CISCO-IKE-FLOW-MIB :: cifIkeTunDHGrp

MIB Reference — IPNetwork Monitor · Updated September 14, 2026

All MIBsCISCO-IKE-FLOW-MIBcifIkeTunDHGrp

cifIkeTunDHGrp

Module: CISCO-IKE-FLOW-MIB

OID (symbolic): CISCO-IKE-FLOW-MIB::cifIkeTunDHGrp

OID (numeric): 1.3.6.1.4.1.9.9.429.1.1.3.1.2

Node type: OBJECT-TYPE

Type: CIPsecDiffHellmanGrp

Access: read-only

Description: The Diffie Hellman Group used in Phase-1 IKE negotiations.

What is cifIkeTunDHGrp?

This reports the specific Diffie-Hellman group negotiated for this Phase-1 tunnel's key exchange, per its description, which directly sets the cryptographic strength of the shared secret used to protect subsequent negotiations. An admin cares because older groups like group1 or group2 (768/1024-bit) are considered too weak for current policy, while group14 or higher (2048-bit+) is preferred. A tunnel unexpectedly reporting 'group2' in an environment whose baseline policy mandates group14 would flag a specific peer or crypto map needing an update.

Examples

Walk all instances (SNMPv2c):

snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.9.429.1.1.3.1.2
snmpwalk -v2c -c public <target> CISCO-IKE-FLOW-MIB::cifIkeTunDHGrp

Get a specific instance (index 1):

snmpget -v2c -c public <target> 1.3.6.1.4.1.9.9.429.1.1.3.1.2.1
snmpget -v2c -c public <target> CISCO-IKE-FLOW-MIB::cifIkeTunDHGrp.1

Start monitoring Cisco IOS routers and VPN concentrators terminating IPsec tunnels with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-IKE-FLOW-MIB::cifIkeTunDHGrp OID value, configure state conditions and alerts, and monitor any Cisco IOS routers and VPN concentrators terminating IPsec tunnels from a single console.

OID Breakdown

Upper-level ancestors (8 from the standard OID tree / other modules)
Numeric OIDNameModule
1isoLANART-AGENT
1.3orgAirPair-MIB
1.3.6dodAirPair-MIB
1.3.6.1internetAirPair-MIB
1.3.6.1.4privateAirPair-MIB
1.3.6.1.4.1enterprisesAirPair-MIB
1.3.6.1.4.1.9ciscoCAT2600-MIB
1.3.6.1.4.1.9.9ciscoMgmtCISCO-SMI
Numeric OIDNameModule
1.3.6.1.4.1.9.9.429ciscoIkeFlowMIBCISCO-IKE-FLOW-MIB
1.3.6.1.4.1.9.9.429.1ciscoIkeFlowMIBObjectsCISCO-IKE-FLOW-MIB
1.3.6.1.4.1.9.9.429.1.1cifIkeCurrentActivityCISCO-IKE-FLOW-MIB
1.3.6.1.4.1.9.9.429.1.1.3cifIkeTunnelTableCISCO-IKE-FLOW-MIB
1.3.6.1.4.1.9.9.429.1.1.3.1cifIkeTunnelEntryCISCO-IKE-FLOW-MIB
1.3.6.1.4.1.9.9.429.1.1.3.1.2cifIkeTunDHGrpCISCO-IKE-FLOW-MIB