-- ******************************************************************* -- CISCO-LWAPP-REAP-MIB.my -- April 2007, Devesh Pujari, Prasanna Viswakumar, Srinath Candadai -- -- Copyright (c) 2006-2007, 2013-2021, 2024 by Cisco Systems, Inc. -- All rights reserved. -- ******************************************************************* CISCO-LWAPP-REAP-MIB DEFINITIONS ::= BEGIN IMPORTS MODULE-IDENTITY, OBJECT-TYPE, Unsigned32 FROM SNMPv2-SMI MODULE-COMPLIANCE, OBJECT-GROUP FROM SNMPv2-CONF TruthValue, StorageType, RowStatus FROM SNMPv2-TC SnmpAdminString FROM SNMP-FRAMEWORK-MIB InetAddressType, InetAddress FROM INET-ADDRESS-MIB cLWlanIndex FROM CISCO-LWAPP-WLAN-MIB cLApSysMacAddress FROM CISCO-LWAPP-AP-MIB ciscoMgmt FROM CISCO-SMI; -- ******************************************************************** -- * MODULE IDENTITY -- ******************************************************************** ciscoLwappReapMIB MODULE-IDENTITY LAST-UPDATED "202004050000Z" ORGANIZATION "Cisco Systems Inc." CONTACT-INFO "Cisco Systems, Customer Service Postal: 170 West Tasman Drive San Jose, CA 95134 USA Tel: +1 800 553-NETS Email: cs-wnbu-snmp@cisco.com" DESCRIPTION "This MIB is intended to be implemented on all those devices operating as Central Controllers (CC) that terminate the Light Weight Access Point Protocol tunnel from Light-weight LWAPP Access Points. Information represented by this MIB is passed by the controller to those Cisco LWAPP APs, that can operate in stand-alone mode. The relationship between CC and the LWAPP APs can be depicted as follows: +......+ +......+ +......+ +......+ + + + + + + + + + CC + + CC + + CC + + CC + + + + + + + + + +......+ +......+ +......+ +......+ .. . . . .. . . . . . . . . . . . . . . . . . . . . . . . +......+ +......+ +......+ +......+ +......+ + + + + + + + + + + + AP + + AP + + AP + + AP + + AP + + + + + + + + + + + +......+ +......+ +......+ +......+ +......+ . . . . . . . . . . . . . . . . . . . . . . . . +......+ +......+ +......+ +......+ +......+ + + + + + + + + + + + MN + + MN + + MN + + MN + + MN + + + + + + + + + + + +......+ +......+ +......+ +......+ +......+ The LWAPP tunnel exists between the controller and the APs. The MNs communicate with the APs through the protocol defined by the 802.11 standard. LWAPP APs, upon bootup, discover and join one of the controllers and the controller pushes the configuration, that includes the WLAN parameters, to the LWAPP APs. The APs then encapsulate all the 802.11 frames from wireless clients inside LWAPP frames and forward the LWAPP frames to the controller. GLOSSARY Access Point ( AP ) An entity that contains an 802.11 medium access control ( MAC ) and physical layer ( PHY ) interface and provides access to the distribution services via the wireless medium for associated clients. LWAPP APs encapsulate all the 802.11 frames in LWAPP frames and sends them to the controller to which it is logically connected. Central Controller ( CC ) The central entity that terminates the LWAPP protocol tunnel from the LWAPP APs. Throughout this MIB, this entity is also referred to as 'controller'. Light Weight Access Point Protocol ( LWAPP ) This is a generic protocol that defines the communication between the Access Points and the Central Controller. Mobile Node ( MN ) A roaming 802.11 wireless device in a wireless network associated with an access point. Native VLAN ID A switch port and/or AP can be configured with a 'native VLAN ID'. Untagged or priority-tagged frames are implicitly associated with the native VLAN ID. The default native VLAN ID is '1' if VLAN tagging is enabled. The native VLAN ID is '0' or 'no VLAN ID' if VLAN tagging is not enabled. Remote Edge Access Point ( REAP ) The LWAPP AP that can also act as a stand-alone AP when it loses communication with the controller it was associated with. When REAP can reach the controller (connected state), it gets help from controller to complete client authentication. When a controller is not reachable by REAP, it goes into standalone state and does client authentication by itself. All data packets from clients are either bridged locally (local-switch) or forwarded to the controller (central-switch) depending on the WLAN configuration. Virtual LAN VLAN defined in the IEEE 802.1Q VLAN standard supports logically segmenting of LAN infrastructure into different subnets or workgroups so that packets are switched only between ports within the same VLAN. VLAN ID Each VLAN is identified by a 12-bit 'VLAN ID'. A VLAN ID of '0' is used to indicate 'no VLAN ID'. Valid VLAN IDs range from '1' to '4095'. Home AP A REAP AP can be installed at end-user home. Home AP ethernet port will be connected to DSL or cable modem at home. Home AP will be primed with Controller IP Address so that it will join with controller. REFERENCE [1] Part 11 Wireless LAN Medium Access Control ( MAC ) and Physical Layer ( PHY ) Specifications [2] Draft-obara-capwap-lwapp-00.txt, IETF Light Weight Access Point Protocol" REVISION "202004050000Z" DESCRIPTION "Added two objects for directional Flex ACLs - cLReapGroupAclIn - cLReapGroupAclOut" REVISION "202001020000Z" DESCRIPTION "Added following object to the cLReapGroupConfigTable - cLReapGroupMdnsFlexProfileName" REVISION "201905080000Z" DESCRIPTION "Added following object to the cLReapGroupConfigTable - cLReapGroupAccountingRadiusServerGroupName - cLReapLocalRoaming" REVISION "201809150000Z" DESCRIPTION "Addition of folowing new table - cLReapGroupVlanNameAclTable - cLReapGroupCtsSxpTable - cLReapCtsSxpPeerTable - cLReapUrlDomainListTable - cLReapUrlDomainRulesTable - cLReapVlanIdNameMapTable - cLReapVlanTemplateTable Added following object to the cLReapGroupConfigTable - cLReapGroupRadiusServerGroupName - cLReapGroupEapFastProfileName - cLReapGroupArpCacheEnabled - cLReapGroupHomeApEnable - cLReapGroupLeastLatencyJoinEnable - cLReapGroupHomeApLocalSsidReset - cLReapGroupInstallMappingRadioBackhaul - cLReapGroupResilientMode - cLReapGroupDescription - cLReapGroupFallbackRadioShutEnabled - cLReapCtsInlineTagging - cLReapIsHomeApEnable - cLReapCtsRolebasedEnforcement - cLReapCtsSxpAttachedProfileName Added following object to the cLReapGroupWebPolicyAclTable - cLReapGroupWebPolicyAclCentWebAuth deprecated the following compliance group - ciscoLwappReapMIBComplianceRev7 Added following compliance group - ciscoLwappReapMIBComplianceRev8 Added following conformance group - ciscoLwappReapVlanConfigGroup - ciscoLwappReapUrlDomainConfigGroup - ciscoLwappReapCtsSxpConfigGroup." REVISION "201804240000Z" DESCRIPTION "Added cLReapAclUrlDomainRuleTable, cLReapIpv6AclTable, cLReapIpv6AclUrlDomainRuleTable, ciscoLwappReapMIBComplianceRev7, ciscoLwappReapIpv6AclConfigGroup, cLReapGroupEfficientApJoinEnable. Deprecated ciscoLwappReapMIBComplianceRev6. Replaced ciscoLwappReapAclConfigGroup by ciscoLwappReapAclConfigGroupRev1." REVISION "201704200000Z" DESCRIPTION "Added cLReapApVlanIdEntry, CLReapApVlanIdAclEntry, CLReapApWlanAclEntry, CLReapWebPolicyAclEntry, CLReapApLocalSplitACLEntry, CLReapApCentralDhcpEntry, CLReapApL2AclEntry, CLReapGroupVlanAclEntry, CLReapGroupAclEntry, CLReapGroupWebPolicyAclEntry" REVISION "201010060000Z" DESCRIPTION "Added cLReapWlanApAuth, ciscoLwappReapWlanConfigGroupSup1, ciscoLwappReapMIBComplianceRev5. Deprecated ciscoLwappReapMIBComplianceRev4." REVISION "201002060000Z" DESCRIPTION "Added cLReapWlanClientIpLearnEnable, cLReapHomeApEnable,cLReapApLeastLatencyJoinEnable and cLReapHomeApLocalSsidReset. Updated the description for cLReapGroupUserConfigTable,cLReapGroupUserName, and cLReapGroupPassword. In module identity's description removed EAP and added Home AP. ciscoLwappReapMIBComplianceRev2 is deprecated. Added all the groups which are in ciscoLwappReapMIBComplianceRev2 to ciscoLwappReapMIBComplianceRev3. cLReapGroupRadiusPacTimeout is deprecated and created a new OID called cLReapGroupRadiusPacTimeoutCtrl. Created new group ciscoLwappReapApConfigGroupHomeAp." REVISION "200711010000Z" DESCRIPTION "Added ciscoLwappReapGroupConfigRadiusGroup and ciscoLwappReapGroupConfigUserAuthGroup." REVISION "200704190000Z" DESCRIPTION "Added cLReapGroupConfigTable and cLReapGroupApConfigTable." REVISION "200604190000Z" DESCRIPTION "Initial version of this MIB module." ::= { ciscoMgmt 517 } ciscoLwappReapMIBNotifs OBJECT IDENTIFIER ::= { ciscoLwappReapMIB 0 } ciscoLwappReapMIBObjects OBJECT IDENTIFIER ::= { ciscoLwappReapMIB 1 } ciscoLwappReapMIBConform OBJECT IDENTIFIER ::= { ciscoLwappReapMIB 2 } ciscoLwappReapWlanConfig OBJECT IDENTIFIER ::= { ciscoLwappReapMIBObjects 1 } ciscoLwappReapApConfig OBJECT IDENTIFIER ::= { ciscoLwappReapMIBObjects 2 } ciscoLwappReapGroupConfig OBJECT IDENTIFIER ::= { ciscoLwappReapMIBObjects 3 } ciscoLwappReapAclConfig OBJECT IDENTIFIER ::= { ciscoLwappReapMIBObjects 4 } ciscoLwappReapMasterApConfig OBJECT IDENTIFIER ::= { ciscoLwappReapMIBObjects 5 } ciscoLwappReapGlobalConfig OBJECT IDENTIFIER ::= { ciscoLwappReapMIBObjects 6 } ciscoLwappReapIpv6AclConfig OBJECT IDENTIFIER ::= { ciscoLwappReapMIBObjects 7 } ciscoLwappReapVlanConfig OBJECT IDENTIFIER ::= { ciscoLwappReapMIBObjects 8 } -- ******************************************************************** -- WLAN configuration -- ******************************************************************** cLReapWlanConfigTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapWlanConfigEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table represents the WLAN configuration sent by the controller to REAPs so that the APs can operate in stand-alone mode. LWAPP APs operating in REAP mode locally switch the data frames of the associated clients, rather than tunneling them through to the LWAPP controller as LWAPP data packets. The LWAPP controller passes this configuration set to the LWAPP AP during the AP initialization so that the AP can operate in stand-alone mode when it fails to reach the controller. The configuration is also passed to the REAP when they are individually modified through separate LWAPP messages. The REAP updates itself with the information received through these LWAPP messages. This table has a one-to-one relationship with cLWlanConfigTable of the CISCO-LWAPP-WLAN-MIB. There exist a row in this table corresponding to each row representing a WLAN in cLWlanConfigTable. Note that the configuration represented by this table is applicable only for REAPs. The controller will send this configuration set only to the REAP APs for their operation in standalone mode." ::= { ciscoLwappReapWlanConfig 1 } cLReapWlanConfigEntry OBJECT-TYPE SYNTAX CLReapWlanConfigEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry represents a conceptual row in cLReapWlanConfigTable and corresponds to the packet switching configuration for a particular WLAN." INDEX { cLWlanIndex } ::= { cLReapWlanConfigTable 1 } CLReapWlanConfigEntry ::= SEQUENCE { cLReapWlanEnLocalSwitching TruthValue, cLReapWlanClientIpLearnEnable TruthValue, cLReapWlanApAuth TruthValue, cLReapWlanVlanCentralSwitching TruthValue, cLReapWlanDhcpCentral TruthValue, cLReapWlanDhcpOverrideDNS TruthValue, cLReapWlanNatPatEnabled TruthValue, cLReapWlanAssocCentral TruthValue } cLReapWlanEnLocalSwitching OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies the behavior of the REAP when switching the data frames of the clients associated to it through the WLAN identified by cLWlanIndex. A value of 'true' indicates that the AP, on which this WLAN is configured, may locally switch the data packets of the clients in the WLAN instead of tunneling them to the central controller for switching. A value of 'false' indicates that the AP should tunnel all the data packets of the wireless clients in the WLAN to the central controller for switching. Note that the value of 'true' will be effective only if the WLAN is configured on a REAP." DEFVAL { false } ::= { cLReapWlanConfigEntry 1 } cLReapWlanClientIpLearnEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies whether Client IP Address learning is enabled on the controller. When layer two tunneling is employed the IP learning on controller has to be disabled. Otherwise, the controller is unable to learn the client's IP address and cannot move it to the associated state. A value of 'true' indicates the controller does checks for IP sent by the HREAP AP. A value of 'false' indicates the controller does not check for IP from the locally switch HREAP AP." DEFVAL { true } ::= { cLReapWlanConfigEntry 2 } cLReapWlanApAuth OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies the behavior of the REAP, on where to handle the authentication of the client associated to the WLAN indicated by cLWlanIndex. A value of 'true' indicates that the AP, on which this WLAN is configured, will do the authentication of the clients in the WLAN locally at AP instead of of sending them to the central controller. A value of 'false' indicates that the AP should send the information to the central controller to do the authentication of the client. Note that the value of 'true' will be effective only if the WLAN is configured on a REAP AP and WLAN is configured for local switching of the data." DEFVAL { false } ::= { cLReapWlanConfigEntry 3 } cLReapWlanVlanCentralSwitching OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies whether the AP bridges the traffic centrally. If the VLAN is not configured on the AP uplink, the AP will tunnel the traffic back to the Wireless LAN Controller (WLC) where it is registered. Then the controller will bridge the traffic into the corresponding VLAN from where it will be transported towards the next routing instance for further processing. A value of 'true' indicates that the AP, should tunnel traffic to WLC if VLAN not configured. A value of 'false' indicates that the AP, should bridge traffic locally always. This feature will be applicable only to locally switched WLANs." DEFVAL { false } ::= { cLReapWlanConfigEntry 4 } cLReapWlanDhcpCentral OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies the behavior of the REAP when switching the DHCP packets of the clients associated to it through the WLAN identified by cLWlanIndex. A value of 'true' indicates that the AP, should tunnel DHCP traffic to WLC. A value of 'false' indicates that the AP, should bridge DHCP traffic locally always. The value of 'true' will be effective only if the WLAN is configured on a REAP. This feature will be applicable only to locally switched WLANs." DEFVAL { false } ::= { cLReapWlanConfigEntry 5 } cLReapWlanDhcpOverrideDNS OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies the behavior of the REAP when switching the DNS frames of the clients associated to it through the WLAN identified by cLWlanIndex. A value of 'true' indicates that the AP, should tunnel DNS traffic to WLC for DNS resolution. A value of 'false' indicates that the AP, should bridge DNS traffic locally for DNS resolution. The value of 'true' will be effective only if the WLAN is configured on a REAP. This feature will be applicable only to locally switched, central DHCP WLANs." DEFVAL { false } ::= { cLReapWlanConfigEntry 6 } cLReapWlanNatPatEnabled OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies whether Network Address Translation (NAT) and Port Address Trnaslation (PAT) are enabled on this WLAN. This can be enabled only when cLReapWlanDhcpCentral is set to 'true'. A value of 'true' indicates AP should bridge traffic locally only after doing NAT and PAT. A value of 'false' indicates AP should bridge traffic locally without doing NAT and PAT. The value of 'true' will be effective only if the WLAN is configured as locally switched." DEFVAL { false } ::= { cLReapWlanConfigEntry 7 } cLReapWlanAssocCentral OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies the behavior of the REAP when handling the (re-)association management frames from the clients through the WLAN identified by cLWlanIndex. A value of 'true' indicates AP should tunnel (re-) association management frames to WLC always. A value of 'false' indicates AP should process (re-) association management frames first and send the frame to WLC after appending association ID (AID) to the frame. The value of 'true' will be effective only if the WLAN is configured on a REAP." DEFVAL { false } ::= { cLReapWlanConfigEntry 8 } -- ******************************************************************** -- * Cisco REAP AP Configuration -- ******************************************************************** cLReapApConfigTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapApConfigEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table represents the VLAN configuration of REAPs. The agent adds a row to this table corresponding to each row representing