CISCO-TRUSTSEC-POLICY-MIB: View SNMP OID List / Download MIB

VENDOR: CISCO


 Home MIB: CISCO-TRUSTSEC-POLICY-MIB
Download as:   
SNMPv2-CONF, IF-MIB, SNMP-FRAMEWORK-MIB, SNMPv2-SMI, INET-ADDRESS-MIB, CISCO-TRUSTSEC-TC-MIB, CISCO-TC, CISCO-SMI, Q-BRIDGE-MIB, SNMPv2-TC

Download standard MIB format if you are planning to load a MIB file into some system (OS, Zabbix, PRTG ...) or view it with a MIB browser. CSV is more suitable for analyzing and viewing OID' and other MIB objects in excel. JSON and YAML formats are usually used in programing even though some systems can use MIB in YAML format (like Logstash).
Keep in mind that standard MIB files can be successfully loaded by systems and programs only if all the required MIB's from the "Imports" section are already loaded.
The tree-like SNMP object navigator requires no explanations because it is very simple to use. And if you stumbled on this MIB from Google note that you can always go back to the home page if you need to perform another MIB or OID lookup.


Object Name OID Type Access Info
 ciscoTrustSecPolicyMIB 1.3.6.1.4.1.9.9.713
This MIB module defines managed objects that facilitate the management of various policies within the Cisco Trusted Security (TrustSec) infrastructure. The information available through this MIB includes: o Device and interface level configuration for enabling SGACL (Security Group Access Control List) enforcement on Layer2/3 traffic. o Administrative and operational SGACL mapping to Security Group Tag (SGT). o Various statistics counters for traffic subject to SGACL enforcement. o TrustSec policies with respect to peer device. o Interface level configuration for enabling the propagation of SGT along with the Layer 3 traffic in portions of network which does not have the capability to support TrustSec feature. o TrustSec policies with respect to SGT propagation with Layer 3 traffic. The following terms are used throughout this MIB: VRF: Virtual Routing and Forwarding. SGACL: Security Group Access Control List. ACE: Access Control Entries. SXP: SGT Propagation Protocol. SVI: Switch Virtual Interface. IPM: Identity Port Mapping. SGT (Security Group Tag) is a unique 16 bits value assigned to every security group and used by network devices to enforce SGACL. Peer is another device connected to the local device on the other side of a TrustSec link. Default Policy: Policy applied to traffic when there is no explicit policy between the SGT associated with the originator of the traffic and the SGT associated with the destination of the traffic.
         ciscoTrustSecPolicyMIBNotifs 1.3.6.1.4.1.9.9.713.0
             ctspPeerPolicyUpdatedNotif 1.3.6.1.4.1.9.9.713.0.1
A ctspPeerPolicyUpdatedNotif is generated when the SGT value of a peer device has been updated.
             ctspAuthorizationSgaclFailNotif 1.3.6.1.4.1.9.9.713.0.2
A ctspAuthorizationSgaclFailNotif is generated when the authorization of SGACL fails.
         ciscoTrustSecPolicyMIBObjects 1.3.6.1.4.1.9.9.713.1
             ctspSgacl 1.3.6.1.4.1.9.9.713.1.1
                 ctspSgaclGlobals 1.3.6.1.4.1.9.9.713.1.1.1
                     ctspSgaclEnforcementEnable 1.3.6.1.4.1.9.9.713.1.1.1.1 integer read-write
This object specifies whether SGACL enforcement for all Layer 3 interfaces (excluding SVIs) is enabled at the managed system. 'none' indicates that SGACL enforcement for all Layer 3 interfaces (excluding SVIs) is disabled. 'l3Only' indicates that SGACL enforcement is enabled on every TrustSec capable Layer3 interface (excluding SVIs) in the device. Enumeration: 'none': 1, 'l3Only': 2.
                     ctspSgaclIpv4DropNetflowMonitor 1.3.6.1.4.1.9.9.713.1.1.1.2 snmpadminstring read-write
This object specifies an existing flexible netflow monitor name used to collect and export the IPv4 traffic dropped packets statistics due to SGACL enforcement. The zero-length string indicates that no such netflow monitor is configured in the device.
                     ctspSgaclIpv6DropNetflowMonitor 1.3.6.1.4.1.9.9.713.1.1.1.3 snmpadminstring read-write
This object specifies an existing flexible netflow monitor name used to collect and export the IPv6 traffic dropped packets statistics due to SGACL enforcement. The zero-length string indicates that no such netflow monitor is configured in the device.
                     ctspVlanConfigTable 1.3.6.1.4.1.9.9.713.1.1.1.4 no-access
This table lists the SGACL enforcement for Layer 2 and Layer 3 switched packet in a VLAN as well as VRF information for VLANs in the device.
                         ctspVlanConfigEntry 1.3.6.1.4.1.9.9.713.1.1.1.4.1 no-access
Each row contains the SGACL enforcement information for Layer 2 and Layer 3 switched packets in a VLAN identified by its VlanIndex value. Entry in this table is populated for VLANs which contains SGACL enforcement or VRF configuration.
                             ctspVlanConfigIndex 1.3.6.1.4.1.9.9.713.1.1.1.4.1.1 vlanindex no-access
This object indicates the VLAN-ID of this VLAN.
                             ctspVlanConfigSgaclEnforcement 1.3.6.1.4.1.9.9.713.1.1.1.4.1.2 truthvalue read-only
This object specifies the configured SGACL enforcement status for this VLAN i.e., 'true' = enabled and 'false' = disabled.
                             ctspVlanSviActive 1.3.6.1.4.1.9.9.713.1.1.1.4.1.3 truthvalue read-only
This object indicates if there is an active SVI associated with this VLAN. 'true' indicates that there is an active SVI associated with this VLAN. and SGACL is enforced for both Layer 2 and Layer 3 switched packets within that VLAN. 'false' indicates that there is no active SVI associated with this VLAN, and SGACL is only enforced for Layer 2 switched packets within that VLAN.
                             ctspVlanConfigVrfName 1.3.6.1.4.1.9.9.713.1.1.1.4.1.4 ciscovrfname read-only
This object specifies an existing VRF where this VLAN belongs to. The zero length value indicates this VLAN belongs to the default VRF.
