OID reference

fsVpnIkePhase1LifeTime

1.3.6.1.4.1.2076.143.1.1.1.34

Description

Enter the duration, in fsVpnIkePhase1LifeTimeType, of the IKE security association (SA), after which the IKE SA expires and is re-negotiated. if you wish to save setup time for new IPsec SAs, configure a longer IKE SA lifetime. However, shorter lifetimes provide more secure IKE negotiations because the SA between the …

Full description and source information

Identification

Identifier and names

Parent
1.3.6.1.4.1.2076.143.1.1.1 (fsVpnEntry)
Node code
34
Node name
fsVpnIkePhase1LifeTime
Category
SNMP management object
Numeric OID
1.3.6.1.4.1.2076.143.1.1.1.34
URN notation
urn:oid:1.3.6.1.4.1.2076.143.1.1.1.34
ASN.1, OID-IRI and named path variants
ASN.1 notation

{1 3 6 1 4 1 2076 143 1 1 1 34}

  • {iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase1LifeTime(34)}
  • {iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprises(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase1LifeTime(34)}
  • {iso(1) identified-organization(3) dod(6) internet(1) private(4) ldap-enterprise(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase1LifeTime(34)}
  • {iso(1) identified-organization(3) dod(6) internet(1) private(4) vendor-objects(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase1LifeTime(34)}
  • {iso(1) org(3) dod(6) internet(1) private(4) enterprise(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase1LifeTime(34)}
  • {iso(1) org(3) dod(6) internet(1) private(4) enterprises(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase1LifeTime(34)}
  • {iso(1) org(3) dod(6) internet(1) private(4) ldap-enterprise(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase1LifeTime(34)}
  • {iso(1) org(3) dod(6) internet(1) private(4) vendor-objects(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase1LifeTime(34)}
  • {iso(1) iso-identified-organization(3) dod(6) internet(1) private(4) enterprise(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase1LifeTime(34)}
  • {iso(1) iso-identified-organization(3) dod(6) internet(1) private(4) enterprises(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase1LifeTime(34)}
  • {iso(1) iso-identified-organization(3) dod(6) internet(1) private(4) ldap-enterprise(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase1LifeTime(34)}
  • {iso(1) iso-identified-organization(3) dod(6) internet(1) private(4) vendor-objects(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase1LifeTime(34)}
  • {iso(1) iso-organization(3) dod(6) internet(1) private(4) enterprise(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase1LifeTime(34)}
  • {iso(1) iso-organization(3) dod(6) internet(1) private(4) enterprises(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase1LifeTime(34)}
  • {iso(1) iso-organization(3) dod(6) internet(1) private(4) ldap-enterprise(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase1LifeTime(34)}
  • {iso(1) iso-organization(3) dod(6) internet(1) private(4) vendor-objects(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase1LifeTime(34)}
OID-IRI notation
  • /1/3/6/1/4/1/2076/143/1/1/1/34
  • /ISO/Identified-Organization/6/1/4/1/2076/143/1/1/1/34
  • /ISO/3/6/1/4/1/2076/143/1/1/1/34
Named path variants
  • /iso/identified-organization/dod/internet/private/enterprise/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase1LifeTime
  • /iso/identified-organization/dod/internet/private/enterprises/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase1LifeTime
  • /iso/identified-organization/dod/internet/private/ldap-enterprise/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase1LifeTime
  • /iso/identified-organization/dod/internet/private/vendor-objects/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase1LifeTime
  • /iso/org/dod/internet/private/enterprise/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase1LifeTime
  • /iso/org/dod/internet/private/enterprises/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase1LifeTime
  • /iso/org/dod/internet/private/ldap-enterprise/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase1LifeTime
  • /iso/org/dod/internet/private/vendor-objects/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase1LifeTime
  • /iso/iso-identified-organization/dod/internet/private/enterprise/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase1LifeTime
  • /iso/iso-identified-organization/dod/internet/private/enterprises/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase1LifeTime
  • /iso/iso-identified-organization/dod/internet/private/ldap-enterprise/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase1LifeTime
  • /iso/iso-identified-organization/dod/internet/private/vendor-objects/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase1LifeTime
  • /iso/iso-organization/dod/internet/private/enterprise/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase1LifeTime
  • /iso/iso-organization/dod/internet/private/enterprises/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase1LifeTime
  • /iso/iso-organization/dod/internet/private/ldap-enterprise/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase1LifeTime
  • /iso/iso-organization/dod/internet/private/vendor-objects/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase1LifeTime

SNMP properties

Value type
Integer32
Maximum access defined by MIB
read-write
Status in MIB
current
Default value
2400

Using this OID with SNMP

At least one MIB declaration places this object in a table row. A value belongs to a row instance; its suffix depends on the row's INDEX or AUGMENTS definition. The index encoding is not inferred here.

