CISCO-UNIFIED-FIREWALL-MIB :: cufwCluUnitHoldtime

MIB Reference — IPNetwork Monitor · Updated September 14, 2026

All MIBsCISCO-UNIFIED-FIREWALL-MIBcufwCluUnitHoldtime

cufwCluUnitHoldtime

Module: CISCO-UNIFIED-FIREWALL-MIB

OID (symbolic): CISCO-UNIFIED-FIREWALL-MIB::cufwCluUnitHoldtime

OID (numeric): 1.3.6.1.4.1.9.9.491.1.8.1.14

Node type: OBJECT-TYPE

Type: INTEGER

Access: read-only

Description: To determine unit health, the ASA cluster units send keepalive messages on the cluster control link to other units. The hold time that each unit will wait before declaring a peer unit as dead.

What is cufwCluUnitHoldtime?

This read-only INTEGER, ranging 800 to 45000 milliseconds, sets how long each unit waits, based on keepalive messages exchanged over the cluster control link, before declaring a peer unit dead. An admin tunes this to balance fast detection of a failed cluster member against tolerance for brief control-link hiccups. Setting this too short on a control link prone to occasional latency would risk an admin seeing units incorrectly declared dead and removed from the cluster.

Examples

Walk all instances (SNMPv2c):

snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.9.491.1.8.1.14
snmpwalk -v2c -c public <target> CISCO-UNIFIED-FIREWALL-MIB::cufwCluUnitHoldtime

Get a specific instance (index 1):

snmpget -v2c -c public <target> 1.3.6.1.4.1.9.9.491.1.8.1.14.1
snmpget -v2c -c public <target> CISCO-UNIFIED-FIREWALL-MIB::cufwCluUnitHoldtime.1

SNMPv3 example:

snmpget -v3 -l authPriv -u snmpv3-user -a SHA -A "AuthPassword1" -x AES -X "PrivPassword1" <target> cufwCluUnitHoldtime.1

Start monitoring Cisco ASA firewalls / IOS zone-based firewall devices with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-UNIFIED-FIREWALL-MIB::cufwCluUnitHoldtime OID value, configure state conditions and alerts, and monitor any Cisco ASA firewalls / IOS zone-based firewall devices from a single console.

OID Breakdown

Upper-level ancestors (8 from the standard OID tree / other modules)
Numeric OIDNameModule
1isoLANART-AGENT
1.3orgAirPair-MIB
1.3.6dodAirPair-MIB
1.3.6.1internetAirPair-MIB
1.3.6.1.4privateAirPair-MIB
1.3.6.1.4.1enterprisesAirPair-MIB
1.3.6.1.4.1.9ciscoCAT2600-MIB
1.3.6.1.4.1.9.9ciscoMgmtCISCO-SMI
Numeric OIDNameModule
1.3.6.1.4.1.9.9.491ciscoUnifiedFirewallMIBCISCO-UNIFIED-FIREWALL-MIB
1.3.6.1.4.1.9.9.491.1ciscoUnifiedFirewallMIBObjectsCISCO-UNIFIED-FIREWALL-MIB
1.3.6.1.4.1.9.9.491.1.8cuFwClusterGrpCISCO-UNIFIED-FIREWALL-MIB
1.3.6.1.4.1.9.9.491.1.8.1cuFwClusterGlobalsCISCO-UNIFIED-FIREWALL-MIB
1.3.6.1.4.1.9.9.491.1.8.1.14cufwCluUnitHoldtimeCISCO-UNIFIED-FIREWALL-MIB