OID reference

tIPsecRUTnlPfsDHGroup

1.3.6.1.4.1.6527.3.1.2.48.20.1.9

Description

The value of tIPsecRUTnlPfsDHGroup indicates the new Diffie-hellman key exchange each time the SA(Security Association) key is renegotiated. After the SA expires, the key is forgotten and another key is generated (if the SA remains up). This means that an attacker who cracks part of the exchange can only read the part…

Full description and source information

Identification

Identifier and names

Parent
1.3.6.1.4.1.6527.3.1.2.48.20.1 (tIPsecRUTnlEntry)
Node code
9
Node name
tIPsecRUTnlPfsDHGroup
Category
SNMP management object
Numeric OID
1.3.6.1.4.1.6527.3.1.2.48.20.1.9
URN notation
urn:oid:1.3.6.1.4.1.6527.3.1.2.48.20.1.9
ASN.1, OID-IRI and named path variants
ASN.1 notation

{1 3 6 1 4 1 6527 3 1 2 48 20 1 9}

  • {iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tIPsecRUTnlTable(20) tIPsecRUTnlEntry(1) tIPsecRUTnlPfsDHGroup(9)}
  • {iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprises(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tIPsecRUTnlTable(20) tIPsecRUTnlEntry(1) tIPsecRUTnlPfsDHGroup(9)}
  • {iso(1) identified-organization(3) dod(6) internet(1) private(4) ldap-enterprise(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tIPsecRUTnlTable(20) tIPsecRUTnlEntry(1) tIPsecRUTnlPfsDHGroup(9)}
  • {iso(1) identified-organization(3) dod(6) internet(1) private(4) vendor-objects(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tIPsecRUTnlTable(20) tIPsecRUTnlEntry(1) tIPsecRUTnlPfsDHGroup(9)}
  • {iso(1) org(3) dod(6) internet(1) private(4) enterprise(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tIPsecRUTnlTable(20) tIPsecRUTnlEntry(1) tIPsecRUTnlPfsDHGroup(9)}
  • {iso(1) org(3) dod(6) internet(1) private(4) enterprises(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tIPsecRUTnlTable(20) tIPsecRUTnlEntry(1) tIPsecRUTnlPfsDHGroup(9)}
  • {iso(1) org(3) dod(6) internet(1) private(4) ldap-enterprise(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tIPsecRUTnlTable(20) tIPsecRUTnlEntry(1) tIPsecRUTnlPfsDHGroup(9)}
  • {iso(1) org(3) dod(6) internet(1) private(4) vendor-objects(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tIPsecRUTnlTable(20) tIPsecRUTnlEntry(1) tIPsecRUTnlPfsDHGroup(9)}
  • {iso(1) iso-identified-organization(3) dod(6) internet(1) private(4) enterprise(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tIPsecRUTnlTable(20) tIPsecRUTnlEntry(1) tIPsecRUTnlPfsDHGroup(9)}
  • {iso(1) iso-identified-organization(3) dod(6) internet(1) private(4) enterprises(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tIPsecRUTnlTable(20) tIPsecRUTnlEntry(1) tIPsecRUTnlPfsDHGroup(9)}
  • {iso(1) iso-identified-organization(3) dod(6) internet(1) private(4) ldap-enterprise(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tIPsecRUTnlTable(20) tIPsecRUTnlEntry(1) tIPsecRUTnlPfsDHGroup(9)}
  • {iso(1) iso-identified-organization(3) dod(6) internet(1) private(4) vendor-objects(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tIPsecRUTnlTable(20) tIPsecRUTnlEntry(1) tIPsecRUTnlPfsDHGroup(9)}
  • {iso(1) iso-organization(3) dod(6) internet(1) private(4) enterprise(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tIPsecRUTnlTable(20) tIPsecRUTnlEntry(1) tIPsecRUTnlPfsDHGroup(9)}
  • {iso(1) iso-organization(3) dod(6) internet(1) private(4) enterprises(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tIPsecRUTnlTable(20) tIPsecRUTnlEntry(1) tIPsecRUTnlPfsDHGroup(9)}
  • {iso(1) iso-organization(3) dod(6) internet(1) private(4) ldap-enterprise(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tIPsecRUTnlTable(20) tIPsecRUTnlEntry(1) tIPsecRUTnlPfsDHGroup(9)}
