187 lines
5.0 KiB
Plaintext
187 lines
5.0 KiB
Plaintext
|
-- This module defines enterprise MIBs for VPN Phase 1
|
||
|
|
--
|
||
|
|
-- Copyright (c) 1999-2004, Juniper Networks, Inc.
|
||
|
|
-- All rights reserved.
|
||
|
|
|
||
|
|
NETSCREEN-VPN-PHASEONE-MIB DEFINITIONS ::= BEGIN
|
||
|
|
|
||
|
|
IMPORTS
|
||
|
|
netscreenVpn, netscreenVpnMibModule
|
||
|
|
FROM NETSCREEN-SMI
|
||
|
|
Integer32, MODULE-IDENTITY, OBJECT-TYPE
|
||
|
|
FROM SNMPv2-SMI
|
||
|
|
DisplayString
|
||
|
|
FROM SNMPv2-TC
|
||
|
|
;
|
||
|
|
|
||
|
|
netscreenVpnPhaseoneMibModule MODULE-IDENTITY
|
||
|
|
LAST-UPDATED "200405032022Z" -- May 03, 2004
|
||
|
|
ORGANIZATION
|
||
|
|
"Juniper Networks, Inc."
|
||
|
|
CONTACT-INFO
|
||
|
|
"Customer Support
|
||
|
|
|
||
|
|
1194 North Mathilda Avenue
|
||
|
|
Sunnyvale, California 94089-1206
|
||
|
|
USA
|
||
|
|
|
||
|
|
Tel: 1-800-638-8296
|
||
|
|
E-mail: customerservice@juniper.net
|
||
|
|
HTTP://www.juniper.net"
|
||
|
|
DESCRIPTION
|
||
|
|
"This module defines NetScreen private MIBs for VPN Phase 1"
|
||
|
|
REVISION "200405030000Z" -- May 03, 2004
|
||
|
|
DESCRIPTION
|
||
|
|
"Modified copyright and contact information"
|
||
|
|
REVISION "200403030000Z" -- March 03, 2004
|
||
|
|
DESCRIPTION
|
||
|
|
"Converted to SMIv2 by Longview Software"
|
||
|
|
REVISION "200311130000Z" -- November 13, 2003
|
||
|
|
DESCRIPTION
|
||
|
|
"Correct spelling mistake"
|
||
|
|
REVISION "200109280000Z" -- September 28, 2001
|
||
|
|
DESCRIPTION
|
||
|
|
"no comment"
|
||
|
|
REVISION "200105140000Z" -- May 14, 2001
|
||
|
|
DESCRIPTION
|
||
|
|
"Creation Date"
|
||
|
|
::= { netscreenVpnMibModule 5 }
|
||
|
|
|
||
|
|
NsVpnPhOneEntry ::= SEQUENCE
|
||
|
|
{
|
||
|
|
nsVpnPhOneIndex Integer32,
|
||
|
|
nsVpnPhOneName DisplayString,
|
||
|
|
nsVpnPhOneAuthMethod INTEGER,
|
||
|
|
nsVpnPhOneDhGroup Integer32,
|
||
|
|
nsVpnPhOneEncryp INTEGER,
|
||
|
|
nsVpnPhOneHash INTEGER,
|
||
|
|
nsVpnPhOneLifetime Integer32,
|
||
|
|
nsVpnPhOneLifetimeMeasure INTEGER,
|
||
|
|
nsVpnPhOneVsys Integer32
|
||
|
|
}
|
||
|
|
|
||
|
|
nsVpnPhaseOneCfg OBJECT IDENTIFIER ::= { netscreenVpn 5 }
|
||
|
|
|
||
|
|
nsVpnPhOneTable OBJECT-TYPE
|
||
|
|
SYNTAX SEQUENCE OF NsVpnPhOneEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"To establish an IKE IPSec tunnel, two phases of negotiation
|
||
|
|
are required. This table specifies the configuration attributes
|
||
|
|
for Phase One negotiation. In Phase 1, the participants
|
||
|
|
establish a secure channel in which to negotiate the IPSec
|
||
|
|
SAs."
