Standard view Table view

CISCO-IPSEC-MIB

        The MIB module for modeling Cisco-specific 
IPsec attributes
        
Overview of Cisco IPsec MIB
        
MIB description
        
This MIB models the Cisco implementation-specific 
attributes of a Cisco entity that implements IPsec. 
This MIB is complementary to the standard IPsec MIB 
proposed jointly by Tivoli and Cisco.
        
The ciscoIPsec MIB provides the operational information 
on Cisco's IPsec tunnelling implementation.  
The following entities are managed:
1) ISAKMP Group:
a) ISAKMP global parameters
b) ISAKMP Policy Table
        
2) IPSec Group:
a) IPSec Global Parameters
b) IPSec Global Traffic Parameters
c) Cryptomap Group
- Cryptomap Set Table
- Cryptomap Table
- CryptomapSet Binding Table
        
3) System Capacity & Capability Group:
a) Capacity Parameters
b) Capability Parameters
        
4) Trap Control Group
5) Notifications Group
Source file
CISCO-IPSEC-MIB
Last revised
Identity
ciscoIPsecMIB
Base OID
1.3.6.1.4.1.9.10.62
Imported Objects
CISCO-SMI ciscoExperiment
IF-MIB ifIndex
SNMPv2-CONF MODULE-COMPLIANCE OBJECT-GROUP
SNMPv2-SMI Counter32 Gauge32 Integer32 MODULE-IDENTITY NOTIFICATION-TYPE OBJECT-TYPE
SNMPv2-TC DisplayString TEXTUAL-CONVENTION TruthValue
Net-SNMP examples using the cisco MIB directory Show commands

These commands use the standard Observium installation path and load the selected MIB variant before the RFC and Net-SNMP directories.