  • {iso(1) iso-organization(3) dod(6) internet(1) private(4) vendor-objects(1) timetra(6527) timetraProducts(3) tmnxSRMIB(1) tmnxSRObjs(2) tmnxIPsecObjects(48) tIPsecRUTnlTable(20) tIPsecRUTnlEntry(1) tIPsecRUTnlPfsDHGroup(9)}
OID-IRI notation
  • /1/3/6/1/4/1/6527/3/1/2/48/20/1/9
  • /ISO/Identified-Organization/6/1/4/1/6527/3/1/2/48/20/1/9
  • /ISO/3/6/1/4/1/6527/3/1/2/48/20/1/9
Named path variants
  • /iso/identified-organization/dod/internet/private/enterprise/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tIPsecRUTnlTable/tIPsecRUTnlEntry/tIPsecRUTnlPfsDHGroup
  • /iso/identified-organization/dod/internet/private/enterprises/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tIPsecRUTnlTable/tIPsecRUTnlEntry/tIPsecRUTnlPfsDHGroup
  • /iso/identified-organization/dod/internet/private/ldap-enterprise/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tIPsecRUTnlTable/tIPsecRUTnlEntry/tIPsecRUTnlPfsDHGroup
  • /iso/identified-organization/dod/internet/private/vendor-objects/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tIPsecRUTnlTable/tIPsecRUTnlEntry/tIPsecRUTnlPfsDHGroup
  • /iso/org/dod/internet/private/enterprise/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tIPsecRUTnlTable/tIPsecRUTnlEntry/tIPsecRUTnlPfsDHGroup
  • /iso/org/dod/internet/private/enterprises/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tIPsecRUTnlTable/tIPsecRUTnlEntry/tIPsecRUTnlPfsDHGroup
  • /iso/org/dod/internet/private/ldap-enterprise/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tIPsecRUTnlTable/tIPsecRUTnlEntry/tIPsecRUTnlPfsDHGroup
  • /iso/org/dod/internet/private/vendor-objects/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tIPsecRUTnlTable/tIPsecRUTnlEntry/tIPsecRUTnlPfsDHGroup
  • /iso/iso-identified-organization/dod/internet/private/enterprise/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tIPsecRUTnlTable/tIPsecRUTnlEntry/tIPsecRUTnlPfsDHGroup
  • /iso/iso-identified-organization/dod/internet/private/enterprises/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tIPsecRUTnlTable/tIPsecRUTnlEntry/tIPsecRUTnlPfsDHGroup
  • /iso/iso-identified-organization/dod/internet/private/ldap-enterprise/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tIPsecRUTnlTable/tIPsecRUTnlEntry/tIPsecRUTnlPfsDHGroup
  • /iso/iso-identified-organization/dod/internet/private/vendor-objects/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tIPsecRUTnlTable/tIPsecRUTnlEntry/tIPsecRUTnlPfsDHGroup
  • /iso/iso-organization/dod/internet/private/enterprise/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tIPsecRUTnlTable/tIPsecRUTnlEntry/tIPsecRUTnlPfsDHGroup
  • /iso/iso-organization/dod/internet/private/enterprises/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tIPsecRUTnlTable/tIPsecRUTnlEntry/tIPsecRUTnlPfsDHGroup
  • /iso/iso-organization/dod/internet/private/ldap-enterprise/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tIPsecRUTnlTable/tIPsecRUTnlEntry/tIPsecRUTnlPfsDHGroup
  • /iso/iso-organization/dod/internet/private/vendor-objects/timetra/timetraProducts/tmnxSRMIB/tmnxSRObjs/tmnxIPsecObjects/tIPsecRUTnlTable/tIPsecRUTnlEntry/tIPsecRUTnlPfsDHGroup

SNMP properties

Value type
TmnxIkePolicyDHGroupOrZero
Maximum access defined by MIB
read-only
Status in MIB
current

Properties come from available MIB definitions. Actual device support and access can differ. See source records below for original files and qualifications.

Available source records contain 2 distinct definitions; some records may not include a definition.

