All MIBs › CISCO-IKE-FLOW-MIB › cifIkeTunDHGrp
cifIkeTunDHGrp
Module: CISCO-IKE-FLOW-MIB
OID (symbolic): CISCO-IKE-FLOW-MIB::cifIkeTunDHGrp
OID (numeric): 1.3.6.1.4.1.9.9.429.1.1.3.1.2
Node type: OBJECT-TYPE
Type: CIPsecDiffHellmanGrp
Access: read-only
Description: The Diffie Hellman Group used in Phase-1 IKE negotiations.
What is cifIkeTunDHGrp?
This reports the specific Diffie-Hellman group negotiated for this Phase-1 tunnel's key exchange, per its description, which directly sets the cryptographic strength of the shared secret used to protect subsequent negotiations. An admin cares because older groups like group1 or group2 (768/1024-bit) are considered too weak for current policy, while group14 or higher (2048-bit+) is preferred. A tunnel unexpectedly reporting 'group2' in an environment whose baseline policy mandates group14 would flag a specific peer or crypto map needing an update.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.9.429.1.1.3.1.2 snmpwalk -v2c -c public <target> CISCO-IKE-FLOW-MIB::cifIkeTunDHGrp
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.9.9.429.1.1.3.1.2.1 snmpget -v2c -c public <target> CISCO-IKE-FLOW-MIB::cifIkeTunDHGrp.1
Start monitoring Cisco IOS routers and VPN concentrators terminating IPsec tunnels with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-IKE-FLOW-MIB::cifIkeTunDHGrp OID value, configure state conditions and alerts, and monitor any Cisco IOS routers and VPN concentrators terminating IPsec tunnels from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.9 | ciscoMgmt | CISCO-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.9.429 | ciscoIkeFlowMIB | CISCO-IKE-FLOW-MIB |
| 1.3.6.1.4.1.9.9.429.1 | ciscoIkeFlowMIBObjects | CISCO-IKE-FLOW-MIB |
| 1.3.6.1.4.1.9.9.429.1.1 | cifIkeCurrentActivity | CISCO-IKE-FLOW-MIB |
| 1.3.6.1.4.1.9.9.429.1.1.3 | cifIkeTunnelTable | CISCO-IKE-FLOW-MIB |
| 1.3.6.1.4.1.9.9.429.1.1.3.1 | cifIkeTunnelEntry | CISCO-IKE-FLOW-MIB |
| 1.3.6.1.4.1.9.9.429.1.1.3.1.2 | cifIkeTunDHGrp | CISCO-IKE-FLOW-MIB |