CISCO-TRUSTSEC-POLICY-MIB Table View

Table-centric layout grouping table, row, and column objects.

Standard view Table view
Tables
17
Rows
17
Columns
98

ctspVlanConfigTable

table
.1.3.6.1.4.1.9.9.713.1.1.1.4 · 1 row entry · 6 columns
Open in standard view 
This table lists the SGACL enforcement for Layer 2 and 
Layer 3 switched packet in a VLAN as well as VRF information
for VLANs in the device.
ctspVlanConfigEntry entry .1.3.6.1.4.1.9.9.713.1.1.1.4.1
Each row contains the SGACL enforcement information
for Layer 2 and Layer 3 switched packets in a VLAN
identified by its VlanIndex value. Entry in this
table is populated for VLANs which contains SGACL
enforcement or …
Indexes
ctspVlanConfigIndex
Column Syntax OID
ctspVlanConfigIndex
This object indicates the VLAN-ID of this VLAN.
Q-BRIDGE-MIBVlanIndex
Textual Convention: Q-BRIDGE-MIBVlanIndex Unsigned32
 .1.3.6.1.4.1.9.9.713.1.1.1.4.1.1
ctspVlanConfigSgaclEnforcement
This object specifies the configured SGACL enforcement
status for this VLAN i.e., 'true' = enabled and
'false' = disabled.
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.9.9.713.1.1.1.4.1.2
ctspVlanSviActive
This object indicates if there is an active SVI
associated with this VLAN.

'true' indicates that there is an active SVI associated
with this VLAN. and SGACL is enforced for both Layer 2 and
Layer 3 switc…
SNMPv2-TCTruthValue
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.9.9.713.1.1.1.4.1.3
ctspVlanConfigVrfName
This object specifies an existing VRF where this VLAN
belongs to. The zero length value indicates this VLAN
belongs to the default VRF.
CISCO-TCCiscoVrfNamer/w
Textual Convention: CISCO-TCCiscoVrfName OctetString
Type Constraints:
range: 0..32
 .1.3.6.1.4.1.9.9.713.1.1.1.4.1.4
ctspVlanConfigStorageType
The objects specifies the storage type for this conceptual
row.
SNMPv2-TCStorageTyper/w
Textual Convention: SNMPv2-TCStorageType Enumeration
Type Values:
1other
2volatile
3nonVolatile
4permanent
5readOnly
 .1.3.6.1.4.1.9.9.713.1.1.1.4.1.5
ctspVlanConfigRowStatus
The status of this conceptual row entry. This object
is used to manage creation and deletion of rows in this
table. When this object value is 'active', other
writable objects in the same row cannot be modified.
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.9.9.713.1.1.1.4.1.6

ctspConfigSgaclMappingTable

table
.1.3.6.1.4.1.9.9.713.1.1.2.1 · 1 row entry · 7 columns
Open in standard view 
This table contains the SGACLs information which is
applied to unicast IP traffic which carries a source SGT
and travels to a destination SGT.
ctspConfigSgaclMappingEntry entry .1.3.6.1.4.1.9.9.713.1.1.2.1.1
Each row contains the SGACL mapping to source and destination
SGT for a certain traffic type as well as status of this
instance. A row instance can be created or removed by setting
the appropriate value of its RowStatus…
Indexes
ctspConfigSgaclMappingIpTrafficType ctspConfigSgaclMappingDestSgt ctspConfigSgaclMappingSourceSgt
Column Syntax OID
ctspConfigSgaclMappingIpTrafficType
This object indicates the type of the unicast IP traffic
carrying the source SGT and travelling to destination
SGT and subjected to SGACL enforcement.
Enumeration
Enumerated Values:
1ipv4
2ipv6
 .1.3.6.1.4.1.9.9.713.1.1.2.1.1.1
ctspConfigSgaclMappingDestSgt
This object indicates the destination SGT value. Value of
zero indicates that the destination SGT is unknown.
CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag Unsigned32
Type Constraints:
range: 0..65535
 .1.3.6.1.4.1.9.9.713.1.1.2.1.1.2
ctspConfigSgaclMappingSourceSgt
This object indicates the source SGT value. Value of zero
indicates that the source SGT is unknown.
CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag Unsigned32
Type Constraints:
range: 0..65535
 .1.3.6.1.4.1.9.9.713.1.1.2.1.1.3
ctspConfigSgaclMappingSgaclName
This object specifies the list of existing SGACLs which is
administratively configured to apply to unicast IP traffic
carrying the source SGT to the destination SGT.
CISCO-TRUSTSEC-TC-MIBCtsAclListr/w
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsAclList OctetString
Type Constraints:
range: 1..255
 .1.3.6.1.4.1.9.9.713.1.1.2.1.1.4
ctspConfigSgaclMappingStorageType
The storage type for this conceptual row.
SNMPv2-TCStorageTyper/w
Textual Convention: SNMPv2-TCStorageType Enumeration
Type Values:
1other
2volatile
3nonVolatile
4permanent
5readOnly
 .1.3.6.1.4.1.9.9.713.1.1.2.1.1.5
ctspConfigSgaclMappingRowStatus
This object is used to manage the creation and deletion
of rows in this table. ctspConfigSgaclName may be modified
at any time.
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.9.9.713.1.1.2.1.1.6
ctspConfigSgaclMonitor
This object specifies whether SGACL monitor mode is turned on
for the configured SGACL enforced traffic.
CISCO-TRUSTSEC-TC-MIBCtsSgaclMonitorModer/w
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsSgaclMonitorMode Enumeration
Type Values:
1on
2off
 .1.3.6.1.4.1.9.9.713.1.1.2.1.1.7

