CISCO-TRUSTSEC-INTERFACE-MIB

File: CISCO-TRUSTSEC-INTERFACE-MIB.mib (76008 bytes)

Imported modules

SNMPv2-SMI SNMPv2-CONF SNMPv2-TC
IF-MIB SNMP-FRAMEWORK-MIB CISCO-TRUSTSEC-TC-MIB
CISCO-SMI

Imported symbols

MODULE-IDENTITY OBJECT-TYPE NOTIFICATION-TYPE
Counter32 Integer32 Unsigned32
MODULE-COMPLIANCE OBJECT-GROUP NOTIFICATION-GROUP
StorageType RowStatus TruthValue
DateAndTime TEXTUAL-CONVENTION ifIndex
ifName SnmpAdminString CtsSecurityGroupTag
ciscoMgmt

Defined Types

CtsiCasheDataSource  
The source of cached authorization data. unknown - cache source type not covered by any of the follow enumerations. acs - authorization data is loaded from ACS dram - authorization data is loaded from DRAM. nvram - authorization data is loaded from NVRAM. dramOrNvram - authorization data is loaded from DRAM or NVRAM.
TEXTUAL-CONVENTION    
  INTEGER unknown(1), acs(2), dram(3), nvram(4), all(5)  

CtsSapNegMode  
The SAP negotiation modes supported in TrustSec system. encapNoAuthenNoEncrypt - Encapsulation present, no authentication, no encryption. gcmAuthenNoEncrypt - GCM authentication, no encryption. gcmAuthenGcmEncrypt - GCM authentication, GCM encryption. noEncap - No encapsulation.
TEXTUAL-CONVENTION    
  INTEGER encapNoAuthenNoEncrypt(1), gcmAuthenNoEncrypt(2), gcmAuthenGcmEncrypt(3), noEncap(4)  

CtsSapNegModeList  
The list of SAP negotiation modes provided within TrustSec (Cisco Trusted Security) system. Each octet represents a SAP negotiation mode which is defined in CtsSapNegMode. The DESCRIPTION clause of CtsSapNegModeList objects must fully describe the relationship between modes.
TEXTUAL-CONVENTION    
  OCTET STRING  

CtsiInterfaceControllerState  
The state of the TrustSec Interface Controller state machine. unknown - none of the following states. initializing - the TrustSec interface controller state machine enter the initialize state when TrustSec is enabled on this interface. authenticating - the peer is being authenticated if the dot1x mode is enabled. authorizing - the peer is being authorized. sapNegotiating - the SA(Security Association) is being negotiated with the peer. open - the line is up from TrustSec perspective. held - a hold down timer is set. disconnecting - a failure has occurred, or the TrustSec link is going down, or TrustSec is being disabled. invalid - unable to start the TrustSec state machine. licenseError - No MACSec software license.
TEXTUAL-CONVENTION    
  INTEGER unknown(1), initialize(2), authenticating(3), authorizing(4), sapNegotiating(5), open(6), held(7), disconnecting(8), invalid(9), licenseError(10)  

CtsiIfConfigEntry  
SEQUENCE    
  ctsiIfModeCapability BITS
  ctsiIfConfiguredMode INTEGER
  ctsiIfCacheClear TruthValue
  ctsiIfRekey TruthValue

CtsiIfDot1xEntry  
SEQUENCE    
  ctsiIfDot1xSgtPropagateEnabled TruthValue
  ctsiIfDot1xReauthInterval Integer32
  ctsiIfDot1xSapModeList CtsSapNegModeList
  ctsiIfDot1xDownloadReauthInterval Integer32
  ctsiIfDot1xOperReauthInterval Integer32
  ctsiIfDot1xReauthTimeLeft Integer32
  ctsiIfDot1xStorageType StorageType
  ctsiIfDot1xRowStatus RowStatus

CtsiIfManualEntry  
SEQUENCE    
  ctsiIfManualDynamicPeerId SnmpAdminString
  ctsiIfManualStaticSgt CtsSecurityGroupTag
  ctsiIfManualStaticSgtTrusted TruthValue
  ctsiIfManualSgtPropagateEnabled TruthValue
  ctsiIfManualSapPmk OCTET STRING
  ctsiIfManualSapModeList CtsSapNegModeList
  ctsiIfManualStorageType StorageType
  ctsiIfManualRowStatus RowStatus

CtsiIfL3ForwardEntry  
SEQUENCE    
  ctsiIfL3ForwardMode INTEGER
  ctsiIfL3ForwardStorageType StorageType
  ctsiIfL3ForwardRowStatus RowStatus

CtsiIfStatusEntry  
SEQUENCE    
  ctsiIfControllerState CtsiInterfaceControllerState
  ctsiIfAuthenticationStatus INTEGER
  ctsiIfPeerId SnmpAdminString
  ctsiIfPeerAdvCapability BITS
  ctsiIfAuthorizationStatus INTEGER
  ctsiIfPeerSgt CtsSecurityGroupTag
  ctsiIfPeerSgtTrusted TruthValue
  ctsiIfSapNegotiationStatus INTEGER
  ctsiIfSapNegModeList CtsSapNegModeList
  ctsiIfCacheExpirationTime DateAndTime
  ctsiIfCacheDataSource CtsiCasheDataSource
  ctsiIfCriticalAuthStatus INTEGER

