This module defines top-level configuration and operational state data related to security.
For modularity purposes, the top-level security container provides a natural attachment point for implementations such as IPSec, IKE, and Certificates.
openconfig-extensions
openconfig-network-instance
This module defines configuration and operational state for IPSec.
ietf-inet-types
ietf-yang-types
openconfig-extensions
openconfig-network-instance
openconfig-keychain-types
openconfig-security
openconfig-security-types
This module defines configuration and operational state for IPSec.
ietf-inet-types
ietf-yang-types
openconfig-extensions
openconfig-network-instance
openconfig-interfaces
openconfig-security
openconfig-security-types
openconfig-security-ike
This module defines identities and types used with the OpenConfig security modules.
openconfig-extensions
description:
Base identity for the operational status of an IPsec connection
description:
No connection state is currently present or known.
base identity: CONNECTION_STATUS
description:
In the process of negotiating an IPsec connection.
base identity: CONNECTION_STATUS
description:
Waiting for an incoming IPsec negotiation.
base identity: CONNECTION_STATUS
description:
The IPsec negotiation is complete and ready for data transfer.
base identity: CONNECTION_STATUS
description:
The connection is in an invalid state due to a configuration or system error that prevents connection establishment.
base identity: CONNECTION_STATUS
description:
The IPsec negotiation is complete.
base identity: CONNECTION_STATUS
description:
Base identity for the role of IPsec connection.
description:
This device starts the connection attempt.
base identity: CONNECTION_ROLE
description:
This device only accepts incoming connection requests.
base identity: CONNECTION_ROLE
description:
Base identity for Diffie-Hellman groups used for key exchange (IKE Phase 1) and Perfect Forward Secrecy (PFS in Phase 2).
description:
Diffie-Hellman group 1 (768 bit)
base identity: DH_GROUP
description:
Diffie-Hellman group 2 (1024 bit)
base identity: DH_GROUP
description:
Diffie-Hellman group 5 (1536 bit)
base identity: DH_GROUP
description:
Diffie-Hellman group 14 (2048 bit)
base identity: DH_GROUP
description:
Diffie-Hellman group 15 (3072 bit)
base identity: DH_GROUP
description:
Diffie-Hellman group 16 (4096 bit)
base identity: DH_GROUP
description:
Diffie-Hellman group 17 (6144 bit)
base identity: DH_GROUP
description:
Diffie-Hellman group 19 (256 bit ecp)
base identity: DH_GROUP
description:
Diffie-Hellman group 20 (384 bit ecp)
base identity: DH_GROUP
description:
Diffie-Hellman group 21 (521 bit ecp)
base identity: DH_GROUP
description:
Diffie-Hellman group 24 (2048 bit, 256 bit subgroup)
base identity: DH_GROUP
description:
Base identity for the authentication method used in the IKE exchange.
description:
Authentication using a pre-configured symmetric key (PSK).
base identity: IKE_AUTH_METHOD
description:
Authentication using PKI certificates.
base identity: IKE_AUTH_METHOD
description:
Base identity for the Internet Key Exchange protocol version.
description:
Internet Key Exchange Protocol Version 1 (Legacy).
base identity: IKE_VERSION
description:
Internet Key Exchange Protocol Version 2 (Recommended standard).
base identity: IKE_VERSION
description:
Base identity for the IPsec mode of operation.
description:
IPsec Tunnel mode, where the original IP packet is encapsulated with new IP headers.
base identity: IPSEC_MODE
description:
IPsec Transport mode, where the IPsec header is inserted between the original IP header and the transport layer (TCP/UDP).
base identity: IPSEC_MODE
description:
Base identity for the IPsec protocol encapsulation.
description:
Encapsulating Security Payload (ESP), providing confidentiality (encryption), integrity, and authentication.
base identity: IPSEC_PROTOCOL
description:
Authentication Header (AH), providing integrity and authentication, but *no* confidentiality (encryption).
base identity: IPSEC_PROTOCOL
description:
Base identity for the direction of a Security Association.
description:
The Security Association used for encrypting outgoing traffic.
base identity: SA_DIRECTION
description:
The Security Association used for decrypting incoming traffic.
base identity: SA_DIRECTION
description:
Base identity for the encapsulation mode of the tunnel interface.
description:
A Layer 3 IPsec tunnel, often referred to as a VTI (Virtual Tunnel Interface) or equivalent, used for route-based VPNs.
base identity: TUNNEL_MODE
description:
Generic Routing Encapsulation (GRE) tunnel encapsulation.
base identity: TUNNEL_MODE