CISCO-LWAPP-WLAN-MIB: View SNMP OID List / Download MIB

This MIB is intended to be implemented on all those devices operating as Central Controllers (CC) that terminate the Light Weight Access Point Protocol tunnel from Cisco Light-weight LWAPP Access Points. This MIB helps to manage the WLANs on the controller. The relationship between CC and the LWAPP APs can be depicted as follows: +......+ +......+ +......+ +......+ + + + + + + + + + CC + + CC + + CC + + CC + + + + + + + + + +......+ +......+ +......+ +......+ .. . . . .. . . . . . . . . . . . . . . . . . . . . . . . +......+ +......+ +......+ +......+ +......+ + + + + + + + + + + + AP + + AP + + AP + + AP + + AP + + + + + + + + + + + +......+ +......+ +......+ +......+ +......+ . . . . . . . . . . . . . . . . . . . . . . . . +......+ +......+ +......+ +......+ +......+ + + + + + + + + + + + MN + + MN + + MN + + MN + + MN + + + + + + + + + + + +......+ +......+ +......+ +......+ +......+ The LWAPP tunnel exists between the controller and the APs. The MNs communicate with the APs through the protocol defined by the 802.11 standard. LWAPP APs, upon bootup, discover and join one of the controllers and the controller pushes the configuration, that includes the WLAN parameters, to the LWAPP APs. The APs then encapsulate all the 802.11 frames from wireless clients inside LWAPP frames and forward the LWAPP frames to the controller. GLOSSARY Access Point ( AP ) An entity that contains an 802.11 medium access control ( MAC ) and physical layer ( PHY ) interface and provides access to the distribution services via the wireless medium for associated clients. LWAPP APs encapsulate all the 802.11 frames in LWAPP frames and sends it to the controller to which it is logically connected to. Central Controller ( CC ) The central entity that terminates the LWAPP protocol tunnel from the LWAPP APs. Throughout this MIB, this entity also referred to as 'controller'. Light Weight Access Point Protocol ( LWAPP ) This is a generic protocol that defines the communication between the Access Points and the controllers. Mobile Node ( MN ) A roaming 802.11 wireless device in a wireless network associated with an access point. Access Control List ( ACL ) A list of rules used to restrict the traffic reaching an interface or the CPU or WLAN. Each ACL is an ordered set of rules and actions. If a rule matches then the action for that rule is applied to the packet. 802.1x The IEEE ratified standard for enforcing port based access control. This was originally intended for use on wired LANs and later extended for use in 802.11 WLAN environments. This defines an architecture with three main parts - a supplicant (Ex. an 802.11 wireless client), an authenticator (the AP) and an authentication server(a Radius server). The authenticator passes messages back and forth between the supplicant and the authentication server to enable the supplicant get authenticated to the network. Temporal Key Integrity Protocol ( TKIP ) A security protocol defined to enhance the limitations of WEP. Message Integrity Check and per-packet keying on all WEP-encrypted frames are two significant enhancements provided by TKIP to WEP. Cisco Key Integrity Protocol ( CKIP ) A proprietary implementation similar to TKIP. CKIP implements key permutation for protecting the CKIP key against attacks. Other features of CKIP include expansion of encryption key to 16 bytes of length for key protection and MIC to ensure data integrity. Wired Equivalent Privacy ( WEP ) A security method defined by 802.11. WEP uses a symmetric key stream cipher called RC4 to encrypt the data packets. Wi-Fi Protected Access ( WPA ) Wi-Fi Protected Access (WPA and WPA2) are security systems created in response to several serious weaknesses found in Wired Equivalent Privacy (WEP). WPA implements the majority of the IEEE 802.11i standard, and was intended as an intermediate measure to take the place of WEP while 802.11i was prepared. WPA is designed to work with all wireless network interface cards, but not necessarily with first generation wireless access points. WLAN Layer 2 Security WLAN layer 2 (MAC) security defines the encryption and authentication approaches such as 802.1x, WPA, WPA2, CKIP and WEP. Delivery Traffic Indication Map ( DTIM ) DTIM is measured in beacon intervals and is the time period during which multicast/broadcast packets are sent to clients. This helps client to go in Power Saving mode and helps to save battery power. Network Admission Control (NAC) Cisco NAC uses the network infrastructure to enforce security policy compliance on all devices that seek to access network computing resources. With the Cisco NAC appliance, network administrators can authenticate, authorize, evaluate, and remediate wired, wireless, and remote users and their machines prior to network access. The Cisco NAC appliance identifies whether networked devices such as laptops, IP phones, or game consoles are compliant with network security policies, and repairs any vulnerabilities before it permits access to the network. Out of Band (OOB) Out-of-band deployments require user traffic to traverse through the NAC appliance only within authentication, posture assessment, and remediation. When a user is authenticated and passes all policy checks, the traffic is switched normally through the network and bypasses the NAC server. Band Select The 2.4 GHz band is congested and clients have to contend with numerous performance challenges. These consist of interference from Bluetooth, microwave ovens, cordless phones, etc.; protection mechanisms from 802.11b legacy clients; and co-channel interference from other access points due to 802.11bg?s limit of three non-overlapping channels. Allowing client Wi-Fi radios capable of dual band (2.4 and 5 GHz) operation move to the less congested 5 GHz radios would improve the overall performance of the network. The Band Select algorithm is based on probe response suppression on clients 2.4G radio. The feature is OFF by default and has to be manually switched ON globally for a WLC. It can be optionally over-ridden per-SSID to disallow it. Network Access Identifier ( NAI ) In order to provide roaming services, it is necessary to have a standardized method for identifying users. NAI is actually the user identity submitted by the client during network authentication. KTS (Key Telephone System) Key Telephone System is an alternative to a private branch exchange (PBX)phone system. A KTS is equipped with several buttons that allow a caller to directly select outgoing lines or incoming calls, and use intercom and conference facilities. HALO (Hyperlocation) Hyperlocation is a technique of calculating location using Angle of Arrival(AoA) tracks 802.11 OFDM clients (meaning 802.11a/g/n/ac clients) that are associated(connected) on the network and is able to do so with much higher accuracy than conventional Real Time Location Systems(RTLS) that rely on only RSSI (RF Signal Strength). PakRSSI (Packet Received Signal Strength Indicator) PakRSSI is a measurement of the power present in a received radio signal. POE (Power Over Ethernet) Power over Ethernet or PoE describes any of several standardized or ad-hoc systems which pass electrical power along with data on Ethernet cabling. This allows a single cable to provide both data connection and electrical power to devices such as wireless access points or IP cameras. REFERENCE [1] Wireless LAN Medium Access Control ( MAC ) and Physical Layer ( PHY ) Specifications. [2] Draft-obara-capwap-lwapp-00.txt, IETF Light Weight Access Point Protocol [3] IEEE 802.11 - The original 1 Mbit/s and 2 Mbit/s, 2.4 GHz RF and IR standard.