CtsiIfStatsEntry  
SEQUENCE    
  ctsiIfAuthenticationSuccess Counter32
  ctsiIfAuthenticationReject Counter32
  ctsiIfAuthenticationFailure Counter32
  ctsiIfAuthenticationNoResponse Counter32
  ctsiIfAuthenticationLogoff Counter32
  ctsiIfAuthorizationSuccess Counter32
  ctsiIfAuthorizationPolicyFail Counter32
  ctsiIfAuthorizationFail Counter32
  ctsiIfSapSuccess Counter32
  ctsiIfSapFail Counter32

CtsiAuthorizationEntry  
SEQUENCE    
  ctsiAuthorizationPeerId SnmpAdminString
  ctsiAuthorizationPeerSgt CtsSecurityGroupTag
  ctsiAuthorizationState INTEGER
  ctsiAuthorizationLastRefresh DateAndTime
  ctsiAuthorizationTimeLeft Integer32
  ctsiAuthorizationTimeToRefresh Integer32
  ctsiAuthorizationCacheDataSource CtsiCasheDataSource
  ctsiAuthorizationStatus INTEGER

CtsiIfcStatsEntry  
SEQUENCE    
  ctsiIfcState CtsiInterfaceControllerState
  ctsiIfcStatsIfCount Unsigned32

Defined Values

ciscoTrustSecIfMIB 1.3.6.1.4.1.9.9.740
This MIB module defines management objects for configuration and monitoring of the interfaces in Cisco Trusted Security environment. Glossary: ACS - Cisco Secure Access Control Server IFC - TrustSec Interface Controller MACSec - Media Access Control (MAC) Security PMK - Pairwise Master Key SAP - Security Association Protocol SGT - Security Group Tag. A tag identifying its source, assigned to a packet on ingress to a TrustSec cloud, and used to determine security and other policy to be applied to it along its path through the cloud. TrustSec - Cisco Trusted Security
MODULE-IDENTITY    

ciscoTrustSecIfMIBNotifs 1.3.6.1.4.1.9.9.740.0
OBJECT IDENTIFIER    

ciscoTrustSecIfMIBObjects 1.3.6.1.4.1.9.9.740.1
OBJECT IDENTIFIER    

ciscoTrustSecIfMIBConform 1.3.6.1.4.1.9.9.740.2
OBJECT IDENTIFIER    

ctsiIfConfigObjects 1.3.6.1.4.1.9.9.740.1.1
OBJECT IDENTIFIER    

ctsiIfDot1xObjects 1.3.6.1.4.1.9.9.740.1.2
OBJECT IDENTIFIER    

ctsiIfManualObjects 1.3.6.1.4.1.9.9.740.1.3
OBJECT IDENTIFIER    

ctsiIfL3ForwardObjects 1.3.6.1.4.1.9.9.740.1.4
OBJECT IDENTIFIER    

ctsiIfStatusObjects 1.3.6.1.4.1.9.9.740.1.5
OBJECT IDENTIFIER    

ctsiIfStatsObjects 1.3.6.1.4.1.9.9.740.1.6
OBJECT IDENTIFIER    

ctsiAuthorizationObjects 1.3.6.1.4.1.9.9.740.1.7
OBJECT IDENTIFIER    

ctsiIfcStatsObjects 1.3.6.1.4.1.9.9.740.1.8
OBJECT IDENTIFIER    

ctsiEventsStatsObjects 1.3.6.1.4.1.9.9.740.1.9
OBJECT IDENTIFIER    

ctsiIfModeStatsObjects 1.3.6.1.4.1.9.9.740.1.10
OBJECT IDENTIFIER    

ctsiIfNotifsControlObjects 1.3.6.1.4.1.9.9.740.1.11
OBJECT IDENTIFIER    

ctsiIfNotifsOnlyInfoObjects 1.3.6.1.4.1.9.9.740.1.12
OBJECT IDENTIFIER    

ctsiIfConfigTable 1.3.6.1.4.1.9.9.740.1.1.1
A list of the TrustSec capable interfaces.
OBJECT-TYPE    
  SEQUENCE OF  
    CtsiIfConfigEntry

ctsiIfConfigEntry 1.3.6.1.4.1.9.9.740.1.1.1.1
An entry contains the configuration information for a particular TrustSec interface.
OBJECT-TYPE    
  CtsiIfConfigEntry  

ctsiIfModeCapability 1.3.6.1.4.1.9.9.740.1.1.1.1.1
This object indicates the supported TrustSec mode on this interface.
OBJECT-TYPE    
  BITS dot1x(0), manual(1), l3Forward(2)  

ctsiIfConfiguredMode 1.3.6.1.4.1.9.9.740.1.1.1.1.2
This object indicates the TrustSec mode currently configured on the interface. Each mode may have a corresponding entry in its corresponding configuration table. unknown - The configured TrustSec mode is none of the following. none - TrustSec is not configured in any mode. dot1x - TrustSec dot1x mode is configured for this interface. TrustSec system will use 802.1x for authentication, RADIUS for authorization and SAP negotiation for SA parameter. manual - TrustSec manual mode is configured for this interface. The authentication was bypassed in manual mode. User needs to manually to configure the policy and the SAP negotiation parameter. l3Forward - TrustSec L3 forwarding mode is configured for this interface.
OBJECT-TYPE    
  INTEGER unknown(1), none(2), dot1x(3), manual(4), l3Forward(5)  

