Observium_CE/mibs/cisco/CISCO-LWAPP-WLAN-POLICY-MIB

2507 lines
99 KiB
Plaintext

-- *******************************************************************
-- CISCO-LWAPP-WLAN-POLICY-MIB.my
-- This MIB helps to manage the WLANs on the controller
-- April 2016, Ambika Prasad Mohanty
--
-- Copyright (c) 2017-2019, 2021, 2023 by Cisco Systems, Inc.
-- All rights reserved.
-- *******************************************************************
CISCO-LWAPP-WLAN-POLICY-MIB DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY,
OBJECT-TYPE,
Unsigned32,
IpAddress
FROM SNMPv2-SMI
MODULE-COMPLIANCE,
OBJECT-GROUP
FROM SNMPv2-CONF
TruthValue,
RowStatus
FROM SNMPv2-TC
SnmpAdminString
FROM SNMP-FRAMEWORK-MIB
ciscoMgmt
FROM CISCO-SMI;
ciscoCapwapWlanPolicyMIB MODULE-IDENTITY
LAST-UPDATED "202301230000Z"
ORGANIZATION "Cisco Systems Inc."
CONTACT-INFO
"Cisco Systems,
Customer Service
Postal: 170 West Tasman Drive
San Jose, CA 95134
USA
Tel: +1 800 553-NETS
E-mail: cs-wnbu-snmp@cisco.com"
DESCRIPTION
"This MIB is intended to be implemented on all those
devices operating as Central Controllers (CC) that
terminate the Light Weight Access Point Protocol
tunnel from Cisco Light-weight LWAPP Access Points.
This MIB helps to manage the WLANs on the controller.
The relationship between CC and the LWAPP APs
can be depicted as follows:
+......+ +......+ +......+ +......+
+ + + + + + + +
+ CC + + CC + + CC + + CC +
+ + + + + + + +
+......+ +......+ +......+ +......+
.. . . .
.. . . .
. . . . .
. . . . .
. . . . .
. . . . .
+......+ +......+ +......+ +......+ +......+
+ + + + + + + + + +
+ AP + + AP + + AP + + AP + + AP +
+ + + + + + + + + +
+......+ +......+ +......+ +......+ +......+
. . . .
. . . . .
. . . . .
. . . . .
. . . . .
+......+ +......+ +......+ +......+ +......+
+ + + + + + + + + +
+ MN + + MN + + MN + + MN + + MN +
+ + + + + + + + + +
+......+ +......+ +......+ +......+ +......+
The LWAPP tunnel exists between the controller and
the APs. The MNs communicate with the APs through
the protocol defined by the 802.11 standard.
LWAPP APs, upon bootup, discover and join one of the
controllers and the controller pushes the configuration,
that includes the WLAN parameters, to the LWAPP APs.
The APs then encapsulate all the 802.11 frames from
wireless clients inside LWAPP frames and forward
the LWAPP frames to the controller.
GLOSSARY
Access Point ( AP )
An entity that contains an 802.11 medium access
control ( MAC ) and physical layer ( PHY ) interface
and provides access to the distribution services via
the wireless medium for associated clients.
LWAPP APs encapsulate all the 802.11 frames in
LWAPP frames and sends it to the controller to which
it is logically connected to.
Central Controller ( CC )
The central entity that terminates the LWAPP protocol
tunnel from the LWAPP APs. Throughout this MIB,
this entity also referred to as 'controller'.
Light Weight Access Point Protocol ( LWAPP )
This is a generic protocol that defines the
communication between the Access Points and the
controllers.
Mobile Node ( MN )
A roaming 802.11 wireless device in a wireless
network associated with an access point.
Access Control List ( ACL )
A list of rules used to restrict the traffic reaching
an interface or the CPU or WLAN. Each ACL is an ordered
set of rules and actions. If a rule matches then the
action for that rule is applied to the packet.
802.1x
The IEEE ratified standard for enforcing port based
access control. This was originally intended for
use on wired LANs and later extended for use in
802.11 WLAN environments. This defines an
architecture with three main parts - a supplicant
(Ex. an 802.11 wireless client), an authenticator
(the AP) and an authentication server(a Radius
server). The authenticator passes messages back
and forth between the supplicant and the
authentication server to enable the supplicant
get authenticated to the network.
Temporal Key Integrity Protocol ( TKIP )
A security protocol defined to enhance the limitations
of WEP. Message Integrity Check and per-packet keying
on all WEP-encrypted frames are two significant
enhancements provided by TKIP to WEP.
Cisco Key Integrity Protocol ( CKIP )
A proprietary implementation similar to TKIP. CKIP
implements key permutation for protecting the CKIP
key against attacks. Other features of CKIP include
expansion of encryption key to 16 bytes of length for
key protection and MIC to ensure data integrity.
Wired Equivalent Privacy ( WEP )
A security method defined by 802.11. WEP uses a
symmetric key stream cipher called RC4 to encrypt the
data packets.
Wi-Fi Protected Access ( WPA )
Wi-Fi Protected Access (WPA and WPA2) are security
systems created in response to several serious
weaknesses found in Wired Equivalent Privacy (WEP).
WPA implements the majority of the IEEE 802.11i
standard, and was intended as an intermediate
measure to take the place of WEP while 802.11i was
prepared. WPA is designed to work with all wireless
network interface cards, but not necessarily with
first generation wireless access points.
WLAN Layer 2 Security
WLAN layer 2 (MAC) security defines the encryption and
authentication approaches such as 802.1x, WPA,
WPA2, CKIP and WEP.
Delivery Traffic Indication Map ( DTIM )
DTIM is measured in beacon intervals and is the time
period during which multicast/broadcast packets are
sent to clients. This helps client to go in Power Saving
mode and helps to save battery power.
Network Admission Control (NAC)
Cisco NAC uses the network infrastructure to enforce security
policy compliance on all devices that seek to access network
computing resources. With the Cisco NAC appliance, network
administrators can authenticate, authorize, evaluate, and
remediate wired, wireless, and remote users and their machines
prior to network access. The Cisco NAC appliance identifies
whether networked devices such as laptops, IP phones, or game
consoles are compliant with network security policies, and
repairs any vulnerabilities before it permits access to the
network.
Out of Band (OOB)
Out-of-band deployments require user traffic to traverse through
the NAC appliance only within authentication, posture
assessment, and remediation. When a user is authenticated and
passes all policy checks, the traffic is switched normally
through the network and bypasses the NAC server.
Band Select
The 2.4 GHz band is congested and clients have to contend with
numerous performance challenges. These consist of interference
from Bluetooth, microwave ovens, cordless phones, etc.;
protection mechanisms from 802.11b legacy clients; and
co-channel interference from other access points due to
802.11bg?s limit of three non-overlapping channels. Allowing
client Wi-Fi radios capable of dual band (2.4 and 5 GHz)
operation move to the less congested 5 GHz radios would improve
the overall performance of the network.
The Band Select algorithm is based on probe response suppression
on clients 2.4G radio. The feature is OFF by default and has to
be manually switched ON globally for a WLC. It can be optionally
over-ridden per-SSID to disallow it.
Network Access Identifier ( NAI )
In order to provide roaming services, it is necessary
to have a standardized method for identifying users.
NAI is actually the user identity submitted by the client
during network authentication.
KTS (Key Telephone System)
Key Telephone System is an alternative to a private branch
exchange (PBX) phone system. A KTS is equipped with several
buttons that allow a caller to directly select outgoing lines
or incoming calls, and use intercom and conference facilities.
NAS-ID (Network Access Server Identifier)
NAS-ID string is sent to Radius server by WLC (as radius client)
via authentication request, which can be used to classify users
to different groups then radius server can reply a customized
authentication response.
Quality of Service (QoS)
The quality of service (QoS) refers to several related
aspects of telephony and computer networks that allow the
transport of traffic with special requirements.
In particular, much technology has been developed to allow
computer networks to become as useful as telephone networks
for audio conversations, as well as supporting new applications
with even stricter service demands.
Virtual LAN (VLAN)
In computer networking, virtual local area network, virtual LAN
or VLAN is a concept of partitioning a physical network, so
that distinct broadcast domains are created. This is usually
achieved on switch or router devices.
Application Visibility and Control (AVC)
Application visibility and control (AVC) refers to the
capability of a network to identify which layer 7 applications
are producing the flows traversing the network.
This information is typically presented as packet or byte
statistics. Netflow is used to specify which information is
to be collected for each flow.
Multicast Domain Name System (mDNS)
This is the underlying protocol that is used for Service
advertisement and discovery in technologies like Bonjour,
Zero Touch Configuration
REFERENCE
[1] Wireless LAN Medium Access Control ( MAC ) and
Physical Layer ( PHY ) Specifications.
