CISCO-SDWAN-SECURITY-MIB

All MIBs › CISCO-SDWAN-SECURITY-MIB

Organization: Cisco Systems, Inc.

Last Updated: 2021-02-26

Category: Cisco Devices, VPN and Security

Description: Monitors security policy enforcement and threat detection statistics on Cisco SD-WAN edge devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CISCO-SDWAN-SECURITY-MIB?

CISCO-SDWAN-SECURITY-MIB is a Cisco Systems, Inc. proprietary MIB (Viptela SD-WAN heritage) reporting control-plane security and certificate status for a Cisco SD-WAN edge device. Its objects cover device type, organization name, certificate/root-CA-chain status and validity window, DNS name, site/domain ID, TLS port, system IP, UUID, board serial number, register/retry intervals, no-activity timeout, DNS-cache-flush interval, port-hop status and time-since-hop, max controllers, key-generation interval, vBond peer count, active WAN interface count, and enterprise-certificate status. As a configuration/status MIB it lets an administrator confirm an SD-WAN edge device's control-plane certificate validity and controller-connection health. It is deployed on Cisco SD-WAN (Viptela) edge devices. Engineers can download the CISCO-SDWAN-SECURITY-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-SDWAN-SECURITY-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco SD-WAN (Viptela) edge devices

Monitoring Examples

An administrator checks controlLocalPropertiesCertificateValidity and controlLocalPropertiesNumberVbondPeers to confirm an SD-WAN edge device's control-plane security posture on Cisco SD-WAN.

