CISCO-TRUSTSEC-POLICY-MIB
198 objects
This MIB module defines managed objects that facilitate the management of various policies within the Cisco Trusted Security (TrustSec) infrastructure. The information available through this MIB includes: o Device and interface level configuration for enabling SGACL (Security Group Access Control List) enforcement on Layer2/3 traffic. o Administrative and operational SGACL mapping to Security Group Tag (SGT). o Various statistics counters for traffic subject to SGACL enforcement. o TrustSec policies with respect to peer device. o Interface level configuration for enabling the propagation of SGT along with the Layer 3 traffic in portions of network which does not have the capability to support TrustSec feature. o TrustSec policies with respect to SGT propagation with Layer 3 traffic. The following terms are used throughout this MIB: VRF: Virtual Routing and Forwarding. SGACL: Security Group Access Control List. ACE: Access Control Entries. SXP: SGT Propagation Protocol. SVI: Switch Virtual Interface. IPM: Identity Port Mapping. SGT (Security Group Tag) is a unique 16 bits value assigned to every security group and used by network devices to enforce SGACL. Peer is another device connected to the local device on the other side of a TrustSec link. Default Policy: Policy applied to traffic when there is no explicit policy between the SGT associated with the originator of the traffic and the SGT associated with the destination of the traffic.
Imported Objects
| CISCO-SMI | ciscoMgmt |
| CISCO-TC | Cisco2KVlanList CiscoVrfName |
| CISCO-TRUSTSEC-TC-MIB | CtsAclList CtsAclListOrEmpty CtsAclName CtsAclNameOrEmpty CtsGenerationId CtsSecurityGroupTag CtsSgaclMonitorMode |
| IF-MIB | ifIndex |
| INET-ADDRESS-MIB | InetAddress InetAddressPrefixLength InetAddressType |
| Q-BRIDGE-MIB | VlanIndex |
| SNMP-FRAMEWORK-MIB | SnmpAdminString |
| SNMPv2-CONF | MODULE-COMPLIANCE NOTIFICATION-GROUP OBJECT-GROUP |
| SNMPv2-SMI | Counter64 MODULE-IDENTITY NOTIFICATION-TYPE OBJECT-TYPE Unsigned32 |
| SNMPv2-TC | DateAndTime RowStatus StorageType TruthValue |
| OID | Name | Access | Status | Description |
|---|---|---|---|---|
| 1.3.6.1.4.1.9.9.713 | IdentityciscoTrustSecPolicyMIB | This MIB module defines managed objects that facilitate the management of various policies within the Cisco Trusted Security (TrustSec) infrastructure. The inf… | ||
| 1.3.6.1.4.1.9.9.713.0 | NodeciscoTrustSecPolicyMIBNotifs | |||
| 1.3.6.1.4.1.9.9.713.0.1 | NotificationctspPeerPolicyUpdatedNotif | current | A ctspPeerPolicyUpdatedNotif is generated when the SGT value of a peer device has been updated. | |
| 1.3.6.1.4.1.9.9.713.0.2 | NotificationctspAuthorizationSgaclFailNotif | current | A ctspAuthorizationSgaclFailNotif is generated when the authorization of SGACL fails. | |
| 1.3.6.1.4.1.9.9.713.1 | NodeciscoTrustSecPolicyMIBObjects | |||
| 1.3.6.1.4.1.9.9.713.1.1 | NodectspSgacl | |||
| 1.3.6.1.4.1.9.9.713.1.1.1 | NodectspSgaclGlobals | |||
| 1.3.6.1.4.1.9.9.713.1.1.1.1 | ScalarctspSgaclEnforcementEnable | read-write | current | This object specifies whether SGACL enforcement for all Layer 3 interfaces (excluding SVIs) is enabled at the managed system. 'none' indicates that SGACL enfor… |
| 1.3.6.1.4.1.9.9.713.1.1.1.2 | ScalarctspSgaclIpv4DropNetflowMonitor | read-write | current | This object specifies an existing flexible netflow monitor name used to collect and export the IPv4 traffic dropped packets statistics due to SGACL enforcement… |
| 1.3.6.1.4.1.9.9.713.1.1.1.3 | ScalarctspSgaclIpv6DropNetflowMonitor | read-write | current | This object specifies an existing flexible netflow monitor name used to collect and export the IPv6 traffic dropped packets statistics due to SGACL enforcement… |
| 1.3.6.1.4.1.9.9.713.1.1.1.4 | TablectspVlanConfigTable | not-accessible | current | This table lists the SGACL enforcement for Layer 2 and Layer 3 switched packet in a VLAN as well as VRF information for VLANs in the device. |
| 1.3.6.1.4.1.9.9.713.1.1.1.4.1 | RowctspVlanConfigEntry | not-accessible | current | Each row contains the SGACL enforcement information for Layer 2 and Layer 3 switched packets in a VLAN identified by its VlanIndex value. Entry in this table i… |
| 1.3.6.1.4.1.9.9.713.1.1.1.4.1.1 | ColumnctspVlanConfigIndex | not-accessible | current | This object indicates the VLAN-ID of this VLAN. |
| 1.3.6.1.4.1.9.9.713.1.1.1.4.1.2 | ColumnctspVlanConfigSgaclEnforcement | read-create | current | This object specifies the configured SGACL enforcement status for this VLAN i.e., 'true' = enabled and 'false' = disabled. |
| 1.3.6.1.4.1.9.9.713.1.1.1.4.1.3 | ColumnctspVlanSviActive | read-only | current | This object indicates if there is an active SVI associated with this VLAN. 'true' indicates that there is an active SVI associated with this VLAN. and SGACL is… |
| 1.3.6.1.4.1.9.9.713.1.1.1.4.1.4 | ColumnctspVlanConfigVrfName | read-create | current | This object specifies an existing VRF where this VLAN belongs to. The zero length value indicates this VLAN belongs to the default VRF. |
