CISCO-TRUSTSEC-POLICY-MIB

  • Organization Cisco Systems, Inc.
  • Last update 2012-12-19

This MIB module defines managed objects that facilitate the management of various policies within the Cisco Trusted Security (TrustSec) infrastructure. The information available through this MIB includes: o Device and interface level configuration for enabling SGACL (Security Group Access Control List) enforcement on Layer2/3 traffic. o Administrative and operational SGACL mapping to Security Group Tag (SGT). o Various statistics counters for traffic subject to SGACL enforcement. o TrustSec policies with respect to peer device. o Interface level configuration for enabling the propagation of SGT along with the Layer 3 traffic in portions of network which does not have the capability to support TrustSec feature. o TrustSec policies with respect to SGT propagation with Layer 3 traffic. The following terms are used throughout this MIB: VRF: Virtual Routing and Forwarding. SGACL: Security Group Access Control List. ACE: Access Control Entries. SXP: SGT Propagation Protocol. SVI: Switch Virtual Interface. IPM: Identity Port Mapping. SGT (Security Group Tag) is a unique 16 bits value assigned to every security group and used by network devices to enforce SGACL. Peer is another device connected to the local device on the other side of a TrustSec link. Default Policy: Policy applied to traffic when there is no explicit policy between the SGT associated with the originator of the traffic and the SGT associated with the destination of the traffic.

MIB content

338 objects
Advertisement

Notifications

4 objects
  • 1.3.6.1.4.1.9.9.713.0.1 ctspPeerPolicyUpdatedNotif (current)
  • 1.3.6.1.4.1.9.9.713.0.2 ctspAuthorizationSgaclFailNotif (current)
  • 1.3.6.1.4.1.9.9.713.0.1 ctspPeerPolicyUpdatedNotif (current)
  • 1.3.6.1.4.1.9.9.713.0.2 ctspAuthorizationSgaclFailNotif (current)