ctspDownloadedSgaclMappingTable

table
.1.3.6.1.4.1.9.9.713.1.1.2.4 · 1 row entry · 7 columns
Open in standard view 
This table contains the downloaded SGACLs information
applied to unicast IP traffic which carries a source SGT 
and travels to a destination SGT.
ctspDownloadedSgaclMappingEntry entry .1.3.6.1.4.1.9.9.713.1.1.2.4.1
Each row contains the downloaded SGACLs mapping.
A row instance is added for each pair of <source SGT,
destination SGT> which contains SGACL that
is dynamically downloaded from ACS server.
Indexes
ctspDownloadedSgaclDestSgt ctspDownloadedSgaclSourceSgt ctspDownloadedSgaclIndex
Column Syntax OID
ctspDownloadedSgaclDestSgt
This object indicates the destination SGT value. Value of
zero indicates that the destination SGT is unknown.
CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag Unsigned32
Type Constraints:
range: 0..65535
 .1.3.6.1.4.1.9.9.713.1.1.2.4.1.1
ctspDownloadedSgaclSourceSgt
This object indicates the source SGT value. Value of
zero indicates that the source SGT is unknown.
CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag Unsigned32
Type Constraints:
range: 0..65535
 .1.3.6.1.4.1.9.9.713.1.1.2.4.1.2
ctspDownloadedSgaclIndex
This object identifies the downloaded SGACL which is
applied to unicast IP traffic carrying the source SGT
to the destination SGT.
Unsigned32
Constraints:
range: 1-65535
 .1.3.6.1.4.1.9.9.713.1.1.2.4.1.3
ctspDownloadedSgaclName
This object indicates the name of downloaded SGACL
which is applied to unicast IP traffic carrying the source
SGT to the destination SGT.
CISCO-TRUSTSEC-TC-MIBCtsAclName
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsAclName OctetString
Type Constraints:
range: 1..255
 .1.3.6.1.4.1.9.9.713.1.1.2.4.1.4
ctspDownloadedSgaclGenId
This object indicates the generation identification of
downloaded SGACL which is applied to unicast IP traffic
carrying the source SGT to the destination SGT.
CISCO-TRUSTSEC-TC-MIBCtsGenerationId
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsGenerationId OctetString
Type Constraints:
range: 0..128
 .1.3.6.1.4.1.9.9.713.1.1.2.4.1.5
ctspDownloadedIpTrafficType
This object indicates the type of the unicast IP traffic
carrying the source SGT and travelling to destination
SGT and subjected to SGACL enforcement by this downloaded
default policy.
Bits
Enumerated Values:
0ipv4
1ipv6
 .1.3.6.1.4.1.9.9.713.1.1.2.4.1.6
ctspDownloadedSgaclMonitor
This object indicates whether SGACL monitor mode is turned on
for the downloaded SGACL enforced traffic.
CISCO-TRUSTSEC-TC-MIBCtsSgaclMonitorMode
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsSgaclMonitorMode Enumeration
Type Values:
1on
2off
 .1.3.6.1.4.1.9.9.713.1.1.2.4.1.7

ctspDefDownloadedSgaclMappingTable

table
.1.3.6.1.4.1.9.9.713.1.1.2.5 · 1 row entry · 5 columns
Open in standard view 
This table contains the downloaded SGACLs information
of the default policy applied to unicast IP traffic.
ctspDefDownloadedSgaclMappingEntry entry .1.3.6.1.4.1.9.9.713.1.1.2.5.1
Each row contains the downloaded SGACLs mapping.
A row instance contains the SGACL information of the default
policy dynamically downloaded from ACS server for unicast
IP traffic.
Indexes
ctspDefDownloadedSgaclIndex
Column Syntax OID
ctspDefDownloadedSgaclIndex
This object identifies the SGACL of downloaded default
policy applied to unicast IP traffic.
Unsigned32
Constraints:
range: 1-65535
 .1.3.6.1.4.1.9.9.713.1.1.2.5.1.1
ctspDefDownloadedSgaclName
This object indicates the name of the SGACL of downloaded
default policy applied to unicast IP traffic.
CISCO-TRUSTSEC-TC-MIBCtsAclName
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsAclName OctetString
Type Constraints:
range: 1..255
 .1.3.6.1.4.1.9.9.713.1.1.2.5.1.2
ctspDefDownloadedSgaclGenId
This object indicates the generation identification
of the SGACL of downloaded default policy applied to
unicast IP traffic.
CISCO-TRUSTSEC-TC-MIBCtsGenerationId
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsGenerationId OctetString
Type Constraints:
range: 0..128
 .1.3.6.1.4.1.9.9.713.1.1.2.5.1.3
ctspDefDownloadedIpTrafficType
This object indicates the type of the IP traffic
subjected to SGACL enforcement by this downloaded
default policy.
Bits
Enumerated Values:
0ipv4
1ipv6
 .1.3.6.1.4.1.9.9.713.1.1.2.5.1.4
ctspDefDownloadedSgaclMonitor
This object indicates whether SGACL monitor mode is turned on
for the default downloaded SGACL enforced traffic.
CISCO-TRUSTSEC-TC-MIBCtsSgaclMonitorMode
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsSgaclMonitorMode Enumeration
Type Values:
1on
2off
 .1.3.6.1.4.1.9.9.713.1.1.2.5.1.5

