CISCO-TRUSTSEC-SERVER-MIB
AI MIB Summary
The CISCO-TRUSTSEC-SERVER-MIB manages and monitors AAA server configurations and Protected Access Credential (PAC) states within Cisco TrustSec environments, specifically tracking the synchronization of RADIUS server addresses from seed devices to network endpoints.
This MIB module defines management objects for configuration and monitoring of the AAA servers in Cisco Trusted Security environment.
Glossary:
AAA - Authentication, Authorization, Accounting
PAC - Protected Access Credential
RADIUS - Remote Authentication Dial In User Service
TrustSec - Cisco Trusted Security system
TrustSec seed device: The seed devices is the one which has the AAA server address manually configured. All devices that connect to the seed device obtain the AAA server addresses via authentication and authorization.
Main OID:
ciscoTrustSecServerMIB.1.3.6.1.4.1.9.9.741
66
Objects
Active
Status
7
Dependencies
Imported Objects
Objects
66 total| Object Name |
|---|
ciscoTrustSecServerMIBThis MIB module defines management objects for
configuration and monitoring of the AAA servers
in Cisco Trusted Security environment.
Glossary:
AAA - Authentication, Authorization, Accounting
PAC - Protected Access Credential
RADIUS - Remote Authentication Dial In User Service
TrustSec - Cisco Trusted Security system
TrustSec seed device:
The seed devices is the one which has the AAA server
address manually configured. All devices that connect
to the seed device obtain the AAA server addresses
via authentication and authorization. MODULE-IDENTITY .1.3.6.1.4.1.9.9.741 |
ciscoTrustSecServerMIBNotifs OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.741.0 |
ctsvNoRadiusServerNotifA ctsvNoRadiusServerNotif is generated if there is no
RADIUS servers available for a CTS AAA request. NOTIFICATION-TYPE .1.3.6.1.4.1.9.9.741.0.1 |
ctsvNoProvisionSecretNotifA ctsvNoProvisionSecretNotif is generated if the system
does not have share secret available in order to provision
a RADIUS server with PAC. NOTIFICATION-TYPE .1.3.6.1.4.1.9.9.741.0.2 |
ciscoTrustSecServerMIBObjects OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.741.1 |
ctsvGlobalServerConfigObjects OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.741.1.1 |
ctsvAuthorizationListThis object specifies the AAA server group which allows the
TrustSec AAA library to build an AAA method list.
Configuration of AAA named authorization list is only
needed for the TrustSec seed device.rw SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.6.1.4.1.9.9.741.1.1.1 |
ctsvServerDeadTimeThe object specifies how long a downloaded server should
not be selected for service once it has been marked as dead.rw Unsigned32 UNITS "seconds" .1.3.6.1.4.1.9.9.741.1.1.2 |
ctsvServerLoadBalanceMethodThis object specifies the load-balance method used for
selecting a downloaded server.
none - no load-balance method used.
leastOutstanding - choose the server with least outstanding
transactions.rw Enumeration .1.3.6.1.4.1.9.9.741.1.1.3 |
ctsvServerLoadBalanceBatchSizeThis object specifies the size of the transaction batch
which need to be load-balanced while choosing a downloaded
server.
Setting this object may not be allowed if the value of
ctsvServerLoadBalanceMethod is 'none'.rw Unsigned32 .1.3.6.1.4.1.9.9.741.1.1.4 |
ctsvUseSameProvisionedServerThis object specifies whether using same provisioned PAC
server throughout an session.
Setting this object to 'false' means don't attempt to stay with
the same PAC server throughout an authentication session.
Setting this object may not be allowed if the value of
ctsvServerLoadBalanceMethod is 'none'.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.741.1.1.5 |
ctsvAllServerTestEnabledThis object specifies whether the server-aliveness automated
test is enabled for all TrustSec downloaded servers.
The server-aliveness automated test generates a periodic
test RADIUS request message to the downloaded server and
expects to get a response back in order to mark that
downloaded server as alive.
ctsvAllServerTestEnabled is used by those
servers which do not have per-server enable
configuration.
