ipspIpsecActUsePfs
IPSEC-POLICY-MIB ·
.1.3.6.1.2.1.153.1.22.1.4
Object
This MIB object specifies whether or not perfect forward secrecy should be used when refreshing keys. A value of true indicates that PFS should be used.
Context
- MIB
- IPSEC-POLICY-MIB
- OID
.1.3.6.1.2.1.153.1.22.1.4- Type
- column
- Access
- readwrite
- Status
- current
- Parent
- ipspIpsecActionEntry
- Table
- ipspIpsecActionTable
- Siblings
- 15
Values & Constraints
Type Values
1 | true |
2 | false |
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| ipspIpsecActName ipspIpsecActName is the name of the ipsecAction entry. | column | OctetString | .1.3.6.1.2.1.153.1.22.1.1 |
| ipspIpsecActMode This object specifies the encapsulation of the IPsec SA
to be negotiated. | column | Enumeration | .1.3.6.1.2.1.153.1.22.1.10 |
| ipspIpsecActDFHandling This object specifies the processing of DF bit by the
negotiated IPsec tunnel.
1 - DF bit is copied.
2 - DF bit is set.
3 - DF bit is cleared. | column | Enumeration | .1.3.6.1.2.1.153.1.22.1.11 |
| ipspIpsecActDoActionLogging ipspIpsecActDoActionLogging specifies whether or not an audit
message should be logged when this ipsec SA is created. | column | SNMPv2-TCTruthValue | .1.3.6.1.2.1.153.1.22.1.12 |
| ipspIpsecActDoPacketLogging ipspIpsecActDoPacketLogging specifies whether or not an audit
message should be logged and if there is logging, how many
bytes of the packet to place in the notification. | column | IpspIPPacketLogging | .1.3.6.1.2.1.153.1.22.1.13 |
| ipspIpsecActLastChanged The value of sysUpTime when this row was last modified or
created either through SNMP SETs or by some other external
means. | column | SNMPv2-TCTimeStamp | .1.3.6.1.2.1.153.1.22.1.14 |
| ipspIpsecActStorageType The storage type for this row. Rows in this table which were
created through an external process may have a storage type
of readOnly or permanent. | column | SNMPv2-TCStorageType | .1.3.6.1.2.1.153.1.22.1.15 |
| ipspIpsecActRowStatus This object indicates the conceptual status of this row.
The value of this object has no effect on whether other
objects in this conceptual row can be modified.
… | column | SNMPv2-TCRowStatus | .1.3.6.1.2.1.153.1.22.1.16 |
| ipspIpsecActParametersName This object is used to reference a row in the
ipspSaNegotiationParametersTable where additional parameters
affecting this action may be found. | column | OctetString | .1.3.6.1.2.1.153.1.22.1.2 |
| ipspIpsecActProposalsName This object is used to reference one or more rows in the
ipspIpsecProposalsTable where an ordered list of proposals
affecting this action may be found. | column | OctetString | .1.3.6.1.2.1.153.1.22.1.3 |
| ipspIpsecActVendorId The VendorID property is used to identify vendor-defined key
exchange GroupIDs. | column | OctetString | .1.3.6.1.2.1.153.1.22.1.5 |
| ipspIpsecActGroupId This object specifies the Diffie-Hellman group to use for
phase 2 when the object ipspIpsecActUsePfs is true and the
object ipspIpsecActUseIkeGroup is false. If the GroupID
numbe… | column | IPSEC-ISAKMP-IKE-DOI-TCIkeGroupDescription | .1.3.6.1.2.1.153.1.22.1.6 |
| ipspIpsecActPeerGatewayIdName This object indicates the peer id name of the peer
gateway. This object can be used to look up the peer id
value, address and other values in the ipspPeerIdentityTable.
This obje… | column | OctetString | .1.3.6.1.2.1.153.1.22.1.7 |
| ipspIpsecActUseIkeGroup This object specifies whether or not to use the same GroupId
for phase 2 as was used in phase 1. If UsePFS is false, this
entry should be ignored. | column | SNMPv2-TCTruthValue | .1.3.6.1.2.1.153.1.22.1.8 |
| ipspIpsecActGranularity This object specifies how the proposed selector for the
security association will be created. The selector is
created by using the FilterList information. The selector
can be su… | column | Enumeration | .1.3.6.1.2.1.153.1.22.1.9 |