All MIBs › CISCO-TRUSTSEC-POLICY-MIB
Organization: Cisco Systems, Inc.
Last Updated: 2012-12-19
Category: Cisco Devices, VPN and Security
Description: Manages Cisco TrustSec SGACL policy download, binding, and enforcement for security group-based access control.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is CISCO-TRUSTSEC-POLICY-MIB?
This MIB module is part of Cisco's TrustSec security architecture, providing managed objects for configuring and monitoring Security Group Access Control List (SGACL) policy enforcement on Cisco switches and routers. It exposes configuration data for enabling SGACL enforcement on Layer 2/3 interfaces and VLANs, administrative and operational mappings between Security Group Tags (SGTs) and policies, and statistics counters for traffic subject to enforcement. From a monitoring perspective it is used mainly to track software/policy status rather than hardware health, as administrators poll it to confirm SGACL enforcement is active per VLAN, verify SGT-to-ACL mapping consistency, and watch drop/permit traffic counters (including NetFlow-monitored drops) that reveal policy violations or misconfigurations. It depends on the broader Cisco TrustSec infrastructure and often works alongside interface and VLAN MIBs for correlating enforcement state to specific network segments. It is typically deployed in enterprise campus and data center networks using Cisco Catalyst or Nexus switches to enforce identity-based network segmentation. Engineers can download the CISCO-TRUSTSEC-POLICY-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-TRUSTSEC-POLICY-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Cisco Catalyst switches
- Cisco Nexus switches
- Cisco routers supporting TrustSec
Monitoring Examples
An administrator would poll ctspVlanConfigTable / ctspVlanConfigEntry to check ctspVlanConfigSgaclEnforcement and ctspVlanSviActive for each VLAN, confirming enforcement is enabled where expected. Combined with ctspSgaclIpv4DropNetflowMonitor and ctspSgaclIpv6DropNetflowMonitor, a sudden spike in dropped packets could reveal an SGT mapping error or a policy blocking legitimate traffic. The ctspConfigSgaclMappingTable would be checked to verify SGT-to-ACL bindings are correctly downloaded from the policy server.
What Can Be Monitored
- SGACL enforcement status per VLAN
- SGT-to-ACL policy mappings
- SVI active state
- IPv4/IPv6 dropped-packet NetFlow counters
- VLAN configuration row status
This MIB depends on
Related MIBs
Imported Objects
From CISCO-SMI
| ciscoMgmt | OBJECT-IDENTITY |
From CISCO-TC
| Cisco2KVlanList | |
| CiscoVrfName |
| CtsAclList | |
| CtsAclListOrEmpty | |
| CtsAclName | |
| CtsAclNameOrEmpty | |
| CtsGenerationId | |
| CtsSecurityGroupTag | |
| CtsSgaclMonitorMode |
From IF-MIB
| ifIndex | OBJECT-TYPE |
From INET-ADDRESS-MIB
| InetAddress | |
| InetAddressPrefixLength | |
| InetAddressType |
From Q-BRIDGE-MIB
| VlanIndex |
From SNMP-FRAMEWORK-MIB
| SnmpAdminString |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| NOTIFICATION-GROUP | |
| OBJECT-GROUP |
From SNMPv2-SMI
| Counter64 | |
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE | |
| Unsigned32 |
From SNMPv2-TC
| DateAndTime | |
| RowStatus | |
| StorageType | |
| TruthValue |
How to Use in IPNetwork Monitor
Example using ctspStatsIpSwDropPkts OID:
Select a Cisco Catalyst/Nexus switch or router (TrustSec SGACL) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type ctspStatsIpSwDropPkts into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. This object indicates the number of software-forwarded IP packets which are dropped by SGACL. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases between polls, since a rising count of errors, failures, or discards often points to a real underlying problem. Click Finish to create the monitor; you can adjust any parameter later.
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| ciscoTrustSecPolicyMIB | 1.3.6.1.4.1.9.9.713 | This MIB module defines managed objects that facilitate the management of various policies within the Cisco Trusted Security (TrustSec) infrastructure. The information available through this MIB includes: o Device and interface level configuration for enabling SGACL (Security Group Access Control List) enforcement on Layer2/3 traffic. o Administrative and operational SGACL mapping to Security Group Tag (SGT). o Various statistics counters for traffic subject to SGACL enforcement. o TrustSec policies with respect to peer device. o Interface level configuration for enabling the propagation of SGT along with the Layer 3 traffic in portions of network which does not have the capability to support TrustSec feature. o TrustSec policies with respect to SGT propagation with Layer 3 traffic. The following terms are used throughout this MIB: VRF: Virtual Routing and Forwarding. SGACL: Security Group Access Control List. ACE: Access Control Entries. SXP: SGT Propagation Protocol. SVI: Switch Virtual Interface. IPM: Identity Port Mapping. SGT (Security Group Tag) is a unique 16 bits value assigned to every security group and used by network devices to enforce SGACL. Peer is another device connected to the local device on the other side of a TrustSec link. Default Policy: Policy applied to traffic when there is no explicit policy between the SGT associated with the originator of the traffic and the SGT associated with the destination of the traffic. | ||
| ciscoTrustSecPolicyMIBCompliance | 1.3.6.1.4.1.9.9.713.2.1.1 | The compliance statement for the CISCO-TRUSTSEC-POLICY-MIB | ||
| ciscoTrustSecPolicyMIBComplianceRev2 | 1.3.6.1.4.1.9.9.713.2.1.2 | The compliance statement for the CISCO-TRUSTSEC-POLICY-MIB | ||
| ciscoTrustSecPolicyMIBCompliances | 1.3.6.1.4.1.9.9.713.2.1 | |||
| ciscoTrustSecPolicyMIBConformance | 1.3.6.1.4.1.9.9.713.2 | |||
| ciscoTrustSecPolicyMIBGroups | 1.3.6.1.4.1.9.9.713.2.2 | |||
| ciscoTrustSecPolicyMIBNotifs | 1.3.6.1.4.1.9.9.713.0 | |||
| ciscoTrustSecPolicyMIBObjects | 1.3.6.1.4.1.9.9.713.1 | |||