This table represents the WLAN configuration sent by the controller to the LWAPP APs for their operation. LWAPP APs exchange configuration messages with the controller and get the required configuration for their 802.11 related operations. As part of these messages, the WLAN configuration is pushed by the controller to the LWAPP APs. This table doesn't have any dependencies on other existing tables. By defining cLWlanIndex, the unique identifier for a WLAN, this table provides a common index structure for use in several other new tables that populate information on security related attributes like authentication, encryption, 802.11 parameters, Quality-of-Service attributes etc., that would relate to a particular WLAN. Rows are added or deleted by explicit management actions initiated by the user from a network management station through the cLWlanRowStatus object.

Each entry in this table represents the WLAN configuration sent by the controller to LWAPP APs for use during their operations. entries can be added/deleted by explicit management actions by NMS or by user console

This object uniquely identifies one instance of a WLAN on the controller. The value 513-517 indicates wired clients.

This is the status column for this row and used to create, modify and delete specific instances of rows in this table. This table supports modification of writable objects when the RowStatus is 'active'. The following objects are mandatory for successful creation of an entry: cLWlanProfileName cLWlanSsid.

This object represents the profile name assigned to this WLAN. The name assigned to a WLAN has to be unique across all the WLANs on the controller. An administrator can assign a meaningful name that could later be used to refer a particular WLAN on the controller. This object cannot be modified when cLWlanRowStatus is 'active'.

This object represents the SSID assigned to this WLAN. The access points will broadcast this SSID on this WLAN. Different WLAN could use the same SSID as long as the layer 2 security is different. This object cannot be modified when cLWlanRowStatus is 'active'.

This object is used to configure this WLAN as a diagnostic WLAN. A value of 'true' indicates that the WLAN can be used for diagnostic purposes. A value of 'false' indicates that the WLAN can not be used for diagnostic purposes.

This object represnts the storage type for this conceptual row.

This object is used to configure this WLAN as a wired or wireless WLAN. A value of 'true' indicates that this is a wired WLAN. A value of 'false' indicates that this is a wireless WLAN.

This object represents the ingress interface attached to the wireless lan.

This object is used to configure the NAC- Out Of Band(OOB) support for the WLAN. A value of 'true' indicates that the WLAN supports the NAC- Out Of Band(OOB) feature. A value of 'false' indicates that the WLAN does not support the NAC- Out Of Band(OOB) feature.

This object represents the time when the static WEP key was changed by the user.

This object indicates whether Coverage Hole Detection (CHD) is enabled on the controller. A value of 'true' indicates CHD is on and a value of 'false' indicates CHD is turned off for this WLAN.

This object represents DTIM configuration per WLAN for each 802.11 network. The DTIM value is measured in Beacon Intervals.

This object represents DTIM configuration per WLAN for each 802.11 network. The DTIM value is measured in Beacon Intervals.

This object indicates whether Load Balancing is enabled on the controller for this WLAN . A value of 'true' indicates Load Balance is on and a value of 'false' indicates Load Balance is turned off for this WLAN.

This object indicates whether Band Select is enabled on the controller for this WLAN. A value of 'true' indicates Band Select is on and a value of 'false' indicates Band Select is turned off for this WLAN.

This object specifies whether passive client is enabled on the controller for this WLAN. A value of 'true' indicates passive client is on and a value of 'false' indicates passive client is turned off for this WLAN.

This object specifies whether the Roamed Voice Client Re-Anchoring feature is enabled on the controller for this WLAN. A value of 'true' indicates the roamed voice clients will get re-anchored. A value of 'false' indicates the roamed voice clients re-anchoring is turned off for this WLAN.

This object specifies whether multicast interface is enabled on the controller. A value of 'true' indicates that multicast interface feature is enabled and the interface represented by 'cLWlanMulticastInterface' would be used for the multicast traffic on this WLAN. A value of 'false' indicates that multicast interface feature is turned off for this WLAN.

This object specifies the interface, which would be used for the multicast traffic for all the clients that are associated to this WLAN.

This object specifies whether multicast direct is enabled on the controller for this WLAN. A value of 'true' indicates multicast direct is ON. A value of 'false' indicates multicast direct is turned off for this WLAN.

This object is used to configure the NAC-Posture support for the WLAN. A value of 'true' indicates that the WLAN supports the NAC-Posture feature. A value of 'false' indicates that the WLAN does not support the NAC-Posture feature.

This object specifies the maximum number of client connection allowed for this WLAN. A value of 0 indicates that there is no limit on maximum allowed clients for this WLAN.

This object specifies the priority of packets that defer the off-channel scan. This is used in off-channel scanning to improve performance for medical devices using Radio Resource Management. Each bit represents a packet type for which off-channel scanning needs to be deferred. bit0 - Best effort. bit1 - Background bit2 - Spare bit3 - Excellent effort bit4 - Controlled load bit5 - Video, less than 100-ms latency and jitter bit6 - Voice, less than 10-ms latency and jitter bit7 - Network control Bits: 'bit7': 7, 'bit6': 6, 'bit5': 5, 'bit4': 4, 'bit3': 3, 'bit2': 2, 'bit1': 1, 'bit0': 0.

This object specifies the minimum number of milliseconds that must elapse without the appearance of a specified packet before the access point radios begin an off-channel scan.

This object specifies the sub-type of the LAN created. This has to be congruent with cLWlanIswired. If cLWlanIswired is set to 'true', allowed values are guestLan(2) and remoteLan(3). If cLWlanIswired is set to 'false', allowed value is wirelessLan(1). A value of other(4) will be returned if it doesnt match any values defined here. This value is not configurable. Enumeration: 'guestLan': 2, 'wirelessLan': 1, 'other': 4, 'remoteLan': 3.

