Standard view Table view

CISCO-TRUSTSEC-MIB

        This MIB module is for the configuration of a network
device on the Cisco Trusted Security (TrustSec) system.
        
TrustSec secures a network fabric by authenticating and
authorizing each device connecting to the network, allowing for
the encryption, authentication and replay protection of data
traffic on a hop by hop basis.
        
Glossary :
        
TrustSec - Cisco Trusted Security
        
EAP-FAST - Extensible Authentication Protocol-Flexible
           Authentication via Secure Tunneling (RFC 4851)
        
PAC - Protected Access Credential
      A credential dynamically downloaded from the
      Access Control Server.
        
ACS - Access Control Server
        
SGT - Security Group Tag
      A tag identifying its source, assigned to a packet on
      ingress to a TrustSec cloud, and used to determine
      security and other policy to be applied to it along
      its path through the cloud.
Source file
CISCO-TRUSTSEC-MIB
Last revised
Identity
ciscoTrustSecMIB
Base OID
1.3.6.1.4.1.9.9.730
Imported Objects
CISCO-SMI ciscoMgmt
CISCO-TRUSTSEC-TC-MIB CtsAcsAuthorityIdentity CtsCredentialRecordType CtsGenerationId CtsPasswordEncryptionType CtsSecurityGroupTag
SNMP-FRAMEWORK-MIB SnmpAdminString
SNMPv2-CONF MODULE-COMPLIANCE NOTIFICATION-GROUP OBJECT-GROUP
SNMPv2-SMI Counter32 MODULE-IDENTITY NOTIFICATION-TYPE OBJECT-TYPE Unsigned32
SNMPv2-TC DateAndTime RowStatus TruthValue
Net-SNMP examples using the cisco MIB directory Show commands

These commands use the standard Observium installation path and load the selected MIB variant before the RFC and Net-SNMP directories.

