CISCO-IPSEC-POLICY-MAP-MIB

        The MIB module maps the IPSec
entities created dynamically to the policy entities
that caused them. This is an appendix to the
IPSEC-MONITOR-MIB that has been proposed to
IETF for monitoring IPSec based Virtual Private 
Networks.
        
Overview of Cisco IPsec Policy Map MIB
        
MIB description
        
There are two components to this MIB:  
  #1 a table that maps an IPSec Phase-1 
     tunnel to the Internet Security Association 
     and Key Exchange (ISAKMP) Policy 
             
  and 
        
  #2 a table that maps an IPSec Phase-2 
     tunnel to the corresponding IPSec Policy
     element - called 'cryptomaps' - in IOS 
     (Internet Operating System)
        
The first mappin (also called Internet Key Exchange
 or IKE mapping) yields, given the index of
the IKE tunnel in the ikeTunnelTable
(IPSEC-MONITOR-MIB), the ISAKMP policy definition
defined using the CLI on the managed entity.
        
The IPSec mapping yields, given the index
of the IPSec tunnel in the ipSecTunnelTable
(IPSEC-MONITOR-MIB), the IPSec transform and
the cryptomap definition that gave rise to
this tunnel.
        
In implementation and usage, this MIB cannot
exist independent of the IPSEC-MONITOR-MIB. 
    
Source file
CISCO-IPSEC-POLICY-MAP-MIB
Last revised
Identity
ciscoIpSecPolMapMIB
Base OID
1.3.6.1.4.1.9.9.172
Imported Objects
CISCO-SMI ciscoMgmt
SNMPv2-CONF MODULE-COMPLIANCE (no object page) OBJECT-GROUP (no object page)
SNMPv2-SMI Integer32 MODULE-IDENTITY (no object page) OBJECT-TYPE (no object page)
SNMPv2-TC DisplayString
Net-SNMP examples using the cisco MIB directory Show commands

These commands use the standard Observium installation path and load the selected MIB variant before the RFC and Net-SNMP directories.

Translate the module identity
/usr/bin/snmptranslate -Pud -Ir -On -m 'CISCO-IPSEC-POLICY-MAP-MIB' -M '/opt/observium/mibs/cisco:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'CISCO-IPSEC-POLICY-MAP-MIB::ciscoIpSecPolMapMIB'
Walk the MIB subtree
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'CISCO-IPSEC-POLICY-MAP-MIB' -M '/opt/observium/mibs/cisco:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'CISCO-IPSEC-POLICY-MAP-MIB::ciscoIpSecPolMapMIB'
How SNMP, Net-SNMP, MIB paths, and variants work
Objects (19)
.1.3.6.1.4.1.9.9.172
.1.3.6.1.4.1.9.9.172.1
.1.3.6.1.4.1.9.9.172.1.1
.1.3.6.1.4.1.9.9.172.1.1.1
.1.3.6.1.4.1.9.9.172.1.1.1.1
Integer32
.1.3.6.1.4.1.9.9.172.1.1.1.1.1
Integer32
.1.3.6.1.4.1.9.9.172.1.1.1.1.2
.1.3.6.1.4.1.9.9.172.1.2
.1.3.6.1.4.1.9.9.172.1.2.1
.1.3.6.1.4.1.9.9.172.1.2.1.1
Integer32
.1.3.6.1.4.1.9.9.172.1.2.1.1.1
.1.3.6.1.4.1.9.9.172.1.2.1.1.2
Integer32
.1.3.6.1.4.1.9.9.172.1.2.1.1.3
.1.3.6.1.4.1.9.9.172.1.2.1.1.4
.1.3.6.1.4.1.9.9.172.1.2.1.1.5
.1.3.6.1.4.1.9.9.172.2
.1.3.6.1.4.1.9.9.172.3
.1.3.6.1.4.1.9.9.172.3.1
.1.3.6.1.4.1.9.9.172.3.2
Dependencies (4) 4 direct Show tree and compile order Hide dependency details

Each imported module is resolved in the importing module's source directory first, then through the normal default-variant rules.

Dependency tree
Dependency-first compile order
  1. SNMPv2-SMIrfc
  2. CISCO-SMIcisco
  3. SNMPv2-CONFrfc
  4. SNMPv2-TCrfc
  5. CISCO-IPSEC-POLICY-MAP-MIBciscoselected
Conformance Groups (2)
This group consists of a:
1) IPSec Phase-1 Policy Map Table
.1.3.6.1.4.1.9.9.172.3.1.1
This group consists of a:
1) IPSec Phase-2 Policy Map Table
.1.3.6.1.4.1.9.9.172.3.1.2
Compliance Statements (1)

OID .1.3.6.1.4.1.9.9.172.3.2.1
The compliance statement for SNMP entities
for IP Security Protocol Tunnels to Policy
definition mappings.
Required groups