ipSecPolMapAceString

CISCO-IPSEC-POLICY-MAP-MIB · .1.3.6.1.4.1.9.9.172.1.2.1.1.5
Commands MIB view Table view

Object

column SNMPv2-TCDisplayString 
The value of this object is the access control 
entry (ACE) within the ACL that caused this IPSec 
tunnel to be established. 
              
For instance, if an ACL defines access for two
traffic streams (FTP and SNMP) as follows:
              
access-list 101 permit tcp 172.16.14.0 0.0.0.255
                 172.16.16.0 0.0.0.255 eq ftp
access-list 101 permit udp 172.16.14.0 0.0.0.255
                 host 172.16.16.1 eq 161
              
              
When associated with an IPSec policy, the second
element of the ACL gives rise to an IPSec tunnel
in the wake of SNMP traffic. The value of the
object 'ipSecPolMapAceString' for the IPSec tunnel
would be then the string
'access-list 101 permit udp 172.16.14.0 0.0.0.255
                 host 172.16.16.1 eq 161'

Context

MIB
CISCO-IPSEC-POLICY-MAP-MIB
OID
.1.3.6.1.4.1.9.9.172.1.2.1.1.5
Type
column
Access
readonly
Status
current
Parent
ipSecPolMapEntry
Groups
1

Net-SNMP examples

How SNMP and these commands work

Walk the column to discover its indexed instances, or supply every index to read one instance.

Walk the column
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'CISCO-IPSEC-POLICY-MAP-MIB' -M '/opt/observium/mibs/cisco:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'CISCO-IPSEC-POLICY-MAP-MIB::ipSecPolMapAceString'
More examples
Read one indexed instance
/usr/bin/snmpget -v2c -c '<community>' -Pud -Ir -OQUv -m 'CISCO-IPSEC-POLICY-MAP-MIB' -M '/opt/observium/mibs/cisco:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'CISCO-IPSEC-POLICY-MAP-MIB::ipSecPolMapAceString.<ipSecPolMapTunIndex>'
Translate to a numeric OID
/usr/bin/snmptranslate -Pud -Ir -On -m 'CISCO-IPSEC-POLICY-MAP-MIB' -M '/opt/observium/mibs/cisco:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'CISCO-IPSEC-POLICY-MAP-MIB::ipSecPolMapAceString'

Syntax

SNMPv2-TCDisplayString
Source
SNMPv2-TCDisplayString
Base type
OctetString
Display format
255a
Type Description
Represents textual information taken from the NVT ASCII
          
character set, as defined in pages 4, 10-11 of RFC 854.
          
To summarize RFC 854, the NVT ASCII repertoire specifies:
          
  - the use of character codes 0-127 (decimal)
          
  - the graphics characters (32-126) are interpreted as
    US ASCII
          
  - NUL, LF, CR, BEL, BS, HT, VT and FF have the special
    meanings specified in RFC 854
          
  - the other 25 codes have no standard interpretation
          
  - the sequence 'CR LF' means newline
          
  - the sequence 'CR NUL' means carriage-return
          
  - an 'LF' not preceded by a 'CR' means moving to the
    same column on the next line.
          
  - the sequence 'CR x' for any x other than LF or NUL is
    illegal.  (Note that this also means that a string may
    end with either 'CR LF' or 'CR NUL', but not with CR.)
          
Any object defined using this syntax may not exceed 255
characters in length.

Values & Constraints

Type Constraints
range: 0..255

Conformance

Member of
ipSecPhaseTwoPolMapGroup