a REAP in cLApTable of the CISCO-LWAPP-AP-MIB. The agent deletes the row either when the AP dissociates from the controller or moved out of the remote mode." ::= { ciscoLwappReapApConfig 1 } cLReapApConfigEntry OBJECT-TYPE SYNTAX CLReapApConfigEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry represents a conceptual row in cLReapApConfigTable and corresponds to the VLAN configuration of a REAP." INDEX { cLApSysMacAddress } ::= { cLReapApConfigTable 1 } CLReapApConfigEntry ::= SEQUENCE { cLReapApNativeVlanId Unsigned32, cLReapApVlanEnable TruthValue, cLReapHomeApEnable TruthValue, cLReapApLeastLatencyJoinEnable TruthValue, cLReapHomeApLocalSsidReset TruthValue, cLReapInstallMappingRadioBackhaul TruthValue, cLReapApResilientMode TruthValue, cLReapApNativeVlanLevel TruthValue } cLReapApNativeVlanId OBJECT-TYPE SYNTAX Unsigned32 (1..4095) MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies the Native VLAN ID for the particular AP identified by cLApSysMacAddress. This particular object can be modified through a Set request only if the AP is a REAP. The agent is expected to reject the attempt to set this object for APs in other modes. This can be set only when cLReapApVlanEnable is set to 'true' and AP mode is REAP" DEFVAL { 1 } ::= { cLReapApConfigEntry 1 } cLReapApVlanEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies the availability of Native VLAN configured through cLReapApNativeVlanId on this REAP. A value of 'true' indicates that the VLAN configured as native through cLReapApNativeVlanId is enabled on the REAP and that the REAP can reach the controller through the native VLAN. A value of 'false' indicates that the VLAN configured as native through cLReapApNativeVlanId is disabled and the REAP can reach the controller through AP management VLAN." DEFVAL { false } ::= { cLReapApConfigEntry 2 } cLReapHomeApEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies if this REAP AP is used as Home AP. A value of 'true' indicates that this REAP AP is a Home AP. A value of 'false' indicates that this REAP AP is not a Home AP." DEFVAL { false } ::= { cLReapApConfigEntry 3 } cLReapApLeastLatencyJoinEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies if this REAP AP should join controller which has least latency. A value of 'true' indicates that this REAP AP will join controller which has least latency. A value of 'false' indicates that this REAP AP will not consider latency in selecting controller to join." DEFVAL { false } ::= { cLReapApConfigEntry 4 } cLReapHomeApLocalSsidReset OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies to reset local SSID on a Home AP. A value of 'true' indicates that the local SSID is to be reset. A value of 'false' on this during set will return error. A value of false will be returned on get." DEFVAL { false } ::= { cLReapApConfigEntry 5 } cLReapInstallMappingRadioBackhaul OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies whether to enable or disable WLANs on backhaul radio. A value of 'true' indicates that wlan mapping would be enabled on backhaul radio. A value of 'false' indicates that wlan mapping would be disabled on backhaul radio. This value is applicable only when AP is in flex+bridge mode." DEFVAL { false } ::= { cLReapApConfigEntry 6 } cLReapApResilientMode OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies whether to enable or disable standalone mode support on a REAP AP. A value of 'true' indicates that standalone mode would be enabled on backhaul radio. A value of 'false' indicates that standalone mode would be disabled on backhaul radio. This variable is significant only when AP is in flex+bridge mode." DEFVAL { false } ::= { cLReapApConfigEntry 7 } cLReapApNativeVlanLevel OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies to make a REAP AP to force inherit the vlan support and native vlan from the REAP group. A value of 'true' indicates that the AP should inherit the vlan support and native vlan from the REAP group to which it is connected. A value of 'false' indicates that the native vlan is not inherited from the REAP group." DEFVAL { false } ::= { cLReapApConfigEntry 8 } -- ******************************************************************** -- * Cisco REAP WLAN / VLAN Id mapping configuration -- ******************************************************************** cLReapApVlanIdTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapApVlanIdEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table represents the WLAN / VLAN Id mappings to be configured for the REAP identified by cLApSysMacAddress. VLAN Id configured through this table is passed to the respective REAP through the 'Add WLAN' LWAPP message, sent as part of the 'Configure Response message from the controller to the REAP, during the initialization of the REAP. The REAP maps the VLAN to the particular WLAN to locally switch the data packets when those APs are in standalone mode. Thus, the information added through this table is applicable for REAPs only. VLANs are configured on WLANs for which local switching of packets is enabled through cLReapWlanEnLocalSwitching. This means that a row is added to this table only if there are WLANs available on the controller with local switching enabled and the AP is a REAP." ::= { ciscoLwappReapApConfig 2 } cLReapApVlanIdEntry OBJECT-TYPE SYNTAX CLReapApVlanIdEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry represents a conceptual row that corresponds to one WLAN / VLAN Id mapping to be applied to the REAP identified by cLApSysMacAddress." INDEX { cLApSysMacAddress, cLWlanIndex } ::= { cLReapApVlanIdTable 1 } CLReapApVlanIdEntry ::= SEQUENCE { cLReapApVlanId Unsigned32, cLReapApVlanInheritance INTEGER, cLReapApVlanRowStatus RowStatus, cLReapApVlanUsedBySecEthInterface TruthValue } cLReapApVlanId OBJECT-TYPE SYNTAX Unsigned32 (1..4095) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the VLAN ID to be mapped to the WLAN identified by cLWlanIndex." DEFVAL { 1 } ::= { cLReapApVlanIdEntry 1 } cLReapApVlanInheritance OBJECT-TYPE SYNTAX INTEGER { ap(1), hreapGroup(2), wlan(3) } MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the inheritance to be mapped to the WLAN identified by cLWlanIndex. A value of 'ap' specifies VLAN for that WLAN is inherited from AP spcific configuration A value of 'hreapGroup' specifies VLAN for that WLAN is inherited from hreap group configuration A value of 'wlan' specifies VLAN for that WLAN is inherited from WLAN or ap group configuration." DEFVAL { ap } ::= { cLReapApVlanIdEntry 2 } cLReapApVlanRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the rowstatus of the wlan vlan mappings table" ::= { cLReapApVlanIdEntry 3 } cLReapApVlanUsedBySecEthInterface OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "This object indicates if vlan represented by cLReapApVlanId is used by any of the secondary ethernet interface when the REAP AP is in flex+bridge mode. A value of 'true' indicates cLReapApVlanId is used by secondary ethernet interface. A value of 'false' indicates cLReapApVlanId is not used by secondary ethernet interface." DEFVAL { false } ::= { cLReapApVlanIdEntry 4 } -- ******************************************************************* -- Cisco REAP VLAN Id . ACL mapping configuration on AP level -- ******************************************************************* cLReapApVlanIdAclTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapApVlanIdAclEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table represents the VLAN Id- ACL mappings to be configured for the REAP identified by cLApSysMacAddress." ::= { ciscoLwappReapApConfig 3 } cLReapApVlanIdAclEntry OBJECT-TYPE SYNTAX CLReapApVlanIdAclEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry represents a conceptual row that corresponds to one VLAN Id - ACL mapping to be applied to the REAP identified by cLApSysMacAddress." INDEX { cLApSysMacAddress, cLReapVlanId } ::= { cLReapApVlanIdAclTable 1 } CLReapApVlanIdAclEntry ::= SEQUENCE { cLReapVlanId Unsigned32, cLReapIngressAcl SnmpAdminString, cLReapEgressAcl SnmpAdminString, cLReapApVlanIdAclRowStatus RowStatus, cLReapVlanIdAclType INTEGER } cLReapVlanId OBJECT-TYPE SYNTAX Unsigned32 (1..4095) MAX-ACCESS not-accessible STATUS current DESCRIPTION "This object represents the VLAN ID to be mapped to the ACL for the access point identified by cLApSysMacAddress." ::= { cLReapApVlanIdAclEntry 1 } cLReapIngressAcl OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the name of the ingress Access Control List for the vlan-acl mapping." ::= { cLReapApVlanIdAclEntry 2 } cLReapEgressAcl OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the name of the egress Access Control List for the vlan-acl mapping." ::= { cLReapApVlanIdAclEntry 3 } cLReapApVlanIdAclRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the status column for a conceptual row in this table." ::= { cLReapApVlanIdAclEntry 4 } cLReapVlanIdAclType OBJECT-TYPE SYNTAX INTEGER { apSource(1), groupSource(2) } MAX-ACCESS read-only STATUS current DESCRIPTION "This object represents the type of the vlan acl mapping A value of 'apSource' indicates that vlan-acl mapping applied from AP level. A value of 'groupSource' indicates that vlan-acl mapping applied from hreap group level." ::= { cLReapApVlanIdAclEntry 5 } cLReapApWlanAclTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapApWlanAclEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table represents the WLAN ACL mappings to be configured for the REAP identified by cLApSysMacAddress. A row is added to this table only if there are WLANs available on the controller with local switching enabled and the AP is a REAP." ::= { ciscoLwappReapApConfig 4 } cLReapApWlanAclEntry OBJECT-TYPE SYNTAX CLReapApWlanAclEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry represents a conceptual row that corresponds to one WLAN / ACL mapping to be applied to the REAP identified by cLApSysMacAddress." INDEX { cLApSysMacAddress, cLWlanIndex } ::= { cLReapApWlanAclTable 1 } CLReapApWlanAclEntry ::= SEQUENCE { cLReapApWebAuthAcl SnmpAdminString, cLReapApWebAuthAclRowStatus RowStatus } cLReapApWebAuthAcl OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the webauth ACL name to be mapped to the WLAN identified by cLWlanIndex. This will be applied to REAP AP only when webauth client associates to REAP AP." ::= { cLReapApWlanAclEntry 1 } cLReapApWebAuthAclRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the status column for a conceptual row in this table." ::= { cLReapApWlanAclEntry 2 } cLReapWebPolicyAclTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapWebPolicyAclEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table represents the web policies associated with an AP. Entries are added or deleted by the user through the use of cLReapWebPolicyRowStatus." ::= { ciscoLwappReapApConfig 5 } cLReapWebPolicyAclEntry OBJECT-TYPE SYNTAX CLReapWebPolicyAclEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry represents a conceptual row in cLReapWebPolicyAclTable." INDEX { cLApSysMacAddress, cLReapWebPolicyAcl } ::= { cLReapWebPolicyAclTable 1 } CLReapWebPolicyAclEntry ::= SEQUENCE { cLReapWebPolicyAcl SnmpAdminString, cLReapWebPolicyAclRowStatus RowStatus } cLReapWebPolicyAcl OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "This object represents the name of the web policy ACL to be mapped to the access point identified by cLApSysMacAddress." ::= { cLReapWebPolicyAclEntry 1 } cLReapWebPolicyAclRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the status column for a conceptual row in this table." ::= { cLReapWebPolicyAclEntry 2 } cLReapApLocalSplitACLTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapApLocalSplitACLEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table represents the WLAN - local split ACL mappings to be configured for the REAP AP identified by cLApSysMacAddress." ::= { ciscoLwappReapApConfig 6 } cLReapApLocalSplitACLEntry OBJECT-TYPE SYNTAX CLReapApLocalSplitACLEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry represents a conceptual row that corresponds to one WLAN- local split ACL mapping to be applied to the REAP identified by cLApSysMacAddress." INDEX { cLApSysMacAddress, cLWlanIndex } ::= { cLReapApLocalSplitACLTable 1 } CLReapApLocalSplitACLEntry ::= SEQUENCE { cLReapApLocalSplitAcl SnmpAdminString, cLReapApLocalSplitAclRowStatus RowStatus } cLReapApLocalSplitAcl OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the local split ACL name to be mapped to the WLAN identified by cLWlanIndex. This is applicable only for central switching WLANs on REAP AP" ::= { cLReapApLocalSplitACLEntry 1 } cLReapApLocalSplitAclRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the status column for a conceptual row in this table." ::= { cLReapApLocalSplitACLEntry 2 } -- ******************************************************************** -- * Cisco REAP Central DHCP configuration -- ********************************************************************* cLReapApCentralDhcpTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapApCentralDhcpEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This object represents the behavior of the REAP AP when switching the DHCP packets of the clients associated to it through the WLAN identified by cLWlanIndex." ::= { ciscoLwappReapApConfig 7 } cLReapApCentralDhcpEntry OBJECT-TYPE SYNTAX CLReapApCentralDhcpEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This object represents the behavior of the REAP AP when switching the DHCP packets of the clients associated to it through the WLAN identified by cLWlanIndex." INDEX { cLApSysMacAddress, cLWlanIndex } ::= { cLReapApCentralDhcpTable 1 } CLReapApCentralDhcpEntry ::= SEQUENCE { cLReapApDhcpCentral TruthValue, cLReapApDhcpOverrideDNS TruthValue, cLReapApNatPatEnabled TruthValue, cLReapApDhcpRowStatus RowStatus, cLReapApInheritance SnmpAdminString } cLReapApDhcpCentral OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the behavior of the REAP AP when switching the DHCP frames of the clients associated to it through the WLAN identified by cLWlanIndex. A value of 'true' specifies REAP AP will tunnel DHCP packets to WLC. A value of 'false' specifies REAP AP will bridge DHCP packets locally. This config is applicable only for locally switched WLANs" DEFVAL { false } ::= { cLReapApCentralDhcpEntry 1 } cLReapApDhcpOverrideDNS OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the behavior of the REAP AP when switching the DNS frames of the clients associated to it through the WLAN identified by cLWlanIndex. A value of 'true' specifies REAP AP will tunnel DNS packets to WLC. A value of 'false' specifies REAP AP will bridge DNS packets locally. This config is applicable only for locally switched WLANs and when cLReapApDhcpCentral is set to 'true'." DEFVAL { false } ::= { cLReapApCentralDhcpEntry 2 } cLReapApNatPatEnabled OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies whether Network Address Translation (NAT) and Port Address Trnaslation (PAT) are enabled on this REAP AP for the WLAN identified by cLWlanIndex. A value of 'true' specifies REAP AP will bridge data packets locally after appliying NAT and PAT. A value of 'false' specifies REAP AP will bridge data packets locally without appliying NAT and PAT. This config is applicable only for locally switched WLANs and when cLReapApDhcpCentral is set to 'true'." DEFVAL { false } ::= { cLReapApCentralDhcpEntry 3 } cLReapApDhcpRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object represents the status column for a conceptual row in this table." ::= { cLReapApCentralDhcpEntry 4 } cLReapApInheritance OBJECT-TYPE SYNTAX SnmpAdminString MAX-ACCESS read-only STATUS current DESCRIPTION "This object represents the inheritance level of central DHCP configuration. It can be inherted from AP or REAP group or WLAN configuration" ::= { cLReapApCentralDhcpEntry 5 } -- ******************************************************************** -- * FlexConnect AP specific L2ACL configuration -- ********************************************************************* cLReapApL2AclTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapApL2AclEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table represents the L2 ACL mappings to be configured for the REAP AP identified by cLApSysMacAddress. A row is added to this table only if there are WLANs available on the controller with local switching enabled and the AP is a REAP." ::= { ciscoLwappReapApConfig 8 } cLReapApL2AclEntry OBJECT-TYPE SYNTAX CLReapApL2AclEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry represents a conceptual row that corresponds to one WLAN / L2 ACL mapping to be applied to the REAP identified