[2] Draft-obara-capwap-lwapp-00.txt, IETF Light
Weight Access Point Protocol
[3] IEEE 802.11 - The original 1 Mbit/s and 2 Mbit/s,
2.4 GHz RF and IR standard."
REVISION "202301230000Z"
DESCRIPTION
"Marked as deprecated:
- cLWlanPolicyNacType
- ciscoLwappWlanPolicyConfigGroupRev4
created a new revision ciscoLwappWlanPolicyConfigGroupRev5"
REVISION "202101200000Z"
DESCRIPTION
"Updated cLWlanPolicyIPv4AclName range"
REVISION "201911200000Z"
DESCRIPTION
"Added the following objects to cLWlanPolicyConfigTable.
- cLWlanPolicyNacType
- cLWlanPolicyARPProxy
- cLWlanPolicyIPv6proxy
- cLWlanPolicyMulticastFilter
- cLWlanPolicyQBSSLoad"
REVISION "201907230000Z"
DESCRIPTION
"Added the following tables.
- cLWlanPolicyCalendarProfileTable
Added the following objects to cLWlanPolicyConfigTable.
- cLWlanPolicyMdnsPolicy
- cLWlanPolicyHotspotAnqpServer"
REVISION "201903150000Z"
DESCRIPTION
"Added the following tables.
- cLWlanPolicyMonitorIPv4InConfigTable
- cLWlanPolicyMonitorIPv4OutConfigTable
- cLWlanPolicyMonitorIPv6InConfigTable
- cLWlanPolicyMonitorIPv6OutConfigTable
They configure the Netflow flow monitors used for AVC."
REVISION "201901180000Z"
DESCRIPTION
"Deprecated the following objects from cLWlanPolicyConfigTable.
- cLWlanPolicyNetflowIPv4InputMonitorName
- cLWlanPolicyNetflowIPv4OutputMonitorName
- cLWlanPolicyNetflowIPv6InputMonitorName
- cLWlanPolicyNetflowIPv6OutputMonitorName
Deprecated the following compliance group
- ciscoLwappWlanPolicyComplianceR01
Added the following compliance group
- ciscoLwappWlanPolicyComplianceR02."
REVISION "201808200000Z"
DESCRIPTION
"Added the following objects to cLWlanPolicyConfigTable.
- clWlanPolicyMobilityAnchor
- cLWlanPolicyBroadcastTagging
- cLWlanPolicyWgbVlan
- cLWlanPolicyReanchorClassmap
- cLWlanUmbrellaParamMapName
- cLWlanPolicyAccountingList
- cLWlanPolicyAaaPolicyName
- cLWlanPolicyQosCallSnooping
- cLWlanPolicyDefaultSgt
- cLWlanPolicyInlineTagging
- cLWlanPolicySgaclEnforcement
Addition of following new table
- cLWlanPolicyATFPolicyNameConfigTable
- cLWlanAaaPolicyConfigTable
deprecated the following compliance group
- ciscoLwappWlanPolicyCompliance
Added following compliance group
- ciscoLwappWlanPolicyComplianceR01."
REVISION "201803190000Z"
DESCRIPTION
"Initial version of this MIB module."
::= { ciscoMgmt 853 }
ciscoLwappWlanPolicyMIBNotifs OBJECT IDENTIFIER
::= { ciscoCapwapWlanPolicyMIB 0 }
ciscoLwappWlanPolicyMIBObjects OBJECT IDENTIFIER
::= { ciscoCapwapWlanPolicyMIB 1 }
ciscoLwappWlanPolicyConfig OBJECT IDENTIFIER
::= { ciscoLwappWlanPolicyMIBObjects 2 }
ciscoLwappWlanPolicyConform OBJECT IDENTIFIER
::= { ciscoCapwapWlanPolicyMIB 3 }
-- ********************************************************************
-- WLAN POLICY configuration
-- ********************************************************************
cLWlanPolicyConfigTable OBJECT-TYPE
SYNTAX SEQUENCE OF CLWlanPolicyConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table represents the WLAN policy configuration sent by
the controller to the LWAPP APs for their operation.
LWAPP APs exchange configuration messages with the
controller and get the required configuration for their
802.11 related operations. As part of these messages, the
WLAN configuration is pushed by the controller to the
LWAPP APs.
Rows are added or deleted by explicit management actions
initiated by the user from a network management station
through the cLWlanPlcyRowStatus object."
::= { ciscoLwappWlanPolicyConfig 1 }
cLWlanPolicyConfigEntry OBJECT-TYPE
SYNTAX CLWlanPolicyConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Each entry in this table represents the WLAN policy
configuration sent by the controller to LWAPP APs for use
during their operations. Entries can be added/deleted by
explicit management actions by NMS or by user console."
INDEX { cLWlanWlanPolicyName }
::= { cLWlanPolicyConfigTable 1 }
CLWlanPolicyConfigEntry ::= SEQUENCE {
cLWlanWlanPolicyName SnmpAdminString,
cLWlanPlcyRowStatus RowStatus,
cLWlanPolicyDescription SnmpAdminString,
cLWlanPolicyInterfaceName SnmpAdminString,
cLWlanPolicyCentralSwitchMode TruthValue,
cLWlanPolicyCentralAuthMode TruthValue,
cLWlanPolicyDhcpCentral TruthValue,
cLWlanPolicyNatPatEnabled TruthValue,
cLWlanPolicyAssocCentral TruthValue,
cLWlanPolicyIPv4AclName SnmpAdminString,
cLWlanPolicyIPv6AclName SnmpAdminString,
cLWlanPolicyL2AclName SnmpAdminString,
cLWlanPolicySessionTimeout Unsigned32,
cLWlanPolicyUserIdleTimeout Unsigned32,
cLWlanPolicyClientExclTimeout Unsigned32,
cLWlanPolicyNativeProfiling TruthValue,
cLWlanPolicySubscriberPolicyName SnmpAdminString,
cLWlanPolicyHttpDeviceProfiling TruthValue,
cLWlanPolicyDHCPDeviceProfiling TruthValue,
cLWlanPolicyNetflowIPv4InputMonitorName SnmpAdminString,
cLWlanPolicyNetflowIPv4OutputMonitorName SnmpAdminString,
cLWlanPolicyNetflowIPv6InputMonitorName SnmpAdminString,
cLWlanPolicyNetflowIPv6OutputMonitorName SnmpAdminString,
cLWlanPolicyQosPerSSIDInput SnmpAdminString,
cLWlanPolicyQosPerSSIDOutput SnmpAdminString,
cLWlanPolicyQosPerBSSIDInput SnmpAdminString,
cLWlanPolicyQosPerBSSIDOutput SnmpAdminString,
cLWlanPolicyBlacklistTimeout Unsigned32,
cLWlanPolicyBlacklistingCapability TruthValue,
cLWlanPolicyDhcpRequired INTEGER,
cLWlanPolicyDhcpServerIpAddress IpAddress,
cLWlanPolicyAaaOverride TruthValue,
cLWlanPolicyNac TruthValue,
cLWlanPolicyStatus TruthValue,
cLWlanPolicyRadiusHttpProfiling TruthValue,
cLWlanPolicyUserIdleThreshold Unsigned32,
cLWlanPolicyQosFastlane INTEGER,
cLWlanPolicyDHCPOption82Ascii TruthValue,
cLWlanPolicyDHCPOption82Rid TruthValue,
cLWlanPolicyDHCPOption82Enable TruthValue,
cLWlanPolicyDHCPOption82Apmac TruthValue,
cLWlanPolicyDHCPOption82Apethmac TruthValue,
cLWlanPolicyDHCPOption82Apname TruthValue,
cLWlanPolicyDHCPOption82Policytag TruthValue,
cLWlanPolicyDHCPOption82Aplocation TruthValue,
cLWlanPolicyDHCPOption82Vlanid TruthValue,
cLWlanPolicyDHCPOption82Ssid TruthValue,
cLWlanPolicySplitMacAcl SnmpAdminString,
cLWlanPolicyVlanCentralSwitching TruthValue,
cLWlanPolicyPassiveClient TruthValue,
cLWlanPolicyNBARProtocolDiscovery TruthValue,
cLWlanPolicyStaticIPMobility TruthValue,
clWlanPolicyMobilityAnchor TruthValue,
cLWlanPolicyBroadcastTagging TruthValue,
cLWlanPolicyWgbVlan TruthValue,
cLWlanPolicyReanchorClassmap SnmpAdminString,
cLWlanUmbrellaParamMapName SnmpAdminString,
cLWlanPolicyAccountingList SnmpAdminString,
cLWlanPolicyAAAPolicyName SnmpAdminString,
cLWlanPolicyQosCallSnooping TruthValue,
cLWlanPolicyDefaultSgt Unsigned32,
cLWlanPolicyInlineTagging TruthValue,
cLWlanPolicySgaclEnforcement TruthValue,
cLWlanPolicyMdnsPolicy SnmpAdminString,
cLWlanPolicyHotspotAnqpServer SnmpAdminString,
cLWlanPolicyNacType INTEGER,
cLWlanPolicyARPProxy TruthValue,
cLWlanPolicyIPv6proxy INTEGER,
cLWlanPolicyMulticastFilter TruthValue,
cLWlanPolicyQBSSLoad TruthValue,
cLWlanPolicyL3Access TruthValue
}
cLWlanWlanPolicyName OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (1..64))
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This object specifies one instance of a WLAN policy on the
controller."