Setting ctsvAllServerTestEnabled affects all the
instances of ctsvServerTestEnabled in
ctsvServerTestConfigTable.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.741.1.1.6 |
ctsvAllServerTestDeadTimeThis object specifies the global server dead time
configuration for all TrustSec downloaded servers.
The value of deadtime indicates how long a server
should not be retried once it has been marked as
dead by the server-aliveness automated test.
ctsvAllServerTestDeadTime is used by those
servers which do not have per-server deadtime
configuration.
Setting ctsvAllServerTestDeadTime affects all the
instances of ctsvServerTestDeadTime in
ctsvServerTestConfigTable.rw Unsigned32 UNITS "seconds" .1.3.6.1.4.1.9.9.741.1.1.7 |
ctsvAllServerTestIntervalThis object specifies the global test interval for all
TrustSec downloaded servers.
The value of interval indicates how frequent the test
RADIUS requests will be sent.
ctsvAllServerTestInterval is used by those
servers which do not have per-server test interval
configuration.
Setting ctsvAllServerTestInterval affects all the
instances of ctsvServerTestInterval in
ctsvServerTestConfigTable.rw Unsigned32 UNITS "minutes" .1.3.6.1.4.1.9.9.741.1.1.8 |
ctsvServerKeyWrapEnabledThis object specifies whether the TrustSec key wrap is
enabled for all TrustSec downloaded servers.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.741.1.1.9 |
ctsvServerTestConfigObjects OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.741.1.2 |
ctsvServerTestConfigTableA list of AAA servers with server specific TrustSec
server-aliveness automated test configuration.
This table contains exceptions from the global test
configuration. Entry which contains same values as what
are in ctsvAllServerTestEnabled,
ctsvAllServerTestDeadTime, and ctsvAllServerTestInterval
may be removed by the device.
It is up to the agent to accept or reject such identical
configuration. SEQUENCE OF CtsvServerTestConfigEntry .1.3.6.1.4.1.9.9.741.1.2.1 |
ctsvServerTestConfigEntryAn entry containing the server-aliveness automated test
configuration of a particular AAA server.
An entry can be created, or deleted by using
ctsvServerTestRowStatus.
System may remove an entry automatically if
ctsvServerTestEnabled, ctsvServerTestDeadTime, and
ctsvServerTestInterval contain the same value as what are in
ctsvAllServerTestEnabled, ctsvAllServerTestDeadTime,
ctsvAllServerTestInterval.
Each AAA server is associated with a set of automatic
server-aliveness test configuration. By creating, deleting or
modifying an entry in this table, users can add, delete or
modify the server-aliveness configuration for a particular
AAA server. CtsvServerTestConfigEntry .1.3.6.1.4.1.9.9.741.1.2.1.1 |
ctsvServerTestAddrTypeThe type of Internet address for an AAA server. InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.741.1.2.1.1.1 |
ctsvServerTestAddrThe Internet address for an AAA server.
The type of this address is determined by the value of the
ctsvServerTestAddrType object. InetAddress .1.3.6.1.4.1.9.9.741.1.2.1.1.2 |
ctsvServerTestEnabledThis object specifies whether the server-aliveness automated
test is enabled or disabled for the AAA server.
The server-aliveness automated test generates a periodic
test RADIUS request message to the downloaded server and
expects to get a response back in order to mark that
downloaded server as alive, otherwise will mark it as dead.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.741.1.2.1.1.3 |
ctsvServerTestDeadTimeThis object specifies the server-aliveness automated test
dead time for the AAA server.
The value of deadtime indicates how long a server
should not be retried once it has been marked as
dead by the server-aliveness automated test.rw Unsigned32 UNITS "seconds" .1.3.6.1.4.1.9.9.741.1.2.1.1.4 |
ctsvServerTestIntervalThis object specifies the server-aliveness automated test
interval for the AAA server.
The value of interval indicates how frequent the test
RADIUS requests will be sent.rw Unsigned32 UNITS "minutes" .1.3.6.1.4.1.9.9.741.1.2.1.1.5 |
ctsvServerTestStorageTypeThe storage type for this conceptual row.rw StorageType (SNMPv2-TC) .1.3.6.1.4.1.9.9.741.1.2.1.1.6 |
ctsvServerTestRowStatusThe status of this conceptual row.
