CISCO-IPSEC-MIB :: cipsCntlTooManySAs

MIB Reference — IPNetwork Monitor · Updated October 05, 2026

All MIBs › CISCO-IPSEC-MIB › cipsCntlTooManySAs

cipsCntlTooManySAs

Module: CISCO-IPSEC-MIB

OID (symbolic): CISCO-IPSEC-MIB::cipsCntlTooManySAs

OID (numeric): 1.3.6.1.4.1.9.10.62.1.4.7

Node type: OBJECT-TYPE

Type: TrapStatus

Access: read-write

Description: This object defines the administrative state of sending the IOS IPsec trap that is issued when the number of SAs crosses the maximum number of SAs that may be supported on the managed entity.

What is cipsCntlTooManySAs?

This TrapStatus object defines the administrative state for sending the IOS IPsec trap issued when the number of security associations crosses the maximum number of SAs the device can support (cipsMaxSAs), per its description. Enabling it gives an admin an early-warning alert before the device actually starts refusing new tunnel requests due to hitting its SA capacity ceiling. A router nearing its 5000-SA limit that fires this trap would prompt capacity planning - either pruning unused tunnels or upgrading to a platform with a higher SA ceiling - before new legitimate VPN connections start failing.

Examples

Walk all instances (SNMPv2c):

snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.10.62.1.4.7
snmpwalk -v2c -c public <target> CISCO-IPSEC-MIB::cipsCntlTooManySAs

Get a specific instance (index 1):

snmpget -v2c -c public <target> 1.3.6.1.4.1.9.10.62.1.4.7.1
snmpget -v2c -c public <target> CISCO-IPSEC-MIB::cipsCntlTooManySAs.1

Set instance 1 (SNMPv2c):

snmpset -v2c -c private <target> 1.3.6.1.4.1.9.10.62.1.4.7.1 s <value>

Start monitoring Cisco routers and VPN gateways implementing IPsec with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-IPSEC-MIB::cipsCntlTooManySAs OID value, configure state conditions and alerts, and monitor any Cisco routers and VPN gateways implementing IPsec from a single console.

OID Breakdown

Upper-level ancestors (8 from the standard OID tree / other modules)
Numeric OIDNameModule
1isoLANART-AGENT
1.3orgAirPair-MIB
1.3.6dodAirPair-MIB
1.3.6.1internetAirPair-MIB
1.3.6.1.4privateAirPair-MIB
1.3.6.1.4.1enterprisesAirPair-MIB
1.3.6.1.4.1.9ciscoCAT2600-MIB
1.3.6.1.4.1.9.10ciscoExperimentCISCO-SMI
Numeric OIDNameModule
1.3.6.1.4.1.9.10.62ciscoIPsecMIBCISCO-IPSEC-MIB
1.3.6.1.4.1.9.10.62.1ciscoIPsecMIBObjectsCISCO-IPSEC-MIB
1.3.6.1.4.1.9.10.62.1.4cipsTrapCntlGroupCISCO-IPSEC-MIB
1.3.6.1.4.1.9.10.62.1.4.7cipsCntlTooManySAsCISCO-IPSEC-MIB