Standard view Table view

CISCO-TRUSTSEC-POLICY-MIB

        This MIB module defines managed objects that facilitate the
management of various policies within the Cisco Trusted Security
(TrustSec) infrastructure. 
        
The information available through this MIB includes:
        
o Device and interface level configuration for enabling
  SGACL (Security Group Access Control List) enforcement
  on Layer2/3 traffic. 
        
o Administrative and operational SGACL mapping to Security
  Group Tag (SGT). 
        
o Various statistics counters for traffic subject to SGACL
  enforcement. 
        
o TrustSec policies with respect to peer device. 
        
o Interface level configuration for enabling the propagation
  of SGT along with the Layer 3 traffic in portions of network
  which does not have the capability to support TrustSec 
  feature. 
          
o TrustSec policies with respect to SGT propagation with
  Layer 3 traffic. 
        
The following terms are used throughout this MIB:
        
VRF:   Virtual Routing and Forwarding.
        
SGACL: Security Group Access Control List.
        
ACE: Access Control Entries.
        
SXP: SGT Propagation Protocol.
        
SVI: Switch Virtual Interface.
        
IPM: Identity Port Mapping.
        
SGT (Security Group Tag) is a unique 16 bits value assigned
to every security group and used by network devices to
enforce SGACL.
        
Peer is another device connected to the local device on the
other side of a TrustSec link.
        
Default Policy:  Policy applied to traffic when there is 
no explicit policy between the SGT associated with the 
originator of the traffic and the SGT associated with 
the destination of the traffic.

Source file: CISCO-TRUSTSEC-POLICY-MIB
Last revised: 19 Dec 2012, 00:00 UTC
Identity: ciscoTrustSecPolicyMIB
Base OID: 1.3.6.1.4.1.9.9.713

Imported Objects

CISCO-SMI	ciscoMgmt
CISCO-TC	Cisco2KVlanList CiscoVrfName
CISCO-TRUSTSEC-TC-MIB	CtsAclList CtsAclListOrEmpty CtsAclName CtsAclNameOrEmpty CtsGenerationId CtsSecurityGroupTag CtsSgaclMonitorMode
IF-MIB	ifIndex
INET-ADDRESS-MIB	InetAddress InetAddressPrefixLength InetAddressType
Q-BRIDGE-MIB	VlanIndex
SNMP-FRAMEWORK-MIB	SnmpAdminString
SNMPv2-CONF	MODULE-COMPLIANCE (no object page) NOTIFICATION-GROUP (no object page) OBJECT-GROUP (no object page)
SNMPv2-SMI	Counter64 MODULE-IDENTITY (no object page) NOTIFICATION-TYPE (no object page) OBJECT-TYPE (no object page) Unsigned32
SNMPv2-TC	DateAndTime RowStatus StorageType TruthValue

Net-SNMP examples using the cisco MIB directory Show commands

These commands use the standard Observium installation path and load the selected MIB variant before the RFC and Net-SNMP directories.

Translate the module identity

/usr/bin/snmptranslate -Pud -Ir -On -m 'CISCO-TRUSTSEC-POLICY-MIB' -M '/opt/observium/mibs/cisco:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'CISCO-TRUSTSEC-POLICY-MIB::ciscoTrustSecPolicyMIB'

Walk the MIB subtree

/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'CISCO-TRUSTSEC-POLICY-MIB' -M '/opt/observium/mibs/cisco:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'CISCO-TRUSTSEC-POLICY-MIB::ciscoTrustSecPolicyMIB'

How SNMP, Net-SNMP, MIB paths, and variants work

Objects (169)

