cipsIsakmpEnabled
1.3.6.1.4.1.9.10.62.1.1.1
TruthValue1 = true2 = falseRepresents a boolean value. · Integer32
The value of this object is TRUE if ISAKMP has been enabled on the managed entity. Otherise the value of this object is FALSE.
CISCO-IPSEC-MIB
2000-08-07
The MIB module for modeling Cisco-specific IPsec attributes Overview of Cisco IPsec MIB MIB description This MIB models the Cisco implementation-specific attributes of a Cisco entity that implements IPsec. This MIB is complementary to the standard IPsec MIB proposed jointly by Tivoli and Cisco. The ciscoIPsec MIB provides the operational information on Cisco's IPsec tunnelling implementation. The following entities are managed: 1) ISAKMP Group: a) ISAKMP global parameters b) ISAKMP Policy Table 2) IPSec Group: a) IPSec Global Parameters b) IPSec Global Traffic Parameters c) Cryptomap Group - Cryptomap Set Table - Cryptomap Table - CryptomapSet Binding Table 3) System Capacity & Capability Group: a) Capacity Parameters b) Capability Parameters 4) Trap Control Group 5) Notifications Group
Download CISCO-IPSEC-MIB.txt Open CISCO-IPSEC-MIB.txt in a new tab
SCALARS (22) · TABLES (5) · TRAPS (7)
Scalars (22)
Tables (5)
Traps (7)
END OF TOC
Scalar details
cipsIsakmpIdentity
1.3.6.1.4.1.9.10.62.1.1.2
IkeIdentityType0 = isakmpIdTypeUNKNOWN1 = isakmpIdTypeADDRESS2 = isakmpIdTypeHOSTNAMEThe type of identity used by the local entity to identity itself to the peer with which it performs IPSec Main Mode negotiations. This type decides the content of the Identification payload in the Main Mode of IPSec tunnel setup. · Integer32
The value of this object is shows the type of identity used by the managed entity in ISAKMP negotiations with another peer.
cipsIsakmpKeepaliveInterval
1.3.6.1.4.1.9.10.62.1.1.3
Integer32 (10..3600) · seconds
The value of this object is time interval in seconds between successive ISAKMP keepalive heartbeats issued to the peers to which IKE tunnels have been setup.
cipsNumIsakmpPolicies
1.3.6.1.4.1.9.10.62.1.1.4
Integer32 (1..2147483647)
The value of this object is the number of ISAKMP policies that have been configured on the managed entity.
cipsSALifetime
1.3.6.1.4.1.9.10.62.1.2.1.1
CIPsecLifetimeValue in units of seconds (120..86400) · Gauge32 · Seconds
The default lifetime (in seconds) assigned to an SA as a global policy (maybe overridden in specific cryptomap definitions).
cipsSALifesize
1.3.6.1.4.1.9.10.62.1.2.1.2
CIPsecLifesizeValue in units of kilobytes (2560..536870912) · Gauge32 · KBytes
The default lifesize in KBytes assigned to an SA as a global policy (unless overridden in cryptomap definition)
cipsNumStaticCryptomapSets
1.3.6.1.4.1.9.10.62.1.2.1.3
CIPsecNumCryptoMapsIntegral units representing count of cryptomaps (0..2147483647) · Gauge32 · Integral Units
The number of Cryptomap Sets that are are fully configured. Statically defined cryptomap sets are ones where the operator has fully specified all the parameters required set up IPSec Virtual Private Networks (VPNs).
cipsNumCETCryptomapSets
1.3.6.1.4.1.9.10.62.1.2.1.4
CIPsecNumCryptoMapsIntegral units representing count of cryptomaps (0..2147483647) · Gauge32 · Integral Units
The number of static Cryptomap Sets that have at least one CET cryptomap element as a member of the set.
cipsNumDynamicCryptomapSets
1.3.6.1.4.1.9.10.62.1.2.1.5
CIPsecNumCryptoMapsIntegral units representing count of cryptomaps (0..2147483647) · Gauge32 · Integral Units
The number of dynamic IPSec Policy templates (called 'dynamic cryptomap templates') configured on the managed entity.