Published row index: fsVpnPolicyName.

snmpwalk [connection options] DEVICE .1.3.6.1.4.1.2076.143.1.1.1.34

Replace the placeholders with your connection and authentication options. Available permissions and device support can differ from the MIB.

Properties come from available MIB definitions. Actual device support and access can differ. See source records below for original files and qualifications.

The displayed source records contain one distinct definition. Compare its source records.

fsVpnIkePhase1LifeTime OBJECT-TYPE
   SYNTAX          Integer32
   MAX-ACCESS      read-write
   STATUS          current
   DESCRIPTION
       "Enter the duration, in fsVpnIkePhase1LifeTimeType, of the IKE security
       association (SA), after which the IKE SA expires and is re-negotiated.

       if you wish to save setup time for new IPsec SAs, configure a longer
       IKE SA lifetime. However, shorter lifetimes provide more secure IKE
       negotiations because the SA between the tunnel endpoints must be
       successfully renegotiated more frequently.

       NOTE in case of IKEv1: If the IKEv1 lifetimes on two peers are not the
       same (equal in duration), the IKE policy lifetime of the initiating peer
       must be shorter than the lifetime of the responding peer, and the shorter
       lifetime will be used in IKE negotiations between the devices.
       "
   DEFVAL { 2400 }
   ::= { fsVpnEntry 34 }

Meaning

Descriptions

1 unique

Identical descriptions are grouped. Different wording and device-specific notes are retained.

Enter the duration, in fsVpnIkePhase1LifeTimeType, of the IKE security association (SA), after which the IKE SA expires and is re-negotiated. if you wish to save setup time for new IPsec SAs, configure a longer IKE SA lifetime. However, shorter lifetimes provide more secure IKE negotiations because the SA between the tunnel endpoints must be successfully renegotiated more frequently. NOTE in case of IKEv1: If the IKEv1 lifetimes on two peers are not the same (equal in duration), the IKE policy lifetime of the initiating peer must be shorter than the lifetime of the responding peer, and the shorter lifetime will be used in IKE negotiations between the devices.

Sources for this description

Multiple manufacturers; see the original MIB MIB copies (LibreNMS/Observium Community)Belden, GarrettCom and Hirschmann IT official standalone MIBs

See 1 matching source record

Evidence

Source records

1 records

Matching descriptions are grouped; open a group to compare definitions and supporting files.

Records for description 1Multiple manufacturers; see the original MIB MIB copies (LibreNMS/Observium Community), Belden, GarrettCom and Hirschmann IT official standalone MIBs1 record · 2 sources

Description 1

fsVpnIkePhase1LifeTime · currentMultiple manufacturers; see the original MIB MIB copies (LibreNMS/Observium Community), Belden, GarrettCom and Hirschmann IT official standalone MIBs2 sources

Status in source: current.

Names: fsVpnIkePhase1LifeTime

Technical details
{
  "smi_kind": "OBJECT-TYPE",
  "definition": [
    "fsVpnIkePhase1LifeTime",
    "OBJECT-TYPE",
    "SYNTAX",
    "Integer32",
    "MAX-ACCESS",
    "read-write",
    "STATUS",
    "current",
    "DESCRIPTION",
    "\"Enter the duration, in fsVpnIkePhase1LifeTimeType, of the IKE security association (SA), after which the IKE SA expires and is re-negotiated. if you wish to save setup time for new IPsec SAs, configure a longer IKE SA lifetime. However, shorter lifetimes provide more secure IKE negotiations because the SA between the tunnel endpoints must be successfully renegotiated more frequently. NOTE in case of IKEv1: If the IKEv1 lifetimes on two peers are not the same (equal in duration), the IKE policy lifetime of the initiating peer must be shorter than the lifetime of the responding peer, and the shorter lifetime will be used in IKE negotiations between the devices. \"",
    "DEFVAL",
    "{",
    "2400",
    "}",
    "::=",
    "{",
    "fsVpnEntry",
    "34",
    "}"
  ],
  "syntax_tree": [
    [
      "SimpleSyntax",
      "Integer32"
    ],
    null,
    [
      "MaxAccessPart",
      "read-write"
    ],
    [
      "Status",
      "current"
    ],
    [
      "DESCRIPTION",
      "Enter the duration, in fsVpnIkePhase1LifeTimeType, of the IKE security association (SA), after which the IKE SA expires and is re-negotiated. if you wish to save setup time for new IPsec SAs, configure a longer IKE SA lifetime. However, shorter lifetimes provide more secure IKE negotiations because the SA between the tunnel endpoints must be successfully renegotiated more frequently. NOTE in case of IKEv1: If the IKEv1 lifetimes on two peers are not the same (equal in duration), the IKE policy lifetime of the initiating peer must be shorter than the lifetime of the responding peer, and the shorter lifetime will be used in IKE negotiations between the devices."
    ],
    null,
    null,
    null,
    [
      "DEFVAL",
      2400
    ]
  ]
}

