CISCO-TRUSTSEC-POLICY-MIB Table View

This table lists the SGACL enforcement for Layer 2 and 
Layer 3 switched packet in a VLAN as well as VRF information
for VLANs in the device.

ctspVlanConfigEntry row .1.3.6.1.4.1.9.9.713.1.1.1.4.1

Each row contains the SGACL enforcement information
for Layer 2 and Layer 3 switched packets in a VLAN
identified by its VlanIndex value. Entry in this
table is populated for VLANs which contains SGACL
enforcement or …

Indexes

ctspVlanConfigIndex

Column	Syntax	OID
ctspVlanConfigIndex This object indicates the VLAN-ID of this VLAN.	Q-BRIDGE-MIBVlanIndex	.1.3.6.1.4.1.9.9.713.1.1.1.4.1.1
ctspVlanConfigSgaclEnforcement This object specifies the configured SGACL enforcement status for this VLAN i.e., 'true' = enabled and 'false' = disabled.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.9.9.713.1.1.1.4.1.2
ctspVlanSviActive This object indicates if there is an active SVI associated with this VLAN. 'true' indicates that there is an active SVI associated with this VLAN. and SGACL is enforced for both Layer 2 and Layer 3 switc…	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.9.9.713.1.1.1.4.1.3
ctspVlanConfigVrfName This object specifies an existing VRF where this VLAN belongs to. The zero length value indicates this VLAN belongs to the default VRF.	CISCO-TCCiscoVrfNamer/w Type Constraints: range: 0..32	.1.3.6.1.4.1.9.9.713.1.1.1.4.1.4
ctspVlanConfigStorageType The objects specifies the storage type for this conceptual row.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.4.1.9.9.713.1.1.1.4.1.5
ctspVlanConfigRowStatus The status of this conceptual row entry. This object is used to manage creation and deletion of rows in this table. When this object value is 'active', other writable objects in the same row cannot be modified.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.9.9.713.1.1.1.4.1.6

This table contains the SGACLs information which is
applied to unicast IP traffic which carries a source SGT
and travels to a destination SGT.

ctspConfigSgaclMappingEntry row .1.3.6.1.4.1.9.9.713.1.1.2.1.1

Each row contains the SGACL mapping to source and destination
SGT for a certain traffic type as well as status of this
instance. A row instance can be created or removed by setting
the appropriate value of its RowStatus…

Indexes

ctspConfigSgaclMappingIpTrafficType ctspConfigSgaclMappingDestSgt ctspConfigSgaclMappingSourceSgt

Column	Syntax	OID
ctspConfigSgaclMappingIpTrafficType This object indicates the type of the unicast IP traffic carrying the source SGT and travelling to destination SGT and subjected to SGACL enforcement.	Enumeration Enumerated Values: 1 ipv4 2 ipv6	.1.3.6.1.4.1.9.9.713.1.1.2.1.1.1
ctspConfigSgaclMappingDestSgt This object indicates the destination SGT value. Value of zero indicates that the destination SGT is unknown.	CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag Type Constraints: range: 0..65535	.1.3.6.1.4.1.9.9.713.1.1.2.1.1.2
ctspConfigSgaclMappingSourceSgt This object indicates the source SGT value. Value of zero indicates that the source SGT is unknown.	CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag Type Constraints: range: 0..65535	.1.3.6.1.4.1.9.9.713.1.1.2.1.1.3
ctspConfigSgaclMappingSgaclName This object specifies the list of existing SGACLs which is administratively configured to apply to unicast IP traffic carrying the source SGT to the destination SGT.	CISCO-TRUSTSEC-TC-MIBCtsAclListr/w Type Constraints: range: 1..255	.1.3.6.1.4.1.9.9.713.1.1.2.1.1.4
ctspConfigSgaclMappingStorageType The storage type for this conceptual row.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.4.1.9.9.713.1.1.2.1.1.5
ctspConfigSgaclMappingRowStatus This object is used to manage the creation and deletion of rows in this table. ctspConfigSgaclName may be modified at any time.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.9.9.713.1.1.2.1.1.6
ctspConfigSgaclMonitor This object specifies whether SGACL monitor mode is turned on for the configured SGACL enforced traffic.	CISCO-TRUSTSEC-TC-MIBCtsSgaclMonitorModer/w Type Values: 1 on 2 off	.1.3.6.1.4.1.9.9.713.1.1.2.1.1.7

