Cisco-IOS-XE-cts

YANG Data Model Tree Structure

View YANG Source on GitHub →

📚 API Documentation & Navigation

📄 Swagger API Spec 📂 Browse Native Config APIs 🌳 All Trees

📋 Module Metadata

Namespace: http://cisco.com/ns/yang/Cisco-IOS-XE-cts

Prefix: cts

Related Modules:
Cisco-IOS-XE-cts-rpc
CISCO-AAL5-MIB
CISCO-ATM-EXT-MIB
Cisco-IOS-XE-aaa
Cisco-IOS-XE-acl

💡 Example Usage

# GET module data
curl -X GET \
  -H "Accept: application/yang-data+json" \
  -u admin:password \
  --insecure \
  https://device-ip/restconf/data/Cisco-IOS-XE-cts

📚 External Documentation

💻 YANG Source📖 YANG Catalog🌐 DevNet Guide
module: Cisco-IOS-XE-cts

  augment /ios:native/ios:cts:
    +--rw cache
    |  +--rw enable?       empty
    |  +--rw nv-storage
    |     +--rw nv-storage?   enumeration
    +--rw critical-authentication-conf?   empty
    +--rw critical-authentication!
    |  +--rw default
    |  |  +--rw peer-sgt
    |  |  |  +--rw range* [range]
    |  |  |     +--rw range      uint16
    |  |  |     +--rw trusted?   empty
    |  |  +--rw pmk
    |  |     +--rw type?     enumeration
    |  |     +--rw secret?   string
    |  +--rw fallback
    |     +--rw Cached?    empty
    |     +--rw default?   empty
    +--rw authorization
    |  +--rw list?   string
    +--rw dot1x-server-timeout?           uint16
    +--rw dot1x-supp-timeout?             uint16
    +--rw logging?                        enumeration
    +--rw environment-data
    |  +--rw enable?   empty
    +--rw role-based
    |  +--rw sgt-caching?         empty
    |  +--rw permissions
    |  |  +--rw default
    |  |  |  +--rw ACL-name-new*   string
    |  |  |  o--rw ACL-name*       string
    |  |  |  o--rw name?           string
    |  |  |  +--rw ipv6
    |  |  |     +--rw ACL-name-new*   string
    |  |  |     o--rw ACL-name*       string
    |  |  +--rw from
    |  |     +--rw range* [range]
    |  |        +--rw range    uint16
    |  |        +--rw to
    |  |           +--rw range* [range]
    |  |              +--rw range           uint16
    |  |              +--rw ACL-name-new*   string
    |  |              o--rw ACL-name*       string
    |  |              o--rw name?           string
    |  |              +--rw ipv6
    |  |                 +--rw ACL-name-new*   string
    |  |                 o--rw ACL-name*       string
    |  +--rw enforcement-only
    |  |  +--rw enforcement?   empty
    |  +--rw enforcement
    |  |  +--rw logging-interval?   uint32
    |  |  +--rw vlan-lists*         uint16
    |  |  +--rw vlan-list* [id]
    |  |     +--rw id    union
    |  +--rw monitor
    |  |  +--rw all?           empty
    |  |  +--rw permissions
    |  |     +--rw default
    |  |        +--rw ipv4?   empty
    |  +--rw sgt-map-list* [ip]
    |  |  +--rw ip      union
    |  |  +--rw sgt?    uint16
    |  |  +--rw host?   empty
    |  +--rw sgt-map-vrf-list
    |  |  +--rw sgt-map* [vrf ip]
    |  |     +--rw vrf     string
    |  |     +--rw ip      union
    |  |     +--rw sgt?    uint16
    |  |     +--rw host?   empty
    |  o--rw sgt-map* [ip sgt]
    |  |  o--rw ip      union
    |  |  o--rw sgt     uint16
    |  |  o--rw vrf?    string
    |  |  o--rw host?   empty
    |  +--rw sgt-map-vlan-list
    |     +--rw sgt-map* [vlan-list]
    |        +--rw vlan-list    union
    |        +--rw sgt?         uint16
    +--rw server
    |  +--rw deadtime?       uint32
    |  +--rw key-wrap
    |  |  +--rw enable?   empty
    |  +--rw load-balance
    |  |  +--rw method
    |  |     +--rw least-outstanding!
    |  |        +--rw batch-size?                uint32
    |  |        +--rw ignore-preferred-server?   empty
    |  +--rw test
    |     +--rw server* [ip]
    |     |  +--rw ip           inet:ipv4-address
    |     |  +--rw deadtime?    uint32
    |     |  +--rw enable?      boolean
    |     |  +--rw idle-time?   uint32
    |     +--rw all
    |        +--rw deadtime?    uint32
    |        +--rw enable?      boolean
    |        +--rw idle-time?   uint32
    +--rw sgt?                            uint16
    +--rw sg-epg-translation
    |  +--rw translation!