cipsNumTEDCryptomapSets
1.3.6.1.4.1.9.10.62.1.2.1.6
CIPsecNumCryptoMapsIntegral units representing count of cryptomaps (0..2147483647) · Gauge32 · Integral Units
The number of static Cryptomap Sets that have at least one dynamic cryptomap template bound to them which has the Tunnel Endpoint Discovery (TED) enabled.
cipsNumTEDProbesReceived
1.3.6.1.4.1.9.10.62.1.2.2.1
Counter32 · Integral Units
The number of TED probes that were received by this managed entity since bootup. Not affected by any CLI operation.
cipsNumTEDProbesSent
1.3.6.1.4.1.9.10.62.1.2.2.2
Counter32 · Integral Units
The number of TED probes that were dispatched by all the dynamic cryptomaps in this managed entity since bootup. Not affected by any CLI operation.
cipsNumTEDFailures
1.3.6.1.4.1.9.10.62.1.2.2.3
Counter32 · Integral Units
The number of TED probes that were dispatched by the local entity and that failed to locate crypto endpoint. Not affected by any CLI operation.
cipsMaxSAs
1.3.6.1.4.1.9.10.62.1.3.1
INTEGER (0..65535) · Integer32 · Integral Units
The maximum number of IPsec Security Associations that can be established on this managed entity. If no theoretical limit exists, this returns value 0. Not affected by any CLI operation.
cips3DesCapable
1.3.6.1.4.1.9.10.62.1.3.2
TruthValue1 = true2 = falseRepresents a boolean value. · Integer32
The value of this object is TRUE if the managed entity has the hardware nad software features to support 3DES encryption algorithm. Not affected by any CLI operation.
cipsCntlIsakmpPolicyAdded
1.3.6.1.4.1.9.10.62.1.4.1
TrapStatus1 = enabled2 = disabledThe administrative status for sending a TRAP. · Integer32
This object defines the administrative state of sending the IOS IPsec ISAKMP Policy Add trap.
cipsCntlIsakmpPolicyDeleted
1.3.6.1.4.1.9.10.62.1.4.2
TrapStatus1 = enabled2 = disabledThe administrative status for sending a TRAP. · Integer32
This object defines the administrative state of sending the IOS IPsec ISAKMP Policy Delete trap.
cipsCntlCryptomapAdded
1.3.6.1.4.1.9.10.62.1.4.3
TrapStatus1 = enabled2 = disabledThe administrative status for sending a TRAP. · Integer32
This object defines the administrative state of sending the IOS IPsec Cryptomap Add trap.
cipsCntlCryptomapDeleted
1.3.6.1.4.1.9.10.62.1.4.4
TrapStatus1 = enabled2 = disabledThe administrative status for sending a TRAP. · Integer32
This object defines the administrative state of sending the IOS IPsec Cryptomap Delete trap.
cipsCntlCryptomapSetAttached
1.3.6.1.4.1.9.10.62.1.4.5
TrapStatus1 = enabled2 = disabledThe administrative status for sending a TRAP. · Integer32
This object defines the administrative state of sending the IOS IPsec trap that is issued when a cryptomap set is attached to an interface.
cipsCntlCryptomapSetDetached
1.3.6.1.4.1.9.10.62.1.4.6
TrapStatus1 = enabled2 = disabledThe administrative status for sending a TRAP. · Integer32
This object defines the administrative state of sending the IOS IPsec trap that is issued when a cryptomap set is detached from an interface. to which it was earlier bound.
cipsCntlTooManySAs
1.3.6.1.4.1.9.10.62.1.4.7
TrapStatus1 = enabled2 = disabledThe administrative status for sending a TRAP. · Integer32
This object defines the administrative state of sending the IOS IPsec trap that is issued when the number of SAs crosses the maximum number of SAs that may be supported on the managed entity.
