CISCO-TRUSTSEC-INTERFACE-MIB
- Registered at
- 1.3.6.1.4.1.9.9.740
- Last updated
- 2014-01-28 00:00
- Organization
- Cisco Systems, Inc.
- Revisions
- 2014-01-28 00:00, 2012-04-06 00:00, 2010-05-28 00:00
- Namespace
- cisco
- Source file
CISCO-TRUSTSEC-INTERFACE-MIB- Digest
sha256:55c5b35b6c2c288e31abd1c13ae238e79195b338bbc61e55cf052eaf32ed30b2
Description
This MIB module defines management objects for configuration and monitoring of the interfaces in Cisco Trusted Security environment. Glossary: ACS - Cisco Secure Access Control Server IFC - TrustSec Interface Controller MACSec - Media Access Control (MAC) Security PMK - Pairwise Master Key SAP - Security Association Protocol SGT - Security Group Tag. A tag identifying its source, assigned to a packet on ingress to a TrustSec cloud, and used to determine security and other policy to be applied to it along its path through the cloud. TrustSec - Cisco Trusted Security
Contact
Cisco Systems Customer Service Postal: 170 W Tasman Drive San Jose, CA 95134 USA Tel: +1 800 553-NETS E-mail: cs-lan-switch-snmp@cisco.com
Imports
| From | Symbols |
|---|---|
| CISCO-SMI | ciscoMgmt |
| CISCO-TRUSTSEC-TC-MIB | CtsSecurityGroupTag |
| IF-MIB | ifIndex, ifName |
| SNMP-FRAMEWORK-MIB | SnmpAdminString |
| SNMPv2-CONF | MODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP |
| SNMPv2-SMI | Counter32, Integer32, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso |
| SNMPv2-TC | DateAndTime, DisplayString, RowStatus, StorageType, TEXTUAL-CONVENTION, TruthValue |
Imported by
Nothing in this corpus imports this module.
Load order
Every file a consumer needs in order to load this module, dependencies first.
CISCO-SMI CISCO-TRUSTSEC-INTERFACE-MIB CISCO-TRUSTSEC-TC-MIB IANAifType-MIB IF-MIB SNMP-FRAMEWORK-MIB SNMPv2-CONF SNMPv2-MIB SNMPv2-SMI SNMPv2-TC
Textual conventions
| Name | OID | Syntax | Access | Status |
|---|---|---|---|---|
| CtsSapNegMode TEXTUAL-CONVENTION The SAP negotiation modes supported in TrustSec system. encapNoAuthenNoEncrypt - Encapsulation present, no authentication, no encryption. gcmAuthenNoEncrypt - GCM authentication, no encryption. gcmAuthenGcmEncrypt - GCM authentication, GCM encryption. noEncap - No encapsulation. | current | |||
| CtsSapNegModeList TEXTUAL-CONVENTION The list of SAP negotiation modes provided within TrustSec (Cisco Trusted Security) system. Each octet represents a SAP negotiation mode which is defined in CtsSapNegMode. The DESCRIPTION clause of CtsSapNegModeList objects must fully describe the relationship between modes. | current | |||
| CtsiCasheDataSource TEXTUAL-CONVENTION The source of cached authorization data. unknown - cache source type not covered by any of the follow enumerations. acs - authorization data is loaded from ACS dram - authorization data is loaded from DRAM. nvram - authorization data is loaded from NVRAM. dramOrNvram - authorization data is loaded from DRAM or NVRAM. | current | |||
| CtsiInterfaceControllerState TEXTUAL-CONVENTION The state of the TrustSec Interface Controller state machine. unknown - none of the following states. initializing - the TrustSec interface controller state machine enter the initialize state when TrustSec is enabled on this interface. authenticating - the peer is being authenticated if the dot1x mode is enabled. authorizing - the peer is being authorized. sapNegotiating - the SA(Security Association) is being negotiated with the peer. open - the line is up from TrustSec perspective. held - a hold down timer is set. disconnecting - a failure has occurred, or the TrustSec link is going down, or TrustSec is being disabled. invalid - unable to start the TrustSec state machine. licenseError - No MACSec software license. | current |
Objects
| Name | OID | Syntax | Access | Status |
|---|---|---|---|---|
| ciscoTrustSecIfMIBNotifs OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.740.0 | |||
| ciscoTrustSecIfMIBObjects OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.740.1 | |||
| ctsiIfConfigObjects OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.740.1.1 | |||
| ctsiIfConfigTable OBJECT-TYPE A list of the TrustSec capable interfaces. | 1.3.6.1.4.1.9.9.740.1.1.1 | not-accessible | current | |
