Standard view Table view

CISCO-GDOI-MIB

        This MIB module defines objects for managing the GDOI protocol.
        
Copyright (c) The IETF Trust (2010).  This version of this MIB
module is based on RFC 6407; see the RFC itself for full legal
notices.
Source file
CISCO-GDOI-MIB
Last revised
Identity
ciscoGdoiMIB
Base OID
1.3.6.1.4.1.9.9.759
Imported Objects
CISCO-SMI ciscoMgmt
CISCO-TC CiscoMilliSeconds
SNMPv2-CONF MODULE-COMPLIANCE NOTIFICATION-GROUP OBJECT-GROUP
SNMPv2-SMI Counter32 MODULE-IDENTITY NOTIFICATION-TYPE OBJECT-TYPE Unsigned32
SNMPv2-TC DisplayString TEXTUAL-CONVENTION TruthValue
Net-SNMP examples using the cisco MIB directory Show commands

These commands use the standard Observium installation path and load the selected MIB variant before the RFC and Net-SNMP directories.

Translate the module identity
/usr/bin/snmptranslate -Pud -Ir -On -m 'CISCO-GDOI-MIB' -M '/opt/observium/mibs/cisco:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'CISCO-GDOI-MIB::ciscoGdoiMIB'
Walk the MIB subtree
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'CISCO-GDOI-MIB' -M '/opt/observium/mibs/cisco:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'CISCO-GDOI-MIB::ciscoGdoiMIB'
How SNMP, Net-SNMP, MIB paths, and variants work
Objects (0)
Dependencies (5) 5 direct Show tree and compile order Hide dependency details

Each imported module is resolved in the importing module's source directory first, then through the normal default-variant rules.