| INT ctspAllPeerPolicyAction | 1.3.6.1.4.1.9.9.713.1.2.1 | INTEGER | read-write | This object allows user to specify the action to be taken with respect to all peer policies in the device. When read, this object always returns the value 'none'. 'none' - No operation. 'refresh' - Refresh all peer policies in the device. |
| INT ctspAllSgtPolicyAction | 1.3.6.1.4.1.9.9.713.1.5.1 | INTEGER | read-write | This object allows user to specify the action to be taken with respect to all SGT policies in the device. When read, this object always returns the value 'none'. 'none' - No operation. 'refresh' - Refresh all SGT policies in the device. |
| STR ctspAuthorizationSgaclFailInfo | 1.3.6.1.4.1.9.9.713.1.10.3 | SnmpAdminString | accessible-for-notify | This object provides additional information about authorization SGACL failure, which is associated with ctspAuthorizationSgaclFailNotif. |
| NTF ctspAuthorizationSgaclFailNotif | 1.3.6.1.4.1.9.9.713.0.2 | A ctspAuthorizationSgaclFailNotif is generated when the authorization of SGACL fails. | ||
| T/F ctspAuthorizationSgaclFailNotifEnable | 1.3.6.1.4.1.9.9.713.1.9.2 | TruthValue | read-write | This object specifies whether this system generates the ctspAuthorizationSgaclFailNotif. A value of 'false' will prevent ctspAuthorizationSgaclFailNotif notifications from being generated by this system. |
| INT ctspAuthorizationSgaclFailReason | 1.3.6.1.4.1.9.9.713.1.10.2 | INTEGER | accessible-for-notify | This object indicates the reason of failure during SGACL acquisitions, installations and uninstallations, which is associated with ctspAuthorizationSgaclFailNotif; 'downloadACE' - Failure during downloading ACE in SGACL acquisition. 'downloadSrc' - Failure during downloading source list in SGACL acquisition. 'downloadDst' - Failure during downloading destination list in SGACL acquisition. 'installPolicy' - Failure during SGACL policy installation 'installPolicyStandby' - Failure during SGACL policy installation on standby 'installForIP' - Failure during SGACL installation for specific IP type. 'uninstall' - Failure during SGACL uninstallation. |
| CTS ctspConfigSgaclMappingDestSgt | 1.3.6.1.4.1.9.9.713.1.1.2.1.1.2 | CtsSecurityGroupTag | not-accessible | This object indicates the destination SGT value. Value of zero indicates that the destination SGT is unknown. |
| ctspConfigSgaclMappingEntry | 1.3.6.1.4.1.9.9.713.1.1.2.1.1 | not-accessible | Each row contains the SGACL mapping to source and destination SGT for a certain traffic type as well as status of this instance. A row instance can be created or removed by setting the appropriate value of its RowStatus object. | |
| ctspConfigSgaclMappingGroup | 1.3.6.1.4.1.9.9.713.2.2.5 | A collection of objects which provides the administratively configured SGACL mapping information in the device. | ||
| INT ctspConfigSgaclMappingIpTrafficType | 1.3.6.1.4.1.9.9.713.1.1.2.1.1.1 | INTEGER | not-accessible | This object indicates the type of the unicast IP traffic carrying the source SGT and travelling to destination SGT and subjected to SGACL enforcement. |
| ROW ctspConfigSgaclMappingRowStatus | 1.3.6.1.4.1.9.9.713.1.1.2.1.1.6 | RowStatus | read-create | This object is used to manage the creation and deletion of rows in this table. ctspConfigSgaclName may be modified at any time. |
| CTS ctspConfigSgaclMappingSgaclName | 1.3.6.1.4.1.9.9.713.1.1.2.1.1.4 | CtsAclList | read-create | This object specifies the list of existing SGACLs which is administratively configured to apply to unicast IP traffic carrying the source SGT to the destination SGT. |
| CTS ctspConfigSgaclMappingSourceSgt | 1.3.6.1.4.1.9.9.713.1.1.2.1.1.3 | CtsSecurityGroupTag | not-accessible | This object indicates the source SGT value. Value of zero indicates that the source SGT is unknown. |
| STO ctspConfigSgaclMappingStorageType | 1.3.6.1.4.1.9.9.713.1.1.2.1.1.5 | StorageType | read-create | The storage type for this conceptual row. |
| ctspConfigSgaclMappingTable | 1.3.6.1.4.1.9.9.713.1.1.2.1 | not-accessible | This table contains the SGACLs information which is applied to unicast IP traffic which carries a source SGT and travels to a destination SGT. | |
| CTS ctspConfigSgaclMonitor | 1.3.6.1.4.1.9.9.713.1.1.2.1.1.7 | CtsSgaclMonitorMode | read-create | This object specifies whether SGACL monitor mode is turned on for the configured SGACL enforced traffic. |
| CTS ctspDefConfigIpv4Sgacls | 1.3.6.1.4.1.9.9.713.1.1.2.2 | CtsAclListOrEmpty | read-write | This object specifies the SGACLs of the unicast default policy for IPv4 traffic. If there is no SGACL configured for unicast default policy for IPv4 traffic, the value of this object is the zero-length string. |
| CTS ctspDefConfigIpv4SgaclsMonitor | 1.3.6.1.4.1.9.9.713.1.1.2.8 | CtsSgaclMonitorMode | read-write | This object specifies whether SGACL monitor mode is turned on for the default configured SGACL enforced Ipv4 traffic. |
| CTS ctspDefConfigIpv6Sgacls | 1.3.6.1.4.1.9.9.713.1.1.2.3 | CtsAclListOrEmpty | read-write | This object specifies the SGACLs of the unicast default policy for IPv6 traffic. If there is no SGACL configured for unicast default policy for IPv6 traffic, the value of this object is the zero-length string. |
| CTS ctspDefConfigIpv6SgaclsMonitor | 1.3.6.1.4.1.9.9.713.1.1.2.9 | CtsSgaclMonitorMode | read-write | This object specifies whether SGACL monitor mode is turned on for the default configured SGACL enforced Ipv6 traffic. |
| BIT ctspDefDownloadedIpTrafficType | 1.3.6.1.4.1.9.9.713.1.1.2.5.1.4 | Bits | read-only | This object indicates the type of the IP traffic subjected to SGACL enforcement by this downloaded default policy. |
| CTS ctspDefDownloadedSgaclGenId | 1.3.6.1.4.1.9.9.713.1.1.2.5.1.3 | CtsGenerationId | read-only | This object indicates the generation identification of the SGACL of downloaded default policy applied to unicast IP traffic. |
| U32 ctspDefDownloadedSgaclIndex | 1.3.6.1.4.1.9.9.713.1.1.2.5.1.1 | Unsigned32 | not-accessible | This object identifies the SGACL of downloaded default policy applied to unicast IP traffic. |