| ctsiIfConfigEntry OBJECT-TYPE An entry contains the configuration information for a particular TrustSec interface. | 1.3.6.1.4.1.9.9.740.1.1.1.1 | not-accessible | current | |
| ctsiIfModeCapability OBJECT-TYPE This object indicates the supported TrustSec mode on this interface. | 1.3.6.1.4.1.9.9.740.1.1.1.1.1 | Bits {dot1x(0), manual(1), l3Forward(2)} | read-only | current |
| ctsiIfConfiguredMode OBJECT-TYPE This object indicates the TrustSec mode currently configured on the interface. Each mode may have a corresponding entry in its corresponding configuration table. unknown - The configured TrustSec mode is none of the following. none - TrustSec is not configured in any mode. dot1x - TrustSec dot1x mode is configured for this interface. TrustSec system will use 802.1x for authentication, RADIUS for authorization and SAP negotiation for SA parameter. manual - TrustSec manual mode is configured for this interface. The authentication was bypassed in manual mode. User needs to manually to configure the policy and the SAP negotiation parameter. l3Forward - TrustSec L3 forwarding mode is configured for this interface. | 1.3.6.1.4.1.9.9.740.1.1.1.1.2 | INTEGER {unknown(1), none(2), dot1x(3), manual(4), l3Forward(5)} | read-only | current |
| ctsiIfCacheClear OBJECT-TYPE This object allows user to clear the cache for the specific TrustSec interface by setting the value to 'true'. Setting the value to 'false' has no effect. When read, this object always returns 'false'. | 1.3.6.1.4.1.9.9.740.1.1.1.1.3 | TruthValue | read-write | current |
| ctsiIfRekey OBJECT-TYPE This object allows user to re-generate the SAP key for the specific TrustSec interface by setting the value to 'true'. Setting the value to 'false' has no effect. When read, this object always returns 'false'. | 1.3.6.1.4.1.9.9.740.1.1.1.1.4 | TruthValue | read-write | current |
| ctsiIfDot1xObjects OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.740.1.2 | |||
| ctsiIfDot1xTable OBJECT-TYPE A list of the interfaces which have TrustSec dot1x mode configuration information. | 1.3.6.1.4.1.9.9.740.1.2.1 | not-accessible | current | |
| ctsiIfDot1xEntry OBJECT-TYPE An entry containing the TrustSec dot1x configuration for a particular interface. An entry can be created or deleted by using ctsiIfDot1xRowStatus. An entry can only be created if the value of corresponding instance of ctsiIfConfiguredMode is 'none' and the 'dot1x' BIT of corresponding instance ctsiIfModeCapability is set. | 1.3.6.1.4.1.9.9.740.1.2.1.1 | not-accessible | current | |
| ctsiIfDot1xSgtPropagateEnabled OBJECT-TYPE This object specifies whether the SGT propagation is enabled on this interface. | 1.3.6.1.4.1.9.9.740.1.2.1.1.1 | TruthValue | read-create | current |
| ctsiIfDot1xReauthInterval OBJECT-TYPE This object specifies the re-authentication interval applied to this interface when it is not provided from the ACS. | 1.3.6.1.4.1.9.9.740.1.2.1.1.2 | Integer32 | read-create | current |
| ctsiIfDot1xSapModeList OBJECT-TYPE This object specifies the advertised modes for the SAP negotiation on this interface. Modes are executed in the order as specified in the mode list. Mode which is at the beginning of the method list will be executed first. Method which is at the end of mode list will be executed last. This object is not allowed to be set to a zero length string. | 1.3.6.1.4.1.9.9.740.1.2.1.1.3 | CtsSapNegModeList | read-create | current |
| ctsiIfDot1xDownloadReauthInterval OBJECT-TYPE This object indicates the re-authentication interval which is downloaded from ACS. A value of zero indicates no re-authentication interval is downloaded from ACS. A value of -1 indicates that this object is not applicable on this interface. | 1.3.6.1.4.1.9.9.740.1.2.1.1.4 | Integer32 (-1..2147483647) | read-only | current |
| ctsiIfDot1xOperReauthInterval OBJECT-TYPE This object indicates the operational re-authentication interval of the interface. A value of zero indicates that dot1x re-authentication is disabled on this interface. A value of -1 indicates that this object is not applicable on this interface. | 1.3.6.1.4.1.9.9.740.1.2.1.1.5 | Integer32 (-1..2147483647) | read-only | current |
