CISCO-TRUSTSEC-MIB
AI MIB Summary
The CISCO-TRUSTSEC-MIB provides programmatic configuration and monitoring of Cisco TrustSec fabric elements, specifically managing Security Group Tag (SGT) assignments, Protected Access Credential (PAC) states, and Extensible Authentication Protocol-Flexible Authentication via Secure Tunneling (EAP-FAST) sessions. This module enables the enforcement of hop-by-hop encryption, authentication, and replay protection policies by exposing SGT-to-ACL mapping, device authorization status, and TrustSec cloud ingress/egress traffic statistics.
This MIB module is for the configuration of a network device on the Cisco Trusted Security (TrustSec) system.
TrustSec secures a network fabric by authenticating and authorizing each device connecting to the network, allowing for the encryption, authentication and replay protection of data traffic on a hop by hop basis.
Glossary :
TrustSec - Cisco Trusted Security
EAP-FAST - Extensible Authentication Protocol-Flexible Authentication via Secure Tunneling (RFC 4851)
PAC - Protected Access Credential A credential dynamically downloaded from the Access Control Server.
ACS - Access Control Server
SGT - Security Group Tag A tag identifying its source, assigned to a packet on ingress to a TrustSec cloud, and used to determine security and other policy to be applied to it along its path through the cloud.
Main OID:
ciscoTrustSecMIB.1.3.6.1.4.1.9.9.730
82
Objects
Active
Status
6
Dependencies
Imported Objects
Objects
82 total| Object Name |
|---|
ciscoTrustSecMIBThis MIB module is for the configuration of a network
device on the Cisco Trusted Security (TrustSec) system.
TrustSec secures a network fabric by authenticating and
authorizing each device connecting to the network, allowing for
the encryption, authentication and replay protection of data
traffic on a hop by hop basis.
Glossary :
TrustSec - Cisco Trusted Security
EAP-FAST - Extensible Authentication Protocol-Flexible
Authentication via Secure Tunneling (RFC 4851)
PAC - Protected Access Credential
A credential dynamically downloaded from the
Access Control Server.
ACS - Access Control Server
SGT - Security Group Tag
A tag identifying its source, assigned to a packet on
ingress to a TrustSec cloud, and used to determine
security and other policy to be applied to it along
its path through the cloud. MODULE-IDENTITY .1.3.6.1.4.1.9.9.730 |
ciscoTrustSecMIBNotifs OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.730.0 |
ctsSwKeystoreFileErrNotifA ctsSwKeystoreFileErrNotif is generated when system
encounters an error while performing operation on the
software keystore file. NOTIFICATION-TYPE .1.3.6.1.4.1.9.9.730.0.1 |
ctsSwKeystoreSyncFailNotifA ctsSwKeystoreSyncFailNotifReason is generated when system
fails to sync software keystore information from the active
supervisor to the standby supervisor. NOTIFICATION-TYPE .1.3.6.1.4.1.9.9.730.0.2 |
ctsAuthzCacheFileErrNotifA ctsAuthzCacheFileErrNotif is generated when the system
encounters error downloading TrustSec authorization
related environment data to a cache file. NOTIFICATION-TYPE .1.3.6.1.4.1.9.9.730.0.3 |
ctsCacheFileAccessErrNotifA ctsCacheFileAccessErrNotif is generated when the
system fails to perform open/read/write operation
for a TrustSec cache file. NOTIFICATION-TYPE .1.3.6.1.4.1.9.9.730.0.4 |
ctsSrcEntropyFailNotifA ctsSrcEntropyFailNotif is generated when
the periodic health tests for the CTR-DRBG (Counter-
Deterministic Random Bit Generator) implementation
fails due to issues with the source entropy. NOTIFICATION-TYPE .1.3.6.1.4.1.9.9.730.0.5 |
ctsSapRandomNumberFailNotifA ctsSapRandomNumberFailNotif is generated when the
the system fails to obtain a random number from
CTR-DRBG block for SAP (Security Association Protocol)
key-counter. NOTIFICATION-TYPE .1.3.6.1.4.1.9.9.730.0.6 |
ciscoTrustSecMIBObjects OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.730.1 |
ctsCacheObjects OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.730.1.1 |
ctsCacheEnabledThis object specifies if the TrustSec cache is enabled in
the system.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.730.1.1.1 |
ctsCacheNvStorageThe object specifies the location on the device
where TrustSec cache files will be created.