| ctspDefDownloadedSgaclMappingEntry | 1.3.6.1.4.1.9.9.713.1.1.2.5.1 | not-accessible | Each row contains the downloaded SGACLs mapping. A row instance contains the SGACL information of the default policy dynamically downloaded from ACS server for unicast IP traffic. | |
| ctspDefDownloadedSgaclMappingTable | 1.3.6.1.4.1.9.9.713.1.1.2.5 | not-accessible | This table contains the downloaded SGACLs information of the default policy applied to unicast IP traffic. | |
| CTS ctspDefDownloadedSgaclMonitor | 1.3.6.1.4.1.9.9.713.1.1.2.5.1.5 | CtsSgaclMonitorMode | read-only | This object indicates whether SGACL monitor mode is turned on for the default downloaded SGACL enforced traffic. |
| CTS ctspDefDownloadedSgaclName | 1.3.6.1.4.1.9.9.713.1.1.2.5.1.2 | CtsAclName | read-only | This object indicates the name of the SGACL of downloaded default policy applied to unicast IP traffic. |
| ctspDefHwStatisticsGroup | 1.3.6.1.4.1.9.9.713.2.2.11 | A collection of objects which provides hardware statistics counters for unicast IP traffic subjected to unicast default policy enforcement. | ||
| C64 ctspDefIpHwDropPkts | 1.3.6.1.4.1.9.9.713.1.1.3.2.1.3 | Counter64 | read-only | This object indicates the number of hardware-forwarded IP packets which are dropped by default unicast policy. |
| C64 ctspDefIpHwMonitorPkts | 1.3.6.1.4.1.9.9.713.1.1.3.2.1.7 | Counter64 | read-only | This object indicates the number of hardware-forwarded IP packets which are monitored by default unicast policy. |
| C64 ctspDefIpHwPermitPkts | 1.3.6.1.4.1.9.9.713.1.1.3.2.1.5 | Counter64 | read-only | This object indicates the number of hardware-forwarded IP packets which are permitted by default unicast policy. |
| C64 ctspDefIpSwDropPkts | 1.3.6.1.4.1.9.9.713.1.1.3.2.1.2 | Counter64 | read-only | This object indicates the number of software-forwarded IP packets which are dropped by default unicast policy. |
| C64 ctspDefIpSwMonitorPkts | 1.3.6.1.4.1.9.9.713.1.1.3.2.1.6 | Counter64 | read-only | This object indicates the number of software-forwarded IP packets which are monitored by default unicast policy. |
| C64 ctspDefIpSwPermitPkts | 1.3.6.1.4.1.9.9.713.1.1.3.2.1.4 | Counter64 | read-only | This object indicates the number of software-forwarded IP packets which are permitted by default unicast policy. |
| INT ctspDefIpTrafficType | 1.3.6.1.4.1.9.9.713.1.1.3.2.1.1 | INTEGER | not-accessible | This object indicates the type of the IP traffic subjected to default unicast policy enforcement. |
| CTS ctspDefOperationalSgaclGenId | 1.3.6.1.4.1.9.9.713.1.1.2.7.1.4 | CtsGenerationId | read-only | This object indicates the generation identification of the SGACL of default policy operationally applied to unicast IP traffic. |
| CTS ctspDefOperationalSgaclName | 1.3.6.1.4.1.9.9.713.1.1.2.7.1.3 | CtsAclName | read-only | This object indicates the name of the SGACL of default policy operationally applied to unicast IP traffic. |
| INT ctspDefOperIpTrafficType | 1.3.6.1.4.1.9.9.713.1.1.2.7.1.1 | INTEGER | not-accessible | This object indicates the type of the unicast IP traffic subjected to default policy enforcement. |
| INT ctspDefOperSgaclConfigSource | 1.3.6.1.4.1.9.9.713.1.1.2.7.1.6 | INTEGER | read-only | This object indicates the source of SGACL creation for the SGACL of default policy operationally applied to unicast IP traffic. 'downloaded' indicates that the SGACL is created at ACS server and downloaded to the local device. 'configured' indicates that the SGACL is locally configured in the local device. |
| U32 ctspDefOperSgaclIndex | 1.3.6.1.4.1.9.9.713.1.1.2.7.1.2 | Unsigned32 | not-accessible | This object identifies the SGACL of default policy operationally applied to unicast IP traffic. |
| ctspDefOperSgaclMappingEntry | 1.3.6.1.4.1.9.9.713.1.1.2.7.1 | not-accessible | A row instance contains the SGACL information of the default policy which is either statically configured at the device or dynamically downloaded from ACS server for unicast IP traffic. | |
| INT ctspDefOperSgaclMappingSource | 1.3.6.1.4.1.9.9.713.1.1.2.7.1.5 | INTEGER | read-only | This object indicates the source of SGACL mapping for the SGACL of default policy operationally applied to unicast IP traffic. 'downloaded' indicates that the mapping is downloaded from ACS server. 'configured' indicates that the mapping is locally configured in the device. |
| ctspDefOperSgaclMappingTable | 1.3.6.1.4.1.9.9.713.1.1.2.7 | not-accessible | This table contains the operational SGACLs information of the default policy applied to unicast IP traffic. | |
| CTS ctspDefOperSgaclMonitor | 1.3.6.1.4.1.9.9.713.1.1.2.7.1.7 | CtsSgaclMonitorMode | read-only | This object indicates whether SGACL monitor mode is turned on for the SGACL of default policy enforced traffic. |
| ctspDefStatsEntry | 1.3.6.1.4.1.9.9.713.1.1.3.2.1 | not-accessible | Each row contains the statistics counter for each IP traffic type. | |
| ctspDefStatsTable | 1.3.6.1.4.1.9.9.713.1.1.3.2 | not-accessible | This table describes statistics counters for unicast IP traffic subjected to default unicast policy. | |
| ctspDefSwStatisticsGroup | 1.3.6.1.4.1.9.9.713.2.2.10 | A collection of objects which provides software statistics counters for unicast IP traffic subjected to unicast default policy enforcement. | ||
| INT ctspDownloadedDefSgtPolicyAction | 1.3.6.1.4.1.9.9.713.1.5.3.1.5 | INTEGER | read-write | This object allows user to specify the action to be taken with this default downloaded SGT policy. When read, this object always returns the value 'none'. 'none' - No operation. 'refresh' - Refresh this default SGT policy. |
| ctspDownloadedDefSgtPolicyEntry | 1.3.6.1.4.1.9.9.713.1.5.3.1 | not-accessible | Each row contains the managed objects for default SGT policies downloaded by the device. | |
| DAT ctspDownloadedDefSgtPolicyLastUpdate | 1.3.6.1.4.1.9.9.713.1.5.3.1.4 | DateAndTime | read-only | This object indicates the time when this downloaded SGT policy is last updated. |