::= { cLWlanPolicyConfigEntry 1 }
cLWlanPlcyRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object specifies the status column for this row and
used to create, modify and delete specific instances of
rows in this table.
This table supports modification of writable objects when
the RowStatus is 'active'.
The following objects are mandatory for successful
creation of an entry: cLWlanPolicyName."
::= { cLWlanPolicyConfigEntry 2 }
cLWlanPolicyDescription OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..64))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the description associated
to this WLAN policy.This can be any user defined
string."
::= { cLWlanPolicyConfigEntry 3 }
cLWlanPolicyInterfaceName OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..32))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object represents the interface attached to the
wireless lan."
::= { cLWlanPolicyConfigEntry 4 }
cLWlanPolicyCentralSwitchMode OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object allows the user to enable or disable Central
switching for wlan.
A value of 'true' indicates Central Switching is enabled
and Local Switching is disabled.
A value of 'false' indicates Cental Switching is disabled
and Local Switching is enabled."
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 5 }
cLWlanPolicyCentralAuthMode OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object allows the user to enable or disable central
authentication for the wlan.
A value of 'true' indicates central authentication is
enabled.
A value of 'false' indicates local authentication is
disabled."
DEFVAL { true }
::= { cLWlanPolicyConfigEntry 6 }
cLWlanPolicyDhcpCentral OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object indicates the behavior of the Access Point
when switching the data frames of the clients
associated to it through the WLAN policy identified
by policy profile name.
A value of 'true' indicates dhcp central is enabled.
A value of 'false' indicates dhcp central is disabled.
Note that the value of 'true' will be effective only if
the WLAN is configured on a Access Point."
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 7 }
cLWlanPolicyNatPatEnabled OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies whether Network Address Translation
(NAT) and Port Address Translation (PAT) are enabled on
this WLAN.
This can be enabled only when cLReapWlanDhcpCentral is set
to 'true'.
A value of 'true' indicates NATPAT is enabled.
A value of 'false' indicates NATPAT is disabled.
Note that the value of 'true' will be effective
only if the WLAN is configured as Locally Switched."
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 9 }
cLWlanPolicyAssocCentral OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object indicates the behavior of the REAP when
handling the (re-)association management frames from
associated to it through the WLAN policy identified by
policy profile name.
A value of 'true' indicates AssocCentral is enabled.
A value of 'false' indicates AssocCentral is disabled.
Note that the value of 'true' will be effective only if the
WLAN is configured on a REAP."
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 10 }
cLWlanPolicyIPv4AclName OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..32))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the IPV4 ACL Name for wlan."
::= { cLWlanPolicyConfigEntry 11 }
cLWlanPolicyIPv6AclName OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..64))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the IPV6 ACL Name for wlan."
::= { cLWlanPolicyConfigEntry 12 }
cLWlanPolicyL2AclName OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..64))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the name of the L2ACL applied to this
WLAN. If it is required to remove the ACL name for a WLAN,
it should be set to 'none'."
DEFVAL { "" }
::= { cLWlanPolicyConfigEntry 13 }
cLWlanPolicySessionTimeout OBJECT-TYPE
SYNTAX Unsigned32 (20..86400)
UNITS "seconds"
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the session timeout to be applied on
client using a Policy."
DEFVAL { 1800 }
::= { cLWlanPolicyConfigEntry 14 }
cLWlanPolicyUserIdleTimeout OBJECT-TYPE
SYNTAX Unsigned32 (15..100000)
UNITS "seconds"
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the timeout value of user for a
WLAN."
DEFVAL { 300 }
::= { cLWlanPolicyConfigEntry 15 }
cLWlanPolicyClientExclTimeout OBJECT-TYPE
SYNTAX Unsigned32 (0..2147483647)
UNITS "seconds"
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the client exclusiontimeout
value of user for a WLAN.
Modifying the timeout to zero (0) means the client will be
excluded indefinitely until it is manually removed from the
exclusion list"
DEFVAL { 60 }
::= { cLWlanPolicyConfigEntry 16 }
cLWlanPolicyNativeProfiling OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specfies to enable or disable client device
classification.
A value of 'true' indicates native profiling is enabled.
A value of 'false' indicates native profiling is
disabled."
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 17 }
cLWlanPolicySubscriberPolicyName OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..64))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies a native profiling classification
policy configured on the Wireless LAN Controller."
DEFVAL { "" }
::= { cLWlanPolicyConfigEntry 18 }
cLWlanPolicyHttpDeviceProfiling OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specfies the client local profiling on a wlan.
A value of 'true' indicates http device profiling is
enabled.
A value of 'false' indicate http device profiling is
disabled."
::= { cLWlanPolicyConfigEntry 19 }
cLWlanPolicyDHCPDeviceProfiling OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specfies the client dhcp profiling on a wlan.
A value of 'true' indicates dhcp device profiling is
enabled.
A value of 'false' indicates dhcp device profiling is
disabled."
::= { cLWlanPolicyConfigEntry 20 }
cLWlanPolicyNetflowIPv4InputMonitorName OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..64))
MAX-ACCESS read-write
STATUS deprecated
DESCRIPTION
"This object specifies the input IPv4 Netflow Monitor name
assigned to this WLAN.
An empty string specifies no flow monitor is being
associated to WLAN policy profile. An empty flow monitor
name should be used to de-associate the monitor from the
profile."
DEFVAL { "" }
::= { cLWlanPolicyConfigEntry 21 }
cLWlanPolicyNetflowIPv4OutputMonitorName OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..64))
MAX-ACCESS read-write
STATUS deprecated
DESCRIPTION
"This object specifies the output IPv4 Netflow Monitor name
assigned to this WLAN.
An empty string specifies no flow monitor is being
associated to WLAN policy profile. An empty flow monitor
name should be used to de-associate the monitor from the
profile."
DEFVAL { "" }
::= { cLWlanPolicyConfigEntry 22 }
cLWlanPolicyNetflowIPv6InputMonitorName OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..64))
MAX-ACCESS read-write
STATUS deprecated
DESCRIPTION
"This object specifies the input IPv6 Netflow Monitor name
assigned to this WLAN.
An empty string specifies no flow monitor is being
associated to WLAN policy profile.
An empty flow monitor name should be used to de-associate
the monitor from the profile."
DEFVAL { "" }
::= { cLWlanPolicyConfigEntry 23 }
cLWlanPolicyNetflowIPv6OutputMonitorName OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..64))
MAX-ACCESS read-write
STATUS deprecated
DESCRIPTION
"This object specifies the output IPv6 Netflow Monitor name
assigned to this WLAN.
An empty string specifies no flow monitor is being
associated to WLAN policy profile.
An empty flow monitor name should be used to de-associate
the monitor from the profile."
DEFVAL { "" }
::= { cLWlanPolicyConfigEntry 24 }
cLWlanPolicyQosPerSSIDInput OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..64))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the per ssid ingress service name."
DEFVAL { "" }
::= { cLWlanPolicyConfigEntry 25 }
cLWlanPolicyQosPerSSIDOutput OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..64))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the per ssid egress service name."
DEFVAL { "" }
::= { cLWlanPolicyConfigEntry 26 }
cLWlanPolicyQosPerBSSIDInput OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..64))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the per client ingress service name."
DEFVAL { "" }
::= { cLWlanPolicyConfigEntry 27 }
cLWlanPolicyQosPerBSSIDOutput OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..64))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the per client egress service name."
DEFVAL { "" }
::= { cLWlanPolicyConfigEntry 28 }
cLWlanPolicyBlacklistTimeout OBJECT-TYPE
SYNTAX Unsigned32 (0..2147483647)
UNITS "seconds"
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the timeout for blacklisted Mobile
Stations after which the mobile station will be
automatically de-authenticated.
Mobile Station are blacklisted by MAC address and their
status can be obtained from bsnMobileStationStatus.
A timeout setting of 0 indicates no blacklist timeout is
set and administrative control
( bsnMobileStationDeleteAction ) is required to
deauthenticate the station."
DEFVAL { 60 }
::= { cLWlanPolicyConfigEntry 29 }
cLWlanPolicyBlacklistingCapability OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies that one can enable or disable the
client backlisting feature for a WLAN.
A value of 'true' indicates that the clients can be blacklisted
by the controller in case of repetitive auth failure and other
reasons like it.
A value of 'false' indicates that the clients cannot be
blacklisted by the controller.
The blacklist timeout value will only be effective if
this feature is turned on."
DEFVAL { true }
::= { cLWlanPolicyConfigEntry 30 }
cLWlanPolicyDhcpRequired OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enable(1)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the DHCP requirement for all clients
on this WLAN."
DEFVAL { disable }
::= { cLWlanPolicyConfigEntry 31 }
cLWlanPolicyDhcpServerIpAddress OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the IP Address of the DHCP Server.
Make it 0.0.0.0 or 0:0:0:0:0:0:0:0 to disable DHCP Relay.