This table contains the downloaded SGACLs information
applied to unicast IP traffic which carries a source SGT 
and travels to a destination SGT.

ctspDownloadedSgaclMappingEntry row .1.3.6.1.4.1.9.9.713.1.1.2.4.1

Each row contains the downloaded SGACLs mapping.
A row instance is added for each pair of <source SGT,
destination SGT> which contains SGACL that
is dynamically downloaded from ACS server.

Indexes

ctspDownloadedSgaclDestSgt ctspDownloadedSgaclSourceSgt ctspDownloadedSgaclIndex

Column	Syntax	OID
ctspDownloadedSgaclDestSgt This object indicates the destination SGT value. Value of zero indicates that the destination SGT is unknown.	CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag Type Constraints: range: 0..65535	.1.3.6.1.4.1.9.9.713.1.1.2.4.1.1
ctspDownloadedSgaclSourceSgt This object indicates the source SGT value. Value of zero indicates that the source SGT is unknown.	CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag Type Constraints: range: 0..65535	.1.3.6.1.4.1.9.9.713.1.1.2.4.1.2
ctspDownloadedSgaclIndex This object identifies the downloaded SGACL which is applied to unicast IP traffic carrying the source SGT to the destination SGT.	Unsigned32 Constraints: range: 1-65535	.1.3.6.1.4.1.9.9.713.1.1.2.4.1.3
ctspDownloadedSgaclName This object indicates the name of downloaded SGACL which is applied to unicast IP traffic carrying the source SGT to the destination SGT.	CISCO-TRUSTSEC-TC-MIBCtsAclName Type Constraints: range: 1..255	.1.3.6.1.4.1.9.9.713.1.1.2.4.1.4
ctspDownloadedSgaclGenId This object indicates the generation identification of downloaded SGACL which is applied to unicast IP traffic carrying the source SGT to the destination SGT.	CISCO-TRUSTSEC-TC-MIBCtsGenerationId Type Constraints: range: 0..128	.1.3.6.1.4.1.9.9.713.1.1.2.4.1.5
ctspDownloadedIpTrafficType This object indicates the type of the unicast IP traffic carrying the source SGT and travelling to destination SGT and subjected to SGACL enforcement by this downloaded default policy.	Bits Enumerated Values: 0 ipv4 1 ipv6	.1.3.6.1.4.1.9.9.713.1.1.2.4.1.6
ctspDownloadedSgaclMonitor This object indicates whether SGACL monitor mode is turned on for the downloaded SGACL enforced traffic.	CISCO-TRUSTSEC-TC-MIBCtsSgaclMonitorMode Type Values: 1 on 2 off	.1.3.6.1.4.1.9.9.713.1.1.2.4.1.7

This table contains the downloaded SGACLs information
of the default policy applied to unicast IP traffic.

ctspDefDownloadedSgaclMappingEntry row .1.3.6.1.4.1.9.9.713.1.1.2.5.1

Each row contains the downloaded SGACLs mapping.
A row instance contains the SGACL information of the default
policy dynamically downloaded from ACS server for unicast
IP traffic.

Indexes

ctspDefDownloadedSgaclIndex

Column	Syntax	OID
ctspDefDownloadedSgaclIndex This object identifies the SGACL of downloaded default policy applied to unicast IP traffic.	Unsigned32 Constraints: range: 1-65535	.1.3.6.1.4.1.9.9.713.1.1.2.5.1.1
ctspDefDownloadedSgaclName This object indicates the name of the SGACL of downloaded default policy applied to unicast IP traffic.	CISCO-TRUSTSEC-TC-MIBCtsAclName Type Constraints: range: 1..255	.1.3.6.1.4.1.9.9.713.1.1.2.5.1.2
ctspDefDownloadedSgaclGenId This object indicates the generation identification of the SGACL of downloaded default policy applied to unicast IP traffic.	CISCO-TRUSTSEC-TC-MIBCtsGenerationId Type Constraints: range: 0..128	.1.3.6.1.4.1.9.9.713.1.1.2.5.1.3
ctspDefDownloadedIpTrafficType This object indicates the type of the IP traffic subjected to SGACL enforcement by this downloaded default policy.	Bits Enumerated Values: 0 ipv4 1 ipv6	.1.3.6.1.4.1.9.9.713.1.1.2.5.1.4
ctspDefDownloadedSgaclMonitor This object indicates whether SGACL monitor mode is turned on for the default downloaded SGACL enforced traffic.	CISCO-TRUSTSEC-TC-MIBCtsSgaclMonitorMode Type Values: 1 on 2 off	.1.3.6.1.4.1.9.9.713.1.1.2.5.1.5

