All MIBs › CISCO-IPSEC-MIB › cipsIsakmpPolEncr
cipsIsakmpPolEncr
Module: CISCO-IPSEC-MIB
OID (symbolic): CISCO-IPSEC-MIB::cipsIsakmpPolEncr
OID (numeric): 1.3.6.1.4.1.9.10.62.1.1.5.1.2
Node type: OBJECT-TYPE
Type: EncryptAlgo
Access: read-only
Description: The encryption transform specified by this ISAKMP policy specification. The Internet Key Exchange (IKE) tunnels setup using this policy item would use the specified encryption transform to protect the ISAKMP PDUs.
What is cipsIsakmpPolEncr?
This reports the encryption transform (such as DES, 3DES, or AES) specified by a particular ISAKMP policy entry, per its description, which any IKE tunnel negotiated using that policy will use to protect its Phase-1 (ISAKMP) messages themselves - not the eventual data traffic. An admin auditing policies for weak crypto would look here specifically for legacy algorithms like DES that should be retired. A policy entry showing 'des' among a set of otherwise 'aes256' policies flags that one entry as a priority for remediation.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.10.62.1.1.5.1.2 snmpwalk -v2c -c public <target> CISCO-IPSEC-MIB::cipsIsakmpPolEncr
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.9.10.62.1.1.5.1.2.1 snmpget -v2c -c public <target> CISCO-IPSEC-MIB::cipsIsakmpPolEncr.1
Start monitoring Cisco routers and VPN gateways implementing IPsec with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-IPSEC-MIB::cipsIsakmpPolEncr OID value, configure state conditions and alerts, and monitor any Cisco routers and VPN gateways implementing IPsec from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.10 | ciscoExperiment | CISCO-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.10.62 | ciscoIPsecMIB | CISCO-IPSEC-MIB |
| 1.3.6.1.4.1.9.10.62.1 | ciscoIPsecMIBObjects | CISCO-IPSEC-MIB |
| 1.3.6.1.4.1.9.10.62.1.1 | cipsIsakmpGroup | CISCO-IPSEC-MIB |
| 1.3.6.1.4.1.9.10.62.1.1.5 | cipsIsakmpPolicyTable | CISCO-IPSEC-MIB |
| 1.3.6.1.4.1.9.10.62.1.1.5.1 | cipsIsakmpPolicyEntry | CISCO-IPSEC-MIB |
| 1.3.6.1.4.1.9.10.62.1.1.5.1.2 | cipsIsakmpPolEncr | CISCO-IPSEC-MIB |