All MIBs › CISCO-IPSEC-SIGNALING-MIB › cisgIpsSgTunAction
cisgIpsSgTunAction
Module: CISCO-IPSEC-SIGNALING-MIB
OID (symbolic): CISCO-IPSEC-SIGNALING-MIB::cisgIpsSgTunAction
OID (numeric): 1.3.6.1.4.1.9.9.438.1.1.2.1.28
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-write
Description: The action to be taken on this tunnel. If 'clear', then this tunnel is cleared. If 'rekey', then rekeying is forced on this tunnel. The value 'none' would be returned on doing read of this object.
What is cisgIpsSgTunAction?
This read-write object lets an admin remotely command an action on this specific tunnel - 'clear' to tear the tunnel down, or 'rekey' to force a fresh Phase-1 rekey - and per its description always reads back as 'none' regardless of what was last set. It's a direct SNMP-driven remote-control mechanism for individual tunnels, letting an admin force a stuck or suspect tunnel to reset without needing CLI access to the device. Setting this to 'rekey' on a tunnel showing a weak negotiated algorithm (per cisgIpsSgTunEncryptAlgo) could force a fresh negotiation that might land on a stronger mutually-supported cipher if the underlying policy has since been tightened.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.9.438.1.1.2.1.28 snmpwalk -v2c -c public <target> CISCO-IPSEC-SIGNALING-MIB::cisgIpsSgTunAction
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.9.9.438.1.1.2.1.28.1 snmpget -v2c -c public <target> CISCO-IPSEC-SIGNALING-MIB::cisgIpsSgTunAction.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.9.9.438.1.1.2.1.28.1 i <value>
Start monitoring Cisco VPN gateway equipment with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-IPSEC-SIGNALING-MIB::cisgIpsSgTunAction OID value, configure state conditions and alerts, and monitor any Cisco VPN gateway equipment from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.9 | ciscoMgmt | CISCO-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.9.438 | ciscoIPsecSignalingMIB | CISCO-IPSEC-SIGNALING-MIB |
| 1.3.6.1.4.1.9.9.438.1 | ciscoIPsecSigMIBObjects | CISCO-IPSEC-SIGNALING-MIB |
| 1.3.6.1.4.1.9.9.438.1.1 | cisgIpsSgCurrentActivity | CISCO-IPSEC-SIGNALING-MIB |
| 1.3.6.1.4.1.9.9.438.1.1.2 | cisgIpsSgTunnelTable | CISCO-IPSEC-SIGNALING-MIB |
| 1.3.6.1.4.1.9.9.438.1.1.2.1 | cisgIpsSgTunnelEntry | CISCO-IPSEC-SIGNALING-MIB |
| 1.3.6.1.4.1.9.9.438.1.1.2.1.28 | cisgIpsSgTunAction | CISCO-IPSEC-SIGNALING-MIB |