cipSecGlobalInDecompOctWraps": { "type": "integer", "description": "The number of times the global decompressed\n octets received counter\n (cipSecGlobalInDecompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecGlobalInPkts": { "type": "integer", "description": "The total number of packets received\n by all current and previous\n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecGlobalInDrops": { "type": "integer", "description": "The total number of packets dropped\n during receive processing by all current and previous \n IPsec Phase-2 Tunnels. This count does\n NOT include packets dropped due to \n Anti-Replay processing.", "minimum": 0, "maximum": 4294967295 }, "cipSecGlobalInReplayDrops": { "type": "integer", "description": "The total number of packets dropped during\n receive processing due to Anti-Replay \n processing by all current and previous IPsec\n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecGlobalInAuths": { "type": "integer", "description": "The total number of inbound authentication's\n performed by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecGlobalInAuthFails": { "type": "integer", "description": "The total number of inbound authentication's\n which ended in failure by all current and previous \n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecGlobalInDecrypts": { "type": "integer", "description": "The total number of inbound decryption's\n performed by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecGlobalInDecryptFails": { "type": "integer", "description": "The total number of inbound decryption's\n which ended in failure by all current and \n previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecGlobalOutOctets": { "type": "integer", "description": "The total number of octets sent by all\n current and previous IPsec Phase-2 Tunnels. \n This value is accumulated AFTER determining \n whether or not the packet should be compressed. \n See also cipSecGlobalOutOctWraps for the\n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecGlobalHcOutOctets": { "type": "integer", "description": "A high capacity count of the total number\n of octets sent by all current and previous \n IPsec Phase-2 Tunnels. This value is accumulated \n AFTER determining whether or not the packet should \n be compressed.", "minimum": 0 }, "cipSecGlobalOutOctWraps": { "type": "integer", "description": "The number of times the global octets sent counter\n (cipSecGlobalOutOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecGlobalOutUncompOctets": { "type": "integer", "description": "The total number of uncompressed octets sent\n by all current and previous IPsec Phase-2 Tunnels. \n This value is accumulated BEFORE the packet is \n compressed. If compression is not being used, this \n value will match the value of cipSecGlobalOutOctets. \n See also cipSecGlobalOutDecompOctWraps for the number \n of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecGlobalHcOutUncompOctets": { "type": "integer", "description": "A high capacity count of the total number of\n uncompressed octets sent by all current and previous \n IPsec Phase-2 Tunnels. This value is accumulated \n BEFORE the packet is compressed. If compression is \n not being used, this value will match the\n value of cipSecGlobalHcOutOctets.", "minimum": 0 }, "cipSecGlobalOutUncompOctWraps": { "type": "integer", "description": "The number of times the global uncompressed\n octets sent counter (cipSecGlobalOutUncompOctets) \n has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecGlobalOutPkts": { "type": "integer", "description": "The total number of packets sent by all\n current and previous\n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecGlobalOutDrops": { "type": "integer", "description": "The total number of packets dropped during send\n processing by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecGlobalOutAuths": { "type": "integer", "description": "The total number of outbound authentication's\n performed by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecGlobalOutAuthFails": { "type": "integer", "description": "The total number of outbound authentication's\n which ended in failure\n by all current and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecGlobalOutEncrypts": { "type": "integer", "description": "The total number of outbound encryption's performed\n by all current and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecGlobalOutEncryptFails": { "type": "integer", "description": "The total number of outbound encryption's\n which ended in failure by all current and \n previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecGlobalProtocolUseFails": { "type": "integer", "description": "The total number of protocol use failures\n which occurred during processing of all current \n and previously active IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecGlobalNoSaFails": { "type": "integer", "description": "The total number of non-existent\n Security Association in failures which occurred \n during processing of all current\n and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecGlobalSysCapFails": { "type": "integer", "description": "The total number of system capacity failures\n which occurred during processing of all current \n and previously active IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecGlobalStats": { "cipSecGlobalActiveTunnels": 0, "cipSecGlobalPreviousTunnels": 0, "cipSecGlobalInOctets": 1234567890, "cipSecGlobalHcInOctets": 1234567890, "cipSecGlobalInOctWraps": 0, "cipSecGlobalInDecompOctets": 1234567890, "cipSecGlobalHcInDecompOctets": 1234567890, "cipSecGlobalInDecompOctWraps": 0, "cipSecGlobalInPkts": 0, "cipSecGlobalInDrops": 0, "cipSecGlobalInReplayDrops": 0, "cipSecGlobalInAuths": 0, "cipSecGlobalInAuthFails": 0, "cipSecGlobalInDecrypts": 0, "cipSecGlobalInDecryptFails": 0, "cipSecGlobalOutOctets": 1234567890, "cipSecGlobalHcOutOctets": 1234567890, "cipSecGlobalOutOctWraps": 0, "cipSecGlobalOutUncompOctets": 1234567890, "cipSecGlobalHcOutUncompOctets": 1234567890, "cipSecGlobalOutUncompOctWraps": 0, "cipSecGlobalOutPkts": 0, "cipSecGlobalOutDrops": 0, "cipSecGlobalOutAuths": 0, "cipSecGlobalOutAuthFails": 0, "cipSecGlobalOutEncrypts": 0, "cipSecGlobalOutEncryptFails": 0, "cipSecGlobalProtocolUseFails": 0, "cipSecGlobalNoSaFails": 0, "cipSecGlobalSysCapFails": 0 } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecGlobalStats", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cipSecGlobalStats", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecHistGlobalCntl": { "get": { "summary": "Get cipSecHistGlobalCntl data", "description": "Retrieve cipSecHistGlobalCntl operational data from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "description": "cipSecHistGlobalCntl", "properties": { "cipSecHistTableSize": { "type": "integer", "description": "The window size of the IPsec Phase-1 and Phase-2\n History Tables.\n \n The IPsec Phase-1 and Phase-2 History Tables are\n implemented as a sliding window in which only the\n last n entries are maintained. This object is used\n specify the number of entries which will be \n maintained in the IPsec Phase-1 and \n Phase-2 History Tables.\n \n An implementation may choose suitable minimum and \n maximum values for this element based on the local \n policy and available resources. If an SNMP SET request \n specifies a value outside this window for this element, \n a BAD VALUE may be returned.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecHistCheckPoint": { "type": "string", "description": "The current state of check point processing.\n \n This object will return ready when the agent is \n ready to create on-demand history entries for \n active IPsec Tunnels or checkPoint when the \n agent is currently creating on-demand history \n entries for active IPsec Tunnels.\n \n By setting this value to checkPoint, the agent \n will create:\n a) an entry in the IPsec Phase-1 Tunnel History \n for each active IPsec Phase-1 Tunnel and\n b) an entry in the IPsec Phase-2 Tunnel History \n Table and an entry in the IPsec Phase-2 \n Tunnel EndPoint History Table\n for each active IPsec Phase-2 Tunnel." } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecHistGlobalCntl": { "cipSecHistTableSize": -2147483648, "cipSecHistCheckPoint": "192.168.1.1" } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecHistGlobalCntl", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cipSecHistGlobalCntl", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecFailGlobalCntl": { "get": { "summary": "Get cipSecFailGlobalCntl data", "description": "Retrieve cipSecFailGlobalCntl operational data from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "description": "cipSecFailGlobalCntl", "properties": { "cipSecFailTableSize": { "type": "integer", "description": "The window size of the IPsec Phase-1 and Phase-2\n Failure Tables.\n \n The IPsec Phase-1 and Phase-2 Failure Tables are\n implemented as a sliding window in which only the\n last n entries are maintained. This object is used\n specify the number of entries which will be \n maintained in the IPsec Phase-1 and Phase-2 Failure \n Tables.\n \n An implementation may choose suitable minimum and \n maximum values for this element based on the local \n policy and available resources. If an SNMP SET request \n specifies a value outside this window for this element, \n a BAD VALUE may be returned.", "minimum": -2147483648, "maximum": 2147483647 } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecFailGlobalCntl": { "cipSecFailTableSize": -2147483648 } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecFailGlobalCntl", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cipSecFailGlobalCntl", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecTrapCntl": { "get": { "summary": "Get cipSecTrapCntl data", "description": "Retrieve cipSecTrapCntl operational data from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "description": "This object defines the administrative state of\n sending the IPsec IKE Phase-1 Tunnel Start TRAP", "properties": { "cipSecTrapCntlIkeTunnelStart": { "type": "string", "description": "This object defines the administrative state of\n sending the IPsec IKE Phase-1 Tunnel Start TRAP", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TrapStatus" }, "cipSecTrapCntlIkeTunnelStop": { "type": "string", "description": "This object defines the administrative state\n of sending the\n IPsec IKE Phase-1 Tunnel Stop TRAP", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TrapStatus" }, "cipSecTrapCntlIkeSysFailure": { "type": "string", "description": "This object defines the administrative state\n of sending the\n IPsec IKE Phase-1 System Failure TRAP", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TrapStatus" }, "cipSecTrapCntlIkeCertCrlFailure": { "type": "string", "description": "This object defines the administrative\n state of sending the\n IPsec IKE Phase-1 Certificate/CRL Failure TRAP", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TrapStatus" }, "cipSecTrapCntlIkeProtocolFail": { "type": "string", "description": "This object defines the administrative\n state of sending the\n IPsec IKE Phase-1 Protocol Failure TRAP", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TrapStatus" }, "cipSecTrapCntlIkeNoSa": { "type": "string", "description": "This object defines the administrative\n state of sending the\n IPsec IKE Phase-1 No Security Association TRAP", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TrapStatus" }, "cipSecTrapCntlIpSecTunnelStart": { "type": "string", "description": "This object defines the administrative state\n of sending the IPsec\n Phase-2 Tunnel Start TRAP", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TrapStatus" }, "cipSecTrapCntlIpSecTunnelStop": { "type": "string", "description": "This object defines the administrative\n state of sending the IPsec\n Phase-2 Tunnel Stop TRAP", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TrapStatus" }, "cipSecTrapCntlIpSecSysFailure": { "type": "string", "description": "This object defines the administrative state\n of sending the IPsec\n Phase-2 System Failure TRAP", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TrapStatus" }, "cipSecTrapCntlIpSecSetUpFailure": { "type": "string", "description": "This object defines the administrative state\n of sending the IPsec\n Phase-2 Set Up Failure TRAP", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TrapStatus" }, "cipSecTrapCntlIpSecEarlyTunTerm": { "type": "string", "description": "This object defines the administrative state\n of sending the IPsec\n Phase-2 Early Tunnel Termination TRAP", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TrapStatus" }, "cipSecTrapCntlIpSecProtocolFail": { "type": "string", "description": "This object defines the administrative state\n of sending the IPsec\n Phase-2 Protocol Failure TRAP", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TrapStatus" }, "cipSecTrapCntlIpSecNoSa": { "type": "string", "description": "This object defines the administrative state\n of sending the IPsec\n Phase-2 No Security Association TRAP", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TrapStatus" } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecTrapCntl": { "cipSecTrapCntlIkeTunnelStart": "192.168.1.1", "cipSecTrapCntlIkeTunnelStop": "192.168.1.1", "cipSecTrapCntlIkeSysFailure": "192.168.1.1", "cipSecTrapCntlIkeCertCrlFailure": "192.168.1.1", "cipSecTrapCntlIkeProtocolFail": "192.168.1.1", "cipSecTrapCntlIkeNoSa": "192.168.1.1", "cipSecTrapCntlIpSecTunnelStart": "192.168.1.1", "cipSecTrapCntlIpSecTunnelStop": "192.168.1.1", "cipSecTrapCntlIpSecSysFailure": "192.168.1.1", "cipSecTrapCntlIpSecSetUpFailure": "192.168.1.1", "cipSecTrapCntlIpSecEarlyTunTerm": "192.168.1.1", "cipSecTrapCntlIpSecProtocolFail": "192.168.1.1", "cipSecTrapCntlIpSecNoSa": "192.168.1.1" } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecTrapCntl", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cipSecTrapCntl", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikePeerTable": { "get": { "summary": "Get cikePeerTable data", "description": "Retrieve cikePeerTable operational data from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "description": "The IPsec Phase-1 Internet Key Exchange Peer Table.\n There is one entry in this table for each IPsec\n Phase-1 IKE peer association which is currently\n associated with an active IPsec Phase-1 Tunnel.\n The IPsec Phase-1 IKE Tunnel associated with this\n IPsec Phase-1 IKE peer association may or may not\n be currently active.", "properties": { "cikePeerEntry": { "type": "array", "description": "Each entry contains the attributes associated\n with an IPsec Phase-1 IKE peer association.", "items": { "type": "object", "properties": { "cikePeerLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikePeerLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikePeerRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikePeerRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikePeerIntIndex": { "type": "integer", "description": "The internal index of the local-remote\n peer association. This internal index is used \n to uniquely identify multiple associations between \n the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647 }, "cikePeerLocalAddr": { "type": "string", "description": "The IP address of the local peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikePeerRemoteAddr": { "type": "string", "description": "The IP address of the remote peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikePeerActiveTime": { "type": "string", "description": "The length of time that the peer association has\n existed in hundredths of a second.", "x-yang-type": "snmpv2-tc:TimeInterval" }, "cikePeerActiveTunnelIndex": { "type": "integer", "description": "The index of the active IPsec Phase-1 IKE Tunnel\n (cikeTunIndex in the cikeTunnelTable) for this peer\n association. If an IPsec Phase-1 IKE Tunnel is\n not currently active, then the value of this\n object will be zero.", "minimum": -2147483648, "maximum": 2147483647 } } } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikePeerTable": { "cikePeerEntry": [ { "cikePeerLocalType": "ethernetCsmacd(6)", "cikePeerLocalValue": "example-string", "cikePeerRemoteType": "ethernetCsmacd(6)", "cikePeerRemoteValue": "example-string", "cikePeerIntIndex": 1, "cikePeerLocalAddr": "192.168.1.1", "cikePeerRemoteAddr": "192.168.1.1", "cikePeerActiveTime": "example-string", "cikePeerActiveTunnelIndex": 1 }, { "cikePeerLocalType": "ethernetCsmacd(6)", "cikePeerLocalValue": "example-string", "cikePeerRemoteType": "ethernetCsmacd(6)", "cikePeerRemoteValue": "example-string", "cikePeerIntIndex": 2, "cikePeerLocalAddr": "192.168.1.1", "cikePeerRemoteAddr": "192.168.1.1", "cikePeerActiveTime": "example-string", "cikePeerActiveTunnelIndex": 2 }, { "cikePeerLocalType": "ethernetCsmacd(6)", "cikePeerLocalValue": "example-string", "cikePeerRemoteType": "ethernetCsmacd(6)", "cikePeerRemoteValue": "example-string", "cikePeerIntIndex": 3, "cikePeerLocalAddr": "192.168.1.1", "cikePeerRemoteAddr": "192.168.1.1", "cikePeerActiveTime": "example-string", "cikePeerActiveTunnelIndex": 3 } ] } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikePeerTable", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cikePeerTable", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikePeerTable/cikePeerEntry": { "get": { "summary": "Get cikePeerEntry list", "description": "Retrieve list of cikePeerEntry entries from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "array", "description": "Each entry contains the attributes associated\n with an IPsec Phase-1 IKE peer association.", "items": { "type": "object", "properties": { "cikePeerLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikePeerLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikePeerRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikePeerRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikePeerIntIndex": { "type": "integer", "description": "The internal index of the local-remote\n peer association. This internal index is used \n to uniquely identify multiple associations between \n the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647 }, "cikePeerLocalAddr": { "type": "string", "description": "The IP address of the local peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikePeerRemoteAddr": { "type": "string", "description": "The IP address of the remote peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikePeerActiveTime": { "type": "string", "description": "The length of time that the peer association has\n existed in hundredths of a second.", "x-yang-type": "snmpv2-tc:TimeInterval" }, "cikePeerActiveTunnelIndex": { "type": "integer", "description": "The index of the active IPsec Phase-1 IKE Tunnel\n (cikeTunIndex in the cikeTunnelTable) for this peer\n association. If an IPsec Phase-1 IKE Tunnel is\n not currently active, then the value of this\n object will be zero.", "minimum": -2147483648, "maximum": 2147483647 } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikePeerEntry": [ { "cikePeerLocalType": "ethernetCsmacd(6)", "cikePeerLocalValue": "example-string", "cikePeerRemoteType": "ethernetCsmacd(6)", "cikePeerRemoteValue": "example-string", "cikePeerIntIndex": 1, "cikePeerLocalAddr": "192.168.1.1", "cikePeerRemoteAddr": "192.168.1.1", "cikePeerActiveTime": "example-string", "cikePeerActiveTunnelIndex": 1 } ] } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikePeerEntry", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cikePeerTable/cikePeerEntry", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikeTunnelTable": { "get": { "summary": "Get cikeTunnelTable data", "description": "Retrieve cikeTunnelTable operational data from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "description": "The IPsec Phase-1 Internet Key Exchange Tunnel Table.\n There is one entry in this table for each active IPsec\n Phase-1 IKE Tunnel.", "properties": { "cikeTunnelEntry": { "type": "array", "description": "Each entry contains the attributes associated with\n an active IPsec Phase-1 IKE Tunnel.", "items": { "type": "object", "properties": { "cikeTunIndex": { "type": "integer", "description": "The index of the IPsec Phase-1 IKE Tunnel Table.\n The value of the index is a number which begins \n at one and is incremented with each tunnel that \n is created. The value of this object will \n wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunLocalType": { "type": "string", "description": "The type of local peer identity. The local\n peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikeTunLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikeTunLocalName": { "type": "string", "description": "The DNS name of the local IP address for\n the IPsec Phase-1 IKE Tunnel. If the DNS \n name associated with the local tunnel endpoint \n is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunRemoteType": { "type": "string", "description": "The type of remote peer identity.\n The remote peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikeTunRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then \n this is the host name used to identify the \n remote peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikeTunRemoteName": { "type": "string", "description": "The DNS name of the remote IP address of IPsec Phase-1\n IKE Tunnel. If the DNS name associated with the remote\n tunnel endpoint is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunNegoMode": { "type": "string", "description": "The negotiation mode of the IPsec Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeNegoMode" }, "cikeTunDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp" }, "cikeTunEncryptAlgo": { "type": "string", "description": "The encryption algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo" }, "cikeTunHashAlgo": { "type": "string", "description": "The hash algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeHashAlgo" }, "cikeTunAuthMethod": { "type": "string", "description": "The authentication method used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeAuthMethod" }, "cikeTunLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel\n in seconds.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-1 IKE tunnel has been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval" }, "cikeTunSaRefreshThreshold": { "type": "integer", "description": "The security association refresh threshold in seconds.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunTotalRefreshes": { "type": "integer", "description": "The total number of security associations\n refreshes performed.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInOctets": { "type": "integer", "description": "The total number of octets received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInPkts": { "type": "integer", "description": "The total number of packets received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInDropPkts": { "type": "integer", "description": "The total number of packets dropped\n by this IPsec Phase-1 IKE Tunnel during \n receive processing.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInNotifys": { "type": "integer", "description": "The total number of notifys received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received and found to be invalid \n by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n received and rejected by this IPsec Phase-1 \n Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2\n security association delete requests received \n by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutPkts": { "type": "integer", "description": "The total number of packets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutDropPkts": { "type": "integer", "description": "The total number of packets dropped by this\n IPsec Phase-1 IKE Tunnel during send processing.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutNotifys": { "type": "integer", "description": "The total number of notifys sent by this\n IPsec Phase-1 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n found to be invalid by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n rejected by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 security association\n delete requests sent by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunStatus": { "type": "string", "description": "The status of the MIB table row.\n \n This object can be used to bring the tunnel down \n by setting value of this object to destroy(2).\n \n This object cannot be used to create \n a MIB table row.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TunnelStatus" } } } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikeTunnelTable": { "cikeTunnelEntry": [ { "cikeTunIndex": 1, "cikeTunLocalType": "ethernetCsmacd(6)", "cikeTunLocalValue": "example-string", "cikeTunLocalAddr": "192.168.1.1", "cikeTunLocalName": "interface-1", "cikeTunRemoteType": "ethernetCsmacd(6)", "cikeTunRemoteValue": "example-string", "cikeTunRemoteAddr": "192.168.1.1", "cikeTunRemoteName": "interface-1", "cikeTunNegoMode": "example-string", "cikeTunDiffHellmanGrp": "example-string", "cikeTunEncryptAlgo": "example-string", "cikeTunHashAlgo": "example-string", "cikeTunAuthMethod": "example-string", "cikeTunLifeTime": -2147483648, "cikeTunActiveTime": "example-string", "cikeTunSaRefreshThreshold": -2147483648, "cikeTunTotalRefreshes": 0, "cikeTunInOctets": 1234567890, "cikeTunInPkts": 0, "cikeTunInDropPkts": 0, "cikeTunInNotifys": 0, "cikeTunInP2Exchgs": 0, "cikeTunInP2ExchgInvalids": 0, "cikeTunInP2ExchgRejects": 0, "cikeTunInP2SaDelRequests": 0, "cikeTunOutOctets": 1234567890, "cikeTunOutPkts": 0, "cikeTunOutDropPkts": 0, "cikeTunOutNotifys": 0, "cikeTunOutP2Exchgs": 0, "cikeTunOutP2ExchgInvalids": 0, "cikeTunOutP2ExchgRejects": 0, "cikeTunOutP2SaDelRequests": 0, "cikeTunStatus": "up(1)" }, { "cikeTunIndex": 2, "cikeTunLocalType": "ethernetCsmacd(6)", "cikeTunLocalValue": "example-string", "cikeTunLocalAddr": "192.168.1.1", "cikeTunLocalName": "interface-1", "cikeTunRemoteType": "ethernetCsmacd(6)", "cikeTunRemoteValue": "example-string", "cikeTunRemoteAddr": "192.168.1.1", "cikeTunRemoteName": "interface-1", "cikeTunNegoMode": "example-string", "cikeTunDiffHellmanGrp": "example-string", "cikeTunEncryptAlgo": "example-string", "cikeTunHashAlgo": "example-string", "cikeTunAuthMethod": "example-string", "cikeTunLifeTime": -2147483648, "cikeTunActiveTime": "example-string", "cikeTunSaRefreshThreshold": -2147483648, "cikeTunTotalRefreshes": 0, "cikeTunInOctets": 1234567890, "cikeTunInPkts": 0, "cikeTunInDropPkts": 0, "cikeTunInNotifys": 0, "cikeTunInP2Exchgs": 0, "cikeTunInP2ExchgInvalids": 0, "cikeTunInP2ExchgRejects": 0, "cikeTunInP2SaDelRequests": 0, "cikeTunOutOctets": 1234567890, "cikeTunOutPkts": 0, "cikeTunOutDropPkts": 0, "cikeTunOutNotifys": 0, "cikeTunOutP2Exchgs": 0, "cikeTunOutP2ExchgInvalids": 0, "cikeTunOutP2ExchgRejects": 0, "cikeTunOutP2SaDelRequests": 0, "cikeTunStatus": "up(1)" }, { "cikeTunIndex": 3, "cikeTunLocalType": "ethernetCsmacd(6)", "cikeTunLocalValue": "example-string", "cikeTunLocalAddr": "192.168.1.1", "cikeTunLocalName": "interface-1", "cikeTunRemoteType": "ethernetCsmacd(6)", "cikeTunRemoteValue": "example-string", "cikeTunRemoteAddr": "192.168.1.1", "cikeTunRemoteName": "interface-1", "cikeTunNegoMode": "example-string", "cikeTunDiffHellmanGrp": "example-string", "cikeTunEncryptAlgo": "example-string", "cikeTunHashAlgo": "example-string", "cikeTunAuthMethod": "example-string", "cikeTunLifeTime": -2147483648, "cikeTunActiveTime": "example-string", "cikeTunSaRefreshThreshold": -2147483648, "cikeTunTotalRefreshes": 0, "cikeTunInOctets": 1234567890, "cikeTunInPkts": 0, "cikeTunInDropPkts": 0, "cikeTunInNotifys": 0, "cikeTunInP2Exchgs": 0, "cikeTunInP2ExchgInvalids": 0, "cikeTunInP2ExchgRejects": 0, "cikeTunInP2SaDelRequests": 0, "cikeTunOutOctets": 1234567890, "cikeTunOutPkts": 0, "cikeTunOutDropPkts": 0, "cikeTunOutNotifys": 0, "cikeTunOutP2Exchgs": 0, "cikeTunOutP2ExchgInvalids": 0, "cikeTunOutP2ExchgRejects": 0, "cikeTunOutP2SaDelRequests": 0, "cikeTunStatus": "up(1)" } ] } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikeTunnelTable", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cikeTunnelTable", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikeTunnelTable/cikeTunnelEntry": { "get": { "summary": "Get cikeTunnelEntry list", "description": "Retrieve list of cikeTunnelEntry entries from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "array", "description": "Each entry contains the attributes associated with\n an active IPsec Phase-1 IKE Tunnel.", "items": { "type": "object", "properties": { "cikeTunIndex": { "type": "integer", "description": "The index of the IPsec Phase-1 IKE Tunnel Table.\n The value of the index is a number which begins \n at one and is incremented with each tunnel that \n is created. The value of this object will \n wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunLocalType": { "type": "string", "description": "The type of local peer identity. The local\n peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikeTunLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikeTunLocalName": { "type": "string", "description": "The DNS name of the local IP address for\n the IPsec Phase-1 IKE Tunnel. If the DNS \n name associated with the local tunnel endpoint \n is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunRemoteType": { "type": "string", "description": "The type of remote peer identity.\n The remote peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikeTunRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then \n this is the host name used to identify the \n remote peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikeTunRemoteName": { "type": "string", "description": "The DNS name of the remote IP address of IPsec Phase-1\n IKE Tunnel. If the DNS name associated with the remote\n tunnel endpoint is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunNegoMode": { "type": "string", "description": "The negotiation mode of the IPsec Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeNegoMode" }, "cikeTunDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp" }, "cikeTunEncryptAlgo": { "type": "string", "description": "The encryption algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo" }, "cikeTunHashAlgo": { "type": "string", "description": "The hash algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeHashAlgo" }, "cikeTunAuthMethod": { "type": "string", "description": "The authentication method used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeAuthMethod" }, "cikeTunLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel\n in seconds.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-1 IKE tunnel has been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval" }, "cikeTunSaRefreshThreshold": { "type": "integer", "description": "The security association refresh threshold in seconds.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunTotalRefreshes": { "type": "integer", "description": "The total number of security associations\n refreshes performed.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInOctets": { "type": "integer", "description": "The total number of octets received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInPkts": { "type": "integer", "description": "The total number of packets received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInDropPkts": { "type": "integer", "description": "The total number of packets dropped\n by this IPsec Phase-1 IKE Tunnel during \n receive processing.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInNotifys": { "type": "integer", "description": "The total number of notifys received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received and found to be invalid \n by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n received and rejected by this IPsec Phase-1 \n Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2\n security association delete requests received \n by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutPkts": { "type": "integer", "description": "The total number of packets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutDropPkts": { "type": "integer", "description": "The total number of packets dropped by this\n IPsec Phase-1 IKE Tunnel during send processing.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutNotifys": { "type": "integer", "description": "The total number of notifys sent by this\n IPsec Phase-1 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n found to be invalid by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n rejected by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 security association\n delete requests sent by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunStatus": { "type": "string", "description": "The status of the MIB table row.\n \n This object can be used to bring the tunnel down \n by setting value of this object to destroy(2).\n \n This object cannot be used to create \n a MIB table row.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TunnelStatus" } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikeTunnelEntry": [ { "cikeTunIndex": 1, "cikeTunLocalType": "ethernetCsmacd(6)", "cikeTunLocalValue": "example-string", "cikeTunLocalAddr": "192.168.1.1", "cikeTunLocalName": "interface-1", "cikeTunRemoteType": "ethernetCsmacd(6)", "cikeTunRemoteValue": "example-string", "cikeTunRemoteAddr": "192.168.1.1", "cikeTunRemoteName": "interface-1", "cikeTunNegoMode": "example-string", "cikeTunDiffHellmanGrp": "example-string", "cikeTunEncryptAlgo": "example-string", "cikeTunHashAlgo": "example-string", "cikeTunAuthMethod": "example-string", "cikeTunLifeTime": -2147483648, "cikeTunActiveTime": "example-string", "cikeTunSaRefreshThreshold": -2147483648, "cikeTunTotalRefreshes": 0, "cikeTunInOctets": 1234567890, "cikeTunInPkts": 0, "cikeTunInDropPkts": 0, "cikeTunInNotifys": 0, "cikeTunInP2Exchgs": 0, "cikeTunInP2ExchgInvalids": 0, "cikeTunInP2ExchgRejects": 0, "cikeTunInP2SaDelRequests": 0, "cikeTunOutOctets": 1234567890, "cikeTunOutPkts": 0, "cikeTunOutDropPkts": 0, "cikeTunOutNotifys": 0, "cikeTunOutP2Exchgs": 0, "cikeTunOutP2ExchgInvalids": 0, "cikeTunOutP2ExchgRejects": 0, "cikeTunOutP2SaDelRequests": 0, "cikeTunStatus": "up(1)" } ] } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikeTunnelEntry", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cikeTunnelTable/cikeTunnelEntry", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikeTunnelTable/cikeTunnelEntry={cikeTunIndex}": { "get": { "summary": "Get cikeTunnelEntry entry", "description": "Retrieve specific cikeTunnelEntry entry by key from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "parameters": [ { "name": "cikeTunIndex", "in": "path", "required": true, "schema": { "type": "string" }, "example": "1" }, { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "properties": { "cikeTunIndex": { "type": "integer", "description": "The index of the IPsec Phase-1 IKE Tunnel Table.\n The value of the index is a number which begins \n at one and is incremented with each tunnel that \n is created. The value of this object will \n wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunLocalType": { "type": "string", "description": "The type of local peer identity. The local\n peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikeTunLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikeTunLocalName": { "type": "string", "description": "The DNS name of the local IP address for\n the IPsec Phase-1 IKE Tunnel. If the DNS \n name associated with the local tunnel endpoint \n is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunRemoteType": { "type": "string", "description": "The type of remote peer identity.\n The remote peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikeTunRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then \n this is the host name used to identify the \n remote peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikeTunRemoteName": { "type": "string", "description": "The DNS name of the remote IP address of IPsec Phase-1\n IKE Tunnel. If the DNS name associated with the remote\n tunnel endpoint is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunNegoMode": { "type": "string", "description": "The negotiation mode of the IPsec Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeNegoMode" }, "cikeTunDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp" }, "cikeTunEncryptAlgo": { "type": "string", "description": "The encryption algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo" }, "cikeTunHashAlgo": { "type": "string", "description": "The hash algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeHashAlgo" }, "cikeTunAuthMethod": { "type": "string", "description": "The authentication method used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeAuthMethod" }, "cikeTunLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel\n in seconds.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-1 IKE tunnel has been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval" }, "cikeTunSaRefreshThreshold": { "type": "integer", "description": "The security association refresh threshold in seconds.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunTotalRefreshes": { "type": "integer", "description": "The total number of security associations\n refreshes performed.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInOctets": { "type": "integer", "description": "The total number of octets received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInPkts": { "type": "integer", "description": "The total number of packets received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInDropPkts": { "type": "integer", "description": "The total number of packets dropped\n by this IPsec Phase-1 IKE Tunnel during \n receive processing.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInNotifys": { "type": "integer", "description": "The total number of notifys received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received and found to be invalid \n by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n received and rejected by this IPsec Phase-1 \n Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2\n security association delete requests received \n by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutPkts": { "type": "integer", "description": "The total number of packets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutDropPkts": { "type": "integer", "description": "The total number of packets dropped by this\n IPsec Phase-1 IKE Tunnel during send processing.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutNotifys": { "type": "integer", "description": "The total number of notifys sent by this\n IPsec Phase-1 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n found to be invalid by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n rejected by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 security association\n delete requests sent by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunStatus": { "type": "string", "description": "The status of the MIB table row.\n \n This object can be used to bring the tunnel down \n by setting value of this object to destroy(2).\n \n This object cannot be used to create \n a MIB table row.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TunnelStatus" } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikeTunnelEntry": { "cikeTunIndex": 1, "cikeTunLocalType": "ethernetCsmacd(6)", "cikeTunLocalValue": "example-string", "cikeTunLocalAddr": "192.168.1.1", "cikeTunLocalName": "interface-1", "cikeTunRemoteType": "ethernetCsmacd(6)", "cikeTunRemoteValue": "example-string", "cikeTunRemoteAddr": "192.168.1.1", "cikeTunRemoteName": "interface-1", "cikeTunNegoMode": "example-string", "cikeTunDiffHellmanGrp": "example-string", "cikeTunEncryptAlgo": "example-string", "cikeTunHashAlgo": "example-string", "cikeTunAuthMethod": "example-string", "cikeTunLifeTime": -2147483648, "cikeTunActiveTime": "example-string", "cikeTunSaRefreshThreshold": -2147483648, "cikeTunTotalRefreshes": 0, "cikeTunInOctets": 1234567890, "cikeTunInPkts": 0, "cikeTunInDropPkts": 0, "cikeTunInNotifys": 0, "cikeTunInP2Exchgs": 0, "cikeTunInP2ExchgInvalids": 0, "cikeTunInP2ExchgRejects": 0, "cikeTunInP2SaDelRequests": 0, "cikeTunOutOctets": 1234567890, "cikeTunOutPkts": 0, "cikeTunOutDropPkts": 0, "cikeTunOutNotifys": 0, "cikeTunOutP2Exchgs": 0, "cikeTunOutP2ExchgInvalids": 0, "cikeTunOutP2ExchgRejects": 0, "cikeTunOutP2SaDelRequests": 0, "cikeTunStatus": "up(1)" } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikeTunnelEntry-2" }, "x-yang-path": "/cikeTunnelTable/cikeTunnelEntry={cikeTunIndex}", "x-restconf-kind": "list-instance", "x-list-keys": [ "cikeTunIndex" ] }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikePeerCorrTable": { "get": { "summary": "Get cikePeerCorrTable data", "description": "Retrieve cikePeerCorrTable operational data from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "description": "The IPsec Phase-1 Internet Key Exchange Peer\n Association to IPsec Phase-2 Tunnel\n Correlation Table. There is one entry in\n this table for each active IPsec Phase-2\n Tunnel.", "properties": { "cikePeerCorrEntry": { "type": "array", "description": "Each entry contains the attributes of an\n IPsec Phase-1 IKE Peer Association to IPsec\n Phase-2 Tunnel Correlation.", "items": { "type": "object", "properties": { "cikePeerCorrLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikePeerCorrLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikePeerCorrRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikePeerCorrRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikePeerCorrIntIndex": { "type": "integer", "description": "The internal index of the local-remote\n peer association. This internal index is \n used to uniquely identify multiple associations \n between the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647 }, "cikePeerCorrSeqNum": { "type": "integer", "description": "The sequence number of the local-remote\n peer association. This sequence number is \n used to uniquely identify multiple instances \n of an unique association between\n the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647 }, "cikePeerCorrIpSecTunIndex": { "type": "integer", "description": "The index of the active IPsec Phase-2 Tunnel\n (cipSecTunIndex in the cipSecTunnelTable) for this\n IPsec Phase-1 IKE Peer Association.", "minimum": -2147483648, "maximum": 2147483647 } } } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikePeerCorrTable": { "cikePeerCorrEntry": [ { "cikePeerCorrLocalType": "ethernetCsmacd(6)", "cikePeerCorrLocalValue": "example-string", "cikePeerCorrRemoteType": "ethernetCsmacd(6)", "cikePeerCorrRemoteValue": "example-string", "cikePeerCorrIntIndex": 1, "cikePeerCorrSeqNum": -2147483648, "cikePeerCorrIpSecTunIndex": 1 }, { "cikePeerCorrLocalType": "ethernetCsmacd(6)", "cikePeerCorrLocalValue": "example-string", "cikePeerCorrRemoteType": "ethernetCsmacd(6)", "cikePeerCorrRemoteValue": "example-string", "cikePeerCorrIntIndex": 2, "cikePeerCorrSeqNum": -2147483648, "cikePeerCorrIpSecTunIndex": 2 }, { "cikePeerCorrLocalType": "ethernetCsmacd(6)", "cikePeerCorrLocalValue": "example-string", "cikePeerCorrRemoteType": "ethernetCsmacd(6)", "cikePeerCorrRemoteValue": "example-string", "cikePeerCorrIntIndex": 3, "cikePeerCorrSeqNum": -2147483648, "cikePeerCorrIpSecTunIndex": 3 } ] } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikePeerCorrTable", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cikePeerCorrTable", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikePeerCorrTable/cikePeerCorrEntry": { "get": { "summary": "Get cikePeerCorrEntry list", "description": "Retrieve list of cikePeerCorrEntry entries from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "array", "description": "Each entry contains the attributes of an\n IPsec Phase-1 IKE Peer Association to IPsec\n Phase-2 Tunnel Correlation.", "items": { "type": "object", "properties": { "cikePeerCorrLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikePeerCorrLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikePeerCorrRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikePeerCorrRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikePeerCorrIntIndex": { "type": "integer", "description": "The internal index of the local-remote\n peer association. This internal index is \n used to uniquely identify multiple associations \n between the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647 }, "cikePeerCorrSeqNum": { "type": "integer", "description": "The sequence number of the local-remote\n peer association. This sequence number is \n used to uniquely identify multiple instances \n of an unique association between\n the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647 }, "cikePeerCorrIpSecTunIndex": { "type": "integer", "description": "The index of the active IPsec Phase-2 Tunnel\n (cipSecTunIndex in the cipSecTunnelTable) for this\n IPsec Phase-1 IKE Peer Association.", "minimum": -2147483648, "maximum": 2147483647 } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikePeerCorrEntry": [ { "cikePeerCorrLocalType": "ethernetCsmacd(6)", "cikePeerCorrLocalValue": "example-string", "cikePeerCorrRemoteType": "ethernetCsmacd(6)", "cikePeerCorrRemoteValue": "example-string", "cikePeerCorrIntIndex": 1, "cikePeerCorrSeqNum": -2147483648, "cikePeerCorrIpSecTunIndex": 1 } ] } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikePeerCorrEntry", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cikePeerCorrTable/cikePeerCorrEntry", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikePhase1GWStatsTable": { "get": { "summary": "Get cikePhase1GWStatsTable data", "description": "Retrieve cikePhase1GWStatsTable operational data from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "description": "Phase-1 IKE stats information is included in this table.\n Each entry is related to a specific gateway which is \n identified by 'cmgwIndex'.", "properties": { "cikePhase1GWStatsEntry": { "type": "array", "description": "Each entry contains the attributes of an Phase-1 IKE stats\n information for the related gateway.\n \n There is only one entry for each gateway. The entry \n is created when a gateway up and cannot be deleted.", "items": { "type": "object", "properties": { "cmgwIndex": { "type": "string", "description": "cmgwIndex", "x-yang-type": "leafref" }, "cikePhase1GWActiveTunnels": { "type": "integer", "description": "The number of currently active IPsec\n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWPreviousTunnels": { "type": "integer", "description": "The total number of previously active\n IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInOctets": { "type": "integer", "description": "The total number of octets received by all currently\n and previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInPkts": { "type": "integer", "description": "The total number of packets received by all\n currently and previously active IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInDropPkts": { "type": "integer", "description": "The total number of packets which were\n dropped during receive processing by all \n currently and previously\n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInNotifys": { "type": "integer", "description": "The total number of notifys received by\n all currently and previously active IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n received by all currently and previously \n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were received and found to be invalid \n by all currently and previously active IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were received and rejected by all \n currently and previously active IPsec Phase-1 \n IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 'Security\n Association' delete requests received by all \n currently and previously active and IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutOctets": { "type": "integer", "description": "The total number of octets sent by all currently\n and previously active and IPsec Phase-1 \n IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutPkts": { "type": "integer", "description": "The total number of packets sent by all currently\n and previously active and IPsec Phase-1 \n Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutDropPkts": { "type": "integer", "description": "The total number of packets which were dropped\n during send processing by all currently \n and previously\n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutNotifys": { "type": "integer", "description": "The total number of notifys sent by all currently\n and previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were sent by all currently and previously \n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were sent and found to be invalid by \n all currently and previously active IPsec Phase-1 \n Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were sent and rejected by all currently and\n previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 SA\n delete requests sent by all currently and \n previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInitTunnels": { "type": "integer", "description": "The total number of IPsec Phase-1 IKE\n Tunnels which were locally initiated.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInitTunnelFails": { "type": "integer", "description": "The total number of IPsec Phase-1 IKE Tunnels\n which were locally initiated and failed to activate.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWRespTunnelFails": { "type": "integer", "description": "The total number of IPsec Phase-1 IKE Tunnels\n which were remotely initiated and failed to activate.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWSysCapFails": { "type": "integer", "description": "The total number of system capacity failures\n which occurred during processing of all current \n and previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWAuthFails": { "type": "integer", "description": "The total number of authentications which ended\n in failure by all current and previous IPsec Phase-1\n IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWDecryptFails": { "type": "integer", "description": "The total number of decryptions which ended\n in failure by all current and previous IPsec Phase-1\n IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWHashValidFails": { "type": "integer", "description": "The total number of hash validations which ended\n in failure by all current and previous IPsec Phase-1\n IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWNoSaFails": { "type": "integer", "description": "The total number of non-existent 'Security Association'\n failures occurred during processing of current and \n previous IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 } } } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikePhase1GWStatsTable": { "cikePhase1GWStatsEntry": [ { "cmgwIndex": "1", "cikePhase1GWActiveTunnels": 0, "cikePhase1GWPreviousTunnels": 0, "cikePhase1GWInOctets": 1234567890, "cikePhase1GWInPkts": 0, "cikePhase1GWInDropPkts": 0, "cikePhase1GWInNotifys": 0, "cikePhase1GWInP2Exchgs": 0, "cikePhase1GWInP2ExchgInvalids": 0, "cikePhase1GWInP2ExchgRejects": 0, "cikePhase1GWInP2SaDelRequests": 0, "cikePhase1GWOutOctets": 1234567890, "cikePhase1GWOutPkts": 0, "cikePhase1GWOutDropPkts": 0, "cikePhase1GWOutNotifys": 0, "cikePhase1GWOutP2Exchgs": 0, "cikePhase1GWOutP2ExchgInvalids": 0, "cikePhase1GWOutP2ExchgRejects": 0, "cikePhase1GWOutP2SaDelRequests": 0, "cikePhase1GWInitTunnels": 0, "cikePhase1GWInitTunnelFails": 0, "cikePhase1GWRespTunnelFails": 0, "cikePhase1GWSysCapFails": 0, "cikePhase1GWAuthFails": 0, "cikePhase1GWDecryptFails": 0, "cikePhase1GWHashValidFails": 0, "cikePhase1GWNoSaFails": 0 }, { "cmgwIndex": "2", "cikePhase1GWActiveTunnels": 0, "cikePhase1GWPreviousTunnels": 0, "cikePhase1GWInOctets": 1234567890, "cikePhase1GWInPkts": 0, "cikePhase1GWInDropPkts": 0, "cikePhase1GWInNotifys": 0, "cikePhase1GWInP2Exchgs": 0, "cikePhase1GWInP2ExchgInvalids": 0, "cikePhase1GWInP2ExchgRejects": 0, "cikePhase1GWInP2SaDelRequests": 0, "cikePhase1GWOutOctets": 1234567890, "cikePhase1GWOutPkts": 0, "cikePhase1GWOutDropPkts": 0, "cikePhase1GWOutNotifys": 0, "cikePhase1GWOutP2Exchgs": 0, "cikePhase1GWOutP2ExchgInvalids": 0, "cikePhase1GWOutP2ExchgRejects": 0, "cikePhase1GWOutP2SaDelRequests": 0, "cikePhase1GWInitTunnels": 0, "cikePhase1GWInitTunnelFails": 0, "cikePhase1GWRespTunnelFails": 0, "cikePhase1GWSysCapFails": 0, "cikePhase1GWAuthFails": 0, "cikePhase1GWDecryptFails": 0, "cikePhase1GWHashValidFails": 0, "cikePhase1GWNoSaFails": 0 }, { "cmgwIndex": "3", "cikePhase1GWActiveTunnels": 0, "cikePhase1GWPreviousTunnels": 0, "cikePhase1GWInOctets": 1234567890, "cikePhase1GWInPkts": 0, "cikePhase1GWInDropPkts": 0, "cikePhase1GWInNotifys": 0, "cikePhase1GWInP2Exchgs": 0, "cikePhase1GWInP2ExchgInvalids": 0, "cikePhase1GWInP2ExchgRejects": 0, "cikePhase1GWInP2SaDelRequests": 0, "cikePhase1GWOutOctets": 1234567890, "cikePhase1GWOutPkts": 0, "cikePhase1GWOutDropPkts": 0, "cikePhase1GWOutNotifys": 0, "cikePhase1GWOutP2Exchgs": 0, "cikePhase1GWOutP2ExchgInvalids": 0, "cikePhase1GWOutP2ExchgRejects": 0, "cikePhase1GWOutP2SaDelRequests": 0, "cikePhase1GWInitTunnels": 0, "cikePhase1GWInitTunnelFails": 0, "cikePhase1GWRespTunnelFails": 0, "cikePhase1GWSysCapFails": 0, "cikePhase1GWAuthFails": 0, "cikePhase1GWDecryptFails": 0, "cikePhase1GWHashValidFails": 0, "cikePhase1GWNoSaFails": 0 } ] } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikePhase1GWStatsTable", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cikePhase1GWStatsTable", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikePhase1GWStatsTable/cikePhase1GWStatsEntry": { "get": { "summary": "Get cikePhase1GWStatsEntry list", "description": "Retrieve list of cikePhase1GWStatsEntry entries from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "array", "description": "Each entry contains the attributes of an Phase-1 IKE stats\n information for the related gateway.\n \n There is only one entry for each gateway. The entry \n is created when a gateway up and cannot be deleted.", "items": { "type": "object", "properties": { "cmgwIndex": { "type": "string", "description": "cmgwIndex", "x-yang-type": "leafref" }, "cikePhase1GWActiveTunnels": { "type": "integer", "description": "The number of currently active IPsec\n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWPreviousTunnels": { "type": "integer", "description": "The total number of previously active\n IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInOctets": { "type": "integer", "description": "The total number of octets received by all currently\n and previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInPkts": { "type": "integer", "description": "The total number of packets received by all\n currently and previously active IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInDropPkts": { "type": "integer", "description": "The total number of packets which were\n dropped during receive processing by all \n currently and previously\n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInNotifys": { "type": "integer", "description": "The total number of notifys received by\n all currently and previously active IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n received by all currently and previously \n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were received and found to be invalid \n by all currently and previously active IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were received and rejected by all \n currently and previously active IPsec Phase-1 \n IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 'Security\n Association' delete requests received by all \n currently and previously active and IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutOctets": { "type": "integer", "description": "The total number of octets sent by all currently\n and previously active and IPsec Phase-1 \n IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutPkts": { "type": "integer", "description": "The total number of packets sent by all currently\n and previously active and IPsec Phase-1 \n Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutDropPkts": { "type": "integer", "description": "The total number of packets which were dropped\n during send processing by all currently \n and previously\n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutNotifys": { "type": "integer", "description": "The total number of notifys sent by all currently\n and previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were sent by all currently and previously \n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were sent and found to be invalid by \n all currently and previously active IPsec Phase-1 \n Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were sent and rejected by all currently and\n previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 SA\n delete requests sent by all currently and \n previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInitTunnels": { "type": "integer", "description": "The total number of IPsec Phase-1 IKE\n Tunnels which were locally initiated.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInitTunnelFails": { "type": "integer", "description": "The total number of IPsec Phase-1 IKE Tunnels\n which were locally initiated and failed to activate.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWRespTunnelFails": { "type": "integer", "description": "The total number of IPsec Phase-1 IKE Tunnels\n which were remotely initiated and failed to activate.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWSysCapFails": { "type": "integer", "description": "The total number of system capacity failures\n which occurred during processing of all current \n and previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWAuthFails": { "type": "integer", "description": "The total number of authentications which ended\n in failure by all current and previous IPsec Phase-1\n IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWDecryptFails": { "type": "integer", "description": "The total number of decryptions which ended\n in failure by all current and previous IPsec Phase-1\n IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWHashValidFails": { "type": "integer", "description": "The total number of hash validations which ended\n in failure by all current and previous IPsec Phase-1\n IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWNoSaFails": { "type": "integer", "description": "The total number of non-existent 'Security Association'\n failures occurred during processing of current and \n previous IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikePhase1GWStatsEntry": [ { "cmgwIndex": "example-string", "cikePhase1GWActiveTunnels": 0, "cikePhase1GWPreviousTunnels": 0, "cikePhase1GWInOctets": 1234567890, "cikePhase1GWInPkts": 0, "cikePhase1GWInDropPkts": 0, "cikePhase1GWInNotifys": 0, "cikePhase1GWInP2Exchgs": 0, "cikePhase1GWInP2ExchgInvalids": 0, "cikePhase1GWInP2ExchgRejects": 0, "cikePhase1GWInP2SaDelRequests": 0, "cikePhase1GWOutOctets": 1234567890, "cikePhase1GWOutPkts": 0, "cikePhase1GWOutDropPkts": 0, "cikePhase1GWOutNotifys": 0, "cikePhase1GWOutP2Exchgs": 0, "cikePhase1GWOutP2ExchgInvalids": 0, "cikePhase1GWOutP2ExchgRejects": 0, "cikePhase1GWOutP2SaDelRequests": 0, "cikePhase1GWInitTunnels": 0, "cikePhase1GWInitTunnelFails": 0, "cikePhase1GWRespTunnelFails": 0, "cikePhase1GWSysCapFails": 0, "cikePhase1GWAuthFails": 0, "cikePhase1GWDecryptFails": 0, "cikePhase1GWHashValidFails": 0, "cikePhase1GWNoSaFails": 0 } ] } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikePhase1GWStatsEntry", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cikePhase1GWStatsTable/cikePhase1GWStatsEntry", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikePhase1GWStatsTable/cikePhase1GWStatsEntry={cmgwIndex}": { "get": { "summary": "Get cikePhase1GWStatsEntry entry", "description": "Retrieve specific cikePhase1GWStatsEntry entry by key from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "parameters": [ { "name": "cmgwIndex", "in": "path", "required": true, "schema": { "type": "string" }, "example": "1" }, { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "properties": { "cmgwIndex": { "type": "string", "description": "cmgwIndex", "x-yang-type": "leafref" }, "cikePhase1GWActiveTunnels": { "type": "integer", "description": "The number of currently active IPsec\n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWPreviousTunnels": { "type": "integer", "description": "The total number of previously active\n IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInOctets": { "type": "integer", "description": "The total number of octets received by all currently\n and previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInPkts": { "type": "integer", "description": "The total number of packets received by all\n currently and previously active IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInDropPkts": { "type": "integer", "description": "The total number of packets which were\n dropped during receive processing by all \n currently and previously\n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInNotifys": { "type": "integer", "description": "The total number of notifys received by\n all currently and previously active IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n received by all currently and previously \n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were received and found to be invalid \n by all currently and previously active IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were received and rejected by all \n currently and previously active IPsec Phase-1 \n IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 'Security\n Association' delete requests received by all \n currently and previously active and IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutOctets": { "type": "integer", "description": "The total number of octets sent by all currently\n and previously active and IPsec Phase-1 \n IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutPkts": { "type": "integer", "description": "The total number of packets sent by all currently\n and previously active and IPsec Phase-1 \n Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutDropPkts": { "type": "integer", "description": "The total number of packets which were dropped\n during send processing by all currently \n and previously\n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutNotifys": { "type": "integer", "description": "The total number of notifys sent by all currently\n and previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were sent by all currently and previously \n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were sent and found to be invalid by \n all currently and previously active IPsec Phase-1 \n Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were sent and rejected by all currently and\n previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 SA\n delete requests sent by all currently and \n previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInitTunnels": { "type": "integer", "description": "The total number of IPsec Phase-1 IKE\n Tunnels which were locally initiated.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInitTunnelFails": { "type": "integer", "description": "The total number of IPsec Phase-1 IKE Tunnels\n which were locally initiated and failed to activate.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWRespTunnelFails": { "type": "integer", "description": "The total number of IPsec Phase-1 IKE Tunnels\n which were remotely initiated and failed to activate.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWSysCapFails": { "type": "integer", "description": "The total number of system capacity failures\n which occurred during processing of all current \n and previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWAuthFails": { "type": "integer", "description": "The total number of authentications which ended\n in failure by all current and previous IPsec Phase-1\n IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWDecryptFails": { "type": "integer", "description": "The total number of decryptions which ended\n in failure by all current and previous IPsec Phase-1\n IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWHashValidFails": { "type": "integer", "description": "The total number of hash validations which ended\n in failure by all current and previous IPsec Phase-1\n IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWNoSaFails": { "type": "integer", "description": "The total number of non-existent 'Security Association'\n failures occurred during processing of current and \n previous IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikePhase1GWStatsEntry": { "cmgwIndex": "example-string", "cikePhase1GWActiveTunnels": 0, "cikePhase1GWPreviousTunnels": 0, "cikePhase1GWInOctets": 1234567890, "cikePhase1GWInPkts": 0, "cikePhase1GWInDropPkts": 0, "cikePhase1GWInNotifys": 0, "cikePhase1GWInP2Exchgs": 0, "cikePhase1GWInP2ExchgInvalids": 0, "cikePhase1GWInP2ExchgRejects": 0, "cikePhase1GWInP2SaDelRequests": 0, "cikePhase1GWOutOctets": 1234567890, "cikePhase1GWOutPkts": 0, "cikePhase1GWOutDropPkts": 0, "cikePhase1GWOutNotifys": 0, "cikePhase1GWOutP2Exchgs": 0, "cikePhase1GWOutP2ExchgInvalids": 0, "cikePhase1GWOutP2ExchgRejects": 0, "cikePhase1GWOutP2SaDelRequests": 0, "cikePhase1GWInitTunnels": 0, "cikePhase1GWInitTunnelFails": 0, "cikePhase1GWRespTunnelFails": 0, "cikePhase1GWSysCapFails": 0, "cikePhase1GWAuthFails": 0, "cikePhase1GWDecryptFails": 0, "cikePhase1GWHashValidFails": 0, "cikePhase1GWNoSaFails": 0 } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikePhase1GWStatsEntry-2" }, "x-yang-path": "/cikePhase1GWStatsTable/cikePhase1GWStatsEntry={cmgwIndex}", "x-restconf-kind": "list-instance", "x-list-keys": [ "cmgwIndex" ] }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecTunnelTable": { "get": { "summary": "Get cipSecTunnelTable data", "description": "Retrieve cipSecTunnelTable operational data from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "description": "The IPsec Phase-2 Tunnel Table.\n There is one entry in this table for \n each active IPsec Phase-2 Tunnel.", "properties": { "cipSecTunnelEntry": { "type": "array", "description": "Each entry contains the attributes\n associated with an active IPsec Phase-2 Tunnel.", "items": { "type": "object", "properties": { "cipSecTunIndex": { "type": "integer", "description": "The index of the IPsec Phase-2 Tunnel Table.\n The value of the index is a number which begins \n at one and is incremented with each tunnel that \n is created. The value of this object will wrap \n at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunIkeTunnelIndex": { "type": "integer", "description": "The index of the associated IPsec Phase-1\n IKE Tunnel.\n (cikeTunIndex in the cikeTunnelTable)", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunIkeTunnelAlive": { "type": "boolean", "description": "An indicator which specifies whether or not the\n IPsec Phase-1 IKE Tunnel currently exists." }, "cipSecTunLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecTunRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecTunKeyType": { "type": "string", "description": "The type of key used by the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:KeyType" }, "cipSecTunEncapMode": { "type": "string", "description": "The encapsulation mode used by the\n IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncapMode" }, "cipSecTunLifeSize": { "type": "integer", "description": "The negotiated LifeSize of the\n IPsec Phase-2 Tunnel in kilobytes.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the\n IPsec Phase-2 Tunnel in seconds.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-2\n Tunnel has been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval" }, "cipSecTunSaLifeSizeThreshold": { "type": "integer", "description": "The security association LifeSize refresh\n threshold in kilobytes.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunSaLifeTimeThreshold": { "type": "integer", "description": "The security association LifeTime refresh\n threshold in seconds.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunTotalRefreshes": { "type": "integer", "description": "The total number of security\n association refreshes performed.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunExpiredSaInstances": { "type": "integer", "description": "The total number of security associations\n which have expired.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunCurrentSaInstances": { "type": "integer", "description": "The number of security associations\n which are currently active or expiring.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used\n by the inbound security association of the \n IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp" }, "cipSecTunInSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the inbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo" }, "cipSecTunInSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunInSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) security \n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunInSaDecompAlgo": { "type": "string", "description": "The decompression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo" }, "cipSecTunOutSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp" }, "cipSecTunOutSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo" }, "cipSecTunOutSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the outbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunOutSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) \n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunOutSaCompAlgo": { "type": "string", "description": "The compression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo" }, "cipSecTunInOctets": { "type": "integer", "description": "The total number of octets received by this IPsec\n Phase-2 Tunnel. This value is accumulated\n BEFORE determining whether or not the packet should be\n decompressed. See also cipSecTunInOctWraps for the\n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHcInOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n received by this IPsec Phase-2 Tunnel. This value is\n accumulated BEFORE determining whether or not the packet\n should be decompressed.", "minimum": 0 }, "cipSecTunInOctWraps": { "type": "integer", "description": "The number of times the octets received counter\n (cipSecTunInOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInDecompOctets": { "type": "integer", "description": "The total number of decompressed octets received\n by this IPsec Phase-2 Tunnel. This value is \n accumulated AFTER the packet is decompressed. \n If compression is not being\n used, this value will match the value of \n cipSecTunInOctets. See also cipSecTunInDecompOctWraps \n for the number of times\n this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHcInDecompOctets": { "type": "integer", "description": "A high capacity count of the total number of decompressed\n octets received by this IPsec Phase-2 Tunnel. This value\n is accumulated AFTER the packet is decompressed. If\n compression is not being used, this value will match the\n value of cipSecTunHcInOctets.", "minimum": 0 }, "cipSecTunInDecompOctWraps": { "type": "integer", "description": "The number of times the decompressed\n octets received counter\n (cipSecTunInDecompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInPkts": { "type": "integer", "description": "The total number of packets received\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInDropPkts": { "type": "integer", "description": "The total number of packets dropped\n during receive processing by this IPsec Phase-2 \n Tunnel. This count does NOT include\n packets dropped due to Anti-Replay processing.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInReplayDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n receive processing due to Anti-Replay processing \n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInAuths": { "type": "integer", "description": "The total number of inbound\n authentication's performed by this \n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInAuthFails": { "type": "integer", "description": "The total number of inbound authentication's\n which ended in\n failure by this IPsec Phase-2 Tunnel .", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInDecrypts": { "type": "integer", "description": "The total number of inbound decryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInDecryptFails": { "type": "integer", "description": "The total number of inbound decryption's\n which ended in failure\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec\n Phase-2 Tunnel. This value is accumulated\n AFTER determining whether or not the packet should \n be compressed. See also cipSecTunOutOctWraps for\n the number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHcOutOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n sent by this IPsec Phase-2 Tunnel. This value is\n accumulated AFTER determining whether or not the \n packet\n should be compressed.", "minimum": 0 }, "cipSecTunOutOctWraps": { "type": "integer", "description": "The number of times the out octets counter\n (cipSecTunOutOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutUncompOctets": { "type": "integer", "description": "The total number of uncompressed octets sent\n by this IPsec Phase-2 Tunnel. This value \n is accumulated BEFORE the packet is compressed. \n If compression is not being used, this value \n will match the value of cipSecTunOutOctets.