ciscoTrustSecPolicyMIB		`.1.3.6.1.4.1.9.9.713`
ciscoTrustSecPolicyMIBNotifs		`.1.3.6.1.4.1.9.9.713.0`
ciscoTrustSecPolicyMIBObjects		`.1.3.6.1.4.1.9.9.713.1`
ctspSgacl		`.1.3.6.1.4.1.9.9.713.1.1`
ctspSgaclGlobals		`.1.3.6.1.4.1.9.9.713.1.1.1`
ctspSgaclEnforcementEnable r/w	Enumeration	`.1.3.6.1.4.1.9.9.713.1.1.1.1`
ctspSgaclIpv4DropNetflowMonitor r/w	SNMP-FRAMEWORK-MIBSnmpAdminString	`.1.3.6.1.4.1.9.9.713.1.1.1.2`
ctspSgaclIpv6DropNetflowMonitor r/w	SNMP-FRAMEWORK-MIBSnmpAdminString	`.1.3.6.1.4.1.9.9.713.1.1.1.3`
ctspVlanConfigTable		`.1.3.6.1.4.1.9.9.713.1.1.1.4`
ctspVlanConfigEntry	ctspVlanConfigIndex	`.1.3.6.1.4.1.9.9.713.1.1.1.4.1`
ctspVlanConfigIndex	Q-BRIDGE-MIBVlanIndex	`.1.3.6.1.4.1.9.9.713.1.1.1.4.1.1`
ctspVlanConfigSgaclEnforcement r/w	SNMPv2-TCTruthValue	`.1.3.6.1.4.1.9.9.713.1.1.1.4.1.2`
ctspVlanSviActive	SNMPv2-TCTruthValue	`.1.3.6.1.4.1.9.9.713.1.1.1.4.1.3`
ctspVlanConfigVrfName r/w	CISCO-TCCiscoVrfName	`.1.3.6.1.4.1.9.9.713.1.1.1.4.1.4`
ctspVlanConfigStorageType r/w	SNMPv2-TCStorageType	`.1.3.6.1.4.1.9.9.713.1.1.1.4.1.5`
ctspVlanConfigRowStatus r/w	SNMPv2-TCRowStatus	`.1.3.6.1.4.1.9.9.713.1.1.1.4.1.6`
ctspSgaclMappings		`.1.3.6.1.4.1.9.9.713.1.1.2`
ctspConfigSgaclMappingTable		`.1.3.6.1.4.1.9.9.713.1.1.2.1`
ctspConfigSgaclMappingEntry	ctspConfigSgaclMappingIpTrafficTypectspConfigSgaclMappingDestSgtctspConfigSgaclMappingSourceSgt	`.1.3.6.1.4.1.9.9.713.1.1.2.1.1`
ctspConfigSgaclMappingIpTrafficType	Enumeration	`.1.3.6.1.4.1.9.9.713.1.1.2.1.1.1`
ctspConfigSgaclMappingDestSgt	CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag	`.1.3.6.1.4.1.9.9.713.1.1.2.1.1.2`
ctspConfigSgaclMappingSourceSgt	CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag	`.1.3.6.1.4.1.9.9.713.1.1.2.1.1.3`
ctspConfigSgaclMappingSgaclName r/w	CISCO-TRUSTSEC-TC-MIBCtsAclList	`.1.3.6.1.4.1.9.9.713.1.1.2.1.1.4`
ctspConfigSgaclMappingStorageType r/w	SNMPv2-TCStorageType	`.1.3.6.1.4.1.9.9.713.1.1.2.1.1.5`
ctspConfigSgaclMappingRowStatus r/w	SNMPv2-TCRowStatus	`.1.3.6.1.4.1.9.9.713.1.1.2.1.1.6`
ctspConfigSgaclMonitor r/w	CISCO-TRUSTSEC-TC-MIBCtsSgaclMonitorMode	`.1.3.6.1.4.1.9.9.713.1.1.2.1.1.7`
ctspSgaclMonitorEnable r/w	CISCO-TRUSTSEC-TC-MIBCtsSgaclMonitorMode	`.1.3.6.1.4.1.9.9.713.1.1.2.10`
ctspDefConfigIpv4Sgacls r/w	CISCO-TRUSTSEC-TC-MIBCtsAclListOrEmpty	`.1.3.6.1.4.1.9.9.713.1.1.2.2`
ctspDefConfigIpv6Sgacls r/w	CISCO-TRUSTSEC-TC-MIBCtsAclListOrEmpty	`.1.3.6.1.4.1.9.9.713.1.1.2.3`
ctspDownloadedSgaclMappingTable		`.1.3.6.1.4.1.9.9.713.1.1.2.4`
ctspDownloadedSgaclMappingEntry	ctspDownloadedSgaclDestSgtctspDownloadedSgaclSourceSgtctspDownloadedSgaclIndex	`.1.3.6.1.4.1.9.9.713.1.1.2.4.1`
ctspDownloadedSgaclDestSgt	CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag	`.1.3.6.1.4.1.9.9.713.1.1.2.4.1.1`
ctspDownloadedSgaclSourceSgt	CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag	`.1.3.6.1.4.1.9.9.713.1.1.2.4.1.2`
ctspDownloadedSgaclIndex	Unsigned32	`.1.3.6.1.4.1.9.9.713.1.1.2.4.1.3`
ctspDownloadedSgaclName	CISCO-TRUSTSEC-TC-MIBCtsAclName	`.1.3.6.1.4.1.9.9.713.1.1.2.4.1.4`
ctspDownloadedSgaclGenId	CISCO-TRUSTSEC-TC-MIBCtsGenerationId	`.1.3.6.1.4.1.9.9.713.1.1.2.4.1.5`
ctspDownloadedIpTrafficType	Bits	`.1.3.6.1.4.1.9.9.713.1.1.2.4.1.6`
ctspDownloadedSgaclMonitor	CISCO-TRUSTSEC-TC-MIBCtsSgaclMonitorMode	`.1.3.6.1.4.1.9.9.713.1.1.2.4.1.7`
ctspDefDownloadedSgaclMappingTable		`.1.3.6.1.4.1.9.9.713.1.1.2.5`
ctspDefDownloadedSgaclMappingEntry	ctspDefDownloadedSgaclIndex	`.1.3.6.1.4.1.9.9.713.1.1.2.5.1`