| U32 ctspDownloadedDefSgtPolicyLifeTime | 1.3.6.1.4.1.9.9.713.1.5.3.1.3 | Unsigned32 | read-only | This object indicates the policy life time which provides the time interval during which this download default policy is valid. |
| CTS ctspDownloadedDefSgtPolicySgtGenId | 1.3.6.1.4.1.9.9.713.1.5.3.1.2 | CtsGenerationId | read-only | This object indicates the generation identification of the downloaded default SGT policy. |
| ctspDownloadedDefSgtPolicyTable | 1.3.6.1.4.1.9.9.713.1.5.3 | not-accessible | This table lists the default SGT policy information downloaded by the device. | |
| INT ctspDownloadedDefSgtPolicyType | 1.3.6.1.4.1.9.9.713.1.5.3.1.1 | INTEGER | not-accessible | This object indicates the downloaded default SGT policy type. 'unicastDefault' indicates the SGT policy applied to traffic which carries the default unicast SGT. |
| BIT ctspDownloadedIpTrafficType | 1.3.6.1.4.1.9.9.713.1.1.2.4.1.6 | Bits | read-only | This object indicates the type of the unicast IP traffic carrying the source SGT and travelling to destination SGT and subjected to SGACL enforcement by this downloaded default policy. |
| CTS ctspDownloadedSgaclDestSgt | 1.3.6.1.4.1.9.9.713.1.1.2.4.1.1 | CtsSecurityGroupTag | not-accessible | This object indicates the destination SGT value. Value of zero indicates that the destination SGT is unknown. |
| CTS ctspDownloadedSgaclGenId | 1.3.6.1.4.1.9.9.713.1.1.2.4.1.5 | CtsGenerationId | read-only | This object indicates the generation identification of downloaded SGACL which is applied to unicast IP traffic carrying the source SGT to the destination SGT. |
| U32 ctspDownloadedSgaclIndex | 1.3.6.1.4.1.9.9.713.1.1.2.4.1.3 | Unsigned32 | not-accessible | This object identifies the downloaded SGACL which is applied to unicast IP traffic carrying the source SGT to the destination SGT. |
| ctspDownloadedSgaclMappingEntry | 1.3.6.1.4.1.9.9.713.1.1.2.4.1 | not-accessible | Each row contains the downloaded SGACLs mapping. A row instance is added for each pair of which contains SGACL that is dynamically downloaded from ACS server. | |
| ctspDownloadedSgaclMappingGroup | 1.3.6.1.4.1.9.9.713.2.2.6 | A collection of objects which provides the downloaded SGACL mapping information in the device. | ||
| ctspDownloadedSgaclMappingTable | 1.3.6.1.4.1.9.9.713.1.1.2.4 | not-accessible | This table contains the downloaded SGACLs information applied to unicast IP traffic which carries a source SGT and travels to a destination SGT. | |
| CTS ctspDownloadedSgaclMonitor | 1.3.6.1.4.1.9.9.713.1.1.2.4.1.7 | CtsSgaclMonitorMode | read-only | This object indicates whether SGACL monitor mode is turned on for the downloaded SGACL enforced traffic. |
| CTS ctspDownloadedSgaclName | 1.3.6.1.4.1.9.9.713.1.1.2.4.1.4 | CtsAclName | read-only | This object indicates the name of downloaded SGACL which is applied to unicast IP traffic carrying the source SGT to the destination SGT. |
| CTS ctspDownloadedSgaclSourceSgt | 1.3.6.1.4.1.9.9.713.1.1.2.4.1.2 | CtsSecurityGroupTag | not-accessible | This object indicates the source SGT value. Value of zero indicates that the source SGT is unknown. |
| INT ctspDownloadedSgtPolicyAction | 1.3.6.1.4.1.9.9.713.1.5.2.1.5 | INTEGER | read-write | This object allows user to specify the action to be taken with this downloaded SGT policy. When read, this object always returns the value 'none'. 'none' - No operation. 'refresh' - Refresh this SGT policy. |
| ctspDownloadedSgtPolicyEntry | 1.3.6.1.4.1.9.9.713.1.5.2.1 | not-accessible | Each row contains the managed objects for SGT policies downloaded by the device. | |
| DAT ctspDownloadedSgtPolicyLastUpdate | 1.3.6.1.4.1.9.9.713.1.5.2.1.4 | DateAndTime | read-only | This object indicates the time when this downloaded SGT policy is last updated. |
| U32 ctspDownloadedSgtPolicyLifeTime | 1.3.6.1.4.1.9.9.713.1.5.2.1.3 | Unsigned32 | read-only | This object indicates the policy life time which provides the time interval during which this downloaded policy is valid. |
| CTS ctspDownloadedSgtPolicySgt | 1.3.6.1.4.1.9.9.713.1.5.2.1.1 | CtsSecurityGroupTag | not-accessible | This object indicates the SGT value for which the downloaded policy is applied to. Value of zero indicates that the SGT is unknown. |
| CTS ctspDownloadedSgtPolicySgtGenId | 1.3.6.1.4.1.9.9.713.1.5.2.1.2 | CtsGenerationId | read-only | This object indicates the generation identification of the SGT value denoted by ctspDownloadedSgtPolicySgt object. |
| ctspDownloadedSgtPolicyTable | 1.3.6.1.4.1.9.9.713.1.5.2 | not-accessible | This table lists the SGT policy information downloaded by the device. | |
| ctspGlobalSgaclEnforcementGroup | 1.3.6.1.4.1.9.9.713.2.2.1 | A collection of object which provides the SGACL enforcement information for all TrustSec capable Layer 3 interfaces (excluding SVIs) at the device level. | ||
| T/F ctspIfL3Ipv4PolicyEnabled | 1.3.6.1.4.1.9.9.713.1.3.2.1.1 | TruthValue | read-write | This object specifies whether the Layer3 Transport policies will be applied on this interface for egress IPv4 traffic. 'true' indicates that Layer3 permit and exception policy will be applied at this interface for egress IPv4 traffic. 'false' indicates that Layer3 permit and exception policy will not be applied at this interface for egress IPv4 traffic. |
| T/F ctspIfL3Ipv6PolicyEnabled | 1.3.6.1.4.1.9.9.713.1.3.2.1.2 | TruthValue | read-write | This object specifies whether the Layer3 Transport policies will be applied on this interface for egress IPv6 traffic. 'true' indicates that Layer3 permit and exception policy will be applied at this interface for egress IPv6 traffic. 'false' indicates that Layer3 permit and exception policy will not be applied at this interface for egress IPv6 traffic. |
| ctspIfL3PolicyConfigEntry | 1.3.6.1.4.1.9.9.713.1.3.2.1 | not-accessible | Each row contains managed objects for Layer3 Transport on interface capable of providing this information. | |