\n See also cipSecTunOutDecompOctWraps for the \n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHcOutUncompOctets": { "type": "integer", "description": "A high capacity count of the total number\n of uncompressed octets sent by this IPsec \n Phase-2 Tunnel. This value is accumulated BEFORE \n the packet is compressed. If compression\n is not being used, this value will match the value\n of cipSecTunHcOutOctets.", "minimum": 0 }, "cipSecTunOutUncompOctWraps": { "type": "integer", "description": "The number of times the uncompressed octets sent\n counter (cipSecTunOutUncompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutPkts": { "type": "integer", "description": "The total number of packets sent by this\n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n send processing by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutAuths": { "type": "integer", "description": "The total number of outbound authentication's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutAuthFails": { "type": "integer", "description": "The total number of outbound\n authentication's which ended in failure \n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutEncrypts": { "type": "integer", "description": "The total number of outbound encryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutEncryptFails": { "type": "integer", "description": "The total number of outbound encryption's\n which ended in failure by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunStatus": { "type": "string", "description": "The status of the MIB table row.\n \n This object can be used to bring the tunnel down\n by setting value of this object to destroy(2).\n When the value is set to destroy(2), the SA\n bundle is destroyed and this row is deleted\n from this table.\n \n When this MIB value is queried, the value of\n active(1) is always returned, if the instance \n exists.\n \n This object cannot be used to create a MIB \n table row.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TunnelStatus" } } } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecTunnelTable": { "cipSecTunnelEntry": [ { "cipSecTunIndex": 1, "cipSecTunIkeTunnelIndex": 1, "cipSecTunIkeTunnelAlive": true, "cipSecTunLocalAddr": "192.168.1.1", "cipSecTunRemoteAddr": "192.168.1.1", "cipSecTunKeyType": "192.168.1.1", "cipSecTunEncapMode": "192.168.1.1", "cipSecTunLifeSize": -2147483648, "cipSecTunLifeTime": -2147483648, "cipSecTunActiveTime": "192.168.1.1", "cipSecTunSaLifeSizeThreshold": -2147483648, "cipSecTunSaLifeTimeThreshold": -2147483648, "cipSecTunTotalRefreshes": 0, "cipSecTunExpiredSaInstances": 0, "cipSecTunCurrentSaInstances": 0, "cipSecTunInSaDiffHellmanGrp": "192.168.1.1", "cipSecTunInSaEncryptAlgo": "192.168.1.1", "cipSecTunInSaAhAuthAlgo": "192.168.1.1", "cipSecTunInSaEspAuthAlgo": "192.168.1.1", "cipSecTunInSaDecompAlgo": "192.168.1.1", "cipSecTunOutSaDiffHellmanGrp": "192.168.1.1", "cipSecTunOutSaEncryptAlgo": "192.168.1.1", "cipSecTunOutSaAhAuthAlgo": "192.168.1.1", "cipSecTunOutSaEspAuthAlgo": "192.168.1.1", "cipSecTunOutSaCompAlgo": "192.168.1.1", "cipSecTunInOctets": 1234567890, "cipSecTunHcInOctets": 1234567890, "cipSecTunInOctWraps": 0, "cipSecTunInDecompOctets": 1234567890, "cipSecTunHcInDecompOctets": 1234567890, "cipSecTunInDecompOctWraps": 0, "cipSecTunInPkts": 0, "cipSecTunInDropPkts": 0, "cipSecTunInReplayDropPkts": 0, "cipSecTunInAuths": 0, "cipSecTunInAuthFails": 0, "cipSecTunInDecrypts": 0, "cipSecTunInDecryptFails": 0, "cipSecTunOutOctets": 1234567890, "cipSecTunHcOutOctets": 1234567890, "cipSecTunOutOctWraps": 0, "cipSecTunOutUncompOctets": 1234567890, "cipSecTunHcOutUncompOctets": 1234567890, "cipSecTunOutUncompOctWraps": 0, "cipSecTunOutPkts": 0, "cipSecTunOutDropPkts": 0, "cipSecTunOutAuths": 0, "cipSecTunOutAuthFails": 0, "cipSecTunOutEncrypts": 0, "cipSecTunOutEncryptFails": 0, "cipSecTunStatus": "192.168.1.1" }, { "cipSecTunIndex": 2, "cipSecTunIkeTunnelIndex": 2, "cipSecTunIkeTunnelAlive": true, "cipSecTunLocalAddr": "192.168.1.1", "cipSecTunRemoteAddr": "192.168.1.1", "cipSecTunKeyType": "192.168.1.1", "cipSecTunEncapMode": "192.168.1.1", "cipSecTunLifeSize": -2147483648, "cipSecTunLifeTime": -2147483648, "cipSecTunActiveTime": "192.168.1.1", "cipSecTunSaLifeSizeThreshold": -2147483648, "cipSecTunSaLifeTimeThreshold": -2147483648, "cipSecTunTotalRefreshes": 0, "cipSecTunExpiredSaInstances": 0, "cipSecTunCurrentSaInstances": 0, "cipSecTunInSaDiffHellmanGrp": "192.168.1.1", "cipSecTunInSaEncryptAlgo": "192.168.1.1", "cipSecTunInSaAhAuthAlgo": "192.168.1.1", "cipSecTunInSaEspAuthAlgo": "192.168.1.1", "cipSecTunInSaDecompAlgo": "192.168.1.1", "cipSecTunOutSaDiffHellmanGrp": "192.168.1.1", "cipSecTunOutSaEncryptAlgo": "192.168.1.1", "cipSecTunOutSaAhAuthAlgo": "192.168.1.1", "cipSecTunOutSaEspAuthAlgo": "192.168.1.1", "cipSecTunOutSaCompAlgo": "192.168.1.1", "cipSecTunInOctets": 1234567890, "cipSecTunHcInOctets": 1234567890, "cipSecTunInOctWraps": 0, "cipSecTunInDecompOctets": 1234567890, "cipSecTunHcInDecompOctets": 1234567890, "cipSecTunInDecompOctWraps": 0, "cipSecTunInPkts": 0, "cipSecTunInDropPkts": 0, "cipSecTunInReplayDropPkts": 0, "cipSecTunInAuths": 0, "cipSecTunInAuthFails": 0, "cipSecTunInDecrypts": 0, "cipSecTunInDecryptFails": 0, "cipSecTunOutOctets": 1234567890, "cipSecTunHcOutOctets": 1234567890, "cipSecTunOutOctWraps": 0, "cipSecTunOutUncompOctets": 1234567890, "cipSecTunHcOutUncompOctets": 1234567890, "cipSecTunOutUncompOctWraps": 0, "cipSecTunOutPkts": 0, "cipSecTunOutDropPkts": 0, "cipSecTunOutAuths": 0, "cipSecTunOutAuthFails": 0, "cipSecTunOutEncrypts": 0, "cipSecTunOutEncryptFails": 0, "cipSecTunStatus": "192.168.1.1" }, { "cipSecTunIndex": 3, "cipSecTunIkeTunnelIndex": 3, "cipSecTunIkeTunnelAlive": true, "cipSecTunLocalAddr": "192.168.1.1", "cipSecTunRemoteAddr": "192.168.1.1", "cipSecTunKeyType": "192.168.1.1", "cipSecTunEncapMode": "192.168.1.1", "cipSecTunLifeSize": -2147483648, "cipSecTunLifeTime": -2147483648, "cipSecTunActiveTime": "192.168.1.1", "cipSecTunSaLifeSizeThreshold": -2147483648, "cipSecTunSaLifeTimeThreshold": -2147483648, "cipSecTunTotalRefreshes": 0, "cipSecTunExpiredSaInstances": 0, "cipSecTunCurrentSaInstances": 0, "cipSecTunInSaDiffHellmanGrp": "192.168.1.1", "cipSecTunInSaEncryptAlgo": "192.168.1.1", "cipSecTunInSaAhAuthAlgo": "192.168.1.1", "cipSecTunInSaEspAuthAlgo": "192.168.1.1", "cipSecTunInSaDecompAlgo": "192.168.1.1", "cipSecTunOutSaDiffHellmanGrp": "192.168.1.1", "cipSecTunOutSaEncryptAlgo": "192.168.1.1", "cipSecTunOutSaAhAuthAlgo": "192.168.1.1", "cipSecTunOutSaEspAuthAlgo": "192.168.1.1", "cipSecTunOutSaCompAlgo": "192.168.1.1", "cipSecTunInOctets": 1234567890, "cipSecTunHcInOctets": 1234567890, "cipSecTunInOctWraps": 0, "cipSecTunInDecompOctets": 1234567890, "cipSecTunHcInDecompOctets": 1234567890, "cipSecTunInDecompOctWraps": 0, "cipSecTunInPkts": 0, "cipSecTunInDropPkts": 0, "cipSecTunInReplayDropPkts": 0, "cipSecTunInAuths": 0, "cipSecTunInAuthFails": 0, "cipSecTunInDecrypts": 0, "cipSecTunInDecryptFails": 0, "cipSecTunOutOctets": 1234567890, "cipSecTunHcOutOctets": 1234567890, "cipSecTunOutOctWraps": 0, "cipSecTunOutUncompOctets": 1234567890, "cipSecTunHcOutUncompOctets": 1234567890, "cipSecTunOutUncompOctWraps": 0, "cipSecTunOutPkts": 0, "cipSecTunOutDropPkts": 0, "cipSecTunOutAuths": 0, "cipSecTunOutAuthFails": 0, "cipSecTunOutEncrypts": 0, "cipSecTunOutEncryptFails": 0, "cipSecTunStatus": "192.168.1.1" } ] } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecTunnelTable", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cipSecTunnelTable", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecTunnelTable/cipSecTunnelEntry": { "get": { "summary": "Get cipSecTunnelEntry list", "description": "Retrieve list of cipSecTunnelEntry entries from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "array", "description": "Each entry contains the attributes\n associated with an active IPsec Phase-2 Tunnel.", "items": { "type": "object", "properties": { "cipSecTunIndex": { "type": "integer", "description": "The index of the IPsec Phase-2 Tunnel Table.\n The value of the index is a number which begins \n at one and is incremented with each tunnel that \n is created. The value of this object will wrap \n at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunIkeTunnelIndex": { "type": "integer", "description": "The index of the associated IPsec Phase-1\n IKE Tunnel.\n (cikeTunIndex in the cikeTunnelTable)", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunIkeTunnelAlive": { "type": "boolean", "description": "An indicator which specifies whether or not the\n IPsec Phase-1 IKE Tunnel currently exists." }, "cipSecTunLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecTunRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecTunKeyType": { "type": "string", "description": "The type of key used by the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:KeyType" }, "cipSecTunEncapMode": { "type": "string", "description": "The encapsulation mode used by the\n IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncapMode" }, "cipSecTunLifeSize": { "type": "integer", "description": "The negotiated LifeSize of the\n IPsec Phase-2 Tunnel in kilobytes.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the\n IPsec Phase-2 Tunnel in seconds.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-2\n Tunnel has been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval" }, "cipSecTunSaLifeSizeThreshold": { "type": "integer", "description": "The security association LifeSize refresh\n threshold in kilobytes.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunSaLifeTimeThreshold": { "type": "integer", "description": "The security association LifeTime refresh\n threshold in seconds.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunTotalRefreshes": { "type": "integer", "description": "The total number of security\n association refreshes performed.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunExpiredSaInstances": { "type": "integer", "description": "The total number of security associations\n which have expired.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunCurrentSaInstances": { "type": "integer", "description": "The number of security associations\n which are currently active or expiring.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used\n by the inbound security association of the \n IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp" }, "cipSecTunInSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the inbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo" }, "cipSecTunInSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunInSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) security \n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunInSaDecompAlgo": { "type": "string", "description": "The decompression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo" }, "cipSecTunOutSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp" }, "cipSecTunOutSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo" }, "cipSecTunOutSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the outbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunOutSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) \n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunOutSaCompAlgo": { "type": "string", "description": "The compression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo" }, "cipSecTunInOctets": { "type": "integer", "description": "The total number of octets received by this IPsec\n Phase-2 Tunnel. This value is accumulated\n BEFORE determining whether or not the packet should be\n decompressed. See also cipSecTunInOctWraps for the\n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHcInOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n received by this IPsec Phase-2 Tunnel. This value is\n accumulated BEFORE determining whether or not the packet\n should be decompressed.", "minimum": 0 }, "cipSecTunInOctWraps": { "type": "integer", "description": "The number of times the octets received counter\n (cipSecTunInOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInDecompOctets": { "type": "integer", "description": "The total number of decompressed octets received\n by this IPsec Phase-2 Tunnel. This value is \n accumulated AFTER the packet is decompressed. \n If compression is not being\n used, this value will match the value of \n cipSecTunInOctets. See also cipSecTunInDecompOctWraps \n for the number of times\n this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHcInDecompOctets": { "type": "integer", "description": "A high capacity count of the total number of decompressed\n octets received by this IPsec Phase-2 Tunnel. This value\n is accumulated AFTER the packet is decompressed. If\n compression is not being used, this value will match the\n value of cipSecTunHcInOctets.", "minimum": 0 }, "cipSecTunInDecompOctWraps": { "type": "integer", "description": "The number of times the decompressed\n octets received counter\n (cipSecTunInDecompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInPkts": { "type": "integer", "description": "The total number of packets received\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInDropPkts": { "type": "integer", "description": "The total number of packets dropped\n during receive processing by this IPsec Phase-2 \n Tunnel. This count does NOT include\n packets dropped due to Anti-Replay processing.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInReplayDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n receive processing due to Anti-Replay processing \n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInAuths": { "type": "integer", "description": "The total number of inbound\n authentication's performed by this \n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInAuthFails": { "type": "integer", "description": "The total number of inbound authentication's\n which ended in\n failure by this IPsec Phase-2 Tunnel .", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInDecrypts": { "type": "integer", "description": "The total number of inbound decryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInDecryptFails": { "type": "integer", "description": "The total number of inbound decryption's\n which ended in failure\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec\n Phase-2 Tunnel. This value is accumulated\n AFTER determining whether or not the packet should \n be compressed. See also cipSecTunOutOctWraps for\n the number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHcOutOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n sent by this IPsec Phase-2 Tunnel. This value is\n accumulated AFTER determining whether or not the \n packet\n should be compressed.", "minimum": 0 }, "cipSecTunOutOctWraps": { "type": "integer", "description": "The number of times the out octets counter\n (cipSecTunOutOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutUncompOctets": { "type": "integer", "description": "The total number of uncompressed octets sent\n by this IPsec Phase-2 Tunnel. This value \n is accumulated BEFORE the packet is compressed. \n If compression is not being used, this value \n will match the value of cipSecTunOutOctets.\n See also cipSecTunOutDecompOctWraps for the \n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHcOutUncompOctets": { "type": "integer", "description": "A high capacity count of the total number\n of uncompressed octets sent by this IPsec \n Phase-2 Tunnel. This value is accumulated BEFORE \n the packet is compressed. If compression\n is not being used, this value will match the value\n of cipSecTunHcOutOctets.", "minimum": 0 }, "cipSecTunOutUncompOctWraps": { "type": "integer", "description": "The number of times the uncompressed octets sent\n counter (cipSecTunOutUncompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutPkts": { "type": "integer", "description": "The total number of packets sent by this\n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n send processing by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutAuths": { "type": "integer", "description": "The total number of outbound authentication's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutAuthFails": { "type": "integer", "description": "The total number of outbound\n authentication's which ended in failure \n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutEncrypts": { "type": "integer", "description": "The total number of outbound encryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutEncryptFails": { "type": "integer", "description": "The total number of outbound encryption's\n which ended in failure by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunStatus": { "type": "string", "description": "The status of the MIB table row.\n \n This object can be used to bring the tunnel down\n by setting value of this object to destroy(2).\n When the value is set to destroy(2), the SA\n bundle is destroyed and this row is deleted\n from this table.\n \n When this MIB value is queried, the value of\n active(1) is always returned, if the instance \n exists.\n \n This object cannot be used to create a MIB \n table row.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TunnelStatus" } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecTunnelEntry": [ { "cipSecTunIndex": 1, "cipSecTunIkeTunnelIndex": 1, "cipSecTunIkeTunnelAlive": true, "cipSecTunLocalAddr": "192.168.1.1", "cipSecTunRemoteAddr": "192.168.1.1", "cipSecTunKeyType": "192.168.1.1", "cipSecTunEncapMode": "192.168.1.1", "cipSecTunLifeSize": -2147483648, "cipSecTunLifeTime": -2147483648, "cipSecTunActiveTime": "192.168.1.1", "cipSecTunSaLifeSizeThreshold": -2147483648, "cipSecTunSaLifeTimeThreshold": -2147483648, "cipSecTunTotalRefreshes": 0, "cipSecTunExpiredSaInstances": 0, "cipSecTunCurrentSaInstances": 0, "cipSecTunInSaDiffHellmanGrp": "192.168.1.1", "cipSecTunInSaEncryptAlgo": "192.168.1.1", "cipSecTunInSaAhAuthAlgo": "192.168.1.1", "cipSecTunInSaEspAuthAlgo": "192.168.1.1", "cipSecTunInSaDecompAlgo": "192.168.1.1", "cipSecTunOutSaDiffHellmanGrp": "192.168.1.1", "cipSecTunOutSaEncryptAlgo": "192.168.1.1", "cipSecTunOutSaAhAuthAlgo": "192.168.1.1", "cipSecTunOutSaEspAuthAlgo": "192.168.1.1", "cipSecTunOutSaCompAlgo": "192.168.1.1", "cipSecTunInOctets": 1234567890, "cipSecTunHcInOctets": 1234567890, "cipSecTunInOctWraps": 0, "cipSecTunInDecompOctets": 1234567890, "cipSecTunHcInDecompOctets": 1234567890, "cipSecTunInDecompOctWraps": 0, "cipSecTunInPkts": 0, "cipSecTunInDropPkts": 0, "cipSecTunInReplayDropPkts": 0, "cipSecTunInAuths": 0, "cipSecTunInAuthFails": 0, "cipSecTunInDecrypts": 0, "cipSecTunInDecryptFails": 0, "cipSecTunOutOctets": 1234567890, "cipSecTunHcOutOctets": 1234567890, "cipSecTunOutOctWraps": 0, "cipSecTunOutUncompOctets": 1234567890, "cipSecTunHcOutUncompOctets": 1234567890, "cipSecTunOutUncompOctWraps": 0, "cipSecTunOutPkts": 0, "cipSecTunOutDropPkts": 0, "cipSecTunOutAuths": 0, "cipSecTunOutAuthFails": 0, "cipSecTunOutEncrypts": 0, "cipSecTunOutEncryptFails": 0, "cipSecTunStatus": "192.168.1.1" } ] } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecTunnelEntry", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cipSecTunnelTable/cipSecTunnelEntry", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecTunnelTable/cipSecTunnelEntry={cipSecTunIndex}": { "get": { "summary": "Get cipSecTunnelEntry entry", "description": "Retrieve specific cipSecTunnelEntry entry by key from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "parameters": [ { "name": "cipSecTunIndex", "in": "path", "required": true, "schema": { "type": "string" }, "example": "1" }, { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "properties": { "cipSecTunIndex": { "type": "integer", "description": "The index of the IPsec Phase-2 Tunnel Table.\n The value of the index is a number which begins \n at one and is incremented with each tunnel that \n is created. The value of this object will wrap \n at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunIkeTunnelIndex": { "type": "integer", "description": "The index of the associated IPsec Phase-1\n IKE Tunnel.\n (cikeTunIndex in the cikeTunnelTable)", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunIkeTunnelAlive": { "type": "boolean", "description": "An indicator which specifies whether or not the\n IPsec Phase-1 IKE Tunnel currently exists." }, "cipSecTunLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecTunRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecTunKeyType": { "type": "string", "description": "The type of key used by the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:KeyType" }, "cipSecTunEncapMode": { "type": "string", "description": "The encapsulation mode used by the\n IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncapMode" }, "cipSecTunLifeSize": { "type": "integer", "description": "The negotiated LifeSize of the\n IPsec Phase-2 Tunnel in kilobytes.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the\n IPsec Phase-2 Tunnel in seconds.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-2\n Tunnel has been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval" }, "cipSecTunSaLifeSizeThreshold": { "type": "integer", "description": "The security association LifeSize refresh\n threshold in kilobytes.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunSaLifeTimeThreshold": { "type": "integer", "description": "The security association LifeTime refresh\n threshold in seconds.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunTotalRefreshes": { "type": "integer", "description": "The total number of security\n association refreshes performed.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunExpiredSaInstances": { "type": "integer", "description": "The total number of security associations\n which have expired.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunCurrentSaInstances": { "type": "integer", "description": "The number of security associations\n which are currently active or expiring.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used\n by the inbound security association of the \n IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp" }, "cipSecTunInSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the inbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo" }, "cipSecTunInSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunInSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) security \n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunInSaDecompAlgo": { "type": "string", "description": "The decompression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo" }, "cipSecTunOutSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp" }, "cipSecTunOutSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo" }, "cipSecTunOutSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the outbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunOutSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) \n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunOutSaCompAlgo": { "type": "string", "description": "The compression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo" }, "cipSecTunInOctets": { "type": "integer", "description": "The total number of octets received by this IPsec\n Phase-2 Tunnel. This value is accumulated\n BEFORE determining whether or not the packet should be\n decompressed. See also cipSecTunInOctWraps for the\n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHcInOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n received by this IPsec Phase-2 Tunnel. This value is\n accumulated BEFORE determining whether or not the packet\n should be decompressed.", "minimum": 0 }, "cipSecTunInOctWraps": { "type": "integer", "description": "The number of times the octets received counter\n (cipSecTunInOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInDecompOctets": { "type": "integer", "description": "The total number of decompressed octets received\n by this IPsec Phase-2 Tunnel. This value is \n accumulated AFTER the packet is decompressed. \n If compression is not being\n used, this value will match the value of \n cipSecTunInOctets. See also cipSecTunInDecompOctWraps \n for the number of times\n this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHcInDecompOctets": { "type": "integer", "description": "A high capacity count of the total number of decompressed\n octets received by this IPsec Phase-2 Tunnel. This value\n is accumulated AFTER the packet is decompressed. If\n compression is not being used, this value will match the\n value of cipSecTunHcInOctets.", "minimum": 0 }, "cipSecTunInDecompOctWraps": { "type": "integer", "description": "The number of times the decompressed\n octets received counter\n (cipSecTunInDecompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInPkts": { "type": "integer", "description": "The total number of packets received\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInDropPkts": { "type": "integer", "description": "The total number of packets dropped\n during receive processing by this IPsec Phase-2 \n Tunnel. This count does NOT include\n packets dropped due to Anti-Replay processing.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInReplayDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n receive processing due to Anti-Replay processing \n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInAuths": { "type": "integer", "description": "The total number of inbound\n authentication's performed by this \n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInAuthFails": { "type": "integer", "description": "The total number of inbound authentication's\n which ended in\n failure by this IPsec Phase-2 Tunnel .", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInDecrypts": { "type": "integer", "description": "The total number of inbound decryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInDecryptFails": { "type": "integer", "description": "The total number of inbound decryption's\n which ended in failure\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec\n Phase-2 Tunnel. This value is accumulated\n AFTER determining whether or not the packet should \n be compressed. See also cipSecTunOutOctWraps for\n the number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHcOutOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n sent by this IPsec Phase-2 Tunnel. This value is\n accumulated AFTER determining whether or not the \n packet\n should be compressed.", "minimum": 0 }, "cipSecTunOutOctWraps": { "type": "integer", "description": "The number of times the out octets counter\n (cipSecTunOutOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutUncompOctets": { "type": "integer", "description": "The total number of uncompressed octets sent\n by this IPsec Phase-2 Tunnel. This value \n is accumulated BEFORE the packet is compressed. \n If compression is not being used, this value \n will match the value of cipSecTunOutOctets.\n See also cipSecTunOutDecompOctWraps for the \n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHcOutUncompOctets": { "type": "integer", "description": "A high capacity count of the total number\n of uncompressed octets sent by this IPsec \n Phase-2 Tunnel. This value is accumulated BEFORE \n the packet is compressed. If compression\n is not being used, this value will match the value\n of cipSecTunHcOutOctets.", "minimum": 0 }, "cipSecTunOutUncompOctWraps": { "type": "integer", "description": "The number of times the uncompressed octets sent\n counter (cipSecTunOutUncompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutPkts": { "type": "integer", "description": "The total number of packets sent by this\n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n send processing by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutAuths": { "type": "integer", "description": "The total number of outbound authentication's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutAuthFails": { "type": "integer", "description": "The total number of outbound\n authentication's which ended in failure \n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutEncrypts": { "type": "integer", "description": "The total number of outbound encryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutEncryptFails": { "type": "integer", "description": "The total number of outbound encryption's\n which ended in failure by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunStatus": { "type": "string", "description": "The status of the MIB table row.\n \n This object can be used to bring the tunnel down\n by setting value of this object to destroy(2).\n When the value is set to destroy(2), the SA\n bundle is destroyed and this row is deleted\n from this table.\n \n When this MIB value is queried, the value of\n active(1) is always returned, if the instance \n exists.\n \n This object cannot be used to create a MIB \n table row.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TunnelStatus" } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecTunnelEntry": { "cipSecTunIndex": 1, "cipSecTunIkeTunnelIndex": 1, "cipSecTunIkeTunnelAlive": true, "cipSecTunLocalAddr": "192.168.1.1", "cipSecTunRemoteAddr": "192.168.1.1", "cipSecTunKeyType": "192.168.1.1", "cipSecTunEncapMode": "192.168.1.1", "cipSecTunLifeSize": -2147483648, "cipSecTunLifeTime": -2147483648, "cipSecTunActiveTime": "192.168.1.1", "cipSecTunSaLifeSizeThreshold": -2147483648, "cipSecTunSaLifeTimeThreshold": -2147483648, "cipSecTunTotalRefreshes": 0, "cipSecTunExpiredSaInstances": 0, "cipSecTunCurrentSaInstances": 0, "cipSecTunInSaDiffHellmanGrp": "192.168.1.1", "cipSecTunInSaEncryptAlgo": "192.168.1.1", "cipSecTunInSaAhAuthAlgo": "192.168.1.1", "cipSecTunInSaEspAuthAlgo": "192.168.1.1", "cipSecTunInSaDecompAlgo": "192.168.1.1", "cipSecTunOutSaDiffHellmanGrp": "192.168.1.1", "cipSecTunOutSaEncryptAlgo": "192.168.1.1", "cipSecTunOutSaAhAuthAlgo": "192.168.1.1", "cipSecTunOutSaEspAuthAlgo": "192.168.1.1", "cipSecTunOutSaCompAlgo": "192.168.1.1", "cipSecTunInOctets": 1234567890, "cipSecTunHcInOctets": 1234567890, "cipSecTunInOctWraps": 0, "cipSecTunInDecompOctets": 1234567890, "cipSecTunHcInDecompOctets": 1234567890, "cipSecTunInDecompOctWraps": 0, "cipSecTunInPkts": 0, "cipSecTunInDropPkts": 0, "cipSecTunInReplayDropPkts": 0, "cipSecTunInAuths": 0, "cipSecTunInAuthFails": 0, "cipSecTunInDecrypts": 0, "cipSecTunInDecryptFails": 0, "cipSecTunOutOctets": 1234567890, "cipSecTunHcOutOctets": 1234567890, "cipSecTunOutOctWraps": 0, "cipSecTunOutUncompOctets": 1234567890, "cipSecTunHcOutUncompOctets": 1234567890, "cipSecTunOutUncompOctWraps": 0, "cipSecTunOutPkts": 0, "cipSecTunOutDropPkts": 0, "cipSecTunOutAuths": 0, "cipSecTunOutAuthFails": 0, "cipSecTunOutEncrypts": 0, "cipSecTunOutEncryptFails": 0, "cipSecTunStatus": "192.168.1.1" } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecTunnelEntry-2" }, "x-yang-path": "/cipSecTunnelTable/cipSecTunnelEntry={cipSecTunIndex}", "x-restconf-kind": "list-instance", "x-list-keys": [ "cipSecTunIndex" ] }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecEndPtTable": { "get": { "summary": "Get cipSecEndPtTable data", "description": "Retrieve cipSecEndPtTable operational data from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "description": "The IPsec Phase-2 Tunnel Endpoint Table.\n This table contains an entry for each \n active endpoint associated with an IPsec\n Phase-2 Tunnel.", "properties": { "cipSecEndPtEntry": { "type": "array", "description": "An IPsec Phase-2 Tunnel Endpoint entry.", "items": { "type": "object", "properties": { "cipSecTunIndex": { "type": "string", "description": "cipSecTunIndex", "x-yang-type": "leafref" }, "cipSecEndPtIndex": { "type": "integer", "description": "The number of the Endpoint associated with the\n IPsec Phase-2 Tunnel Table. The value of this\n index is a number which begins at one and \n is incremented with each Endpoint associated \n with an IPsec Phase-2 Tunnel.\n The value of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtLocalName": { "type": "string", "description": "The DNS name of the local Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cipSecEndPtLocalType": { "type": "string", "description": "The type of identity for the local Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType" }, "cipSecEndPtLocalAddr1": { "type": "string", "description": "The local Endpoint's first IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the local Endpoint type is IP address range, \n then this is the value of beginning IP address \n of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtLocalAddr2": { "type": "string", "description": "The local Endpoint's second IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the local Endpoint type is IP address range, \n then this is the value of ending IP address \n of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtLocalProtocol": { "type": "integer", "description": "The protocol number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtLocalPort": { "type": "integer", "description": "The port number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtRemoteName": { "type": "string", "description": "The DNS name of the remote Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cipSecEndPtRemoteType": { "type": "string", "description": "The type of identity for the remote Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType" }, "cipSecEndPtRemoteAddr1": { "type": "string", "description": "The remote Endpoint's first IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the remote Endpoint type is IP address range, \n then this is the value of beginning IP address \n of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtRemoteAddr2": { "type": "string", "description": "The remote Endpoint's second IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the remote Endpoint type is IP address range, \n then this is the value of ending IP address of \n the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtRemoteProtocol": { "type": "integer", "description": "The protocol number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtRemotePort": { "type": "integer", "description": "The port number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 } } } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecEndPtTable": { "cipSecEndPtEntry": [ { "cipSecTunIndex": "1", "cipSecEndPtIndex": 1, "cipSecEndPtLocalName": "192.168.1.1", "cipSecEndPtLocalType": "192.168.1.1", "cipSecEndPtLocalAddr1": "192.168.1.1", "cipSecEndPtLocalAddr2": "192.168.1.1", "cipSecEndPtLocalProtocol": -2147483648, "cipSecEndPtLocalPort": -2147483648, "cipSecEndPtRemoteName": "192.168.1.1", "cipSecEndPtRemoteType": "192.168.1.1", "cipSecEndPtRemoteAddr1": "192.168.1.1", "cipSecEndPtRemoteAddr2": "192.168.1.1", "cipSecEndPtRemoteProtocol": -2147483648, "cipSecEndPtRemotePort": -2147483648 }, { "cipSecTunIndex": "2", "cipSecEndPtIndex": 2, "cipSecEndPtLocalName": "192.168.1.1", "cipSecEndPtLocalType": "192.168.1.1", "cipSecEndPtLocalAddr1": "192.168.1.1", "cipSecEndPtLocalAddr2": "192.168.1.1", "cipSecEndPtLocalProtocol": -2147483648, "cipSecEndPtLocalPort": -2147483648, "cipSecEndPtRemoteName": "192.168.1.1", "cipSecEndPtRemoteType": "192.168.1.1", "cipSecEndPtRemoteAddr1": "192.168.1.1", "cipSecEndPtRemoteAddr2": "192.168.1.1", "cipSecEndPtRemoteProtocol": -2147483648, "cipSecEndPtRemotePort": -2147483648 }, { "cipSecTunIndex": "3", "cipSecEndPtIndex": 3, "cipSecEndPtLocalName": "192.168.1.1", "cipSecEndPtLocalType": "192.168.1.1", "cipSecEndPtLocalAddr1": "192.168.1.1", "cipSecEndPtLocalAddr2": "192.168.1.1", "cipSecEndPtLocalProtocol": -2147483648, "cipSecEndPtLocalPort": -2147483648, "cipSecEndPtRemoteName": "192.168.1.1", "cipSecEndPtRemoteType": "192.168.1.1", "cipSecEndPtRemoteAddr1": "192.168.1.1", "cipSecEndPtRemoteAddr2": "192.168.1.1", "cipSecEndPtRemoteProtocol": -2147483648, "cipSecEndPtRemotePort": -2147483648 } ] } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecEndPtTable", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cipSecEndPtTable", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecEndPtTable/cipSecEndPtEntry": { "get": { "summary": "Get cipSecEndPtEntry list", "description": "Retrieve list of cipSecEndPtEntry entries from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "array", "description": "An IPsec Phase-2 Tunnel Endpoint entry.", "items": { "type": "object", "properties": { "cipSecTunIndex": { "type": "string", "description": "cipSecTunIndex", "x-yang-type": "leafref" }, "cipSecEndPtIndex": { "type": "integer", "description": "The number of the Endpoint associated with the\n IPsec Phase-2 Tunnel Table. The value of this\n index is a number which begins at one and \n is incremented with each Endpoint associated \n with an IPsec Phase-2 Tunnel.\n The value of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtLocalName": { "type": "string", "description": "The DNS name of the local Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cipSecEndPtLocalType": { "type": "string", "description": "The type of identity for the local Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType" }, "cipSecEndPtLocalAddr1": { "type": "string", "description": "The local Endpoint's first IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the local Endpoint type is IP address range, \n then this is the value of beginning IP address \n of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtLocalAddr2": { "type": "string", "description": "The local Endpoint's second IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the local Endpoint type is IP address range, \n then this is the value of ending IP address \n of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtLocalProtocol": { "type": "integer", "description": "The protocol number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtLocalPort": { "type": "integer", "description": "The port number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtRemoteName": { "type": "string", "description": "The DNS name of the remote Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cipSecEndPtRemoteType": { "type": "string", "description": "The type of identity for the remote Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType" }, "cipSecEndPtRemoteAddr1": { "type": "string", "description": "The remote Endpoint's first IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the remote Endpoint type is IP address range, \n then this is the value of beginning IP address \n of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtRemoteAddr2": { "type": "string", "description": "The remote Endpoint's second IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the remote Endpoint type is IP address range, \n then this is the value of ending IP address of \n the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtRemoteProtocol": { "type": "integer", "description": "The protocol number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtRemotePort": { "type": "integer", "description": "The port number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecEndPtEntry": [ { "cipSecTunIndex": "192.168.1.1", "cipSecEndPtIndex": 1, "cipSecEndPtLocalName": "192.168.1.1", "cipSecEndPtLocalType": "192.168.1.1", "cipSecEndPtLocalAddr1": "192.168.1.1", "cipSecEndPtLocalAddr2": "192.168.1.1", "cipSecEndPtLocalProtocol": -2147483648, "cipSecEndPtLocalPort": -2147483648, "cipSecEndPtRemoteName": "192.168.1.1", "cipSecEndPtRemoteType": "192.168.1.1", "cipSecEndPtRemoteAddr1": "192.168.1.1", "cipSecEndPtRemoteAddr2": "192.168.1.1", "cipSecEndPtRemoteProtocol": -2147483648, "cipSecEndPtRemotePort": -2147483648 } ] } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecEndPtEntry", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cipSecEndPtTable/cipSecEndPtEntry", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecSpiTable": { "get": { "summary": "Get cipSecSpiTable data", "description": "Retrieve cipSecSpiTable operational data from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "description": "The IPsec Phase-2 Security Protection Index Table.\n This table contains an entry for each active \n and expiring security\n association.", "properties": { "cipSecSpiEntry": { "type": "array", "description": "Each entry contains the attributes associated with\n active and expiring IPsec Phase-2 \n security associations.", "items": { "type": "object", "properties": { "cipSecTunIndex": { "type": "string", "description": "cipSecTunIndex", "x-yang-type": "leafref" }, "cipSecSpiIndex": { "type": "integer", "description": "The number of the SPI associated with the\n Phase-2 Tunnel Table. The value of this \n index is a number which begins at one and is \n incremented with each SPI associated with an \n IPsec Phase-2 Tunnel. The value of this \n object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecSpiDirection": { "type": "string", "description": "The direction of the SPI." }, "cipSecSpiValue": { "type": "integer", "description": "The value of the SPI.", "minimum": 0, "maximum": 4294967295 }, "cipSecSpiProtocol": { "type": "string", "description": "The protocol of the SPI." }, "cipSecSpiStatus": { "type": "string", "description": "The status of the SPI." } } } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecSpiTable": { "cipSecSpiEntry": [ { "cipSecTunIndex": "1", "cipSecSpiIndex": 1, "cipSecSpiDirection": "192.168.1.1", "cipSecSpiValue": 0, "cipSecSpiProtocol": "192.168.1.1", "cipSecSpiStatus": "192.168.1.1" }, { "cipSecTunIndex": "2", "cipSecSpiIndex": 2, "cipSecSpiDirection": "192.168.1.1", "cipSecSpiValue": 0, "cipSecSpiProtocol": "192.168.1.1", "cipSecSpiStatus": "192.168.1.1" }, { "cipSecTunIndex": "3", "cipSecSpiIndex": 3, "cipSecSpiDirection": "192.168.1.1", "cipSecSpiValue": 0, "cipSecSpiProtocol": "192.168.1.1", "cipSecSpiStatus": "192.168.1.1" } ] } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecSpiTable", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cipSecSpiTable", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecSpiTable/cipSecSpiEntry": { "get": { "summary": "Get cipSecSpiEntry list", "description": "Retrieve list of cipSecSpiEntry entries from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "array", "description": "Each entry contains the attributes associated with\n active and expiring IPsec Phase-2 \n security associations.", "items": { "type": "object", "properties": { "cipSecTunIndex": { "type": "string", "description": "cipSecTunIndex", "x-yang-type": "leafref" }, "cipSecSpiIndex": { "type": "integer", "description": "The number of the SPI associated with the\n Phase-2 Tunnel Table. The value of this \n index is a number which begins at one and is \n incremented with each SPI associated with an \n IPsec Phase-2 Tunnel. The value of this \n object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecSpiDirection": { "type": "string", "description": "The direction of the SPI." }, "cipSecSpiValue": { "type": "integer", "description": "The value of the SPI.", "minimum": 0, "maximum": 4294967295 }, "cipSecSpiProtocol": { "type": "string", "description": "The protocol of the SPI." }, "cipSecSpiStatus": { "type": "string", "description": "The status of the SPI." } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecSpiEntry": [ { "cipSecTunIndex": "192.168.1.1", "cipSecSpiIndex": 1, "cipSecSpiDirection": "192.168.1.1", "cipSecSpiValue": 0, "cipSecSpiProtocol": "192.168.1.1", "cipSecSpiStatus": "192.168.1.1" } ] } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecSpiEntry", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cipSecSpiTable/cipSecSpiEntry", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecPhase2GWStatsTable": { "get": { "summary": "Get cipSecPhase2GWStatsTable data", "description": "Retrieve cipSecPhase2GWStatsTable operational data from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "description": "Phase-2 IPsec stats information is included in this table.\n Each entry is related to a specific gateway which is \n identified by 'cmgwIndex'", "properties": { "cipSecPhase2GWStatsEntry": { "type": "array", "description": "Each entry contains the attributes of an Phase-2 IPsec stats\n information for the related gateway.\n \n There is only one entry for each gateway. The entry \n is created when a gateway up and cannot be deleted.", "items": { "type": "object", "properties": { "cmgwIndex": { "type": "string", "description": "cmgwIndex", "x-yang-type": "leafref" }, "cipSecPhase2GWActiveTunnels": { "type": "integer", "description": "The total number of currently active\n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWPreviousTunnels": { "type": "integer", "description": "The total number of previously active\n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInOctets": { "type": "integer", "description": "The total number of octets received by all\n current and previous IPsec Phase-2 Tunnels. \n This value is accumulated BEFORE determining \n whether or not the packet should be decompressed. \n See also cipSecGlobalInOctWraps for the number\n of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInOctWraps": { "type": "integer", "description": "The number of times the global octets received\n counter (cipSecGlobalInOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInDecompOctets": { "type": "integer", "description": "The total number of decompressed octets received\n by all current and previous IPsec Phase-2 Tunnels. \n This value is accumulated AFTER the packet is \n decompressed. If compression is not being used, \n this value will match the value of cipSecGlobalInOctets. \n See also cipSecGlobalInDecompOctWraps\n for the number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInDecompOctWraps": { "type": "integer", "description": "The number of times the global decompressed\n octets received counter (cipSecGlobalInDecompOctets) \n has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInPkts": { "type": "integer", "description": "The total number of packets received\n by all current and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInDrops": { "type": "integer", "description": "The total number of packets dropped\n during receive processing by all current and previous \n IPsec Phase-2 Tunnels. This count does NOT include \n packets dropped due to Anti-Replay processing.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInReplayDrops": { "type": "integer", "description": "The total number of packets dropped during\n receive processing due to Anti-Replay \n processing by all current and previous IPsec\n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInAuths": { "type": "integer", "description": "The total number of inbound authentication's\n performed by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInAuthFails": { "type": "integer", "description": "The total number of inbound authentication's\n which ended in failure by all current and previous \n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInDecrypts": { "type": "integer", "description": "The total number of inbound decryption's\n performed by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInDecryptFails": { "type": "integer", "description": "The total number of inbound decryption's\n which ended in failure by all current and \n previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutOctets": { "type": "integer", "description": "The total number of octets sent by all\n current and previous IPsec Phase-2 Tunnels. \n This value is accumulated AFTER determining \n whether or not the packet should be compressed. \n See also cipSecGlobalOutOctWraps for the\n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutOctWraps": { "type": "integer", "description": "The number of times the global octets sent counter\n (cipSecGlobalOutOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutUncompOctets": { "type": "integer", "description": "The total number of uncompressed octets sent\n by all current and previous IPsec Phase-2 Tunnels. \n This value is accumulated BEFORE the packet is \n compressed. If compression is not being used, this \n value will match the value of cipSecGlobalOutOctets. \n See also cipSecGlobalOutDecompOctWraps for the number \n of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutUncompOctWraps": { "type": "integer", "description": "The number of times the global uncompressed\n octets sent counter (cipSecGlobalOutUncompOctets) \n has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutPkts": { "type": "integer", "description": "The total number of packets sent by all\n current and previous IPsec Phase-2 \n Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutDrops": { "type": "integer", "description": "The total number of packets dropped during send\n processing by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutAuths": { "type": "integer", "description": "The total number of outbound authentication's\n performed by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutAuthFails": { "type": "integer", "description": "The total number of outbound authentication's\n which ended in failure\n by all current and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutEncrypts": { "type": "integer", "description": "The total number of outbound encryption's performed\n by all current and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutEncryptFails": { "type": "integer", "description": "The total number of outbound encryption's\n which ended in failure by all current and \n previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWProtocolUseFails": { "type": "integer", "description": "The total number of protocol use failures\n which occurred during processing of all current \n and previously active IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWNoSaFails": { "type": "integer", "description": "The total number of non-existent\n Security Association in failures which occurred \n during processing of all current\n and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWSysCapFails": { "type": "integer", "description": "The total number of system capacity failures\n which occurred during processing of all current \n and previously active IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 } } } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecPhase2GWStatsTable": { "cipSecPhase2GWStatsEntry": [ { "cmgwIndex": "1", "cipSecPhase2GWActiveTunnels": 0, "cipSecPhase2GWPreviousTunnels": 0, "cipSecPhase2GWInOctets": 1234567890, "cipSecPhase2GWInOctWraps": 0, "cipSecPhase2GWInDecompOctets": 1234567890, "cipSecPhase2GWInDecompOctWraps": 0, "cipSecPhase2GWInPkts": 0, "cipSecPhase2GWInDrops": 0, "cipSecPhase2GWInReplayDrops": 0, "cipSecPhase2GWInAuths": 0, "cipSecPhase2GWInAuthFails": 0, "cipSecPhase2GWInDecrypts": 0, "cipSecPhase2GWInDecryptFails": 0, "cipSecPhase2GWOutOctets": 1234567890, "cipSecPhase2GWOutOctWraps": 0, "cipSecPhase2GWOutUncompOctets": 1234567890, "cipSecPhase2GWOutUncompOctWraps": 0, "cipSecPhase2GWOutPkts": 0, "cipSecPhase2GWOutDrops": 0, "cipSecPhase2GWOutAuths": 0, "cipSecPhase2GWOutAuthFails": 0, "cipSecPhase2GWOutEncrypts": 0, "cipSecPhase2GWOutEncryptFails": 0, "cipSecPhase2GWProtocolUseFails": 0, "cipSecPhase2GWNoSaFails": 0, "cipSecPhase2GWSysCapFails": 0 }, { "cmgwIndex": "2", "cipSecPhase2GWActiveTunnels": 0, "cipSecPhase2GWPreviousTunnels": 0, "cipSecPhase2GWInOctets": 1234567890, "cipSecPhase2GWInOctWraps": 0, "cipSecPhase2GWInDecompOctets": 1234567890, "cipSecPhase2GWInDecompOctWraps": 0, "cipSecPhase2GWInPkts": 0, "cipSecPhase2GWInDrops": 0, "cipSecPhase2GWInReplayDrops": 0, "cipSecPhase2GWInAuths": 0, "cipSecPhase2GWInAuthFails": 0, "cipSecPhase2GWInDecrypts": 0, "cipSecPhase2GWInDecryptFails": 0, "cipSecPhase2GWOutOctets": 1234567890, "cipSecPhase2GWOutOctWraps": 0, "cipSecPhase2GWOutUncompOctets": 1234567890, "cipSecPhase2GWOutUncompOctWraps": 0, "cipSecPhase2GWOutPkts": 0, "cipSecPhase2GWOutDrops": 0, "cipSecPhase2GWOutAuths": 0, "cipSecPhase2GWOutAuthFails": 0, "cipSecPhase2GWOutEncrypts": 0, "cipSecPhase2GWOutEncryptFails": 0, "cipSecPhase2GWProtocolUseFails": 0, "cipSecPhase2GWNoSaFails": 0, "cipSecPhase2GWSysCapFails": 0 }, { "cmgwIndex": "3", "cipSecPhase2GWActiveTunnels": 0, "cipSecPhase2GWPreviousTunnels": 0, "cipSecPhase2GWInOctets": 1234567890, "cipSecPhase2GWInOctWraps": 0, "cipSecPhase2GWInDecompOctets": 1234567890, "cipSecPhase2GWInDecompOctWraps": 0, "cipSecPhase2GWInPkts": 0, "cipSecPhase2GWInDrops": 0, "cipSecPhase2GWInReplayDrops": 0, "cipSecPhase2GWInAuths": 0, "cipSecPhase2GWInAuthFails": 0, "cipSecPhase2GWInDecrypts": 0, "cipSecPhase2GWInDecryptFails": 0, "cipSecPhase2GWOutOctets": 1234567890, "cipSecPhase2GWOutOctWraps": 0, "cipSecPhase2GWOutUncompOctets": 1234567890, "cipSecPhase2GWOutUncompOctWraps": 0, "cipSecPhase2GWOutPkts": 0, "cipSecPhase2GWOutDrops": 0, "cipSecPhase2GWOutAuths": 0, "cipSecPhase2GWOutAuthFails": 0, "cipSecPhase2GWOutEncrypts": 0, "cipSecPhase2GWOutEncryptFails": 0, "cipSecPhase2GWProtocolUseFails": 0, "cipSecPhase2GWNoSaFails": 0, "cipSecPhase2GWSysCapFails": 0 } ] } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecPhase2GWStatsTable", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cipSecPhase2GWStatsTable", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecPhase2GWStatsTable/cipSecPhase2GWStatsEntry": { "get": { "summary": "Get cipSecPhase2GWStatsEntry list", "description": "Retrieve list of cipSecPhase2GWStatsEntry entries from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "array", "description": "Each entry contains the attributes of an Phase-2 IPsec stats\n information for the related gateway.\n \n There is only one entry for each gateway. The entry \n is created when a gateway up and cannot be deleted.", "items": { "type": "object", "properties": { "cmgwIndex": { "type": "string", "description": "cmgwIndex", "x-yang-type": "leafref" }, "cipSecPhase2GWActiveTunnels": { "type": "integer", "description": "The total number of currently active\n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWPreviousTunnels": { "type": "integer", "description": "The total number of previously active\n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInOctets": { "type": "integer", "description": "The total number of octets received by all\n current and previous IPsec Phase-2 Tunnels. \n This value is accumulated BEFORE determining \n whether or not the packet should be decompressed. \n See also cipSecGlobalInOctWraps for the number\n of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInOctWraps": { "type": "integer", "description": "The number of times the global octets received\n counter (cipSecGlobalInOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInDecompOctets": { "type": "integer", "description": "The total number of decompressed octets received\n by all current and previous IPsec Phase-2 Tunnels. \n This value is accumulated AFTER the packet is \n decompressed. If compression is not being used, \n this value will match the value of cipSecGlobalInOctets. \n See also cipSecGlobalInDecompOctWraps\n for the number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInDecompOctWraps": { "type": "integer", "description": "The number of times the global decompressed\n octets received counter (cipSecGlobalInDecompOctets) \n has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInPkts": { "type": "integer", "description": "The total number of packets received\n by all current and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInDrops": { "type": "integer", "description": "The total number of packets dropped\n during receive processing by all current and previous \n IPsec Phase-2 Tunnels. This count does NOT include \n packets dropped due to Anti-Replay processing.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInReplayDrops": { "type": "integer", "description": "The total number of packets dropped during\n receive processing due to Anti-Replay \n processing by all current and previous IPsec\n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInAuths": { "type": "integer", "description": "The total number of inbound authentication's\n performed by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInAuthFails": { "type": "integer", "description": "The total number of inbound authentication's\n which ended in failure by all current and previous \n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInDecrypts": { "type": "integer", "description": "The total number of inbound decryption's\n performed by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInDecryptFails": { "type": "integer", "description": "The total number of inbound decryption's\n which ended in failure by all current and \n previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutOctets": { "type": "integer", "description": "The total number of octets sent by all\n current and previous IPsec Phase-2 Tunnels. \n This value is accumulated AFTER determining \n whether or not the packet should be compressed. \n See also cipSecGlobalOutOctWraps for the\n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutOctWraps": { "type": "integer", "description": "The number of times the global octets sent counter\n (cipSecGlobalOutOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutUncompOctets": { "type": "integer", "description": "The total number of uncompressed octets sent\n by all current and previous IPsec Phase-2 Tunnels. \n This value is accumulated BEFORE the packet is \n compressed. If compression is not being used, this \n value will match the value of cipSecGlobalOutOctets. \n See also cipSecGlobalOutDecompOctWraps for the number \n of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutUncompOctWraps": { "type": "integer", "description": "The number of times the global uncompressed\n octets sent counter (cipSecGlobalOutUncompOctets) \n has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutPkts": { "type": "integer", "description": "The total number of packets sent by all\n current and previous IPsec Phase-2 \n Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutDrops": { "type": "integer", "description": "The total number of packets dropped during send\n processing by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutAuths": { "type": "integer", "description": "The total number of outbound authentication's\n performed by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutAuthFails": { "type": "integer", "description": "The total number of outbound authentication's\n which ended in failure\n by all current and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutEncrypts": { "type": "integer", "description": "The total number of outbound encryption's performed\n by all current and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutEncryptFails": { "type": "integer", "description": "The total number of outbound encryption's\n which ended in failure by all current and \n previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWProtocolUseFails": { "type": "integer", "description": "The total number of protocol use failures\n which occurred during processing of all current \n and previously active IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWNoSaFails": { "type": "integer", "description": "The total number of non-existent\n Security Association in failures which occurred \n during processing of all current\n and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWSysCapFails": { "type": "integer", "description": "The total number of system capacity failures\n which occurred during processing of all current \n and previously active IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecPhase2GWStatsEntry": [ { "cmgwIndex": "example-string", "cipSecPhase2GWActiveTunnels": 0, "cipSecPhase2GWPreviousTunnels": 0, "cipSecPhase2GWInOctets": 1234567890, "cipSecPhase2GWInOctWraps": 0, "cipSecPhase2GWInDecompOctets": 1234567890, "cipSecPhase2GWInDecompOctWraps": 0, "cipSecPhase2GWInPkts": 0, "cipSecPhase2GWInDrops": 0, "cipSecPhase2GWInReplayDrops": 0, "cipSecPhase2GWInAuths": 0, "cipSecPhase2GWInAuthFails": 0, "cipSecPhase2GWInDecrypts": 0, "cipSecPhase2GWInDecryptFails": 0, "cipSecPhase2GWOutOctets": 1234567890, "cipSecPhase2GWOutOctWraps": 0, "cipSecPhase2GWOutUncompOctets": 1234567890, "cipSecPhase2GWOutUncompOctWraps": 0, "cipSecPhase2GWOutPkts": 0, "cipSecPhase2GWOutDrops": 0, "cipSecPhase2GWOutAuths": 0, "cipSecPhase2GWOutAuthFails": 0, "cipSecPhase2GWOutEncrypts": 0, "cipSecPhase2GWOutEncryptFails": 0, "cipSecPhase2GWProtocolUseFails": 0, "cipSecPhase2GWNoSaFails": 0, "cipSecPhase2GWSysCapFails": 0 } ] } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecPhase2GWStatsEntry", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cipSecPhase2GWStatsTable/cipSecPhase2GWStatsEntry", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecPhase2GWStatsTable/cipSecPhase2GWStatsEntry={cmgwIndex}": { "get": { "summary": "Get cipSecPhase2GWStatsEntry entry", "description": "Retrieve specific cipSecPhase2GWStatsEntry entry by key from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "parameters": [ { "name": "cmgwIndex", "in": "path", "required": true, "schema": { "type": "string" }, "example": "1" }, { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "properties": { "cmgwIndex": { "type": "string", "description": "cmgwIndex", "x-yang-type": "leafref" }, "cipSecPhase2GWActiveTunnels": { "type": "integer", "description": "The total number of currently active\n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWPreviousTunnels": { "type": "integer", "description": "The total number of previously active\n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInOctets": { "type": "integer", "description": "The total number of octets received by all\n current and previous IPsec Phase-2 Tunnels. \n This value is accumulated BEFORE determining \n whether or not the packet should be decompressed. \n See also cipSecGlobalInOctWraps for the number\n of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInOctWraps": { "type": "integer", "description": "The number of times the global octets received\n counter (cipSecGlobalInOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInDecompOctets": { "type": "integer", "description": "The total number of decompressed octets received\n by all current and previous IPsec Phase-2 Tunnels. \n This value is accumulated AFTER the packet is \n decompressed. If compression is not being used, \n this value will match the value of cipSecGlobalInOctets. \n See also cipSecGlobalInDecompOctWraps\n for the number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInDecompOctWraps": { "type": "integer", "description": "The number of times the global decompressed\n octets received counter (cipSecGlobalInDecompOctets) \n has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInPkts": { "type": "integer", "description": "The total number of packets received\n by all current and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInDrops": { "type": "integer", "description": "The total number of packets dropped\n during receive processing by all current and previous \n IPsec Phase-2 Tunnels. This count does NOT include \n packets dropped due to Anti-Replay processing.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInReplayDrops": { "type": "integer", "description": "The total number of packets dropped during\n receive processing due to Anti-Replay \n processing by all current and previous IPsec\n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInAuths": { "type": "integer", "description": "The total number of inbound authentication's\n performed by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInAuthFails": { "type": "integer", "description": "The total number of inbound authentication's\n which ended in failure by all current and previous \n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInDecrypts": { "type": "integer", "description": "The total number of inbound decryption's\n performed by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInDecryptFails": { "type": "integer", "description": "The total number of inbound decryption's\n which ended in failure by all current and \n previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutOctets": { "type": "integer", "description": "The total number of octets sent by all\n current and previous IPsec Phase-2 Tunnels. \n This value is accumulated AFTER determining \n whether or not the packet should be compressed. \n See also cipSecGlobalOutOctWraps for the\n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutOctWraps": { "type": "integer", "description": "The number of times the global octets sent counter\n (cipSecGlobalOutOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutUncompOctets": { "type": "integer", "description": "The total number of uncompressed octets sent\n by all current and previous IPsec Phase-2 Tunnels. \n This value is accumulated BEFORE the packet is \n compressed. If compression is not being used, this \n value will match the value of cipSecGlobalOutOctets. \n See also cipSecGlobalOutDecompOctWraps for the number \n of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutUncompOctWraps": { "type": "integer", "description": "The number of times the global uncompressed\n octets sent counter (cipSecGlobalOutUncompOctets) \n has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutPkts": { "type": "integer", "description": "The total number of packets sent by all\n current and previous IPsec Phase-2 \n Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutDrops": { "type": "integer", "description": "The total number of packets dropped during send\n processing by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutAuths": { "type": "integer", "description": "The total number of outbound authentication's\n performed by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutAuthFails": { "type": "integer", "description": "The total number of outbound authentication's\n which ended in failure\n by all current and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutEncrypts": { "type": "integer", "description": "The total number of outbound encryption's performed\n by all current and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutEncryptFails": { "type": "integer", "description": "The total number of outbound encryption's\n which ended in failure by all current and \n previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWProtocolUseFails": { "type": "integer", "description": "The total number of protocol use failures\n which occurred during processing of all current \n and previously active IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWNoSaFails": { "type": "integer", "description": "The total number of non-existent\n Security Association in failures which occurred \n during processing of all current\n and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWSysCapFails": { "type": "integer", "description": "The total number of system capacity failures\n which occurred during processing of all current \n and previously active IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecPhase2GWStatsEntry": { "cmgwIndex": "example-string", "cipSecPhase2GWActiveTunnels": 0, "cipSecPhase2GWPreviousTunnels": 0, "cipSecPhase2GWInOctets": 1234567890, "cipSecPhase2GWInOctWraps": 0, "cipSecPhase2GWInDecompOctets": 1234567890, "cipSecPhase2GWInDecompOctWraps": 0, "cipSecPhase2GWInPkts": 0, "cipSecPhase2GWInDrops": 0, "cipSecPhase2GWInReplayDrops": 0, "cipSecPhase2GWInAuths": 0, "cipSecPhase2GWInAuthFails": 0, "cipSecPhase2GWInDecrypts": 0, "cipSecPhase2GWInDecryptFails": 0, "cipSecPhase2GWOutOctets": 1234567890, "cipSecPhase2GWOutOctWraps": 0, "cipSecPhase2GWOutUncompOctets": 1234567890, "cipSecPhase2GWOutUncompOctWraps": 0, "cipSecPhase2GWOutPkts": 0, "cipSecPhase2GWOutDrops": 0, "cipSecPhase2GWOutAuths": 0, "cipSecPhase2GWOutAuthFails": 0, "cipSecPhase2GWOutEncrypts": 0, "cipSecPhase2GWOutEncryptFails": 0, "cipSecPhase2GWProtocolUseFails": 0, "cipSecPhase2GWNoSaFails": 0, "cipSecPhase2GWSysCapFails": 0 } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecPhase2GWStatsEntry-2" }, "x-yang-path": "/cipSecPhase2GWStatsTable/cipSecPhase2GWStatsEntry={cmgwIndex}", "x-restconf-kind": "list-instance", "x-list-keys": [ "cmgwIndex" ] }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikeTunnelHistTable": { "get": { "summary": "Get cikeTunnelHistTable data", "description": "Retrieve cikeTunnelHistTable operational data from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "description": "The IPsec Phase-1 Internet Key Exchange Tunnel\n History Table. This table is implemented as a \n sliding window in which only the last n entries \n are maintained. The maximum number of entries\n is specified by the cipSecHistTableSize object.", "properties": { "cikeTunnelHistEntry": { "type": "array", "description": "Each entry contains the attributes\n associated with a previously active IPsec \n Phase-1 IKE Tunnel.", "items": { "type": "object", "properties": { "cikeTunHistIndex": { "type": "integer", "description": "The index of the IPsec Phase-1 IKE Tunnel History\n Table. The value of the index is a number which \n begins at one and is incremented with each \n tunnel that ends. The value of this object \n will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunHistTermReason": { "type": "string", "description": "The reason the IPsec Phase-1 IKE Tunnel was terminated.\n Possible reasons include:\n 1 = other\n 2 = normal termination\n 3 = operator request\n 4 = peer delete request was received\n 5 = contact with peer was lost\n 6 = local failure occurred.\n 7 = operator initiated check point request" }, "cikeTunHistActiveIndex": { "type": "integer", "description": "The index of the previously active IPsec\n Phase-1 IKE Tunnel.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunHistPeerLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikeTunHistPeerLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunHistPeerIntIndex": { "type": "integer", "description": "The internal index of the local-remote peer\n association. This internal index is used to \n uniquely identify multiple associations between \n the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunHistPeerRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote\n peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikeTunHistPeerRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunHistLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikeTunHistLocalName": { "type": "string", "description": "The DNS name of the local IP address for\n the IPsec Phase-1 IKE Tunnel. If the DNS \n name associated with the local tunnel endpoint \n is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunHistRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikeTunHistRemoteName": { "type": "string", "description": "The DNS name of the remote IP address of IPsec Phase-1\n IKE Tunnel. If the DNS name associated with the remote\n tunnel endpoint is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunHistNegoMode": { "type": "string", "description": "The negotiation mode of the IPsec Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeNegoMode" }, "cikeTunHistDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp" }, "cikeTunHistEncryptAlgo": { "type": "string", "description": "The encryption algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo" }, "cikeTunHistHashAlgo": { "type": "string", "description": "The hash algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeHashAlgo" }, "cikeTunHistAuthMethod": { "type": "string", "description": "The authentication method used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeAuthMethod" }, "cikeTunHistLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel\n in seconds.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunHistStartTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n when the IPsec Phase-1 IKE tunnel was started.", "x-yang-type": "yang:timestamp" }, "cikeTunHistActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-1 IKE tunnel was been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval" }, "cikeTunHistTotalRefreshes": { "type": "integer", "description": "The total number of security associations\n refreshes performed.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistTotalSas": { "type": "integer", "description": "The total number of security associations\n used during the\n life of the IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInOctets": { "type": "integer", "description": "The total number of octets\n received by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInPkts": { "type": "integer", "description": "The total number of packets received\n by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInDropPkts": { "type": "integer", "description": "The total number of packets dropped\n by this IPsec Phase-1\n IKE Tunnel during receive processing.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInNotifys": { "type": "integer", "description": "The total number of notifys received\n by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received and\n found to be invalid by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received and\n rejected by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 security association\n delete requests received by this IPsec \n Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutPkts": { "type": "integer", "description": "The total number of packets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutDropPkts": { "type": "integer", "description": "The total number of packets dropped\n by this IPsec Phase-1\n IKE Tunnel during send processing.