All MIBs › CISCO-TRUSTSEC-CAPABILITY
Organization: Cisco Systems, Inc.
Last Updated: 2012-09-07
Category: Cisco Devices, SNMP Framework, VPN and Security
Description: Declares agent capabilities for Cisco TrustSec general security group tagging and policy enforcement.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is CISCO-TRUSTSEC-CAPABILITY?
CISCO-TRUSTSEC-CAPABILITY is a Cisco AGENT-CAPABILITIES module that documents which parts of the functional CISCO-TRUSTSEC-MIB a particular Cisco device/software release actually implements, rather than defining any manageable objects itself. It is a conformance/compliance declaration used by network management systems to determine feature support for Cisco TrustSec security-group tagging and policy enforcement on a given platform. As a capabilities module it carries no runtime data of its own — no interface counters, environmental readings, or fault objects — so it plays no direct role in monitoring hardware or software status; its only function is to describe the implementation scope of the companion CISCO-TRUSTSEC-MIB. Its entire purpose is to reference and describe support for that MIB, making it fully dependent on CISCO-TRUSTSEC-MIB's object and group definitions. It is used internally by Cisco IOS/IOS-XE/NX-OS network management tooling to determine TrustSec feature compatibility, not deployed as a standalone monitoring target. Network engineers evaluating or troubleshooting this functionality can download the CISCO-TRUSTSEC-CAPABILITY file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-TRUSTSEC-CAPABILITY. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Cisco device supporting TrustSec (switches/routers running IOS/IOS-XE/NX-OS)
Monitoring Examples
This is a conformance/AGENT-CAPABILITIES module with no runtime data objects — sample_objects is empty and it defines no tables or scalars — so there is no realistic monitoring scenario to describe. A management application would instead read this module's capability statements, typically at compile/discovery time, to determine which CISCO-TRUSTSEC-MIB groups and objects are supported before attempting to poll them. It should never itself be polled for operational status.
Imported Objects
From CISCO-SMI
| ciscoAgentCapability | OBJECT-IDENTITY |
| CtsPasswordEncryptionType |
From SNMP-FRAMEWORK-MIB
| SnmpAdminString |
From SNMPv2-CONF
| AGENT-CAPABILITIES |
From SNMPv2-SMI
| MODULE-IDENTITY | |
| Unsigned32 |
From SNMPv2-TC
| RowStatus |
OIDs
RFC description
Cisco TrustSec agent capabilities and conformance statement for network access control and device group tagging.
Start monitoring Cisco devices supporting TrustSec (IOS/IOS-XE/NX-OS) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.