This object is used to configure the Web based authentication on Mac Filter failure support for the WLAN. A value of 'true' enables Web authentication on MAC filter failure for the WLAN. A value of 'false' disables Web authentication on MAC filter failure for the WLAN.

This object is used to configure the Static IP Tunneling of clients feature support for the WLAN. A value of 'true' enables static IP Tunneling of client for the WLAN. A value of 'false' disables static IP Tunneling of client for the WLAN.

This object is used to configure the KTS CAC support for the WLAN. A value of 'true' enables the KTS based CAC support for this wlan. A value of 'false' disables the KTS based CAC support for this wlan.

This object is used to allow/disallow wi-fi direct clients to/from joining the infrastructure network. disable(1) - WFD is completely disabled. allow(2) - allow WFD clients disallow(3) - controller rejects association request from WFD clients only if it has P2P IE with concurrency enabled. Enumeration: 'notAllow': 3, 'disable': 1, 'allow': 2.

This object represents the name of the Web Auth IPv6 ACL applied to this WLAN. If it is required to remove the ACL name for a WLAN, it should be set to 'none'. ACL's are applied in the following priority order - interfaces ACLs, WLAN ACLs, client ACLs.

This object represents the hotSpot2 feature for this WLAN. A value of 'true' enables the HotSpot2 for this wlan. A value of 'false' disables the HotSpot2 for this wlan.

This object represents the maximum allowed clients per AP radio for a WLAN.

This object specifies the status of DHCP Device Profiling feature for this WLAN. A value of 'true' enables DHCP Device Profiling on this wlan. A value of 'false' disables DHCP the Device Profiling on this wlan.

This object specifies the configuration state of authentication failover to Dot1x for the WLAN. A value of 'true' enables mac auth or dot1x for the WLAN. A value of 'false' disables mac auth or dot1x for the WLAN.

This object represents the timeout value of user for a WLAN.

This object represents the user idle threshold value in bytes for a WLAN.

This object specifies the status of HTTP Device Profiling feature for this WLAN. A value of 'true' enables HTTP Device Profiling on this wlan. A value of 'false' disables the HTTP Device Profiling on this wlan.

This object is used to clear all the configuration related to HotSpot feature at WLAN level. A value of 'enable' would clear the configuration. When queries for the current value, always 'disable' would be returned. Enumeration: 'enable': 1, 'disable': 2.

This object specifies the Fourth Radius Authentication Server for this wlan.

This object specifies the Fifth Radius Authentication Server for this wlan.

This object specifies the Sixth Radius Authentication Server for this wlan.

This object specifies the Fourth Radius Accounting Server for this wlan.

This object specifies the Fifth Radius Accounting Server for this wlan.

This object specifies the Sixth Radius Accounting Server for this wlan.

This object specifies whether self anchoring is enabled for the wlan.

This object allows universal admin mode. to be enabled on a 802.1X/WPA/WPA2 secured WLAN.

This object is used to configure 11ac Mu Mimo mode for the WLAN. A value of 'true' enables Mu Mimo mode for the WLAN. A value of 'false' disables Mu Mimo mode for the WLAN.

This table represents the WLAN configuration for the 802.11 wireless clients that are associated with the APs that have joined this controller. The creation of a new row in cLWlanConfigTable, through an explicit network management action, results in creation of an entry in this table. Similarly, deletion of a row in cLWlanConfigTable through user action causes the deletion of corresponding row in this table. This table has an one-to-one relationship with cLWlanConfigTable. There exists an entry in this table for each corresponding entry in the cLWlanConfigTable.

Each entry represents a conceptual row in this table and provides the information about the clients associated on the WLAN, uniquely identified by the cLWlanIndex.

This object represents the name of the ACL applied to this WLAN. If it is required to remove the ACL name for a WLAN, it should be set to 'none'. ACL's are applied in the following priority order - interfaces ACLs, WLAN ACLs, client ACLs.

This object represents per WLAN peer-to-peer blocking behavior on controller. Peer-to-peer blocking means traffic between two clients on same VLAN will not be bridged. disable : Peer-to-peer blocking is disabled and traffic is bridged locally within the controller. drop : The packet will be discarded. forwardUp : The packet will be forwarded on the upstream VLAN. The device 'north' of the controller can then make the decision about what to do with the packet. Enumeration: 'forwardUp': 3, 'drop': 2, 'disable': 1.

This object represents the name of the IPv6 ACL applied to this WLAN. If it is required to remove the ACL name for a WLAN, it should be set to 'none'. ACL's are applied in the following priority order - interfaces ACLs, WLAN ACLs, client ACLs.

This table represents the QoS configuration for the WLAN. The creation of a new row in cLWlanConfigTable, through an explicit network management action, results in creation of an entry in this table. Similarly, deletion of a row in cLWlanConfigTable through user action causes the deletion of corresponding row in this table. This table has an one-to-one relationship with cLWlanConfigTable. There exists an entry in this table for each corresponding entry in the cLWlanConfigTable.

Each entry represents a conceptual row in this table and provides the information about the QoS parameters on the WLAN, uniquely identified by the cLWlanIndex.

This object specifies Average Data Rate per user on downstream. Value of 0 indicates the feature is disabled.

This object specifies Average Data Rate per user on upstream. Value of 0 indicates the feature is disabled.

This object specifies Burst Data Rate per user on downstream. Value of 0 indicates the feature is disabled.

This object specifies Burst Data Rate per user on upstream. Value of 0 indicates the feature is disabled.

This object specifies average real time Data Rate per user on downstream. Value of 0 indicates the feature is disabled.

This object specifies average real time Data Rate per user on upstream. Value of 0 indicates the feature is disabled.

This object specifies burst real time Data Rate per user on downstream. Value of 0 indicates the feature is disabled.

This object specifies burst real time Data Rate per user on upstream. Value of 0 indicates the feature is disabled.

This object specifies Average Data Rate per user on downstream. Value of 0 indicates the feature is disabled.

This object specifies Average Data Rate per user on upstream. Value of 0 indicates the feature is disabled.

This object specifies Burst Data Rate per user on downstream. Value of 0 indicates the feature is disabled.

This object specifies Burst Data Rate per user on upstream. Value of 0 indicates the feature is disabled.