This table contains the operational SGACLs information
applied to unicast IP traffic which carries a source SGT
and travels to a destination SGT.

ctspOperSgaclMappingEntry row .1.3.6.1.4.1.9.9.713.1.1.2.6.1

Each row contains the operational SGACLs mapping.
A row instance is added for each pair of <source SGT,
destination SGT> which contains the SGACL that
either statically configured at the device or dynamically
downloade…

Indexes

ctspOperIpTrafficType ctspOperSgaclDestSgt ctspOperSgaclSourceSgt ctspOperSgaclIndex

Column	Syntax	OID
ctspOperIpTrafficType This object indicates the type of the unicast IP traffic carrying the source SGT and travelling to destination SGT and subjected to SGACL enforcement.	Enumeration Enumerated Values: 1 ipv4 2 ipv6	.1.3.6.1.4.1.9.9.713.1.1.2.6.1.1
ctspOperSgaclDestSgt This object indicates the destination SGT value. Value of zero indicates that the destination SGT is unknown.	CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag Type Constraints: range: 0..65535	.1.3.6.1.4.1.9.9.713.1.1.2.6.1.2
ctspOperSgaclSourceSgt This object indicates the source SGT value. Value of zero indicates that the source SGT is unknown.	CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag Type Constraints: range: 0..65535	.1.3.6.1.4.1.9.9.713.1.1.2.6.1.3
ctspOperSgaclIndex This object identifies the SGACL operationally applied to unicast IP traffic carrying the source SGT to the destination SGT.	Unsigned32 Constraints: range: 1-65535	.1.3.6.1.4.1.9.9.713.1.1.2.6.1.4
ctspOperationalSgaclName This object indicates the name of the SGACL operationally applied to unicast IP traffic carrying the source SGT to the destination SGT.	CISCO-TRUSTSEC-TC-MIBCtsAclName Type Constraints: range: 1..255	.1.3.6.1.4.1.9.9.713.1.1.2.6.1.5
ctspOperationalSgaclGenId This object indicates the generation identification of the SGACL operationally applied to unicast IP traffic carrying the source SGT to the destination SGT.	CISCO-TRUSTSEC-TC-MIBCtsGenerationId Type Constraints: range: 0..128	.1.3.6.1.4.1.9.9.713.1.1.2.6.1.6
ctspOperSgaclMappingSource This object indicates the source of SGACL mapping for the SGACL operationally applied to unicast IP traffic carrying the source SGT to the destination SGT. 'downloaded' indicates that the mapping is down…	Enumeration Enumerated Values: 1 configured 2 downloaded	.1.3.6.1.4.1.9.9.713.1.1.2.6.1.7
ctspOperSgaclConfigSource This object indicates the source of SGACL creation for this SGACL. 'configured' indicates that the SGACL is locally configured in the local device. 'downloaded' indicates that the SGACL is…	Enumeration Enumerated Values: 1 configured 2 downloaded	.1.3.6.1.4.1.9.9.713.1.1.2.6.1.8
ctspOperSgaclMonitor This object indicates whether SGACL monitor mode is turned on for the SGACL enforced traffic.	CISCO-TRUSTSEC-TC-MIBCtsSgaclMonitorMode Type Values: 1 on 2 off	.1.3.6.1.4.1.9.9.713.1.1.2.6.1.9

This table contains the operational SGACLs information
of the default policy applied to unicast IP traffic.

ctspDefOperSgaclMappingEntry row .1.3.6.1.4.1.9.9.713.1.1.2.7.1

A row instance contains the SGACL information of the default
policy which is either statically configured at the device
or dynamically downloaded from ACS server for unicast
IP traffic.