by cLApSysMacAddress." INDEX { cLApSysMacAddress, cLWlanIndex } ::= { cLReapApL2AclTable 1 } CLReapApL2AclEntry ::= SEQUENCE { cLReapApL2Acl SnmpAdminString, cLReapApL2AclRowStatus RowStatus } cLReapApL2Acl OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the L2ACL name to be mapped to the WLAN identified by cLWlanIndex for this REAP AP" ::= { cLReapApL2AclEntry 1 } cLReapApL2AclRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the status column for a conceptual row in this table." ::= { cLReapApL2AclEntry 2 } -- ******************************************************************** -- Hybrid REAP Group configuration -- ******************************************************************** cLReapGroupConfigTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapGroupConfigEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table represents the configuration for REAPs so that the APs can be configured as a group. Entries are added or deleted by the user through the use of cLReapGroupRowStatus." ::= { ciscoLwappReapGroupConfig 1 } cLReapGroupConfigEntry OBJECT-TYPE SYNTAX CLReapGroupConfigEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry represents a conceptual row in cLReapGroupConfigTable." INDEX { cLReapGroupName } ::= { cLReapGroupConfigTable 1 } CLReapGroupConfigEntry ::= SEQUENCE { cLReapGroupName SnmpAdminString, cLReapGroupPrimaryRadiusIndex Unsigned32, cLReapGroupSecondaryRadiusIndex Unsigned32, cLReapGroupStorageType StorageType, cLReapGroupRowStatus RowStatus, cLReapGroupRadiusPacTimeout Unsigned32, cLReapGroupRadiusAuthorityId OCTET STRING, cLReapGroupRadiusAuthorityInfo OCTET STRING, cLReapGroupRadiusServerKey OCTET STRING, cLReapGroupRadiusIgnoreKey TruthValue, cLReapGroupRadiusEnable TruthValue, cLReapGroupRadiusLeapEnable TruthValue, cLReapGroupRadiusEapFastEnable TruthValue, cLReapGroupRadiusPacTimeoutCtrl Unsigned32, cLReapGroupEfficientApUpgradeEnable TruthValue, cLReapGroupApUpgradeStart INTEGER, cLReapGroupSlaveMaxRetryCount Unsigned32, cLReapGroupPrimaryRadiusServerType InetAddressType, cLReapGroupPrimaryRadiusServerAddress InetAddress, cLReapGroupPrimaryRadiusServerPort Unsigned32, cLReapGroupPrimaryServerSecret SnmpAdminString, cLReapGroupSecRadiusServerType InetAddressType, cLReapGroupSecRadiusServerAddress InetAddress, cLReapGroupSecRadiusServerPort Unsigned32, cLReapGroupSecServerSecret SnmpAdminString, cLReapGroupRadiusPeapEnable TruthValue, cLReapGroupRadiusEapTlsEnable TruthValue, cLReapGroupCertificateEapTlsEnable TruthValue, cLReapGroupNativeVlanId Unsigned32, cLReapGroupVlanEnable TruthValue, cLReapGroupOverrideVlanEnable TruthValue, cLReapGroupHttpProxyIpType InetAddressType, cLReapGroupHttpProxyIp InetAddress, cLReapGroupHttpProxyPort Unsigned32, cLReapGroupVlanTemplateName SnmpAdminString, cLReapGroupEfficientApJoinEnable TruthValue, cLReapGroupRadiusServerGroupName SnmpAdminString, cLReapGroupEapFastProfileName SnmpAdminString, cLReapGroupArpCacheEnabled TruthValue, cLReapGroupHomeApEnable TruthValue, cLReapGroupLeastLatencyJoinEnable TruthValue, cLReapGroupHomeApLocalSsidReset TruthValue, cLReapGroupInstallMappingRadioBackhaul TruthValue, cLReapGroupResilientMode TruthValue, cLReapGroupDescription OCTET STRING, cLReapGroupFallbackRadioShutEnabled TruthValue, cLReapCtsInlineTagging TruthValue, cLReapIsHomeApEnable TruthValue, cLReapCtsRolebasedEnforcement TruthValue, cLReapCtsSxpAttachedProfileName SnmpAdminString, cLReapGroupAccountingRadiusServerGroupName SnmpAdminString, cLReapLocalRoaming TruthValue, cLReapGroupMdnsFlexProfileName SnmpAdminString, cLReapIpOverlap TruthValue, cLReapGroupDhcpBroadcastEnable TruthValue, cLReapGroupPMKAPPropagation INTEGER } cLReapGroupName OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (1..64)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "This object represents REAP group name and uniquely identifies an entry in cLReapGroupConfigTable." ::= { cLReapGroupConfigEntry 1 } cLReapGroupPrimaryRadiusIndex OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "The object specifies the value that maps to the primary RADIUS server for this group. A value of '0' indicates that the primary RADIUS server is not configured for this group." DEFVAL { 0 } ::= { cLReapGroupConfigEntry 2 } cLReapGroupSecondaryRadiusIndex OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "The object specifies the value that maps to the secondary RADIUS server for this group. A value of '0' indicates that the secondary RADIUS server is not configured for this group." DEFVAL { 0 } ::= { cLReapGroupConfigEntry 3 } cLReapGroupStorageType OBJECT-TYPE SYNTAX StorageType MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the storage type for this conceptual row." ::= { cLReapGroupConfigEntry 4 } cLReapGroupRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the status column for a conceptual row in this table." ::= { cLReapGroupConfigEntry 5 } cLReapGroupRadiusPacTimeout OBJECT-TYPE SYNTAX Unsigned32 (0..4095) UNITS "Seconds" MAX-ACCESS read-create STATUS deprecated DESCRIPTION "This object represents timeout value for the PAC (protected access credentials). Superceded by cLReapGroupRadiusPacTimeoutCtrl." DEFVAL { 10 } ::= { cLReapGroupConfigEntry 6 } cLReapGroupRadiusAuthorityId OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the authority ID used for client association when client uses EAP-FAST mechanism." DEFVAL { "" } ::= { cLReapGroupConfigEntry 7 } cLReapGroupRadiusAuthorityInfo OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the authority information used for client association when client uses EAP-FAST mechanism." DEFVAL { "" } ::= { cLReapGroupConfigEntry 8 } cLReapGroupRadiusServerKey OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the RADIUS server key. For security the key always returns '****'." DEFVAL { "****" } ::= { cLReapGroupConfigEntry 9 } cLReapGroupRadiusIgnoreKey OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies whether anonymous provisioning is enabled. A value of 'true' indicates the controller will ignore the key configured in cLReapGroupRadiusServerKey anonymous requests. A value of 'false' indicates that the controller will use the key configured by cLReapGroupRadiusServerKey." DEFVAL { true } ::= { cLReapGroupConfigEntry 10 } cLReapGroupRadiusEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "This parameter specifies whether RADIUS is enabled. A value of 'true' specifies that RADIUS is enabled. A value of 'false' specifies that RADIUS is disabled." DEFVAL { false } ::= { cLReapGroupConfigEntry 11 } cLReapGroupRadiusLeapEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "This parameter specifies whether LEAP is enabled. A value of 'true' specifies that LEAP is enabled. A value of 'false' specifies that LEAP is disabled." DEFVAL { false } ::= { cLReapGroupConfigEntry 12 } cLReapGroupRadiusEapFastEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "This parameter specifies whether EAP-FAST is enabled. A value of 'true' specifies that EAP-FAST is enabled. A value of 'false' specifies that EAP-FAST is disabled." DEFVAL { false } ::= { cLReapGroupConfigEntry 13 } cLReapGroupRadiusPacTimeoutCtrl OBJECT-TYPE SYNTAX Unsigned32 (0..4095) UNITS "seconds" MAX-ACCESS read-create STATUS current DESCRIPTION "This parameter specifies timeout value for the PAC (protected access credentials). Valid range of timeout is 2 to 4095, and value 0 stands for disable." DEFVAL { 10 } ::= { cLReapGroupConfigEntry 14 } cLReapGroupEfficientApUpgradeEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "This parameter specifies whether efficient AP image upgrade is enabled. A value of 'true' indicates that efficient AP image upgrade is enabled. A value of 'false' indicates that Efficient AP image upgrade is disabled." DEFVAL { false } ::= { cLReapGroupConfigEntry 15 } cLReapGroupApUpgradeStart OBJECT-TYPE SYNTAX INTEGER { initiatePrimary(1), initiateBackup(2), abort(3) } MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies which image REAP AP has to download from WLC upon upgrade start. A value of 'initiatePrimary' specifies AP will download primary image from WLC. A value of 'initiateBackup' specifies AP will download backup image from WLC. A value of 'abort' specifies AP will stop the download process." ::= { cLReapGroupConfigEntry 16 } cLReapGroupSlaveMaxRetryCount OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the maximum retries the the slave AP has to try to download image from the master in the hreap group before it stars download from WLC. Range is 1 to 63" ::= { cLReapGroupConfigEntry 17 } cLReapGroupPrimaryRadiusServerType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies server IP address type of the primary radius server for the flexconnect group." ::= { cLReapGroupConfigEntry 18 } cLReapGroupPrimaryRadiusServerAddress OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies server IP address of the primary radius server for the flexconnect group." ::= { cLReapGroupConfigEntry 19 } cLReapGroupPrimaryRadiusServerPort OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies port number of the primary radius server for the flexconnect group." ::= { cLReapGroupConfigEntry 20 } cLReapGroupPrimaryServerSecret OBJECT-TYPE SYNTAX SnmpAdminString MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies secret of the primary radius server for the flexconnect group." ::= { cLReapGroupConfigEntry 21 } cLReapGroupSecRadiusServerType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies server IP address type of the secondary radius server for the flexconnect group." ::= { cLReapGroupConfigEntry 22 } cLReapGroupSecRadiusServerAddress OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies server IP address of the secondary radius server for the flexconnect group." ::= { cLReapGroupConfigEntry 23 } cLReapGroupSecRadiusServerPort OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies port number of the secondary radius server for the flexconnect group." ::= { cLReapGroupConfigEntry 24 } cLReapGroupSecServerSecret OBJECT-TYPE SYNTAX SnmpAdminString MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies secret of the secondary radius server for the flexconnect group." ::= { cLReapGroupConfigEntry 25 } cLReapGroupRadiusPeapEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "This parameter specifies whether PEAP is enabled for that flexconect group. A value of 'true' indicates that PEAP is enabled. A value of 'false' indicates that PEAP is disabled." DEFVAL { false } ::= { cLReapGroupConfigEntry 26 } cLReapGroupRadiusEapTlsEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "This parameter specifies whether EAP-TLS is enabled in the flexconect group. A value of 'true' indicates that EAP-TLS is enabled. A value of 'false' indicates that EAP-TLS is disabled." DEFVAL { false } ::= { cLReapGroupConfigEntry 27 } cLReapGroupCertificateEapTlsEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "This parameter specifies whether certificate for EAP-TLS is enabled. A value of 'true' indicates that EAP-TLS certificate is enabled. A value of 'false' indicates that EAP-TLS certificate is disabled." DEFVAL { false } ::= { cLReapGroupConfigEntry 28 } cLReapGroupNativeVlanId OBJECT-TYPE SYNTAX Unsigned32 (1..4095) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the Native VLAN ID for the particular flexconenct group identified by cLReapGroupName." DEFVAL { 1 } ::= { cLReapGroupConfigEntry 29 } cLReapGroupVlanEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the availability of Native VLAN configured through cLReapGroupNativeVlanId on this REAP group. A value of 'true' indicates that the VLAN configured as native through cLReapGroupNativeVlanId is enabled on the REAP and that the REAP can reach the controller through the native VLAN. A value of 'false' indicates that the VLAN configured as native through cLReapGroupNativeVlanId is disabled and the REAP can reach the controller using its management VLAN" DEFVAL { false } ::= { cLReapGroupConfigEntry 30 } cLReapGroupOverrideVlanEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the overriding of vlans at REAP APs by the vlans available from the reap group." DEFVAL { false } ::= { cLReapGroupConfigEntry 31 } cLReapGroupHttpProxyIpType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS read-create STATUS current DESCRIPTION "Thsi object specifies Ip Address type of Http proxy in flexconnect group." ::= { cLReapGroupConfigEntry 32 } cLReapGroupHttpProxyIp OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies HTTP proxy Ip address in flexconect group." ::= { cLReapGroupConfigEntry 33 } cLReapGroupHttpProxyPort OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies HTTP Proxy port in flexconnect group." ::= { cLReapGroupConfigEntry 34 } cLReapGroupVlanTemplateName OBJECT-TYPE SYNTAX SnmpAdminString MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the vlan template name at REAP APs by the vlans available from the reap group." DEFVAL { "" } ::= { cLReapGroupConfigEntry 35 } cLReapGroupEfficientApJoinEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "This parameter specifies whether efficient AP image join is enabled. A value of 'true' indicates that efficient AP image upgrade is enabled. A value of 'false' indicates that Efficient AP image upgrade is disabled." DEFVAL { true } ::= { cLReapGroupConfigEntry 36 } cLReapGroupRadiusServerGroupName OBJECT-TYPE SYNTAX SnmpAdminString MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies the radius server group name entry in cLReapGroupConfigTable." ::= { cLReapGroupConfigEntry 37 } cLReapGroupEapFastProfileName OBJECT-TYPE SYNTAX SnmpAdminString MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies the eap fast profile used for local auth in cLReapGroupConfigTable." ::= { cLReapGroupConfigEntry 38 } cLReapGroupArpCacheEnabled OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies whether ARP cache feature is enabled for the flexconnect Access Points connected to the Wireless LAN Controller. A Value of 'True' specifies that ARP cache is enabled. A Value of 'False' specifies that ARP cache is disabled" ::= { cLReapGroupConfigEntry 39 } cLReapGroupHomeApEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies if the APs connected to this profile/group are used as Home APs. A value of 'true' specifies that REAP AP is a Home AP. A value of 'false' specifies that this REAP AP is not a Home AP." DEFVAL { false } ::= { cLReapGroupConfigEntry 40 } cLReapGroupLeastLatencyJoinEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies if this REAP AP should join controller which has least latency. A value of 'true' specifies that this REAP AP will join controller which has least latency. A value of 'false' specifies that this REAP AP will not consider latency in selecting controller to join." DEFVAL { false } ::= { cLReapGroupConfigEntry 41 } cLReapGroupHomeApLocalSsidReset OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object can be used to reset local SSID on a Home AP. A value of true specifies that the local SSID is to be reset. A value of false on this during set will return error. A value of false will be returned on get." DEFVAL { false } ::= { cLReapGroupConfigEntry 42 } cLReapGroupInstallMappingRadioBackhaul OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies if WLANs are enabled or disabled on backhaul radio. A value of true specifies that wlan mapping would be enabled on backhaul radio. A value of false specifies that wlan mapping would be disabled on backhaul radio. This variable is significant only when AP is in Flex+Bridge mode." DEFVAL { false } ::= { cLReapGroupConfigEntry 43 } cLReapGroupResilientMode OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies if Standalone mode support is enabled or disabled on a REAP AP. A value of true specifies that Standalone mode would be enabled on backhaul radio. A value of false specifies that Standalone mode would be disabled on backhaul radio. This variable is significant only when AP is in Flex+Bridge mode." DEFVAL { false } ::= { cLReapGroupConfigEntry 44 } cLReapGroupDescription OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..32)) MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies the description of flex profile" DEFVAL { "" } ::= { cLReapGroupConfigEntry 45 } cLReapGroupFallbackRadioShutEnabled OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies whether Fallback Radio Shut feature is enabled for the flexconnect Access Points connected to the Wireless LAN Controller. A value of true specifies that Fallback Radio Shut feature is enabled. A value of false specifies that Fallback Radio Shut feature is disabled." DEFVAL { false } ::= { cLReapGroupConfigEntry 46 } cLReapCtsInlineTagging OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies whether cts inline tagging feature is enabled for the flexconnect Access Points connected to the Wireless LAN Controller. A Value of 'true' specifies that cts inline tagging is enabled. A Value of 'false' specifies that cts inline tagging is disabled" DEFVAL { false } ::= { cLReapGroupConfigEntry 48 } cLReapIsHomeApEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies whether OEAP is enabled. A value of 'true' enable OEAP A value of 'false' disable OEAP" DEFVAL { false } ::= { cLReapGroupConfigEntry 49 } cLReapCtsRolebasedEnforcement OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies whether cts role-based enforcement feature is enabled for the flexconnect Access Points connected to the Wireless LAN Controller. A Value of 'true' specifies that cts role-based enforcement is enabled. A Value of 'false' specifies that cts role-based enforcement is disabled" DEFVAL { false } ::= { cLReapGroupConfigEntry 50 } cLReapCtsSxpAttachedProfileName OBJECT-TYPE SYNTAX SnmpAdminString MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies the sxp profile attached to the flex profile" ::= { cLReapGroupConfigEntry 51 } cLReapGroupAccountingRadiusServerGroupName OBJECT-TYPE SYNTAX SnmpAdminString MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies the Radius server group for accounting attached to the flex profile" ::= { cLReapGroupConfigEntry 52 } cLReapLocalRoaming OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies whether local roaming feature is enabled for the FlexConnect Access Points connected to the Wireless LAN Controller. A Value of 'true' specifies that local roaming is enabled. A Value of 'false' specifies that local roaming is disabled. The value of 'true' will be effective only if the WLAN is configured as locally associated and locally switched." DEFVAL { false } ::= { cLReapGroupConfigEntry 53 } cLReapGroupMdnsFlexProfileName OBJECT-TYPE SYNTAX SnmpAdminString MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies the mdns flex profile name entry in cLReapGroupConfigTable." ::= { cLReapGroupConfigEntry 54 } cLReapIpOverlap OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies whether IP overlap feature is enabled for the FlexConnect Access Points connected to the Wireless LAN Controller. A Value of 'true' specifies that IP overlap is enabled. A Value of 'false' specifies that IP overlap is disabled." DEFVAL { false } ::= { cLReapGroupConfigEntry 55 } cLReapGroupDhcpBroadcastEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies whether DHCP broadcast for locally switched clients is enabled or disabled. A value of 'true' specifies that DHCP broadcast is enabled. A value of 'false' specifies that DHCP broadcast is disabled." DEFVAL { false } ::= { cLReapGroupConfigEntry 56 } cLReapGroupPMKAPPropagation OBJECT-TYPE SYNTAX INTEGER { pmkDistCntrToAp(0), pmkDistApToAp(1), pmkDistDCDS(2), } MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies distribution of PMK between contoller and AP. A value of 'pmkDistCntrToAp' specifies PMK distribution from controller to all the APs in site tag. A value of 'pmkDistApToAp' specifies PMK distribution from controller to only few APs and from those AP to other APs in site tag. A value of 'pmkDistDCDS' specifies PMK distribution between APs in site tag." DEFVAL { pmkDistCntrToAp } ::= { cLReapGroupConfigEntry 57 } -- ******************************************************************** -- Hybrid REAP Group AP configuration -- ******************************************************************** cLReapGroupApConfigTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapGroupApConfigEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table represents the group associated with an AP. Entries are added or deleted by the user through the use of cLReapGroupApRowStatus." ::= { ciscoLwappReapGroupConfig 2 } cLReapGroupApConfigEntry OBJECT-TYPE SYNTAX CLReapGroupApConfigEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry represents a conceptual row in cLReapGroupApConfigTable." INDEX { cLReapGroupName, cLApSysMacAddress } ::= { cLReapGroupApConfigTable 1 } CLReapGroupApConfigEntry ::= SEQUENCE { cLReapGroupApStorageType StorageType, cLReapGroupApRowStatus RowStatus, cLReapGroupApEntryType INTEGER, cLReapGroupApPnPConflict TruthValue } cLReapGroupApStorageType OBJECT-TYPE SYNTAX StorageType MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the storage type for this conceptual row." ::= { cLReapGroupApConfigEntry 1 } cLReapGroupApRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the status column for a conceptual row in this table." ::= { cLReapGroupApConfigEntry 2 } cLReapGroupApEntryType OBJECT-TYPE SYNTAX INTEGER { admin(1), cloud(2) } MAX-ACCESS read-only STATUS current DESCRIPTION "This object represents the entry type of the AP. A value of 'admin' represents the AP added to group by manual admin configuration A value of 'cloud' represents the AP added to group because of AP configured from cloud to join this group." ::= { cLReapGroupApConfigEntry 3 } cLReapGroupApPnPConflict OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "This object represents whether there is any conflict with the flexconnect group value from PnP." ::= { cLReapGroupApConfigEntry 4 } -- ******************************************************************** -- Hybrid REAP Group User configuration -- ******************************************************************** cLReapGroupUserConfigTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapGroupUserConfigEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table represents the group associated with an User. Entries are added or deleted by the application through the use of cLReapGroupUserRowStatus." ::= { ciscoLwappReapGroupConfig 3 } cLReapGroupUserConfigEntry OBJECT-TYPE SYNTAX CLReapGroupUserConfigEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry represents a conceptual row in cLReapGroupUserConfigTable." INDEX { cLReapGroupName, cLReapGroupUserName } ::= { cLReapGroupUserConfigTable 1 } CLReapGroupUserConfigEntry ::= SEQUENCE { cLReapGroupUserName SnmpAdminString, cLReapGroupUserPassword SnmpAdminString, cLReapGroupUserStorageType StorageType, cLReapGroupUserRowStatus RowStatus } cLReapGroupUserName OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (1..24)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "This object represents the user name for this group. user name is used for authenticating a client associated to an AP within the group." ::= { cLReapGroupUserConfigEntry 1 } cLReapGroupUserPassword OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (1..64)) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the password for this user." ::= { cLReapGroupUserConfigEntry 2 } cLReapGroupUserStorageType OBJECT-TYPE SYNTAX StorageType MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the storage type for this conceptual row." ::= { cLReapGroupUserConfigEntry 3 } cLReapGroupUserRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the status column for a conceptual row in this table." ::= { cLReapGroupUserConfigEntry 4 } -- ******************************************************************** -- Hybrid REAP Group vlan-acl configuration -- ******************************************************************** cLReapGroupVlanAclTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapGroupVlanAclEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table represents the configuration of VLAN-ACL mappings for REAP groups." ::= { ciscoLwappReapGroupConfig 4 } cLReapGroupVlanAclEntry OBJECT-TYPE SYNTAX CLReapGroupVlanAclEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry represents a conceptual row in cLReapGroupVlanAclTable." INDEX { cLReapGroupName, cLReapGroupVlanId } ::= { cLReapGroupVlanAclTable 1 } CLReapGroupVlanAclEntry ::= SEQUENCE { cLReapGroupVlanId Unsigned32, cLReapGroupIngressAcl SnmpAdminString, cLReapGroupEgressAcl SnmpAdminString, cLReapGroupVlanAclRowStatus RowStatus, cLReapGroupVlanOrder Unsigned32 } cLReapGroupVlanId OBJECT-TYPE SYNTAX Unsigned32 (1..4095) MAX-ACCESS not-accessible STATUS current DESCRIPTION "This object represents the VLAN ID to be mapped to the ACL for the reap group identified by cLReapGroupName" ::= { cLReapGroupVlanAclEntry 1 } cLReapGroupIngressAcl OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the name of the ingress access control list for the vlan-acl mapping for the group identified by cLReapGroupName." ::= { cLReapGroupVlanAclEntry 2 } cLReapGroupEgressAcl OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the name of the egress access control list for the vlan-acl mapping for the group identified by cLReapGroupName." ::= { cLReapGroupVlanAclEntry 3 } cLReapGroupVlanAclRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the status column for a conceptual row in this table." ::= { cLReapGroupVlanAclEntry 4 } cLReapGroupVlanOrder OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "This object represents the vlan order configuration on the group level." ::= { cLReapGroupVlanAclEntry 5 } -- ******************************************************************** -- Hybrid REAP Group wlan-acl configuration -- ******************************************************************** cLReapGroupAclTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapGroupAclEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table represents the configuration of wlan-acl mappings for REAPs." ::= { ciscoLwappReapGroupConfig 5 } cLReapGroupAclEntry OBJECT-TYPE SYNTAX CLReapGroupAclEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry represents a conceptual row in cLReapGroupAclTable." INDEX { cLReapGroupName, cLWlanIndex } ::= { cLReapGroupAclTable 1 } CLReapGroupAclEntry ::= SEQUENCE { cLReapGroupWebAuthAcl SnmpAdminString, cLReapGroupAclRowStatus RowStatus, cLReapGroupWebAuthIpv6Acl SnmpAdminString } cLReapGroupWebAuthAcl OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the name of the webauth access control list for the wlan-acl mapping in the flexconnect group." ::= { cLReapGroupAclEntry 1 } cLReapGroupAclRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the status column for a conceptual row in this table." ::= { cLReapGroupAclEntry 2 } cLReapGroupWebAuthIpv6Acl OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the name of the Ipv6 webauth access control list for the wlan-acl mapping in the flexconnect group." ::= { cLReapGroupAclEntry 3 } cLReapGroupWebPolicyAclTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapGroupWebPolicyAclEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table represents the configuration of webpolicy acl mappings for REAP groups." ::= { ciscoLwappReapGroupConfig 6 } cLReapGroupWebPolicyAclEntry OBJECT-TYPE SYNTAX CLReapGroupWebPolicyAclEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry represents a conceptual row in the cLReapGroupWebPolicyAclTable." INDEX { cLReapGroupName, cLReapGroupWebPolicyAcl } ::= { cLReapGroupWebPolicyAclTable 1 } CLReapGroupWebPolicyAclEntry ::= SEQUENCE { cLReapGroupWebPolicyAcl SnmpAdminString, cLReapGroupWebPolicyAclRowStatus RowStatus, cLReapGroupWebPolicyAclType INTEGER, cLReapGroupWebPolicyAclCentWebAuth TruthValue } cLReapGroupWebPolicyAcl OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "This object specifies the name of the webpolicy access control aist to be mapped to the REAP group." ::= { cLReapGroupWebPolicyAclEntry 1 } cLReapGroupWebPolicyAclRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the status column for a conceptual row in this table." ::= { cLReapGroupWebPolicyAclEntry 2 } cLReapGroupWebPolicyAclType OBJECT-TYPE SYNTAX INTEGER { ipv4(1), ipv6(2) } MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies whether webpolicy access control list is IPv4 or IPv6." DEFVAL { ipv4 } ::= { cLReapGroupWebPolicyAclEntry 3 } cLReapGroupWebPolicyAclCentWebAuth OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object represents whether to Configure central-webauth for this ACL. A value of true specifies that central-webauth is enabled for ACL. A value of false specifies that central-webauth is disabled for ACL." DEFVAL { false } ::= { cLReapGroupWebPolicyAclEntry 4 } cLReapGroupLocalSplitAclTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapGroupLocalSplitAclEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table represents the configuration of WLAN-ACL mappings for local split tunneling at REAP groups." ::= { ciscoLwappReapGroupConfig 7 } cLReapGroupLocalSplitAclEntry OBJECT-TYPE SYNTAX CLReapGroupLocalSplitAclEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry represents a conceptual row in cLReapGroupLocalSplitAclTable." INDEX { cLReapGroupName, cLWlanIndex } ::= { cLReapGroupLocalSplitAclTable 1 } CLReapGroupLocalSplitAclEntry ::= SEQUENCE { cLReapGroupLocalSplitAcl SnmpAdminString, cLReapGroupLocalSplitAclRowStatus RowStatus } cLReapGroupLocalSplitAcl OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the name of the local split access control list to be mapped to the WLAN inside REAP group" ::= { cLReapGroupLocalSplitAclEntry 1 } cLReapGroupLocalSplitAclRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the status column for a conceptual row in this table." ::= { cLReapGroupLocalSplitAclEntry 2 } -- ******************************************************************** -- * Cisco REAP Central DHCP configuration -- ******************************************************************** cLReapGroupCentralDhcpTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapGroupCentralDhcpEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table represents the configuration of central dhcp processing for REAP APs in REAP groups" ::= { ciscoLwappReapGroupConfig 8 } cLReapGroupCentralDhcpEntry OBJECT-TYPE SYNTAX CLReapGroupCentralDhcpEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry represents a conceptual row in cLReapGroupCentralDhcpTable." INDEX { cLReapGroupName, cLWlanIndex } ::= { cLReapGroupCentralDhcpTable 1 } CLReapGroupCentralDhcpEntry ::= SEQUENCE { cLReapGroupDhcpCentral TruthValue, cLReapGroupDhcpOverrideDNS TruthValue, cLReapGroupNatPatEnabled TruthValue, cLReapGroupDhcpRowStatus RowStatus } cLReapGroupDhcpCentral OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the behavior of the REAP AP part of REAP group when switching the DHCP frames of the clients associated to it through the WLAN identified by cLWlanIndex. A value of 'true' specifies REAP AP will tunnel DHCP packets to WLC. A value of 'false' specifies REAP AP will bridge DHCP packets locally. This config is applicable only for locally switched WLANs." DEFVAL { false } ::= { cLReapGroupCentralDhcpEntry 1 } cLReapGroupDhcpOverrideDNS OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the behavior of the REAP AP part of REAP group when switching the DNS frames of the clients associated to it through the WLAN identified by cLWlanIndex. A value of 'true' specifies REAP AP will tunnel DNS packets to WLC. A value of 'false' specifies REAP AP will bridge DNS packets locally. This config is applicable only for locally switched WLANs and when cLReapApDhcpCentral is set to 'true'." DEFVAL { false } ::= { cLReapGroupCentralDhcpEntry 2 } cLReapGroupNatPatEnabled OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies whether Network Address Translation (NAT) and Port Address Trnaslation (PAT) are enabled on this REAP AP part of REAP group for the WLAN identified by cLWlanIndex. A value of 'true' specifies REAP AP will bridge data packets locally after appliying NAT and PAT. A value of 'false' specifies REAP AP will bridge data packets locally without appliying NAT and PAT. This config is applicable only for locally switched WLANs and when cLReapApDhcpCentral is set to 'true'." DEFVAL { false } ::= { cLReapGroupCentralDhcpEntry 3 } cLReapGroupDhcpRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object represents the status column for a conceptual row in this table." ::= { cLReapGroupCentralDhcpEntry 4 } -- ******************************************************************** -- * Cisco REAP WLAN / VLAN Id mapping configuration -- ******************************************************************** cLReapGroupVlanIdTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapGroupVlanIdEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table represents the WLAN / VLAN Id mappings to be configured for the REAP identified by REAP group name. VLAN Id configured through this table is passed to the respective REAP group identified by the REAP group name." ::= { ciscoLwappReapGroupConfig 9 } cLReapGroupVlanIdEntry OBJECT-TYPE SYNTAX CLReapGroupVlanIdEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry represents a conceptual row that corresponds to one WLAN / VLAN Id mapping to be applied to the REAP identified by cLReapGroupName." INDEX { cLReapGroupName, cLWlanIndex } ::= { cLReapGroupVlanIdTable 1 } CLReapGroupVlanIdEntry ::= SEQUENCE { cLReapGroupWlanVlanId Unsigned32, cLReapGroupVlanRowStatus RowStatus } cLReapGroupWlanVlanId OBJECT-TYPE SYNTAX Unsigned32 (1..4095) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the VLAN ID to be mapped to the WLAN identified by cLWlanIndex in the REAP group." DEFVAL { 1 } ::= { cLReapGroupVlanIdEntry 1 } cLReapGroupVlanRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the reap group vlan mapping row status." ::= { cLReapGroupVlanIdEntry 2 } -- ******************************************************************** -- * Cisco REAP WLAN / AVC parameters mapping configuration -- ******************************************************************** cLReapGroupAVCFlexTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapGroupAVCFlexEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table represents the WLAN / AVC parameters mappings to be configured for the REAP identified by REAP group name. AVC parameters configured through this table is passed to the respective REAP group identified by the REAP group name." ::= { ciscoLwappReapGroupConfig 10 } cLReapGroupAVCFlexEntry OBJECT-TYPE SYNTAX CLReapGroupAVCFlexEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry represents a conceptual row that corresponds to one WLAN / AVC parameters mapping to be applied to the REAP identified by cLReapGroupName." INDEX { cLReapGroupName, cLWlanIndex } ::= { cLReapGroupAVCFlexTable 1 } CLReapGroupAVCFlexEntry ::= SEQUENCE { cLReapGroupAVCFlexProfileName SnmpAdminString, cLReapGroupNbarStatsVisibilityEnable INTEGER, cLReapGroupAVCFlexRowStatus RowStatus } cLReapGroupAVCFlexProfileName OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the AVC profile name assigned to this WLAN in the REAP idendified by cLReapGroupName. 