    |     +--rw ignore-vrf?   empty {ios-features:sg-epg-ignore-vrf}?
    o--rw sg-epg?                         enumeration
    +--rw sxp
    |  +--rw reconciliation
    |  |  +--rw period?   uint32
    |  +--rw retry
    |  |  +--rw period?   uint32
    |  +--rw speaker
    |  |  +--rw hold-time?   uint32
    |  +--rw node-id
    |  |  +--rw (nodeid)?
    |  |     +--:(hex-value)
    |  |     |  +--rw hex-value?   hex-string
    |  |     +--:(ipv4)
    |  |     |  +--rw ipv4?        inet:ipv4-address
    |  |     +--:(interface)
    |  |        +--rw interface?   string
    |  +--rw listener
    |  |  +--rw hold-time
    |  |     +--rw min-time?   uint16
    |  |     +--rw max-time?   uint16
    |  +--rw default
    |  |  +--rw password
    |  |  |  +--rw type?     enumeration
    |  |  |  +--rw secret?   string
    |  |  +--rw source-ip?   inet:ipv4-address
    |  |  +--rw key-chain?   string
    |  +--rw connection
    |  |  +--rw peer
    |  |     +--rw ipv4-no-vrf* [ipv4]
    |  |     |  +--rw ipv4         inet:ipv4-address
    |  |     |  +--rw source?      inet:ipv4-address
    |  |     |  +--rw password?    enumeration
    |  |     |  +--rw mode?        enumeration
    |  |     |  +--rw option?      enumeration
    |  |     |  +--rw hold-time?   uint32
    |  |     |  +--rw max-time?    uint32
    |  |     +--rw ipv4-with-vrf* [ipv4 vrf]
    |  |     |  +--rw ipv4         inet:ipv4-address
    |  |     |  +--rw vrf          string
    |  |     |  +--rw source?      inet:ipv4-address
    |  |     |  +--rw password?    enumeration
    |  |     |  +--rw mode?        enumeration
    |  |     |  +--rw option?      enumeration
    |  |     |  +--rw hold-time?   uint32
    |  |     |  +--rw max-time?    uint32
    |  |     o--rw ipv4* [ipv4]
    |  |        o--rw ipv4        inet:ipv4-address
    |  |        o--rw source
    |  |        |  o--rw ipv4* [ipv4]
    |  |        |     o--rw ipv4        inet:ipv4-address
    |  |        |     o--rw password* [password-type]
    |  |        |        o--rw password-type    enumeration
    |  |        |        o--rw mode
    |  |        |           o--rw local!
    |  |        |           |  o--rw both!
    |  |        |           |  |  o--rw vrf?   string
    |  |        |           |  o--rw listener!
    |  |        |           |  |  o--rw hold-time
    |  |        |           |  |  |  o--rw min-time?   uint16
    |  |        |           |  |  |  o--rw max-time?   uint16
    |  |        |           |  |  |  o--rw vrf?        string
    |  |        |           |  |  o--rw vrf?         string
    |  |        |           |  o--rw speaker!
    |  |        |           |     o--rw hold-time
    |  |        |           |     |  o--rw min-time?   uint16
    |  |        |           |     |  o--rw vrf?        string
    |  |        |           |     o--rw vrf?         string
    |  |        |           o--rw peer!
    |  |        |              o--rw both!
    |  |        |              |  o--rw vrf?   string
    |  |        |              o--rw listener!
    |  |        |              |  o--rw hold-time
    |  |        |              |  |  o--rw min-time?   uint16
    |  |        |              |  |  o--rw vrf?        string
    |  |        |              |  o--rw vrf?         string
    |  |        |              o--rw speaker!
    |  |        |                 o--rw hold-time
    |  |        |                 |  o--rw min-time?   uint16
    |  |        |                 |  o--rw max-time?   uint16
    |  |        |                 |  o--rw vrf?        string
    |  |        |                 o--rw vrf?         string
    |  |        o--rw password* [password-type]
    |  |           o--rw password-type    enumeration
    |  |           o--rw mode
    |  |              o--rw local!
    |  |              |  o--rw both!
    |  |              |  |  o--rw vrf?   string
    |  |              |  o--rw listener!
    |  |              |  |  o--rw hold-time
    |  |              |  |  |  o--rw min-time?   uint16
    |  |              |  |  |  o--rw max-time?   uint16
    |  |              |  |  |  o--rw vrf?        string