Indexes

ctspDefOperIpTrafficType ctspDefOperSgaclIndex

Column	Syntax	OID
ctspDefOperIpTrafficType This object indicates the type of the unicast IP traffic subjected to default policy enforcement.	Enumeration Enumerated Values: 1 ipv4 2 ipv6	.1.3.6.1.4.1.9.9.713.1.1.2.7.1.1
ctspDefOperSgaclIndex This object identifies the SGACL of default policy operationally applied to unicast IP traffic.	Unsigned32 Constraints: range: 1-65535	.1.3.6.1.4.1.9.9.713.1.1.2.7.1.2
ctspDefOperationalSgaclName This object indicates the name of the SGACL of default policy operationally applied to unicast IP traffic.	CISCO-TRUSTSEC-TC-MIBCtsAclName Type Constraints: range: 1..255	.1.3.6.1.4.1.9.9.713.1.1.2.7.1.3
ctspDefOperationalSgaclGenId This object indicates the generation identification of the SGACL of default policy operationally applied to unicast IP traffic.	CISCO-TRUSTSEC-TC-MIBCtsGenerationId Type Constraints: range: 0..128	.1.3.6.1.4.1.9.9.713.1.1.2.7.1.4
ctspDefOperSgaclMappingSource This object indicates the source of SGACL mapping for the SGACL of default policy operationally applied to unicast IP traffic. 'downloaded' indicates that the mapping is downloaded from ACS server. …	Enumeration Enumerated Values: 1 configured 2 downloaded	.1.3.6.1.4.1.9.9.713.1.1.2.7.1.5
ctspDefOperSgaclConfigSource This object indicates the source of SGACL creation for the SGACL of default policy operationally applied to unicast IP traffic. 'downloaded' indicates that the SGACL is created at ACS server and downloa…	Enumeration Enumerated Values: 1 configured 2 downloaded	.1.3.6.1.4.1.9.9.713.1.1.2.7.1.6
ctspDefOperSgaclMonitor This object indicates whether SGACL monitor mode is turned on for the SGACL of default policy enforced traffic.	CISCO-TRUSTSEC-TC-MIBCtsSgaclMonitorMode Type Values: 1 on 2 off	.1.3.6.1.4.1.9.9.713.1.1.2.7.1.7

This table describes SGACL statistics counters per
a pair of <source SGT, destination SGT> that is
capable of providing this information.

ctspSgtStatsEntry row .1.3.6.1.4.1.9.9.713.1.1.3.1.1

Each row contains the SGACL statistics related to
IPv4 or IPv6 packets carrying the source SGT travelling
to the destination SGT and subjected to SGACL enforcement.

Indexes

ctspStatsIpTrafficType ctspStatsDestSgt ctspStatsSourceSgt

Column	Syntax	OID
ctspStatsIpTrafficType This object indicates the type of the unicast IP traffic carrying the source SGT and travelling to destination SGT and subjected to SGACL enforcement.	Enumeration Enumerated Values: 1 ipv4 2 ipv6	.1.3.6.1.4.1.9.9.713.1.1.3.1.1.1
ctspStatsDestSgt This object indicates the destination SGT value. Value of zero indicates that the destination SGT is unknown.	CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag Type Constraints: range: 0..65535	.1.3.6.1.4.1.9.9.713.1.1.3.1.1.2
ctspStatsSourceSgt This object indicates the source SGT value. Value of zero indicates that the source SGT is unknown.	CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag Type Constraints: range: 0..65535	.1.3.6.1.4.1.9.9.713.1.1.3.1.1.3
ctspStatsIpSwDropPkts This object indicates the number of software-forwarded IP packets which are dropped by SGACL.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.713.1.1.3.1.1.4
ctspStatsIpHwDropPkts This object indicates the number of hardware-forwarded IP packets which are dropped by SGACL.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.713.1.1.3.1.1.5
ctspStatsIpSwPermitPkts This object indicates the number of software-forwarded IP packets which are permitted by SGACL.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.713.1.1.3.1.1.6
ctspStatsIpHwPermitPkts This object indicates the number of hardware-forwarded IP packets which are permitted by SGACL.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.713.1.1.3.1.1.7
ctspStatsIpSwMonitorPkts This object indicates the number of software-forwarded IP packets which are SGACL enforced & monitored.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.713.1.1.3.1.1.8
ctspStatsIpHwMonitorPkts This object indicates the number of hardware-forwarded IP packets which are SGACL enforced & monitored.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.713.1.1.3.1.1.9