                             ctspVlanConfigStorageType 1.3.6.1.4.1.9.9.713.1.1.1.4.1.5 storagetype read-only
The objects specifies the storage type for this conceptual row.
                             ctspVlanConfigRowStatus 1.3.6.1.4.1.9.9.713.1.1.1.4.1.6 rowstatus read-only
The status of this conceptual row entry. This object is used to manage creation and deletion of rows in this table. When this object value is 'active', other writable objects in the same row cannot be modified.
                 ctspSgaclMappings 1.3.6.1.4.1.9.9.713.1.1.2
                     ctspConfigSgaclMappingTable 1.3.6.1.4.1.9.9.713.1.1.2.1 no-access
This table contains the SGACLs information which is applied to unicast IP traffic which carries a source SGT and travels to a destination SGT.
                         ctspConfigSgaclMappingEntry 1.3.6.1.4.1.9.9.713.1.1.2.1.1 no-access
Each row contains the SGACL mapping to source and destination SGT for a certain traffic type as well as status of this instance. A row instance can be created or removed by setting the appropriate value of its RowStatus object.
                             ctspConfigSgaclMappingIpTrafficType 1.3.6.1.4.1.9.9.713.1.1.2.1.1.1 integer no-access
This object indicates the type of the unicast IP traffic carrying the source SGT and travelling to destination SGT and subjected to SGACL enforcement. Enumeration: 'ipv4': 1, 'ipv6': 2.
                             ctspConfigSgaclMappingDestSgt 1.3.6.1.4.1.9.9.713.1.1.2.1.1.2 ctssecuritygrouptag no-access
This object indicates the destination SGT value. Value of zero indicates that the destination SGT is unknown.
                             ctspConfigSgaclMappingSourceSgt 1.3.6.1.4.1.9.9.713.1.1.2.1.1.3 ctssecuritygrouptag no-access
This object indicates the source SGT value. Value of zero indicates that the source SGT is unknown.
                             ctspConfigSgaclMappingSgaclName 1.3.6.1.4.1.9.9.713.1.1.2.1.1.4 ctsacllist read-only
This object specifies the list of existing SGACLs which is administratively configured to apply to unicast IP traffic carrying the source SGT to the destination SGT.
                             ctspConfigSgaclMappingStorageType 1.3.6.1.4.1.9.9.713.1.1.2.1.1.5 storagetype read-only
The storage type for this conceptual row.
                             ctspConfigSgaclMappingRowStatus 1.3.6.1.4.1.9.9.713.1.1.2.1.1.6 rowstatus read-only
This object is used to manage the creation and deletion of rows in this table. ctspConfigSgaclName may be modified at any time.
                             ctspConfigSgaclMonitor 1.3.6.1.4.1.9.9.713.1.1.2.1.1.7 ctssgaclmonitormode read-only
This object specifies whether SGACL monitor mode is turned on for the configured SGACL enforced traffic.
                     ctspDefConfigIpv4Sgacls 1.3.6.1.4.1.9.9.713.1.1.2.2 ctsacllistorempty read-write
This object specifies the SGACLs of the unicast default policy for IPv4 traffic. If there is no SGACL configured for unicast default policy for IPv4 traffic, the value of this object is the zero-length string.
                     ctspDefConfigIpv6Sgacls 1.3.6.1.4.1.9.9.713.1.1.2.3 ctsacllistorempty read-write
This object specifies the SGACLs of the unicast default policy for IPv6 traffic. If there is no SGACL configured for unicast default policy for IPv6 traffic, the value of this object is the zero-length string.
                     ctspDownloadedSgaclMappingTable 1.3.6.1.4.1.9.9.713.1.1.2.4 no-access
This table contains the downloaded SGACLs information applied to unicast IP traffic which carries a source SGT and travels to a destination SGT.
                         ctspDownloadedSgaclMappingEntry 1.3.6.1.4.1.9.9.713.1.1.2.4.1 no-access
Each row contains the downloaded SGACLs mapping. A row instance is added for each pair of which contains SGACL that is dynamically downloaded from ACS server.
                             ctspDownloadedSgaclDestSgt 1.3.6.1.4.1.9.9.713.1.1.2.4.1.1 ctssecuritygrouptag no-access
This object indicates the destination SGT value. Value of zero indicates that the destination SGT is unknown.
                             ctspDownloadedSgaclSourceSgt 1.3.6.1.4.1.9.9.713.1.1.2.4.1.2 ctssecuritygrouptag no-access
This object indicates the source SGT value. Value of zero indicates that the source SGT is unknown.
                             ctspDownloadedSgaclIndex 1.3.6.1.4.1.9.9.713.1.1.2.4.1.3 unsigned32 no-access
This object identifies the downloaded SGACL which is applied to unicast IP traffic carrying the source SGT to the destination SGT.
                             ctspDownloadedSgaclName 1.3.6.1.4.1.9.9.713.1.1.2.4.1.4 ctsaclname read-only
This object indicates the name of downloaded SGACL which is applied to unicast IP traffic carrying the source SGT to the destination SGT.
                             ctspDownloadedSgaclGenId 1.3.6.1.4.1.9.9.713.1.1.2.4.1.5 ctsgenerationid read-only
This object indicates the generation identification of downloaded SGACL which is applied to unicast IP traffic carrying the source SGT to the destination SGT.
                             ctspDownloadedIpTrafficType 1.3.6.1.4.1.9.9.713.1.1.2.4.1.6 bits read-only
This object indicates the type of the unicast IP traffic carrying the source SGT and travelling to destination SGT and subjected to SGACL enforcement by this downloaded default policy. Bits: 'ipv4': 0, 'ipv6': 1.
                             ctspDownloadedSgaclMonitor 1.3.6.1.4.1.9.9.713.1.1.2.4.1.7 ctssgaclmonitormode read-only
This object indicates whether SGACL monitor mode is turned on for the downloaded SGACL enforced traffic.
                     ctspDefDownloadedSgaclMappingTable 1.3.6.1.4.1.9.9.713.1.1.2.5 no-access
This table contains the downloaded SGACLs information of the default policy applied to unicast IP traffic.
                         ctspDefDownloadedSgaclMappingEntry 1.3.6.1.4.1.9.9.713.1.1.2.5.1 no-access
Each row contains the downloaded SGACLs mapping. A row instance contains the SGACL information of the default policy dynamically downloaded from ACS server for unicast IP traffic.