ctsiIfCacheClear 1.3.6.1.4.1.9.9.740.1.1.1.1.3
This object allows user to clear the cache for the specific TrustSec interface by setting the value to 'true'. Setting the value to 'false' has no effect. When read, this object always returns 'false'.
OBJECT-TYPE    
  TruthValue  

ctsiIfRekey 1.3.6.1.4.1.9.9.740.1.1.1.1.4
This object allows user to re-generate the SAP key for the specific TrustSec interface by setting the value to 'true'. Setting the value to 'false' has no effect. When read, this object always returns 'false'.
OBJECT-TYPE    
  TruthValue  

ctsiIfDot1xTable 1.3.6.1.4.1.9.9.740.1.2.1
A list of the interfaces which have TrustSec dot1x mode configuration information.
OBJECT-TYPE    
  SEQUENCE OF  
    CtsiIfDot1xEntry

ctsiIfDot1xEntry 1.3.6.1.4.1.9.9.740.1.2.1.1
An entry containing the TrustSec dot1x configuration for a particular interface. An entry can be created or deleted by using ctsiIfDot1xRowStatus. An entry can only be created if the value of corresponding instance of ctsiIfConfiguredMode is 'none' and the 'dot1x' BIT of corresponding instance ctsiIfModeCapability is set.
OBJECT-TYPE    
  CtsiIfDot1xEntry  

ctsiIfDot1xSgtPropagateEnabled 1.3.6.1.4.1.9.9.740.1.2.1.1.1
This object specifies whether the SGT propagation is enabled on this interface.
OBJECT-TYPE    
  TruthValue  

ctsiIfDot1xReauthInterval 1.3.6.1.4.1.9.9.740.1.2.1.1.2
This object specifies the re-authentication interval applied to this interface when it is not provided from the ACS.
OBJECT-TYPE    
  Integer32  

ctsiIfDot1xSapModeList 1.3.6.1.4.1.9.9.740.1.2.1.1.3
This object specifies the advertised modes for the SAP negotiation on this interface. Modes are executed in the order as specified in the mode list. Mode which is at the beginning of the method list will be executed first. Method which is at the end of mode list will be executed last. This object is not allowed to be set to a zero length string.
OBJECT-TYPE    
  CtsSapNegModeList  

ctsiIfDot1xDownloadReauthInterval 1.3.6.1.4.1.9.9.740.1.2.1.1.4
This object indicates the re-authentication interval which is downloaded from ACS. A value of zero indicates no re-authentication interval is downloaded from ACS. A value of -1 indicates that this object is not applicable on this interface.
OBJECT-TYPE    
  Integer32 -1..2147483647  

ctsiIfDot1xOperReauthInterval 1.3.6.1.4.1.9.9.740.1.2.1.1.5
This object indicates the operational re-authentication interval of the interface. A value of zero indicates that dot1x re-authentication is disabled on this interface. A value of -1 indicates that this object is not applicable on this interface.
OBJECT-TYPE    
  Integer32 -1..2147483647  

ctsiIfDot1xReauthTimeLeft 1.3.6.1.4.1.9.9.740.1.2.1.1.6
This object indicates the leftover time of the current authentication session. A value of zero indicates the re-authentication is in progress. A value of -1 indicates that this object is not applicable on this interface.
OBJECT-TYPE    
  Integer32 -1..2147483647  

ctsiIfDot1xStorageType 1.3.6.1.4.1.9.9.740.1.2.1.1.7
The storage type for this conceptual row.
OBJECT-TYPE    
  StorageType  

ctsiIfDot1xRowStatus 1.3.6.1.4.1.9.9.740.1.2.1.1.8
The status of this conceptual row. All writable objects in this row may be modified at any time.
OBJECT-TYPE    
  RowStatus  

ctsiIfManualTable 1.3.6.1.4.1.9.9.740.1.3.1
A list of the interfaces which have TrustSec manual mode configuration information.
OBJECT-TYPE    
  SEQUENCE OF  
    CtsiIfManualEntry

ctsiIfManualEntry 1.3.6.1.4.1.9.9.740.1.3.1.1
An entry containing the TrustSec manual configuration information for a particular interface. An entry can be created or deleted by using ctsiIfManualRowStatus. An entry can only be created if the value of corresponding instance of ctsiIfConfiguredMode is 'none' and the 'manual' BIT of corresponding instance ctsiIfModeCapability is set.
OBJECT-TYPE    
  CtsiIfManualEntry  

ctsiIfManualDynamicPeerId 1.3.6.1.4.1.9.9.740.1.3.1.1.1
This object specifies the peer's device identity which is used to obtain the desired policy for authorization request. Setting a none-zero value on this object is not allowed if the value of ctsiIfManualStaticSgt is not set to zero. A zero length string indicates that the policy acquisition from the ACS using the peer's identity is disabled on this interface.
OBJECT-TYPE    
  SnmpAdminString  

