SNMP-USM-DH-OBJECTS-MIB Table View

Table-centric layout grouping table, row, and column objects.

Standard view Table view

Tables

Rows

Columns

usmDHUserKeyTable

table

.1.3.6.1.3.101.1.1.2 · 1 row entry · 4 columns

Open in standard view

This table augments and extends the usmUserTable and provides
4 objects which exactly mirror the objects in that table with the
textual convention of 'KeyChange'.  This extension allows key
changes to be done in a manner where the knowledge of the current
secret plus knowledge of the key change data exchanges (e.g. via
wiretapping)  will not reveal the new key.

usmDHUserKeyEntry entry .1.3.6.1.3.101.1.1.2.1

A row of DHKeyChange objects which augment or replace the
functionality of the KeyChange objects in the base table row.

Indexes

No indexes recorded

Column	Syntax	OID
usmDHUserAuthKeyChange The object used to change any given user's Authentication Key using a Diffie-Hellman key exchange. The right-most n bits of the shared secret 'sk', where 'n' is the number of bits required for the protoco…	DHKeyChanger/w Textual Convention: DHKeyChange `OctetString`	`.1.3.6.1.3.101.1.1.2.1.1`
usmDHUserOwnAuthKeyChange The object used to change the agents own Authentication Key using a Diffie-Hellman key exchange. The right-most n bits of the shared secret 'sk', where 'n' is the number of bits required for the protocol …	DHKeyChanger/w Textual Convention: DHKeyChange `OctetString`	`.1.3.6.1.3.101.1.1.2.1.2`
usmDHUserPrivKeyChange The object used to change any given user's Privacy Key using a Diffie-Hellman key exchange. The right-most n bits of the shared secret 'sk', where 'n' is the number of bits required for the protocol defin…	DHKeyChanger/w Textual Convention: DHKeyChange `OctetString`	`.1.3.6.1.3.101.1.1.2.1.3`
usmDHUserOwnPrivKeyChange The object used to change the agent's own Privacy Key using a Diffie-Hellman key exchange. The right-most n bits of the shared secret 'sk', where 'n' is the number of bits required for the protocol define…	DHKeyChanger/w Textual Convention: DHKeyChange `OctetString`	`.1.3.6.1.3.101.1.1.2.1.4`

usmDHKickstartTable

table

.1.3.6.1.3.101.1.2.1 · 1 row entry · 4 columns

Open in standard view

A table of mappings between zero or more Diffie-Helman key
agreement values and entries in the usmUserTable.  Entries in this
table are created by providing the associated device with a
Diffie-Helman public value and a usmUserName/usmUserSecurityName
pair during initialization. How these values are provided is
outside the scope of this MIB, but could be provided manually, or
through a configuration file.  Valid public value/name pairs
result in the creation of a row in this table as well as the
creation of an associated row (with keys derived as indicated) in
the usmUserTable.  The actual access the related usmSecurityName
has is dependent on the entries in the VACM tables.  In general,
an implementor will specify one or more standard security names
and will provide entries in the VACM tables granting various
levels of access to those names.  The actual content of the VACM
          
table is beyond the scope of this MIB.
          
Note: This table is expected to be readable without authentication
using the usmUserSecurityName 'dhKickstart'.  See the conformance
statements for details.

usmDHKickstartEntry entry .1.3.6.1.3.101.1.2.1.1

An entry in the usmDHKickstartTable. The agent SHOULD either
delete this entry or mark it as inactive upon a successful SET of
any of the KeyChange-typed objects in the usmUserEntry or upon a
successful SET of any of t…

Indexes

usmDHKickstartIndex

Column	Syntax	OID
usmDHKickstartIndex Index value for this row.	Integer32 Constraints: `range: 1-2147483647`	`.1.3.6.1.3.101.1.2.1.1.1`
usmDHKickstartMyPublic The agent's Diffie-Hellman public value for this row. At initialization, the agent generates a random number and derives its public value from that number. This public value is published here. This pub…	OctetString	`.1.3.6.1.3.101.1.2.1.1.2`
usmDHKickstartMgrPublic The manager's Diffie-Hellman public value for this row. Note that this value is not set via the SNMP agent, but may be set via some out of band method, such as the device's configuration file. The manage…	OctetString	`.1.3.6.1.3.101.1.2.1.1.3`
usmDHKickstartSecurityName The usmUserName and usmUserSecurityName in the usmUserTable associated with this row. This is provided in the same manner and at the same time as the usmDHKickstartMgrPublic value - e.g. possibly manually, or via the d…	SNMP-FRAMEWORK-MIBSnmpAdminString Textual Convention: SNMP-FRAMEWORK-MIBSnmpAdminString `OctetString` Type Constraints: `range: 0..255`	`.1.3.6.1.3.101.1.2.1.1.4`