'none' specifies no profile is being associated. profile name 'none' should be used to de-associate profile from WLAN in the REAP idendified by cLReapGroupName." ::= { cLReapGroupAVCFlexEntry 1 } cLReapGroupNbarStatsVisibilityEnable OBJECT-TYPE SYNTAX INTEGER { disable(1), enable(2), wlan-specific(3) } MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the user to enable or disable NBAR stats visibility. A value of 'disable' indicates NBAR stats visibility is disabled. A value of 'enable' indicates NBAR stats visibility is enabled. A value of 'wlan-specific' indicates NBAR stats visbility is wlan-specific." ::= { cLReapGroupAVCFlexEntry 2 } cLReapGroupAVCFlexRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the rowstatus of the reap group wlan avc parameter mappings table." ::= { cLReapGroupAVCFlexEntry 3 } -- ******************************************************************* -- * Cisco REAP VLAN Name . ACL mapping configuration on AP level -- ******************************************************************* cLReapGroupVlanNameAclTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapGroupVlanNameAclEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table defines the VLAN Name- ACL mappings to be configured for the REAP identified by cLReapGroupVlanName." ::= { ciscoLwappReapGroupConfig 11 } cLReapGroupVlanNameAclEntry OBJECT-TYPE SYNTAX CLReapGroupVlanNameAclEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry represents a conceptual row that corresponds to one VLAN Name - ACL mapping to be applied to the REAP identified by cLReapGroupVlanName." INDEX { cLReapGroupName, cLReapGroupVlanName } ::= { cLReapGroupVlanNameAclTable 1 } CLReapGroupVlanNameAclEntry ::= SEQUENCE { cLReapGroupVlanName SnmpAdminString, cLReapGroupVlanIdentifier Unsigned32, cLReapGroupAcl SnmpAdminString, cLReapGroupVlanNameAclType INTEGER, cLReapGroupVlanNameAclRowStatus RowStatus, cLReapGroupAclIn SnmpAdminString, cLReapGroupAclOut SnmpAdminString } cLReapGroupVlanName OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "This object specifies the name of the Vlan name for the vlan-acl mapping." ::= { cLReapGroupVlanNameAclEntry 1 } cLReapGroupVlanIdentifier OBJECT-TYPE SYNTAX Unsigned32 (1..4096) MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies the VLAN ID to be mapped to the Acl for the Access Point identified by cLReapGroupVlanName." ::= { cLReapGroupVlanNameAclEntry 2 } cLReapGroupAcl OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..32)) MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies the name of the Access Control List for the vlan-acl mapping." ::= { cLReapGroupVlanNameAclEntry 3 } cLReapGroupVlanNameAclType OBJECT-TYPE SYNTAX INTEGER { apSource(1), groupSource(2) } MAX-ACCESS read-only STATUS current DESCRIPTION "This object specifies the type of the vlan acl mapping apSource - vlan-acl mapping applied from AP level. groupSource - vlan-acl mapping applied from hreap group level." ::= { cLReapGroupVlanNameAclEntry 4 } cLReapGroupVlanNameAclRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies the status column for a conceptual row in this table." ::= { cLReapGroupVlanNameAclEntry 5 } cLReapGroupAclIn OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..32)) MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies the name of the Ingress Access Control List for the vlan-acl mapping." ::= { cLReapGroupVlanNameAclEntry 6 } cLReapGroupAclOut OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..32)) MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies the name of the Egress Access Control List for the vlan-acl mapping." ::= { cLReapGroupVlanNameAclEntry 7 } -- ******************************************************************** -- * Cisco REAP Cisco Trustsec SXP Configuration -- ******************************************************************** cLReapGroupCtsSxpTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapGroupCtsSxpEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table defines the CTS SXP configured for the REAP identified by cLReapCtsSxpConfigProfileName." ::= { ciscoLwappReapGroupConfig 12 } cLReapGroupCtsSxpEntry OBJECT-TYPE SYNTAX CLReapGroupCtsSxpEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry represents a conceptual row that corresponds to one CTS SXP configuration be applied to the REAP identified by cLReapGroupCtsSxp." INDEX { cLReapCtsSxpConfigProfileName } ::= { cLReapGroupCtsSxpTable 1 } CLReapGroupCtsSxpEntry ::= SEQUENCE { cLReapCtsSxpConfigProfileName SnmpAdminString, cLReapCtsSxpDefaultPassword SnmpAdminString, cLReapCtsSxpState TruthValue, cLReapCtsSxpListenerMinHoldTime Unsigned32, cLReapCtsSxpListenerMaxHoldTime Unsigned32, cLReapCtsSxpReconcilePeriod Unsigned32, cLReapCtsSxpRetryPeriod Unsigned32, cLReapCtsSxpSpeakerMinHoldTime Unsigned32, cLReapCtsSxpRowStatus RowStatus } cLReapCtsSxpConfigProfileName OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (1..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "This object specifies the cts sxp configuration profile name for the flex connect Access Points connected to the Wireless LAN controller." ::= { cLReapGroupCtsSxpEntry 1 } cLReapCtsSxpDefaultPassword OBJECT-TYPE SYNTAX SnmpAdminString MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies the cts sxp configuration Default password for the flex connect Access Points connected to the wireless LAN controller." ::= { cLReapGroupCtsSxpEntry 2 } cLReapCtsSxpState OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies if the SXP (Security Group Tag Exchange Protocol) functionality is enabled for the flex connect Access Points connected to the wireless LAN controller." ::= { cLReapGroupCtsSxpEntry 3 } cLReapCtsSxpListenerMinHoldTime OBJECT-TYPE SYNTAX Unsigned32 (1..65534) UNITS "seconds" MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies the minimum hold-time for SXP connections in 'listener' mode. Value of this object must be lesser than ctsxSxpListenerMaxHoldTime." ::= { cLReapGroupCtsSxpEntry 4 } cLReapCtsSxpListenerMaxHoldTime OBJECT-TYPE SYNTAX Unsigned32 (1..65534) UNITS "seconds" MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies the maximum hold-time for SXP connections in 'listener' mode. Value of this object must be greater than ctsxSxpListenerMinHoldTime." ::= { cLReapGroupCtsSxpEntry 5 } cLReapCtsSxpReconcilePeriod OBJECT-TYPE SYNTAX Unsigned32 (0..64000) UNITS "seconds" MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies the amount of time after which system will initiate removal of SGT mappings for a reconciled connection. A value of zero for this object indicates that SGT mappings for a reconciled connection will never be deleted." ::= { cLReapGroupCtsSxpEntry 6 } cLReapCtsSxpRetryPeriod OBJECT-TYPE SYNTAX Unsigned32 (0..64000) UNITS "seconds" MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies the amount of time after which the device will make the retry attempt for the SXP connections that are not setup successfully. A value of zero for this object indicates that the device will never try to establish connections that were not setup successfully." ::= { cLReapGroupCtsSxpEntry 7 } cLReapCtsSxpSpeakerMinHoldTime OBJECT-TYPE SYNTAX Unsigned32 (1..65534) UNITS "seconds" MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies the minimum hold-time for SXP connections in 'speaker' mode." ::= { cLReapGroupCtsSxpEntry 8 } cLReapCtsSxpRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the conceptual status of the row." ::= { cLReapGroupCtsSxpEntry 9 } -- ******************************************************************** -- * Cisco REAP Cisco Trustsec SXP Connection -- ******************************************************************** cLReapCtsSxpPeerTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapCtsSxpPeerEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A list of SXP peers configured on this device. It is a list of IP addresses of respective SXP connection peers configured for this device. SXP peers exchange security group tags information of clients through SxpV4 protocol." ::= { ciscoLwappReapGroupConfig 13 } cLReapCtsSxpPeerEntry OBJECT-TYPE SYNTAX CLReapCtsSxpPeerEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An entry containing management information of a particular SXP peers." INDEX { cLReapCtsSxpConfigProfileName, cLReapCtsSxpPeerIpType, cLReapCtsSxpPeerIp } ::= { cLReapCtsSxpPeerTable 1 } CLReapCtsSxpPeerEntry ::= SEQUENCE { cLReapCtsSxpPeerIpType InetAddressType, cLReapCtsSxpPeerIp InetAddress, cLReapCtsSxpMode INTEGER, cLReapCtsSxpPeerPassword INTEGER, cLReapCtsSxpPeerRowStatus RowStatus } cLReapCtsSxpPeerIpType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS not-accessible STATUS current DESCRIPTION "The type of Internet address of the peer SXP device." ::= { cLReapCtsSxpPeerEntry 1 } cLReapCtsSxpPeerIp OBJECT-TYPE SYNTAX InetAddress (SIZE (1..64)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The Internet address of the SXP peer device. The type of this address is determined by the value of cLReapCtsSxpPeerIpType object." ::= { cLReapCtsSxpPeerEntry 2 } cLReapCtsSxpMode OBJECT-TYPE SYNTAX INTEGER { speaker(1), listener(2), both(3) } MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the device mode of this SXP connection. A value of 'speaker' indicates that device will acts as the speaker in this SXP connection. A value of 'listener' indicates that device will acts as the listener in this SXP connection. A value of 'both' indicates that device will acts as both speaker and listener making it a Bi-directional SXP connection." ::= { cLReapCtsSxpPeerEntry 3 } cLReapCtsSxpPeerPassword OBJECT-TYPE SYNTAX INTEGER { notRequired(0), default(2) } MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies to configure the password of the sxp peer device." ::= { cLReapCtsSxpPeerEntry 4 } cLReapCtsSxpPeerRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the conceptual status of the row." ::= { cLReapCtsSxpPeerEntry 5 } -- ******************************************************************** -- * Cisco REAP Master AP Configuration -- ******************************************************************** cLReapMasterApConfigTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapMasterApConfigEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table represents the master AP admin configuration of REAPs. The agent adds a row to this table corresponding to each row representing a REAP in cLApTable of the CISCO-LWAPP-AP-MIB. The agent deletes the row either when the AP dissociates from the controller or moved out of the remote mode." ::= { ciscoLwappReapMasterApConfig 1 } cLReapMasterApConfigEntry OBJECT-TYPE SYNTAX CLReapMasterApConfigEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry represents a conceptual row in cLReapMasterApConfigTable and corresponds to the Master configuration of a REAP." INDEX { cLReapGroupName, cLApSysMacAddress } ::= { cLReapMasterApConfigTable 1 } CLReapMasterApConfigEntry ::= SEQUENCE { cLReapMasterApModel SnmpAdminString, cLReapMasterApManual TruthValue, cLReapMasterApRowStatus RowStatus } cLReapMasterApModel OBJECT-TYPE SYNTAX SnmpAdminString MAX-ACCESS read-only STATUS current DESCRIPTION "The object represents the model of the AP in the hreap group. This AP will be the master in the efficient upgrade process." ::= { cLReapMasterApConfigEntry 1 } cLReapMasterApManual OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "This object represents if this REAP AP is manually configured by the user. A value of 'true' indicates that this REAP master is manually configured. A value of 'false' indicates that this REAP master is not manually configured." ::= { cLReapMasterApConfigEntry 2 } cLReapMasterApRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the row Status of the Master table." ::= { cLReapMasterApConfigEntry 3 } -- ******************************************************************* -- cLReapL2AclTable -- ******************************************************************* cLReapL2AclTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapL2AclEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table listing layer2 ACLs (access control lists) on the switch." ::= { ciscoLwappReapAclConfig 3 } cLReapL2AclEntry OBJECT-TYPE SYNTAX CLReapL2AclEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry represents the attributes for cLReapL2AclTable.An entry gets added to the table on creating a layer2 ACL." INDEX { cLReapL2AclName } ::= { cLReapL2AclTable 1 } CLReapL2AclEntry ::= SEQUENCE { cLReapL2AclName SnmpAdminString, cLReapL2AclApplyMode INTEGER, cLReapL2AclRowStatus RowStatus } cLReapL2AclName OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (1..