ctspOperSgaclMappingTable

table
.1.3.6.1.4.1.9.9.713.1.1.2.6 · 1 row entry · 9 columns
Open in standard view 
This table contains the operational SGACLs information
applied to unicast IP traffic which carries a source SGT
and travels to a destination SGT.
ctspOperSgaclMappingEntry entry .1.3.6.1.4.1.9.9.713.1.1.2.6.1
Each row contains the operational SGACLs mapping.
A row instance is added for each pair of <source SGT,
destination SGT> which contains the SGACL that
either statically configured at the device or dynamically
downloade…
Indexes
ctspOperIpTrafficType ctspOperSgaclDestSgt ctspOperSgaclSourceSgt ctspOperSgaclIndex
Column Syntax OID
ctspOperIpTrafficType
This object indicates the type of the unicast IP traffic
carrying the source SGT and travelling to destination
SGT and subjected to SGACL enforcement.
Enumeration
Enumerated Values:
1ipv4
2ipv6
 .1.3.6.1.4.1.9.9.713.1.1.2.6.1.1
ctspOperSgaclDestSgt
This object indicates the destination SGT value. Value of
zero indicates that the destination SGT is unknown.
CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag Unsigned32
Type Constraints:
range: 0..65535
 .1.3.6.1.4.1.9.9.713.1.1.2.6.1.2
ctspOperSgaclSourceSgt
This object indicates the source SGT value. Value of
zero indicates that the source SGT is unknown.
CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag Unsigned32
Type Constraints:
range: 0..65535
 .1.3.6.1.4.1.9.9.713.1.1.2.6.1.3
ctspOperSgaclIndex
This object identifies the SGACL operationally
applied to unicast IP traffic carrying the source SGT
to the destination SGT.
Unsigned32
Constraints:
range: 1-65535
 .1.3.6.1.4.1.9.9.713.1.1.2.6.1.4
ctspOperationalSgaclName
This object indicates the name of the SGACL operationally
applied to unicast IP traffic carrying the source SGT to the
destination SGT.
CISCO-TRUSTSEC-TC-MIBCtsAclName
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsAclName OctetString
Type Constraints:
range: 1..255
 .1.3.6.1.4.1.9.9.713.1.1.2.6.1.5
ctspOperationalSgaclGenId
This object indicates the generation identification
of the SGACL operationally applied to unicast IP traffic
carrying the source SGT to the destination SGT.
CISCO-TRUSTSEC-TC-MIBCtsGenerationId
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsGenerationId OctetString
Type Constraints:
range: 0..128
 .1.3.6.1.4.1.9.9.713.1.1.2.6.1.6
ctspOperSgaclMappingSource
This object indicates the source of SGACL mapping
for the SGACL operationally applied to unicast IP traffic
carrying the source SGT to the destination SGT.

'downloaded' indicates that the mapping is down…
Enumeration
Enumerated Values:
1configured
2downloaded
 .1.3.6.1.4.1.9.9.713.1.1.2.6.1.7
ctspOperSgaclConfigSource
This object indicates the source of SGACL creation
for this SGACL.

'configured' indicates that the SGACL is locally
configured in the local device.

