Enhanced PKI traps, log notifications, and SNMP for IPsec VPN

You can enable the peer down and IPsec tunnel down traps and configure the certificate authority (CA) and local certificate traps. We've enhanced the existing IPsec VPN flow monitor MIB jnxIpSecFlowMonMIB to support the global data plane, active IKE SA, active IPSec SA, and active peer statistics for tunnels using IKEv2. Enhance the output of show security ike stats command to add additional options (<brief> | <detail>). Use the clear security ike stats command to clear the IKEv2 statistic counters.