| 1.3.6.1.4.1.9.9.713.1.1.1.4.1.5 | ColumnctspVlanConfigStorageType | read-create | current | The objects specifies the storage type for this conceptual row. |
| 1.3.6.1.4.1.9.9.713.1.1.1.4.1.6 | ColumnctspVlanConfigRowStatus | read-create | current | The status of this conceptual row entry. This object is used to manage creation and deletion of rows in this table. When this object value is 'active', other w… |
| 1.3.6.1.4.1.9.9.713.1.1.2 | NodectspSgaclMappings | |||
| 1.3.6.1.4.1.9.9.713.1.1.2.1 | TablectspConfigSgaclMappingTable | not-accessible | current | This table contains the SGACLs information which is applied to unicast IP traffic which carries a source SGT and travels to a destination SGT. |
| 1.3.6.1.4.1.9.9.713.1.1.2.1.1 | RowctspConfigSgaclMappingEntry | not-accessible | current | Each row contains the SGACL mapping to source and destination SGT for a certain traffic type as well as status of this instance. A row instance can be created … |
| 1.3.6.1.4.1.9.9.713.1.1.2.1.1.1 | ColumnctspConfigSgaclMappingIpTrafficType | not-accessible | current | This object indicates the type of the unicast IP traffic carrying the source SGT and travelling to destination SGT and subjected to SGACL enforcement. |
| 1.3.6.1.4.1.9.9.713.1.1.2.1.1.2 | ColumnctspConfigSgaclMappingDestSgt | not-accessible | current | This object indicates the destination SGT value. Value of zero indicates that the destination SGT is unknown. |
| 1.3.6.1.4.1.9.9.713.1.1.2.1.1.3 | ColumnctspConfigSgaclMappingSourceSgt | not-accessible | current | This object indicates the source SGT value. Value of zero indicates that the source SGT is unknown. |
| 1.3.6.1.4.1.9.9.713.1.1.2.1.1.4 | ColumnctspConfigSgaclMappingSgaclName | read-create | current | This object specifies the list of existing SGACLs which is administratively configured to apply to unicast IP traffic carrying the source SGT to the destinatio… |
| 1.3.6.1.4.1.9.9.713.1.1.2.1.1.5 | ColumnctspConfigSgaclMappingStorageType | read-create | current | The storage type for this conceptual row. |
| 1.3.6.1.4.1.9.9.713.1.1.2.1.1.6 | ColumnctspConfigSgaclMappingRowStatus | read-create | current | This object is used to manage the creation and deletion of rows in this table. ctspConfigSgaclName may be modified at any time. |
| 1.3.6.1.4.1.9.9.713.1.1.2.1.1.7 | ColumnctspConfigSgaclMonitor | read-create | current | This object specifies whether SGACL monitor mode is turned on for the configured SGACL enforced traffic. |
| 1.3.6.1.4.1.9.9.713.1.1.2.2 | ScalarctspDefConfigIpv4Sgacls | read-write | current | This object specifies the SGACLs of the unicast default policy for IPv4 traffic. If there is no SGACL configured for unicast default policy for IPv4 traffic, t… |
| 1.3.6.1.4.1.9.9.713.1.1.2.3 | ScalarctspDefConfigIpv6Sgacls | read-write | current | This object specifies the SGACLs of the unicast default policy for IPv6 traffic. If there is no SGACL configured for unicast default policy for IPv6 traffic, t… |
| 1.3.6.1.4.1.9.9.713.1.1.2.4 | TablectspDownloadedSgaclMappingTable | not-accessible | current | This table contains the downloaded SGACLs information applied to unicast IP traffic which carries a source SGT and travels to a destination SGT. |
| 1.3.6.1.4.1.9.9.713.1.1.2.4.1 | RowctspDownloadedSgaclMappingEntry | not-accessible | current | Each row contains the downloaded SGACLs mapping. A row instance is added for each pair of <source SGT, destination SGT> which contains SGACL that is dynamicall… |
| 1.3.6.1.4.1.9.9.713.1.1.2.4.1.1 | ColumnctspDownloadedSgaclDestSgt | not-accessible | current | This object indicates the destination SGT value. Value of zero indicates that the destination SGT is unknown. |
| 1.3.6.1.4.1.9.9.713.1.1.2.4.1.2 | ColumnctspDownloadedSgaclSourceSgt | not-accessible | current | This object indicates the source SGT value. Value of zero indicates that the source SGT is unknown. |
| 1.3.6.1.4.1.9.9.713.1.1.2.4.1.3 | ColumnctspDownloadedSgaclIndex | not-accessible | current | This object identifies the downloaded SGACL which is applied to unicast IP traffic carrying the source SGT to the destination SGT. |
| 1.3.6.1.4.1.9.9.713.1.1.2.4.1.4 | ColumnctspDownloadedSgaclName | read-only | current | This object indicates the name of downloaded SGACL which is applied to unicast IP traffic carrying the source SGT to the destination SGT. |
| 1.3.6.1.4.1.9.9.713.1.1.2.4.1.5 | ColumnctspDownloadedSgaclGenId | read-only | current | This object indicates the generation identification of downloaded SGACL which is applied to unicast IP traffic carrying the source SGT to the destination SGT. |
| 1.3.6.1.4.1.9.9.713.1.1.2.4.1.6 | ColumnctspDownloadedIpTrafficType | read-only | current | This object indicates the type of the unicast IP traffic carrying the source SGT and travelling to destination SGT and subjected to SGACL enforcement by this d… |
| 1.3.6.1.4.1.9.9.713.1.1.2.4.1.7 | ColumnctspDownloadedSgaclMonitor | read-only | current | This object indicates whether SGACL monitor mode is turned on for the downloaded SGACL enforced traffic. |