ctsiIfManualStaticSgt 1.3.6.1.4.1.9.9.740.1.3.1.1.2
This object specifies the statically configured SGT for tagging the ingress traffic from the peer. Setting a none-zero value on this object is not allowed if the value of ctsiIfManualDynamicPeerId is not set to a zero length string. A value of zero indicates that no statically SGT tagging.
OBJECT-TYPE    
  CtsSecurityGroupTag  

ctsiIfManualStaticSgtTrusted 1.3.6.1.4.1.9.9.740.1.3.1.1.3
This object specifies the peer's SGT assignment trust state. This object only can be set when ctsiIfManualStaticSgt is none-zero.
OBJECT-TYPE    
  TruthValue  

ctsiIfManualSgtPropagateEnabled 1.3.6.1.4.1.9.9.740.1.3.1.1.4
This object specifies whether the SGT propagation is enabled on this interface.
OBJECT-TYPE    
  TruthValue  

ctsiIfManualSapPmk 1.3.6.1.4.1.9.9.740.1.3.1.1.5
This object specifies the PMK used by SAP. A zero length string for this object indicates the SAP negotiation is disabled on this interface.
OBJECT-TYPE    
  OCTET STRING Size(0|32)  

ctsiIfManualSapModeList 1.3.6.1.4.1.9.9.740.1.3.1.1.6
This object specified the advertised modes for the SAP negotiation on this interface. Modes are executed in the order as specified in the mode list. Mode which is at the beginning of the mode list will be executed first. Mode which is at the end of mode list will be executed last. Value of this object will becomes zero length octet if SAP negotiation is disabled. This object is not allowed to be set to a zero length string.
OBJECT-TYPE    
  CtsSapNegModeList  

ctsiIfManualStorageType 1.3.6.1.4.1.9.9.740.1.3.1.1.7
The storage type for this conceptual row.
OBJECT-TYPE    
  StorageType  

ctsiIfManualRowStatus 1.3.6.1.4.1.9.9.740.1.3.1.1.8
The status of this conceptual row. All writable objects in this row may be modified at any time.
OBJECT-TYPE    
  RowStatus  

ctsiIfL3ForwardTable 1.3.6.1.4.1.9.9.740.1.4.1
A list of the interfaces which have TrustSec L3 forwarding configuration information.
OBJECT-TYPE    
  SEQUENCE OF  
    CtsiIfL3ForwardEntry

ctsiIfL3ForwardEntry 1.3.6.1.4.1.9.9.740.1.4.1.1
An entry containing the TrustSec L3 forwarding configuration information for a particular interface. An entry can be created or deleted by using ctsiIfL3ForwardRowStatus. An entry can only be created if the value of corresponding instance of ctsiIfConfiguredMode is 'none' and the 'l3Forward' BIT of corresponding instance ctsiIfModeCapability is set.
OBJECT-TYPE    
  CtsiIfL3ForwardEntry  

ctsiIfL3ForwardMode 1.3.6.1.4.1.9.9.740.1.4.1.1.1
This object specifies the type of L3 forwarding for the interface. l3Ipv4Forward - TrustSec L3 IPv4 forwarding. l3Ipv6Forward - TrustSec L3 IPv6 forwarding. l3IpForward - TrustSec L3 IPv6 and IPv4 forwarding.
OBJECT-TYPE    
  INTEGER l3Ipv4Forward(1), l3Ipv6Forward(2), l3IpForward(3)  

ctsiIfL3ForwardStorageType 1.3.6.1.4.1.9.9.740.1.4.1.1.2
The storage type for this conceptual row.
OBJECT-TYPE    
  StorageType  

ctsiIfL3ForwardRowStatus 1.3.6.1.4.1.9.9.740.1.4.1.1.3
The status of this conceptual row. All writable objects in this row may be modified at any time.
OBJECT-TYPE    
  RowStatus  

ctsiIfStatusTable 1.3.6.1.4.1.9.9.740.1.5.1
A list of TrustSec enabled interfaces.
OBJECT-TYPE    
  SEQUENCE OF  
    CtsiIfStatusEntry

ctsiIfStatusEntry 1.3.6.1.4.1.9.9.740.1.5.1.1
An entry contains the information of the specific TrustSec interface. A entry is created by system when TrustSec is enabled for an interface. An entry is deleted by system if TrustSec is disabled for an interface.
OBJECT-TYPE    
  CtsiIfStatusEntry  

ctsiIfControllerState 1.3.6.1.4.1.9.9.740.1.5.1.1.1
This object indicates the current IFC state of this interface.
OBJECT-TYPE    
  CtsiInterfaceControllerState  

ctsiIfAuthenticationStatus 1.3.6.1.4.1.9.9.740.1.5.1.1.2
This object indicates the current TrustSec authentication status of this interface. unknown - status not covered by any of the follow enumerations. succeeded - authentication is succeeded. rejected - authentication is rejected. logOff - peer logged off. noRespond - peer no respond. notApplicable - bypassing the authentication. incomplete - authentication is not completed. failed - authentication failed.
OBJECT-TYPE    
  INTEGER unknown(1), succeeded(2), rejected(3), logOff(4), noRespond(5), notApplicable(6), incomplete(7), failed(8)  