The location may be specified in <device>:[directory] format,
where <device> can be (but not limited to): bootdisk:, disk0:,
disk1:.
A zero length string for this object indicates that no location
has been configured and system will decide the location of
TrustSec cache files.rw SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.6.1.4.1.9.9.730.1.1.2 |
ctsCacheClearThis object allows user to clear the cache files for
Cisco Trusted Security feature on this device.
When read, this object always returns the value 'none'.
'none' - No operation.
'all' - Clear all the cached information
'authzPolicies' - Clear all the cached authorization
policies.
'authzPoliciesPeer' - Clear the cached peer authorization
policies.
'authzPoliciesSgt' - Clear the cached SGT authorization
policies.
'environmentData' - Clear the cached environment data
'interfaceController' - Clear the cached interface controller
data.rw Enumeration .1.3.6.1.4.1.9.9.730.1.1.3 |
ctsSgtObjects OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.730.1.2 |
ctsSecurityGroupTagIdThis object allows user to specify the SGT for the packets
originating from this device.
A value of zero for this object indicates that no SGT has been
configured.rw CtsSecurityGroupTag (CISCO-TRUSTSEC-TC-MIB) .1.3.6.1.4.1.9.9.730.1.2.1 |
ctsSgtAssignmentMethodThis object specifies the method used for assignment
of TrustSec SGT for the line cards without TrustSec
tagging capability.
'none' - assignment of TrustSec SGT is not enabled.
'ingress' - 'ingress' method is used for the assignment of
TrustSec SGT.
'egress' - 'egress' method is used for the assignment of
TrustSec SGT.rw Enumeration .1.3.6.1.4.1.9.9.730.1.2.2 |
ctsCredentialObjects OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.730.1.3 |
ctsDeviceIdThis object allows user to specify the identifier for
the device.
This identifier and the device password (specified by
ctsDevicePassword) are used together by the Cisco Trusted
Security feature for authenticating the device.
The value of this object must be set in the same PDU as
ctsDevicePasswordType and ctsDevicePassword.
The object may not be set to a zero length string.
The system will return a zero length string for this object
either when there is no value configured for this object or
TrustSec credentials for the device have been cleared by
setting ctsCredentialsClearAll to 'true'.rw SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.6.1.4.1.9.9.730.1.3.1 |
ctsDevicePasswordTypeThis object specifies the type of encryption employed
to encrypt password in ctsDevicePassword object.
Value for this object must be specified as 'clearText',
'typeSix' or 'typeSeven' in order to configure the password in
ctsDevicePassword.
The value of this object must be set in the same PDU as
ctsDevicePassword and ctsDeviceId.
When read, value of this object must be 'none' if
ctsDevicePassword is a zero length string.
The value of this object may not be set to 'none' or 'other'.rw CtsPasswordEncryptionType (CISCO-TRUSTSEC-TC-MIB) .1.3.6.1.4.1.9.9.730.1.3.2 |
ctsDevicePasswordThis object allows user to specify the password for
the device.
This password and the device identifier (specified by
ctsDeviceId) are used together by the Cisco Trusted Security
feature for authenticating the device.
The value of this object must be set in the same PDU as
ctsDevicePasswordType and ctsDeviceId.
The object may not be set to a zero length string.
When read, this object always returns the value of a
zero-length octet string.rw SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.6.1.4.1.9.9.730.1.3.3 |
ctsKeystoreTypeThis object indicates the type of keystore employed
by the device.
'hardwareKeystore' - Keystore functionality is implemented
in hardware.
'softwareEmulation' - Keystore functionality is emulated
in software.ro Enumeration .1.3.6.1.4.1.9.9.730.1.3.4 |
ctsKeystoreFwVersionThis object indicates the firmware version of
the hardware keystore.
This object is only instantiated when the value of
ctsKeystoreType is 'hardwareKeystore'.ro SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.6.1.4.1.9.9.730.1.3.5 |
ctsKeystoreFwAlertsThis object indicates the number of hardware
keystore alerts that occurred.
This object is only instantiated when the value of
ctsKeystoreType is 'hardwareKeystore'.ro Counter32 .1.3.6.1.4.1.9.9.730.1.3.6 |
ctsKeystoreFwResetsThis object indicates the number of times
the keystore firmware was reset.