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutNotifys": { "type": "integer", "description": "The total number of notifys sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n found to be invalid by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n rejected by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 security association\n delete requests sent by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 } } } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikeTunnelHistTable": { "cikeTunnelHistEntry": [ { "cikeTunHistIndex": 1, "cikeTunHistTermReason": "example-string", "cikeTunHistActiveIndex": 1, "cikeTunHistPeerLocalType": "ethernetCsmacd(6)", "cikeTunHistPeerLocalValue": "example-string", "cikeTunHistPeerIntIndex": 1, "cikeTunHistPeerRemoteType": "ethernetCsmacd(6)", "cikeTunHistPeerRemoteValue": "example-string", "cikeTunHistLocalAddr": "192.168.1.1", "cikeTunHistLocalName": "interface-1", "cikeTunHistRemoteAddr": "192.168.1.1", "cikeTunHistRemoteName": "interface-1", "cikeTunHistNegoMode": "example-string", "cikeTunHistDiffHellmanGrp": "example-string", "cikeTunHistEncryptAlgo": "example-string", "cikeTunHistHashAlgo": "example-string", "cikeTunHistAuthMethod": "example-string", "cikeTunHistLifeTime": -2147483648, "cikeTunHistStartTime": "example-string", "cikeTunHistActiveTime": "example-string", "cikeTunHistTotalRefreshes": 0, "cikeTunHistTotalSas": 0, "cikeTunHistInOctets": 1234567890, "cikeTunHistInPkts": 0, "cikeTunHistInDropPkts": 0, "cikeTunHistInNotifys": 0, "cikeTunHistInP2Exchgs": 0, "cikeTunHistInP2ExchgInvalids": 0, "cikeTunHistInP2ExchgRejects": 0, "cikeTunHistInP2SaDelRequests": 0, "cikeTunHistOutOctets": 1234567890, "cikeTunHistOutPkts": 0, "cikeTunHistOutDropPkts": 0, "cikeTunHistOutNotifys": 0, "cikeTunHistOutP2Exchgs": 0, "cikeTunHistOutP2ExchgInvalids": 0, "cikeTunHistOutP2ExchgRejects": 0, "cikeTunHistOutP2SaDelRequests": 0 }, { "cikeTunHistIndex": 2, "cikeTunHistTermReason": "example-string", "cikeTunHistActiveIndex": 2, "cikeTunHistPeerLocalType": "ethernetCsmacd(6)", "cikeTunHistPeerLocalValue": "example-string", "cikeTunHistPeerIntIndex": 2, "cikeTunHistPeerRemoteType": "ethernetCsmacd(6)", "cikeTunHistPeerRemoteValue": "example-string", "cikeTunHistLocalAddr": "192.168.1.1", "cikeTunHistLocalName": "interface-1", "cikeTunHistRemoteAddr": "192.168.1.1", "cikeTunHistRemoteName": "interface-1", "cikeTunHistNegoMode": "example-string", "cikeTunHistDiffHellmanGrp": "example-string", "cikeTunHistEncryptAlgo": "example-string", "cikeTunHistHashAlgo": "example-string", "cikeTunHistAuthMethod": "example-string", "cikeTunHistLifeTime": -2147483648, "cikeTunHistStartTime": "example-string", "cikeTunHistActiveTime": "example-string", "cikeTunHistTotalRefreshes": 0, "cikeTunHistTotalSas": 0, "cikeTunHistInOctets": 1234567890, "cikeTunHistInPkts": 0, "cikeTunHistInDropPkts": 0, "cikeTunHistInNotifys": 0, "cikeTunHistInP2Exchgs": 0, "cikeTunHistInP2ExchgInvalids": 0, "cikeTunHistInP2ExchgRejects": 0, "cikeTunHistInP2SaDelRequests": 0, "cikeTunHistOutOctets": 1234567890, "cikeTunHistOutPkts": 0, "cikeTunHistOutDropPkts": 0, "cikeTunHistOutNotifys": 0, "cikeTunHistOutP2Exchgs": 0, "cikeTunHistOutP2ExchgInvalids": 0, "cikeTunHistOutP2ExchgRejects": 0, "cikeTunHistOutP2SaDelRequests": 0 }, { "cikeTunHistIndex": 3, "cikeTunHistTermReason": "example-string", "cikeTunHistActiveIndex": 3, "cikeTunHistPeerLocalType": "ethernetCsmacd(6)", "cikeTunHistPeerLocalValue": "example-string", "cikeTunHistPeerIntIndex": 3, "cikeTunHistPeerRemoteType": "ethernetCsmacd(6)", "cikeTunHistPeerRemoteValue": "example-string", "cikeTunHistLocalAddr": "192.168.1.1", "cikeTunHistLocalName": "interface-1", "cikeTunHistRemoteAddr": "192.168.1.1", "cikeTunHistRemoteName": "interface-1", "cikeTunHistNegoMode": "example-string", "cikeTunHistDiffHellmanGrp": "example-string", "cikeTunHistEncryptAlgo": "example-string", "cikeTunHistHashAlgo": "example-string", "cikeTunHistAuthMethod": "example-string", "cikeTunHistLifeTime": -2147483648, "cikeTunHistStartTime": "example-string", "cikeTunHistActiveTime": "example-string", "cikeTunHistTotalRefreshes": 0, "cikeTunHistTotalSas": 0, "cikeTunHistInOctets": 1234567890, "cikeTunHistInPkts": 0, "cikeTunHistInDropPkts": 0, "cikeTunHistInNotifys": 0, "cikeTunHistInP2Exchgs": 0, "cikeTunHistInP2ExchgInvalids": 0, "cikeTunHistInP2ExchgRejects": 0, "cikeTunHistInP2SaDelRequests": 0, "cikeTunHistOutOctets": 1234567890, "cikeTunHistOutPkts": 0, "cikeTunHistOutDropPkts": 0, "cikeTunHistOutNotifys": 0, "cikeTunHistOutP2Exchgs": 0, "cikeTunHistOutP2ExchgInvalids": 0, "cikeTunHistOutP2ExchgRejects": 0, "cikeTunHistOutP2SaDelRequests": 0 } ] } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikeTunnelHistTable", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cikeTunnelHistTable", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikeTunnelHistTable/cikeTunnelHistEntry": { "get": { "summary": "Get cikeTunnelHistEntry list", "description": "Retrieve list of cikeTunnelHistEntry entries from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "array", "description": "Each entry contains the attributes\n associated with a previously active IPsec \n Phase-1 IKE Tunnel.", "items": { "type": "object", "properties": { "cikeTunHistIndex": { "type": "integer", "description": "The index of the IPsec Phase-1 IKE Tunnel History\n Table. The value of the index is a number which \n begins at one and is incremented with each \n tunnel that ends. The value of this object \n will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunHistTermReason": { "type": "string", "description": "The reason the IPsec Phase-1 IKE Tunnel was terminated.\n Possible reasons include:\n 1 = other\n 2 = normal termination\n 3 = operator request\n 4 = peer delete request was received\n 5 = contact with peer was lost\n 6 = local failure occurred.\n 7 = operator initiated check point request" }, "cikeTunHistActiveIndex": { "type": "integer", "description": "The index of the previously active IPsec\n Phase-1 IKE Tunnel.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunHistPeerLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikeTunHistPeerLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunHistPeerIntIndex": { "type": "integer", "description": "The internal index of the local-remote peer\n association. This internal index is used to \n uniquely identify multiple associations between \n the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunHistPeerRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote\n peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikeTunHistPeerRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunHistLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikeTunHistLocalName": { "type": "string", "description": "The DNS name of the local IP address for\n the IPsec Phase-1 IKE Tunnel. If the DNS \n name associated with the local tunnel endpoint \n is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunHistRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikeTunHistRemoteName": { "type": "string", "description": "The DNS name of the remote IP address of IPsec Phase-1\n IKE Tunnel. If the DNS name associated with the remote\n tunnel endpoint is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunHistNegoMode": { "type": "string", "description": "The negotiation mode of the IPsec Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeNegoMode" }, "cikeTunHistDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp" }, "cikeTunHistEncryptAlgo": { "type": "string", "description": "The encryption algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo" }, "cikeTunHistHashAlgo": { "type": "string", "description": "The hash algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeHashAlgo" }, "cikeTunHistAuthMethod": { "type": "string", "description": "The authentication method used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeAuthMethod" }, "cikeTunHistLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel\n in seconds.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunHistStartTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n when the IPsec Phase-1 IKE tunnel was started.", "x-yang-type": "yang:timestamp" }, "cikeTunHistActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-1 IKE tunnel was been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval" }, "cikeTunHistTotalRefreshes": { "type": "integer", "description": "The total number of security associations\n refreshes performed.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistTotalSas": { "type": "integer", "description": "The total number of security associations\n used during the\n life of the IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInOctets": { "type": "integer", "description": "The total number of octets\n received by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInPkts": { "type": "integer", "description": "The total number of packets received\n by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInDropPkts": { "type": "integer", "description": "The total number of packets dropped\n by this IPsec Phase-1\n IKE Tunnel during receive processing.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInNotifys": { "type": "integer", "description": "The total number of notifys received\n by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received and\n found to be invalid by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received and\n rejected by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 security association\n delete requests received by this IPsec \n Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutPkts": { "type": "integer", "description": "The total number of packets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutDropPkts": { "type": "integer", "description": "The total number of packets dropped\n by this IPsec Phase-1\n IKE Tunnel during send processing.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutNotifys": { "type": "integer", "description": "The total number of notifys sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n found to be invalid by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n rejected by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 security association\n delete requests sent by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikeTunnelHistEntry": [ { "cikeTunHistIndex": 1, "cikeTunHistTermReason": "example-string", "cikeTunHistActiveIndex": 1, "cikeTunHistPeerLocalType": "ethernetCsmacd(6)", "cikeTunHistPeerLocalValue": "example-string", "cikeTunHistPeerIntIndex": 1, "cikeTunHistPeerRemoteType": "ethernetCsmacd(6)", "cikeTunHistPeerRemoteValue": "example-string", "cikeTunHistLocalAddr": "192.168.1.1", "cikeTunHistLocalName": "interface-1", "cikeTunHistRemoteAddr": "192.168.1.1", "cikeTunHistRemoteName": "interface-1", "cikeTunHistNegoMode": "example-string", "cikeTunHistDiffHellmanGrp": "example-string", "cikeTunHistEncryptAlgo": "example-string", "cikeTunHistHashAlgo": "example-string", "cikeTunHistAuthMethod": "example-string", "cikeTunHistLifeTime": -2147483648, "cikeTunHistStartTime": "example-string", "cikeTunHistActiveTime": "example-string", "cikeTunHistTotalRefreshes": 0, "cikeTunHistTotalSas": 0, "cikeTunHistInOctets": 1234567890, "cikeTunHistInPkts": 0, "cikeTunHistInDropPkts": 0, "cikeTunHistInNotifys": 0, "cikeTunHistInP2Exchgs": 0, "cikeTunHistInP2ExchgInvalids": 0, "cikeTunHistInP2ExchgRejects": 0, "cikeTunHistInP2SaDelRequests": 0, "cikeTunHistOutOctets": 1234567890, "cikeTunHistOutPkts": 0, "cikeTunHistOutDropPkts": 0, "cikeTunHistOutNotifys": 0, "cikeTunHistOutP2Exchgs": 0, "cikeTunHistOutP2ExchgInvalids": 0, "cikeTunHistOutP2ExchgRejects": 0, "cikeTunHistOutP2SaDelRequests": 0 } ] } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikeTunnelHistEntry", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cikeTunnelHistTable/cikeTunnelHistEntry", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikeTunnelHistTable/cikeTunnelHistEntry={cikeTunHistIndex}": { "get": { "summary": "Get cikeTunnelHistEntry entry", "description": "Retrieve specific cikeTunnelHistEntry entry by key from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "parameters": [ { "name": "cikeTunHistIndex", "in": "path", "required": true, "schema": { "type": "string" }, "example": "1" }, { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "properties": { "cikeTunHistIndex": { "type": "integer", "description": "The index of the IPsec Phase-1 IKE Tunnel History\n Table. The value of the index is a number which \n begins at one and is incremented with each \n tunnel that ends. The value of this object \n will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunHistTermReason": { "type": "string", "description": "The reason the IPsec Phase-1 IKE Tunnel was terminated.\n Possible reasons include:\n 1 = other\n 2 = normal termination\n 3 = operator request\n 4 = peer delete request was received\n 5 = contact with peer was lost\n 6 = local failure occurred.\n 7 = operator initiated check point request" }, "cikeTunHistActiveIndex": { "type": "integer", "description": "The index of the previously active IPsec\n Phase-1 IKE Tunnel.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunHistPeerLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikeTunHistPeerLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunHistPeerIntIndex": { "type": "integer", "description": "The internal index of the local-remote peer\n association. This internal index is used to \n uniquely identify multiple associations between \n the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunHistPeerRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote\n peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikeTunHistPeerRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunHistLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikeTunHistLocalName": { "type": "string", "description": "The DNS name of the local IP address for\n the IPsec Phase-1 IKE Tunnel. If the DNS \n name associated with the local tunnel endpoint \n is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunHistRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikeTunHistRemoteName": { "type": "string", "description": "The DNS name of the remote IP address of IPsec Phase-1\n IKE Tunnel. If the DNS name associated with the remote\n tunnel endpoint is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunHistNegoMode": { "type": "string", "description": "The negotiation mode of the IPsec Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeNegoMode" }, "cikeTunHistDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp" }, "cikeTunHistEncryptAlgo": { "type": "string", "description": "The encryption algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo" }, "cikeTunHistHashAlgo": { "type": "string", "description": "The hash algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeHashAlgo" }, "cikeTunHistAuthMethod": { "type": "string", "description": "The authentication method used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeAuthMethod" }, "cikeTunHistLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel\n in seconds.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunHistStartTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n when the IPsec Phase-1 IKE tunnel was started.", "x-yang-type": "yang:timestamp" }, "cikeTunHistActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-1 IKE tunnel was been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval" }, "cikeTunHistTotalRefreshes": { "type": "integer", "description": "The total number of security associations\n refreshes performed.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistTotalSas": { "type": "integer", "description": "The total number of security associations\n used during the\n life of the IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInOctets": { "type": "integer", "description": "The total number of octets\n received by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInPkts": { "type": "integer", "description": "The total number of packets received\n by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInDropPkts": { "type": "integer", "description": "The total number of packets dropped\n by this IPsec Phase-1\n IKE Tunnel during receive processing.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInNotifys": { "type": "integer", "description": "The total number of notifys received\n by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received and\n found to be invalid by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received and\n rejected by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 security association\n delete requests received by this IPsec \n Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutPkts": { "type": "integer", "description": "The total number of packets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutDropPkts": { "type": "integer", "description": "The total number of packets dropped\n by this IPsec Phase-1\n IKE Tunnel during send processing.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutNotifys": { "type": "integer", "description": "The total number of notifys sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n found to be invalid by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n rejected by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 security association\n delete requests sent by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikeTunnelHistEntry": { "cikeTunHistIndex": 1, "cikeTunHistTermReason": "example-string", "cikeTunHistActiveIndex": 1, "cikeTunHistPeerLocalType": "ethernetCsmacd(6)", "cikeTunHistPeerLocalValue": "example-string", "cikeTunHistPeerIntIndex": 1, "cikeTunHistPeerRemoteType": "ethernetCsmacd(6)", "cikeTunHistPeerRemoteValue": "example-string", "cikeTunHistLocalAddr": "192.168.1.1", "cikeTunHistLocalName": "interface-1", "cikeTunHistRemoteAddr": "192.168.1.1", "cikeTunHistRemoteName": "interface-1", "cikeTunHistNegoMode": "example-string", "cikeTunHistDiffHellmanGrp": "example-string", "cikeTunHistEncryptAlgo": "example-string", "cikeTunHistHashAlgo": "example-string", "cikeTunHistAuthMethod": "example-string", "cikeTunHistLifeTime": -2147483648, "cikeTunHistStartTime": "example-string", "cikeTunHistActiveTime": "example-string", "cikeTunHistTotalRefreshes": 0, "cikeTunHistTotalSas": 0, "cikeTunHistInOctets": 1234567890, "cikeTunHistInPkts": 0, "cikeTunHistInDropPkts": 0, "cikeTunHistInNotifys": 0, "cikeTunHistInP2Exchgs": 0, "cikeTunHistInP2ExchgInvalids": 0, "cikeTunHistInP2ExchgRejects": 0, "cikeTunHistInP2SaDelRequests": 0, "cikeTunHistOutOctets": 1234567890, "cikeTunHistOutPkts": 0, "cikeTunHistOutDropPkts": 0, "cikeTunHistOutNotifys": 0, "cikeTunHistOutP2Exchgs": 0, "cikeTunHistOutP2ExchgInvalids": 0, "cikeTunHistOutP2ExchgRejects": 0, "cikeTunHistOutP2SaDelRequests": 0 } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikeTunnelHistEntry-2" }, "x-yang-path": "/cikeTunnelHistTable/cikeTunnelHistEntry={cikeTunHistIndex}", "x-restconf-kind": "list-instance", "x-list-keys": [ "cikeTunHistIndex" ] }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecTunnelHistTable": { "get": { "summary": "Get cipSecTunnelHistTable data", "description": "Retrieve cipSecTunnelHistTable operational data from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "description": "The IPsec Phase-2 Tunnel History Table.\n This table is implemented as a sliding \n window in which only the\n last n entries are maintained. The maximum number \n of entries\n is specified by the cipSecHistTableSize object.", "properties": { "cipSecTunnelHistEntry": { "type": "array", "description": "Each entry contains the attributes associated with\n a previously active IPsec Phase-2 Tunnel.", "items": { "type": "object", "properties": { "cipSecTunHistIndex": { "type": "integer", "description": "The index of the IPsec Phase-2 Tunnel History Table.\n The value of the index is a number which \n begins at one and is incremented with each tunnel \n that ends. The value\n of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunHistTermReason": { "type": "string", "description": "The reason the IPsec Phase-2 Tunnel was terminated.\n Possible reasons include:\n 1 = other\n 2 = normal termination\n 3 = operator request\n 4 = peer delete request was received\n 5 = contact with peer was lost\n 6 = local failure occurred\n 7 = operator initiated check point request" }, "cipSecTunHistActiveIndex": { "type": "integer", "description": "The index of the previously active\n IPsec Phase-2 Tunnel.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunHistIkeTunnelIndex": { "type": "integer", "description": "The index of the associated IPsec Phase-1 Tunnel\n (cikeTunIndex in the cikeTunnelTable).", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunHistLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecTunHistRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecTunHistKeyType": { "type": "string", "description": "The type of key used by the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:KeyType" }, "cipSecTunHistEncapMode": { "type": "string", "description": "The encapsulation mode used by the\n IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncapMode" }, "cipSecTunHistLifeSize": { "type": "integer", "description": "The negotiated LifeSize of the IPsec Phase-2 Tunnel in\n kilobytes.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunHistLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the IPsec Phase-2 Tunnel in\n seconds.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunHistStartTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n when the IPsec Phase-2 Tunnel was started.", "x-yang-type": "yang:timestamp" }, "cipSecTunHistActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-2 Tunnel has been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval" }, "cipSecTunHistTotalRefreshes": { "type": "integer", "description": "The total number of security association refreshes\n performed.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistTotalSas": { "type": "integer", "description": "The total number of security associations used\n during the\n life of the IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used by the inbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp" }, "cipSecTunHistInSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the inbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo" }, "cipSecTunHistInSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunHistInSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) \n security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunHistInSaDecompAlgo": { "type": "string", "description": "The decompression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo" }, "cipSecTunHistOutSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp" }, "cipSecTunHistOutSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo" }, "cipSecTunHistOutSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the outbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunHistOutSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) \n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunHistOutSaCompAlgo": { "type": "string", "description": "The compression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo" }, "cipSecTunHistInOctets": { "type": "integer", "description": "The total number of octets received by this IPsec\n Phase-2 Tunnel. This value is accumulated\n BEFORE determining whether or not the packet should \n be decompressed. See also cipSecTunInOctWraps for \n the number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistHcInOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n received by this IPsec Phase-2 Tunnel. This value is\n accumulated BEFORE determining whether or not \n the packet should be decompressed.", "minimum": 0 }, "cipSecTunHistInOctWraps": { "type": "integer", "description": "The number of times the octets received counter\n (cipSecTunInOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInDecompOctets": { "type": "integer", "description": "The total number of decompressed octets received by this\n IPsec Phase-2 Tunnel. This value is accumulated AFTER\n the packet is decompressed. If compression is not being\n used, this value will match the value of cipSecTunHistInOctets.\n See also cipSecTunInDecompOctWraps for the number of times\n this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistHcInDecompOctets": { "type": "integer", "description": "A high capacity count of the total number of decompressed\n octets received by this IPsec Phase-2 Tunnel. This value\n is accumulated AFTER the packet is decompressed. If\n compression is not being used, this value will match the\n value of cipSecTunHistHcInOctets.", "minimum": 0 }, "cipSecTunHistInDecompOctWraps": { "type": "integer", "description": "The number of times the decompressed octets\n received counter (cipSecTunInDecompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInPkts": { "type": "integer", "description": "The total number of packets received by this\n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n receive processing by this IPsec Phase-2 Tunnel. \n This count does NOT include packets\n dropped due to Anti-Replay processing.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInReplayDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n receive processing due to Anti-Replay processing \n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInAuths": { "type": "integer", "description": "The total number of inbound authentication's\n performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInAuthFails": { "type": "integer", "description": "The total number of inbound authentication's\n which ended in\n failure by this IPsec Phase-2 Tunnel .", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInDecrypts": { "type": "integer", "description": "The total number of inbound decryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInDecryptFails": { "type": "integer", "description": "The total number of inbound decryption's\n which ended in failure\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec\n Phase-2 Tunnel. This value is accumulated\n AFTER determining whether or not the \n packet should be\n compressed. See also cipSecTunOutOctWraps for the\n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistHcOutOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n sent by this IPsec Phase-2 Tunnel. This value \n is accumulated AFTER determining whether or not \n the packet should be\n compressed.", "minimum": 0 }, "cipSecTunHistOutOctWraps": { "type": "integer", "description": "The number of times the octets sent counter\n (cipSecTunOutOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutUncompOctets": { "type": "integer", "description": "The total number of uncompressed octets sent by this\n IPsec Phase-2 Tunnel. This value is accumulated BEFORE\n the packet is compressed. If compression is not being\n used, this value will match the value of \n cipSecTunHistOutOctets. See also \n cipSecTunOutDecompOctWraps for the number of times\n this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistHcOutUncompOctets": { "type": "integer", "description": "A high capacity count of the total\n number of uncompressed octets sent by this \n IPsec Phase-2 Tunnel. This value is accumulated \n BEFORE the packet is compressed. If compression\n is not being used, this value will match the value of\n cipSecTunHistHcOutOctets.", "minimum": 0 }, "cipSecTunHistOutUncompOctWraps": { "type": "integer", "description": "The number of times the uncompressed octets sent counter\n (cipSecTunOutUncompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutPkts": { "type": "integer", "description": "The total number of packets sent by this\n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutDropPkts": { "type": "integer", "description": "The total number of packets dropped\n during send processing\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutAuths": { "type": "integer", "description": "The total number of outbound authentication's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutAuthFails": { "type": "integer", "description": "The total number of outbound authentication's\n which ended in\n failure by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutEncrypts": { "type": "integer", "description": "The total number of outbound encryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutEncryptFails": { "type": "integer", "description": "The total number of outbound encryption's\n which ended in failure\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 } } } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecTunnelHistTable": { "cipSecTunnelHistEntry": [ { "cipSecTunHistIndex": 1, "cipSecTunHistTermReason": "192.168.1.1", "cipSecTunHistActiveIndex": 1, "cipSecTunHistIkeTunnelIndex": 1, "cipSecTunHistLocalAddr": "192.168.1.1", "cipSecTunHistRemoteAddr": "192.168.1.1", "cipSecTunHistKeyType": "192.168.1.1", "cipSecTunHistEncapMode": "192.168.1.1", "cipSecTunHistLifeSize": -2147483648, "cipSecTunHistLifeTime": -2147483648, "cipSecTunHistStartTime": "192.168.1.1", "cipSecTunHistActiveTime": "192.168.1.1", "cipSecTunHistTotalRefreshes": 0, "cipSecTunHistTotalSas": 0, "cipSecTunHistInSaDiffHellmanGrp": "192.168.1.1", "cipSecTunHistInSaEncryptAlgo": "192.168.1.1", "cipSecTunHistInSaAhAuthAlgo": "192.168.1.1", "cipSecTunHistInSaEspAuthAlgo": "192.168.1.1", "cipSecTunHistInSaDecompAlgo": "192.168.1.1", "cipSecTunHistOutSaDiffHellmanGrp": "192.168.1.1", "cipSecTunHistOutSaEncryptAlgo": "192.168.1.1", "cipSecTunHistOutSaAhAuthAlgo": "192.168.1.1", "cipSecTunHistOutSaEspAuthAlgo": "192.168.1.1", "cipSecTunHistOutSaCompAlgo": "192.168.1.1", "cipSecTunHistInOctets": 1234567890, "cipSecTunHistHcInOctets": 1234567890, "cipSecTunHistInOctWraps": 0, "cipSecTunHistInDecompOctets": 1234567890, "cipSecTunHistHcInDecompOctets": 1234567890, "cipSecTunHistInDecompOctWraps": 0, "cipSecTunHistInPkts": 0, "cipSecTunHistInDropPkts": 0, "cipSecTunHistInReplayDropPkts": 0, "cipSecTunHistInAuths": 0, "cipSecTunHistInAuthFails": 0, "cipSecTunHistInDecrypts": 0, "cipSecTunHistInDecryptFails": 0, "cipSecTunHistOutOctets": 1234567890, "cipSecTunHistHcOutOctets": 1234567890, "cipSecTunHistOutOctWraps": 0, "cipSecTunHistOutUncompOctets": 1234567890, "cipSecTunHistHcOutUncompOctets": 1234567890, "cipSecTunHistOutUncompOctWraps": 0, "cipSecTunHistOutPkts": 0, "cipSecTunHistOutDropPkts": 0, "cipSecTunHistOutAuths": 0, "cipSecTunHistOutAuthFails": 0, "cipSecTunHistOutEncrypts": 0, "cipSecTunHistOutEncryptFails": 0 }, { "cipSecTunHistIndex": 2, "cipSecTunHistTermReason": "192.168.1.1", "cipSecTunHistActiveIndex": 2, "cipSecTunHistIkeTunnelIndex": 2, "cipSecTunHistLocalAddr": "192.168.1.1", "cipSecTunHistRemoteAddr": "192.168.1.1", "cipSecTunHistKeyType": "192.168.1.1", "cipSecTunHistEncapMode": "192.168.1.1", "cipSecTunHistLifeSize": -2147483648, "cipSecTunHistLifeTime": -2147483648, "cipSecTunHistStartTime": "192.168.1.1", "cipSecTunHistActiveTime": "192.168.1.1", "cipSecTunHistTotalRefreshes": 0, "cipSecTunHistTotalSas": 0, "cipSecTunHistInSaDiffHellmanGrp": "192.168.1.1", "cipSecTunHistInSaEncryptAlgo": "192.168.1.1", "cipSecTunHistInSaAhAuthAlgo": "192.168.1.1", "cipSecTunHistInSaEspAuthAlgo": "192.168.1.1", "cipSecTunHistInSaDecompAlgo": "192.168.1.1", "cipSecTunHistOutSaDiffHellmanGrp": "192.168.1.1", "cipSecTunHistOutSaEncryptAlgo": "192.168.1.1", "cipSecTunHistOutSaAhAuthAlgo": "192.168.1.1", "cipSecTunHistOutSaEspAuthAlgo": "192.168.1.1", "cipSecTunHistOutSaCompAlgo": "192.168.1.1", "cipSecTunHistInOctets": 1234567890, "cipSecTunHistHcInOctets": 1234567890, "cipSecTunHistInOctWraps": 0, "cipSecTunHistInDecompOctets": 1234567890, "cipSecTunHistHcInDecompOctets": 1234567890, "cipSecTunHistInDecompOctWraps": 0, "cipSecTunHistInPkts": 0, "cipSecTunHistInDropPkts": 0, "cipSecTunHistInReplayDropPkts": 0, "cipSecTunHistInAuths": 0, "cipSecTunHistInAuthFails": 0, "cipSecTunHistInDecrypts": 0, "cipSecTunHistInDecryptFails": 0, "cipSecTunHistOutOctets": 1234567890, "cipSecTunHistHcOutOctets": 1234567890, "cipSecTunHistOutOctWraps": 0, "cipSecTunHistOutUncompOctets": 1234567890, "cipSecTunHistHcOutUncompOctets": 1234567890, "cipSecTunHistOutUncompOctWraps": 0, "cipSecTunHistOutPkts": 0, "cipSecTunHistOutDropPkts": 0, "cipSecTunHistOutAuths": 0, "cipSecTunHistOutAuthFails": 0, "cipSecTunHistOutEncrypts": 0, "cipSecTunHistOutEncryptFails": 0 }, { "cipSecTunHistIndex": 3, "cipSecTunHistTermReason": "192.168.1.1", "cipSecTunHistActiveIndex": 3, "cipSecTunHistIkeTunnelIndex": 3, "cipSecTunHistLocalAddr": "192.168.1.1", "cipSecTunHistRemoteAddr": "192.168.1.1", "cipSecTunHistKeyType": "192.168.1.1", "cipSecTunHistEncapMode": "192.168.1.1", "cipSecTunHistLifeSize": -2147483648, "cipSecTunHistLifeTime": -2147483648, "cipSecTunHistStartTime": "192.168.1.1", "cipSecTunHistActiveTime": "192.168.1.1", "cipSecTunHistTotalRefreshes": 0, "cipSecTunHistTotalSas": 0, "cipSecTunHistInSaDiffHellmanGrp": "192.168.1.1", "cipSecTunHistInSaEncryptAlgo": "192.168.1.1", "cipSecTunHistInSaAhAuthAlgo": "192.168.1.1", "cipSecTunHistInSaEspAuthAlgo": "192.168.1.1", "cipSecTunHistInSaDecompAlgo": "192.168.1.1", "cipSecTunHistOutSaDiffHellmanGrp": "192.168.1.1", "cipSecTunHistOutSaEncryptAlgo": "192.168.1.1", "cipSecTunHistOutSaAhAuthAlgo": "192.168.1.1", "cipSecTunHistOutSaEspAuthAlgo": "192.168.1.1", "cipSecTunHistOutSaCompAlgo": "192.168.1.1", "cipSecTunHistInOctets": 1234567890, "cipSecTunHistHcInOctets": 1234567890, "cipSecTunHistInOctWraps": 0, "cipSecTunHistInDecompOctets": 1234567890, "cipSecTunHistHcInDecompOctets": 1234567890, "cipSecTunHistInDecompOctWraps": 0, "cipSecTunHistInPkts": 0, "cipSecTunHistInDropPkts": 0, "cipSecTunHistInReplayDropPkts": 0, "cipSecTunHistInAuths": 0, "cipSecTunHistInAuthFails": 0, "cipSecTunHistInDecrypts": 0, "cipSecTunHistInDecryptFails": 0, "cipSecTunHistOutOctets": 1234567890, "cipSecTunHistHcOutOctets": 1234567890, "cipSecTunHistOutOctWraps": 0, "cipSecTunHistOutUncompOctets": 1234567890, "cipSecTunHistHcOutUncompOctets": 1234567890, "cipSecTunHistOutUncompOctWraps": 0, "cipSecTunHistOutPkts": 0, "cipSecTunHistOutDropPkts": 0, "cipSecTunHistOutAuths": 0, "cipSecTunHistOutAuthFails": 0, "cipSecTunHistOutEncrypts": 0, "cipSecTunHistOutEncryptFails": 0 } ] } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecTunnelHistTable", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cipSecTunnelHistTable", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecTunnelHistTable/cipSecTunnelHistEntry": { "get": { "summary": "Get cipSecTunnelHistEntry list", "description": "Retrieve list of cipSecTunnelHistEntry entries from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "array", "description": "Each entry contains the attributes associated with\n a previously active IPsec Phase-2 Tunnel.", "items": { "type": "object", "properties": { "cipSecTunHistIndex": { "type": "integer", "description": "The index of the IPsec Phase-2 Tunnel History Table.\n The value of the index is a number which \n begins at one and is incremented with each tunnel \n that ends. The value\n of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunHistTermReason": { "type": "string", "description": "The reason the IPsec Phase-2 Tunnel was terminated.\n Possible reasons include:\n 1 = other\n 2 = normal termination\n 3 = operator request\n 4 = peer delete request was received\n 5 = contact with peer was lost\n 6 = local failure occurred\n 7 = operator initiated check point request" }, "cipSecTunHistActiveIndex": { "type": "integer", "description": "The index of the previously active\n IPsec Phase-2 Tunnel.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunHistIkeTunnelIndex": { "type": "integer", "description": "The index of the associated IPsec Phase-1 Tunnel\n (cikeTunIndex in the cikeTunnelTable).", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunHistLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecTunHistRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecTunHistKeyType": { "type": "string", "description": "The type of key used by the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:KeyType" }, "cipSecTunHistEncapMode": { "type": "string", "description": "The encapsulation mode used by the\n IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncapMode" }, "cipSecTunHistLifeSize": { "type": "integer", "description": "The negotiated LifeSize of the IPsec Phase-2 Tunnel in\n kilobytes.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunHistLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the IPsec Phase-2 Tunnel in\n seconds.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunHistStartTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n when the IPsec Phase-2 Tunnel was started.", "x-yang-type": "yang:timestamp" }, "cipSecTunHistActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-2 Tunnel has been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval" }, "cipSecTunHistTotalRefreshes": { "type": "integer", "description": "The total number of security association refreshes\n performed.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistTotalSas": { "type": "integer", "description": "The total number of security associations used\n during the\n life of the IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used by the inbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp" }, "cipSecTunHistInSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the inbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo" }, "cipSecTunHistInSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunHistInSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) \n security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunHistInSaDecompAlgo": { "type": "string", "description": "The decompression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo" }, "cipSecTunHistOutSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp" }, "cipSecTunHistOutSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo" }, "cipSecTunHistOutSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the outbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunHistOutSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) \n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunHistOutSaCompAlgo": { "type": "string", "description": "The compression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo" }, "cipSecTunHistInOctets": { "type": "integer", "description": "The total number of octets received by this IPsec\n Phase-2 Tunnel. This value is accumulated\n BEFORE determining whether or not the packet should \n be decompressed. See also cipSecTunInOctWraps for \n the number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistHcInOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n received by this IPsec Phase-2 Tunnel. This value is\n accumulated BEFORE determining whether or not \n the packet should be decompressed.", "minimum": 0 }, "cipSecTunHistInOctWraps": { "type": "integer", "description": "The number of times the octets received counter\n (cipSecTunInOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInDecompOctets": { "type": "integer", "description": "The total number of decompressed octets received by this\n IPsec Phase-2 Tunnel. This value is accumulated AFTER\n the packet is decompressed. If compression is not being\n used, this value will match the value of cipSecTunHistInOctets.\n See also cipSecTunInDecompOctWraps for the number of times\n this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistHcInDecompOctets": { "type": "integer", "description": "A high capacity count of the total number of decompressed\n octets received by this IPsec Phase-2 Tunnel. This value\n is accumulated AFTER the packet is decompressed. If\n compression is not being used, this value will match the\n value of cipSecTunHistHcInOctets.", "minimum": 0 }, "cipSecTunHistInDecompOctWraps": { "type": "integer", "description": "The number of times the decompressed octets\n received counter (cipSecTunInDecompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInPkts": { "type": "integer", "description": "The total number of packets received by this\n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n receive processing by this IPsec Phase-2 Tunnel. \n This count does NOT include packets\n dropped due to Anti-Replay processing.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInReplayDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n receive processing due to Anti-Replay processing \n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInAuths": { "type": "integer", "description": "The total number of inbound authentication's\n performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInAuthFails": { "type": "integer", "description": "The total number of inbound authentication's\n which ended in\n failure by this IPsec Phase-2 Tunnel .", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInDecrypts": { "type": "integer", "description": "The total number of inbound decryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInDecryptFails": { "type": "integer", "description": "The total number of inbound decryption's\n which ended in failure\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec\n Phase-2 Tunnel. This value is accumulated\n AFTER determining whether or not the \n packet should be\n compressed. See also cipSecTunOutOctWraps for the\n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistHcOutOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n sent by this IPsec Phase-2 Tunnel. This value \n is accumulated AFTER determining whether or not \n the packet should be\n compressed.", "minimum": 0 }, "cipSecTunHistOutOctWraps": { "type": "integer", "description": "The number of times the octets sent counter\n (cipSecTunOutOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutUncompOctets": { "type": "integer", "description": "The total number of uncompressed octets sent by this\n IPsec Phase-2 Tunnel. This value is accumulated BEFORE\n the packet is compressed. If compression is not being\n used, this value will match the value of \n cipSecTunHistOutOctets. See also \n cipSecTunOutDecompOctWraps for the number of times\n this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistHcOutUncompOctets": { "type": "integer", "description": "A high capacity count of the total\n number of uncompressed octets sent by this \n IPsec Phase-2 Tunnel. This value is accumulated \n BEFORE the packet is compressed. If compression\n is not being used, this value will match the value of\n cipSecTunHistHcOutOctets.", "minimum": 0 }, "cipSecTunHistOutUncompOctWraps": { "type": "integer", "description": "The number of times the uncompressed octets sent counter\n (cipSecTunOutUncompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutPkts": { "type": "integer", "description": "The total number of packets sent by this\n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutDropPkts": { "type": "integer", "description": "The total number of packets dropped\n during send processing\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutAuths": { "type": "integer", "description": "The total number of outbound authentication's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutAuthFails": { "type": "integer", "description": "The total number of outbound authentication's\n which ended in\n failure by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutEncrypts": { "type": "integer", "description": "The total number of outbound encryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutEncryptFails": { "type": "integer", "description": "The total number of outbound encryption's\n which ended in failure\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecTunnelHistEntry": [ { "cipSecTunHistIndex": 1, "cipSecTunHistTermReason": "192.168.1.1", "cipSecTunHistActiveIndex": 1, "cipSecTunHistIkeTunnelIndex": 1, "cipSecTunHistLocalAddr": "192.168.1.1", "cipSecTunHistRemoteAddr": "192.168.1.1", "cipSecTunHistKeyType": "192.168.1.1", "cipSecTunHistEncapMode": "192.168.1.1", "cipSecTunHistLifeSize": -2147483648, "cipSecTunHistLifeTime": -2147483648, "cipSecTunHistStartTime": "192.168.1.1", "cipSecTunHistActiveTime": "192.168.1.1", "cipSecTunHistTotalRefreshes": 0, "cipSecTunHistTotalSas": 0, "cipSecTunHistInSaDiffHellmanGrp": "192.168.1.1", "cipSecTunHistInSaEncryptAlgo": "192.168.1.1", "cipSecTunHistInSaAhAuthAlgo": "192.168.1.1", "cipSecTunHistInSaEspAuthAlgo": "192.168.1.1", "cipSecTunHistInSaDecompAlgo": "192.168.1.1", "cipSecTunHistOutSaDiffHellmanGrp": "192.168.1.1", "cipSecTunHistOutSaEncryptAlgo": "192.168.1.1", "cipSecTunHistOutSaAhAuthAlgo": "192.168.1.1", "cipSecTunHistOutSaEspAuthAlgo": "192.168.1.1", "cipSecTunHistOutSaCompAlgo": "192.168.1.1", "cipSecTunHistInOctets": 1234567890, "cipSecTunHistHcInOctets": 1234567890, "cipSecTunHistInOctWraps": 0, "cipSecTunHistInDecompOctets": 1234567890, "cipSecTunHistHcInDecompOctets": 1234567890, "cipSecTunHistInDecompOctWraps": 0, "cipSecTunHistInPkts": 0, "cipSecTunHistInDropPkts": 0, "cipSecTunHistInReplayDropPkts": 0, "cipSecTunHistInAuths": 0, "cipSecTunHistInAuthFails": 0, "cipSecTunHistInDecrypts": 0, "cipSecTunHistInDecryptFails": 0, "cipSecTunHistOutOctets": 1234567890, "cipSecTunHistHcOutOctets": 1234567890, "cipSecTunHistOutOctWraps": 0, "cipSecTunHistOutUncompOctets": 1234567890, "cipSecTunHistHcOutUncompOctets": 1234567890, "cipSecTunHistOutUncompOctWraps": 0, "cipSecTunHistOutPkts": 0, "cipSecTunHistOutDropPkts": 0, "cipSecTunHistOutAuths": 0, "cipSecTunHistOutAuthFails": 0, "cipSecTunHistOutEncrypts": 0, "cipSecTunHistOutEncryptFails": 0 } ] } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecTunnelHistEntry", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cipSecTunnelHistTable/cipSecTunnelHistEntry", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecTunnelHistTable/cipSecTunnelHistEntry={cipSecTunHistIndex}": { "get": { "summary": "Get cipSecTunnelHistEntry entry", "description": "Retrieve specific cipSecTunnelHistEntry entry by key from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "parameters": [ { "name": "cipSecTunHistIndex", "in": "path", "required": true, "schema": { "type": "string" }, "example": "1" }, { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "properties": { "cipSecTunHistIndex": { "type": "integer", "description": "The index of the IPsec Phase-2 Tunnel History Table.\n The value of the index is a number which \n begins at one and is incremented with each tunnel \n that ends. The value\n of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunHistTermReason": { "type": "string", "description": "The reason the IPsec Phase-2 Tunnel was terminated.\n Possible reasons include:\n 1 = other\n 2 = normal termination\n 3 = operator request\n 4 = peer delete request was received\n 5 = contact with peer was lost\n 6 = local failure occurred\n 7 = operator initiated check point request" }, "cipSecTunHistActiveIndex": { "type": "integer", "description": "The index of the previously active\n IPsec Phase-2 Tunnel.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunHistIkeTunnelIndex": { "type": "integer", "description": "The index of the associated IPsec Phase-1 Tunnel\n (cikeTunIndex in the cikeTunnelTable).", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunHistLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecTunHistRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecTunHistKeyType": { "type": "string", "description": "The type of key used by the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:KeyType" }, "cipSecTunHistEncapMode": { "type": "string", "description": "The encapsulation mode used by the\n IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncapMode" }, "cipSecTunHistLifeSize": { "type": "integer", "description": "The negotiated LifeSize of the IPsec Phase-2 Tunnel in\n kilobytes.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunHistLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the IPsec Phase-2 Tunnel in\n seconds.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunHistStartTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n when the IPsec Phase-2 Tunnel was started.", "x-yang-type": "yang:timestamp" }, "cipSecTunHistActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-2 Tunnel has been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval" }, "cipSecTunHistTotalRefreshes": { "type": "integer", "description": "The total number of security association refreshes\n performed.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistTotalSas": { "type": "integer", "description": "The total number of security associations used\n during the\n life of the IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used by the inbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp" }, "cipSecTunHistInSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the inbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo" }, "cipSecTunHistInSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunHistInSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) \n security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunHistInSaDecompAlgo": { "type": "string", "description": "The decompression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo" }, "cipSecTunHistOutSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp" }, "cipSecTunHistOutSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo" }, "cipSecTunHistOutSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the outbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunHistOutSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) \n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunHistOutSaCompAlgo": { "type": "string", "description": "The compression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo" }, "cipSecTunHistInOctets": { "type": "integer", "description": "The total number of octets received by this IPsec\n Phase-2 Tunnel. This value is accumulated\n BEFORE determining whether or not the packet should \n be decompressed. See also cipSecTunInOctWraps for \n the number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistHcInOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n received by this IPsec Phase-2 Tunnel. This value is\n accumulated BEFORE determining whether or not \n the packet should be decompressed.", "minimum": 0 }, "cipSecTunHistInOctWraps": { "type": "integer", "description": "The number of times the octets received counter\n (cipSecTunInOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInDecompOctets": { "type": "integer", "description": "The total number of decompressed octets received by this\n IPsec Phase-2 Tunnel. This value is accumulated AFTER\n the packet is decompressed. If compression is not being\n used, this value will match the value of cipSecTunHistInOctets.\n See also cipSecTunInDecompOctWraps for the number of times\n this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistHcInDecompOctets": { "type": "integer", "description": "A high capacity count of the total number of decompressed\n octets received by this IPsec Phase-2 Tunnel. This value\n is accumulated AFTER the packet is decompressed. If\n compression is not being used, this value will match the\n value of cipSecTunHistHcInOctets.", "minimum": 0 }, "cipSecTunHistInDecompOctWraps": { "type": "integer", "description": "The number of times the decompressed octets\n received counter (cipSecTunInDecompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInPkts": { "type": "integer", "description": "The total number of packets received by this\n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n receive processing by this IPsec Phase-2 Tunnel. \n This count does NOT include packets\n dropped due to Anti-Replay processing.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInReplayDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n receive processing due to Anti-Replay processing \n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInAuths": { "type": "integer", "description": "The total number of inbound authentication's\n performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInAuthFails": { "type": "integer", "description": "The total number of inbound authentication's\n which ended in\n failure by this IPsec Phase-2 Tunnel .", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInDecrypts": { "type": "integer", "description": "The total number of inbound decryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInDecryptFails": { "type": "integer", "description": "The total number of inbound decryption's\n which ended in failure\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec\n Phase-2 Tunnel. This value is accumulated\n AFTER determining whether or not the \n packet should be\n compressed. See also cipSecTunOutOctWraps for the\n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistHcOutOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n sent by this IPsec Phase-2 Tunnel. This value \n is accumulated AFTER determining whether or not \n the packet should be\n compressed.", "minimum": 0 }, "cipSecTunHistOutOctWraps": { "type": "integer", "description": "The number of times the octets sent counter\n (cipSecTunOutOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutUncompOctets": { "type": "integer", "description": "The total number of uncompressed octets sent by this\n IPsec Phase-2 Tunnel. This value is accumulated BEFORE\n the packet is compressed. If compression is not being\n used, this value will match the value of \n cipSecTunHistOutOctets. See also \n cipSecTunOutDecompOctWraps for the number of times\n this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistHcOutUncompOctets": { "type": "integer", "description": "A high capacity count of the total\n number of uncompressed octets sent by this \n IPsec Phase-2 Tunnel. This value is accumulated \n BEFORE the packet is compressed. If compression\n is not being used, this value will match the value of\n cipSecTunHistHcOutOctets.", "minimum": 0 }, "cipSecTunHistOutUncompOctWraps": { "type": "integer", "description": "The number of times the uncompressed octets sent counter\n (cipSecTunOutUncompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutPkts": { "type": "integer", "description": "The total number of packets sent by this\n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutDropPkts": { "type": "integer", "description": "The total number of packets dropped\n during send processing\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutAuths": { "type": "integer", "description": "The total number of outbound authentication's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutAuthFails": { "type": "integer", "description": "The total number of outbound authentication's\n which ended in\n failure by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutEncrypts": { "type": "integer", "description": "The total number of outbound encryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutEncryptFails": { "type": "integer", "description": "The total number of outbound encryption's\n which ended in failure\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecTunnelHistEntry": { "cipSecTunHistIndex": 1, "cipSecTunHistTermReason": "192.168.1.1", "cipSecTunHistActiveIndex": 1, "cipSecTunHistIkeTunnelIndex": 1, "cipSecTunHistLocalAddr": "192.168.1.1", "cipSecTunHistRemoteAddr": "192.168.1.1", "cipSecTunHistKeyType": "192.168.1.1", "cipSecTunHistEncapMode": "192.168.1.1", "cipSecTunHistLifeSize": -2147483648, "cipSecTunHistLifeTime": -2147483648, "cipSecTunHistStartTime": "192.168.1.1", "cipSecTunHistActiveTime": "192.168.1.1", "cipSecTunHistTotalRefreshes": 0, "cipSecTunHistTotalSas": 0, "cipSecTunHistInSaDiffHellmanGrp": "192.168.1.1", "cipSecTunHistInSaEncryptAlgo": "192.168.1.1", "cipSecTunHistInSaAhAuthAlgo": "192.168.1.1", "cipSecTunHistInSaEspAuthAlgo": "192.168.1.1", "cipSecTunHistInSaDecompAlgo": "192.168.1.1", "cipSecTunHistOutSaDiffHellmanGrp": "192.168.1.1", "cipSecTunHistOutSaEncryptAlgo": "192.168.1.1", "cipSecTunHistOutSaAhAuthAlgo": "192.168.1.1", "cipSecTunHistOutSaEspAuthAlgo": "192.168.1.1", "cipSecTunHistOutSaCompAlgo": "192.168.1.1", "cipSecTunHistInOctets": 1234567890, "cipSecTunHistHcInOctets": 1234567890, "cipSecTunHistInOctWraps": 0, "cipSecTunHistInDecompOctets": 1234567890, "cipSecTunHistHcInDecompOctets": 1234567890, "cipSecTunHistInDecompOctWraps": 0, "cipSecTunHistInPkts": 0, "cipSecTunHistInDropPkts": 0, "cipSecTunHistInReplayDropPkts": 0, "cipSecTunHistInAuths": 0, "cipSecTunHistInAuthFails": 0, "cipSecTunHistInDecrypts": 0, "cipSecTunHistInDecryptFails": 0, "cipSecTunHistOutOctets": 1234567890, "cipSecTunHistHcOutOctets": 1234567890, "cipSecTunHistOutOctWraps": 0, "cipSecTunHistOutUncompOctets": 1234567890, "cipSecTunHistHcOutUncompOctets": 1234567890, "cipSecTunHistOutUncompOctWraps": 0, "cipSecTunHistOutPkts": 0, "cipSecTunHistOutDropPkts": 0, "cipSecTunHistOutAuths": 0, "cipSecTunHistOutAuthFails": 0, "cipSecTunHistOutEncrypts": 0, "cipSecTunHistOutEncryptFails": 0 } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecTunnelHistEntry-2" }, "x-yang-path": "/cipSecTunnelHistTable/cipSecTunnelHistEntry={cipSecTunHistIndex}", "x-restconf-kind": "list-instance", "x-list-keys": [ "cipSecTunHistIndex" ] }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecEndPtHistTable": { "get": { "summary": "Get cipSecEndPtHistTable data", "description": "Retrieve cipSecEndPtHistTable operational data from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "description": "The IPsec Phase-2 Tunnel Endpoint History Table.\n This table is implemented as a \n sliding window in which only the\n last n entries are maintained. \n The maximum number of entries\n is specified by the cipSecHistTableSize object.", "properties": { "cipSecEndPtHistEntry": { "type": "array", "description": "Each entry contains the attributes associated with\n a previously active IPsec Phase-2 Tunnel Endpoint.", "items": { "type": "object", "properties": { "cipSecEndPtHistIndex": { "type": "integer", "description": "The number of the previously active\n Endpoint associated\n with a IPsec Phase-2 Tunnel Table. The value \n of this index is a number which begins at \n one and is incremented with each Endpoint \n associated with an IPsec Phase-2 Tunnel.\n The value of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtHistTunIndex": { "type": "integer", "description": "The index of the previously active IPsec\n Phase-2 Tunnel Table.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtHistActiveIndex": { "type": "integer", "description": "The index of the previously active Endpoint.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtHistLocalName": { "type": "string", "description": "The DNS name of the local Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cipSecEndPtHistLocalType": { "type": "string", "description": "The type of identity for the local Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType" }, "cipSecEndPtHistLocalAddr1": { "type": "string", "description": "The local Endpoint's first IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the local Endpoint type is IP address range, \n then this is the value of beginning IP address of \n the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtHistLocalAddr2": { "type": "string", "description": "The local Endpoint's second IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the local Endpoint type is IP address range, \n then this\n is the value of ending IP address of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtHistLocalProtocol": { "type": "integer", "description": "The protocol number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtHistLocalPort": { "type": "integer", "description": "The port number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtHistRemoteName": { "type": "string", "description": "The DNS name of the remote Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cipSecEndPtHistRemoteType": { "type": "string", "description": "The type of identity for the remote Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType" }, "cipSecEndPtHistRemoteAddr1": { "type": "string", "description": "The remote Endpoint's first IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this\n is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the remote Endpoint type is IP address range, \n then this\n is the value of beginning IP address of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtHistRemoteAddr2": { "type": "string", "description": "The remote Endpoint's second IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this\n is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the remote Endpoint type is IP address range, \n then this\n is the value of ending IP address of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtHistRemoteProtocol": { "type": "integer", "description": "The protocol number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtHistRemotePort": { "type": "integer", "description": "The port number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 } } } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecEndPtHistTable": { "cipSecEndPtHistEntry": [ { "cipSecEndPtHistIndex": 1, "cipSecEndPtHistTunIndex": 1, "cipSecEndPtHistActiveIndex": 1, "cipSecEndPtHistLocalName": "192.168.1.1", "cipSecEndPtHistLocalType": "192.168.1.1", "cipSecEndPtHistLocalAddr1": "192.168.1.1", "cipSecEndPtHistLocalAddr2": "192.168.1.1", "cipSecEndPtHistLocalProtocol": -2147483648, "cipSecEndPtHistLocalPort": -2147483648, "cipSecEndPtHistRemoteName": "192.168.1.1", "cipSecEndPtHistRemoteType": "192.168.1.1", "cipSecEndPtHistRemoteAddr1": "192.168.1.1", "cipSecEndPtHistRemoteAddr2": "192.168.1.1", "cipSecEndPtHistRemoteProtocol": -2147483648, "cipSecEndPtHistRemotePort": -2147483648 }, { "cipSecEndPtHistIndex": 2, "cipSecEndPtHistTunIndex": 2, "cipSecEndPtHistActiveIndex": 2, "cipSecEndPtHistLocalName": "192.168.1.1", "cipSecEndPtHistLocalType": "192.168.1.1", "cipSecEndPtHistLocalAddr1": "192.168.1.1", "cipSecEndPtHistLocalAddr2": "192.168.1.1", "cipSecEndPtHistLocalProtocol": -2147483648, "cipSecEndPtHistLocalPort": -2147483648, "cipSecEndPtHistRemoteName": "192.168.1.1", "cipSecEndPtHistRemoteType": "192.168.1.1", "cipSecEndPtHistRemoteAddr1": "192.168.1.1", "cipSecEndPtHistRemoteAddr2": "192.168.1.1", "cipSecEndPtHistRemoteProtocol": -2147483648, "cipSecEndPtHistRemotePort": -2147483648 }, { "cipSecEndPtHistIndex": 3, "cipSecEndPtHistTunIndex": 3, "cipSecEndPtHistActiveIndex": 3, "cipSecEndPtHistLocalName": "192.168.1.1", "cipSecEndPtHistLocalType": "192.168.1.1", "cipSecEndPtHistLocalAddr1": "192.168.1.1", "cipSecEndPtHistLocalAddr2": "192.168.1.1", "cipSecEndPtHistLocalProtocol": -2147483648, "cipSecEndPtHistLocalPort": -2147483648, "cipSecEndPtHistRemoteName": "192.168.1.1", "cipSecEndPtHistRemoteType": "192.168.1.1", "cipSecEndPtHistRemoteAddr1": "192.168.1.1", "cipSecEndPtHistRemoteAddr2": "192.168.1.1", "cipSecEndPtHistRemoteProtocol": -2147483648, "cipSecEndPtHistRemotePort": -2147483648 } ] } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecEndPtHistTable", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cipSecEndPtHistTable", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecEndPtHistTable/cipSecEndPtHistEntry": { "get": { "summary": "Get cipSecEndPtHistEntry list", "description": "Retrieve list of cipSecEndPtHistEntry entries from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "array", "description": "Each entry contains the attributes associated with\n a previously active IPsec Phase-2 Tunnel Endpoint.", "items": { "type": "object", "properties": { "cipSecEndPtHistIndex": { "type": "integer", "description": "The number of the previously active\n Endpoint associated\n with a IPsec Phase-2 Tunnel Table. The value \n of this index is a number which begins at \n one and is incremented with each Endpoint \n associated with an IPsec Phase-2 Tunnel.\n The value of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtHistTunIndex": { "type": "integer", "description": "The index of the previously active IPsec\n Phase-2 Tunnel Table.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtHistActiveIndex": { "type": "integer", "description": "The index of the previously active Endpoint.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtHistLocalName": { "type": "string", "description": "The DNS name of the local Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cipSecEndPtHistLocalType": { "type": "string", "description": "The type of identity for the local Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType" }, "cipSecEndPtHistLocalAddr1": { "type": "string", "description": "The local Endpoint's first IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the local Endpoint type is IP address range, \n then this is the value of beginning IP address of \n the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtHistLocalAddr2": { "type": "string", "description": "The local Endpoint's second IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the local Endpoint type is IP address range, \n then this\n is the value of ending IP address of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtHistLocalProtocol": { "type": "integer", "description": "The protocol number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtHistLocalPort": { "type": "integer", "description": "The port number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtHistRemoteName": { "type": "string", "description": "The DNS name of the remote Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cipSecEndPtHistRemoteType": { "type": "string", "description": "The type of identity for the remote Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType" }, "cipSecEndPtHistRemoteAddr1": { "type": "string", "description": "The remote Endpoint's first IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this\n is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the remote Endpoint type is IP address range, \n then this\n is the value of beginning IP address of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtHistRemoteAddr2": { "type": "string", "description": "The remote Endpoint's second IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this\n is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the remote Endpoint type is IP address range, \n then this\n is the value of ending IP address of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtHistRemoteProtocol": { "type": "integer", "description": "The protocol number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtHistRemotePort": { "type": "integer", "description": "The port number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecEndPtHistEntry": [ { "cipSecEndPtHistIndex": 1, "cipSecEndPtHistTunIndex": 1, "cipSecEndPtHistActiveIndex": 1, "cipSecEndPtHistLocalName": "192.168.1.1", "cipSecEndPtHistLocalType": "192.168.1.1", "cipSecEndPtHistLocalAddr1": "192.168.1.1", "cipSecEndPtHistLocalAddr2": "192.168.1.1", "cipSecEndPtHistLocalProtocol": -2147483648, "cipSecEndPtHistLocalPort": -2147483648, "cipSecEndPtHistRemoteName": "192.168.1.1", "cipSecEndPtHistRemoteType": "192.168.1.1", "cipSecEndPtHistRemoteAddr1": "192.168.1.1", "cipSecEndPtHistRemoteAddr2": "192.168.1.1", "cipSecEndPtHistRemoteProtocol": -2147483648, "cipSecEndPtHistRemotePort": -2147483648 } ] } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecEndPtHistEntry", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cipSecEndPtHistTable/cipSecEndPtHistEntry", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecEndPtHistTable/cipSecEndPtHistEntry={cipSecEndPtHistIndex}": { "get": { "summary": "Get cipSecEndPtHistEntry entry", "description": "Retrieve specific cipSecEndPtHistEntry entry by key from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "parameters": [ { "name": "cipSecEndPtHistIndex", "in": "path", "required": true, "schema": { "type": "string" }, "example": "1" }, { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "properties": { "cipSecEndPtHistIndex": { "type": "integer", "description": "The number of the previously active\n Endpoint associated\n with a IPsec Phase-2 Tunnel Table. The value \n of this index is a number which begins at \n one and is incremented with each Endpoint \n associated with an IPsec Phase-2 Tunnel.\n The value of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtHistTunIndex": { "type": "integer", "description": "The index of the previously active IPsec\n Phase-2 Tunnel Table.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtHistActiveIndex": { "type": "integer", "description": "The index of the previously active Endpoint.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtHistLocalName": { "type": "string", "description": "The DNS name of the local Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cipSecEndPtHistLocalType": { "type": "string", "description": "The type of identity for the local Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType" }, "cipSecEndPtHistLocalAddr1": { "type": "string", "description": "The local Endpoint's first IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the local Endpoint type is IP address range, \n then this is the value of beginning IP address of \n the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtHistLocalAddr2": { "type": "string", "description": "The local Endpoint's second IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the local Endpoint type is IP address range, \n then this\n is the value of ending IP address of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtHistLocalProtocol": { "type": "integer", "description": "The protocol number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtHistLocalPort": { "type": "integer", "description": "The port number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtHistRemoteName": { "type": "string", "description": "The DNS name of the remote Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cipSecEndPtHistRemoteType": { "type": "string", "description": "The type of identity for the remote Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType" }, "cipSecEndPtHistRemoteAddr1": { "type": "string", "description": "The remote Endpoint's first IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this\n is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the remote Endpoint type is IP address range, \n then this\n is the value of beginning IP address of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtHistRemoteAddr2": { "type": "string", "description": "The remote Endpoint's second IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this\n is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the remote Endpoint type is IP address range, \n then this\n is the value of ending IP address of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtHistRemoteProtocol": { "type": "integer", "description": "The protocol number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtHistRemotePort": { "type": "integer", "description": "The port number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecEndPtHistEntry": { "cipSecEndPtHistIndex": 1, "cipSecEndPtHistTunIndex": 1, "cipSecEndPtHistActiveIndex": 1, "cipSecEndPtHistLocalName": "192.168.1.1", "cipSecEndPtHistLocalType": "192.168.1.1", "cipSecEndPtHistLocalAddr1": "192.168.1.1", "cipSecEndPtHistLocalAddr2": "192.168.1.1", "cipSecEndPtHistLocalProtocol": -2147483648, "cipSecEndPtHistLocalPort": -2147483648, "cipSecEndPtHistRemoteName": "192.168.1.1", "cipSecEndPtHistRemoteType": "192.168.1.1", "cipSecEndPtHistRemoteAddr1": "192.168.1.1", "cipSecEndPtHistRemoteAddr2": "192.168.1.1", "cipSecEndPtHistRemoteProtocol": -2147483648, "cipSecEndPtHistRemotePort": -2147483648 } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecEndPtHistEntry-2" }, "x-yang-path": "/cipSecEndPtHistTable/cipSecEndPtHistEntry={cipSecEndPtHistIndex}", "x-restconf-kind": "list-instance", "x-list-keys": [ "cipSecEndPtHistIndex" ] }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikeFailTable": { "get": { "summary": "Get cikeFailTable data", "description": "Retrieve cikeFailTable operational data from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "description": "The IPsec Phase-1 Failure Table.\n This table is implemented as a sliding \n window in which only the last n entries are \n maintained. The maximum number of entries\n is specified by the cipSecFailTableSize object.", "properties": { "cikeFailEntry": { "type": "array", "description": "Each entry contains the attributes associated\n with\n an IPsec Phase-1 failure.", "items": { "type": "object", "properties": { "cikeFailIndex": { "type": "integer", "description": "The IPsec Phase-1 Failure Table index.