| ctsiIfDot1xReauthTimeLeft OBJECT-TYPE This object indicates the leftover time of the current authentication session. A value of zero indicates the re-authentication is in progress. A value of -1 indicates that this object is not applicable on this interface. | 1.3.6.1.4.1.9.9.740.1.2.1.1.6 | Integer32 (-1..2147483647) | read-only | current |
| ctsiIfDot1xStorageType OBJECT-TYPE The storage type for this conceptual row. | 1.3.6.1.4.1.9.9.740.1.2.1.1.7 | StorageType | read-create | current |
| ctsiIfDot1xRowStatus OBJECT-TYPE The status of this conceptual row. All writable objects in this row may be modified at any time. | 1.3.6.1.4.1.9.9.740.1.2.1.1.8 | RowStatus | read-create | current |
| ctsiIfManualObjects OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.740.1.3 | |||
| ctsiIfManualTable OBJECT-TYPE A list of the interfaces which have TrustSec manual mode configuration information. | 1.3.6.1.4.1.9.9.740.1.3.1 | not-accessible | current | |
| ctsiIfManualEntry OBJECT-TYPE An entry containing the TrustSec manual configuration information for a particular interface. An entry can be created or deleted by using ctsiIfManualRowStatus. An entry can only be created if the value of corresponding instance of ctsiIfConfiguredMode is 'none' and the 'manual' BIT of corresponding instance ctsiIfModeCapability is set. | 1.3.6.1.4.1.9.9.740.1.3.1.1 | not-accessible | current | |
| ctsiIfManualDynamicPeerId OBJECT-TYPE This object specifies the peer's device identity which is used to obtain the desired policy for authorization request. Setting a none-zero value on this object is not allowed if the value of ctsiIfManualStaticSgt is not set to zero. A zero length string indicates that the policy acquisition from the ACS using the peer's identity is disabled on this interface. | 1.3.6.1.4.1.9.9.740.1.3.1.1.1 | SnmpAdminString | read-create | current |
| ctsiIfManualStaticSgt OBJECT-TYPE This object specifies the statically configured SGT for tagging the ingress traffic from the peer. Setting a none-zero value on this object is not allowed if the value of ctsiIfManualDynamicPeerId is not set to a zero length string. A value of zero indicates that no statically SGT tagging. | 1.3.6.1.4.1.9.9.740.1.3.1.1.2 | CtsSecurityGroupTag | read-create | current |
| ctsiIfManualStaticSgtTrusted OBJECT-TYPE This object specifies the peer's SGT assignment trust state. This object only can be set when ctsiIfManualStaticSgt is none-zero. | 1.3.6.1.4.1.9.9.740.1.3.1.1.3 | TruthValue | read-create | current |
| ctsiIfManualSgtPropagateEnabled OBJECT-TYPE This object specifies whether the SGT propagation is enabled on this interface. | 1.3.6.1.4.1.9.9.740.1.3.1.1.4 | TruthValue | read-create | current |
| ctsiIfManualSapPmk OBJECT-TYPE This object specifies the PMK used by SAP. A zero length string for this object indicates the SAP negotiation is disabled on this interface. | 1.3.6.1.4.1.9.9.740.1.3.1.1.5 | OCTET STRING (SIZE(0 | 32)) | read-create | current |
| ctsiIfManualSapModeList OBJECT-TYPE This object specified the advertised modes for the SAP negotiation on this interface. Modes are executed in the order as specified in the mode list. Mode which is at the beginning of the mode list will be executed first. Mode which is at the end of mode list will be executed last. Value of this object will becomes zero length octet if SAP negotiation is disabled. This object is not allowed to be set to a zero length string. | 1.3.6.1.4.1.9.9.740.1.3.1.1.6 | CtsSapNegModeList | read-create | current |
| ctsiIfManualStorageType OBJECT-TYPE The storage type for this conceptual row. | 1.3.6.1.4.1.9.9.740.1.3.1.1.7 | StorageType | read-create | current |
| ctsiIfManualRowStatus OBJECT-TYPE The status of this conceptual row. All writable objects in this row may be modified at any time. | 1.3.6.1.4.1.9.9.740.1.3.1.1.8 | RowStatus | read-create | current |
| ctsiIfL3ForwardObjects OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.740.1.4 | |||
| ctsiIfL3ForwardTable OBJECT-TYPE A list of the interfaces which have TrustSec L3 forwarding configuration information. | 1.3.6.1.4.1.9.9.740.1.4.1 | not-accessible | current | |
| ctsiIfL3ForwardEntry OBJECT-TYPE An entry containing the TrustSec L3 forwarding configuration information for a particular interface. An entry can be created or deleted by using ctsiIfL3ForwardRowStatus. An entry can only be created if the value of corresponding instance of ctsiIfConfiguredMode is 'none' and the 'l3Forward' BIT of corresponding instance ctsiIfModeCapability is set. | 1.3.6.1.4.1.9.9.740.1.4.1.1 | not-accessible | current | |