| ctspIfL3PolicyConfigGroup | 1.3.6.1.4.1.9.9.713.2.2.15 | A collection of objects which provides managed information for Layer3 Tranport policy enforcement on capable interface in the device. | ||
| ctspIfL3PolicyConfigTable | 1.3.6.1.4.1.9.9.713.1.3.2 | not-accessible | This table lists the interfaces which support Layer3 Transport policy. | |
| STR ctspIfSgName | 1.3.6.1.4.1.9.9.713.1.6.1.1.2 | SnmpAdminString | read-create | This object specifies the Security Group Name assigned to the interface. |
| ctspIfSgtMappingEntry | 1.3.6.1.4.1.9.9.713.1.6.1.1 | not-accessible | Each row contains the SGT mapping configuration of a particular interface. A row instance can be created or removed by setting ctspIfSgtRowStatus. | |
| ctspIfSgtMappingGroup | 1.3.6.1.4.1.9.9.713.2.2.18 | A collection of objects which provides managed information regarding Interface-to-Sgt mapping in the device. | ||
| ctspIfSgtMappingInfoEntry | 1.3.6.1.4.1.9.9.713.1.6.2.1 | not-accessible | Containing the Interface-to-SGT mapping status of the specified interface. | |
| ctspIfSgtMappingInfoTable | 1.3.6.1.4.1.9.9.713.1.6.2 | not-accessible | This table contains the Interface-to-SGT mapping status information in the device. | |
| ctspIfSgtMappings | 1.3.6.1.4.1.9.9.713.1.6 | |||
| ctspIfSgtMappingTable | 1.3.6.1.4.1.9.9.713.1.6.1 | not-accessible | This table contains the Interface-to-SGT mapping configuration information in the device. | |
| ROW ctspIfSgtRowStatus | 1.3.6.1.4.1.9.9.713.1.6.1.1.4 | RowStatus | read-create | This object is used to manage the creation and deletion of rows in this table. |
| STO ctspIfSgtStorageType | 1.3.6.1.4.1.9.9.713.1.6.1.1.3 | StorageType | read-create | The storage type for this conceptual row. |
| CTS ctspIfSgtValue | 1.3.6.1.4.1.9.9.713.1.6.1.1.1 | CtsSecurityGroupTag | read-create | This object specifies the SGT value assigned to the interface. |
| ctspIpHwStatisticsGroup | 1.3.6.1.4.1.9.9.713.2.2.9 | A collection of objects which provides hardware statistics counters for unicast IP traffic subjected to SGACL enforcement. | ||
| ADR ctspIpSgtAddressLength | 1.3.6.1.4.1.9.9.713.1.4.1.1.4 | InetAddressPrefixLength | not-accessible | This object indicates the length of an Internet address prefix. |
| IPt ctspIpSgtAddressType | 1.3.6.1.4.1.9.9.713.1.4.1.1.2 | InetAddressType | not-accessible | This object indicates the type of Internet address. |
| IP ctspIpSgtIpAddress | 1.3.6.1.4.1.9.9.713.1.4.1.1.3 | InetAddress | not-accessible | This object indicates an Internet address. The type of this address is determined by the value of ctspIpSgtAddressType object. |
| ctspIpSgtMappingEntry | 1.3.6.1.4.1.9.9.713.1.4.1.1 | not-accessible | Each row contains the IP-to-SGT mapping and status of this instance. Entry in this table is either populated automatically by the device or manually configured by a user. A manually configured row instance can be created or removed by setting the appropriate value of its RowStatus object. | |
| ctspIpSgtMappingGroup | 1.3.6.1.4.1.9.9.713.2.2.16 | A collection of objects which provides managed information regarding IP-to-Sgt mapping in the device. | ||
| ctspIpSgtMappings | 1.3.6.1.4.1.9.9.713.1.4 | |||
| ctspIpSgtMappingTable | 1.3.6.1.4.1.9.9.713.1.4.1 | not-accessible | This table contains the IP-to-SGT mapping information in the device. | |
| ROW ctspIpSgtRowStatus | 1.3.6.1.4.1.9.9.713.1.4.1.1.8 | RowStatus | read-create | This object is used to manage the creation and deletion of rows in this table. If this object value is 'active', user cannot modify any writable object in this row. If value of ctspIpSgtSource object in an entry is not 'configured', user cannot change the value of this object. |
| INT ctspIpSgtSource | 1.3.6.1.4.1.9.9.713.1.4.1.1.6 | INTEGER | read-create | This object indicates the source of the mapping. 'configured' indicates that the mapping is manually configured by user. 'arp' indicates that the mapping is dynamically learnt from tagged ARP replies. 'localAuthenticated' indicates that the mapping is dynamically learnt from the device authentication of a host. 'sxp' indicates that the mapping is dynamically learnt from SXP (SGT Propagation Protocol). 'internal' indicates that the mapping is automatically created by the device between the device IP addresses and the device own SGT. 'l3if' indicates that Interface-SGT mapping is configured by user. 'vlan' indicates that Vlan-SGT mapping is configured by user. 'cached' indicates that sgt mapping is cached. Only 'configured' value is accepted when setting this object. |
| STO ctspIpSgtStorageType | 1.3.6.1.4.1.9.9.713.1.4.1.1.7 | StorageType | read-create | The storage type for this conceptual row. |
| CTS ctspIpSgtValue | 1.3.6.1.4.1.9.9.713.1.4.1.1.5 | CtsSecurityGroupTag | read-create | This object specifies the SGT value assigned to an Internet address. |
| CIS ctspIpSgtVrfName | 1.3.6.1.4.1.9.9.713.1.4.1.1.1 | CiscoVrfName | not-accessible | This object indicates the VRF where IP-SGT mapping belongs to. The zero length value indicates the default VRF. |
| ctspIpSwStatisticsGroup | 1.3.6.1.4.1.9.9.713.2.2.8 | A collection of objects which provides software statistics counters for unicast IP traffic subjected to SGACL enforcement. | ||
| INT ctspL3IPMStatus | 1.3.6.1.4.1.9.9.713.1.6.2.1.1 | INTEGER | read-only | This object indicates the Layer 3 Identity Port Mapping(IPM) operational mode. disabled - The L3 IPM is not configured. active - The L3 IPM is configured for this interface, and SGT is available. inactive - The L3 IPM is configured for this interface, and SGT is unavailable. |
| CTS ctspLayer3PolicyDownloaded | 1.3.6.1.4.1.9.9.713.1.3.1.1.4 | CtsAclNameOrEmpty | read-only | This object specifies the name of an ACL that is downloaded from policy server to classify Layer3 traffic. Zero-length string indicates there is no such downloaded policy. |
| ctspLayer3PolicyEntry | 1.3.6.1.4.1.9.9.713.1.3.1.1 | not-accessible | Each row contains the Layer 3 transport policies per IP traffic type per policy type. | |