\n The value of the index is a number which \n begins at one and is incremented with each \n IPsec Phase-1 failure. The value\n of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeFailReason": { "type": "string", "description": "The reason for the failure. Possible reasons include:\n 1 = other\n 2 = peer delete request was received\n 3 = contact with peer was lost\n 4 = local failure occurred\n 5 = authentication failure\n 6 = hash validation failure\n 7 = encryption failure\n 8 = internal error occurred\n 9 = system capacity failure\n 10 = proposal failure\n 11 = peer's certificate is unavailable\n 12 = peer's certificate was found invalid\n 13 = local certificate expired\n 14 = certificate revoke list (crl) failure\n 15 = peer encoding error\n 16 = non-existent security association\n 17 = operator requested termination." }, "cikeFailTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n at the time of the failure.", "x-yang-type": "yang:timestamp" }, "cikeFailLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikeFailLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeFailRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote\n peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikeFailRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeFailLocalAddr": { "type": "string", "description": "The IP address of the local peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikeFailRemoteAddr": { "type": "string", "description": "The IP address of the remote peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" } } } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikeFailTable": { "cikeFailEntry": [ { "cikeFailIndex": 1, "cikeFailReason": "example-string", "cikeFailTime": "example-string", "cikeFailLocalType": "ethernetCsmacd(6)", "cikeFailLocalValue": "example-string", "cikeFailRemoteType": "ethernetCsmacd(6)", "cikeFailRemoteValue": "example-string", "cikeFailLocalAddr": "192.168.1.1", "cikeFailRemoteAddr": "192.168.1.1" }, { "cikeFailIndex": 2, "cikeFailReason": "example-string", "cikeFailTime": "example-string", "cikeFailLocalType": "ethernetCsmacd(6)", "cikeFailLocalValue": "example-string", "cikeFailRemoteType": "ethernetCsmacd(6)", "cikeFailRemoteValue": "example-string", "cikeFailLocalAddr": "192.168.1.1", "cikeFailRemoteAddr": "192.168.1.1" }, { "cikeFailIndex": 3, "cikeFailReason": "example-string", "cikeFailTime": "example-string", "cikeFailLocalType": "ethernetCsmacd(6)", "cikeFailLocalValue": "example-string", "cikeFailRemoteType": "ethernetCsmacd(6)", "cikeFailRemoteValue": "example-string", "cikeFailLocalAddr": "192.168.1.1", "cikeFailRemoteAddr": "192.168.1.1" } ] } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikeFailTable", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cikeFailTable", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikeFailTable/cikeFailEntry": { "get": { "summary": "Get cikeFailEntry list", "description": "Retrieve list of cikeFailEntry entries from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "array", "description": "Each entry contains the attributes associated\n with\n an IPsec Phase-1 failure.", "items": { "type": "object", "properties": { "cikeFailIndex": { "type": "integer", "description": "The IPsec Phase-1 Failure Table index.\n The value of the index is a number which \n begins at one and is incremented with each \n IPsec Phase-1 failure. The value\n of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeFailReason": { "type": "string", "description": "The reason for the failure. Possible reasons include:\n 1 = other\n 2 = peer delete request was received\n 3 = contact with peer was lost\n 4 = local failure occurred\n 5 = authentication failure\n 6 = hash validation failure\n 7 = encryption failure\n 8 = internal error occurred\n 9 = system capacity failure\n 10 = proposal failure\n 11 = peer's certificate is unavailable\n 12 = peer's certificate was found invalid\n 13 = local certificate expired\n 14 = certificate revoke list (crl) failure\n 15 = peer encoding error\n 16 = non-existent security association\n 17 = operator requested termination." }, "cikeFailTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n at the time of the failure.", "x-yang-type": "yang:timestamp" }, "cikeFailLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikeFailLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeFailRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote\n peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikeFailRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeFailLocalAddr": { "type": "string", "description": "The IP address of the local peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikeFailRemoteAddr": { "type": "string", "description": "The IP address of the remote peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikeFailEntry": [ { "cikeFailIndex": 1, "cikeFailReason": "example-string", "cikeFailTime": "example-string", "cikeFailLocalType": "ethernetCsmacd(6)", "cikeFailLocalValue": "example-string", "cikeFailRemoteType": "ethernetCsmacd(6)", "cikeFailRemoteValue": "example-string", "cikeFailLocalAddr": "192.168.1.1", "cikeFailRemoteAddr": "192.168.1.1" } ] } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikeFailEntry", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cikeFailTable/cikeFailEntry", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikeFailTable/cikeFailEntry={cikeFailIndex}": { "get": { "summary": "Get cikeFailEntry entry", "description": "Retrieve specific cikeFailEntry entry by key from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "parameters": [ { "name": "cikeFailIndex", "in": "path", "required": true, "schema": { "type": "string" }, "example": "1" }, { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "properties": { "cikeFailIndex": { "type": "integer", "description": "The IPsec Phase-1 Failure Table index.\n The value of the index is a number which \n begins at one and is incremented with each \n IPsec Phase-1 failure. The value\n of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeFailReason": { "type": "string", "description": "The reason for the failure. Possible reasons include:\n 1 = other\n 2 = peer delete request was received\n 3 = contact with peer was lost\n 4 = local failure occurred\n 5 = authentication failure\n 6 = hash validation failure\n 7 = encryption failure\n 8 = internal error occurred\n 9 = system capacity failure\n 10 = proposal failure\n 11 = peer's certificate is unavailable\n 12 = peer's certificate was found invalid\n 13 = local certificate expired\n 14 = certificate revoke list (crl) failure\n 15 = peer encoding error\n 16 = non-existent security association\n 17 = operator requested termination." }, "cikeFailTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n at the time of the failure.", "x-yang-type": "yang:timestamp" }, "cikeFailLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikeFailLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeFailRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote\n peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikeFailRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeFailLocalAddr": { "type": "string", "description": "The IP address of the local peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikeFailRemoteAddr": { "type": "string", "description": "The IP address of the remote peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikeFailEntry": { "cikeFailIndex": 1, "cikeFailReason": "example-string", "cikeFailTime": "example-string", "cikeFailLocalType": "ethernetCsmacd(6)", "cikeFailLocalValue": "example-string", "cikeFailRemoteType": "ethernetCsmacd(6)", "cikeFailRemoteValue": "example-string", "cikeFailLocalAddr": "192.168.1.1", "cikeFailRemoteAddr": "192.168.1.1" } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikeFailEntry-2" }, "x-yang-path": "/cikeFailTable/cikeFailEntry={cikeFailIndex}", "x-restconf-kind": "list-instance", "x-list-keys": [ "cikeFailIndex" ] }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecFailTable": { "get": { "summary": "Get cipSecFailTable data", "description": "Retrieve cipSecFailTable operational data from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "description": "The IPsec Phase-2 Failure Table.\n This table is implemented as a sliding window \n in which only the last n entries are maintained. \n The maximum number of entries\n is specified by the cipSecFailTableSize object.", "properties": { "cipSecFailEntry": { "type": "array", "description": "Each entry contains the attributes associated with\n an IPsec Phase-1 failure.", "items": { "type": "object", "properties": { "cipSecFailIndex": { "type": "integer", "description": "The IPsec Phase-2 Failure Table index.\n The value of the index is a number which \n begins at one and is incremented with each \n IPsec Phase-1 failure. The value\n of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecFailReason": { "type": "string", "description": "The reason for the failure. Possible reasons\n include:\n 1 = other\n 2 = internal error occurred\n 3 = peer encoding error\n 4 = proposal failure\n 5 = protocol use failure\n 6 = non-existent security association\n 7 = decryption failure\n 8 = encryption failure\n 9 = inbound authentication failure\n 10 = outbound authentication failure\n 11 = compression failure\n 12 = system capacity failure\n 13 = peer delete request was received\n 14 = contact with peer was lost\n 15 = sequence number rolled over\n 16 = operator requested termination." }, "cipSecFailTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n at the time of the failure.", "x-yang-type": "yang:timestamp" }, "cipSecFailTunnelIndex": { "type": "integer", "description": "The Phase-2 Tunnel index (cipSecTunIndex).", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecFailSaSpi": { "type": "integer", "description": "The security association SPI value.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecFailPktSrcAddr": { "type": "string", "description": "The packet's source IP address.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecFailPktDstAddr": { "type": "string", "description": "The packet's destination IP address.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" } } } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecFailTable": { "cipSecFailEntry": [ { "cipSecFailIndex": 1, "cipSecFailReason": "192.168.1.1", "cipSecFailTime": "192.168.1.1", "cipSecFailTunnelIndex": 1, "cipSecFailSaSpi": -2147483648, "cipSecFailPktSrcAddr": "192.168.1.1", "cipSecFailPktDstAddr": "192.168.1.1" }, { "cipSecFailIndex": 2, "cipSecFailReason": "192.168.1.1", "cipSecFailTime": "192.168.1.1", "cipSecFailTunnelIndex": 2, "cipSecFailSaSpi": -2147483648, "cipSecFailPktSrcAddr": "192.168.1.1", "cipSecFailPktDstAddr": "192.168.1.1" }, { "cipSecFailIndex": 3, "cipSecFailReason": "192.168.1.1", "cipSecFailTime": "192.168.1.1", "cipSecFailTunnelIndex": 3, "cipSecFailSaSpi": -2147483648, "cipSecFailPktSrcAddr": "192.168.1.1", "cipSecFailPktDstAddr": "192.168.1.1" } ] } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecFailTable", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cipSecFailTable", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecFailTable/cipSecFailEntry": { "get": { "summary": "Get cipSecFailEntry list", "description": "Retrieve list of cipSecFailEntry entries from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "array", "description": "Each entry contains the attributes associated with\n an IPsec Phase-1 failure.", "items": { "type": "object", "properties": { "cipSecFailIndex": { "type": "integer", "description": "The IPsec Phase-2 Failure Table index.\n The value of the index is a number which \n begins at one and is incremented with each \n IPsec Phase-1 failure. The value\n of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecFailReason": { "type": "string", "description": "The reason for the failure. Possible reasons\n include:\n 1 = other\n 2 = internal error occurred\n 3 = peer encoding error\n 4 = proposal failure\n 5 = protocol use failure\n 6 = non-existent security association\n 7 = decryption failure\n 8 = encryption failure\n 9 = inbound authentication failure\n 10 = outbound authentication failure\n 11 = compression failure\n 12 = system capacity failure\n 13 = peer delete request was received\n 14 = contact with peer was lost\n 15 = sequence number rolled over\n 16 = operator requested termination." }, "cipSecFailTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n at the time of the failure.", "x-yang-type": "yang:timestamp" }, "cipSecFailTunnelIndex": { "type": "integer", "description": "The Phase-2 Tunnel index (cipSecTunIndex).", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecFailSaSpi": { "type": "integer", "description": "The security association SPI value.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecFailPktSrcAddr": { "type": "string", "description": "The packet's source IP address.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecFailPktDstAddr": { "type": "string", "description": "The packet's destination IP address.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecFailEntry": [ { "cipSecFailIndex": 1, "cipSecFailReason": "192.168.1.1", "cipSecFailTime": "192.168.1.1", "cipSecFailTunnelIndex": 1, "cipSecFailSaSpi": -2147483648, "cipSecFailPktSrcAddr": "192.168.1.1", "cipSecFailPktDstAddr": "192.168.1.1" } ] } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecFailEntry", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cipSecFailTable/cipSecFailEntry", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecFailTable/cipSecFailEntry={cipSecFailIndex}": { "get": { "summary": "Get cipSecFailEntry entry", "description": "Retrieve specific cipSecFailEntry entry by key from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "parameters": [ { "name": "cipSecFailIndex", "in": "path", "required": true, "schema": { "type": "string" }, "example": "1" }, { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "properties": { "cipSecFailIndex": { "type": "integer", "description": "The IPsec Phase-2 Failure Table index.\n The value of the index is a number which \n begins at one and is incremented with each \n IPsec Phase-1 failure. The value\n of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecFailReason": { "type": "string", "description": "The reason for the failure. Possible reasons\n include:\n 1 = other\n 2 = internal error occurred\n 3 = peer encoding error\n 4 = proposal failure\n 5 = protocol use failure\n 6 = non-existent security association\n 7 = decryption failure\n 8 = encryption failure\n 9 = inbound authentication failure\n 10 = outbound authentication failure\n 11 = compression failure\n 12 = system capacity failure\n 13 = peer delete request was received\n 14 = contact with peer was lost\n 15 = sequence number rolled over\n 16 = operator requested termination." }, "cipSecFailTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n at the time of the failure.", "x-yang-type": "yang:timestamp" }, "cipSecFailTunnelIndex": { "type": "integer", "description": "The Phase-2 Tunnel index (cipSecTunIndex).", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecFailSaSpi": { "type": "integer", "description": "The security association SPI value.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecFailPktSrcAddr": { "type": "string", "description": "The packet's source IP address.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecFailPktDstAddr": { "type": "string", "description": "The packet's destination IP address.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecFailEntry": { "cipSecFailIndex": 1, "cipSecFailReason": "192.168.1.1", "cipSecFailTime": "192.168.1.1", "cipSecFailTunnelIndex": 1, "cipSecFailSaSpi": -2147483648, "cipSecFailPktSrcAddr": "192.168.1.1", "cipSecFailPktDstAddr": "192.168.1.1" } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecFailEntry-2" }, "x-yang-path": "/cipSecFailTable/cipSecFailEntry={cipSecFailIndex}", "x-restconf-kind": "list-instance", "x-list-keys": [ "cipSecFailIndex" ] }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikePeerEntry": { "get": { "summary": "Get cikePeerEntry list", "description": "Retrieve list of cikePeerEntry entries from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "array", "description": "Each entry contains the attributes associated\n with an IPsec Phase-1 IKE peer association.", "items": { "type": "object", "properties": { "cikePeerLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikePeerLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikePeerRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikePeerRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikePeerIntIndex": { "type": "integer", "description": "The internal index of the local-remote\n peer association. This internal index is used \n to uniquely identify multiple associations between \n the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647 }, "cikePeerLocalAddr": { "type": "string", "description": "The IP address of the local peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikePeerRemoteAddr": { "type": "string", "description": "The IP address of the remote peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikePeerActiveTime": { "type": "string", "description": "The length of time that the peer association has\n existed in hundredths of a second.", "x-yang-type": "snmpv2-tc:TimeInterval" }, "cikePeerActiveTunnelIndex": { "type": "integer", "description": "The index of the active IPsec Phase-1 IKE Tunnel\n (cikeTunIndex in the cikeTunnelTable) for this peer\n association. If an IPsec Phase-1 IKE Tunnel is\n not currently active, then the value of this\n object will be zero.", "minimum": -2147483648, "maximum": 2147483647 } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikePeerEntry": [ { "cikePeerLocalType": "ethernetCsmacd(6)", "cikePeerLocalValue": "example-string", "cikePeerRemoteType": "ethernetCsmacd(6)", "cikePeerRemoteValue": "example-string", "cikePeerIntIndex": 1, "cikePeerLocalAddr": "192.168.1.1", "cikePeerRemoteAddr": "192.168.1.1", "cikePeerActiveTime": "example-string", "cikePeerActiveTunnelIndex": 1 } ] } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikePeerEntry-3", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cikePeerEntry", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikeTunnelEntry": { "get": { "summary": "Get cikeTunnelEntry list", "description": "Retrieve list of cikeTunnelEntry entries from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "array", "description": "Each entry contains the attributes associated with\n an active IPsec Phase-1 IKE Tunnel.", "items": { "type": "object", "properties": { "cikeTunIndex": { "type": "integer", "description": "The index of the IPsec Phase-1 IKE Tunnel Table.\n The value of the index is a number which begins \n at one and is incremented with each tunnel that \n is created. The value of this object will \n wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunLocalType": { "type": "string", "description": "The type of local peer identity. The local\n peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikeTunLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikeTunLocalName": { "type": "string", "description": "The DNS name of the local IP address for\n the IPsec Phase-1 IKE Tunnel. If the DNS \n name associated with the local tunnel endpoint \n is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunRemoteType": { "type": "string", "description": "The type of remote peer identity.\n The remote peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikeTunRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then \n this is the host name used to identify the \n remote peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikeTunRemoteName": { "type": "string", "description": "The DNS name of the remote IP address of IPsec Phase-1\n IKE Tunnel. If the DNS name associated with the remote\n tunnel endpoint is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunNegoMode": { "type": "string", "description": "The negotiation mode of the IPsec Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeNegoMode" }, "cikeTunDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp" }, "cikeTunEncryptAlgo": { "type": "string", "description": "The encryption algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo" }, "cikeTunHashAlgo": { "type": "string", "description": "The hash algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeHashAlgo" }, "cikeTunAuthMethod": { "type": "string", "description": "The authentication method used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeAuthMethod" }, "cikeTunLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel\n in seconds.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-1 IKE tunnel has been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval" }, "cikeTunSaRefreshThreshold": { "type": "integer", "description": "The security association refresh threshold in seconds.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunTotalRefreshes": { "type": "integer", "description": "The total number of security associations\n refreshes performed.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInOctets": { "type": "integer", "description": "The total number of octets received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInPkts": { "type": "integer", "description": "The total number of packets received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInDropPkts": { "type": "integer", "description": "The total number of packets dropped\n by this IPsec Phase-1 IKE Tunnel during \n receive processing.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInNotifys": { "type": "integer", "description": "The total number of notifys received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received and found to be invalid \n by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n received and rejected by this IPsec Phase-1 \n Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2\n security association delete requests received \n by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutPkts": { "type": "integer", "description": "The total number of packets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutDropPkts": { "type": "integer", "description": "The total number of packets dropped by this\n IPsec Phase-1 IKE Tunnel during send processing.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutNotifys": { "type": "integer", "description": "The total number of notifys sent by this\n IPsec Phase-1 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n found to be invalid by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n rejected by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 security association\n delete requests sent by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunStatus": { "type": "string", "description": "The status of the MIB table row.\n \n This object can be used to bring the tunnel down \n by setting value of this object to destroy(2).\n \n This object cannot be used to create \n a MIB table row.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TunnelStatus" } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikeTunnelEntry": [ { "cikeTunIndex": 1, "cikeTunLocalType": "ethernetCsmacd(6)", "cikeTunLocalValue": "example-string", "cikeTunLocalAddr": "192.168.1.1", "cikeTunLocalName": "interface-1", "cikeTunRemoteType": "ethernetCsmacd(6)", "cikeTunRemoteValue": "example-string", "cikeTunRemoteAddr": "192.168.1.1", "cikeTunRemoteName": "interface-1", "cikeTunNegoMode": "example-string", "cikeTunDiffHellmanGrp": "example-string", "cikeTunEncryptAlgo": "example-string", "cikeTunHashAlgo": "example-string", "cikeTunAuthMethod": "example-string", "cikeTunLifeTime": -2147483648, "cikeTunActiveTime": "example-string", "cikeTunSaRefreshThreshold": -2147483648, "cikeTunTotalRefreshes": 0, "cikeTunInOctets": 1234567890, "cikeTunInPkts": 0, "cikeTunInDropPkts": 0, "cikeTunInNotifys": 0, "cikeTunInP2Exchgs": 0, "cikeTunInP2ExchgInvalids": 0, "cikeTunInP2ExchgRejects": 0, "cikeTunInP2SaDelRequests": 0, "cikeTunOutOctets": 1234567890, "cikeTunOutPkts": 0, "cikeTunOutDropPkts": 0, "cikeTunOutNotifys": 0, "cikeTunOutP2Exchgs": 0, "cikeTunOutP2ExchgInvalids": 0, "cikeTunOutP2ExchgRejects": 0, "cikeTunOutP2SaDelRequests": 0, "cikeTunStatus": "up(1)" } ] } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikeTunnelEntry-3", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cikeTunnelEntry", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikeTunnelEntry={cikeTunIndex}": { "get": { "summary": "Get cikeTunnelEntry entry", "description": "Retrieve specific cikeTunnelEntry entry by key from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "parameters": [ { "name": "cikeTunIndex", "in": "path", "required": true, "schema": { "type": "string" }, "example": "1" }, { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "properties": { "cikeTunIndex": { "type": "integer", "description": "The index of the IPsec Phase-1 IKE Tunnel Table.\n The value of the index is a number which begins \n at one and is incremented with each tunnel that \n is created. The value of this object will \n wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunLocalType": { "type": "string", "description": "The type of local peer identity. The local\n peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikeTunLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikeTunLocalName": { "type": "string", "description": "The DNS name of the local IP address for\n the IPsec Phase-1 IKE Tunnel. If the DNS \n name associated with the local tunnel endpoint \n is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunRemoteType": { "type": "string", "description": "The type of remote peer identity.\n The remote peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikeTunRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then \n this is the host name used to identify the \n remote peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikeTunRemoteName": { "type": "string", "description": "The DNS name of the remote IP address of IPsec Phase-1\n IKE Tunnel. If the DNS name associated with the remote\n tunnel endpoint is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunNegoMode": { "type": "string", "description": "The negotiation mode of the IPsec Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeNegoMode" }, "cikeTunDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp" }, "cikeTunEncryptAlgo": { "type": "string", "description": "The encryption algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo" }, "cikeTunHashAlgo": { "type": "string", "description": "The hash algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeHashAlgo" }, "cikeTunAuthMethod": { "type": "string", "description": "The authentication method used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeAuthMethod" }, "cikeTunLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel\n in seconds.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-1 IKE tunnel has been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval" }, "cikeTunSaRefreshThreshold": { "type": "integer", "description": "The security association refresh threshold in seconds.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunTotalRefreshes": { "type": "integer", "description": "The total number of security associations\n refreshes performed.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInOctets": { "type": "integer", "description": "The total number of octets received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInPkts": { "type": "integer", "description": "The total number of packets received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInDropPkts": { "type": "integer", "description": "The total number of packets dropped\n by this IPsec Phase-1 IKE Tunnel during \n receive processing.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInNotifys": { "type": "integer", "description": "The total number of notifys received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received and found to be invalid \n by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n received and rejected by this IPsec Phase-1 \n Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunInP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2\n security association delete requests received \n by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutPkts": { "type": "integer", "description": "The total number of packets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutDropPkts": { "type": "integer", "description": "The total number of packets dropped by this\n IPsec Phase-1 IKE Tunnel during send processing.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutNotifys": { "type": "integer", "description": "The total number of notifys sent by this\n IPsec Phase-1 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n found to be invalid by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n rejected by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunOutP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 security association\n delete requests sent by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunStatus": { "type": "string", "description": "The status of the MIB table row.\n \n This object can be used to bring the tunnel down \n by setting value of this object to destroy(2).\n \n This object cannot be used to create \n a MIB table row.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TunnelStatus" } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikeTunnelEntry": { "cikeTunIndex": 1, "cikeTunLocalType": "ethernetCsmacd(6)", "cikeTunLocalValue": "example-string", "cikeTunLocalAddr": "192.168.1.1", "cikeTunLocalName": "interface-1", "cikeTunRemoteType": "ethernetCsmacd(6)", "cikeTunRemoteValue": "example-string", "cikeTunRemoteAddr": "192.168.1.1", "cikeTunRemoteName": "interface-1", "cikeTunNegoMode": "example-string", "cikeTunDiffHellmanGrp": "example-string", "cikeTunEncryptAlgo": "example-string", "cikeTunHashAlgo": "example-string", "cikeTunAuthMethod": "example-string", "cikeTunLifeTime": -2147483648, "cikeTunActiveTime": "example-string", "cikeTunSaRefreshThreshold": -2147483648, "cikeTunTotalRefreshes": 0, "cikeTunInOctets": 1234567890, "cikeTunInPkts": 0, "cikeTunInDropPkts": 0, "cikeTunInNotifys": 0, "cikeTunInP2Exchgs": 0, "cikeTunInP2ExchgInvalids": 0, "cikeTunInP2ExchgRejects": 0, "cikeTunInP2SaDelRequests": 0, "cikeTunOutOctets": 1234567890, "cikeTunOutPkts": 0, "cikeTunOutDropPkts": 0, "cikeTunOutNotifys": 0, "cikeTunOutP2Exchgs": 0, "cikeTunOutP2ExchgInvalids": 0, "cikeTunOutP2ExchgRejects": 0, "cikeTunOutP2SaDelRequests": 0, "cikeTunStatus": "up(1)" } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikeTunnelEntry-4" }, "x-yang-path": "/cikeTunnelEntry={cikeTunIndex}", "x-restconf-kind": "list-instance", "x-list-keys": [ "cikeTunIndex" ] }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikePeerCorrEntry": { "get": { "summary": "Get cikePeerCorrEntry list", "description": "Retrieve list of cikePeerCorrEntry entries from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "array", "description": "Each entry contains the attributes of an\n IPsec Phase-1 IKE Peer Association to IPsec\n Phase-2 Tunnel Correlation.", "items": { "type": "object", "properties": { "cikePeerCorrLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikePeerCorrLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikePeerCorrRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikePeerCorrRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikePeerCorrIntIndex": { "type": "integer", "description": "The internal index of the local-remote\n peer association. This internal index is \n used to uniquely identify multiple associations \n between the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647 }, "cikePeerCorrSeqNum": { "type": "integer", "description": "The sequence number of the local-remote\n peer association. This sequence number is \n used to uniquely identify multiple instances \n of an unique association between\n the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647 }, "cikePeerCorrIpSecTunIndex": { "type": "integer", "description": "The index of the active IPsec Phase-2 Tunnel\n (cipSecTunIndex in the cipSecTunnelTable) for this\n IPsec Phase-1 IKE Peer Association.", "minimum": -2147483648, "maximum": 2147483647 } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikePeerCorrEntry": [ { "cikePeerCorrLocalType": "ethernetCsmacd(6)", "cikePeerCorrLocalValue": "example-string", "cikePeerCorrRemoteType": "ethernetCsmacd(6)", "cikePeerCorrRemoteValue": "example-string", "cikePeerCorrIntIndex": 1, "cikePeerCorrSeqNum": -2147483648, "cikePeerCorrIpSecTunIndex": 1 } ] } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikePeerCorrEntry-3", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cikePeerCorrEntry", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikePhase1GWStatsEntry": { "get": { "summary": "Get cikePhase1GWStatsEntry list", "description": "Retrieve list of cikePhase1GWStatsEntry entries from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "array", "description": "Each entry contains the attributes of an Phase-1 IKE stats\n information for the related gateway.\n \n There is only one entry for each gateway. The entry \n is created when a gateway up and cannot be deleted.", "items": { "type": "object", "properties": { "cmgwIndex": { "type": "string", "description": "cmgwIndex", "x-yang-type": "leafref" }, "cikePhase1GWActiveTunnels": { "type": "integer", "description": "The number of currently active IPsec\n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWPreviousTunnels": { "type": "integer", "description": "The total number of previously active\n IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInOctets": { "type": "integer", "description": "The total number of octets received by all currently\n and previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInPkts": { "type": "integer", "description": "The total number of packets received by all\n currently and previously active IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInDropPkts": { "type": "integer", "description": "The total number of packets which were\n dropped during receive processing by all \n currently and previously\n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInNotifys": { "type": "integer", "description": "The total number of notifys received by\n all currently and previously active IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n received by all currently and previously \n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were received and found to be invalid \n by all currently and previously active IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were received and rejected by all \n currently and previously active IPsec Phase-1 \n IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 'Security\n Association' delete requests received by all \n currently and previously active and IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutOctets": { "type": "integer", "description": "The total number of octets sent by all currently\n and previously active and IPsec Phase-1 \n IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutPkts": { "type": "integer", "description": "The total number of packets sent by all currently\n and previously active and IPsec Phase-1 \n Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutDropPkts": { "type": "integer", "description": "The total number of packets which were dropped\n during send processing by all currently \n and previously\n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutNotifys": { "type": "integer", "description": "The total number of notifys sent by all currently\n and previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were sent by all currently and previously \n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were sent and found to be invalid by \n all currently and previously active IPsec Phase-1 \n Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were sent and rejected by all currently and\n previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 SA\n delete requests sent by all currently and \n previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInitTunnels": { "type": "integer", "description": "The total number of IPsec Phase-1 IKE\n Tunnels which were locally initiated.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInitTunnelFails": { "type": "integer", "description": "The total number of IPsec Phase-1 IKE Tunnels\n which were locally initiated and failed to activate.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWRespTunnelFails": { "type": "integer", "description": "The total number of IPsec Phase-1 IKE Tunnels\n which were remotely initiated and failed to activate.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWSysCapFails": { "type": "integer", "description": "The total number of system capacity failures\n which occurred during processing of all current \n and previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWAuthFails": { "type": "integer", "description": "The total number of authentications which ended\n in failure by all current and previous IPsec Phase-1\n IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWDecryptFails": { "type": "integer", "description": "The total number of decryptions which ended\n in failure by all current and previous IPsec Phase-1\n IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWHashValidFails": { "type": "integer", "description": "The total number of hash validations which ended\n in failure by all current and previous IPsec Phase-1\n IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWNoSaFails": { "type": "integer", "description": "The total number of non-existent 'Security Association'\n failures occurred during processing of current and \n previous IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikePhase1GWStatsEntry": [ { "cmgwIndex": "example-string", "cikePhase1GWActiveTunnels": 0, "cikePhase1GWPreviousTunnels": 0, "cikePhase1GWInOctets": 1234567890, "cikePhase1GWInPkts": 0, "cikePhase1GWInDropPkts": 0, "cikePhase1GWInNotifys": 0, "cikePhase1GWInP2Exchgs": 0, "cikePhase1GWInP2ExchgInvalids": 0, "cikePhase1GWInP2ExchgRejects": 0, "cikePhase1GWInP2SaDelRequests": 0, "cikePhase1GWOutOctets": 1234567890, "cikePhase1GWOutPkts": 0, "cikePhase1GWOutDropPkts": 0, "cikePhase1GWOutNotifys": 0, "cikePhase1GWOutP2Exchgs": 0, "cikePhase1GWOutP2ExchgInvalids": 0, "cikePhase1GWOutP2ExchgRejects": 0, "cikePhase1GWOutP2SaDelRequests": 0, "cikePhase1GWInitTunnels": 0, "cikePhase1GWInitTunnelFails": 0, "cikePhase1GWRespTunnelFails": 0, "cikePhase1GWSysCapFails": 0, "cikePhase1GWAuthFails": 0, "cikePhase1GWDecryptFails": 0, "cikePhase1GWHashValidFails": 0, "cikePhase1GWNoSaFails": 0 } ] } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikePhase1GWStatsEntry-3", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cikePhase1GWStatsEntry", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikePhase1GWStatsEntry={cmgwIndex}": { "get": { "summary": "Get cikePhase1GWStatsEntry entry", "description": "Retrieve specific cikePhase1GWStatsEntry entry by key from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "parameters": [ { "name": "cmgwIndex", "in": "path", "required": true, "schema": { "type": "string" }, "example": "1" }, { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "properties": { "cmgwIndex": { "type": "string", "description": "cmgwIndex", "x-yang-type": "leafref" }, "cikePhase1GWActiveTunnels": { "type": "integer", "description": "The number of currently active IPsec\n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWPreviousTunnels": { "type": "integer", "description": "The total number of previously active\n IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInOctets": { "type": "integer", "description": "The total number of octets received by all currently\n and previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInPkts": { "type": "integer", "description": "The total number of packets received by all\n currently and previously active IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInDropPkts": { "type": "integer", "description": "The total number of packets which were\n dropped during receive processing by all \n currently and previously\n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInNotifys": { "type": "integer", "description": "The total number of notifys received by\n all currently and previously active IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n received by all currently and previously \n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were received and found to be invalid \n by all currently and previously active IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were received and rejected by all \n currently and previously active IPsec Phase-1 \n IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 'Security\n Association' delete requests received by all \n currently and previously active and IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutOctets": { "type": "integer", "description": "The total number of octets sent by all currently\n and previously active and IPsec Phase-1 \n IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutPkts": { "type": "integer", "description": "The total number of packets sent by all currently\n and previously active and IPsec Phase-1 \n Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutDropPkts": { "type": "integer", "description": "The total number of packets which were dropped\n during send processing by all currently \n and previously\n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutNotifys": { "type": "integer", "description": "The total number of notifys sent by all currently\n and previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were sent by all currently and previously \n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were sent and found to be invalid by \n all currently and previously active IPsec Phase-1 \n Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were sent and rejected by all currently and\n previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWOutP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 SA\n delete requests sent by all currently and \n previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInitTunnels": { "type": "integer", "description": "The total number of IPsec Phase-1 IKE\n Tunnels which were locally initiated.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWInitTunnelFails": { "type": "integer", "description": "The total number of IPsec Phase-1 IKE Tunnels\n which were locally initiated and failed to activate.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWRespTunnelFails": { "type": "integer", "description": "The total number of IPsec Phase-1 IKE Tunnels\n which were remotely initiated and failed to activate.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWSysCapFails": { "type": "integer", "description": "The total number of system capacity failures\n which occurred during processing of all current \n and previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWAuthFails": { "type": "integer", "description": "The total number of authentications which ended\n in failure by all current and previous IPsec Phase-1\n IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWDecryptFails": { "type": "integer", "description": "The total number of decryptions which ended\n in failure by all current and previous IPsec Phase-1\n IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWHashValidFails": { "type": "integer", "description": "The total number of hash validations which ended\n in failure by all current and previous IPsec Phase-1\n IKE Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cikePhase1GWNoSaFails": { "type": "integer", "description": "The total number of non-existent 'Security Association'\n failures occurred during processing of current and \n previous IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295 } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikePhase1GWStatsEntry": { "cmgwIndex": "example-string", "cikePhase1GWActiveTunnels": 0, "cikePhase1GWPreviousTunnels": 0, "cikePhase1GWInOctets": 1234567890, "cikePhase1GWInPkts": 0, "cikePhase1GWInDropPkts": 0, "cikePhase1GWInNotifys": 0, "cikePhase1GWInP2Exchgs": 0, "cikePhase1GWInP2ExchgInvalids": 0, "cikePhase1GWInP2ExchgRejects": 0, "cikePhase1GWInP2SaDelRequests": 0, "cikePhase1GWOutOctets": 1234567890, "cikePhase1GWOutPkts": 0, "cikePhase1GWOutDropPkts": 0, "cikePhase1GWOutNotifys": 0, "cikePhase1GWOutP2Exchgs": 0, "cikePhase1GWOutP2ExchgInvalids": 0, "cikePhase1GWOutP2ExchgRejects": 0, "cikePhase1GWOutP2SaDelRequests": 0, "cikePhase1GWInitTunnels": 0, "cikePhase1GWInitTunnelFails": 0, "cikePhase1GWRespTunnelFails": 0, "cikePhase1GWSysCapFails": 0, "cikePhase1GWAuthFails": 0, "cikePhase1GWDecryptFails": 0, "cikePhase1GWHashValidFails": 0, "cikePhase1GWNoSaFails": 0 } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikePhase1GWStatsEntry-4" }, "x-yang-path": "/cikePhase1GWStatsEntry={cmgwIndex}", "x-restconf-kind": "list-instance", "x-list-keys": [ "cmgwIndex" ] }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecTunnelEntry": { "get": { "summary": "Get cipSecTunnelEntry list", "description": "Retrieve list of cipSecTunnelEntry entries from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "array", "description": "Each entry contains the attributes\n associated with an active IPsec Phase-2 Tunnel.", "items": { "type": "object", "properties": { "cipSecTunIndex": { "type": "integer", "description": "The index of the IPsec Phase-2 Tunnel Table.\n The value of the index is a number which begins \n at one and is incremented with each tunnel that \n is created. The value of this object will wrap \n at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunIkeTunnelIndex": { "type": "integer", "description": "The index of the associated IPsec Phase-1\n IKE Tunnel.\n (cikeTunIndex in the cikeTunnelTable)", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunIkeTunnelAlive": { "type": "boolean", "description": "An indicator which specifies whether or not the\n IPsec Phase-1 IKE Tunnel currently exists." }, "cipSecTunLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecTunRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecTunKeyType": { "type": "string", "description": "The type of key used by the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:KeyType" }, "cipSecTunEncapMode": { "type": "string", "description": "The encapsulation mode used by the\n IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncapMode" }, "cipSecTunLifeSize": { "type": "integer", "description": "The negotiated LifeSize of the\n IPsec Phase-2 Tunnel in kilobytes.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the\n IPsec Phase-2 Tunnel in seconds.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-2\n Tunnel has been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval" }, "cipSecTunSaLifeSizeThreshold": { "type": "integer", "description": "The security association LifeSize refresh\n threshold in kilobytes.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunSaLifeTimeThreshold": { "type": "integer", "description": "The security association LifeTime refresh\n threshold in seconds.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunTotalRefreshes": { "type": "integer", "description": "The total number of security\n association refreshes performed.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunExpiredSaInstances": { "type": "integer", "description": "The total number of security associations\n which have expired.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunCurrentSaInstances": { "type": "integer", "description": "The number of security associations\n which are currently active or expiring.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used\n by the inbound security association of the \n IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp" }, "cipSecTunInSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the inbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo" }, "cipSecTunInSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunInSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) security \n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunInSaDecompAlgo": { "type": "string", "description": "The decompression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo" }, "cipSecTunOutSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp" }, "cipSecTunOutSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo" }, "cipSecTunOutSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the outbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunOutSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) \n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunOutSaCompAlgo": { "type": "string", "description": "The compression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo" }, "cipSecTunInOctets": { "type": "integer", "description": "The total number of octets received by this IPsec\n Phase-2 Tunnel. This value is accumulated\n BEFORE determining whether or not the packet should be\n decompressed. See also cipSecTunInOctWraps for the\n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHcInOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n received by this IPsec Phase-2 Tunnel. This value is\n accumulated BEFORE determining whether or not the packet\n should be decompressed.", "minimum": 0 }, "cipSecTunInOctWraps": { "type": "integer", "description": "The number of times the octets received counter\n (cipSecTunInOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInDecompOctets": { "type": "integer", "description": "The total number of decompressed octets received\n by this IPsec Phase-2 Tunnel. This value is \n accumulated AFTER the packet is decompressed. \n If compression is not being\n used, this value will match the value of \n cipSecTunInOctets. See also cipSecTunInDecompOctWraps \n for the number of times\n this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHcInDecompOctets": { "type": "integer", "description": "A high capacity count of the total number of decompressed\n octets received by this IPsec Phase-2 Tunnel. This value\n is accumulated AFTER the packet is decompressed. If\n compression is not being used, this value will match the\n value of cipSecTunHcInOctets.", "minimum": 0 }, "cipSecTunInDecompOctWraps": { "type": "integer", "description": "The number of times the decompressed\n octets received counter\n (cipSecTunInDecompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInPkts": { "type": "integer", "description": "The total number of packets received\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInDropPkts": { "type": "integer", "description": "The total number of packets dropped\n during receive processing by this IPsec Phase-2 \n Tunnel. This count does NOT include\n packets dropped due to Anti-Replay processing.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInReplayDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n receive processing due to Anti-Replay processing \n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInAuths": { "type": "integer", "description": "The total number of inbound\n authentication's performed by this \n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInAuthFails": { "type": "integer", "description": "The total number of inbound authentication's\n which ended in\n failure by this IPsec Phase-2 Tunnel .", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInDecrypts": { "type": "integer", "description": "The total number of inbound decryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInDecryptFails": { "type": "integer", "description": "The total number of inbound decryption's\n which ended in failure\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec\n Phase-2 Tunnel. This value is accumulated\n AFTER determining whether or not the packet should \n be compressed. See also cipSecTunOutOctWraps for\n the number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHcOutOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n sent by this IPsec Phase-2 Tunnel. This value is\n accumulated AFTER determining whether or not the \n packet\n should be compressed.", "minimum": 0 }, "cipSecTunOutOctWraps": { "type": "integer", "description": "The number of times the out octets counter\n (cipSecTunOutOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutUncompOctets": { "type": "integer", "description": "The total number of uncompressed octets sent\n by this IPsec Phase-2 Tunnel. This value \n is accumulated BEFORE the packet is compressed. \n If compression is not being used, this value \n will match the value of cipSecTunOutOctets.\n See also cipSecTunOutDecompOctWraps for the \n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHcOutUncompOctets": { "type": "integer", "description": "A high capacity count of the total number\n of uncompressed octets sent by this IPsec \n Phase-2 Tunnel. This value is accumulated BEFORE \n the packet is compressed. If compression\n is not being used, this value will match the value\n of cipSecTunHcOutOctets.", "minimum": 0 }, "cipSecTunOutUncompOctWraps": { "type": "integer", "description": "The number of times the uncompressed octets sent\n counter (cipSecTunOutUncompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutPkts": { "type": "integer", "description": "The total number of packets sent by this\n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n send processing by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutAuths": { "type": "integer", "description": "The total number of outbound authentication's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutAuthFails": { "type": "integer", "description": "The total number of outbound\n authentication's which ended in failure \n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutEncrypts": { "type": "integer", "description": "The total number of outbound encryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutEncryptFails": { "type": "integer", "description": "The total number of outbound encryption's\n which ended in failure by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunStatus": { "type": "string", "description": "The status of the MIB table row.\n \n This object can be used to bring the tunnel down\n by setting value of this object to destroy(2).\n When the value is set to destroy(2), the SA\n bundle is destroyed and this row is deleted\n from this table.\n \n When this MIB value is queried, the value of\n active(1) is always returned, if the instance \n exists.\n \n This object cannot be used to create a MIB \n table row.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TunnelStatus" } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecTunnelEntry": [ { "cipSecTunIndex": 1, "cipSecTunIkeTunnelIndex": 1, "cipSecTunIkeTunnelAlive": true, "cipSecTunLocalAddr": "192.168.1.1", "cipSecTunRemoteAddr": "192.168.1.1", "cipSecTunKeyType": "192.168.1.1", "cipSecTunEncapMode": "192.168.1.1", "cipSecTunLifeSize": -2147483648, "cipSecTunLifeTime": -2147483648, "cipSecTunActiveTime": "192.168.1.1", "cipSecTunSaLifeSizeThreshold": -2147483648, "cipSecTunSaLifeTimeThreshold": -2147483648, "cipSecTunTotalRefreshes": 0, "cipSecTunExpiredSaInstances": 0, "cipSecTunCurrentSaInstances": 0, "cipSecTunInSaDiffHellmanGrp": "192.168.1.1", "cipSecTunInSaEncryptAlgo": "192.168.1.1", "cipSecTunInSaAhAuthAlgo": "192.168.1.1", "cipSecTunInSaEspAuthAlgo": "192.168.1.1", "cipSecTunInSaDecompAlgo": "192.168.1.1", "cipSecTunOutSaDiffHellmanGrp": "192.168.1.1", "cipSecTunOutSaEncryptAlgo": "192.168.1.1", "cipSecTunOutSaAhAuthAlgo": "192.168.1.1", "cipSecTunOutSaEspAuthAlgo": "192.168.1.1", "cipSecTunOutSaCompAlgo": "192.168.1.1", "cipSecTunInOctets": 1234567890, "cipSecTunHcInOctets": 1234567890, "cipSecTunInOctWraps": 0, "cipSecTunInDecompOctets": 1234567890, "cipSecTunHcInDecompOctets": 1234567890, "cipSecTunInDecompOctWraps": 0, "cipSecTunInPkts": 0, "cipSecTunInDropPkts": 0, "cipSecTunInReplayDropPkts": 0, "cipSecTunInAuths": 0, "cipSecTunInAuthFails": 0, "cipSecTunInDecrypts": 0, "cipSecTunInDecryptFails": 0, "cipSecTunOutOctets": 1234567890, "cipSecTunHcOutOctets": 1234567890, "cipSecTunOutOctWraps": 0, "cipSecTunOutUncompOctets": 1234567890, "cipSecTunHcOutUncompOctets": 1234567890, "cipSecTunOutUncompOctWraps": 0, "cipSecTunOutPkts": 0, "cipSecTunOutDropPkts": 0, "cipSecTunOutAuths": 0, "cipSecTunOutAuthFails": 0, "cipSecTunOutEncrypts": 0, "cipSecTunOutEncryptFails": 0, "cipSecTunStatus": "192.168.1.1" } ] } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecTunnelEntry-3", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cipSecTunnelEntry", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecTunnelEntry={cipSecTunIndex}": { "get": { "summary": "Get cipSecTunnelEntry entry", "description": "Retrieve specific cipSecTunnelEntry entry by key from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "parameters": [ { "name": "cipSecTunIndex", "in": "path", "required": true, "schema": { "type": "string" }, "example": "1" }, { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "properties": { "cipSecTunIndex": { "type": "integer", "description": "The index of the IPsec Phase-2 Tunnel Table.\n The value of the index is a number which begins \n at one and is incremented with each tunnel that \n is created. The value of this object will wrap \n at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunIkeTunnelIndex": { "type": "integer", "description": "The index of the associated IPsec Phase-1\n IKE Tunnel.\n (cikeTunIndex in the cikeTunnelTable)", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunIkeTunnelAlive": { "type": "boolean", "description": "An indicator which specifies whether or not the\n IPsec Phase-1 IKE Tunnel currently exists." }, "cipSecTunLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecTunRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecTunKeyType": { "type": "string", "description": "The type of key used by the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:KeyType" }, "cipSecTunEncapMode": { "type": "string", "description": "The encapsulation mode used by the\n IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncapMode" }, "cipSecTunLifeSize": { "type": "integer", "description": "The negotiated LifeSize of the\n IPsec Phase-2 Tunnel in kilobytes.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the\n IPsec Phase-2 Tunnel in seconds.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-2\n Tunnel has been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval" }, "cipSecTunSaLifeSizeThreshold": { "type": "integer", "description": "The security association LifeSize refresh\n threshold in kilobytes.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunSaLifeTimeThreshold": { "type": "integer", "description": "The security association LifeTime refresh\n threshold in seconds.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunTotalRefreshes": { "type": "integer", "description": "The total number of security\n association refreshes performed.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunExpiredSaInstances": { "type": "integer", "description": "The total number of security associations\n which have expired.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunCurrentSaInstances": { "type": "integer", "description": "The number of security associations\n which are currently active or expiring.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used\n by the inbound security association of the \n IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp" }, "cipSecTunInSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the inbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo" }, "cipSecTunInSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunInSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) security \n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunInSaDecompAlgo": { "type": "string", "description": "The decompression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo" }, "cipSecTunOutSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp" }, "cipSecTunOutSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo" }, "cipSecTunOutSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the outbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunOutSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) \n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunOutSaCompAlgo": { "type": "string", "description": "The compression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo" }, "cipSecTunInOctets": { "type": "integer", "description": "The total number of octets received by this IPsec\n Phase-2 Tunnel. This value is accumulated\n BEFORE determining whether or not the packet should be\n decompressed. See also cipSecTunInOctWraps for the\n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHcInOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n received by this IPsec Phase-2 Tunnel. This value is\n accumulated BEFORE determining whether or not the packet\n should be decompressed.", "minimum": 0 }, "cipSecTunInOctWraps": { "type": "integer", "description": "The number of times the octets received counter\n (cipSecTunInOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInDecompOctets": { "type": "integer", "description": "The total number of decompressed octets received\n by this IPsec Phase-2 Tunnel. This value is \n accumulated AFTER the packet is decompressed. \n If compression is not being\n used, this value will match the value of \n cipSecTunInOctets. See also cipSecTunInDecompOctWraps \n for the number of times\n this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHcInDecompOctets": { "type": "integer", "description": "A high capacity count of the total number of decompressed\n octets received by this IPsec Phase-2 Tunnel. This value\n is accumulated AFTER the packet is decompressed. If\n compression is not being used, this value will match the\n value of cipSecTunHcInOctets.", "minimum": 0 }, "cipSecTunInDecompOctWraps": { "type": "integer", "description": "The number of times the decompressed\n octets received counter\n (cipSecTunInDecompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInPkts": { "type": "integer", "description": "The total number of packets received\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInDropPkts": { "type": "integer", "description": "The total number of packets dropped\n during receive processing by this IPsec Phase-2 \n Tunnel. This count does NOT include\n packets dropped due to Anti-Replay processing.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInReplayDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n receive processing due to Anti-Replay processing \n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInAuths": { "type": "integer", "description": "The total number of inbound\n authentication's performed by this \n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInAuthFails": { "type": "integer", "description": "The total number of inbound authentication's\n which ended in\n failure by this IPsec Phase-2 Tunnel .", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInDecrypts": { "type": "integer", "description": "The total number of inbound decryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunInDecryptFails": { "type": "integer", "description": "The total number of inbound decryption's\n which ended in failure\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec\n Phase-2 Tunnel. This value is accumulated\n AFTER determining whether or not the packet should \n be compressed. See also cipSecTunOutOctWraps for\n the number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHcOutOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n sent by this IPsec Phase-2 Tunnel. This value is\n accumulated AFTER determining whether or not the \n packet\n should be compressed.", "minimum": 0 }, "cipSecTunOutOctWraps": { "type": "integer", "description": "The number of times the out octets counter\n (cipSecTunOutOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutUncompOctets": { "type": "integer", "description": "The total number of uncompressed octets sent\n by this IPsec Phase-2 Tunnel. This value \n is accumulated BEFORE the packet is compressed. \n If compression is not being used, this value \n will match the value of cipSecTunOutOctets.\n See also cipSecTunOutDecompOctWraps for the \n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHcOutUncompOctets": { "type": "integer", "description": "A high capacity count of the total number\n of uncompressed octets sent by this IPsec \n Phase-2 Tunnel. This value is accumulated BEFORE \n the packet is compressed. If compression\n is not being used, this value will match the value\n of cipSecTunHcOutOctets.", "minimum": 0 }, "cipSecTunOutUncompOctWraps": { "type": "integer", "description": "The number of times the uncompressed octets sent\n counter (cipSecTunOutUncompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutPkts": { "type": "integer", "description": "The total number of packets sent by this\n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n send processing by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutAuths": { "type": "integer", "description": "The total number of outbound authentication's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutAuthFails": { "type": "integer", "description": "The total number of outbound\n authentication's which ended in failure \n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutEncrypts": { "type": "integer", "description": "The total number of outbound encryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunOutEncryptFails": { "type": "integer", "description": "The total number of outbound encryption's\n which ended in failure by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunStatus": { "type": "string", "description": "The status of the MIB table row.\n \n This object can be used to bring the tunnel down\n by setting value of this object to destroy(2).\n When the value is set to destroy(2), the SA\n bundle is destroyed and this row is deleted\n from this table.\n \n When this MIB value is queried, the value of\n active(1) is always returned, if the instance \n exists.\n \n This object cannot be used to create a MIB \n table row.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TunnelStatus" } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecTunnelEntry": { "cipSecTunIndex": 1, "cipSecTunIkeTunnelIndex": 1, "cipSecTunIkeTunnelAlive": true, "cipSecTunLocalAddr": "192.168.1.1", "cipSecTunRemoteAddr": "192.168.1.1", "cipSecTunKeyType": "192.168.1.1", "cipSecTunEncapMode": "192.168.1.1", "cipSecTunLifeSize": -2147483648, "cipSecTunLifeTime": -2147483648, "cipSecTunActiveTime": "192.168.1.1", "cipSecTunSaLifeSizeThreshold": -2147483648, "cipSecTunSaLifeTimeThreshold": -2147483648, "cipSecTunTotalRefreshes": 0, "cipSecTunExpiredSaInstances": 0, "cipSecTunCurrentSaInstances": 0, "cipSecTunInSaDiffHellmanGrp": "192.168.1.1", "cipSecTunInSaEncryptAlgo": "192.168.1.1", "cipSecTunInSaAhAuthAlgo": "192.168.1.1", "cipSecTunInSaEspAuthAlgo": "192.168.1.1", "cipSecTunInSaDecompAlgo": "192.168.1.1", "cipSecTunOutSaDiffHellmanGrp": "192.168.1.1", "cipSecTunOutSaEncryptAlgo": "192.168.1.1", "cipSecTunOutSaAhAuthAlgo": "192.168.1.1", "cipSecTunOutSaEspAuthAlgo": "192.168.1.1", "cipSecTunOutSaCompAlgo": "192.168.1.1", "cipSecTunInOctets": 1234567890, "cipSecTunHcInOctets": 1234567890, "cipSecTunInOctWraps": 0, "cipSecTunInDecompOctets": 1234567890, "cipSecTunHcInDecompOctets": 1234567890, "cipSecTunInDecompOctWraps": 0, "cipSecTunInPkts": 0, "cipSecTunInDropPkts": 0, "cipSecTunInReplayDropPkts": 0, "cipSecTunInAuths": 0, "cipSecTunInAuthFails": 0, "cipSecTunInDecrypts": 0, "cipSecTunInDecryptFails": 0, "cipSecTunOutOctets": 1234567890, "cipSecTunHcOutOctets": 1234567890, "cipSecTunOutOctWraps": 0, "cipSecTunOutUncompOctets": 1234567890, "cipSecTunHcOutUncompOctets": 1234567890, "cipSecTunOutUncompOctWraps": 0, "cipSecTunOutPkts": 0, "cipSecTunOutDropPkts": 0, "cipSecTunOutAuths": 0, "cipSecTunOutAuthFails": 0, "cipSecTunOutEncrypts": 0, "cipSecTunOutEncryptFails": 0, "cipSecTunStatus": "192.168.1.1" } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecTunnelEntry-4" }, "x-yang-path": "/cipSecTunnelEntry={cipSecTunIndex}", "x-restconf-kind": "list-instance", "x-list-keys": [ "cipSecTunIndex" ] }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecEndPtEntry": { "get": { "summary": "Get cipSecEndPtEntry list", "description": "Retrieve list of cipSecEndPtEntry entries from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "array", "description": "An IPsec Phase-2 Tunnel Endpoint entry.", "items": { "type": "object", "properties": { "cipSecTunIndex": { "type": "string", "description": "cipSecTunIndex", "x-yang-type": "leafref" }, "cipSecEndPtIndex": { "type": "integer", "description": "The number of the Endpoint associated with the\n IPsec Phase-2 Tunnel Table. The value of this\n index is a number which begins at one and \n is incremented with each Endpoint associated \n with an IPsec Phase-2 Tunnel.\n The value of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtLocalName": { "type": "string", "description": "The DNS name of the local Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cipSecEndPtLocalType": { "type": "string", "description": "The type of identity for the local Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType" }, "cipSecEndPtLocalAddr1": { "type": "string", "description": "The local Endpoint's first IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the local Endpoint type is IP address range, \n then this is the value of beginning IP address \n of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtLocalAddr2": { "type": "string", "description": "The local Endpoint's second IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the local Endpoint type is IP address range, \n then this is the value of ending IP address \n of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtLocalProtocol": { "type": "integer", "description": "The protocol number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtLocalPort": { "type": "integer", "description": "The port number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtRemoteName": { "type": "string", "description": "The DNS name of the remote Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cipSecEndPtRemoteType": { "type": "string", "description": "The type of identity for the remote Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType" }, "cipSecEndPtRemoteAddr1": { "type": "string", "description": "The remote Endpoint's first IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the remote Endpoint type is IP address range, \n then this is the value of beginning IP address \n of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtRemoteAddr2": { "type": "string", "description": "The remote Endpoint's second IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the remote Endpoint type is IP address range, \n then this is the value of ending IP address of \n the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtRemoteProtocol": { "type": "integer", "description": "The protocol number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtRemotePort": { "type": "integer", "description": "The port number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecEndPtEntry": [ { "cipSecTunIndex": "192.168.1.1", "cipSecEndPtIndex": 1, "cipSecEndPtLocalName": "192.168.1.1", "cipSecEndPtLocalType": "192.168.1.1", "cipSecEndPtLocalAddr1": "192.168.1.1", "cipSecEndPtLocalAddr2": "192.168.1.1", "cipSecEndPtLocalProtocol": -2147483648, "cipSecEndPtLocalPort": -2147483648, "cipSecEndPtRemoteName": "192.168.1.1", "cipSecEndPtRemoteType": "192.168.1.1", "cipSecEndPtRemoteAddr1": "192.168.1.1", "cipSecEndPtRemoteAddr2": "192.168.1.1", "cipSecEndPtRemoteProtocol": -2147483648, "cipSecEndPtRemotePort": -2147483648 } ] } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecEndPtEntry-3", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cipSecEndPtEntry", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecSpiEntry": { "get": { "summary": "Get cipSecSpiEntry list", "description": "Retrieve list of cipSecSpiEntry entries from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "array", "description": "Each entry contains the attributes associated with\n active and expiring IPsec Phase-2 \n security associations.", "items": { "type": "object", "properties": { "cipSecTunIndex": { "type": "string", "description": "cipSecTunIndex", "x-yang-type": "leafref" }, "cipSecSpiIndex": { "type": "integer", "description": "The number of the SPI associated with the\n Phase-2 Tunnel Table. The value of this \n index is a number which begins at one and is \n incremented with each SPI associated with an \n IPsec Phase-2 Tunnel. The value of this \n object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecSpiDirection": { "type": "string", "description": "The direction of the SPI." }, "cipSecSpiValue": { "type": "integer", "description": "The value of the SPI.", "minimum": 0, "maximum": 4294967295 }, "cipSecSpiProtocol": { "type": "string", "description": "The protocol of the SPI." }, "cipSecSpiStatus": { "type": "string", "description": "The status of the SPI." } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecSpiEntry": [ { "cipSecTunIndex": "192.168.1.1", "cipSecSpiIndex": 1, "cipSecSpiDirection": "192.168.1.1", "cipSecSpiValue": 0, "cipSecSpiProtocol": "192.168.1.1", "cipSecSpiStatus": "192.168.1.1" } ] } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecSpiEntry-3", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cipSecSpiEntry", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecPhase2GWStatsEntry": { "get": { "summary": "Get cipSecPhase2GWStatsEntry list", "description": "Retrieve list of cipSecPhase2GWStatsEntry entries from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "array", "description": "Each entry contains the attributes of an Phase-2 IPsec stats\n information for the related gateway.