CISCO-IKE-FLOW-MIB :: cifIkeGlobalInP2Exchgs

MIB Reference — IPNetwork Monitor · Updated September 14, 2026

All MIBsCISCO-IKE-FLOW-MIBcifIkeGlobalInP2Exchgs

cifIkeGlobalInP2Exchgs

Module: CISCO-IKE-FLOW-MIB

OID (symbolic): CISCO-IKE-FLOW-MIB::cifIkeGlobalInP2Exchgs

OID (numeric): 1.3.6.1.4.1.9.9.429.1.1.1.1.1

Node type: OBJECT-TYPE

Type: Counter64

Access: read-only

Description: The total number of Phase-2 exchanges received by all currently and previously active Phase-1 Tunnels.

What is cifIkeGlobalInP2Exchgs?

This is a device-wide cumulative counter of IKE Phase-2 (Quick Mode) exchanges received across every IKE Phase-1 tunnel this device has ever maintained, current and historical, representing the negotiation traffic used to establish or rekey individual IPsec SAs under existing Phase-1 tunnels. It's a good high-level indicator of how much IPsec SA churn is happening device-wide, since a large VPN concentrator supporting many site-to-site tunnels with short SA lifetimes will show this climbing quickly from routine rekeying alone, separate from any actual problems. A sudden spike in this counter that isn't explained by an expected rekey schedule or new tunnel provisioning is worth investigating as unusual Phase-2 negotiation activity, possibly from a misbehaving peer retrying excessively.

Examples

Walk all instances (SNMPv2c):

snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.9.429.1.1.1.1.1
snmpwalk -v2c -c public <target> CISCO-IKE-FLOW-MIB::cifIkeGlobalInP2Exchgs

Get a specific instance (index 1):

snmpget -v2c -c public <target> 1.3.6.1.4.1.9.9.429.1.1.1.1.1.1
snmpget -v2c -c public <target> CISCO-IKE-FLOW-MIB::cifIkeGlobalInP2Exchgs.1

Start monitoring Cisco IOS routers and VPN concentrators terminating IPsec tunnels with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-IKE-FLOW-MIB::cifIkeGlobalInP2Exchgs OID value, configure state conditions and alerts, and monitor any Cisco IOS routers and VPN concentrators terminating IPsec tunnels from a single console.

OID Breakdown

Upper-level ancestors (8 from the standard OID tree / other modules)
Numeric OIDNameModule
1isoLANART-AGENT
1.3orgAirPair-MIB
1.3.6dodAirPair-MIB
1.3.6.1internetAirPair-MIB
1.3.6.1.4privateAirPair-MIB
1.3.6.1.4.1enterprisesAirPair-MIB
1.3.6.1.4.1.9ciscoCAT2600-MIB
1.3.6.1.4.1.9.9ciscoMgmtCISCO-SMI
Numeric OIDNameModule
1.3.6.1.4.1.9.9.429ciscoIkeFlowMIBCISCO-IKE-FLOW-MIB
1.3.6.1.4.1.9.9.429.1ciscoIkeFlowMIBObjectsCISCO-IKE-FLOW-MIB
1.3.6.1.4.1.9.9.429.1.1cifIkeCurrentActivityCISCO-IKE-FLOW-MIB
1.3.6.1.4.1.9.9.429.1.1.1cifIkeGlobalStatsTableCISCO-IKE-FLOW-MIB
1.3.6.1.4.1.9.9.429.1.1.1.1cifIkeGlobalStatsEntryCISCO-IKE-FLOW-MIB
1.3.6.1.4.1.9.9.429.1.1.1.1.1cifIkeGlobalInP2ExchgsCISCO-IKE-FLOW-MIB