CISCO-TRUSTSEC-SXP-MIB
This MIB module is for the configuration and status query
of SGT Exchange Protocol over TCP (SXPoTCP) feature of the
device on the Cisco's Trusted Security (TrustSec) system.
Security Group Tag (SGT) identifying its source, assigned to a
packet on ingress to a TrustSec cloud, and used to determine
security and other policy to be applied to it along its path
through the cloud.
SXPoTCP protocol extends the original SGT Exchange Protocol
(SXP) protocol to enable a much wider array of deployment
scenarios. This MIB uses the term SXP to refer to SXPoTCP.
TrustSec secures a network fabric by authenticating and
authorizing each device connecting to the network, allowing
for the encryption, authentication and replay protection of data
traffic on a hop by hop basis. SXP allows the deployment
of RBACL, a key component of the TrustSec architecture, in the
absence of TrustSec capable hardware.
ciscoTrustSecSxpMIB
1.3.6.1.4.1.9.9.720
Imported Objects
| CISCO-SMI | ciscoMgmt |
| CISCO-TC | CiscoVrfName |
| CISCO-TRUSTSEC-TC-MIB | CtsPassword CtsPasswordEncryptionType CtsSecurityGroupTag CtsSxpConnectionStatus |
| IF-MIB | InterfaceIndexOrZero |
| INET-ADDRESS-MIB | InetAddress InetAddressPrefixLength InetAddressType |
| SNMP-FRAMEWORK-MIB | SnmpAdminString |
| SNMPv2-CONF | MODULE-COMPLIANCE NOTIFICATION-GROUP OBJECT-GROUP |
| SNMPv2-SMI | Gauge32 MODULE-IDENTITY NOTIFICATION-TYPE OBJECT-TYPE Unsigned32 |
| SNMPv2-TC | RowStatus StorageType TruthValue |
Objects (106)
ciscoTrustSecSxpMIB
|
.1.3.6.1.4.1.9.9.720 |
|
|
ciscoTrustSecSxpMIBNotifs
|
.1.3.6.1.4.1.9.9.720.0 |
|
|
ciscoTrustSecSxpMIBObjects
|
.1.3.6.1.4.1.9.9.720.1 |
|
|
ctsxSxpGlobalObjects
|
.1.3.6.1.4.1.9.9.720.1.1 |
|
ctsxSxpEnable
r/w
|
SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.720.1.1.1 |
|
ctsxSxpBindingChangesLogEnable
r/w
|
SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.720.1.1.10 |
|
ctsxSgtMapExpansionLimit
r/w
|
SNMPv2-SMIGauge32 | .1.3.6.1.4.1.9.9.720.1.1.11 |
|
ctsxSgtMapExpansionCount
|
SNMPv2-SMIGauge32 | .1.3.6.1.4.1.9.9.720.1.1.12 |
|
ctsxSxpAdminNodeId
r/w
|
Unsigned32 | .1.3.6.1.4.1.9.9.720.1.1.13 |
|
ctsxSxpNodeIdInterface
r/w
|
IF-MIBInterfaceIndexOrZero | .1.3.6.1.4.1.9.9.720.1.1.14 |
|
ctsxSxpNodeIdIpAddrType
r/w
|
INET-ADDRESS-MIBInetAddressType | .1.3.6.1.4.1.9.9.720.1.1.15 |
|
ctsxSxpNodeIdIpAddr
r/w
|
INET-ADDRESS-MIBInetAddress | .1.3.6.1.4.1.9.9.720.1.1.16 |
|
ctsxSxpOperNodeId
|
Unsigned32 | .1.3.6.1.4.1.9.9.720.1.1.17 |
|