\n \n There is only one entry for each gateway. The entry \n is created when a gateway up and cannot be deleted.", "items": { "type": "object", "properties": { "cmgwIndex": { "type": "string", "description": "cmgwIndex", "x-yang-type": "leafref" }, "cipSecPhase2GWActiveTunnels": { "type": "integer", "description": "The total number of currently active\n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWPreviousTunnels": { "type": "integer", "description": "The total number of previously active\n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInOctets": { "type": "integer", "description": "The total number of octets received by all\n current and previous IPsec Phase-2 Tunnels. \n This value is accumulated BEFORE determining \n whether or not the packet should be decompressed. \n See also cipSecGlobalInOctWraps for the number\n of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInOctWraps": { "type": "integer", "description": "The number of times the global octets received\n counter (cipSecGlobalInOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInDecompOctets": { "type": "integer", "description": "The total number of decompressed octets received\n by all current and previous IPsec Phase-2 Tunnels. \n This value is accumulated AFTER the packet is \n decompressed. If compression is not being used, \n this value will match the value of cipSecGlobalInOctets. \n See also cipSecGlobalInDecompOctWraps\n for the number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInDecompOctWraps": { "type": "integer", "description": "The number of times the global decompressed\n octets received counter (cipSecGlobalInDecompOctets) \n has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInPkts": { "type": "integer", "description": "The total number of packets received\n by all current and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInDrops": { "type": "integer", "description": "The total number of packets dropped\n during receive processing by all current and previous \n IPsec Phase-2 Tunnels. This count does NOT include \n packets dropped due to Anti-Replay processing.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInReplayDrops": { "type": "integer", "description": "The total number of packets dropped during\n receive processing due to Anti-Replay \n processing by all current and previous IPsec\n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInAuths": { "type": "integer", "description": "The total number of inbound authentication's\n performed by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInAuthFails": { "type": "integer", "description": "The total number of inbound authentication's\n which ended in failure by all current and previous \n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInDecrypts": { "type": "integer", "description": "The total number of inbound decryption's\n performed by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInDecryptFails": { "type": "integer", "description": "The total number of inbound decryption's\n which ended in failure by all current and \n previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutOctets": { "type": "integer", "description": "The total number of octets sent by all\n current and previous IPsec Phase-2 Tunnels. \n This value is accumulated AFTER determining \n whether or not the packet should be compressed. \n See also cipSecGlobalOutOctWraps for the\n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutOctWraps": { "type": "integer", "description": "The number of times the global octets sent counter\n (cipSecGlobalOutOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutUncompOctets": { "type": "integer", "description": "The total number of uncompressed octets sent\n by all current and previous IPsec Phase-2 Tunnels. \n This value is accumulated BEFORE the packet is \n compressed. If compression is not being used, this \n value will match the value of cipSecGlobalOutOctets. \n See also cipSecGlobalOutDecompOctWraps for the number \n of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutUncompOctWraps": { "type": "integer", "description": "The number of times the global uncompressed\n octets sent counter (cipSecGlobalOutUncompOctets) \n has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutPkts": { "type": "integer", "description": "The total number of packets sent by all\n current and previous IPsec Phase-2 \n Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutDrops": { "type": "integer", "description": "The total number of packets dropped during send\n processing by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutAuths": { "type": "integer", "description": "The total number of outbound authentication's\n performed by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutAuthFails": { "type": "integer", "description": "The total number of outbound authentication's\n which ended in failure\n by all current and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutEncrypts": { "type": "integer", "description": "The total number of outbound encryption's performed\n by all current and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutEncryptFails": { "type": "integer", "description": "The total number of outbound encryption's\n which ended in failure by all current and \n previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWProtocolUseFails": { "type": "integer", "description": "The total number of protocol use failures\n which occurred during processing of all current \n and previously active IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWNoSaFails": { "type": "integer", "description": "The total number of non-existent\n Security Association in failures which occurred \n during processing of all current\n and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWSysCapFails": { "type": "integer", "description": "The total number of system capacity failures\n which occurred during processing of all current \n and previously active IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecPhase2GWStatsEntry": [ { "cmgwIndex": "example-string", "cipSecPhase2GWActiveTunnels": 0, "cipSecPhase2GWPreviousTunnels": 0, "cipSecPhase2GWInOctets": 1234567890, "cipSecPhase2GWInOctWraps": 0, "cipSecPhase2GWInDecompOctets": 1234567890, "cipSecPhase2GWInDecompOctWraps": 0, "cipSecPhase2GWInPkts": 0, "cipSecPhase2GWInDrops": 0, "cipSecPhase2GWInReplayDrops": 0, "cipSecPhase2GWInAuths": 0, "cipSecPhase2GWInAuthFails": 0, "cipSecPhase2GWInDecrypts": 0, "cipSecPhase2GWInDecryptFails": 0, "cipSecPhase2GWOutOctets": 1234567890, "cipSecPhase2GWOutOctWraps": 0, "cipSecPhase2GWOutUncompOctets": 1234567890, "cipSecPhase2GWOutUncompOctWraps": 0, "cipSecPhase2GWOutPkts": 0, "cipSecPhase2GWOutDrops": 0, "cipSecPhase2GWOutAuths": 0, "cipSecPhase2GWOutAuthFails": 0, "cipSecPhase2GWOutEncrypts": 0, "cipSecPhase2GWOutEncryptFails": 0, "cipSecPhase2GWProtocolUseFails": 0, "cipSecPhase2GWNoSaFails": 0, "cipSecPhase2GWSysCapFails": 0 } ] } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecPhase2GWStatsEntry-3", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cipSecPhase2GWStatsEntry", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecPhase2GWStatsEntry={cmgwIndex}": { "get": { "summary": "Get cipSecPhase2GWStatsEntry entry", "description": "Retrieve specific cipSecPhase2GWStatsEntry entry by key from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "parameters": [ { "name": "cmgwIndex", "in": "path", "required": true, "schema": { "type": "string" }, "example": "1" }, { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "properties": { "cmgwIndex": { "type": "string", "description": "cmgwIndex", "x-yang-type": "leafref" }, "cipSecPhase2GWActiveTunnels": { "type": "integer", "description": "The total number of currently active\n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWPreviousTunnels": { "type": "integer", "description": "The total number of previously active\n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInOctets": { "type": "integer", "description": "The total number of octets received by all\n current and previous IPsec Phase-2 Tunnels. \n This value is accumulated BEFORE determining \n whether or not the packet should be decompressed. \n See also cipSecGlobalInOctWraps for the number\n of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInOctWraps": { "type": "integer", "description": "The number of times the global octets received\n counter (cipSecGlobalInOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInDecompOctets": { "type": "integer", "description": "The total number of decompressed octets received\n by all current and previous IPsec Phase-2 Tunnels. \n This value is accumulated AFTER the packet is \n decompressed. If compression is not being used, \n this value will match the value of cipSecGlobalInOctets. \n See also cipSecGlobalInDecompOctWraps\n for the number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInDecompOctWraps": { "type": "integer", "description": "The number of times the global decompressed\n octets received counter (cipSecGlobalInDecompOctets) \n has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInPkts": { "type": "integer", "description": "The total number of packets received\n by all current and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInDrops": { "type": "integer", "description": "The total number of packets dropped\n during receive processing by all current and previous \n IPsec Phase-2 Tunnels. This count does NOT include \n packets dropped due to Anti-Replay processing.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInReplayDrops": { "type": "integer", "description": "The total number of packets dropped during\n receive processing due to Anti-Replay \n processing by all current and previous IPsec\n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInAuths": { "type": "integer", "description": "The total number of inbound authentication's\n performed by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInAuthFails": { "type": "integer", "description": "The total number of inbound authentication's\n which ended in failure by all current and previous \n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInDecrypts": { "type": "integer", "description": "The total number of inbound decryption's\n performed by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWInDecryptFails": { "type": "integer", "description": "The total number of inbound decryption's\n which ended in failure by all current and \n previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutOctets": { "type": "integer", "description": "The total number of octets sent by all\n current and previous IPsec Phase-2 Tunnels. \n This value is accumulated AFTER determining \n whether or not the packet should be compressed. \n See also cipSecGlobalOutOctWraps for the\n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutOctWraps": { "type": "integer", "description": "The number of times the global octets sent counter\n (cipSecGlobalOutOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutUncompOctets": { "type": "integer", "description": "The total number of uncompressed octets sent\n by all current and previous IPsec Phase-2 Tunnels. \n This value is accumulated BEFORE the packet is \n compressed. If compression is not being used, this \n value will match the value of cipSecGlobalOutOctets. \n See also cipSecGlobalOutDecompOctWraps for the number \n of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutUncompOctWraps": { "type": "integer", "description": "The number of times the global uncompressed\n octets sent counter (cipSecGlobalOutUncompOctets) \n has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutPkts": { "type": "integer", "description": "The total number of packets sent by all\n current and previous IPsec Phase-2 \n Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutDrops": { "type": "integer", "description": "The total number of packets dropped during send\n processing by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutAuths": { "type": "integer", "description": "The total number of outbound authentication's\n performed by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutAuthFails": { "type": "integer", "description": "The total number of outbound authentication's\n which ended in failure\n by all current and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutEncrypts": { "type": "integer", "description": "The total number of outbound encryption's performed\n by all current and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWOutEncryptFails": { "type": "integer", "description": "The total number of outbound encryption's\n which ended in failure by all current and \n previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWProtocolUseFails": { "type": "integer", "description": "The total number of protocol use failures\n which occurred during processing of all current \n and previously active IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWNoSaFails": { "type": "integer", "description": "The total number of non-existent\n Security Association in failures which occurred \n during processing of all current\n and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 }, "cipSecPhase2GWSysCapFails": { "type": "integer", "description": "The total number of system capacity failures\n which occurred during processing of all current \n and previously active IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295 } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecPhase2GWStatsEntry": { "cmgwIndex": "example-string", "cipSecPhase2GWActiveTunnels": 0, "cipSecPhase2GWPreviousTunnels": 0, "cipSecPhase2GWInOctets": 1234567890, "cipSecPhase2GWInOctWraps": 0, "cipSecPhase2GWInDecompOctets": 1234567890, "cipSecPhase2GWInDecompOctWraps": 0, "cipSecPhase2GWInPkts": 0, "cipSecPhase2GWInDrops": 0, "cipSecPhase2GWInReplayDrops": 0, "cipSecPhase2GWInAuths": 0, "cipSecPhase2GWInAuthFails": 0, "cipSecPhase2GWInDecrypts": 0, "cipSecPhase2GWInDecryptFails": 0, "cipSecPhase2GWOutOctets": 1234567890, "cipSecPhase2GWOutOctWraps": 0, "cipSecPhase2GWOutUncompOctets": 1234567890, "cipSecPhase2GWOutUncompOctWraps": 0, "cipSecPhase2GWOutPkts": 0, "cipSecPhase2GWOutDrops": 0, "cipSecPhase2GWOutAuths": 0, "cipSecPhase2GWOutAuthFails": 0, "cipSecPhase2GWOutEncrypts": 0, "cipSecPhase2GWOutEncryptFails": 0, "cipSecPhase2GWProtocolUseFails": 0, "cipSecPhase2GWNoSaFails": 0, "cipSecPhase2GWSysCapFails": 0 } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecPhase2GWStatsEntry-4" }, "x-yang-path": "/cipSecPhase2GWStatsEntry={cmgwIndex}", "x-restconf-kind": "list-instance", "x-list-keys": [ "cmgwIndex" ] }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikeTunnelHistEntry": { "get": { "summary": "Get cikeTunnelHistEntry list", "description": "Retrieve list of cikeTunnelHistEntry entries from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "array", "description": "Each entry contains the attributes\n associated with a previously active IPsec \n Phase-1 IKE Tunnel.", "items": { "type": "object", "properties": { "cikeTunHistIndex": { "type": "integer", "description": "The index of the IPsec Phase-1 IKE Tunnel History\n Table. The value of the index is a number which \n begins at one and is incremented with each \n tunnel that ends. The value of this object \n will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunHistTermReason": { "type": "string", "description": "The reason the IPsec Phase-1 IKE Tunnel was terminated.\n Possible reasons include:\n 1 = other\n 2 = normal termination\n 3 = operator request\n 4 = peer delete request was received\n 5 = contact with peer was lost\n 6 = local failure occurred.\n 7 = operator initiated check point request" }, "cikeTunHistActiveIndex": { "type": "integer", "description": "The index of the previously active IPsec\n Phase-1 IKE Tunnel.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunHistPeerLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikeTunHistPeerLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunHistPeerIntIndex": { "type": "integer", "description": "The internal index of the local-remote peer\n association. This internal index is used to \n uniquely identify multiple associations between \n the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunHistPeerRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote\n peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikeTunHistPeerRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunHistLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikeTunHistLocalName": { "type": "string", "description": "The DNS name of the local IP address for\n the IPsec Phase-1 IKE Tunnel. If the DNS \n name associated with the local tunnel endpoint \n is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunHistRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikeTunHistRemoteName": { "type": "string", "description": "The DNS name of the remote IP address of IPsec Phase-1\n IKE Tunnel. If the DNS name associated with the remote\n tunnel endpoint is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunHistNegoMode": { "type": "string", "description": "The negotiation mode of the IPsec Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeNegoMode" }, "cikeTunHistDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp" }, "cikeTunHistEncryptAlgo": { "type": "string", "description": "The encryption algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo" }, "cikeTunHistHashAlgo": { "type": "string", "description": "The hash algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeHashAlgo" }, "cikeTunHistAuthMethod": { "type": "string", "description": "The authentication method used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeAuthMethod" }, "cikeTunHistLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel\n in seconds.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunHistStartTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n when the IPsec Phase-1 IKE tunnel was started.", "x-yang-type": "yang:timestamp" }, "cikeTunHistActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-1 IKE tunnel was been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval" }, "cikeTunHistTotalRefreshes": { "type": "integer", "description": "The total number of security associations\n refreshes performed.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistTotalSas": { "type": "integer", "description": "The total number of security associations\n used during the\n life of the IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInOctets": { "type": "integer", "description": "The total number of octets\n received by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInPkts": { "type": "integer", "description": "The total number of packets received\n by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInDropPkts": { "type": "integer", "description": "The total number of packets dropped\n by this IPsec Phase-1\n IKE Tunnel during receive processing.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInNotifys": { "type": "integer", "description": "The total number of notifys received\n by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received and\n found to be invalid by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received and\n rejected by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 security association\n delete requests received by this IPsec \n Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutPkts": { "type": "integer", "description": "The total number of packets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutDropPkts": { "type": "integer", "description": "The total number of packets dropped\n by this IPsec Phase-1\n IKE Tunnel during send processing.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutNotifys": { "type": "integer", "description": "The total number of notifys sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n found to be invalid by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n rejected by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 security association\n delete requests sent by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikeTunnelHistEntry": [ { "cikeTunHistIndex": 1, "cikeTunHistTermReason": "example-string", "cikeTunHistActiveIndex": 1, "cikeTunHistPeerLocalType": "ethernetCsmacd(6)", "cikeTunHistPeerLocalValue": "example-string", "cikeTunHistPeerIntIndex": 1, "cikeTunHistPeerRemoteType": "ethernetCsmacd(6)", "cikeTunHistPeerRemoteValue": "example-string", "cikeTunHistLocalAddr": "192.168.1.1", "cikeTunHistLocalName": "interface-1", "cikeTunHistRemoteAddr": "192.168.1.1", "cikeTunHistRemoteName": "interface-1", "cikeTunHistNegoMode": "example-string", "cikeTunHistDiffHellmanGrp": "example-string", "cikeTunHistEncryptAlgo": "example-string", "cikeTunHistHashAlgo": "example-string", "cikeTunHistAuthMethod": "example-string", "cikeTunHistLifeTime": -2147483648, "cikeTunHistStartTime": "example-string", "cikeTunHistActiveTime": "example-string", "cikeTunHistTotalRefreshes": 0, "cikeTunHistTotalSas": 0, "cikeTunHistInOctets": 1234567890, "cikeTunHistInPkts": 0, "cikeTunHistInDropPkts": 0, "cikeTunHistInNotifys": 0, "cikeTunHistInP2Exchgs": 0, "cikeTunHistInP2ExchgInvalids": 0, "cikeTunHistInP2ExchgRejects": 0, "cikeTunHistInP2SaDelRequests": 0, "cikeTunHistOutOctets": 1234567890, "cikeTunHistOutPkts": 0, "cikeTunHistOutDropPkts": 0, "cikeTunHistOutNotifys": 0, "cikeTunHistOutP2Exchgs": 0, "cikeTunHistOutP2ExchgInvalids": 0, "cikeTunHistOutP2ExchgRejects": 0, "cikeTunHistOutP2SaDelRequests": 0 } ] } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikeTunnelHistEntry-3", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cikeTunnelHistEntry", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikeTunnelHistEntry={cikeTunHistIndex}": { "get": { "summary": "Get cikeTunnelHistEntry entry", "description": "Retrieve specific cikeTunnelHistEntry entry by key from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "parameters": [ { "name": "cikeTunHistIndex", "in": "path", "required": true, "schema": { "type": "string" }, "example": "1" }, { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "properties": { "cikeTunHistIndex": { "type": "integer", "description": "The index of the IPsec Phase-1 IKE Tunnel History\n Table. The value of the index is a number which \n begins at one and is incremented with each \n tunnel that ends. The value of this object \n will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunHistTermReason": { "type": "string", "description": "The reason the IPsec Phase-1 IKE Tunnel was terminated.\n Possible reasons include:\n 1 = other\n 2 = normal termination\n 3 = operator request\n 4 = peer delete request was received\n 5 = contact with peer was lost\n 6 = local failure occurred.\n 7 = operator initiated check point request" }, "cikeTunHistActiveIndex": { "type": "integer", "description": "The index of the previously active IPsec\n Phase-1 IKE Tunnel.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunHistPeerLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikeTunHistPeerLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunHistPeerIntIndex": { "type": "integer", "description": "The internal index of the local-remote peer\n association. This internal index is used to \n uniquely identify multiple associations between \n the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunHistPeerRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote\n peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikeTunHistPeerRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunHistLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikeTunHistLocalName": { "type": "string", "description": "The DNS name of the local IP address for\n the IPsec Phase-1 IKE Tunnel. If the DNS \n name associated with the local tunnel endpoint \n is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunHistRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikeTunHistRemoteName": { "type": "string", "description": "The DNS name of the remote IP address of IPsec Phase-1\n IKE Tunnel. If the DNS name associated with the remote\n tunnel endpoint is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeTunHistNegoMode": { "type": "string", "description": "The negotiation mode of the IPsec Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeNegoMode" }, "cikeTunHistDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp" }, "cikeTunHistEncryptAlgo": { "type": "string", "description": "The encryption algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo" }, "cikeTunHistHashAlgo": { "type": "string", "description": "The hash algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeHashAlgo" }, "cikeTunHistAuthMethod": { "type": "string", "description": "The authentication method used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeAuthMethod" }, "cikeTunHistLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel\n in seconds.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeTunHistStartTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n when the IPsec Phase-1 IKE tunnel was started.", "x-yang-type": "yang:timestamp" }, "cikeTunHistActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-1 IKE tunnel was been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval" }, "cikeTunHistTotalRefreshes": { "type": "integer", "description": "The total number of security associations\n refreshes performed.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistTotalSas": { "type": "integer", "description": "The total number of security associations\n used during the\n life of the IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInOctets": { "type": "integer", "description": "The total number of octets\n received by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInPkts": { "type": "integer", "description": "The total number of packets received\n by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInDropPkts": { "type": "integer", "description": "The total number of packets dropped\n by this IPsec Phase-1\n IKE Tunnel during receive processing.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInNotifys": { "type": "integer", "description": "The total number of notifys received\n by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received and\n found to be invalid by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received and\n rejected by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistInP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 security association\n delete requests received by this IPsec \n Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutPkts": { "type": "integer", "description": "The total number of packets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutDropPkts": { "type": "integer", "description": "The total number of packets dropped\n by this IPsec Phase-1\n IKE Tunnel during send processing.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutNotifys": { "type": "integer", "description": "The total number of notifys sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n found to be invalid by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n rejected by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cikeTunHistOutP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 security association\n delete requests sent by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295 } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikeTunnelHistEntry": { "cikeTunHistIndex": 1, "cikeTunHistTermReason": "example-string", "cikeTunHistActiveIndex": 1, "cikeTunHistPeerLocalType": "ethernetCsmacd(6)", "cikeTunHistPeerLocalValue": "example-string", "cikeTunHistPeerIntIndex": 1, "cikeTunHistPeerRemoteType": "ethernetCsmacd(6)", "cikeTunHistPeerRemoteValue": "example-string", "cikeTunHistLocalAddr": "192.168.1.1", "cikeTunHistLocalName": "interface-1", "cikeTunHistRemoteAddr": "192.168.1.1", "cikeTunHistRemoteName": "interface-1", "cikeTunHistNegoMode": "example-string", "cikeTunHistDiffHellmanGrp": "example-string", "cikeTunHistEncryptAlgo": "example-string", "cikeTunHistHashAlgo": "example-string", "cikeTunHistAuthMethod": "example-string", "cikeTunHistLifeTime": -2147483648, "cikeTunHistStartTime": "example-string", "cikeTunHistActiveTime": "example-string", "cikeTunHistTotalRefreshes": 0, "cikeTunHistTotalSas": 0, "cikeTunHistInOctets": 1234567890, "cikeTunHistInPkts": 0, "cikeTunHistInDropPkts": 0, "cikeTunHistInNotifys": 0, "cikeTunHistInP2Exchgs": 0, "cikeTunHistInP2ExchgInvalids": 0, "cikeTunHistInP2ExchgRejects": 0, "cikeTunHistInP2SaDelRequests": 0, "cikeTunHistOutOctets": 1234567890, "cikeTunHistOutPkts": 0, "cikeTunHistOutDropPkts": 0, "cikeTunHistOutNotifys": 0, "cikeTunHistOutP2Exchgs": 0, "cikeTunHistOutP2ExchgInvalids": 0, "cikeTunHistOutP2ExchgRejects": 0, "cikeTunHistOutP2SaDelRequests": 0 } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikeTunnelHistEntry-4" }, "x-yang-path": "/cikeTunnelHistEntry={cikeTunHistIndex}", "x-restconf-kind": "list-instance", "x-list-keys": [ "cikeTunHistIndex" ] }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecTunnelHistEntry": { "get": { "summary": "Get cipSecTunnelHistEntry list", "description": "Retrieve list of cipSecTunnelHistEntry entries from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "array", "description": "Each entry contains the attributes associated with\n a previously active IPsec Phase-2 Tunnel.", "items": { "type": "object", "properties": { "cipSecTunHistIndex": { "type": "integer", "description": "The index of the IPsec Phase-2 Tunnel History Table.\n The value of the index is a number which \n begins at one and is incremented with each tunnel \n that ends. The value\n of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunHistTermReason": { "type": "string", "description": "The reason the IPsec Phase-2 Tunnel was terminated.\n Possible reasons include:\n 1 = other\n 2 = normal termination\n 3 = operator request\n 4 = peer delete request was received\n 5 = contact with peer was lost\n 6 = local failure occurred\n 7 = operator initiated check point request" }, "cipSecTunHistActiveIndex": { "type": "integer", "description": "The index of the previously active\n IPsec Phase-2 Tunnel.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunHistIkeTunnelIndex": { "type": "integer", "description": "The index of the associated IPsec Phase-1 Tunnel\n (cikeTunIndex in the cikeTunnelTable).", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunHistLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecTunHistRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecTunHistKeyType": { "type": "string", "description": "The type of key used by the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:KeyType" }, "cipSecTunHistEncapMode": { "type": "string", "description": "The encapsulation mode used by the\n IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncapMode" }, "cipSecTunHistLifeSize": { "type": "integer", "description": "The negotiated LifeSize of the IPsec Phase-2 Tunnel in\n kilobytes.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunHistLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the IPsec Phase-2 Tunnel in\n seconds.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunHistStartTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n when the IPsec Phase-2 Tunnel was started.", "x-yang-type": "yang:timestamp" }, "cipSecTunHistActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-2 Tunnel has been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval" }, "cipSecTunHistTotalRefreshes": { "type": "integer", "description": "The total number of security association refreshes\n performed.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistTotalSas": { "type": "integer", "description": "The total number of security associations used\n during the\n life of the IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used by the inbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp" }, "cipSecTunHistInSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the inbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo" }, "cipSecTunHistInSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunHistInSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) \n security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunHistInSaDecompAlgo": { "type": "string", "description": "The decompression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo" }, "cipSecTunHistOutSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp" }, "cipSecTunHistOutSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo" }, "cipSecTunHistOutSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the outbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunHistOutSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) \n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunHistOutSaCompAlgo": { "type": "string", "description": "The compression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo" }, "cipSecTunHistInOctets": { "type": "integer", "description": "The total number of octets received by this IPsec\n Phase-2 Tunnel. This value is accumulated\n BEFORE determining whether or not the packet should \n be decompressed. See also cipSecTunInOctWraps for \n the number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistHcInOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n received by this IPsec Phase-2 Tunnel. This value is\n accumulated BEFORE determining whether or not \n the packet should be decompressed.", "minimum": 0 }, "cipSecTunHistInOctWraps": { "type": "integer", "description": "The number of times the octets received counter\n (cipSecTunInOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInDecompOctets": { "type": "integer", "description": "The total number of decompressed octets received by this\n IPsec Phase-2 Tunnel. This value is accumulated AFTER\n the packet is decompressed. If compression is not being\n used, this value will match the value of cipSecTunHistInOctets.\n See also cipSecTunInDecompOctWraps for the number of times\n this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistHcInDecompOctets": { "type": "integer", "description": "A high capacity count of the total number of decompressed\n octets received by this IPsec Phase-2 Tunnel. This value\n is accumulated AFTER the packet is decompressed. If\n compression is not being used, this value will match the\n value of cipSecTunHistHcInOctets.", "minimum": 0 }, "cipSecTunHistInDecompOctWraps": { "type": "integer", "description": "The number of times the decompressed octets\n received counter (cipSecTunInDecompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInPkts": { "type": "integer", "description": "The total number of packets received by this\n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n receive processing by this IPsec Phase-2 Tunnel. \n This count does NOT include packets\n dropped due to Anti-Replay processing.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInReplayDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n receive processing due to Anti-Replay processing \n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInAuths": { "type": "integer", "description": "The total number of inbound authentication's\n performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInAuthFails": { "type": "integer", "description": "The total number of inbound authentication's\n which ended in\n failure by this IPsec Phase-2 Tunnel .", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInDecrypts": { "type": "integer", "description": "The total number of inbound decryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInDecryptFails": { "type": "integer", "description": "The total number of inbound decryption's\n which ended in failure\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec\n Phase-2 Tunnel. This value is accumulated\n AFTER determining whether or not the \n packet should be\n compressed. See also cipSecTunOutOctWraps for the\n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistHcOutOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n sent by this IPsec Phase-2 Tunnel. This value \n is accumulated AFTER determining whether or not \n the packet should be\n compressed.", "minimum": 0 }, "cipSecTunHistOutOctWraps": { "type": "integer", "description": "The number of times the octets sent counter\n (cipSecTunOutOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutUncompOctets": { "type": "integer", "description": "The total number of uncompressed octets sent by this\n IPsec Phase-2 Tunnel. This value is accumulated BEFORE\n the packet is compressed. If compression is not being\n used, this value will match the value of \n cipSecTunHistOutOctets. See also \n cipSecTunOutDecompOctWraps for the number of times\n this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistHcOutUncompOctets": { "type": "integer", "description": "A high capacity count of the total\n number of uncompressed octets sent by this \n IPsec Phase-2 Tunnel. This value is accumulated \n BEFORE the packet is compressed. If compression\n is not being used, this value will match the value of\n cipSecTunHistHcOutOctets.", "minimum": 0 }, "cipSecTunHistOutUncompOctWraps": { "type": "integer", "description": "The number of times the uncompressed octets sent counter\n (cipSecTunOutUncompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutPkts": { "type": "integer", "description": "The total number of packets sent by this\n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutDropPkts": { "type": "integer", "description": "The total number of packets dropped\n during send processing\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutAuths": { "type": "integer", "description": "The total number of outbound authentication's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutAuthFails": { "type": "integer", "description": "The total number of outbound authentication's\n which ended in\n failure by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutEncrypts": { "type": "integer", "description": "The total number of outbound encryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutEncryptFails": { "type": "integer", "description": "The total number of outbound encryption's\n which ended in failure\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecTunnelHistEntry": [ { "cipSecTunHistIndex": 1, "cipSecTunHistTermReason": "192.168.1.1", "cipSecTunHistActiveIndex": 1, "cipSecTunHistIkeTunnelIndex": 1, "cipSecTunHistLocalAddr": "192.168.1.1", "cipSecTunHistRemoteAddr": "192.168.1.1", "cipSecTunHistKeyType": "192.168.1.1", "cipSecTunHistEncapMode": "192.168.1.1", "cipSecTunHistLifeSize": -2147483648, "cipSecTunHistLifeTime": -2147483648, "cipSecTunHistStartTime": "192.168.1.1", "cipSecTunHistActiveTime": "192.168.1.1", "cipSecTunHistTotalRefreshes": 0, "cipSecTunHistTotalSas": 0, "cipSecTunHistInSaDiffHellmanGrp": "192.168.1.1", "cipSecTunHistInSaEncryptAlgo": "192.168.1.1", "cipSecTunHistInSaAhAuthAlgo": "192.168.1.1", "cipSecTunHistInSaEspAuthAlgo": "192.168.1.1", "cipSecTunHistInSaDecompAlgo": "192.168.1.1", "cipSecTunHistOutSaDiffHellmanGrp": "192.168.1.1", "cipSecTunHistOutSaEncryptAlgo": "192.168.1.1", "cipSecTunHistOutSaAhAuthAlgo": "192.168.1.1", "cipSecTunHistOutSaEspAuthAlgo": "192.168.1.1", "cipSecTunHistOutSaCompAlgo": "192.168.1.1", "cipSecTunHistInOctets": 1234567890, "cipSecTunHistHcInOctets": 1234567890, "cipSecTunHistInOctWraps": 0, "cipSecTunHistInDecompOctets": 1234567890, "cipSecTunHistHcInDecompOctets": 1234567890, "cipSecTunHistInDecompOctWraps": 0, "cipSecTunHistInPkts": 0, "cipSecTunHistInDropPkts": 0, "cipSecTunHistInReplayDropPkts": 0, "cipSecTunHistInAuths": 0, "cipSecTunHistInAuthFails": 0, "cipSecTunHistInDecrypts": 0, "cipSecTunHistInDecryptFails": 0, "cipSecTunHistOutOctets": 1234567890, "cipSecTunHistHcOutOctets": 1234567890, "cipSecTunHistOutOctWraps": 0, "cipSecTunHistOutUncompOctets": 1234567890, "cipSecTunHistHcOutUncompOctets": 1234567890, "cipSecTunHistOutUncompOctWraps": 0, "cipSecTunHistOutPkts": 0, "cipSecTunHistOutDropPkts": 0, "cipSecTunHistOutAuths": 0, "cipSecTunHistOutAuthFails": 0, "cipSecTunHistOutEncrypts": 0, "cipSecTunHistOutEncryptFails": 0 } ] } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecTunnelHistEntry-3", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cipSecTunnelHistEntry", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecTunnelHistEntry={cipSecTunHistIndex}": { "get": { "summary": "Get cipSecTunnelHistEntry entry", "description": "Retrieve specific cipSecTunnelHistEntry entry by key from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "parameters": [ { "name": "cipSecTunHistIndex", "in": "path", "required": true, "schema": { "type": "string" }, "example": "1" }, { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "properties": { "cipSecTunHistIndex": { "type": "integer", "description": "The index of the IPsec Phase-2 Tunnel History Table.\n The value of the index is a number which \n begins at one and is incremented with each tunnel \n that ends. The value\n of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunHistTermReason": { "type": "string", "description": "The reason the IPsec Phase-2 Tunnel was terminated.\n Possible reasons include:\n 1 = other\n 2 = normal termination\n 3 = operator request\n 4 = peer delete request was received\n 5 = contact with peer was lost\n 6 = local failure occurred\n 7 = operator initiated check point request" }, "cipSecTunHistActiveIndex": { "type": "integer", "description": "The index of the previously active\n IPsec Phase-2 Tunnel.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunHistIkeTunnelIndex": { "type": "integer", "description": "The index of the associated IPsec Phase-1 Tunnel\n (cikeTunIndex in the cikeTunnelTable).", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunHistLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecTunHistRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecTunHistKeyType": { "type": "string", "description": "The type of key used by the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:KeyType" }, "cipSecTunHistEncapMode": { "type": "string", "description": "The encapsulation mode used by the\n IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncapMode" }, "cipSecTunHistLifeSize": { "type": "integer", "description": "The negotiated LifeSize of the IPsec Phase-2 Tunnel in\n kilobytes.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunHistLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the IPsec Phase-2 Tunnel in\n seconds.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecTunHistStartTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n when the IPsec Phase-2 Tunnel was started.", "x-yang-type": "yang:timestamp" }, "cipSecTunHistActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-2 Tunnel has been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval" }, "cipSecTunHistTotalRefreshes": { "type": "integer", "description": "The total number of security association refreshes\n performed.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistTotalSas": { "type": "integer", "description": "The total number of security associations used\n during the\n life of the IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used by the inbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp" }, "cipSecTunHistInSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the inbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo" }, "cipSecTunHistInSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunHistInSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) \n security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunHistInSaDecompAlgo": { "type": "string", "description": "The decompression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo" }, "cipSecTunHistOutSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp" }, "cipSecTunHistOutSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo" }, "cipSecTunHistOutSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the outbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunHistOutSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) \n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo" }, "cipSecTunHistOutSaCompAlgo": { "type": "string", "description": "The compression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo" }, "cipSecTunHistInOctets": { "type": "integer", "description": "The total number of octets received by this IPsec\n Phase-2 Tunnel. This value is accumulated\n BEFORE determining whether or not the packet should \n be decompressed. See also cipSecTunInOctWraps for \n the number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistHcInOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n received by this IPsec Phase-2 Tunnel. This value is\n accumulated BEFORE determining whether or not \n the packet should be decompressed.", "minimum": 0 }, "cipSecTunHistInOctWraps": { "type": "integer", "description": "The number of times the octets received counter\n (cipSecTunInOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInDecompOctets": { "type": "integer", "description": "The total number of decompressed octets received by this\n IPsec Phase-2 Tunnel. This value is accumulated AFTER\n the packet is decompressed. If compression is not being\n used, this value will match the value of cipSecTunHistInOctets.\n See also cipSecTunInDecompOctWraps for the number of times\n this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistHcInDecompOctets": { "type": "integer", "description": "A high capacity count of the total number of decompressed\n octets received by this IPsec Phase-2 Tunnel. This value\n is accumulated AFTER the packet is decompressed. If\n compression is not being used, this value will match the\n value of cipSecTunHistHcInOctets.", "minimum": 0 }, "cipSecTunHistInDecompOctWraps": { "type": "integer", "description": "The number of times the decompressed octets\n received counter (cipSecTunInDecompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInPkts": { "type": "integer", "description": "The total number of packets received by this\n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n receive processing by this IPsec Phase-2 Tunnel. \n This count does NOT include packets\n dropped due to Anti-Replay processing.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInReplayDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n receive processing due to Anti-Replay processing \n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInAuths": { "type": "integer", "description": "The total number of inbound authentication's\n performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInAuthFails": { "type": "integer", "description": "The total number of inbound authentication's\n which ended in\n failure by this IPsec Phase-2 Tunnel .", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInDecrypts": { "type": "integer", "description": "The total number of inbound decryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistInDecryptFails": { "type": "integer", "description": "The total number of inbound decryption's\n which ended in failure\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec\n Phase-2 Tunnel. This value is accumulated\n AFTER determining whether or not the \n packet should be\n compressed. See also cipSecTunOutOctWraps for the\n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistHcOutOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n sent by this IPsec Phase-2 Tunnel. This value \n is accumulated AFTER determining whether or not \n the packet should be\n compressed.", "minimum": 0 }, "cipSecTunHistOutOctWraps": { "type": "integer", "description": "The number of times the octets sent counter\n (cipSecTunOutOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutUncompOctets": { "type": "integer", "description": "The total number of uncompressed octets sent by this\n IPsec Phase-2 Tunnel. This value is accumulated BEFORE\n the packet is compressed. If compression is not being\n used, this value will match the value of \n cipSecTunHistOutOctets. See also \n cipSecTunOutDecompOctWraps for the number of times\n this counter has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistHcOutUncompOctets": { "type": "integer", "description": "A high capacity count of the total\n number of uncompressed octets sent by this \n IPsec Phase-2 Tunnel. This value is accumulated \n BEFORE the packet is compressed. If compression\n is not being used, this value will match the value of\n cipSecTunHistHcOutOctets.", "minimum": 0 }, "cipSecTunHistOutUncompOctWraps": { "type": "integer", "description": "The number of times the uncompressed octets sent counter\n (cipSecTunOutUncompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutPkts": { "type": "integer", "description": "The total number of packets sent by this\n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutDropPkts": { "type": "integer", "description": "The total number of packets dropped\n during send processing\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutAuths": { "type": "integer", "description": "The total number of outbound authentication's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutAuthFails": { "type": "integer", "description": "The total number of outbound authentication's\n which ended in\n failure by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutEncrypts": { "type": "integer", "description": "The total number of outbound encryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 }, "cipSecTunHistOutEncryptFails": { "type": "integer", "description": "The total number of outbound encryption's\n which ended in failure\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295 } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecTunnelHistEntry": { "cipSecTunHistIndex": 1, "cipSecTunHistTermReason": "192.168.1.1", "cipSecTunHistActiveIndex": 1, "cipSecTunHistIkeTunnelIndex": 1, "cipSecTunHistLocalAddr": "192.168.1.1", "cipSecTunHistRemoteAddr": "192.168.1.1", "cipSecTunHistKeyType": "192.168.1.1", "cipSecTunHistEncapMode": "192.168.1.1", "cipSecTunHistLifeSize": -2147483648, "cipSecTunHistLifeTime": -2147483648, "cipSecTunHistStartTime": "192.168.1.1", "cipSecTunHistActiveTime": "192.168.1.1", "cipSecTunHistTotalRefreshes": 0, "cipSecTunHistTotalSas": 0, "cipSecTunHistInSaDiffHellmanGrp": "192.168.1.1", "cipSecTunHistInSaEncryptAlgo": "192.168.1.1", "cipSecTunHistInSaAhAuthAlgo": "192.168.1.1", "cipSecTunHistInSaEspAuthAlgo": "192.168.1.1", "cipSecTunHistInSaDecompAlgo": "192.168.1.1", "cipSecTunHistOutSaDiffHellmanGrp": "192.168.1.1", "cipSecTunHistOutSaEncryptAlgo": "192.168.1.1", "cipSecTunHistOutSaAhAuthAlgo": "192.168.1.1", "cipSecTunHistOutSaEspAuthAlgo": "192.168.1.1", "cipSecTunHistOutSaCompAlgo": "192.168.1.1", "cipSecTunHistInOctets": 1234567890, "cipSecTunHistHcInOctets": 1234567890, "cipSecTunHistInOctWraps": 0, "cipSecTunHistInDecompOctets": 1234567890, "cipSecTunHistHcInDecompOctets": 1234567890, "cipSecTunHistInDecompOctWraps": 0, "cipSecTunHistInPkts": 0, "cipSecTunHistInDropPkts": 0, "cipSecTunHistInReplayDropPkts": 0, "cipSecTunHistInAuths": 0, "cipSecTunHistInAuthFails": 0, "cipSecTunHistInDecrypts": 0, "cipSecTunHistInDecryptFails": 0, "cipSecTunHistOutOctets": 1234567890, "cipSecTunHistHcOutOctets": 1234567890, "cipSecTunHistOutOctWraps": 0, "cipSecTunHistOutUncompOctets": 1234567890, "cipSecTunHistHcOutUncompOctets": 1234567890, "cipSecTunHistOutUncompOctWraps": 0, "cipSecTunHistOutPkts": 0, "cipSecTunHistOutDropPkts": 0, "cipSecTunHistOutAuths": 0, "cipSecTunHistOutAuthFails": 0, "cipSecTunHistOutEncrypts": 0, "cipSecTunHistOutEncryptFails": 0 } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecTunnelHistEntry-4" }, "x-yang-path": "/cipSecTunnelHistEntry={cipSecTunHistIndex}", "x-restconf-kind": "list-instance", "x-list-keys": [ "cipSecTunHistIndex" ] }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecEndPtHistEntry": { "get": { "summary": "Get cipSecEndPtHistEntry list", "description": "Retrieve list of cipSecEndPtHistEntry entries from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "array", "description": "Each entry contains the attributes associated with\n a previously active IPsec Phase-2 Tunnel Endpoint.", "items": { "type": "object", "properties": { "cipSecEndPtHistIndex": { "type": "integer", "description": "The number of the previously active\n Endpoint associated\n with a IPsec Phase-2 Tunnel Table. The value \n of this index is a number which begins at \n one and is incremented with each Endpoint \n associated with an IPsec Phase-2 Tunnel.\n The value of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtHistTunIndex": { "type": "integer", "description": "The index of the previously active IPsec\n Phase-2 Tunnel Table.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtHistActiveIndex": { "type": "integer", "description": "The index of the previously active Endpoint.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtHistLocalName": { "type": "string", "description": "The DNS name of the local Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cipSecEndPtHistLocalType": { "type": "string", "description": "The type of identity for the local Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType" }, "cipSecEndPtHistLocalAddr1": { "type": "string", "description": "The local Endpoint's first IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the local Endpoint type is IP address range, \n then this is the value of beginning IP address of \n the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtHistLocalAddr2": { "type": "string", "description": "The local Endpoint's second IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the local Endpoint type is IP address range, \n then this\n is the value of ending IP address of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtHistLocalProtocol": { "type": "integer", "description": "The protocol number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtHistLocalPort": { "type": "integer", "description": "The port number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtHistRemoteName": { "type": "string", "description": "The DNS name of the remote Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cipSecEndPtHistRemoteType": { "type": "string", "description": "The type of identity for the remote Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType" }, "cipSecEndPtHistRemoteAddr1": { "type": "string", "description": "The remote Endpoint's first IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this\n is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the remote Endpoint type is IP address range, \n then this\n is the value of beginning IP address of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtHistRemoteAddr2": { "type": "string", "description": "The remote Endpoint's second IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this\n is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the remote Endpoint type is IP address range, \n then this\n is the value of ending IP address of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtHistRemoteProtocol": { "type": "integer", "description": "The protocol number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtHistRemotePort": { "type": "integer", "description": "The port number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecEndPtHistEntry": [ { "cipSecEndPtHistIndex": 1, "cipSecEndPtHistTunIndex": 1, "cipSecEndPtHistActiveIndex": 1, "cipSecEndPtHistLocalName": "192.168.1.1", "cipSecEndPtHistLocalType": "192.168.1.1", "cipSecEndPtHistLocalAddr1": "192.168.1.1", "cipSecEndPtHistLocalAddr2": "192.168.1.1", "cipSecEndPtHistLocalProtocol": -2147483648, "cipSecEndPtHistLocalPort": -2147483648, "cipSecEndPtHistRemoteName": "192.168.1.1", "cipSecEndPtHistRemoteType": "192.168.1.1", "cipSecEndPtHistRemoteAddr1": "192.168.1.1", "cipSecEndPtHistRemoteAddr2": "192.168.1.1", "cipSecEndPtHistRemoteProtocol": -2147483648, "cipSecEndPtHistRemotePort": -2147483648 } ] } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecEndPtHistEntry-3", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cipSecEndPtHistEntry", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecEndPtHistEntry={cipSecEndPtHistIndex}": { "get": { "summary": "Get cipSecEndPtHistEntry entry", "description": "Retrieve specific cipSecEndPtHistEntry entry by key from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "parameters": [ { "name": "cipSecEndPtHistIndex", "in": "path", "required": true, "schema": { "type": "string" }, "example": "1" }, { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "properties": { "cipSecEndPtHistIndex": { "type": "integer", "description": "The number of the previously active\n Endpoint associated\n with a IPsec Phase-2 Tunnel Table. The value \n of this index is a number which begins at \n one and is incremented with each Endpoint \n associated with an IPsec Phase-2 Tunnel.\n The value of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtHistTunIndex": { "type": "integer", "description": "The index of the previously active IPsec\n Phase-2 Tunnel Table.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtHistActiveIndex": { "type": "integer", "description": "The index of the previously active Endpoint.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtHistLocalName": { "type": "string", "description": "The DNS name of the local Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cipSecEndPtHistLocalType": { "type": "string", "description": "The type of identity for the local Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType" }, "cipSecEndPtHistLocalAddr1": { "type": "string", "description": "The local Endpoint's first IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the local Endpoint type is IP address range, \n then this is the value of beginning IP address of \n the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtHistLocalAddr2": { "type": "string", "description": "The local Endpoint's second IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the local Endpoint type is IP address range, \n then this\n is the value of ending IP address of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtHistLocalProtocol": { "type": "integer", "description": "The protocol number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtHistLocalPort": { "type": "integer", "description": "The port number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtHistRemoteName": { "type": "string", "description": "The DNS name of the remote Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cipSecEndPtHistRemoteType": { "type": "string", "description": "The type of identity for the remote Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType" }, "cipSecEndPtHistRemoteAddr1": { "type": "string", "description": "The remote Endpoint's first IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this\n is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the remote Endpoint type is IP address range, \n then this\n is the value of beginning IP address of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtHistRemoteAddr2": { "type": "string", "description": "The remote Endpoint's second IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this\n is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the remote Endpoint type is IP address range, \n then this\n is the value of ending IP address of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtHistRemoteProtocol": { "type": "integer", "description": "The protocol number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtHistRemotePort": { "type": "integer", "description": "The port number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecEndPtHistEntry": { "cipSecEndPtHistIndex": 1, "cipSecEndPtHistTunIndex": 1, "cipSecEndPtHistActiveIndex": 1, "cipSecEndPtHistLocalName": "192.168.1.1", "cipSecEndPtHistLocalType": "192.168.1.1", "cipSecEndPtHistLocalAddr1": "192.168.1.1", "cipSecEndPtHistLocalAddr2": "192.168.1.1", "cipSecEndPtHistLocalProtocol": -2147483648, "cipSecEndPtHistLocalPort": -2147483648, "cipSecEndPtHistRemoteName": "192.168.1.1", "cipSecEndPtHistRemoteType": "192.168.1.1", "cipSecEndPtHistRemoteAddr1": "192.168.1.1", "cipSecEndPtHistRemoteAddr2": "192.168.1.1", "cipSecEndPtHistRemoteProtocol": -2147483648, "cipSecEndPtHistRemotePort": -2147483648 } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecEndPtHistEntry-4" }, "x-yang-path": "/cipSecEndPtHistEntry={cipSecEndPtHistIndex}", "x-restconf-kind": "list-instance", "x-list-keys": [ "cipSecEndPtHistIndex" ] }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikeFailEntry": { "get": { "summary": "Get cikeFailEntry list", "description": "Retrieve list of cikeFailEntry entries from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "array", "description": "Each entry contains the attributes associated\n with\n an IPsec Phase-1 failure.", "items": { "type": "object", "properties": { "cikeFailIndex": { "type": "integer", "description": "The IPsec Phase-1 Failure Table index.\n The value of the index is a number which \n begins at one and is incremented with each \n IPsec Phase-1 failure. The value\n of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeFailReason": { "type": "string", "description": "The reason for the failure. Possible reasons include:\n 1 = other\n 2 = peer delete request was received\n 3 = contact with peer was lost\n 4 = local failure occurred\n 5 = authentication failure\n 6 = hash validation failure\n 7 = encryption failure\n 8 = internal error occurred\n 9 = system capacity failure\n 10 = proposal failure\n 11 = peer's certificate is unavailable\n 12 = peer's certificate was found invalid\n 13 = local certificate expired\n 14 = certificate revoke list (crl) failure\n 15 = peer encoding error\n 16 = non-existent security association\n 17 = operator requested termination." }, "cikeFailTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n at the time of the failure.", "x-yang-type": "yang:timestamp" }, "cikeFailLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikeFailLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeFailRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote\n peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikeFailRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeFailLocalAddr": { "type": "string", "description": "The IP address of the local peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikeFailRemoteAddr": { "type": "string", "description": "The IP address of the remote peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikeFailEntry": [ { "cikeFailIndex": 1, "cikeFailReason": "example-string", "cikeFailTime": "example-string", "cikeFailLocalType": "ethernetCsmacd(6)", "cikeFailLocalValue": "example-string", "cikeFailRemoteType": "ethernetCsmacd(6)", "cikeFailRemoteValue": "example-string", "cikeFailLocalAddr": "192.168.1.1", "cikeFailRemoteAddr": "192.168.1.1" } ] } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikeFailEntry-3", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cikeFailEntry", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikeFailEntry={cikeFailIndex}": { "get": { "summary": "Get cikeFailEntry entry", "description": "Retrieve specific cikeFailEntry entry by key from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "parameters": [ { "name": "cikeFailIndex", "in": "path", "required": true, "schema": { "type": "string" }, "example": "1" }, { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "properties": { "cikeFailIndex": { "type": "integer", "description": "The IPsec Phase-1 Failure Table index.\n The value of the index is a number which \n begins at one and is incremented with each \n IPsec Phase-1 failure. The value\n of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cikeFailReason": { "type": "string", "description": "The reason for the failure. Possible reasons include:\n 1 = other\n 2 = peer delete request was received\n 3 = contact with peer was lost\n 4 = local failure occurred\n 5 = authentication failure\n 6 = hash validation failure\n 7 = encryption failure\n 8 = internal error occurred\n 9 = system capacity failure\n 10 = proposal failure\n 11 = peer's certificate is unavailable\n 12 = peer's certificate was found invalid\n 13 = local certificate expired\n 14 = certificate revoke list (crl) failure\n 15 = peer encoding error\n 16 = non-existent security association\n 17 = operator requested termination." }, "cikeFailTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n at the time of the failure.", "x-yang-type": "yang:timestamp" }, "cikeFailLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikeFailLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeFailRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote\n peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikeFailRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikeFailLocalAddr": { "type": "string", "description": "The IP address of the local peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikeFailRemoteAddr": { "type": "string", "description": "The IP address of the remote peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikeFailEntry": { "cikeFailIndex": 1, "cikeFailReason": "example-string", "cikeFailTime": "example-string", "cikeFailLocalType": "ethernetCsmacd(6)", "cikeFailLocalValue": "example-string", "cikeFailRemoteType": "ethernetCsmacd(6)", "cikeFailRemoteValue": "example-string", "cikeFailLocalAddr": "192.168.1.1", "cikeFailRemoteAddr": "192.168.1.1" } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikeFailEntry-4" }, "x-yang-path": "/cikeFailEntry={cikeFailIndex}", "x-restconf-kind": "list-instance", "x-list-keys": [ "cikeFailIndex" ] }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecFailEntry": { "get": { "summary": "Get cipSecFailEntry list", "description": "Retrieve list of cipSecFailEntry entries from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "array", "description": "Each entry contains the attributes associated with\n an IPsec Phase-1 failure.", "items": { "type": "object", "properties": { "cipSecFailIndex": { "type": "integer", "description": "The IPsec Phase-2 Failure Table index.\n The value of the index is a number which \n begins at one and is incremented with each \n IPsec Phase-1 failure. The value\n of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecFailReason": { "type": "string", "description": "The reason for the failure. Possible reasons\n include:\n 1 = other\n 2 = internal error occurred\n 3 = peer encoding error\n 4 = proposal failure\n 5 = protocol use failure\n 6 = non-existent security association\n 7 = decryption failure\n 8 = encryption failure\n 9 = inbound authentication failure\n 10 = outbound authentication failure\n 11 = compression failure\n 12 = system capacity failure\n 13 = peer delete request was received\n 14 = contact with peer was lost\n 15 = sequence number rolled over\n 16 = operator requested termination." }, "cipSecFailTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n at the time of the failure.", "x-yang-type": "yang:timestamp" }, "cipSecFailTunnelIndex": { "type": "integer", "description": "The Phase-2 Tunnel index (cipSecTunIndex).", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecFailSaSpi": { "type": "integer", "description": "The security association SPI value.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecFailPktSrcAddr": { "type": "string", "description": "The packet's source IP address.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecFailPktDstAddr": { "type": "string", "description": "The packet's destination IP address.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" } } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecFailEntry": [ { "cipSecFailIndex": 1, "cipSecFailReason": "192.168.1.1", "cipSecFailTime": "192.168.1.1", "cipSecFailTunnelIndex": 1, "cipSecFailSaSpi": -2147483648, "cipSecFailPktSrcAddr": "192.168.1.1", "cipSecFailPktDstAddr": "192.168.1.1" } ] } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecFailEntry-3", "parameters": [ { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ] }, "x-yang-path": "/cipSecFailEntry", "x-restconf-kind": "container" }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecFailEntry={cipSecFailIndex}": { "get": { "summary": "Get cipSecFailEntry entry", "description": "Retrieve specific cipSecFailEntry entry by key from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "parameters": [ { "name": "cipSecFailIndex", "in": "path", "required": true, "schema": { "type": "string" }, "example": "1" }, { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "properties": { "cipSecFailIndex": { "type": "integer", "description": "The IPsec Phase-2 Failure Table index.\n The value of the index is a number which \n begins at one and is incremented with each \n IPsec Phase-1 failure. The value\n of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecFailReason": { "type": "string", "description": "The reason for the failure. Possible reasons\n include:\n 1 = other\n 2 = internal error occurred\n 3 = peer encoding error\n 4 = proposal failure\n 5 = protocol use failure\n 6 = non-existent security association\n 7 = decryption failure\n 8 = encryption failure\n 9 = inbound authentication failure\n 10 = outbound authentication failure\n 11 = compression failure\n 12 = system capacity failure\n 13 = peer delete request was received\n 14 = contact with peer was lost\n 15 = sequence number rolled over\n 16 = operator requested termination." }, "cipSecFailTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n at the time of the failure.", "x-yang-type": "yang:timestamp" }, "cipSecFailTunnelIndex": { "type": "integer", "description": "The Phase-2 Tunnel index (cipSecTunIndex).", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecFailSaSpi": { "type": "integer", "description": "The security association SPI value.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecFailPktSrcAddr": { "type": "string", "description": "The packet's source IP address.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecFailPktDstAddr": { "type": "string", "description": "The packet's destination IP address.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecFailEntry": { "cipSecFailIndex": 1, "cipSecFailReason": "192.168.1.1", "cipSecFailTime": "192.168.1.1", "cipSecFailTunnelIndex": 1, "cipSecFailSaSpi": -2147483648, "cipSecFailPktSrcAddr": "192.168.1.1", "cipSecFailPktDstAddr": "192.168.1.1" } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecFailEntry-4" }, "x-yang-path": "/cipSecFailEntry={cipSecFailIndex}", "x-restconf-kind": "list-instance", "x-list-keys": [ "cipSecFailIndex" ] }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikePeerTable/cikePeerEntry={cikePeerLocalType},{cikePeerLocalValue},{cikePeerRemoteType},{cikePeerRemoteValue},{cikePeerIntIndex}": { "get": { "summary": "Get cikePeerEntry entry", "description": "Retrieve specific cikePeerEntry entry by key from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "parameters": [ { "name": "cikePeerLocalType", "in": "path", "required": true, "schema": { "type": "string" } }, { "name": "cikePeerLocalValue", "in": "path", "required": true, "schema": { "type": "string" } }, { "name": "cikePeerRemoteType", "in": "path", "required": true, "schema": { "type": "string" } }, { "name": "cikePeerRemoteValue", "in": "path", "required": true, "schema": { "type": "string" } }, { "name": "cikePeerIntIndex", "in": "path", "required": true, "schema": { "type": "string" } }, { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "properties": { "cikePeerLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikePeerLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikePeerRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikePeerRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikePeerIntIndex": { "type": "integer", "description": "The internal index of the local-remote\n peer association. This internal index is used \n to uniquely identify multiple associations between \n the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647 }, "cikePeerLocalAddr": { "type": "string", "description": "The IP address of the local peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikePeerRemoteAddr": { "type": "string", "description": "The IP address of the remote peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikePeerActiveTime": { "type": "string", "description": "The length of time that the peer association has\n existed in hundredths of a second.", "x-yang-type": "snmpv2-tc:TimeInterval" }, "cikePeerActiveTunnelIndex": { "type": "integer", "description": "The index of the active IPsec Phase-1 IKE Tunnel\n (cikeTunIndex in the cikeTunnelTable) for this peer\n association. If an IPsec Phase-1 IKE Tunnel is\n not currently active, then the value of this\n object will be zero.", "minimum": -2147483648, "maximum": 2147483647 } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikePeerEntry": { "cikePeerLocalType": "ethernetCsmacd(6)", "cikePeerLocalValue": "example-string", "cikePeerRemoteType": "ethernetCsmacd(6)", "cikePeerRemoteValue": "example-string", "cikePeerIntIndex": 1, "cikePeerLocalAddr": "192.168.1.1", "cikePeerRemoteAddr": "192.168.1.1", "cikePeerActiveTime": "example-string", "cikePeerActiveTunnelIndex": 1 } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikePeerEntry-2" }, "x-yang-path": "/cikePeerTable/cikePeerEntry={cikePeerLocalType cikePeerLocalValue cikePeerRemoteType cikePeerRemoteValue cikePeerIntIndex}", "x-restconf-kind": "list-instance", "x-list-keys": [ "cikePeerLocalType cikePeerLocalValue cikePeerRemoteType cikePeerRemoteValue cikePeerIntIndex" ] }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikePeerCorrTable/cikePeerCorrEntry={cikePeerCorrLocalType},{cikePeerCorrLocalValue},{cikePeerCorrRemoteType},{cikePeerCorrRemoteValue},{cikePeerCorrIntIndex},{cikePeerCorrSeqNum}": { "get": { "summary": "Get cikePeerCorrEntry entry", "description": "Retrieve specific cikePeerCorrEntry entry by key from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "parameters": [ { "name": "cikePeerCorrLocalType", "in": "path", "required": true, "schema": { "type": "string" } }, { "name": "cikePeerCorrLocalValue", "in": "path", "required": true, "schema": { "type": "string" } }, { "name": "cikePeerCorrRemoteType", "in": "path", "required": true, "schema": { "type": "string" } }, { "name": "cikePeerCorrRemoteValue", "in": "path", "required": true, "schema": { "type": "string" } }, { "name": "cikePeerCorrIntIndex", "in": "path", "required": true, "schema": { "type": "string" } }, { "name": "cikePeerCorrSeqNum", "in": "path", "required": true, "schema": { "type": "string" } }, { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "properties": { "cikePeerCorrLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikePeerCorrLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikePeerCorrRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikePeerCorrRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikePeerCorrIntIndex": { "type": "integer", "description": "The internal index of the local-remote\n peer association. This internal index is \n used to uniquely identify multiple associations \n between the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647 }, "cikePeerCorrSeqNum": { "type": "integer", "description": "The sequence number of the local-remote\n peer association. This sequence number is \n used to uniquely identify multiple instances \n of an unique association between\n the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647 }, "cikePeerCorrIpSecTunIndex": { "type": "integer", "description": "The index of the active IPsec Phase-2 Tunnel\n (cipSecTunIndex in the cipSecTunnelTable) for this\n IPsec Phase-1 IKE Peer Association.", "minimum": -2147483648, "maximum": 2147483647 } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikePeerCorrEntry": { "cikePeerCorrLocalType": "ethernetCsmacd(6)", "cikePeerCorrLocalValue": "example-string", "cikePeerCorrRemoteType": "ethernetCsmacd(6)", "cikePeerCorrRemoteValue": "example-string", "cikePeerCorrIntIndex": 1, "cikePeerCorrSeqNum": -2147483648, "cikePeerCorrIpSecTunIndex": 1 } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikePeerCorrEntry-2" }, "x-yang-path": "/cikePeerCorrTable/cikePeerCorrEntry={cikePeerCorrLocalType cikePeerCorrLocalValue cikePeerCorrRemoteType cikePeerCorrRemoteValue cikePeerCorrIntIndex cikePeerCorrSeqNum}", "x-restconf-kind": "list-instance", "x-list-keys": [ "cikePeerCorrLocalType cikePeerCorrLocalValue cikePeerCorrRemoteType cikePeerCorrRemoteValue cikePeerCorrIntIndex cikePeerCorrSeqNum" ] }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecEndPtTable/cipSecEndPtEntry={cipSecTunIndex},{cipSecEndPtIndex}": { "get": { "summary": "Get cipSecEndPtEntry entry", "description": "Retrieve specific cipSecEndPtEntry entry by key from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "parameters": [ { "name": "cipSecTunIndex", "in": "path", "required": true, "schema": { "type": "string" } }, { "name": "cipSecEndPtIndex", "in": "path", "required": true, "schema": { "type": "string" } }, { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "properties": { "cipSecTunIndex": { "type": "string", "description": "cipSecTunIndex", "x-yang-type": "leafref" }, "cipSecEndPtIndex": { "type": "integer", "description": "The number of the Endpoint associated with the\n IPsec Phase-2 Tunnel Table. The value of this\n index is a number which begins at one and \n is incremented with each Endpoint associated \n with an IPsec Phase-2 Tunnel.