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "This object represents name of the L2 ACL on the switch." ::= { cLReapL2AclEntry 1 } cLReapL2AclApplyMode OBJECT-TYPE SYNTAX INTEGER { notapplied(1), applied(2) } MAX-ACCESS read-only STATUS current DESCRIPTION "This object represents the apply mode of the L2ACL on the switch. Mode value 'applied' means the L2ACL has been applied on the switch. Default mode on creation on ACL will be notapplied." ::= { cLReapL2AclEntry 2 } cLReapL2AclRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the row Status of the L2ACL." ::= { cLReapL2AclEntry 3 } -- ******************************************************************* -- cLReapL2AclRuleTable -- ******************************************************************* cLReapL2AclRuleTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapL2AclRuleEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table represents L2Acl rules(access control list entries) on the L2ACL with name cLReapL2AclName." ::= { ciscoLwappReapAclConfig 4 } cLReapL2AclRuleEntry OBJECT-TYPE SYNTAX CLReapL2AclRuleEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry represents the attributes for clReapL2AclRuleTable. An entry gets added to the table on creating a rule on L2ACL." INDEX { cLReapL2AclName, cLReapL2AclRuleIndex } ::= { cLReapL2AclRuleTable 1 } CLReapL2AclRuleEntry ::= SEQUENCE { cLReapL2AclRuleIndex Unsigned32, cLReapL2AclRuleAction INTEGER, cLReapL2AclRuleEthertype Unsigned32, cLReapL2AclRuleEthertypeMask Unsigned32, cLReapL2AclRuleDirection INTEGER, cLReapL2AclNewRuleIndex Unsigned32, cLReapL2AclRuleRowStatus RowStatus } cLReapL2AclRuleIndex OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS not-accessible STATUS current DESCRIPTION "This object represents the unique index of the L2ACL rule in REAP L2ACL. This can be updated to reset the sequence of the rules of an L2ACL. Valid range for this object is 1 to 64" ::= { cLReapL2AclRuleEntry 1 } cLReapL2AclRuleAction OBJECT-TYPE SYNTAX INTEGER { deny(1), permit(2) } MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the permission mode of a rule. The value of 'deny' means traffic will be blocked which meets the rule. The value of 'permits' means traffic will be allowed which meets the rule." DEFVAL { deny } ::= { cLReapL2AclRuleEntry 2 } cLReapL2AclRuleEthertype OBJECT-TYPE SYNTAX Unsigned32 (0..65536) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the etherType of the L2Acl rule. Default is 0x0" DEFVAL { 0 } ::= { cLReapL2AclRuleEntry 3 } cLReapL2AclRuleEthertypeMask OBJECT-TYPE SYNTAX Unsigned32 (0..65536) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the etherType Mask of the L2Acl rule. Default is 0x0" DEFVAL { 0 } ::= { cLReapL2AclRuleEntry 4 } cLReapL2AclRuleDirection OBJECT-TYPE SYNTAX INTEGER { inbound(1), outbound(2), any(3) } MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the direction of the packet to which the rule may be applied. A value of 'inbound' specifies that this rule will be applied on traffic coming into switchport. A value of 'outbound' specifies that this rule will be applied on traffic going out of switchport. A value of 'any' specifies that this rule will be applied on both incoming and out going traffic on switchport." DEFVAL { any } ::= { cLReapL2AclRuleEntry 5 } cLReapL2AclNewRuleIndex OBJECT-TYPE SYNTAX Unsigned32 (1..64) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the new Index of the L2ACL rule. This attribute should be updated if the requirement is to reset the sequence of the rules of an ACL. A read on this will yield the same value as cLReapL2AclRuleIndex" ::= { cLReapL2AclRuleEntry 6 } cLReapL2AclRuleRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the status of a conceptual row in the ACL Rule Table. This is used to create and delete entries in the table." ::= { cLReapL2AclRuleEntry 7 } -- ******************************************************************* -- cLReapAclUrlDomainRuleTable -- ******************************************************************* cLReapAclUrlDomainRuleTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapAclUrlDomainRuleEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table represents url domain acl Rules (url based Access Control List entries) on the ACL with name cLReapAclName." ::= { ciscoLwappReapAclConfig 5 } cLReapAclUrlDomainRuleEntry OBJECT-TYPE SYNTAX CLReapAclUrlDomainRuleEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each Entry represents the attributes for cLReapAclUrlDomainRuleTable. An Url domain rule entry gets added to the table on creating a rule on flexconnect ACL." INDEX { cLReapAclName, cLReapAclUrlDomainRuleIndex } ::= { cLReapAclUrlDomainRuleTable 1 } CLReapAclUrlDomainRuleEntry ::= SEQUENCE { cLReapAclUrlDomainRuleIndex Unsigned32, cLReapAclUrlDomainRuleUrl SnmpAdminString, cLReapAclUrlDomainRuleAction INTEGER, cLReapAclUrlDomainRuleRowStatus RowStatus } cLReapAclUrlDomainRuleIndex OBJECT-TYPE SYNTAX Unsigned32 (1..20) MAX-ACCESS not-accessible STATUS current DESCRIPTION "This object specifies the index of the Url domain ACL rule. It can be used to reset the sequence of the Url rules of an ACL." ::= { cLReapAclUrlDomainRuleEntry 1 } cLReapAclUrlDomainRuleUrl OBJECT-TYPE SYNTAX SnmpAdminString MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the URL name for the url domain rule." ::= { cLReapAclUrlDomainRuleEntry 2 } cLReapAclUrlDomainRuleAction OBJECT-TYPE SYNTAX INTEGER { deny(1), permit(2) } MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the permission mode of url domain rule. A value of 'deny' specifies client traffic matches this rule will be blocked. A value of 'permit' specifies client traffic matches this rule will be allowed to pass through." DEFVAL { deny } ::= { cLReapAclUrlDomainRuleEntry 3 } cLReapAclUrlDomainRuleRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This is the status column for this row and is used to create and delete specific instances of rows in this table." ::= { cLReapAclUrlDomainRuleEntry 4 } -- ******************************************************************* -- cLReapUrlDomainListTable -- ******************************************************************* cLReapUrlDomainListTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapUrlDomainListEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table represents url domain acl Rules(url based Access Control List entries) on the ACL with name cLReapUrlListName." ::= { ciscoLwappReapAclConfig 6 } cLReapUrlDomainListEntry OBJECT-TYPE SYNTAX CLReapUrlDomainListEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each Entry represents the attributes for cLReapUrlDomainListTable. An Url domain rule entry gets added to the table on creating a rule on flexconnect ACL." INDEX { cLReapUrlListName } ::= { cLReapUrlDomainListTable 1 } CLReapUrlDomainListEntry ::= SEQUENCE { cLReapUrlListName SnmpAdminString, cLReapUrlDomainRuleAction INTEGER, cLReapUrlRedirectServerIpv4Type InetAddressType, cLReapUrlRedirectServerIpv4 InetAddress, cLReapUrlRedirectServerIpv6Type InetAddressType, cLReapUrlRedirectServerIpv6 InetAddress, cLReapUrlDomainRuleRowStatus RowStatus, cLReapUrlFilterID Unsigned32 } cLReapUrlListName OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "This object specifies the URL name for the url domain rule." ::= { cLReapUrlDomainListEntry 1 } cLReapUrlDomainRuleAction OBJECT-TYPE SYNTAX INTEGER { deny(1), permit(2) } MAX-ACCESS read-only STATUS current DESCRIPTION "This object specifies the permission mode of url domain rule. This is set through the url domain list type in the acl." DEFVAL { deny } ::= { cLReapUrlDomainListEntry 2 } cLReapUrlRedirectServerIpv4Type OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the type of the source IP address of the ACL rule." ::= { cLReapUrlDomainListEntry 3 } cLReapUrlRedirectServerIpv4 OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the source IP address of the ACL rule." ::= { cLReapUrlDomainListEntry 4 } cLReapUrlRedirectServerIpv6Type OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the type of the source IP address of the ACL rule." ::= { cLReapUrlDomainListEntry 5 } cLReapUrlRedirectServerIpv6 OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the source IP address of the ACL rule." ::= { cLReapUrlDomainListEntry 6 } cLReapUrlDomainRuleRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This is the status column for this row and is used to create and delete specific instances of rows in this table." ::= { cLReapUrlDomainListEntry 7 } cLReapUrlFilterID OBJECT-TYPE SYNTAX Unsigned32(1..16) MAX-ACCESS read-only STATUS current DESCRIPTION "This object specifies the filter ID (an unique reference number) for urlfilter lists created." ::= { cLReapUrlDomainListEntry 8 } -- ******************************************************************* -- cLReapUrlDomainRulesTable -- ******************************************************************* cLReapUrlDomainRulesTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapUrlDomainRulesEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table represents url domain acl Rules(url based Access Control List entries) on the ACL with name cLReapUrlListName." ::= { ciscoLwappReapAclConfig 7 } cLReapUrlDomainRulesEntry OBJECT-TYPE SYNTAX CLReapUrlDomainRulesEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each Entry represents the attributes for cLReapUrlDomainListTable. An Url domain rule entry gets added to the table on creating a rule on flexconnect ACL." INDEX { cLReapUrlListName, cLReapUrlDomainRuleUrl } ::= { cLReapUrlDomainRulesTable 1 } CLReapUrlDomainRulesEntry ::= SEQUENCE { cLReapUrlDomainRuleUrl SnmpAdminString, cLReapUrlRowStatus RowStatus } cLReapUrlDomainRuleUrl OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..255)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "This object specifies the URL name for the url domain rule." ::= { cLReapUrlDomainRulesEntry 1 } cLReapUrlRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the row Status of the url table." ::= { cLReapUrlDomainRulesEntry 2 } -- ******************************************************************* -- cLReapEnhancedUrlDomainListTable -- ******************************************************************* cLReapEnhancedUrlDomainListTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapEnhancedUrlDomainListEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table represents enhanced URL domain ACLs(URL based Access Control List entries)." ::= { ciscoLwappReapAclConfig 8 } cLReapEnhancedUrlDomainListEntry OBJECT-TYPE SYNTAX CLReapEnhancedUrlDomainListEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each Entry represents the attributes for cLReapEnhancedUrlDomainListTable." INDEX { cLReapEnhancedUrlDomainListName } ::= { cLReapEnhancedUrlDomainListTable 1 } CLReapEnhancedUrlDomainListEntry ::= SEQUENCE { cLReapEnhancedUrlDomainListName SnmpAdminString, cLReapEnhancedUrlDomainListRowStatus RowStatus } cLReapEnhancedUrlDomainListName OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "This object specifies name for the enhanced URL domain ACL" ::= { cLReapEnhancedUrlDomainListEntry 1 } cLReapEnhancedUrlDomainListRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This is the status column for this row and is used to create and delete specific instances of rows in this table." ::= { cLReapEnhancedUrlDomainListEntry 2 } -- ******************************************************************* -- cLReapEnhancedUrlDomainRulesTable -- ******************************************************************* cLReapEnhancedUrlDomainRulesTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapEnhancedUrlDomainRulesEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table represents URL domain rules on the ACL with name cLReapEnhancedUrlDomainListName." ::= { ciscoLwappReapAclConfig 9 } cLReapEnhancedUrlDomainRulesEntry OBJECT-TYPE SYNTAX CLReapEnhancedUrlDomainRulesEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each Entry represents the attributes for URL domain rule." INDEX { cLReapEnhancedUrlDomainListName, cLReapEnhancedUrlDomainRuleUrl } ::= { cLReapEnhancedUrlDomainRulesTable 1 } CLReapEnhancedUrlDomainRulesEntry ::= SEQUENCE { cLReapEnhancedUrlDomainRuleUrl SnmpAdminString, cLReapEnhancedUrlDomainRuleAction INTEGER, cLReapEnhancedUrlDomainRulePreference Unsigned32, cLReapEnhancedUrlDomainRuleRowStatus RowStatus } cLReapEnhancedUrlDomainRuleUrl OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..255)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "This object specifies the URL name for the URL domain rule." ::= { cLReapEnhancedUrlDomainRulesEntry 1 } cLReapEnhancedUrlDomainRuleAction OBJECT-TYPE SYNTAX INTEGER { deny(1), permit(2) } MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the permission mode of url domain rule. A value of 'deny' specifies client traffic matches this rule will be blocked. A value of 'permit' specifies client traffic matches this rule will be allowed to pass through." ::= { cLReapEnhancedUrlDomainRulesEntry 2 } cLReapEnhancedUrlDomainRulePreference OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the preference of the URL domain rule." ::= { cLReapEnhancedUrlDomainRulesEntry 3 } cLReapEnhancedUrlDomainRuleRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This is the status column for this row and is used to create and delete specific instances of rows in this table." ::= { cLReapEnhancedUrlDomainRulesEntry 4 } -- ******************************************************************* -- cLReapAclTable -- ******************************************************************* cLReapAclTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapAclEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table represents REAP ACLs (access control lists) on the switch." ::= { ciscoLwappReapAclConfig 1 } cLReapAclEntry OBJECT-TYPE SYNTAX CLReapAclEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry represents the attributes for clReapAclTable. An entry gets added to the table on creating a flexconnect ACL." INDEX { cLReapAclName } ::= { cLReapAclTable 1 } CLReapAclEntry ::= SEQUENCE { cLReapAclName SnmpAdminString, cLReapAclApplyMode INTEGER, cLReapAclRowStatus RowStatus, cLReapAclUrlDomainListType INTEGER } cLReapAclName OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (1..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "This object represents name of the REAP access control list." ::= { cLReapAclEntry 1 } cLReapAclApplyMode OBJECT-TYPE SYNTAX INTEGER { notapplied(0), applied(1) } MAX-ACCESS read-only STATUS current DESCRIPTION "This object specifies the apply mode of the ACL on the switch. Mode value 'applied' means the ACL has been applied on the switch. Mode value 'notapplied' means the ACL not applied on the switch." ::= { cLReapAclEntry 2 } cLReapAclRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the row Status of the ACL." ::= { cLReapAclEntry 3 } cLReapAclUrlDomainListType OBJECT-TYPE SYNTAX INTEGER { blackList(1), whiteList(2) } MAX-ACCESS read-create STATUS deprecated DESCRIPTION "This object specifies the List type for all the urls being confiured on the acl. blackList indicates, access to all the urls configured will be denied and whiteList indicates permit. Default value is blackList." DEFVAL { blackList } ::= { cLReapAclEntry 4 } -- ******************************************************************* -- cLReapAclRuleTable -- ******************************************************************* cLReapAclRuleTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapAclRuleEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table represents ACL Rules(access control list entries) on the ACL with name cLReapAclName." ::= { ciscoLwappReapAclConfig 2 } cLReapAclRuleEntry OBJECT-TYPE SYNTAX CLReapAclRuleEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry represents the attributes for clReapAclRuleTable. An entry gets added to the table on creating a rule on flexconnect ACL." INDEX { cLReapAclName, cLReapAclRuleIndex } ::= { cLReapAclRuleTable 1 } CLReapAclRuleEntry ::= SEQUENCE { cLReapAclRuleIndex Unsigned32, cLReapAclRuleAction INTEGER, cLReapAclRuleSourceIpAddressType InetAddressType, cLReapAclRuleSourceIpAddress InetAddress, cLReapAclRuleSourceIpNetmaskType InetAddressType, cLReapAclRuleSourceIpNetmask InetAddress, cLReapAclRuleDestinationIpAddressType InetAddressType, cLReapAclRuleDestinationIpAddress InetAddress, cLReapAclRuleDestinationIpNetmaskType InetAddressType, cLReapAclRuleDestinationIpNetmask InetAddress, cLReapAclRuleProtocol Unsigned32, cLReapAclRuleStartSourcePort Unsigned32, cLReapAclRuleEndSourcePort Unsigned32, cLReapAclRuleStartDestinationPort Unsigned32, cLReapAclRuleEndDestinationPort Unsigned32, cLReapAclRuleDscp Unsigned32, cLReapAclNewRuleIndex Unsigned32, cLReapAclRuleRowStatus RowStatus } cLReapAclRuleIndex OBJECT-TYPE SYNTAX Unsigned32 (1..64) MAX-ACCESS not-accessible STATUS current DESCRIPTION "This object represents index of the ACL rule. This can be updated to reset the sequence of the rules of an ACL." ::= { cLReapAclRuleEntry 1 } cLReapAclRuleAction OBJECT-TYPE SYNTAX INTEGER { deny(0), permit(1) } MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies permission mode of the rule. A value of 'deny' specifies client traffic matches this rule will be blocked. A value of 'permit' specifies client traffic matches this rule will be allowed to pass through." DEFVAL { deny } ::= { cLReapAclRuleEntry 2 } cLReapAclRuleSourceIpAddressType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies source IP address type of the ACL rule. The value is limited to ipv4 only." ::= { cLReapAclRuleEntry 3 } cLReapAclRuleSourceIpAddress OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS read-create STATUS current DESCRIPTION "The object specifies source IP address of the ACL rule. It cab be any ipv4 source address. A value 0 implies any sourse address." ::= { cLReapAclRuleEntry 4 } cLReapAclRuleSourceIpNetmaskType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies source IP netmask type of the ACL rule. The value is limited to ipv4 only." ::= { cLReapAclRuleEntry 5 } cLReapAclRuleSourceIpNetmask OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies source IP netmask of the ACL rule. A value '0' implies any source mask." ::= { cLReapAclRuleEntry 6 } cLReapAclRuleDestinationIpAddressType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies destination IP address type of the ACL rule. The value is limited to ipv4 only." ::= { cLReapAclRuleEntry 7 } cLReapAclRuleDestinationIpAddress OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS read-create STATUS current DESCRIPTION "The object specifies