All MIBs › CISCO-SSL-PROXY-MIB › cspServCertExpiring
cspServCertExpiring
Module: CISCO-SSL-PROXY-MIB
OID (symbolic): CISCO-SSL-PROXY-MIB::cspServCertExpiring
OID (numeric): 1.3.6.1.4.1.9.9.370.0.2
Node type: NOTIFICATION-TYPE
Description: The proxy service certificate expiring notification.
If the time interval cspGcPSCertExpireInterval is positive, and cspGcNotifyPSCertExpiring is 'true', a notification will be issued for every proxy service certificate that will be expiring within this time interval.
This notification is issued only once for each of these certificates. If the interval is changed from a positive value to 0, the proxy device will clear its memory of notification issued in the past, and stop issuing new notification.
The notification contains the subject name, the serial number and the issuer name of the certificate, the serial number of the issuer's certificate, and the end date on the certificate.
Examples
Send this trap to an SNMP manager — replace <manager> with the IP or hostname of your monitoring server (SNMPv2c):
snmptrap -v2c -c public <manager> '' CISCO-SSL-PROXY-MIB::cspServCertExpiring snmptrap -v2c -c public <manager> '' 1.3.6.1.4.1.9.9.370.0.2
Listen for incoming traps on the manager host (-f keeps it in the foreground, -Lo prints to stdout — useful for testing):
snmptrapd -f -Lo -c /dev/null authCommunity log public
Example snmptrapd log entry:
zoo11-linux.zoo [UDP: [192.168.30.111]:50630->[192.168.30.10]:162]: DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (354835910) 41 days, 1:39:19.10 SNMPv2-MIB::snmpTrapOID.0 = OID: CISCO-SSL-PROXY-MIB::cspServCertExpiring
SNMPv3 example:
snmptrap -v3 -l authPriv -u snmpv3user -a SHA -A "AuthPass1" -x AES -X "PrivPass1" <manager> '' CISCO-SSL-PROXY-MIB::cspServCertExpiring
Start monitoring Cisco SSL proxy/offload appliances with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-SSL-PROXY-MIB::cspServCertExpiring OID value, configure state conditions and alerts, and monitor any Cisco SSL proxy/offload appliances from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.9 | ciscoMgmt | CISCO-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.9.370 | ciscoSslProxyMIB | CISCO-SSL-PROXY-MIB |
| 1.3.6.1.4.1.9.9.370.0 | cspMIBNotifications | CISCO-SSL-PROXY-MIB |
| 1.3.6.1.4.1.9.9.370.0.2 | cspServCertExpiring | CISCO-SSL-PROXY-MIB |