CISCO-ENHANCED-IPSEC-FLOW-MIB :: ceipSecCertRenewalStatus

MIB Reference — IPNetwork Monitor · Updated September 14, 2026

All MIBsCISCO-ENHANCED-IPSEC-FLOW-MIBceipSecCertRenewalStatus

ceipSecCertRenewalStatus

Module: CISCO-ENHANCED-IPSEC-FLOW-MIB

OID (symbolic): CISCO-ENHANCED-IPSEC-FLOW-MIB::ceipSecCertRenewalStatus

OID (numeric): 1.3.6.1.4.1.9.9.432.1.6.5

Node type: OBJECT-TYPE

Type: INTEGER

Access: read-only

Description: This object provides the renewal status of the X.509 certificate on the application sending the notification. renewalNotNeeded(1) = certificate is OK and does not need to be renewed renewalRequestNeeded(2) = certificate renewal request is needed renewalRequested(3) = certificate renewal has been requested and the renewal process is proceeding renewalSuccess(4) = certificate has been renewed and will be OK (renewalNotNeeded) renewalFailedUpdate(5) = certificate renewal failed, but certificate is still usable until the validity expiration time provided in the notification, or otherwise restricted by the application renewalFailedExpired(6) = certificate is no longer valid, the current time is after the certificate's validity notAfter time, which is provided in this notification

What is ceipSecCertRenewalStatus?

Indicates whether the device's X.509 certificate needs renewal, with values such as renewal-not-needed or renewal-request-needed used to track certificate lifecycle state.

Examples

Walk all instances (SNMPv2c):

snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.9.432.1.6.5
snmpwalk -v2c -c public <target> CISCO-ENHANCED-IPSEC-FLOW-MIB::ceipSecCertRenewalStatus

Get a specific instance (index 1):

snmpget -v2c -c public <target> 1.3.6.1.4.1.9.9.432.1.6.5.1
snmpget -v2c -c public <target> CISCO-ENHANCED-IPSEC-FLOW-MIB::ceipSecCertRenewalStatus.1

Start monitoring Cisco router/firewall/VPN concentrator terminating IPsec tunnels with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-ENHANCED-IPSEC-FLOW-MIB::ceipSecCertRenewalStatus OID value, configure state conditions and alerts, and monitor any Cisco router/firewall/VPN concentrator terminating IPsec tunnels from a single console.

OID Breakdown

Upper-level ancestors (8 from the standard OID tree / other modules)
Numeric OIDNameModule
1isoLANART-AGENT
1.3orgAirPair-MIB
1.3.6dodAirPair-MIB
1.3.6.1internetAirPair-MIB
1.3.6.1.4privateAirPair-MIB
1.3.6.1.4.1enterprisesAirPair-MIB
1.3.6.1.4.1.9ciscoCAT2600-MIB
1.3.6.1.4.1.9.9ciscoMgmtCISCO-SMI
Numeric OIDNameModule
1.3.6.1.4.1.9.9.432ciscoEnhancedIpsecFlowMIBCISCO-ENHANCED-IPSEC-FLOW-MIB
1.3.6.1.4.1.9.9.432.1ciscoEnhancedIpsecFlowMIBObjectsCISCO-ENHANCED-IPSEC-FLOW-MIB
1.3.6.1.4.1.9.9.432.1.6ceipSecCertNotificationCISCO-ENHANCED-IPSEC-FLOW-MIB
1.3.6.1.4.1.9.9.432.1.6.5ceipSecCertRenewalStatusCISCO-ENHANCED-IPSEC-FLOW-MIB