All MIBs › XEDIA-IPSEC-MIB › ipsecSecurityProfileExpirationTimer
ipsecSecurityProfileExpirationTimer
Module: XEDIA-IPSEC-MIB
OID (symbolic): XEDIA-IPSEC-MIB::ipsecSecurityProfileExpirationTimer
OID (numeric): 1.3.6.1.4.1.838.3.14.1.2.1.6
Node type: OBJECT-TYPE
Type: Unsigned32
Access: read-create
Description: The number of seconds before the SA expires. When 0, the SA expiration timer is disabled. The default is 24*3600 = 86400 seconds (i.e., 24 hours). The minimum allowed expiration timer value is 5*60 = 300 seconds (i.e., 5 minutes). The maximum value is 86400 seconds (i.e., 24 hours). Rekeying begins 1 minute prior to SA expiration.
What is ipsecSecurityProfileExpirationTimer?
This OID sets, in seconds, how long a Security Association under this profile lives before it must be rekeyed, ranging from 300 seconds to 86400 seconds (24 hours, the default), or 0 to disable the timer entirely; rekeying begins one minute before expiration. An engineer shortens this on high-security profiles to force more frequent key rotation, at the cost of slightly more rekeying overhead.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.838 | xedia | XEDIA-REG |
| 1.3.6.1.4.1.838.3 | xediaMibs | XEDIA-REG |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.838.3.14 | xediaIpsecMIB | XEDIA-IPSEC-MIB |
| 1.3.6.1.4.1.838.3.14.1 | ipsecObjects | XEDIA-IPSEC-MIB |
| 1.3.6.1.4.1.838.3.14.1.2 | ipsecSecurityProfileTable | XEDIA-IPSEC-MIB |
| 1.3.6.1.4.1.838.3.14.1.2.1 | ipsecSecurityProfileEntry | XEDIA-IPSEC-MIB |
| 1.3.6.1.4.1.838.3.14.1.2.1.6 | ipsecSecurityProfileExpirationTimer | XEDIA-IPSEC-MIB |