| 1.3.6.1.4.1.9.9.713.1.1.2.5 | TablectspDefDownloadedSgaclMappingTable | not-accessible | current | This table contains the downloaded SGACLs information of the default policy applied to unicast IP traffic. |
| 1.3.6.1.4.1.9.9.713.1.1.2.5.1 | RowctspDefDownloadedSgaclMappingEntry | not-accessible | current | Each row contains the downloaded SGACLs mapping. A row instance contains the SGACL information of the default policy dynamically downloaded from ACS server for… |
| 1.3.6.1.4.1.9.9.713.1.1.2.5.1.1 | ColumnctspDefDownloadedSgaclIndex | not-accessible | current | This object identifies the SGACL of downloaded default policy applied to unicast IP traffic. |
| 1.3.6.1.4.1.9.9.713.1.1.2.5.1.2 | ColumnctspDefDownloadedSgaclName | read-only | current | This object indicates the name of the SGACL of downloaded default policy applied to unicast IP traffic. |
| 1.3.6.1.4.1.9.9.713.1.1.2.5.1.3 | ColumnctspDefDownloadedSgaclGenId | read-only | current | This object indicates the generation identification of the SGACL of downloaded default policy applied to unicast IP traffic. |
| 1.3.6.1.4.1.9.9.713.1.1.2.5.1.4 | ColumnctspDefDownloadedIpTrafficType | read-only | current | This object indicates the type of the IP traffic subjected to SGACL enforcement by this downloaded default policy. |
| 1.3.6.1.4.1.9.9.713.1.1.2.5.1.5 | ColumnctspDefDownloadedSgaclMonitor | read-only | current | This object indicates whether SGACL monitor mode is turned on for the default downloaded SGACL enforced traffic. |
| 1.3.6.1.4.1.9.9.713.1.1.2.6 | TablectspOperSgaclMappingTable | not-accessible | current | This table contains the operational SGACLs information applied to unicast IP traffic which carries a source SGT and travels to a destination SGT. |
| 1.3.6.1.4.1.9.9.713.1.1.2.6.1 | RowctspOperSgaclMappingEntry | not-accessible | current | Each row contains the operational SGACLs mapping. A row instance is added for each pair of <source SGT, destination SGT> which contains the SGACL that either s… |
| 1.3.6.1.4.1.9.9.713.1.1.2.6.1.1 | ColumnctspOperIpTrafficType | not-accessible | current | This object indicates the type of the unicast IP traffic carrying the source SGT and travelling to destination SGT and subjected to SGACL enforcement. |
| 1.3.6.1.4.1.9.9.713.1.1.2.6.1.2 | ColumnctspOperSgaclDestSgt | not-accessible | current | This object indicates the destination SGT value. Value of zero indicates that the destination SGT is unknown. |
| 1.3.6.1.4.1.9.9.713.1.1.2.6.1.3 | ColumnctspOperSgaclSourceSgt | not-accessible | current | This object indicates the source SGT value. Value of zero indicates that the source SGT is unknown. |
| 1.3.6.1.4.1.9.9.713.1.1.2.6.1.4 | ColumnctspOperSgaclIndex | not-accessible | current | This object identifies the SGACL operationally applied to unicast IP traffic carrying the source SGT to the destination SGT. |
| 1.3.6.1.4.1.9.9.713.1.1.2.6.1.5 | ColumnctspOperationalSgaclName | read-only | current | This object indicates the name of the SGACL operationally applied to unicast IP traffic carrying the source SGT to the destination SGT. |
| 1.3.6.1.4.1.9.9.713.1.1.2.6.1.6 | ColumnctspOperationalSgaclGenId | read-only | current | This object indicates the generation identification of the SGACL operationally applied to unicast IP traffic carrying the source SGT to the destination SGT. |
| 1.3.6.1.4.1.9.9.713.1.1.2.6.1.7 | ColumnctspOperSgaclMappingSource | read-only | current | This object indicates the source of SGACL mapping for the SGACL operationally applied to unicast IP traffic carrying the source SGT to the destination SGT. 'do… |
| 1.3.6.1.4.1.9.9.713.1.1.2.6.1.8 | ColumnctspOperSgaclConfigSource | read-only | current | This object indicates the source of SGACL creation for this SGACL. 'configured' indicates that the SGACL is locally configured in the local device. 'downloaded… |
| 1.3.6.1.4.1.9.9.713.1.1.2.6.1.9 | ColumnctspOperSgaclMonitor | read-only | current | This object indicates whether SGACL monitor mode is turned on for the SGACL enforced traffic. |
| 1.3.6.1.4.1.9.9.713.1.1.2.7 | TablectspDefOperSgaclMappingTable | not-accessible | current | This table contains the operational SGACLs information of the default policy applied to unicast IP traffic. |
| 1.3.6.1.4.1.9.9.713.1.1.2.7.1 | RowctspDefOperSgaclMappingEntry | not-accessible | current | A row instance contains the SGACL information of the default policy which is either statically configured at the device or dynamically downloaded from ACS serv… |
| 1.3.6.1.4.1.9.9.713.1.1.2.7.1.1 | ColumnctspDefOperIpTrafficType | not-accessible | current | This object indicates the type of the unicast IP traffic subjected to default policy enforcement. |
| 1.3.6.1.4.1.9.9.713.1.1.2.7.1.2 | ColumnctspDefOperSgaclIndex | not-accessible | current | This object identifies the SGACL of default policy operationally applied to unicast IP traffic. |
| 1.3.6.1.4.1.9.9.713.1.1.2.7.1.3 | ColumnctspDefOperationalSgaclName | read-only | current | This object indicates the name of the SGACL of default policy operationally applied to unicast IP traffic. |
