OID reference

fsVpnIkePhase2DHGroup

1.3.6.1.4.1.2076.143.1.1.1.40

Description

Perfect Forward Secrecy (PFS) generates and uses a unique session key for each encrypted exchange. The unique session key protects the exchange from subsequent decryption, even if the entire exchange was recorded and the attacker has obtained the pre-shared and/or private keys used by the endpoint devices. To enable P…

Full description and source information

Identification

Identifier and names

Parent
1.3.6.1.4.1.2076.143.1.1.1 (fsVpnEntry)
Node code
40
Node name
fsVpnIkePhase2DHGroup
Category
SNMP management object
Numeric OID
1.3.6.1.4.1.2076.143.1.1.1.40
URN notation
urn:oid:1.3.6.1.4.1.2076.143.1.1.1.40
ASN.1, OID-IRI and named path variants
ASN.1 notation

{1 3 6 1 4 1 2076 143 1 1 1 40}

  • {iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase2DHGroup(40)}
  • {iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprises(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase2DHGroup(40)}
  • {iso(1) identified-organization(3) dod(6) internet(1) private(4) ldap-enterprise(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase2DHGroup(40)}
  • {iso(1) identified-organization(3) dod(6) internet(1) private(4) vendor-objects(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase2DHGroup(40)}
  • {iso(1) org(3) dod(6) internet(1) private(4) enterprise(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase2DHGroup(40)}
  • {iso(1) org(3) dod(6) internet(1) private(4) enterprises(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase2DHGroup(40)}
  • {iso(1) org(3) dod(6) internet(1) private(4) ldap-enterprise(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase2DHGroup(40)}
  • {iso(1) org(3) dod(6) internet(1) private(4) vendor-objects(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase2DHGroup(40)}
  • {iso(1) iso-identified-organization(3) dod(6) internet(1) private(4) enterprise(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase2DHGroup(40)}
  • {iso(1) iso-identified-organization(3) dod(6) internet(1) private(4) enterprises(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase2DHGroup(40)}
  • {iso(1) iso-identified-organization(3) dod(6) internet(1) private(4) ldap-enterprise(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase2DHGroup(40)}
  • {iso(1) iso-identified-organization(3) dod(6) internet(1) private(4) vendor-objects(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase2DHGroup(40)}
  • {iso(1) iso-organization(3) dod(6) internet(1) private(4) enterprise(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase2DHGroup(40)}
  • {iso(1) iso-organization(3) dod(6) internet(1) private(4) enterprises(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase2DHGroup(40)}
  • {iso(1) iso-organization(3) dod(6) internet(1) private(4) ldap-enterprise(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase2DHGroup(40)}
  • {iso(1) iso-organization(3) dod(6) internet(1) private(4) vendor-objects(1) 2076 fsVpnPolicy(143) fsVpnObjects(1) fsVpnTable(1) fsVpnEntry(1) fsVpnIkePhase2DHGroup(40)}
OID-IRI notation
  • /1/3/6/1/4/1/2076/143/1/1/1/40
  • /ISO/Identified-Organization/6/1/4/1/2076/143/1/1/1/40
  • /ISO/3/6/1/4/1/2076/143/1/1/1/40
Named path variants
  • /iso/identified-organization/dod/internet/private/enterprise/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase2DHGroup
  • /iso/identified-organization/dod/internet/private/enterprises/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase2DHGroup
  • /iso/identified-organization/dod/internet/private/ldap-enterprise/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase2DHGroup
  • /iso/identified-organization/dod/internet/private/vendor-objects/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase2DHGroup
  • /iso/org/dod/internet/private/enterprise/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase2DHGroup
  • /iso/org/dod/internet/private/enterprises/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase2DHGroup
  • /iso/org/dod/internet/private/ldap-enterprise/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase2DHGroup
  • /iso/org/dod/internet/private/vendor-objects/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase2DHGroup
  • /iso/iso-identified-organization/dod/internet/private/enterprise/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase2DHGroup
  • /iso/iso-identified-organization/dod/internet/private/enterprises/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase2DHGroup
  • /iso/iso-identified-organization/dod/internet/private/ldap-enterprise/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase2DHGroup
  • /iso/iso-identified-organization/dod/internet/private/vendor-objects/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase2DHGroup
  • /iso/iso-organization/dod/internet/private/enterprise/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase2DHGroup
  • /iso/iso-organization/dod/internet/private/enterprises/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase2DHGroup
  • /iso/iso-organization/dod/internet/private/ldap-enterprise/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase2DHGroup
  • /iso/iso-organization/dod/internet/private/vendor-objects/2076/fsVpnPolicy/fsVpnObjects/fsVpnTable/fsVpnEntry/fsVpnIkePhase2DHGroup

SNMP properties

Value type
INTEGER
Maximum access defined by MIB
read-write
Status in MIB
current

Enumerated values

ValueName
0none
1group1
2group2
5group5
14group14

Using this OID with SNMP

At least one MIB declaration places this object in a table row. A value belongs to a row instance; its suffix depends on the row's INDEX or AUGMENTS definition. The index encoding is not inferred here.