    |  |              |  |  o--rw vrf?         string
    |  |              |  o--rw speaker!
    |  |              |     o--rw hold-time
    |  |              |     |  o--rw min-time?   uint16
    |  |              |     |  o--rw vrf?        string
    |  |              |     o--rw vrf?         string
    |  |              o--rw peer!
    |  |                 o--rw both!
    |  |                 |  o--rw vrf?   string
    |  |                 o--rw listener!
    |  |                 |  o--rw hold-time
    |  |                 |  |  o--rw min-time?   uint16
    |  |                 |  |  o--rw vrf?        string
    |  |                 |  o--rw vrf?         string
    |  |                 o--rw speaker!
    |  |                    o--rw hold-time
    |  |                    |  o--rw min-time?   uint16
    |  |                    |  o--rw max-time?   uint16
    |  |                    |  o--rw vrf?        string
    |  |                    o--rw vrf?         string
    |  +--rw sxp-def-enable?        boolean
    |  o--rw enable?                empty
    |  +--rw log
    |  |  +--rw binding-changes?   boolean
    |  +--rw export-list* [name]
    |  |  +--rw name    string
    |  |  +--rw vrf
    |  |     +--rw vrf-name*   union
    |  |     +--rw all?        empty
    |  +--rw import-list* [name]
    |  |  +--rw name         string
    |  |  +--rw vlan-list?   empty
    |  |  +--rw vrf-new!
    |  |  |  +--rw vrf-name?   union
    |  |  x--rw vrf?         union
    |  +--rw export-import-group
    |     +--rw listener
    |     |  +--rw import-group* [name]
    |     |  |  +--rw name           string
    |     |  |  +--rw import-list?   string
    |     |  |  +--rw peer*          inet:ipv4-address
    |     |  +--rw global?         string
    |     +--rw speaker
    |        +--rw export-group* [name]
    |        |  +--rw name           string
    |        |  +--rw export-list?   string
    |        |  +--rw peer*          inet:ipv4-address
    |        +--rw global?         string
    +--rw credentials
    |  +--rw id?         string
    |  +--rw password?   empty
    |  +--rw type?       enumeration
    |  +--rw secret?     string
    +--rw policy-server
       +--rw name* [server-profile-name]
       |  +--rw server-profile-name    string
       |  +--rw address
       |  |  +--rw ipv4-address*   inet:host
       |  |  o--rw ipv4?           union
       |  |  +--rw ipv6*           inet:host
       |  |  +--rw domain-name?    string
       |  +--rw content-type
       |  |  +--rw json?   empty
       |  +--rw port?                  uint16
       |  +--rw retransmit?            uint8
       |  +--rw timeout?               uint8
       |  +--rw tls
       |     +--rw server-trustpoint?   string
       +--rw device-id
       |  +--rw device-name?   string
       +--rw order
       |  +--rw random?   empty
       +--rw server-credential
          +--rw username?          string
          +--rw password?          empty
          +--rw encryption?        enumeration
          +--rw password-string?   string
  augment /ios:native/ios:interface/ios:FastEthernet:
    +--rw cts
       +--rw manual!
       |  +--rw policy
       |  |  +--rw static
       |  |     +--rw sgt?       uint16
       |  |     +--rw trusted?   empty
       |  +--rw sap
       |  |  +--rw pmk* [word]
       |  |     +--rw word         string
       |  |     +--rw mode-list
       |  |        +--rw gcm-encrypt!
       |  |        |  +--rw gmac!
       |  |        |     +--rw null?   empty
       |  |        +--rw no-encap!
       |  |           +--rw gmac!
       |  |              +--rw gcm-encrypt?   empty
       |  +--rw propagate
       |     +--rw sgt?   boolean
       +--rw role-based
          +--rw sgt-cache*               enumeration
          +--rw enforcement-routing?     boolean {ios-features:enforcement-routing-platform}?
          +--rw enforcement-switching?   boolean {ios-features:cts-switching}?
          o--rw enforcement?             empty
          +--rw sgt-map
             +--rw security-group?   string
             +--rw sgt?              uint16
             +--rw vlanid* [id]