Dependency tree
Dependency-first compile order
  1. SNMPv2-SMIrfc
  2. CISCO-SMIcisco
  3. SNMPv2-TCrfc
  4. CISCO-TCcisco
  5. SNMPv2-CONFrfc
  6. CISCO-GDOI-MIBciscoselected
Type Definitions (18)
CgmGdoiDiffieHellmanGroup
Enumeration
dhNone(0)
dhGroup1(1)
dhGroup2(2)
dhEc2nGp155(3)
dhEc2nGp185(4)
dh1536Modp(5)
dh2048Modp(14)
dh3072Modp(15)
dh4096Modp(16)
dh6144Modp(17)
dh8192Modp(18)
dhEcp256(19)
dhEcp84(20)
dhEcp521(21)
dh1024Modp160(22)
dh2048Modp224(23)
dh2048Modp256(24)
dhEcp192(25)
dhEcp224(26)
CgmGdoiEncapsulationMode
Enumeration
encapUnknown(0)
encapTunnel(1)
encapTransport(2)
encapUdpTunnel(3)
encapUdpTransport(4)
CgmGdoiEncryptionAlgorithm
Enumeration
encrAlgNone(0)
encrAlgDes64(1)
encrAlgDes(2)
encrAlg3Des(3)
encrAlgRc5(4)
encrAlgIdea(5)
encrAlgCast(6)
encrAlgBlowfish(7)
encrAlg3Idea(8)
encrAlgDes32(9)
encrAlgRc4(10)
encrAlgNull(11)
encrAlgAesCbc(12)
encrAlgAesCtr(13)
encrAlgAesCcm8(14)
encrAlgAesCcm12(15)
encrAlgAesCcm16(16)
encrAlgAesGcm8(18)
encrAlgAesGcm12(19)
encrAlgAesGcm16(20)
encrAlgNullAuthAesGmac(21)
encrAlgCamelliaCbc(23)
encrAlgCamelliaCtr(24)
encrAlgCamelliaCcm8(25)
encrAlgCamelliaCcm12(26)
encrAlgCamelliaCcm1(27)
encrAlgSeedCbc(28)
CgmGdoiIdentificationType
Enumeration
ipv4Address(1)
domainName(2)
userName(3)
ipv4Subnet(4)
ipv6Address(5)
ipv6Subnet(6)
ipv4Range(7)
ipv6Range(8)
caDistinguishedName(9)
caGeneralName(10)
groupNumber(11)
CgmGdoiIdentificationValue
OctetString range: 0..48
CgmGdoiIntegrityAlgorithm
Enumeration
authAlgNone(0)
authAlgMd5Hmac96(1)
authAlgSha1Hmac96(2)
authAlgDesMac(3)
authAlgMd5Kpdk(4)
authAlgAesXcbc96(5)
authAlgMd5Hmac128(6)
authAlgSha1Hmac160(7)
authAlgAesCmac96(8)
authAlgAes128Gmac(9)
authAlgAes192Gmac(10)
authAlgAes256Gmac(11)
authAlgSha2Hmac256to128(12)
authAlgSha2Hmac384to192(13)
authAlgSha2Hmac512to256(14)
CgmGdoiIpProtocolId
Enumeration
ipProtocolUnknown(0)
ipProtocolTCP(1)
ipProtocolUDP(2)
CgmGdoiKekSPI
OctetString range: 16
CgmGdoiKekStatus
Enumeration
inUse(1)
new(2)
old(3)
CgmGdoiKeyManagementAlgorithm
Enumeration
keyMgmtNone(0)
keyMgmtLkh(1)
CgmGdoiKsRole
Enumeration
keyServerPrimary(1)
keyServerSecondary(2)
keyServerUnknown(3)
CgmGdoiKsStatus
Enumeration
keyServerAlive(1)
keyServerDead(2)
keyServerUnknown(3)
CgmGdoiPseudoRandomFunction
Enumeration
prfNone(0)
prfMd5Hmac(1)
prfSha1Hmac(2)
prfTigerHmac(3)
prfAes128Xcbc(4)
prfSha2Hmac256(5)
prfSha2Hmac384(6)
prfSha2Hmac512(7)
prfAes128Cmac(8)
CgmGdoiSecurityProtocol
Enumeration
secProtocolUnknown(0)
secProtocolIpsecEsp(1)
CgmGdoiSignatureMethod
Enumeration
sigNone(0)
sigRsa(1)
sigSharedKey(2)
sigDss(3)
sigEncryptRsa(4)
sigRevEncryptRsa(5)
sigEcdsa256(9)
sigEcdsa384(10)
sigEcdsa512(11)
CgmGdoiTekSPI
OctetString range: 4
CgmGdoiTekStatus
Enumeration
inbound(1)
outbound(2)
notInUse(3)
CgmGdoiUnsigned16
OctetString range: 2
Conformance Groups (17)
cgmGdoiGroupIdGroup
cgmGdoiGroupIdLength cgmGdoiGroupName
This group consists of:
1) GDOI Group Table

cgmGdoiGroupIdGroupRev1 is an extension to this group.
 .1.3.6.1.4.1.9.9.759.2.1.1
cgmGdoiKeyServerGroup
cgmGdoiKeyServerIdLength cgmGdoiKeyServerActiveKEK cgmGdoiKeyServerRekeysPushed
This group consists of:
1) GDOI Key Server Table

cgmGdoiKeyServerGroupRev1 is an extension to this group.
 .1.3.6.1.4.1.9.9.759.2.1.2
cgmGdoiGmGroup
cgmGdoiGmIdLength cgmGdoiGmRegKeyServerIdType cgmGdoiGmRegKeyServerIdLength cgmGdoiGmRegKeyServerIdValue cgmGdoiGmActiveKEK cgmGdoiGmRekeysReceived
This group consists of:
1) GDOI GM Table