ctspDefDownloadedSgaclIndex	Unsigned32	`.1.3.6.1.4.1.9.9.713.1.1.2.5.1.1`
ctspDefDownloadedSgaclName	CISCO-TRUSTSEC-TC-MIBCtsAclName	`.1.3.6.1.4.1.9.9.713.1.1.2.5.1.2`
ctspDefDownloadedSgaclGenId	CISCO-TRUSTSEC-TC-MIBCtsGenerationId	`.1.3.6.1.4.1.9.9.713.1.1.2.5.1.3`
ctspDefDownloadedIpTrafficType	Bits	`.1.3.6.1.4.1.9.9.713.1.1.2.5.1.4`
ctspDefDownloadedSgaclMonitor	CISCO-TRUSTSEC-TC-MIBCtsSgaclMonitorMode	`.1.3.6.1.4.1.9.9.713.1.1.2.5.1.5`
ctspOperSgaclMappingTable		`.1.3.6.1.4.1.9.9.713.1.1.2.6`
ctspOperSgaclMappingEntry	ctspOperIpTrafficTypectspOperSgaclDestSgtctspOperSgaclSourceSgtctspOperSgaclIndex	`.1.3.6.1.4.1.9.9.713.1.1.2.6.1`
ctspOperIpTrafficType	Enumeration	`.1.3.6.1.4.1.9.9.713.1.1.2.6.1.1`
ctspOperSgaclDestSgt	CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag	`.1.3.6.1.4.1.9.9.713.1.1.2.6.1.2`
ctspOperSgaclSourceSgt	CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag	`.1.3.6.1.4.1.9.9.713.1.1.2.6.1.3`
ctspOperSgaclIndex	Unsigned32	`.1.3.6.1.4.1.9.9.713.1.1.2.6.1.4`
ctspOperationalSgaclName	CISCO-TRUSTSEC-TC-MIBCtsAclName	`.1.3.6.1.4.1.9.9.713.1.1.2.6.1.5`
ctspOperationalSgaclGenId	CISCO-TRUSTSEC-TC-MIBCtsGenerationId	`.1.3.6.1.4.1.9.9.713.1.1.2.6.1.6`
ctspOperSgaclMappingSource	Enumeration	`.1.3.6.1.4.1.9.9.713.1.1.2.6.1.7`
ctspOperSgaclConfigSource	Enumeration	`.1.3.6.1.4.1.9.9.713.1.1.2.6.1.8`
ctspOperSgaclMonitor	CISCO-TRUSTSEC-TC-MIBCtsSgaclMonitorMode	`.1.3.6.1.4.1.9.9.713.1.1.2.6.1.9`
ctspDefOperSgaclMappingTable		`.1.3.6.1.4.1.9.9.713.1.1.2.7`
ctspDefOperSgaclMappingEntry	ctspDefOperIpTrafficTypectspDefOperSgaclIndex	`.1.3.6.1.4.1.9.9.713.1.1.2.7.1`
ctspDefOperIpTrafficType	Enumeration	`.1.3.6.1.4.1.9.9.713.1.1.2.7.1.1`
ctspDefOperSgaclIndex	Unsigned32	`.1.3.6.1.4.1.9.9.713.1.1.2.7.1.2`
ctspDefOperationalSgaclName	CISCO-TRUSTSEC-TC-MIBCtsAclName	`.1.3.6.1.4.1.9.9.713.1.1.2.7.1.3`
ctspDefOperationalSgaclGenId	CISCO-TRUSTSEC-TC-MIBCtsGenerationId	`.1.3.6.1.4.1.9.9.713.1.1.2.7.1.4`
ctspDefOperSgaclMappingSource	Enumeration	`.1.3.6.1.4.1.9.9.713.1.1.2.7.1.5`
ctspDefOperSgaclConfigSource	Enumeration	`.1.3.6.1.4.1.9.9.713.1.1.2.7.1.6`
ctspDefOperSgaclMonitor	CISCO-TRUSTSEC-TC-MIBCtsSgaclMonitorMode	`.1.3.6.1.4.1.9.9.713.1.1.2.7.1.7`
ctspDefConfigIpv4SgaclsMonitor r/w	CISCO-TRUSTSEC-TC-MIBCtsSgaclMonitorMode	`.1.3.6.1.4.1.9.9.713.1.1.2.8`
ctspDefConfigIpv6SgaclsMonitor r/w	CISCO-TRUSTSEC-TC-MIBCtsSgaclMonitorMode	`.1.3.6.1.4.1.9.9.713.1.1.2.9`
ctspSgaclStatistics		`.1.3.6.1.4.1.9.9.713.1.1.3`
ctspSgtStatsTable		`.1.3.6.1.4.1.9.9.713.1.1.3.1`
ctspSgtStatsEntry	ctspStatsIpTrafficTypectspStatsDestSgtctspStatsSourceSgt	`.1.3.6.1.4.1.9.9.713.1.1.3.1.1`
ctspStatsIpTrafficType	Enumeration	`.1.3.6.1.4.1.9.9.713.1.1.3.1.1.1`
ctspStatsDestSgt	CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag	`.1.3.6.1.4.1.9.9.713.1.1.3.1.1.2`
ctspStatsSourceSgt	CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag	`.1.3.6.1.4.1.9.9.713.1.1.3.1.1.3`
ctspStatsIpSwDropPkts	SNMPv2-SMICounter64	`.1.3.6.1.4.1.9.9.713.1.1.3.1.1.4`
ctspStatsIpHwDropPkts	SNMPv2-SMICounter64	`.1.3.6.1.4.1.9.9.713.1.1.3.1.1.5`
ctspStatsIpSwPermitPkts	SNMPv2-SMICounter64	`.1.3.6.1.4.1.9.9.713.1.1.3.1.1.6`
ctspStatsIpHwPermitPkts	SNMPv2-SMICounter64	`.1.3.6.1.4.1.9.9.713.1.1.3.1.1.7`
ctspStatsIpSwMonitorPkts	SNMPv2-SMICounter64	`.1.3.6.1.4.1.9.9.713.1.1.3.1.1.8`
ctspStatsIpHwMonitorPkts	SNMPv2-SMICounter64	`.1.3.6.1.4.1.9.9.713.1.1.3.1.1.9`
