fsVpnIkePhase2DHGroup
FS-VPNPOLICY-MIB ·
aricent variant
·
.1.3.6.1.4.1.2076.143.1.1.1.40
Object
column r/w
Enumeration
Perfect Forward Secrecy (PFS) generates and uses a unique session key
for each encrypted exchange. The unique session key protects the
exchange from subsequent decryption, even if the entire exchange was
recorded and the attacker has obtained the pre-shared and/or private
keys used by the endpoint devices.
To enable PFS, choose a Diffie-Hellman group to use in generating the
PFS session key.
Context
- MIB
- FS-VPNPOLICY-MIB
- OID
.1.3.6.1.4.1.2076.143.1.1.1.40- Type
- column
- Access
- readwrite
- Status
- current
- Parent
- fsVpnEntry
Net-SNMP examples
How SNMP and these commands workWalk the column to discover its indexed instances, or supply every index to read one instance.
Walk the column
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'FS-VPNPOLICY-MIB' -M '/opt/observium/mibs/aricent:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'FS-VPNPOLICY-MIB::fsVpnIkePhase2DHGroup'
More examples
Read one indexed instance
/usr/bin/snmpget -v2c -c '<community>' -Pud -Ir -OQUv -m 'FS-VPNPOLICY-MIB' -M '/opt/observium/mibs/aricent:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'FS-VPNPOLICY-MIB::fsVpnIkePhase2DHGroup.<fsVpnPolicyName>'
Translate to a numeric OID
/usr/bin/snmptranslate -Pud -Ir -On -m 'FS-VPNPOLICY-MIB' -M '/opt/observium/mibs/aricent:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'FS-VPNPOLICY-MIB::fsVpnIkePhase2DHGroup'
Syntax
Enumeration
Values & Constraints
Enumerated Values
0 | none |
1 | group1 |
2 | group2 |
5 | group5 |
14 | group14 |