All writable objects in this row may be modified at any time.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.9.9.741.1.2.1.1.7 |
ctsvProvisionedServerObjects OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.741.1.3 |
ctsvProvisionedServerTableA list of AAA server which has been successfully provisioned
with a PAC. SEQUENCE OF CtsvProvisionedServerEntry .1.3.6.1.4.1.9.9.741.1.3.1 |
ctsvProvisionedServerEntryAn entry providing the information of the PAC provisioned
AAA server.
An entry will be created when the AAA server has been
successfully provisioned with PAC.
An entry will be removed when the server no longer
provisioned with PAC. CtsvProvisionedServerEntry .1.3.6.1.4.1.9.9.741.1.3.1.1 |
ctsvProvisionedServerAddrTypeThe type of Internet address of the provisioned server. InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.741.1.3.1.1.1 |
ctsvProvisionedServerAddrThe Internet address of the provisioned server.
The type of this address is determined by the value of
the ctsvProvisionedServerAddrType object. InetAddress .1.3.6.1.4.1.9.9.741.1.3.1.1.2 |
ctsvProvisionedServerPortThe value indicates the UDP port number used by the
provisioned server.ro InetPortNumber (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.741.1.3.1.1.3 |
ctsvProvisionedServerAuthorityIdThis object indicates the authority identity of the
provisioned server.ro CtsAcsAuthorityIdentity (CISCO-TRUSTSEC-TC-MIB) .1.3.6.1.4.1.9.9.741.1.3.1.1.4 |
ctsvProvisionedServerStatusThis object indicates the status of the provisioned server.ro Enumeration .1.3.6.1.4.1.9.9.741.1.3.1.1.5 |
ctsvProvisionedServerTestEnabledThis object indicates whether the server-aliveness automated
test of the provisioned server is enabled.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.741.1.3.1.1.6 |
ctsvProvisionedServerTestIntervalThis object indicates the operational server-aliveness
automated test interval of the provisioned server.
The interval is used to indicate how often the test RADIUS
request should be sent to the PAC server.ro Unsigned32 UNITS "minutes" .1.3.6.1.4.1.9.9.741.1.3.1.1.7 |
ctsvProvisionedServerTestDeadTimeThis object indicates the server-aliveness automated test
deadtime of the provisioned server.
The deadtime indicates how long the PAC provisioned server
should not be retried once it has been marked dead during the
server-aliveness automated test.ro Unsigned32 UNITS "seconds" .1.3.6.1.4.1.9.9.741.1.3.1.1.8 |
ctsvProvisionedServerKeyWrapEnabledThis object indicates the TrustSec key wrap operational
status of the provisioned server.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.741.1.3.1.1.9 |
ctsvDownloadServerListObjects OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.741.1.4 |
ctsvDownloadServerListTableA list of the downloaded server list in the TrustSec
system. SEQUENCE OF CtsvDownloadServerListEntry .1.3.6.1.4.1.9.9.741.1.4.1 |
ctsvDownloadServerListEntryAn entry containing the information of the specific
downloaded server list in TrustSec system.
An entry is created when a new downloaded server list
has been acquired during the TrustSec environment
data downloaded.
An entry will be removed if the downloaded server
list is removed after TrustSec environment data
refresh. CtsvDownloadServerListEntry .1.3.6.1.4.1.9.9.741.1.4.1.1 |
ctsvDownloadServerListNameThis object indicates the name of the downloaded
server list. SnmpAdminString .1.3.6.1.4.1.9.9.741.1.4.1.1.1 |
ctsvDownloadServerListGenNumA hexadecimal string indicating the generation number
of the specific downloaded server list.ro OCTET STRING .1.3.6.1.4.1.9.9.741.1.4.1.1.2 |
ctsvDownloadServerListServerCountThis object indicates the number of servers within the
downloaded server list.ro Unsigned32 .1.3.6.1.4.1.9.9.741.1.4.1.1.3 |
ctsvDownloadServerObjects OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.741.1.5 |
ctsvDownloadServerTableA list of downloaded server in the TrustSec system. SEQUENCE OF CtsvDownloadServerEntry .1.3.6.1.4.1.9.9.741.1.5.1 |
ctsvDownloadServerEntryAn entry containing the information of the specific
downloaded server.