Translate the module identity
/usr/bin/snmptranslate -Pud -Ir -On -m 'CISCO-IPSEC-MIB' -M '/opt/observium/mibs/cisco:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'CISCO-IPSEC-MIB::ciscoIPsecMIB'
Walk the MIB subtree
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'CISCO-IPSEC-MIB' -M '/opt/observium/mibs/cisco:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'CISCO-IPSEC-MIB::ciscoIPsecMIB'
How SNMP, Net-SNMP, MIB paths, and variants work
Objects (74)
ciscoIPsecMIB
.1.3.6.1.4.1.9.10.62
ciscoIPsecMIBObjects
.1.3.6.1.4.1.9.10.62.1
cipsIsakmpGroup
.1.3.6.1.4.1.9.10.62.1.1
cipsIsakmpEnabled
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.10.62.1.1.1
cipsIsakmpIdentity
IkeIdentityType
 .1.3.6.1.4.1.9.10.62.1.1.2
cipsIsakmpKeepaliveInterval
secondsInteger32
 .1.3.6.1.4.1.9.10.62.1.1.3
cipsNumIsakmpPolicies
Integer32
 .1.3.6.1.4.1.9.10.62.1.1.4
cipsIsakmpPolicyTable
.1.3.6.1.4.1.9.10.62.1.1.5
cipsIsakmpPolicyEntry
cipsIsakmpPolPriority
 .1.3.6.1.4.1.9.10.62.1.1.5.1
cipsIsakmpPolPriority
Integer32
 .1.3.6.1.4.1.9.10.62.1.1.5.1.1
cipsIsakmpPolEncr
EncryptAlgo
 .1.3.6.1.4.1.9.10.62.1.1.5.1.2
cipsIsakmpPolHash
IkeHashAlgo
 .1.3.6.1.4.1.9.10.62.1.1.5.1.3
cipsIsakmpPolAuth
IkeAuthMethod
 .1.3.6.1.4.1.9.10.62.1.1.5.1.4
cipsIsakmpPolGroup
DiffHellmanGrp
 .1.3.6.1.4.1.9.10.62.1.1.5.1.5
cipsIsakmpPolLifetime
secondsInteger32
 .1.3.6.1.4.1.9.10.62.1.1.5.1.6
cipsIPsecGroup
.1.3.6.1.4.1.9.10.62.1.2
cipsIPsecGlobals
.1.3.6.1.4.1.9.10.62.1.2.1
cipsSALifetime
SecondsCIPsecLifetime
 .1.3.6.1.4.1.9.10.62.1.2.1.1
cipsSALifesize
KBytesCIPsecLifesize
 .1.3.6.1.4.1.9.10.62.1.2.1.2
cipsNumStaticCryptomapSets
Integral UnitsCIPsecNumCryptoMaps
 .1.3.6.1.4.1.9.10.62.1.2.1.3
cipsNumCETCryptomapSets
Integral UnitsCIPsecNumCryptoMaps
 .1.3.6.1.4.1.9.10.62.1.2.1.4
cipsNumDynamicCryptomapSets
Integral UnitsCIPsecNumCryptoMaps
 .1.3.6.1.4.1.9.10.62.1.2.1.5
cipsNumTEDCryptomapSets
Integral UnitsCIPsecNumCryptoMaps
 .1.3.6.1.4.1.9.10.62.1.2.1.6
cipsIPsecStatistics
.1.3.6.1.4.1.9.10.62.1.2.2
cipsNumTEDProbesReceived
Integral UnitsSNMPv2-SMICounter32
 .1.3.6.1.4.1.9.10.62.1.2.2.1
cipsNumTEDProbesSent
Integral UnitsSNMPv2-SMICounter32
 .1.3.6.1.4.1.9.10.62.1.2.2.2
cipsNumTEDFailures
Integral UnitsSNMPv2-SMICounter32
 .1.3.6.1.4.1.9.10.62.1.2.2.3
cipsCryptomapGroup
.1.3.6.1.4.1.9.10.62.1.2.3
cipsStaticCryptomapSetTable
.1.3.6.1.4.1.9.10.62.1.2.3.1
cipsStaticCryptomapSetEntry
cipsStaticCryptomapSetName
 .1.3.6.1.4.1.9.10.62.1.2.3.1.1
cipsStaticCryptomapSetName
SNMPv2-TCDisplayString
 .1.3.6.1.4.1.9.10.62.1.2.3.1.1.1
cipsStaticCryptomapSetSize
SNMPv2-SMIGauge32
 .1.3.6.1.4.1.9.10.62.1.2.3.1.1.2
cipsStaticCryptomapSetNumIsakmp
SNMPv2-SMIGauge32
 .1.3.6.1.4.1.9.10.62.1.2.3.1.1.3
cipsStaticCryptomapSetNumManual
SNMPv2-SMIGauge32
 .1.3.6.1.4.1.9.10.62.1.2.3.1.1.4
cipsStaticCryptomapSetNumCET
SNMPv2-SMIGauge32
 .1.3.6.1.4.1.9.10.62.1.2.3.1.1.5
