tmnxIkePolicyPFSDHGroup
TIMETRA-IPSEC-MIB ·
.1.3.6.1.4.1.6527.3.1.2.48.4.1.8
Object
The value of tmnxIkePolicyPFSDHGroup is used only if the value of the
tmnxIkePolicyPFSEnabled is 'true'.
The value of tmnxIkePolicyPFSDHGroup specifies the new
Diffie-hellman key exchange each time the SA(Security Association)
key is renegotiated. After the SA expires, the key is forgotten
and another key is generated (if the SA remains up). This means
that an attacker who cracks part of the exchange can only read the
part that used the key before the key changed. There is no
advantage of cracking the other parts if the attacker has already
cracked one.
Context
- MIB
- TIMETRA-IPSEC-MIB
- OID
.1.3.6.1.4.1.6527.3.1.2.48.4.1.8- Type
- column
- Access
- readwrite
- Status
- current
- Default
group2- Parent
- tmnxIkePolicyEntry
- Groups
- 1
Net-SNMP examples
How SNMP and these commands workWalk the column to discover its indexed instances, or supply every index to read one instance.
Walk the column
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'TIMETRA-IPSEC-MIB' -M '/opt/observium/mibs/nokia:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'TIMETRA-IPSEC-MIB::tmnxIkePolicyPFSDHGroup'
More examples
Read one indexed instance
/usr/bin/snmpget -v2c -c '<community>' -Pud -Ir -OQUv -m 'TIMETRA-IPSEC-MIB' -M '/opt/observium/mibs/nokia:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'TIMETRA-IPSEC-MIB::tmnxIkePolicyPFSDHGroup.<tmnxIkePolicyId>'
Translate to a numeric OID
/usr/bin/snmptranslate -Pud -Ir -On -m 'TIMETRA-IPSEC-MIB' -M '/opt/observium/mibs/nokia:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'TIMETRA-IPSEC-MIB::tmnxIkePolicyPFSDHGroup'
Syntax
- Source
- TmnxIkePolicyDHGroup
- Base type
Enumeration
Type Description
TmnxIkePolicyDHGroup data type is an enumerated integer that describes
the values used to identify the diffie-hellman group for calculating
the session keys.
Value Descriptions:
group1 - 768 bits
group2 - 1024 bits
group5 - 1536 bits
group14 - 2048 bits
group15 - 3072 bits
group19 - 256 bits random ECP group
group20 - 384 bits random ECP group
group21 - 521 bits random ECP group
More bits provide a higher level of security, but require more
processing.
Values & Constraints
Type Values
1 | group1 |
2 | group2 |
5 | group5 |
14 | group14 |
15 | group15 |
19 | group19 |
20 | group20 |
21 | group21 |
Conformance
Member of