This table describes statistics counters for unicast
IP traffic subjected to default unicast policy.

ctspDefStatsEntry row .1.3.6.1.4.1.9.9.713.1.1.3.2.1

Each row contains the statistics counter for each IP
traffic type.

Indexes

ctspDefIpTrafficType

Column	Syntax	OID
ctspDefIpTrafficType This object indicates the type of the IP traffic subjected to default unicast policy enforcement.	Enumeration Enumerated Values: 1 ipv4 2 ipv6	.1.3.6.1.4.1.9.9.713.1.1.3.2.1.1
ctspDefIpSwDropPkts This object indicates the number of software-forwarded IP packets which are dropped by default unicast policy.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.713.1.1.3.2.1.2
ctspDefIpHwDropPkts This object indicates the number of hardware-forwarded IP packets which are dropped by default unicast policy.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.713.1.1.3.2.1.3
ctspDefIpSwPermitPkts This object indicates the number of software-forwarded IP packets which are permitted by default unicast policy.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.713.1.1.3.2.1.4
ctspDefIpHwPermitPkts This object indicates the number of hardware-forwarded IP packets which are permitted by default unicast policy.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.713.1.1.3.2.1.5
ctspDefIpSwMonitorPkts This object indicates the number of software-forwarded IP packets which are monitored by default unicast policy.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.713.1.1.3.2.1.6
ctspDefIpHwMonitorPkts This object indicates the number of hardware-forwarded IP packets which are monitored by default unicast policy.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.713.1.1.3.2.1.7

This table lists the peer policy information for each peer
device.

ctspPeerPolicyEntry row .1.3.6.1.4.1.9.9.713.1.2.2.1

Each row contains the managed objects for peer policies
for each peer device based on its name.

Indexes

ctspPeerName

Column	Syntax	OID
ctspPeerName This object uniquely identifies a peer device.	OctetString Constraints: range: 1-128	.1.3.6.1.4.1.9.9.713.1.2.2.1.1
ctspPeerSgt This object indicates the SGT value of this peer device.	CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag Type Constraints: range: 0..65535	.1.3.6.1.4.1.9.9.713.1.2.2.1.2
ctspPeerSgtGenId This object indicates the generation identification of the SGT value assigned to this peer device.	CISCO-TRUSTSEC-TC-MIBCtsGenerationId Type Constraints: range: 0..128	.1.3.6.1.4.1.9.9.713.1.2.2.1.3
ctspPeerTrustState This object indicates the TrustSec trust state of this peer device. 'trusted' indicates that this is a trusted peer device. 'noTrust' indicates that this peer device is not trusted.	Enumeration Enumerated Values: 1 trusted 2 noTrust	.1.3.6.1.4.1.9.9.713.1.2.2.1.4
ctspPeerPolicyLifeTime This object indicates the policy life time which provides the time interval during which the peer policy is valid.	secondsSNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.713.1.2.2.1.5
ctspPeerPolicyLastUpdate This object indicates the time when this peer policy is last updated.	SNMPv2-TCDateAndTime Type Constraints: range: 8 range: 11 Description: A date-time specification. field octets contents range ----- ------ -------- ----- 1 1-2 year* 0..65536 2 3 month …	.1.3.6.1.4.1.9.9.713.1.2.2.1.6
ctspPeerPolicyAction This object allows user to specify the action to be taken with this peer policy. When read, this object always returns the value 'none'. 'none' - No operation. 'refresh' - Refresh this …	Enumerationr/w Enumerated Values: 1 none 2 refresh	.1.3.6.1.4.1.9.9.713.1.2.2.1.7

This table describes Layer 3 transport policy for 
IP traffic regarding SGT propagation.

ctspLayer3PolicyEntry row .1.3.6.1.4.1.9.9.713.1.3.1.1

Each row contains the Layer 3 transport policies per
IP traffic type per policy type.

