All MIBs › TIMETRA-IPSEC-MIB › tmnxIkePolicyPFSDHGroup
tmnxIkePolicyPFSDHGroup
Module: TIMETRA-IPSEC-MIB
OID (symbolic): TIMETRA-IPSEC-MIB::tmnxIkePolicyPFSDHGroup
OID (numeric): 1.3.6.1.4.1.6527.3.1.2.48.4.1.8
Node type: OBJECT-TYPE
Type: TmnxIkePolicyDHGroup
Access: read-create
Description: The value of tmnxIkePolicyPFSDHGroup is used only if the value of the tmnxIkePolicyPFSEnabled is 'true'.
The value of tmnxIkePolicyPFSDHGroup specifies the new Diffie-hellman key exchange each time the SA(Security Association) key is renegotiated. After the SA expires, the key is forgotten and another key is generated (if the SA remains up). This means that an attacker who cracks part of the exchange can only read the part that used the key before the key changed. There is no advantage of cracking the other parts if the attacker has already cracked one.
What is tmnxIkePolicyPFSDHGroup?
When tmnxIkePolicyPFSEnabled is true, selects the Diffie-Hellman group (defaulting to group2) used for the fresh key exchange performed each time the phase-2 SA is renegotiated, so cracking one rekey period's key doesn't expose other periods' traffic. This object is ignored when PFS is disabled on the policy.
OID Breakdown
Upper-level ancestors (10 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.6527 | timetra | ALCATEL-IND1-TIMETRA-GLOBAL-MIB |
| 1.3.6.1.4.1.6527.3 | timetraProducts | ALCATEL-IND1-TIMETRA-GLOBAL-MIB |
| 1.3.6.1.4.1.6527.3.1 | tmnxSRMIB | ALCATEL-IND1-TIMETRA-GLOBAL-MIB |
| 1.3.6.1.4.1.6527.3.1.2 | tmnxSRObjs | ALCATEL-IND1-TIMETRA-GLOBAL-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.6527.3.1.2.48 | tmnxIPsecObjects | TIMETRA-IPSEC-MIB |
| 1.3.6.1.4.1.6527.3.1.2.48.4 | tmnxIkePolicyTable | TIMETRA-IPSEC-MIB |
| 1.3.6.1.4.1.6527.3.1.2.48.4.1 | tmnxIkePolicyEntry | TIMETRA-IPSEC-MIB |
| 1.3.6.1.4.1.6527.3.1.2.48.4.1.8 | tmnxIkePolicyPFSDHGroup | TIMETRA-IPSEC-MIB |