-- These MIBs were created on 05/14/2001
-- This module defines NetScreen private MIBs for VPN Phase o
-- 
-- Copyright (c) 1999 - 2001 by NetScreen Technologies, Inc.
-- All rights reserved.
-- 

-- MODULE-IDENTITY
--  OrgName
--    NetScreen Technologies, Inc.
--  ContactInfo
--     Customer Support
--     
--     350 Oakmead Parkway
--     Sunnyvale, CA  94085
--     USA
--    
--     Tel: 1.877.NETSCREEN
--     E-mail: support@netscreen.com
--     Http://www.netscreen.com

--
--  Last modified date: 09/28/2001
--    

NETSCREEN-VPN-PHASEONE-MIB DEFINITIONS ::= BEGIN
IMPORTS

    DisplayString 	FROM RFC1213-MIB 
    netscreenVpn    FROM NETSCREEN-SMI;
    nsVpnPhaseOneCfg 	OBJECT IDENTIFIER ::= {netscreenVpn 5}
    
	nsVpnPhOneTable OBJECT-TYPE
		SYNTAX  SEQUENCE OF NsVpnPhOneEntry
		ACCESS  not-accessible
		STATUS  mandatory
		DESCRIPTION 
		        "To establish an IKE IPSec tunnel, two phases of negotiation are required.
		        This table specifies the configuration attributes for Phase One negotiation.
		        In Phase 1, the participants establish a secure channel in which to negotiate
		        the IPSec SAs."
		::= { nsVpnPhaseOneCfg 1 }  

    nsVpnPhOneEntry OBJECT-TYPE
        SYNTAX  NsVpnPhOneEntry
        ACCESS  not-accessible
        STATUS  mandatory
        DESCRIPTION
               "Each entry in the nsVpnPhOneTable holds a set of configuration parameters
               associated with an instance of Phase 1 setting."
        INDEX   { nsVpnPhOneIndex }
        ::= { nsVpnPhOneTable 1 }

	NsVpnPhOneEntry ::=
		SEQUENCE {
          nsVpnPhOneIndex
              INTEGER,
		  nsVpnPhOneName
		      DisplayString,
		  nsVpnPhOneAuthMethod
		      INTEGER,
		  nsVpnPhOneDhGroup
		      INTEGER,
		  nsVpnPhOneEncryp
		  	  INTEGER,
		  nsVpnPhOneHash
		  	  INTEGER,
		  nsVpnPhOneLifetime
		  	  INTEGER,
		  nsVpnPhOneLifetimeMeasure
		      INTEGER,
		  nsVpnPhOneVsys
		      INTEGER
       }

	nsVpnPhOneIndex OBJECT-TYPE
    	SYNTAX  INTEGER
        ACCESS  read-only
        STATUS  mandatory
        DESCRIPTION
             "A unique value for phase one table.  Its value
              ranges between 1 and 65535 and may not be contigous. 
              the index has no other meaning but a pure index" 
        ::= { nsVpnPhOneEntry 1 }

	nsVpnPhOneName OBJECT-TYPE
        SYNTAX  DisplayString (SIZE (0..32))
    	ACCESS  read-only
        STATUS  mandatory
        DESCRIPTION
             "Phase one proposal name."
        ::= { nsVpnPhOneEntry 2 }

	nsVpnPhOneAuthMethod OBJECT-TYPE
        SYNTAX  INTEGER {
        	preshare(0),
        	rsa-sig(1),
        	dsa-sig(2),
        	rsa-enc(3),
        	rsa-rev(4)
        }
    	ACCESS  read-only
        STATUS  mandatory
        DESCRIPTION
             "Phase one proposal authentication method."
        ::= { nsVpnPhOneEntry 3 }

	nsVpnPhOneDhGroup OBJECT-TYPE
        SYNTAX  INTEGER
    	ACCESS  read-only
        STATUS  mandatory
        DESCRIPTION
             "Phase one proposal Diffie-Hellman exchange group id."
        ::= { nsVpnPhOneEntry 4 }

	nsVpnPhOneEncryp OBJECT-TYPE
        SYNTAX  INTEGER {
        	      null(0),
        	      des(1),
        	      des3(2),
				  aes(3)
        }
    	ACCESS  read-only
        STATUS  mandatory
        DESCRIPTION
             "Phase one proposal encryption exchange id."
        ::= { nsVpnPhOneEntry 5 }

	nsVpnPhOneHash OBJECT-TYPE
        SYNTAX  INTEGER {
                  null(0),
        	      md5(1),
        	      sha(2)
        }
    	ACCESS  read-only
        STATUS  mandatory
        DESCRIPTION
             "Phase one proposal hash algorithm."
        ::= { nsVpnPhOneEntry 6 }

	nsVpnPhOneLifetime OBJECT-TYPE
        SYNTAX  INTEGER
    	ACCESS  read-only
        STATUS  mandatory
        DESCRIPTION
             "Lifetime of this phase one setting."
        ::= { nsVpnPhOneEntry 7 }

	nsVpnPhOneLifetimeMeasure OBJECT-TYPE
        SYNTAX  INTEGER {
        	second(0),
        	minute(1),
        	hours(2),
        	days(3)
        }
    	ACCESS  read-only
        STATUS  mandatory
        DESCRIPTION
             "life time measurement."
        ::= { nsVpnPhOneEntry 8 }

	nsVpnPhOneVsys OBJECT-TYPE
        SYNTAX  INTEGER
    	ACCESS  read-only
        STATUS  mandatory
        DESCRIPTION
             "vsys this phase one proposal configuration belongs to."
        ::= { nsVpnPhOneEntry 9 }
       
END