Table details
cipsIsakmpPolicyTable
1.3.6.1.4.1.9.10.62.1.1.5
Index: cipsIsakmpPolPriority
The table containing the list of all ISAKMP policy entries configured by the operator.
cipsIsakmpPolPriority
1.3.6.1.4.1.9.10.62.1.1.5.1.1
Integer32 (0..65535)
The priotity of this ISAKMP Policy entry. This is also the index of this table.
cipsIsakmpPolEncr
1.3.6.1.4.1.9.10.62.1.1.5.1.2
EncryptAlgo1 = none2 = des3 = des3The encryption algorithm used in negotiations. · Integer32
The encryption transform specified by this ISAKMP policy specification. The Internet Key Exchange (IKE) tunnels setup using this policy item would use the specified encryption transform to protect the ISAKMP PDUs.
cipsIsakmpPolHash
1.3.6.1.4.1.9.10.62.1.1.5.1.3
IkeHashAlgo1 = none2 = md53 = shaThe hash algorithm used in IPsec Phase-1 IKE negotiations. · Integer32
The hash transform specified by this ISAKMP policy specification. The IKE tunnels setup using this policy item would use the specified hash transform to protect the ISAKMP PDUs.
cipsIsakmpPolAuth
1.3.6.1.4.1.9.10.62.1.1.5.1.4
IkeAuthMethod1 = none2 = preSharedKey3 = rsaSig4 = rsaEncrypt5 = revPublicKeyThe authentication method used in IPsec Phase-1 IKE negotiations. · Integer32
The peer authentication mthod specified by this ISAKMP policy specification. If this policy entity is selected for negotiation with a peer, the local entity would authenticate the peer using the method specified by this object.
cipsIsakmpPolGroup
1.3.6.1.4.1.9.10.62.1.1.5.1.5
DiffHellmanGrp1 = none2 = dhGroup13 = dhGroup2The Diffie Hellman Group used in negotiations. · Integer32
This object specifies the Oakley group used for Diffie Hellman exchange in the Main Mode. If this policy item is selected to negotiate Main Mode with an IKE peer, the local entity chooses the group specified by this object to perform Diffie Hellman exchange with the peer.
cipsIsakmpPolLifetime
1.3.6.1.4.1.9.10.62.1.1.5.1.6
Integer32 (60..86400) · seconds
This object specifies the lifetime in seconds of the IKE tunnels generated using this policy specification.
cipsStaticCryptomapSetTable
1.3.6.1.4.1.9.10.62.1.2.3.1
Index: cipsStaticCryptomapSetName
The table containing the list of all cryptomap sets that are fully specified and are not wild-carded. The operator may include different types of cryptomaps in such a set - manual, CET, ISAKMP or dynamic.
cipsStaticCryptomapSetName
1.3.6.1.4.1.9.10.62.1.2.3.1.1.1
DisplayStringRepresents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of character codes 0-127 (decimal) - the graphics characters (32-126) are interpreted as US ASCII - NUL, LF, CR, BEL, BS, HT, VT and FF have the special meanings specified in RFC 854 - the other 25 codes have no standard interpretation - the sequence 'CR LF' means newline - the sequence 'CR NUL' means carriage-return - an 'LF' not preceded by a 'CR' means moving to the same column on the next line. - the sequence 'CR x' for any x other than LF or NUL is illegal. (Note that this also means that a string may end with either 'CR LF' or 'CR NUL', but not with CR.) Any object defined using this syntax may not exceed 255 characters in length. SIZE (0..255) · OCTET STRING · hint 255a
The index of the static cryptomap table. The value of the string is the name string assigned by the operator in defining the cryptomap set.
cipsStaticCryptomapSetSize
1.3.6.1.4.1.9.10.62.1.2.3.1.1.2
Gauge32
The total number of cryptomap entries contained in this cryptomap set.
cipsStaticCryptomapSetNumIsakmp
1.3.6.1.4.1.9.10.62.1.2.3.1.1.3
Gauge32
The number of cryptomaps associated with this cryptomap set that use ISAKMP protocol to do key exchange.
cipsStaticCryptomapSetNumManual
1.3.6.1.4.1.9.10.62.1.2.3.1.1.4
Gauge32
The number of cryptomaps associated with this cryptomap set that require the operator to manually setup the keys and SPIs.
cipsStaticCryptomapSetNumCET
1.3.6.1.4.1.9.10.62.1.2.3.1.1.5
Gauge32
The number of cryptomaps of type 'ipsec-cisco' associated with this cryptomap set. Such cryptomap elements implement Cisco Encryption Technology based Virtual Private Networks.
