All MIBs › Juniper-IPsec-Tunnel-MIB › juniIpsecTunnelPfsGroup
juniIpsecTunnelPfsGroup
Module: Juniper-IPsec-Tunnel-MIB
OID (symbolic): Juniper-IPsec-Tunnel-MIB::juniIpsecTunnelPfsGroup
OID (numeric): 1.3.6.1.4.1.4874.2.2.70.1.1.2.1.25
Node type: OBJECT-TYPE
Type: JuniIpsecPfsGroup
Access: read-create
Description: The tunnel perfect forward secrecty group.
What is juniIpsecTunnelPfsGroup?
This sets the Perfect Forward Secrecy Diffie-Hellman group used during Phase-2 rekeying: noGroup(0) disables PFS, group1(1) is 768-bit, group2(2) is 1024-bit, and group5(5) is 1536-bit. An admin selects group2 or group5 to strengthen rekey security at the cost of extra CPU on each rekey, since PFS forces a fresh key exchange rather than deriving keys from existing material.
OID Breakdown
Upper-level ancestors (9 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.4874 | juniperUni | Juniper-UNI-SMI |
| 1.3.6.1.4.1.4874.2 | juniperUniMibs | Juniper-UNI-SMI |
| 1.3.6.1.4.1.4874.2.2 | juniMibs | Juniper-MIBs |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.4874.2.2.70 | juniIpsecTunnelMIB | Juniper-IPsec-Tunnel-MIB |
| 1.3.6.1.4.1.4874.2.2.70.1 | juniIpsecObjects | Juniper-IPsec-Tunnel-MIB |
| 1.3.6.1.4.1.4874.2.2.70.1.1 | juniIpsecTunnel | Juniper-IPsec-Tunnel-MIB |
| 1.3.6.1.4.1.4874.2.2.70.1.1.2 | juniIpsecTunnelInterfaceTable | Juniper-IPsec-Tunnel-MIB |
| 1.3.6.1.4.1.4874.2.2.70.1.1.2.1 | juniIpsecTunnelInterfaceEntry | Juniper-IPsec-Tunnel-MIB |
| 1.3.6.1.4.1.4874.2.2.70.1.1.2.1.25 | juniIpsecTunnelPfsGroup | Juniper-IPsec-Tunnel-MIB |