                +--rw id     uint16
                +--rw sgt?   uint16
  augment /ios:native/ios:interface/ios:GigabitEthernet:
    +--rw cts
       +--rw manual!
       |  +--rw policy
       |  |  +--rw static
       |  |     +--rw sgt?       uint16
       |  |     +--rw trusted?   empty
       |  +--rw sap
       |  |  +--rw pmk* [word]
       |  |     +--rw word         string
       |  |     +--rw mode-list
       |  |        +--rw gcm-encrypt!
       |  |        |  +--rw gmac!
       |  |        |     +--rw null?   empty
       |  |        +--rw no-encap!
       |  |           +--rw gmac!
       |  |              +--rw gcm-encrypt?   empty
       |  +--rw propagate
       |     +--rw sgt?   boolean
       +--rw role-based
          +--rw sgt-cache*               enumeration
          +--rw enforcement-routing?     boolean {ios-features:enforcement-routing-platform}?
          +--rw enforcement-switching?   boolean {ios-features:cts-switching}?
          o--rw enforcement?             empty
          +--rw sgt-map
             +--rw security-group?   string
             +--rw sgt?              uint16
             +--rw vlanid* [id]
                +--rw id     uint16
                +--rw sgt?   uint16
  augment /ios:native/ios:interface/ios:TwoGigabitEthernet:
    +--rw cts
       +--rw manual!
       |  +--rw policy
       |  |  +--rw static
       |  |     +--rw sgt?       uint16
       |  |     +--rw trusted?   empty
       |  +--rw sap
       |  |  +--rw pmk* [word]
       |  |     +--rw word         string
       |  |     +--rw mode-list
       |  |        +--rw gcm-encrypt!
       |  |        |  +--rw gmac!
       |  |        |     +--rw null?   empty
       |  |        +--rw no-encap!
       |  |           +--rw gmac!
       |  |              +--rw gcm-encrypt?   empty
       |  +--rw propagate
       |     +--rw sgt?   boolean
       +--rw role-based
          +--rw sgt-cache*               enumeration
          +--rw enforcement-routing?     boolean {ios-features:enforcement-routing-platform}?
          +--rw enforcement-switching?   boolean {ios-features:cts-switching}?
          o--rw enforcement?             empty
          +--rw sgt-map
             +--rw security-group?   string
             +--rw sgt?              uint16
             +--rw vlanid* [id]
                +--rw id     uint16
                +--rw sgt?   uint16
  augment /ios:native/ios:interface/ios:FiveGigabitEthernet:
    +--rw cts
       +--rw manual!
       |  +--rw policy
       |  |  +--rw static
       |  |     +--rw sgt?       uint16
       |  |     +--rw trusted?   empty
       |  +--rw sap
       |  |  +--rw pmk* [word]
       |  |     +--rw word         string
       |  |     +--rw mode-list
       |  |        +--rw gcm-encrypt!
       |  |        |  +--rw gmac!
       |  |        |     +--rw null?   empty
       |  |        +--rw no-encap!
       |  |           +--rw gmac!
       |  |              +--rw gcm-encrypt?   empty
       |  +--rw propagate
       |     +--rw sgt?   boolean
       +--rw role-based
          +--rw sgt-cache*               enumeration
          +--rw enforcement-routing?     boolean {ios-features:enforcement-routing-platform}?
          +--rw enforcement-switching?   boolean {ios-features:cts-switching}?
          o--rw enforcement?             empty
          +--rw sgt-map
             +--rw security-group?   string
             +--rw sgt?              uint16
             +--rw vlanid* [id]
                +--rw id     uint16
                +--rw sgt?   uint16
  augment /ios:native/ios:interface/ios:AppGigabitEthernet:
    +--rw cts
       +--rw manual!
       |  +--rw policy
       |  |  +--rw static
       |  |     +--rw sgt?       uint16
       |  |     +--rw trusted?   empty
       |  +--rw sap
       |  |  +--rw pmk* [word]
       |  |     +--rw word         string
       |  |     +--rw mode-list
       |  |        +--rw gcm-encrypt!
       |  |        |  +--rw gmac!
       |  |        |     +--rw null?   empty
       |  |        +--rw no-encap!
       |  |           +--rw gmac!
       |  |              +--rw gcm-encrypt?   empty
