oacGdoiGmKekEntry
ONEACCESS-GDOI-MIB ·
.1.3.6.1.4.1.13191.10.3.4.1224.1.3.2.1
Object
row
An entry containing the attributes associated with a GDOI KEK SA, uniquely identified by the Group ID, Group Member (GM) ID, & SPI value assigned by the GM's registered Key Server to the KEK. There will be at least one KEK SA entry for each GM & two KEK SA entries for a given GM only during a KEK rekey when a new KEK is received & installed. The KEK SPI is unique for every KEK for a given Group Member.
Context
- MIB
- ONEACCESS-GDOI-MIB
- OID
.1.3.6.1.4.1.13191.10.3.4.1224.1.3.2.1- Type
- row
- Status
- current
- Parent
- oacGdoiGmKekTable
- Table
- oacGdoiGmKekTable
- Children
- 10
Syntax
No syntax metadata recorded.
Values & Constraints
No enumerated values or constraints recorded.
Related Objects
Child Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| oacGdoiGmKekSPI The value of the Security Parameter Index (SPI) of a KEK
SA. The SPI must be the ISAKMP Header cookie pair
where the first 8 octets become the 'Initiator Cookie' field
of the GRO… | column | OacGdoiSPI | .1.3.6.1.4.1.13191.10.3.4.1224.1.3.2.1.1 |
| oacGdoiGmKekRemainingLifetime The value of the remaining time for which a KEK is valid.
The value is a four (4) octet (32-bit) number which begins at
the value of oacGdoiGmKekOriginalLifetime and counts down t… | column | Seconds SNMPv2-SMIUnsigned32 | .1.3.6.1.4.1.13191.10.3.4.1224.1.3.2.1.10 |
| oacGdoiGmKekSrcIdValue The value of the identity information for the source of
a KEK SA with its type indicated by the
oacGdoiGmKekSrcIdType. Use the oacGdoiGmKekSrcIdType to parse
the KEK Source ID c… | column | OacGdoiIdentificationValue | .1.3.6.1.4.1.13191.10.3.4.1224.1.3.2.1.2 |
| oacGdoiGmKekDstIdValue The value of the identity information for the destination of
a KEK SA (multicast rekey address) with its type indicated by
oacGdoiGmKekDstIdType. Use the oacGdoiGmKekDstIdType t… | column | OacGdoiIdentificationValue | .1.3.6.1.4.1.13191.10.3.4.1224.1.3.2.1.3 |
| oacGdoiGmKekEncryptAlg The value of the KEK_ALGORITHM which specifies the
encryption algorithm used with the KEK SA. A GDOI
implementaiton must support KEK_ALG_3DES.
Following are the KE… | column | OacGdoiKEKEncryptionAlgorithm | .1.3.6.1.4.1.13191.10.3.4.1224.1.3.2.1.4 |
| oacGdoiGmKekEncryptKeyLength The value of the KEK_KEY_LENGTH which specifies the KEK
Algorithm key length (in bits). | column | Bits SNMPv2-SMIUnsigned32 | .1.3.6.1.4.1.13191.10.3.4.1224.1.3.2.1.5 |
| oacGdoiGmKekSigHashAlg The value of the SIG_HASH_ALGORITHM which specifies the SIG
payload hash algorithm. This is not required (i.e. could
have a value of zero) if the SIG_ALGORITHM is SIG_ALG_DSS or
… | column | OacGdoiHashAlogrithm | .1.3.6.1.4.1.13191.10.3.4.1224.1.3.2.1.6 |
| oacGdoiGmKekSigAlg The value of the SIG_ALGORITHM which specifies the SIG
payload signature algorithm. A GDOI implementation must
support SIG_ALG_RSA | column | OacGdoiSignatureMethod | .1.3.6.1.4.1.13191.10.3.4.1224.1.3.2.1.7 |
| oacGdoiGmKekSigKeyLength The value of the SIG_KEY_LENGTH which specifies the length
of the SIG payload key. | column | Bits SNMPv2-SMIUnsigned32 | .1.3.6.1.4.1.13191.10.3.4.1224.1.3.2.1.8 |
| oacGdoiGmKekOriginalLifetime The value of the KEK_KEY_LIFETIME which specifies the maximum
time for which a KEK is valid. The GCKS may refresh the KEK
at any time before the end of the valid period. The val… | column | Seconds SNMPv2-SMIUnsigned32 | .1.3.6.1.4.1.13191.10.3.4.1224.1.3.2.1.9 |
Indexes
| Object | Type | Syntax | OID |
|---|---|---|---|
| oacGdoiGroupName The string-readable name configured for or given to a GDOI
Group. | column | SNMPv2-TCDisplayString | .1.3.6.1.4.1.13191.10.3.4.1224.1.1.1.1 |
| oacGdoiGmKekSPI The value of the Security Parameter Index (SPI) of a KEK
SA. The SPI must be the ISAKMP Header cookie pair
where the first 8 octets become the 'Initiator Cookie' field
of the GRO… | column | OacGdoiSPI | .1.3.6.1.4.1.13191.10.3.4.1224.1.3.2.1.1 |