This object specifies average real time Data Rate per user on downstream. Value of 0 indicates the feature is disabled.

This object specifies average real time Data Rate per user on upstream. Value of 0 indicates the feature is disabled.

This object specifies burst real time Data Rate per user on downstream. Value of 0 indicates the feature is disabled.

This object specifies burst real time Data Rate per user on upstream. Value of 0 indicates the feature is disabled.

This table represents the WLAN configuration for IOS profiles configured on the switch. The creation of a new row in cLWlanConfigTable, through an explicit network management action, results in creation of an entry in this table. Similarly, deletion of a row in cLWlanConfigTable through user action causes the deletion of corresponding row in this table. This table has an one-to-one relationship with cLWlanConfigTable. There exists an entry in this table for each corresponding entry in the cLWlanConfigTable.

Each entry represents a conceptual row in this table and provides the information about the clients associated on the WLAN, uniquely identified by the cLWlanIndex.

This object represents the method list name used for accounting on this WLAN.

This object represents the method list name used for 802.1x authentication on this WLAN. This could be LDAP, RADIUS, LOCAL AUTH.

This object represents the method list name used for mac filtering on this WLAN.

This object represents the method list name used for WEB AUTH on this WLAN.

This object represents the profile name used for upstream QOS configuration on this WLAN.

This object represents the profile name used for downstream QOS configuration on this WLAN.

This object represents the DHCP Option82 format for this WLAN.

This object represents the DHCP Option82 Ascii option for this WLAN.

This object represents the DHCP Option82 Rid option for this WLAN.

This object represents the DHCP Option82 state for this WLAN.

This object specifies the priority of packets that defer the off-channel scan. This is used in off-channel scanning to improve performance for medical devices using Radio Resource Management. Each bit represents a packet type for which off-channel scanning needs to be deferred.

This object represents the web auth parameter name on this WLAN.

This object represents the profile name used for upstream QOS client configuration on this WLAN.

This object represents the profile name used for downstream QOS client configuration on this WLAN.

This table represents the flexible netflow policy details per WLAN for AVC. The creation of a new row in cLWlanFlexibleConfigTable, through an explicit network management action, results in creation of an entry in this table. Similarly, deletion of a row in cLWlanConfigTable through user action causes the deletion of corresponding rows in this table. For each wlan, there will be zero to many instances of flexible netflow policies.

Each entry represents a conceptual row in this table and provides the information about the flexible netflow policy types associated on the WLAN, uniquely identified by the cLWlanIndex and cLWlanFlexibleNetflowPolicyTypeIndex.

This object is used to set the netflow traffic direction for AVC. none(0) capture no traffic IPV4 Input Policy(1) - IPV4 input policy IPV4OutputPolicy(2) - IPV4 output policy IPV6InputPolicy(3) - IPV6 input policy IPV6OutputPolicy(4) - IPV6 output policy DatalinkInputPolicy(5) - Datalink input policy DatalinkOutputPolicy(6) - Datalink output policy. Enumeration: 'ipv4OutputPolicy': 2, 'none': 0, 'ipv6InputPolicy': 3, 'ipv4InputPolicy': 1, 'datalinkOutputPolicy': 6, 'ipv6OutputPolicy': 4, 'datalinkInputPolicy': 5.

This object represents the flexible netflow monitor name assigned to this WLAN.

Row Status for creation/deletion of a particular flexible netflow policy entry from the table

A table for the WLAN-interface-mappings and WLAN-NAC settings allowed for each configured site. Each site can have a set of WLANs associated with it. Rows are added or deleted by explicit management actions initiated by the user from a network management station through the cLAPGroupsVlanConfigRowStatus object.

An entry in cLAPGroupsVlanMappingTable. cLWlanProfileName is mandatory for creating a entry in cLWlanConfigEntry.

This object uniquely identifies a AP group. The string is an unique name assigned to a site.

This object represents the interface to be used when a client connects to the 'cLWlanProfileName' WLAN on the AP. When an AP is associated with a site, and the site has an associated set of WLANs, then only those WLANs are beamed by the AP. cLAPGroupsVlanMappingInterfaceName object is superseded by cLAPGroupsVlanMappingInterfaceNameRev1.

This object is used to configure the NAC- Out Of Band(OOB) support for this AP groups VLAN. A value of 'true' indicates that the AP group supports the NAC- Out Of Band(OOB) feature. A value of 'false' indicates that the AP group does not support the NAC- Out Of Band(OOB) feature.

This is the status column for this row and used to create and delete specific instances of rows in this table.

This object represnts the storage type for this conceptual row.

This object represnts the position of a wlan in each AP group. When a WLAN is added to an AP group, it will be placed in the lowest available slot in an array of size 16. This index will determine the order in which the WLAN is applied on an AP in that group.

This object represents the interface to be used when a client connects to the 'cLWlanProfileName' WLAN on the AP. When an AP is associated with a site, and the site has an associated set of WLANs, then only those WLANs are beamed by the AP.

A table for the configuring Venue details for a configured site.

An entry in cLAPGroupsVlanMappingTable. cLWlanProfileName is mandatory for creating a entry in cLWlanConfigEntry.

This object indicates the venue group for this AP Group. Enumeration: 'utilityAndMisc': 10, 'educational': 4, 'outdoor': 12, 'factoryAndIndustrial': 5, 'business': 3, 'institutional': 6, 'residential': 8, 'storage': 9, 'unspecified': 1, 'vehicular': 11, 'mercantile': 7, 'assembly': 2.