This object is only instantiated when the value of
ctsKeystoreType is 'hardwareKeystore'.ro Counter32 .1.3.6.1.4.1.9.9.730.1.3.7 |
ctsKeystoreRxTimeoutsThis object indicates the number of times the system
timed out awaiting response from keystore firmware.
This object is only instantiated when the value of
ctsKeystoreType is 'hardwareKeystore'.ro Counter32 .1.3.6.1.4.1.9.9.730.1.3.8 |
ctsKeystoreRxBadChecksumsThis object indicates the number of message fragments
the system received from keystore firmware that had bad
checksum value.
This object is only instantiated when the value of
ctsKeystoreType is 'hardwareKeystore'.ro Counter32 .1.3.6.1.4.1.9.9.730.1.3.9 |
ctsKeystoreRxBadFragmentLengthsThis object indicates the number of message fragments
the system received from keystore firmware that had
illegal lengths.
This object is only instantiated when the value of
ctsKeystoreType is 'hardwareKeystore'.ro Counter32 .1.3.6.1.4.1.9.9.730.1.3.10 |
ctsKeystoreCorruptionsThis object indicates the number of times keystore
firmware reported detection of one or more corrupted
records in the hardware keystore.
This object is only instantiated when the value of
ctsKeystoreType is 'hardwareKeystore'.ro Counter32 .1.3.6.1.4.1.9.9.730.1.3.11 |
ctsKeystorePasswordRecordTableA list of Cisco Trusted Security password records stored in
the hardware or software keystore of this device. SEQUENCE OF CtsKeystorePasswordRecordEntry .1.3.6.1.4.1.9.9.730.1.3.13 |
ctsKeystorePasswordRecordEntryAn entry describing individual password record in the
keystore of this device.
An entry will be created or deleted from this table when a
password record is added or removed from the keystore of
this device. CtsKeystorePasswordRecordEntry .1.3.6.1.4.1.9.9.730.1.3.13.1 |
ctsKeystorePasswordRecordNameThis object identifies a password record. SnmpAdminString .1.3.6.1.4.1.9.9.730.1.3.13.1.1 |
ctsKeystorePasswordRecordTypeThis object indicates the type of credential in this record.ro CtsCredentialRecordType (CISCO-TRUSTSEC-TC-MIB) .1.3.6.1.4.1.9.9.730.1.3.13.1.2 |
ctsKeystorePacRecordTableA list of Cisco Trusted Security PAC records stored in
the hardware or software keystore of this device. SEQUENCE OF CtsKeystorePacRecordEntry .1.3.6.1.4.1.9.9.730.1.3.14 |
ctsKeystorePacRecordEntryAn entry describing individual PAC record in the
keystore of this device.
An entry will be created or deleted by the system when a
PAC record is added or removed from the keystore of this
device. CtsKeystorePacRecordEntry .1.3.6.1.4.1.9.9.730.1.3.14.1 |
ctsKeystorePacRecordNameThe name of this PAC record. CtsAcsAuthorityIdentity .1.3.6.1.4.1.9.9.730.1.3.14.1.1 |
ctsKeystorePacRecordTypeThis object indicates the type of credential in this record.ro CtsCredentialRecordType (CISCO-TRUSTSEC-TC-MIB) .1.3.6.1.4.1.9.9.730.1.3.14.1.2 |
ctsPacInfoTableA list of PACs on this device. SEQUENCE OF CtsPacInfoEntry .1.3.6.1.4.1.9.9.730.1.3.15 |
ctsPacInfoEntryAn entry providing management information of a particular PAC
record.
An entry can only be created dynamically by the system when
a new PAC is installed in the keystore. An entry will be deleted
from this table when the PAC is removed from the keystore by the
system or by the user. CtsPacInfoEntry .1.3.6.1.4.1.9.9.730.1.3.15.1 |
ctsPacAcsAuthIdThis object indicates the unique authority identity of the
ACS server from where the PAC was downloaded. CtsAcsAuthorityIdentity .1.3.6.1.4.1.9.9.730.1.3.15.1.1 |
ctsPacAcsDescriptionThis object indicates the description of the ACS server from
where the PAC was downloaded.ro SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.6.1.4.1.9.9.730.1.3.15.1.2 |
ctsPacTypeThis object indicates the type of PAC this entry represents.
