CISCO-NAC-TC-MIB
6 objects
This module defines the textual conventions for Cisco Network Admission Control(NAC) system. The Cisco Network Admission Control security solution offers a systems approach to customers for ensuring endpoint device compliancy and vulnerability checks prior to production access to the network. Cisco refers to these compliancy checks as posture validations. The intent of this systems approach is to prevent the spread of works, viruses, and rogue applications across the network. This systems approach requires integration with third party end point security applications, as well as endpoint security servers. Terminology used: EOU - Extensible Authentication Protocol over UDP. UCT - Un Conditional Transition. CTA - Cisco Trust Agent. EAP - Extensible Authentication Protocol. An extension to PPP. ACS/AAA - Cisco Secure Access Control Server. The primary authorization server that is the network policy decision point and is extended to support posture validation. NAD - Network Access Device that enforces network access control policies through layer 2 or layer 3 challenge-responses with a network enabled Endpoint device.
Imported Objects
| CISCO-SMI | ciscoMgmt |
| SNMPv2-SMI | MODULE-IDENTITY |
| SNMPv2-TC | TEXTUAL-CONVENTION |
| OID | Name | Access | Status | Description |
|---|---|---|---|---|
| 1.3.6.1.4.1.9.9.530 | IdentityciscoNacTcMIB | This module defines the textual conventions for Cisco Network Admission Control(NAC) system. The Cisco Network Admission Control security solution offers a sys… |
Type Definitions
| Name | Syntax | Status | Description |
|---|---|---|---|
| CnnEouAuthType | INTEGER { clientless(1), eap(2), static(3), unknown(4) } | current | Type of authentication for NAD. clientless(1) End point device that does not run Cisco Trust Agent. eap(2) Authorized via Extensible Authentication Protocol. static(3) Statically authorized or rejected individual end po… |
| CnnEouDeviceType | INTEGER { ciscoIpPhone(1) } | current | The supported exempt device type on NAD. ciscoIpPhone(1) - Cisco IP Phone |
| CnnEouPostureToken | INTEGER { unknown(1), healthy(2), checkup(3), quarantine(4), infected(5) } | deprecated | Posture token which representing the endpoint device's relative compliance to the network compliance policy. unknown(1) The posture credentials of the endpoint host cannot be determined. The integrity of the endpoint sh… |
| CnnEouPostureTokenString | OCTET STRING (SIZE (0..255)) | current | Posture token which representing the endpoint device's relative compliance to the network compliance policy. Valid characters are a-z, A-Z, 0-9, ,'#', '-', '_', and '.'. Posture token string is case sensitive and permit… |
| CnnEouState | INTEGER { initialize(1), hello(2), clientless(3), eapRequest(4), response(5), authenticated(6), fail(7), abort(8), aaaFail(9), hold(10), client(11), server(12) } | current | Describes the EOU state. initialize(1) Indicates that the EOU state is in initialization. State machine enters this state when a new IP has been learned on the port. Cleanup of the port configuration also force entering… |