| ctsiIfL3ForwardMode OBJECT-TYPE This object specifies the type of L3 forwarding for the interface. l3Ipv4Forward - TrustSec L3 IPv4 forwarding. l3Ipv6Forward - TrustSec L3 IPv6 forwarding. l3IpForward - TrustSec L3 IPv6 and IPv4 forwarding. | 1.3.6.1.4.1.9.9.740.1.4.1.1.1 | INTEGER {l3Ipv4Forward(1), l3Ipv6Forward(2), l3IpForward(3)} | read-create | current |
| ctsiIfL3ForwardStorageType OBJECT-TYPE The storage type for this conceptual row. | 1.3.6.1.4.1.9.9.740.1.4.1.1.2 | StorageType | read-create | current |
| ctsiIfL3ForwardRowStatus OBJECT-TYPE The status of this conceptual row. All writable objects in this row may be modified at any time. | 1.3.6.1.4.1.9.9.740.1.4.1.1.3 | RowStatus | read-create | current |
| ctsiIfStatusObjects OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.740.1.5 | |||
| ctsiIfStatusTable OBJECT-TYPE A list of TrustSec enabled interfaces. | 1.3.6.1.4.1.9.9.740.1.5.1 | not-accessible | current | |
| ctsiIfStatusEntry OBJECT-TYPE An entry contains the information of the specific TrustSec interface. A entry is created by system when TrustSec is enabled for an interface. An entry is deleted by system if TrustSec is disabled for an interface. | 1.3.6.1.4.1.9.9.740.1.5.1.1 | not-accessible | current | |
| ctsiIfControllerState OBJECT-TYPE This object indicates the current IFC state of this interface. | 1.3.6.1.4.1.9.9.740.1.5.1.1.1 | CtsiInterfaceControllerState | read-only | current |
| ctsiIfAuthenticationStatus OBJECT-TYPE This object indicates the current TrustSec authentication status of this interface. unknown - status not covered by any of the follow enumerations. succeeded - authentication is succeeded. rejected - authentication is rejected. logOff - peer logged off. noRespond - peer no respond. notApplicable - bypassing the authentication. incomplete - authentication is not completed. failed - authentication failed. | 1.3.6.1.4.1.9.9.740.1.5.1.1.2 | INTEGER {unknown(1), succeeded(2), rejected(3), logOff(4), noRespond(5), notApplicable(6), incomplete(7), failed(8)} | read-only | current |
| ctsiIfPeerId OBJECT-TYPE This object indicates the device identity or symbolic group name of the remote peer. | 1.3.6.1.4.1.9.9.740.1.5.1.1.3 | SnmpAdminString | read-only | current |
| ctsiIfPeerAdvCapability OBJECT-TYPE This object indicates the advertised capabilities of the remote peer associated with this interface. | 1.3.6.1.4.1.9.9.740.1.5.1.1.4 | Bits {sap(0)} | read-only | current |
| ctsiIfAuthorizationStatus OBJECT-TYPE This object indicates the current TrustSec authorization status of the interface. unknown - status not covered by any of the follow enumerations. inProgress - authorization in progress. succeeded - authorization succeeded. failed - authorization failed. fallBackPolicy - apply the fallback policy. incomplete - authorization aborted. peerSucceeded - apply the peer policy succeeded. rbaclSucceeded - apply the RBACL policy succeeded. policySucceeded - apply the all policy succeeded. | 1.3.6.1.4.1.9.9.740.1.5.1.1.5 | INTEGER {unknown(1), inProgress(2), succeeded(3), failed(4), fallBackPolicy(5), incomplete(6), peerSucceeded(7), rbaclSucceeded(8), policySucceeded(9)} | read-only | current |
| ctsiIfPeerSgt OBJECT-TYPE This object indicates the SGT value of the remote peer. | 1.3.6.1.4.1.9.9.740.1.5.1.1.6 | CtsSecurityGroupTag | read-only | current |
| ctsiIfPeerSgtTrusted OBJECT-TYPE This object indicates whether the SGT of the remote peer is trusted. | 1.3.6.1.4.1.9.9.740.1.5.1.1.7 | TruthValue | read-only | current |
| ctsiIfSapNegotiationStatus OBJECT-TYPE This object indicates the SAP negotiation status on this interface. notApplicable - SAP disabled on local or remote peer is not SAP capable. unknown - status not covered by any of the follow enumerations. inProgress - SAP negotiation in progress. succeeded - SAP negotiation completed. failed - SAP negotiation failed. licenseError - No MACSec software license. | 1.3.6.1.4.1.9.9.740.1.5.1.1.8 | INTEGER {notApplicable(1), unknown(2), inProgress(3), succeeded(4), failed(5), licenseError(6)} | read-only | current |