cipsStaticCryptomapSetNumDynamic
1.3.6.1.4.1.9.10.62.1.2.3.1.1.6
Gauge32
The number of dynamic cryptomap templates linked to this cryptomap set.
cipsStaticCryptomapSetNumDisc
1.3.6.1.4.1.9.10.62.1.2.3.1.1.7
Gauge32
The number of dynamic cryptomap templates linked to this cryptomap set that have Tunnel Endpoint Discovery (TED) enabled.
cipsStaticCryptomapSetNumSAs
1.3.6.1.4.1.9.10.62.1.2.3.1.1.8
Gauge32
The number of and IPsec Security Associations that are active and were setup using this cryptomap.
cipsDynamicCryptomapSetTable
1.3.6.1.4.1.9.10.62.1.2.3.2
Index: cipsDynamicCryptomapSetName
The table containing the list of all dynamic cryptomaps that use IKE, defined on the managed entity.
cipsDynamicCryptomapSetName
1.3.6.1.4.1.9.10.62.1.2.3.2.1.1
DisplayStringRepresents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of character codes 0-127 (decimal) - the graphics characters (32-126) are interpreted as US ASCII - NUL, LF, CR, BEL, BS, HT, VT and FF have the special meanings specified in RFC 854 - the other 25 codes have no standard interpretation - the sequence 'CR LF' means newline - the sequence 'CR NUL' means carriage-return - an 'LF' not preceded by a 'CR' means moving to the same column on the next line. - the sequence 'CR x' for any x other than LF or NUL is illegal. (Note that this also means that a string may end with either 'CR LF' or 'CR NUL', but not with CR.) Any object defined using this syntax may not exceed 255 characters in length. SIZE (0..255) · OCTET STRING · hint 255a
The index of the dynamic cryptomap table. The value of the string is the one assigned by the operator in defining the cryptomap set.
cipsDynamicCryptomapSetSize
1.3.6.1.4.1.9.10.62.1.2.3.2.1.2
Gauge32
The number of cryptomap entries in this cryptomap.
cipsDynamicCryptomapSetNumAssoc
1.3.6.1.4.1.9.10.62.1.2.3.2.1.3
Gauge32
The number of static cryptomap sets with which this dynamic cryptomap is associated.
cipsStaticCryptomapTable
1.3.6.1.4.1.9.10.62.1.2.3.3
Index: cipsStaticCryptomapSetName · cipsStaticCryptomapPriority
The table ilisting the member cryptomaps of the cryptomap sets that are configured on the managed entity.
cipsStaticCryptomapPriority
1.3.6.1.4.1.9.10.62.1.2.3.3.1.1
Integer32 (0..65535)
The priority of the cryptomap entry in the cryptomap set. This is the second index component of this table.
cipsStaticCryptomapType
1.3.6.1.4.1.9.10.62.1.2.3.3.1.2
CryptomapType0 = cryptomapTypeNONE1 = cryptomapTypeMANUAL2 = cryptomapTypeISAKMP3 = cryptomapTypeCET4 = cryptomapTypeDYNAMIC5 = cryptomapTypeDYNAMICDISCOVERYThe type of a cryptomap entry. Cryptomap is a unit of IOS IPSec policy specification. · Integer32
The type of the cryptomap entry. This can be an ISAKMP cryptomap, CET or manual. Dynamic cryptomaps are not counted in this table.
cipsStaticCryptomapDescr
1.3.6.1.4.1.9.10.62.1.2.3.3.1.3
DisplayStringRepresents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of character codes 0-127 (decimal) - the graphics characters (32-126) are interpreted as US ASCII - NUL, LF, CR, BEL, BS, HT, VT and FF have the special meanings specified in RFC 854 - the other 25 codes have no standard interpretation - the sequence 'CR LF' means newline - the sequence 'CR NUL' means carriage-return - an 'LF' not preceded by a 'CR' means moving to the same column on the next line. - the sequence 'CR x' for any x other than LF or NUL is illegal. (Note that this also means that a string may end with either 'CR LF' or 'CR NUL', but not with CR.) Any object defined using this syntax may not exceed 255 characters in length. SIZE (0..255) · OCTET STRING · hint 255a
The description string entered by the operatoir while creating this cryptomap. The string generally identifies a description and the purpose of this policy.
