cicIkeCfgPolicyDHGroup
CISCO-IKE-CONFIGURATION-MIB ·
.1.3.6.1.4.1.9.9.423.1.5.1.1.6
Object
This object specifies the Oakley group used for Diffie Hellman exchange in the Main Mode. If this policy item is selected to negotiate Main Mode with an IKE peer, the local entity chooses the group specified by this object to perform Diffie Hellman exchange with the peer.
Context
- MIB
- CISCO-IKE-CONFIGURATION-MIB
- OID
.1.3.6.1.4.1.9.9.423.1.5.1.1.6- Type
- column
- Access
- readwrite
- Status
- current
- Parent
- cicIkeCfgPolicyEntry
- Table
- cicIkeCfgPolicyTable
- Siblings
- 8
Syntax
CISCO-IPSEC-TCCIPsecDiffHellmanGrp
- Source
- CISCO-IPSEC-TCCIPsecDiffHellmanGrp
- Base type
Enumeration
Values & Constraints
Type Values
1 | other |
2 | notDH |
3 | modp768 |
4 | modp1024 |
5 | ec2nGP155 |
6 | ec2nGP185 |
7 | modp1536 |
8 | ec2nGF163 |
9 | ec2nGF283 |
10 | ec2nGF409 |
11 | ec2nGF571 |
12 | modp2048 |
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| cicIkeCfgPolicyPriority The priority of this ISAKMP Policy entry. The policy
with lower value would take precedence over
the policy with higher value in the same DOI. | column | Unsigned32 | .1.3.6.1.4.1.9.9.423.1.5.1.1.1 |
| cicIkeCfgPolicyEncr The encryption transform specified by this
ISAKMP policy specification. The Internet Key
Exchange (IKE) tunnels setup using this policy item
would use the specified encryption tr… | column | CISCO-IPSEC-TCCIPsecEncryptAlgorithm | .1.3.6.1.4.1.9.9.423.1.5.1.1.2 |
| cicIkeCfgPolicyHash The hash transform specified by this
ISAKMP policy specification. The IKE tunnels
setup using this policy item would use the
specified hash transform to protect the
ISAKMP PDUs. | column | CISCO-IPSEC-TCCIPsecIkeHashAlgorithm | .1.3.6.1.4.1.9.9.423.1.5.1.1.3 |
| cicIkeCfgPolicyPRF The Pseudo Random Function algorithm specified by
this ISAKMP policy specification. The value of this
object would only be used for IKEv2. | column | CISCO-IPSEC-TCCIPsecIkePRFAlgorithm | .1.3.6.1.4.1.9.9.423.1.5.1.1.4 |
| cicIkeCfgPolicyAuth The peer authentication method specified by
this ISAKMP policy specification. If this policy
entity is selected for negotiation with a peer,
the local entity would authenticate th… | column | CISCO-IPSEC-TCCIPsecIkeAuthMethod | .1.3.6.1.4.1.9.9.423.1.5.1.1.5 |
| cicIkeCfgPolicyLifetime This object specifies the lifetime in seconds
of the IKE tunnels generated using this
policy specification. | column | seconds CISCO-IPSEC-TCCIKELifetime | .1.3.6.1.4.1.9.9.423.1.5.1.1.7 |
| cicIkeCfgPolicyLifesize This object specifies the life size in Kbytes
of the IKE tunnels generated using this
policy specification. | column | kbytes CISCO-IPSEC-TCCIKELifesize | .1.3.6.1.4.1.9.9.423.1.5.1.1.8 |
| cicIkeCfgPolicyStatus This object specifies the status of the ISAKMP
policy corresponding to this conceptual row.
Creation of row can only be done via 'createAndGo'.
To remove a row, set… | column | SNMPv2-TCRowStatus | .1.3.6.1.4.1.9.9.423.1.5.1.1.9 |