MIBs Depot

CISCO-TRUSTSEC-SERVER-MIB

Registered at
1.3.6.1.4.1.9.9.741
Last updated
2011-12-07 00:00
Organization
Cisco Systems, Inc.
Revisions
2011-12-07 00:00, 2010-06-01 00:00
Namespace
cisco
Source file
CISCO-TRUSTSEC-SERVER-MIB
Digest
sha256:bef65372fe67d23dcee5932cbb6a9a350bd938038f38c611d208b53ca39a448b

Description

This MIB module defines management objects for configuration and monitoring of the AAA servers in Cisco Trusted Security environment. Glossary: AAA - Authentication, Authorization, Accounting PAC - Protected Access Credential RADIUS - Remote Authentication Dial In User Service TrustSec - Cisco Trusted Security system TrustSec seed device: The seed devices is the one which has the AAA server address manually configured. All devices that connect to the seed device obtain the AAA server addresses via authentication and authorization.

Contact

Cisco Systems Customer Service Postal: 170 W Tasman Drive San Jose, CA 95134 USA Tel: +1 800 553-NETS E-mail: cs-lan-switch-snmp@cisco.com

Imports

FromSymbols
CISCO-SMIciscoMgmt
CISCO-TRUSTSEC-TC-MIBCtsAcsAuthorityIdentity
INET-ADDRESS-MIBInetAddress, InetAddressType, InetPortNumber
SNMP-FRAMEWORK-MIBSnmpAdminString
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP
SNMPv2-SMIMODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso
SNMPv2-TCDisplayString, RowStatus, StorageType, TEXTUAL-CONVENTION, TruthValue

Imported by

Nothing in this corpus imports this module.

Load order

Every file a consumer needs in order to load this module, dependencies first.

CISCO-SMI
CISCO-TRUSTSEC-SERVER-MIB
CISCO-TRUSTSEC-TC-MIB
INET-ADDRESS-MIB
SNMP-FRAMEWORK-MIB
SNMPv2-CONF
SNMPv2-SMI
SNMPv2-TC