This object indicates the venue type within a particular venue group,for this AP Group. The Venue group-Venue Type relationship is per the following table: Venue Group Venue Type Code Venue Description =========== =============== ================= 0 0 Unspecified 0 1-255 Reserved 1 0 Unspecified Assembly 1 1 Arena 1 2 Stadium 1 3 Passenger Terminal (e.g., airport, port, bus station, ferry terminal, train station) 1 4 Amphitheater 1 5 Amusement Park 1 6 Place of Worship 1 7 Convention Center 1 8 Library 1 9 Museum 1 10 Restaurant 1 11 Theater 1 12 Bar 1 13 Coffee Shop 1 14 Zoo or Aquarium 1 15 Emergency Coordination Center 1 16-255 Reserved 2 0 Unspecified Business 2 1 Doctor or Dentist office 2 2 Bank 2 3 Fire Station 2 4 Police Station 2 6 Post Office 2 7 Professional Office 2 8 Research and Development Facility 2 9 Attorney Office 2 10-255 Reserved 3 0 Unspecified Educational 3 1 School, Primary 3 2 School, Secondary 3 3 University or College 3 4-255 Reserved 4 0 Unspecified Factory and Industrial Factory 4 2-255 Reserved 5 0 Unspecified Institutional 5 1 Hospital 5 2 Long-Term Care Facility (e.g., Nursing home, Hospice, etc.) 5 3 Alcohol and Drug Re-habilitation Center 5 4 Group Home 5 5 Prison or Jail 5 6-255 Reserved 6 0 Unspecified Mercantile 6 1 Retail Store 6 2 Grocery Market 6 3 Automotive Service Station 6 4-255 Reserved 7 0 Unspecified Residential 7 1 Hotel or Motel 7 2 Dormitory 7 3 Boarding House 7 4-255 Reserved 8 0-255 Reserved 9 0-255 Reserved 10 0 Unspecified Vehicular 10 1 Automobile or Truck 10 2 Airplane 10 3 Bus 10 4 Ferry 10 5 Ship or Boat 10 6 Train 10 7-255 Reserved 11 0 Unspecified Outdoor 11 1 Muni-mesh Network 11 2 City Park 11 3-255 Reserved Enumeration: 'hotelOrMotel': 47, 'automobileOrTruck': 53, 'fireStation': 21, 'restArea': 63, 'unspecifiedEducational': 27, 'library': 10, 'passengerTerminal': 5, 'policeStation': 22, 'postOffice': 23, 'placeOfWorship': 8, 'groupHome': 37, 'groceryMarket': 41, 'airplane': 54, 'unspecifiedInstitutional': 33, 'conventionCenter': 9, 'motorBike': 59, 'unspecifiedBusiness': 18, 'unspecifiedResidential': 45, 'attorneyOffice': 26, 'privateResidence': 46, 'museum': 11, 'longTermCareFacility': 35, 'factory': 32, 'unspecified': 1, 'shipOrBoat': 57, 'dormitory': 48, 'alcoholAndDrugRehabilitationCenter': 36, 'schoolPrimary': 28, 'unspecifiedMercantile': 39, 'doctorOrDentistOffice': 19, 'emergencyCoordinationCenter': 17, 'retailStore': 40, 'schoolSecondary': 29, 'busStop': 65, 'unspecifiedAssembly': 2, 'amusementPark': 7, 'stadium': 4, 'shoppingMall': 43, 'researchAndDevelopmentFacility': 25, 'bus': 55, 'kiosk': 66, 'universityOrCollege': 30, 'unspecifiedOutdoor': 60, 'unspecifiedVehicular': 52, 'cityPark': 62, 'train': 58, 'amphitheater': 6, 'bar': 14, 'unspecifiedFactoryAndIndustrial': 31, 'prisonOrJail': 38, 'unspecifiedUtility': 51, 'bank': 20, 'arena': 3, 'gasStation': 44, 'theater': 13, 'restaurant': 12, 'trafficControl': 64, 'boardingHouse': 49, 'unspecifiedStorage': 50, 'professionalOffice': 24, 'atomotiveServiceStation': 42, 'muniMeshNetwork': 61, 'ferry': 56, 'hospital': 34, 'coffeeShop': 15, 'zooOrAquarium': 16.

This is the venue name defined for this AP Group.

This is the Language defined for this AP Group.

This object specifies the the group of channels on the frequency band(s) the access network operates. Bits: 'class126': 16, 'class123': 13, 'class84': 2, 'class83': 1, 'class125': 15, 'class81': 0, 'class122': 12, 'class116': 6, 'class117': 7, 'class121': 11, 'class115': 5, 'class112': 3, 'class113': 4, 'class120': 10, 'class124': 14, 'class127': 17, 'class118': 8, 'class119': 9.

Table for configuring multiple venues for a configured site.

An entry in cLAPGroupsMultipleVenueTable. cLAPGroupsMultipleVenueLanguage is mandatory for creating a row in this table.

This is the Language defined for the particular venue name entry.

This is the one of the venue names defined for this AP Group.

Row Status for creation/deletion of a particular venue entry in the table.

This table represents the generic 802.11u configuration for a particular WLAN in a controller. This table has a one-to-one relationship with cLWlanConfigTable. There exist a row in this table corresponding to each row representing a WLAN in cLWlanConfigTable.

Each entry in this table represents the generic 802.11u configuration for a WLAN.

This object is used to configure the 802.11u support for this WLAN. A value of 'true' indicates that 802.11u support is enabled for this WLAN and a value of 'false' indicates that the support is disabled for this WLAN.

This object is used to configure the internet access with respect to 802.11u feature for this WLAN. A value of 'true' indicates that internet access is enabled for this WLAN and a value of 'false' indicates that the internet access is disabled for this WLAN.

This object indicates the network type with respect to 802.11u feature , for this WLAN. invalid (1) : Invalid network type. private(2) : Non-authorized users are not permitted on this network. privateWithGuestAccess(3) : Private network but guest accounts area available. chargeablePublicNetwork(4) : The network is accessible to anyone, however, access to the network requires payment. freePublicNetwork(5) : The network is accessible to anyone and no charges apply for the network use. testOrEquipment(6) : The network is used for test or experimental purposes only. wildcard(6) : Wildcard network type. personnalDeviceNetwork(8) : The network is accessible only by Personnal Device. emgerencyServiceOnlyNetwork(9) : Emergency Service network Type. Enumeration: 'chargeablePublicNetwork': 4, 'emgerencyServiceOnlyNetwork': 9, 'personnalDeviceNetwork': 8, 'notConfigured': 255, 'private': 2, 'freePublicNetwork': 5, 'invalid': 1, 'wildcard': 7, 'privateWithGuestAccess': 3, 'testOrEquipment': 6.

This object indicates the venue group with respect to 802.11u feature , for this WLAN. Enumeration: 'utilityAndMisc': 10, 'educational': 4, 'outdoor': 12, 'factoryAndIndustrial': 5, 'business': 3, 'institutional': 6, 'residential': 8, 'storage': 9, 'unspecified': 1, 'vehicular': 11, 'mercantile': 7, 'assembly': 2.