'downloaded' indicates that the SGACL is…
Enumeration
Enumerated Values:
1configured
2downloaded
 .1.3.6.1.4.1.9.9.713.1.1.2.6.1.8
ctspOperSgaclMonitor
This object indicates whether SGACL monitor mode is turned on
for the SGACL enforced traffic.
CISCO-TRUSTSEC-TC-MIBCtsSgaclMonitorMode
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsSgaclMonitorMode Enumeration
Type Values:
1on
2off
 .1.3.6.1.4.1.9.9.713.1.1.2.6.1.9

ctspDefOperSgaclMappingTable

table
.1.3.6.1.4.1.9.9.713.1.1.2.7 · 1 row entry · 7 columns
Open in standard view 
This table contains the operational SGACLs information
of the default policy applied to unicast IP traffic.
ctspDefOperSgaclMappingEntry entry .1.3.6.1.4.1.9.9.713.1.1.2.7.1
A row instance contains the SGACL information of the default
policy which is either statically configured at the device
or dynamically downloaded from ACS server for unicast
IP traffic.
Indexes
ctspDefOperIpTrafficType ctspDefOperSgaclIndex
Column Syntax OID
ctspDefOperIpTrafficType
This object indicates the type of the unicast IP
traffic subjected to default policy enforcement.
Enumeration
Enumerated Values:
1ipv4
2ipv6
 .1.3.6.1.4.1.9.9.713.1.1.2.7.1.1
ctspDefOperSgaclIndex
This object identifies the SGACL of default policy
operationally applied to unicast IP traffic.
Unsigned32
Constraints:
range: 1-65535
 .1.3.6.1.4.1.9.9.713.1.1.2.7.1.2
ctspDefOperationalSgaclName
This object indicates the name of the SGACL of default
policy operationally applied to unicast IP traffic.
CISCO-TRUSTSEC-TC-MIBCtsAclName
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsAclName OctetString
Type Constraints:
range: 1..255
 .1.3.6.1.4.1.9.9.713.1.1.2.7.1.3
ctspDefOperationalSgaclGenId
This object indicates the generation identification
of the SGACL of default policy operationally
applied to unicast IP traffic.
CISCO-TRUSTSEC-TC-MIBCtsGenerationId
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsGenerationId OctetString
Type Constraints:
range: 0..128
 .1.3.6.1.4.1.9.9.713.1.1.2.7.1.4
ctspDefOperSgaclMappingSource
This object indicates the source of SGACL mapping
for the SGACL of default policy operationally
applied to unicast IP traffic.

'downloaded' indicates that the mapping is downloaded
from ACS server.
…
Enumeration
Enumerated Values:
1configured
2downloaded
 .1.3.6.1.4.1.9.9.713.1.1.2.7.1.5
ctspDefOperSgaclConfigSource
This object indicates the source of SGACL creation
for the SGACL of default policy operationally
applied to unicast IP traffic.

'downloaded' indicates that the SGACL is created at
ACS server and downloa…
Enumeration
Enumerated Values:
1configured
2downloaded
 .1.3.6.1.4.1.9.9.713.1.1.2.7.1.6
ctspDefOperSgaclMonitor
This object indicates whether SGACL monitor mode is turned on
for the SGACL of default policy enforced traffic.
CISCO-TRUSTSEC-TC-MIBCtsSgaclMonitorMode
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsSgaclMonitorMode Enumeration
Type Values:
1on
2off
 .1.3.6.1.4.1.9.9.713.1.1.2.7.1.7

ctspSgtStatsTable

table
.1.3.6.1.4.1.9.9.713.1.1.3.1 · 1 row entry · 9 columns
Open in standard view 
This table describes SGACL statistics counters per
a pair of <source SGT, destination SGT> that is
capable of providing this information.
ctspSgtStatsEntry entry .1.3.6.1.4.1.9.9.713.1.1.3.1.1
Each row contains the SGACL statistics related to
IPv4 or IPv6 packets carrying the source SGT travelling
to the destination SGT and subjected to SGACL enforcement.
Indexes
ctspStatsIpTrafficType ctspStatsDestSgt ctspStatsSourceSgt
Column Syntax OID
ctspStatsIpTrafficType
This object indicates the type of the unicast IP traffic
carrying the source SGT and travelling to destination
SGT and subjected to SGACL enforcement.
Enumeration
Enumerated Values:
1ipv4
2ipv6
 .1.3.6.1.4.1.9.9.713.1.1.3.1.1.1
ctspStatsDestSgt
This object indicates the destination SGT value. Value of
zero indicates that the destination SGT is unknown.
CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag Unsigned32
Type Constraints:
range: 0..65535
 .1.3.6.1.4.1.9.9.713.1.1.3.1.1.2
ctspStatsSourceSgt
This object indicates the source SGT value. Value of
zero indicates that the source SGT is unknown.
CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag Unsigned32
Type Constraints:
range: 0..65535
 .1.3.6.1.4.1.9.9.713.1.1.3.1.1.3
ctspStatsIpSwDropPkts
This object indicates the number of software-forwarded
IP packets which are dropped by SGACL.
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
 .1.3.6.1.4.1.9.9.713.1.1.3.1.1.4
ctspStatsIpHwDropPkts
This object indicates the number of hardware-forwarded
IP packets which are dropped by SGACL.
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
 .1.3.6.1.4.1.9.9.713.1.1.3.1.1.5
ctspStatsIpSwPermitPkts
This object indicates the number of software-forwarded
IP packets which are permitted by SGACL.
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
 .1.3.6.1.4.1.9.9.713.1.1.3.1.1.6
ctspStatsIpHwPermitPkts
This object indicates the number of hardware-forwarded
IP packets which are permitted by SGACL.
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
 .1.3.6.1.4.1.9.9.713.1.1.3.1.1.7
ctspStatsIpSwMonitorPkts
This object indicates the number of software-forwarded
IP packets which are SGACL enforced & monitored.
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
 .1.3.6.1.4.1.9.9.713.1.1.3.1.1.8
ctspStatsIpHwMonitorPkts
This object indicates the number of hardware-forwarded
IP packets which are SGACL enforced & monitored.
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
 .1.3.6.1.4.1.9.9.713.1.1.3.1.1.9