Show 2 published definitions

tIPsecRUTnlPfsDHGroup · current

tIPsecRUTnlPfsDHGroup            OBJECT-TYPE
    SYNTAX      TmnxIkePolicyDHGroupOrZero
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
        "The value of tIPsecRUTnlPfsDHGroup indicates the new
         Diffie-hellman key exchange each time the SA(Security Association)
         key is renegotiated.  After the SA expires, the key is forgotten
         and another key is generated (if the SA remains up).  This means
         that an attacker who cracks part of the exchange can only read the
         part that used the key before the key changed.  There is no
         advantage of cracking the other parts if the attacker has already
         cracked one."
    ::= { tIPsecRUTnlEntry 9 }

tIPsecRUTnlPfsDHGroup · current

tIPsecRUTnlPfsDHGroup            OBJECT-TYPE
    SYNTAX      TmnxIkePolicyDHGroupOrZero
    MAX-ACCESS  read-only
    STATUS      current
    DESCRIPTION
         "The value of tIPsecRUTnlPfsDHGroup indicates the new  
         Diffie-hellman key exchange each time the SA(Security Association)
         key is renegotiated.  After the SA expires, the key is forgotten 
         and another key is generated (if the SA remains up).  This means 
         that an attacker who cracks part of the exchange can only read the 
         part that used the key before the key changed.  There is no 
         advantage of cracking the other parts if the attacker has already 
         cracked one."
    ::= { tIPsecRUTnlEntry 9 }

Meaning

Descriptions

1 unique

Identical descriptions are grouped. Different wording and device-specific notes are retained.

The value of tIPsecRUTnlPfsDHGroup indicates the new Diffie-hellman key exchange each time the SA(Security Association) key is renegotiated. After the SA expires, the key is forgotten and another key is generated (if the SA remains up). This means that an attacker who cracks part of the exchange can only read the part that used the key before the key changed. There is no advantage of cracking the other parts if the attacker has already cracked one.

Sources for this description

Netdisco MIB archive copiesNokia networking MIB copies (LibreNMS/Observium Community)

See 1 matching source record

Evidence

Source records

1 records

Matching descriptions are grouped; open a group to compare definitions and supporting files.

Records for description 1Netdisco MIB archive copies, Nokia networking MIB copies (LibreNMS/Observium Community)1 record · 2 sources

Description 1

tIPsecRUTnlPfsDHGroup · currentNetdisco MIB archive copies, Nokia networking MIB copies (LibreNMS/Observium Community)2 sources

Status in source: current.

Names: tIPsecRUTnlPfsDHGroup

Technical details
{
  "smi_kind": "OBJECT-TYPE",
  "definition": [
    "tIPsecRUTnlPfsDHGroup",
    "OBJECT-TYPE",
    "SYNTAX",
    "TmnxIkePolicyDHGroupOrZero",
    "MAX-ACCESS",
    "read-only",
    "STATUS",
    "current",
    "DESCRIPTION",
    "\"The value of tIPsecRUTnlPfsDHGroup indicates the new Diffie-hellman key exchange each time the SA(Security Association) key is renegotiated. After the SA expires, the key is forgotten and another key is generated (if the SA remains up). This means that an attacker who cracks part of the exchange can only read the part that used the key before the key changed. There is no advantage of cracking the other parts if the attacker has already cracked one.\"",
    "::=",
    "{",
    "tIPsecRUTnlEntry",
    "9",
    "}"
  ],
  "syntax_tree": [
    [
      "row",
      "TmnxIkePolicyDHGroupOrZero"
    ],
    null,
    [
      "MaxAccessPart",
      "read-only"
    ],
    [
      "Status",
      "current"
    ],
    [
      "DESCRIPTION",
      "The value of tIPsecRUTnlPfsDHGroup indicates the new Diffie-hellman key exchange each time the SA(Security Association) key is renegotiated. After the SA expires, the key is forgotten and another key is generated (if the SA remains up). This means that an attacker who cracks part of the exchange can only read the part that used the key before the key changed. There is no advantage of cracking the other parts if the attacker has already cracked one."
    ],
    null,
    null,
    null,
    null
  ]
}
  • Nokia networking MIB copies (LibreNMS/Observium Community) · Publisher's source file: Source package: observium-community-latest.tar.gz

    Vendor MIB copy from the Observium Community archive. Nokia support.