ctsxSxpSpeakerMinHoldTime
r/w
|
secondsUnsigned32 | .1.3.6.1.4.1.9.9.720.1.1.18 |
|
ctsxSxpListenerMinHoldTime
r/w
|
secondsUnsigned32 | .1.3.6.1.4.1.9.9.720.1.1.19 |
|
ctsxSxpConfigDefaultPasswordType
r/w
|
CISCO-TRUSTSEC-TC-MIBCtsPasswordEncryptionType | .1.3.6.1.4.1.9.9.720.1.1.2 |
|
ctsxSxpListenerMaxHoldTime
r/w
|
secondsUnsigned32 | .1.3.6.1.4.1.9.9.720.1.1.20 |
|
ctsxSxpVersionSupport
|
Enumeration | .1.3.6.1.4.1.9.9.720.1.1.21 |
|
ctsxSxpConfigDefaultPassword
r/w
|
CISCO-TRUSTSEC-TC-MIBCtsPassword | .1.3.6.1.4.1.9.9.720.1.1.3 |
|
ctsxSxpViewDefaultPasswordType
|
CISCO-TRUSTSEC-TC-MIBCtsPasswordEncryptionType | .1.3.6.1.4.1.9.9.720.1.1.4 |
|
ctsxSxpViewDefaultPassword
|
CISCO-TRUSTSEC-TC-MIBCtsPassword | .1.3.6.1.4.1.9.9.720.1.1.5 |
|
ctsxSxpDefaultSourceAddrType
r/w
|
INET-ADDRESS-MIBInetAddressType | .1.3.6.1.4.1.9.9.720.1.1.6 |
|
ctsxSxpDefaultSourceAddr
r/w
|
INET-ADDRESS-MIBInetAddress | .1.3.6.1.4.1.9.9.720.1.1.7 |
|
ctsxSxpRetryPeriod
r/w
|
secondsUnsigned32 | .1.3.6.1.4.1.9.9.720.1.1.8 |
|
ctsxSxpReconPeriod
r/w
|
secondsUnsigned32 | .1.3.6.1.4.1.9.9.720.1.1.9 |
|
ctsxSxpConnectionObjects
|
.1.3.6.1.4.1.9.9.720.1.2 |
|
ctsxSxpConnectionTable
|
.1.3.6.1.4.1.9.9.720.1.2.1 |
|
ctsxSxpConnectionEntry
|
ctsxSxpConnVrfNamectsxSxpConnPeerAddrTypectsxSxpConnPeerAddr | .1.3.6.1.4.1.9.9.720.1.2.1.1 |
ctsxSxpConnVrfName
|
CISCO-TCCiscoVrfName | .1.3.6.1.4.1.9.9.720.1.2.1.1.1 |
|
ctsxSxpConnConfigPassword
r/w
|
CISCO-TRUSTSEC-TC-MIBCtsPassword | .1.3.6.1.4.1.9.9.720.1.2.1.1.10 |
|
ctsxSxpConnViewPasswordType
|
CISCO-TRUSTSEC-TC-MIBCtsPasswordEncryptionType | .1.3.6.1.4.1.9.9.720.1.2.1.1.11 |
|
ctsxSxpConnViewPassword
|
CISCO-TRUSTSEC-TC-MIBCtsPassword | .1.3.6.1.4.1.9.9.720.1.2.1.1.12 |
|
ctsxSxpConnModeLocation
r/w
|
Enumeration | .1.3.6.1.4.1.9.9.720.1.2.1.1.13 |
|
ctsxSxpConnMode
r/w
|
Enumeration | .1.3.6.1.4.1.9.9.720.1.2.1.1.14 |
|
ctsxSxpConnInstance
|
Unsigned32 | .1.3.6.1.4.1.9.9.720.1.2.1.1.15 |
|
ctsxSxpConnStatusLastChange
|
secondsUnsigned32 | .1.3.6.1.4.1.9.9.720.1.2.1.1.16 |
|
ctsxSxpConnStatus
|
CISCO-TRUSTSEC-TC-MIBCtsSxpConnectionStatus | .1.3.6.1.4.1.9.9.720.1.2.1.1.17 |
|
ctsxSxpVrfId
|
Unsigned32 | .1.3.6.1.4.1.9.9.720.1.2.1.1.18 |
|
ctsxSxpConnStorageType
r/w
|
SNMPv2-TCStorageType | .1.3.6.1.4.1.9.9.720.1.2.1.1.19 |
|
ctsxSxpConnPeerAddrType
|
INET-ADDRESS-MIBInetAddressType | .1.3.6.1.4.1.9.9.720.1.2.1.1.2 |
|
ctsxSxpConnRowStatus
r/w
|
SNMPv2-TCRowStatus | .1.3.6.1.4.1.9.9.720.1.2.1.1.20 |
|
ctsxSxpConnVersion
|