ctsiIfPeerId 1.3.6.1.4.1.9.9.740.1.5.1.1.3
This object indicates the device identity or symbolic group name of the remote peer.
OBJECT-TYPE    
  SnmpAdminString  

ctsiIfPeerAdvCapability 1.3.6.1.4.1.9.9.740.1.5.1.1.4
This object indicates the advertised capabilities of the remote peer associated with this interface.
OBJECT-TYPE    
  BITS sap(0)  

ctsiIfAuthorizationStatus 1.3.6.1.4.1.9.9.740.1.5.1.1.5
This object indicates the current TrustSec authorization status of the interface. unknown - status not covered by any of the follow enumerations. inProgress - authorization in progress. succeeded - authorization succeeded. failed - authorization failed. fallBackPolicy - apply the fallback policy. incomplete - authorization aborted. peerSucceeded - apply the peer policy succeeded. rbaclSucceeded - apply the RBACL policy succeeded. policySucceeded - apply the all policy succeeded.
OBJECT-TYPE    
  INTEGER unknown(1), inProgress(2), succeeded(3), failed(4), fallBackPolicy(5), incomplete(6), peerSucceeded(7), rbaclSucceeded(8), policySucceeded(9)  

ctsiIfPeerSgt 1.3.6.1.4.1.9.9.740.1.5.1.1.6
This object indicates the SGT value of the remote peer.
OBJECT-TYPE    
  CtsSecurityGroupTag  

ctsiIfPeerSgtTrusted 1.3.6.1.4.1.9.9.740.1.5.1.1.7
This object indicates whether the SGT of the remote peer is trusted.
OBJECT-TYPE    
  TruthValue  

ctsiIfSapNegotiationStatus 1.3.6.1.4.1.9.9.740.1.5.1.1.8
This object indicates the SAP negotiation status on this interface. notApplicable - SAP disabled on local or remote peer is not SAP capable. unknown - status not covered by any of the follow enumerations. inProgress - SAP negotiation in progress. succeeded - SAP negotiation completed. failed - SAP negotiation failed. licenseError - No MACSec software license.
OBJECT-TYPE    
  INTEGER notApplicable(1), unknown(2), inProgress(3), succeeded(4), failed(5), licenseError(6)  

ctsiIfSapNegModeList 1.3.6.1.4.1.9.9.740.1.5.1.1.9
This object indicates the operational SAP negotiation mode list on this interface.
OBJECT-TYPE    
  CtsSapNegModeList  

ctsiIfCacheExpirationTime 1.3.6.1.4.1.9.9.740.1.5.1.1.10
This object indicates the time when the current cached data applied on the interface will be expired. A value of zero indicates that the cached data will never be expired.
OBJECT-TYPE    
  DateAndTime  

ctsiIfCacheDataSource 1.3.6.1.4.1.9.9.740.1.5.1.1.11
This object indicates the source of cached data applied to the interface.
OBJECT-TYPE    
  CtsiCasheDataSource  

ctsiIfCriticalAuthStatus 1.3.6.1.4.1.9.9.740.1.5.1.1.12
This object indicates the CTS Critical-Auth status of interface. disable - link is not in Critical-Auth mode. cache - link is in Critical-Auth cached mode. default - link is in Critical-Auth default mode.
OBJECT-TYPE    
  INTEGER disable(1), cache(2), default(3)  

ctsiIfStatsTable 1.3.6.1.4.1.9.9.740.1.6.1
A list of Cisco Trusted Security capable interface.
OBJECT-TYPE    
  SEQUENCE OF  
    CtsiIfStatsEntry

ctsiIfStatsEntry 1.3.6.1.4.1.9.9.740.1.6.1.1
An entry contains the statistics information of a particular TrustSec interface. An entry created by system for each interface is TrustSec enabled. An entry deleted by system for each interface is TrustSec disabled.
OBJECT-TYPE    
  CtsiIfStatsEntry  

ctsiIfAuthenticationSuccess 1.3.6.1.4.1.9.9.740.1.6.1.1.1
The number of times that peer has been successfully authenticated on this interface.
OBJECT-TYPE    
  Counter32  

ctsiIfAuthenticationReject 1.3.6.1.4.1.9.9.740.1.6.1.1.2
The number of times that peer has been rejected in authentication on this interface.
OBJECT-TYPE    
  Counter32  

ctsiIfAuthenticationFailure 1.3.6.1.4.1.9.9.740.1.6.1.1.3
The number of times that peer has been failed in authentication on this interface.
OBJECT-TYPE    
  Counter32  

ctsiIfAuthenticationNoResponse 1.3.6.1.4.1.9.9.740.1.6.1.1.4
The number of times that no authentication respond received from the remote peer associated with this interface.
OBJECT-TYPE    
  Counter32  

ctsiIfAuthenticationLogoff 1.3.6.1.4.1.9.9.740.1.6.1.1.5
The number of times that received authentication log off from the peer associated with this interface.
OBJECT-TYPE    
  Counter32  