| ctsiIfSapNegModeList OBJECT-TYPE This object indicates the operational SAP negotiation mode list on this interface. | 1.3.6.1.4.1.9.9.740.1.5.1.1.9 | CtsSapNegModeList | read-only | current |
| ctsiIfCacheExpirationTime OBJECT-TYPE This object indicates the time when the current cached data applied on the interface will be expired. A value of zero indicates that the cached data will never be expired. | 1.3.6.1.4.1.9.9.740.1.5.1.1.10 | DateAndTime | read-only | current |
| ctsiIfCacheDataSource OBJECT-TYPE This object indicates the source of cached data applied to the interface. | 1.3.6.1.4.1.9.9.740.1.5.1.1.11 | CtsiCasheDataSource | read-only | current |
| ctsiIfCriticalAuthStatus OBJECT-TYPE This object indicates the CTS Critical-Auth status of interface. disable - link is not in Critical-Auth mode. cache - link is in Critical-Auth cached mode. default - link is in Critical-Auth default mode. | 1.3.6.1.4.1.9.9.740.1.5.1.1.12 | INTEGER {disable(1), cache(2), default(3)} | read-only | current |
| ctsiIfStatsObjects OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.740.1.6 | |||
| ctsiIfStatsTable OBJECT-TYPE A list of Cisco Trusted Security capable interface. | 1.3.6.1.4.1.9.9.740.1.6.1 | not-accessible | current | |
| ctsiIfStatsEntry OBJECT-TYPE An entry contains the statistics information of a particular TrustSec interface. An entry created by system for each interface is TrustSec enabled. An entry deleted by system for each interface is TrustSec disabled. | 1.3.6.1.4.1.9.9.740.1.6.1.1 | not-accessible | current | |
| ctsiIfAuthenticationSuccess OBJECT-TYPE The number of times that peer has been successfully authenticated on this interface. | 1.3.6.1.4.1.9.9.740.1.6.1.1.1 | Counter32 | read-only | current |
| ctsiIfAuthenticationReject OBJECT-TYPE The number of times that peer has been rejected in authentication on this interface. | 1.3.6.1.4.1.9.9.740.1.6.1.1.2 | Counter32 | read-only | current |
| ctsiIfAuthenticationFailure OBJECT-TYPE The number of times that peer has been failed in authentication on this interface. | 1.3.6.1.4.1.9.9.740.1.6.1.1.3 | Counter32 | read-only | current |
| ctsiIfAuthenticationNoResponse OBJECT-TYPE The number of times that no authentication respond received from the remote peer associated with this interface. | 1.3.6.1.4.1.9.9.740.1.6.1.1.4 | Counter32 | read-only | current |
| ctsiIfAuthenticationLogoff OBJECT-TYPE The number of times that received authentication log off from the peer associated with this interface. | 1.3.6.1.4.1.9.9.740.1.6.1.1.5 | Counter32 | read-only | current |
| ctsiIfAuthorizationSuccess OBJECT-TYPE The number of times that the peer entity successfully passed the TrustSec authorization challenge on this interface. | 1.3.6.1.4.1.9.9.740.1.6.1.1.6 | Counter32 | read-only | current |
| ctsiIfAuthorizationPolicyFail OBJECT-TYPE The number of time that fail to access policy or refresh the policy for TrustSec authorization on this interface. | 1.3.6.1.4.1.9.9.740.1.6.1.1.7 | Counter32 | read-only | current |
| ctsiIfAuthorizationFail OBJECT-TYPE The number of times that peer has been failed in TrustSec authorization on this interface. | 1.3.6.1.4.1.9.9.740.1.6.1.1.8 | Counter32 | read-only | current |
| ctsiIfSapSuccess OBJECT-TYPE The number of times that SAP negotiation is succeed on this interface. | 1.3.6.1.4.1.9.9.740.1.6.1.1.9 | Counter32 | read-only | current |
| ctsiIfSapFail OBJECT-TYPE The number of times that SAP negotiation has failed on this interface. | 1.3.6.1.4.1.9.9.740.1.6.1.1.10 | Counter32 | read-only | current |
| ctsiAuthorizationObjects OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.740.1.7 | |||
| ctsiAuthorizationTable OBJECT-TYPE A list of authorized remote peers on this device. | 1.3.6.1.4.1.9.9.740.1.7.1 | not-accessible | current | |
| ctsiAuthorizationEntry OBJECT-TYPE An entry containing the management information for a particular authorized peer. An entry is created when the policy acquired from the ACS for a new peer. An entry is deleted when the authorization of the peer has expired or fails to refresh its policy. | 1.3.6.1.4.1.9.9.740.1.7.1.1 | not-accessible | current | |
