All MIBs › CISCO-VTP-MIB › vtpAuthSecretKey
vtpAuthSecretKey
Module: CISCO-VTP-MIB
OID (symbolic): CISCO-VTP-MIB::vtpAuthSecretKey
OID (numeric): 1.3.6.1.4.1.9.9.46.1.9.1.1.3
Node type: OBJECT-TYPE
Type: OCTET STRING
Access: read-write
Description: The device creating or modifying the VTP configuration signs it using the MD5 digest generated from the secret key before advertising it. Other devices in the domain receiving this configuration use the same secret key to accept it if it was correctly signed or drop it otherwise.
By default, the object has the value as a zero-length string and this value is read only. It is set to this value automatically when the password (vtpAuthPassword) is set to a zero-length octet string.
The secret key can be either generated using the password or configured by the user. Once the secret key is configured by the user, it is stored as a hexadecimal string in the device's configuration and the password is considered to be the secret key's matching password and hidden from the configuration automatically.
This object is not allowed to be set at the same time when vtpAuthPassword is set.
The secret key is overwritten by a newly generated secret key when the password is re-configured.
What is vtpAuthSecretKey?
This object holds the MD5-derived 16-byte secret key (or a zero-length value by default) that the device uses to sign VTP configuration advertisements it originates, and that receiving devices use to verify and accept them. Because this key is normally set automatically from the configured password rather than entered directly, an admin cares about it mainly as the mechanism ensuring that only advertisements signed with the domain's shared secret are trusted and applied. For example, if two switches in the same domain end up with mismatched secret keys, one will reject the other's VTP advertisements as improperly signed, and the admin diagnosing that failure would check this object.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.9.46.1.9.1.1.3 snmpwalk -v2c -c public <target> CISCO-VTP-MIB::vtpAuthSecretKey
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.9.9.46.1.9.1.1.3.1 snmpget -v2c -c public <target> CISCO-VTP-MIB::vtpAuthSecretKey.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.9.9.46.1.9.1.1.3.1 s <value>
Start monitoring Cisco Catalyst switches (VLAN Trunking Protocol) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-VTP-MIB::vtpAuthSecretKey OID value, configure state conditions and alerts, and monitor any Cisco Catalyst switches (VLAN Trunking Protocol) from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.9 | ciscoMgmt | CISCO-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.9.46 | ciscoVtpMIB | CISCO-VTP-MIB |
| 1.3.6.1.4.1.9.9.46.1 | vtpMIBObjects | CISCO-VTP-MIB |
| 1.3.6.1.4.1.9.9.46.1.9 | vtpAuthentication | CISCO-VTP-MIB |
| 1.3.6.1.4.1.9.9.46.1.9.1 | vtpAuthenticationTable | CISCO-VTP-MIB |
| 1.3.6.1.4.1.9.9.46.1.9.1.1 | vtpAuthEntry | CISCO-VTP-MIB |
| 1.3.6.1.4.1.9.9.46.1.9.1.1.3 | vtpAuthSecretKey | CISCO-VTP-MIB |