All MIBs › CISCO-IPSEC-MIB › cipsIsakmpPolHash
cipsIsakmpPolHash
Module: CISCO-IPSEC-MIB
OID (symbolic): CISCO-IPSEC-MIB::cipsIsakmpPolHash
OID (numeric): 1.3.6.1.4.1.9.10.62.1.1.5.1.3
Node type: OBJECT-TYPE
Type: IkeHashAlgo
Access: read-only
Description: The hash transform specified by this ISAKMP policy specification. The IKE tunnels setup using this policy item would use the specified hash transform to protect the ISAKMP PDUs.
What is cipsIsakmpPolHash?
This reports the hash algorithm (such as MD5 or SHA) specified by a particular ISAKMP policy entry, per its description, used by IKE tunnels negotiated with that policy to protect the integrity of Phase-1 ISAKMP messages. It matters for the same reason as cipsIsakmpPolEncr - MD5 is considered weak and an admin scanning policies for compliance would flag any entry still using it. A policy showing 'md5' in an environment standardizing on SHA-256 marks that specific policy number for update.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.10.62.1.1.5.1.3 snmpwalk -v2c -c public <target> CISCO-IPSEC-MIB::cipsIsakmpPolHash
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.9.10.62.1.1.5.1.3.1 snmpget -v2c -c public <target> CISCO-IPSEC-MIB::cipsIsakmpPolHash.1
Start monitoring Cisco routers and VPN gateways implementing IPsec with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-IPSEC-MIB::cipsIsakmpPolHash OID value, configure state conditions and alerts, and monitor any Cisco routers and VPN gateways implementing IPsec from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.10 | ciscoExperiment | CISCO-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.10.62 | ciscoIPsecMIB | CISCO-IPSEC-MIB |
| 1.3.6.1.4.1.9.10.62.1 | ciscoIPsecMIBObjects | CISCO-IPSEC-MIB |
| 1.3.6.1.4.1.9.10.62.1.1 | cipsIsakmpGroup | CISCO-IPSEC-MIB |
| 1.3.6.1.4.1.9.10.62.1.1.5 | cipsIsakmpPolicyTable | CISCO-IPSEC-MIB |
| 1.3.6.1.4.1.9.10.62.1.1.5.1 | cipsIsakmpPolicyEntry | CISCO-IPSEC-MIB |
| 1.3.6.1.4.1.9.10.62.1.1.5.1.3 | cipsIsakmpPolHash | CISCO-IPSEC-MIB |