|
||
|
|
::= { nsVpnPhaseOneCfg 1 }
|
||
|
|
|
||
|
|
nsVpnPhOneEntry OBJECT-TYPE
|
||
|
|
SYNTAX NsVpnPhOneEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Each entry in the nsVpnPhOneTable holds a set of configuration
|
||
|
|
parameters associated with an instance of Phase 1 setting."
|
||
|
|
INDEX
|
||
|
|
{ nsVpnPhOneIndex }
|
||
|
|
::= { nsVpnPhOneTable 1 }
|
||
|
|
|
||
|
|
nsVpnPhOneIndex OBJECT-TYPE
|
||
|
|
SYNTAX Integer32 (0..2147483647)
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"A unique value for phase one table. Its value ranges between
|
||
|
|
1 and 65535 and may not be contiguous. The index has no other
|
||
|
|
meaning but a pure index"
|
||
|
|
::= { nsVpnPhOneEntry 1 }
|
||
|
|
|
||
|
|
nsVpnPhOneName OBJECT-TYPE
|
||
|
|
SYNTAX DisplayString (SIZE(0..32))
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Phase one proposal name."
|
||
|
|
::= { nsVpnPhOneEntry 2 }
|
||
|
|
|
||
|
|
nsVpnPhOneAuthMethod OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER {
|
||
|
|
preshare(0),
|
||
|
|
rsa-sig(1),
|
||
|
|
dsa-sig(2),
|
||
|
|
rsa-enc(3),
|
||
|
|
rsa-rev(4)
|
||
|
|
}
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Phase one proposal authentication method."
|
||
|
|
::= { nsVpnPhOneEntry 3 }
|
||
|
|
|
||
|
|
nsVpnPhOneDhGroup OBJECT-TYPE
|
||
|
|
SYNTAX Integer32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Phase one proposal Diffie-Hellman exchange group id."
|
||
|
|
::= { nsVpnPhOneEntry 4 }
|
||
|
|
|
||
|
|
nsVpnPhOneEncryp OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER {
|
||
|
|
null(0),
|
||
|
|
des(1),
|
||
|
|
des3(2),
|
||
|
|
aes(3),
|
||
|
|
aes-192(4),
|
||
|
|
aes-256(5)
|
||
|
|
}
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Phase one proposal encryption exchange id."
|
||
|
|
::= { nsVpnPhOneEntry 5 }
|
||
|
|
|
||
|
|
nsVpnPhOneHash OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER {
|
||
|
|
null(0),
|
||
|
|
md5(1),
|
||
|
|
sha(2)
|
||
|
|
}
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Phase one proposal hash algorithm."
|
||
|
|
::= { nsVpnPhOneEntry 6 }
|
||
|
|
|
||
|
|
nsVpnPhOneLifetime OBJECT-TYPE
|
||
|
|
SYNTAX Integer32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Lifetime of this phase one setting."
|
||
|
|
::= { nsVpnPhOneEntry 7 }
|
||
|
|
|
||
|
|
nsVpnPhOneLifetimeMeasure OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER {
|
||
|
|
second(0),
|
||
|
|
minute(1),
|
||
|
|
hours(2),
|
||
|
|
days(3)
|
||
|
|
}
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"life time measurement."
|
||
|
|
::= { nsVpnPhOneEntry 8 }
|
||
|
|
|
||
|
|
nsVpnPhOneVsys OBJECT-TYPE
|
||
|
|
SYNTAX Integer32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"vsys this phase one proposal configuration belongs to."
|
||
|
|
::= { nsVpnPhOneEntry 9 }
|
||
|
|
|
||
|
|
END
|
||
|
|
|
||
|
|
|