| ctsiAuthorizationPeerId OBJECT-TYPE This object indicates the device identity or symbolic group name of the remote peer. | 1.3.6.1.4.1.9.9.740.1.7.1.1.1 | SnmpAdminString (SIZE(1..64)) | not-accessible | current |
| ctsiAuthorizationPeerSgt OBJECT-TYPE This object indicates the SGT of the remote peer. | 1.3.6.1.4.1.9.9.740.1.7.1.1.2 | CtsSecurityGroupTag | read-only | current |
| ctsiAuthorizationState OBJECT-TYPE This object indicates the current state of the authorization entity. unknown - none of the following states. start - authorization entity created and initialized. waitingRespond - a policy request has been made by remote peer to the ACS and waiting for the response. assessing - the policy been received from ACS and is being assessed. complete - policy has been received and assessed. failure - failed to download the policy from the ACS. | 1.3.6.1.4.1.9.9.740.1.7.1.1.3 | INTEGER {unknown(1), start(2), waitingRespond(3), assessing(4), complete(5), failure(6)} | read-only | current |
| ctsiAuthorizationLastRefresh OBJECT-TYPE The object indicates the date and time when the authorized peer was last refreshed. | 1.3.6.1.4.1.9.9.740.1.7.1.1.4 | DateAndTime | read-only | current |
| ctsiAuthorizationTimeLeft OBJECT-TYPE This object indicates the leftover time for the current policy. A value of zero indicates that policy refresh is in progress. A value of -1 indicates that this object is not applicable on this authorization entry. | 1.3.6.1.4.1.9.9.740.1.7.1.1.5 | Integer32 (-1..2147483647) | read-only | current |
| ctsiAuthorizationTimeToRefresh OBJECT-TYPE This object indicates the time left to start the policy refresh. A value of zero indicates that policy refresh is in progress. A value of -1 indicates that this object is not applicable on this authorization entry. | 1.3.6.1.4.1.9.9.740.1.7.1.1.6 | Integer32 (-1..2147483647) | read-only | current |
| ctsiAuthorizationCacheDataSource OBJECT-TYPE This object indicates the source of cached data. | 1.3.6.1.4.1.9.9.740.1.7.1.1.7 | CtsiCasheDataSource | read-only | current |
| ctsiAuthorizationStatus OBJECT-TYPE This object indicates the status of this authorization peer. unknown - status not covered by any of the follow enumerations. inProgress - new authorization link created or add a new policy request for an existing link. succeeded - policy received successful. failed - policy download failed. fallbackPolicy - download policy failed apply fallback policy. incomplete - policy received incomplete. | 1.3.6.1.4.1.9.9.740.1.7.1.1.8 | INTEGER {unknown(1), inProgress(2), succeeded(3), failed(4), fallbackPolicy(5), incomplete(6)} | read-only | current |
| ctsiIfcStatsObjects OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.740.1.8 | |||
| ctsiIfcStatsTable OBJECT-TYPE A list of IFC state statistic on this device. | 1.3.6.1.4.1.9.9.740.1.8.1 | not-accessible | current | |
| ctsiIfcStatsEntry OBJECT-TYPE An entry containing the total number of interfaces which are currently belong to a particular IFC state. | 1.3.6.1.4.1.9.9.740.1.8.1.1 | not-accessible | current | |
| ctsiIfcState OBJECT-TYPE This object indicates the IFC state. | 1.3.6.1.4.1.9.9.740.1.8.1.1.1 | CtsiInterfaceControllerState | not-accessible | current |
| ctsiIfcStatsIfCount OBJECT-TYPE The total number of interfaces on the device which is currently in the IFC state. | 1.3.6.1.4.1.9.9.740.1.8.1.1.2 | Unsigned32 | read-only | current |
| ctsiEventsStatsObjects OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.740.1.9 | |||
| ctsiAuthenticationSuccess OBJECT-TYPE The total number of times that remote peers authentication succeed on this device. | 1.3.6.1.4.1.9.9.740.1.9.1 | Counter32 | read-only | current |
| ctsiAuthenticationReject OBJECT-TYPE The total number of times that remote peers authentication rejected on this device. | 1.3.6.1.4.1.9.9.740.1.9.2 | Counter32 | read-only | current |
| ctsiAuthenticationFailure OBJECT-TYPE The total number of times that remote peers authentication failed on this device | 1.3.6.1.4.1.9.9.740.1.9.3 | Counter32 | read-only | current |
| ctsiAuthenticationLogoff OBJECT-TYPE The total number of times that remote peer log off on this device. | 1.3.6.1.4.1.9.9.740.1.9.4 | Counter32 | read-only | current |
| ctsiAuthenticationNoRespond OBJECT-TYPE The total number of times that not received authentication respond from remote peer on this device. | 1.3.6.1.4.1.9.9.740.1.9.5 | Counter32 | read-only | current |
