All MIBs › CISCO-IPSEC-POLICY-MAP-MIB › ipSecPolMapCryptoMapName
ipSecPolMapCryptoMapName
Module: CISCO-IPSEC-POLICY-MAP-MIB
OID (symbolic): CISCO-IPSEC-POLICY-MAP-MIB::ipSecPolMapCryptoMapName
OID (numeric): 1.3.6.1.4.1.9.9.172.1.2.1.1.2
Node type: OBJECT-TYPE
Type: DisplayString
Access: read-only
Description: The value of this object should be the name of the IPSec Policy (cryptomap) as assigned by the operator while configuring the policy of the IPSec traffic.
For instance, on an IOS router, the if the command entered to configure the IPSec policy was
==> crypto map ftpPolicy 10 ipsec-isakmp
then the value of this object would be 'ftpPolicy'.
What is ipSecPolMapCryptoMapName?
This reports the name of the IPSec policy (cryptomap) assigned by the operator when configuring the policy for this IPSec tunnel's traffic, per its description - for instance, if the configuration command was 'crypto map ftpPolicy 10 ipsec-isakmp', this object's value would be 'ftpPolicy'. It gives an admin a direct link from a live tunnel back to the exact named cryptomap in the router's configuration governing it, which matters when a router has many cryptomaps and needs to be quickly identified. Seeing 'ftpPolicy' here tells the admin to go look at that specific cryptomap's ACL and transform set to understand this tunnel's policy.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.9.172.1.2.1.1.2 snmpwalk -v2c -c public <target> CISCO-IPSEC-POLICY-MAP-MIB::ipSecPolMapCryptoMapName
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.9.9.172.1.2.1.1.2.1 snmpget -v2c -c public <target> CISCO-IPSEC-POLICY-MAP-MIB::ipSecPolMapCryptoMapName.1
SNMPv3 example:
snmpget -v3 -l authPriv -u snmpv3-user -a SHA -A "AuthPassword1" -x AES -X "PrivPassword1" <target> ipSecPolMapCryptoMapName.1
Start monitoring Cisco IPsec VPN router/firewall (ASA, ISR) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-IPSEC-POLICY-MAP-MIB::ipSecPolMapCryptoMapName OID value, configure state conditions and alerts, and monitor any Cisco IPsec VPN router/firewall (ASA, ISR) from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.9 | ciscoMgmt | CISCO-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.9.172 | ciscoIpSecPolMapMIB | CISCO-IPSEC-POLICY-MAP-MIB |
| 1.3.6.1.4.1.9.9.172.1 | ciscoIpSecPolMapMIBObjects | CISCO-IPSEC-POLICY-MAP-MIB |
| 1.3.6.1.4.1.9.9.172.1.2 | ipSecPhaseTwoPolMap | CISCO-IPSEC-POLICY-MAP-MIB |
| 1.3.6.1.4.1.9.9.172.1.2.1 | ipSecPolMapTable | CISCO-IPSEC-POLICY-MAP-MIB |
| 1.3.6.1.4.1.9.9.172.1.2.1.1 | ipSecPolMapEntry | CISCO-IPSEC-POLICY-MAP-MIB |
| 1.3.6.1.4.1.9.9.172.1.2.1.1.2 | ipSecPolMapCryptoMapName | CISCO-IPSEC-POLICY-MAP-MIB |