Objects

NameOIDSyntaxAccessStatus
ciscoTrustSecServerMIBNotifs
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.741.0
ciscoTrustSecServerMIBObjects
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.741.1
ctsvGlobalServerConfigObjects
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.741.1.1
ctsvAuthorizationList
OBJECT-TYPE
This object specifies the AAA server group which allows the TrustSec AAA library to build an AAA method list. Configuration of AAA named authorization list is only needed for the TrustSec seed device.
1.3.6.1.4.1.9.9.741.1.1.1SnmpAdminStringread-writecurrent
ctsvServerDeadTime
OBJECT-TYPE
The object specifies how long a downloaded server should not be selected for service once it has been marked as dead.
1.3.6.1.4.1.9.9.741.1.1.2Unsigned32read-writecurrent
ctsvServerLoadBalanceMethod
OBJECT-TYPE
This object specifies the load-balance method used for selecting a downloaded server. none - no load-balance method used. leastOutstanding - choose the server with least outstanding transactions.
1.3.6.1.4.1.9.9.741.1.1.3INTEGER {none(1), leastOutstanding(2)}read-writecurrent
ctsvServerLoadBalanceBatchSize
OBJECT-TYPE
This object specifies the size of the transaction batch which need to be load-balanced while choosing a downloaded server. Setting this object may not be allowed if the value of ctsvServerLoadBalanceMethod is 'none'.
1.3.6.1.4.1.9.9.741.1.1.4Unsigned32read-writecurrent
ctsvUseSameProvisionedServer
OBJECT-TYPE
This object specifies whether using same provisioned PAC server throughout an session. Setting this object to 'false' means don't attempt to stay with the same PAC server throughout an authentication session. Setting this object may not be allowed if the value of ctsvServerLoadBalanceMethod is 'none'.
1.3.6.1.4.1.9.9.741.1.1.5TruthValueread-writecurrent
ctsvAllServerTestEnabled
OBJECT-TYPE
This object specifies whether the server-aliveness automated test is enabled for all TrustSec downloaded servers. The server-aliveness automated test generates a periodic test RADIUS request message to the downloaded server and expects to get a response back in order to mark that downloaded server as alive. ctsvAllServerTestEnabled is used by those servers which do not have per-server enable configuration. Setting ctsvAllServerTestEnabled affects all the instances of ctsvServerTestEnabled in ctsvServerTestConfigTable.
1.3.6.1.4.1.9.9.741.1.1.6TruthValueread-writecurrent
ctsvAllServerTestDeadTime
OBJECT-TYPE
This object specifies the global server dead time configuration for all TrustSec downloaded servers. The value of deadtime indicates how long a server should not be retried once it has been marked as dead by the server-aliveness automated test. ctsvAllServerTestDeadTime is used by those servers which do not have per-server deadtime configuration. Setting ctsvAllServerTestDeadTime affects all the instances of ctsvServerTestDeadTime in ctsvServerTestConfigTable.
1.3.6.1.4.1.9.9.741.1.1.7Unsigned32read-writecurrent
ctsvAllServerTestInterval
OBJECT-TYPE
This object specifies the global test interval for all TrustSec downloaded servers. The value of interval indicates how frequent the test RADIUS requests will be sent. ctsvAllServerTestInterval is used by those servers which do not have per-server test interval configuration. Setting ctsvAllServerTestInterval affects all the instances of ctsvServerTestInterval in ctsvServerTestConfigTable.
1.3.6.1.4.1.9.9.741.1.1.8Unsigned32read-writecurrent
ctsvServerKeyWrapEnabled
OBJECT-TYPE
This object specifies whether the TrustSec key wrap is enabled for all TrustSec downloaded servers.
1.3.6.1.4.1.9.9.741.1.1.9TruthValueread-writecurrent
ctsvServerTestConfigObjects
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.741.1.2
ctsvServerTestConfigTable
OBJECT-TYPE
A list of AAA servers with server specific TrustSec server-aliveness automated test configuration. This table contains exceptions from the global test configuration. Entry which contains same values as what are in ctsvAllServerTestEnabled, ctsvAllServerTestDeadTime, and ctsvAllServerTestInterval may be removed by the device. It is up to the agent to accept or reject such identical configuration.
1.3.6.1.4.1.9.9.741.1.2.1not-accessiblecurrent
ctsvServerTestConfigEntry
OBJECT-TYPE
An entry containing the server-aliveness automated test configuration of a particular AAA server. An entry can be created, or deleted by using ctsvServerTestRowStatus. System may remove an entry automatically if ctsvServerTestEnabled, ctsvServerTestDeadTime, and ctsvServerTestInterval contain the same value as what are in ctsvAllServerTestEnabled, ctsvAllServerTestDeadTime, ctsvAllServerTestInterval. Each AAA server is associated with a set of automatic server-aliveness test configuration. By creating, deleting or modifying an entry in this table, users can add, delete or modify the server-aliveness configuration for a particular AAA server.
1.3.6.1.4.1.9.9.741.1.2.1.1not-accessiblecurrent
ctsvServerTestAddrType