ctspDefStatsTable		`.1.3.6.1.4.1.9.9.713.1.1.3.2`
ctspDefStatsEntry	ctspDefIpTrafficType	`.1.3.6.1.4.1.9.9.713.1.1.3.2.1`
ctspDefIpTrafficType	Enumeration	`.1.3.6.1.4.1.9.9.713.1.1.3.2.1.1`
ctspDefIpSwDropPkts	SNMPv2-SMICounter64	`.1.3.6.1.4.1.9.9.713.1.1.3.2.1.2`
ctspDefIpHwDropPkts	SNMPv2-SMICounter64	`.1.3.6.1.4.1.9.9.713.1.1.3.2.1.3`
ctspDefIpSwPermitPkts	SNMPv2-SMICounter64	`.1.3.6.1.4.1.9.9.713.1.1.3.2.1.4`
ctspDefIpHwPermitPkts	SNMPv2-SMICounter64	`.1.3.6.1.4.1.9.9.713.1.1.3.2.1.5`
ctspDefIpSwMonitorPkts	SNMPv2-SMICounter64	`.1.3.6.1.4.1.9.9.713.1.1.3.2.1.6`
ctspDefIpHwMonitorPkts	SNMPv2-SMICounter64	`.1.3.6.1.4.1.9.9.713.1.1.3.2.1.7`
ctspNotifsOnlyInfo		`.1.3.6.1.4.1.9.9.713.1.10`
ctspOldPeerSgt	CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag	`.1.3.6.1.4.1.9.9.713.1.10.1`
ctspAuthorizationSgaclFailReason	Enumeration	`.1.3.6.1.4.1.9.9.713.1.10.2`
ctspAuthorizationSgaclFailInfo	SNMP-FRAMEWORK-MIBSnmpAdminString	`.1.3.6.1.4.1.9.9.713.1.10.3`
ctspPeerPolicy		`.1.3.6.1.4.1.9.9.713.1.2`
ctspAllPeerPolicyAction r/w	Enumeration	`.1.3.6.1.4.1.9.9.713.1.2.1`
ctspPeerPolicyTable		`.1.3.6.1.4.1.9.9.713.1.2.2`
ctspPeerPolicyEntry	ctspPeerName	`.1.3.6.1.4.1.9.9.713.1.2.2.1`
ctspPeerName	OctetString	`.1.3.6.1.4.1.9.9.713.1.2.2.1.1`
ctspPeerSgt	CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag	`.1.3.6.1.4.1.9.9.713.1.2.2.1.2`
ctspPeerSgtGenId	CISCO-TRUSTSEC-TC-MIBCtsGenerationId	`.1.3.6.1.4.1.9.9.713.1.2.2.1.3`
ctspPeerTrustState	Enumeration	`.1.3.6.1.4.1.9.9.713.1.2.2.1.4`
ctspPeerPolicyLifeTime	secondsSNMPv2-SMIUnsigned32	`.1.3.6.1.4.1.9.9.713.1.2.2.1.5`
ctspPeerPolicyLastUpdate	SNMPv2-TCDateAndTime	`.1.3.6.1.4.1.9.9.713.1.2.2.1.6`
ctspPeerPolicyAction r/w	Enumeration	`.1.3.6.1.4.1.9.9.713.1.2.2.1.7`
ctspLayer3Transport		`.1.3.6.1.4.1.9.9.713.1.3`
ctspLayer3PolicyTable		`.1.3.6.1.4.1.9.9.713.1.3.1`
ctspLayer3PolicyEntry	ctspLayer3PolicyIpTrafficTypectspLayer3PolicyType	`.1.3.6.1.4.1.9.9.713.1.3.1.1`
ctspLayer3PolicyIpTrafficType	Enumeration	`.1.3.6.1.4.1.9.9.713.1.3.1.1.1`
ctspLayer3PolicyType	Enumeration	`.1.3.6.1.4.1.9.9.713.1.3.1.1.2`
ctspLayer3PolicyLocalConfig r/w	CISCO-TRUSTSEC-TC-MIBCtsAclNameOrEmpty	`.1.3.6.1.4.1.9.9.713.1.3.1.1.3`
ctspLayer3PolicyDownloaded	CISCO-TRUSTSEC-TC-MIBCtsAclNameOrEmpty	`.1.3.6.1.4.1.9.9.713.1.3.1.1.4`
ctspLayer3PolicyOperational	CISCO-TRUSTSEC-TC-MIBCtsAclNameOrEmpty	`.1.3.6.1.4.1.9.9.713.1.3.1.1.5`
ctspIfL3PolicyConfigTable		`.1.3.6.1.4.1.9.9.713.1.3.2`
ctspIfL3PolicyConfigEntry	IF-MIBifIndex	`.1.3.6.1.4.1.9.9.713.1.3.2.1`
ctspIfL3Ipv4PolicyEnabled r/w	SNMPv2-TCTruthValue	`.1.3.6.1.4.1.9.9.713.1.3.2.1.1`
ctspIfL3Ipv6PolicyEnabled r/w	SNMPv2-TCTruthValue	`.1.3.6.1.4.1.9.9.713.1.3.2.1.2`
ctspIpSgtMappings		`.1.3.6.1.4.1.9.9.713.1.4`
ctspIpSgtMappingTable		`.1.3.6.1.4.1.9.9.713.1.4.1`
ctspIpSgtMappingEntry	ctspIpSgtVrfNamectspIpSgtAddressTypectspIpSgtIpAddressctspIpSgtAddressLength	`.1.3.6.1.4.1.9.9.713.1.4.1.1`
ctspIpSgtVrfName	CISCO-TCCiscoVrfName	`.1.3.6.1.4.1.9.9.713.1.4.1.1.1`
ctspIpSgtAddressType	INET-ADDRESS-MIBInetAddressType	`.1.3.6.1.4.1.9.9.713.1.4.1.1.2`
ctspIpSgtIpAddress	INET-ADDRESS-MIBInetAddress	`.1.3.6.1.4.1.9.9.713.1.4.1.1.3`
ctspIpSgtAddressLength	INET-ADDRESS-MIBInetAddressPrefixLength	`.1.3.6.1.4.1.9.9.713.1.4.1.1.4`
ctspIpSgtValue r/w	CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag	`.1.3.6.1.4.1.9.9.713.1.4.1.1.5`
ctspIpSgtSource r/w	Enumeration	`.1.3.6.1.4.1.9.9.713.1.4.1.1.6`