This object indicates the venue type within a particular venue group, with respect to 802.11u feature , for this WLAN. The Venue group-Venue Type relationship is per the following table: Venue Group Venue Type Code Venue Description =========== =============== ================= 0 0 Unspecified 0 1-255 Reserved 1 0 Unspecified Assembly 1 1 Arena 1 2 Stadium 1 3 Passenger Terminal (e.g., airport, port, bus station, ferry terminal, train station) 1 4 Amphitheater 1 5 Amusement Park 1 6 Place of Worship 1 7 Convention Center 1 8 Library 1 9 Museum 1 10 Restaurant 1 11 Theater 1 12 Bar 1 13 Coffee Shop 1 14 Zoo or Aquarium 1 15 Emergency Coordination Center 1 16-255 Reserved 2 0 Unspecified Business 2 1 Doctor or Dentist office 2 2 Bank 2 3 Fire Station 2 4 Police Station 2 6 Post Office 2 7 Professional Office 2 8 Research and Development Facility 2 9 Attorney Office 2 10-255 Reserved 3 0 Unspecified Educational 3 1 School, Primary 3 2 School, Secondary 3 3 University or College 3 4-255 Reserved 4 0 Unspecified Factory and Industrial 4 1 Factory 4 2-255 Reserved 5 0 Unspecified Institutional 5 1 Hospital 5 2 Long-Term Care Facility (e.g., Nursing home, Hospice, etc.) 5 3 Alcohol and Drug Re-habilitation Center 5 4 Group Home 5 5 Prison or Jail 5 6-255 Reserved 6 0 Unspecified Mercantile 6 1 Retail Store 6 2 Grocery Market 6 3 Automotive Service Station 6 4-255 Reserved 7 0 Unspecified Residential 7 1 Hotel or Motel 7 2 Dormitory 7 3 Boarding House 7 4-255 Reserved 8 0-255 Reserved 9 0-255 Reserved 10 0 Unspecified Vehicular 10 1 Automobile or Truck 10 2 Airplane 10 3 Bus 10 4 Ferry 10 5 Ship or Boat 10 6 Train 10 7-255 Reserved 11 0 Unspecified Outdoor 11 1 Muni-mesh Network 11 2 City Park 11 3-255 Reserved Enumeration: 'utilityAndMisc': 10, 'educational': 4, 'outdoor': 12, 'factoryAndIndustrial': 5, 'business': 3, 'institutional': 6, 'residential': 8, 'storage': 9, 'unspecified': 1, 'vehicular': 11, 'mercantile': 7, 'assembly': 2.

This is the venue name defined for this WLAN with respect to 802.11u feature.

This object is used to configure the Hessid for this WLAN.

This object is used to configure the NetworkAuthType for a WLAN Enumeration: 'redirection': 3, 'enrollment': 2, 'acceptance': 1, 'notConfigured': 5, 'dnsRedirection': 4.

This object represents the IPv4 Address Availability. Enumeration: 'portRestricted': 3, 'unKnown': 8, 'portRestrictedAndDoubleNATPrivate': 7, 'public': 2, 'doubleNATPrivate': 5, 'notAvailable': 1, 'singleNATPrivate': 4, 'portRestrictedAndSingleNATPrivate': 6.

This object represents the IPv6 Address Availability. Enumeration: 'notAvailable': 1, 'available': 2, 'unKnown': 3.

This table represents the OUI (organizational unique identifier) configuration for a particular WLAN. OUIs are assigned by IEEE. A WLAN can have up to 32 OUIs defined. OUI configuration per WLAN is required for the 802.11u feature to work. Rows are added or deleted by explicit management actions initiated by the user from a network management station through the cLWlan11uOuiRowStatus object.

Each entry in this table represents the OUI (organizational unique identifier) configuration for a particular WLAN. OUIs are assigned by IEEE. A WLAN can have up to 32 OUIs defined. OUI configuration per WLAN is required for the 802.11u feature to work.

This object uniquely identifies one instance of a OUI on a WLAN.Each WLAN can have up to 32 OUIs defined. Each OUI should be unique.

The OUI field is a public OUI assigned by the IEEE. Each OUI identifies a roaming consortium (group of SSPs with inter-SSP roaming agreement) or a single SSP.WLAN can have up to 32 OUIs defined. Each OUI defined for a WLAN should be unique. For example the value for Cisco is 004096.

This object is used to configure this particular OUI as one of the beacon OUIs. Beacon can carry at most 3 OUIs. User should be able to select 0-3 OUIs (from the already configured OUIs for this WLAN). A value of 'true' indicates that this OUI would be carried in beacon. A value of 'false' indicates that this OUI is not a beacon OUI.

Row Status for creation/deletion of a particular OUI entry in the table.

This object represnts the storage type for this conceptual row.

This table represents the realm (NAI) details per WLAN. In order to provide roaming services, it is necessary to have a standardized method for identifying users. NAI is the user identity submitted by the client during network authentication. Each realm entry should be unique.

Each entry in this table represents the realm (NAI) configuration for a particular WLAN.A WLAN can have up to 32 realm defined

This object specifies, one instance of a realm EAP entry (NAI) on a WLAN. Each realm entry should be unique.

This object represents the NAI name. In order to provide roaming services, it is necessary to have a standardized method for identifying users. NAI is the user identity submitted by the client during network authentication. In roaming, the purpose of the NAI is to identify the user as well as to assist in the routing of the authentication request. Please note that the NAI may not necessarily be the same as the user's e-mail address or the user identity submitted in an application layer authentication.

Row Status for creation/deletion of a particular realm entry (NAI)from the table

This table represents the EAP method configured per realm for a particular WLAN. A realm can have up to 4 EAP method defined. The EAP method supported are LEAP,PEAP,EAP-FAST and EAP-TLS.

Each entry in this table represents the EAP method configured per realm for a particular WLAN. A realm can have up to 4 EAP method defined. The EAP method supported are LEAP,PEAP,EAP-FAST and EAP-TLS.

This object uniquely identifies one instance of a EAP entry configured per a realm for a particular WLAN.

This object represents the EAP method defined. Enumeration: 'none': 1, 'eapTtls': 7, 'peap': 3, 'eapSim': 6, 'leap': 2, 'eapTls': 4, 'eapAka': 8, 'eapFast': 5.