Indexes

ctspLayer3PolicyIpTrafficType ctspLayer3PolicyType

Column	Syntax	OID
ctspLayer3PolicyIpTrafficType This object indicates the type of the IP traffic affected by Layer-3 transport policy. 'ipv4' indicates that the affected traffic is IPv4 traffic. 'ipv6' indicates that the affected traffic…	Enumeration Enumerated Values: 1 ipv4 2 ipv6	.1.3.6.1.4.1.9.9.713.1.3.1.1.1
ctspLayer3PolicyType This object indicates the type of the Layer-3 transport policy affecting IP traffic regarding SGT propagation. 'permit' indicates that the transport policy is used to classify Layer-3 traffic which is …	Enumeration Enumerated Values: 1 permit 2 exception	.1.3.6.1.4.1.9.9.713.1.3.1.1.2
ctspLayer3PolicyLocalConfig This object specifies the name of an ACL that is administratively configured to classify Layer3 traffic. Zero-length string indicates there is no such configured policy.	CISCO-TRUSTSEC-TC-MIBCtsAclNameOrEmptyr/w Type Constraints: range: 0..255	.1.3.6.1.4.1.9.9.713.1.3.1.1.3
ctspLayer3PolicyDownloaded This object specifies the name of an ACL that is downloaded from policy server to classify Layer3 traffic. Zero-length string indicates there is no such downloaded policy.	CISCO-TRUSTSEC-TC-MIBCtsAclNameOrEmpty Type Constraints: range: 0..255	.1.3.6.1.4.1.9.9.713.1.3.1.1.4
ctspLayer3PolicyOperational This object specifies the name of an operational ACL currently used to classify Layer3 traffic. Zero-length string indicates there is no such policy in effect.	CISCO-TRUSTSEC-TC-MIBCtsAclNameOrEmpty Type Constraints: range: 0..255	.1.3.6.1.4.1.9.9.713.1.3.1.1.5

This table lists the interfaces which support Layer3
Transport policy.

ctspIfL3PolicyConfigEntry row .1.3.6.1.4.1.9.9.713.1.3.2.1

Each row contains managed objects for Layer3 Transport
on interface capable of providing this information.

Indexes

IF-MIBifIndex

Column	Syntax	OID
ctspIfL3Ipv4PolicyEnabled This object specifies whether the Layer3 Transport policies will be applied on this interface for egress IPv4 traffic. 'true' indicates that Layer3 permit and exception policy will be applied at this int…	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.9.9.713.1.3.2.1.1
ctspIfL3Ipv6PolicyEnabled This object specifies whether the Layer3 Transport policies will be applied on this interface for egress IPv6 traffic. 'true' indicates that Layer3 permit and exception policy will be applied at this int…	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.9.9.713.1.3.2.1.2

This table contains the IP-to-SGT mapping information
in the device.

ctspIpSgtMappingEntry row .1.3.6.1.4.1.9.9.713.1.4.1.1

Each row contains the IP-to-SGT mapping and status of
this instance. Entry in this table is either populated
automatically by the device or manually configured by
a user. A manually configured row instance can be creat…