| INT ctspLayer3PolicyIpTrafficType | 1.3.6.1.4.1.9.9.713.1.3.1.1.1 | INTEGER | not-accessible | This object indicates the type of the IP traffic affected by Layer-3 transport policy. 'ipv4' indicates that the affected traffic is IPv4 traffic. 'ipv6' indicates that the affected traffic is IPv6 traffic. |
| CTS ctspLayer3PolicyLocalConfig | 1.3.6.1.4.1.9.9.713.1.3.1.1.3 | CtsAclNameOrEmpty | read-write | This object specifies the name of an ACL that is administratively configured to classify Layer3 traffic. Zero-length string indicates there is no such configured policy. |
| CTS ctspLayer3PolicyOperational | 1.3.6.1.4.1.9.9.713.1.3.1.1.5 | CtsAclNameOrEmpty | read-only | This object specifies the name of an operational ACL currently used to classify Layer3 traffic. Zero-length string indicates there is no such policy in effect. |
| ctspLayer3PolicyTable | 1.3.6.1.4.1.9.9.713.1.3.1 | not-accessible | This table describes Layer 3 transport policy for IP traffic regarding SGT propagation. | |
| INT ctspLayer3PolicyType | 1.3.6.1.4.1.9.9.713.1.3.1.1.2 | INTEGER | not-accessible | This object indicates the type of the Layer-3 transport policy affecting IP traffic regarding SGT propagation. 'permit' indicates that the transport policy is used to classify Layer-3 traffic which is subject to SGT propagation. 'exception' indicates that the transport policy is used to classify Layer-3 traffic which is NOT subject to SGT propagation. |
| ctspLayer3Transport | 1.3.6.1.4.1.9.9.713.1.3 | |||
| ctspLayer3TransportGroup | 1.3.6.1.4.1.9.9.713.2.2.14 | A collection of objects which provides managed information regarding the SGT propagation along with Layer 3 traffic in the device. | ||
| ctspNotifCtrlGroup | 1.3.6.1.4.1.9.9.713.2.2.23 | A collection of objects providing notification control for TrustSec policy notifications. | ||
| ctspNotifGroup | 1.3.6.1.4.1.9.9.713.2.2.24 | A collection of notifications for TrustSec policy. | ||
| ctspNotifInfoGroup | 1.3.6.1.4.1.9.9.713.2.2.25 | A collection of objects providing the variable binding for TrustSec policy notifications. | ||
| ctspNotifsControl | 1.3.6.1.4.1.9.9.713.1.9 | |||
| ctspNotifsOnlyInfo | 1.3.6.1.4.1.9.9.713.1.10 | |||
| CTS ctspOldPeerSgt | 1.3.6.1.4.1.9.9.713.1.10.1 | CtsSecurityGroupTag | accessible-for-notify | This object provides the old sgt value for ctspPeerPolicyUpdatedNotif, i.e., the sgt value before the policy is updated. |
| CTS ctspOperationalSgaclGenId | 1.3.6.1.4.1.9.9.713.1.1.2.6.1.6 | CtsGenerationId | read-only | This object indicates the generation identification of the SGACL operationally applied to unicast IP traffic carrying the source SGT to the destination SGT. |
| CTS ctspOperationalSgaclName | 1.3.6.1.4.1.9.9.713.1.1.2.6.1.5 | CtsAclName | read-only | This object indicates the name of the SGACL operationally applied to unicast IP traffic carrying the source SGT to the destination SGT. |
| INT ctspOperIpTrafficType | 1.3.6.1.4.1.9.9.713.1.1.2.6.1.1 | INTEGER | not-accessible | This object indicates the type of the unicast IP traffic carrying the source SGT and travelling to destination SGT and subjected to SGACL enforcement. |
| INT ctspOperSgaclConfigSource | 1.3.6.1.4.1.9.9.713.1.1.2.6.1.8 | INTEGER | read-only | This object indicates the source of SGACL creation for this SGACL. 'configured' indicates that the SGACL is locally configured in the local device. 'downloaded' indicates that the SGACL is created at ACS server and downloaded to the local device. |
| CTS ctspOperSgaclDestSgt | 1.3.6.1.4.1.9.9.713.1.1.2.6.1.2 | CtsSecurityGroupTag | not-accessible | This object indicates the destination SGT value. Value of zero indicates that the destination SGT is unknown. |
| U32 ctspOperSgaclIndex | 1.3.6.1.4.1.9.9.713.1.1.2.6.1.4 | Unsigned32 | not-accessible | This object identifies the SGACL operationally applied to unicast IP traffic carrying the source SGT to the destination SGT. |
| ctspOperSgaclMappingEntry | 1.3.6.1.4.1.9.9.713.1.1.2.6.1 | not-accessible | Each row contains the operational SGACLs mapping. A row instance is added for each pair of which contains the SGACL that either statically configured at the device or dynamically downloaded from ACS server. | |
| ctspOperSgaclMappingGroup | 1.3.6.1.4.1.9.9.713.2.2.7 | A collection of objects which provides the operational SGACL mapping information in the device. | ||
| INT ctspOperSgaclMappingSource | 1.3.6.1.4.1.9.9.713.1.1.2.6.1.7 | INTEGER | read-only | This object indicates the source of SGACL mapping for the SGACL operationally applied to unicast IP traffic carrying the source SGT to the destination SGT. 'downloaded' indicates that the mapping is downloaded from ACS server. 'configured' indicates that the mapping is locally configured in the device. |
| ctspOperSgaclMappingTable | 1.3.6.1.4.1.9.9.713.1.1.2.6 | not-accessible | This table contains the operational SGACLs information applied to unicast IP traffic which carries a source SGT and travels to a destination SGT. | |
| CTS ctspOperSgaclMonitor | 1.3.6.1.4.1.9.9.713.1.1.2.6.1.9 | CtsSgaclMonitorMode | read-only | This object indicates whether SGACL monitor mode is turned on for the SGACL enforced traffic. |
| CTS ctspOperSgaclSourceSgt | 1.3.6.1.4.1.9.9.713.1.1.2.6.1.3 | CtsSecurityGroupTag | not-accessible | This object indicates the source SGT value. Value of zero indicates that the source SGT is unknown. |
| STR ctspPeerName | 1.3.6.1.4.1.9.9.713.1.2.2.1.1 | SnmpAdminString | not-accessible | This object uniquely identifies a peer device. |
| ctspPeerPolicy | 1.3.6.1.4.1.9.9.713.1.2 | |||
| INT ctspPeerPolicyAction | 1.3.6.1.4.1.9.9.713.1.2.2.1.7 | INTEGER | read-write | This object allows user to specify the action to be taken with this peer policy. When read, this object always returns the value 'none'. 'none' - No operation. 'refresh' - Refresh this peer policy. |
| ctspPeerPolicyActionGroup | 1.3.6.1.4.1.9.9.713.2.2.12 | A collection of object which provides refreshing of all peer policies in the device. | ||