ctspIpSgtStorageType r/w	SNMPv2-TCStorageType	`.1.3.6.1.4.1.9.9.713.1.4.1.1.7`
ctspIpSgtRowStatus r/w	SNMPv2-TCRowStatus	`.1.3.6.1.4.1.9.9.713.1.4.1.1.8`
ctspSgtPolicy		`.1.3.6.1.4.1.9.9.713.1.5`
ctspAllSgtPolicyAction r/w	Enumeration	`.1.3.6.1.4.1.9.9.713.1.5.1`
ctspDownloadedSgtPolicyTable		`.1.3.6.1.4.1.9.9.713.1.5.2`
ctspDownloadedSgtPolicyEntry	ctspDownloadedSgtPolicySgt	`.1.3.6.1.4.1.9.9.713.1.5.2.1`
ctspDownloadedSgtPolicySgt	CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag	`.1.3.6.1.4.1.9.9.713.1.5.2.1.1`
ctspDownloadedSgtPolicySgtGenId	CISCO-TRUSTSEC-TC-MIBCtsGenerationId	`.1.3.6.1.4.1.9.9.713.1.5.2.1.2`
ctspDownloadedSgtPolicyLifeTime	secondsSNMPv2-SMIUnsigned32	`.1.3.6.1.4.1.9.9.713.1.5.2.1.3`
ctspDownloadedSgtPolicyLastUpdate	SNMPv2-TCDateAndTime	`.1.3.6.1.4.1.9.9.713.1.5.2.1.4`
ctspDownloadedSgtPolicyAction r/w	Enumeration	`.1.3.6.1.4.1.9.9.713.1.5.2.1.5`
ctspDownloadedDefSgtPolicyTable		`.1.3.6.1.4.1.9.9.713.1.5.3`
ctspDownloadedDefSgtPolicyEntry	ctspDownloadedDefSgtPolicyType	`.1.3.6.1.4.1.9.9.713.1.5.3.1`
ctspDownloadedDefSgtPolicyType	Enumeration	`.1.3.6.1.4.1.9.9.713.1.5.3.1.1`
ctspDownloadedDefSgtPolicySgtGenId	CISCO-TRUSTSEC-TC-MIBCtsGenerationId	`.1.3.6.1.4.1.9.9.713.1.5.3.1.2`
ctspDownloadedDefSgtPolicyLifeTime	secondsSNMPv2-SMIUnsigned32	`.1.3.6.1.4.1.9.9.713.1.5.3.1.3`
ctspDownloadedDefSgtPolicyLastUpdate	SNMPv2-TCDateAndTime	`.1.3.6.1.4.1.9.9.713.1.5.3.1.4`
ctspDownloadedDefSgtPolicyAction r/w	Enumeration	`.1.3.6.1.4.1.9.9.713.1.5.3.1.5`
ctspIfSgtMappings		`.1.3.6.1.4.1.9.9.713.1.6`
ctspIfSgtMappingTable		`.1.3.6.1.4.1.9.9.713.1.6.1`
ctspIfSgtMappingEntry	IF-MIBifIndex	`.1.3.6.1.4.1.9.9.713.1.6.1.1`
ctspIfSgtValue r/w	CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag	`.1.3.6.1.4.1.9.9.713.1.6.1.1.1`
ctspIfSgName r/w	SNMP-FRAMEWORK-MIBSnmpAdminString	`.1.3.6.1.4.1.9.9.713.1.6.1.1.2`
ctspIfSgtStorageType r/w	SNMPv2-TCStorageType	`.1.3.6.1.4.1.9.9.713.1.6.1.1.3`
ctspIfSgtRowStatus r/w	SNMPv2-TCRowStatus	`.1.3.6.1.4.1.9.9.713.1.6.1.1.4`
ctspIfSgtMappingInfoTable		`.1.3.6.1.4.1.9.9.713.1.6.2`
ctspIfSgtMappingInfoEntry	IF-MIBifIndex	`.1.3.6.1.4.1.9.9.713.1.6.2.1`
ctspL3IPMStatus	Enumeration	`.1.3.6.1.4.1.9.9.713.1.6.2.1.1`
ctspVlanSgtMappings		`.1.3.6.1.4.1.9.9.713.1.7`
ctspVlanSgtMappingTable		`.1.3.6.1.4.1.9.9.713.1.7.1`
ctspVlanSgtMappingEntry	ctspVlanSgtMappingIndex	`.1.3.6.1.4.1.9.9.713.1.7.1.1`
ctspVlanSgtMappingIndex	Q-BRIDGE-MIBVlanIndex	`.1.3.6.1.4.1.9.9.713.1.7.1.1.1`
ctspVlanSgtMapValue r/w	CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag	`.1.3.6.1.4.1.9.9.713.1.7.1.1.2`
ctspVlanSgtStorageType r/w	SNMPv2-TCStorageType	`.1.3.6.1.4.1.9.9.713.1.7.1.1.3`
ctspVlanSgtRowStatus r/w	SNMPv2-TCRowStatus	`.1.3.6.1.4.1.9.9.713.1.7.1.1.4`
ctspSgtCaching		`.1.3.6.1.4.1.9.9.713.1.8`
ctspSgtCachingMode r/w	Enumeration	`.1.3.6.1.4.1.9.9.713.1.8.1`
ctspSgtCachingVlansFirst2K r/w	CISCO-TCCisco2KVlanList	`.1.3.6.1.4.1.9.9.713.1.8.2`
ctspSgtCachingVlansSecond2K r/w	CISCO-TCCisco2KVlanList	`.1.3.6.1.4.1.9.9.713.1.8.3`
ctspNotifsControl		`.1.3.6.1.4.1.9.9.713.1.9`
ctspPeerPolicyUpdatedNotifEnable r/w	SNMPv2-TCTruthValue	`.1.3.6.1.4.1.9.9.713.1.9.1`
ctspAuthorizationSgaclFailNotifEnable r/w	SNMPv2-TCTruthValue	`.1.3.6.1.4.1.9.9.713.1.9.2`
ciscoTrustSecPolicyMIBConformance		`.1.3.6.1.4.1.9.9.713.2`
ciscoTrustSecPolicyMIBCompliances		`.1.3.6.1.4.1.9.9.713.2.1`
ciscoTrustSecPolicyMIBGroups		`.1.3.6.1.4.1.9.9.713.2.2`