| ctsiAuthorizationSuccess OBJECT-TYPE The total number of times that remote peer authorization succeed on this device. | 1.3.6.1.4.1.9.9.740.1.9.6 | Counter32 | read-only | current |
| ctsiAuthorizationFailure OBJECT-TYPE The total number of times that remote peer TrustSec authorization failed on this device. | 1.3.6.1.4.1.9.9.740.1.9.7 | Counter32 | read-only | current |
| ctsiAuthorizationPolicyFailure OBJECT-TYPE The number of time that fail to access policy or refresh the policy for TrustSec authorization on this device. | 1.3.6.1.4.1.9.9.740.1.9.8 | Counter32 | read-only | current |
| ctsiSapNegotiationSuccess OBJECT-TYPE The total number of times that TrustSec SAP negotiation succeed on this device. | 1.3.6.1.4.1.9.9.740.1.9.9 | Counter32 | read-only | current |
| ctsiSapNegotiationFailure OBJECT-TYPE The total number of times that TrustSec SAP negotiation failure on this device. | 1.3.6.1.4.1.9.9.740.1.9.10 | Counter32 | read-only | current |
| ctsiIfModeStatsObjects OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.740.1.10 | |||
| ctsiInDot1xModeIfCount OBJECT-TYPE The total number of interfaces on the device which is in TrustSec 802.1X mode. | 1.3.6.1.4.1.9.9.740.1.10.1 | Unsigned32 | read-only | current |
| ctsiInManualModeIfCount OBJECT-TYPE The total number of interfaces on the device which is in TrustSec Manual mode. | 1.3.6.1.4.1.9.9.740.1.10.2 | Unsigned32 | read-only | current |
| ctsiInL3ForwardModeIfCount OBJECT-TYPE The total number of interfaces on the device which is in TrustSec Layer 3 forwarding mode. | 1.3.6.1.4.1.9.9.740.1.10.3 | Unsigned32 | read-only | current |
| ctsiIfNotifsControlObjects OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.740.1.11 | |||
| ctsiAuthorizationFailNotifEnable OBJECT-TYPE This object specifies whether the system generates the ctsiAuthorizationFailNotif. A value of 'false' will prevent ctsiAuthorizationFailNotif notifications from being generated by this system. | 1.3.6.1.4.1.9.9.740.1.11.1 | TruthValue | read-write | current |
| ctsiIfAddSupplicantFailNotifEnable OBJECT-TYPE This object specifies whether the system generates the ctsiIfAddSupplicantFailNotif. A value of 'false' will prevent ctsiIfAddSupplicantFailNotif notifications from being generated by this system. | 1.3.6.1.4.1.9.9.740.1.11.2 | TruthValue | read-write | current |
| ctsiIfAuthenticationFailNotifEnable OBJECT-TYPE This object specifies whether the system generates the ctsiIfAuthenticationFailNotif. A value of 'false' will prevent ctsiIfAuthenticationFailNotif notifications from being generated by this system. | 1.3.6.1.4.1.9.9.740.1.11.3 | TruthValue | read-write | current |
| ctsiIfSapNegotiationFailNotifEnable OBJECT-TYPE This object specifies whether the system generates the ctsiIfSapNegotiationFailNotif. A value of 'false' will prevent ctsiIfSapNegotiationFailNotif notifications from being generated by this system. | 1.3.6.1.4.1.9.9.740.1.11.4 | TruthValue | read-write | current |
| ctsiIfUnauthorizedNotifEnable OBJECT-TYPE This object specifies whether the system generates the ctsiIfUnauthorizedNotif. A value of 'false' will prevent ctsiIfUnauthorizedNotif notifications from being generated by this system. | 1.3.6.1.4.1.9.9.740.1.11.5 | TruthValue | read-write | current |
| ctsiIfNotifsOnlyInfoObjects OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.740.1.12 | |||
| ctsiIfNotifMessage OBJECT-TYPE This object indicates detail message associated with notifications. | 1.3.6.1.4.1.9.9.740.1.12.1 | SnmpAdminString | accessible-for-notify | current |
| ctsiIfDot1xPaeRole OBJECT-TYPE This object indicates dot1x PAE role information. notApplicable: Dot1x PAE role is not applicable in this notification. authenticator: PAE Authenticator. supplicant : PAE Supplicant. | 1.3.6.1.4.1.9.9.740.1.12.2 | INTEGER {notApplicable(1), authenticator(2), supplicant(3)} | accessible-for-notify | current |
| ciscoTrustSecIfMIBConform OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.740.2 | |||
| ciscoTrustSecIfMIBCompliances OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.740.2.1 | |||
| ciscoTrustSecIfMIBGroups OBJECT-IDENTITY | 1.3.6.1.4.1.9.9.740.2.2 |
Notifications
