ipsecIfIkeInitiate 1.3.6.1.4.1.838.3.14.1.3.1.17

Specifies when IKE will initiate dynamic, site to site tunnel establishment with the remote gateway. If 'automatic(1)', the gateway attempts to negotiate tunnels as soon as they are configured and enabled. If 'outboundTraffic(2)', the gateway attempts to negotiate tunnels only when traffic is routed out the tunnel. If 'disabled(3)', the gateway never initiates tunnel establishment. In all cases, the gateway will participate in tunnel negotiation when initiated by the remote gateway. Note that this object is 'disabled(3)' for dialin group and client tunnels since clients always initiate.