Dependencies (21) 10 direct · 11 transitive Show tree and compile order Hide dependency details

Each imported module is resolved in the importing module's source directory first, then through the normal default-variant rules.

Dependency tree

CISCO-TRUSTSEC-POLICY-MIBciscoselected
- CISCO-SMIcisco1 symbol
  - SNMPv2-SMIrfcdefault fallback3 symbols
- CISCO-TCcisco2 symbols
  - CISCO-SMIciscoshared1 symbol
  - SNMPv2-SMIrfcdefault fallbackshared5 symbols
  - SNMPv2-TCrfcdefault fallback1 symbol
    - SNMPv2-SMIrfcshared1 symbol
- CISCO-TRUSTSEC-TC-MIBcisco7 symbols
  - CISCO-SMIciscoshared1 symbol
  - SNMPv2-SMIrfcdefault fallbackshared2 symbols
  - SNMPv2-TCrfcdefault fallbackshared1 symbol
- IF-MIBrfcdefault fallback1 symbol
  - IANAifType-MIBrfc1 symbol
    - SNMPv2-SMIrfcshared2 symbols
    - SNMPv2-TCrfcshared1 symbol
  - SNMPv2-CONFrfc3 symbols
    - SNMPv2-SMIrfcshared3 symbols
  - SNMPv2-MIBrfc1 symbol
    - SNMPv2-CONFrfcshared3 symbols
    - SNMPv2-SMIrfcshared7 symbols
    - SNMPv2-TCrfcshared3 symbols
  - SNMPv2-SMIrfcshared9 symbols
  - SNMPv2-TCrfcshared8 symbols
- INET-ADDRESS-MIBrfcdefault fallback3 symbols
  - SNMPv2-SMIrfcshared3 symbols
  - SNMPv2-TCrfcshared1 symbol
- Q-BRIDGE-MIBrfcdefault fallback1 symbol
  - BRIDGE-MIBrfc3 symbols
    - IF-MIBrfcshared1 symbol
    - SNMPv2-CONFrfcshared3 symbols
    - SNMPv2-SMIrfcshared7 symbols
    - SNMPv2-TCrfcshared2 symbols
  - P-BRIDGE-MIBrfc1 symbol
    - BRIDGE-MIBrfcshared5 symbols
    - SNMPv2-CONFrfcshared2 symbols
    - SNMPv2-SMIrfcshared5 symbols
    - SNMPv2-TCrfcshared4 symbols
  - RMON2-MIBrfc1 symbol
    - IF-MIBrfcshared1 symbol
    - RMON-MIBrfc12 symbols
      - SNMPv2-CONFrfcshared3 symbols
      - SNMPv2-SMIrfcshared8 symbols
      - SNMPv2-TCrfcshared2 symbols
    - SNMPv2-CONFrfcshared2 symbols
    - SNMPv2-SMIrfcshared8 symbols
    - SNMPv2-TCrfcshared4 symbols
    - TOKEN-RING-RMON-MIBrfc5 symbols
      - RFC-1212rfc1 symbol
      - RFC1155-SMIrfc2 symbols
      - RFC1271-MIBrfc5 symbols
        RFC-1212rfcshared1 symbol
        RFC1155-SMIrfcshared1 symbol
        RFC1213-MIBrfc1 symbol
        IANAifType-MIBrfcshared1 symbol
        RFC-1212rfcshared1 symbol
        RFC1155-SMIrfcshared6 symbols
  - SNMP-FRAMEWORK-MIBrfc1 symbol
    - SNMPv2-CONFrfcshared2 symbols
    - SNMPv2-SMIrfcshared4 symbols
    - SNMPv2-TCrfcshared1 symbol
  - SNMPv2-CONFrfcshared2 symbols
  - SNMPv2-SMIrfcshared7 symbols
  - SNMPv2-TCrfcshared4 symbols
- SNMP-FRAMEWORK-MIBrfcdefault fallbackshared1 symbol
- SNMPv2-CONFrfcdefault fallbackshared3 symbols
- SNMPv2-SMIrfcdefault fallbackshared5 symbols
- SNMPv2-TCrfcdefault fallbackshared4 symbols

Dependency-first compile order

Conformance Groups (25)