cgmGdoiGmGroupRev1 is an extension to this group.
 .1.3.6.1.4.1.9.9.759.2.1.3
cgmGdoiKsSecurityAssociationsGroup
cgmGdoiKsKekSPI cgmGdoiKsKekSrcIdType cgmGdoiKsKekSrcIdLength cgmGdoiKsKekSrcIdValue cgmGdoiKsKekSrcIdPort cgmGdoiKsKekDstIdType cgmGdoiKsKekDstIdLength cgmGdoiKsKekDstIdValue cgmGdoiKsKekDstIdPort cgmGdoiKsKekIpProtocol cgmGdoiKsKekMgmtAlg cgmGdoiKsKekEncryptAlg cgmGdoiKsKekEncryptKeyLength cgmGdoiKsKekSigHashAlg cgmGdoiKsKekSigAlg cgmGdoiKsKekSigKeyLength cgmGdoiKsKekOakleyGroup cgmGdoiKsKekOriginalLifetime cgmGdoiKsKekRemainingLifetime cgmGdoiKsKekStatus cgmGdoiKsTekSrcIdType cgmGdoiKsTekSrcIdLength cgmGdoiKsTekSrcIdValue cgmGdoiKsTekSrcIdPort cgmGdoiKsTekDstIdType cgmGdoiKsTekDstIdLength cgmGdoiKsTekDstIdValue cgmGdoiKsTekDstIdPort cgmGdoiKsTekSecurityProtocol cgmGdoiKsTekSPI cgmGdoiKsTekEncapsulationMode cgmGdoiKsTekEncryptionAlgorithm cgmGdoiKsTekEncryptionKeyLength cgmGdoiKsTekIntegrityAlgorithm cgmGdoiKsTekIntegrityKeyLength cgmGdoiKsTekWindowSize cgmGdoiKsTekOriginalLifetime cgmGdoiKsTekRemainingLifetime cgmGdoiKsTekStatus
This group consists of:
1) GDOI Key Server KEK Policy/SA Table
2) GDOI Key Server TEK Policy Table
 .1.3.6.1.4.1.9.9.759.2.1.4
cgmGdoiGmSecurityAssociationsGroup
cgmGdoiGmKekSPI cgmGdoiGmKekSrcIdType cgmGdoiGmKekSrcIdLength cgmGdoiGmKekSrcIdValue cgmGdoiGmKekSrcIdPort cgmGdoiGmKekDstIdType cgmGdoiGmKekDstIdLength cgmGdoiGmKekDstIdValue cgmGdoiGmKekDstIdPort cgmGdoiGmKekIpProtocol cgmGdoiGmKekMgmtAlg cgmGdoiGmKekEncryptAlg cgmGdoiGmKekEncryptKeyLength cgmGdoiGmKekSigHashAlg cgmGdoiGmKekSigAlg cgmGdoiGmKekSigKeyLength cgmGdoiGmKekOakleyGroup cgmGdoiGmKekOriginalLifetime cgmGdoiGmKekRemainingLifetime cgmGdoiGmKekStatus cgmGdoiGmTekSrcIdType cgmGdoiGmTekSrcIdLength cgmGdoiGmTekSrcIdValue cgmGdoiGmTekSrcIdPort cgmGdoiGmTekDstIdType cgmGdoiGmTekDstIdLength cgmGdoiGmTekDstIdValue cgmGdoiGmTekDstIdPort cgmGdoiGmTekSecurityProtocol cgmGdoiGmTekSPI cgmGdoiGmTekEncapsulationMode cgmGdoiGmTekEncryptionAlgorithm cgmGdoiGmTekEncryptionKeyLength cgmGdoiGmTekIntegrityAlgorithm cgmGdoiGmTekIntegrityKeyLength cgmGdoiGmTekWindowSize cgmGdoiGmTekOriginalLifetime cgmGdoiGmTekRemainingLifetime cgmGdoiGmTekStatus
This group consists of:
1) GDOI Group Member KEK Policy/SA Table
2) GDOI Group Member TEK Policy/SA Table
 .1.3.6.1.4.1.9.9.759.2.1.5
cgmGdoiKeyServerNotificationGroup
cgmGdoiKeyServerNewRegistration cgmGdoiKeyServerRegistrationComplete cgmGdoiKeyServerRekeyPushed
This group contains the Key Server (GCKS) notifications
for the GDOI MIB.

