All MIBs › CISCO-IPSEC-FLOW-MONITOR-MIB › cikeGlobalAuthFails
cikeGlobalAuthFails
Module: CISCO-IPSEC-FLOW-MONITOR-MIB
OID (symbolic): CISCO-IPSEC-FLOW-MONITOR-MIB::cikeGlobalAuthFails
OID (numeric): 1.3.6.1.4.1.9.9.171.1.2.1.23
Node type: OBJECT-TYPE
Type: Counter32
Access: read-only
Description: The total number of authentications which ended in failure by all current and previous IPsec Phase-1 IKE Tunnels.
What is cikeGlobalAuthFails?
Counts the total number of authentication failures across all current and past IKE Phase-1 tunnels, which can indicate misconfigured credentials or an attack.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.9.171.1.2.1.23 snmpwalk -v2c -c public <target> CISCO-IPSEC-FLOW-MONITOR-MIB::cikeGlobalAuthFails
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.9.9.171.1.2.1.23.1 snmpget -v2c -c public <target> CISCO-IPSEC-FLOW-MONITOR-MIB::cikeGlobalAuthFails.1
SNMPv3 example:
snmpget -v3 -l authPriv -u snmpv3-user -a SHA -A "AuthPassword1" -x AES -X "PrivPassword1" <target> cikeGlobalAuthFails.1
Start monitoring Cisco router/firewall/VPN concentrator terminating IPsec tunnels with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-IPSEC-FLOW-MONITOR-MIB::cikeGlobalAuthFails OID value, configure state conditions and alerts, and monitor any Cisco router/firewall/VPN concentrator terminating IPsec tunnels from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.9 | ciscoMgmt | CISCO-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.9.171 | ciscoIpSecFlowMonitorMIB | CISCO-IPSEC-FLOW-MONITOR-MIB |
| 1.3.6.1.4.1.9.9.171.1 | cipSecMIBObjects | CISCO-IPSEC-FLOW-MONITOR-MIB |
| 1.3.6.1.4.1.9.9.171.1.2 | cipSecPhaseOne | CISCO-IPSEC-FLOW-MONITOR-MIB |
| 1.3.6.1.4.1.9.9.171.1.2.1 | cikeGlobalStats | CISCO-IPSEC-FLOW-MONITOR-MIB |
| 1.3.6.1.4.1.9.9.171.1.2.1.23 | cikeGlobalAuthFails | CISCO-IPSEC-FLOW-MONITOR-MIB |