                             ctspDefDownloadedSgaclIndex 1.3.6.1.4.1.9.9.713.1.1.2.5.1.1 unsigned32 no-access
This object identifies the SGACL of downloaded default policy applied to unicast IP traffic.
                             ctspDefDownloadedSgaclName 1.3.6.1.4.1.9.9.713.1.1.2.5.1.2 ctsaclname read-only
This object indicates the name of the SGACL of downloaded default policy applied to unicast IP traffic.
                             ctspDefDownloadedSgaclGenId 1.3.6.1.4.1.9.9.713.1.1.2.5.1.3 ctsgenerationid read-only
This object indicates the generation identification of the SGACL of downloaded default policy applied to unicast IP traffic.
                             ctspDefDownloadedIpTrafficType 1.3.6.1.4.1.9.9.713.1.1.2.5.1.4 bits read-only
This object indicates the type of the IP traffic subjected to SGACL enforcement by this downloaded default policy. Bits: 'ipv4': 0, 'ipv6': 1.
                             ctspDefDownloadedSgaclMonitor 1.3.6.1.4.1.9.9.713.1.1.2.5.1.5 ctssgaclmonitormode read-only
This object indicates whether SGACL monitor mode is turned on for the default downloaded SGACL enforced traffic.
                     ctspOperSgaclMappingTable 1.3.6.1.4.1.9.9.713.1.1.2.6 no-access
This table contains the operational SGACLs information applied to unicast IP traffic which carries a source SGT and travels to a destination SGT.
                         ctspOperSgaclMappingEntry 1.3.6.1.4.1.9.9.713.1.1.2.6.1 no-access
Each row contains the operational SGACLs mapping. A row instance is added for each pair of which contains the SGACL that either statically configured at the device or dynamically downloaded from ACS server.
                             ctspOperIpTrafficType 1.3.6.1.4.1.9.9.713.1.1.2.6.1.1 integer no-access
This object indicates the type of the unicast IP traffic carrying the source SGT and travelling to destination SGT and subjected to SGACL enforcement. Enumeration: 'ipv4': 1, 'ipv6': 2.
                             ctspOperSgaclDestSgt 1.3.6.1.4.1.9.9.713.1.1.2.6.1.2 ctssecuritygrouptag no-access
This object indicates the destination SGT value. Value of zero indicates that the destination SGT is unknown.
                             ctspOperSgaclSourceSgt 1.3.6.1.4.1.9.9.713.1.1.2.6.1.3 ctssecuritygrouptag no-access
This object indicates the source SGT value. Value of zero indicates that the source SGT is unknown.
                             ctspOperSgaclIndex 1.3.6.1.4.1.9.9.713.1.1.2.6.1.4 unsigned32 no-access
This object identifies the SGACL operationally applied to unicast IP traffic carrying the source SGT to the destination SGT.
                             ctspOperationalSgaclName 1.3.6.1.4.1.9.9.713.1.1.2.6.1.5 ctsaclname read-only
This object indicates the name of the SGACL operationally applied to unicast IP traffic carrying the source SGT to the destination SGT.
                             ctspOperationalSgaclGenId 1.3.6.1.4.1.9.9.713.1.1.2.6.1.6 ctsgenerationid read-only
This object indicates the generation identification of the SGACL operationally applied to unicast IP traffic carrying the source SGT to the destination SGT.
                             ctspOperSgaclMappingSource 1.3.6.1.4.1.9.9.713.1.1.2.6.1.7 integer read-only
This object indicates the source of SGACL mapping for the SGACL operationally applied to unicast IP traffic carrying the source SGT to the destination SGT. 'downloaded' indicates that the mapping is downloaded from ACS server. 'configured' indicates that the mapping is locally configured in the device. Enumeration: 'downloaded': 2, 'configured': 1.
                             ctspOperSgaclConfigSource 1.3.6.1.4.1.9.9.713.1.1.2.6.1.8 integer read-only
This object indicates the source of SGACL creation for this SGACL. 'configured' indicates that the SGACL is locally configured in the local device. 'downloaded' indicates that the SGACL is created at ACS server and downloaded to the local device. Enumeration: 'downloaded': 2, 'configured': 1.
                             ctspOperSgaclMonitor 1.3.6.1.4.1.9.9.713.1.1.2.6.1.9 ctssgaclmonitormode read-only
This object indicates whether SGACL monitor mode is turned on for the SGACL enforced traffic.
                     ctspDefOperSgaclMappingTable 1.3.6.1.4.1.9.9.713.1.1.2.7 no-access
This table contains the operational SGACLs information of the default policy applied to unicast IP traffic.
                         ctspDefOperSgaclMappingEntry 1.3.6.1.4.1.9.9.713.1.1.2.7.1 no-access
A row instance contains the SGACL information of the default policy which is either statically configured at the device or dynamically downloaded from ACS server for unicast IP traffic.
                             ctspDefOperIpTrafficType 1.3.6.1.4.1.9.9.713.1.1.2.7.1.1 integer no-access
This object indicates the type of the unicast IP traffic subjected to default policy enforcement. Enumeration: 'ipv4': 1, 'ipv6': 2.
                             ctspDefOperSgaclIndex 1.3.6.1.4.1.9.9.713.1.1.2.7.1.2 unsigned32 no-access
This object identifies the SGACL of default policy operationally applied to unicast IP traffic.
                             ctspDefOperationalSgaclName 1.3.6.1.4.1.9.9.713.1.1.2.7.1.3 ctsaclname read-only
This object indicates the name of the SGACL of default policy operationally applied to unicast IP traffic.
                             ctspDefOperationalSgaclGenId 1.3.6.1.4.1.9.9.713.1.1.2.7.1.4 ctsgenerationid read-only
This object indicates the generation identification of the SGACL of default policy operationally applied to unicast IP traffic.
                             ctspDefOperSgaclMappingSource 1.3.6.1.4.1.9.9.713.1.1.2.7.1.5 integer read-only
This object indicates the source of SGACL mapping for the SGACL of default policy operationally applied to unicast IP traffic. 'downloaded' indicates that the mapping is downloaded from ACS server. 'configured' indicates that the mapping is locally configured in the device. Enumeration: 'downloaded': 2, 'configured': 1.
