tIPsecRUTnlPfsDHGroup

The value of tIPsecRUTnlPfsDHGroup indicates the new Diffie-hellman key exchange each time the SA(Security Association) key is renegotiated. After the SA expires, the key is forgotten and another key is generated (if the SA remains up). This means that an attacker who cracks part of the exchange can only read the part that used the key before the key changed. There is no advantage of cracking the other parts if the attacker has already cracked one.

Details

Possible values
0 unspecified
1 group1
2 group2
5 group5

Table columns

14 objects
Oid Name Access Type
1.3.6.1.4.1.6527.3.1.2.48.20.1.1 tIPsecRUTnlInetAddrType noaccess InetAddressType
1.3.6.1.4.1.6527.3.1.2.48.20.1.2 tIPsecRUTnlInetAddress noaccess Unknown
1.3.6.1.4.1.6527.3.1.2.48.20.1.3 tIPsecRUTnlPort noaccess TTcpUdpPort
1.3.6.1.4.1.6527.3.1.2.48.20.1.4 tIPsecRUTnlPrivateIpAddrType readonly InetAddressType
1.3.6.1.4.1.6527.3.1.2.48.20.1.5 tIPsecRUTnlPrivateIpAddr readonly Unknown
1.3.6.1.4.1.6527.3.1.2.48.20.1.6 tIPsecRUTnlPrivateIpPrefixLen readonly InetAddressPrefixLength
1.3.6.1.4.1.6527.3.1.2.48.20.1.7 tIPsecRUTnlTempId readonly TmnxIPsecTunnelTemplateId
1.3.6.1.4.1.6527.3.1.2.48.20.1.8 tIPsecRUTnlIPsecSALifeTime readonly Unknown
1.3.6.1.4.1.6527.3.1.2.48.20.1.9 tIPsecRUTnlPfsDHGroup readonly TmnxIkePolicyDHGroupOrZero
1.3.6.1.4.1.6527.3.1.2.48.20.1.10 tIPsecRUTnlReplayWindow readonly Unknown
1.3.6.1.4.1.6527.3.1.2.48.20.1.11 tIPsecRUTnlPrivateSvcId readonly TmnxServId
1.3.6.1.4.1.6527.3.1.2.48.20.1.12 tIPsecRUTnlPrivateIfIndex readonly InterfaceIndex
1.3.6.1.4.1.6527.3.1.2.48.20.1.13 tIPsecRUTnlHasBiDirectionalSA readonly TruthValue
1.3.6.1.4.1.6527.3.1.2.48.20.1.14 tIPsecRUTnlHostISA readonly TmnxHwIndexOrZero

Used by conformance groups

2 objects
  • 1.3.6.1.4.1.6527.3.1.1.48.2.4 tmnxIPsecGWGroup
  • 1.3.6.1.4.1.6527.3.1.1.48.2.10 tmnxIPsecGWV10v0Group

Comments

Parent

Advertisement