ctspGlobalSgaclEnforcementGroup	ctspSgaclEnforcementEnable A collection of object which provides the SGACL enforcement information for all TrustSec capable Layer 3 interfaces (excluding SVIs) at the device level.	`.1.3.6.1.4.1.9.9.713.2.2.1`
ctspSgaclIpv4DropNetflowMonitorGroup	ctspSgaclIpv4DropNetflowMonitor A collection of object which provides netflow monitor information for IPv4 traffic drop packet due to SGACL enforcement in the device.	`.1.3.6.1.4.1.9.9.713.2.2.2`
ctspSgaclIpv6DropNetflowMonitorGroup	ctspSgaclIpv6DropNetflowMonitor A collection of object which provides netflow monitor information for IPv6 traffic drop packet due to SGACL enforcement in the device.	`.1.3.6.1.4.1.9.9.713.2.2.3`
ctspVlanConfigGroup	ctspVlanConfigSgaclEnforcement ctspVlanSviActive ctspVlanConfigVrfName ctspVlanConfigStorageType ctspVlanConfigRowStatus A collection of object which provides the SGACL enforcement and VRF information for each VLAN.	`.1.3.6.1.4.1.9.9.713.2.2.4`
ctspConfigSgaclMappingGroup	ctspConfigSgaclMappingSgaclName ctspConfigSgaclMappingStorageType ctspConfigSgaclMappingRowStatus ctspDefConfigIpv4Sgacls ctspDefConfigIpv6Sgacls A collection of objects which provides the administratively configured SGACL mapping information in the device.	`.1.3.6.1.4.1.9.9.713.2.2.5`
ctspDownloadedSgaclMappingGroup	ctspDownloadedSgaclName ctspDownloadedSgaclGenId ctspDownloadedIpTrafficType ctspDefDownloadedSgaclName ctspDefDownloadedSgaclGenId ctspDefDownloadedIpTrafficType A collection of objects which provides the downloaded SGACL mapping information in the device.	`.1.3.6.1.4.1.9.9.713.2.2.6`
ctspOperSgaclMappingGroup	ctspOperationalSgaclName ctspOperationalSgaclGenId ctspOperSgaclMappingSource ctspOperSgaclConfigSource ctspDefOperationalSgaclName ctspDefOperationalSgaclGenId ctspDefOperSgaclMappingSource ctspDefOperSgaclConfigSource A collection of objects which provides the operational SGACL mapping information in the device.	`.1.3.6.1.4.1.9.9.713.2.2.7`
ctspIpSwStatisticsGroup	ctspStatsIpSwDropPkts ctspStatsIpSwPermitPkts A collection of objects which provides software statistics counters for unicast IP traffic subjected to SGACL enforcement.	`.1.3.6.1.4.1.9.9.713.2.2.8`
ctspIpHwStatisticsGroup	ctspStatsIpHwDropPkts ctspStatsIpHwPermitPkts A collection of objects which provides hardware statistics counters for unicast IP traffic subjected to SGACL enforcement.	`.1.3.6.1.4.1.9.9.713.2.2.9`
ctspDefSwStatisticsGroup	ctspDefIpSwDropPkts ctspDefIpSwPermitPkts A collection of objects which provides software statistics counters for unicast IP traffic subjected to unicast default policy enforcement.	`.1.3.6.1.4.1.9.9.713.2.2.10`
ctspDefHwStatisticsGroup	ctspDefIpHwDropPkts ctspDefIpHwPermitPkts A collection of objects which provides hardware statistics counters for unicast IP traffic subjected to unicast default policy enforcement.	`.1.3.6.1.4.1.9.9.713.2.2.11`
ctspPeerPolicyActionGroup	ctspAllPeerPolicyAction A collection of object which provides refreshing of all peer policies in the device.	`.1.3.6.1.4.1.9.9.713.2.2.12`
ctspPeerPolicyGroup	ctspPeerSgt ctspPeerSgtGenId ctspPeerTrustState ctspPeerPolicyLifeTime ctspPeerPolicyLastUpdate ctspPeerPolicyAction A collection of object which provides peer policy information in the device.	`.1.3.6.1.4.1.9.9.713.2.2.13`
ctspLayer3TransportGroup	ctspLayer3PolicyLocalConfig ctspLayer3PolicyDownloaded ctspLayer3PolicyOperational A collection of objects which provides managed information regarding the SGT propagation along with Layer 3 traffic in the device.	`.1.3.6.1.4.1.9.9.713.2.2.14`
ctspIfL3PolicyConfigGroup	ctspIfL3Ipv4PolicyEnabled ctspIfL3Ipv6PolicyEnabled A collection of objects which provides managed information for Layer3 Tranport policy enforcement on capable interface in the device.	`.1.3.6.1.4.1.9.9.713.2.2.15`
ctspIpSgtMappingGroup	ctspIpSgtValue ctspIpSgtSource ctspIpSgtStorageType ctspIpSgtRowStatus A collection of objects which provides managed information regarding IP-to-Sgt mapping in the device.	`.1.3.6.1.4.1.9.9.713.2.2.16`
ctspSgtPolicyGroup	ctspAllSgtPolicyAction ctspDownloadedSgtPolicySgtGenId ctspDownloadedSgtPolicyLifeTime ctspDownloadedSgtPolicyLastUpdate ctspDownloadedSgtPolicyAction ctspDownloadedDefSgtPolicySgtGenId ctspDownloadedDefSgtPolicyLifeTime ctspDownloadedDefSgtPolicyLastUpdate ctspDownloadedDefSgtPolicyAction A collection of object which provides SGT policy information in the device.	`.1.3.6.1.4.1.9.9.713.2.2.17`
ctspIfSgtMappingGroup	ctspIfSgtValue ctspIfSgName ctspL3IPMStatus ctspIfSgtStorageType ctspIfSgtRowStatus A collection of objects which provides managed information regarding Interface-to-Sgt mapping in the device.	`.1.3.6.1.4.1.9.9.713.2.2.18`
ctspVlanSgtMappingGroup	ctspVlanSgtMapValue ctspVlanSgtStorageType ctspVlanSgtRowStatus A collection of objects which provides sgt mapping information for the IP traffic in the specified Vlan.	`.1.3.6.1.4.1.9.9.713.2.2.19`
ctspSgtCachingGroup	ctspSgtCachingMode ctspSgtCachingVlansFirst2K ctspSgtCachingVlansSecond2K A collection of objects which provides sgt Caching information.	`.1.3.6.1.4.1.9.9.713.2.2.20`
ctspSgaclMonitorGroup	ctspSgaclMonitorEnable ctspConfigSgaclMonitor ctspDefConfigIpv4SgaclsMonitor ctspDefConfigIpv6SgaclsMonitor ctspDownloadedSgaclMonitor ctspDefDownloadedSgaclMonitor ctspOperSgaclMonitor ctspDefOperSgaclMonitor A collection of objects which provides SGACL monitor information.	`.1.3.6.1.4.1.9.9.713.2.2.21`
ctspSgaclMonitorStatisticGroup	ctspStatsIpSwMonitorPkts ctspStatsIpHwMonitorPkts ctspDefIpSwMonitorPkts ctspDefIpHwMonitorPkts A collection of objects which provides monitor statistics counters for unicast IP traffic subjected to SGACL enforcement.	`.1.3.6.1.4.1.9.9.713.2.2.22`
ctspNotifCtrlGroup	ctspPeerPolicyUpdatedNotifEnable ctspAuthorizationSgaclFailNotifEnable A collection of objects providing notification control for TrustSec policy notifications.	`.1.3.6.1.4.1.9.9.713.2.2.23`
ctspNotifGroup	ctspPeerPolicyUpdatedNotif ctspAuthorizationSgaclFailNotif A collection of notifications for TrustSec policy.	`.1.3.6.1.4.1.9.9.713.2.2.24`
ctspNotifInfoGroup	ctspOldPeerSgt ctspAuthorizationSgaclFailReason ctspAuthorizationSgaclFailInfo A collection of objects providing the variable binding for TrustSec policy notifications.	`.1.3.6.1.4.1.9.9.713.2.2.25`