Any value other than 0.0.0.0 or 0:0:0:0:0:0:0:0 it will be
assumed that DHCP Relay is turned on."
::= { cLWlanPolicyConfigEntry 32 }
cLWlanPolicyAaaOverride OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies to set when aaa override is enabled.
A value of 'true' indicates aaa override is enabled.
A value of 'false' indicates aaa override is disabled."
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 33 }
cLWlanPolicyNac OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies to enabling/disabling NAC."
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 34 }
cLWlanPolicyStatus OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies whether the policy profile is
shutdown or active.
A value of 'true' indicates Wlan policy is active.
A value of 'false' indicates Wlan policy is shutdown."
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 35 }
cLWlanPolicyRadiusHttpProfiling OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the Radius http profiling."
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 36 }
cLWlanPolicyUserIdleThreshold OBJECT-TYPE
SYNTAX Unsigned32 (0..4294967295)
UNITS "bytes"
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies a threshold triggered timeout where if a
client has not sent a threshold quota of data within the
specified user idle timeout, the client is considered to be
inactive and is deauthenticated. If the data sent by the client
is more than the threshold quota specified within the user idle
timeout, the client is considered to be active and the
controller refreshes for another timeout period. If the
threshold quota is exhausted within the timeout period, the
timeout period is refreshed."
DEFVAL { 0 }
::= { cLWlanPolicyConfigEntry 37 }
cLWlanPolicyQosFastlane OBJECT-TYPE
SYNTAX INTEGER {
disable(0),
enterprise(1),
voice(2),
guest(3),
fastlane(4)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the user to enable or disable Auto
Qos mode in wireless policy profile.
disable - Disable of AutoQos Wireless Enterprise Policy.
enterprise - Enable AutoQos Wireless Enterprise Policy.
voice - Enabling Auto QoS Voice will enable call-snooping.
guest - Enable AutoQos Wireless Guest Policy.
fastlane - Enable AutoQos Wireless Fastlane Policy"
DEFVAL { disable }
::= { cLWlanPolicyConfigEntry 38 }
cLWlanPolicyDHCPOption82Ascii OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the DHCP Option82 Ascii option.
A value of 'true' enable DHCP 82 Ascii option.
A value of 'false' disable DHCP 82 Ascii option."
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 39 }
cLWlanPolicyDHCPOption82Rid OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the DHCP Option82 Rid option.
A value of 'true' enable DHCP 82 option RID.
A value of 'false' disable DHCP 82 option RID."
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 40 }
cLWlanPolicyDHCPOption82Enable OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the DHCP Option82 state.
A value of 'true' enable DHCP 82 option .
A value of 'false' disable DHCP 82 option."
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 41 }
cLWlanPolicyDHCPOption82Apmac OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the DHCP Option82 format Ap mac
option.
A value of 'true' enable DHCP 82 option based on AP radio
mac.
A value of 'false' disable DHCP 82 option based on AP
radio mac."
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 42 }
cLWlanPolicyDHCPOption82Apethmac OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the DHCP Option82 format Ap ethmac
option.
A value of 'true' enable DHCP 82 option based on AP eth
mac.
A value of 'false' disable DHCP 82 option based on AP eth
mac."
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 43 }
cLWlanPolicyDHCPOption82Apname OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the DHCP Option82 format Ap name
option.
A value of 'true' enable DHCP 82 option based on AP name.
A value of 'false' disable DHCP 82 option based on AP
name."
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 44 }
cLWlanPolicyDHCPOption82Policytag OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the DHCP Option82 format Policy tag
option
A value of 'true' enable DHCP 82 option based on policy
tag.
A value of 'false' disable DHCP 82 option based on policy
tag."
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 45 }
cLWlanPolicyDHCPOption82Aplocation OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This specifies represents the DHCP Option82 format Ap
location option
A value of 'true' enable DHCP 82 option based on Ap
Location.
A value of 'false' disable DHCP 82 option based on Ap
Location."
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 46 }
cLWlanPolicyDHCPOption82Vlanid OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the DHCP Option82 format Vlan_id
option.
A value of 'true' enable DHCP 82 option based on vlanid
A value of 'false' disable DHCP 82 option based on vlanid."
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 47 }
cLWlanPolicyDHCPOption82Ssid OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the DHCP Option82 format SSID option.
A value of 'true' enable DHCP 82 option based on ssid.
A value of 'false' disable DHCP 82 option based on ssid.
Folowing are the combination for dhcp option82 format-
AP MAC alone
AP ethernet MAC alone
SSID alone
Policy tag alone
AP location alone
AP name and SSID together
AP MAC and Vlan-ID together
AP name and Vlan-ID together
Ethernet MAC and SSID together."
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 48 }
cLWlanPolicySplitMacAcl OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..33))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the ACL name for the split tunnel."
DEFVAL { "" }
::= { cLWlanPolicyConfigEntry 49 }
cLWlanPolicyVlanCentralSwitching OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies whether switching will be local or
central when the flag is set.
A value of 'true' enable vlan based central switching.
A value of 'false' disable vlan based central switching."
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 50 }
cLWlanPolicyPassiveClient OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies whether passive-client support
is enabled or not on a policy."
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 54 }
cLWlanPolicyNBARProtocolDiscovery OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object allows the user to enable or disable NBAR
Protocol discovery for a wlan.
A value of 'true' indicates NBAR protocol discovery is
active,
A value of 'false' indicates NBAR protocol discovery is
disabled."
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 55 }
cLWlanPolicyStaticIPMobility OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies whether static ip mobility support
is enabled or not on a policy."
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 56 }
clWlanPolicyMobilityAnchor OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the user to enable or disable mobility
anchor for a policy profile.
A value of 'true' indicates mobility anchor is active.
A Value of 'false' indicates mobility anchor is disabled."
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 57 }
cLWlanPolicyBroadcastTagging OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies to set when broadcast tagging is
enabled.
A value of 'true' indicates broadcast tagging is enabled.
A value of 'false' indicates broadcast tagging is disabled."
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 58 }
cLWlanPolicyWgbVlan OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies to enabling/disabling Client VLAN.
A value of 'true' indicates Client Vlan is enabled.
A value of 'false' indicates Client Vlan is disabled."
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 59 }
cLWlanPolicyReanchorClassmap OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..64))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the classmap containing the real-time
protocols, identified by AVC, to monitor to decide whether
a wireless client has to be reanchored to its foreign WLC."
DEFVAL { "" }
::= { cLWlanPolicyConfigEntry 60 }
cLWlanUmbrellaParamMapName OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..64))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies a the umbrella parameter map name
configured on the Wireless LAN Controller."
::= { cLWlanPolicyConfigEntry 61 }
cLWlanPolicyAccountingList OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..64))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the Accounting List for Policy Profile."
::= { cLWlanPolicyConfigEntry 62 }
cLWlanPolicyAAAPolicyName OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..64))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the Wireless AAA Policy Name"
DEFVAL { "" }
::= { cLWlanPolicyConfigEntry 63 }
cLWlanPolicyQosCallSnooping OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies if QoS call snooping is enabled
A value of 'true' indicates call snoop is enabled.
A value of 'false' indicates call snoop is disabled."
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 64 }
cLWlanPolicyDefaultSgt OBJECT-TYPE
SYNTAX Unsigned32 (2..65519)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the default security group tag."
::= { cLWlanPolicyConfigEntry 65 }
cLWlanPolicyInlineTagging OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies whether inline tagging flag is
enabled on a particular policy profile.
A value of 'true' indicates inline tagging is enabled.
A value of 'false' indicates inline tagging is disabled."
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 66 }
cLWlanPolicySgaclEnforcement OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the security group access control lists
enforcement for a policy profile"
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 67 }
cLWlanPolicyMdnsPolicy OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..64))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the mDNS service policy
configured under WLAN policy."
::= { cLWlanPolicyConfigEntry 68 }
cLWlanPolicyHotspotAnqpServer OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..255))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the Hotspot 2.0 ANQP Server"
::= { cLWlanPolicyConfigEntry 69 }
cLWlanPolicyNacType OBJECT-TYPE
SYNTAX INTEGER {
radius(0),
xwf(1)
}
MAX-ACCESS read-write
STATUS deprecated
DESCRIPTION
"This object specifies the type of NAC configured
radius - Identity Service Engine NAC configured
xwf - Express Wi-Fi NAC configured."
DEFVAL { radius }
::= { cLWlanPolicyConfigEntry 70 }
cLWlanPolicyARPProxy OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies whether ARP proxy is enabled on a
particular policy profile.
A value of 'true' indicates ARP proxy is enabled.
A value of 'false' indicates ARP proxy is disabled."
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 71 }
cLWlanPolicyIPv6proxy OBJECT-TYPE
SYNTAX INTEGER {
noproxy(1),
dadproxy(2),
fullproxy(3)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the type of IPV6 proxy mode configured
noproxy - no ipv6 proxy configured
dadproxy - DAD proxy is configured.
fullproxy - DAD and ND proxy is configured. "
DEFVAL { noproxy }
::= { cLWlanPolicyConfigEntry 72 }
cLWlanPolicyMulticastFilter OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies whether multicast filter is enabled on a
particular policy profile.