ctsiIfAuthorizationSuccess 1.3.6.1.4.1.9.9.740.1.6.1.1.6
The number of times that the peer entity successfully passed the TrustSec authorization challenge on this interface.
OBJECT-TYPE    
  Counter32  

ctsiIfAuthorizationPolicyFail 1.3.6.1.4.1.9.9.740.1.6.1.1.7
The number of time that fail to access policy or refresh the policy for TrustSec authorization on this interface.
OBJECT-TYPE    
  Counter32  

ctsiIfAuthorizationFail 1.3.6.1.4.1.9.9.740.1.6.1.1.8
The number of times that peer has been failed in TrustSec authorization on this interface.
OBJECT-TYPE    
  Counter32  

ctsiIfSapSuccess 1.3.6.1.4.1.9.9.740.1.6.1.1.9
The number of times that SAP negotiation is succeed on this interface.
OBJECT-TYPE    
  Counter32  

ctsiIfSapFail 1.3.6.1.4.1.9.9.740.1.6.1.1.10
The number of times that SAP negotiation has failed on this interface.
OBJECT-TYPE    
  Counter32  

ctsiAuthorizationTable 1.3.6.1.4.1.9.9.740.1.7.1
A list of authorized remote peers on this device.
OBJECT-TYPE    
  SEQUENCE OF  
    CtsiAuthorizationEntry

ctsiAuthorizationEntry 1.3.6.1.4.1.9.9.740.1.7.1.1
An entry containing the management information for a particular authorized peer. An entry is created when the policy acquired from the ACS for a new peer. An entry is deleted when the authorization of the peer has expired or fails to refresh its policy.
OBJECT-TYPE    
  CtsiAuthorizationEntry  

ctsiAuthorizationPeerId 1.3.6.1.4.1.9.9.740.1.7.1.1.1
This object indicates the device identity or symbolic group name of the remote peer.
OBJECT-TYPE    
  SnmpAdminString Size(1..64)  

ctsiAuthorizationPeerSgt 1.3.6.1.4.1.9.9.740.1.7.1.1.2
This object indicates the SGT of the remote peer.
OBJECT-TYPE    
  CtsSecurityGroupTag  

ctsiAuthorizationState 1.3.6.1.4.1.9.9.740.1.7.1.1.3
This object indicates the current state of the authorization entity. unknown - none of the following states. start - authorization entity created and initialized. waitingRespond - a policy request has been made by remote peer to the ACS and waiting for the response. assessing - the policy been received from ACS and is being assessed. complete - policy has been received and assessed. failure - failed to download the policy from the ACS.
OBJECT-TYPE    
  INTEGER unknown(1), start(2), waitingRespond(3), assessing(4), complete(5), failure(6)  

ctsiAuthorizationLastRefresh 1.3.6.1.4.1.9.9.740.1.7.1.1.4
The object indicates the date and time when the authorized peer was last refreshed.
OBJECT-TYPE    
  DateAndTime  

ctsiAuthorizationTimeLeft 1.3.6.1.4.1.9.9.740.1.7.1.1.5
This object indicates the leftover time for the current policy. A value of zero indicates that policy refresh is in progress. A value of -1 indicates that this object is not applicable on this authorization entry.
OBJECT-TYPE    
  Integer32 -1..2147483647  

ctsiAuthorizationTimeToRefresh 1.3.6.1.4.1.9.9.740.1.7.1.1.6
This object indicates the time left to start the policy refresh. A value of zero indicates that policy refresh is in progress. A value of -1 indicates that this object is not applicable on this authorization entry.
OBJECT-TYPE    
  Integer32 -1..2147483647  

ctsiAuthorizationCacheDataSource 1.3.6.1.4.1.9.9.740.1.7.1.1.7
This object indicates the source of cached data.
OBJECT-TYPE    
  CtsiCasheDataSource  

ctsiAuthorizationStatus 1.3.6.1.4.1.9.9.740.1.7.1.1.8
This object indicates the status of this authorization peer. unknown - status not covered by any of the follow enumerations. inProgress - new authorization link created or add a new policy request for an existing link. succeeded - policy received successful. failed - policy download failed. fallbackPolicy - download policy failed apply fallback policy. incomplete - policy received incomplete.
OBJECT-TYPE    
  INTEGER unknown(1), inProgress(2), succeeded(3), failed(4), fallbackPolicy(5), incomplete(6)  

ctsiIfcStatsTable 1.3.6.1.4.1.9.9.740.1.8.1
A list of IFC state statistic on this device.
OBJECT-TYPE    
  SEQUENCE OF  
    CtsiIfcStatsEntry

ctsiIfcStatsEntry 1.3.6.1.4.1.9.9.740.1.8.1.1
An entry containing the total number of interfaces which are currently belong to a particular IFC state.
OBJECT-TYPE    
  CtsiIfcStatsEntry  

ctsiIfcState 1.3.6.1.4.1.9.9.740.1.8.1.1.1
This object indicates the IFC state.
OBJECT-TYPE    
  CtsiInterfaceControllerState  

ctsiIfcStatsIfCount 1.3.6.1.4.1.9.9.740.1.8.1.1.2
The total number of interfaces on the device which is currently in the IFC state.
OBJECT-TYPE    
  Unsigned32  