Translate the module identity
/usr/bin/snmptranslate -Pud -Ir -On -m 'CISCO-TRUSTSEC-MIB' -M '/opt/observium/mibs/cisco:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'CISCO-TRUSTSEC-MIB::ciscoTrustSecMIB'
Walk the MIB subtree
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'CISCO-TRUSTSEC-MIB' -M '/opt/observium/mibs/cisco:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'CISCO-TRUSTSEC-MIB::ciscoTrustSecMIB'
How SNMP, Net-SNMP, MIB paths, and variants work
Objects (76)
ciscoTrustSecMIB
.1.3.6.1.4.1.9.9.730
ciscoTrustSecMIBNotifs
.1.3.6.1.4.1.9.9.730.0
ciscoTrustSecMIBObjects
.1.3.6.1.4.1.9.9.730.1
ctsCacheObjects
.1.3.6.1.4.1.9.9.730.1.1
ctsCacheEnabled r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.730.1.1.1
ctsCacheNvStorage r/w
SNMP-FRAMEWORK-MIBSnmpAdminString
 .1.3.6.1.4.1.9.9.730.1.1.2
ctsCacheClear r/w
Enumeration
 .1.3.6.1.4.1.9.9.730.1.1.3
ctsSgtObjects
.1.3.6.1.4.1.9.9.730.1.2
ctsSecurityGroupTagId r/w
CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag
 .1.3.6.1.4.1.9.9.730.1.2.1
ctsSgtAssignmentMethod r/w
Enumeration
 .1.3.6.1.4.1.9.9.730.1.2.2
ctsCredentialObjects
.1.3.6.1.4.1.9.9.730.1.3
ctsDeviceId r/w
SNMP-FRAMEWORK-MIBSnmpAdminString
 .1.3.6.1.4.1.9.9.730.1.3.1
ctsKeystoreRxBadFragmentLengths
SNMPv2-SMICounter32
 .1.3.6.1.4.1.9.9.730.1.3.10
ctsKeystoreCorruptions
SNMPv2-SMICounter32
 .1.3.6.1.4.1.9.9.730.1.3.11
ctsKeystorePasswordRecordTable
.1.3.6.1.4.1.9.9.730.1.3.13
ctsKeystorePasswordRecordEntry
ctsKeystorePasswordRecordName
 .1.3.6.1.4.1.9.9.730.1.3.13.1
ctsKeystorePasswordRecordName
OctetString
 .1.3.6.1.4.1.9.9.730.1.3.13.1.1
ctsKeystorePasswordRecordType
CISCO-TRUSTSEC-TC-MIBCtsCredentialRecordType
 .1.3.6.1.4.1.9.9.730.1.3.13.1.2
ctsKeystorePacRecordTable
.1.3.6.1.4.1.9.9.730.1.3.14
ctsKeystorePacRecordEntry
ctsKeystorePacRecordName
 .1.3.6.1.4.1.9.9.730.1.3.14.1
ctsKeystorePacRecordName
OctetString
 .1.3.6.1.4.1.9.9.730.1.3.14.1.1
ctsKeystorePacRecordType
CISCO-TRUSTSEC-TC-MIBCtsCredentialRecordType
 .1.3.6.1.4.1.9.9.730.1.3.14.1.2
ctsPacInfoTable
.1.3.6.1.4.1.9.9.730.1.3.15
ctsPacInfoEntry
ctsPacAcsAuthId
 .1.3.6.1.4.1.9.9.730.1.3.15.1
ctsPacAcsAuthId
OctetString
 .1.3.6.1.4.1.9.9.730.1.3.15.1.1
ctsPacAcsDescription
SNMP-FRAMEWORK-MIBSnmpAdminString
 .1.3.6.1.4.1.9.9.730.1.3.15.1.2
ctsPacType
Enumeration
 .1.3.6.1.4.1.9.9.730.1.3.15.1.3
ctsPacExpirationTime
SNMPv2-TCDateAndTime
 .1.3.6.1.4.1.9.9.730.1.3.15.1.4
ctsPacTimeToRefresh
secondsSNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.730.1.3.15.1.5
ctsPacStatus r/w
SNMPv2-TCRowStatus
 .1.3.6.1.4.1.9.9.730.1.3.15.1.6
ctsCredentialsClearAll r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.730.1.3.16
ctsDevicePasswordType r/w
CISCO-TRUSTSEC-TC-MIBCtsPasswordEncryptionType
 .1.3.6.1.4.1.9.9.730.1.3.2
ctsDevicePassword r/w
SNMP-FRAMEWORK-MIBSnmpAdminString
 .1.3.6.1.4.1.9.9.730.1.3.3
ctsKeystoreType
Enumeration
 .1.3.6.1.4.1.9.9.730.1.3.4
ctsKeystoreFwVersion
SNMP-FRAMEWORK-MIBSnmpAdminString
 .1.3.6.1.4.1.9.9.730.1.3.5
ctsKeystoreFwAlerts
SNMPv2-SMICounter32
 .1.3.6.1.4.1.9.9.730.1.3.6
ctsKeystoreFwResets
SNMPv2-SMICounter32