cipsStaticCryptomapSetNumDynamic
SNMPv2-SMIGauge32
 .1.3.6.1.4.1.9.10.62.1.2.3.1.1.6
cipsStaticCryptomapSetNumDisc
SNMPv2-SMIGauge32
 .1.3.6.1.4.1.9.10.62.1.2.3.1.1.7
cipsStaticCryptomapSetNumSAs
SNMPv2-SMIGauge32
 .1.3.6.1.4.1.9.10.62.1.2.3.1.1.8
cipsDynamicCryptomapSetTable
.1.3.6.1.4.1.9.10.62.1.2.3.2
cipsDynamicCryptomapSetEntry
cipsDynamicCryptomapSetName
 .1.3.6.1.4.1.9.10.62.1.2.3.2.1
cipsDynamicCryptomapSetName
SNMPv2-TCDisplayString
 .1.3.6.1.4.1.9.10.62.1.2.3.2.1.1
cipsDynamicCryptomapSetSize
SNMPv2-SMIGauge32
 .1.3.6.1.4.1.9.10.62.1.2.3.2.1.2
cipsDynamicCryptomapSetNumAssoc
SNMPv2-SMIGauge32
 .1.3.6.1.4.1.9.10.62.1.2.3.2.1.3
cipsStaticCryptomapTable
.1.3.6.1.4.1.9.10.62.1.2.3.3
cipsStaticCryptomapEntry
cipsStaticCryptomapSetNamecipsStaticCryptomapPriority
 .1.3.6.1.4.1.9.10.62.1.2.3.3.1
cipsStaticCryptomapPriority
Integer32
 .1.3.6.1.4.1.9.10.62.1.2.3.3.1.1
cipsStaticCryptomapType
CryptomapType
 .1.3.6.1.4.1.9.10.62.1.2.3.3.1.2
cipsStaticCryptomapDescr
SNMPv2-TCDisplayString
 .1.3.6.1.4.1.9.10.62.1.2.3.3.1.3
cipsStaticCryptomapPeer
IPSIpAddress
 .1.3.6.1.4.1.9.10.62.1.2.3.3.1.4
cipsStaticCryptomapNumPeers
Integer32
 .1.3.6.1.4.1.9.10.62.1.2.3.3.1.5
cipsStaticCryptomapPfs
DiffHellmanGrp
 .1.3.6.1.4.1.9.10.62.1.2.3.3.1.6
cipsStaticCryptomapLifetime
Integer32
 .1.3.6.1.4.1.9.10.62.1.2.3.3.1.7
cipsStaticCryptomapLifesize
Integer32
 .1.3.6.1.4.1.9.10.62.1.2.3.3.1.8
cipsStaticCryptomapLevelHost
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.10.62.1.2.3.3.1.9
cipsCryptomapSetIfTable
.1.3.6.1.4.1.9.10.62.1.2.3.4
cipsCryptomapSetIfEntry
IF-MIBifIndexcipsStaticCryptomapSetName
 .1.3.6.1.4.1.9.10.62.1.2.3.4.1
cipsCryptomapSetIfVirtual
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.10.62.1.2.3.4.1.1
cipsCryptomapSetIfStatus r/w
CryptomapSetBindStatus
 .1.3.6.1.4.1.9.10.62.1.2.3.4.1.2
cipsSysCapacityGroup
.1.3.6.1.4.1.9.10.62.1.3
cipsMaxSAs
Integral UnitsInteger32
 .1.3.6.1.4.1.9.10.62.1.3.1
cips3DesCapable
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.10.62.1.3.2
cipsTrapCntlGroup
.1.3.6.1.4.1.9.10.62.1.4
cipsCntlIsakmpPolicyAdded r/w
TrapStatus
 .1.3.6.1.4.1.9.10.62.1.4.1
cipsCntlIsakmpPolicyDeleted r/w
TrapStatus
 .1.3.6.1.4.1.9.10.62.1.4.2
cipsCntlCryptomapAdded r/w
TrapStatus
 .1.3.6.1.4.1.9.10.62.1.4.3
cipsCntlCryptomapDeleted r/w
TrapStatus
 .1.3.6.1.4.1.9.10.62.1.4.4
cipsCntlCryptomapSetAttached r/w
TrapStatus
 .1.3.6.1.4.1.9.10.62.1.4.5
cipsCntlCryptomapSetDetached r/w
TrapStatus
 .1.3.6.1.4.1.9.10.62.1.4.6
cipsCntlTooManySAs r/w
TrapStatus
 .1.3.6.1.4.1.9.10.62.1.4.7
ciscoIPsecMIBNotificationPrefix
.1.3.6.1.4.1.9.10.62.2
cipsMIBNotifications
.1.3.6.1.4.1.9.10.62.2.0
ciscoIPsecMIBConformance
.1.3.6.1.4.1.9.10.62.3
cipsMIBConformances
.1.3.6.1.4.1.9.10.62.3.1
cipsMIBGroups
.1.3.6.1.4.1.9.10.62.3.2
Dependencies (7) 5 direct · 2 transitive Show tree and compile order Hide dependency details