ctsiAuthenticationSuccess 1.3.6.1.4.1.9.9.740.1.9.1
The total number of times that remote peers authentication succeed on this device.
OBJECT-TYPE    
  Counter32  

ctsiAuthenticationReject 1.3.6.1.4.1.9.9.740.1.9.2
The total number of times that remote peers authentication rejected on this device.
OBJECT-TYPE    
  Counter32  

ctsiAuthenticationFailure 1.3.6.1.4.1.9.9.740.1.9.3
The total number of times that remote peers authentication failed on this device
OBJECT-TYPE    
  Counter32  

ctsiAuthenticationLogoff 1.3.6.1.4.1.9.9.740.1.9.4
The total number of times that remote peer log off on this device.
OBJECT-TYPE    
  Counter32  

ctsiAuthenticationNoRespond 1.3.6.1.4.1.9.9.740.1.9.5
The total number of times that not received authentication respond from remote peer on this device.
OBJECT-TYPE    
  Counter32  

ctsiAuthorizationSuccess 1.3.6.1.4.1.9.9.740.1.9.6
The total number of times that remote peer authorization succeed on this device.
OBJECT-TYPE    
  Counter32  

ctsiAuthorizationFailure 1.3.6.1.4.1.9.9.740.1.9.7
The total number of times that remote peer TrustSec authorization failed on this device.
OBJECT-TYPE    
  Counter32  

ctsiAuthorizationPolicyFailure 1.3.6.1.4.1.9.9.740.1.9.8
The number of time that fail to access policy or refresh the policy for TrustSec authorization on this device.
OBJECT-TYPE    
  Counter32  

ctsiSapNegotiationSuccess 1.3.6.1.4.1.9.9.740.1.9.9
The total number of times that TrustSec SAP negotiation succeed on this device.
OBJECT-TYPE    
  Counter32  

ctsiSapNegotiationFailure 1.3.6.1.4.1.9.9.740.1.9.10
The total number of times that TrustSec SAP negotiation failure on this device.
OBJECT-TYPE    
  Counter32  

ctsiInDot1xModeIfCount 1.3.6.1.4.1.9.9.740.1.10.1
The total number of interfaces on the device which is in TrustSec 802.1X mode.
OBJECT-TYPE    
  Unsigned32  

ctsiInManualModeIfCount 1.3.6.1.4.1.9.9.740.1.10.2
The total number of interfaces on the device which is in TrustSec Manual mode.
OBJECT-TYPE    
  Unsigned32  

ctsiInL3ForwardModeIfCount 1.3.6.1.4.1.9.9.740.1.10.3
The total number of interfaces on the device which is in TrustSec Layer 3 forwarding mode.
OBJECT-TYPE    
  Unsigned32  

ctsiAuthorizationFailNotifEnable 1.3.6.1.4.1.9.9.740.1.11.1
This object specifies whether the system generates the ctsiAuthorizationFailNotif. A value of 'false' will prevent ctsiAuthorizationFailNotif notifications from being generated by this system.
OBJECT-TYPE    
  TruthValue  

ctsiIfAddSupplicantFailNotifEnable 1.3.6.1.4.1.9.9.740.1.11.2
This object specifies whether the system generates the ctsiIfAddSupplicantFailNotif. A value of 'false' will prevent ctsiIfAddSupplicantFailNotif notifications from being generated by this system.
OBJECT-TYPE    
  TruthValue  

ctsiIfAuthenticationFailNotifEnable 1.3.6.1.4.1.9.9.740.1.11.3
This object specifies whether the system generates the ctsiIfAuthenticationFailNotif. A value of 'false' will prevent ctsiIfAuthenticationFailNotif notifications from being generated by this system.
OBJECT-TYPE    
  TruthValue  

ctsiIfSapNegotiationFailNotifEnable 1.3.6.1.4.1.9.9.740.1.11.4
This object specifies whether the system generates the ctsiIfSapNegotiationFailNotif. A value of 'false' will prevent ctsiIfSapNegotiationFailNotif notifications from being generated by this system.
OBJECT-TYPE    
  TruthValue  

ctsiIfUnauthorizedNotifEnable 1.3.6.1.4.1.9.9.740.1.11.5
This object specifies whether the system generates the ctsiIfUnauthorizedNotif. A value of 'false' will prevent ctsiIfUnauthorizedNotif notifications from being generated by this system.
OBJECT-TYPE    
  TruthValue  

ctsiIfNotifMessage 1.3.6.1.4.1.9.9.740.1.12.1
This object indicates detail message associated with notifications.
OBJECT-TYPE    
  SnmpAdminString  

ctsiIfDot1xPaeRole 1.3.6.1.4.1.9.9.740.1.12.2
This object indicates dot1x PAE role information. notApplicable: Dot1x PAE role is not applicable in this notification. authenticator: PAE Authenticator. supplicant : PAE Supplicant.
OBJECT-TYPE    
  INTEGER notApplicable(1), authenticator(2), supplicant(3)  

ctsiAuthorizationFailNotif 1.3.6.1.4.1.9.9.740.0.1
A ctsiAuthorizationFailNotif is generated when the policy acquisition failed for the peer.
NOTIFICATION-TYPE    