ctspDefStatsTable

table
.1.3.6.1.4.1.9.9.713.1.1.3.2 · 1 row entry · 7 columns
Open in standard view 
This table describes statistics counters for unicast
IP traffic subjected to default unicast policy.
ctspDefStatsEntry entry .1.3.6.1.4.1.9.9.713.1.1.3.2.1
Each row contains the statistics counter for each IP
traffic type.
Indexes
ctspDefIpTrafficType
Column Syntax OID
ctspDefIpTrafficType
This object indicates the type of the IP traffic
subjected to default unicast policy enforcement.
Enumeration
Enumerated Values:
1ipv4
2ipv6
 .1.3.6.1.4.1.9.9.713.1.1.3.2.1.1
ctspDefIpSwDropPkts
This object indicates the number of software-forwarded
IP packets which are dropped by default unicast policy.
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
 .1.3.6.1.4.1.9.9.713.1.1.3.2.1.2
ctspDefIpHwDropPkts
This object indicates the number of hardware-forwarded
IP packets which are dropped by default unicast policy.
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
 .1.3.6.1.4.1.9.9.713.1.1.3.2.1.3
ctspDefIpSwPermitPkts
This object indicates the number of software-forwarded
IP packets which are permitted by default unicast policy.
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
 .1.3.6.1.4.1.9.9.713.1.1.3.2.1.4
ctspDefIpHwPermitPkts
This object indicates the number of hardware-forwarded
IP packets which are permitted by default unicast policy.
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
 .1.3.6.1.4.1.9.9.713.1.1.3.2.1.5
ctspDefIpSwMonitorPkts
This object indicates the number of software-forwarded
IP packets which are monitored by default unicast policy.
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
 .1.3.6.1.4.1.9.9.713.1.1.3.2.1.6
ctspDefIpHwMonitorPkts
This object indicates the number of hardware-forwarded
IP packets which are monitored by default unicast policy.
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
 .1.3.6.1.4.1.9.9.713.1.1.3.2.1.7

ctspPeerPolicyTable

table
.1.3.6.1.4.1.9.9.713.1.2.2 · 1 row entry · 7 columns
Open in standard view 
This table lists the peer policy information for each peer
device.
ctspPeerPolicyEntry entry .1.3.6.1.4.1.9.9.713.1.2.2.1
Each row contains the managed objects for peer policies
for each peer device based on its name.
Indexes
ctspPeerName
Column Syntax OID
ctspPeerName
This object uniquely identifies a peer device.
OctetString
Constraints:
range: 1-128
 .1.3.6.1.4.1.9.9.713.1.2.2.1.1
ctspPeerSgt
This object indicates the SGT value of this peer device.
CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag Unsigned32
Type Constraints:
range: 0..65535
 .1.3.6.1.4.1.9.9.713.1.2.2.1.2
ctspPeerSgtGenId
This object indicates the generation identification of
the SGT value assigned to this peer device.
CISCO-TRUSTSEC-TC-MIBCtsGenerationId
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsGenerationId OctetString
Type Constraints:
range: 0..128
 .1.3.6.1.4.1.9.9.713.1.2.2.1.3
ctspPeerTrustState
This object indicates the TrustSec trust state of this
peer device.

'trusted' indicates that this is a trusted peer device.

'noTrust' indicates that this peer device is not trusted.
Enumeration
Enumerated Values:
1trusted
2noTrust
 .1.3.6.1.4.1.9.9.713.1.2.2.1.4
ctspPeerPolicyLifeTime
This object indicates the policy life time which
provides the time interval during which the peer
policy is valid.
secondsSNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.9.9.713.1.2.2.1.5
ctspPeerPolicyLastUpdate
This object indicates the time when this peer policy
is last updated.
SNMPv2-TCDateAndTime
Textual Convention: SNMPv2-TCDateAndTime OctetString
Type Constraints:
range: 8
range: 11
 .1.3.6.1.4.1.9.9.713.1.2.2.1.6
ctspPeerPolicyAction
This object allows user to specify the action to be taken
with this peer policy.

When read, this object always returns the value 'none'.