A value of 'true' indicates multicast filter is enabled.
A value of 'false' indicates multicast filter is disabled."
DEFVAL { true }
::= { cLWlanPolicyConfigEntry 73 }
cLWlanPolicyQBSSLoad OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies whether QBSSload is enabled on a
particular policy profile.
A value of 'true' indicates QBSSload is enabled.
A value of 'false' indicates QBSSload is disabled."
DEFVAL { true }
::= { cLWlanPolicyConfigEntry 74 }
cLWlanPolicyL3Access OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies whether Layer-3 access is enabled on a
particular policy profile.
A value of 'true' indicates Layer-3 Access is enabled.
A value of 'false' indicates Layer-3 Access is disabled."
DEFVAL { false }
::= { cLWlanPolicyConfigEntry 75 }
-- ********************************************************************
-- * Air Time Fairness Profile Configuration
-- ********************************************************************
cLWlanPolicyATFPolicyNameConfigTable OBJECT-TYPE
SYNTAX SEQUENCE OF CLWlanPolicyATFPolicyNameConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table represents the ATF policy name configuration
for 2.4ghz and 5ghz radio interface based on band id."
::= { ciscoLwappWlanPolicyConfig 2 }
cLWlanPolicyATFPolicyNameConfigEntry OBJECT-TYPE
SYNTAX CLWlanPolicyATFPolicyNameConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry into the cLWlanPolicyATFPolicyNameTable represents ATF
policy name for 2.4ghz and 5ghz based on band id
corresponding to WLAN policy.
Entries can be added/deleted by explicit management
actions by NMS or by user console."
INDEX {
cLWlanWlanPolicyName,
cLWlanPolicyBandId
}
::= { cLWlanPolicyATFPolicyNameConfigTable 1 }
CLWlanPolicyATFPolicyNameConfigEntry ::= SEQUENCE {
cLWlanPolicyBandId Unsigned32,
cLWlanPolicyATFRowStatus RowStatus,
cLWlanPolicyATFPolicyName SnmpAdminString
}
cLWlanPolicyBandId OBJECT-TYPE
SYNTAX Unsigned32 (0..1)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This object uniquely identifies the ATF policy name
for 24ghz and 5ghz attached to the policy profile."
::= { cLWlanPolicyATFPolicyNameConfigEntry 1 }
cLWlanPolicyATFRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object specifies the row Status of the
ATF policy map table."
::= { cLWlanPolicyATFPolicyNameConfigEntry 2 }
cLWlanPolicyATFPolicyName OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..32))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object represents the AirTime Fairness policy name
for 24ghz and 5ghz attached to the policy profile."
::= { cLWlanPolicyATFPolicyNameConfigEntry 3 }
-- ********************************************************************
-- * AAA Profile Configuration
-- ********************************************************************
cLWlanAaaPolicyConfigTable OBJECT-TYPE
SYNTAX SEQUENCE OF CLWlanAaaPolicyConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table represents the WLAN AAA policy configuration."
::= { ciscoLwappWlanPolicyConfig 3 }
cLWlanAaaPolicyConfigEntry OBJECT-TYPE
SYNTAX CLWlanAaaPolicyConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Each entry in this table represents the WLAN AAA policy
configuration."
INDEX { cLWlanAaaPolicyName }
::= { cLWlanAaaPolicyConfigTable 1 }
CLWlanAaaPolicyConfigEntry ::= SEQUENCE {
cLWlanAaaPolicyName SnmpAdminString,
cLWlanAaaPolicyRowStatus RowStatus,
cLWlanAaaPolicyNasId1 INTEGER,
cLWlanAaaPolicyNasId2 INTEGER,
cLWlanAaaPolicyNasId3 INTEGER,
cLWlanAaaPolicyRealm TruthValue,
cLWlanAAAPolicyCustomString1 SnmpAdminString,
cLWlanAAAPolicyCustomString2 SnmpAdminString,
cLWlanAAAPolicyCustomString3 SnmpAdminString,
}
cLWlanAaaPolicyName OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (1..64))
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This object specifies an AAA policy on a policy profile
in a controller."
::= { cLWlanAaaPolicyConfigEntry 1 }
cLWlanAaaPolicyRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object specifies the status column for this row and
used to create, modify and delete specific instances of
rows in this table.
This table supports modification of writable objects when
the RowStatus is 'active'.
The following objects are mandatory for successful
creation of an entry: cLWlanAaaPolicyName."
::= { cLWlanAaaPolicyConfigEntry 2 }
cLWlanAaaPolicyNasId1 OBJECT-TYPE
SYNTAX INTEGER {
notconfigured(0),
sysname(1),
sysip(2),
sysmac(3),
apip(4),
apname(5),
apmac(6),
apethmac(7),
appolicytag(8),
apsitetag(9),
ssid(10),
aplocation(11),
customstring(12)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the NasId option 1.
notconfigured - Not Configured
sysname - System Name
sysip - System IP Address
sysmac - System MAC Address
apip - AP's IP Address
apname - AP's Name
apmac - AP's MAC Address
apethmac - AP's Ethernet MAC Address
appolicytag - AP's Policy Tag
apsitetag - AP's Site Tag
ssid - SSID Name
aplocation - AP's Location
customstring - Custom String ."
DEFVAL { sysname }
::= { cLWlanAaaPolicyConfigEntry 3 }
cLWlanAaaPolicyNasId2 OBJECT-TYPE
SYNTAX INTEGER {
notconfigured(0),
sysname(1),
sysip(2),
sysmac(3),
apip(4),
apname(5),
apmac(6),
apethmac(7),
appolicytag(8),
apsitetag(9),
ssid(10),
aplocation(11),
customstring(12)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the NasId option 2.
notconfigured - Not Configured
sysname - System Name
sysip - System IP Address
sysmac - System MAC Address
apip - AP's IP Address
apname - AP's Name
apmac - AP's MAC Address
apethmac - AP's Ethernet MAC Address
appolicytag - AP's Policy Tag
apsitetag - AP's Site Tag
ssid - SSID Name
aplocation - AP's Location
customstring - Custom String ."
DEFVAL { notconfigured }
::= { cLWlanAaaPolicyConfigEntry 4 }
cLWlanAaaPolicyNasId3 OBJECT-TYPE
SYNTAX INTEGER {
notconfigured(0),
sysname(1),
sysip(2),
sysmac(3),
apip(4),
apname(5),
apmac(6),
apethmac(7),
appolicytag(8),
apsitetag(9),
ssid(10),
aplocation(11),
customstring(12)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the NasId option 3.
notconfigured - Not Configured
sysname - System Name
sysip - System IP Address
sysmac - System MAC Address
apip - AP's IP Address
apname - AP's Name
apmac - AP's MAC Address
apethmac - AP's Ethernet MAC Address
appolicytag - AP's Policy Tag
apsitetag - AP's Site Tag
ssid - SSID Name
aplocation - AP's Location
customstring - Custom String ."
DEFVAL { notconfigured }
::= { cLWlanAaaPolicyConfigEntry 5 }
cLWlanAaaPolicyRealm OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the user to enable or disable realm.
TRUE means realm enable
FALSE measn realm disable"
DEFVAL { true }
::= { cLWlanAaaPolicyConfigEntry 6 }
cLWlanAAAPolicyCustomString1 OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..224))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the custom string for nasid option1"
DEFVAL { notconfigured }
::= { cLWlanAaaPolicyConfigEntry 7 }
cLWlanAAAPolicyCustomString2 OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..224))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the custom string for nasid option2"
DEFVAL { notconfigured }
::= { cLWlanAaaPolicyConfigEntry 8 }
cLWlanAAAPolicyCustomString3 OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..224))
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies the custom string for nasid option3"
DEFVAL { notconfigured }
::= { cLWlanAaaPolicyConfigEntry 9 }
-- ********************************************************************
-- * AVC Netflow Flow Monitor Profile Configuration
-- ********************************************************************
cLWlanPolicyMonitorIPv4InConfigTable OBJECT-TYPE
SYNTAX SEQUENCE OF CLWlanPolicyMonitorIPv4InConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table contains the list of IPv4 flow monitors
configured for AVC in the input (or ingress) direction.
Rows are added or deleted by explicit management actions
initiated by the user from a network management station
through the cLWlanMonitorIPv4InRowStatus object."
::= { ciscoLwappWlanPolicyConfig 4 }
cLWlanPolicyMonitorIPv4InConfigEntry OBJECT-TYPE
SYNTAX CLWlanPolicyMonitorIPv4InConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Each entry in this table represents an IPv4 input flow monitor
configured for AVC."
INDEX {
cLWlanWlanPolicyName,
cLWlanMonitorIPv4InName
}
::= { cLWlanPolicyMonitorIPv4InConfigTable 1 }
CLWlanPolicyMonitorIPv4InConfigEntry ::= SEQUENCE {
cLWlanMonitorIPv4InName SnmpAdminString,
cLWlanMonitorIPv4InRowStatus RowStatus
}
cLWlanMonitorIPv4InName OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..32))
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This object represents an IPv4 input flow monitor name
configured for the policy profile."