'unknown' -
Any other type of PAC that is not covered below
'tunnel' -
Distributed shared secret between the peer and ACS that is
used to establish a secure tunnel and convey the policy of
what must and can occur in the tunnel.
'machineAuthentication' -
The Machine Authentication PAC contains information in the
PAC opaque that identifies the machine. It is meant to be
used by a machine when network access is required and no user
is logged in.
'userAuthorization' -
The User Authorization PAC contains information in the PAC
opaque that identifies a user and provides authorization
information. The User Authorization PAC is used to provide
user information during stateless session resumption so
user authentication MAY be skipped.
'posture' -
Distributed posture checking and authorization result based
on a previous posture validation. A posture PAC can be used
to optimize posture validation in the case of frequent
revalidations. This result is specific to the posture
validation application and may be used outside the contents
of EAP-FAST.
'ciscoTrustSec' -
A credential dynamically provisioned in phase 0 of EAP-FAST.
It is used by Trustsec to set up secure communications with
the server.ro Enumeration .1.3.6.1.4.1.9.9.730.1.3.15.1.3 |
ctsPacExpirationTimeThis object indicates the time when this PAC will be expired.ro DateAndTime (SNMPv2-TC) .1.3.6.1.4.1.9.9.730.1.3.15.1.4 |
ctsPacTimeToRefreshThis object indicates the time left for this PAC to be
refreshed from the ACS.ro Unsigned32 UNITS "seconds" .1.3.6.1.4.1.9.9.730.1.3.15.1.5 |
ctsPacStatusThis object is used to manage the deletion of rows
in this table. This object only supports the values
'active' and 'destroy'.
Setting this object to 'destroy' deletes this PAC.
When read, this object will always return 'active'.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.9.9.730.1.3.15.1.6 |
ctsCredentialsClearAllThis object allows user to clear all the PACs and Cisco
Trusted Security credentials on the device.
Setting the object to 'true' will clear all the PACs and
credentials.
When read, this object will always return 'false'.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.730.1.3.16 |
ctsEnvironmentDataObjects OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.730.1.4 |
ctsEnvDataLastDownloadStatusThis object indicates the status of the last attempt to
download the Environment Data.
'other' - Any other state not covered by below
enumerations.
'succeeded' - Environment Data download completed successfully.
'failed' - Environment Data download failed.
'inprogress'- Environment Data download is in progress.
'incomplete'- Environment Data download is incomplete.
'timedout' - Environment Data download did not start and
timed out due to no response from the ACS.
'cleared' - Environment Data has been cleared by the user.ro Enumeration .1.3.6.1.4.1.9.9.730.1.4.1 |
ctsEnvSecurityGroupTagIdThis object indicates the SGT for packets originating
on this device downloaded from the ACS.
A value of zero for this object indicates that no SGT has
been downloaded from the ACS.ro CtsSecurityGroupTag (CISCO-TRUSTSEC-TC-MIB) .1.3.6.1.4.1.9.9.730.1.4.2 |
ctsEnvSecurityGroupTagGenIdThis object indicates the generation identifier associated
with the downloaded SGT on this device.ro CtsGenerationId (CISCO-TRUSTSEC-TC-MIB) .1.3.6.1.4.1.9.9.730.1.4.3 |
ctsEnvDataLastUpdateThis object indicates the last time Cisco Trusted Security
Environment Data was successfully updated from ACS.
This object will contain 0-1-1,00:00:00:0 if Environment Data
has never been successfully updated from ACS.ro DateAndTime (SNMPv2-TC) .1.3.6.1.4.1.9.9.730.1.4.4 |
ctsEnvDataRefreshIntervalThis object indicates the time interval for which
Trusted Security Environment Data is valid.
The Trusted Security Environment Data will be refreshed i.e.
downloaded from the ACS after this time period has elapsed.ro Unsigned32 UNITS "seconds" .1.3.6.1.4.1.9.9.730.1.4.5 |
ctsEnvDataTimeLeftThis object indicates the time left for the currently
installed Trusted Security Environment Data to expire.ro Unsigned32 UNITS "seconds" .1.3.6.1.4.1.9.9.730.1.4.6 |
ctsEnvDataTimeToRefreshThis object indicates the time interval after which
Trusted Security Environment Data will be refreshed i.e.
downloaded from the ACS due to Environment Data expiration
or refresh failure.ro Unsigned32 UNITS "seconds" .1.3.6.1.4.1.9.9.730.1.4.7 |
ctsEnvDataSourceThis object indicates the source of current Environment Data
installed on the system.