What Can Be Monitored

control-plane certificate status and controller connectivity

Imported Objects

From CISCO-SMI

ciscoMgmt

OBJECT-IDENTITY

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

TEXTUAL-CONVENTION

OIDs

OID symbolic	OID numeric	Type	Access	Description
OCT ciscoSdwanSecurityCertificateSerialNumber	1.3.6.1.4.1.9.9.1006.2.27	OCTET STRING	read-only	Certificate serial number
CER ciscoSdwanSecurityCertificateType	1.3.6.1.4.1.9.9.1006.2.26	CertificateTypeEnum	read-only	Certificate type
COL ciscoSdwanSecurityColor	1.3.6.1.4.1.9.9.1006.2.20	ColorEnum	read-only	Color
NTF ciscoSdwanSecurityControlConnectionAuthFail	1.3.6.1.4.1.9.9.1006.0.2			Cisco SDWAN trap from security
NTF ciscoSdwanSecurityControlConnectionStateChange	1.3.6.1.4.1.9.9.1006.0.1			Cisco SDWAN trap from security
NTF ciscoSdwanSecurityControlConnectionTlocIpChange	1.3.6.1.4.1.9.9.1006.0.3			Cisco SDWAN trap from security
NTF ciscoSdwanSecurityControlNoActiveVbond	1.3.6.1.4.1.9.9.1006.0.6			Cisco SDWAN trap from security
NTF ciscoSdwanSecurityControlNoActiveVsmart	1.3.6.1.4.1.9.9.1006.0.5			Cisco SDWAN trap from security
NTF ciscoSdwanSecurityControlVbondStateChange	1.3.6.1.4.1.9.9.1006.0.4			ciscoSdwan trap from security
I32 ciscoSdwanSecurityDaysToExpiry	1.3.6.1.4.1.9.9.1006.2.29	Integer32	read-only	Certificate days to expiry
NTF ciscoSdwanSecurityDeviceTemplateAttachedDuringZtp	1.3.6.1.4.1.9.9.1006.0.26			Cisco SDWAN trap from security
NTF ciscoSdwanSecurityDeviceTemplateMissing	1.3.6.1.4.1.9.9.1006.0.25			Cisco SDWAN trap from security
OCT ciscoSdwanSecurityIssuer	1.3.6.1.4.1.9.9.1006.2.28	OCTET STRING	read-only	Certificate issuer
COL ciscoSdwanSecurityLocalColor	1.3.6.1.4.1.9.9.1006.2.14	ColorEnum	read-only	Local color
ADR ciscoSdwanSecurityLocalSystemIp	1.3.6.1.4.1.9.9.1006.2.13	InetAddressIP	read-only	Local system ip
ciscoSdwanSecurityMIB	1.3.6.1.4.1.9.9.1006			This module defines data model for Cisco SDWAN security management
ciscoSdwanSecurityMIBCompliance	1.3.6.1.4.1.9.9.1006.3.1.1			The compliance statement for the SNMP entities that implement the ciscoSdwanAppRouteMIB module.
ciscoSdwanSecurityMIBCompliances	1.3.6.1.4.1.9.9.1006.3.1
ciscoSdwanSecurityMIBConform	1.3.6.1.4.1.9.9.1006.3
ciscoSdwanSecurityMIBGroups	1.3.6.1.4.1.9.9.1006.3.2
ciscoSdwanSecurityMIBNotifObjects	1.3.6.1.4.1.9.9.1006.2
ciscoSdwanSecurityMIBNotifs	1.3.6.1.4.1.9.9.1006.0
ciscoSdwanSecurityMIBObjects	1.3.6.1.4.1.9.9.1006.1
ADR ciscoSdwanSecurityNewPublicIp	1.3.6.1.4.1.9.9.1006.2.18	InetAddressIP	read-only	New public ip
U32 ciscoSdwanSecurityNewPublicPort	1.3.6.1.4.1.9.9.1006.2.19	Unsigned32	read-only	New public port
OPE ciscoSdwanSecurityNewState	1.3.6.1.4.1.9.9.1006.2.12	OperState	read-only	New state
ADR ciscoSdwanSecurityOldPublicIp	1.3.6.1.4.1.9.9.1006.2.16	InetAddressIP	read-only	Old public ip
U32 ciscoSdwanSecurityOldPublicPort	1.3.6.1.4.1.9.9.1006.2.17	Unsigned32	read-only	Old public port
OCT ciscoSdwanSecurityOrganizationName	1.3.6.1.4.1.9.9.1006.2.24	OCTET STRING	read-only	Organization name
ADR ciscoSdwanSecurityPeerSystemIp	1.3.6.1.4.1.9.9.1006.2.5	InetAddressIP	read-only	Peer system ip
PER ciscoSdwanSecurityPeerType	1.3.6.1.4.1.9.9.1006.2.4	PersonalityEnumOper	read-only	Peer device type
ADR ciscoSdwanSecurityPeerVmanageSystemIp	1.3.6.1.4.1.9.9.1006.2.6	InetAddressIP	read-only	Peer vmanage system ip
PER ciscoSdwanSecurityPersonality	1.3.6.1.4.1.9.9.1006.2.3	PersonalityEnumOper	read-only	Device type
ADR ciscoSdwanSecurityPublicIp	1.3.6.1.4.1.9.9.1006.2.7	InetAddressIP	read-only	Public ip
U32 ciscoSdwanSecurityPublicPort	1.3.6.1.4.1.9.9.1006.2.8	Unsigned32	read-only	Public port
OCT ciscoSdwanSecurityReason	1.3.6.1.4.1.9.9.1006.2.15	OCTET STRING	read-only	Reason
COL ciscoSdwanSecurityRemoteColor	1.3.6.1.4.1.9.9.1006.2.10	ColorEnum	read-only	Remote color
NTF ciscoSdwanSecuritySecurityCertificateExpired	1.3.6.1.4.1.9.9.1006.0.11			Cisco SDWAN trap from security