| ctspPeerPolicyEntry | 1.3.6.1.4.1.9.9.713.1.2.2.1 | not-accessible | Each row contains the managed objects for peer policies for each peer device based on its name. | |
| ctspPeerPolicyGroup | 1.3.6.1.4.1.9.9.713.2.2.13 | A collection of object which provides peer policy information in the device. | ||
| DAT ctspPeerPolicyLastUpdate | 1.3.6.1.4.1.9.9.713.1.2.2.1.6 | DateAndTime | read-only | This object indicates the time when this peer policy is last updated. |
| U32 ctspPeerPolicyLifeTime | 1.3.6.1.4.1.9.9.713.1.2.2.1.5 | Unsigned32 | read-only | This object indicates the policy life time which provides the time interval during which the peer policy is valid. |
| ctspPeerPolicyTable | 1.3.6.1.4.1.9.9.713.1.2.2 | not-accessible | This table lists the peer policy information for each peer device. | |
| NTF ctspPeerPolicyUpdatedNotif | 1.3.6.1.4.1.9.9.713.0.1 | A ctspPeerPolicyUpdatedNotif is generated when the SGT value of a peer device has been updated. | ||
| T/F ctspPeerPolicyUpdatedNotifEnable | 1.3.6.1.4.1.9.9.713.1.9.1 | TruthValue | read-write | This object specifies whether the system generates ctspPeerPolicyUpdatedNotif. A value of 'false' will prevent ctspPeerPolicyUpdatedNotif notifications from being generated by this system. |
| CTS ctspPeerSgt | 1.3.6.1.4.1.9.9.713.1.2.2.1.2 | CtsSecurityGroupTag | read-only | This object indicates the SGT value of this peer device. |
| CTS ctspPeerSgtGenId | 1.3.6.1.4.1.9.9.713.1.2.2.1.3 | CtsGenerationId | read-only | This object indicates the generation identification of the SGT value assigned to this peer device. |
| INT ctspPeerTrustState | 1.3.6.1.4.1.9.9.713.1.2.2.1.4 | INTEGER | read-only | This object indicates the TrustSec trust state of this peer device. 'trusted' indicates that this is a trusted peer device. 'noTrust' indicates that this peer device is not trusted. |
| ctspSgacl | 1.3.6.1.4.1.9.9.713.1.1 | |||
| INT ctspSgaclEnforcementEnable | 1.3.6.1.4.1.9.9.713.1.1.1.1 | INTEGER | read-write | This object specifies whether SGACL enforcement for all Layer 3 interfaces (excluding SVIs) is enabled at the managed system. 'none' indicates that SGACL enforcement for all Layer 3 interfaces (excluding SVIs) is disabled. 'l3Only' indicates that SGACL enforcement is enabled on every TrustSec capable Layer3 interface (excluding SVIs) in the device. |
| ctspSgaclGlobals | 1.3.6.1.4.1.9.9.713.1.1.1 | |||
| STR ctspSgaclIpv4DropNetflowMonitor | 1.3.6.1.4.1.9.9.713.1.1.1.2 | SnmpAdminString | read-write | This object specifies an existing flexible netflow monitor name used to collect and export the IPv4 traffic dropped packets statistics due to SGACL enforcement. The zero-length string indicates that no such netflow monitor is configured in the device. |
| ctspSgaclIpv4DropNetflowMonitorGroup | 1.3.6.1.4.1.9.9.713.2.2.2 | A collection of object which provides netflow monitor information for IPv4 traffic drop packet due to SGACL enforcement in the device. | ||
| STR ctspSgaclIpv6DropNetflowMonitor | 1.3.6.1.4.1.9.9.713.1.1.1.3 | SnmpAdminString | read-write | This object specifies an existing flexible netflow monitor name used to collect and export the IPv6 traffic dropped packets statistics due to SGACL enforcement. The zero-length string indicates that no such netflow monitor is configured in the device. |
| ctspSgaclIpv6DropNetflowMonitorGroup | 1.3.6.1.4.1.9.9.713.2.2.3 | A collection of object which provides netflow monitor information for IPv6 traffic drop packet due to SGACL enforcement in the device. | ||
| ctspSgaclMappings | 1.3.6.1.4.1.9.9.713.1.1.2 | |||
| CTS ctspSgaclMonitorEnable | 1.3.6.1.4.1.9.9.713.1.1.2.10 | CtsSgaclMonitorMode | read-write | This object specifies whether SGACL monitor mode is turned on for the entire system. It has precedence than the per SGACL ctspConfigSgaclMonitor control. It could act as safety mechanism to turn off monitor in case the monitor feature impact system performance. |
| ctspSgaclMonitorGroup | 1.3.6.1.4.1.9.9.713.2.2.21 | A collection of objects which provides SGACL monitor information. | ||
| ctspSgaclMonitorStatisticGroup | 1.3.6.1.4.1.9.9.713.2.2.22 | A collection of objects which provides monitor statistics counters for unicast IP traffic subjected to SGACL enforcement. | ||
| ctspSgaclStatistics | 1.3.6.1.4.1.9.9.713.1.1.3 | |||
| ctspSgtCaching | 1.3.6.1.4.1.9.9.713.1.8 | |||
| ctspSgtCachingGroup | 1.3.6.1.4.1.9.9.713.2.2.20 | A collection of objects which provides sgt Caching information. | ||
| INT ctspSgtCachingMode | 1.3.6.1.4.1.9.9.713.1.8.1 | INTEGER | read-write | This object specifies which SGT-caching mode is configured for SGT caching capable interfaces at the managed system. 'none' indicates that sgt-caching for all Layer 3 interfaces (excluding SVIs) is disabled. 'standAlone' indicates that SGT-caching is enabled on every TrustSec capable Layer3 interface (excluding SVIs) in the device. 'withEnforcement' indicates that SGT-caching is enabled on interfaces that have RBAC enforcement enabled. 'vlan' indicates that SGT-caching is enabled on the VLANs specified by ctspSgtCachingVlansfFirst2K & ctspSgtCachingVlansSecond2K |
| CIS ctspSgtCachingVlansFirst2K | 1.3.6.1.4.1.9.9.713.1.8.2 | Cisco2KVlanList | read-write | A string of octets containing one bit per VLAN for VLANs 0 to 2047. If the bit corresponding to a VLAN is set to 1, it indicates SGT-caching is enabled on the VLAN. If the bit corresponding to a VLAN is set to 0, it indicates SGT-caching is disabled on the VLAN. |
| CIS ctspSgtCachingVlansSecond2K | 1.3.6.1.4.1.9.9.713.1.8.3 | Cisco2KVlanList | read-write | A string of octets containing one bit per VLAN for VLANs 2048 to 4095. If the bit corresponding to a VLAN is set to 1, it indicates SGT-caching is enabled on the VLAN. If the bit corresponding to a VLAN is set to 0, it indicates SGT-caching is disabled on the VLAN. |
| ctspSgtPolicy | 1.3.6.1.4.1.9.9.713.1.5 | |||