Row Status for creation/deletion of a particular EAP entry from the table

This table represents the authentication method details configured per EAP method for particular realm. There can be up to 10 authentication configuration entries per EAP method.

Each entry in this table represents the authentication method details configured per EAP method for particular realm. There can be up to 10 authentication configuration entries per EAP method.

This object uniquely identifies one instance of a auth entry configured per a EAP for a particular WLAN.

This object represents the authentication method defined. Enumeration: 'innerAuthEapType': 2, 'credentialType': 3, 'nonEapInnerAuthType': 1, 'tunneledEapCredentialType': 4.

This object represents the authentication parameter defined for a particular authentication method. The Autentication Parameter and the Authentication Method relationship as follows Method Parameter Description =========== =============== ================= 1 1 Reserved 1 2 PAP 1 3 CHAP 1 4 MSCHAP 1 5 MSCHAPV2 2 6 LEAP 2 7 PEAP 2 8 EAP-TLS 2 9 EAP-FAST 2 10 EAP-SIM 2 11 EAP-TTLS 2 12 EAP-AKA 3 13 SIM 3 14 USIM 3 15 NFCSECURE 3 16 HARDWARE TOKEN 3 17 SOFT TOKEN 3 18 CERTIFICATE 3 19 USERNAME PASSWORD 3 20 RESERVED 3 21 Anonynous 3 22 Vendor Specific Enumeration: 'reserved': 20, 'chap': 3, 'nfcSecure': 15, 'pap': 2, 'hardwareToken': 16, 'certificate': 18, 'mschap': 4, 'usim': 14, 'leap': 6, 'anonynous': 21, 'eapAka': 12, 'eapFast': 9, 'sim': 13, 'mschapV2': 5, 'vendorSpecific': 22, 'softToken': 17, 'peap': 7, 'eapSim': 10, 'eapTls': 8, 'none': 1, 'usernamePassword': 19, 'eapTtls': 11.

This is the credential type defined for a particular authentication method. Enumeration: 'vendorSpecific': 10, 'hardwareToken': 4, 'reserved': 8, 'certificate': 6, 'softToken': 5, 'usim': 2, 'anonynous': 9, 'nfcSecure': 3, 'usernamePassword': 7, 'sim': 1.

Row Status for creation/deletion of a particular auth entry from the table

This table represents the Domain Entry configuration for a particular WLAN in a controller. Rows are added or deleted by explicit management actions initiated by the user from a network management station through the cLWlan11uDomainRowStatus object

Each entry in this table represents the Domain configuration for a particular WLAN. A WLAN can have up to 10 domains defined.

This object uniquely identifies one instance of a Domain on a WLAN.Each WLAN can have up to 10 Domains defined. Each Domain should be unique.

This object represents the domain name for this particular Index.

Row Status for creation/deletion of a particular Domain entry in the table.

This table represents the 3gpp info configuration for a particular WLAN in a controller. Rows are added or deleted by explicit management actions initiated by the user from a network management station through the cLWlan11u3gppRowStatus object

Each entry in this table represents the Domain configuration for a particular WLAN. A WLAN can have up to 32 operator defined.

This object uniquely identifies one instance of a 3gpp on a WLAN.Each WLAN can have up to 32 3gpps defined. Each 3gpp should be unique.

This is the Language defined for this 3gpp Index.

This is the Language defined for this 3gpp Index.

Row Status for creation/deletion of a particular 3gpp entry in the table.

This table represents the generic service advertisement configuration for a particular WLAN in a controller. This table has a one-to-one relationship with cLWlanConfigTable. There exist a row in this table corresponding to each row representing a WLAN in cLWlanConfigTable.

Each entry in this table represents the generic 802.11u configuration for a WLAN.

This object represents the MSAP status for this WLAN. A value of true enables MSAP for this WLAN. A value of false disbales MSAP for this WLAN.

This object represents the Index for the MSAP Server.

This table represents the Operator configuration for a particular WLAN in a controller. Rows are added or deleted by explicit management actions initiated by the user from a network management station through the cLWlanHotSpot2OperatorRowStatus object

Each entry in this table represents the Domain configuration for a particular WLAN. A WLAN can have up to 32 operator defined.

This object uniquely identifies one instance of a Operator on a WLAN.Each WLAN can have up to 32 Operators defined. Each Operator should be unique.

This object represents the Operator name for this particular Index.

This is the Language defined for this Operator Index.

Row Status for creation/deletion of a particular Operator entry in the table.

This object uniquely identifies one instance of Port-Protocol Configuration on a WLAN.Each WLAN can have up to 10 port configuration defined.Each configuration should be unique.

Each entry in this table represents the Port-Protocol configuration for a particular WLAN. A WLAN can have up to 10 port configurations defined.

This object uniquely identifies one instance of a Port Configuration on a WLAN.Each WLAN can have up to 32 Port Configurations defined.Each Port Configuration should be unique.

This object represents the Port Ip protocol for this index for a WLAN Enumeration: 'ftp': 6, 'icmp': 1, 'ikev2': 17, 'esp': 50.

This object represents the Port Number for this index for a WLAN. This object indicates the Port Number with respect to an IP Protocol. The Protocol Port Number relationship is per the following table: IP Protocol Port Number Description =========== =============== ================= 1 0 ICMP 6 20 FTP 6 22 SSH 6 443 TLS 6 1723 PPTP-VPN 6 5060 VoIP 17 5060 VoIP 17 4500 IKEv 17 500 IKEv2 50 0 ESP Enumeration: 'ftp': 20, 'pptp-vpn': 1723, 'ipsec-nat': 4500, 'ikev2': 500, 'ttls-vpn': 443, 'ssh': 22, 'icmp-esp': 0, 'voip': 5060.

This object represents the Port Status for this instance for a WLAN Enumeration: 'unknown': 3, 'open': 2, 'closed': 1.

Row Status for creation/deletion of a particular PortConfig entry in the table.

This table represents the generic HotSpot2 configuration for a particular WLAN in a controller. This table has a one-to-one relationship with cLWlanConfigTable. There exist a row in this table corresponding to each row representing a WLAN in cLWlanConfigTable.

Each entry in this table represents the generic HotSpot2 configuration for a WLAN.

This object represents the status of the link with respect to WAN metrics configuration. Enumeration: 'linkUp': 1, 'linkInTestState': 3, 'linkDown': 2, 'notConfigured': 4.

