All MIBs › CISCO-SNMP-USM-OIDS-MIB
Organization: Cisco Systems, Inc.
Last Updated: 2006-02-28
Category: Cisco Devices, SNMP Framework, Textual Conventions and Registries
Description: Defines Cisco-specific OID assignments for SNMP USM authentication and privacy protocol algorithm identifiers.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is CISCO-SNMP-USM-OIDS-MIB?
CISCO-SNMP-USM-OIDS-MIB is a small Cisco extension MIB that defines additional object identifiers for SNMPv3 User-based Security Model privacy protocols beyond what RFC 3414's base SNMP-USM-MIB provides, specifically 192-bit and 256-bit key AES, and 168-bit 3DES. It belongs to Cisco's SNMP security/framework MIB family and does not expose operational monitoring data; instead it registers OID values intended to be used when setting usmUserPrivProtocol for SNMPv3 users. There is no hardware or software status data here (no uptime, temperature, CPU, etc.); its only function is to provide standardized identifiers for stronger encryption algorithm options during SNMPv3 user configuration. It explicitly depends on and extends the standard SNMP-USM-MIB (RFC 3414) and the snmpUsmMIB user table it defines. It is used wherever Cisco devices are configured for SNMPv3 with AES-192, AES-256, or 3DES-168 privacy, typically in security-hardened enterprise or government network deployments that consult the CISCO-SNMP-USM-OIDS-MIB OID list to select stronger privacy protocols.
IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-SNMP-USM-OIDS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Cisco routers/switches (SNMPv3 agents)
Monitoring Examples
An administrator configuring a Cisco device's SNMPv3 user would set usmUserPrivProtocol to cusmAESCfb192PrivProtocol, cusmAESCfb256PrivProtocol, or cusm3DES168PrivProtocol (found under ciscoSnmpPrivProtocols) to select a stronger encryption algorithm than the RFC 3414 default. There is no ongoing runtime data to poll here beyond configuration; the objects are consulted once at user-account setup time to pick the correct privacy protocol OID.
What Can Be Monitored
- available SNMPv3 privacy protocol OIDs (AES-192, AES-256, 3DES-168)
Imported Objects
From CISCO-SMI
| ciscoModules | OBJECT-IDENTITY |
From SNMPv2-SMI
| MODULE-IDENTITY |
OIDs
RFC description
Defines encryption OID identifiers for SNMPv3 user security model including AES and 3DES privacy protocols.
Start monitoring Cisco routers/switches (SNMPv3 agents) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.