Published row index: fsVpnPolicyName.

snmpwalk [connection options] DEVICE .1.3.6.1.4.1.2076.143.1.1.1.40

Replace the placeholders with your connection and authentication options. Available permissions and device support can differ from the MIB.

Properties come from available MIB definitions. Actual device support and access can differ. See source records below for original files and qualifications.

The displayed source records contain one distinct definition. Compare its source records.

fsVpnIkePhase2DHGroup  OBJECT-TYPE
   SYNTAX  INTEGER {
                       none (0),
                       group1(1),
                       group2(2),
                       group5(5),
                       group14(14)
                   }
   MAX-ACCESS      read-write
   STATUS          current
   DESCRIPTION
       "Perfect Forward Secrecy (PFS) generates and uses a unique session key
       for each encrypted exchange. The unique session key protects the
       exchange from subsequent decryption, even if the entire exchange was
       recorded and the attacker has obtained the pre-shared and/or private
       keys used by the endpoint devices.

       To enable PFS, choose a Diffie-Hellman group to use in generating the
       PFS session key.
       "
   ::= { fsVpnEntry 40 }

Meaning

Descriptions

1 unique

Identical descriptions are grouped. Different wording and device-specific notes are retained.

Perfect Forward Secrecy (PFS) generates and uses a unique session key for each encrypted exchange. The unique session key protects the exchange from subsequent decryption, even if the entire exchange was recorded and the attacker has obtained the pre-shared and/or private keys used by the endpoint devices. To enable PFS, choose a Diffie-Hellman group to use in generating the PFS session key.

Sources for this description

Multiple manufacturers; see the original MIB MIB copies (LibreNMS/Observium Community)Belden, GarrettCom and Hirschmann IT official standalone MIBs

See 1 matching source record

Evidence

Source records

1 records

Matching descriptions are grouped; open a group to compare definitions and supporting files.

Records for description 1Multiple manufacturers; see the original MIB MIB copies (LibreNMS/Observium Community), Belden, GarrettCom and Hirschmann IT official standalone MIBs1 record · 2 sources

Description 1

fsVpnIkePhase2DHGroup · currentMultiple manufacturers; see the original MIB MIB copies (LibreNMS/Observium Community), Belden, GarrettCom and Hirschmann IT official standalone MIBs2 sources

Status in source: current.

Names: fsVpnIkePhase2DHGroup

Technical details
{
  "smi_kind": "OBJECT-TYPE",
  "definition": [
    "fsVpnIkePhase2DHGroup",
    "OBJECT-TYPE",
    "SYNTAX",
    "INTEGER",
    "{",
    "none",
    "(",
    "0",
    ")",
    ",",
    "group1",
    "(",
    "1",
    ")",
    ",",
    "group2",
    "(",
    "2",
    ")",
    ",",
    "group5",
    "(",
    "5",
    ")",
    ",",
    "group14",
    "(",
    "14",
    ")",
    "}",
    "MAX-ACCESS",
    "read-write",
    "STATUS",
    "current",
    "DESCRIPTION",
    "\"Perfect Forward Secrecy (PFS) generates and uses a unique session key for each encrypted exchange. The unique session key protects the exchange from subsequent decryption, even if the entire exchange was recorded and the attacker has obtained the pre-shared and/or private keys used by the endpoint devices. To enable PFS, choose a Diffie-Hellman group to use in generating the PFS session key. \"",
    "::=",
    "{",
    "fsVpnEntry",
    "40",
    "}"
  ],
  "syntax_tree": [
    [
      "SimpleSyntax",
      "INTEGER",
      [
        "enumSpec",
        [
          [
            "none",
            0
          ],
          [
            "group1",
            1
          ],
          [
            "group2",
            2
          ],
          [
            "group5",
            5
          ],
          [
            "group14",
            14
          ]
        ]
      ]
    ],
    null,
    [
      "MaxAccessPart",
      "read-write"
    ],
    [
      "Status",
      "current"
    ],
    [
      "DESCRIPTION",
      "Perfect Forward Secrecy (PFS) generates and uses a unique session key for each encrypted exchange. The unique session key protects the exchange from subsequent decryption, even if the entire exchange was recorded and the attacker has obtained the pre-shared and/or private keys used by the endpoint devices. To enable PFS, choose a Diffie-Hellman group to use in generating the PFS session key."
    ],
    null,
    null,
    null,
    null
  ]
}