cipsStaticCryptomapPeer
1.3.6.1.4.1.9.10.62.1.2.3.3.1.4
IPSIpAddressAn IP V4 or V6 Address. SIZE (4 | 16) · OCTET STRING
The IP address of the current peer associated with this IPSec policy item. Traffic that is protected by this cryptomap is protected by a tunnel that terminates at the device whose IP address is specified by this object.
cipsStaticCryptomapNumPeers
1.3.6.1.4.1.9.10.62.1.2.3.3.1.5
Integer32 (0..40)
The number of peers associated with this cryptomap entry. The peers other than the one identified by 'cipsStaticCryptomapPeer' are backup peers. Manual cryptomaps may have only one peer.
cipsStaticCryptomapPfs
1.3.6.1.4.1.9.10.62.1.2.3.3.1.6
DiffHellmanGrp1 = none2 = dhGroup13 = dhGroup2The Diffie Hellman Group used in negotiations. · Integer32
This object identifies if the tunnels instantiated due to this policy item should use Perfect Forward Secrecy (PFS) and if so, what group of Oakley they should use.
cipsStaticCryptomapLifetime
1.3.6.1.4.1.9.10.62.1.2.3.3.1.7
Integer32 (0 | 120..86400)
This object identifies the lifetime of the IPSec Security Associations (SA) created using this IPSec policy entry. If this value is zero, the lifetime assumes the value specified by the global lifetime parameter.
cipsStaticCryptomapLifesize
1.3.6.1.4.1.9.10.62.1.2.3.3.1.8
Integer32 (0 | 2560..536870912)
This object identifies the lifesize (maximum traffic in bytes that may be carried) of the IPSec SAs created using this IPSec policy entry. If this value is zero, the lifetime assumes the value specified by the global lifesize parameter.
cipsStaticCryptomapLevelHost
1.3.6.1.4.1.9.10.62.1.2.3.3.1.9
TruthValue1 = true2 = falseRepresents a boolean value. · Integer32
This object identifies the granularity of the IPSec SAs created using this IPSec policy entry. If this value is TRUE, distinct SA bundles are created for distinct hosts at the end of the application traffic.
cipsCryptomapSetIfTable
1.3.6.1.4.1.9.10.62.1.2.3.4
Index: ifIndex · cipsStaticCryptomapSetName
The table lists the binding of cryptomap sets to the interfaces of the managed entity.
from IF-MIB
ifIndex
InterfaceIndexA unique value, greater than zero, for each interface or interface sub-layer in the managed system. It is recommended that values are assigned contiguously starting from 1. The value for each interface sub-layer must remain constant at least from one re-initialization of the entity's network management system to the next re-initialization. (1..2147483647) · Integer32 · hint d
A unique value, greater than zero, for each interface. It is recommended that values are assigned contiguously starting from 1. The value for each interface sub-layer must remain constant at least from one re-initialization of the entity's network management system to the next re- initialization.
cipsCryptomapSetIfVirtual
1.3.6.1.4.1.9.10.62.1.2.3.4.1.1
TruthValue1 = true2 = falseRepresents a boolean value. · Integer32
The value of this object identifies if the interface to which the cryptomap set is attached is a tunnel (such as a GRE or PPTP tunnel).
cipsCryptomapSetIfStatus
1.3.6.1.4.1.9.10.62.1.2.3.4.1.2
CryptomapSetBindStatus0 = unknown1 = attached2 = detachedThe status of the binding of a cryptomap set to the specified interface. The value qhen queried is always 'attached'. When set to 'detached', the cryptomap set if detached from the specified interface. Setting the value to 'attached' will result in SNMP General Error. · Integer32
This object identifies the status of the binding of the specified cryptomap set with the specified interface. The value when queried is always 'attached'. When set to 'detached', the cryptomap set if detached from the specified interface. The effect of this is same as the CLI command config-if# no crypto map cryptomapSetName Setting the value to 'attached' will result in SNMP General Error.