OBJECT-TYPE
The type of Internet address for an AAA server.
1.3.6.1.4.1.9.9.741.1.2.1.1.1InetAddressTypenot-accessiblecurrent
ctsvServerTestAddr
OBJECT-TYPE
The Internet address for an AAA server. The type of this address is determined by the value of the ctsvServerTestAddrType object.
1.3.6.1.4.1.9.9.741.1.2.1.1.2InetAddress (SIZE(1..64))not-accessiblecurrent
ctsvServerTestEnabled
OBJECT-TYPE
This object specifies whether the server-aliveness automated test is enabled or disabled for the AAA server. The server-aliveness automated test generates a periodic test RADIUS request message to the downloaded server and expects to get a response back in order to mark that downloaded server as alive, otherwise will mark it as dead.
1.3.6.1.4.1.9.9.741.1.2.1.1.3TruthValueread-createcurrent
ctsvServerTestDeadTime
OBJECT-TYPE
This object specifies the server-aliveness automated test dead time for the AAA server. The value of deadtime indicates how long a server should not be retried once it has been marked as dead by the server-aliveness automated test.
1.3.6.1.4.1.9.9.741.1.2.1.1.4Unsigned32read-createcurrent
ctsvServerTestInterval
OBJECT-TYPE
This object specifies the server-aliveness automated test interval for the AAA server. The value of interval indicates how frequent the test RADIUS requests will be sent.
1.3.6.1.4.1.9.9.741.1.2.1.1.5Unsigned32read-createcurrent
ctsvServerTestStorageType
OBJECT-TYPE
The storage type for this conceptual row.
1.3.6.1.4.1.9.9.741.1.2.1.1.6StorageTyperead-createcurrent
ctsvServerTestRowStatus
OBJECT-TYPE
The status of this conceptual row. All writable objects in this row may be modified at any time.
1.3.6.1.4.1.9.9.741.1.2.1.1.7RowStatusread-createcurrent
ctsvProvisionedServerObjects
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.741.1.3
ctsvProvisionedServerTable
OBJECT-TYPE
A list of AAA server which has been successfully provisioned with a PAC.
1.3.6.1.4.1.9.9.741.1.3.1not-accessiblecurrent
ctsvProvisionedServerEntry
OBJECT-TYPE
An entry providing the information of the PAC provisioned AAA server. An entry will be created when the AAA server has been successfully provisioned with PAC. An entry will be removed when the server no longer provisioned with PAC.
1.3.6.1.4.1.9.9.741.1.3.1.1not-accessiblecurrent
ctsvProvisionedServerAddrType
OBJECT-TYPE
The type of Internet address of the provisioned server.
1.3.6.1.4.1.9.9.741.1.3.1.1.1InetAddressTypenot-accessiblecurrent
ctsvProvisionedServerAddr
OBJECT-TYPE
The Internet address of the provisioned server. The type of this address is determined by the value of the ctsvProvisionedServerAddrType object.
1.3.6.1.4.1.9.9.741.1.3.1.1.2InetAddress (SIZE(1..64))not-accessiblecurrent
ctsvProvisionedServerPort
OBJECT-TYPE
The value indicates the UDP port number used by the provisioned server.
1.3.6.1.4.1.9.9.741.1.3.1.1.3InetPortNumberread-onlycurrent
ctsvProvisionedServerAuthorityId
OBJECT-TYPE
This object indicates the authority identity of the provisioned server.
1.3.6.1.4.1.9.9.741.1.3.1.1.4CtsAcsAuthorityIdentityread-onlycurrent
ctsvProvisionedServerStatus
OBJECT-TYPE
This object indicates the status of the provisioned server.
1.3.6.1.4.1.9.9.741.1.3.1.1.5INTEGER {alive(1), dead(2)}read-onlycurrent
ctsvProvisionedServerTestEnabled
OBJECT-TYPE
This object indicates whether the server-aliveness automated test of the provisioned server is enabled.
1.3.6.1.4.1.9.9.741.1.3.1.1.6TruthValueread-onlycurrent
ctsvProvisionedServerTestInterval
OBJECT-TYPE
This object indicates the operational server-aliveness automated test interval of the provisioned server. The interval is used to indicate how often the test RADIUS request should be sent to the PAC server.
1.3.6.1.4.1.9.9.741.1.3.1.1.7Unsigned32read-onlycurrent
ctsvProvisionedServerTestDeadTime
OBJECT-TYPE
This object indicates the server-aliveness automated test deadtime of the provisioned server. The deadtime indicates how long the PAC provisioned server should not be retried once it has been marked dead during the server-aliveness automated test.
1.3.6.1.4.1.9.9.741.1.3.1.1.8Unsigned32read-onlycurrent
ctsvProvisionedServerKeyWrapEnabled
OBJECT-TYPE
This object indicates the TrustSec key wrap operational status of the provisioned server.
1.3.6.1.4.1.9.9.741.1.3.1.1.9TruthValueread-onlycurrent
ctsvDownloadServerListObjects
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.741.1.4
ctsvDownloadServerListTable
OBJECT-TYPE
A list of the downloaded server list in the TrustSec system.
1.3.6.1.4.1.9.9.741.1.4.1not-accessiblecurrent
ctsvDownloadServerListEntry
OBJECT-TYPE
An entry containing the information of the specific downloaded server list in TrustSec system. An entry is created when a new downloaded server list has been acquired during the TrustSec environment data downloaded. An entry will be removed if the downloaded server list is removed after TrustSec environment data refresh.
1.3.6.1.4.1.9.9.741.1.4.1.1not-accessiblecurrent
ctsvDownloadServerListName
OBJECT-TYPE