::= { cLWlanPolicyMonitorIPv4InConfigEntry 1 }
cLWlanMonitorIPv4InRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object specifies the status column for this row and
is used to create and delete specific instances of rows
in this table.
This table does not contain writable objects: once the row
is created, the only further actions allowed are read or
delete.
The dynamically created rows should not change across SNMP
agent restarts
The following objects are mandatory for successful creation of
an entry: cLWlanWlanPolicyName, cLWlanMonitorIPv4InName."
::= { cLWlanPolicyMonitorIPv4InConfigEntry 2 }
cLWlanPolicyMonitorIPv4OutConfigTable OBJECT-TYPE
SYNTAX SEQUENCE OF CLWlanPolicyMonitorIPv4OutConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table contains the list of IPv4 flow monitors
configured for AVC in the output (or egress) direction.
Rows are added or deleted by explicit management actions
initiated by the user from a network management station
through the cLWlanMonitorIPv4OutRowStatus object."
::= { ciscoLwappWlanPolicyConfig 5 }
cLWlanPolicyMonitorIPv4OutConfigEntry OBJECT-TYPE
SYNTAX CLWlanPolicyMonitorIPv4OutConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Each entry in this table represents an IPv4 output flow monitor
configured for AVC."
INDEX {
cLWlanWlanPolicyName,
cLWlanMonitorIPv4OutName
}
::= { cLWlanPolicyMonitorIPv4OutConfigTable 1 }
CLWlanPolicyMonitorIPv4OutConfigEntry ::= SEQUENCE {
cLWlanMonitorIPv4OutName SnmpAdminString,
cLWlanMonitorIPv4OutRowStatus RowStatus
}
cLWlanMonitorIPv4OutName OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..32))
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This object represents an IPv4 output flow monitor name
configured for the policy profile."
::= { cLWlanPolicyMonitorIPv4OutConfigEntry 1 }
cLWlanMonitorIPv4OutRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object specifies the status column for this row and
is used to create and delete specific instances of rows
in this table.
This table does not contain writable objects: once the row
is created, the only further actions allowed are read or
delete.
The dynamically created rows should not change across SNMP
agent restarts
The following objects are mandatory for successful creation of
an entry: cLWlanWlanPolicyName, cLWlanMonitorIPv4OutName."
::= { cLWlanPolicyMonitorIPv4OutConfigEntry 2 }
cLWlanPolicyMonitorIPv6InConfigTable OBJECT-TYPE
SYNTAX SEQUENCE OF CLWlanPolicyMonitorIPv6InConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table contains the list of IPv6 flow monitors
configured for AVC in the input (or ingress) direction.
Rows are added or deleted by explicit management actions
initiated by the user from a network management station
through the cLWlanMonitorIPv6InRowStatus object."
::= { ciscoLwappWlanPolicyConfig 6 }
cLWlanPolicyMonitorIPv6InConfigEntry OBJECT-TYPE
SYNTAX CLWlanPolicyMonitorIPv6InConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Each entry in this table represents an IPv6 input flow monitor
configured for AVC."
INDEX {
cLWlanWlanPolicyName,
cLWlanMonitorIPv6InName
}
::= { cLWlanPolicyMonitorIPv6InConfigTable 1 }
CLWlanPolicyMonitorIPv6InConfigEntry ::= SEQUENCE {
cLWlanMonitorIPv6InName SnmpAdminString,
cLWlanMonitorIPv6InRowStatus RowStatus
}
cLWlanMonitorIPv6InName OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..32))
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This object represents an IPv6 input flow monitor name
configured for the policy profile."
::= { cLWlanPolicyMonitorIPv6InConfigEntry 1 }
cLWlanMonitorIPv6InRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object specifies the status column for this row and
is used to create and delete specific instances of rows
in this table.
This table does not contain writable objects: once the row
is created, the only further actions allowed are read or
delete.
The dynamically created rows should not change across SNMP
agent restarts
The following objects are mandatory for successful creation of
an entry: cLWlanWlanPolicyName, cLWlanMonitorIPv6InName."
::= { cLWlanPolicyMonitorIPv6InConfigEntry 2 }
cLWlanPolicyMonitorIPv6OutConfigTable OBJECT-TYPE
SYNTAX SEQUENCE OF CLWlanPolicyMonitorIPv6OutConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table contains the list of IPv6 flow monitors
configured for AVC in the output (or egress) direction.
Rows are added or deleted by explicit management actions
initiated by the user from a network management station
through the cLWlanMonitorIPv6OutRowStatus object."
::= { ciscoLwappWlanPolicyConfig 7 }
cLWlanPolicyMonitorIPv6OutConfigEntry OBJECT-TYPE
SYNTAX CLWlanPolicyMonitorIPv6OutConfigEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Each entry in this table represents an IPv6 output flow monitor
configured for AVC."
INDEX {
cLWlanWlanPolicyName,
cLWlanMonitorIPv6OutName
}
::= { cLWlanPolicyMonitorIPv6OutConfigTable 1 }
CLWlanPolicyMonitorIPv6OutConfigEntry ::= SEQUENCE {
cLWlanMonitorIPv6OutName SnmpAdminString,
cLWlanMonitorIPv6OutRowStatus RowStatus
}
cLWlanMonitorIPv6OutName OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (0..32))
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This object represents an IPv6 output flow monitor name
configured for the policy profile."
::= { cLWlanPolicyMonitorIPv6OutConfigEntry 1 }
cLWlanMonitorIPv6OutRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object specifies the status column for this row and
is used to create and delete specific instances of rows
in this table.
This table does not contain writable objects: once the row
is created, the only further actions allowed are read or
delete.
The dynamically created rows should not change across SNMP
agent restarts
The following objects are mandatory for successful creation of
an entry: cLWlanWlanPolicyName, cLWlanMonitorIPv6OutName."
::= { cLWlanPolicyMonitorIPv6OutConfigEntry 2 }
-- ********************************************************************
-- * Calender Profile Configuration
-- ********************************************************************
cLWlanPolicyCalendarProfileTable OBJECT-TYPE
SYNTAX SEQUENCE OF CLWlanPolicyCalendarProfileEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table represent calendar profile configuration under
WLAN policy"
::= { ciscoLwappWlanPolicyConfig 8 }
cLWlanPolicyCalendarProfileEntry OBJECT-TYPE
SYNTAX CLWlanPolicyCalendarProfileEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Each entry in this table represents the information
about action under calender profile for a given policy"
INDEX {
cLWlanWlanPolicyName,
cLWlanPolicyCalendarProfileName
}
::= { cLWlanPolicyCalendarProfileTable 1 }
CLWlanPolicyCalendarProfileEntry ::= SEQUENCE {
cLWlanPolicyCalendarProfileName SnmpAdminString,
cLWlanPolicyCalendarProfileRowStatus RowStatus,
cLWlanPolicyCalendarProfileWlan INTEGER,
cLWlanPolicyCalendarProfileClientSession INTEGER
}
cLWlanPolicyCalendarProfileName OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE (1..32))
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This object specifies unique instance of calendar profile"
::= { cLWlanPolicyCalendarProfileEntry 1 }
cLWlanPolicyCalendarProfileRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This is the status column for this row and is used to create
and delete specific instances of rows in this table."
::= { cLWlanPolicyCalendarProfileEntry 2 }
cLWlanPolicyCalendarProfileWlan OBJECT-TYPE
SYNTAX INTEGER {
invalid(0),
enable(1)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object enables or disable wlan action on calender
profile for a given policy profile
invalid - No action is configured on calender profile
enable - enables wlan action on calender profile."
::= { cLWlanPolicyCalendarProfileEntry 3 }
cLWlanPolicyCalendarProfileClientSession OBJECT-TYPE
SYNTAX INTEGER {
invalid(0),
block(2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object enables or disable client session on calender
profile.
invalid - No action is configured on calender profile for
a client sesion
block - denies client association on calender profile."
::= { cLWlanPolicyCalendarProfileEntry 4 }
-- ********************************************************************
-- * Compliance statements
-- ********************************************************************
ciscoLwappWlanPolicyCompliances OBJECT IDENTIFIER
::= { ciscoLwappWlanPolicyConform 1 }
ciscoLwappWlanPolicyGroups OBJECT IDENTIFIER
::= { ciscoLwappWlanPolicyConform 2 }
ciscoLwappWlanPolicyCompliance MODULE-COMPLIANCE
STATUS deprecated
DESCRIPTION
"The compliance statement for the SNMP entities that
implement the ciscoCapwapWlanPolicyMIB module."
MODULE -- this module
MANDATORY-GROUPS { ciscoLwappWlanPolicyConfigGroup }
::= { ciscoLwappWlanPolicyCompliances 1 }
ciscoLwappWlanPolicyComplianceR01 MODULE-COMPLIANCE
STATUS deprecated
DESCRIPTION
"The compliance statement for the SNMP entities that
implement the ciscoLwappWlanPolicyMIB module. This
deprecates ciscoLwappWlanPolicyCompliance."