Enumeration | .1.3.6.1.4.1.9.9.720.1.2.1.1.21 |
|
ctsxSxpConnSpeakerMinHoldTime
r/w
|
secondsUnsigned32 | .1.3.6.1.4.1.9.9.720.1.2.1.1.22 |
|
ctsxSxpConnListenerMinHoldTime
r/w
|
secondsUnsigned32 | .1.3.6.1.4.1.9.9.720.1.2.1.1.23 |
|
ctsxSxpConnListenerMaxHoldTime
r/w
|
secondsUnsigned32 | .1.3.6.1.4.1.9.9.720.1.2.1.1.24 |
|
ctsxSxpConnHoldTime
|
secondsUnsigned32 | .1.3.6.1.4.1.9.9.720.1.2.1.1.25 |
|
ctsxSxpConnCapability
|
Bits | .1.3.6.1.4.1.9.9.720.1.2.1.1.26 |
|
ctsxSxpConnBiDirListenerStatus
|
CISCO-TRUSTSEC-TC-MIBCtsSxpConnectionStatus | .1.3.6.1.4.1.9.9.720.1.2.1.1.27 |
|
ctsxSxpConnBiDirListenerHoldTime
|
secondsUnsigned32 | .1.3.6.1.4.1.9.9.720.1.2.1.1.28 |
|
ctsxSxpConnPeerAddr
|
OctetString | .1.3.6.1.4.1.9.9.720.1.2.1.1.3 |
|
ctsxSxpConnSourceAddrType
r/w
|
INET-ADDRESS-MIBInetAddressType | .1.3.6.1.4.1.9.9.720.1.2.1.1.4 |
|
ctsxSxpConnSourceAddr
r/w
|
INET-ADDRESS-MIBInetAddress | .1.3.6.1.4.1.9.9.720.1.2.1.1.5 |
|
ctsxSxpConnOperSourceAddrType
|
INET-ADDRESS-MIBInetAddressType | .1.3.6.1.4.1.9.9.720.1.2.1.1.6 |
|
ctsxSxpConnOperSourceAddr
|
INET-ADDRESS-MIBInetAddress | .1.3.6.1.4.1.9.9.720.1.2.1.1.7 |
|
ctsxSxpConnPasswordUsed
r/w
|
Enumeration | .1.3.6.1.4.1.9.9.720.1.2.1.1.8 |
|
ctsxSxpConnConfigPasswordType
r/w
|
CISCO-TRUSTSEC-TC-MIBCtsPasswordEncryptionType | .1.3.6.1.4.1.9.9.720.1.2.1.1.9 |
|
ctsxSxpSgtObjects
|
.1.3.6.1.4.1.9.9.720.1.3 |
|
|
ctsxIpSgtMappingTable
|
.1.3.6.1.4.1.9.9.720.1.3.1 |
|
|
ctsxIpSgtMappingEntry
|
ctsxIpSgtMappingVrfIdctsxIpSgtMappingAddrTypectsxIpSgtMappingAddrctsxIpSgtMappingPeerAddrTypectsxIpSgtMappingPeerAddr | .1.3.6.1.4.1.9.9.720.1.3.1.1 |
|
ctsxIpSgtMappingVrfId
|
Unsigned32 | .1.3.6.1.4.1.9.9.720.1.3.1.1.1 |
|
ctsxIpSgtMappingAddrType
|
INET-ADDRESS-MIBInetAddressType | .1.3.6.1.4.1.9.9.720.1.3.1.1.2 |
|
ctsxIpSgtMappingAddr
|
OctetString | .1.3.6.1.4.1.9.9.720.1.3.1.1.3 |
|
ctsxIpSgtMappingPeerAddrType
|
INET-ADDRESS-MIBInetAddressType | .1.3.6.1.4.1.9.9.720.1.3.1.1.4 |
|
ctsxIpSgtMappingPeerAddr
|
OctetString | .1.3.6.1.4.1.9.9.720.1.3.1.1.5 |
|
ctsxIpSgtMappingSgt
|
CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag | .1.3.6.1.4.1.9.9.720.1.3.1.1.6 |
|
ctsxIpSgtMappingInstance
|
Unsigned32 | .1.3.6.1.4.1.9.9.720.1.3.1.1.7 |
|
ctsxIpSgtMappingVrfName
|
CISCO-TCCiscoVrfName | .1.3.6.1.4.1.9.9.720.1.3.1.1.8 |
|
ctsxIpSgtMappingStatus
|
Enumeration | .1.3.6.1.4.1.9.9.720.1.3.1.1.9 |
|
ctsxSxpSgtMapTable
|
.1.3.6.1.4.1.9.9.720.1.3.2 |
|
|
ctsxSxpSgtMapEntry
|
