All MIBs › CISCOSB-DIGITALKEYMANAGE-MIB
Organization: Cisco Small Business
Last Updated: 2007-01-02
Category: VPN and Security, Vendor: RADLAN/Cisco SB
Description: Manages Cisco Small Business digital key and certificate management for secure communications.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is CISCOSB-DIGITALKEYMANAGE-MIB?
CISCOSB-DIGITALKEYMANAGE-MIB is a private Cisco Small Business MIB covering digital key management, specifically MD5 key-chain administration used to authenticate routing protocol exchanges (e.g., OSPF/RIP/BGP MD5 authentication) on SMB routers/switches. It exposes configuration objects for key chains: key identifiers, key values, and time windows during which each key is valid for accepting or generating authenticated packets. Its relevance to monitoring is largely software/security-configuration status — verifying that key rollover windows (start/stop accept and generate times) are correctly scheduled so that routing protocol authentication does not silently expire and break adjacencies. It implicitly depends on standard routing-protocol MD5 authentication concepts (as used by OSPF, RIP-2, and similar protocols) rather than defining a new cryptographic scheme itself. It is typically deployed on Cisco Small Business routers/switches running authenticated routing protocols in SMB or branch-office networks. Engineers can download the CISCOSB-DIGITALKEYMANAGE-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in CISCOSB-DIGITALKEYMANAGE-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Cisco Small Business (SB/SG series) router/switch
Monitoring Examples
An operator would inspect rlMD5KeyChainTable/rlMD5KeyChainEntry for a given rlMD5KeyChainName and rlMD5KeyChainKeyId, checking rlMD5KeyChainKeyValidForAccept and rlMD5KeyChainKeyValidForGenerate against the current time to ensure the active key hasn't lapsed. If rlMD5KeyChainKeyStopGenerate has passed without a new key's rlMD5KeyChainKeyStartGenerate window overlapping, routing peers using that key chain will start failing authentication and drop adjacencies. rlMD5KeyChainRowStatus can be checked to confirm a new key entry was successfully activated rather than left in a notReady state.
What Can Be Monitored
- key chain name and key ID
- key value presence
- key accept start/stop time
- key generate start/stop time
- key validity windows
- key-chain row status
Imported Objects
From CISCOSB-MIB
| switch001 | MODULE-IDENTITY |
From SNMPv2-SMI
| MODULE-IDENTITY | |
| OBJECT-TYPE |
From SNMPv2-TC
| DateAndTime | |
| DisplayString | |
| RowStatus | |
| TruthValue |
OIDs
RFC description
Cisco Small Business vendor-private MIB for digital key and certificate management on SMB switches and appliances.
Start monitoring Cisco Small Business (SB/SG series) router/switch with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.