Registration

Registration authorities

First Registration Authority (inferred from ancestor 1.3.6.1.4.1.2076)

Division Products

Siblings (42)

OIDNameDirect childrenDescendantsDescription
1.3.6.1.4.1.2076.143.1.1.1.1 fsVpnPolicyName00
1.3.6.1.4.1.2076.143.1.1.1.2 fsVpnPolicyType00
1.3.6.1.4.1.2076.143.1.1.1.3 fsVpnPolicyPriority00
1.3.6.1.4.1.2076.143.1.1.1.4 fsVpnTunTermAddrType00
1.3.6.1.4.1.2076.143.1.1.1.5 fsVpnLocalTunTermAddr00
1.3.6.1.4.1.2076.143.1.1.1.6 fsVpnRemoteTunTermAddr00
1.3.6.1.4.1.2076.143.1.1.1.7 fsVpnProtectNetworkType00
1.3.6.1.4.1.2076.143.1.1.1.8 fsVpnLocalProtectNetwork00
1.3.6.1.4.1.2076.143.1.1.1.9 fsVpnLocalProtectNetworkPrefixLen00
1.3.6.1.4.1.2076.143.1.1.1.10 fsVpnRemoteProtectNetwork00
1.3.6.1.4.1.2076.143.1.1.1.11 fsVpnRemoteProtectNetworkPrefixLen00
1.3.6.1.4.1.2076.143.1.1.1.12 fsVpnIkeSrcPortRange00
1.3.6.1.4.1.2076.143.1.1.1.13 fsVpnIkeDstPortRange00
1.3.6.1.4.1.2076.143.1.1.1.14 fsVpnSecurityProtocol00
1.3.6.1.4.1.2076.143.1.1.1.15 fsVpnInboundSpi00
1.3.6.1.4.1.2076.143.1.1.1.16 fsVpnOutboundSpi00
1.3.6.1.4.1.2076.143.1.1.1.17 fsVpnMode00
1.3.6.1.4.1.2076.143.1.1.1.18 fsVpnAuthAlgo00
1.3.6.1.4.1.2076.143.1.1.1.19 fsVpnAhKey00
1.3.6.1.4.1.2076.143.1.1.1.20 fsVpnEncrAlgo00
1.3.6.1.4.1.2076.143.1.1.1.21 fsVpnEspKey00
1.3.6.1.4.1.2076.143.1.1.1.22 fsVpnAntiReplay00
1.3.6.1.4.1.2076.143.1.1.1.23 fsVpnPolicyFlag00
1.3.6.1.4.1.2076.143.1.1.1.24 fsVpnProtocol00
1.3.6.1.4.1.2076.143.1.1.1.25 fsVpnPolicyIntfIndex00
1.3.6.1.4.1.2076.143.1.1.1.26 fsVpnIkePhase1HashAlgo00
1.3.6.1.4.1.2076.143.1.1.1.27 fsVpnIkePhase1EncryptionAlgo00
1.3.6.1.4.1.2076.143.1.1.1.28 fsVpnIkePhase1DHGroup00
1.3.6.1.4.1.2076.143.1.1.1.29 fsVpnIkePhase1LocalIdType00
1.3.6.1.4.1.2076.143.1.1.1.30 fsVpnIkePhase1LocalIdValue00
1.3.6.1.4.1.2076.143.1.1.1.31 fsVpnIkePhase1PeerIdType00
1.3.6.1.4.1.2076.143.1.1.1.32 fsVpnIkePhase1PeerIdValue00
1.3.6.1.4.1.2076.143.1.1.1.33 fsVpnIkePhase1LifeTimeType00
1.3.6.1.4.1.2076.143.1.1.1.35 fsVpnIkePhase1Mode00
1.3.6.1.4.1.2076.143.1.1.1.36 fsVpnIkePhase2AuthAlgo00
1.3.6.1.4.1.2076.143.1.1.1.37 fsVpnIkePhase2EspEncryptionAlgo00
1.3.6.1.4.1.2076.143.1.1.1.38 fsVpnIkePhase2LifeTimeType00
1.3.6.1.4.1.2076.143.1.1.1.39 fsVpnIkePhase2LifeTime00
1.3.6.1.4.1.2076.143.1.1.1.40 fsVpnIkePhase2DHGroup00
1.3.6.1.4.1.2076.143.1.1.1.41 fsVpnIkeVersion00
1.3.6.1.4.1.2076.143.1.1.1.42 fsVpnCertAlgoType00
1.3.6.1.4.1.2076.143.1.1.1.43 fsVpnPolicyRowStatus00