destination IP address of the ACL rule. It cab be any ipv4 source address. A value '0' implies any destination address." ::= { cLReapAclRuleEntry 8 } cLReapAclRuleDestinationIpNetmaskType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies destination IP netmask type of the ACL rule. The value is limited to ipv4 only." ::= { cLReapAclRuleEntry 9 } cLReapAclRuleDestinationIpNetmask OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies destination IP netmask of the ACL rule. A value '0' implies any destination mask." ::= { cLReapAclRuleEntry 10 } cLReapAclRuleProtocol OBJECT-TYPE SYNTAX Unsigned32 (0..256) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies protocol of the packet. It can be either of the pre specified protocols like TCP, UDP, ICMP, ESP, AH, GRE, IP, Ethernet Over IP, OSPF or any number between 0 and 255. A value 256 implies that this rule applies to 'Any' protocol." DEFVAL { 256 } ::= { cLReapAclRuleEntry 11 } cLReapAclRuleStartSourcePort OBJECT-TYPE SYNTAX Unsigned32 (0..65536) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies source port of the packet. It can be either of the pre specified ports like HTTP, HTTPS, Telnet, RADIUS etc or any number between 0 and 65535. A value 65536 implies that this rule applies to 'Any' source port. This value can be set only if the protocol is set to TCP or UDP. Otherwise the value is set to Any(65536)." DEFVAL { 0 } ::= { cLReapAclRuleEntry 12 } cLReapAclRuleEndSourcePort OBJECT-TYPE SYNTAX Unsigned32 (0..65536) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies source port of the packet. It can be either of the pre specified ports like HTTP, HTTPS, Telnet, RADIUS etc or any number between 0 and 65535. A value 65536 implies that this rule applies to 'Any' source port. This value can be set only if the protocol is set to TCP or UDP. Otherwise the value is set to Any(65536)." DEFVAL { 65535 } ::= { cLReapAclRuleEntry 13 } cLReapAclRuleStartDestinationPort OBJECT-TYPE SYNTAX Unsigned32 (0..65536) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies destination port of the packet. It can be either of the pre specified ports like HTTP, HTTPS, Telnet, RADIUS etc or any number between 0 and 65535. A value 65536 implies that this rule applies to 'Any' destination port. This value can be set only if the protocol is set to TCP or UDP. Otherwise the value is set to Any(65536)." DEFVAL { 0 } ::= { cLReapAclRuleEntry 14 } cLReapAclRuleEndDestinationPort OBJECT-TYPE SYNTAX Unsigned32 (0..65536) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies destination port of the packet. It can be either of the pre specified ports like HTTP, HTTPS, Telnet, RADIUS etc or any number between 0 and 65535. A value 65536 implies that this rule applies to 'Any' destination port. This value can be set only if the protocol is set to TCP or UDP. Otherwise the value is set to Any(65536)." DEFVAL { 65535 } ::= { cLReapAclRuleEntry 15 } cLReapAclRuleDscp OBJECT-TYPE SYNTAX Unsigned32 (0..256) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies DSCP value of the rule. A value 256 implies 'Any'." DEFVAL { 256 } ::= { cLReapAclRuleEntry 16 } cLReapAclNewRuleIndex OBJECT-TYPE SYNTAX Unsigned32 (1..64) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies new index of the ACL rule. This attribute should be updated if the requirement is to reset the sequence of the rules of an ACL. A read on this will yield the same value as cLReapAclRuleIndex." ::= { cLReapAclRuleEntry 17 } cLReapAclRuleRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies row status of the ACL rule." ::= { cLReapAclRuleEntry 18 } -- ******************************************************************* -- cLReapIpv6AclTable -- ******************************************************************* cLReapIpv6AclTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapIpv6AclEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table listing ACLs (Access Control Lists) on the device." ::= { ciscoLwappReapIpv6AclConfig 1 } cLReapIpv6AclEntry OBJECT-TYPE SYNTAX CLReapIpv6AclEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry in this table provides information about one ACL of the controller." INDEX { cLReapIpv6AclName } ::= { cLReapIpv6AclTable 1 } CLReapIpv6AclEntry ::= SEQUENCE { cLReapIpv6AclName SnmpAdminString, cLReapIpv6AclApplyMode INTEGER, cLReapIpv6AclRowStatus RowStatus } cLReapIpv6AclName OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (1..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "This object represents name of the Access Control List." ::= { cLReapIpv6AclEntry 1 } cLReapIpv6AclApplyMode OBJECT-TYPE SYNTAX INTEGER { notapplied(1), applied(2) } MAX-ACCESS read-only STATUS current DESCRIPTION "This object represents whether IPv6 ACL is applied or not. A value of notapplied (1) indicates that, ACL has not been applied on the device. A value of applied (2) indicates that, ACL has been applied on the device." ::= { cLReapIpv6AclEntry 2 } cLReapIpv6AclRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This is the status column for this row and is used to create and delete specific instance of row in this table." ::= { cLReapIpv6AclEntry 3 } -- ******************************************************************* -- cLReapIpv6AclRuleTable -- ******************************************************************* cLReapIpv6AclRuleTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapIpv6AclRuleEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table represents the ACL rules (Access Control List Entries)." ::= { ciscoLwappReapIpv6AclConfig 2 } cLReapIpv6AclRuleEntry OBJECT-TYPE SYNTAX CLReapIpv6AclRuleEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry in this table provides information about one ACL rule of the controller." INDEX { cLReapIpv6AclName, cLReapIpv6AclRuleIndex } ::= { cLReapIpv6AclRuleTable 1 } CLReapIpv6AclRuleEntry ::= SEQUENCE { cLReapIpv6AclRuleIndex Unsigned32, cLReapIpv6AclRuleAction INTEGER, cLReapIpv6AclRuleSourceAddressType InetAddressType, cLReapIpv6AclRuleSourceAddress InetAddress, cLReapIpv6AclRuleSourcePrefixLength InetAddressPrefixLength, cLReapIpv6AclRuleDestinationAddressType InetAddressType, cLReapIpv6AclRuleDestinationAddress InetAddress, cLReapIpv6AclRuleDestinationPrefixLength InetAddressPrefixLength, cLReapIpv6AclRuleProtocol Unsigned32, cLReapIpv6AclRuleStartSourcePort InetPortNumber, cLReapIpv6AclRuleEndSourcePort InetPortNumber, cLReapIpv6AclRuleStartDestinationPort InetPortNumber, cLReapIpv6AclRuleEndDestinationPort InetPortNumber, cLReapIpv6AclRuleDscp Unsigned32, cLReapIpv6AclNewRuleIndex Unsigned32, cLReapIpv6AclRuleRowStatus RowStatus } cLReapIpv6AclRuleIndex OBJECT-TYPE SYNTAX Unsigned32 (1..64) MAX-ACCESS not-accessible STATUS current DESCRIPTION "This object represents a unique ACL rule. This can be updated by using cLReapIpv6AclNewRuleIndex to reset the sequence of the rules of an ACL." ::= { cLReapIpv6AclRuleEntry 1 } cLReapIpv6AclRuleAction OBJECT-TYPE SYNTAX INTEGER { deny(1), permit(2) } MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the permission mode of a rule. A value of deny(1) indicates that, rule is to be denied. A value of permit(2) indicates that, rule is to be permit." DEFVAL { deny } ::= { cLReapIpv6AclRuleEntry 2 } cLReapIpv6AclRuleSourceAddressType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the type of the source IP address of the ACL rule." ::= { cLReapIpv6AclRuleEntry 3 } cLReapIpv6AclRuleSourceAddress OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the source IP address." ::= { cLReapIpv6AclRuleEntry 4 } cLReapIpv6AclRuleSourcePrefixLength OBJECT-TYPE SYNTAX InetAddressPrefixLength MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the prefix length for source IP address." ::= { cLReapIpv6AclRuleEntry 5 } cLReapIpv6AclRuleDestinationAddressType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the type of the destination IP address." ::= { cLReapIpv6AclRuleEntry 6 } cLReapIpv6AclRuleDestinationAddress OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the destination IP address." ::= { cLReapIpv6AclRuleEntry 7 } cLReapIpv6AclRuleDestinationPrefixLength OBJECT-TYPE SYNTAX InetAddressPrefixLength MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the prefix length for destination IP address." ::= { cLReapIpv6AclRuleEntry 8 } cLReapIpv6AclRuleProtocol OBJECT-TYPE SYNTAX Unsigned32 (0..256) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies protocol of the packet. It can be either of the pre specified protocols like TCP, UDP, ICMP, ESP, AH, GRE,IP, ethernet over IP, OSPF or any number between 0 and 255. A value 256 implies that this rule applies to 'Any' protocol." DEFVAL { 256 } ::= { cLReapIpv6AclRuleEntry 9 } cLReapIpv6AclRuleStartSourcePort OBJECT-TYPE SYNTAX InetPortNumber MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the start source port of the packet. It can be either of the pre specified ports like HTTP, HTTPS, Telnet, RADIUS etc or any number between 0 and 65535." DEFVAL { 0 } ::= { cLReapIpv6AclRuleEntry 10 } cLReapIpv6AclRuleEndSourcePort OBJECT-TYPE SYNTAX InetPortNumber MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the end Source Port of the packet. It can be either of the pre specified ports like HTTP, HTTPS, Telnet, RADIUS etc or any number between 0 and 65535." DEFVAL { 65535 } ::= { cLReapIpv6AclRuleEntry 11 } cLReapIpv6AclRuleStartDestinationPort OBJECT-TYPE SYNTAX InetPortNumber MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the start Destination Port of the packet. It can be either of the pre specified ports like HTTP, HTTPS, Telnet, RADIUS etc or any number between 0 and 65535." DEFVAL { 0 } ::= { cLReapIpv6AclRuleEntry 12 } cLReapIpv6AclRuleEndDestinationPort OBJECT-TYPE SYNTAX InetPortNumber MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the End Destination Port of the packet. It can be either of the pre specified ports like HTTP, HTTPS, Telnet, RADIUS etc or any number between 0 and 65535." DEFVAL { 65535 } ::= { cLReapIpv6AclRuleEntry 13 } cLReapIpv6AclRuleDscp OBJECT-TYPE SYNTAX Unsigned32 (0..256) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the DSCP value of the rule. A value 256 implies Any." DEFVAL { 256 } ::= { cLReapIpv6AclRuleEntry 14 } cLReapIpv6AclNewRuleIndex OBJECT-TYPE SYNTAX Unsigned32 (1..64) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the new Index of the ACL rule. This object should be updated if the requirement is to reset the sequence of the rules of an ACL." ::= { cLReapIpv6AclRuleEntry 15 } cLReapIpv6AclRuleRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This is the status column for this row and is used to create and delete specific instances of rows in this table." ::= { cLReapIpv6AclRuleEntry 16 } -- ******************************************************************* -- cLReapIpv6AclUrlDomainRuleTable -- ******************************************************************* cLReapIpv6AclUrlDomainRuleTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapIpv6AclUrlDomainRuleEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table represents url domain ACL Rules(url based Access Control List entries) on the ACL with name cLReapIpv6AclName." ::= { ciscoLwappReapIpv6AclConfig 3 } cLReapIpv6AclUrlDomainRuleEntry OBJECT-TYPE SYNTAX CLReapIpv6AclUrlDomainRuleEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each Entry represents the attributes for cLReapIpv6AclUrlDomainRuleTable. An Url Domain rule entry gets added to the table on creating a rule on flexconnect ACL." INDEX { cLReapIpv6AclName, cLReapIpv6AclUrlDomainRuleIndex } ::= { cLReapIpv6AclUrlDomainRuleTable 1 } CLReapIpv6AclUrlDomainRuleEntry ::= SEQUENCE { cLReapIpv6AclUrlDomainRuleIndex Unsigned32, cLReapIpv6AclUrlDomainRuleUrl SnmpAdminString, cLReapIpv6AclUrlDomainRuleAction INTEGER, cLReapIpv6AclUrlDomainRuleRowStatus RowStatus } cLReapIpv6AclUrlDomainRuleIndex OBJECT-TYPE SYNTAX Unsigned32 (1..20) MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the index of the Url domain Ipv6 ACL rule. It can be used to reset the sequence of the Url rules of an ACL." ::= { cLReapIpv6AclUrlDomainRuleEntry 1 } cLReapIpv6AclUrlDomainRuleUrl OBJECT-TYPE SYNTAX SnmpAdminString MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies the URL name for the url domain rule." ::= { cLReapIpv6AclUrlDomainRuleEntry 2 } cLReapIpv6AclUrlDomainRuleAction OBJECT-TYPE SYNTAX INTEGER { deny(1), permit(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies the permission mode of url domain rule. A value of 'deny(1)' specifies client traffic matches this rule will be blocked. A value of 'permit(2)' specifies client traffic matches this rule will be allowed to pass through." DEFVAL { deny } ::= { cLReapIpv6AclUrlDomainRuleEntry 3 } cLReapIpv6AclUrlDomainRuleRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This is the status column for this row and is used to create and delete specific instances of rows in this table." ::= { cLReapIpv6AclUrlDomainRuleEntry 4 } -- ******************************************************************* -- ciscoLwappReapGlobalConfig -- ******************************************************************* cLReapArpCaheEnabled OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies whether ARP cache feature is enabled for the flexconnect Access Points connected to the Wireless LAN Controller." ::= { ciscoLwappReapGlobalConfig 1 } -- ******************************************************************* -- ciscoLwappReapVlanIdNameMap -- ******************************************************************* cLReapVlanIdNameMapTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapVlanIdNameMapEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table defines the VLAN Id- Vlan Name mappings to be configured for the REAP identified by group/profile Name." ::= { ciscoLwappReapVlanConfig 1 } cLReapVlanIdNameMapEntry OBJECT-TYPE SYNTAX CLReapVlanIdNameMapEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry represents a conceptual row that corresponds to one VLAN name-Id mapping to be applied to the REAP identified by template name." INDEX { cLReapGroupVlanTemplateName, cLReapVlanName } ::= { cLReapVlanIdNameMapTable 1 } CLReapVlanIdNameMapEntry ::= SEQUENCE { cLReapVlanName SnmpAdminString, cLReapVlanMapId Unsigned32, cLReapVlanIdNameMapRowStatus RowStatus } cLReapVlanName OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "This object specifies the vlan name for the vlan name-id mapping." ::= { cLReapVlanIdNameMapEntry 1 } cLReapVlanMapId OBJECT-TYPE SYNTAX Unsigned32 (1..4095) MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies the VLAN ID for the particular template." ::= { cLReapVlanIdNameMapEntry 2 } cLReapVlanIdNameMapRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the status column for a conceptual row in this table." ::= { cLReapVlanIdNameMapEntry 3 } -- ******************************************************************* -- ciscoLwappReapVlanTemplate -- ******************************************************************* cLReapVlanTemplateTable OBJECT-TYPE SYNTAX SEQUENCE OF CLReapVlanTemplateEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "This table defines the template table configured for the REAP identified by template Name." ::= { ciscoLwappReapVlanConfig 2 } cLReapVlanTemplateEntry OBJECT-TYPE SYNTAX CLReapVlanTemplateEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each entry represents a conceptual row that corresponds to one VLAN name-Id mapping to be applied to the REAP identified by template name." INDEX { cLReapGroupVlanTemplateName } ::= { cLReapVlanTemplateTable 1 } CLReapVlanTemplateEntry ::= SEQUENCE { cLReapVlanTemplateDescription SnmpAdminString, cLReapVlanTemplateRowStatus RowStatus } cLReapVlanTemplateDescription OBJECT-TYPE SYNTAX SnmpAdminString (SIZE (0..32)) MAX-ACCESS read-write STATUS current DESCRIPTION "This object specifies the description of the template." ::= { cLReapVlanTemplateEntry 1 } cLReapVlanTemplateRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This object specifies the status column for a conceptual row in this table." ::= { cLReapVlanTemplateEntry 2 } -- ******************************************************************** -- * Compliance statements -- ******************************************************************** ciscoLwappReapMIBCompliances OBJECT IDENTIFIER ::= { ciscoLwappReapMIBConform 1 } ciscoLwappReapMIBGroups OBJECT IDENTIFIER ::= { ciscoLwappReapMIBConform 2 } ciscoLwappReapMIBCompliance MODULE-COMPLIANCE STATUS deprecated DESCRIPTION "The compliance statement for the SNMP entities that implement the ciscoLwappReapMIB module." MODULE -- this module MANDATORY-GROUPS { ciscoLwappReapWlanConfigGroup, ciscoLwappReapApConfigGroup } ::= { ciscoLwappReapMIBCompliances 1 } ciscoLwappReapMIBComplianceRev1 MODULE-COMPLIANCE STATUS deprecated DESCRIPTION "The compliance statement for the SNMP entities that implement the ciscoLwappReapMIB module." MODULE -- this module MANDATORY-GROUPS { ciscoLwappReapWlanConfigGroup, ciscoLwappReapApConfigGroup, ciscoLwappReapGroupConfigGroup } ::= { ciscoLwappReapMIBCompliances 2 } ciscoLwappReapMIBComplianceRev2 MODULE-COMPLIANCE STATUS deprecated DESCRIPTION "The compliance statement for the SNMP entities that implement the ciscoLwappReapMIB module." MODULE -- this module MANDATORY-GROUPS { ciscoLwappReapWlanConfigGroup, ciscoLwappReapApConfigGroup, ciscoLwappReapGroupConfigGroup } ::= { ciscoLwappReapMIBCompliances 3 } ciscoLwappReapMIBComplianceRev3 MODULE-COMPLIANCE STATUS deprecated DESCRIPTION "The compliance statement for the SNMP entities that implement the ciscoLwappReapMIB module." MODULE -- this module MANDATORY-GROUPS { ciscoLwappReapWlanConfigGroup, ciscoLwappReapApConfigGroup, ciscoLwappReapGroupConfigGroup, ciscoLwappReapGroupConfigRadiusGroup, ciscoLwappReapGroupConfigUserAuthGroup, ciscoLwappReapApConfigGroupHomeAp } ::= { ciscoLwappReapMIBCompliances 4 } ciscoLwappReapMIBComplianceRev4 MODULE-COMPLIANCE STATUS deprecated DESCRIPTION "The compliance statement for the SNMP entities that implement the ciscoLwappReapMIB module." MODULE -- this module MANDATORY-GROUPS { ciscoLwappReapWlanConfigGroup, ciscoLwappReapApConfigGroup, ciscoLwappReapGroupConfigGroup, ciscoLwappReapGroupConfigUserAuthGroup, ciscoLwappReapApConfigGroupHomeAp, ciscoLwappReapGroupConfigRadiusGroup1 } ::= { ciscoLwappReapMIBCompliances 5 } ciscoLwappReapMIBComplianceRev5 MODULE-COMPLIANCE STATUS deprecated DESCRIPTION "The compliance statement for the SNMP entities that implement the ciscoLwappReapMIB module." MODULE -- this module MANDATORY-GROUPS { ciscoLwappReapWlanConfigGroup, ciscoLwappReapApConfigGroup, ciscoLwappReapGroupConfigGroup, ciscoLwappReapGroupConfigUserAuthGroup, ciscoLwappReapApConfigGroupHomeAp, ciscoLwappReapGroupConfigRadiusGroup1, ciscoLwappReapWlanConfigGroupSup1 } ::= { ciscoLwappReapMIBCompliances 6 } ciscoLwappReapMIBComplianceRev6 MODULE-COMPLIANCE STATUS deprecated DESCRIPTION "The compliance statement for the SNMP entities that implement the ciscoLwappReapMIB module." MODULE -- this module MANDATORY-GROUPS { ciscoLwappReapWlanConfigGroup, ciscoLwappReapApConfigGroup, ciscoLwappReapGroupConfigGroup, ciscoLwappReapGroupConfigUserAuthGroup, ciscoLwappReapApConfigGroupHomeAp, ciscoLwappReapGroupConfigRadiusGroup1, ciscoLwappReapWlanConfigGroupSup1, ciscoLwappReapAclConfigGroup } ::= { ciscoLwappReapMIBCompliances 7 } ciscoLwappReapMIBComplianceRev7 MODULE-COMPLIANCE STATUS deprecated DESCRIPTION "The compliance statement for the SNMP entities that implement the ciscoLwappReapMIB module." MODULE -- this module MANDATORY-GROUPS { ciscoLwappReapWlanConfigGroup, ciscoLwappReapApConfigGroup, ciscoLwappReapGroupConfigGroup, ciscoLwappReapGroupConfigUserAuthGroup, ciscoLwappReapApConfigGroupHomeAp, ciscoLwappReapGroupConfigRadiusGroup1, ciscoLwappReapWlanConfigGroupSup1, ciscoLwappReapAclConfigGroupRev1, ciscoLwappReapIpv6AclConfigGroup } ::= { ciscoLwappReapMIBCompliances 8 } ciscoLwappReapMIBComplianceRev8 MODULE-COMPLIANCE STATUS current DESCRIPTION "The compliance statement for the SNMP entities that implement the ciscoLwappReapMIB module." MODULE -- this module MANDATORY-GROUPS { ciscoLwappReapWlanConfigGroup, ciscoLwappReapApConfigGroup, ciscoLwappReapGroupConfigGroup, ciscoLwappReapGroupConfigUserAuthGroup, ciscoLwappReapApConfigGroupHomeAp, ciscoLwappReapGroupConfigRadiusGroup1, ciscoLwappReapWlanConfigGroupSup1, ciscoLwappReapAclConfigGroupRev1, ciscoLwappReapIpv6AclConfigGroup, ciscoLwappReapVlanConfigGroup, ciscoLwappReapUrlDomainConfigGroup, ciscoLwappReapCtsSxpConfigGroup } ::= { ciscoLwappReapMIBCompliances 9 } ciscoLwappReapMIBComplianceRev9 MODULE-COMPLIANCE STATUS current DESCRIPTION "The compliance statement for the SNMP entities that implement the ciscoLwappReapMIB module. This deprecates ciscoLwappReapMIBComplianceRev8." MODULE -- this module MANDATORY-GROUPS { ciscoLwappReapWlanConfigGroup, ciscoLwappReapApConfigGroup, ciscoLwappReapGroupConfigGroupRev2, ciscoLwappReapGroupConfigUserAuthGroup, ciscoLwappReapApConfigGroupHomeAp, ciscoLwappReapGroupConfigRadiusGroup1, ciscoLwappReapWlanConfigGroupSup1, ciscoLwappReapAclConfigGroupRev1, ciscoLwappReapIpv6AclConfigGroup, ciscoLwappReapVlanConfigGroup, ciscoLwappReapUrlDomainConfigGroup, ciscoLwappReapCtsSxpConfigGroup } ::= { ciscoLwappReapMIBCompliances 10 } -- ******************************************************************** -- * Units of conformance -- ******************************************************************** ciscoLwappReapWlanConfigGroup OBJECT-GROUP OBJECTS { cLReapWlanEnLocalSwitching, cLReapWlanVlanCentralSwitching, cLReapWlanDhcpCentral, cLReapWlanDhcpOverrideDNS, cLReapWlanNatPatEnabled, cLReapWlanAssocCentral } STATUS current DESCRIPTION "This collection of objects represent the WLAN configuration to be passed to the REAP." ::= { ciscoLwappReapMIBGroups 1 } ciscoLwappReapApConfigGroup OBJECT-GROUP OBJECTS { cLReapApNativeVlanId, cLReapApVlanId, cLReapApVlanEnable, cLReapInstallMappingRadioBackhaul, cLReapApResilientMode, cLReapApNativeVlanLevel, cLReapApVlanInheritance, cLReapApVlanRowStatus, cLReapApVlanUsedBySecEthInterface, cLReapIngressAcl, cLReapEgressAcl, cLReapApVlanIdAclRowStatus, cLReapVlanIdAclType, cLReapApWebAuthAcl, cLReapApWebAuthAclRowStatus, cLReapWebPolicyAclRowStatus, cLReapApLocalSplitAcl, cLReapApLocalSplitAclRowStatus, cLReapApDhcpCentral, cLReapApDhcpOverrideDNS, cLReapApNatPatEnabled, cLReapApDhcpRowStatus, cLReapApInheritance, cLReapApL2Acl, cLReapApL2AclRowStatus, cLReapArpCaheEnabled } STATUS current DESCRIPTION "This collection of objects represent the information needed by the REAP AP to locally switch the client data packets. The collection also includes the VLAN configuration on the REAP." ::= { ciscoLwappReapMIBGroups 2 } ciscoLwappReapGroupConfigGroup OBJECT-GROUP OBJECTS { cLReapGroupPrimaryRadiusIndex, cLReapGroupSecondaryRadiusIndex, cLReapGroupStorageType, cLReapGroupRowStatus, cLReapGroupApStorageType, cLReapGroupApRowStatus, cLReapGroupApPnPConflict, cLReapGroupEfficientApUpgradeEnable, cLReapGroupApUpgradeStart, cLReapGroupSlaveMaxRetryCount, cLReapGroupPrimaryRadiusServerType, cLReapGroupPrimaryRadiusServerAddress, cLReapGroupPrimaryRadiusServerPort, cLReapGroupPrimaryServerSecret, cLReapGroupSecRadiusServerType, cLReapGroupSecRadiusServerAddress, cLReapGroupSecRadiusServerPort, cLReapGroupSecServerSecret, cLReapGroupRadiusPeapEnable, cLReapGroupRadiusEapTlsEnable, cLReapGroupCertificateEapTlsEnable, cLReapGroupNativeVlanId, cLReapGroupVlanEnable, cLReapGroupOverrideVlanEnable, cLReapGroupHttpProxyIpType, cLReapGroupHttpProxyIp, cLReapGroupHttpProxyPort, cLReapGroupVlanTemplateName, cLReapGroupApEntryType, cLReapGroupIngressAcl, cLReapGroupEgressAcl, cLReapGroupVlanAclRowStatus, cLReapGroupVlanOrder, cLReapGroupWebAuthAcl, cLReapGroupAclRowStatus, cLReapGroupWebAuthIpv6Acl, cLReapGroupWebPolicyAclRowStatus, cLReapGroupWebPolicyAclType, cLReapGroupWebPolicyAclCentWebAuth, cLReapGroupLocalSplitAcl, cLReapGroupLocalSplitAclRowStatus, cLReapGroupDhcpCentral, cLReapGroupDhcpOverrideDNS, cLReapGroupNatPatEnabled, cLReapGroupDhcpRowStatus, cLReapGroupWlanVlanId, cLReapGroupVlanRowStatus, cLReapGroupAVCFlexProfileName, cLReapGroupNbarStatsVisibilityEnable, cLReapGroupAVCFlexRowStatus, cLReapMasterApModel, cLReapMasterApManual, cLReapMasterApRowStatus, cLReapL2AclApplyMode, cLReapL2AclRowStatus, cLReapL2AclRuleAction, cLReapL2AclRuleEthertype, cLReapL2AclRuleEthertypeMask, cLReapL2AclRuleDirection, cLReapL2AclNewRuleIndex, cLReapL2AclRuleRowStatus, cLReapGroupPrimaryRadiusIndex, cLReapGroupSecondaryRadiusIndex, cLReapGroupStorageType, cLReapGroupEfficientApUpgradeEnable, cLReapGroupApUpgradeStart, cLReapGroupEfficientApJoinEnable } STATUS deprecated DESCRIPTION "This collection of objects represent the information needed by the REAP APs to configure REAP groups." ::= { ciscoLwappReapMIBGroups 3 } ciscoLwappReapGroupConfigRadiusGroup OBJECT-GROUP OBJECTS { cLReapGroupRadiusPacTimeout, cLReapGroupRadiusAuthorityId, cLReapGroupRadiusAuthorityInfo, cLReapGroupRadiusServerKey, cLReapGroupRadiusIgnoreKey, cLReapGroupRadiusEnable, cLReapGroupRadiusLeapEnable, cLReapGroupRadiusEapFastEnable } STATUS deprecated DESCRIPTION "This collection of objects represent the RADIUS information needed by the REAP APs in a REAP group." ::= { ciscoLwappReapMIBGroups 4 } ciscoLwappReapGroupConfigUserAuthGroup OBJECT-GROUP OBJECTS { cLReapGroupUserPassword, cLReapGroupUserStorageType, cLReapGroupUserRowStatus } STATUS current DESCRIPTION "This collection of objects represent the information needed for user authentication." ::= { ciscoLwappReapMIBGroups 5 } ciscoLwappReapApConfigGroupHomeAp OBJECT-GROUP OBJECTS { cLReapHomeApEnable, cLReapApLeastLatencyJoinEnable, cLReapWlanClientIpLearnEnable, cLReapHomeApLocalSsidReset } STATUS current DESCRIPTION "This supplemental collection of objects represents objects related to Home AP configuration for REAP AP." ::= { ciscoLwappReapMIBGroups 6 } ciscoLwappReapGroupConfigRadiusGroup1 OBJECT-GROUP OBJECTS { cLReapGroupRadiusAuthorityId, cLReapGroupRadiusAuthorityInfo, cLReapGroupRadiusServerKey, cLReapGroupRadiusIgnoreKey, cLReapGroupRadiusEnable, cLReapGroupRadiusLeapEnable, cLReapGroupRadiusEapFastEnable, cLReapGroupRadiusPacTimeoutCtrl } STATUS current DESCRIPTION "This collection of objects represent the RADIUS information needed by the REAP APs in a REAP group." ::= { ciscoLwappReapMIBGroups 7 } ciscoLwappReapWlanConfigGroupSup1 OBJECT-GROUP OBJECTS { cLReapWlanApAuth } STATUS current DESCRIPTION "This collection of objects represent additional WLAN configuration to be passed to the REAP." ::= { ciscoLwappReapMIBGroups 8 } ciscoLwappReapAclConfigGroup OBJECT-GROUP OBJECTS { cLReapAclName, cLReapAclApplyMode, cLReapAclRowStatus, cLReapAclRuleIndex, cLReapAclRuleAction, cLReapAclRuleSourceIpAddressType, cLReapAclRuleSourceIpAddress, cLReapAclRuleSourceIpNetmaskType, cLReapAclRuleSourceIpNetmask, cLReapAclRuleDestinationIpAddressType, cLReapAclRuleDestinationIpAddress, cLReapAclRuleDestinationIpNetmaskType, cLReapAclRuleDestinationIpNetmask, cLReapAclRuleProtocol, cLReapAclRuleStartSourcePort, cLReapAclRuleEndSourcePort, cLReapAclRuleStartDestinationPort, cLReapAclRuleEndDestinationPort, cLReapAclRuleDscp, cLReapAclNewRuleIndex, cLReapAclRuleRowStatus } STATUS deprecated DESCRIPTION "This collection of objects represent the information needed for flexconnect ACLs." ::= { ciscoLwappReapMIBGroups 9 } ciscoLwappReapAclConfigGroupRev1 OBJECT-GROUP OBJECTS { cLReapAclName, cLReapAclApplyMode, cLReapAclRowStatus, cLReapAclRuleIndex, cLReapAclRuleAction, cLReapAclRuleSourceIpAddressType, cLReapAclRuleSourceIpAddress, cLReapAclRuleSourceIpNetmaskType, cLReapAclRuleSourceIpNetmask, cLReapAclRuleDestinationIpAddressType, cLReapAclRuleDestinationIpAddress, cLReapAclRuleDestinationIpNetmaskType, cLReapAclRuleDestinationIpNetmask, cLReapAclRuleProtocol, cLReapAclRuleStartSourcePort, cLReapAclRuleEndSourcePort, cLReapAclRuleStartDestinationPort, cLReapAclRuleEndDestinationPort, cLReapAclRuleDscp, cLReapAclNewRuleIndex, cLReapAclRuleRowStatus, cLReapAclUrlDomainRuleIndex, cLReapAclUrlDomainRuleUrl, cLReapAclUrlDomainRuleAction, cLReapAclUrlDomainRuleRowStatus } STATUS current DESCRIPTION "This collection of objects represent the information needed for flexconnect ACLs." ::= { ciscoLwappReapMIBGroups 10 } ciscoLwappReapIpv6AclConfigGroup OBJECT-GROUP OBJECTS { cLReapIpv6AclName, cLReapIpv6AclApplyMode, cLReapIpv6AclRowStatus, cLReapIpv6AclRuleIndex, cLReapIpv6AclRuleAction, cLReapIpv6AclRuleSourceAddressType, cLReapIpv6AclRuleSourceAddress, cLReapIpv6AclRuleSourcePrefixLength, cLReapIpv6AclRuleDestinationAddressType, cLReapIpv6AclRuleDestinationAddress, cLReapIpv6AclRuleDestinationPrefixLength, cLReapIpv6AclRuleProtocol, cLReapIpv6AclRuleStartSourcePort, cLReapIpv6AclRuleEndSourcePort, cLReapIpv6AclRuleStartDestinationPort, cLReapIpv6AclRuleEndDestinationPort, cLReapIpv6AclRuleDscp, cLReapIpv6AclNewRuleIndex, cLReapIpv6AclRuleRowStatus, cLReapIpv6AclUrlDomainRuleIndex, cLReapIpv6AclUrlDomainRuleUrl, cLReapIpv6AclUrlDomainRuleAction, cLReapIpv6AclUrlDomainRuleRowStatus } STATUS current DESCRIPTION "This collection of objects represent the information needed for flexconnect ACLs." ::= { ciscoLwappReapMIBGroups 11 } ciscoLwappReapVlanConfigGroup OBJECT-GROUP OBJECTS { cLReapGroupVlanIdentifier, cLReapGroupAcl, cLReapGroupVlanNameAclType, cLReapGroupVlanNameAclRowStatus, cLReapVlanMapId, cLReapVlanIdNameMapRowStatus, cLReapVlanTemplateDescription, cLReapVlanTemplateRowStatus, cLReapGroupAclIn, cLReapGroupAclOut } STATUS current DESCRIPTION "This collection of objects represent the information needed for flexconect acls." ::= { ciscoLwappReapMIBGroups 12 } ciscoLwappReapUrlDomainConfigGroup OBJECT-GROUP OBJECTS { cLReapUrlDomainRuleAction, cLReapUrlRedirectServerIpv4Type, cLReapUrlRedirectServerIpv4, cLReapUrlRedirectServerIpv6Type, cLReapUrlRedirectServerIpv6, cLReapUrlDomainRuleRowStatus, cLReapUrlFilterID, cLReapUrlRowStatus, cLReapEnhancedUrlDomainListRowStatus, cLReapEnhancedUrlDomainRuleAction, cLReapEnhancedUrlDomainRulePreference, cLReapEnhancedUrlDomainRuleRowStatus } STATUS current DESCRIPTION "This collection of objects represent the information needed for urlfilter acls." ::= { ciscoLwappReapMIBGroups 13 } ciscoLwappReapCtsSxpConfigGroup OBJECT-GROUP OBJECTS { cLReapCtsSxpDefaultPassword, cLReapCtsSxpState, cLReapCtsSxpListenerMinHoldTime, cLReapCtsSxpListenerMaxHoldTime, cLReapCtsSxpReconcilePeriod, cLReapCtsSxpRetryPeriod, cLReapCtsSxpSpeakerMinHoldTime, cLReapCtsSxpRowStatus, cLReapCtsSxpMode, cLReapCtsSxpPeerPassword, cLReapCtsSxpPeerRowStatus } STATUS current DESCRIPTION "This collection of objects represent the information needed for flexconect acls." ::= { ciscoLwappReapMIBGroups 14 } ciscoLwappReapGroupConfigGroupRev2 OBJECT-GROUP OBJECTS { cLReapGroupPrimaryRadiusIndex, cLReapGroupSecondaryRadiusIndex, cLReapGroupStorageType, cLReapGroupRowStatus, cLReapGroupApStorageType, cLReapGroupApRowStatus, cLReapGroupApPnPConflict, cLReapGroupEfficientApUpgradeEnable, cLReapGroupApUpgradeStart, cLReapGroupSlaveMaxRetryCount, cLReapGroupPrimaryRadiusServerType, cLReapGroupPrimaryRadiusServerAddress, cLReapGroupPrimaryRadiusServerPort, cLReapGroupPrimaryServerSecret, cLReapGroupSecRadiusServerType, cLReapGroupSecRadiusServerAddress, cLReapGroupSecRadiusServerPort, cLReapGroupSecServerSecret, cLReapGroupRadiusPeapEnable, cLReapGroupRadiusEapTlsEnable, cLReapGroupCertificateEapTlsEnable, cLReapGroupNativeVlanId, cLReapGroupVlanEnable, cLReapGroupOverrideVlanEnable, cLReapGroupHttpProxyIpType, cLReapGroupHttpProxyIp, cLReapGroupHttpProxyPort, cLReapGroupVlanTemplateName, cLReapGroupApEntryType, cLReapGroupIngressAcl, cLReapGroupEgressAcl, cLReapGroupVlanAclRowStatus, cLReapGroupVlanOrder, cLReapGroupWebAuthAcl, cLReapGroupAclRowStatus, cLReapGroupWebAuthIpv6Acl, cLReapGroupWebPolicyAclRowStatus, cLReapGroupWebPolicyAclType, cLReapGroupWebPolicyAclCentWebAuth, cLReapGroupLocalSplitAcl, cLReapGroupLocalSplitAclRowStatus, cLReapGroupDhcpCentral, cLReapGroupDhcpOverrideDNS, cLReapGroupNatPatEnabled, cLReapGroupDhcpRowStatus, cLReapGroupWlanVlanId, cLReapGroupVlanRowStatus, cLReapGroupAVCFlexProfileName, cLReapGroupNbarStatsVisibilityEnable, cLReapGroupAVCFlexRowStatus, cLReapMasterApModel, cLReapMasterApManual, cLReapMasterApRowStatus, cLReapL2AclApplyMode, cLReapL2AclRowStatus, cLReapL2AclRuleAction, cLReapL2AclRuleEthertype, cLReapL2AclRuleEthertypeMask, cLReapL2AclRuleDirection, cLReapL2AclNewRuleIndex, cLReapL2AclRuleRowStatus, cLReapGroupEfficientApJoinEnable, cLReapGroupRadiusServerGroupName, cLReapGroupEapFastProfileName, cLReapGroupArpCacheEnabled, cLReapGroupHomeApEnable, cLReapGroupLeastLatencyJoinEnable, cLReapGroupHomeApLocalSsidReset, cLReapGroupInstallMappingRadioBackhaul, cLReapGroupResilientMode, cLReapGroupDescription, cLReapGroupFallbackRadioShutEnabled, cLReapIsHomeApEnable, cLReapCtsInlineTagging, cLReapCtsRolebasedEnforcement, cLReapCtsSxpAttachedProfileName, cLReapGroupAccountingRadiusServerGroupName, cLReapLocalRoaming, cLReapGroupMdnsFlexProfileName, cLReapIpOverlap, cLReapGroupDhcpBroadcastEnable } STATUS current DESCRIPTION "This collection of objects represent the information needed by the REAP APs to configure REAP groups. This deprecates ciscoLwappReapGroupConfigGroup" ::= { ciscoLwappReapMIBGroups 15 } END