| ctspSgtPolicyGroup | 1.3.6.1.4.1.9.9.713.2.2.17 | A collection of object which provides SGT policy information in the device. | ||
| ctspSgtStatsEntry | 1.3.6.1.4.1.9.9.713.1.1.3.1.1 | not-accessible | Each row contains the SGACL statistics related to IPv4 or IPv6 packets carrying the source SGT travelling to the destination SGT and subjected to SGACL enforcement. | |
| ctspSgtStatsTable | 1.3.6.1.4.1.9.9.713.1.1.3.1 | not-accessible | This table describes SGACL statistics counters per a pair of that is capable of providing this information. | |
| CTS ctspStatsDestSgt | 1.3.6.1.4.1.9.9.713.1.1.3.1.1.2 | CtsSecurityGroupTag | not-accessible | This object indicates the destination SGT value. Value of zero indicates that the destination SGT is unknown. |
| C64 ctspStatsIpHwDropPkts | 1.3.6.1.4.1.9.9.713.1.1.3.1.1.5 | Counter64 | read-only | This object indicates the number of hardware-forwarded IP packets which are dropped by SGACL. |
| C64 ctspStatsIpHwMonitorPkts | 1.3.6.1.4.1.9.9.713.1.1.3.1.1.9 | Counter64 | read-only | This object indicates the number of hardware-forwarded IP packets which are SGACL enforced & monitored. |
| C64 ctspStatsIpHwPermitPkts | 1.3.6.1.4.1.9.9.713.1.1.3.1.1.7 | Counter64 | read-only | This object indicates the number of hardware-forwarded IP packets which are permitted by SGACL. |
| C64 ctspStatsIpSwDropPktsEx | 1.3.6.1.4.1.9.9.713.1.1.3.1.1.4 | Counter64 | read-only | This object indicates the number of software-forwarded IP packets which are dropped by SGACL. |
| C64 ctspStatsIpSwMonitorPkts | 1.3.6.1.4.1.9.9.713.1.1.3.1.1.8 | Counter64 | read-only | This object indicates the number of software-forwarded IP packets which are SGACL enforced & monitored. |
| C64 ctspStatsIpSwPermitPkts | 1.3.6.1.4.1.9.9.713.1.1.3.1.1.6 | Counter64 | read-only | This object indicates the number of software-forwarded IP packets which are permitted by SGACL. |
| INT ctspStatsIpTrafficType | 1.3.6.1.4.1.9.9.713.1.1.3.1.1.1 | INTEGER | not-accessible | This object indicates the type of the unicast IP traffic carrying the source SGT and travelling to destination SGT and subjected to SGACL enforcement. |
| CTS ctspStatsSourceSgt | 1.3.6.1.4.1.9.9.713.1.1.3.1.1.3 | CtsSecurityGroupTag | not-accessible | This object indicates the source SGT value. Value of zero indicates that the source SGT is unknown. |
| ctspVlanConfigEntry | 1.3.6.1.4.1.9.9.713.1.1.1.4.1 | not-accessible | Each row contains the SGACL enforcement information for Layer 2 and Layer 3 switched packets in a VLAN identified by its VlanIndex value. Entry in this table is populated for VLANs which contains SGACL enforcement or VRF configuration. | |
| ctspVlanConfigGroup | 1.3.6.1.4.1.9.9.713.2.2.4 | A collection of object which provides the SGACL enforcement and VRF information for each VLAN. | ||
| VLA ctspVlanConfigIndex | 1.3.6.1.4.1.9.9.713.1.1.1.4.1.1 | VlanIndex | not-accessible | This object indicates the VLAN-ID of this VLAN. |
| ROW ctspVlanConfigRowStatus | 1.3.6.1.4.1.9.9.713.1.1.1.4.1.6 | RowStatus | read-create | The status of this conceptual row entry. This object is used to manage creation and deletion of rows in this table. When this object value is 'active', other writable objects in the same row cannot be modified. |
| T/F ctspVlanConfigSgaclEnforcement | 1.3.6.1.4.1.9.9.713.1.1.1.4.1.2 | TruthValue | read-create | This object specifies the configured SGACL enforcement status for this VLAN i.e., 'true' = enabled and 'false' = disabled. |
| STO ctspVlanConfigStorageType | 1.3.6.1.4.1.9.9.713.1.1.1.4.1.5 | StorageType | read-create | The objects specifies the storage type for this conceptual row. |
| ctspVlanConfigTable | 1.3.6.1.4.1.9.9.713.1.1.1.4 | not-accessible | This table lists the SGACL enforcement for Layer 2 and Layer 3 switched packet in a VLAN as well as VRF information for VLANs in the device. | |
| CIS ctspVlanConfigVrfName | 1.3.6.1.4.1.9.9.713.1.1.1.4.1.4 | CiscoVrfName | read-create | This object specifies an existing VRF where this VLAN belongs to. The zero length value indicates this VLAN belongs to the default VRF. |
| ctspVlanSgtMappingEntry | 1.3.6.1.4.1.9.9.713.1.7.1.1 | not-accessible | Each row contains the SGT mapping configuration of a particular VLAN. A row instance can be created or removed by setting ctspVlanSgtRowStatus. | |
| ctspVlanSgtMappingGroup | 1.3.6.1.4.1.9.9.713.2.2.19 | A collection of objects which provides sgt mapping information for the IP traffic in the specified Vlan. | ||
| VLA ctspVlanSgtMappingIndex | 1.3.6.1.4.1.9.9.713.1.7.1.1.1 | VlanIndex | not-accessible | This object specifies the VLAN-ID which is used as index. |
| ctspVlanSgtMappings | 1.3.6.1.4.1.9.9.713.1.7 | |||
| ctspVlanSgtMappingTable | 1.3.6.1.4.1.9.9.713.1.7.1 | not-accessible | This table contains the Vlan-SGT mapping information in the device. | |
| CTS ctspVlanSgtMapValue | 1.3.6.1.4.1.9.9.713.1.7.1.1.2 | CtsSecurityGroupTag | read-create | This object specifies the SGT value assigned to the vlan. |
| ROW ctspVlanSgtRowStatus | 1.3.6.1.4.1.9.9.713.1.7.1.1.4 | RowStatus | read-create | This object is used to manage the creation and deletion of rows in this table. |
| STO ctspVlanSgtStorageType | 1.3.6.1.4.1.9.9.713.1.7.1.1.3 | StorageType | read-create | The storage type for this conceptual row. |
| T/F ctspVlanSviActive | 1.3.6.1.4.1.9.9.713.1.1.1.4.1.3 | TruthValue | read-only | This object indicates if there is an active SVI associated with this VLAN. 'true' indicates that there is an active SVI associated with this VLAN. and SGACL is enforced for both Layer 2 and Layer 3 switched packets within that VLAN. 'false' indicates that there is no active SVI associated with this VLAN, and SGACL is only enforced for Layer 2 switched packets within that VLAN. |
RFC description
Cisco Trusted Security policy management MIB for zone configuration, topology, and access control lists.
Start monitoring Cisco Catalyst/Nexus switches and routers (TrustSec SGACL) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.