| 1.3.6.1.4.1.9.9.713.1.1.2.7.1.4 | ColumnctspDefOperationalSgaclGenId | read-only | current | This object indicates the generation identification of the SGACL of default policy operationally applied to unicast IP traffic. |
| 1.3.6.1.4.1.9.9.713.1.1.2.7.1.5 | ColumnctspDefOperSgaclMappingSource | read-only | current | This object indicates the source of SGACL mapping for the SGACL of default policy operationally applied to unicast IP traffic. 'downloaded' indicates that the … |
| 1.3.6.1.4.1.9.9.713.1.1.2.7.1.6 | ColumnctspDefOperSgaclConfigSource | read-only | current | This object indicates the source of SGACL creation for the SGACL of default policy operationally applied to unicast IP traffic. 'downloaded' indicates that the… |
| 1.3.6.1.4.1.9.9.713.1.1.2.7.1.7 | ColumnctspDefOperSgaclMonitor | read-only | current | This object indicates whether SGACL monitor mode is turned on for the SGACL of default policy enforced traffic. |
| 1.3.6.1.4.1.9.9.713.1.1.2.8 | ScalarctspDefConfigIpv4SgaclsMonitor | read-write | current | This object specifies whether SGACL monitor mode is turned on for the default configured SGACL enforced Ipv4 traffic. |
| 1.3.6.1.4.1.9.9.713.1.1.2.9 | ScalarctspDefConfigIpv6SgaclsMonitor | read-write | current | This object specifies whether SGACL monitor mode is turned on for the default configured SGACL enforced Ipv6 traffic. |
| 1.3.6.1.4.1.9.9.713.1.1.2.10 | ScalarctspSgaclMonitorEnable | read-write | current | This object specifies whether SGACL monitor mode is turned on for the entire system. It has precedence than the per SGACL ctspConfigSgaclMonitor control. It co… |
| 1.3.6.1.4.1.9.9.713.1.1.3 | NodectspSgaclStatistics | |||
| 1.3.6.1.4.1.9.9.713.1.1.3.1 | TablectspSgtStatsTable | not-accessible | current | This table describes SGACL statistics counters per a pair of <source SGT, destination SGT> that is capable of providing this information. |
| 1.3.6.1.4.1.9.9.713.1.1.3.1.1 | RowctspSgtStatsEntry | not-accessible | current | Each row contains the SGACL statistics related to IPv4 or IPv6 packets carrying the source SGT travelling to the destination SGT and subjected to SGACL enforce… |
| 1.3.6.1.4.1.9.9.713.1.1.3.1.1.1 | ColumnctspStatsIpTrafficType | not-accessible | current | This object indicates the type of the unicast IP traffic carrying the source SGT and travelling to destination SGT and subjected to SGACL enforcement. |
| 1.3.6.1.4.1.9.9.713.1.1.3.1.1.2 | ColumnctspStatsDestSgt | not-accessible | current | This object indicates the destination SGT value. Value of zero indicates that the destination SGT is unknown. |
| 1.3.6.1.4.1.9.9.713.1.1.3.1.1.3 | ColumnctspStatsSourceSgt | not-accessible | current | This object indicates the source SGT value. Value of zero indicates that the source SGT is unknown. |
| 1.3.6.1.4.1.9.9.713.1.1.3.1.1.4 | ColumnctspStatsIpSwDropPkts | read-only | current | This object indicates the number of software-forwarded IP packets which are dropped by SGACL. |
| 1.3.6.1.4.1.9.9.713.1.1.3.1.1.5 | ColumnctspStatsIpHwDropPkts | read-only | current | This object indicates the number of hardware-forwarded IP packets which are dropped by SGACL. |
| 1.3.6.1.4.1.9.9.713.1.1.3.1.1.6 | ColumnctspStatsIpSwPermitPkts | read-only | current | This object indicates the number of software-forwarded IP packets which are permitted by SGACL. |
| 1.3.6.1.4.1.9.9.713.1.1.3.1.1.7 | ColumnctspStatsIpHwPermitPkts | read-only | current | This object indicates the number of hardware-forwarded IP packets which are permitted by SGACL. |
| 1.3.6.1.4.1.9.9.713.1.1.3.1.1.8 | ColumnctspStatsIpSwMonitorPkts | read-only | current | This object indicates the number of software-forwarded IP packets which are SGACL enforced & monitored. |
| 1.3.6.1.4.1.9.9.713.1.1.3.1.1.9 | ColumnctspStatsIpHwMonitorPkts | read-only | current | This object indicates the number of hardware-forwarded IP packets which are SGACL enforced & monitored. |
| 1.3.6.1.4.1.9.9.713.1.1.3.2 | TablectspDefStatsTable | not-accessible | current | This table describes statistics counters for unicast IP traffic subjected to default unicast policy. |
| 1.3.6.1.4.1.9.9.713.1.1.3.2.1 | RowctspDefStatsEntry | not-accessible | current | Each row contains the statistics counter for each IP traffic type. |
| 1.3.6.1.4.1.9.9.713.1.1.3.2.1.1 | ColumnctspDefIpTrafficType | not-accessible | current | This object indicates the type of the IP traffic subjected to default unicast policy enforcement. |
| 1.3.6.1.4.1.9.9.713.1.1.3.2.1.2 | ColumnctspDefIpSwDropPkts | read-only | current | This object indicates the number of software-forwarded IP packets which are dropped by default unicast policy. |
| 1.3.6.1.4.1.9.9.713.1.1.3.2.1.3 | ColumnctspDefIpHwDropPkts | read-only | current | This object indicates the number of hardware-forwarded IP packets which are dropped by default unicast policy. |
| 1.3.6.1.4.1.9.9.713.1.1.3.2.1.4 | ColumnctspDefIpSwPermitPkts | read-only | current | This object indicates the number of software-forwarded IP packets which are permitted by default unicast policy. |