MODULE -- this module
MANDATORY-GROUPS {
ciscoLwappWlanPolicyConfigGroupRev1,
ciscoLwappWlanPolicyATFConfigGroup,
ciscoLwappWlanAaaPolicyConfigGroup
}
::= { ciscoLwappWlanPolicyCompliances 2 }
ciscoLwappWlanPolicyComplianceR02 MODULE-COMPLIANCE
STATUS deprecated
DESCRIPTION
"The compliance statement for the SNMP entities that
implement the ciscoLwappWlanPolicyMIB module. This
deprecates ciscoLwappWlanPolicyComplianceR01."
MODULE -- this module
MANDATORY-GROUPS {
ciscoLwappWlanPolicyConfigGroupRev2,
ciscoLwappWlanPolicyATFConfigGroup,
ciscoLwappWlanAaaPolicyConfigGroup
}
::= { ciscoLwappWlanPolicyCompliances 3 }
ciscoLwappWlanPolicyComplianceR03 MODULE-COMPLIANCE
STATUS deprecated
DESCRIPTION
"The compliance statement for the SNMP entities that
implement the ciscoLwappWlanPolicyMIB module. This adds
ciscoLwappWlanPolicyConfigGroupFlowMonitor, and
deprecates ciscoLwappWlanPolicyComplianceR02."
MODULE -- this module
MANDATORY-GROUPS {
ciscoLwappWlanPolicyConfigGroupRev2,
ciscoLwappWlanPolicyATFConfigGroup,
ciscoLwappWlanAaaPolicyConfigGroup,
ciscoLwappWlanPolicyConfigGroupFlowMonitor
}
::= { ciscoLwappWlanPolicyCompliances 4 }
ciscoLwappWlanPolicyComplianceR04 MODULE-COMPLIANCE
STATUS deprecated
DESCRIPTION
"The compliance statement for the SNMP entities that
implement the ciscoLwappWlanPolicyMIB module. This adds
ciscoLwappWlanPolicyConfigGroupRev3,
ciscoLwappWlanPolicyConfigGroupCalenderProfile and
deprecates ciscoLwappWlanPolicyComplianceR03."
MODULE -- this module
MANDATORY-GROUPS {
ciscoLwappWlanPolicyConfigGroupRev3,
ciscoLwappWlanPolicyATFConfigGroup,
ciscoLwappWlanAaaPolicyConfigGroup,
ciscoLwappWlanPolicyConfigGroupFlowMonitor,
ciscoLwappWlanPolicyConfigGroupCalenderProfile
}
::= { ciscoLwappWlanPolicyCompliances 5 }
ciscoLwappWlanPolicyComplianceR05 MODULE-COMPLIANCE
STATUS current
DESCRIPTION
"The compliance statement for the SNMP entities that
implement the ciscoLwappWlanPolicyMIB module. This adds
ciscoLwappWlanPolicyConfigGroupRev4 and
deprecates ciscoLwappWlanPolicyComplianceR04."
MODULE -- this module
MANDATORY-GROUPS {
ciscoLwappWlanPolicyConfigGroupRev4,
ciscoLwappWlanPolicyATFConfigGroup,
ciscoLwappWlanAaaPolicyConfigGroup,
ciscoLwappWlanPolicyConfigGroupFlowMonitor,
ciscoLwappWlanPolicyConfigGroupCalenderProfile
}
::= { ciscoLwappWlanPolicyCompliances 6 }
-- ********************************************************************
-- * Units of conformance
-- ********************************************************************
ciscoLwappWlanPolicyConfigGroup OBJECT-GROUP
OBJECTS {
cLWlanPlcyRowStatus,
cLWlanPolicyDescription,
cLWlanPolicyInterfaceName,
cLWlanPolicyCentralSwitchMode,
cLWlanPolicyCentralAuthMode,
cLWlanPolicyDhcpCentral,
cLWlanPolicyNatPatEnabled,
cLWlanPolicyAssocCentral,
cLWlanPolicyIPv4AclName,
cLWlanPolicyIPv6AclName,
cLWlanPolicyL2AclName,
cLWlanPolicySessionTimeout,
cLWlanPolicyUserIdleTimeout,
cLWlanPolicyClientExclTimeout,
cLWlanPolicyNativeProfiling,
cLWlanPolicySubscriberPolicyName,
cLWlanPolicyHttpDeviceProfiling,
cLWlanPolicyNetflowIPv4InputMonitorName,
cLWlanPolicyNetflowIPv4OutputMonitorName,
cLWlanPolicyNetflowIPv6InputMonitorName,
cLWlanPolicyNetflowIPv6OutputMonitorName,
cLWlanPolicyQosPerSSIDInput,
cLWlanPolicyQosPerSSIDOutput,
cLWlanPolicyQosPerBSSIDInput,
cLWlanPolicyQosPerBSSIDOutput,
cLWlanPolicyBlacklistTimeout,
cLWlanPolicyBlacklistingCapability,
cLWlanPolicyDhcpRequired,
cLWlanPolicyDhcpServerIpAddress,
cLWlanPolicyAaaOverride,
cLWlanPolicyNac,
cLWlanPolicyStatus,
cLWlanPolicyRadiusHttpProfiling,
cLWlanPolicyUserIdleThreshold,
cLWlanPolicyQosFastlane,
cLWlanPolicyDHCPDeviceProfiling,
cLWlanPolicyDHCPOption82Ascii,
cLWlanPolicyDHCPOption82Rid,
cLWlanPolicyDHCPOption82Enable,
cLWlanPolicyDHCPOption82Apmac,
cLWlanPolicyDHCPOption82Apethmac,
cLWlanPolicyDHCPOption82Apname,
cLWlanPolicyDHCPOption82Policytag,
cLWlanPolicyDHCPOption82Aplocation,
cLWlanPolicyDHCPOption82Vlanid,
cLWlanPolicyDHCPOption82Ssid,
cLWlanPolicySplitMacAcl,
cLWlanPolicyVlanCentralSwitching,
cLWlanPolicyPassiveClient,
cLWlanPolicyNBARProtocolDiscovery,
cLWlanPolicyStaticIPMobility
}
STATUS deprecated
DESCRIPTION
"This collection of objects represent the Policy
configuration of WLAN to be passed to LWAPP AP"
::= { ciscoLwappWlanPolicyGroups 1 }
ciscoLwappWlanPolicyConfigGroupRev1 OBJECT-GROUP
OBJECTS {
cLWlanPlcyRowStatus,
cLWlanPolicyDescription,
cLWlanPolicyInterfaceName,
cLWlanPolicyCentralSwitchMode,
cLWlanPolicyCentralAuthMode,
cLWlanPolicyDhcpCentral,
cLWlanPolicyNatPatEnabled,
cLWlanPolicyAssocCentral,
cLWlanPolicyIPv4AclName,
cLWlanPolicyIPv6AclName,
cLWlanPolicyL2AclName,
cLWlanPolicySessionTimeout,
cLWlanPolicyUserIdleTimeout,
cLWlanPolicyClientExclTimeout,
cLWlanPolicyNativeProfiling,
cLWlanPolicySubscriberPolicyName,
cLWlanPolicyHttpDeviceProfiling,
cLWlanPolicyNetflowIPv4InputMonitorName,
cLWlanPolicyNetflowIPv4OutputMonitorName,
cLWlanPolicyNetflowIPv6InputMonitorName,
cLWlanPolicyNetflowIPv6OutputMonitorName,
cLWlanPolicyQosPerSSIDInput,
cLWlanPolicyQosPerSSIDOutput,
cLWlanPolicyQosPerBSSIDInput,
cLWlanPolicyQosPerBSSIDOutput,
cLWlanPolicyBlacklistTimeout,
cLWlanPolicyBlacklistingCapability,
cLWlanPolicyDhcpRequired,
cLWlanPolicyDhcpServerIpAddress,
cLWlanPolicyAaaOverride,
cLWlanPolicyNac,
cLWlanPolicyStatus,
cLWlanPolicyRadiusHttpProfiling,
cLWlanPolicyUserIdleThreshold,
cLWlanPolicyQosFastlane,
cLWlanPolicyDHCPDeviceProfiling,
cLWlanPolicyDHCPOption82Ascii,
cLWlanPolicyDHCPOption82Rid,
cLWlanPolicyDHCPOption82Enable,
cLWlanPolicyDHCPOption82Apmac,
cLWlanPolicyDHCPOption82Apethmac,
cLWlanPolicyDHCPOption82Apname,
cLWlanPolicyDHCPOption82Policytag,
cLWlanPolicyDHCPOption82Aplocation,
cLWlanPolicyDHCPOption82Vlanid,
cLWlanPolicyDHCPOption82Ssid,
cLWlanPolicySplitMacAcl,
cLWlanPolicyVlanCentralSwitching,
cLWlanPolicyPassiveClient,
cLWlanPolicyNBARProtocolDiscovery,
cLWlanPolicyStaticIPMobility,
clWlanPolicyMobilityAnchor,
cLWlanPolicyBroadcastTagging,
cLWlanPolicyWgbVlan,
cLWlanPolicyReanchorClassmap,
cLWlanUmbrellaParamMapName,
cLWlanPolicyAccountingList,
cLWlanPolicyAAAPolicyName,
cLWlanPolicyQosCallSnooping,
cLWlanPolicyDefaultSgt,
cLWlanPolicyInlineTagging,
cLWlanPolicySgaclEnforcement
}
STATUS deprecated
DESCRIPTION
"This collection of objects represent the Policy
configuration of WLAN to be passed to LWAPP AP"
::= { ciscoLwappWlanPolicyGroups 2 }
ciscoLwappWlanPolicyATFConfigGroup OBJECT-GROUP
OBJECTS {
cLWlanPolicyATFRowStatus,
cLWlanPolicyATFPolicyName
}
STATUS current
DESCRIPTION
"This collection of objects represent the ATF Policy
name for 2.4ghz and 5ghz based on band id
corresponding to WLAN policy."