Each imported module is resolved in the importing module's source directory first, then through the normal default-variant rules.

Dependency tree
Dependency-first compile order
  1. SNMPv2-SMIrfc
  2. CISCO-SMIcisco
  3. SNMPv2-TCrfc
  4. IANAifType-MIBrfc
  5. SNMPv2-CONFrfc
  6. SNMPv2-MIBrfc
  7. IF-MIBrfc
  8. CISCO-IPSEC-MIBciscoselected
Type Definitions (12)
CIPsecLifesize
Unsigned32 range: 2560..536870912
CIPsecLifetime
Unsigned32 range: 120..86400
CIPsecNumCryptoMaps
Unsigned32 range: 0..2147483647
CryptomapSetBindStatus
Enumeration
unknown(0)
attached(1)
detached(2)
CryptomapType
Enumeration
cryptomapTypeNONE(0)
cryptomapTypeMANUAL(1)
cryptomapTypeISAKMP(2)
cryptomapTypeCET(3)
cryptomapTypeDYNAMIC(4)
cryptomapTypeDYNAMICDISCOVERY(5)
DiffHellmanGrp
Enumeration
none(1)
dhGroup1(2)
dhGroup2(3)
EncryptAlgo
Enumeration
none(1)
des(2)
des3(3)
IPSIpAddress
OctetString range: 4range: 16
IkeAuthMethod
Enumeration
none(1)
preSharedKey(2)
rsaSig(3)
rsaEncrypt(4)
revPublicKey(5)
IkeHashAlgo
Enumeration
none(1)
md5(2)
sha(3)
IkeIdentityType
Enumeration
isakmpIdTypeUNKNOWN(0)
isakmpIdTypeADDRESS(1)
isakmpIdTypeHOSTNAME(2)
TrapStatus
Enumeration
enabled(1)
disabled(2)
Conformance Groups (7)
cipsMIBConfIsakmpGroup
cipsIsakmpEnabled cipsIsakmpIdentity cipsIsakmpKeepaliveInterval cipsNumIsakmpPolicies
A collection of objects providing Global
ISAKMP policy monitoring capability to a
Cisco IPsec capable VPN router.
 .1.3.6.1.4.1.9.10.62.3.2.1
cipsMIBConfIPSecGlobalsGroup
cipsSALifetime cipsSALifesize
A collection of objects providing Global
IPSec policy monitoring capability to a
Cisco IPsec capable VPN router.
 .1.3.6.1.4.1.9.10.62.3.2.2
cipsMIBConfCapacityGroup
cipsMaxSAs cips3DesCapable
A collection of objects providing IPsec
System Capacity monitoring capability to
a Cisco IPsec capable VPN router.
 .1.3.6.1.4.1.9.10.62.3.2.3
cipsMIBStaticCryptomapGroup
cipsStaticCryptomapSetSize cipsStaticCryptomapSetNumIsakmp cipsStaticCryptomapSetNumCET cipsStaticCryptomapSetNumSAs
A collection of objects instrumenting
the properties of the Static (fully specified)
Cryptomap Sets on an IPsec-capable
IOS router.
 .1.3.6.1.4.1.9.10.62.3.2.4
cipsMIBManualCryptomapGroup
cipsStaticCryptomapSetNumManual
A collection of objects instrumenting
the properties of the Manual Cryptomap entries
on a Cisco IPsec capable IOS router.
 .1.3.6.1.4.1.9.10.62.3.2.5
cipsMIBDynamicCryptomapGroup
cipsNumTEDProbesReceived cipsNumTEDProbesSent cipsNumTEDFailures cipsStaticCryptomapSetNumDynamic cipsStaticCryptomapSetNumDisc cipsNumTEDCryptomapSets cipsDynamicCryptomapSetSize cipsDynamicCryptomapSetNumAssoc
A collection of objects instrumenting
the properties of the Dynamic Cryptomap group
on a Cisco IPsec capable IOS router.
 .1.3.6.1.4.1.9.10.62.3.2.6
cipsMIBMandatoryNotifCntlGroup
cipsCntlIsakmpPolicyAdded cipsCntlIsakmpPolicyDeleted cipsCntlCryptomapAdded cipsCntlCryptomapDeleted cipsCntlCryptomapSetAttached cipsCntlCryptomapSetDetached cipsCntlTooManySAs
A collection of objects providing IPsec
Notification capability to a IPsec-capable
IOS router. It is mandatory to implement
this set of objects pertaining to
IOS notifications about IPSec activity.
 .1.3.6.1.4.1.9.10.62.3.2.7
Compliance Statements (1)