| 1.3.6.1.4.1.9.9.713.1.1.3.2.1.5 | ColumnctspDefIpHwPermitPkts | read-only | current | This object indicates the number of hardware-forwarded IP packets which are permitted by default unicast policy. |
| 1.3.6.1.4.1.9.9.713.1.1.3.2.1.6 | ColumnctspDefIpSwMonitorPkts | read-only | current | This object indicates the number of software-forwarded IP packets which are monitored by default unicast policy. |
| 1.3.6.1.4.1.9.9.713.1.1.3.2.1.7 | ColumnctspDefIpHwMonitorPkts | read-only | current | This object indicates the number of hardware-forwarded IP packets which are monitored by default unicast policy. |
| 1.3.6.1.4.1.9.9.713.1.2 | NodectspPeerPolicy | |||
| 1.3.6.1.4.1.9.9.713.1.2.1 | ScalarctspAllPeerPolicyAction | read-write | current | This object allows user to specify the action to be taken with respect to all peer policies in the device. When read, this object always returns the value 'non… |
| 1.3.6.1.4.1.9.9.713.1.2.2 | TablectspPeerPolicyTable | not-accessible | current | This table lists the peer policy information for each peer device. |
| 1.3.6.1.4.1.9.9.713.1.2.2.1 | RowctspPeerPolicyEntry | not-accessible | current | Each row contains the managed objects for peer policies for each peer device based on its name. |
| 1.3.6.1.4.1.9.9.713.1.2.2.1.1 | ColumnctspPeerName | not-accessible | current | This object uniquely identifies a peer device. |
| 1.3.6.1.4.1.9.9.713.1.2.2.1.2 | ColumnctspPeerSgt | read-only | current | This object indicates the SGT value of this peer device. |
| 1.3.6.1.4.1.9.9.713.1.2.2.1.3 | ColumnctspPeerSgtGenId | read-only | current | This object indicates the generation identification of the SGT value assigned to this peer device. |
| 1.3.6.1.4.1.9.9.713.1.2.2.1.4 | ColumnctspPeerTrustState | read-only | current | This object indicates the TrustSec trust state of this peer device. 'trusted' indicates that this is a trusted peer device. 'noTrust' indicates that this peer … |
| 1.3.6.1.4.1.9.9.713.1.2.2.1.5 | ColumnctspPeerPolicyLifeTime | read-only | current | This object indicates the policy life time which provides the time interval during which the peer policy is valid. |
| 1.3.6.1.4.1.9.9.713.1.2.2.1.6 | ColumnctspPeerPolicyLastUpdate | read-only | current | This object indicates the time when this peer policy is last updated. |
| 1.3.6.1.4.1.9.9.713.1.2.2.1.7 | ColumnctspPeerPolicyAction | read-write | current | This object allows user to specify the action to be taken with this peer policy. When read, this object always returns the value 'none'. 'none' - No operation.… |
| 1.3.6.1.4.1.9.9.713.1.3 | NodectspLayer3Transport | |||
| 1.3.6.1.4.1.9.9.713.1.3.1 | TablectspLayer3PolicyTable | not-accessible | current | This table describes Layer 3 transport policy for IP traffic regarding SGT propagation. |
| 1.3.6.1.4.1.9.9.713.1.3.1.1 | RowctspLayer3PolicyEntry | not-accessible | current | Each row contains the Layer 3 transport policies per IP traffic type per policy type. |
| 1.3.6.1.4.1.9.9.713.1.3.1.1.1 | ColumnctspLayer3PolicyIpTrafficType | not-accessible | current | This object indicates the type of the IP traffic affected by Layer-3 transport policy. 'ipv4' indicates that the affected traffic is IPv4 traffic. 'ipv6' indic… |
| 1.3.6.1.4.1.9.9.713.1.3.1.1.2 | ColumnctspLayer3PolicyType | not-accessible | current | This object indicates the type of the Layer-3 transport policy affecting IP traffic regarding SGT propagation. 'permit' indicates that the transport policy is … |
| 1.3.6.1.4.1.9.9.713.1.3.1.1.3 | ColumnctspLayer3PolicyLocalConfig | read-write | current | This object specifies the name of an ACL that is administratively configured to classify Layer3 traffic. Zero-length string indicates there is no such configur… |
| 1.3.6.1.4.1.9.9.713.1.3.1.1.4 | ColumnctspLayer3PolicyDownloaded | read-only | current | This object specifies the name of an ACL that is downloaded from policy server to classify Layer3 traffic. Zero-length string indicates there is no such downlo… |
| 1.3.6.1.4.1.9.9.713.1.3.1.1.5 | ColumnctspLayer3PolicyOperational | read-only | current | This object specifies the name of an operational ACL currently used to classify Layer3 traffic. Zero-length string indicates there is no such policy in effect. |
| 1.3.6.1.4.1.9.9.713.1.3.2 | TablectspIfL3PolicyConfigTable | not-accessible | current | This table lists the interfaces which support Layer3 Transport policy. |
| 1.3.6.1.4.1.9.9.713.1.3.2.1 | RowctspIfL3PolicyConfigEntry | not-accessible | current | Each row contains managed objects for Layer3 Transport on interface capable of providing this information. |
| 1.3.6.1.4.1.9.9.713.1.3.2.1.1 | ColumnctspIfL3Ipv4PolicyEnabled | read-write | current | This object specifies whether the Layer3 Transport policies will be applied on this interface for egress IPv4 traffic. 'true' indicates that Layer3 permit and … |
| 1.3.6.1.4.1.9.9.713.1.3.2.1.2 | ColumnctspIfL3Ipv6PolicyEnabled | read-write | current | This object specifies whether the Layer3 Transport policies will be applied on this interface for egress IPv6 traffic. 'true' indicates that Layer3 permit and … |
