All MIBs › NETSCREEN-VPN-PHASETWO-MIB › nsVpnPhTwoPFS
nsVpnPhTwoPFS
Module: NETSCREEN-VPN-PHASETWO-MIB
OID (symbolic): NETSCREEN-VPN-PHASETWO-MIB::nsVpnPhTwoPFS
OID (numeric): 1.3.6.1.4.1.3224.4.6.1.1.3
Node type: OBJECT-TYPE
Type: Integer32
Access: read-only
Description: Perfect Forward Secrecy - Diffie-Hellman exchange group.
What is nsVpnPhTwoPFS?
This read-only value reports the Perfect Forward Secrecy setting for the proposal, specifically the Diffie-Hellman exchange group used. An admin reads it to confirm the strength of key-exchange security configured for that VPN's Phase Two negotiation, since a higher DH group provides stronger forward secrecy at greater computational cost. For example, an admin auditing VPN security posture would check this value to ensure PFS is enabled with an adequately strong DH group rather than left disabled.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.3224.4.6.1.1.3 snmpwalk -v2c -c public <target> NETSCREEN-VPN-PHASETWO-MIB::nsVpnPhTwoPFS
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.3224.4.6.1.1.3.1 snmpget -v2c -c public <target> NETSCREEN-VPN-PHASETWO-MIB::nsVpnPhTwoPFS.1
Start monitoring Juniper NetScreen firewall/VPN gateway (IKE Phase 2/quick mode) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the NETSCREEN-VPN-PHASETWO-MIB::nsVpnPhTwoPFS OID value, configure state conditions and alerts, and monitor any Juniper NetScreen firewall/VPN gateway (IKE Phase 2/quick mode) from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.3224 | netscreen | NETSCREEN-SMI |
| 1.3.6.1.4.1.3224.4 | netscreenVpn | NETSCREEN-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.3224.4.6 | nsVpnPhaseTwoCfg | NETSCREEN-VPN-PHASETWO-MIB |
| 1.3.6.1.4.1.3224.4.6.1 | nsVpnPhTwoTable | NETSCREEN-VPN-PHASETWO-MIB |
| 1.3.6.1.4.1.3224.4.6.1.1 | nsVpnPhTwoEntry | NETSCREEN-VPN-PHASETWO-MIB |
| 1.3.6.1.4.1.3224.4.6.1.1.3 | nsVpnPhTwoPFS | NETSCREEN-VPN-PHASETWO-MIB |