pktcMtaDevRealmUnsolicitedKeyNomTimeout
PKTC-IETF-MTA-MIB ·
.1.3.6.1.2.1.140.1.3.6.1.7
Object
column
r/w
milliseconds Unsigned32
This object specifies the initial timeout value
for the AS-REQ/AS-REP exponential back-off and retry
mechanism. If the DHCP option code 122, sub-option 4, is
provided to the MTA, it overwrites this value.
This value should account for the average roundtrip
time between the MTA and the KDC, as well as the
processing delay on the KDC.
Unsolicited key updates are retransmitted according to an
exponential back-off mechanism using two timers and a
maximum retry counter for AS replies.
The initial retransmission timer value is the nominal
timer value (pktcMtaDevRealmUnsolicitedKeyNomTimeout). The
retransmissions occur with an exponentially increasing
interval that caps at the maximum timeout value
(pktcMtaDevRealmUnsolicitedKeyMaxTimeout).
Retransmissions stop when the maximum retry counter is
reached (pktcMatDevRealmUnsolicitedMaxRetries).
For example, with values of 3 seconds for the nominal
timer, 20 seconds for the maximum timeout, and 5 retries
max, in retransmission intervals will be 3 s, 6 s,
12 s, 20 s, and 20 s; retransmissions then stop because
the maximum number of retries has been reached.
Context
- MIB
- PKTC-IETF-MTA-MIB
- OID
.1.3.6.1.2.1.140.1.3.6.1.7- Type
- column
- Access
- readwrite
- Status
- current
- Units
- milliseconds
- Parent
- pktcMtaDevRealmEntry
- Table
- pktcMtaDevRealmTable
- Siblings
- 8
Syntax
milliseconds Unsigned32
Values & Constraints
Object Constraints
range: 100-600000
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| pktcMtaDevRealmIndex This object defines the realm table index. | column | Unsigned32 | .1.3.6.1.2.1.140.1.3.6.1.1 |
| pktcMtaDevRealmName This object identifies the Kerberos realm name in all
capitals. The MTA MUST prohibit the instantiation of any
two rows with identical Kerberos realm names. The MTA MUST
also ve… | column | OctetString | .1.3.6.1.2.1.140.1.3.6.1.2 |
| pktcMtaDevRealmPkinitGracePeriod This object contains the PKINIT Grace Period. For the
purpose of key management with Application Servers (CMSes
or the Provisioning Server), the MTA must utilize the
PKINIT excha… | column | minutes Unsigned32 | .1.3.6.1.2.1.140.1.3.6.1.3 |
| pktcMtaDevRealmTgsGracePeriod This object contains the Ticket Granting Server Grace
Period (TGSGP). The Ticket Granting Server (TGS)
Request/Reply exchange may be performed by the MTA
on demand whenever an Ap… | column | minutes Unsigned32 | .1.3.6.1.2.1.140.1.3.6.1.4 |
| pktcMtaDevRealmOrgName This object contains the X.500 organization name attribute
as defined in the subject name of the service provider
certificate. | column | SNMP-FRAMEWORK-MIBSnmpAdminString | .1.3.6.1.2.1.140.1.3.6.1.5 |
| pktcMtaDevRealmUnsolicitedKeyMaxTimeout This object specifies the maximum time the MTA will
attempt to perform the exponential back-off algorithm.
This timer only applies when the MTA initiated key
management. If the D… | column | seconds Unsigned32 | .1.3.6.1.2.1.140.1.3.6.1.6 |
| pktcMtaDevRealmUnsolicitedKeyMaxRetries This object specifies the maximum number of retries the
MTA attempts to obtain a ticket from the KDC.
Unsolicited key updates are retransmitted according to an
expo… | column | Unsigned32 | .1.3.6.1.2.1.140.1.3.6.1.8 |
| pktcMtaDevRealmStatus This object defines the row status of this realm in the
realm table (pktcMtaDevRealmTable).
An entry in this table is not qualified for activation
until the object … | column | SNMPv2-TCRowStatus | .1.3.6.1.2.1.140.1.3.6.1.9 |