       |  +--rw propagate
       |     +--rw sgt?   boolean
       +--rw role-based
          +--rw sgt-cache*               enumeration
          +--rw enforcement-routing?     boolean {ios-features:enforcement-routing-platform}?
          +--rw enforcement-switching?   boolean {ios-features:cts-switching}?
          o--rw enforcement?             empty
          +--rw sgt-map
             +--rw security-group?   string
             +--rw sgt?              uint16
             +--rw vlanid* [id]
                +--rw id     uint16
                +--rw sgt?   uint16
  augment /ios:native/ios:interface/ios:TenGigabitEthernet:
    +--rw cts
       +--rw manual!
       |  +--rw policy
       |  |  +--rw static
       |  |     +--rw sgt?       uint16
       |  |     +--rw trusted?   empty
       |  +--rw sap
       |  |  +--rw pmk* [word]
       |  |     +--rw word         string
       |  |     +--rw mode-list
       |  |        +--rw gcm-encrypt!
       |  |        |  +--rw gmac!
       |  |        |     +--rw null?   empty
       |  |        +--rw no-encap!
       |  |           +--rw gmac!
       |  |              +--rw gcm-encrypt?   empty
       |  +--rw propagate
       |     +--rw sgt?   boolean
       +--rw role-based
          +--rw sgt-cache*               enumeration
          +--rw enforcement-routing?     boolean {ios-features:enforcement-routing-platform}?
          +--rw enforcement-switching?   boolean {ios-features:cts-switching}?
          o--rw enforcement?             empty
          +--rw sgt-map
             +--rw security-group?   string
             +--rw sgt?              uint16
             +--rw vlanid* [id]
                +--rw id     uint16
                +--rw sgt?   uint16
  augment /ios:native/ios:interface/ios:TwentyFiveGigE:
    +--rw cts
       +--rw manual!
       |  +--rw policy
       |  |  +--rw static
       |  |     +--rw sgt?       uint16
       |  |     +--rw trusted?   empty
       |  +--rw sap
       |  |  +--rw pmk* [word]
       |  |     +--rw word         string
       |  |     +--rw mode-list
       |  |        +--rw gcm-encrypt!
       |  |        |  +--rw gmac!
       |  |        |     +--rw null?   empty
       |  |        +--rw no-encap!
       |  |           +--rw gmac!
       |  |              +--rw gcm-encrypt?   empty
       |  +--rw propagate
       |     +--rw sgt?   boolean
       +--rw role-based
          +--rw sgt-cache*               enumeration
          +--rw enforcement-routing?     boolean {ios-features:enforcement-routing-platform}?
          +--rw enforcement-switching?   boolean {ios-features:cts-switching}?
          o--rw enforcement?             empty
          +--rw sgt-map
             +--rw security-group?   string
             +--rw sgt?              uint16
             +--rw vlanid* [id]
                +--rw id     uint16
                +--rw sgt?   uint16
  augment /ios:native/ios:interface/ios:FortyGigabitEthernet:
    +--rw cts
       +--rw manual!
       |  +--rw policy
       |  |  +--rw static
       |  |     +--rw sgt?       uint16
       |  |     +--rw trusted?   empty
       |  +--rw sap
       |  |  +--rw pmk* [word]
       |  |     +--rw word         string
       |  |     +--rw mode-list
       |  |        +--rw gcm-encrypt!
       |  |        |  +--rw gmac!
       |  |        |     +--rw null?   empty
       |  |        +--rw no-encap!
       |  |           +--rw gmac!
       |  |              +--rw gcm-encrypt?   empty
       |  +--rw propagate
       |     +--rw sgt?   boolean
       +--rw role-based
          +--rw sgt-cache*               enumeration
          +--rw enforcement-routing?     boolean {ios-features:enforcement-routing-platform}?
          +--rw enforcement-switching?   boolean {ios-features:cts-switching}?
          o--rw enforcement?             empty
          +--rw sgt-map
             +--rw security-group?   string
             +--rw sgt?              uint16
             +--rw vlanid* [id]
                +--rw id     uint16
                +--rw sgt?   uint16
  augment /ios:native/ios:interface/ios:FiftyGigabitEthernet:
    +--rw cts