    Module: TIMETRA-IPSEC-MIB

    See published definition above

    Module imports
    {'IF-MIB': ['InterfaceIndex'], 'HCNUM-TC': ['CounterBasedGauge64'], 'SNMPv2-TC': ['DateAndTime', 'DisplayString', 'RowStatus', 'StorageType', 'TEXTUAL-CONVENTION', 'TimeStamp', 'TruthValue'], 'SNMPv2-SMI': ['Counter32', 'Counter64', 'Gauge32', 'Integer32', 'MODULE-IDENTITY', 'NOTIFICATION-TYPE', 'OBJECT-TYPE', 'Unsigned32'], 'SNMPv2-CONF': ['MODULE-COMPLIANCE', 'NOTIFICATION-GROUP', 'OBJECT-GROUP'], 'TIMETRA-TC-MIB': ['TEntryId', 'TItemDescription', 'TItemLongDescription', 'TLNamedItemOrEmpty', 'TNamedItem', 'TNamedItemOrEmpty', 'TTcpUdpPort', 'TmnxAdminState', 'TmnxAuthAlgorithm', 'TmnxBfdSessOperState', 'TmnxEnabledDisabled', 'TmnxEncrAlgorithm', 'TmnxIPsecDirection', 'TmnxIPsecKeyingType', 'TmnxIPsecTunnelTemplateId', 'TmnxIPsecTunnelTemplateIdOrZero', 'TmnxIkePolicyAuthMethod', 'TmnxIkePolicyAutoEapMethod', 'TmnxIkePolicyAutoEapOwnMethod', 'TmnxIkePolicyDHGroupOrZero', 'TmnxIkePolicyOwnAuthMethod', 'TmnxOperState', 'TmnxServId', 'TmnxTunnelGroupIdOrZero', 'TmnxVRtrID', 'TmnxVRtrIDOrZero'], 'TIMETRA-SAP-MIB': ['sapEncapValue', 'sapPortId'], 'INET-ADDRESS-MIB': ['InetAddress', 'InetAddressPrefixLength', 'InetAddressType', 'InetPortNumber'], 'TIMETRA-SERV-MIB': ['svcId'], 'TIMETRA-VRTR-MIB': ['vRtrID', 'vRtrIfIndex'], 'TIMETRA-FILTER-MIB': ['TFilterID'], 'TIMETRA-GLOBAL-MIB': ['timetraSRMIBModules', 'tmnxSRConfs', 'tmnxSRNotifyPrefix', 'tmnxSRObjs'], 'TIMETRA-CHASSIS-MIB': ['TmnxEsaIdOrZero', 'TmnxEsaVmIdOrZero', 'TmnxHwIndexOrZero', 'tmnxCardSlotNum', 'tmnxChassisIndex', 'tmnxEsaId', 'tmnxEsaVmId', 'tmnxIPsecIsaGrpId', 'tmnxMDASlotNum']}
    · Download TIMETRA-IPSEC-MIB

    Related source files and packages:

  • Netdisco MIB archive copies · Publisher's source file: timetra-ipsec-mib.mib

    Vendor MIB copy from the Netdisco archive.

    Module: TIMETRA-IPSEC-MIB

    See published definition above

    Module imports
    {'IF-MIB': ['InterfaceIndex'], 'SNMPv2-TC': ['TEXTUAL-CONVENTION', 'DateAndTime', 'RowStatus', 'TimeStamp', 'TruthValue', 'StorageType', 'DisplayString'], 'SNMPv2-SMI': ['MODULE-IDENTITY', 'OBJECT-TYPE', 'Unsigned32', 'Counter64', 'Counter32', 'Gauge32', 'Integer32', 'NOTIFICATION-TYPE'], 'SNMPv2-CONF': ['MODULE-COMPLIANCE', 'OBJECT-GROUP', 'NOTIFICATION-GROUP'], 'TIMETRA-TC-MIB': ['TItemDescription', 'TNamedItem', 'TLNamedItemOrEmpty', 'TNamedItemOrEmpty', 'TmnxAdminState', 'TmnxOperState', 'TmnxServId', 'TmnxIPsecTunnelTemplateId', 'TmnxIPsecTunnelTemplateIdOrZero', 'TmnxIkePolicyAuthMethod', 'TTcpUdpPort', 'TmnxIkePolicyAutoEapMethod', 'TmnxIkePolicyAutoEapOwnMethod', 'TmnxVRtrIDOrZero', 'TmnxVRtrID', 'TmnxBfdSessOperState', 'TmnxIkePolicyOwnAuthMethod', 'TmnxEnabledDisabled'], 'TIMETRA-SAP-MIB': ['sapPortId', 'sapEncapValue'], 'INET-ADDRESS-MIB': ['InetAddressType', 'InetAddress', 'InetPortNumber', 'InetAddressPrefixLength'], 'TIMETRA-SERV-MIB': ['svcId'], 'TIMETRA-FILTER-MIB': ['TEntryId'], 'TIMETRA-GLOBAL-MIB': ['timetraSRMIBModules', 'tmnxSRObjs', 'tmnxSRNotifyPrefix', 'tmnxSRConfs'], 'TIMETRA-CHASSIS-MIB': ['tmnxChassisIndex', 'tmnxCardSlotNum', 'tmnxMDASlotNum', 'TmnxHwIndexOrZero']}
    · Download timetra-ipsec-mib.mib