'none' - No operation.
'refresh' - Refresh this …
Enumerationr/w
Enumerated Values:
1none
2refresh
 .1.3.6.1.4.1.9.9.713.1.2.2.1.7

ctspLayer3PolicyTable

table
.1.3.6.1.4.1.9.9.713.1.3.1 · 1 row entry · 5 columns
Open in standard view 
This table describes Layer 3 transport policy for 
IP traffic regarding SGT propagation.
ctspLayer3PolicyEntry entry .1.3.6.1.4.1.9.9.713.1.3.1.1
Each row contains the Layer 3 transport policies per
IP traffic type per policy type.
Indexes
ctspLayer3PolicyIpTrafficType ctspLayer3PolicyType
Column Syntax OID
ctspLayer3PolicyIpTrafficType
This object indicates the type of the IP traffic
affected by Layer-3 transport policy.

'ipv4' indicates that the affected traffic is IPv4
traffic.

'ipv6' indicates that the affected traffic…
Enumeration
Enumerated Values:
1ipv4
2ipv6
 .1.3.6.1.4.1.9.9.713.1.3.1.1.1
ctspLayer3PolicyType
This object indicates the type of the Layer-3
transport policy affecting IP traffic regarding
SGT propagation.

'permit' indicates that the transport policy is used
to classify Layer-3 traffic which is …
Enumeration
Enumerated Values:
1permit
2exception
 .1.3.6.1.4.1.9.9.713.1.3.1.1.2
ctspLayer3PolicyLocalConfig
This object specifies the name of an ACL that is
administratively configured to classify Layer3
traffic. Zero-length string indicates there is no
such configured policy.
CISCO-TRUSTSEC-TC-MIBCtsAclNameOrEmptyr/w
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsAclNameOrEmpty OctetString
Type Constraints:
range: 0..255
 .1.3.6.1.4.1.9.9.713.1.3.1.1.3
ctspLayer3PolicyDownloaded
This object specifies the name of an ACL that is
downloaded from policy server to classify Layer3
traffic. Zero-length string indicates there is no
such downloaded policy.
CISCO-TRUSTSEC-TC-MIBCtsAclNameOrEmpty
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsAclNameOrEmpty OctetString
Type Constraints:
range: 0..255
 .1.3.6.1.4.1.9.9.713.1.3.1.1.4
ctspLayer3PolicyOperational
This object specifies the name of an operational ACL
currently used to classify Layer3 traffic. Zero-length
string indicates there is no such policy in effect.
CISCO-TRUSTSEC-TC-MIBCtsAclNameOrEmpty
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsAclNameOrEmpty OctetString
Type Constraints:
range: 0..255
 .1.3.6.1.4.1.9.9.713.1.3.1.1.5

ctspIfL3PolicyConfigTable

table
.1.3.6.1.4.1.9.9.713.1.3.2 · 1 row entry · 2 columns
Open in standard view 
This table lists the interfaces which support Layer3
Transport policy.
ctspIfL3PolicyConfigEntry entry .1.3.6.1.4.1.9.9.713.1.3.2.1
Each row contains managed objects for Layer3 Transport
on interface capable of providing this information.
Indexes
IF-MIBifIndex
Column Syntax OID
ctspIfL3Ipv4PolicyEnabled
This object specifies whether the Layer3 Transport
policies will be applied on this interface for egress
IPv4 traffic.

'true' indicates that Layer3 permit and exception policy
will be applied at this int…
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.9.9.713.1.3.2.1.1
ctspIfL3Ipv6PolicyEnabled
This object specifies whether the Layer3 Transport
policies will be applied on this interface for egress
IPv6 traffic.

'true' indicates that Layer3 permit and exception policy
will be applied at this int…
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.9.9.713.1.3.2.1.2

ctspIpSgtMappingTable

table
.1.3.6.1.4.1.9.9.713.1.4.1 · 1 row entry · 8 columns
Open in standard view 
This table contains the IP-to-SGT mapping information
in the device.
ctspIpSgtMappingEntry entry .1.3.6.1.4.1.9.9.713.1.4.1.1
Each row contains the IP-to-SGT mapping and status of
this instance. Entry in this table is either populated
automatically by the device or manually configured by
a user. A manually configured row instance can be creat…
Indexes
ctspIpSgtVrfName ctspIpSgtAddressType ctspIpSgtIpAddress ctspIpSgtAddressLength
Column Syntax OID
ctspIpSgtVrfName
This object indicates the VRF where IP-SGT mapping
belongs to. The zero length value indicates the default
VRF.
CISCO-TCCiscoVrfName
Textual Convention: CISCO-TCCiscoVrfName OctetString
Type Constraints:
range: 0..32
 .1.3.6.1.4.1.9.9.713.1.4.1.1.1
ctspIpSgtAddressType
This object indicates the type of Internet address.
INET-ADDRESS-MIBInetAddressType
Textual Convention: INET-ADDRESS-MIBInetAddressType Enumeration
Type Values:
0unknown
1ipv4
2ipv6
3ipv4z
4ipv6z
16dns
25l2vpn
 .1.3.6.1.4.1.9.9.713.1.4.1.1.2
ctspIpSgtIpAddress
This object indicates an Internet address. The type
of this address is determined by the value of
ctspIpSgtAddressType object.
INET-ADDRESS-MIBInetAddress
Textual Convention: INET-ADDRESS-MIBInetAddress OctetString
Type Constraints:
range: 0..255
 .1.3.6.1.4.1.9.9.713.1.4.1.1.3
ctspIpSgtAddressLength
This object indicates the length of an Internet address
prefix.
INET-ADDRESS-MIBInetAddressPrefixLength
Textual Convention: INET-ADDRESS-MIBInetAddressPrefixLength Unsigned32
Type Constraints:
range: 0..2040
 .1.3.6.1.4.1.9.9.713.1.4.1.1.4
ctspIpSgtValue
This object specifies the SGT value assigned to
an Internet address.
CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTagr/w
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag Unsigned32
Type Constraints:
range: 0..65535
 .1.3.6.1.4.1.9.9.713.1.4.1.1.5
ctspIpSgtSource
This object indicates the source of the mapping.