                             ctspDefOperSgaclConfigSource 1.3.6.1.4.1.9.9.713.1.1.2.7.1.6 integer read-only
This object indicates the source of SGACL creation for the SGACL of default policy operationally applied to unicast IP traffic. 'downloaded' indicates that the SGACL is created at ACS server and downloaded to the local device. 'configured' indicates that the SGACL is locally configured in the local device. Enumeration: 'downloaded': 2, 'configured': 1.
                             ctspDefOperSgaclMonitor 1.3.6.1.4.1.9.9.713.1.1.2.7.1.7 ctssgaclmonitormode read-only
This object indicates whether SGACL monitor mode is turned on for the SGACL of default policy enforced traffic.
                     ctspDefConfigIpv4SgaclsMonitor 1.3.6.1.4.1.9.9.713.1.1.2.8 ctssgaclmonitormode read-write
This object specifies whether SGACL monitor mode is turned on for the default configured SGACL enforced Ipv4 traffic.
                     ctspDefConfigIpv6SgaclsMonitor 1.3.6.1.4.1.9.9.713.1.1.2.9 ctssgaclmonitormode read-write
This object specifies whether SGACL monitor mode is turned on for the default configured SGACL enforced Ipv6 traffic.
                     ctspSgaclMonitorEnable 1.3.6.1.4.1.9.9.713.1.1.2.10 ctssgaclmonitormode read-write
This object specifies whether SGACL monitor mode is turned on for the entire system. It has precedence than the per SGACL ctspConfigSgaclMonitor control. It could act as safety mechanism to turn off monitor in case the monitor feature impact system performance.
                 ctspSgaclStatistics 1.3.6.1.4.1.9.9.713.1.1.3
                     ctspSgtStatsTable 1.3.6.1.4.1.9.9.713.1.1.3.1 no-access
This table describes SGACL statistics counters per a pair of that is capable of providing this information.
                         ctspSgtStatsEntry 1.3.6.1.4.1.9.9.713.1.1.3.1.1 no-access
Each row contains the SGACL statistics related to IPv4 or IPv6 packets carrying the source SGT travelling to the destination SGT and subjected to SGACL enforcement.
                             ctspStatsIpTrafficType 1.3.6.1.4.1.9.9.713.1.1.3.1.1.1 integer no-access
This object indicates the type of the unicast IP traffic carrying the source SGT and travelling to destination SGT and subjected to SGACL enforcement. Enumeration: 'ipv4': 1, 'ipv6': 2.
                             ctspStatsDestSgt 1.3.6.1.4.1.9.9.713.1.1.3.1.1.2 ctssecuritygrouptag no-access
This object indicates the destination SGT value. Value of zero indicates that the destination SGT is unknown.
                             ctspStatsSourceSgt 1.3.6.1.4.1.9.9.713.1.1.3.1.1.3 ctssecuritygrouptag no-access
This object indicates the source SGT value. Value of zero indicates that the source SGT is unknown.
                             ctspStatsIpSwDropPkts 1.3.6.1.4.1.9.9.713.1.1.3.1.1.4 counter64 read-only
This object indicates the number of software-forwarded IP packets which are dropped by SGACL.
                             ctspStatsIpHwDropPkts 1.3.6.1.4.1.9.9.713.1.1.3.1.1.5 counter64 read-only
This object indicates the number of hardware-forwarded IP packets which are dropped by SGACL.
                             ctspStatsIpSwPermitPkts 1.3.6.1.4.1.9.9.713.1.1.3.1.1.6 counter64 read-only
This object indicates the number of software-forwarded IP packets which are permitted by SGACL.
                             ctspStatsIpHwPermitPkts 1.3.6.1.4.1.9.9.713.1.1.3.1.1.7 counter64 read-only
This object indicates the number of hardware-forwarded IP packets which are permitted by SGACL.
                             ctspStatsIpSwMonitorPkts 1.3.6.1.4.1.9.9.713.1.1.3.1.1.8 counter64 read-only
This object indicates the number of software-forwarded IP packets which are SGACL enforced & monitored.
                             ctspStatsIpHwMonitorPkts 1.3.6.1.4.1.9.9.713.1.1.3.1.1.9 counter64 read-only
This object indicates the number of hardware-forwarded IP packets which are SGACL enforced & monitored.
                     ctspDefStatsTable 1.3.6.1.4.1.9.9.713.1.1.3.2 no-access
This table describes statistics counters for unicast IP traffic subjected to default unicast policy.
                         ctspDefStatsEntry 1.3.6.1.4.1.9.9.713.1.1.3.2.1 no-access
Each row contains the statistics counter for each IP traffic type.
                             ctspDefIpTrafficType 1.3.6.1.4.1.9.9.713.1.1.3.2.1.1 integer no-access
This object indicates the type of the IP traffic subjected to default unicast policy enforcement. Enumeration: 'ipv4': 1, 'ipv6': 2.
                             ctspDefIpSwDropPkts 1.3.6.1.4.1.9.9.713.1.1.3.2.1.2 counter64 read-only
This object indicates the number of software-forwarded IP packets which are dropped by default unicast policy.
                             ctspDefIpHwDropPkts 1.3.6.1.4.1.9.9.713.1.1.3.2.1.3 counter64 read-only
This object indicates the number of hardware-forwarded IP packets which are dropped by default unicast policy.
                             ctspDefIpSwPermitPkts 1.3.6.1.4.1.9.9.713.1.1.3.2.1.4 counter64 read-only
This object indicates the number of software-forwarded IP packets which are permitted by default unicast policy.
                             ctspDefIpHwPermitPkts 1.3.6.1.4.1.9.9.713.1.1.3.2.1.5 counter64 read-only
This object indicates the number of hardware-forwarded IP packets which are permitted by default unicast policy.
                             ctspDefIpSwMonitorPkts 1.3.6.1.4.1.9.9.713.1.1.3.2.1.6 counter64 read-only
This object indicates the number of software-forwarded IP packets which are monitored by default unicast policy.