ctsxSxpSgtMapVrfIdctsxSxpSgtMapAddrTypectsxSxpSgtMapAddrctsxSxpSgtMapAddrPrefixLengthctsxSxpSgtMapPeerAddrTypectsxSxpSgtMapPeerAddr | .1.3.6.1.4.1.9.9.720.1.3.2.1 |
|
ctsxSxpSgtMapVrfId
|
Unsigned32 | .1.3.6.1.4.1.9.9.720.1.3.2.1.1 |
|
ctsxSxpSgtMapPeerSeq
|
OctetString | .1.3.6.1.4.1.9.9.720.1.3.2.1.10 |
|
ctsxSxpSgtMapStatus
|
Enumeration | .1.3.6.1.4.1.9.9.720.1.3.2.1.11 |
|
ctsxSxpSgtMapAddrType
|
INET-ADDRESS-MIBInetAddressType | .1.3.6.1.4.1.9.9.720.1.3.2.1.2 |
|
ctsxSxpSgtMapAddr
|
OctetString | .1.3.6.1.4.1.9.9.720.1.3.2.1.3 |
|
ctsxSxpSgtMapAddrPrefixLength
|
INET-ADDRESS-MIBInetAddressPrefixLength | .1.3.6.1.4.1.9.9.720.1.3.2.1.4 |
|
ctsxSxpSgtMapPeerAddrType
|
INET-ADDRESS-MIBInetAddressType | .1.3.6.1.4.1.9.9.720.1.3.2.1.5 |
|
ctsxSxpSgtMapPeerAddr
|
OctetString | .1.3.6.1.4.1.9.9.720.1.3.2.1.6 |
|
ctsxSxpSgtMapSgt
|
CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag | .1.3.6.1.4.1.9.9.720.1.3.2.1.7 |
|
ctsxSxpSgtMapInstance
|
Unsigned32 | .1.3.6.1.4.1.9.9.720.1.3.2.1.8 |
|
ctsxSxpSgtMapVrfName
|
CISCO-TCCiscoVrfName | .1.3.6.1.4.1.9.9.720.1.3.2.1.9 |
|
ciscoTrustSecSxpMIBNotifsControl
|
.1.3.6.1.4.1.9.9.720.1.4 |
|
|
ctsxSxpConnSourceAddrErrNotifEnable
r/w
|
SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.720.1.4.1 |
|
ctsxSxpMsgParseErrNotifEnable
r/w
|
SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.720.1.4.2 |
|
ctsxSxpConnConfigErrNotifEnable
r/w
|
SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.720.1.4.3 |
|
ctsxSxpBindingErrNotifEnable
r/w
|
SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.720.1.4.4 |
|
ctsxSxpConnUpNotifEnable
r/w
|
SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.720.1.4.5 |
|
ctsxSxpConnDownNotifEnable
r/w
|
SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.720.1.4.6 |
|
ctsxSxpExpansionFailNotifEnable
r/w
|
SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.720.1.4.7 |
|
ctsxSxpOperNodeIdChangeNotifEnable
r/w
|
SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.720.1.4.8 |
|
ctsxSxpBindingConflictNotifEnable
r/w
|
SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.720.1.4.9 |
|
ciscoTrustSecSxpMIBNotifsOnlyInfo
|
.1.3.6.1.4.1.9.9.720.1.5 |
|
|
ctsxSgtMapExpansionVrf
|
CISCO-TCCiscoVrfName | .1.3.6.1.4.1.9.9.720.1.5.1 |
|
ctsxSgtMapConflictingNewSgt
|
CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag | .1.3.6.1.4.1.9.9.720.1.5.10 |
|
ctsxSxpOldOperNodeId
|
Unsigned32 | .1.3.6.1.4.1.9.9.720.1.5.11 |
|
ctsxSgtMapExpansionAddrType
|
INET-ADDRESS-MIBInetAddressType | .1.3.6.1.4.1.9.9.720.1.5.2 |
|