    Related source files and packages:

Registration

Registration authorities

First Registration Authority (inferred from ancestor 1.3.6.1.4.1.6527)

Marcelo Mourier

Current Registration Authority (inferred from ancestor 1.3.6.1.4.1.6527)

Jason Sterne

Siblings (27)

OIDNameDirect childrenDescendantsDescription
1.3.6.1.4.1.6527.3.1.2.48.20.1.1 tIPsecRUTnlInetAddrType00
1.3.6.1.4.1.6527.3.1.2.48.20.1.2 tIPsecRUTnlInetAddress00
1.3.6.1.4.1.6527.3.1.2.48.20.1.3 tIPsecRUTnlPort00
1.3.6.1.4.1.6527.3.1.2.48.20.1.4 tIPsecRUTnlPrivateIpAddrType00
1.3.6.1.4.1.6527.3.1.2.48.20.1.5 tIPsecRUTnlPrivateIpAddr00
1.3.6.1.4.1.6527.3.1.2.48.20.1.6 tIPsecRUTnlPrivateIpPrefixLen00
1.3.6.1.4.1.6527.3.1.2.48.20.1.7 tIPsecRUTnlTempId00
1.3.6.1.4.1.6527.3.1.2.48.20.1.8 tIPsecRUTnlIPsecSALifeTime00
1.3.6.1.4.1.6527.3.1.2.48.20.1.10 tIPsecRUTnlReplayWindow00
1.3.6.1.4.1.6527.3.1.2.48.20.1.11 tIPsecRUTnlPrivateSvcId00
1.3.6.1.4.1.6527.3.1.2.48.20.1.12 tIPsecRUTnlPrivateIfIndex00
1.3.6.1.4.1.6527.3.1.2.48.20.1.13 tIPsecRUTnlHasBiDirectionalSA00
1.3.6.1.4.1.6527.3.1.2.48.20.1.14 tIPsecRUTnlHostISA00
1.3.6.1.4.1.6527.3.1.2.48.20.1.15 tIPsecRUTnlMatchTrustAnchor00
1.3.6.1.4.1.6527.3.1.2.48.20.1.16 tIPsecRUTnlOperChanged00
1.3.6.1.4.1.6527.3.1.2.48.20.1.17 tIPsecRUTnlIkeIdType00
1.3.6.1.4.1.6527.3.1.2.48.20.1.18 tIPsecRUTnlIkeIdValue00
1.3.6.1.4.1.6527.3.1.2.48.20.1.19 tIPsecRUTnlPrivateIpAddr2Type00
1.3.6.1.4.1.6527.3.1.2.48.20.1.20 tIPsecRUTnlPrivateIpAddr200
1.3.6.1.4.1.6527.3.1.2.48.20.1.21 tIPsecRUTnlPrivateIpPrefixLen200
1.3.6.1.4.1.6527.3.1.2.48.20.1.22 tIPsecRUTnlInUseTsList00
1.3.6.1.4.1.6527.3.1.2.48.20.1.23 tIPsecRUTnlInUsePreSharedKey00
1.3.6.1.4.1.6527.3.1.2.48.20.1.24 tIPsecRUTnlPubTcpMss00
1.3.6.1.4.1.6527.3.1.2.48.20.1.25 tIPsecRUTnlPrivTcpMss00
1.3.6.1.4.1.6527.3.1.2.48.20.1.26 tIPsecRUTnlInUseIkePolicy00
1.3.6.1.4.1.6527.3.1.2.48.20.1.27 tIPsecRUTnlHostEsa00
1.3.6.1.4.1.6527.3.1.2.48.20.1.28 tIPsecRUTnlHostEsaVm00