CISCO-SNMP-HANDSHAKE-MIB

All MIBs › CISCO-SNMP-HANDSHAKE-MIB

Organization: Cisco Systems Inc.

Last Updated: 2007-05-23

Category: Cisco Devices, SNMP Framework

Description: Provides SNMP connectivity verification via handshake objects to confirm SNMP reachability to Cisco devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CISCO-SNMP-HANDSHAKE-MIB?

CISCO-SNMP-HANDSHAKE-MIB implements an application-layer handshake mechanism that Cisco devices use to verify a management station's legitimacy before granting it broader SNMP MIB view access via VACM. It exposes handshake initiation, update, and check objects that a manager must exercise in sequence to prove it is an authorized SNMP client, rather than exposing operational device data. This MIB is primarily a security/access-control mechanism rather than a hardware or software status monitor, though it indirectly supports monitoring reliability by ensuring only verified managers can retrieve status data, preventing unauthorized third-party SNMP browsers from reading device MIBs. It depends on the SNMP-VIEW-BASED-ACM-MIB (VACM) framework, since a successful handshake results in the agent creating VACM entries to grant access. It is deployed on Cisco devices in security-conscious environments where SNMP community strings or SNMPv3 credentials alone are not considered sufficient access control. Engineers can download the CISCO-SNMP-HANDSHAKE-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-SNMP-HANDSHAKE-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco routers and switches
Cisco IOS devices (SNMP handshake/liveness feature)

Monitoring Examples

A management application would invoke csHandshakeInit followed by csHandshakeUpdate and csHandshakeCheck in the documented sequence to prove itself before the agent grants broader MIB view access; there are no ongoing performance or fault counters to poll here since this MIB's objects represent handshake protocol steps rather than device telemetry. The ciscoSnmpHandshakeMIBNotifs group would signal handshake success or failure events for audit purposes.

What Can Be Monitored

handshake initiation status
handshake verification result
access-grant/VACM trigger events

Imported Objects

From AIRESPACE-WIRELESS-MIB

bsnWireless

MODULE-IDENTITY

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
ciscoSnmpHandshakeMIB	1.3.6.1.4.1.14179.2.40			This MIB is intended for those devices where SNMP access is given to be given to known SNMP Manager only. All the SNMP MIBs are published, any thrid party SNMP browser can retrieve data using SNMP protocol. By implementing this MIB, a application layer handshake has to be done before any MIB view access is granted to SNMPV2c community string or SNMPV3 user. Once the handshake is successfully over then SNMP agent can create VACM entry to provide access to any MIB view. GLOSSARY View-based Access Control Model ( VACM ) The VACM determines whether access to a managed object in a local MIB by a remote SNMP manager should be allowed.
ciscoSnmpHandshakeMIBNotifs	1.3.6.1.4.1.14179.2.40.0
ciscoSnmpHandshakeMIBObjects	1.3.6.1.4.1.14179.2.40.1
ciscoSnmpHandshakeProcess	1.3.6.1.4.1.14179.2.40.1.1
OCT csHandshakeInit	1.3.6.1.4.1.14179.2.40.1.1.1	OCTET STRING	read-only	Get on this object will return random 16 bytes octet-string. Device will cache this string against IP-Address of sender. This string will be later used to comeplete the handshake.
OCT csHandshakeUpdate	1.3.6.1.4.1.14179.2.40.1.1.2	OCTET STRING	read-write	Set on this object will make snmp agent to run the secret algorithm to give access or deny access to SNMP manager. Access will be given to the community string used and to the sender's IP-Address only.
ciscoSnmpHandshakeTest	1.3.6.1.4.1.14179.2.40.1.2
T/F csHandshakeCheck	1.3.6.1.4.1.14179.2.40.1.2.1	TruthValue	read-only	This object can be use to perform test of MIB view access. Once the handshake is successfully completed. The MIB-view access will be granted for this object, If MIB-view is not granted yet for this object then no-access error will be returned.
ciscoSnmpHandshakeMIBConform	1.3.6.1.4.1.14179.2.40.2
ciscoSnmpHandshakeMIBCompliances	1.3.6.1.4.1.14179.2.40.2.1
ciscoSnmpHandshakeMIBCompliance	1.3.6.1.4.1.14179.2.40.2.1.1			The compliance statement for the SNMP entities that implement the ciscoSnmpHandshakeMIB module.
ciscoSnmpHandshakeMIBGroups	1.3.6.1.4.1.14179.2.40.2.2
ciscoSnmpHandshakeGroup	1.3.6.1.4.1.14179.2.40.2.2.1			This collection of objects represents the information about attributes needed to completed SNMP handhshake

RFC description

Implements SNMP application-layer handshake security for Cisco wireless devices to restrict access to authorized managers only.

Start monitoring Cisco IOS devices with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CISCO-SNMP-HANDSHAKE-MIB

What Is CISCO-SNMP-HANDSHAKE-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description