\n The value of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtLocalName": { "type": "string", "description": "The DNS name of the local Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cipSecEndPtLocalType": { "type": "string", "description": "The type of identity for the local Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType" }, "cipSecEndPtLocalAddr1": { "type": "string", "description": "The local Endpoint's first IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the local Endpoint type is IP address range, \n then this is the value of beginning IP address \n of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtLocalAddr2": { "type": "string", "description": "The local Endpoint's second IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the local Endpoint type is IP address range, \n then this is the value of ending IP address \n of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtLocalProtocol": { "type": "integer", "description": "The protocol number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtLocalPort": { "type": "integer", "description": "The port number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtRemoteName": { "type": "string", "description": "The DNS name of the remote Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cipSecEndPtRemoteType": { "type": "string", "description": "The type of identity for the remote Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType" }, "cipSecEndPtRemoteAddr1": { "type": "string", "description": "The remote Endpoint's first IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the remote Endpoint type is IP address range, \n then this is the value of beginning IP address \n of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtRemoteAddr2": { "type": "string", "description": "The remote Endpoint's second IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the remote Endpoint type is IP address range, \n then this is the value of ending IP address of \n the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtRemoteProtocol": { "type": "integer", "description": "The protocol number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtRemotePort": { "type": "integer", "description": "The port number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecEndPtEntry": { "cipSecTunIndex": "192.168.1.1", "cipSecEndPtIndex": 1, "cipSecEndPtLocalName": "192.168.1.1", "cipSecEndPtLocalType": "192.168.1.1", "cipSecEndPtLocalAddr1": "192.168.1.1", "cipSecEndPtLocalAddr2": "192.168.1.1", "cipSecEndPtLocalProtocol": -2147483648, "cipSecEndPtLocalPort": -2147483648, "cipSecEndPtRemoteName": "192.168.1.1", "cipSecEndPtRemoteType": "192.168.1.1", "cipSecEndPtRemoteAddr1": "192.168.1.1", "cipSecEndPtRemoteAddr2": "192.168.1.1", "cipSecEndPtRemoteProtocol": -2147483648, "cipSecEndPtRemotePort": -2147483648 } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecEndPtEntry-2" }, "x-yang-path": "/cipSecEndPtTable/cipSecEndPtEntry={cipSecTunIndex cipSecEndPtIndex}", "x-restconf-kind": "list-instance", "x-list-keys": [ "cipSecTunIndex cipSecEndPtIndex" ] }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecSpiTable/cipSecSpiEntry={cipSecTunIndex},{cipSecSpiIndex}": { "get": { "summary": "Get cipSecSpiEntry entry", "description": "Retrieve specific cipSecSpiEntry entry by key from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "parameters": [ { "name": "cipSecTunIndex", "in": "path", "required": true, "schema": { "type": "string" } }, { "name": "cipSecSpiIndex", "in": "path", "required": true, "schema": { "type": "string" } }, { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "properties": { "cipSecTunIndex": { "type": "string", "description": "cipSecTunIndex", "x-yang-type": "leafref" }, "cipSecSpiIndex": { "type": "integer", "description": "The number of the SPI associated with the\n Phase-2 Tunnel Table. The value of this \n index is a number which begins at one and is \n incremented with each SPI associated with an \n IPsec Phase-2 Tunnel. The value of this \n object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecSpiDirection": { "type": "string", "description": "The direction of the SPI." }, "cipSecSpiValue": { "type": "integer", "description": "The value of the SPI.", "minimum": 0, "maximum": 4294967295 }, "cipSecSpiProtocol": { "type": "string", "description": "The protocol of the SPI." }, "cipSecSpiStatus": { "type": "string", "description": "The status of the SPI." } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecSpiEntry": { "cipSecTunIndex": "192.168.1.1", "cipSecSpiIndex": 1, "cipSecSpiDirection": "192.168.1.1", "cipSecSpiValue": 0, "cipSecSpiProtocol": "192.168.1.1", "cipSecSpiStatus": "192.168.1.1" } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecSpiEntry-2" }, "x-yang-path": "/cipSecSpiTable/cipSecSpiEntry={cipSecTunIndex cipSecSpiIndex}", "x-restconf-kind": "list-instance", "x-list-keys": [ "cipSecTunIndex cipSecSpiIndex" ] }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikePeerEntry={cikePeerLocalType},{cikePeerLocalValue},{cikePeerRemoteType},{cikePeerRemoteValue},{cikePeerIntIndex}": { "get": { "summary": "Get cikePeerEntry entry", "description": "Retrieve specific cikePeerEntry entry by key from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "parameters": [ { "name": "cikePeerLocalType", "in": "path", "required": true, "schema": { "type": "string" } }, { "name": "cikePeerLocalValue", "in": "path", "required": true, "schema": { "type": "string" } }, { "name": "cikePeerRemoteType", "in": "path", "required": true, "schema": { "type": "string" } }, { "name": "cikePeerRemoteValue", "in": "path", "required": true, "schema": { "type": "string" } }, { "name": "cikePeerIntIndex", "in": "path", "required": true, "schema": { "type": "string" } }, { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "properties": { "cikePeerLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikePeerLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikePeerRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikePeerRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikePeerIntIndex": { "type": "integer", "description": "The internal index of the local-remote\n peer association. This internal index is used \n to uniquely identify multiple associations between \n the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647 }, "cikePeerLocalAddr": { "type": "string", "description": "The IP address of the local peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikePeerRemoteAddr": { "type": "string", "description": "The IP address of the remote peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cikePeerActiveTime": { "type": "string", "description": "The length of time that the peer association has\n existed in hundredths of a second.", "x-yang-type": "snmpv2-tc:TimeInterval" }, "cikePeerActiveTunnelIndex": { "type": "integer", "description": "The index of the active IPsec Phase-1 IKE Tunnel\n (cikeTunIndex in the cikeTunnelTable) for this peer\n association. If an IPsec Phase-1 IKE Tunnel is\n not currently active, then the value of this\n object will be zero.", "minimum": -2147483648, "maximum": 2147483647 } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikePeerEntry": { "cikePeerLocalType": "ethernetCsmacd(6)", "cikePeerLocalValue": "example-string", "cikePeerRemoteType": "ethernetCsmacd(6)", "cikePeerRemoteValue": "example-string", "cikePeerIntIndex": 1, "cikePeerLocalAddr": "192.168.1.1", "cikePeerRemoteAddr": "192.168.1.1", "cikePeerActiveTime": "example-string", "cikePeerActiveTunnelIndex": 1 } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikePeerEntry-4" }, "x-yang-path": "/cikePeerEntry={cikePeerLocalType cikePeerLocalValue cikePeerRemoteType cikePeerRemoteValue cikePeerIntIndex}", "x-restconf-kind": "list-instance", "x-list-keys": [ "cikePeerLocalType cikePeerLocalValue cikePeerRemoteType cikePeerRemoteValue cikePeerIntIndex" ] }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cikePeerCorrEntry={cikePeerCorrLocalType},{cikePeerCorrLocalValue},{cikePeerCorrRemoteType},{cikePeerCorrRemoteValue},{cikePeerCorrIntIndex},{cikePeerCorrSeqNum}": { "get": { "summary": "Get cikePeerCorrEntry entry", "description": "Retrieve specific cikePeerCorrEntry entry by key from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "parameters": [ { "name": "cikePeerCorrLocalType", "in": "path", "required": true, "schema": { "type": "string" } }, { "name": "cikePeerCorrLocalValue", "in": "path", "required": true, "schema": { "type": "string" } }, { "name": "cikePeerCorrRemoteType", "in": "path", "required": true, "schema": { "type": "string" } }, { "name": "cikePeerCorrRemoteValue", "in": "path", "required": true, "schema": { "type": "string" } }, { "name": "cikePeerCorrIntIndex", "in": "path", "required": true, "schema": { "type": "string" } }, { "name": "cikePeerCorrSeqNum", "in": "path", "required": true, "schema": { "type": "string" } }, { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "properties": { "cikePeerCorrLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikePeerCorrLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikePeerCorrRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType" }, "cikePeerCorrRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cikePeerCorrIntIndex": { "type": "integer", "description": "The internal index of the local-remote\n peer association. This internal index is \n used to uniquely identify multiple associations \n between the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647 }, "cikePeerCorrSeqNum": { "type": "integer", "description": "The sequence number of the local-remote\n peer association. This sequence number is \n used to uniquely identify multiple instances \n of an unique association between\n the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647 }, "cikePeerCorrIpSecTunIndex": { "type": "integer", "description": "The index of the active IPsec Phase-2 Tunnel\n (cipSecTunIndex in the cipSecTunnelTable) for this\n IPsec Phase-1 IKE Peer Association.", "minimum": -2147483648, "maximum": 2147483647 } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cikePeerCorrEntry": { "cikePeerCorrLocalType": "ethernetCsmacd(6)", "cikePeerCorrLocalValue": "example-string", "cikePeerCorrRemoteType": "ethernetCsmacd(6)", "cikePeerCorrRemoteValue": "example-string", "cikePeerCorrIntIndex": 1, "cikePeerCorrSeqNum": -2147483648, "cikePeerCorrIpSecTunIndex": 1 } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cikePeerCorrEntry-4" }, "x-yang-path": "/cikePeerCorrEntry={cikePeerCorrLocalType cikePeerCorrLocalValue cikePeerCorrRemoteType cikePeerCorrRemoteValue cikePeerCorrIntIndex cikePeerCorrSeqNum}", "x-restconf-kind": "list-instance", "x-list-keys": [ "cikePeerCorrLocalType cikePeerCorrLocalValue cikePeerCorrRemoteType cikePeerCorrRemoteValue cikePeerCorrIntIndex cikePeerCorrSeqNum" ] }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecEndPtEntry={cipSecTunIndex},{cipSecEndPtIndex}": { "get": { "summary": "Get cipSecEndPtEntry entry", "description": "Retrieve specific cipSecEndPtEntry entry by key from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "parameters": [ { "name": "cipSecTunIndex", "in": "path", "required": true, "schema": { "type": "string" } }, { "name": "cipSecEndPtIndex", "in": "path", "required": true, "schema": { "type": "string" } }, { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "properties": { "cipSecTunIndex": { "type": "string", "description": "cipSecTunIndex", "x-yang-type": "leafref" }, "cipSecEndPtIndex": { "type": "integer", "description": "The number of the Endpoint associated with the\n IPsec Phase-2 Tunnel Table. The value of this\n index is a number which begins at one and \n is incremented with each Endpoint associated \n with an IPsec Phase-2 Tunnel.\n The value of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtLocalName": { "type": "string", "description": "The DNS name of the local Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cipSecEndPtLocalType": { "type": "string", "description": "The type of identity for the local Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType" }, "cipSecEndPtLocalAddr1": { "type": "string", "description": "The local Endpoint's first IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the local Endpoint type is IP address range, \n then this is the value of beginning IP address \n of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtLocalAddr2": { "type": "string", "description": "The local Endpoint's second IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the local Endpoint type is IP address range, \n then this is the value of ending IP address \n of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtLocalProtocol": { "type": "integer", "description": "The protocol number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtLocalPort": { "type": "integer", "description": "The port number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtRemoteName": { "type": "string", "description": "The DNS name of the remote Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString" }, "cipSecEndPtRemoteType": { "type": "string", "description": "The type of identity for the remote Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType" }, "cipSecEndPtRemoteAddr1": { "type": "string", "description": "The remote Endpoint's first IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the remote Endpoint type is IP address range, \n then this is the value of beginning IP address \n of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtRemoteAddr2": { "type": "string", "description": "The remote Endpoint's second IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the remote Endpoint type is IP address range, \n then this is the value of ending IP address of \n the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress" }, "cipSecEndPtRemoteProtocol": { "type": "integer", "description": "The protocol number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecEndPtRemotePort": { "type": "integer", "description": "The port number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647 } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecEndPtEntry": { "cipSecTunIndex": "192.168.1.1", "cipSecEndPtIndex": 1, "cipSecEndPtLocalName": "192.168.1.1", "cipSecEndPtLocalType": "192.168.1.1", "cipSecEndPtLocalAddr1": "192.168.1.1", "cipSecEndPtLocalAddr2": "192.168.1.1", "cipSecEndPtLocalProtocol": -2147483648, "cipSecEndPtLocalPort": -2147483648, "cipSecEndPtRemoteName": "192.168.1.1", "cipSecEndPtRemoteType": "192.168.1.1", "cipSecEndPtRemoteAddr1": "192.168.1.1", "cipSecEndPtRemoteAddr2": "192.168.1.1", "cipSecEndPtRemoteProtocol": -2147483648, "cipSecEndPtRemotePort": -2147483648 } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecEndPtEntry-4" }, "x-yang-path": "/cipSecEndPtEntry={cipSecTunIndex cipSecEndPtIndex}", "x-restconf-kind": "list-instance", "x-list-keys": [ "cipSecTunIndex cipSecEndPtIndex" ] }, "/data/CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecSpiEntry={cipSecTunIndex},{cipSecSpiIndex}": { "get": { "summary": "Get cipSecSpiEntry entry", "description": "Retrieve specific cipSecSpiEntry entry by key from MIB", "tags": [ "CISCO-IPSEC-FLOW-MONITOR-MIB" ], "parameters": [ { "name": "cipSecTunIndex", "in": "path", "required": true, "schema": { "type": "string" } }, { "name": "cipSecSpiIndex", "in": "path", "required": true, "schema": { "type": "string" } }, { "name": "Accept", "in": "header", "required": false, "description": "RESTCONF response media type (RFC 8040)", "schema": { "type": "string", "default": "application/yang-data+json", "enum": [ "application/yang-data+json", "application/yang-data+xml" ] } }, { "name": "depth", "in": "query", "required": false, "description": "Limit the depth of returned sub-tree data (RFC 8040 Section 4.8.2). Use 'unbounded' for full depth.", "schema": { "type": "string", "default": "unbounded" } }, { "name": "fields", "in": "query", "required": false, "description": "Select specific fields to return (RFC 8040 Section 4.8.3). Example: fields=name;status", "schema": { "type": "string" } }, { "name": "content", "in": "query", "required": false, "description": "Filter by config state: 'config' (config true only), 'nonconfig' (config false only), or 'all'.", "schema": { "type": "string", "enum": [ "config", "nonconfig", "all" ], "default": "all" } } ], "responses": { "200": { "description": "Success", "content": { "application/yang-data+json": { "schema": { "type": "object", "properties": { "cipSecTunIndex": { "type": "string", "description": "cipSecTunIndex", "x-yang-type": "leafref" }, "cipSecSpiIndex": { "type": "integer", "description": "The number of the SPI associated with the\n Phase-2 Tunnel Table. The value of this \n index is a number which begins at one and is \n incremented with each SPI associated with an \n IPsec Phase-2 Tunnel. The value of this \n object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647 }, "cipSecSpiDirection": { "type": "string", "description": "The direction of the SPI." }, "cipSecSpiValue": { "type": "integer", "description": "The value of the SPI.", "minimum": 0, "maximum": 4294967295 }, "cipSecSpiProtocol": { "type": "string", "description": "The protocol of the SPI." }, "cipSecSpiStatus": { "type": "string", "description": "The status of the SPI." } } }, "example": { "CISCO-IPSEC-FLOW-MONITOR-MIB:cipSecSpiEntry": { "cipSecTunIndex": "192.168.1.1", "cipSecSpiIndex": 1, "cipSecSpiDirection": "192.168.1.1", "cipSecSpiValue": 0, "cipSecSpiProtocol": "192.168.1.1", "cipSecSpiStatus": "192.168.1.1" } } } } }, "403": { "description": "Forbidden ā€” insufficient access rights (NACM)", "content": { "application/yang-data+json": { "schema": { "$ref": "#/components/schemas/restconf-error" } } } } }, "operationId": "get-cipSecSpiEntry-4" }, "x-yang-path": "/cipSecSpiEntry={cipSecTunIndex cipSecSpiIndex}", "x-restconf-kind": "list-instance", "x-list-keys": [ "cipSecTunIndex cipSecSpiIndex" ] } }, "components": { "schemas": { "CISCO-IPSEC-FLOW-MONITOR-MIB_CISCO-IPSEC-FLOW-MONITOR-MIB": { "type": "object", "description": "The level of the IPsec MIB.", "properties": { "cikePeerEntry": { "type": "array", "description": "Each entry contains the attributes associated\n with an IPsec Phase-1 IKE peer association.", "items": { "type": "object", "properties": { "cikePeerLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType", "readOnly": true }, "cikePeerLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikePeerRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType", "readOnly": true }, "cikePeerRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikePeerIntIndex": { "type": "integer", "description": "The internal index of the local-remote\n peer association. This internal index is used \n to uniquely identify multiple associations between \n the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikePeerLocalAddr": { "type": "string", "description": "The IP address of the local peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cikePeerRemoteAddr": { "type": "string", "description": "The IP address of the remote peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cikePeerActiveTime": { "type": "string", "description": "The length of time that the peer association has\n existed in hundredths of a second.", "x-yang-type": "snmpv2-tc:TimeInterval", "readOnly": true }, "cikePeerActiveTunnelIndex": { "type": "integer", "description": "The index of the active IPsec Phase-1 IKE Tunnel\n (cikeTunIndex in the cikeTunnelTable) for this peer\n association. If an IPsec Phase-1 IKE Tunnel is\n not currently active, then the value of this\n object will be zero.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true } } }, "readOnly": true }, "cikeTunnelEntry": { "type": "array", "description": "Each entry contains the attributes associated with\n an active IPsec Phase-1 IKE Tunnel.", "items": { "type": "object", "properties": { "cikeTunIndex": { "type": "integer", "description": "The index of the IPsec Phase-1 IKE Tunnel Table.\n The value of the index is a number which begins \n at one and is incremented with each tunnel that \n is created. The value of this object will \n wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikeTunLocalType": { "type": "string", "description": "The type of local peer identity. The local\n peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType", "readOnly": true }, "cikeTunLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikeTunLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cikeTunLocalName": { "type": "string", "description": "The DNS name of the local IP address for\n the IPsec Phase-1 IKE Tunnel. If the DNS \n name associated with the local tunnel endpoint \n is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikeTunRemoteType": { "type": "string", "description": "The type of remote peer identity.\n The remote peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType", "readOnly": true }, "cikeTunRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then \n this is the host name used to identify the \n remote peer.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikeTunRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cikeTunRemoteName": { "type": "string", "description": "The DNS name of the remote IP address of IPsec Phase-1\n IKE Tunnel. If the DNS name associated with the remote\n tunnel endpoint is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikeTunNegoMode": { "type": "string", "description": "The negotiation mode of the IPsec Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeNegoMode", "readOnly": true }, "cikeTunDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp", "readOnly": true }, "cikeTunEncryptAlgo": { "type": "string", "description": "The encryption algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo", "readOnly": true }, "cikeTunHashAlgo": { "type": "string", "description": "The hash algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeHashAlgo", "readOnly": true }, "cikeTunAuthMethod": { "type": "string", "description": "The authentication method used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeAuthMethod", "readOnly": true }, "cikeTunLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel\n in seconds.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikeTunActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-1 IKE tunnel has been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval", "readOnly": true }, "cikeTunSaRefreshThreshold": { "type": "integer", "description": "The security association refresh threshold in seconds.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikeTunTotalRefreshes": { "type": "integer", "description": "The total number of security associations\n refreshes performed.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunInOctets": { "type": "integer", "description": "The total number of octets received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunInPkts": { "type": "integer", "description": "The total number of packets received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunInDropPkts": { "type": "integer", "description": "The total number of packets dropped\n by this IPsec Phase-1 IKE Tunnel during \n receive processing.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunInNotifys": { "type": "integer", "description": "The total number of notifys received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunInP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunInP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received and found to be invalid \n by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunInP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n received and rejected by this IPsec Phase-1 \n Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunInP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2\n security association delete requests received \n by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunOutPkts": { "type": "integer", "description": "The total number of packets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunOutDropPkts": { "type": "integer", "description": "The total number of packets dropped by this\n IPsec Phase-1 IKE Tunnel during send processing.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunOutNotifys": { "type": "integer", "description": "The total number of notifys sent by this\n IPsec Phase-1 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunOutP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunOutP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n found to be invalid by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunOutP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n rejected by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunOutP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 security association\n delete requests sent by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunStatus": { "type": "string", "description": "The status of the MIB table row.\n \n This object can be used to bring the tunnel down \n by setting value of this object to destroy(2).\n \n This object cannot be used to create \n a MIB table row.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TunnelStatus", "readOnly": true } } }, "readOnly": true }, "cikePeerCorrEntry": { "type": "array", "description": "Each entry contains the attributes of an\n IPsec Phase-1 IKE Peer Association to IPsec\n Phase-2 Tunnel Correlation.", "items": { "type": "object", "properties": { "cikePeerCorrLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType", "readOnly": true }, "cikePeerCorrLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikePeerCorrRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType", "readOnly": true }, "cikePeerCorrRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikePeerCorrIntIndex": { "type": "integer", "description": "The internal index of the local-remote\n peer association. This internal index is \n used to uniquely identify multiple associations \n between the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikePeerCorrSeqNum": { "type": "integer", "description": "The sequence number of the local-remote\n peer association. This sequence number is \n used to uniquely identify multiple instances \n of an unique association between\n the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikePeerCorrIpSecTunIndex": { "type": "integer", "description": "The index of the active IPsec Phase-2 Tunnel\n (cipSecTunIndex in the cipSecTunnelTable) for this\n IPsec Phase-1 IKE Peer Association.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true } } }, "readOnly": true }, "cikePhase1GWStatsEntry": { "type": "array", "description": "Each entry contains the attributes of an Phase-1 IKE stats\n information for the related gateway.\n \n There is only one entry for each gateway. The entry \n is created when a gateway up and cannot be deleted.", "items": { "type": "object", "properties": { "cmgwIndex": { "type": "string", "description": "cmgwIndex", "x-yang-type": "leafref", "readOnly": true }, "cikePhase1GWActiveTunnels": { "type": "integer", "description": "The number of currently active IPsec\n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWPreviousTunnels": { "type": "integer", "description": "The total number of previously active\n IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWInOctets": { "type": "integer", "description": "The total number of octets received by all currently\n and previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWInPkts": { "type": "integer", "description": "The total number of packets received by all\n currently and previously active IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWInDropPkts": { "type": "integer", "description": "The total number of packets which were\n dropped during receive processing by all \n currently and previously\n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWInNotifys": { "type": "integer", "description": "The total number of notifys received by\n all currently and previously active IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWInP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n received by all currently and previously \n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWInP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were received and found to be invalid \n by all currently and previously active IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWInP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were received and rejected by all \n currently and previously active IPsec Phase-1 \n IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWInP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 'Security\n Association' delete requests received by all \n currently and previously active and IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWOutOctets": { "type": "integer", "description": "The total number of octets sent by all currently\n and previously active and IPsec Phase-1 \n IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWOutPkts": { "type": "integer", "description": "The total number of packets sent by all currently\n and previously active and IPsec Phase-1 \n Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWOutDropPkts": { "type": "integer", "description": "The total number of packets which were dropped\n during send processing by all currently \n and previously\n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWOutNotifys": { "type": "integer", "description": "The total number of notifys sent by all currently\n and previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWOutP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were sent by all currently and previously \n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWOutP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were sent and found to be invalid by \n all currently and previously active IPsec Phase-1 \n Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWOutP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were sent and rejected by all currently and\n previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWOutP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 SA\n delete requests sent by all currently and \n previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWInitTunnels": { "type": "integer", "description": "The total number of IPsec Phase-1 IKE\n Tunnels which were locally initiated.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWInitTunnelFails": { "type": "integer", "description": "The total number of IPsec Phase-1 IKE Tunnels\n which were locally initiated and failed to activate.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWRespTunnelFails": { "type": "integer", "description": "The total number of IPsec Phase-1 IKE Tunnels\n which were remotely initiated and failed to activate.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWSysCapFails": { "type": "integer", "description": "The total number of system capacity failures\n which occurred during processing of all current \n and previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWAuthFails": { "type": "integer", "description": "The total number of authentications which ended\n in failure by all current and previous IPsec Phase-1\n IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWDecryptFails": { "type": "integer", "description": "The total number of decryptions which ended\n in failure by all current and previous IPsec Phase-1\n IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWHashValidFails": { "type": "integer", "description": "The total number of hash validations which ended\n in failure by all current and previous IPsec Phase-1\n IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWNoSaFails": { "type": "integer", "description": "The total number of non-existent 'Security Association'\n failures occurred during processing of current and \n previous IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true } } }, "readOnly": true }, "cipSecTunnelEntry": { "type": "array", "description": "Each entry contains the attributes\n associated with an active IPsec Phase-2 Tunnel.", "items": { "type": "object", "properties": { "cipSecTunIndex": { "type": "integer", "description": "The index of the IPsec Phase-2 Tunnel Table.\n The value of the index is a number which begins \n at one and is incremented with each tunnel that \n is created. The value of this object will wrap \n at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunIkeTunnelIndex": { "type": "integer", "description": "The index of the associated IPsec Phase-1\n IKE Tunnel.\n (cikeTunIndex in the cikeTunnelTable)", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunIkeTunnelAlive": { "type": "boolean", "description": "An indicator which specifies whether or not the\n IPsec Phase-1 IKE Tunnel currently exists.", "readOnly": true }, "cipSecTunLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecTunRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecTunKeyType": { "type": "string", "description": "The type of key used by the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:KeyType", "readOnly": true }, "cipSecTunEncapMode": { "type": "string", "description": "The encapsulation mode used by the\n IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncapMode", "readOnly": true }, "cipSecTunLifeSize": { "type": "integer", "description": "The negotiated LifeSize of the\n IPsec Phase-2 Tunnel in kilobytes.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the\n IPsec Phase-2 Tunnel in seconds.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-2\n Tunnel has been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval", "readOnly": true }, "cipSecTunSaLifeSizeThreshold": { "type": "integer", "description": "The security association LifeSize refresh\n threshold in kilobytes.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunSaLifeTimeThreshold": { "type": "integer", "description": "The security association LifeTime refresh\n threshold in seconds.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunTotalRefreshes": { "type": "integer", "description": "The total number of security\n association refreshes performed.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunExpiredSaInstances": { "type": "integer", "description": "The total number of security associations\n which have expired.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunCurrentSaInstances": { "type": "integer", "description": "The number of security associations\n which are currently active or expiring.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunInSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used\n by the inbound security association of the \n IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp", "readOnly": true }, "cipSecTunInSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the inbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo", "readOnly": true }, "cipSecTunInSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo", "readOnly": true }, "cipSecTunInSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) security \n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo", "readOnly": true }, "cipSecTunInSaDecompAlgo": { "type": "string", "description": "The decompression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo", "readOnly": true }, "cipSecTunOutSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp", "readOnly": true }, "cipSecTunOutSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo", "readOnly": true }, "cipSecTunOutSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the outbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo", "readOnly": true }, "cipSecTunOutSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) \n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo", "readOnly": true }, "cipSecTunOutSaCompAlgo": { "type": "string", "description": "The compression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo", "readOnly": true }, "cipSecTunInOctets": { "type": "integer", "description": "The total number of octets received by this IPsec\n Phase-2 Tunnel. This value is accumulated\n BEFORE determining whether or not the packet should be\n decompressed. See also cipSecTunInOctWraps for the\n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHcInOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n received by this IPsec Phase-2 Tunnel. This value is\n accumulated BEFORE determining whether or not the packet\n should be decompressed.", "minimum": 0, "readOnly": true }, "cipSecTunInOctWraps": { "type": "integer", "description": "The number of times the octets received counter\n (cipSecTunInOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunInDecompOctets": { "type": "integer", "description": "The total number of decompressed octets received\n by this IPsec Phase-2 Tunnel. This value is \n accumulated AFTER the packet is decompressed. \n If compression is not being\n used, this value will match the value of \n cipSecTunInOctets. See also cipSecTunInDecompOctWraps \n for the number of times\n this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHcInDecompOctets": { "type": "integer", "description": "A high capacity count of the total number of decompressed\n octets received by this IPsec Phase-2 Tunnel. This value\n is accumulated AFTER the packet is decompressed. If\n compression is not being used, this value will match the\n value of cipSecTunHcInOctets.", "minimum": 0, "readOnly": true }, "cipSecTunInDecompOctWraps": { "type": "integer", "description": "The number of times the decompressed\n octets received counter\n (cipSecTunInDecompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunInPkts": { "type": "integer", "description": "The total number of packets received\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunInDropPkts": { "type": "integer", "description": "The total number of packets dropped\n during receive processing by this IPsec Phase-2 \n Tunnel. This count does NOT include\n packets dropped due to Anti-Replay processing.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunInReplayDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n receive processing due to Anti-Replay processing \n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunInAuths": { "type": "integer", "description": "The total number of inbound\n authentication's performed by this \n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunInAuthFails": { "type": "integer", "description": "The total number of inbound authentication's\n which ended in\n failure by this IPsec Phase-2 Tunnel .", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunInDecrypts": { "type": "integer", "description": "The total number of inbound decryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunInDecryptFails": { "type": "integer", "description": "The total number of inbound decryption's\n which ended in failure\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec\n Phase-2 Tunnel. This value is accumulated\n AFTER determining whether or not the packet should \n be compressed. See also cipSecTunOutOctWraps for\n the number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHcOutOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n sent by this IPsec Phase-2 Tunnel. This value is\n accumulated AFTER determining whether or not the \n packet\n should be compressed.", "minimum": 0, "readOnly": true }, "cipSecTunOutOctWraps": { "type": "integer", "description": "The number of times the out octets counter\n (cipSecTunOutOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunOutUncompOctets": { "type": "integer", "description": "The total number of uncompressed octets sent\n by this IPsec Phase-2 Tunnel. This value \n is accumulated BEFORE the packet is compressed. \n If compression is not being used, this value \n will match the value of cipSecTunOutOctets.\n See also cipSecTunOutDecompOctWraps for the \n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHcOutUncompOctets": { "type": "integer", "description": "A high capacity count of the total number\n of uncompressed octets sent by this IPsec \n Phase-2 Tunnel. This value is accumulated BEFORE \n the packet is compressed. If compression\n is not being used, this value will match the value\n of cipSecTunHcOutOctets.", "minimum": 0, "readOnly": true }, "cipSecTunOutUncompOctWraps": { "type": "integer", "description": "The number of times the uncompressed octets sent\n counter (cipSecTunOutUncompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunOutPkts": { "type": "integer", "description": "The total number of packets sent by this\n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunOutDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n send processing by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunOutAuths": { "type": "integer", "description": "The total number of outbound authentication's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunOutAuthFails": { "type": "integer", "description": "The total number of outbound\n authentication's which ended in failure \n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunOutEncrypts": { "type": "integer", "description": "The total number of outbound encryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunOutEncryptFails": { "type": "integer", "description": "The total number of outbound encryption's\n which ended in failure by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunStatus": { "type": "string", "description": "The status of the MIB table row.\n \n This object can be used to bring the tunnel down\n by setting value of this object to destroy(2).\n When the value is set to destroy(2), the SA\n bundle is destroyed and this row is deleted\n from this table.\n \n When this MIB value is queried, the value of\n active(1) is always returned, if the instance \n exists.\n \n This object cannot be used to create a MIB \n table row.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TunnelStatus", "readOnly": true } } }, "readOnly": true }, "cipSecEndPtEntry": { "type": "array", "description": "An IPsec Phase-2 Tunnel Endpoint entry.", "items": { "type": "object", "properties": { "cipSecTunIndex": { "type": "string", "description": "cipSecTunIndex", "x-yang-type": "leafref", "readOnly": true }, "cipSecEndPtIndex": { "type": "integer", "description": "The number of the Endpoint associated with the\n IPsec Phase-2 Tunnel Table. The value of this\n index is a number which begins at one and \n is incremented with each Endpoint associated \n with an IPsec Phase-2 Tunnel.\n The value of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecEndPtLocalName": { "type": "string", "description": "The DNS name of the local Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cipSecEndPtLocalType": { "type": "string", "description": "The type of identity for the local Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType", "readOnly": true }, "cipSecEndPtLocalAddr1": { "type": "string", "description": "The local Endpoint's first IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the local Endpoint type is IP address range, \n then this is the value of beginning IP address \n of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecEndPtLocalAddr2": { "type": "string", "description": "The local Endpoint's second IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the local Endpoint type is IP address range, \n then this is the value of ending IP address \n of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecEndPtLocalProtocol": { "type": "integer", "description": "The protocol number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecEndPtLocalPort": { "type": "integer", "description": "The port number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecEndPtRemoteName": { "type": "string", "description": "The DNS name of the remote Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cipSecEndPtRemoteType": { "type": "string", "description": "The type of identity for the remote Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType", "readOnly": true }, "cipSecEndPtRemoteAddr1": { "type": "string", "description": "The remote Endpoint's first IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the remote Endpoint type is IP address range, \n then this is the value of beginning IP address \n of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecEndPtRemoteAddr2": { "type": "string", "description": "The remote Endpoint's second IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the remote Endpoint type is IP address range, \n then this is the value of ending IP address of \n the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecEndPtRemoteProtocol": { "type": "integer", "description": "The protocol number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecEndPtRemotePort": { "type": "integer", "description": "The port number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true } } }, "readOnly": true }, "cipSecSpiEntry": { "type": "array", "description": "Each entry contains the attributes associated with\n active and expiring IPsec Phase-2 \n security associations.", "items": { "type": "object", "properties": { "cipSecTunIndex": { "type": "string", "description": "cipSecTunIndex", "x-yang-type": "leafref", "readOnly": true }, "cipSecSpiIndex": { "type": "integer", "description": "The number of the SPI associated with the\n Phase-2 Tunnel Table. The value of this \n index is a number which begins at one and is \n incremented with each SPI associated with an \n IPsec Phase-2 Tunnel. The value of this \n object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecSpiDirection": { "type": "string", "description": "The direction of the SPI.", "readOnly": true }, "cipSecSpiValue": { "type": "integer", "description": "The value of the SPI.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecSpiProtocol": { "type": "string", "description": "The protocol of the SPI.", "readOnly": true }, "cipSecSpiStatus": { "type": "string", "description": "The status of the SPI.", "readOnly": true } } }, "readOnly": true }, "cipSecPhase2GWStatsEntry": { "type": "array", "description": "Each entry contains the attributes of an Phase-2 IPsec stats\n information for the related gateway.\n \n There is only one entry for each gateway. The entry \n is created when a gateway up and cannot be deleted.", "items": { "type": "object", "properties": { "cmgwIndex": { "type": "string", "description": "cmgwIndex", "x-yang-type": "leafref", "readOnly": true }, "cipSecPhase2GWActiveTunnels": { "type": "integer", "description": "The total number of currently active\n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWPreviousTunnels": { "type": "integer", "description": "The total number of previously active\n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInOctets": { "type": "integer", "description": "The total number of octets received by all\n current and previous IPsec Phase-2 Tunnels. \n This value is accumulated BEFORE determining \n whether or not the packet should be decompressed. \n See also cipSecGlobalInOctWraps for the number\n of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInOctWraps": { "type": "integer", "description": "The number of times the global octets received\n counter (cipSecGlobalInOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInDecompOctets": { "type": "integer", "description": "The total number of decompressed octets received\n by all current and previous IPsec Phase-2 Tunnels. \n This value is accumulated AFTER the packet is \n decompressed. If compression is not being used, \n this value will match the value of cipSecGlobalInOctets. \n See also cipSecGlobalInDecompOctWraps\n for the number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInDecompOctWraps": { "type": "integer", "description": "The number of times the global decompressed\n octets received counter (cipSecGlobalInDecompOctets) \n has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInPkts": { "type": "integer", "description": "The total number of packets received\n by all current and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInDrops": { "type": "integer", "description": "The total number of packets dropped\n during receive processing by all current and previous \n IPsec Phase-2 Tunnels. This count does NOT include \n packets dropped due to Anti-Replay processing.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInReplayDrops": { "type": "integer", "description": "The total number of packets dropped during\n receive processing due to Anti-Replay \n processing by all current and previous IPsec\n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInAuths": { "type": "integer", "description": "The total number of inbound authentication's\n performed by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInAuthFails": { "type": "integer", "description": "The total number of inbound authentication's\n which ended in failure by all current and previous \n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInDecrypts": { "type": "integer", "description": "The total number of inbound decryption's\n performed by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInDecryptFails": { "type": "integer", "description": "The total number of inbound decryption's\n which ended in failure by all current and \n previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWOutOctets": { "type": "integer", "description": "The total number of octets sent by all\n current and previous IPsec Phase-2 Tunnels. \n This value is accumulated AFTER determining \n whether or not the packet should be compressed. \n See also cipSecGlobalOutOctWraps for the\n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWOutOctWraps": { "type": "integer", "description": "The number of times the global octets sent counter\n (cipSecGlobalOutOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWOutUncompOctets": { "type": "integer", "description": "The total number of uncompressed octets sent\n by all current and previous IPsec Phase-2 Tunnels. \n This value is accumulated BEFORE the packet is \n compressed. If compression is not being used, this \n value will match the value of cipSecGlobalOutOctets. \n See also cipSecGlobalOutDecompOctWraps for the number \n of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWOutUncompOctWraps": { "type": "integer", "description": "The number of times the global uncompressed\n octets sent counter (cipSecGlobalOutUncompOctets) \n has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWOutPkts": { "type": "integer", "description": "The total number of packets sent by all\n current and previous IPsec Phase-2 \n Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWOutDrops": { "type": "integer", "description": "The total number of packets dropped during send\n processing by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWOutAuths": { "type": "integer", "description": "The total number of outbound authentication's\n performed by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWOutAuthFails": { "type": "integer", "description": "The total number of outbound authentication's\n which ended in failure\n by all current and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWOutEncrypts": { "type": "integer", "description": "The total number of outbound encryption's performed\n by all current and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWOutEncryptFails": { "type": "integer", "description": "The total number of outbound encryption's\n which ended in failure by all current and \n previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWProtocolUseFails": { "type": "integer", "description": "The total number of protocol use failures\n which occurred during processing of all current \n and previously active IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWNoSaFails": { "type": "integer", "description": "The total number of non-existent\n Security Association in failures which occurred \n during processing of all current\n and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWSysCapFails": { "type": "integer", "description": "The total number of system capacity failures\n which occurred during processing of all current \n and previously active IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true } } }, "readOnly": true }, "cikeTunnelHistEntry": { "type": "array", "description": "Each entry contains the attributes\n associated with a previously active IPsec \n Phase-1 IKE Tunnel.", "items": { "type": "object", "properties": { "cikeTunHistIndex": { "type": "integer", "description": "The index of the IPsec Phase-1 IKE Tunnel History\n Table. The value of the index is a number which \n begins at one and is incremented with each \n tunnel that ends. The value of this object \n will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikeTunHistTermReason": { "type": "string", "description": "The reason the IPsec Phase-1 IKE Tunnel was terminated.\n Possible reasons include:\n 1 = other\n 2 = normal termination\n 3 = operator request\n 4 = peer delete request was received\n 5 = contact with peer was lost\n 6 = local failure occurred.\n 7 = operator initiated check point request", "readOnly": true }, "cikeTunHistActiveIndex": { "type": "integer", "description": "The index of the previously active IPsec\n Phase-1 IKE Tunnel.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikeTunHistPeerLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType", "readOnly": true }, "cikeTunHistPeerLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikeTunHistPeerIntIndex": { "type": "integer", "description": "The internal index of the local-remote peer\n association. This internal index is used to \n uniquely identify multiple associations between \n the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikeTunHistPeerRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote\n peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType", "readOnly": true }, "cikeTunHistPeerRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikeTunHistLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cikeTunHistLocalName": { "type": "string", "description": "The DNS name of the local IP address for\n the IPsec Phase-1 IKE Tunnel. If the DNS \n name associated with the local tunnel endpoint \n is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikeTunHistRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cikeTunHistRemoteName": { "type": "string", "description": "The DNS name of the remote IP address of IPsec Phase-1\n IKE Tunnel. If the DNS name associated with the remote\n tunnel endpoint is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikeTunHistNegoMode": { "type": "string", "description": "The negotiation mode of the IPsec Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeNegoMode", "readOnly": true }, "cikeTunHistDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp", "readOnly": true }, "cikeTunHistEncryptAlgo": { "type": "string", "description": "The encryption algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo", "readOnly": true }, "cikeTunHistHashAlgo": { "type": "string", "description": "The hash algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeHashAlgo", "readOnly": true }, "cikeTunHistAuthMethod": { "type": "string", "description": "The authentication method used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeAuthMethod", "readOnly": true }, "cikeTunHistLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel\n in seconds.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikeTunHistStartTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n when the IPsec Phase-1 IKE tunnel was started.", "x-yang-type": "yang:timestamp", "readOnly": true }, "cikeTunHistActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-1 IKE tunnel was been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval", "readOnly": true }, "cikeTunHistTotalRefreshes": { "type": "integer", "description": "The total number of security associations\n refreshes performed.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistTotalSas": { "type": "integer", "description": "The total number of security associations\n used during the\n life of the IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistInOctets": { "type": "integer", "description": "The total number of octets\n received by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistInPkts": { "type": "integer", "description": "The total number of packets received\n by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistInDropPkts": { "type": "integer", "description": "The total number of packets dropped\n by this IPsec Phase-1\n IKE Tunnel during receive processing.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistInNotifys": { "type": "integer", "description": "The total number of notifys received\n by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistInP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistInP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received and\n found to be invalid by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistInP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received and\n rejected by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistInP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 security association\n delete requests received by this IPsec \n Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistOutPkts": { "type": "integer", "description": "The total number of packets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistOutDropPkts": { "type": "integer", "description": "The total number of packets dropped\n by this IPsec Phase-1\n IKE Tunnel during send processing.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistOutNotifys": { "type": "integer", "description": "The total number of notifys sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistOutP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistOutP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n found to be invalid by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistOutP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n rejected by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistOutP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 security association\n delete requests sent by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true } } }, "readOnly": true }, "cipSecTunnelHistEntry": { "type": "array", "description": "Each entry contains the attributes associated with\n a previously active IPsec Phase-2 Tunnel.", "items": { "type": "object", "properties": { "cipSecTunHistIndex": { "type": "integer", "description": "The index of the IPsec Phase-2 Tunnel History Table.\n The value of the index is a number which \n begins at one and is incremented with each tunnel \n that ends. The value\n of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunHistTermReason": { "type": "string", "description": "The reason the IPsec Phase-2 Tunnel was terminated.\n Possible reasons include:\n 1 = other\n 2 = normal termination\n 3 = operator request\n 4 = peer delete request was received\n 5 = contact with peer was lost\n 6 = local failure occurred\n 7 = operator initiated check point request", "readOnly": true }, "cipSecTunHistActiveIndex": { "type": "integer", "description": "The index of the previously active\n IPsec Phase-2 Tunnel.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunHistIkeTunnelIndex": { "type": "integer", "description": "The index of the associated IPsec Phase-1 Tunnel\n (cikeTunIndex in the cikeTunnelTable).", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunHistLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecTunHistRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecTunHistKeyType": { "type": "string", "description": "The type of key used by the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:KeyType", "readOnly": true }, "cipSecTunHistEncapMode": { "type": "string", "description": "The encapsulation mode used by the\n IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncapMode", "readOnly": true }, "cipSecTunHistLifeSize": { "type": "integer", "description": "The negotiated LifeSize of the IPsec Phase-2 Tunnel in\n kilobytes.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunHistLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the IPsec Phase-2 Tunnel in\n seconds.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunHistStartTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n when the IPsec Phase-2 Tunnel was started.", "x-yang-type": "yang:timestamp", "readOnly": true }, "cipSecTunHistActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-2 Tunnel has been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval", "readOnly": true }, "cipSecTunHistTotalRefreshes": { "type": "integer", "description": "The total number of security association refreshes\n performed.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistTotalSas": { "type": "integer", "description": "The total number of security associations used\n during the\n life of the IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistInSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used by the inbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp", "readOnly": true }, "cipSecTunHistInSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the inbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo", "readOnly": true }, "cipSecTunHistInSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo", "readOnly": true }, "cipSecTunHistInSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) \n security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo", "readOnly": true }, "cipSecTunHistInSaDecompAlgo": { "type": "string", "description": "The decompression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo", "readOnly": true }, "cipSecTunHistOutSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp", "readOnly": true }, "cipSecTunHistOutSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo", "readOnly": true }, "cipSecTunHistOutSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the outbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo", "readOnly": true }, "cipSecTunHistOutSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) \n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo", "readOnly": true }, "cipSecTunHistOutSaCompAlgo": { "type": "string", "description": "The compression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo", "readOnly": true }, "cipSecTunHistInOctets": { "type": "integer", "description": "The total number of octets received by this IPsec\n Phase-2 Tunnel. This value is accumulated\n BEFORE determining whether or not the packet should \n be decompressed. See also cipSecTunInOctWraps for \n the number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistHcInOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n received by this IPsec Phase-2 Tunnel. This value is\n accumulated BEFORE determining whether or not \n the packet should be decompressed.", "minimum": 0, "readOnly": true }, "cipSecTunHistInOctWraps": { "type": "integer", "description": "The number of times the octets received counter\n (cipSecTunInOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistInDecompOctets": { "type": "integer", "description": "The total number of decompressed octets received by this\n IPsec Phase-2 Tunnel. This value is accumulated AFTER\n the packet is decompressed. If compression is not being\n used, this value will match the value of cipSecTunHistInOctets.\n See also cipSecTunInDecompOctWraps for the number of times\n this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistHcInDecompOctets": { "type": "integer", "description": "A high capacity count of the total number of decompressed\n octets received by this IPsec Phase-2 Tunnel. This value\n is accumulated AFTER the packet is decompressed. If\n compression is not being used, this value will match the\n value of cipSecTunHistHcInOctets.", "minimum": 0, "readOnly": true }, "cipSecTunHistInDecompOctWraps": { "type": "integer", "description": "The number of times the decompressed octets\n received counter (cipSecTunInDecompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistInPkts": { "type": "integer", "description": "The total number of packets received by this\n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistInDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n receive processing by this IPsec Phase-2 Tunnel. \n This count does NOT include packets\n dropped due to Anti-Replay processing.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistInReplayDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n receive processing due to Anti-Replay processing \n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistInAuths": { "type": "integer", "description": "The total number of inbound authentication's\n performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistInAuthFails": { "type": "integer", "description": "The total number of inbound authentication's\n which ended in\n failure by this IPsec Phase-2 Tunnel .", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistInDecrypts": { "type": "integer", "description": "The total number of inbound decryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistInDecryptFails": { "type": "integer", "description": "The total number of inbound decryption's\n which ended in failure\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec\n Phase-2 Tunnel. This value is accumulated\n AFTER determining whether or not the \n packet should be\n compressed. See also cipSecTunOutOctWraps for the\n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistHcOutOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n sent by this IPsec Phase-2 Tunnel. This value \n is accumulated AFTER determining whether or not \n the packet should be\n compressed.", "minimum": 0, "readOnly": true }, "cipSecTunHistOutOctWraps": { "type": "integer", "description": "The number of times the octets sent counter\n (cipSecTunOutOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistOutUncompOctets": { "type": "integer", "description": "The total number of uncompressed octets sent by this\n IPsec Phase-2 Tunnel. This value is accumulated BEFORE\n the packet is compressed. If compression is not being\n used, this value will match the value of \n cipSecTunHistOutOctets. See also \n cipSecTunOutDecompOctWraps for the number of times\n this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistHcOutUncompOctets": { "type": "integer", "description": "A high capacity count of the total\n number of uncompressed octets sent by this \n IPsec Phase-2 Tunnel. This value is accumulated \n BEFORE the packet is compressed. If compression\n is not being used, this value will match the value of\n cipSecTunHistHcOutOctets.", "minimum": 0, "readOnly": true }, "cipSecTunHistOutUncompOctWraps": { "type": "integer", "description": "The number of times the uncompressed octets sent counter\n (cipSecTunOutUncompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistOutPkts": { "type": "integer", "description": "The total number of packets sent by this\n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistOutDropPkts": { "type": "integer", "description": "The total number of packets dropped\n during send processing\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistOutAuths": { "type": "integer", "description": "The total number of outbound authentication's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistOutAuthFails": { "type": "integer", "description": "The total number of outbound authentication's\n which ended in\n failure by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistOutEncrypts": { "type": "integer", "description": "The total number of outbound encryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistOutEncryptFails": { "type": "integer", "description": "The total number of outbound encryption's\n which ended in failure\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true } } }, "readOnly": true }, "cipSecEndPtHistEntry": { "type": "array", "description": "Each entry contains the attributes associated with\n a previously active IPsec Phase-2 Tunnel Endpoint.", "items": { "type": "object", "properties": { "cipSecEndPtHistIndex": { "type": "integer", "description": "The number of the previously active\n Endpoint associated\n with a IPsec Phase-2 Tunnel Table. The value \n of this index is a number which begins at \n one and is incremented with each Endpoint \n associated with an IPsec Phase-2 Tunnel.\n The value of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecEndPtHistTunIndex": { "type": "integer", "description": "The index of the previously active IPsec\n Phase-2 Tunnel Table.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecEndPtHistActiveIndex": { "type": "integer", "description": "The index of the previously active Endpoint.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecEndPtHistLocalName": { "type": "string", "description": "The DNS name of the local Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cipSecEndPtHistLocalType": { "type": "string", "description": "The type of identity for the local Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType", "readOnly": true }, "cipSecEndPtHistLocalAddr1": { "type": "string", "description": "The local Endpoint's first IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the local Endpoint type is IP address range, \n then this is the value of beginning IP address of \n the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecEndPtHistLocalAddr2": { "type": "string", "description": "The local Endpoint's second IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the local Endpoint type is IP address range, \n then this\n is the value of ending IP address of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecEndPtHistLocalProtocol": { "type": "integer", "description": "The protocol number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecEndPtHistLocalPort": { "type": "integer", "description": "The port number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecEndPtHistRemoteName": { "type": "string", "description": "The DNS name of the remote Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cipSecEndPtHistRemoteType": { "type": "string", "description": "The type of identity for the remote Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType", "readOnly": true }, "cipSecEndPtHistRemoteAddr1": { "type": "string", "description": "The remote Endpoint's first IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this\n is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the remote Endpoint type is IP address range, \n then this\n is the value of beginning IP address of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecEndPtHistRemoteAddr2": { "type": "string", "description": "The remote Endpoint's second IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this\n is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the remote Endpoint type is IP address range, \n then this\n is the value of ending IP address of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecEndPtHistRemoteProtocol": { "type": "integer", "description": "The protocol number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecEndPtHistRemotePort": { "type": "integer", "description": "The port number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true } } }, "readOnly": true }, "cikeFailEntry": { "type": "array", "description": "Each entry contains the attributes associated\n with\n an IPsec Phase-1 failure.", "items": { "type": "object", "properties": { "cikeFailIndex": { "type": "integer", "description": "The IPsec Phase-1 Failure Table index.