 .1.3.6.1.4.1.9.9.730.1.3.7
ctsKeystoreRxTimeouts
SNMPv2-SMICounter32
 .1.3.6.1.4.1.9.9.730.1.3.8
ctsKeystoreRxBadChecksums
SNMPv2-SMICounter32
 .1.3.6.1.4.1.9.9.730.1.3.9
ctsEnvironmentDataObjects
.1.3.6.1.4.1.9.9.730.1.4
ctsEnvDataLastDownloadStatus
Enumeration
 .1.3.6.1.4.1.9.9.730.1.4.1
ctsEnvSecurityGroupNameTable
.1.3.6.1.4.1.9.9.730.1.4.16
ctsEnvSecurityGroupNameEntry
ctsEnvSecurityGroupNameSgt
 .1.3.6.1.4.1.9.9.730.1.4.16.1
ctsEnvSecurityGroupNameSgt
Unsigned32
 .1.3.6.1.4.1.9.9.730.1.4.16.1.1
ctsEnvSecurityGroupNameSgtGenId
CISCO-TRUSTSEC-TC-MIBCtsGenerationId
 .1.3.6.1.4.1.9.9.730.1.4.16.1.2
ctsEnvSecurityGroupNameSgtFlag
Bits
 .1.3.6.1.4.1.9.9.730.1.4.16.1.3
ctsEnvSecurityGroupName
SNMP-FRAMEWORK-MIBSnmpAdminString
 .1.3.6.1.4.1.9.9.730.1.4.16.1.4
ctsEnvSecurityGroupTagId
CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag
 .1.3.6.1.4.1.9.9.730.1.4.2
ctsEnvSecurityGroupTagGenId
CISCO-TRUSTSEC-TC-MIBCtsGenerationId
 .1.3.6.1.4.1.9.9.730.1.4.3
ctsEnvDataLastUpdate
SNMPv2-TCDateAndTime
 .1.3.6.1.4.1.9.9.730.1.4.4
ctsEnvDataRefreshInterval
secondsSNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.730.1.4.5
ctsEnvDataTimeLeft
secondsSNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.730.1.4.6
ctsEnvDataTimeToRefresh
secondsSNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.730.1.4.7
ctsEnvDataSource
Enumeration
 .1.3.6.1.4.1.9.9.730.1.4.8
ctsEnvDataAction r/w
Enumeration
 .1.3.6.1.4.1.9.9.730.1.4.9
ctsNotifsControlObjects
.1.3.6.1.4.1.9.9.730.1.5
ctsSwKeystoreFileErrNotifEnable r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.730.1.5.1
ctsSwKeystoreSyncFailNotifEnable r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.730.1.5.2
ctsAuthzCacheFileErrNotifEnable r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.730.1.5.3
ctsCacheFileAccessErrNotifEnable r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.730.1.5.4
ctsSrcEntropyFailNotifEnable r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.730.1.5.5
ctsSapRandomNumberFailNotifEnable r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.730.1.5.6
ctsNotifsInfoObjects
.1.3.6.1.4.1.9.9.730.1.6
ctsFileErrNotifReason
Enumeration
 .1.3.6.1.4.1.9.9.730.1.6.1
ctsSwKeystoreSyncFailNotifReason
Enumeration
 .1.3.6.1.4.1.9.9.730.1.6.2
ctsNotifMessageString
SNMP-FRAMEWORK-MIBSnmpAdminString
 .1.3.6.1.4.1.9.9.730.1.6.3
ctsCriticalAuthObjects
.1.3.6.1.4.1.9.9.730.1.7
ctsCriticalAuthEnabled r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.730.1.7.1
ctsCriticalAuthFallback r/w
Enumeration
 .1.3.6.1.4.1.9.9.730.1.7.2
ctsCriticalAuthPeerSgt r/w
CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag
 .1.3.6.1.4.1.9.9.730.1.7.3
ctsCriticalAuthPeerSgtTrust r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.730.1.7.4
ctsCriticalAuthDefaultPmk r/w
OctetString
 .1.3.6.1.4.1.9.9.730.1.7.5
ctsCriticalAuthViewDefaultPmk
OctetString
 .1.3.6.1.4.1.9.9.730.1.7.6
ciscoTrustSecMIBConform
.1.3.6.1.4.1.9.9.730.2
ciscoTrustSecMIBCompliances
.1.3.6.1.4.1.9.9.730.2.1
ciscoTrustSecMIBGroups
.1.3.6.1.4.1.9.9.730.2.2
Dependencies (6) 6 direct Show tree and compile order Hide dependency details