OID .1.3.6.1.4.1.9.10.62.3.1.1
The compliance statement for entities which
implement the Cisco IPsec MIB
Required groups
mandatory cipsMIBConfIsakmpGroup
mandatory cipsMIBConfIPSecGlobalsGroup
mandatory cipsMIBConfCapacityGroup
mandatory cipsMIBStaticCryptomapGroup
mandatory cipsMIBMandatoryNotifCntlGroup
Object refinements
ObjectAccessSyntaxDescription
cipsCntlIsakmpPolicyAdded readonly
Write access is not required.
cipsCntlIsakmpPolicyDeleted readonly
Write access is not required.
cipsCntlCryptomapAdded readonly
Write access is not required.
cipsCntlCryptomapDeleted readonly
Write access is not required.
cipsCntlCryptomapSetAttached readonly
Write access is not required.
cipsCntlCryptomapSetDetached readonly
Write access is not required.
cipsCntlTooManySAs readonly
Write access is not required.
Notifications / Traps (7)
NameOIDDescription
cipsIsakmpPolicyAdded
cipsNumIsakmpPolicies
.1.3.6.1.4.1.9.10.62.2.0.1
This trap is generated when a new ISAKMP
policy element is defined on the managed entity.
The context of the event includes the updated
number of ISAKMP policy elements currently available.
cipsIsakmpPolicyDeleted
cipsNumIsakmpPolicies
.1.3.6.1.4.1.9.10.62.2.0.2
This trap is generated when an existing ISAKMP
policy element is deleted on the managed entity.
The context of the event includes the updated
number of ISAKMP policy elements currently available.
cipsCryptomapAdded
cipsStaticCryptomapType cipsStaticCryptomapSetSize
.1.3.6.1.4.1.9.10.62.2.0.3
This trap is generated when a new cryptomap is
added to the specified cryptomap set.
cipsCryptomapDeleted
cipsStaticCryptomapSetSize
.1.3.6.1.4.1.9.10.62.2.0.4
This trap is generated when a cryptomap is
removed from the specified cryptomap set.
cipsCryptomapSetAttached
cipsStaticCryptomapSetSize cipsStaticCryptomapSetNumIsakmp cipsStaticCryptomapSetNumDynamic
.1.3.6.1.4.1.9.10.62.2.0.5
A cryptomap set must be attached to an interface
of the device in order for it to be operational.
This trap is generated when the cryptomap set
attached to an active interface of the managed entity.

The context of the notification includes:
Size of the attached cryptomap set,
Number of ISAKMP cryptomaps in the set and
Number of Dynamic cryptomaps in the set.
cipsCryptomapSetDetached
cipsStaticCryptomapSetSize
.1.3.6.1.4.1.9.10.62.2.0.6
This trap is generated when a cryptomap set is
detached from an interafce to which it was
bound earlier. The context of the event identifies the
size of the cryptomap set.
cipsTooManySAs
cipsMaxSAs
.1.3.6.1.4.1.9.10.62.2.0.7
This trap is generated when a new SA is attempted
to be setup while the number of currently active SAs
equals the maximum configurable. The variables are:
cipsMaxSAs