Trap details
cipsIsakmpPolicyAdded
1.3.6.1.4.1.9.10.62.2.0.1
This trap is generated when a new ISAKMP policy element is defined on the managed entity. The context of the event includes the updated number of ISAKMP policy elements currently available.
cipsNumIsakmpPolicies
1.3.6.1.4.1.9.10.62.1.1.4
Integer32 (1..2147483647)
The value of this object is the number of ISAKMP policies that have been configured on the managed entity.
cipsIsakmpPolicyDeleted
1.3.6.1.4.1.9.10.62.2.0.2
This trap is generated when an existing ISAKMP policy element is deleted on the managed entity. The context of the event includes the updated number of ISAKMP policy elements currently available.
cipsNumIsakmpPolicies
1.3.6.1.4.1.9.10.62.1.1.4
Integer32 (1..2147483647)
The value of this object is the number of ISAKMP policies that have been configured on the managed entity.
cipsCryptomapAdded
1.3.6.1.4.1.9.10.62.2.0.3
This trap is generated when a new cryptomap is added to the specified cryptomap set.
cipsStaticCryptomapType
1.3.6.1.4.1.9.10.62.1.2.3.3.1.2
CryptomapType0 = cryptomapTypeNONE1 = cryptomapTypeMANUAL2 = cryptomapTypeISAKMP3 = cryptomapTypeCET4 = cryptomapTypeDYNAMIC5 = cryptomapTypeDYNAMICDISCOVERYThe type of a cryptomap entry. Cryptomap is a unit of IOS IPSec policy specification. · Integer32
The type of the cryptomap entry. This can be an ISAKMP cryptomap, CET or manual. Dynamic cryptomaps are not counted in this table.
cipsStaticCryptomapSetSize
1.3.6.1.4.1.9.10.62.1.2.3.1.1.2
Gauge32
The total number of cryptomap entries contained in this cryptomap set.
cipsCryptomapDeleted
1.3.6.1.4.1.9.10.62.2.0.4
This trap is generated when a cryptomap is removed from the specified cryptomap set.
cipsStaticCryptomapSetSize
1.3.6.1.4.1.9.10.62.1.2.3.1.1.2
Gauge32
The total number of cryptomap entries contained in this cryptomap set.
cipsCryptomapSetAttached
1.3.6.1.4.1.9.10.62.2.0.5
A cryptomap set must be attached to an interface of the device in order for it to be operational. This trap is generated when the cryptomap set attached to an active interface of the managed entity. The context of the notification includes: Size of the attached cryptomap set, Number of ISAKMP cryptomaps in the set and Number of Dynamic cryptomaps in the set.
cipsStaticCryptomapSetSize
1.3.6.1.4.1.9.10.62.1.2.3.1.1.2
Gauge32
The total number of cryptomap entries contained in this cryptomap set.
cipsStaticCryptomapSetNumIsakmp
1.3.6.1.4.1.9.10.62.1.2.3.1.1.3
Gauge32
The number of cryptomaps associated with this cryptomap set that use ISAKMP protocol to do key exchange.
cipsStaticCryptomapSetNumDynamic
1.3.6.1.4.1.9.10.62.1.2.3.1.1.6
Gauge32
The number of dynamic cryptomap templates linked to this cryptomap set.
cipsCryptomapSetDetached
1.3.6.1.4.1.9.10.62.2.0.6
This trap is generated when a cryptomap set is detached from an interafce to which it was bound earlier. The context of the event identifies the size of the cryptomap set.
cipsStaticCryptomapSetSize
1.3.6.1.4.1.9.10.62.1.2.3.1.1.2
Gauge32
The total number of cryptomap entries contained in this cryptomap set.
cipsTooManySAs
1.3.6.1.4.1.9.10.62.2.0.7
This trap is generated when a new SA is attempted to be setup while the number of currently active SAs equals the maximum configurable. The variables are: cipsMaxSAs
cipsMaxSAs
1.3.6.1.4.1.9.10.62.1.3.1
INTEGER (0..65535) · Integer32 · Integral Units
The maximum number of IPsec Security Associations that can be established on this managed entity. If no theoretical limit exists, this returns value 0. Not affected by any CLI operation.