All MIBs › CISCO-IKE-FLOW-MIB › cifIkeTunNegoMode
cifIkeTunNegoMode
Module: CISCO-IKE-FLOW-MIB
OID (symbolic): CISCO-IKE-FLOW-MIB::cifIkeTunNegoMode
OID (numeric): 1.3.6.1.4.1.9.9.429.1.1.3.1.1
Node type: OBJECT-TYPE
Type: CIPsecIkeNegoMode
Access: read-only
Description: The negotiation mode of the Phase-1 IKE Tunnel.
What is cifIkeTunNegoMode?
This reports which IKE negotiation mode - Main Mode or Aggressive Mode - was used to establish this specific Phase-1 tunnel, per its description. It matters because Aggressive Mode exposes the peer identity and hash to eavesdroppers during setup and is considered weaker than Main Mode, so scanning this value across tunnels lets an admin spot VPN peers still using the less secure option. A table showing 'aggressive' for a legacy remote-access client while every site-to-site tunnel shows 'main' flags that one client as a hardening candidate.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.9.429.1.1.3.1.1 snmpwalk -v2c -c public <target> CISCO-IKE-FLOW-MIB::cifIkeTunNegoMode
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.9.9.429.1.1.3.1.1.1 snmpget -v2c -c public <target> CISCO-IKE-FLOW-MIB::cifIkeTunNegoMode.1
Start monitoring Cisco IOS routers and VPN concentrators terminating IPsec tunnels with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-IKE-FLOW-MIB::cifIkeTunNegoMode OID value, configure state conditions and alerts, and monitor any Cisco IOS routers and VPN concentrators terminating IPsec tunnels from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.9 | ciscoMgmt | CISCO-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.9.429 | ciscoIkeFlowMIB | CISCO-IKE-FLOW-MIB |
| 1.3.6.1.4.1.9.9.429.1 | ciscoIkeFlowMIBObjects | CISCO-IKE-FLOW-MIB |
| 1.3.6.1.4.1.9.9.429.1.1 | cifIkeCurrentActivity | CISCO-IKE-FLOW-MIB |
| 1.3.6.1.4.1.9.9.429.1.1.3 | cifIkeTunnelTable | CISCO-IKE-FLOW-MIB |
| 1.3.6.1.4.1.9.9.429.1.1.3.1 | cifIkeTunnelEntry | CISCO-IKE-FLOW-MIB |
| 1.3.6.1.4.1.9.9.429.1.1.3.1.1 | cifIkeTunNegoMode | CISCO-IKE-FLOW-MIB |