CISCO-ATM-SWITCH-CUG-MIB

All MIBs › CISCO-ATM-SWITCH-CUG-MIB

Organization: Cisco Systems, Inc.

Last Updated: 1997-07-07

Category: ATM

Description: Manages ATM Closed User Group (CUG) membership and access policies on Cisco ATM switches.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CISCO-ATM-SWITCH-CUG-MIB?

CISCO-ATM-SWITCH-CUG-MIB supports Closed User Group (CUG) functionality—a form of virtual private networking access control—on Cisco ATM switches. It exposes tables for interlock codes (CUG identifiers), per-interface CUG access settings (whether unknown CUGs are permitted to/from a user), and the CUG membership table itself. Its role is primarily configuration/access-control monitoring rather than hardware health: an operator checks csCugIfAccessEnable and the permit-unknown-CUG flags to confirm access-control policy is correctly enforced on each ATM interface, and monitors row status to see when CUG entries are being actively provisioned or removed. It is a Cisco private extension to the standard ATM-MIB/RFC 1695 connection model, layering VPN-style access control on top of standard ATM interface objects. It is used in legacy carrier ATM networks that offered closed-user-group (private virtual network) services to customers, now largely found in older telecom infrastructure. Engineers can download the CISCO-ATM-SWITCH-CUG-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-ATM-SWITCH-CUG-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco ATM switches

Monitoring Examples

An admin polls csCugIfTable/Entry to check csCugIfAccessEnable and csCugIfPermitUnknownCugsToUser for a given ATM interface, cross-referencing csCugInterlockCodeTable for the CUG identifiers in use. An interface unexpectedly permitting unknown CUGs (csCugIfPermitUnknownCugsFromUser set to true) would signal a misconfigured access-control policy exposing the closed user group to unauthorized traffic.

What Can Be Monitored

CUG interlock codes
per-interface CUG access enable/disable
permit-unknown-CUG policy (to/from user)
CUG entry row/provisioning status

Imported Objects

From CISCO-SMI

ciscoMgmt

OBJECT-IDENTITY

From IF-MIB

ifIndex

OBJECT-TYPE

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Gauge32
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