NTF ciscoSdwanSecuritySecurityCertificateExpiring	1.3.6.1.4.1.9.9.1006.0.10			Cisco SDWAN trap from security
NTF ciscoSdwanSecuritySecurityCertificateInstalled	1.3.6.1.4.1.9.9.1006.0.12			Cisco SDWAN trap from security
NTF ciscoSdwanSecuritySecurityClearInstalledCertificate	1.3.6.1.4.1.9.9.1006.0.15			Cisco SDWAN trap from security
NTF ciscoSdwanSecuritySecurityNewCsrGenerated	1.3.6.1.4.1.9.9.1006.0.13			Cisco SDWAN trap from security
NTF ciscoSdwanSecuritySecurityRootCertChainInstalled	1.3.6.1.4.1.9.9.1006.0.9			Cisco SDWAN trap from security
NTF ciscoSdwanSecuritySecurityRootCertChainUninstalled	1.3.6.1.4.1.9.9.1006.0.14			Cisco SDWAN trap from security
NTF ciscoSdwanSecuritySecurityVedgeEntryAdded	1.3.6.1.4.1.9.9.1006.0.18			Cisco SDWAN trap from security
NTF ciscoSdwanSecuritySecurityVedgeEntryRemoved	1.3.6.1.4.1.9.9.1006.0.19			Cisco SDWAN trap from security
NTF ciscoSdwanSecuritySecurityVedgeSerialFileUploaded	1.3.6.1.4.1.9.9.1006.0.16			Cisco SDWAN trap from security
NTF ciscoSdwanSecuritySecurityVsmartEntryAdded	1.3.6.1.4.1.9.9.1006.0.20			Cisco SDWAN trap from security
NTF ciscoSdwanSecuritySecurityVsmartEntryRemoved	1.3.6.1.4.1.9.9.1006.0.21			Cisco SDWAN trap from security
NTF ciscoSdwanSecuritySecurityVsmartSerialFileUploaded	1.3.6.1.4.1.9.9.1006.0.17			Cisco SDWAN trap from security
OCT ciscoSdwanSecuritySerial	1.3.6.1.4.1.9.9.1006.2.22	OCTET STRING	read-only	Serial
OCT ciscoSdwanSecuritySpOrganizationName	1.3.6.1.4.1.9.9.1006.2.25	OCTET STRING	read-only	Sp organization name
COL ciscoSdwanSecuritySrcColor	1.3.6.1.4.1.9.9.1006.2.9	ColorEnum	read-only	Source color
NTF ciscoSdwanSecurityTunnelIpsecManualRekey	1.3.6.1.4.1.9.9.1006.0.8			Cisco SDWAN trap from security
NTF ciscoSdwanSecurityTunnelIpsecRekey	1.3.6.1.4.1.9.9.1006.0.7			Cisco SDWAN trap from security
OCT ciscoSdwanSecurityUptime	1.3.6.1.4.1.9.9.1006.2.11	OCTET STRING	read-only	Up time
OCT ciscoSdwanSecurityUuid	1.3.6.1.4.1.9.9.1006.2.21	OCTET STRING	read-only	Uuid
NTF ciscoSdwanSecurityVbondRejectVedgeConnection	1.3.6.1.4.1.9.9.1006.0.24			Cisco SDWAN trap from security
UNS ciscoSdwanSecurityVmanageConnectionPreference	1.3.6.1.4.1.9.9.1006.2.23	UnsignedByte	read-only	Vmanage connection preference
NTF ciscoSdwanSecurityVmanageConnectionPreferenceChanged	1.3.6.1.4.1.9.9.1006.0.23			Cisco SDWAN trap from security
control	1.3.6.1.4.1.9.9.1006.1.2
controlAffinity	1.3.6.1.4.1.9.9.1006.1.2.7
STR controlAffinityConfigAffcCcl	1.3.6.1.4.1.9.9.1006.1.2.7.5	String	read-only	Current controller group ID list
STR controlAffinityConfigAffcEcl	1.3.6.1.4.1.9.9.1006.1.2.7.4	String	read-only	Effective controller group id list
STR controlAffinityConfigAffcEquil	1.3.6.1.4.1.9.9.1006.1.2.7.6	String	read-only	Equilibrium
U32 controlAffinityConfigAffcErvc	1.3.6.1.4.1.9.9.1006.1.2.7.3	Unsigned32	read-only	Effective required vSmart count
U32 controlAffinityConfigAffcIndex	1.3.6.1.4.1.9.9.1006.1.2.7.1	Unsigned32	read-only	WAN index
STR controlAffinityConfigAffcInterface	1.3.6.1.4.1.9.9.1006.1.2.7.2	String	read-only	Interface name
STR controlAffinityConfigAffcLastResort	1.3.6.1.4.1.9.9.1006.1.2.7.7	String	read-only	Last-resort Interface
controlLocalProperties	1.3.6.1.4.1.9.9.1006.1.2.5
STR controlLocalPropertiesBoardSerial	1.3.6.1.4.1.9.9.1006.1.2.5.15	String	read-only	Board ID serial number
STR controlLocalPropertiesCertificateNotValidAfter	1.3.6.1.4.1.9.9.1006.1.2.5.7	String	read-only	Certificate not valid after
STR controlLocalPropertiesCertificateNotValidBefore	1.3.6.1.4.1.9.9.1006.1.2.5.6	String	read-only	Certificate not valid before
STR controlLocalPropertiesCertificateStatus	1.3.6.1.4.1.9.9.1006.1.2.5.3	String	read-only	Certificate status
STR controlLocalPropertiesCertificateValidity	1.3.6.1.4.1.9.9.1006.1.2.5.5	String	read-only	Certificate validity
INT controlLocalPropertiesDeviceType	1.3.6.1.4.1.9.9.1006.1.2.5.1	INTEGER	read-only	Personality
STR controlLocalPropertiesDnsCacheFlushInterval	1.3.6.1.4.1.9.9.1006.1.2.5.19	String	read-only	DNS cache time to live