This object represents the symmetry of the link with respect to WAN metrics configuration. A value of 'different(1)' indicates that link speed is different in uplink and downlink(ex:ADSL). A value of 'same(2)' indicates that link speed is same in uplink and downlink(ex:DSL). Enumeration: 'different': 1, 'same': 2.

This object represents the down link speed of WAN Backhaul in kbps.

This object represents the up link speed of WAN Backhaul in kbps.

A table for configuring Hyperlocation settings allowed for each AP Group. Each site can have a set of HALO and PakRSSI parameters associated with it.

An entry in cLAPGroupsHyperlocationConfigEntry. cLAPGroupName is mandatory for creating an entry in CLAPGroupsHyperlocationConfigEntry .

This object represents the state of Hyperlocation. A value of 'true' indicates that Hyperlocation is enabled. A value of 'false' indicates that Hyperlocation is disabled.

This object represents the threshold value for Packet RSSI location feature. Valid range is -100 dbm to -50 dbm.

This object represents the trigger threshold value for Packet RSSI location feature. Valid range is 1 dbm to 100 dbm.

This object represents the NTP server IP address type for Packet RSSI location feature.

This object represents the NTP server IP address for Packet RSSI location feature.

A table for configuring port settings allowed for each AP Group.

An entry in cLAPGroupsPortConfigEntry. cLAPGroupName is mandatory for creating a entry in CLAPGroupsPortConfigEntry .

This object uniquely identifies the LAN port number of an AP Group. Each AP Group can have up to 3 LAN ports.

This object represents the LAN port state. A value of 'true' indicates that selected LAN Port is enabled. A value of 'false' indicates that LAN Port is disabled. Enumeration: 'disabled': 0, 'enabled': 1.

This object represents the LAN port POE state. A value of 'true' indicates that POE is enabled. A value of 'false' indicates that POE is disabled. Enumeration: 'disabled': 1, 'notsupported': 0, 'enabled': 2.

This object represents the remote LAN name of the corresponding port.

This is the status column for this row and used to create and delete specific instances of rows in this table. cLAPGroupName and cLAPGroupsLANPortNumber are mandatory for creating and deleting an entry.

A table for configuring external module settings allowed for each AP Group. An entry in this table is created for each AP group.

An entry in cLAPGroupsExtModuleConfigEntry. cLAPGroupName is mandatory for creating an entry in CLAPGroupsExtModuleConfigEntry .

This object represents the external module state. A value of 'true' indicates that external module is enabled. A value of 'false' indicates that external module is disabled. Enumeration: 'disabled': 0, 'enabled': 1.

This object represents the remote lan name of the external module.

The compliance statement for the SNMP entities that implement the ciscoLwappWlanMIB module.

The compliance statement for the SNMP entities that implement the ciscoLwappWlanMIB module.

The compliance statement for the SNMP entities that implement the ciscoLwappWlanMIB module.

The compliance statement for the SNMP entities that implement the ciscoLwappWlanMIB module.

The compliance statement for the SNMP entities that implement the ciscoLwappWlanMIB module.

The compliance statement for the SNMP entities that implement the ciscoLwappWlanMIB module.

The compliance statement for the SNMP entities that implement the ciscoLwappWlanMIB module.

The compliance statement for the SNMP entities that implement the ciscoLwappWlanMIB module.

The compliance statement for the SNMP entities that implement the ciscoLwappWlanMIB module.

This collection of objects represent the configuration of WLANs on the controller to be passed to an LWAPP AP. ciscoLwappWlanConfigGroup object is superseded by ciscoLwappWlanConfigGroupSup1.

This collection of objects represent the configuration of WLANs on the controller to be passed to an LWAPP AP.

This collection of objects represent the configuration of WLANs on the controller to be passed to an 8021.11 clients.

This collection of objects represents 802.11u related configuration of WLANs on the controller to be passed to an AP. ciscoLwappWlan11uConfigGroup object is superseded by ciscoLwappWlan11uConfigGroupsup1.

This collection of objects represent the configuration of AP Groups Vlan on the controller to be passed to an AP. ciscoLwappAPGroupsVlanConfigGroup object is superseded by ciscoLwappAPGroupsVlanConfigGroupSup2.

This collection of objects represent the configuration of WLANs on the controller to be passed to an LWAPP AP.

This collection of objects represent the configuration of WLANs on the controller to be passed to an 8021.11 clients.

This collection of objects represent the configuration of WLANs on the controller to be passed to an LWAPP AP.

This collection of objects represents 802.11u related configuration of WLANs on the controller to be passed to an AP.

This collection of objects represents 802.11u related configuration of WLANs on the controller to be passed to an AP.

This collection of objects represents 802.11u related configuration of WLANs on the controller to be passed to an AP.

This collection of objects represents IOS related configuration of WLANs on the controller to be passed to an AP.

This collection of objects represents QoS related configuration of WLANs on the controller to be passed to an AP.

This collection of objects represent the configuration of WLANs on the controller to be passed to an LWAPP AP.This object is superceded by ciscoLwappWlanConfigGroupSup5. ciscoLwappWlanConfigGroupSup4 object is superseded by ciscoLwappWlanConfigGroupSup5.

This collection of objects represents 802.11u related configuration of WLANs on the controller to be passed to an AP.

This collection of objects represents 802.11u related configuration of WLANs on the controller to be passed to an AP.

This collection of objects represent the configuration of AP Groups Vlan on the controller to be passed to an AP.

This collection of objects represent the configuration of Venue groups on the controller to be passed to an AP.

This collection of objects represent the configuration of Venue groups on the controller to be passed to an AP.

This collection of objects represent the configuration of WLANs on the controller to be passed to an 8021.11 clients.

This collection of objects represent the configuration of flexible netflow policy details per WLAN on the conroller to be passed to an AP.

This collection of objects represent the configuration of WLANs on the controller to be passed to an LWAPP AP.

This collection of objects represent the configuration of AP Groups Vlan on the controller to be passed to an AP.

This collection of objects represent the configuration of WLANs on the controller to be passed to an LWAPP AP.

This collection of objects represent the configuration of AP Groups HyperLocation on the controller to be passed to an LWAPP AP.

This collection of objects represent the configuration of AP Groups LAN Port on the controller to be passed to an LWAPP AP.