Registration

Registration authorities

First Registration Authority (inferred from ancestor 1.3.6.1.4.1.2076)

Division Products

Siblings (42)

OIDNameDirect childrenDescendantsDescription
1.3.6.1.4.1.2076.143.1.1.1.1 fsVpnPolicyName00
1.3.6.1.4.1.2076.143.1.1.1.2 fsVpnPolicyType00
1.3.6.1.4.1.2076.143.1.1.1.3 fsVpnPolicyPriority00
1.3.6.1.4.1.2076.143.1.1.1.4 fsVpnTunTermAddrType00
1.3.6.1.4.1.2076.143.1.1.1.5 fsVpnLocalTunTermAddr00
1.3.6.1.4.1.2076.143.1.1.1.6 fsVpnRemoteTunTermAddr00
1.3.6.1.4.1.2076.143.1.1.1.7 fsVpnProtectNetworkType00
1.3.6.1.4.1.2076.143.1.1.1.8 fsVpnLocalProtectNetwork00
1.3.6.1.4.1.2076.143.1.1.1.9 fsVpnLocalProtectNetworkPrefixLen00
1.3.6.1.4.1.2076.143.1.1.1.10 fsVpnRemoteProtectNetwork00
1.3.6.1.4.1.2076.143.1.1.1.11 fsVpnRemoteProtectNetworkPrefixLen00
1.3.6.1.4.1.2076.143.1.1.1.12 fsVpnIkeSrcPortRange00
1.3.6.1.4.1.2076.143.1.1.1.13 fsVpnIkeDstPortRange00
1.3.6.1.4.1.2076.143.1.1.1.14 fsVpnSecurityProtocol00
1.3.6.1.4.1.2076.143.1.1.1.15 fsVpnInboundSpi00
1.3.6.1.4.1.2076.143.1.1.1.16 fsVpnOutboundSpi00
1.3.6.1.4.1.2076.143.1.1.1.17 fsVpnMode00
1.3.6.1.4.1.2076.143.1.1.1.18 fsVpnAuthAlgo00
1.3.6.1.4.1.2076.143.1.1.1.19 fsVpnAhKey00
1.3.6.1.4.1.2076.143.1.1.1.20 fsVpnEncrAlgo00
1.3.6.1.4.1.2076.143.1.1.1.21 fsVpnEspKey00
1.3.6.1.4.1.2076.143.1.1.1.22 fsVpnAntiReplay00
1.3.6.1.4.1.2076.143.1.1.1.23 fsVpnPolicyFlag00
1.3.6.1.4.1.2076.143.1.1.1.24 fsVpnProtocol00
1.3.6.1.4.1.2076.143.1.1.1.25 fsVpnPolicyIntfIndex00
1.3.6.1.4.1.2076.143.1.1.1.26 fsVpnIkePhase1HashAlgo00
1.3.6.1.4.1.2076.143.1.1.1.27 fsVpnIkePhase1EncryptionAlgo00
1.3.6.1.4.1.2076.143.1.1.1.28 fsVpnIkePhase1DHGroup00
1.3.6.1.4.1.2076.143.1.1.1.29 fsVpnIkePhase1LocalIdType00
1.3.6.1.4.1.2076.143.1.1.1.30 fsVpnIkePhase1LocalIdValue00
1.3.6.1.4.1.2076.143.1.1.1.31 fsVpnIkePhase1PeerIdType00
1.3.6.1.4.1.2076.143.1.1.1.32 fsVpnIkePhase1PeerIdValue00
1.3.6.1.4.1.2076.143.1.1.1.33 fsVpnIkePhase1LifeTimeType00
1.3.6.1.4.1.2076.143.1.1.1.34 fsVpnIkePhase1LifeTime00
1.3.6.1.4.1.2076.143.1.1.1.35 fsVpnIkePhase1Mode00
1.3.6.1.4.1.2076.143.1.1.1.36 fsVpnIkePhase2AuthAlgo00
1.3.6.1.4.1.2076.143.1.1.1.37 fsVpnIkePhase2EspEncryptionAlgo00
1.3.6.1.4.1.2076.143.1.1.1.38 fsVpnIkePhase2LifeTimeType00
1.3.6.1.4.1.2076.143.1.1.1.39 fsVpnIkePhase2LifeTime00
1.3.6.1.4.1.2076.143.1.1.1.41 fsVpnIkeVersion00
1.3.6.1.4.1.2076.143.1.1.1.42 fsVpnCertAlgoType00
1.3.6.1.4.1.2076.143.1.1.1.43 fsVpnPolicyRowStatus00