| 1.3.6.1.4.1.9.9.713.1.4 | NodectspIpSgtMappings | |||
| 1.3.6.1.4.1.9.9.713.1.4.1 | TablectspIpSgtMappingTable | not-accessible | current | This table contains the IP-to-SGT mapping information in the device. |
| 1.3.6.1.4.1.9.9.713.1.4.1.1 | RowctspIpSgtMappingEntry | not-accessible | current | Each row contains the IP-to-SGT mapping and status of this instance. Entry in this table is either populated automatically by the device or manually configured… |
| 1.3.6.1.4.1.9.9.713.1.4.1.1.1 | ColumnctspIpSgtVrfName | not-accessible | current | This object indicates the VRF where IP-SGT mapping belongs to. The zero length value indicates the default VRF. |
| 1.3.6.1.4.1.9.9.713.1.4.1.1.2 | ColumnctspIpSgtAddressType | not-accessible | current | This object indicates the type of Internet address. |
| 1.3.6.1.4.1.9.9.713.1.4.1.1.3 | ColumnctspIpSgtIpAddress | not-accessible | current | This object indicates an Internet address. The type of this address is determined by the value of ctspIpSgtAddressType object. |
| 1.3.6.1.4.1.9.9.713.1.4.1.1.4 | ColumnctspIpSgtAddressLength | not-accessible | current | This object indicates the length of an Internet address prefix. |
| 1.3.6.1.4.1.9.9.713.1.4.1.1.5 | ColumnctspIpSgtValue | read-create | current | This object specifies the SGT value assigned to an Internet address. |
| 1.3.6.1.4.1.9.9.713.1.4.1.1.6 | ColumnctspIpSgtSource | read-create | current | This object indicates the source of the mapping. 'configured' indicates that the mapping is manually configured by user. 'arp' indicates that the mapping is dy… |
| 1.3.6.1.4.1.9.9.713.1.4.1.1.7 | ColumnctspIpSgtStorageType | read-create | current | The storage type for this conceptual row. |
| 1.3.6.1.4.1.9.9.713.1.4.1.1.8 | ColumnctspIpSgtRowStatus | read-create | current | This object is used to manage the creation and deletion of rows in this table. If this object value is 'active', user cannot modify any writable object in this… |
| 1.3.6.1.4.1.9.9.713.1.5 | NodectspSgtPolicy | |||
| 1.3.6.1.4.1.9.9.713.1.5.1 | ScalarctspAllSgtPolicyAction | read-write | current | This object allows user to specify the action to be taken with respect to all SGT policies in the device. When read, this object always returns the value 'none… |
| 1.3.6.1.4.1.9.9.713.1.5.2 | TablectspDownloadedSgtPolicyTable | not-accessible | current | This table lists the SGT policy information downloaded by the device. |
| 1.3.6.1.4.1.9.9.713.1.5.2.1 | RowctspDownloadedSgtPolicyEntry | not-accessible | current | Each row contains the managed objects for SGT policies downloaded by the device. |
| 1.3.6.1.4.1.9.9.713.1.5.2.1.1 | ColumnctspDownloadedSgtPolicySgt | not-accessible | current | This object indicates the SGT value for which the downloaded policy is applied to. Value of zero indicates that the SGT is unknown. |
| 1.3.6.1.4.1.9.9.713.1.5.2.1.2 | ColumnctspDownloadedSgtPolicySgtGenId | read-only | current | This object indicates the generation identification of the SGT value denoted by ctspDownloadedSgtPolicySgt object. |
| 1.3.6.1.4.1.9.9.713.1.5.2.1.3 | ColumnctspDownloadedSgtPolicyLifeTime | read-only | current | This object indicates the policy life time which provides the time interval during which this downloaded policy is valid. |
| 1.3.6.1.4.1.9.9.713.1.5.2.1.4 | ColumnctspDownloadedSgtPolicyLastUpdate | read-only | current | This object indicates the time when this downloaded SGT policy is last updated. |
| 1.3.6.1.4.1.9.9.713.1.5.2.1.5 | ColumnctspDownloadedSgtPolicyAction | read-write | current | This object allows user to specify the action to be taken with this downloaded SGT policy. When read, this object always returns the value 'none'. 'none' - No … |
| 1.3.6.1.4.1.9.9.713.1.5.3 | TablectspDownloadedDefSgtPolicyTable | not-accessible | current | This table lists the default SGT policy information downloaded by the device. |
| 1.3.6.1.4.1.9.9.713.1.5.3.1 | RowctspDownloadedDefSgtPolicyEntry | not-accessible | current | Each row contains the managed objects for default SGT policies downloaded by the device. |
| 1.3.6.1.4.1.9.9.713.1.5.3.1.1 | ColumnctspDownloadedDefSgtPolicyType | not-accessible | current | This object indicates the downloaded default SGT policy type. 'unicastDefault' indicates the SGT policy applied to traffic which carries the default unicast SG… |
| 1.3.6.1.4.1.9.9.713.1.5.3.1.2 | ColumnctspDownloadedDefSgtPolicySgtGenId | read-only | current | This object indicates the generation identification of the downloaded default SGT policy. |
| 1.3.6.1.4.1.9.9.713.1.5.3.1.3 | ColumnctspDownloadedDefSgtPolicyLifeTime | read-only | current | This object indicates the policy life time which provides the time interval during which this download default policy is valid. |
| 1.3.6.1.4.1.9.9.713.1.5.3.1.4 | ColumnctspDownloadedDefSgtPolicyLastUpdate | read-only | current | This object indicates the time when this downloaded SGT policy is last updated. |