This object indicates the name of the downloaded server list.
1.3.6.1.4.1.9.9.741.1.4.1.1.1SnmpAdminString (SIZE(1..32))not-accessiblecurrent
ctsvDownloadServerListGenNum
OBJECT-TYPE
A hexadecimal string indicating the generation number of the specific downloaded server list.
1.3.6.1.4.1.9.9.741.1.4.1.1.2OCTET STRING (SIZE(0..64))read-onlycurrent
ctsvDownloadServerListServerCount
OBJECT-TYPE
This object indicates the number of servers within the downloaded server list.
1.3.6.1.4.1.9.9.741.1.4.1.1.3Unsigned32read-onlycurrent
ctsvDownloadServerObjects
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.741.1.5
ctsvDownloadServerTable
OBJECT-TYPE
A list of downloaded server in the TrustSec system.
1.3.6.1.4.1.9.9.741.1.5.1not-accessiblecurrent
ctsvDownloadServerEntry
OBJECT-TYPE
An entry containing the information of the specific downloaded server. An entry is created when a downloaded server is added during TrustSec environment data downloaded. An entry is removed if the downloaded server is removed after TrustSec environment data downloaded.
1.3.6.1.4.1.9.9.741.1.5.1.1not-accessiblecurrent
ctsvDownloadServerAddrType
OBJECT-TYPE
The type of Internet address of the downloaded server.
1.3.6.1.4.1.9.9.741.1.5.1.1.1InetAddressTypenot-accessiblecurrent
ctsvDownloadServerAddr
OBJECT-TYPE
The Internet address of the downloaded server. The type of this address is determined by the value of the ctsvDownloadServerAddrType object.
1.3.6.1.4.1.9.9.741.1.5.1.1.2InetAddress (SIZE(1..64))not-accessiblecurrent
ctsvDownloadServerPort
OBJECT-TYPE
This object indicates the UDP port number used by the downloaded server.
1.3.6.1.4.1.9.9.741.1.5.1.1.3InetPortNumberread-onlycurrent
ctsvDownloadServerProvisioned
OBJECT-TYPE
This object indicates whether the downloaded server have been successfully provisioned.
1.3.6.1.4.1.9.9.741.1.5.1.1.4TruthValueread-onlycurrent
ctsvDownloadServerAuthorityId
OBJECT-TYPE
This object indicates the Authorization Identifier of the downloaded server.
1.3.6.1.4.1.9.9.741.1.5.1.1.5CtsAcsAuthorityIdentityread-onlycurrent
ctsvDownloadServerStatus
OBJECT-TYPE
This object indicates the status of the downloaded server.
1.3.6.1.4.1.9.9.741.1.5.1.1.6INTEGER {alive(1), dead(2)}read-onlycurrent
ctsvDownloadServerTestEnabled
OBJECT-TYPE
This object indicates whether the server-aliveness automated test of the downloaded server is currently enabled or disabled.
1.3.6.1.4.1.9.9.741.1.5.1.1.7TruthValueread-onlycurrent
ctsvDownloadServerTestInterval
OBJECT-TYPE
This object indicates the operational test interval of the downloaded server. The interval is used to indicate how often the test RADIUS request should be sent to the downloaded server.
1.3.6.1.4.1.9.9.741.1.5.1.1.8Unsigned32read-onlycurrent
ctsvDownloadServerTestDeadTime
OBJECT-TYPE
This object indicates the operational deadtime of the downloaded server.
1.3.6.1.4.1.9.9.741.1.5.1.1.9Unsigned32read-onlycurrent
ctsvDownloadServerKeyWrapEnabled
OBJECT-TYPE
This object indicates the TrustSec key wrap operational status of the downloaded server. Among all the servers in the same server list, only one server can have operational key wrap enabled if the value of ctsvAllServerKeyWrapEnabled is 'true'.
1.3.6.1.4.1.9.9.741.1.5.1.1.10TruthValueread-onlycurrent
ctsvNotificationControlObjects
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.741.1.6
ctsvNoRadiusServerNotifEnable
OBJECT-TYPE
This variable specifies whether the system generates the ctsvNoRadiusServerNotif. A value of 'false' will prevent ctsvNoRadiusServerNotif notifications from being generated by this system.
1.3.6.1.4.1.9.9.741.1.6.1TruthValueread-writecurrent
ctsvNoProvisionSecretNotifEnable
OBJECT-TYPE
This variable specifies whether the system generates the ctsvNoProvisionSecretNotif. A value of 'false' will prevent ctsvNoProvisionSecretNotif notifications from being generated by this system.
1.3.6.1.4.1.9.9.741.1.6.2TruthValueread-writecurrent
ctsvNotificationOnlyInfoObjects
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.741.1.7
ctsvServerNotifMsg
OBJECT-TYPE
This object indicates detail message associated with notifications.
1.3.6.1.4.1.9.9.741.1.7.1SnmpAdminStringaccessible-for-notifycurrent
ctsvServerNoProvisionSecretAddrType
OBJECT-TYPE
This object indicates the type of IP address for which server has no shared secret available for provisioning PAC.
1.3.6.1.4.1.9.9.741.1.7.2InetAddressTypeaccessible-for-notifycurrent
ctsvServerNoProvisionSecretAddr
OBJECT-TYPE
This object indicates the IP address for which server has no shared secret available for provisioning PAC. The type of this address is determined by the value of ctsvServerNoProvisionSecretAddrType object.
1.3.6.1.4.1.9.9.741.1.7.3InetAddressaccessible-for-notifycurrent
ciscoTrustSecServerMIBConform
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.741.2
ciscoTrustSecServerMIBCompliances
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.741.2.1
ciscoTrustSecServerMIBGroups
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.741.2.2