cgmGdoiKeyServerNotificationGroupRev1 is an extension to this
group.
 .1.3.6.1.4.1.9.9.759.2.1.6
cgmGdoiKeyServerErrorNotificationGroup
cgmGdoiKeyServerNoRsaKeys
This group contains the Key Server (GCKS) error notifications
for the GDOI MIB.
 .1.3.6.1.4.1.9.9.759.2.1.7
cgmGdoiGmNotificationGroup
cgmGdoiGmRegister cgmGdoiGmRegistrationComplete cgmGdoiGmReRegister cgmGdoiGmRekeyReceived
This group contains the Group Member (GM) notifications
for the GDOI MIB.
 .1.3.6.1.4.1.9.9.759.2.1.8
cgmGdoiGmErrorNotificationGroup
cgmGdoiGmIncompleteCfg cgmGdoiGmNoIpSecFlows cgmGdoiGmRekeyFailure
This group contains the Group Member (GM) error notifications
for the GDOI MIB.
 .1.3.6.1.4.1.9.9.759.2.1.9
cgmGdoiNotificationControlGroup
cgmGdoiKSNewRegNotifEnable cgmGdoiKSRegCompNotifEnable cgmGdoiKSRekeyPushNotifEnable cgmGdoiKSNoRSANotifEnable cgmGdoiGMRegNotifEnable cgmGdoiGmRegCompNotifEnable cgmGdoiGmReRegNotifEnable cgmGdoiGmRekeyRecNotifEnable cgmGdoiGmIncompCfgNotifEnable cgmGdoiGmNoIpSecFlowsNotifEnable cgmGdoiGmRekeyFailNotifEnable
This group contains the GDOI notification control objects
for the GDOI MIB.

cgmGdoiNotificationControlGroupRev1 is an extension to this
group.
 .1.3.6.1.4.1.9.9.759.2.1.10
cgmGdoiGroupIdGroupRev1
cgmGdoiGroupMemberCount cgmGdoiGroupActivePeerKeyServerCount cgmGdoiGroupLastRekeyRetransmits cgmGdoiGroupLastRekeyTimeTaken
This group consists of:
1) GDOI Group Table

This group is an extension to cgmGdoiGroupIdGroup.
 .1.3.6.1.4.1.9.9.759.2.1.11
cgmGdoiKeyServerGroupRev1
cgmGdoiKeyServerRole cgmGdoiKeyServerRegisteredGMs
This group consists of:
1) GDOI Key Server Table

This group is an extension to cgmGdoiKeyServerGroup.
 .1.3.6.1.4.1.9.9.759.2.1.12
cgmGdoiGmGroupRev1
cgmGdoiGmActiveTEKNum
This group consists of:
1) GDOI GM Table

This group is an extension to cgmGdoiGmGroup.
 .1.3.6.1.4.1.9.9.759.2.1.13
cgmGdoiKeyServerNotificationGroupRev1
cgmGdoiKeyServerRoleChange cgmGdoiKeyServerGmDeleted cgmGdoiKeyServerPeerReachable cgmGdoiKeyServerPeerUnreachable
This group contains the Key Server (GCKS) notifications for the
GDOI MIB.

This group is an extension to
cgmGdoiKeyServerNotificationGroup.
 .1.3.6.1.4.1.9.9.759.2.1.14
cgmGdoiNotificationControlGroupRev1
cgmGdoiKsRoleChangeNotifEnable cgmGdoiKsGmDeletedNotifEnable cgmGdoiKsPeerReachNotifEnable cgmGdoiKsPeerUnreachNotifEnable
This group contains the GDOI notification control objects
for the GDOI MIB.

This group is an extension to cgmGdoiNotificationControlGroup.
 .1.3.6.1.4.1.9.9.759.2.1.15
cgmGdoiCoopPeerGroup
cgmGdoiCoopPeerIdLength cgmGdoiCoopPeerRole cgmGdoiCoopPeerStatus cgmGdoiCoopPeerRegisteredGMs
This group consists of:
1) COOP Peer Key Server Table
 .1.3.6.1.4.1.9.9.759.2.1.16
cgmGdoiNotificationVariablesGroup
cgmGdoiNotifGroupIdType cgmGdoiNotifGroupIdValue cgmGdoiNotifGroupName cgmGdoiNotifKeyServerIdType cgmGdoiNotifKeyServerIdValue cgmGdoiNotifKeyServerRole cgmGdoiNotifGmIdType cgmGdoiNotifGmIdValue cgmGdoiNotifPeerKsIdType cgmGdoiNotifPeerKsIdValue
This group contains the GDOI notification variables for the
GDOI MIB.
 .1.3.6.1.4.1.9.9.759.2.1.17
Compliance Statements (2)

OID .1.3.6.1.4.1.9.9.759.2.2.1
At minimum, only GDOI Group Member functionality is required so
only objects associated with and needed by Group Members are
mandatory to implement. If Key Server functionality is also
implemented, all other objects will need to be implemented as
well.