'none' - No Environment Data is currently installed.
'cached' - Environment Data is installed from non-volatile
storage on the system.
'downloaded' - Environment Data is downloaded from the ACS.ro Enumeration .1.3.6.1.4.1.9.9.730.1.4.8 |
ctsEnvDataActionThis object allows user to specify the action to be taken for
all the Cisco Trusted Security Environment Data on this device.
When read, this object always returns the value 'none'.
'none' - No operation.
'refresh' - Refresh all the Trusted Security Environment Data
on the device.rw Enumeration .1.3.6.1.4.1.9.9.730.1.4.9 |
ctsEnvSecurityGroupNameTableA list of Security Group Names in Cisco Trusted Security
environment. SEQUENCE OF CtsEnvSecurityGroupNameEntry .1.3.6.1.4.1.9.9.730.1.4.16 |
ctsEnvSecurityGroupNameEntryAn entry listing the name assigned to each SGT in
Cisco Trusted Security environment.
Entries will be populated in this table when system downloads
Security Group Name information as part of Trusted
Security Environment Data. CtsEnvSecurityGroupNameEntry .1.3.6.1.4.1.9.9.730.1.4.16.1 |
ctsEnvSecurityGroupNameSgtThis object identifies a SGT in Trusted Security environment. CtsSecurityGroupTag .1.3.6.1.4.1.9.9.730.1.4.16.1.1 |
ctsEnvSecurityGroupNameSgtGenIdThis object indicates the Generation Identifier associated
with this SGT.ro CtsGenerationId (CISCO-TRUSTSEC-TC-MIB) .1.3.6.1.4.1.9.9.730.1.4.16.1.2 |
ctsEnvSecurityGroupNameSgtFlagThis object indicates the flag associated with this SGT.
'recognizedSgt' - indicates a recognized SGT when set
to 1, else indicates a reserved SGT.
'unicastSgt' - indicates a unicast SGT when set
to 1, else indicates a multicast SGT.ro Bits .1.3.6.1.4.1.9.9.730.1.4.16.1.3 |
ctsEnvSecurityGroupNameThis object indicates the Security Group Name assigned
to this SGT.ro SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.6.1.4.1.9.9.730.1.4.16.1.4 |
ctsNotifsControlObjects OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.730.1.5 |
ctsSwKeystoreFileErrNotifEnableThis object specifies if the system generates
ctsSwKeystoreFileErrNotif.
A value of 'false' will prevent ctsSwKeystoreFileErrNotif
notifications from being generated by this system.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.730.1.5.1 |
ctsSwKeystoreSyncFailNotifEnableThis object specifies if the system generates
ctsSwKeystoreSyncFailNotif.
A value of 'false' will prevent ctsSwKeystoreSyncFailNotif
notifications from being generated by this system.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.730.1.5.2 |
ctsAuthzCacheFileErrNotifEnableThis object specifies if the system generates
ctsAuthzCacheFileErrNotif.
A value of 'false' will prevent ctsAuthzCacheFileErrNotif
notifications from being generated by this system.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.730.1.5.3 |
ctsCacheFileAccessErrNotifEnableThis object specifies if the system generates
ctsCacheFileAccessErrNotif.
A value of 'false' will prevent ctsCacheFileAccessErrNotif
notifications from being generated by this system.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.730.1.5.4 |
ctsSrcEntropyFailNotifEnableThis object specifies if the system generates
ctsSrcEntropyFailNotif.
A value of 'false' will prevent ctsSrcEntropyFailNotif
notifications from being generated by this system.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.730.1.5.5 |
ctsSapRandomNumberFailNotifEnableThis object specifies if the system generates
ctsSapRandomNumberFailNotif.
A value of 'false' will prevent ctsSapRandomNumberFailNotif
notifications from being generated by this system.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.730.1.5.6 |
ctsNotifsInfoObjects OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.730.1.6 |
ctsFileErrNotifReasonThis object indicates the reason file error related
notification was generated.
