CISCO-ENHANCED-IPSEC-FLOW-MIB :: ciscoEnhIpsecFlowBadSa

MIB Reference — IPNetwork Monitor · Updated September 14, 2026

All MIBs › CISCO-ENHANCED-IPSEC-FLOW-MIB › ciscoEnhIpsecFlowBadSa

ciscoEnhIpsecFlowBadSa

Module: CISCO-ENHANCED-IPSEC-FLOW-MIB

OID (symbolic): CISCO-ENHANCED-IPSEC-FLOW-MIB::ciscoEnhIpsecFlowBadSa

OID (numeric): 1.3.6.1.4.1.9.9.432.0.5

Node type: NOTIFICATION-TYPE

Description: This notification is generated when the managed entity receives an IPsec packet with a non-existent (non-existant in the local Security Association Database) SPI.

Examples

Send this trap to an SNMP manager — replace <manager> with the IP or hostname of your monitoring server (SNMPv2c):

snmptrap -v2c -c public <manager> '' CISCO-ENHANCED-IPSEC-FLOW-MIB::ciscoEnhIpsecFlowBadSa
snmptrap -v2c -c public <manager> '' 1.3.6.1.4.1.9.9.432.0.5

Listen for incoming traps on the manager host (-f keeps it in the foreground, -Lo prints to stdout — useful for testing):

snmptrapd -f -Lo -c /dev/null authCommunity log public

Example snmptrapd log entry:

zoo11-linux.zoo [UDP: [192.168.30.111]:65437->[192.168.30.10]:162]:
  DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (394244509) 45 days, 15:07:25.09
  SNMPv2-MIB::snmpTrapOID.0 = OID: CISCO-ENHANCED-IPSEC-FLOW-MIB::ciscoEnhIpsecFlowBadSa

Start monitoring Cisco router/firewall/VPN concentrator terminating IPsec tunnels with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-ENHANCED-IPSEC-FLOW-MIB::ciscoEnhIpsecFlowBadSa OID value, configure state conditions and alerts, and monitor any Cisco router/firewall/VPN concentrator terminating IPsec tunnels from a single console.

OID Breakdown

Upper-level ancestors (8 from the standard OID tree / other modules)
Numeric OIDNameModule
1isoLANART-AGENT
1.3orgAirPair-MIB
1.3.6dodAirPair-MIB
1.3.6.1internetAirPair-MIB
1.3.6.1.4privateAirPair-MIB
1.3.6.1.4.1enterprisesAirPair-MIB
1.3.6.1.4.1.9ciscoCAT2600-MIB
1.3.6.1.4.1.9.9ciscoMgmtCISCO-SMI
Numeric OIDNameModule
1.3.6.1.4.1.9.9.432ciscoEnhancedIpsecFlowMIBCISCO-ENHANCED-IPSEC-FLOW-MIB
1.3.6.1.4.1.9.9.432.0ciscoEnhancedIpsecFlowMIBNotifsCISCO-ENHANCED-IPSEC-FLOW-MIB
1.3.6.1.4.1.9.9.432.0.5ciscoEnhIpsecFlowBadSaCISCO-ENHANCED-IPSEC-FLOW-MIB

Module

This MIB depends on