Compliance Statements (2)

OID .1.3.6.1.4.1.9.9.713.2.1.1

The compliance statement for the CISCO-TRUSTSEC-POLICY-MIB

Required groups

mandatory	ctspGlobalSgaclEnforcementGroup
mandatory	ctspOperSgaclMappingGroup
mandatory	ctspDownloadedSgaclMappingGroup
mandatory	ctspIpSwStatisticsGroup
mandatory	ctspDefSwStatisticsGroup
optional	ctspVlanConfigGroup	This group is mandatory only for platforms which support SGACL enforcement for VLAN.
optional	ctspConfigSgaclMappingGroup	This group is mandatory only for platforms which support statically configured SGACLs in the device.
optional	ctspIpHwStatisticsGroup	This group is mandatory only for platforms which support hardware statistics counters for unicast IP traffic subjected to SGACL enforcement.
optional	ctspDefHwStatisticsGroup	This group is mandatory only for platforms which support hardware statistics counters for unicast IP traffic subjected to default unicast policy enforcement.
optional	ctspSgaclIpv4DropNetflowMonitorGroup	This group is mandatory only for platforms which support netflow monitor for IPv4 traffic drop packet due to SGACL enforcement information in the device.
optional	ctspSgaclIpv6DropNetflowMonitorGroup	This group is mandatory only for platforms which support netflow monitor for IPv6 traffic drop packet due to SGACL enforcement information in the device.
optional	ctspPeerPolicyGroup	This group is mandatory only for platforms which support peer policies information in the device.
optional	ctspPeerPolicyActionGroup	This group is mandatory only for platforms which support refresh of all peer policies information in the device.
optional	ctspLayer3TransportGroup	This group is mandatory only for platforms which support SGT propagation along Layer 3 traffic to network that is not capable of TrustSec feature.
optional	ctspIpSgtMappingGroup	This group is mandatory only for platforms which support IP-to-SGT mapping information.
optional	ctspIfL3PolicyConfigGroup	This group is mandatory only for platforms which support Layer3 Transport policy enforcement on capable interface.
optional	ctspSgtPolicyGroup	This group is mandatory only for platforms which support SGT policies information in the device.

Object refinements

Object	Access	Syntax	Description
ctspVlanConfigSgaclEnforcement	readonly		Support for read-create access is not required.
ctspVlanConfigVrfName	readonly		Support for read-create access is not required.
ctspVlanConfigStorageType	readonly		Support for read-create access is not required.
ctspVlanConfigRowStatus	readonly	SNMPv2-TCRowStatus active(1)	Support for 'createAndWait' is not required.
ctspConfigSgaclMappingStorageType	readonly		Support for read-create access is not required.
ctspConfigSgaclMappingRowStatus	readonly	SNMPv2-TCRowStatus active(1)	Support for 'createAndWait' is not required.
ctspSgaclEnforcementEnable	readonly		Write access is not required.
ctspSgaclIpv4DropNetflowMonitor	readonly		Write access is not required.
ctspSgaclIpv6DropNetflowMonitor	readonly		Write access is not required.
ctspConfigSgaclMappingSgaclName	readonly		Write access is not required.
ctspDefConfigIpv4Sgacls	readonly		Write access is not required.
ctspDefConfigIpv6Sgacls	readonly		Write access is not required.
ctspLayer3PolicyLocalConfig	readonly		Write access is not required.
ctspIpSgtStorageType	readonly		Support for read-create access is not required.
ctspIpSgtRowStatus	readonly	SNMPv2-TCRowStatus active(1)	Support for 'createAndWait' is not required.
ctspIpSgtValue	readonly		Write access is not required.
ctspIpSgtSource	readonly		Write access is not required.
ctspIfL3Ipv4PolicyEnabled	readonly		Write access is not required.
ctspIfL3Ipv6PolicyEnabled	readonly		Write access is not required.
ctspAllPeerPolicyAction	readonly		Write access is not required.
ctspPeerPolicyAction	readonly		Write access is not required.
ctspAllSgtPolicyAction	readonly		Write access is not required.
ctspDownloadedSgtPolicyAction	readonly		Write access is not required.
ctspDownloadedDefSgtPolicyAction	readonly		Write access is not required.

OID .1.3.6.1.4.1.9.9.713.2.1.2