All MIBs › CISCO-IPSEC-POLICY-MAP-MIB › ikePolMapPolicyNum
ikePolMapPolicyNum
Module: CISCO-IPSEC-POLICY-MAP-MIB
OID (symbolic): CISCO-IPSEC-POLICY-MAP-MIB::ikePolMapPolicyNum
OID (numeric): 1.3.6.1.4.1.9.9.172.1.1.1.1.2
Node type: OBJECT-TYPE
Type: Integer32
Access: read-only
Description: The number of the locally defined ISAKMP policy used to establish the IPSec IKE Phase-1 Tunnel. This is the number which was used on the crypto command. For example, if the configuration command was:
==> crypto isakmp policy 15
then the value of this object would be 15. If ISAKMP was not used to establish this tunnel, then the value of this object will be zero.
What is ikePolMapPolicyNum?
This reports the number of the locally defined ISAKMP policy used to establish this specific IPSec IKE Phase-1 tunnel, per its description, matching exactly the number used in the 'crypto isakmp policy N' configuration command - for example, a value of 15 here means the tunnel was built using 'crypto isakmp policy 15'. If ISAKMP wasn't used to establish the tunnel at all, the value is zero, per the description, which itself is a useful signal that the tunnel was set up through some other mechanism. An admin correlating this MIB value with the router's running-config can jump straight to the exact policy stanza governing that live tunnel's Phase-1 crypto settings.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.9.172.1.1.1.1.2 snmpwalk -v2c -c public <target> CISCO-IPSEC-POLICY-MAP-MIB::ikePolMapPolicyNum
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.9.9.172.1.1.1.1.2.1 snmpget -v2c -c public <target> CISCO-IPSEC-POLICY-MAP-MIB::ikePolMapPolicyNum.1
Start monitoring Cisco IPsec VPN router/firewall (ASA, ISR) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-IPSEC-POLICY-MAP-MIB::ikePolMapPolicyNum OID value, configure state conditions and alerts, and monitor any Cisco IPsec VPN router/firewall (ASA, ISR) from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.9 | ciscoMgmt | CISCO-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.9.172 | ciscoIpSecPolMapMIB | CISCO-IPSEC-POLICY-MAP-MIB |
| 1.3.6.1.4.1.9.9.172.1 | ciscoIpSecPolMapMIBObjects | CISCO-IPSEC-POLICY-MAP-MIB |
| 1.3.6.1.4.1.9.9.172.1.1 | ipSecPhaseOnePolMap | CISCO-IPSEC-POLICY-MAP-MIB |
| 1.3.6.1.4.1.9.9.172.1.1.1 | ikePolMapTable | CISCO-IPSEC-POLICY-MAP-MIB |
| 1.3.6.1.4.1.9.9.172.1.1.1.1 | ikePolMapEntry | CISCO-IPSEC-POLICY-MAP-MIB |
| 1.3.6.1.4.1.9.9.172.1.1.1.1.2 | ikePolMapPolicyNum | CISCO-IPSEC-POLICY-MAP-MIB |