All MIBs › ONEACCESS-GDOI-MIB › oacGdoiGmKekEncryptAlg

oacGdoiGmKekEncryptAlg

OID (symbolic): ONEACCESS-GDOI-MIB::oacGdoiGmKekEncryptAlg

OID (numeric): 1.3.6.1.4.1.13191.10.3.4.1224.1.3.2.1.4

Node type: OBJECT-TYPE

Type: OacGdoiKEKEncryptionAlgorithm

Access: read-only

Description: The value of the KEK_ALGORITHM which specifies the
encryption algorithm used with the KEK SA.  A GDOI
implementaiton must support KEK_ALG_3DES.

Following are the KEK encryption algoritm values defined in
the GDOI RFC 3547, however the oacGdoiEncryptionAlgorithm TC
defines all possible values.

  Algorithm Type  Value
  --------------  -----
   KEK_ALG_DES      1
   KEK_ALG_3DES     2
   KEK_ALG_AES      3

What is oacGdoiGmKekEncryptAlg?

This object reports the encryption algorithm used by this KEK security association, per the KEK_ALGORITHM values (DES, 3DES, or AES), noting that a compliant GDOI implementation must support 3DES. An admin checks this to confirm the KEK is protected with an appropriately strong algorithm rather than a weaker legacy option. Seeing enc-aes(3) would confirm the strongest of the three supported options is in use for this KEK SA.

Examples

Walk all instances (SNMPv2c):

snmpwalk -v2c -c public <target> 1.3.6.1.4.1.13191.10.3.4.1224.1.3.2.1.4
snmpwalk -v2c -c public <target> ONEACCESS-GDOI-MIB::oacGdoiGmKekEncryptAlg

Get a specific instance (index 1):

snmpget -v2c -c public <target> 1.3.6.1.4.1.13191.10.3.4.1224.1.3.2.1.4.1
snmpget -v2c -c public <target> ONEACCESS-GDOI-MIB::oacGdoiGmKekEncryptAlg.1

Start monitoring OneAccess CPE router (GDOI/GET VPN group key management) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the ONEACCESS-GDOI-MIB::oacGdoiGmKekEncryptAlg OID value, configure state conditions and alerts, and monitor any OneAccess CPE router (GDOI/GET VPN group key management) from a single console.

OID Breakdown

Upper-level ancestors (10 from the standard OID tree / other modules)

Numeric OID	Name	Module
1	iso	LANART-AGENT
1.3	org	AirPair-MIB
1.3.6	dod	AirPair-MIB
1.3.6.1	internet	AirPair-MIB
1.3.6.1.4	private	AirPair-MIB
1.3.6.1.4.1	enterprises	AirPair-MIB
1.3.6.1.4.1.13191	oneAccess	ONEACCESS-GLOBAL-REG
1.3.6.1.4.1.13191.10	oacExperimental	ONEACCESS-GLOBAL-REG
1.3.6.1.4.1.13191.10.3	oacExpInternalModules	ONEACCESS-GLOBAL-REG
1.3.6.1.4.1.13191.10.3.4	oacExpIMManagement	ONEACCESS-GLOBAL-REG

Numeric OID	Name	Module
1.3.6.1.4.1.13191.10.3.4.1224	oacExpIMGdoiMIB	ONEACCESS-GDOI-MIB
1.3.6.1.4.1.13191.10.3.4.1224.1	oacGdoiMIBObjects	ONEACCESS-GDOI-MIB
1.3.6.1.4.1.13191.10.3.4.1224.1.3	oacGdoiPolicy	ONEACCESS-GDOI-MIB
1.3.6.1.4.1.13191.10.3.4.1224.1.3.2	oacGdoiGmKekTable	ONEACCESS-GDOI-MIB
1.3.6.1.4.1.13191.10.3.4.1224.1.3.2.1	oacGdoiGmKekEntry	ONEACCESS-GDOI-MIB
1.3.6.1.4.1.13191.10.3.4.1224.1.3.2.1.4	oacGdoiGmKekEncryptAlg	ONEACCESS-GDOI-MIB

ONEACCESS-GDOI-MIB :: oacGdoiGmKekEncryptAlg

oacGdoiGmKekEncryptAlg

Module

This MIB depends on