\n The value of the index is a number which \n begins at one and is incremented with each \n IPsec Phase-1 failure. The value\n of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikeFailReason": { "type": "string", "description": "The reason for the failure. Possible reasons include:\n 1 = other\n 2 = peer delete request was received\n 3 = contact with peer was lost\n 4 = local failure occurred\n 5 = authentication failure\n 6 = hash validation failure\n 7 = encryption failure\n 8 = internal error occurred\n 9 = system capacity failure\n 10 = proposal failure\n 11 = peer's certificate is unavailable\n 12 = peer's certificate was found invalid\n 13 = local certificate expired\n 14 = certificate revoke list (crl) failure\n 15 = peer encoding error\n 16 = non-existent security association\n 17 = operator requested termination.", "readOnly": true }, "cikeFailTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n at the time of the failure.", "x-yang-type": "yang:timestamp", "readOnly": true }, "cikeFailLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType", "readOnly": true }, "cikeFailLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikeFailRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote\n peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType", "readOnly": true }, "cikeFailRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikeFailLocalAddr": { "type": "string", "description": "The IP address of the local peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cikeFailRemoteAddr": { "type": "string", "description": "The IP address of the remote peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true } } }, "readOnly": true }, "cipSecFailEntry": { "type": "array", "description": "Each entry contains the attributes associated with\n an IPsec Phase-1 failure.", "items": { "type": "object", "properties": { "cipSecFailIndex": { "type": "integer", "description": "The IPsec Phase-2 Failure Table index.\n The value of the index is a number which \n begins at one and is incremented with each \n IPsec Phase-1 failure. The value\n of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecFailReason": { "type": "string", "description": "The reason for the failure. Possible reasons\n include:\n 1 = other\n 2 = internal error occurred\n 3 = peer encoding error\n 4 = proposal failure\n 5 = protocol use failure\n 6 = non-existent security association\n 7 = decryption failure\n 8 = encryption failure\n 9 = inbound authentication failure\n 10 = outbound authentication failure\n 11 = compression failure\n 12 = system capacity failure\n 13 = peer delete request was received\n 14 = contact with peer was lost\n 15 = sequence number rolled over\n 16 = operator requested termination.", "readOnly": true }, "cipSecFailTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n at the time of the failure.", "x-yang-type": "yang:timestamp", "readOnly": true }, "cipSecFailTunnelIndex": { "type": "integer", "description": "The Phase-2 Tunnel index (cipSecTunIndex).", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecFailSaSpi": { "type": "integer", "description": "The security association SPI value.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecFailPktSrcAddr": { "type": "string", "description": "The packet's source IP address.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecFailPktDstAddr": { "type": "string", "description": "The packet's destination IP address.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true } } }, "readOnly": true }, "cipSecLevels": { "type": "object", "description": "The level of the IPsec MIB.", "properties": { "cipSecMibLevel": { "type": "integer", "description": "The level of the IPsec MIB.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true } }, "readOnly": true }, "cikeGlobalStats": { "type": "object", "description": "The number of currently active IPsec\n Phase-1 IKE Tunnels.", "properties": { "cikeGlobalActiveTunnels": { "type": "integer", "description": "The number of currently active IPsec\n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeGlobalPreviousTunnels": { "type": "integer", "description": "The total number of previously active\n IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeGlobalInOctets": { "type": "integer", "description": "The total number of octets received by all currently\n and previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeGlobalInPkts": { "type": "integer", "description": "The total number of packets received by all\n currently and previously active IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeGlobalInDropPkts": { "type": "integer", "description": "The total number of packets which were\n dropped during receive processing by all \n currently and previously\n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeGlobalInNotifys": { "type": "integer", "description": "The total number of notifys received by\n all currently and previously active IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeGlobalInP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n received by all currently and previously \n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeGlobalInP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were received and found to be invalid \n by all currently and previously active IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeGlobalInP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were received and rejected by all \n currently and previously active IPsec Phase-1 \n IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeGlobalInP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 security\n association delete requests received by all \n currently and previously\n active and IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeGlobalOutOctets": { "type": "integer", "description": "The total number of octets sent by all currently\n and previously active and IPsec Phase-1 \n IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeGlobalOutPkts": { "type": "integer", "description": "The total number of packets sent by all currently\n and previously active and IPsec Phase-1 \n Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeGlobalOutDropPkts": { "type": "integer", "description": "The total number of packets which were dropped\n during send processing by all currently \n and previously\n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeGlobalOutNotifys": { "type": "integer", "description": "The total number of notifys sent by all currently\n and previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeGlobalOutP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were sent by all currently and previously \n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeGlobalOutP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were sent and found to be invalid by \n all currently and previously active IPsec Phase-1 \n Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeGlobalOutP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were sent and rejected by all currently and\n previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeGlobalOutP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 SA\n delete requests sent by all currently and \n previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeGlobalInitTunnels": { "type": "integer", "description": "The total number of IPsec Phase-1 IKE\n Tunnels which were locally initiated.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeGlobalInitTunnelFails": { "type": "integer", "description": "The total number of IPsec Phase-1 IKE Tunnels\n which were locally initiated and failed to activate.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeGlobalRespTunnelFails": { "type": "integer", "description": "The total number of IPsec Phase-1 IKE Tunnels\n which were remotely initiated and failed to activate.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeGlobalSysCapFails": { "type": "integer", "description": "The total number of system capacity failures\n which occurred during processing of all current \n and previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeGlobalAuthFails": { "type": "integer", "description": "The total number of authentications which ended\n in failure by all current and previous IPsec Phase-1\n IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeGlobalDecryptFails": { "type": "integer", "description": "The total number of decryptions which ended\n in failure by all current and previous IPsec Phase-1\n IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeGlobalHashValidFails": { "type": "integer", "description": "The total number of hash validations which ended\n in failure by all current and previous IPsec Phase-1\n IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeGlobalNoSaFails": { "type": "integer", "description": "The total number of non-existent Security Association\n in failures which occurred during processing of \n all current and previous IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true } }, "readOnly": true }, "cipSecGlobalStats": { "type": "object", "description": "The total number of currently active\n IPsec Phase-2 Tunnels.", "properties": { "cipSecGlobalActiveTunnels": { "type": "integer", "description": "The total number of currently active\n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecGlobalPreviousTunnels": { "type": "integer", "description": "The total number of previously active\n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecGlobalInOctets": { "type": "integer", "description": "The total number of octets received by all\n current and previous IPsec Phase-2 Tunnels. \n This value is\n accumulated BEFORE determining whether or not\n the packet should be decompressed. See also\n cipSecGlobalInOctWraps for the number of times\n this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecGlobalHcInOctets": { "type": "integer", "description": "A high capacity count of the total number of\n octets received by all current and previous\n IPsec Phase-2 Tunnels. This value is accumulated\n BEFORE determining whether or not the packet\n should be decompressed.", "minimum": 0, "readOnly": true }, "cipSecGlobalInOctWraps": { "type": "integer", "description": "The number of times the global octets received\n counter (cipSecGlobalInOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecGlobalInDecompOctets": { "type": "integer", "description": "The total number of decompressed octets received\n by all current and previous IPsec Phase-2 Tunnels. \n This value is accumulated AFTER the packet is \n decompressed. If compression is not being used, \n this value will match the value of cipSecGlobalInOctets. \n See also cipSecGlobalInDecompOctWraps\n for the number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecGlobalHcInDecompOctets": { "type": "integer", "description": "A high capacity count of the total number\n of decompressed octets received by all current \n and previous IPsec Phase-2 Tunnels. This value \n is accumulated AFTER the packet is decompressed.\n If compression is not being used, this value \n will match the value of cipSecGlobalHcInOctets.", "minimum": 0, "readOnly": true }, "cipSecGlobalInDecompOctWraps": { "type": "integer", "description": "The number of times the global decompressed\n octets received counter\n (cipSecGlobalInDecompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecGlobalInPkts": { "type": "integer", "description": "The total number of packets received\n by all current and previous\n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecGlobalInDrops": { "type": "integer", "description": "The total number of packets dropped\n during receive processing by all current and previous \n IPsec Phase-2 Tunnels. This count does\n NOT include packets dropped due to \n Anti-Replay processing.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecGlobalInReplayDrops": { "type": "integer", "description": "The total number of packets dropped during\n receive processing due to Anti-Replay \n processing by all current and previous IPsec\n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecGlobalInAuths": { "type": "integer", "description": "The total number of inbound authentication's\n performed by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecGlobalInAuthFails": { "type": "integer", "description": "The total number of inbound authentication's\n which ended in failure by all current and previous \n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecGlobalInDecrypts": { "type": "integer", "description": "The total number of inbound decryption's\n performed by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecGlobalInDecryptFails": { "type": "integer", "description": "The total number of inbound decryption's\n which ended in failure by all current and \n previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecGlobalOutOctets": { "type": "integer", "description": "The total number of octets sent by all\n current and previous IPsec Phase-2 Tunnels. \n This value is accumulated AFTER determining \n whether or not the packet should be compressed. \n See also cipSecGlobalOutOctWraps for the\n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecGlobalHcOutOctets": { "type": "integer", "description": "A high capacity count of the total number\n of octets sent by all current and previous \n IPsec Phase-2 Tunnels. This value is accumulated \n AFTER determining whether or not the packet should \n be compressed.", "minimum": 0, "readOnly": true }, "cipSecGlobalOutOctWraps": { "type": "integer", "description": "The number of times the global octets sent counter\n (cipSecGlobalOutOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecGlobalOutUncompOctets": { "type": "integer", "description": "The total number of uncompressed octets sent\n by all current and previous IPsec Phase-2 Tunnels. \n This value is accumulated BEFORE the packet is \n compressed. If compression is not being used, this \n value will match the value of cipSecGlobalOutOctets. \n See also cipSecGlobalOutDecompOctWraps for the number \n of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecGlobalHcOutUncompOctets": { "type": "integer", "description": "A high capacity count of the total number of\n uncompressed octets sent by all current and previous \n IPsec Phase-2 Tunnels. This value is accumulated \n BEFORE the packet is compressed. If compression is \n not being used, this value will match the\n value of cipSecGlobalHcOutOctets.", "minimum": 0, "readOnly": true }, "cipSecGlobalOutUncompOctWraps": { "type": "integer", "description": "The number of times the global uncompressed\n octets sent counter (cipSecGlobalOutUncompOctets) \n has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecGlobalOutPkts": { "type": "integer", "description": "The total number of packets sent by all\n current and previous\n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecGlobalOutDrops": { "type": "integer", "description": "The total number of packets dropped during send\n processing by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecGlobalOutAuths": { "type": "integer", "description": "The total number of outbound authentication's\n performed by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecGlobalOutAuthFails": { "type": "integer", "description": "The total number of outbound authentication's\n which ended in failure\n by all current and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecGlobalOutEncrypts": { "type": "integer", "description": "The total number of outbound encryption's performed\n by all current and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecGlobalOutEncryptFails": { "type": "integer", "description": "The total number of outbound encryption's\n which ended in failure by all current and \n previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecGlobalProtocolUseFails": { "type": "integer", "description": "The total number of protocol use failures\n which occurred during processing of all current \n and previously active IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecGlobalNoSaFails": { "type": "integer", "description": "The total number of non-existent\n Security Association in failures which occurred \n during processing of all current\n and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecGlobalSysCapFails": { "type": "integer", "description": "The total number of system capacity failures\n which occurred during processing of all current \n and previously active IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true } }, "readOnly": true }, "cipSecHistGlobalCntl": { "type": "object", "description": "cipSecHistGlobalCntl", "properties": { "cipSecHistTableSize": { "type": "integer", "description": "The window size of the IPsec Phase-1 and Phase-2\n History Tables.\n \n The IPsec Phase-1 and Phase-2 History Tables are\n implemented as a sliding window in which only the\n last n entries are maintained. This object is used\n specify the number of entries which will be \n maintained in the IPsec Phase-1 and \n Phase-2 History Tables.\n \n An implementation may choose suitable minimum and \n maximum values for this element based on the local \n policy and available resources. If an SNMP SET request \n specifies a value outside this window for this element, \n a BAD VALUE may be returned.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecHistCheckPoint": { "type": "string", "description": "The current state of check point processing.\n \n This object will return ready when the agent is \n ready to create on-demand history entries for \n active IPsec Tunnels or checkPoint when the \n agent is currently creating on-demand history \n entries for active IPsec Tunnels.\n \n By setting this value to checkPoint, the agent \n will create:\n a) an entry in the IPsec Phase-1 Tunnel History \n for each active IPsec Phase-1 Tunnel and\n b) an entry in the IPsec Phase-2 Tunnel History \n Table and an entry in the IPsec Phase-2 \n Tunnel EndPoint History Table\n for each active IPsec Phase-2 Tunnel.", "readOnly": true } }, "readOnly": true }, "cipSecFailGlobalCntl": { "type": "object", "description": "cipSecFailGlobalCntl", "properties": { "cipSecFailTableSize": { "type": "integer", "description": "The window size of the IPsec Phase-1 and Phase-2\n Failure Tables.\n \n The IPsec Phase-1 and Phase-2 Failure Tables are\n implemented as a sliding window in which only the\n last n entries are maintained. This object is used\n specify the number of entries which will be \n maintained in the IPsec Phase-1 and Phase-2 Failure \n Tables.\n \n An implementation may choose suitable minimum and \n maximum values for this element based on the local \n policy and available resources. If an SNMP SET request \n specifies a value outside this window for this element, \n a BAD VALUE may be returned.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true } }, "readOnly": true }, "cipSecTrapCntl": { "type": "object", "description": "This object defines the administrative state of\n sending the IPsec IKE Phase-1 Tunnel Start TRAP", "properties": { "cipSecTrapCntlIkeTunnelStart": { "type": "string", "description": "This object defines the administrative state of\n sending the IPsec IKE Phase-1 Tunnel Start TRAP", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TrapStatus", "readOnly": true }, "cipSecTrapCntlIkeTunnelStop": { "type": "string", "description": "This object defines the administrative state\n of sending the\n IPsec IKE Phase-1 Tunnel Stop TRAP", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TrapStatus", "readOnly": true }, "cipSecTrapCntlIkeSysFailure": { "type": "string", "description": "This object defines the administrative state\n of sending the\n IPsec IKE Phase-1 System Failure TRAP", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TrapStatus", "readOnly": true }, "cipSecTrapCntlIkeCertCrlFailure": { "type": "string", "description": "This object defines the administrative\n state of sending the\n IPsec IKE Phase-1 Certificate/CRL Failure TRAP", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TrapStatus", "readOnly": true }, "cipSecTrapCntlIkeProtocolFail": { "type": "string", "description": "This object defines the administrative\n state of sending the\n IPsec IKE Phase-1 Protocol Failure TRAP", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TrapStatus", "readOnly": true }, "cipSecTrapCntlIkeNoSa": { "type": "string", "description": "This object defines the administrative\n state of sending the\n IPsec IKE Phase-1 No Security Association TRAP", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TrapStatus", "readOnly": true }, "cipSecTrapCntlIpSecTunnelStart": { "type": "string", "description": "This object defines the administrative state\n of sending the IPsec\n Phase-2 Tunnel Start TRAP", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TrapStatus", "readOnly": true }, "cipSecTrapCntlIpSecTunnelStop": { "type": "string", "description": "This object defines the administrative\n state of sending the IPsec\n Phase-2 Tunnel Stop TRAP", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TrapStatus", "readOnly": true }, "cipSecTrapCntlIpSecSysFailure": { "type": "string", "description": "This object defines the administrative state\n of sending the IPsec\n Phase-2 System Failure TRAP", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TrapStatus", "readOnly": true }, "cipSecTrapCntlIpSecSetUpFailure": { "type": "string", "description": "This object defines the administrative state\n of sending the IPsec\n Phase-2 Set Up Failure TRAP", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TrapStatus", "readOnly": true }, "cipSecTrapCntlIpSecEarlyTunTerm": { "type": "string", "description": "This object defines the administrative state\n of sending the IPsec\n Phase-2 Early Tunnel Termination TRAP", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TrapStatus", "readOnly": true }, "cipSecTrapCntlIpSecProtocolFail": { "type": "string", "description": "This object defines the administrative state\n of sending the IPsec\n Phase-2 Protocol Failure TRAP", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TrapStatus", "readOnly": true }, "cipSecTrapCntlIpSecNoSa": { "type": "string", "description": "This object defines the administrative state\n of sending the IPsec\n Phase-2 No Security Association TRAP", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TrapStatus", "readOnly": true } }, "readOnly": true }, "cikePeerTable": { "type": "object", "description": "The IPsec Phase-1 Internet Key Exchange Peer Table.\n There is one entry in this table for each IPsec\n Phase-1 IKE peer association which is currently\n associated with an active IPsec Phase-1 Tunnel.\n The IPsec Phase-1 IKE Tunnel associated with this\n IPsec Phase-1 IKE peer association may or may not\n be currently active.", "properties": { "cikePeerEntry": { "type": "array", "description": "Each entry contains the attributes associated\n with an IPsec Phase-1 IKE peer association.", "items": { "type": "object", "properties": { "cikePeerLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType", "readOnly": true }, "cikePeerLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikePeerRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType", "readOnly": true }, "cikePeerRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikePeerIntIndex": { "type": "integer", "description": "The internal index of the local-remote\n peer association. This internal index is used \n to uniquely identify multiple associations between \n the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikePeerLocalAddr": { "type": "string", "description": "The IP address of the local peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cikePeerRemoteAddr": { "type": "string", "description": "The IP address of the remote peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cikePeerActiveTime": { "type": "string", "description": "The length of time that the peer association has\n existed in hundredths of a second.", "x-yang-type": "snmpv2-tc:TimeInterval", "readOnly": true }, "cikePeerActiveTunnelIndex": { "type": "integer", "description": "The index of the active IPsec Phase-1 IKE Tunnel\n (cikeTunIndex in the cikeTunnelTable) for this peer\n association. If an IPsec Phase-1 IKE Tunnel is\n not currently active, then the value of this\n object will be zero.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true } } }, "readOnly": true } }, "readOnly": true }, "cikeTunnelTable": { "type": "object", "description": "The IPsec Phase-1 Internet Key Exchange Tunnel Table.\n There is one entry in this table for each active IPsec\n Phase-1 IKE Tunnel.", "properties": { "cikeTunnelEntry": { "type": "array", "description": "Each entry contains the attributes associated with\n an active IPsec Phase-1 IKE Tunnel.", "items": { "type": "object", "properties": { "cikeTunIndex": { "type": "integer", "description": "The index of the IPsec Phase-1 IKE Tunnel Table.\n The value of the index is a number which begins \n at one and is incremented with each tunnel that \n is created. The value of this object will \n wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikeTunLocalType": { "type": "string", "description": "The type of local peer identity. The local\n peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType", "readOnly": true }, "cikeTunLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikeTunLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cikeTunLocalName": { "type": "string", "description": "The DNS name of the local IP address for\n the IPsec Phase-1 IKE Tunnel. If the DNS \n name associated with the local tunnel endpoint \n is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikeTunRemoteType": { "type": "string", "description": "The type of remote peer identity.\n The remote peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType", "readOnly": true }, "cikeTunRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then \n this is the host name used to identify the \n remote peer.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikeTunRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cikeTunRemoteName": { "type": "string", "description": "The DNS name of the remote IP address of IPsec Phase-1\n IKE Tunnel. If the DNS name associated with the remote\n tunnel endpoint is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikeTunNegoMode": { "type": "string", "description": "The negotiation mode of the IPsec Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeNegoMode", "readOnly": true }, "cikeTunDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp", "readOnly": true }, "cikeTunEncryptAlgo": { "type": "string", "description": "The encryption algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo", "readOnly": true }, "cikeTunHashAlgo": { "type": "string", "description": "The hash algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeHashAlgo", "readOnly": true }, "cikeTunAuthMethod": { "type": "string", "description": "The authentication method used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeAuthMethod", "readOnly": true }, "cikeTunLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel\n in seconds.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikeTunActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-1 IKE tunnel has been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval", "readOnly": true }, "cikeTunSaRefreshThreshold": { "type": "integer", "description": "The security association refresh threshold in seconds.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikeTunTotalRefreshes": { "type": "integer", "description": "The total number of security associations\n refreshes performed.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunInOctets": { "type": "integer", "description": "The total number of octets received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunInPkts": { "type": "integer", "description": "The total number of packets received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunInDropPkts": { "type": "integer", "description": "The total number of packets dropped\n by this IPsec Phase-1 IKE Tunnel during \n receive processing.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunInNotifys": { "type": "integer", "description": "The total number of notifys received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunInP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunInP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received and found to be invalid \n by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunInP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n received and rejected by this IPsec Phase-1 \n Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunInP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2\n security association delete requests received \n by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunOutPkts": { "type": "integer", "description": "The total number of packets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunOutDropPkts": { "type": "integer", "description": "The total number of packets dropped by this\n IPsec Phase-1 IKE Tunnel during send processing.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunOutNotifys": { "type": "integer", "description": "The total number of notifys sent by this\n IPsec Phase-1 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunOutP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunOutP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n found to be invalid by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunOutP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n rejected by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunOutP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 security association\n delete requests sent by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunStatus": { "type": "string", "description": "The status of the MIB table row.\n \n This object can be used to bring the tunnel down \n by setting value of this object to destroy(2).\n \n This object cannot be used to create \n a MIB table row.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TunnelStatus", "readOnly": true } } }, "readOnly": true } }, "readOnly": true }, "cikePeerCorrTable": { "type": "object", "description": "The IPsec Phase-1 Internet Key Exchange Peer\n Association to IPsec Phase-2 Tunnel\n Correlation Table. There is one entry in\n this table for each active IPsec Phase-2\n Tunnel.", "properties": { "cikePeerCorrEntry": { "type": "array", "description": "Each entry contains the attributes of an\n IPsec Phase-1 IKE Peer Association to IPsec\n Phase-2 Tunnel Correlation.", "items": { "type": "object", "properties": { "cikePeerCorrLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType", "readOnly": true }, "cikePeerCorrLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikePeerCorrRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType", "readOnly": true }, "cikePeerCorrRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikePeerCorrIntIndex": { "type": "integer", "description": "The internal index of the local-remote\n peer association. This internal index is \n used to uniquely identify multiple associations \n between the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikePeerCorrSeqNum": { "type": "integer", "description": "The sequence number of the local-remote\n peer association. This sequence number is \n used to uniquely identify multiple instances \n of an unique association between\n the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikePeerCorrIpSecTunIndex": { "type": "integer", "description": "The index of the active IPsec Phase-2 Tunnel\n (cipSecTunIndex in the cipSecTunnelTable) for this\n IPsec Phase-1 IKE Peer Association.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true } } }, "readOnly": true } }, "readOnly": true }, "cikePhase1GWStatsTable": { "type": "object", "description": "Phase-1 IKE stats information is included in this table.\n Each entry is related to a specific gateway which is \n identified by 'cmgwIndex'.", "properties": { "cikePhase1GWStatsEntry": { "type": "array", "description": "Each entry contains the attributes of an Phase-1 IKE stats\n information for the related gateway.\n \n There is only one entry for each gateway. The entry \n is created when a gateway up and cannot be deleted.", "items": { "type": "object", "properties": { "cmgwIndex": { "type": "string", "description": "cmgwIndex", "x-yang-type": "leafref", "readOnly": true }, "cikePhase1GWActiveTunnels": { "type": "integer", "description": "The number of currently active IPsec\n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWPreviousTunnels": { "type": "integer", "description": "The total number of previously active\n IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWInOctets": { "type": "integer", "description": "The total number of octets received by all currently\n and previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWInPkts": { "type": "integer", "description": "The total number of packets received by all\n currently and previously active IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWInDropPkts": { "type": "integer", "description": "The total number of packets which were\n dropped during receive processing by all \n currently and previously\n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWInNotifys": { "type": "integer", "description": "The total number of notifys received by\n all currently and previously active IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWInP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n received by all currently and previously \n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWInP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were received and found to be invalid \n by all currently and previously active IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWInP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were received and rejected by all \n currently and previously active IPsec Phase-1 \n IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWInP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 'Security\n Association' delete requests received by all \n currently and previously active and IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWOutOctets": { "type": "integer", "description": "The total number of octets sent by all currently\n and previously active and IPsec Phase-1 \n IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWOutPkts": { "type": "integer", "description": "The total number of packets sent by all currently\n and previously active and IPsec Phase-1 \n Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWOutDropPkts": { "type": "integer", "description": "The total number of packets which were dropped\n during send processing by all currently \n and previously\n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWOutNotifys": { "type": "integer", "description": "The total number of notifys sent by all currently\n and previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWOutP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were sent by all currently and previously \n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWOutP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were sent and found to be invalid by \n all currently and previously active IPsec Phase-1 \n Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWOutP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were sent and rejected by all currently and\n previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWOutP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 SA\n delete requests sent by all currently and \n previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWInitTunnels": { "type": "integer", "description": "The total number of IPsec Phase-1 IKE\n Tunnels which were locally initiated.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWInitTunnelFails": { "type": "integer", "description": "The total number of IPsec Phase-1 IKE Tunnels\n which were locally initiated and failed to activate.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWRespTunnelFails": { "type": "integer", "description": "The total number of IPsec Phase-1 IKE Tunnels\n which were remotely initiated and failed to activate.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWSysCapFails": { "type": "integer", "description": "The total number of system capacity failures\n which occurred during processing of all current \n and previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWAuthFails": { "type": "integer", "description": "The total number of authentications which ended\n in failure by all current and previous IPsec Phase-1\n IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWDecryptFails": { "type": "integer", "description": "The total number of decryptions which ended\n in failure by all current and previous IPsec Phase-1\n IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWHashValidFails": { "type": "integer", "description": "The total number of hash validations which ended\n in failure by all current and previous IPsec Phase-1\n IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWNoSaFails": { "type": "integer", "description": "The total number of non-existent 'Security Association'\n failures occurred during processing of current and \n previous IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true } } }, "readOnly": true } }, "readOnly": true }, "cipSecTunnelTable": { "type": "object", "description": "The IPsec Phase-2 Tunnel Table.\n There is one entry in this table for \n each active IPsec Phase-2 Tunnel.", "properties": { "cipSecTunnelEntry": { "type": "array", "description": "Each entry contains the attributes\n associated with an active IPsec Phase-2 Tunnel.", "items": { "type": "object", "properties": { "cipSecTunIndex": { "type": "integer", "description": "The index of the IPsec Phase-2 Tunnel Table.\n The value of the index is a number which begins \n at one and is incremented with each tunnel that \n is created. The value of this object will wrap \n at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunIkeTunnelIndex": { "type": "integer", "description": "The index of the associated IPsec Phase-1\n IKE Tunnel.\n (cikeTunIndex in the cikeTunnelTable)", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunIkeTunnelAlive": { "type": "boolean", "description": "An indicator which specifies whether or not the\n IPsec Phase-1 IKE Tunnel currently exists.", "readOnly": true }, "cipSecTunLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecTunRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecTunKeyType": { "type": "string", "description": "The type of key used by the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:KeyType", "readOnly": true }, "cipSecTunEncapMode": { "type": "string", "description": "The encapsulation mode used by the\n IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncapMode", "readOnly": true }, "cipSecTunLifeSize": { "type": "integer", "description": "The negotiated LifeSize of the\n IPsec Phase-2 Tunnel in kilobytes.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the\n IPsec Phase-2 Tunnel in seconds.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-2\n Tunnel has been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval", "readOnly": true }, "cipSecTunSaLifeSizeThreshold": { "type": "integer", "description": "The security association LifeSize refresh\n threshold in kilobytes.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunSaLifeTimeThreshold": { "type": "integer", "description": "The security association LifeTime refresh\n threshold in seconds.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunTotalRefreshes": { "type": "integer", "description": "The total number of security\n association refreshes performed.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunExpiredSaInstances": { "type": "integer", "description": "The total number of security associations\n which have expired.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunCurrentSaInstances": { "type": "integer", "description": "The number of security associations\n which are currently active or expiring.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunInSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used\n by the inbound security association of the \n IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp", "readOnly": true }, "cipSecTunInSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the inbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo", "readOnly": true }, "cipSecTunInSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo", "readOnly": true }, "cipSecTunInSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) security \n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo", "readOnly": true }, "cipSecTunInSaDecompAlgo": { "type": "string", "description": "The decompression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo", "readOnly": true }, "cipSecTunOutSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp", "readOnly": true }, "cipSecTunOutSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo", "readOnly": true }, "cipSecTunOutSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the outbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo", "readOnly": true }, "cipSecTunOutSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) \n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo", "readOnly": true }, "cipSecTunOutSaCompAlgo": { "type": "string", "description": "The compression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo", "readOnly": true }, "cipSecTunInOctets": { "type": "integer", "description": "The total number of octets received by this IPsec\n Phase-2 Tunnel. This value is accumulated\n BEFORE determining whether or not the packet should be\n decompressed. See also cipSecTunInOctWraps for the\n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHcInOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n received by this IPsec Phase-2 Tunnel. This value is\n accumulated BEFORE determining whether or not the packet\n should be decompressed.", "minimum": 0, "readOnly": true }, "cipSecTunInOctWraps": { "type": "integer", "description": "The number of times the octets received counter\n (cipSecTunInOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunInDecompOctets": { "type": "integer", "description": "The total number of decompressed octets received\n by this IPsec Phase-2 Tunnel. This value is \n accumulated AFTER the packet is decompressed. \n If compression is not being\n used, this value will match the value of \n cipSecTunInOctets. See also cipSecTunInDecompOctWraps \n for the number of times\n this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHcInDecompOctets": { "type": "integer", "description": "A high capacity count of the total number of decompressed\n octets received by this IPsec Phase-2 Tunnel. This value\n is accumulated AFTER the packet is decompressed. If\n compression is not being used, this value will match the\n value of cipSecTunHcInOctets.", "minimum": 0, "readOnly": true }, "cipSecTunInDecompOctWraps": { "type": "integer", "description": "The number of times the decompressed\n octets received counter\n (cipSecTunInDecompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunInPkts": { "type": "integer", "description": "The total number of packets received\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunInDropPkts": { "type": "integer", "description": "The total number of packets dropped\n during receive processing by this IPsec Phase-2 \n Tunnel. This count does NOT include\n packets dropped due to Anti-Replay processing.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunInReplayDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n receive processing due to Anti-Replay processing \n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunInAuths": { "type": "integer", "description": "The total number of inbound\n authentication's performed by this \n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunInAuthFails": { "type": "integer", "description": "The total number of inbound authentication's\n which ended in\n failure by this IPsec Phase-2 Tunnel .", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunInDecrypts": { "type": "integer", "description": "The total number of inbound decryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunInDecryptFails": { "type": "integer", "description": "The total number of inbound decryption's\n which ended in failure\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec\n Phase-2 Tunnel. This value is accumulated\n AFTER determining whether or not the packet should \n be compressed. See also cipSecTunOutOctWraps for\n the number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHcOutOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n sent by this IPsec Phase-2 Tunnel. This value is\n accumulated AFTER determining whether or not the \n packet\n should be compressed.", "minimum": 0, "readOnly": true }, "cipSecTunOutOctWraps": { "type": "integer", "description": "The number of times the out octets counter\n (cipSecTunOutOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunOutUncompOctets": { "type": "integer", "description": "The total number of uncompressed octets sent\n by this IPsec Phase-2 Tunnel. This value \n is accumulated BEFORE the packet is compressed. \n If compression is not being used, this value \n will match the value of cipSecTunOutOctets.\n See also cipSecTunOutDecompOctWraps for the \n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHcOutUncompOctets": { "type": "integer", "description": "A high capacity count of the total number\n of uncompressed octets sent by this IPsec \n Phase-2 Tunnel. This value is accumulated BEFORE \n the packet is compressed. If compression\n is not being used, this value will match the value\n of cipSecTunHcOutOctets.", "minimum": 0, "readOnly": true }, "cipSecTunOutUncompOctWraps": { "type": "integer", "description": "The number of times the uncompressed octets sent\n counter (cipSecTunOutUncompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunOutPkts": { "type": "integer", "description": "The total number of packets sent by this\n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunOutDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n send processing by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunOutAuths": { "type": "integer", "description": "The total number of outbound authentication's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunOutAuthFails": { "type": "integer", "description": "The total number of outbound\n authentication's which ended in failure \n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunOutEncrypts": { "type": "integer", "description": "The total number of outbound encryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunOutEncryptFails": { "type": "integer", "description": "The total number of outbound encryption's\n which ended in failure by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunStatus": { "type": "string", "description": "The status of the MIB table row.\n \n This object can be used to bring the tunnel down\n by setting value of this object to destroy(2).\n When the value is set to destroy(2), the SA\n bundle is destroyed and this row is deleted\n from this table.\n \n When this MIB value is queried, the value of\n active(1) is always returned, if the instance \n exists.\n \n This object cannot be used to create a MIB \n table row.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TunnelStatus", "readOnly": true } } }, "readOnly": true } }, "readOnly": true }, "cipSecEndPtTable": { "type": "object", "description": "The IPsec Phase-2 Tunnel Endpoint Table.\n This table contains an entry for each \n active endpoint associated with an IPsec\n Phase-2 Tunnel.", "properties": { "cipSecEndPtEntry": { "type": "array", "description": "An IPsec Phase-2 Tunnel Endpoint entry.", "items": { "type": "object", "properties": { "cipSecTunIndex": { "type": "string", "description": "cipSecTunIndex", "x-yang-type": "leafref", "readOnly": true }, "cipSecEndPtIndex": { "type": "integer", "description": "The number of the Endpoint associated with the\n IPsec Phase-2 Tunnel Table. The value of this\n index is a number which begins at one and \n is incremented with each Endpoint associated \n with an IPsec Phase-2 Tunnel.\n The value of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecEndPtLocalName": { "type": "string", "description": "The DNS name of the local Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cipSecEndPtLocalType": { "type": "string", "description": "The type of identity for the local Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType", "readOnly": true }, "cipSecEndPtLocalAddr1": { "type": "string", "description": "The local Endpoint's first IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the local Endpoint type is IP address range, \n then this is the value of beginning IP address \n of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecEndPtLocalAddr2": { "type": "string", "description": "The local Endpoint's second IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the local Endpoint type is IP address range, \n then this is the value of ending IP address \n of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecEndPtLocalProtocol": { "type": "integer", "description": "The protocol number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecEndPtLocalPort": { "type": "integer", "description": "The port number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecEndPtRemoteName": { "type": "string", "description": "The DNS name of the remote Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cipSecEndPtRemoteType": { "type": "string", "description": "The type of identity for the remote Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType", "readOnly": true }, "cipSecEndPtRemoteAddr1": { "type": "string", "description": "The remote Endpoint's first IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the remote Endpoint type is IP address range, \n then this is the value of beginning IP address \n of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecEndPtRemoteAddr2": { "type": "string", "description": "The remote Endpoint's second IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the remote Endpoint type is IP address range, \n then this is the value of ending IP address of \n the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecEndPtRemoteProtocol": { "type": "integer", "description": "The protocol number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecEndPtRemotePort": { "type": "integer", "description": "The port number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true } } }, "readOnly": true } }, "readOnly": true }, "cipSecSpiTable": { "type": "object", "description": "The IPsec Phase-2 Security Protection Index Table.\n This table contains an entry for each active \n and expiring security\n association.", "properties": { "cipSecSpiEntry": { "type": "array", "description": "Each entry contains the attributes associated with\n active and expiring IPsec Phase-2 \n security associations.", "items": { "type": "object", "properties": { "cipSecTunIndex": { "type": "string", "description": "cipSecTunIndex", "x-yang-type": "leafref", "readOnly": true }, "cipSecSpiIndex": { "type": "integer", "description": "The number of the SPI associated with the\n Phase-2 Tunnel Table. The value of this \n index is a number which begins at one and is \n incremented with each SPI associated with an \n IPsec Phase-2 Tunnel. The value of this \n object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecSpiDirection": { "type": "string", "description": "The direction of the SPI.", "readOnly": true }, "cipSecSpiValue": { "type": "integer", "description": "The value of the SPI.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecSpiProtocol": { "type": "string", "description": "The protocol of the SPI.", "readOnly": true }, "cipSecSpiStatus": { "type": "string", "description": "The status of the SPI.", "readOnly": true } } }, "readOnly": true } }, "readOnly": true }, "cipSecPhase2GWStatsTable": { "type": "object", "description": "Phase-2 IPsec stats information is included in this table.\n Each entry is related to a specific gateway which is \n identified by 'cmgwIndex'", "properties": { "cipSecPhase2GWStatsEntry": { "type": "array", "description": "Each entry contains the attributes of an Phase-2 IPsec stats\n information for the related gateway.\n \n There is only one entry for each gateway. The entry \n is created when a gateway up and cannot be deleted.", "items": { "type": "object", "properties": { "cmgwIndex": { "type": "string", "description": "cmgwIndex", "x-yang-type": "leafref", "readOnly": true }, "cipSecPhase2GWActiveTunnels": { "type": "integer", "description": "The total number of currently active\n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWPreviousTunnels": { "type": "integer", "description": "The total number of previously active\n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInOctets": { "type": "integer", "description": "The total number of octets received by all\n current and previous IPsec Phase-2 Tunnels. \n This value is accumulated BEFORE determining \n whether or not the packet should be decompressed. \n See also cipSecGlobalInOctWraps for the number\n of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInOctWraps": { "type": "integer", "description": "The number of times the global octets received\n counter (cipSecGlobalInOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInDecompOctets": { "type": "integer", "description": "The total number of decompressed octets received\n by all current and previous IPsec Phase-2 Tunnels. \n This value is accumulated AFTER the packet is \n decompressed. If compression is not being used, \n this value will match the value of cipSecGlobalInOctets. \n See also cipSecGlobalInDecompOctWraps\n for the number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInDecompOctWraps": { "type": "integer", "description": "The number of times the global decompressed\n octets received counter (cipSecGlobalInDecompOctets) \n has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInPkts": { "type": "integer", "description": "The total number of packets received\n by all current and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInDrops": { "type": "integer", "description": "The total number of packets dropped\n during receive processing by all current and previous \n IPsec Phase-2 Tunnels. This count does NOT include \n packets dropped due to Anti-Replay processing.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInReplayDrops": { "type": "integer", "description": "The total number of packets dropped during\n receive processing due to Anti-Replay \n processing by all current and previous IPsec\n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInAuths": { "type": "integer", "description": "The total number of inbound authentication's\n performed by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInAuthFails": { "type": "integer", "description": "The total number of inbound authentication's\n which ended in failure by all current and previous \n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInDecrypts": { "type": "integer", "description": "The total number of inbound decryption's\n performed by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInDecryptFails": { "type": "integer", "description": "The total number of inbound decryption's\n which ended in failure by all current and \n previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWOutOctets": { "type": "integer", "description": "The total number of octets sent by all\n current and previous IPsec Phase-2 Tunnels. \n This value is accumulated AFTER determining \n whether or not the packet should be compressed. \n See also cipSecGlobalOutOctWraps for the\n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWOutOctWraps": { "type": "integer", "description": "The number of times the global octets sent counter\n (cipSecGlobalOutOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWOutUncompOctets": { "type": "integer", "description": "The total number of uncompressed octets sent\n by all current and previous IPsec Phase-2 Tunnels. \n This value is accumulated BEFORE the packet is \n compressed. If compression is not being used, this \n value will match the value of cipSecGlobalOutOctets. \n See also cipSecGlobalOutDecompOctWraps for the number \n of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWOutUncompOctWraps": { "type": "integer", "description": "The number of times the global uncompressed\n octets sent counter (cipSecGlobalOutUncompOctets) \n has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWOutPkts": { "type": "integer", "description": "The total number of packets sent by all\n current and previous IPsec Phase-2 \n Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWOutDrops": { "type": "integer", "description": "The total number of packets dropped during send\n processing by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWOutAuths": { "type": "integer", "description": "The total number of outbound authentication's\n performed by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWOutAuthFails": { "type": "integer", "description": "The total number of outbound authentication's\n which ended in failure\n by all current and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWOutEncrypts": { "type": "integer", "description": "The total number of outbound encryption's performed\n by all current and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWOutEncryptFails": { "type": "integer", "description": "The total number of outbound encryption's\n which ended in failure by all current and \n previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWProtocolUseFails": { "type": "integer", "description": "The total number of protocol use failures\n which occurred during processing of all current \n and previously active IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWNoSaFails": { "type": "integer", "description": "The total number of non-existent\n Security Association in failures which occurred \n during processing of all current\n and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWSysCapFails": { "type": "integer", "description": "The total number of system capacity failures\n which occurred during processing of all current \n and previously active IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true } } }, "readOnly": true } }, "readOnly": true }, "cikeTunnelHistTable": { "type": "object", "description": "The IPsec Phase-1 Internet Key Exchange Tunnel\n History Table. This table is implemented as a \n sliding window in which only the last n entries \n are maintained. The maximum number of entries\n is specified by the cipSecHistTableSize object.", "properties": { "cikeTunnelHistEntry": { "type": "array", "description": "Each entry contains the attributes\n associated with a previously active IPsec \n Phase-1 IKE Tunnel.", "items": { "type": "object", "properties": { "cikeTunHistIndex": { "type": "integer", "description": "The index of the IPsec Phase-1 IKE Tunnel History\n Table. The value of the index is a number which \n begins at one and is incremented with each \n tunnel that ends. The value of this object \n will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikeTunHistTermReason": { "type": "string", "description": "The reason the IPsec Phase-1 IKE Tunnel was terminated.\n Possible reasons include:\n 1 = other\n 2 = normal termination\n 3 = operator request\n 4 = peer delete request was received\n 5 = contact with peer was lost\n 6 = local failure occurred.\n 7 = operator initiated check point request", "readOnly": true }, "cikeTunHistActiveIndex": { "type": "integer", "description": "The index of the previously active IPsec\n Phase-1 IKE Tunnel.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikeTunHistPeerLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType", "readOnly": true }, "cikeTunHistPeerLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikeTunHistPeerIntIndex": { "type": "integer", "description": "The internal index of the local-remote peer\n association. This internal index is used to \n uniquely identify multiple associations between \n the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikeTunHistPeerRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote\n peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType", "readOnly": true }, "cikeTunHistPeerRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikeTunHistLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cikeTunHistLocalName": { "type": "string", "description": "The DNS name of the local IP address for\n the IPsec Phase-1 IKE Tunnel. If the DNS \n name associated with the local tunnel endpoint \n is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikeTunHistRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cikeTunHistRemoteName": { "type": "string", "description": "The DNS name of the remote IP address of IPsec Phase-1\n IKE Tunnel. If the DNS name associated with the remote\n tunnel endpoint is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikeTunHistNegoMode": { "type": "string", "description": "The negotiation mode of the IPsec Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeNegoMode", "readOnly": true }, "cikeTunHistDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp", "readOnly": true }, "cikeTunHistEncryptAlgo": { "type": "string", "description": "The encryption algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo", "readOnly": true }, "cikeTunHistHashAlgo": { "type": "string", "description": "The hash algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeHashAlgo", "readOnly": true }, "cikeTunHistAuthMethod": { "type": "string", "description": "The authentication method used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeAuthMethod", "readOnly": true }, "cikeTunHistLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel\n in seconds.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikeTunHistStartTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n when the IPsec Phase-1 IKE tunnel was started.", "x-yang-type": "yang:timestamp", "readOnly": true }, "cikeTunHistActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-1 IKE tunnel was been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval", "readOnly": true }, "cikeTunHistTotalRefreshes": { "type": "integer", "description": "The total number of security associations\n refreshes performed.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistTotalSas": { "type": "integer", "description": "The total number of security associations\n used during the\n life of the IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistInOctets": { "type": "integer", "description": "The total number of octets\n received by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistInPkts": { "type": "integer", "description": "The total number of packets received\n by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistInDropPkts": { "type": "integer", "description": "The total number of packets dropped\n by this IPsec Phase-1\n IKE Tunnel during receive processing.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistInNotifys": { "type": "integer", "description": "The total number of notifys received\n by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistInP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistInP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received and\n found to be invalid by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistInP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received and\n rejected by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistInP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 security association\n delete requests received by this IPsec \n Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistOutPkts": { "type": "integer", "description": "The total number of packets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistOutDropPkts": { "type": "integer", "description": "The total number of packets dropped\n by this IPsec Phase-1\n IKE Tunnel during send processing.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistOutNotifys": { "type": "integer", "description": "The total number of notifys sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistOutP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistOutP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n found to be invalid by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistOutP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n rejected by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistOutP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 security association\n delete requests sent by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true } } }, "readOnly": true } }, "readOnly": true }, "cipSecTunnelHistTable": { "type": "object", "description": "The IPsec Phase-2 Tunnel History Table.\n This table is implemented as a sliding \n window in which only the\n last n entries are maintained. The maximum number \n of entries\n is specified by the cipSecHistTableSize object.", "properties": { "cipSecTunnelHistEntry": { "type": "array", "description": "Each entry contains the attributes associated with\n a previously active IPsec Phase-2 Tunnel.", "items": { "type": "object", "properties": { "cipSecTunHistIndex": { "type": "integer", "description": "The index of the IPsec Phase-2 Tunnel History Table.\n The value of the index is a number which \n begins at one and is incremented with each tunnel \n that ends. The value\n of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunHistTermReason": { "type": "string", "description": "The reason the IPsec Phase-2 Tunnel was terminated.\n Possible reasons include:\n 1 = other\n 2 = normal termination\n 3 = operator request\n 4 = peer delete request was received\n 5 = contact with peer was lost\n 6 = local failure occurred\n 7 = operator initiated check point request", "readOnly": true }, "cipSecTunHistActiveIndex": { "type": "integer", "description": "The index of the previously active\n IPsec Phase-2 Tunnel.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunHistIkeTunnelIndex": { "type": "integer", "description": "The index of the associated IPsec Phase-1 Tunnel\n (cikeTunIndex in the cikeTunnelTable).", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunHistLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecTunHistRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecTunHistKeyType": { "type": "string", "description": "The type of key used by the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:KeyType", "readOnly": true }, "cipSecTunHistEncapMode": { "type": "string", "description": "The encapsulation mode used by the\n IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncapMode", "readOnly": true }, "cipSecTunHistLifeSize": { "type": "integer", "description": "The negotiated LifeSize of the IPsec Phase-2 Tunnel in\n kilobytes.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunHistLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the IPsec Phase-2 Tunnel in\n seconds.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunHistStartTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n when the IPsec Phase-2 Tunnel was started.", "x-yang-type": "yang:timestamp", "readOnly": true }, "cipSecTunHistActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-2 Tunnel has been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval", "readOnly": true }, "cipSecTunHistTotalRefreshes": { "type": "integer", "description": "The total number of security association refreshes\n performed.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistTotalSas": { "type": "integer", "description": "The total number of security associations used\n during the\n life of the IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistInSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used by the inbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp", "readOnly": true }, "cipSecTunHistInSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the inbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo", "readOnly": true }, "cipSecTunHistInSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo", "readOnly": true }, "cipSecTunHistInSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) \n security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo", "readOnly": true }, "cipSecTunHistInSaDecompAlgo": { "type": "string", "description": "The decompression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo", "readOnly": true }, "cipSecTunHistOutSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp", "readOnly": true }, "cipSecTunHistOutSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo", "readOnly": true }, "cipSecTunHistOutSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the outbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo", "readOnly": true }, "cipSecTunHistOutSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) \n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo", "readOnly": true }, "cipSecTunHistOutSaCompAlgo": { "type": "string", "description": "The compression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo", "readOnly": true }, "cipSecTunHistInOctets": { "type": "integer", "description": "The total number of octets received by this IPsec\n Phase-2 Tunnel. This value is accumulated\n BEFORE determining whether or not the packet should \n be decompressed. See also cipSecTunInOctWraps for \n the number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistHcInOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n received by this IPsec Phase-2 Tunnel. This value is\n accumulated BEFORE determining whether or not \n the packet should be decompressed.", "minimum": 0, "readOnly": true }, "cipSecTunHistInOctWraps": { "type": "integer", "description": "The number of times the octets received counter\n (cipSecTunInOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistInDecompOctets": { "type": "integer", "description": "The total number of decompressed octets received by this\n IPsec Phase-2 Tunnel. This value is accumulated AFTER\n the packet is decompressed. If compression is not being\n used, this value will match the value of cipSecTunHistInOctets.\n See also cipSecTunInDecompOctWraps for the number of times\n this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistHcInDecompOctets": { "type": "integer", "description": "A high capacity count of the total number of decompressed\n octets received by this IPsec Phase-2 Tunnel. This value\n is accumulated AFTER the packet is decompressed. If\n compression is not being used, this value will match the\n value of cipSecTunHistHcInOctets.", "minimum": 0, "readOnly": true }, "cipSecTunHistInDecompOctWraps": { "type": "integer", "description": "The number of times the decompressed octets\n received counter (cipSecTunInDecompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistInPkts": { "type": "integer", "description": "The total number of packets received by this\n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistInDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n receive processing by this IPsec Phase-2 Tunnel. \n This count does NOT include packets\n dropped due to Anti-Replay processing.