STR controlLocalPropertiesDnsName	1.3.6.1.4.1.9.9.1006.1.2.5.8	String	read-only	DNS name
U32 controlLocalPropertiesDomainId	1.3.6.1.4.1.9.9.1006.1.2.5.10	Unsigned32	read-only	Domain ID
STR controlLocalPropertiesEnterpriseCertificateNotValidAfter	1.3.6.1.4.1.9.9.1006.1.2.5.39	String	read-only	Enterprise certificate not valid after
STR controlLocalPropertiesEnterpriseCertificateNotValidBefore	1.3.6.1.4.1.9.9.1006.1.2.5.38	String	read-only	Enterprise certificate not valid before
STR controlLocalPropertiesEnterpriseCertificateStatus	1.3.6.1.4.1.9.9.1006.1.2.5.36	String	read-only	Enterprise certificate status
STR controlLocalPropertiesEnterpriseCertificateValidity	1.3.6.1.4.1.9.9.1006.1.2.5.37	String	read-only	Enterprise certificate validity
STR controlLocalPropertiesKeygenInterval	1.3.6.1.4.1.9.9.1006.1.2.5.23	String	read-only	Key generation interval
UNS controlLocalPropertiesMaxControllers	1.3.6.1.4.1.9.9.1006.1.2.5.22	UnsignedByte	read-only	Maximum number of controllers
STR controlLocalPropertiesNoActivity	1.3.6.1.4.1.9.9.1006.1.2.5.18	String	read-only	No activity expiry interval
U32 controlLocalPropertiesNumberActiveWanInterfaces	1.3.6.1.4.1.9.9.1006.1.2.5.27	Unsigned32	read-only	Number of WAN interfaces
U32 controlLocalPropertiesNumberVbondPeers	1.3.6.1.4.1.9.9.1006.1.2.5.25	Unsigned32	read-only	Number of vBond peers
STR controlLocalPropertiesOrganizationName	1.3.6.1.4.1.9.9.1006.1.2.5.2	String	read-only	Organization name
STR controlLocalPropertiesPortHopped	1.3.6.1.4.1.9.9.1006.1.2.5.20	String	read-only	Device changed port
STR controlLocalPropertiesRegisterInterval	1.3.6.1.4.1.9.9.1006.1.2.5.16	String	read-only	Register interval - Deprecated in 15.4
STR controlLocalPropertiesRetryInterval	1.3.6.1.4.1.9.9.1006.1.2.5.17	String	read-only	Retry interval
STR controlLocalPropertiesRootCaChainStatus	1.3.6.1.4.1.9.9.1006.1.2.5.4	String	read-only	Root CA chain status
U32 controlLocalPropertiesSiteId	1.3.6.1.4.1.9.9.1006.1.2.5.9	Unsigned32	read-only	Site ID
ADR controlLocalPropertiesSystemIp	1.3.6.1.4.1.9.9.1006.1.2.5.13	InetAddressIP	read-only	System IP address
STR controlLocalPropertiesTimeSincePortHop	1.3.6.1.4.1.9.9.1006.1.2.5.21	String	read-only	Time since last port hop
U32 controlLocalPropertiesTlsPort	1.3.6.1.4.1.9.9.1006.1.2.5.12	Unsigned32	read-only	TLS port
STR controlLocalPropertiesUuid	1.3.6.1.4.1.9.9.1006.1.2.5.14	String	read-only	Unique device identifier
controlSummary	1.3.6.1.4.1.9.9.1006.1.2.6
U32 controlSummaryInstance	1.3.6.1.4.1.9.9.1006.1.2.6.1	Unsigned32	read-only	vdaemon instance ID
U32 controlSummaryVbondCounts	1.3.6.1.4.1.9.9.1006.1.2.6.2	Unsigned32	read-only	Number of Vbond
U32 controlSummaryVmanageCounts	1.3.6.1.4.1.9.9.1006.1.2.6.3	Unsigned32	read-only	Number of Vmanages
U32 controlSummaryVsmartCounts	1.3.6.1.4.1.9.9.1006.1.2.6.4	Unsigned32	read-only	Number of Vsmarts
cSdwanSecurityControlAffinityGroup	1.3.6.1.4.1.9.9.1006.3.2.5			This is a collection of objects of security affinity config.
cSdwanSecurityControlLocalPropertiesGroup	1.3.6.1.4.1.9.9.1006.3.2.1			This is a collection of objects of security control local properties.
cSdwanSecurityControlSummaryGroup	1.3.6.1.4.1.9.9.1006.3.2.4			This is a collection of objects of security control summary.
cSdwanSecurityNotifObjsGroup	1.3.6.1.4.1.9.9.1006.3.2.2			This is a collection of objects of security notification objects.
cSdwanSecurityNotifsGroup	1.3.6.1.4.1.9.9.1006.3.2.3			This is a collection of security notifications.
NOT netconfNotificationSeverity	1.3.6.1.4.1.9.9.1006.2.2	NotificationSeverity	read-only	Netconf notification severity level

RFC description

Defines data model for Cisco SD-WAN security management with device personality and operational status monitoring.

Start monitoring Cisco SD-WAN (Viptela) edge devices with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CISCO-SDWAN-SECURITY-MIB

What Is CISCO-SDWAN-SECURITY-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description