                             ctspDefIpHwMonitorPkts 1.3.6.1.4.1.9.9.713.1.1.3.2.1.7 counter64 read-only
This object indicates the number of hardware-forwarded IP packets which are monitored by default unicast policy.
             ctspPeerPolicy 1.3.6.1.4.1.9.9.713.1.2
                 ctspAllPeerPolicyAction 1.3.6.1.4.1.9.9.713.1.2.1 integer read-write
This object allows user to specify the action to be taken with respect to all peer policies in the device. When read, this object always returns the value 'none'. 'none' - No operation. 'refresh' - Refresh all peer policies in the device. Enumeration: 'none': 1, 'refresh': 2.
                 ctspPeerPolicyTable 1.3.6.1.4.1.9.9.713.1.2.2 no-access
This table lists the peer policy information for each peer device.
                     ctspPeerPolicyEntry 1.3.6.1.4.1.9.9.713.1.2.2.1 no-access
Each row contains the managed objects for peer policies for each peer device based on its name.
                         ctspPeerName 1.3.6.1.4.1.9.9.713.1.2.2.1.1 snmpadminstring no-access
This object uniquely identifies a peer device.
                         ctspPeerSgt 1.3.6.1.4.1.9.9.713.1.2.2.1.2 ctssecuritygrouptag read-only
This object indicates the SGT value of this peer device.
                         ctspPeerSgtGenId 1.3.6.1.4.1.9.9.713.1.2.2.1.3 ctsgenerationid read-only
This object indicates the generation identification of the SGT value assigned to this peer device.
                         ctspPeerTrustState 1.3.6.1.4.1.9.9.713.1.2.2.1.4 integer read-only
This object indicates the TrustSec trust state of this peer device. 'trusted' indicates that this is a trusted peer device. 'noTrust' indicates that this peer device is not trusted. Enumeration: 'noTrust': 2, 'trusted': 1.
                         ctspPeerPolicyLifeTime 1.3.6.1.4.1.9.9.713.1.2.2.1.5 unsigned32 read-only
This object indicates the policy life time which provides the time interval during which the peer policy is valid.
                         ctspPeerPolicyLastUpdate 1.3.6.1.4.1.9.9.713.1.2.2.1.6 dateandtime read-only
This object indicates the time when this peer policy is last updated.
                         ctspPeerPolicyAction 1.3.6.1.4.1.9.9.713.1.2.2.1.7 integer read-write
This object allows user to specify the action to be taken with this peer policy. When read, this object always returns the value 'none'. 'none' - No operation. 'refresh' - Refresh this peer policy. Enumeration: 'none': 1, 'refresh': 2.
             ctspLayer3Transport 1.3.6.1.4.1.9.9.713.1.3
                 ctspLayer3PolicyTable 1.3.6.1.4.1.9.9.713.1.3.1 no-access
This table describes Layer 3 transport policy for IP traffic regarding SGT propagation.
                     ctspLayer3PolicyEntry 1.3.6.1.4.1.9.9.713.1.3.1.1 no-access
Each row contains the Layer 3 transport policies per IP traffic type per policy type.
                         ctspLayer3PolicyIpTrafficType 1.3.6.1.4.1.9.9.713.1.3.1.1.1 integer no-access
This object indicates the type of the IP traffic affected by Layer-3 transport policy. 'ipv4' indicates that the affected traffic is IPv4 traffic. 'ipv6' indicates that the affected traffic is IPv6 traffic. Enumeration: 'ipv4': 1, 'ipv6': 2.
                         ctspLayer3PolicyType 1.3.6.1.4.1.9.9.713.1.3.1.1.2 integer no-access
This object indicates the type of the Layer-3 transport policy affecting IP traffic regarding SGT propagation. 'permit' indicates that the transport policy is used to classify Layer-3 traffic which is subject to SGT propagation. 'exception' indicates that the transport policy is used to classify Layer-3 traffic which is NOT subject to SGT propagation. Enumeration: 'exception': 2, 'permit': 1.
                         ctspLayer3PolicyLocalConfig 1.3.6.1.4.1.9.9.713.1.3.1.1.3 ctsaclnameorempty read-write
This object specifies the name of an ACL that is administratively configured to classify Layer3 traffic. Zero-length string indicates there is no such configured policy.
                         ctspLayer3PolicyDownloaded 1.3.6.1.4.1.9.9.713.1.3.1.1.4 ctsaclnameorempty read-only
This object specifies the name of an ACL that is downloaded from policy server to classify Layer3 traffic. Zero-length string indicates there is no such downloaded policy.
                         ctspLayer3PolicyOperational 1.3.6.1.4.1.9.9.713.1.3.1.1.5 ctsaclnameorempty read-only
This object specifies the name of an operational ACL currently used to classify Layer3 traffic. Zero-length string indicates there is no such policy in effect.
                 ctspIfL3PolicyConfigTable 1.3.6.1.4.1.9.9.713.1.3.2 no-access
This table lists the interfaces which support Layer3 Transport policy.
                     ctspIfL3PolicyConfigEntry 1.3.6.1.4.1.9.9.713.1.3.2.1 no-access
Each row contains managed objects for Layer3 Transport on interface capable of providing this information.
                         ctspIfL3Ipv4PolicyEnabled 1.3.6.1.4.1.9.9.713.1.3.2.1.1 truthvalue read-write
This object specifies whether the Layer3 Transport policies will be applied on this interface for egress IPv4 traffic. 'true' indicates that Layer3 permit and exception policy will be applied at this interface for egress IPv4 traffic. 'false' indicates that Layer3 permit and exception policy will not be applied at this interface for egress IPv4 traffic.
                         ctspIfL3Ipv6PolicyEnabled 1.3.6.1.4.1.9.9.713.1.3.2.1.2 truthvalue read-write
This object specifies whether the Layer3 Transport policies will be applied on this interface for egress IPv6 traffic. 'true' indicates that Layer3 permit and exception policy will be applied at this interface for egress IPv6 traffic. 'false' indicates that Layer3 permit and exception policy will not be applied at this interface for egress IPv6 traffic.
             ctspIpSgtMappings 1.3.6.1.4.1.9.9.713.1.4
                 ctspIpSgtMappingTable 1.3.6.1.4.1.9.9.713.1.4.1 no-access
This table contains the IP-to-SGT mapping information in the device.
                     ctspIpSgtMappingEntry 1.3.6.1.4.1.9.9.713.1.4.1.1 no-access
Each row contains the IP-to-SGT mapping and status of this instance. Entry in this table is either populated automatically by the device or manually configured by a user. A manually configured row instance can be created or removed by setting the appropriate value of its RowStatus object.