| 1.3.6.1.4.1.9.9.713.1.5.3.1.5 | ColumnctspDownloadedDefSgtPolicyAction | read-write | current | This object allows user to specify the action to be taken with this default downloaded SGT policy. When read, this object always returns the value 'none'. 'non… |
| 1.3.6.1.4.1.9.9.713.1.6 | NodectspIfSgtMappings | |||
| 1.3.6.1.4.1.9.9.713.1.6.1 | TablectspIfSgtMappingTable | not-accessible | current | This table contains the Interface-to-SGT mapping configuration information in the device. |
| 1.3.6.1.4.1.9.9.713.1.6.1.1 | RowctspIfSgtMappingEntry | not-accessible | current | Each row contains the SGT mapping configuration of a particular interface. A row instance can be created or removed by setting ctspIfSgtRowStatus. |
| 1.3.6.1.4.1.9.9.713.1.6.1.1.1 | ColumnctspIfSgtValue | read-create | current | This object specifies the SGT value assigned to the interface. |
| 1.3.6.1.4.1.9.9.713.1.6.1.1.2 | ColumnctspIfSgName | read-create | current | This object specifies the Security Group Name assigned to the interface. |
| 1.3.6.1.4.1.9.9.713.1.6.1.1.3 | ColumnctspIfSgtStorageType | read-create | current | The storage type for this conceptual row. |
| 1.3.6.1.4.1.9.9.713.1.6.1.1.4 | ColumnctspIfSgtRowStatus | read-create | current | This object is used to manage the creation and deletion of rows in this table. |
| 1.3.6.1.4.1.9.9.713.1.6.2 | TablectspIfSgtMappingInfoTable | not-accessible | current | This table contains the Interface-to-SGT mapping status information in the device. |
| 1.3.6.1.4.1.9.9.713.1.6.2.1 | RowctspIfSgtMappingInfoEntry | not-accessible | current | Containing the Interface-to-SGT mapping status of the specified interface. |
| 1.3.6.1.4.1.9.9.713.1.6.2.1.1 | ColumnctspL3IPMStatus | read-only | current | This object indicates the Layer 3 Identity Port Mapping(IPM) operational mode. disabled - The L3 IPM is not configured. active - The L3 IPM is configured for t… |
| 1.3.6.1.4.1.9.9.713.1.7 | NodectspVlanSgtMappings | |||
| 1.3.6.1.4.1.9.9.713.1.7.1 | TablectspVlanSgtMappingTable | not-accessible | current | This table contains the Vlan-SGT mapping information in the device. |
| 1.3.6.1.4.1.9.9.713.1.7.1.1 | RowctspVlanSgtMappingEntry | not-accessible | current | Each row contains the SGT mapping configuration of a particular VLAN. A row instance can be created or removed by setting ctspVlanSgtRowStatus. |
| 1.3.6.1.4.1.9.9.713.1.7.1.1.1 | ColumnctspVlanSgtMappingIndex | not-accessible | current | This object specifies the VLAN-ID which is used as index. |
| 1.3.6.1.4.1.9.9.713.1.7.1.1.2 | ColumnctspVlanSgtMapValue | read-create | current | This object specifies the SGT value assigned to the vlan. |
| 1.3.6.1.4.1.9.9.713.1.7.1.1.3 | ColumnctspVlanSgtStorageType | read-create | current | The storage type for this conceptual row. |
| 1.3.6.1.4.1.9.9.713.1.7.1.1.4 | ColumnctspVlanSgtRowStatus | read-create | current | This object is used to manage the creation and deletion of rows in this table. |
| 1.3.6.1.4.1.9.9.713.1.8 | NodectspSgtCaching | |||
| 1.3.6.1.4.1.9.9.713.1.8.1 | ScalarctspSgtCachingMode | read-write | current | This object specifies which SGT-caching mode is configured for SGT caching capable interfaces at the managed system. 'none' indicates that sgt-caching for all … |
| 1.3.6.1.4.1.9.9.713.1.8.2 | ScalarctspSgtCachingVlansFirst2K | read-write | current | A string of octets containing one bit per VLAN for VLANs 0 to 2047. If the bit corresponding to a VLAN is set to 1, it indicates SGT-caching is enabled on the … |
| 1.3.6.1.4.1.9.9.713.1.8.3 | ScalarctspSgtCachingVlansSecond2K | read-write | current | A string of octets containing one bit per VLAN for VLANs 2048 to 4095. If the bit corresponding to a VLAN is set to 1, it indicates SGT-caching is enabled on t… |
| 1.3.6.1.4.1.9.9.713.1.9 | NodectspNotifsControl | |||
| 1.3.6.1.4.1.9.9.713.1.9.1 | ScalarctspPeerPolicyUpdatedNotifEnable | read-write | current | This object specifies whether the system generates ctspPeerPolicyUpdatedNotif. A value of 'false' will prevent ctspPeerPolicyUpdatedNotif notifications from be… |
| 1.3.6.1.4.1.9.9.713.1.9.2 | ScalarctspAuthorizationSgaclFailNotifEnable | read-write | current | This object specifies whether this system generates the ctspAuthorizationSgaclFailNotif. A value of 'false' will prevent ctspAuthorizationSgaclFailNotif notifi… |
| 1.3.6.1.4.1.9.9.713.1.10 | NodectspNotifsOnlyInfo | |||
| 1.3.6.1.4.1.9.9.713.1.10.1 | ScalarctspOldPeerSgt | accessible-for-notify | current | This object provides the old sgt value for ctspPeerPolicyUpdatedNotif, i.e., the sgt value before the policy is updated. |
| 1.3.6.1.4.1.9.9.713.1.10.2 | ScalarctspAuthorizationSgaclFailReason | accessible-for-notify | current | This object indicates the reason of failure during SGACL acquisitions, installations and uninstallations, which is associated with ctspAuthorizationSgaclFailNo… |
| 1.3.6.1.4.1.9.9.713.1.10.3 | ScalarctspAuthorizationSgaclFailInfo | accessible-for-notify | current | This object provides additional information about authorization SGACL failure, which is associated with ctspAuthorizationSgaclFailNotif. |