DisplayString
RowStatus
TEXTUAL-CONVENTION
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
csCugMIB	1.3.6.1.4.1.9.9.89			This MIB module is for closed user group support (virtual private networks).
csCugMIBObjects	1.3.6.1.4.1.9.9.89.1
csCugInterlockCodeTable	1.3.6.1.4.1.9.9.89.1.1		not-accessible	The CUG interlock code alias Table. Entries in this table can be created and deleted by setting the csCugInterlockCodeRowStatus object to appropriate values. This table maps the interlock code to an alias name. Table entries cannot be deleted if the entries in this table are being used in csCugTable.
csCugInterlockCodeEntry	1.3.6.1.4.1.9.9.89.1.1.1		not-accessible	An entry in the cug interlock code table.
NUM csCugInterlockCode	1.3.6.1.4.1.9.9.89.1.1.1.1	CsCugInterlockCode	not-accessible	The Address to be aliased.
STR csCugInterlockCodeAliasName	1.3.6.1.4.1.9.9.89.1.1.1.2	DisplayString	read-create	The alias name for a CUG interlock code.
ROW csCugInterlockCodeRowStatus	1.3.6.1.4.1.9.9.89.1.1.1.3	RowStatus	read-create	To create, delete a row. Existing rows can be modified/deleted when the row is active providing this alias is not referenced by any entries in the csCugTable.
csCugIfTable	1.3.6.1.4.1.9.9.89.1.2		not-accessible	A table to define an interface as an access interface.
csCugIfEntry	1.3.6.1.4.1.9.9.89.1.2.1		not-accessible	An entry in this table must be created in order to enable the screening of closed user group calls and enable the barring of transmission of CUG interlock codes across the interface. Closed user group calls are screened by looking up csCugTable.
T/F csCugIfAccessEnable	1.3.6.1.4.1.9.9.89.1.2.1.1	TruthValue	read-create	If the value is true, enables CUG service on the interface. When the value is false, CUG service on the interface will be disabled and no screening of CUGs will be done.
T/F csCugIfPermitUnknownCugsToUser	1.3.6.1.4.1.9.9.89.1.2.1.2	TruthValue	read-create	This maps to incoming access of the ITU spec. This object takes effect when csCugIfAccessEnable is true. If the value is true, allows calls with unknown cug interlock code or non-cug calls to be forwarded to the user. If the value is false, calls from unknown CUGs will not be forwarded to the user. If csCugIfAccessEnable is false this object will be ignored.
INT csCugIfPermitUnknownCugsFromUser	1.3.6.1.4.1.9.9.89.1.2.1.3	INTEGER	read-create	This maps to outgoing access of the ITU spec. This object takes effect when csCugIfAccessEnable is true. If the value is deny, do not permit calls to other CUGs. If the value is permitPerCall, use cug index from user and calls to other CUGs will be permitted. If the value is permitPermanently, use preferential CUG for calls from user and calls to other CUGs will be permitted.
ROW csCugIfRowStatus	1.3.6.1.4.1.9.9.89.1.2.1.4	RowStatus	read-create	The status of this conceptual row. The value of the columnar objects in this row may be modified even while the row status is 'active'.
csCugTable	1.3.6.1.4.1.9.9.89.1.3		not-accessible	A list of Closed User Group (CUG) definitions on the interfaces of the switch. Entries in this table may be created and deleted by SNMP. Each entry represents membership of an interface in a CUG. An interface may have several CUGs, but only one 'preferential' CUG. CUG membership takes effect only when the interface is configured as an access interface i.e., has an entry in the csCugIfTable and that entry's csCugIfAccessEnable == true.
csCugEntry	1.3.6.1.4.1.9.9.89.1.3.1		not-accessible	An entry identifying an interface's membership in a CUG.
U32 csCugIndex	1.3.6.1.4.1.9.9.89.1.3.1.1	Unsigned32	read-create	This maps to cug index of ITU spec. For each interface, there is a unique cug index for each interlock code. This object is valid only when CUGs are supported on a per-call basis.
T/F csCugPreferential	1.3.6.1.4.1.9.9.89.1.3.1.2	TruthValue	read-create	Indicates if this is a preferential CUG. A value of false means non-preferred CUG. There can be at most one preferential CUG on an interface. When a preferential cug exists, this object has to be set to false before another CUG can become a preferential CUG. For e.g., if CUG X is the preferential CUG and CUG Y has to take the role of preferential CUG, change CUG X to be non-preferential by modifying this object to false and make CUG Y the preferential CUG by modifying this object to true.
T/F csCugDenySameGroupToUser	1.3.6.1.4.1.9.9.89.1.3.1.3	TruthValue	read-create	This applies to members of the same closed user group. This object maps to incoming-calls-barred in ITU spec. At the destination interface if this is true and the call was made by a member of the same CUG, the call will rejected.
T/F csCugDenySameGroupFromUser	1.3.6.1.4.1.9.9.89.1.3.1.4	TruthValue	read-create	This applies to members of the same closed user group at the originating interface. This object maps to outgoing-calls-barred in the ITU specification. Setting an entry's csCugDenySameGroupFromUser to true when the entry's csCugPreferential is true will result in error. When csCugDenySameGroupFromUser is set to false and a preferential cug is defined on the interface, by default the call will be forwarded with the interlock code of the preferential cug.
ROW csCugRowStatus	1.3.6.1.4.1.9.9.89.1.3.1.5	RowStatus	read-create	The status of this conceptual row. The value of the columnar objects in this row may be modified even while the row status is 'active'. Modifications will affect new calls. Existing calls are not affected.
csCugMIBConformance	1.3.6.1.4.1.9.9.89.3
csCugMIBCompliances	1.3.6.1.4.1.9.9.89.3.1
csCugMIBCompliance	1.3.6.1.4.1.9.9.89.3.1.1			The compliance statement for the Cisco ATM CUG MIB.
csCugMIBGroups	1.3.6.1.4.1.9.9.89.3.2
csCugMIBGroup	1.3.6.1.4.1.9.9.89.3.2.1			A collection of objects for managing Closed User Groups.

RFC description

Manages closed user group (virtual private network) support for ATM switches.

Start monitoring Cisco ATM switches with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CISCO-ATM-SWITCH-CUG-MIB

What Is CISCO-ATM-SWITCH-CUG-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description