                         ctspIpSgtVrfName 1.3.6.1.4.1.9.9.713.1.4.1.1.1 ciscovrfname no-access
This object indicates the VRF where IP-SGT mapping belongs to. The zero length value indicates the default VRF.
                         ctspIpSgtAddressType 1.3.6.1.4.1.9.9.713.1.4.1.1.2 inetaddresstype no-access
This object indicates the type of Internet address.
                         ctspIpSgtIpAddress 1.3.6.1.4.1.9.9.713.1.4.1.1.3 inetaddress no-access
This object indicates an Internet address. The type of this address is determined by the value of ctspIpSgtAddressType object.
                         ctspIpSgtAddressLength 1.3.6.1.4.1.9.9.713.1.4.1.1.4 inetaddressprefixlength no-access
This object indicates the length of an Internet address prefix.
                         ctspIpSgtValue 1.3.6.1.4.1.9.9.713.1.4.1.1.5 ctssecuritygrouptag read-only
This object specifies the SGT value assigned to an Internet address.
                         ctspIpSgtSource 1.3.6.1.4.1.9.9.713.1.4.1.1.6 integer read-only
This object indicates the source of the mapping. 'configured' indicates that the mapping is manually configured by user. 'arp' indicates that the mapping is dynamically learnt from tagged ARP replies. 'localAuthenticated' indicates that the mapping is dynamically learnt from the device authentication of a host. 'sxp' indicates that the mapping is dynamically learnt from SXP (SGT Propagation Protocol). 'internal' indicates that the mapping is automatically created by the device between the device IP addresses and the device own SGT. 'l3if' indicates that Interface-SGT mapping is configured by user. 'vlan' indicates that Vlan-SGT mapping is configured by user. 'cached' indicates that sgt mapping is cached. Only 'configured' value is accepted when setting this object. Enumeration: 'arp': 2, 'l3if': 6, 'configured': 1, 'vlan': 7, 'sxp': 4, 'internal': 5, 'caching': 8, 'localAuthenticated': 3.
                         ctspIpSgtStorageType 1.3.6.1.4.1.9.9.713.1.4.1.1.7 storagetype read-only
The storage type for this conceptual row.
                         ctspIpSgtRowStatus 1.3.6.1.4.1.9.9.713.1.4.1.1.8 rowstatus read-only
This object is used to manage the creation and deletion of rows in this table. If this object value is 'active', user cannot modify any writable object in this row. If value of ctspIpSgtSource object in an entry is not 'configured', user cannot change the value of this object.
             ctspSgtPolicy 1.3.6.1.4.1.9.9.713.1.5
                 ctspAllSgtPolicyAction 1.3.6.1.4.1.9.9.713.1.5.1 integer read-write
This object allows user to specify the action to be taken with respect to all SGT policies in the device. When read, this object always returns the value 'none'. 'none' - No operation. 'refresh' - Refresh all SGT policies in the device. Enumeration: 'none': 1, 'refresh': 2.
                 ctspDownloadedSgtPolicyTable 1.3.6.1.4.1.9.9.713.1.5.2 no-access
This table lists the SGT policy information downloaded by the device.
                     ctspDownloadedSgtPolicyEntry 1.3.6.1.4.1.9.9.713.1.5.2.1 no-access
Each row contains the managed objects for SGT policies downloaded by the device.
                         ctspDownloadedSgtPolicySgt 1.3.6.1.4.1.9.9.713.1.5.2.1.1 ctssecuritygrouptag no-access
This object indicates the SGT value for which the downloaded policy is applied to. Value of zero indicates that the SGT is unknown.
                         ctspDownloadedSgtPolicySgtGenId 1.3.6.1.4.1.9.9.713.1.5.2.1.2 ctsgenerationid read-only
This object indicates the generation identification of the SGT value denoted by ctspDownloadedSgtPolicySgt object.
                         ctspDownloadedSgtPolicyLifeTime 1.3.6.1.4.1.9.9.713.1.5.2.1.3 unsigned32 read-only
This object indicates the policy life time which provides the time interval during which this downloaded policy is valid.
                         ctspDownloadedSgtPolicyLastUpdate 1.3.6.1.4.1.9.9.713.1.5.2.1.4 dateandtime read-only
This object indicates the time when this downloaded SGT policy is last updated.
                         ctspDownloadedSgtPolicyAction 1.3.6.1.4.1.9.9.713.1.5.2.1.5 integer read-write
This object allows user to specify the action to be taken with this downloaded SGT policy. When read, this object always returns the value 'none'. 'none' - No operation. 'refresh' - Refresh this SGT policy. Enumeration: 'none': 1, 'refresh': 2.
                 ctspDownloadedDefSgtPolicyTable 1.3.6.1.4.1.9.9.713.1.5.3 no-access
This table lists the default SGT policy information downloaded by the device.
                     ctspDownloadedDefSgtPolicyEntry 1.3.6.1.4.1.9.9.713.1.5.3.1 no-access
Each row contains the managed objects for default SGT policies downloaded by the device.
                         ctspDownloadedDefSgtPolicyType 1.3.6.1.4.1.9.9.713.1.5.3.1.1 integer no-access
This object indicates the downloaded default SGT policy type. 'unicastDefault' indicates the SGT policy applied to traffic which carries the default unicast SGT. Enumeration: 'unicastDefault': 1.
                         ctspDownloadedDefSgtPolicySgtGenId 1.3.6.1.4.1.9.9.713.1.5.3.1.2 ctsgenerationid read-only
This object indicates the generation identification of the downloaded default SGT policy.
                         ctspDownloadedDefSgtPolicyLifeTime 1.3.6.1.4.1.9.9.713.1.5.3.1.3 unsigned32 read-only
This object indicates the policy life time which provides the time interval during which this download default policy is valid.
                         ctspDownloadedDefSgtPolicyLastUpdate 1.3.6.1.4.1.9.9.713.1.5.3.1.4 dateandtime read-only
This object indicates the time when this downloaded SGT policy is last updated.