ctsxSgtMapExpansionAddr
|
INET-ADDRESS-MIBInetAddress | .1.3.6.1.4.1.9.9.720.1.5.3 |
|
ctsxSgtMapExpansionAddrPrefixLength
|
INET-ADDRESS-MIBInetAddressPrefixLength | .1.3.6.1.4.1.9.9.720.1.5.4 |
|
ctsxSxpNotifErrMsg
|
SNMP-FRAMEWORK-MIBSnmpAdminString | .1.3.6.1.4.1.9.9.720.1.5.5 |
|
ctsxSgtMapConflictingVrfName
|
CISCO-TCCiscoVrfName | .1.3.6.1.4.1.9.9.720.1.5.6 |
|
ctsxSgtMapConflictingAddrType
|
INET-ADDRESS-MIBInetAddressType | .1.3.6.1.4.1.9.9.720.1.5.7 |
|
ctsxSgtMapConflictingAddr
|
INET-ADDRESS-MIBInetAddress | .1.3.6.1.4.1.9.9.720.1.5.8 |
|
ctsxSgtMapConflictingOldSgt
|
CISCO-TRUSTSEC-TC-MIBCtsSecurityGroupTag | .1.3.6.1.4.1.9.9.720.1.5.9 |
|
ciscoTrustSecSxpMIBConform
|
.1.3.6.1.4.1.9.9.720.2 |
|
|
ciscoTrustSecSxpMIBCompliances
|
.1.3.6.1.4.1.9.9.720.2.1 |
|
|
ciscoTrustSecSxpMIBGroups
|
.1.3.6.1.4.1.9.9.720.2.2 |
Notifications / Traps (9)
| Name | OID | Description |
|---|---|---|
ctsxSxpConnSourceAddrErrNotif
|
.1.3.6.1.4.1.9.9.720.0.1 |
A ctsxSxpConnSourceAddrErrNotif is generated if the system is not able to establish SXP connection using ctsxSxpConnOperSourceAddr. |
|
ctsxSxpMsgParseErrNotif
|
.1.3.6.1.4.1.9.9.720.0.2 |
A ctsxSxpMsgParseErrNotif is generated if the system is not able to parse a received SXP message. |
|
ctsxSxpConnConfigErrNotif
|
.1.3.6.1.4.1.9.9.720.0.3 |
A ctsxSxpConnConfigErrNotif is generated if the system detects a configuration error for an SXP connection. |
|
ctsxSxpBindingErrNotif
|
.1.3.6.1.4.1.9.9.720.0.4 |
A ctsxSxpBindingErrNotif is generated if the address in the SGT mapping is not found in routing and forwarding table of the system. |
|
ctsxSxpConnUpNotif
|
.1.3.6.1.4.1.9.9.720.0.5 |
A ctsxSxpConnUpNotif is generated if the ctsxSxpConnStatus for an SXP connection transitioned into 'on' state. |
|
ctsxSxpConnDownNotif
|
.1.3.6.1.4.1.9.9.720.0.6 |
A ctsxSxpConnDownNotif is generated if ctsxSxpConnStatus for an SXP connection left the 'on' state and transitioned into some other state. |
|
ctsxSxpExpansionFailNotif
|
.1.3.6.1.4.1.9.9.720.0.7 |
A ctsxSxpExpansionFailNotif is generated if the number of expanded SGT maps reaches the configured limit and the received SGT mapping can not be expanded. |
|
ctsxSxpOperNodeIdChangeNotif
|
.1.3.6.1.4.1.9.9.720.0.8 |
A ctsxSxpOperNodeIdChangeNotif is generated if the value of ctsxSxpOperNodeId changes. |
|
ctsxSxpBindingConflictNotif
|
.1.3.6.1.4.1.9.9.720.0.9 |
A ctsxSxpBindingConflictNotif is generated if the device receives conflicting SGT mapping information. |