CISCO-IPSEC-POLICY-MAP-MIB
The MIB module maps the IPSec
entities created dynamically to the policy entities
that caused them. This is an appendix to the
IPSEC-MONITOR-MIB that has been proposed to
IETF for monitoring IPSec based Virtual Private
Networks.
Overview of Cisco IPsec Policy Map MIB
MIB description
There are two components to this MIB:
#1 a table that maps an IPSec Phase-1
tunnel to the Internet Security Association
and Key Exchange (ISAKMP) Policy
and
#2 a table that maps an IPSec Phase-2
tunnel to the corresponding IPSec Policy
element - called 'cryptomaps' - in IOS
(Internet Operating System)
The first mappin (also called Internet Key Exchange
or IKE mapping) yields, given the index of
the IKE tunnel in the ikeTunnelTable
(IPSEC-MONITOR-MIB), the ISAKMP policy definition
defined using the CLI on the managed entity.
The IPSec mapping yields, given the index
of the IPSec tunnel in the ipSecTunnelTable
(IPSEC-MONITOR-MIB), the IPSec transform and
the cryptomap definition that gave rise to
this tunnel.
In implementation and usage, this MIB cannot
exist independent of the IPSEC-MONITOR-MIB.
- Source file
CISCO-IPSEC-POLICY-MAP-MIB- Last revised
- Identity
ciscoIpSecPolMapMIB- Base OID
1.3.6.1.4.1.9.9.172
Imported Objects
| CISCO-SMI | ciscoMgmt |
| SNMPv2-CONF | MODULE-COMPLIANCE (no object page) OBJECT-GROUP (no object page) |
| SNMPv2-SMI | Integer32 MODULE-IDENTITY (no object page) OBJECT-TYPE (no object page) |
| SNMPv2-TC | DisplayString |
Net-SNMP examples using the cisco MIB directory Show commands
These commands use the standard Observium installation path and load the selected MIB variant before the RFC and Net-SNMP directories.
Translate the module identity
/usr/bin/snmptranslate -Pud -Ir -On -m 'CISCO-IPSEC-POLICY-MAP-MIB' -M '/opt/observium/mibs/cisco:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'CISCO-IPSEC-POLICY-MAP-MIB::ciscoIpSecPolMapMIB'
Walk the MIB subtree
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'CISCO-IPSEC-POLICY-MAP-MIB' -M '/opt/observium/mibs/cisco:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'CISCO-IPSEC-POLICY-MAP-MIB::ciscoIpSecPolMapMIB'
Objects (19)
Showing 19 of 19 objects
Object legend
Object type
Icons distinguish tables, entry rows, columns, scalars, and structural nodes.
SNMPv2-TCTruthValue
Syntax
Blue badges identify the value syntax. Connected badges read as defining module and convention.
IF-MIBifIndex
Table index
Green identifies an index object; yellow names its module when the index is defined elsewhere.
r/w
deprecated
obsolete
Access and status
r/w means read-write. Grey labels mark definitions retained for compatibility.
OBS ✓
Observium use
The indicator appears only when Observium directly references that object.
ifOperStatus
.1.3.6.1.2.1…
Names and OIDs
Object names link to their detail pages. Hover or focus a linked name or badge for available definition details.
.1.3.6.1.4.1.9.9.172 |
||
.1.3.6.1.4.1.9.9.172.1 |
||
.1.3.6.1.4.1.9.9.172.1.1 |
||
.1.3.6.1.4.1.9.9.172.1.1.1 |
||
.1.3.6.1.4.1.9.9.172.1.1.1.1 |
||
|
Integer32
|
.1.3.6.1.4.1.9.9.172.1.1.1.1.1 |
|
|
Integer32
|
.1.3.6.1.4.1.9.9.172.1.1.1.1.2 |
|
.1.3.6.1.4.1.9.9.172.1.2 |
||
.1.3.6.1.4.1.9.9.172.1.2.1 |
||
.1.3.6.1.4.1.9.9.172.1.2.1.1 |
||
|
Integer32
|
.1.3.6.1.4.1.9.9.172.1.2.1.1.1 |
|
.1.3.6.1.4.1.9.9.172.1.2.1.1.2 |
||
|
Integer32
|
.1.3.6.1.4.1.9.9.172.1.2.1.1.3 |
|
.1.3.6.1.4.1.9.9.172.1.2.1.1.4 |
||
.1.3.6.1.4.1.9.9.172.1.2.1.1.5 |
||
.1.3.6.1.4.1.9.9.172.2 |
||
.1.3.6.1.4.1.9.9.172.3 |
||
.1.3.6.1.4.1.9.9.172.3.1 |
||
.1.3.6.1.4.1.9.9.172.3.2 |
Dependencies (4) 4 direct Show tree and compile order Hide dependency details
Each imported module is resolved in the importing module's source directory first, then through the normal default-variant rules.
Dependency tree
Dependency-first compile order
- SNMPv2-SMIrfc
- CISCO-SMIcisco
- SNMPv2-CONFrfc
- SNMPv2-TCrfc
- CISCO-IPSEC-POLICY-MAP-MIBciscoselected
Conformance Groups (2)
|
This group consists of a:
1) IPSec Phase-1 Policy Map Table |
.1.3.6.1.4.1.9.9.172.3.1.1
|
|
|
This group consists of a:
1) IPSec Phase-2 Policy Map Table |
.1.3.6.1.4.1.9.9.172.3.1.2
|
Compliance Statements (1)
OID
.1.3.6.1.4.1.9.9.172.3.2.1The compliance statement for SNMP entities
for IP Security Protocol Tunnels to Policy
definition mappings.
for IP Security Protocol Tunnels to Policy
definition mappings.
Required groups
| mandatory | ipSecPhaseOnePolMapGroup | |
| mandatory | ipSecPhaseTwoPolMapGroup |