       +--rw manual!
       |  +--rw policy
       |  |  +--rw static
       |  |     +--rw sgt?       uint16
       |  |     +--rw trusted?   empty
       |  +--rw sap
       |  |  +--rw pmk* [word]
       |  |     +--rw word         string
       |  |     +--rw mode-list
       |  |        +--rw gcm-encrypt!
       |  |        |  +--rw gmac!
       |  |        |     +--rw null?   empty
       |  |        +--rw no-encap!
       |  |           +--rw gmac!
       |  |              +--rw gcm-encrypt?   empty
       |  +--rw propagate
       |     +--rw sgt?   boolean
       +--rw role-based
          +--rw sgt-cache*               enumeration
          +--rw enforcement-routing?     boolean {ios-features:enforcement-routing-platform}?
          +--rw enforcement-switching?   boolean {ios-features:cts-switching}?
          o--rw enforcement?             empty
          +--rw sgt-map
             +--rw security-group?   string
             +--rw sgt?              uint16
             +--rw vlanid* [id]
                +--rw id     uint16
                +--rw sgt?   uint16
  augment /ios:native/ios:interface/ios:HundredGigE:
    +--rw cts
       +--rw manual!
       |  +--rw policy
       |  |  +--rw static
       |  |     +--rw sgt?       uint16
       |  |     +--rw trusted?   empty
       |  +--rw sap
       |  |  +--rw pmk* [word]
       |  |     +--rw word         string
       |  |     +--rw mode-list
       |  |        +--rw gcm-encrypt!
       |  |        |  +--rw gmac!
       |  |        |     +--rw null?   empty
       |  |        +--rw no-encap!
       |  |           +--rw gmac!
       |  |              +--rw gcm-encrypt?   empty
       |  +--rw propagate
       |     +--rw sgt?   boolean
       +--rw role-based
          +--rw sgt-cache*               enumeration
          +--rw enforcement-routing?     boolean {ios-features:enforcement-routing-platform}?
          +--rw enforcement-switching?   boolean {ios-features:cts-switching}?
          o--rw enforcement?             empty
          +--rw sgt-map
             +--rw security-group?   string
             +--rw sgt?              uint16
             +--rw vlanid* [id]
                +--rw id     uint16
                +--rw sgt?   uint16
  augment /ios:native/ios:interface/ios:Loopback:
    o--rw cts {ios-features:cts-intf-enable}?
       o--rw manual!
       |  o--rw policy
       |  |  o--rw static
       |  |     o--rw sgt?       uint16
       |  |     o--rw trusted?   empty
       |  o--rw sap
       |  |  o--rw pmk* [word]
       |  |     +--rw word         string
       |  |     o--rw mode-list
       |  |        o--rw gcm-encrypt!
       |  |        |  o--rw gmac!
       |  |        |     o--rw null?   empty
       |  |        o--rw no-encap!
       |  |           o--rw gmac!
       |  |              o--rw gcm-encrypt?   empty
       |  o--rw propagate
       |     o--rw sgt?   boolean
       o--rw role-based
          o--rw sgt-cache*               enumeration
          o--rw enforcement-routing?     boolean {ios-features:enforcement-routing-platform}?
          o--rw enforcement-switching?   boolean {ios-features:cts-switching}?
          o--rw enforcement?             empty
          o--rw sgt-map
             o--rw security-group?   string
             o--rw sgt?              uint16
  augment /ios:native/ios:interface/ios:Tunnel:
    +--rw cts
       +--rw manual! {ios-features:cts-controller}?
       |  +--rw policy
       |  |  +--rw static
       |  |     +--rw sgt?       uint16
       |  |     +--rw trusted?   empty
       |  +--rw sap
       |  |  +--rw pmk* [word]
       |  |     +--rw word         string
       |  |     +--rw mode-list
       |  |        +--rw gcm-encrypt!
       |  |        |  +--rw gmac!
       |  |        |     +--rw null?   empty
       |  |        +--rw no-encap!
       |  |           +--rw gmac!
       |  |              +--rw gcm-encrypt?   empty
       |  +--rw propagate
       |     +--rw sgt?   boolean
       +--rw role-based
       |  +--rw sgt-cache*               enumeration
       |  +--rw enforcement-routing?     boolean {ios-features:enforcement-routing-platform}?
