All MIBs › CISCO-IPSEC-MIB › cipsCntlTooManySAs
cipsCntlTooManySAs
Module: CISCO-IPSEC-MIB
OID (symbolic): CISCO-IPSEC-MIB::cipsCntlTooManySAs
OID (numeric): 1.3.6.1.4.1.9.10.62.1.4.7
Node type: OBJECT-TYPE
Type: TrapStatus
Access: read-write
Description: This object defines the administrative state of sending the IOS IPsec trap that is issued when the number of SAs crosses the maximum number of SAs that may be supported on the managed entity.
What is cipsCntlTooManySAs?
This TrapStatus object defines the administrative state for sending the IOS IPsec trap issued when the number of security associations crosses the maximum number of SAs the device can support (cipsMaxSAs), per its description. Enabling it gives an admin an early-warning alert before the device actually starts refusing new tunnel requests due to hitting its SA capacity ceiling. A router nearing its 5000-SA limit that fires this trap would prompt capacity planning - either pruning unused tunnels or upgrading to a platform with a higher SA ceiling - before new legitimate VPN connections start failing.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.10.62.1.4.7 snmpwalk -v2c -c public <target> CISCO-IPSEC-MIB::cipsCntlTooManySAs
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.9.10.62.1.4.7.1 snmpget -v2c -c public <target> CISCO-IPSEC-MIB::cipsCntlTooManySAs.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.9.10.62.1.4.7.1 s <value>
Start monitoring Cisco routers and VPN gateways implementing IPsec with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-IPSEC-MIB::cipsCntlTooManySAs OID value, configure state conditions and alerts, and monitor any Cisco routers and VPN gateways implementing IPsec from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.10 | ciscoExperiment | CISCO-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.10.62 | ciscoIPsecMIB | CISCO-IPSEC-MIB |
| 1.3.6.1.4.1.9.10.62.1 | ciscoIPsecMIBObjects | CISCO-IPSEC-MIB |
| 1.3.6.1.4.1.9.10.62.1.4 | cipsTrapCntlGroup | CISCO-IPSEC-MIB |
| 1.3.6.1.4.1.9.10.62.1.4.7 | cipsCntlTooManySAs | CISCO-IPSEC-MIB |