ctsiIfAddSupplicantFailNotif 1.3.6.1.4.1.9.9.740.0.2
A ctsiIfAddSupplicantFailNotif is generated when the system fails to add dot1x supplicant for an interface.
NOTIFICATION-TYPE    

ctsiIfAuthenticationFailNotif 1.3.6.1.4.1.9.9.740.0.3
A ctsiIfAuthenticationFailNotif is generated when an authentication error for the peer is detected for an interface.
NOTIFICATION-TYPE    

ctsiIfSapNegotiationFailNotif 1.3.6.1.4.1.9.9.740.0.4
A ctsiIfSapNegotiationFailNotif is generated when a SAP negotiation error with the peer is detected for an interface.
NOTIFICATION-TYPE    

ctsiIfUnauthorizedNotif 1.3.6.1.4.1.9.9.740.0.5
A ctsiIfUnauthorizedNotif is generated when a interface becomes unauthorized on the Cisco TrustSec link.
NOTIFICATION-TYPE    

ciscoTrustSecIfMIBCompliances 1.3.6.1.4.1.9.9.740.2.1
OBJECT IDENTIFIER    

ciscoTrustSecIfMIBGroups 1.3.6.1.4.1.9.9.740.2.2
OBJECT IDENTIFIER    

ciscoTrustSecIfMIBCompliance 1.3.6.1.4.1.9.9.740.2.1.1
The compliance statement for the CISCO-TRUSTSEC-MIB.
MODULE-COMPLIANCE    

ciscoTrustSecIfMIBCompliance2 1.3.6.1.4.1.9.9.740.2.1.2
The compliance statement for the CISCO-TRUSTSEC-MIB.
MODULE-COMPLIANCE    

ciscoTrustSecIfMIBCompliance3 1.3.6.1.4.1.9.9.740.2.1.3
The compliance statement for the CISCO-TRUSTSEC-MIB.
MODULE-COMPLIANCE    

ciscoTrustSecIfMIBIfConfigGroup 1.3.6.1.4.1.9.9.740.2.2.1
A collection of objects that provides the interface configuration for Cisco Trusted Security capable interface in the system.
OBJECT-GROUP    

ciscoTrustSecIfMIBDot1xGroup 1.3.6.1.4.1.9.9.740.2.2.2
A collection of objects that provides the dot1x mode configuration for the Cisco Trusted Security capable interface in the system.
OBJECT-GROUP    

ciscoTrustSecIfMIBManualGroup 1.3.6.1.4.1.9.9.740.2.2.3
A collection of objects that provides the manual mode configuration for the Cisco Trusted Security capable interface in the system.
OBJECT-GROUP    

ciscoTrustSecIfMIBL3ForwardGroup 1.3.6.1.4.1.9.9.740.2.2.4
A collection of objects that provides the L3 forwarding mode configuration for the Cisco Trusted Security capable interface in the system.
OBJECT-GROUP    

ciscoTrustSecIfMIBStatusGroup 1.3.6.1.4.1.9.9.740.2.2.5
A collection of objects that provides the status information for the Cisco Trusted Security capable interface in the system.
OBJECT-GROUP    

ciscoTrustSecIfMIBStatisticGroup 1.3.6.1.4.1.9.9.740.2.2.6
A collection of objects that provides the statistic information for the Cisco Trusted Security capable interface in the system.
OBJECT-GROUP    

ciscoTrustSecIfMIBAuthorizationGroup 1.3.6.1.4.1.9.9.740.2.2.7
A collection of objects that provides the status information for the authorization link in the system.
OBJECT-GROUP    

ciscoTrustSecIfMIBIfcStatisticGroup 1.3.6.1.4.1.9.9.740.2.2.8
A collection of objects that provides the global IFC state statistic information in the system.
OBJECT-GROUP    

ciscoTrustSecIfMIBEventStatisticGroup 1.3.6.1.4.1.9.9.740.2.2.9
A collection of objects that provides the global statistic information for the TrustSec events.
OBJECT-GROUP    

ciscoTrustSecIfMIBIfModeStatisticGroup 1.3.6.1.4.1.9.9.740.2.2.10
A collection of objects that provides the global TrustSec mode statistic information.
OBJECT-GROUP    

ciscoTrustSecIfMIBNotifsCtrlGrp 1.3.6.1.4.1.9.9.740.2.2.11
A collection of objects that provides notification control for TrustSec interfaces.
OBJECT-GROUP    

ciscoTrustSecIfMIBNotifsOnlyInfoGrp 1.3.6.1.4.1.9.9.740.2.2.12
A collection of objects that provides the notification information for TrustSec interfaces.
OBJECT-GROUP    

ciscoTrustSecIfMIBNotifsGrp 1.3.6.1.4.1.9.9.740.2.2.13
A collection of notifications for TrustSec interfaces.
NOTIFICATION-GROUP    

ciscoTrustSecIfMIBCriticalAuthStatusGrp 1.3.6.1.4.1.9.9.740.2.2.14
A collection of objects that provides the Critical-Auth status information for the Cisco Trusted Security capable interface in the system.
OBJECT-GROUP