                         ctspDownloadedDefSgtPolicyAction 1.3.6.1.4.1.9.9.713.1.5.3.1.5 integer read-write
This object allows user to specify the action to be taken with this default downloaded SGT policy. When read, this object always returns the value 'none'. 'none' - No operation. 'refresh' - Refresh this default SGT policy. Enumeration: 'none': 1, 'refresh': 2.
             ctspIfSgtMappings 1.3.6.1.4.1.9.9.713.1.6
                 ctspIfSgtMappingTable 1.3.6.1.4.1.9.9.713.1.6.1 no-access
This table contains the Interface-to-SGT mapping configuration information in the device.
                     ctspIfSgtMappingEntry 1.3.6.1.4.1.9.9.713.1.6.1.1 no-access
Each row contains the SGT mapping configuration of a particular interface. A row instance can be created or removed by setting ctspIfSgtRowStatus.
                         ctspIfSgtValue 1.3.6.1.4.1.9.9.713.1.6.1.1.1 ctssecuritygrouptag read-only
This object specifies the SGT value assigned to the interface.
                         ctspIfSgName 1.3.6.1.4.1.9.9.713.1.6.1.1.2 snmpadminstring read-only
This object specifies the Security Group Name assigned to the interface.
                         ctspIfSgtStorageType 1.3.6.1.4.1.9.9.713.1.6.1.1.3 storagetype read-only
The storage type for this conceptual row.
                         ctspIfSgtRowStatus 1.3.6.1.4.1.9.9.713.1.6.1.1.4 rowstatus read-only
This object is used to manage the creation and deletion of rows in this table.
                 ctspIfSgtMappingInfoTable 1.3.6.1.4.1.9.9.713.1.6.2 no-access
This table contains the Interface-to-SGT mapping status information in the device.
                     ctspIfSgtMappingInfoEntry 1.3.6.1.4.1.9.9.713.1.6.2.1 no-access
Containing the Interface-to-SGT mapping status of the specified interface.
                         ctspL3IPMStatus 1.3.6.1.4.1.9.9.713.1.6.2.1.1 integer read-only
This object indicates the Layer 3 Identity Port Mapping(IPM) operational mode. disabled - The L3 IPM is not configured. active - The L3 IPM is configured for this interface, and SGT is available. inactive - The L3 IPM is configured for this interface, and SGT is unavailable. Enumeration: 'disabled': 1, 'active': 2, 'inactive': 3.
             ctspVlanSgtMappings 1.3.6.1.4.1.9.9.713.1.7
                 ctspVlanSgtMappingTable 1.3.6.1.4.1.9.9.713.1.7.1 no-access
This table contains the Vlan-SGT mapping information in the device.
                     ctspVlanSgtMappingEntry 1.3.6.1.4.1.9.9.713.1.7.1.1 no-access
Each row contains the SGT mapping configuration of a particular VLAN. A row instance can be created or removed by setting ctspVlanSgtRowStatus.
                         ctspVlanSgtMappingIndex 1.3.6.1.4.1.9.9.713.1.7.1.1.1 vlanindex no-access
This object specifies the VLAN-ID which is used as index.
                         ctspVlanSgtMapValue 1.3.6.1.4.1.9.9.713.1.7.1.1.2 ctssecuritygrouptag read-only
This object specifies the SGT value assigned to the vlan.
                         ctspVlanSgtStorageType 1.3.6.1.4.1.9.9.713.1.7.1.1.3 storagetype read-only
The storage type for this conceptual row.
                         ctspVlanSgtRowStatus 1.3.6.1.4.1.9.9.713.1.7.1.1.4 rowstatus read-only
This object is used to manage the creation and deletion of rows in this table.
             ctspSgtCaching 1.3.6.1.4.1.9.9.713.1.8
                 ctspSgtCachingMode 1.3.6.1.4.1.9.9.713.1.8.1 integer read-write
This object specifies which SGT-caching mode is configured for SGT caching capable interfaces at the managed system. 'none' indicates that sgt-caching for all Layer 3 interfaces (excluding SVIs) is disabled. 'standAlone' indicates that SGT-caching is enabled on every TrustSec capable Layer3 interface (excluding SVIs) in the device. 'withEnforcement' indicates that SGT-caching is enabled on interfaces that have RBAC enforcement enabled. 'vlan' indicates that SGT-caching is enabled on the VLANs specified by ctspSgtCachingVlansfFirst2K & ctspSgtCachingVlansSecond2K Enumeration: 'none': 1, 'vlan': 4, 'withEnforcement': 3, 'standAlone': 2.
                 ctspSgtCachingVlansFirst2K 1.3.6.1.4.1.9.9.713.1.8.2 cisco2kvlanlist read-write
A string of octets containing one bit per VLAN for VLANs 0 to 2047. If the bit corresponding to a VLAN is set to 1, it indicates SGT-caching is enabled on the VLAN. If the bit corresponding to a VLAN is set to 0, it indicates SGT-caching is disabled on the VLAN.
                 ctspSgtCachingVlansSecond2K 1.3.6.1.4.1.9.9.713.1.8.3 cisco2kvlanlist read-write
A string of octets containing one bit per VLAN for VLANs 2048 to 4095. If the bit corresponding to a VLAN is set to 1, it indicates SGT-caching is enabled on the VLAN. If the bit corresponding to a VLAN is set to 0, it indicates SGT-caching is disabled on the VLAN.
             ctspNotifsControl 1.3.6.1.4.1.9.9.713.1.9
                 ctspPeerPolicyUpdatedNotifEnable 1.3.6.1.4.1.9.9.713.1.9.1 truthvalue read-write
This object specifies whether the system generates ctspPeerPolicyUpdatedNotif. A value of 'false' will prevent ctspPeerPolicyUpdatedNotif notifications from being generated by this system.
                 ctspAuthorizationSgaclFailNotifEnable 1.3.6.1.4.1.9.9.713.1.9.2 truthvalue read-write
This object specifies whether this system generates the ctspAuthorizationSgaclFailNotif. A value of 'false' will prevent ctspAuthorizationSgaclFailNotif notifications from being generated by this system.
             ctspNotifsOnlyInfo 1.3.6.1.4.1.9.9.713.1.10
                   ctspOldPeerSgt 1.3.6.1.4.1.9.9.713.1.10.1 ctssecuritygrouptag no-access
This object provides the old sgt value for ctspPeerPolicyUpdatedNotif, i.e., the sgt value before the policy is updated.