| 1.3.6.1.4.1.9.9.713.2 | NodeciscoTrustSecPolicyMIBConformance | |||
| 1.3.6.1.4.1.9.9.713.2.1 | NodeciscoTrustSecPolicyMIBCompliances | |||
| 1.3.6.1.4.1.9.9.713.2.1.1 | ComplianceciscoTrustSecPolicyMIBCompliance | read-only | deprecated | The compliance statement for the CISCO-TRUSTSEC-POLICY-MIB |
| 1.3.6.1.4.1.9.9.713.2.1.2 | ComplianceciscoTrustSecPolicyMIBComplianceRev2 | read-only | current | The compliance statement for the CISCO-TRUSTSEC-POLICY-MIB |
| 1.3.6.1.4.1.9.9.713.2.2 | NodeciscoTrustSecPolicyMIBGroups | |||
| 1.3.6.1.4.1.9.9.713.2.2.1 | GroupctspGlobalSgaclEnforcementGroup | current | A collection of object which provides the SGACL enforcement information for all TrustSec capable Layer 3 interfaces (excluding SVIs) at the device level. | |
| 1.3.6.1.4.1.9.9.713.2.2.2 | GroupctspSgaclIpv4DropNetflowMonitorGroup | current | A collection of object which provides netflow monitor information for IPv4 traffic drop packet due to SGACL enforcement in the device. | |
| 1.3.6.1.4.1.9.9.713.2.2.3 | GroupctspSgaclIpv6DropNetflowMonitorGroup | current | A collection of object which provides netflow monitor information for IPv6 traffic drop packet due to SGACL enforcement in the device. | |
| 1.3.6.1.4.1.9.9.713.2.2.4 | GroupctspVlanConfigGroup | current | A collection of object which provides the SGACL enforcement and VRF information for each VLAN. | |
| 1.3.6.1.4.1.9.9.713.2.2.5 | GroupctspConfigSgaclMappingGroup | current | A collection of objects which provides the administratively configured SGACL mapping information in the device. | |
| 1.3.6.1.4.1.9.9.713.2.2.6 | GroupctspDownloadedSgaclMappingGroup | current | A collection of objects which provides the downloaded SGACL mapping information in the device. | |
| 1.3.6.1.4.1.9.9.713.2.2.7 | GroupctspOperSgaclMappingGroup | current | A collection of objects which provides the operational SGACL mapping information in the device. | |
| 1.3.6.1.4.1.9.9.713.2.2.8 | GroupctspIpSwStatisticsGroup | current | A collection of objects which provides software statistics counters for unicast IP traffic subjected to SGACL enforcement. | |
| 1.3.6.1.4.1.9.9.713.2.2.9 | GroupctspIpHwStatisticsGroup | current | A collection of objects which provides hardware statistics counters for unicast IP traffic subjected to SGACL enforcement. | |
| 1.3.6.1.4.1.9.9.713.2.2.10 | GroupctspDefSwStatisticsGroup | current | A collection of objects which provides software statistics counters for unicast IP traffic subjected to unicast default policy enforcement. | |
| 1.3.6.1.4.1.9.9.713.2.2.11 | GroupctspDefHwStatisticsGroup | current | A collection of objects which provides hardware statistics counters for unicast IP traffic subjected to unicast default policy enforcement. | |
| 1.3.6.1.4.1.9.9.713.2.2.12 | GroupctspPeerPolicyActionGroup | current | A collection of object which provides refreshing of all peer policies in the device. | |
| 1.3.6.1.4.1.9.9.713.2.2.13 | GroupctspPeerPolicyGroup | current | A collection of object which provides peer policy information in the device. | |
| 1.3.6.1.4.1.9.9.713.2.2.14 | GroupctspLayer3TransportGroup | current | A collection of objects which provides managed information regarding the SGT propagation along with Layer 3 traffic in the device. | |
| 1.3.6.1.4.1.9.9.713.2.2.15 | GroupctspIfL3PolicyConfigGroup | current | A collection of objects which provides managed information for Layer3 Tranport policy enforcement on capable interface in the device. | |
| 1.3.6.1.4.1.9.9.713.2.2.16 | GroupctspIpSgtMappingGroup | current | A collection of objects which provides managed information regarding IP-to-Sgt mapping in the device. | |
| 1.3.6.1.4.1.9.9.713.2.2.17 | GroupctspSgtPolicyGroup | current | A collection of object which provides SGT policy information in the device. | |
| 1.3.6.1.4.1.9.9.713.2.2.18 | GroupctspIfSgtMappingGroup | current | A collection of objects which provides managed information regarding Interface-to-Sgt mapping in the device. | |
| 1.3.6.1.4.1.9.9.713.2.2.19 | GroupctspVlanSgtMappingGroup | current | A collection of objects which provides sgt mapping information for the IP traffic in the specified Vlan. | |
| 1.3.6.1.4.1.9.9.713.2.2.20 | GroupctspSgtCachingGroup | current | A collection of objects which provides sgt Caching information. | |
| 1.3.6.1.4.1.9.9.713.2.2.21 | GroupctspSgaclMonitorGroup | current | A collection of objects which provides SGACL monitor information. | |
| 1.3.6.1.4.1.9.9.713.2.2.22 | GroupctspSgaclMonitorStatisticGroup | current | A collection of objects which provides monitor statistics counters for unicast IP traffic subjected to SGACL enforcement. | |
| 1.3.6.1.4.1.9.9.713.2.2.23 | GroupctspNotifCtrlGroup | current | A collection of objects providing notification control for TrustSec policy notifications. | |
| 1.3.6.1.4.1.9.9.713.2.2.24 | GroupctspNotifGroup | current | A collection of notifications for TrustSec policy. | |
| 1.3.6.1.4.1.9.9.713.2.2.25 | GroupctspNotifInfoGroup | current | A collection of objects providing the variable binding for TrustSec policy notifications. |