All MIBs › SNMP-USM-DH-OBJECTS-MIB › usmDHParameters
usmDHParameters
Module: SNMP-USM-DH-OBJECTS-MIB
OID (symbolic): SNMP-USM-DH-OBJECTS-MIB::usmDHParameters
OID (numeric): 1.3.6.1.3.101.1.1.1
Node type: OBJECT-TYPE
Type: OCTET STRING
Access: read-write
Description: The public Diffie-Hellman parameters for doing a Diffie-Hellman key agreement for this device. This is encoded as an ASN.1 DHParameter per PKCS #3, section 9. E.g.
DHParameter ::= SEQUENCE { prime INTEGER, -- p base INTEGER, -- g privateValueLength INTEGER OPTIONAL }
Implementors are encouraged to use either the values from Oakley Group 1 or the values of from Oakley Group 2 as specified in RFC-2409, The Internet Key Exchange, Section 6.1, 6.2 as the default for this object. Other values may be used, but the security properties of those values MUST be well understood and MUST meet the requirements of PKCS #3 for the selection of Diffie-Hellman primes.
In addition, any time usmDHParameters changes, all values of type DHKeyChange will change and new random numbers MUST be generated by the agent for each DHKeyChange object.
What is usmDHParameters?
Holds the public Diffie-Hellman parameters (prime, base, and optional private-value length) this device uses when negotiating SNMPv3 USM keys via Diffie-Hellman key agreement. Admins configure it to establish the shared cryptographic parameters both the agent and manager use, and changing it forces all related DHKeyChange objects to be regenerated with new random numbers. A device might be set to use the Oakley Group 2 parameters from RFC 2409 as recommended, ensuring interoperable, well-vetted DH values for key exchange.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.3.101.1.1.1 snmpwalk -v2c -c public <target> SNMP-USM-DH-OBJECTS-MIB::usmDHParameters
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.3.101.1.1.1.1 snmpget -v2c -c public <target> SNMP-USM-DH-OBJECTS-MIB::usmDHParameters.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.3.101.1.1.1.1 s <value>
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device or host (Diffie-Hellman key-agreement/kickstart) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the SNMP-USM-DH-OBJECTS-MIB::usmDHParameters OID value, configure state conditions and alerts, and monitor any vendor-neutral, standards-based MIB, any SNMPv3-capable network device or host (Diffie-Hellman key-agreement/kickstart) from a single console.
OID Breakdown
Upper-level ancestors (5 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.3 | experimental | APERTUS-NPG-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.3.101 | snmpUsmDHObjectsMIB | SNMP-USM-DH-OBJECTS-MIB |
| 1.3.6.1.3.101.1 | usmDHKeyObjects | SNMP-USM-DH-OBJECTS-MIB |
| 1.3.6.1.3.101.1.1 | usmDHPublicObjects | SNMP-USM-DH-OBJECTS-MIB |
| 1.3.6.1.3.101.1.1.1 | usmDHParameters | SNMP-USM-DH-OBJECTS-MIB |