'configured' indicates that the mapping is manually
configured by user.

'arp' indicates that the mapping is dynamically learnt
from tagged…
Enumerationr/w
Enumerated Values:
1configured
2arp
3localAuthenticated
4sxp
5internal
6l3if
7vlan
8caching
 .1.3.6.1.4.1.9.9.713.1.4.1.1.6
ctspIpSgtStorageType
The storage type for this conceptual row.
SNMPv2-TCStorageTyper/w
Textual Convention: SNMPv2-TCStorageType Enumeration
Type Values:
1other
2volatile
3nonVolatile
4permanent
5readOnly
 .1.3.6.1.4.1.9.9.713.1.4.1.1.7
ctspIpSgtRowStatus
This object is used to manage the creation and deletion
of rows in this table. If this object value is 'active',
user cannot modify any writable object in this row.

If value of ctspIpSgtSource object in a…
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.9.9.713.1.4.1.1.8

ctspDownloadedSgtPolicyTable

table
.1.3.6.1.4.1.9.9.713.1.5.2 · 1 row entry · 5 columns
Open in standard view 
This table lists the SGT policy information downloaded 
by the device.
ctspDownloadedSgtPolicyEntry entry .1.3.6.1.4.1.9.9.713.1.5.2.1
Each row contains the managed objects for SGT policies
downloaded by the device.
Indexes
ctspDownloadedSgtPolicySgt
Column Syntax OID
ctspDownloadedSgtPolicySgt
This object indicates the SGT value for which
the downloaded policy is applied to. Value of
zero indicates that the SGT is unknown.
CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag Unsigned32
Type Constraints:
range: 0..65535
 .1.3.6.1.4.1.9.9.713.1.5.2.1.1
ctspDownloadedSgtPolicySgtGenId
This object indicates the generation identification of
the SGT value denoted by ctspDownloadedSgtPolicySgt object.
CISCO-TRUSTSEC-TC-MIBCtsGenerationId
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsGenerationId OctetString
Type Constraints:
range: 0..128
 .1.3.6.1.4.1.9.9.713.1.5.2.1.2
ctspDownloadedSgtPolicyLifeTime
This object indicates the policy life time which
provides the time interval during which this downloaded
policy is valid.
secondsSNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.9.9.713.1.5.2.1.3
ctspDownloadedSgtPolicyLastUpdate
This object indicates the time when this downloaded
SGT policy is last updated.
SNMPv2-TCDateAndTime
Textual Convention: SNMPv2-TCDateAndTime OctetString
Type Constraints:
range: 8
range: 11
 .1.3.6.1.4.1.9.9.713.1.5.2.1.4
ctspDownloadedSgtPolicyAction
This object allows user to specify the action to be taken
with this downloaded SGT policy.

When read, this object always returns the value 'none'.

'none' - No operation.
'refresh' - Ref…
Enumerationr/w
Enumerated Values:
1none
2refresh
 .1.3.6.1.4.1.9.9.713.1.5.2.1.5

ctspDownloadedDefSgtPolicyTable

table
.1.3.6.1.4.1.9.9.713.1.5.3 · 1 row entry · 5 columns
Open in standard view 
This table lists the default SGT policy information 
downloaded by the device.
ctspDownloadedDefSgtPolicyEntry entry .1.3.6.1.4.1.9.9.713.1.5.3.1
Each row contains the managed objects for default SGT
policies downloaded by the device.
Indexes
ctspDownloadedDefSgtPolicyType
Column Syntax OID
ctspDownloadedDefSgtPolicyType
This object indicates the downloaded default SGT
policy type.