                   ctspAuthorizationSgaclFailReason 1.3.6.1.4.1.9.9.713.1.10.2 integer no-access
This object indicates the reason of failure during SGACL acquisitions, installations and uninstallations, which is associated with ctspAuthorizationSgaclFailNotif; 'downloadACE' - Failure during downloading ACE in SGACL acquisition. 'downloadSrc' - Failure during downloading source list in SGACL acquisition. 'downloadDst' - Failure during downloading destination list in SGACL acquisition. 'installPolicy' - Failure during SGACL policy installation 'installPolicyStandby' - Failure during SGACL policy installation on standby 'installForIP' - Failure during SGACL installation for specific IP type. 'uninstall' - Failure during SGACL uninstallation. Enumeration: 'installForIP': 6, 'downloadDst': 3, 'downloadACE': 1, 'downloadSrc': 2, 'installPolicy': 4, 'installPolicyStandby': 5, 'uninstall': 7.
                   ctspAuthorizationSgaclFailInfo 1.3.6.1.4.1.9.9.713.1.10.3 snmpadminstring no-access
This object provides additional information about authorization SGACL failure, which is associated with ctspAuthorizationSgaclFailNotif.
         ciscoTrustSecPolicyMIBConformance 1.3.6.1.4.1.9.9.713.2
             ciscoTrustSecPolicyMIBCompliances 1.3.6.1.4.1.9.9.713.2.1
                 ciscoTrustSecPolicyMIBCompliance 1.3.6.1.4.1.9.9.713.2.1.1
The compliance statement for the CISCO-TRUSTSEC-POLICY-MIB
                 ciscoTrustSecPolicyMIBComplianceRev2 1.3.6.1.4.1.9.9.713.2.1.2
The compliance statement for the CISCO-TRUSTSEC-POLICY-MIB
             ciscoTrustSecPolicyMIBGroups 1.3.6.1.4.1.9.9.713.2.2
                 ctspGlobalSgaclEnforcementGroup 1.3.6.1.4.1.9.9.713.2.2.1
A collection of object which provides the SGACL enforcement information for all TrustSec capable Layer 3 interfaces (excluding SVIs) at the device level.
                 ctspSgaclIpv4DropNetflowMonitorGroup 1.3.6.1.4.1.9.9.713.2.2.2
A collection of object which provides netflow monitor information for IPv4 traffic drop packet due to SGACL enforcement in the device.
                 ctspSgaclIpv6DropNetflowMonitorGroup 1.3.6.1.4.1.9.9.713.2.2.3
A collection of object which provides netflow monitor information for IPv6 traffic drop packet due to SGACL enforcement in the device.
                 ctspVlanConfigGroup 1.3.6.1.4.1.9.9.713.2.2.4
A collection of object which provides the SGACL enforcement and VRF information for each VLAN.
                 ctspConfigSgaclMappingGroup 1.3.6.1.4.1.9.9.713.2.2.5
A collection of objects which provides the administratively configured SGACL mapping information in the device.
                 ctspDownloadedSgaclMappingGroup 1.3.6.1.4.1.9.9.713.2.2.6
A collection of objects which provides the downloaded SGACL mapping information in the device.
                 ctspOperSgaclMappingGroup 1.3.6.1.4.1.9.9.713.2.2.7
A collection of objects which provides the operational SGACL mapping information in the device.
                 ctspIpSwStatisticsGroup 1.3.6.1.4.1.9.9.713.2.2.8
A collection of objects which provides software statistics counters for unicast IP traffic subjected to SGACL enforcement.
                 ctspIpHwStatisticsGroup 1.3.6.1.4.1.9.9.713.2.2.9
A collection of objects which provides hardware statistics counters for unicast IP traffic subjected to SGACL enforcement.
                 ctspDefSwStatisticsGroup 1.3.6.1.4.1.9.9.713.2.2.10
A collection of objects which provides software statistics counters for unicast IP traffic subjected to unicast default policy enforcement.
                 ctspDefHwStatisticsGroup 1.3.6.1.4.1.9.9.713.2.2.11
A collection of objects which provides hardware statistics counters for unicast IP traffic subjected to unicast default policy enforcement.
                 ctspPeerPolicyActionGroup 1.3.6.1.4.1.9.9.713.2.2.12
A collection of object which provides refreshing of all peer policies in the device.
                 ctspPeerPolicyGroup 1.3.6.1.4.1.9.9.713.2.2.13
A collection of object which provides peer policy information in the device.
                 ctspLayer3TransportGroup 1.3.6.1.4.1.9.9.713.2.2.14
A collection of objects which provides managed information regarding the SGT propagation along with Layer 3 traffic in the device.
                 ctspIfL3PolicyConfigGroup 1.3.6.1.4.1.9.9.713.2.2.15
A collection of objects which provides managed information for Layer3 Tranport policy enforcement on capable interface in the device.
                 ctspIpSgtMappingGroup 1.3.6.1.4.1.9.9.713.2.2.16
A collection of objects which provides managed information regarding IP-to-Sgt mapping in the device.
                 ctspSgtPolicyGroup 1.3.6.1.4.1.9.9.713.2.2.17
A collection of object which provides SGT policy information in the device.
                 ctspIfSgtMappingGroup 1.3.6.1.4.1.9.9.713.2.2.18
A collection of objects which provides managed information regarding Interface-to-Sgt mapping in the device.
                 ctspVlanSgtMappingGroup 1.3.6.1.4.1.9.9.713.2.2.19
A collection of objects which provides sgt mapping information for the IP traffic in the specified Vlan.
                 ctspSgtCachingGroup 1.3.6.1.4.1.9.9.713.2.2.20
A collection of objects which provides sgt Caching information.
                 ctspSgaclMonitorGroup 1.3.6.1.4.1.9.9.713.2.2.21
A collection of objects which provides SGACL monitor information.
                 ctspSgaclMonitorStatisticGroup 1.3.6.1.4.1.9.9.713.2.2.22
A collection of objects which provides monitor statistics counters for unicast IP traffic subjected to SGACL enforcement.
                 ctspNotifCtrlGroup 1.3.6.1.4.1.9.9.713.2.2.23
A collection of objects providing notification control for TrustSec policy notifications.
                 ctspNotifGroup 1.3.6.1.4.1.9.9.713.2.2.24
A collection of notifications for TrustSec policy.
                 ctspNotifInfoGroup 1.3.6.1.4.1.9.9.713.2.2.25
A collection of objects providing the variable binding for TrustSec policy notifications.