Indexes

ctspIpSgtVrfName ctspIpSgtAddressType ctspIpSgtIpAddress ctspIpSgtAddressLength

Column	Syntax	OID
ctspIpSgtVrfName This object indicates the VRF where IP-SGT mapping belongs to. The zero length value indicates the default VRF.	CISCO-TCCiscoVrfName Type Constraints: range: 0..32	.1.3.6.1.4.1.9.9.713.1.4.1.1.1
ctspIpSgtAddressType This object indicates the type of Internet address.	INET-ADDRESS-MIBInetAddressType Type Values: 0 unknown 1 ipv4 2 ipv6 3 ipv4z 4 ipv6z 16 dns 25 l2vpn	.1.3.6.1.4.1.9.9.713.1.4.1.1.2
ctspIpSgtIpAddress This object indicates an Internet address. The type of this address is determined by the value of ctspIpSgtAddressType object.	INET-ADDRESS-MIBInetAddress Type Constraints: range: 0..255	.1.3.6.1.4.1.9.9.713.1.4.1.1.3
ctspIpSgtAddressLength This object indicates the length of an Internet address prefix.	INET-ADDRESS-MIBInetAddressPrefixLength Type Constraints: range: 0..2040	.1.3.6.1.4.1.9.9.713.1.4.1.1.4
ctspIpSgtValue This object specifies the SGT value assigned to an Internet address.	CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTagr/w Type Constraints: range: 0..65535	.1.3.6.1.4.1.9.9.713.1.4.1.1.5
ctspIpSgtSource This object indicates the source of the mapping. 'configured' indicates that the mapping is manually configured by user. 'arp' indicates that the mapping is dynamically learnt from tagged…	Enumerationr/w Enumerated Values: 1 configured 2 arp 3 localAuthenticated 4 sxp 5 internal 6 l3if 7 vlan 8 caching	.1.3.6.1.4.1.9.9.713.1.4.1.1.6
ctspIpSgtStorageType The storage type for this conceptual row.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.4.1.9.9.713.1.4.1.1.7
ctspIpSgtRowStatus This object is used to manage the creation and deletion of rows in this table. If this object value is 'active', user cannot modify any writable object in this row. If value of ctspIpSgtSource object in a…	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.9.9.713.1.4.1.1.8

This table lists the SGT policy information downloaded 
by the device.

ctspDownloadedSgtPolicyEntry row .1.3.6.1.4.1.9.9.713.1.5.2.1

Each row contains the managed objects for SGT policies
downloaded by the device.

Indexes

ctspDownloadedSgtPolicySgt

Column	Syntax	OID
ctspDownloadedSgtPolicySgt This object indicates the SGT value for which the downloaded policy is applied to. Value of zero indicates that the SGT is unknown.	CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag Type Constraints: range: 0..65535	.1.3.6.1.4.1.9.9.713.1.5.2.1.1
ctspDownloadedSgtPolicySgtGenId This object indicates the generation identification of the SGT value denoted by ctspDownloadedSgtPolicySgt object.	CISCO-TRUSTSEC-TC-MIBCtsGenerationId Type Constraints: range: 0..128	.1.3.6.1.4.1.9.9.713.1.5.2.1.2
ctspDownloadedSgtPolicyLifeTime This object indicates the policy life time which provides the time interval during which this downloaded policy is valid.	secondsSNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.713.1.5.2.1.3
ctspDownloadedSgtPolicyLastUpdate This object indicates the time when this downloaded SGT policy is last updated.	SNMPv2-TCDateAndTime Type Constraints: range: 8 range: 11 Description: A date-time specification. field octets contents range ----- ------ -------- ----- 1 1-2 year* 0..65536 2 3 month …	.1.3.6.1.4.1.9.9.713.1.5.2.1.4
ctspDownloadedSgtPolicyAction This object allows user to specify the action to be taken with this downloaded SGT policy. When read, this object always returns the value 'none'. 'none' - No operation. 'refresh' - Ref…	Enumerationr/w Enumerated Values: 1 none 2 refresh	.1.3.6.1.4.1.9.9.713.1.5.2.1.5

This table lists the default SGT policy information 
downloaded by the device.

ctspDownloadedDefSgtPolicyEntry row .1.3.6.1.4.1.9.9.713.1.5.3.1

Each row contains the managed objects for default SGT
policies downloaded by the device.