Each imported module is resolved in the importing module's source directory first, then through the normal default-variant rules.

Dependency tree
Dependency-first compile order
  1. SNMPv2-SMIrfc
  2. CISCO-SMIcisco
  3. SNMPv2-TCrfc
  4. CISCO-TRUSTSEC-TC-MIBcisco
  5. SNMPv2-CONFrfc
  6. SNMP-FRAMEWORK-MIBrfc
  7. CISCO-TRUSTSEC-MIBciscoselected
Conformance Groups (17)
ciscoTrustSecCacheGroup
ctsCacheEnabled ctsCacheNvStorage ctsCacheClear
A collection of objects that provides the cache configuration
for TrustSec in the system.
 .1.3.6.1.4.1.9.9.730.2.2.1
ciscoTrustSecSgtGroup
ctsSecurityGroupTagId
A collection of objects to manage SGT for TrustSec.
 .1.3.6.1.4.1.9.9.730.2.2.2
ciscoTrustSecCredentialsGroup
ctsDeviceId ctsDevicePasswordType ctsDevicePassword ctsKeystoreType ctsKeystorePasswordRecordType ctsKeystorePacRecordType ctsPacAcsDescription ctsPacType ctsPacExpirationTime ctsPacTimeToRefresh ctsPacStatus ctsCredentialsClearAll
A collection of objects to manage credentials parameters for
TrustSec.
 .1.3.6.1.4.1.9.9.730.2.2.3
ciscoTrustSecHwKeystoreInfoGroup
ctsKeystoreFwVersion ctsKeystoreFwAlerts ctsKeystoreFwResets ctsKeystoreRxTimeouts ctsKeystoreRxBadChecksums ctsKeystoreRxBadFragmentLengths ctsKeystoreCorruptions
A collection of objects to manage hardware keystore for
TrustSec.
 .1.3.6.1.4.1.9.9.730.2.2.4
ciscoTrustSecEnvDataGroup
ctsEnvDataLastDownloadStatus ctsEnvSecurityGroupTagId ctsEnvSecurityGroupTagGenId ctsEnvDataLastUpdate ctsEnvDataRefreshInterval ctsEnvDataTimeLeft ctsEnvDataTimeToRefresh ctsEnvDataSource ctsEnvDataAction
A collection of objects to manage Environment Data for
TrustSec.
 .1.3.6.1.4.1.9.9.730.2.2.5
ciscoTrustSecSgtAssignmentGroup
ctsSgtAssignmentMethod
A collection of objects to manage assignment of TrustSec SGT.
 .1.3.6.1.4.1.9.9.730.2.2.6
ciscoTrustSecEnvSecGroupNameGroup
ctsEnvSecurityGroupNameSgtGenId ctsEnvSecurityGroupNameSgtFlag ctsEnvSecurityGroupName
A collection of object(s) to manage Security Group Name
information for TrustSec.
 .1.3.6.1.4.1.9.9.730.2.2.7
ciscoTrustSecSwKeystoreNotifsInfoGroup
ctsSwKeystoreSyncFailNotifReason
A collection of object(s) to provide information
regarding software keystore notifications for TrustSec.
 .1.3.6.1.4.1.9.9.730.2.2.8
ciscoTrustSecSwKeystoreNotifsControlGroup
ctsSwKeystoreFileErrNotifEnable ctsSwKeystoreSyncFailNotifEnable
A collection of object(s) to control software keystore
notifications for TrustSec.
 .1.3.6.1.4.1.9.9.730.2.2.9
ciscoTrustSecSwKeystoreNotifsGroup
ctsSwKeystoreFileErrNotif ctsSwKeystoreSyncFailNotif
A collection of software keystore related notifications for
TrustSec.
 .1.3.6.1.4.1.9.9.730.2.2.10
ciscoTrustSecFileErrNotifsInfoGroup
ctsFileErrNotifReason
A collection of object(s) to provide information
regarding file error related notifications for TrustSec.
 .1.3.6.1.4.1.9.9.730.2.2.11
ciscoTrustSecNotifsMessageStringInfoGroup
ctsNotifMessageString
A collection of object(s) to provide information
regarding TrustSec notification.
 .1.3.6.1.4.1.9.9.730.2.2.12
ciscoTrustSecCacheFileNotifsControlGroup
ctsAuthzCacheFileErrNotifEnable ctsCacheFileAccessErrNotifEnable
A collection of object(s) to control cache file
related notifications for TrustSec.
 .1.3.6.1.4.1.9.9.730.2.2.13
ciscoTrustSecCacheFileNotifsGroup
ctsAuthzCacheFileErrNotif ctsCacheFileAccessErrNotif
A collection of TrustSec cache file related notifications.
 .1.3.6.1.4.1.9.9.730.2.2.14
ciscoTrustSecCtrDrbgNotifsControlGroup
ctsSrcEntropyFailNotifEnable ctsSapRandomNumberFailNotifEnable
A collection of object(s) to control CTR-DRBG related
notifications for TrustSec.
 .1.3.6.1.4.1.9.9.730.2.2.15
ciscoTrustSecCtrDrbgNotifsGroup
ctsSrcEntropyFailNotif ctsSapRandomNumberFailNotif
A collection of CTR-DRBG related notifications
for TrustSec.
 .1.3.6.1.4.1.9.9.730.2.2.16
ciscoTrustSecCrtclAuthGroup
ctsCriticalAuthEnabled ctsCriticalAuthFallback ctsCriticalAuthPeerSgt ctsCriticalAuthPeerSgtTrust ctsCriticalAuthDefaultPmk ctsCriticalAuthViewDefaultPmk
A collection of CTS Critical Auth Config
objects
 .1.3.6.1.4.1.9.9.730.2.2.17
Compliance Statements (4)

