module Cisco-IOS-XE-cts-rpc {

    yang-version 1;

    namespace
      "http://cisco.com/ns/yang/Cisco-IOS-XE-cts-rpc";

    prefix ios-xe-cts-rpc;

    import cisco-semver {
      prefix cisco-semver;
    }
    import ietf-inet-types {
      prefix inet;
    }
    import Cisco-IOS-XE-rpc {
      prefix ios-xe-rpc;
    }

    organization "Cisco Systems";

    contact "<mailto:cs-yang@cisco.com>";

    description
      "NED CTS RPC YANG module for IOS
     Copyright (c) 2016-2019 by Cisco Systems, Inc.
     All rights reserved.";

    revision "2019-07-01" {
      description
        "Establish semantic version baseline";
    }

    revision "2018-12-06" {
      description
        "created for NED RPC modularisation";
    }

    cisco-semver:module-version "1.0.0";

    grouping clear-cts-counters-ip-grouping {
      choice ip-choice {
        leaf ipv6 {
          type empty;
          description
            "Protocol Version - IPv4";
        }
        leaf ipv4 {
          type empty;
          description
            "Protocol Version - IPv6";
        }
      }  // choice ip-choice
    }  // grouping clear-cts-counters-ip-grouping

    grouping clear-cts-source-destination-grouping {
      choice from-to-choice {
        case security-tag-case {
          leaf security-tag {
            type uint16 {
              range "0..65519";
            }
            description "Security Group Tag";
          }

          choice ip-choice {
            leaf ipv6 {
              when '../security-tag';
              type empty;
              description
                "Protocol Version - IPv6";
            }
            leaf ipv4 {
              when '../security-tag';
              type empty;
              description
                "Protocol Version - IPv4";
            }
          }  // choice ip-choice
        }  // case security-tag-case
        container unknown {
          presence "true";
          description
            " Unknown Destination Group";
          uses clear-cts-counters-ip-grouping;
        }  // container unknown
      }  // choice from-to-choice
    }  // grouping clear-cts-source-destination-grouping

    rpc cts {
      description
        "Cisco Trusted Security Exec Commands";
      input {
        container credentials {
          description
            "Insert CTS device ID and password into the keystore";
          leaf id {
            type string {
              length "1..24";
            }
            description
              "Specify the CTS device ID for this switch or router(upto 32 char)";
          }

          leaf password {
            when '../id';
            type string;
            description
              "specify this device's CTS password(upto 24 char)";
          }
        }  // container credentials
      }

      output {
        uses ios-xe-rpc:cisco-xe-rpc-output;
      }
    }  // rpc cts

    augment /ios-xe-rpc:clear/ios-xe-rpc:input/ios-xe-rpc:clear-choice {
      container cts {
        description
          "Cisco Trusted Security commands";
        choice cts-choice {
          container counter {
            presence "true";
            description
              "Clear a CTS interface's counters or all counters";
            leaf interface {
              type string;
              description
                "GigabitEthernet IEEE 802.3z";
            }
          }  // container counter
          leaf credentials {
            type empty;
            description
              "Clear all CTS credentials, including all PACs";
          }
          leaf environment-data {
            type empty;
            description
              "Clear CTS Environment Data";
          }
          container pac {
            description
              "Clear a PAC or all PACs from the keystore";
            choice pac-choice {
              leaf A-ID {
                type string;
                description
                  "Specify A-ID of a PAC to be removed from the key store";
              }
              leaf all {
                type empty;
                description
                  "Clear all PACs on the device";
              }
            }  // choice pac-choice
          }  // container pac
          container role-based {
            description
              "Role-based Access Control information";
            container counters {
              presence "true";
              description
                "Display role-based access control statistics per <SGT, DGT> cell";
              choice counters-choice {
                container default {
                  presence "true";
                  description
                    "Default policy counters";
                  uses clear-cts-counters-ip-grouping;
                }  // container default
                leaf ipv4 {
                  type empty;
                  description
                    "Protocol Version - IPv4";
                }
                leaf ipv6 {
                  type empty;
                  description
                    "Protocol Version - IPv4";
                }

                case from-case {
                  container from {
                    description
                      "Source Group";
                    uses clear-cts-source-destination-grouping;
                  }  // container from

                  container to {
                    description
                      "Destination Group";
                    uses clear-cts-source-destination-grouping;
                  }  // container to
                }  // case from-case
              }  // choice counters-choice
            }  // container counters
          }  // container role-based
          leaf server {
            type inet:ipv4-address;
            description
              " Remove the specified authentication server";
          }
          container sxp {
            description
              "Clear the SXP counters";
            leaf filter-counters {
              type empty;
            }
          }  // container sxp
        }  // choice cts-choice
      }  // container cts
    }
  }  // module Cisco-IOS-XE-cts-rpc