Indexes

ctspDownloadedDefSgtPolicyType

Column	Syntax	OID
ctspDownloadedDefSgtPolicyType This object indicates the downloaded default SGT policy type. 'unicastDefault' indicates the SGT policy applied to traffic which carries the default unicast SGT.	Enumeration Enumerated Values: 1 unicastDefault	.1.3.6.1.4.1.9.9.713.1.5.3.1.1
ctspDownloadedDefSgtPolicySgtGenId This object indicates the generation identification of the downloaded default SGT policy.	CISCO-TRUSTSEC-TC-MIBCtsGenerationId Type Constraints: range: 0..128	.1.3.6.1.4.1.9.9.713.1.5.3.1.2
ctspDownloadedDefSgtPolicyLifeTime This object indicates the policy life time which provides the time interval during which this download default policy is valid.	secondsSNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.713.1.5.3.1.3
ctspDownloadedDefSgtPolicyLastUpdate This object indicates the time when this downloaded SGT policy is last updated.	SNMPv2-TCDateAndTime Type Constraints: range: 8 range: 11 Description: A date-time specification. field octets contents range ----- ------ -------- ----- 1 1-2 year* 0..65536 2 3 month …	.1.3.6.1.4.1.9.9.713.1.5.3.1.4
ctspDownloadedDefSgtPolicyAction This object allows user to specify the action to be taken with this default downloaded SGT policy. When read, this object always returns the value 'none'. 'none' - No operation. 'refres…	Enumerationr/w Enumerated Values: 1 none 2 refresh	.1.3.6.1.4.1.9.9.713.1.5.3.1.5

This table contains the Interface-to-SGT mapping configuration 
information in the device.

ctspIfSgtMappingEntry row .1.3.6.1.4.1.9.9.713.1.6.1.1

Each row contains the SGT mapping configuration of a particular
interface.

A row instance can be created or removed by setting
ctspIfSgtRowStatus.

Indexes

IF-MIBifIndex

Column	Syntax	OID
ctspIfSgtValue This object specifies the SGT value assigned to the interface.	CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTagr/w Type Constraints: range: 0..65535	.1.3.6.1.4.1.9.9.713.1.6.1.1.1
ctspIfSgName This object specifies the Security Group Name assigned to the interface.	SNMP-FRAMEWORK-MIBSnmpAdminStringr/w Type Constraints: range: 0..255	.1.3.6.1.4.1.9.9.713.1.6.1.1.2
ctspIfSgtStorageType The storage type for this conceptual row.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.4.1.9.9.713.1.6.1.1.3
ctspIfSgtRowStatus This object is used to manage the creation and deletion of rows in this table.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.9.9.713.1.6.1.1.4

This table contains the Interface-to-SGT mapping status 
information in the device.

ctspIfSgtMappingInfoEntry row .1.3.6.1.4.1.9.9.713.1.6.2.1

Containing the Interface-to-SGT mapping status of the
specified interface.

Indexes

IF-MIBifIndex

Column	Syntax	OID
ctspL3IPMStatus This object indicates the Layer 3 Identity Port Mapping(IPM) operational mode. disabled - The L3 IPM is not configured. active - The L3 IPM is configured for this interface, and SGT…	Enumeration Enumerated Values: 1 disabled 2 active 3 inactive	.1.3.6.1.4.1.9.9.713.1.6.2.1.1

This table contains the Vlan-SGT mapping information
in the device.

ctspVlanSgtMappingEntry row .1.3.6.1.4.1.9.9.713.1.7.1.1

Each row contains the SGT mapping configuration of a particular
VLAN.

A row instance can be created or removed by setting
ctspVlanSgtRowStatus.

Indexes

ctspVlanSgtMappingIndex

Column	Syntax	OID
ctspVlanSgtMappingIndex This object specifies the VLAN-ID which is used as index.	Q-BRIDGE-MIBVlanIndex	.1.3.6.1.4.1.9.9.713.1.7.1.1.1
ctspVlanSgtMapValue This object specifies the SGT value assigned to the vlan.	CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTagr/w Type Constraints: range: 0..65535	.1.3.6.1.4.1.9.9.713.1.7.1.1.2
ctspVlanSgtStorageType The storage type for this conceptual row.	SNMPv2-TCStorageTyper/w Type Values: 1 other 2 volatile 3 nonVolatile 4 permanent 5 readOnly Description: Describes the memory realization of a conceptual row. A row which is volatile(2) is lost upon reboot. A row which is either nonVolatile(3), permanent(4) or readOnly(5), is backed up by stable storage. A row which is …	.1.3.6.1.4.1.9.9.713.1.7.1.1.3
ctspVlanSgtRowStatus This object is used to manage the creation and deletion of rows in this table.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.9.9.713.1.7.1.1.4