Notifications

NameOIDStatus
ctsvNoRadiusServerNotif
NOTIFICATION-TYPE
A ctsvNoRadiusServerNotif is generated if there is no RADIUS servers available for a CTS AAA request.
1.3.6.1.4.1.9.9.741.0.1current
ctsvNoProvisionSecretNotif
NOTIFICATION-TYPE
A ctsvNoProvisionSecretNotif is generated if the system does not have share secret available in order to provision a RADIUS server with PAC.
1.3.6.1.4.1.9.9.741.0.2current

Conformance

NameOIDStatus
ciscoTrustSecServerMIBCompliance
MODULE-COMPLIANCE
The compliance statement for the CISCO-TRUSTSEC-SERVER-MIB.
1.3.6.1.4.1.9.9.741.2.1.1deprecated
ciscoTrustSecServerMIBCompliance2
MODULE-COMPLIANCE
The compliance statement for the CISCO-TRUSTSEC-SERVER-MIB.
1.3.6.1.4.1.9.9.741.2.1.2current
ciscoTrustSecMIBServerConfigGroup
OBJECT-GROUP
A collection of objects that provides the configuration for TrustSec downloaded server group.
1.3.6.1.4.1.9.9.741.2.2.1current
ciscoTrustSecMIBGlobalServerTestGroup
OBJECT-GROUP
A collection of objects that provides the global configuration of server-aliveness automated test.
1.3.6.1.4.1.9.9.741.2.2.2current
ciscoTrustSecMIBServerTestGroup
OBJECT-GROUP
A collection of objects that provides the per-server configuration of server-aliveness automated test.
1.3.6.1.4.1.9.9.741.2.2.3current
ciscoTrustSecMIBProvisionedServerGroup
OBJECT-GROUP
A collection of objects that provides the configuration for the individual server in the PAC server list.
1.3.6.1.4.1.9.9.741.2.2.4current
ciscoTrustSecMIBDownloadServerListGroup
OBJECT-GROUP
A collection of objects that provides the configuration for the individual downloaded server list.
1.3.6.1.4.1.9.9.741.2.2.5current
ciscoTrustSecMIBDownloadServerGroup
OBJECT-GROUP
A collection of objects that provides the configuration for the individual server in the downloaded server group.
1.3.6.1.4.1.9.9.741.2.2.6current
ciscoTrustSecServerMIBKeyWrapGroup
OBJECT-GROUP
A collection of objects that provides the Trustsec key wrap information for the downloaded servers.
1.3.6.1.4.1.9.9.741.2.2.7current
ciscoTrustSecServerMIBNotifsCtrlGroup
OBJECT-GROUP
A collection of objects providing notification control for TrustSec Server.
1.3.6.1.4.1.9.9.741.2.2.8current
ciscoTrustSecServerMIBNotifsOnlyInfoGroup
OBJECT-GROUP
A collection of objects providing the notification information for TrustSec Server.
1.3.6.1.4.1.9.9.741.2.2.9current
ciscoTrustSecServerMIBNotifsGroup
NOTIFICATION-GROUP
A collection of notifications for TrustSec server.
1.3.6.1.4.1.9.9.741.2.2.10current