Conformance groups

50 objects
  • 1.3.6.1.4.1.9.9.713.2.2.1 ctspGlobalSgaclEnforcementGroup (1 members)
  • 1.3.6.1.4.1.9.9.713.2.2.2 ctspSgaclIpv4DropNetflowMonitorGroup (1 members)
  • 1.3.6.1.4.1.9.9.713.2.2.3 ctspSgaclIpv6DropNetflowMonitorGroup (1 members)
  • 1.3.6.1.4.1.9.9.713.2.2.4 ctspVlanConfigGroup (5 members)
  • 1.3.6.1.4.1.9.9.713.2.2.5 ctspConfigSgaclMappingGroup (5 members)
  • 1.3.6.1.4.1.9.9.713.2.2.6 ctspDownloadedSgaclMappingGroup (6 members)
  • 1.3.6.1.4.1.9.9.713.2.2.7 ctspOperSgaclMappingGroup (8 members)
  • 1.3.6.1.4.1.9.9.713.2.2.8 ctspIpSwStatisticsGroup (2 members)
  • 1.3.6.1.4.1.9.9.713.2.2.9 ctspIpHwStatisticsGroup (2 members)
  • 1.3.6.1.4.1.9.9.713.2.2.10 ctspDefSwStatisticsGroup (2 members)
  • 1.3.6.1.4.1.9.9.713.2.2.11 ctspDefHwStatisticsGroup (2 members)
  • 1.3.6.1.4.1.9.9.713.2.2.12 ctspPeerPolicyActionGroup (1 members)
  • 1.3.6.1.4.1.9.9.713.2.2.13 ctspPeerPolicyGroup (6 members)
  • 1.3.6.1.4.1.9.9.713.2.2.14 ctspLayer3TransportGroup (3 members)
  • 1.3.6.1.4.1.9.9.713.2.2.15 ctspIfL3PolicyConfigGroup (2 members)
  • 1.3.6.1.4.1.9.9.713.2.2.16 ctspIpSgtMappingGroup (4 members)
  • 1.3.6.1.4.1.9.9.713.2.2.17 ctspSgtPolicyGroup (9 members)
  • 1.3.6.1.4.1.9.9.713.2.2.18 ctspIfSgtMappingGroup (5 members)
  • 1.3.6.1.4.1.9.9.713.2.2.19 ctspVlanSgtMappingGroup (3 members)
  • 1.3.6.1.4.1.9.9.713.2.2.20 ctspSgtCachingGroup (3 members)
  • 1.3.6.1.4.1.9.9.713.2.2.21 ctspSgaclMonitorGroup (8 members)
  • 1.3.6.1.4.1.9.9.713.2.2.22 ctspSgaclMonitorStatisticGroup (4 members)
  • 1.3.6.1.4.1.9.9.713.2.2.23 ctspNotifCtrlGroup (2 members)
  • 1.3.6.1.4.1.9.9.713.2.2.24 ctspNotifGroup (0 members)
  • 1.3.6.1.4.1.9.9.713.2.2.25 ctspNotifInfoGroup (3 members)
  • 1.3.6.1.4.1.9.9.713.2.2.1 ctspGlobalSgaclEnforcementGroup (1 members)
  • 1.3.6.1.4.1.9.9.713.2.2.2 ctspSgaclIpv4DropNetflowMonitorGroup (1 members)
  • 1.3.6.1.4.1.9.9.713.2.2.3 ctspSgaclIpv6DropNetflowMonitorGroup (1 members)
  • 1.3.6.1.4.1.9.9.713.2.2.4 ctspVlanConfigGroup (5 members)
  • 1.3.6.1.4.1.9.9.713.2.2.5 ctspConfigSgaclMappingGroup (5 members)
  • 1.3.6.1.4.1.9.9.713.2.2.6 ctspDownloadedSgaclMappingGroup (6 members)
  • 1.3.6.1.4.1.9.9.713.2.2.7 ctspOperSgaclMappingGroup (8 members)
  • 1.3.6.1.4.1.9.9.713.2.2.8 ctspIpSwStatisticsGroup (2 members)
  • 1.3.6.1.4.1.9.9.713.2.2.9 ctspIpHwStatisticsGroup (2 members)
  • 1.3.6.1.4.1.9.9.713.2.2.10 ctspDefSwStatisticsGroup (2 members)
  • 1.3.6.1.4.1.9.9.713.2.2.11 ctspDefHwStatisticsGroup (2 members)
  • 1.3.6.1.4.1.9.9.713.2.2.12 ctspPeerPolicyActionGroup (1 members)
  • 1.3.6.1.4.1.9.9.713.2.2.13 ctspPeerPolicyGroup (6 members)
  • 1.3.6.1.4.1.9.9.713.2.2.14 ctspLayer3TransportGroup (3 members)
  • 1.3.6.1.4.1.9.9.713.2.2.15 ctspIfL3PolicyConfigGroup (2 members)
  • 1.3.6.1.4.1.9.9.713.2.2.16 ctspIpSgtMappingGroup (4 members)
  • 1.3.6.1.4.1.9.9.713.2.2.17 ctspSgtPolicyGroup (9 members)
  • 1.3.6.1.4.1.9.9.713.2.2.18 ctspIfSgtMappingGroup (5 members)
  • 1.3.6.1.4.1.9.9.713.2.2.19 ctspVlanSgtMappingGroup (3 members)
  • 1.3.6.1.4.1.9.9.713.2.2.20 ctspSgtCachingGroup (3 members)
  • 1.3.6.1.4.1.9.9.713.2.2.21 ctspSgaclMonitorGroup (8 members)
  • 1.3.6.1.4.1.9.9.713.2.2.22 ctspSgaclMonitorStatisticGroup (4 members)
  • 1.3.6.1.4.1.9.9.713.2.2.23 ctspNotifCtrlGroup (2 members)
  • 1.3.6.1.4.1.9.9.713.2.2.24 ctspNotifGroup (0 members)
  • 1.3.6.1.4.1.9.9.713.2.2.25 ctspNotifInfoGroup (3 members)

Informations

Last update
2012-12-19
Organization
Cisco Systems, Inc.
Contact info
Cisco Systems Customer Service Postal: 170 W Tasman Drive San Jose, CA 95134 USA Tel: +1 800 553-NETS E-mail: cs-lan-switch-snmp@cisco.com

Imports

Revisions

2012-12-19
Added following OBJECT-GROUP: - ctspNotifCtrlGroup - ctspNotifGroup - ctspNotifInfoGroup - ctspIfSgtMappingGroup - ctspVlanSgtMappingGroup - ctspSgtCachingGroup - ctspSgaclMonitorGroup - ctspSgaclMonitorStatisticGroup Added new compliance - ciscoTrustSecPolicyMIBCompliances Modified ctspIpSgtSource to add l3if(6), vlan(7), caching(8).
2009-11-06
Initial version of this MIB module.
Advertisement