| Name | OID | Status |
|---|---|---|
| ctsiAuthorizationFailNotif NOTIFICATION-TYPE A ctsiAuthorizationFailNotif is generated when the policy acquisition failed for the peer. | 1.3.6.1.4.1.9.9.740.0.1 | current |
| ctsiIfAddSupplicantFailNotif NOTIFICATION-TYPE A ctsiIfAddSupplicantFailNotif is generated when the system fails to add dot1x supplicant for an interface. | 1.3.6.1.4.1.9.9.740.0.2 | current |
| ctsiIfAuthenticationFailNotif NOTIFICATION-TYPE A ctsiIfAuthenticationFailNotif is generated when an authentication error for the peer is detected for an interface. | 1.3.6.1.4.1.9.9.740.0.3 | current |
| ctsiIfSapNegotiationFailNotif NOTIFICATION-TYPE A ctsiIfSapNegotiationFailNotif is generated when a SAP negotiation error with the peer is detected for an interface. | 1.3.6.1.4.1.9.9.740.0.4 | current |
| ctsiIfUnauthorizedNotif NOTIFICATION-TYPE A ctsiIfUnauthorizedNotif is generated when a interface becomes unauthorized on the Cisco TrustSec link. | 1.3.6.1.4.1.9.9.740.0.5 | current |
Conformance
| Name | OID | Status |
|---|---|---|
| ciscoTrustSecIfMIBCompliance MODULE-COMPLIANCE The compliance statement for the CISCO-TRUSTSEC-MIB. | 1.3.6.1.4.1.9.9.740.2.1.1 | deprecated |
| ciscoTrustSecIfMIBCompliance2 MODULE-COMPLIANCE The compliance statement for the CISCO-TRUSTSEC-MIB. | 1.3.6.1.4.1.9.9.740.2.1.2 | deprecated |
| ciscoTrustSecIfMIBCompliance3 MODULE-COMPLIANCE The compliance statement for the CISCO-TRUSTSEC-MIB. | 1.3.6.1.4.1.9.9.740.2.1.3 | current |
| ciscoTrustSecIfMIBIfConfigGroup OBJECT-GROUP A collection of objects that provides the interface configuration for Cisco Trusted Security capable interface in the system. | 1.3.6.1.4.1.9.9.740.2.2.1 | current |
| ciscoTrustSecIfMIBDot1xGroup OBJECT-GROUP A collection of objects that provides the dot1x mode configuration for the Cisco Trusted Security capable interface in the system. | 1.3.6.1.4.1.9.9.740.2.2.2 | current |
| ciscoTrustSecIfMIBManualGroup OBJECT-GROUP A collection of objects that provides the manual mode configuration for the Cisco Trusted Security capable interface in the system. | 1.3.6.1.4.1.9.9.740.2.2.3 | current |
| ciscoTrustSecIfMIBL3ForwardGroup OBJECT-GROUP A collection of objects that provides the L3 forwarding mode configuration for the Cisco Trusted Security capable interface in the system. | 1.3.6.1.4.1.9.9.740.2.2.4 | current |
| ciscoTrustSecIfMIBStatusGroup OBJECT-GROUP A collection of objects that provides the status information for the Cisco Trusted Security capable interface in the system. | 1.3.6.1.4.1.9.9.740.2.2.5 | current |
| ciscoTrustSecIfMIBStatisticGroup OBJECT-GROUP A collection of objects that provides the statistic information for the Cisco Trusted Security capable interface in the system. | 1.3.6.1.4.1.9.9.740.2.2.6 | current |
| ciscoTrustSecIfMIBAuthorizationGroup OBJECT-GROUP A collection of objects that provides the status information for the authorization link in the system. | 1.3.6.1.4.1.9.9.740.2.2.7 | current |
| ciscoTrustSecIfMIBIfcStatisticGroup OBJECT-GROUP A collection of objects that provides the global IFC state statistic information in the system. | 1.3.6.1.4.1.9.9.740.2.2.8 | current |
| ciscoTrustSecIfMIBEventStatisticGroup OBJECT-GROUP A collection of objects that provides the global statistic information for the TrustSec events. | 1.3.6.1.4.1.9.9.740.2.2.9 | current |
| ciscoTrustSecIfMIBIfModeStatisticGroup OBJECT-GROUP A collection of objects that provides the global TrustSec mode statistic information. | 1.3.6.1.4.1.9.9.740.2.2.10 | current |
| ciscoTrustSecIfMIBNotifsCtrlGrp OBJECT-GROUP A collection of objects that provides notification control for TrustSec interfaces. | 1.3.6.1.4.1.9.9.740.2.2.11 | current |
| ciscoTrustSecIfMIBNotifsOnlyInfoGrp OBJECT-GROUP A collection of objects that provides the notification information for TrustSec interfaces. | 1.3.6.1.4.1.9.9.740.2.2.12 | current |
| ciscoTrustSecIfMIBNotifsGrp NOTIFICATION-GROUP A collection of notifications for TrustSec interfaces. | 1.3.6.1.4.1.9.9.740.2.2.13 | current |
| ciscoTrustSecIfMIBCriticalAuthStatusGrp OBJECT-GROUP A collection of objects that provides the Critical-Auth status information for the Cisco Trusted Security capable interface in the system. | 1.3.6.1.4.1.9.9.740.2.2.14 | current |