An entry is created when a downloaded server is added
during TrustSec environment data downloaded.
An entry is removed if the downloaded server
is removed after TrustSec environment data downloaded. CtsvDownloadServerEntry .1.3.6.1.4.1.9.9.741.1.5.1.1 |
ctsvDownloadServerAddrTypeThe type of Internet address of the downloaded
server. InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.741.1.5.1.1.1 |
ctsvDownloadServerAddrThe Internet address of the downloaded server.
The type of this address is determined by the value
of the ctsvDownloadServerAddrType object. InetAddress .1.3.6.1.4.1.9.9.741.1.5.1.1.2 |
ctsvDownloadServerPortThis object indicates the UDP port number used by the
downloaded server.ro InetPortNumber (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.741.1.5.1.1.3 |
ctsvDownloadServerProvisionedThis object indicates whether the downloaded server have
been successfully provisioned.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.741.1.5.1.1.4 |
ctsvDownloadServerAuthorityIdThis object indicates the Authorization Identifier
of the downloaded server.ro CtsAcsAuthorityIdentity (CISCO-TRUSTSEC-TC-MIB) .1.3.6.1.4.1.9.9.741.1.5.1.1.5 |
ctsvDownloadServerStatusThis object indicates the status of the downloaded server.ro Enumeration .1.3.6.1.4.1.9.9.741.1.5.1.1.6 |
ctsvDownloadServerTestEnabledThis object indicates whether the server-aliveness automated
test of the downloaded server is currently enabled or
disabled.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.741.1.5.1.1.7 |
ctsvDownloadServerTestIntervalThis object indicates the operational test interval of
the downloaded server.
The interval is used to indicate how often the test
RADIUS request should be sent to the downloaded server.ro Unsigned32 UNITS "minutes" .1.3.6.1.4.1.9.9.741.1.5.1.1.8 |
ctsvDownloadServerTestDeadTimeThis object indicates the operational deadtime of the
downloaded server.ro Unsigned32 UNITS "seconds" .1.3.6.1.4.1.9.9.741.1.5.1.1.9 |
ctsvDownloadServerKeyWrapEnabledThis object indicates the TrustSec key wrap operational
status of the downloaded server.
Among all the servers in the same server list, only one
server can have operational key wrap enabled if the value
of ctsvAllServerKeyWrapEnabled is 'true'.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.741.1.5.1.1.10 |
ctsvNotificationControlObjects OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.741.1.6 |
ctsvNoRadiusServerNotifEnableThis variable specifies whether the system generates the
ctsvNoRadiusServerNotif.
A value of 'false' will prevent ctsvNoRadiusServerNotif
notifications from being generated by this system.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.741.1.6.1 |
ctsvNoProvisionSecretNotifEnableThis variable specifies whether the system generates the
ctsvNoProvisionSecretNotif.
A value of 'false' will prevent ctsvNoProvisionSecretNotif
notifications from being generated by this system.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.741.1.6.2 |
ctsvNotificationOnlyInfoObjects OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.741.1.7 |
ctsvServerNotifMsgThis object indicates detail message associated with
notifications.ro SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.6.1.4.1.9.9.741.1.7.1 |
ctsvServerNoProvisionSecretAddrTypeThis object indicates the type of IP address for which server
has no shared secret available for provisioning PAC.ro InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.741.1.7.2 |
ctsvServerNoProvisionSecretAddrThis object indicates the IP address for which server has no
shared secret available for provisioning PAC.
The type of this address is determined by the value of
ctsvServerNoProvisionSecretAddrType object.ro InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.741.1.7.3 |
ciscoTrustSecServerMIBConform OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.741.2 |
ciscoTrustSecServerMIBCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.741.2.1 |
ciscoTrustSecServerMIBGroups OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.741.2.2 |