All MIBs › CISCO-IP-ENCRYPTION-MIB › cieEncryptionKeyTimeout
cieEncryptionKeyTimeout
Module: CISCO-IP-ENCRYPTION-MIB
OID (symbolic): CISCO-IP-ENCRYPTION-MIB::cieEncryptionKeyTimeout
OID (numeric): 1.3.6.1.4.1.9.9.52.1.1.2
Node type: OBJECT-TYPE
Type: Integer32
Access: read-only
Description: Interval at which keys expire for a session and they are is re-negotiated.
What is cieEncryptionKeyTimeout?
This value is the interval, per its description, after which the encryption keys for an IP Encryption session expire and must be renegotiated. It sets the cadence of key churn for this device's IP-layer encryption feature - a shorter timeout means more frequent renegotiation overhead but less exposure if a key is ever compromised, while a longer one reduces renegotiation load at the cost of a longer exposure window. A value of 3600 would mean this device forces a fresh key exchange every hour regardless of traffic volume.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.9.52.1.1.2 snmpwalk -v2c -c public <target> CISCO-IP-ENCRYPTION-MIB::cieEncryptionKeyTimeout
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.9.9.52.1.1.2.1 snmpget -v2c -c public <target> CISCO-IP-ENCRYPTION-MIB::cieEncryptionKeyTimeout.1
Start monitoring Cisco routers with hardware encryption (ESA) modules (legacy) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-IP-ENCRYPTION-MIB::cieEncryptionKeyTimeout OID value, configure state conditions and alerts, and monitor any Cisco routers with hardware encryption (ESA) modules (legacy) from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.9 | ciscoMgmt | CISCO-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.9.52 | ciscoIpEncryptionMIB | CISCO-IP-ENCRYPTION-MIB |
| 1.3.6.1.4.1.9.9.52.1 | ciscoIpEncryptionMIBObjects | CISCO-IP-ENCRYPTION-MIB |
| 1.3.6.1.4.1.9.9.52.1.1 | cieConfig | CISCO-IP-ENCRYPTION-MIB |
| 1.3.6.1.4.1.9.9.52.1.1.2 | cieEncryptionKeyTimeout | CISCO-IP-ENCRYPTION-MIB |