All MIBs › CISCO-IPSEC-MIB › cipsIsakmpPolGroup
cipsIsakmpPolGroup
Module: CISCO-IPSEC-MIB
OID (symbolic): CISCO-IPSEC-MIB::cipsIsakmpPolGroup
OID (numeric): 1.3.6.1.4.1.9.10.62.1.1.5.1.5
Node type: OBJECT-TYPE
Type: DiffHellmanGrp
Access: read-only
Description: This object specifies the Oakley group used for Diffie Hellman exchange in the Main Mode. If this policy item is selected to negotiate Main Mode with an IKE peer, the local entity chooses the group specified by this object to perform Diffie Hellman exchange with the peer.
What is cipsIsakmpPolGroup?
This specifies the Oakley Diffie-Hellman group a particular ISAKMP policy will use for the Main Mode key exchange, per its description, and any Main Mode negotiation selecting that policy will use exactly this group to compute its shared secret with the peer. It's the configuration-side counterpart to the live cifIkeTunDHGrp object seen on established tunnels, letting an admin check policy strength before a tunnel is even up. A policy still configured with group 2 in an environment standardizing on group 14 or higher is a specific, fixable weak point.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.10.62.1.1.5.1.5 snmpwalk -v2c -c public <target> CISCO-IPSEC-MIB::cipsIsakmpPolGroup
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.9.10.62.1.1.5.1.5.1 snmpget -v2c -c public <target> CISCO-IPSEC-MIB::cipsIsakmpPolGroup.1
Start monitoring Cisco routers and VPN gateways implementing IPsec with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-IPSEC-MIB::cipsIsakmpPolGroup OID value, configure state conditions and alerts, and monitor any Cisco routers and VPN gateways implementing IPsec from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.10 | ciscoExperiment | CISCO-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.10.62 | ciscoIPsecMIB | CISCO-IPSEC-MIB |
| 1.3.6.1.4.1.9.10.62.1 | ciscoIPsecMIBObjects | CISCO-IPSEC-MIB |
| 1.3.6.1.4.1.9.10.62.1.1 | cipsIsakmpGroup | CISCO-IPSEC-MIB |
| 1.3.6.1.4.1.9.10.62.1.1.5 | cipsIsakmpPolicyTable | CISCO-IPSEC-MIB |
| 1.3.6.1.4.1.9.10.62.1.1.5.1 | cipsIsakmpPolicyEntry | CISCO-IPSEC-MIB |
| 1.3.6.1.4.1.9.10.62.1.1.5.1.5 | cipsIsakmpPolGroup | CISCO-IPSEC-MIB |