OID .1.3.6.1.4.1.9.9.730.2.1.1
The compliance statement for the CISCO-TRUSTSEC-MIB.
Required groups
mandatory ciscoTrustSecCacheGroup
mandatory ciscoTrustSecSgtGroup
mandatory ciscoTrustSecCredentialsGroup
mandatory ciscoTrustSecHwKeystoreInfoGroup
mandatory ciscoTrustSecEnvDataGroup
optional ciscoTrustSecSgtAssignmentGroup Implementation of this group is mandatory for the
devices that support mechanism to assign SGT for
line cards without TrustSec tagging capability.
Object refinements
ObjectAccessSyntaxDescription
ctsCacheEnabled readonly
Write access is not required.
ctsCacheNvStorage readonly
Write access is not required.
ctsCacheClear readonly
Write access is not required.
ctsSecurityGroupTagId readonly
Write access is not required.
ctsSgtAssignmentMethod readonly
Write access is not required.
ctsDeviceId readonly
Write access is not required.
ctsDevicePasswordType readonly
Write access is not required.
ctsDevicePassword readonly
Write access is not required.
ctsPacStatus readonly
SNMPv2-TCRowStatus
active(1)
Write access is not required.
ctsCredentialsClearAll readonly
Write access is not required.
ctsEnvDataAction readonly
Write access is not required.

OID .1.3.6.1.4.1.9.9.730.2.1.2
The compliance statement for the CISCO-TRUSTSEC-MIB.
Required groups
mandatory ciscoTrustSecCacheGroup
mandatory ciscoTrustSecSgtGroup
mandatory ciscoTrustSecCredentialsGroup
mandatory ciscoTrustSecHwKeystoreInfoGroup
mandatory ciscoTrustSecEnvDataGroup
optional ciscoTrustSecSgtAssignmentGroup Implementation of this group is mandatory for the
devices that support mechanism to assign SGT for
line cards without TrustSec tagging capability.
optional ciscoTrustSecEnvSecGroupNameGroup Implementation of this group is mandatory for the
devices that support Security Group Name functionality.
Object refinements
ObjectAccessSyntaxDescription
ctsCacheEnabled readonly
Write access is not required.
ctsCacheNvStorage readonly
Write access is not required.
ctsCacheClear readonly
Write access is not required.
ctsSecurityGroupTagId readonly
Write access is not required.
ctsSgtAssignmentMethod readonly
Write access is not required.
ctsDeviceId readonly
Write access is not required.
ctsDevicePasswordType readonly
Write access is not required.
ctsDevicePassword readonly
Write access is not required.
ctsPacStatus readonly
SNMPv2-TCRowStatus
active(1)
Write access is not required.
ctsCredentialsClearAll readonly
Write access is not required.
ctsEnvDataAction readonly
Write access is not required.

