-- This module defines enterprise MIBs for VPN Phase 1
--
-- Copyright (c) 1999-2004, Juniper Networks, Inc.
-- All rights reserved.NETSCREEN-VPN-PHASEONE-MIB DEFINITIONS::=BEGINIMPORTS--PSIM(Modif) netscreenVpnMibModulenetscreenVpnMibModule, netscreenVpn
FROM NETSCREEN-SMI
Integer32,MODULE-IDENTITY,OBJECT-TYPEFROM SNMPv2-SMI
DisplayStringFROM SNMPv2-TC
;netscreenVpnPhaseoneMibModule MODULE-IDENTITYLAST-UPDATED"200405032022Z"-- May 03, 2004ORGANIZATION"Juniper Networks, Inc."CONTACT-INFO"Customer Support
1194 North Mathilda Avenue
Sunnyvale, California 94089-1206
USA
Tel: 1-800-638-8296
E-mail: customerservice@juniper.net
HTTP://www.juniper.net"DESCRIPTION"This module defines NetScreen private MIBs for VPN Phase 1"REVISION"200405030000Z"-- May 03, 2004
DESCRIPTION"Modified copyright and contact information"REVISION"200403030000Z"-- March 03, 2004DESCRIPTION"Converted to SMIv2 by Longview Software"REVISION"200311130000Z"-- November 13, 2003DESCRIPTION"Correct spelling mistake"REVISION"200109280000Z"-- September 28, 2001DESCRIPTION"no comment"REVISION"200105140000Z"-- May 14, 2001DESCRIPTION"Creation Date"::={ netscreenVpnMibModule 5}
NsVpnPhOneEntry ::=SEQUENCE{
nsVpnPhOneIndex Integer32,
nsVpnPhOneName DisplayString,
nsVpnPhOneAuthMethod INTEGER,
nsVpnPhOneDhGroup Integer32,
nsVpnPhOneEncryp INTEGER,
nsVpnPhOneHash INTEGER,
nsVpnPhOneLifetime Integer32,
nsVpnPhOneLifetimeMeasure INTEGER,
nsVpnPhOneVsys Integer32}nsVpnPhaseOneCfg OBJECTIDENTIFIER::={ netscreenVpn 5}nsVpnPhOneTable OBJECT-TYPESYNTAXSEQUENCEOF NsVpnPhOneEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"To establish an IKE IPSec tunnel, two phases of negotiation
are required. This table specifies the configuration attributes
for Phase One negotiation. In Phase 1, the participants
establish a secure channel in which to negotiate the IPSec
SAs."::={ nsVpnPhaseOneCfg 1}nsVpnPhOneEntry OBJECT-TYPESYNTAX NsVpnPhOneEntry
MAX-ACCESSnot-accessibleSTATUScurrent
DESCRIPTION"Each entry in the nsVpnPhOneTable holds a set of configuration
parameters associated with an instance of Phase 1 setting."INDEX{ nsVpnPhOneIndex }::={ nsVpnPhOneTable 1}nsVpnPhOneIndex OBJECT-TYPESYNTAXInteger32(0..2147483647)MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"A unique value for phase one table. Its value ranges between
1 and 65535 and may not be contiguous. The index has no other
meaning but a pure index"::={ nsVpnPhOneEntry 1}nsVpnPhOneName OBJECT-TYPESYNTAXDisplayString(SIZE(0..32))MAX-ACCESSread-onlySTATUScurrent
DESCRIPTION"Phase one proposal name."::={ nsVpnPhOneEntry 2}nsVpnPhOneAuthMethod OBJECT-TYPESYNTAXINTEGER{preshare(0),rsa-sig(1),dsa-sig(2),rsa-enc(3),rsa-rev(4)}MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Phase one proposal authentication method."::={ nsVpnPhOneEntry 3}nsVpnPhOneDhGroup OBJECT-TYPESYNTAXInteger32MAX-ACCESSread-onlySTATUScurrent
DESCRIPTION"Phase one proposal Diffie-Hellman exchange group id."::={ nsVpnPhOneEntry 4}nsVpnPhOneEncryp OBJECT-TYPESYNTAXINTEGER{null(0),des(1),des3(2),aes(3),aes-192(4),aes-256(5)}MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Phase one proposal encryption exchange id."::={ nsVpnPhOneEntry 5}nsVpnPhOneHash OBJECT-TYPESYNTAXINTEGER{null(0),
md5(1),sha(2)}MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Phase one proposal hash algorithm."::={ nsVpnPhOneEntry 6}nsVpnPhOneLifetime OBJECT-TYPESYNTAXInteger32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Lifetime of this phase one setting."::={ nsVpnPhOneEntry 7}nsVpnPhOneLifetimeMeasure OBJECT-TYPESYNTAXINTEGER{second(0),minute(1),hours(2),
days(3)}MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"life time measurement."::={ nsVpnPhOneEntry 8}nsVpnPhOneVsys OBJECT-TYPESYNTAXInteger32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"vsys this phase one proposal configuration belongs to."::={ nsVpnPhOneEntry 9}END