'openFailedForWrite' - System failed to open a file to
write TrustSec information.
'writeFailed' - System failed to write TrustSec
information to a file.
'openFailedForRead' - System failed to open a file to
read TrustSec information.
'readFailed' - System failed to read TrustSec
information from a file.
'badMagic' - A bad magic number was encountered
for a TrustSec file.
'unexpectedEof' - A record of unexpected length is found in
TrustSec file.
'badHeader' - Bad file header was encountered for a
TrustSec file.ro Enumeration .1.3.6.1.4.1.9.9.730.1.6.1 |
ctsSwKeystoreSyncFailNotifReasonThis object indicates the reason ctsSwKeystoreSyncFailNotif
notification was generated.
'ipcPortCreationFailed' - Keystore information could not be
synced because the system failed to
create port for Inter-Process
communication between the active
and the standby supervisors.
'ipcPortOpenFailed' - Keystore information could not be
synced because the system failed to
open port for Inter-Process
communication between the active
and the standby supervisors.
'ipcConnectionFailure' - Keystore information could not be
synced because Inter-Process
communication connection failed
between the active and the
standby supervisors.
'ipcSendFailure' - Keystore information could not be
synced because Inter-Process
Communication messages could not be
sent to the standby supervisor.
'standbyIncompatible' - Keystore information could not be
synced because the standby
supervisor is not compatible with
the active supervisor.
'syncProcessCreationFailed' - Keystore information could not
be synced because the system failed
to create the sync process.ro Enumeration .1.3.6.1.4.1.9.9.730.1.6.2 |
ctsNotifMessageStringThe object indicates additional information for a TrustSec
notification.ro SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.6.1.4.1.9.9.730.1.6.3 |
ctsCriticalAuthObjects OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.730.1.7 |
ctsCriticalAuthEnabledThis object specifies if the Critical-Auth functionality
is enabled in the system.
Setting the object to 'true' will enable Critical-Auth
functionality in the system and 'false' will disable the
Critical-Auth functionality. Before enable ctsCriticalAuthEnable
ctsCriticalAuthPeerSgt need to be configured.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.730.1.7.1 |
ctsCriticalAuthFallbackThis object specifies the CTS Critical-Auth fallback
policy.
default - Critical-Auth fallback policy is default.
cache - Critical-Auth fallback policy is cache.rw Enumeration .1.3.6.1.4.1.9.9.730.1.7.2 |
ctsCriticalAuthPeerSgtThis object specifies the CTS Critical-Auth SGT tag
of the remote peer.
ctsCriticalAuthPeerSgt cannot be set to zero when
ctsCriticalAuthEnable is enable.
ctsCriticalAuthPeerSgtTrust will be set to untrusted by default
during set operation of ctsCriticalAuthPeerSgt.
User need to explicitly override the ctsCriticalAuthPeerSgtTrust
to trusted if required.rw CtsSecurityGroupTag (CISCO-TRUSTSEC-TC-MIB) .1.3.6.1.4.1.9.9.730.1.7.3 |
ctsCriticalAuthPeerSgtTrustThis object specifies the CTS Critical-Auth peer's sgt
trust state.
This object can only be set when ctsCriticalAuthPeerSgt is
non-zero.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.730.1.7.4 |
ctsCriticalAuthDefaultPmkThis object specifies the CTS Critical-Auth default PMK
used by SAP.
The purpose of this object is to only allow configuration of
Critical-Auth PMK.
The ctsCriticalAuthViewDefaultPmk object is used to display the
default Critical-Auth PMK.rw OCTET STRING .1.3.6.1.4.1.9.9.730.1.7.5 |
ctsCriticalAuthViewDefaultPmkThis object indicates the CTS Critical-Auth default PMK.
The purpose of this object is to only display the configured
Critical-Auth PMK.
A zero length string for this objects indicates the SAP
negotiation is disabled.
The ctsCriticalAuthDefaultPmk object is used to configure
the PMK.ro OCTET STRING .1.3.6.1.4.1.9.9.730.1.7.6 |
ciscoTrustSecMIBConform OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.730.2 |
ciscoTrustSecMIBCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.730.2.1 |
ciscoTrustSecMIBGroups OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.730.2.2 |