OID .1.3.6.1.4.1.9.9.730.2.1.3
The compliance statement for the CISCO-TRUSTSEC-MIB.
Required groups
mandatory ciscoTrustSecCacheGroup
mandatory ciscoTrustSecSgtGroup
mandatory ciscoTrustSecCredentialsGroup
mandatory ciscoTrustSecHwKeystoreInfoGroup
mandatory ciscoTrustSecEnvDataGroup
optional ciscoTrustSecSgtAssignmentGroup Implementation of this group is mandatory for the
devices that support mechanism to assign SGT for
line cards without TrustSec tagging capability.
optional ciscoTrustSecEnvSecGroupNameGroup Implementation of this group is mandatory for the
devices that support Security Group Name functionality.
optional ciscoTrustSecSwKeystoreNotifsInfoGroup Implementation of this group is mandatory for the
devices that support software keystore notifications.
optional ciscoTrustSecSwKeystoreNotifsControlGroup Implementation of this group is mandatory for the
devices that support software keystore notifications.
optional ciscoTrustSecSwKeystoreNotifsGroup Implementation of this group is mandatory for the
devices that support software keystore notifications.
optional ciscoTrustSecFileErrNotifsInfoGroup Implementation of this group is mandatory for the
devices that support TrustSec keystore or cache file
error related notifications.
optional ciscoTrustSecNotifsMessageStringInfoGroup Implementation of this group is mandatory for the
devices that provide additional information for
TrustSec notifications.
optional ciscoTrustSecCacheFileNotifsControlGroup Implementation of this group is mandatory for the
devices that support TrustSec cache file error
notifications.
optional ciscoTrustSecCacheFileNotifsGroup Implementation of this group is mandatory for the
devices that support TrustSec cache file error
notifications.
optional ciscoTrustSecCtrDrbgNotifsControlGroup Implementation of this group is mandatory for the
devices that support CTR-DRBG error notifications.
optional ciscoTrustSecCtrDrbgNotifsGroup Implementation of this group is mandatory for the
devices that support CTR-DRBG error notifications.
Object refinements
ObjectAccessSyntaxDescription
ctsCacheEnabled readonly
Write access is not required.
ctsCacheNvStorage readonly
Write access is not required.
ctsCacheClear readonly
Write access is not required.
ctsSecurityGroupTagId readonly
Write access is not required.
ctsSgtAssignmentMethod readonly
Write access is not required.
ctsDeviceId readonly
Write access is not required.
ctsDevicePasswordType readonly
Write access is not required.
ctsDevicePassword readonly
Write access is not required.
ctsPacStatus readonly
SNMPv2-TCRowStatus
active(1)
Write access is not required.
ctsCredentialsClearAll readonly
Write access is not required.
ctsEnvDataAction readonly
Write access is not required.
ctsSwKeystoreFileErrNotifEnable readonly
Write access is not required.
ctsSwKeystoreSyncFailNotifEnable readonly
Write access is not required.
ctsAuthzCacheFileErrNotifEnable readonly
Write access is not required.
ctsCacheFileAccessErrNotifEnable readonly
Write access is not required.
ctsSrcEntropyFailNotifEnable readonly
Write access is not required.
ctsSapRandomNumberFailNotifEnable readonly
Write access is not required.

