All MIBs › CISCO-COMMON-MGMT-MIB › ccmCommonUsersGlobalEnforcePriv
ccmCommonUsersGlobalEnforcePriv
Module: CISCO-COMMON-MGMT-MIB
OID (symbolic): CISCO-COMMON-MGMT-MIB::ccmCommonUsersGlobalEnforcePriv
OID (numeric): 1.3.6.1.4.1.9.9.443.1.1.3
Node type: OBJECT-TYPE
Type: TruthValue
Access: read-write
Description: This object specifies whether the SNMP agent enforces the use of encryption for SNMPv3 messages globally on all the users in the system.
The 'vacmAccessSecurityLevel' determines the acceptable security levels per group and is set to noAuthnoPriv default unless otherwise configured. The actual access to the mib objects in a SNMP message is controlled by vacmAccessTable. This object provides the configuration at a higher level to enforce privacy without any introspection of the mib objects in the SNMP message.
When the privacy is enforced globally, for any SNMPv3 PDU request with securityLevel of either 'noAuthNoPriv' and 'authNoPriv', the SNMP agent responds with an 'authorizationError'.
What is ccmCommonUsersGlobalEnforcePriv?
Read-write switch that forces all SNMPv3 users on the device to use message encryption (privacy), overriding per-group security level settings.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.9.443.1.1.3 snmpwalk -v2c -c public <target> CISCO-COMMON-MGMT-MIB::ccmCommonUsersGlobalEnforcePriv
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.9.9.443.1.1.3.1 snmpget -v2c -c public <target> CISCO-COMMON-MGMT-MIB::ccmCommonUsersGlobalEnforcePriv.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.9.9.443.1.1.3.1 s <value>
Start monitoring Cisco routers and switches (common management framework) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-COMMON-MGMT-MIB::ccmCommonUsersGlobalEnforcePriv OID value, configure state conditions and alerts, and monitor any Cisco routers and switches (common management framework) from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.9 | ciscoMgmt | CISCO-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.9.443 | ciscoCommonMgmtMIB | CISCO-COMMON-MGMT-MIB |
| 1.3.6.1.4.1.9.9.443.1 | ciscoCommonMgmtMIBObjects | CISCO-COMMON-MGMT-MIB |
| 1.3.6.1.4.1.9.9.443.1.1 | ccmUserConfig | CISCO-COMMON-MGMT-MIB |
| 1.3.6.1.4.1.9.9.443.1.1.3 | ccmCommonUsersGlobalEnforcePriv | CISCO-COMMON-MGMT-MIB |