'unicastDefault' indicates the SGT policy applied to
traffic which carries the default unicast SGT.
Enumeration
Enumerated Values:
1unicastDefault
 .1.3.6.1.4.1.9.9.713.1.5.3.1.1
ctspDownloadedDefSgtPolicySgtGenId
This object indicates the generation identification of
the downloaded default SGT policy.
CISCO-TRUSTSEC-TC-MIBCtsGenerationId
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsGenerationId OctetString
Type Constraints:
range: 0..128
 .1.3.6.1.4.1.9.9.713.1.5.3.1.2
ctspDownloadedDefSgtPolicyLifeTime
This object indicates the policy life time which
provides the time interval during which this
download default policy is valid.
secondsSNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.9.9.713.1.5.3.1.3
ctspDownloadedDefSgtPolicyLastUpdate
This object indicates the time when this downloaded
SGT policy is last updated.
SNMPv2-TCDateAndTime
Textual Convention: SNMPv2-TCDateAndTime OctetString
Type Constraints:
range: 8
range: 11
 .1.3.6.1.4.1.9.9.713.1.5.3.1.4
ctspDownloadedDefSgtPolicyAction
This object allows user to specify the action to be taken
with this default downloaded SGT policy.

When read, this object always returns the value 'none'.

'none' - No operation.
'refres…
Enumerationr/w
Enumerated Values:
1none
2refresh
 .1.3.6.1.4.1.9.9.713.1.5.3.1.5

ctspIfSgtMappingTable

table
.1.3.6.1.4.1.9.9.713.1.6.1 · 1 row entry · 4 columns
Open in standard view 
This table contains the Interface-to-SGT mapping configuration 
information in the device.
ctspIfSgtMappingEntry entry .1.3.6.1.4.1.9.9.713.1.6.1.1
Each row contains the SGT mapping configuration of a particular
interface.

A row instance can be created or removed by setting
ctspIfSgtRowStatus.
Indexes
IF-MIBifIndex
Column Syntax OID
ctspIfSgtValue
This object specifies the SGT value assigned to the interface.
CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTagr/w
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag Unsigned32
Type Constraints:
range: 0..65535
 .1.3.6.1.4.1.9.9.713.1.6.1.1.1
ctspIfSgName
This object specifies the Security Group Name assigned to
the interface.
SNMP-FRAMEWORK-MIBSnmpAdminStringr/w
Textual Convention: SNMP-FRAMEWORK-MIBSnmpAdminString OctetString
Type Constraints:
range: 0..255
 .1.3.6.1.4.1.9.9.713.1.6.1.1.2
ctspIfSgtStorageType
The storage type for this conceptual row.
SNMPv2-TCStorageTyper/w
Textual Convention: SNMPv2-TCStorageType Enumeration
Type Values:
1other
2volatile
3nonVolatile
4permanent
5readOnly
 .1.3.6.1.4.1.9.9.713.1.6.1.1.3
ctspIfSgtRowStatus
This object is used to manage the creation and deletion
of rows in this table.
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.9.9.713.1.6.1.1.4

ctspIfSgtMappingInfoTable

table
.1.3.6.1.4.1.9.9.713.1.6.2 · 1 row entry · 1 columns
Open in standard view 
This table contains the Interface-to-SGT mapping status 
information in the device.
ctspIfSgtMappingInfoEntry entry .1.3.6.1.4.1.9.9.713.1.6.2.1
Containing the Interface-to-SGT mapping status of the
specified interface.
Indexes
IF-MIBifIndex
Column Syntax OID
ctspL3IPMStatus
This object indicates the Layer 3 Identity Port Mapping(IPM)
operational mode.

disabled - The L3 IPM is not configured.
active - The L3 IPM is configured for this interface, and
SGT…
Enumeration
Enumerated Values:
1disabled
2active
3inactive
 .1.3.6.1.4.1.9.9.713.1.6.2.1.1

ctspVlanSgtMappingTable

table
.1.3.6.1.4.1.9.9.713.1.7.1 · 1 row entry · 4 columns
Open in standard view 
This table contains the Vlan-SGT mapping information
in the device.
ctspVlanSgtMappingEntry entry .1.3.6.1.4.1.9.9.713.1.7.1.1
Each row contains the SGT mapping configuration of a particular
VLAN.

A row instance can be created or removed by setting
ctspVlanSgtRowStatus.
Indexes
ctspVlanSgtMappingIndex
Column Syntax OID
ctspVlanSgtMappingIndex
This object specifies the VLAN-ID which is used as index.
Q-BRIDGE-MIBVlanIndex
Textual Convention: Q-BRIDGE-MIBVlanIndex Unsigned32
 .1.3.6.1.4.1.9.9.713.1.7.1.1.1
ctspVlanSgtMapValue
This object specifies the SGT value assigned to the vlan.
CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTagr/w
Textual Convention: CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag Unsigned32
Type Constraints:
range: 0..65535
 .1.3.6.1.4.1.9.9.713.1.7.1.1.2
ctspVlanSgtStorageType
The storage type for this conceptual row.
SNMPv2-TCStorageTyper/w
Textual Convention: SNMPv2-TCStorageType Enumeration
Type Values:
1other
2volatile
3nonVolatile
4permanent
5readOnly
 .1.3.6.1.4.1.9.9.713.1.7.1.1.3
ctspVlanSgtRowStatus
This object is used to manage the creation and deletion
of rows in this table.
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.9.9.713.1.7.1.1.4