All MIBs › XEDIA-IPSEC-MIB › ipsecSecurityProfileEnablePfs
ipsecSecurityProfileEnablePfs
Module: XEDIA-IPSEC-MIB
OID (symbolic): XEDIA-IPSEC-MIB::ipsecSecurityProfileEnablePfs
OID (numeric): 1.3.6.1.4.1.838.3.14.1.2.1.9
Node type: OBJECT-TYPE
Type: TruthValue
Access: read-create
Description: When enabled PFS is enforced. This requires generation on new key material for each protocol SA (i.e., non ISAKMP SA). The default is 'false(2)'.
What is ipsecSecurityProfileEnablePfs?
This OID, set to true, enforces Perfect Forward Secrecy for SAs under this profile, requiring fresh key material to be generated for each protocol SA rather than reusing prior key data; the default is false. An engineer enables this on high-security profiles where compromising one session's key must not expose the keys of other sessions.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.838 | xedia | XEDIA-REG |
| 1.3.6.1.4.1.838.3 | xediaMibs | XEDIA-REG |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.838.3.14 | xediaIpsecMIB | XEDIA-IPSEC-MIB |
| 1.3.6.1.4.1.838.3.14.1 | ipsecObjects | XEDIA-IPSEC-MIB |
| 1.3.6.1.4.1.838.3.14.1.2 | ipsecSecurityProfileTable | XEDIA-IPSEC-MIB |
| 1.3.6.1.4.1.838.3.14.1.2.1 | ipsecSecurityProfileEntry | XEDIA-IPSEC-MIB |
| 1.3.6.1.4.1.838.3.14.1.2.1.9 | ipsecSecurityProfileEnablePfs | XEDIA-IPSEC-MIB |