This group is deprecated and is superseeded by
cgmGdoiMIBCompliance1.
Required groups
mandatory cgmGdoiGroupIdGroup
mandatory cgmGdoiGmSecurityAssociationsGroup
mandatory cgmGdoiGmGroup
optional cgmGdoiKeyServerGroup Implementation of this group is for any network device
that supports being the Group Controller Key Server (GCKS).
optional cgmGdoiKsSecurityAssociationsGroup Implementation of this group is for any network device
that supports being the Group Controller Key Server (GCKS).
optional cgmGdoiKeyServerNotificationGroup Implementation of this group is for any network device
that supports the sending of notifications & being the GCKS.
optional cgmGdoiKeyServerErrorNotificationGroup Implementation of this group is for any network device
that supports the sending of notifications & being the GCKS.
optional cgmGdoiGmNotificationGroup Implementation of this group is for any network device
that supports the sending of notifications.
optional cgmGdoiGmErrorNotificationGroup Implementation of this group is for any network device
that supports the sending of notifications.
optional cgmGdoiNotificationControlGroup Implementation of this group is for any network device
that supports the sending of notifications.

OID .1.3.6.1.4.1.9.9.759.2.2.2
At minimum, only GDOI Group Member functionality is required so
only objects associated with and needed by Group Members are
mandatory to implement. If Key Server functionality is also
implemented, all other objects will need to be implemented as
well.

Updated the conformance group with new MIB Groups and objects
with min-access as read-only.
Required groups
mandatory cgmGdoiGroupIdGroup
mandatory cgmGdoiGroupIdGroupRev1
mandatory cgmGdoiGmSecurityAssociationsGroup
mandatory cgmGdoiGmGroup
mandatory cgmGdoiGmGroupRev1
optional cgmGdoiKeyServerGroup Implementation of this group is for any network device
that supports being the Group Controller Key Server (GCKS).
optional cgmGdoiKeyServerGroupRev1 Implementation of this group is for any network device
that supports being the Group Controller Key Server (GCKS), this
group is an extension of cgmGdoiKeyServerGroup.
optional cgmGdoiKsSecurityAssociationsGroup Implementation of this group is for any network device
that supports being the Group Controller Key Server (GCKS).
optional cgmGdoiKeyServerNotificationGroup Implementation of this group is for any network device that
supports the sending of notifications & being the GCKS.
optional cgmGdoiKeyServerNotificationGroupRev1 Implementation of this group is for any network device that
supports the sending of notifications & being the GCKS, this
group is an extension of cgmGdoiKeyServerNotificationGroup.
optional cgmGdoiKeyServerErrorNotificationGroup Implementation of this group is for any network device
that supports the sending of notifications & being the GCKS.
optional cgmGdoiGmNotificationGroup Implementation of this group is for any network device
that supports the sending of notifications.
optional cgmGdoiGmErrorNotificationGroup Implementation of this group is for any network device
that supports the sending of notifications.
optional cgmGdoiNotificationControlGroup Implementation of this group is for any network device
that supports the sending of notifications.
optional cgmGdoiNotificationControlGroupRev1 Implementation of this group is for any network device
that supports the sending of notifications, this group is an
extension to cgmGdoiNotificationControlGroup.
optional cgmGdoiCoopPeerGroup Implementation of this group is for any network device that
supports the COOP.
optional cgmGdoiNotificationVariablesGroup Implementation of this group is for any network device that
supports the sending of notifications, packed with the
variables defined as a part of the said table.
Object refinements
ObjectAccessSyntaxDescription
cgmGdoiKSNewRegNotifEnable readonly
Write access is not required.
cgmGdoiKSRegCompNotifEnable readonly
Write access is not required.
cgmGdoiKSRekeyPushNotifEnable readonly
Write access is not required.
cgmGdoiKSNoRSANotifEnable readonly
Write access is not required.