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistInReplayDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n receive processing due to Anti-Replay processing \n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistInAuths": { "type": "integer", "description": "The total number of inbound authentication's\n performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistInAuthFails": { "type": "integer", "description": "The total number of inbound authentication's\n which ended in\n failure by this IPsec Phase-2 Tunnel .", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistInDecrypts": { "type": "integer", "description": "The total number of inbound decryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistInDecryptFails": { "type": "integer", "description": "The total number of inbound decryption's\n which ended in failure\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec\n Phase-2 Tunnel. This value is accumulated\n AFTER determining whether or not the \n packet should be\n compressed. See also cipSecTunOutOctWraps for the\n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistHcOutOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n sent by this IPsec Phase-2 Tunnel. This value \n is accumulated AFTER determining whether or not \n the packet should be\n compressed.", "minimum": 0, "readOnly": true }, "cipSecTunHistOutOctWraps": { "type": "integer", "description": "The number of times the octets sent counter\n (cipSecTunOutOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistOutUncompOctets": { "type": "integer", "description": "The total number of uncompressed octets sent by this\n IPsec Phase-2 Tunnel. This value is accumulated BEFORE\n the packet is compressed. If compression is not being\n used, this value will match the value of \n cipSecTunHistOutOctets. See also \n cipSecTunOutDecompOctWraps for the number of times\n this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistHcOutUncompOctets": { "type": "integer", "description": "A high capacity count of the total\n number of uncompressed octets sent by this \n IPsec Phase-2 Tunnel. This value is accumulated \n BEFORE the packet is compressed. If compression\n is not being used, this value will match the value of\n cipSecTunHistHcOutOctets.", "minimum": 0, "readOnly": true }, "cipSecTunHistOutUncompOctWraps": { "type": "integer", "description": "The number of times the uncompressed octets sent counter\n (cipSecTunOutUncompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistOutPkts": { "type": "integer", "description": "The total number of packets sent by this\n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistOutDropPkts": { "type": "integer", "description": "The total number of packets dropped\n during send processing\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistOutAuths": { "type": "integer", "description": "The total number of outbound authentication's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistOutAuthFails": { "type": "integer", "description": "The total number of outbound authentication's\n which ended in\n failure by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistOutEncrypts": { "type": "integer", "description": "The total number of outbound encryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistOutEncryptFails": { "type": "integer", "description": "The total number of outbound encryption's\n which ended in failure\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true } } }, "readOnly": true } }, "readOnly": true }, "cipSecEndPtHistTable": { "type": "object", "description": "The IPsec Phase-2 Tunnel Endpoint History Table.\n This table is implemented as a \n sliding window in which only the\n last n entries are maintained. \n The maximum number of entries\n is specified by the cipSecHistTableSize object.", "properties": { "cipSecEndPtHistEntry": { "type": "array", "description": "Each entry contains the attributes associated with\n a previously active IPsec Phase-2 Tunnel Endpoint.", "items": { "type": "object", "properties": { "cipSecEndPtHistIndex": { "type": "integer", "description": "The number of the previously active\n Endpoint associated\n with a IPsec Phase-2 Tunnel Table. The value \n of this index is a number which begins at \n one and is incremented with each Endpoint \n associated with an IPsec Phase-2 Tunnel.\n The value of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecEndPtHistTunIndex": { "type": "integer", "description": "The index of the previously active IPsec\n Phase-2 Tunnel Table.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecEndPtHistActiveIndex": { "type": "integer", "description": "The index of the previously active Endpoint.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecEndPtHistLocalName": { "type": "string", "description": "The DNS name of the local Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cipSecEndPtHistLocalType": { "type": "string", "description": "The type of identity for the local Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType", "readOnly": true }, "cipSecEndPtHistLocalAddr1": { "type": "string", "description": "The local Endpoint's first IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the local Endpoint type is IP address range, \n then this is the value of beginning IP address of \n the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecEndPtHistLocalAddr2": { "type": "string", "description": "The local Endpoint's second IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the local Endpoint type is IP address range, \n then this\n is the value of ending IP address of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecEndPtHistLocalProtocol": { "type": "integer", "description": "The protocol number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecEndPtHistLocalPort": { "type": "integer", "description": "The port number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecEndPtHistRemoteName": { "type": "string", "description": "The DNS name of the remote Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cipSecEndPtHistRemoteType": { "type": "string", "description": "The type of identity for the remote Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType", "readOnly": true }, "cipSecEndPtHistRemoteAddr1": { "type": "string", "description": "The remote Endpoint's first IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this\n is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the remote Endpoint type is IP address range, \n then this\n is the value of beginning IP address of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecEndPtHistRemoteAddr2": { "type": "string", "description": "The remote Endpoint's second IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this\n is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the remote Endpoint type is IP address range, \n then this\n is the value of ending IP address of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecEndPtHistRemoteProtocol": { "type": "integer", "description": "The protocol number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecEndPtHistRemotePort": { "type": "integer", "description": "The port number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true } } }, "readOnly": true } }, "readOnly": true }, "cikeFailTable": { "type": "object", "description": "The IPsec Phase-1 Failure Table.\n This table is implemented as a sliding \n window in which only the last n entries are \n maintained. The maximum number of entries\n is specified by the cipSecFailTableSize object.", "properties": { "cikeFailEntry": { "type": "array", "description": "Each entry contains the attributes associated\n with\n an IPsec Phase-1 failure.", "items": { "type": "object", "properties": { "cikeFailIndex": { "type": "integer", "description": "The IPsec Phase-1 Failure Table index.\n The value of the index is a number which \n begins at one and is incremented with each \n IPsec Phase-1 failure. The value\n of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikeFailReason": { "type": "string", "description": "The reason for the failure. Possible reasons include:\n 1 = other\n 2 = peer delete request was received\n 3 = contact with peer was lost\n 4 = local failure occurred\n 5 = authentication failure\n 6 = hash validation failure\n 7 = encryption failure\n 8 = internal error occurred\n 9 = system capacity failure\n 10 = proposal failure\n 11 = peer's certificate is unavailable\n 12 = peer's certificate was found invalid\n 13 = local certificate expired\n 14 = certificate revoke list (crl) failure\n 15 = peer encoding error\n 16 = non-existent security association\n 17 = operator requested termination.", "readOnly": true }, "cikeFailTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n at the time of the failure.", "x-yang-type": "yang:timestamp", "readOnly": true }, "cikeFailLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType", "readOnly": true }, "cikeFailLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikeFailRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote\n peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType", "readOnly": true }, "cikeFailRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikeFailLocalAddr": { "type": "string", "description": "The IP address of the local peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cikeFailRemoteAddr": { "type": "string", "description": "The IP address of the remote peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true } } }, "readOnly": true } }, "readOnly": true }, "cipSecFailTable": { "type": "object", "description": "The IPsec Phase-2 Failure Table.\n This table is implemented as a sliding window \n in which only the last n entries are maintained. \n The maximum number of entries\n is specified by the cipSecFailTableSize object.", "properties": { "cipSecFailEntry": { "type": "array", "description": "Each entry contains the attributes associated with\n an IPsec Phase-1 failure.", "items": { "type": "object", "properties": { "cipSecFailIndex": { "type": "integer", "description": "The IPsec Phase-2 Failure Table index.\n The value of the index is a number which \n begins at one and is incremented with each \n IPsec Phase-1 failure. The value\n of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecFailReason": { "type": "string", "description": "The reason for the failure. Possible reasons\n include:\n 1 = other\n 2 = internal error occurred\n 3 = peer encoding error\n 4 = proposal failure\n 5 = protocol use failure\n 6 = non-existent security association\n 7 = decryption failure\n 8 = encryption failure\n 9 = inbound authentication failure\n 10 = outbound authentication failure\n 11 = compression failure\n 12 = system capacity failure\n 13 = peer delete request was received\n 14 = contact with peer was lost\n 15 = sequence number rolled over\n 16 = operator requested termination.", "readOnly": true }, "cipSecFailTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n at the time of the failure.", "x-yang-type": "yang:timestamp", "readOnly": true }, "cipSecFailTunnelIndex": { "type": "integer", "description": "The Phase-2 Tunnel index (cipSecTunIndex).", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecFailSaSpi": { "type": "integer", "description": "The security association SPI value.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecFailPktSrcAddr": { "type": "string", "description": "The packet's source IP address.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecFailPktDstAddr": { "type": "string", "description": "The packet's destination IP address.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true } } }, "readOnly": true } }, "readOnly": true } } }, "CISCO-IPSEC-FLOW-MONITOR-MIB_object-1": { "type": "object", "description": "object-1", "properties": { "cipSecTunIndex": { "type": "string", "description": "cipSecTunIndex", "x-yang-type": "leafref", "readOnly": true }, "cipSecTunActiveTime": { "type": "string", "description": "cipSecTunActiveTime", "x-yang-type": "leafref", "readOnly": true } } }, "CISCO-IPSEC-FLOW-MONITOR-MIB_object-2": { "type": "object", "description": "object-2", "properties": { "cipSecTunIndex": { "type": "string", "description": "cipSecTunIndex", "x-yang-type": "leafref", "readOnly": true }, "cipSecSpiIndex": { "type": "string", "description": "cipSecSpiIndex", "x-yang-type": "leafref", "readOnly": true }, "cipSecSpiProtocol": { "type": "string", "description": "cipSecSpiProtocol", "x-yang-type": "leafref", "readOnly": true } } }, "CISCO-IPSEC-FLOW-MONITOR-MIB_object-3": { "type": "object", "description": "object-3", "properties": { "cipSecTunIndex": { "type": "string", "description": "cipSecTunIndex", "x-yang-type": "leafref", "readOnly": true }, "cipSecTunActiveTime": { "type": "string", "description": "cipSecTunActiveTime", "x-yang-type": "leafref", "readOnly": true } } }, "CISCO-IPSEC-FLOW-MONITOR-MIB_object-4": { "type": "object", "description": "object-4", "properties": { "cipSecTunIndex": { "type": "string", "description": "cipSecTunIndex", "x-yang-type": "leafref", "readOnly": true }, "cipSecSpiIndex": { "type": "string", "description": "cipSecSpiIndex", "x-yang-type": "leafref", "readOnly": true }, "cipSecSpiProtocol": { "type": "string", "description": "cipSecSpiProtocol", "x-yang-type": "leafref", "readOnly": true } } }, "CISCO-IPSEC-FLOW-MONITOR-MIB_cikePeerEntry": { "type": "array", "description": "Each entry contains the attributes associated\n with an IPsec Phase-1 IKE peer association.", "items": { "type": "object", "properties": { "cikePeerLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType", "readOnly": true }, "cikePeerLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikePeerRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType", "readOnly": true }, "cikePeerRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikePeerIntIndex": { "type": "integer", "description": "The internal index of the local-remote\n peer association. This internal index is used \n to uniquely identify multiple associations between \n the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikePeerLocalAddr": { "type": "string", "description": "The IP address of the local peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cikePeerRemoteAddr": { "type": "string", "description": "The IP address of the remote peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cikePeerActiveTime": { "type": "string", "description": "The length of time that the peer association has\n existed in hundredths of a second.", "x-yang-type": "snmpv2-tc:TimeInterval", "readOnly": true }, "cikePeerActiveTunnelIndex": { "type": "integer", "description": "The index of the active IPsec Phase-1 IKE Tunnel\n (cikeTunIndex in the cikeTunnelTable) for this peer\n association. If an IPsec Phase-1 IKE Tunnel is\n not currently active, then the value of this\n object will be zero.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true } } } }, "CISCO-IPSEC-FLOW-MONITOR-MIB_cikeTunnelEntry": { "type": "array", "description": "Each entry contains the attributes associated with\n an active IPsec Phase-1 IKE Tunnel.", "items": { "type": "object", "properties": { "cikeTunIndex": { "type": "integer", "description": "The index of the IPsec Phase-1 IKE Tunnel Table.\n The value of the index is a number which begins \n at one and is incremented with each tunnel that \n is created. The value of this object will \n wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikeTunLocalType": { "type": "string", "description": "The type of local peer identity. The local\n peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType", "readOnly": true }, "cikeTunLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikeTunLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cikeTunLocalName": { "type": "string", "description": "The DNS name of the local IP address for\n the IPsec Phase-1 IKE Tunnel. If the DNS \n name associated with the local tunnel endpoint \n is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikeTunRemoteType": { "type": "string", "description": "The type of remote peer identity.\n The remote peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType", "readOnly": true }, "cikeTunRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then \n this is the host name used to identify the \n remote peer.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikeTunRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cikeTunRemoteName": { "type": "string", "description": "The DNS name of the remote IP address of IPsec Phase-1\n IKE Tunnel. If the DNS name associated with the remote\n tunnel endpoint is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikeTunNegoMode": { "type": "string", "description": "The negotiation mode of the IPsec Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeNegoMode", "readOnly": true }, "cikeTunDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp", "readOnly": true }, "cikeTunEncryptAlgo": { "type": "string", "description": "The encryption algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo", "readOnly": true }, "cikeTunHashAlgo": { "type": "string", "description": "The hash algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeHashAlgo", "readOnly": true }, "cikeTunAuthMethod": { "type": "string", "description": "The authentication method used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeAuthMethod", "readOnly": true }, "cikeTunLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel\n in seconds.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikeTunActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-1 IKE tunnel has been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval", "readOnly": true }, "cikeTunSaRefreshThreshold": { "type": "integer", "description": "The security association refresh threshold in seconds.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikeTunTotalRefreshes": { "type": "integer", "description": "The total number of security associations\n refreshes performed.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunInOctets": { "type": "integer", "description": "The total number of octets received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunInPkts": { "type": "integer", "description": "The total number of packets received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunInDropPkts": { "type": "integer", "description": "The total number of packets dropped\n by this IPsec Phase-1 IKE Tunnel during \n receive processing.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunInNotifys": { "type": "integer", "description": "The total number of notifys received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunInP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunInP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received and found to be invalid \n by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunInP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n received and rejected by this IPsec Phase-1 \n Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunInP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2\n security association delete requests received \n by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunOutPkts": { "type": "integer", "description": "The total number of packets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunOutDropPkts": { "type": "integer", "description": "The total number of packets dropped by this\n IPsec Phase-1 IKE Tunnel during send processing.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunOutNotifys": { "type": "integer", "description": "The total number of notifys sent by this\n IPsec Phase-1 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunOutP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunOutP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n found to be invalid by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunOutP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n rejected by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunOutP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 security association\n delete requests sent by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunStatus": { "type": "string", "description": "The status of the MIB table row.\n \n This object can be used to bring the tunnel down \n by setting value of this object to destroy(2).\n \n This object cannot be used to create \n a MIB table row.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TunnelStatus", "readOnly": true } } } }, "CISCO-IPSEC-FLOW-MONITOR-MIB_cikePeerCorrEntry": { "type": "array", "description": "Each entry contains the attributes of an\n IPsec Phase-1 IKE Peer Association to IPsec\n Phase-2 Tunnel Correlation.", "items": { "type": "object", "properties": { "cikePeerCorrLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType", "readOnly": true }, "cikePeerCorrLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikePeerCorrRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType", "readOnly": true }, "cikePeerCorrRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikePeerCorrIntIndex": { "type": "integer", "description": "The internal index of the local-remote\n peer association. This internal index is \n used to uniquely identify multiple associations \n between the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikePeerCorrSeqNum": { "type": "integer", "description": "The sequence number of the local-remote\n peer association. This sequence number is \n used to uniquely identify multiple instances \n of an unique association between\n the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikePeerCorrIpSecTunIndex": { "type": "integer", "description": "The index of the active IPsec Phase-2 Tunnel\n (cipSecTunIndex in the cipSecTunnelTable) for this\n IPsec Phase-1 IKE Peer Association.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true } } } }, "CISCO-IPSEC-FLOW-MONITOR-MIB_cikePhase1GWStatsEntry": { "type": "array", "description": "Each entry contains the attributes of an Phase-1 IKE stats\n information for the related gateway.\n \n There is only one entry for each gateway. The entry \n is created when a gateway up and cannot be deleted.", "items": { "type": "object", "properties": { "cmgwIndex": { "type": "string", "description": "cmgwIndex", "x-yang-type": "leafref", "readOnly": true }, "cikePhase1GWActiveTunnels": { "type": "integer", "description": "The number of currently active IPsec\n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWPreviousTunnels": { "type": "integer", "description": "The total number of previously active\n IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWInOctets": { "type": "integer", "description": "The total number of octets received by all currently\n and previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWInPkts": { "type": "integer", "description": "The total number of packets received by all\n currently and previously active IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWInDropPkts": { "type": "integer", "description": "The total number of packets which were\n dropped during receive processing by all \n currently and previously\n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWInNotifys": { "type": "integer", "description": "The total number of notifys received by\n all currently and previously active IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWInP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n received by all currently and previously \n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWInP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were received and found to be invalid \n by all currently and previously active IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWInP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were received and rejected by all \n currently and previously active IPsec Phase-1 \n IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWInP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 'Security\n Association' delete requests received by all \n currently and previously active and IPsec \n Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWOutOctets": { "type": "integer", "description": "The total number of octets sent by all currently\n and previously active and IPsec Phase-1 \n IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWOutPkts": { "type": "integer", "description": "The total number of packets sent by all currently\n and previously active and IPsec Phase-1 \n Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWOutDropPkts": { "type": "integer", "description": "The total number of packets which were dropped\n during send processing by all currently \n and previously\n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWOutNotifys": { "type": "integer", "description": "The total number of notifys sent by all currently\n and previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWOutP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were sent by all currently and previously \n active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWOutP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were sent and found to be invalid by \n all currently and previously active IPsec Phase-1 \n Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWOutP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges\n which were sent and rejected by all currently and\n previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWOutP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 SA\n delete requests sent by all currently and \n previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWInitTunnels": { "type": "integer", "description": "The total number of IPsec Phase-1 IKE\n Tunnels which were locally initiated.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWInitTunnelFails": { "type": "integer", "description": "The total number of IPsec Phase-1 IKE Tunnels\n which were locally initiated and failed to activate.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWRespTunnelFails": { "type": "integer", "description": "The total number of IPsec Phase-1 IKE Tunnels\n which were remotely initiated and failed to activate.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWSysCapFails": { "type": "integer", "description": "The total number of system capacity failures\n which occurred during processing of all current \n and previously active IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWAuthFails": { "type": "integer", "description": "The total number of authentications which ended\n in failure by all current and previous IPsec Phase-1\n IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWDecryptFails": { "type": "integer", "description": "The total number of decryptions which ended\n in failure by all current and previous IPsec Phase-1\n IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWHashValidFails": { "type": "integer", "description": "The total number of hash validations which ended\n in failure by all current and previous IPsec Phase-1\n IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikePhase1GWNoSaFails": { "type": "integer", "description": "The total number of non-existent 'Security Association'\n failures occurred during processing of current and \n previous IPsec Phase-1 IKE Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true } } } }, "CISCO-IPSEC-FLOW-MONITOR-MIB_cipSecTunnelEntry": { "type": "array", "description": "Each entry contains the attributes\n associated with an active IPsec Phase-2 Tunnel.", "items": { "type": "object", "properties": { "cipSecTunIndex": { "type": "integer", "description": "The index of the IPsec Phase-2 Tunnel Table.\n The value of the index is a number which begins \n at one and is incremented with each tunnel that \n is created. The value of this object will wrap \n at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunIkeTunnelIndex": { "type": "integer", "description": "The index of the associated IPsec Phase-1\n IKE Tunnel.\n (cikeTunIndex in the cikeTunnelTable)", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunIkeTunnelAlive": { "type": "boolean", "description": "An indicator which specifies whether or not the\n IPsec Phase-1 IKE Tunnel currently exists.", "readOnly": true }, "cipSecTunLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecTunRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecTunKeyType": { "type": "string", "description": "The type of key used by the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:KeyType", "readOnly": true }, "cipSecTunEncapMode": { "type": "string", "description": "The encapsulation mode used by the\n IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncapMode", "readOnly": true }, "cipSecTunLifeSize": { "type": "integer", "description": "The negotiated LifeSize of the\n IPsec Phase-2 Tunnel in kilobytes.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the\n IPsec Phase-2 Tunnel in seconds.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-2\n Tunnel has been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval", "readOnly": true }, "cipSecTunSaLifeSizeThreshold": { "type": "integer", "description": "The security association LifeSize refresh\n threshold in kilobytes.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunSaLifeTimeThreshold": { "type": "integer", "description": "The security association LifeTime refresh\n threshold in seconds.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunTotalRefreshes": { "type": "integer", "description": "The total number of security\n association refreshes performed.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunExpiredSaInstances": { "type": "integer", "description": "The total number of security associations\n which have expired.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunCurrentSaInstances": { "type": "integer", "description": "The number of security associations\n which are currently active or expiring.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunInSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used\n by the inbound security association of the \n IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp", "readOnly": true }, "cipSecTunInSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the inbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo", "readOnly": true }, "cipSecTunInSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo", "readOnly": true }, "cipSecTunInSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) security \n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo", "readOnly": true }, "cipSecTunInSaDecompAlgo": { "type": "string", "description": "The decompression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo", "readOnly": true }, "cipSecTunOutSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp", "readOnly": true }, "cipSecTunOutSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo", "readOnly": true }, "cipSecTunOutSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the outbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo", "readOnly": true }, "cipSecTunOutSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) \n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo", "readOnly": true }, "cipSecTunOutSaCompAlgo": { "type": "string", "description": "The compression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo", "readOnly": true }, "cipSecTunInOctets": { "type": "integer", "description": "The total number of octets received by this IPsec\n Phase-2 Tunnel. This value is accumulated\n BEFORE determining whether or not the packet should be\n decompressed. See also cipSecTunInOctWraps for the\n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHcInOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n received by this IPsec Phase-2 Tunnel. This value is\n accumulated BEFORE determining whether or not the packet\n should be decompressed.", "minimum": 0, "readOnly": true }, "cipSecTunInOctWraps": { "type": "integer", "description": "The number of times the octets received counter\n (cipSecTunInOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunInDecompOctets": { "type": "integer", "description": "The total number of decompressed octets received\n by this IPsec Phase-2 Tunnel. This value is \n accumulated AFTER the packet is decompressed. \n If compression is not being\n used, this value will match the value of \n cipSecTunInOctets. See also cipSecTunInDecompOctWraps \n for the number of times\n this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHcInDecompOctets": { "type": "integer", "description": "A high capacity count of the total number of decompressed\n octets received by this IPsec Phase-2 Tunnel. This value\n is accumulated AFTER the packet is decompressed. If\n compression is not being used, this value will match the\n value of cipSecTunHcInOctets.", "minimum": 0, "readOnly": true }, "cipSecTunInDecompOctWraps": { "type": "integer", "description": "The number of times the decompressed\n octets received counter\n (cipSecTunInDecompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunInPkts": { "type": "integer", "description": "The total number of packets received\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunInDropPkts": { "type": "integer", "description": "The total number of packets dropped\n during receive processing by this IPsec Phase-2 \n Tunnel. This count does NOT include\n packets dropped due to Anti-Replay processing.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunInReplayDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n receive processing due to Anti-Replay processing \n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunInAuths": { "type": "integer", "description": "The total number of inbound\n authentication's performed by this \n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunInAuthFails": { "type": "integer", "description": "The total number of inbound authentication's\n which ended in\n failure by this IPsec Phase-2 Tunnel .", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunInDecrypts": { "type": "integer", "description": "The total number of inbound decryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunInDecryptFails": { "type": "integer", "description": "The total number of inbound decryption's\n which ended in failure\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec\n Phase-2 Tunnel. This value is accumulated\n AFTER determining whether or not the packet should \n be compressed. See also cipSecTunOutOctWraps for\n the number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHcOutOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n sent by this IPsec Phase-2 Tunnel. This value is\n accumulated AFTER determining whether or not the \n packet\n should be compressed.", "minimum": 0, "readOnly": true }, "cipSecTunOutOctWraps": { "type": "integer", "description": "The number of times the out octets counter\n (cipSecTunOutOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunOutUncompOctets": { "type": "integer", "description": "The total number of uncompressed octets sent\n by this IPsec Phase-2 Tunnel. This value \n is accumulated BEFORE the packet is compressed. \n If compression is not being used, this value \n will match the value of cipSecTunOutOctets.\n See also cipSecTunOutDecompOctWraps for the \n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHcOutUncompOctets": { "type": "integer", "description": "A high capacity count of the total number\n of uncompressed octets sent by this IPsec \n Phase-2 Tunnel. This value is accumulated BEFORE \n the packet is compressed. If compression\n is not being used, this value will match the value\n of cipSecTunHcOutOctets.", "minimum": 0, "readOnly": true }, "cipSecTunOutUncompOctWraps": { "type": "integer", "description": "The number of times the uncompressed octets sent\n counter (cipSecTunOutUncompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunOutPkts": { "type": "integer", "description": "The total number of packets sent by this\n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunOutDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n send processing by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunOutAuths": { "type": "integer", "description": "The total number of outbound authentication's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunOutAuthFails": { "type": "integer", "description": "The total number of outbound\n authentication's which ended in failure \n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunOutEncrypts": { "type": "integer", "description": "The total number of outbound encryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunOutEncryptFails": { "type": "integer", "description": "The total number of outbound encryption's\n which ended in failure by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunStatus": { "type": "string", "description": "The status of the MIB table row.\n \n This object can be used to bring the tunnel down\n by setting value of this object to destroy(2).\n When the value is set to destroy(2), the SA\n bundle is destroyed and this row is deleted\n from this table.\n \n When this MIB value is queried, the value of\n active(1) is always returned, if the instance \n exists.\n \n This object cannot be used to create a MIB \n table row.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:TunnelStatus", "readOnly": true } } } }, "CISCO-IPSEC-FLOW-MONITOR-MIB_cipSecEndPtEntry": { "type": "array", "description": "An IPsec Phase-2 Tunnel Endpoint entry.", "items": { "type": "object", "properties": { "cipSecTunIndex": { "type": "string", "description": "cipSecTunIndex", "x-yang-type": "leafref", "readOnly": true }, "cipSecEndPtIndex": { "type": "integer", "description": "The number of the Endpoint associated with the\n IPsec Phase-2 Tunnel Table. The value of this\n index is a number which begins at one and \n is incremented with each Endpoint associated \n with an IPsec Phase-2 Tunnel.\n The value of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecEndPtLocalName": { "type": "string", "description": "The DNS name of the local Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cipSecEndPtLocalType": { "type": "string", "description": "The type of identity for the local Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType", "readOnly": true }, "cipSecEndPtLocalAddr1": { "type": "string", "description": "The local Endpoint's first IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the local Endpoint type is IP address range, \n then this is the value of beginning IP address \n of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecEndPtLocalAddr2": { "type": "string", "description": "The local Endpoint's second IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the local Endpoint type is IP address range, \n then this is the value of ending IP address \n of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecEndPtLocalProtocol": { "type": "integer", "description": "The protocol number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecEndPtLocalPort": { "type": "integer", "description": "The port number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecEndPtRemoteName": { "type": "string", "description": "The DNS name of the remote Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cipSecEndPtRemoteType": { "type": "string", "description": "The type of identity for the remote Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType", "readOnly": true }, "cipSecEndPtRemoteAddr1": { "type": "string", "description": "The remote Endpoint's first IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the remote Endpoint type is IP address range, \n then this is the value of beginning IP address \n of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecEndPtRemoteAddr2": { "type": "string", "description": "The remote Endpoint's second IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the remote Endpoint type is IP address range, \n then this is the value of ending IP address of \n the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecEndPtRemoteProtocol": { "type": "integer", "description": "The protocol number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecEndPtRemotePort": { "type": "integer", "description": "The port number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true } } } }, "CISCO-IPSEC-FLOW-MONITOR-MIB_cipSecSpiEntry": { "type": "array", "description": "Each entry contains the attributes associated with\n active and expiring IPsec Phase-2 \n security associations.", "items": { "type": "object", "properties": { "cipSecTunIndex": { "type": "string", "description": "cipSecTunIndex", "x-yang-type": "leafref", "readOnly": true }, "cipSecSpiIndex": { "type": "integer", "description": "The number of the SPI associated with the\n Phase-2 Tunnel Table. The value of this \n index is a number which begins at one and is \n incremented with each SPI associated with an \n IPsec Phase-2 Tunnel. The value of this \n object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecSpiDirection": { "type": "string", "description": "The direction of the SPI.", "readOnly": true }, "cipSecSpiValue": { "type": "integer", "description": "The value of the SPI.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecSpiProtocol": { "type": "string", "description": "The protocol of the SPI.", "readOnly": true }, "cipSecSpiStatus": { "type": "string", "description": "The status of the SPI.", "readOnly": true } } } }, "CISCO-IPSEC-FLOW-MONITOR-MIB_cipSecPhase2GWStatsEntry": { "type": "array", "description": "Each entry contains the attributes of an Phase-2 IPsec stats\n information for the related gateway.\n \n There is only one entry for each gateway. The entry \n is created when a gateway up and cannot be deleted.", "items": { "type": "object", "properties": { "cmgwIndex": { "type": "string", "description": "cmgwIndex", "x-yang-type": "leafref", "readOnly": true }, "cipSecPhase2GWActiveTunnels": { "type": "integer", "description": "The total number of currently active\n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWPreviousTunnels": { "type": "integer", "description": "The total number of previously active\n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInOctets": { "type": "integer", "description": "The total number of octets received by all\n current and previous IPsec Phase-2 Tunnels. \n This value is accumulated BEFORE determining \n whether or not the packet should be decompressed. \n See also cipSecGlobalInOctWraps for the number\n of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInOctWraps": { "type": "integer", "description": "The number of times the global octets received\n counter (cipSecGlobalInOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInDecompOctets": { "type": "integer", "description": "The total number of decompressed octets received\n by all current and previous IPsec Phase-2 Tunnels. \n This value is accumulated AFTER the packet is \n decompressed. If compression is not being used, \n this value will match the value of cipSecGlobalInOctets. \n See also cipSecGlobalInDecompOctWraps\n for the number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInDecompOctWraps": { "type": "integer", "description": "The number of times the global decompressed\n octets received counter (cipSecGlobalInDecompOctets) \n has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInPkts": { "type": "integer", "description": "The total number of packets received\n by all current and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInDrops": { "type": "integer", "description": "The total number of packets dropped\n during receive processing by all current and previous \n IPsec Phase-2 Tunnels. This count does NOT include \n packets dropped due to Anti-Replay processing.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInReplayDrops": { "type": "integer", "description": "The total number of packets dropped during\n receive processing due to Anti-Replay \n processing by all current and previous IPsec\n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInAuths": { "type": "integer", "description": "The total number of inbound authentication's\n performed by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInAuthFails": { "type": "integer", "description": "The total number of inbound authentication's\n which ended in failure by all current and previous \n IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInDecrypts": { "type": "integer", "description": "The total number of inbound decryption's\n performed by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWInDecryptFails": { "type": "integer", "description": "The total number of inbound decryption's\n which ended in failure by all current and \n previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWOutOctets": { "type": "integer", "description": "The total number of octets sent by all\n current and previous IPsec Phase-2 Tunnels. \n This value is accumulated AFTER determining \n whether or not the packet should be compressed. \n See also cipSecGlobalOutOctWraps for the\n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWOutOctWraps": { "type": "integer", "description": "The number of times the global octets sent counter\n (cipSecGlobalOutOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWOutUncompOctets": { "type": "integer", "description": "The total number of uncompressed octets sent\n by all current and previous IPsec Phase-2 Tunnels. \n This value is accumulated BEFORE the packet is \n compressed. If compression is not being used, this \n value will match the value of cipSecGlobalOutOctets. \n See also cipSecGlobalOutDecompOctWraps for the number \n of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWOutUncompOctWraps": { "type": "integer", "description": "The number of times the global uncompressed\n octets sent counter (cipSecGlobalOutUncompOctets) \n has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWOutPkts": { "type": "integer", "description": "The total number of packets sent by all\n current and previous IPsec Phase-2 \n Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWOutDrops": { "type": "integer", "description": "The total number of packets dropped during send\n processing by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWOutAuths": { "type": "integer", "description": "The total number of outbound authentication's\n performed by all current and previous IPsec \n Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWOutAuthFails": { "type": "integer", "description": "The total number of outbound authentication's\n which ended in failure\n by all current and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWOutEncrypts": { "type": "integer", "description": "The total number of outbound encryption's performed\n by all current and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWOutEncryptFails": { "type": "integer", "description": "The total number of outbound encryption's\n which ended in failure by all current and \n previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWProtocolUseFails": { "type": "integer", "description": "The total number of protocol use failures\n which occurred during processing of all current \n and previously active IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWNoSaFails": { "type": "integer", "description": "The total number of non-existent\n Security Association in failures which occurred \n during processing of all current\n and previous IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecPhase2GWSysCapFails": { "type": "integer", "description": "The total number of system capacity failures\n which occurred during processing of all current \n and previously active IPsec Phase-2 Tunnels.", "minimum": 0, "maximum": 4294967295, "readOnly": true } } } }, "CISCO-IPSEC-FLOW-MONITOR-MIB_cikeTunnelHistEntry": { "type": "array", "description": "Each entry contains the attributes\n associated with a previously active IPsec \n Phase-1 IKE Tunnel.", "items": { "type": "object", "properties": { "cikeTunHistIndex": { "type": "integer", "description": "The index of the IPsec Phase-1 IKE Tunnel History\n Table. The value of the index is a number which \n begins at one and is incremented with each \n tunnel that ends. The value of this object \n will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikeTunHistTermReason": { "type": "string", "description": "The reason the IPsec Phase-1 IKE Tunnel was terminated.\n Possible reasons include:\n 1 = other\n 2 = normal termination\n 3 = operator request\n 4 = peer delete request was received\n 5 = contact with peer was lost\n 6 = local failure occurred.\n 7 = operator initiated check point request", "readOnly": true }, "cikeTunHistActiveIndex": { "type": "integer", "description": "The index of the previously active IPsec\n Phase-1 IKE Tunnel.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikeTunHistPeerLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType", "readOnly": true }, "cikeTunHistPeerLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikeTunHistPeerIntIndex": { "type": "integer", "description": "The internal index of the local-remote peer\n association. This internal index is used to \n uniquely identify multiple associations between \n the local and remote peer.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikeTunHistPeerRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote\n peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType", "readOnly": true }, "cikeTunHistPeerRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikeTunHistLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cikeTunHistLocalName": { "type": "string", "description": "The DNS name of the local IP address for\n the IPsec Phase-1 IKE Tunnel. If the DNS \n name associated with the local tunnel endpoint \n is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikeTunHistRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cikeTunHistRemoteName": { "type": "string", "description": "The DNS name of the remote IP address of IPsec Phase-1\n IKE Tunnel. If the DNS name associated with the remote\n tunnel endpoint is not known, then the value of this\n object will be a NULL string.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikeTunHistNegoMode": { "type": "string", "description": "The negotiation mode of the IPsec Phase-1 IKE Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeNegoMode", "readOnly": true }, "cikeTunHistDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp", "readOnly": true }, "cikeTunHistEncryptAlgo": { "type": "string", "description": "The encryption algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo", "readOnly": true }, "cikeTunHistHashAlgo": { "type": "string", "description": "The hash algorithm used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeHashAlgo", "readOnly": true }, "cikeTunHistAuthMethod": { "type": "string", "description": "The authentication method used in IPsec Phase-1 IKE\n negotiations.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkeAuthMethod", "readOnly": true }, "cikeTunHistLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel\n in seconds.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikeTunHistStartTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n when the IPsec Phase-1 IKE tunnel was started.", "x-yang-type": "yang:timestamp", "readOnly": true }, "cikeTunHistActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-1 IKE tunnel was been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval", "readOnly": true }, "cikeTunHistTotalRefreshes": { "type": "integer", "description": "The total number of security associations\n refreshes performed.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistTotalSas": { "type": "integer", "description": "The total number of security associations\n used during the\n life of the IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistInOctets": { "type": "integer", "description": "The total number of octets\n received by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistInPkts": { "type": "integer", "description": "The total number of packets received\n by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistInDropPkts": { "type": "integer", "description": "The total number of packets dropped\n by this IPsec Phase-1\n IKE Tunnel during receive processing.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistInNotifys": { "type": "integer", "description": "The total number of notifys received\n by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistInP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistInP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received and\n found to be invalid by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistInP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2\n exchanges received and\n rejected by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistInP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 security association\n delete requests received by this IPsec \n Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistOutPkts": { "type": "integer", "description": "The total number of packets sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistOutDropPkts": { "type": "integer", "description": "The total number of packets dropped\n by this IPsec Phase-1\n IKE Tunnel during send processing.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistOutNotifys": { "type": "integer", "description": "The total number of notifys sent by this IPsec Phase-1\n IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistOutP2Exchgs": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent by\n this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistOutP2ExchgInvalids": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n found to be invalid by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistOutP2ExchgRejects": { "type": "integer", "description": "The total number of IPsec Phase-2 exchanges sent and\n rejected by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cikeTunHistOutP2SaDelRequests": { "type": "integer", "description": "The total number of IPsec Phase-2 security association\n delete requests sent by this IPsec Phase-1 IKE Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true } } } }, "CISCO-IPSEC-FLOW-MONITOR-MIB_cipSecTunnelHistEntry": { "type": "array", "description": "Each entry contains the attributes associated with\n a previously active IPsec Phase-2 Tunnel.", "items": { "type": "object", "properties": { "cipSecTunHistIndex": { "type": "integer", "description": "The index of the IPsec Phase-2 Tunnel History Table.\n The value of the index is a number which \n begins at one and is incremented with each tunnel \n that ends. The value\n of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunHistTermReason": { "type": "string", "description": "The reason the IPsec Phase-2 Tunnel was terminated.\n Possible reasons include:\n 1 = other\n 2 = normal termination\n 3 = operator request\n 4 = peer delete request was received\n 5 = contact with peer was lost\n 6 = local failure occurred\n 7 = operator initiated check point request", "readOnly": true }, "cipSecTunHistActiveIndex": { "type": "integer", "description": "The index of the previously active\n IPsec Phase-2 Tunnel.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunHistIkeTunnelIndex": { "type": "integer", "description": "The index of the associated IPsec Phase-1 Tunnel\n (cikeTunIndex in the cikeTunnelTable).", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunHistLocalAddr": { "type": "string", "description": "The IP address of the local endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecTunHistRemoteAddr": { "type": "string", "description": "The IP address of the remote endpoint for the IPsec\n Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecTunHistKeyType": { "type": "string", "description": "The type of key used by the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:KeyType", "readOnly": true }, "cipSecTunHistEncapMode": { "type": "string", "description": "The encapsulation mode used by the\n IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncapMode", "readOnly": true }, "cipSecTunHistLifeSize": { "type": "integer", "description": "The negotiated LifeSize of the IPsec Phase-2 Tunnel in\n kilobytes.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunHistLifeTime": { "type": "integer", "description": "The negotiated LifeTime of the IPsec Phase-2 Tunnel in\n seconds.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecTunHistStartTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n when the IPsec Phase-2 Tunnel was started.", "x-yang-type": "yang:timestamp", "readOnly": true }, "cipSecTunHistActiveTime": { "type": "string", "description": "The length of time the IPsec Phase-2 Tunnel has been\n active in hundredths of seconds.", "x-yang-type": "snmpv2-tc:TimeInterval", "readOnly": true }, "cipSecTunHistTotalRefreshes": { "type": "integer", "description": "The total number of security association refreshes\n performed.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistTotalSas": { "type": "integer", "description": "The total number of security associations used\n during the\n life of the IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistInSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used by the inbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp", "readOnly": true }, "cipSecTunHistInSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the inbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo", "readOnly": true }, "cipSecTunHistInSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo", "readOnly": true }, "cipSecTunHistInSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) \n security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo", "readOnly": true }, "cipSecTunHistInSaDecompAlgo": { "type": "string", "description": "The decompression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo", "readOnly": true }, "cipSecTunHistOutSaDiffHellmanGrp": { "type": "string", "description": "The Diffie Hellman Group used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:DiffHellmanGrp", "readOnly": true }, "cipSecTunHistOutSaEncryptAlgo": { "type": "string", "description": "The encryption algorithm used by the outbound security\n association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EncryptAlgo", "readOnly": true }, "cipSecTunHistOutSaAhAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the outbound\n authentication header (AH) security association of\n the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo", "readOnly": true }, "cipSecTunHistOutSaEspAuthAlgo": { "type": "string", "description": "The authentication algorithm used by the inbound\n encapsulation security protocol (ESP) \n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:AuthAlgo", "readOnly": true }, "cipSecTunHistOutSaCompAlgo": { "type": "string", "description": "The compression algorithm used by the inbound\n security association of the IPsec Phase-2 Tunnel.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:CompAlgo", "readOnly": true }, "cipSecTunHistInOctets": { "type": "integer", "description": "The total number of octets received by this IPsec\n Phase-2 Tunnel. This value is accumulated\n BEFORE determining whether or not the packet should \n be decompressed. See also cipSecTunInOctWraps for \n the number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistHcInOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n received by this IPsec Phase-2 Tunnel. This value is\n accumulated BEFORE determining whether or not \n the packet should be decompressed.", "minimum": 0, "readOnly": true }, "cipSecTunHistInOctWraps": { "type": "integer", "description": "The number of times the octets received counter\n (cipSecTunInOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistInDecompOctets": { "type": "integer", "description": "The total number of decompressed octets received by this\n IPsec Phase-2 Tunnel. This value is accumulated AFTER\n the packet is decompressed. If compression is not being\n used, this value will match the value of cipSecTunHistInOctets.\n See also cipSecTunInDecompOctWraps for the number of times\n this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistHcInDecompOctets": { "type": "integer", "description": "A high capacity count of the total number of decompressed\n octets received by this IPsec Phase-2 Tunnel. This value\n is accumulated AFTER the packet is decompressed. If\n compression is not being used, this value will match the\n value of cipSecTunHistHcInOctets.", "minimum": 0, "readOnly": true }, "cipSecTunHistInDecompOctWraps": { "type": "integer", "description": "The number of times the decompressed octets\n received counter (cipSecTunInDecompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistInPkts": { "type": "integer", "description": "The total number of packets received by this\n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistInDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n receive processing by this IPsec Phase-2 Tunnel. \n This count does NOT include packets\n dropped due to Anti-Replay processing.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistInReplayDropPkts": { "type": "integer", "description": "The total number of packets dropped during\n receive processing due to Anti-Replay processing \n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistInAuths": { "type": "integer", "description": "The total number of inbound authentication's\n performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistInAuthFails": { "type": "integer", "description": "The total number of inbound authentication's\n which ended in\n failure by this IPsec Phase-2 Tunnel .", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistInDecrypts": { "type": "integer", "description": "The total number of inbound decryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistInDecryptFails": { "type": "integer", "description": "The total number of inbound decryption's\n which ended in failure\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistOutOctets": { "type": "integer", "description": "The total number of octets sent by this IPsec\n Phase-2 Tunnel. This value is accumulated\n AFTER determining whether or not the \n packet should be\n compressed. See also cipSecTunOutOctWraps for the\n number of times this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistHcOutOctets": { "type": "integer", "description": "A high capacity count of the total number of octets\n sent by this IPsec Phase-2 Tunnel. This value \n is accumulated AFTER determining whether or not \n the packet should be\n compressed.", "minimum": 0, "readOnly": true }, "cipSecTunHistOutOctWraps": { "type": "integer", "description": "The number of times the octets sent counter\n (cipSecTunOutOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistOutUncompOctets": { "type": "integer", "description": "The total number of uncompressed octets sent by this\n IPsec Phase-2 Tunnel. This value is accumulated BEFORE\n the packet is compressed. If compression is not being\n used, this value will match the value of \n cipSecTunHistOutOctets. See also \n cipSecTunOutDecompOctWraps for the number of times\n this counter has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistHcOutUncompOctets": { "type": "integer", "description": "A high capacity count of the total\n number of uncompressed octets sent by this \n IPsec Phase-2 Tunnel. This value is accumulated \n BEFORE the packet is compressed. If compression\n is not being used, this value will match the value of\n cipSecTunHistHcOutOctets.", "minimum": 0, "readOnly": true }, "cipSecTunHistOutUncompOctWraps": { "type": "integer", "description": "The number of times the uncompressed octets sent counter\n (cipSecTunOutUncompOctets) has wrapped.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistOutPkts": { "type": "integer", "description": "The total number of packets sent by this\n IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistOutDropPkts": { "type": "integer", "description": "The total number of packets dropped\n during send processing\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistOutAuths": { "type": "integer", "description": "The total number of outbound authentication's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistOutAuthFails": { "type": "integer", "description": "The total number of outbound authentication's\n which ended in\n failure by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistOutEncrypts": { "type": "integer", "description": "The total number of outbound encryption's performed\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true }, "cipSecTunHistOutEncryptFails": { "type": "integer", "description": "The total number of outbound encryption's\n which ended in failure\n by this IPsec Phase-2 Tunnel.", "minimum": 0, "maximum": 4294967295, "readOnly": true } } } }, "CISCO-IPSEC-FLOW-MONITOR-MIB_cipSecEndPtHistEntry": { "type": "array", "description": "Each entry contains the attributes associated with\n a previously active IPsec Phase-2 Tunnel Endpoint.", "items": { "type": "object", "properties": { "cipSecEndPtHistIndex": { "type": "integer", "description": "The number of the previously active\n Endpoint associated\n with a IPsec Phase-2 Tunnel Table. The value \n of this index is a number which begins at \n one and is incremented with each Endpoint \n associated with an IPsec Phase-2 Tunnel.\n The value of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecEndPtHistTunIndex": { "type": "integer", "description": "The index of the previously active IPsec\n Phase-2 Tunnel Table.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecEndPtHistActiveIndex": { "type": "integer", "description": "The index of the previously active Endpoint.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecEndPtHistLocalName": { "type": "string", "description": "The DNS name of the local Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cipSecEndPtHistLocalType": { "type": "string", "description": "The type of identity for the local Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType", "readOnly": true }, "cipSecEndPtHistLocalAddr1": { "type": "string", "description": "The local Endpoint's first IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the local Endpoint type is IP address range, \n then this is the value of beginning IP address of \n the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecEndPtHistLocalAddr2": { "type": "string", "description": "The local Endpoint's second IP address specification.\n \n If the local Endpoint type is single IP address, \n then this is the value of the IP address.\n \n If the local Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the local Endpoint type is IP address range, \n then this\n is the value of ending IP address of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecEndPtHistLocalProtocol": { "type": "integer", "description": "The protocol number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecEndPtHistLocalPort": { "type": "integer", "description": "The port number of the local Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecEndPtHistRemoteName": { "type": "string", "description": "The DNS name of the remote Endpoint.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cipSecEndPtHistRemoteType": { "type": "string", "description": "The type of identity for the remote Endpoint.\n Possible values are:\n 1) a single IP address, or\n 2) an IP address range, or\n 3) an IP subnet.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:EndPtType", "readOnly": true }, "cipSecEndPtHistRemoteAddr1": { "type": "string", "description": "The remote Endpoint's first IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this\n is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet.\n \n If the remote Endpoint type is IP address range, \n then this\n is the value of beginning IP address of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecEndPtHistRemoteAddr2": { "type": "string", "description": "The remote Endpoint's second IP address specification.\n \n If the remote Endpoint type is single IP address, \n then this\n is the value of the IP address.\n \n If the remote Endpoint type is IP subnet, then this\n is the value of the subnet mask.\n \n If the remote Endpoint type is IP address range, \n then this\n is the value of ending IP address of the range.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecEndPtHistRemoteProtocol": { "type": "integer", "description": "The protocol number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecEndPtHistRemotePort": { "type": "integer", "description": "The port number of the remote Endpoint's traffic.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true } } } }, "CISCO-IPSEC-FLOW-MONITOR-MIB_cikeFailEntry": { "type": "array", "description": "Each entry contains the attributes associated\n with\n an IPsec Phase-1 failure.", "items": { "type": "object", "properties": { "cikeFailIndex": { "type": "integer", "description": "The IPsec Phase-1 Failure Table index.\n The value of the index is a number which \n begins at one and is incremented with each \n IPsec Phase-1 failure. The value\n of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cikeFailReason": { "type": "string", "description": "The reason for the failure. Possible reasons include:\n 1 = other\n 2 = peer delete request was received\n 3 = contact with peer was lost\n 4 = local failure occurred\n 5 = authentication failure\n 6 = hash validation failure\n 7 = encryption failure\n 8 = internal error occurred\n 9 = system capacity failure\n 10 = proposal failure\n 11 = peer's certificate is unavailable\n 12 = peer's certificate was found invalid\n 13 = local certificate expired\n 14 = certificate revoke list (crl) failure\n 15 = peer encoding error\n 16 = non-existent security association\n 17 = operator requested termination.", "readOnly": true }, "cikeFailTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n at the time of the failure.", "x-yang-type": "yang:timestamp", "readOnly": true }, "cikeFailLocalType": { "type": "string", "description": "The type of local peer identity. The local peer\n may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType", "readOnly": true }, "cikeFailLocalValue": { "type": "string", "description": "The value of the local peer identity.\n \n If the local peer type is an IP Address, then this\n is the IP Address used to identify the local peer.\n \n If the local peer type is a host name, then this is\n the host name used to identify the local peer.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikeFailRemoteType": { "type": "string", "description": "The type of remote peer identity. The remote\n peer may be identified by:\n 1. an IP address, or\n 2. a host name.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IkePeerType", "readOnly": true }, "cikeFailRemoteValue": { "type": "string", "description": "The value of the remote peer identity.\n \n If the remote peer type is an IP Address, then this\n is the IP Address used to identify the remote peer.\n \n If the remote peer type is a host name, then this is\n the host name used to identify the remote peer.", "x-yang-type": "snmpv2-tc:DisplayString", "readOnly": true }, "cikeFailLocalAddr": { "type": "string", "description": "The IP address of the local peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cikeFailRemoteAddr": { "type": "string", "description": "The IP address of the remote peer.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true } } } }, "CISCO-IPSEC-FLOW-MONITOR-MIB_cipSecFailEntry": { "type": "array", "description": "Each entry contains the attributes associated with\n an IPsec Phase-1 failure.", "items": { "type": "object", "properties": { "cipSecFailIndex": { "type": "integer", "description": "The IPsec Phase-2 Failure Table index.\n The value of the index is a number which \n begins at one and is incremented with each \n IPsec Phase-1 failure. The value\n of this object will wrap at 2,147,483,647.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecFailReason": { "type": "string", "description": "The reason for the failure. Possible reasons\n include:\n 1 = other\n 2 = internal error occurred\n 3 = peer encoding error\n 4 = proposal failure\n 5 = protocol use failure\n 6 = non-existent security association\n 7 = decryption failure\n 8 = encryption failure\n 9 = inbound authentication failure\n 10 = outbound authentication failure\n 11 = compression failure\n 12 = system capacity failure\n 13 = peer delete request was received\n 14 = contact with peer was lost\n 15 = sequence number rolled over\n 16 = operator requested termination.", "readOnly": true }, "cipSecFailTime": { "type": "string", "description": "The value of sysUpTime in hundredths of seconds\n at the time of the failure.", "x-yang-type": "yang:timestamp", "readOnly": true }, "cipSecFailTunnelIndex": { "type": "integer", "description": "The Phase-2 Tunnel index (cipSecTunIndex).", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecFailSaSpi": { "type": "integer", "description": "The security association SPI value.", "minimum": -2147483648, "maximum": 2147483647, "readOnly": true }, "cipSecFailPktSrcAddr": { "type": "string", "description": "The packet's source IP address.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true }, "cipSecFailPktDstAddr": { "type": "string", "description": "The packet's destination IP address.", "x-yang-type": "CISCO-IPSEC-FLOW-MONITOR-MIB:IPSIpAddress", "readOnly": true } } } }, "restconf-error": { "type": "object", "description": "Standard RESTCONF error response (RFC 8040 Section 7.1)", "properties": { "ietf-restconf:errors": { "type": "object", "properties": { "error": { "type": "array", "items": { "type": "object", "properties": { "error-type": { "type": "string", "enum": [ "transport", "rpc", "protocol", "application" ], "description": "Layer where the error occurred" }, "error-tag": { "type": "string", "description": "Enumerated error tag (e.g. invalid-value, data-missing, access-denied)" }, "error-severity": { "type": "string", "enum": [ "error", "warning" ], "description": "Error severity" }, "error-app-tag": { "type": "string", "description": "Application-specific error tag" }, "error-path": { "type": "string", "description": "YANG instance-identifier of the error node" }, "error-message": { "type": "string", "description": "Human-readable error description" } }, "required": [ "error-type", "error-tag" ] } } } } }, "example": { "ietf-restconf:errors": { "error": [ { "error-type": "protocol", "error-tag": "invalid-value", "error-severity": "error", "error-message": "Invalid input parameter" } ] } } } }, "securitySchemes": { "basicAuth": { "type": "http", "scheme": "basic" } } }, "security": [ { "basicAuth": [] } ], "tags": [ { "name": "CISCO-IPSEC-FLOW-MONITOR-MIB", "description": "MIB operations for CISCO-IPSEC-FLOW-MONITOR-MIB" } ], "externalDocs": { "description": "Cisco SNMP Object Navigator", "url": "https://snmp.cloudapps.cisco.com/Support/IOS/do/BrowseMIB.do" } }