       |  +--rw enforcement-switching?   boolean {ios-features:cts-switching}?
       |  o--rw enforcement?             empty
       |  +--rw sgt-map
       |     +--rw security-group?   string
       |     +--rw sgt?              uint16
       |     +--rw vlanid* [id]
       |        +--rw id     uint16
       |        +--rw sgt?   uint16
       +--rw sgt?          enumeration {ios-features:cts-autonomous}?
  augment /ios:native/ios:interface/ios:Port-channel:
    +--rw cts
       +--rw manual!
       |  +--rw policy
       |  |  +--rw static
       |  |     +--rw sgt?       uint16
       |  |     +--rw trusted?   empty
       |  +--rw sap
       |  |  +--rw pmk* [word]
       |  |     +--rw word         string
       |  |     +--rw mode-list
       |  |        +--rw gcm-encrypt!
       |  |        |  +--rw gmac!
       |  |        |     +--rw null?   empty
       |  |        +--rw no-encap!
       |  |           +--rw gmac!
       |  |              +--rw gcm-encrypt?   empty
       |  +--rw propagate
       |     +--rw sgt?   boolean
       +--rw role-based
          +--rw sgt-cache*               enumeration
          +--rw enforcement-routing?     boolean {ios-features:enforcement-routing-platform}?
          +--rw enforcement-switching?   boolean {ios-features:cts-switching}?
          o--rw enforcement?             empty
          +--rw sgt-map
             +--rw security-group?   string
             +--rw sgt?              uint16
             +--rw vlanid* [id]
                +--rw id     uint16
                +--rw sgt?   uint16
  augment /ios:native/ios:interface/ios:Virtual-Template:
    +--rw cts
       +--rw manual!
       |  +--rw policy
       |  |  +--rw static
       |  |     +--rw sgt?       uint16
       |  |     +--rw trusted?   empty
       |  +--rw sap
       |  |  +--rw pmk* [word]
       |  |     +--rw word         string
       |  |     +--rw mode-list
       |  |        +--rw gcm-encrypt!
       |  |        |  +--rw gmac!
       |  |        |     +--rw null?   empty
       |  |        +--rw no-encap!
       |  |           +--rw gmac!
       |  |              +--rw gcm-encrypt?   empty
       |  +--rw propagate
       |     +--rw sgt?   boolean
       +--rw sgt?      enumeration
  augment /ios:native/ios:interface/ios:VirtualPortGroup:
    +--rw cts
       +--rw manual!
          +--rw policy
          |  +--rw static
          |     +--rw sgt?       uint16
          |     +--rw trusted?   empty
          +--rw sap
          |  +--rw pmk* [word]
          |     +--rw word         string
          |     +--rw mode-list
          |        +--rw gcm-encrypt!
          |        |  +--rw gmac!
          |        |     +--rw null?   empty
          |        +--rw no-encap!
          |           +--rw gmac!
          |              +--rw gcm-encrypt?   empty
          +--rw propagate
             +--rw sgt?   boolean
  augment /ios:native/ios:interface/ios:Vlan:
    +--rw cts
       +--rw manual!
          +--rw policy
          |  +--rw static
          |     +--rw sgt?       uint16
          |     +--rw trusted?   empty
          +--rw sap
          |  +--rw pmk* [word]
          |     +--rw word         string
          |     +--rw mode-list
          |        +--rw gcm-encrypt!
          |        |  +--rw gmac!
          |        |     +--rw null?   empty
          |        +--rw no-encap!
          |           +--rw gmac!
          |              +--rw gcm-encrypt?   empty
          +--rw propagate
             +--rw sgt?   boolean
  augment /ios:native/ios:interface/ios:LISP:
    +--rw cts
       +--rw role-based
          +--rw sgt-cache*               enumeration
          +--rw enforcement-routing?     boolean {ios-features:enforcement-routing-platform}?
          +--rw enforcement-switching?   boolean {ios-features:cts-switching}?
          o--rw enforcement?             empty
          +--rw sgt-map
             +--rw security-group?   string
             +--rw sgt?              uint16
             +--rw vlanid* [id]
                +--rw id     uint16
                +--rw sgt?   uint16