OID .1.3.6.1.4.1.9.9.730.2.1.4
The compliance statement for the CISCO-TRUSTSEC-MIB.
Required groups
mandatory ciscoTrustSecCacheGroup
mandatory ciscoTrustSecSgtGroup
mandatory ciscoTrustSecCredentialsGroup
mandatory ciscoTrustSecHwKeystoreInfoGroup
mandatory ciscoTrustSecEnvDataGroup
optional ciscoTrustSecSgtAssignmentGroup Implementation of this group is mandatory for the
devices that support mechanism to assign SGT for
line cards without TrustSec tagging capability.
optional ciscoTrustSecEnvSecGroupNameGroup Implementation of this group is mandatory for the
devices that support Security Group Name functionality.
optional ciscoTrustSecSwKeystoreNotifsInfoGroup Implementation of this group is mandatory for the
devices that support software keystore notifications.
optional ciscoTrustSecSwKeystoreNotifsControlGroup Implementation of this group is mandatory for the
devices that support software keystore notifications.
optional ciscoTrustSecSwKeystoreNotifsGroup Implementation of this group is mandatory for the
devices that support software keystore notifications.
optional ciscoTrustSecFileErrNotifsInfoGroup Implementation of this group is mandatory for the
devices that support TrustSec keystore or cache file
error related notifications.
optional ciscoTrustSecNotifsMessageStringInfoGroup Implementation of this group is mandatory for the
devices that provide additional information for
TrustSec notifications.
optional ciscoTrustSecCacheFileNotifsControlGroup Implementation of this group is mandatory for the
devices that support TrustSec cache file error
notifications.
optional ciscoTrustSecCacheFileNotifsGroup Implementation of this group is mandatory for the
devices that support TrustSec cache file error
notifications.
optional ciscoTrustSecCtrDrbgNotifsControlGroup Implementation of this group is mandatory for the
devices that support CTR-DRBG error notifications.
optional ciscoTrustSecCtrDrbgNotifsGroup Implementation of this group is mandatory for the
devices that support CTR-DRBG error notifications.
optional ciscoTrustSecCrtclAuthGroup Implementation of this group is mandatory for the
devices that support CTS Critical-Auth
Object refinements
ObjectAccessSyntaxDescription
ctsCacheEnabled readonly
Write access is not required.
ctsCacheNvStorage readonly
Write access is not required.
ctsCacheClear readonly
Write access is not required.
ctsSecurityGroupTagId readonly
Write access is not required.
ctsSgtAssignmentMethod readonly
Write access is not required.
ctsDeviceId readonly
Write access is not required.
ctsDevicePasswordType readonly
Write access is not required.
ctsDevicePassword readonly
Write access is not required.
ctsPacStatus readonly
SNMPv2-TCRowStatus
active(1)
Write access is not required.
ctsCredentialsClearAll readonly
Write access is not required.
ctsEnvDataAction readonly
Write access is not required.
ctsSwKeystoreFileErrNotifEnable readonly
Write access is not required.
ctsSwKeystoreSyncFailNotifEnable readonly
Write access is not required.
ctsAuthzCacheFileErrNotifEnable readonly
Write access is not required.
ctsCacheFileAccessErrNotifEnable readonly
Write access is not required.
ctsSrcEntropyFailNotifEnable readonly
Write access is not required.
ctsSapRandomNumberFailNotifEnable readonly
Write access is not required.
ctsCriticalAuthEnabled readonly
Write access is not required.
ctsCriticalAuthFallback readonly
Write access is not required.
ctsCriticalAuthPeerSgt readonly
Write access is not required.
ctsCriticalAuthPeerSgtTrust readonly
Write access is not required.
ctsCriticalAuthDefaultPmk readonly
Write access is not required.
Notifications / Traps (6)
NameOIDDescription
ctsSwKeystoreFileErrNotif
ctsFileErrNotifReason
.1.3.6.1.4.1.9.9.730.0.1
A ctsSwKeystoreFileErrNotif is generated when system
encounters an error while performing operation on the
software keystore file.
ctsSwKeystoreSyncFailNotif
ctsSwKeystoreSyncFailNotifReason
.1.3.6.1.4.1.9.9.730.0.2
A ctsSwKeystoreSyncFailNotifReason is generated when system
fails to sync software keystore information from the active
supervisor to the standby supervisor.
ctsAuthzCacheFileErrNotif
ctsFileErrNotifReason ctsNotifMessageString
.1.3.6.1.4.1.9.9.730.0.3
A ctsAuthzCacheFileErrNotif is generated when the system
encounters error downloading TrustSec authorization
related environment data to a cache file.
ctsCacheFileAccessErrNotif
ctsFileErrNotifReason ctsNotifMessageString
.1.3.6.1.4.1.9.9.730.0.4
A ctsCacheFileAccessErrNotif is generated when the
system fails to perform open/read/write operation
for a TrustSec cache file.
ctsSrcEntropyFailNotif
.1.3.6.1.4.1.9.9.730.0.5
A ctsSrcEntropyFailNotif is generated when
the periodic health tests for the CTR-DRBG (Counter-
Deterministic Random Bit Generator) implementation
fails due to issues with the source entropy.
ctsSapRandomNumberFailNotif
ctsNotifMessageString
.1.3.6.1.4.1.9.9.730.0.6
A ctsSapRandomNumberFailNotif is generated when the
the system fails to obtain a random number from
CTR-DRBG block for SAP (Security Association Protocol)
key-counter.