how to monitor IKEv2 tunnel status on Cisco IOS (XE)? SNMP MIB

[quinn-imagine]

Hi all,

For IKEv1, I use 1.3.6.1.4.1.9.9.171.1.2.3.1.35, however, it does not include IKEv2 tunnel of course.

I only found one tread here mention "1.3.6.1.4.1.9.9.392", it seems working for ASA.

But it does not work on Cisco CSR,  I run "snmpwalk", got below:

iso.3.6.1.4.1.9.9.392 = No Such Object available on this agent at this OID

Any clue?

[MHM Cisco World]

1.3.6.1.4.1.9.9.27

check this OID

[quinn-imagine]

Thanks, but it not work. 

snmpwalk -Os -c public -v 2c xxx.xxx.xxx.xxx 1.3.6.1.4.1.9.9.27
iso.3.6.1.4.1.9.9.27 = No Such Object available on this agent at this OID

[quinn-imagine · Accepted solution]

Hi all, the problem is solved.

Actually 1.3.6.1.4.1.9.9.171.1.2.3.1.35 includes both IKEv1 and IKEv2 tunnel status.

The problem is when I try to match the name of the connection to the tunnel status, I use OID "1.3.6.1.4.1.9.9.171.1.2.3.1.7", and the result include "STRING" and "HEX STRING",  the IKEv2 tunnel that I'm trying to match is hex encoded.

So in order to match the tunnel name with the status, need to consider both "STRING" and "HEX STRING".

[MHM Cisco World]

Thanks a lot for update us

MHM