::= { ciscoLwappWlanPolicyGroups 3 }
ciscoLwappWlanAaaPolicyConfigGroup OBJECT-GROUP
OBJECTS {
cLWlanAaaPolicyRowStatus,
cLWlanAaaPolicyNasId1,
cLWlanAaaPolicyNasId2,
cLWlanAaaPolicyNasId3,
cLWlanAaaPolicyRealm
}
STATUS current
DESCRIPTION
"This collection of objects represent the AAA Policy
configuration of WLAN."
::= { ciscoLwappWlanPolicyGroups 4 }
ciscoLwappWlanPolicyConfigGroupRev2 OBJECT-GROUP
OBJECTS {
cLWlanPlcyRowStatus,
cLWlanPolicyDescription,
cLWlanPolicyInterfaceName,
cLWlanPolicyCentralSwitchMode,
cLWlanPolicyCentralAuthMode,
cLWlanPolicyDhcpCentral,
cLWlanPolicyNatPatEnabled,
cLWlanPolicyAssocCentral,
cLWlanPolicyIPv4AclName,
cLWlanPolicyIPv6AclName,
cLWlanPolicyL2AclName,
cLWlanPolicySessionTimeout,
cLWlanPolicyUserIdleTimeout,
cLWlanPolicyClientExclTimeout,
cLWlanPolicyNativeProfiling,
cLWlanPolicySubscriberPolicyName,
cLWlanPolicyHttpDeviceProfiling,
cLWlanPolicyQosPerSSIDInput,
cLWlanPolicyQosPerSSIDOutput,
cLWlanPolicyQosPerBSSIDInput,
cLWlanPolicyQosPerBSSIDOutput,
cLWlanPolicyBlacklistTimeout,
cLWlanPolicyBlacklistingCapability,
cLWlanPolicyDhcpRequired,
cLWlanPolicyDhcpServerIpAddress,
cLWlanPolicyAaaOverride,
cLWlanPolicyNac,
cLWlanPolicyStatus,
cLWlanPolicyRadiusHttpProfiling,
cLWlanPolicyUserIdleThreshold,
cLWlanPolicyQosFastlane,
cLWlanPolicyDHCPDeviceProfiling,
cLWlanPolicyDHCPOption82Ascii,
cLWlanPolicyDHCPOption82Rid,
cLWlanPolicyDHCPOption82Enable,
cLWlanPolicyDHCPOption82Apmac,
cLWlanPolicyDHCPOption82Apethmac,
cLWlanPolicyDHCPOption82Apname,
cLWlanPolicyDHCPOption82Policytag,
cLWlanPolicyDHCPOption82Aplocation,
cLWlanPolicyDHCPOption82Vlanid,
cLWlanPolicyDHCPOption82Ssid,
cLWlanPolicySplitMacAcl,
cLWlanPolicyVlanCentralSwitching,
cLWlanPolicyPassiveClient,
cLWlanPolicyNBARProtocolDiscovery,
cLWlanPolicyStaticIPMobility,
clWlanPolicyMobilityAnchor,
cLWlanPolicyBroadcastTagging,
cLWlanPolicyWgbVlan,
cLWlanPolicyReanchorClassmap,
cLWlanUmbrellaParamMapName,
cLWlanPolicyAccountingList,
cLWlanPolicyAAAPolicyName,
cLWlanPolicyQosCallSnooping,
cLWlanPolicyDefaultSgt,
cLWlanPolicyInlineTagging,
cLWlanPolicySgaclEnforcement
}
STATUS deprecated
DESCRIPTION
"This collection of objects represents the Policy
configuration of WLAN to be passed to LWAPP AP. This
deprecates ciscoLwappWlanPolicyConfigGroupRev1"
::= { ciscoLwappWlanPolicyGroups 5 }
ciscoLwappWlanPolicyConfigGroupFlowMonitor OBJECT-GROUP
OBJECTS {
cLWlanMonitorIPv4InRowStatus,
cLWlanMonitorIPv4OutRowStatus,
cLWlanMonitorIPv6InRowStatus,
cLWlanMonitorIPv6OutRowStatus
}
STATUS current
DESCRIPTION
"This collection of objects represents flow monitors
configured for the wireless profile policy."
::= { ciscoLwappWlanPolicyGroups 6 }
ciscoLwappWlanPolicyConfigGroupRev3 OBJECT-GROUP
OBJECTS {
cLWlanPlcyRowStatus,
cLWlanPolicyDescription,
cLWlanPolicyInterfaceName,
cLWlanPolicyCentralSwitchMode,
cLWlanPolicyCentralAuthMode,
cLWlanPolicyDhcpCentral,
cLWlanPolicyNatPatEnabled,
cLWlanPolicyAssocCentral,
cLWlanPolicyIPv4AclName,
cLWlanPolicyIPv6AclName,
cLWlanPolicyL2AclName,
cLWlanPolicySessionTimeout,
cLWlanPolicyUserIdleTimeout,
cLWlanPolicyClientExclTimeout,
cLWlanPolicyNativeProfiling,
cLWlanPolicySubscriberPolicyName,
cLWlanPolicyHttpDeviceProfiling,
cLWlanPolicyQosPerSSIDInput,
cLWlanPolicyQosPerSSIDOutput,
cLWlanPolicyQosPerBSSIDInput,
cLWlanPolicyQosPerBSSIDOutput,
cLWlanPolicyBlacklistTimeout,
cLWlanPolicyBlacklistingCapability,
cLWlanPolicyDhcpRequired,
cLWlanPolicyDhcpServerIpAddress,
cLWlanPolicyAaaOverride,
cLWlanPolicyNac,
cLWlanPolicyStatus,
cLWlanPolicyRadiusHttpProfiling,
cLWlanPolicyUserIdleThreshold,
cLWlanPolicyQosFastlane,
cLWlanPolicyDHCPDeviceProfiling,
cLWlanPolicyDHCPOption82Ascii,
cLWlanPolicyDHCPOption82Rid,
cLWlanPolicyDHCPOption82Enable,
cLWlanPolicyDHCPOption82Apmac,
cLWlanPolicyDHCPOption82Apethmac,
cLWlanPolicyDHCPOption82Apname,
cLWlanPolicyDHCPOption82Policytag,
cLWlanPolicyDHCPOption82Aplocation,
cLWlanPolicyDHCPOption82Vlanid,
cLWlanPolicyDHCPOption82Ssid,
cLWlanPolicySplitMacAcl,
cLWlanPolicyVlanCentralSwitching,
cLWlanPolicyPassiveClient,
cLWlanPolicyNBARProtocolDiscovery,
cLWlanPolicyStaticIPMobility,
clWlanPolicyMobilityAnchor,
cLWlanPolicyBroadcastTagging,
cLWlanPolicyWgbVlan,
cLWlanPolicyReanchorClassmap,
cLWlanUmbrellaParamMapName,
cLWlanPolicyAccountingList,
cLWlanPolicyAAAPolicyName,
cLWlanPolicyQosCallSnooping,
cLWlanPolicyDefaultSgt,
cLWlanPolicyInlineTagging,
cLWlanPolicySgaclEnforcement,
cLWlanPolicyMdnsPolicy,
cLWlanPolicyHotspotAnqpServer
}
STATUS deprecated
DESCRIPTION
"This collection of objects represents the Policy
configuration of WLAN to be passed to LWAPP AP. This
deprecates ciscoLwappWlanPolicyConfigGroupRev2"
::= { ciscoLwappWlanPolicyGroups 7 }
ciscoLwappWlanPolicyConfigGroupCalenderProfile OBJECT-GROUP
OBJECTS {
cLWlanPolicyCalendarProfileRowStatus,
cLWlanPolicyCalendarProfileWlan,
cLWlanPolicyCalendarProfileClientSession
}
STATUS current
DESCRIPTION
"This collection of objects represents calender profile
configured for the wireless profile policy."
::= { ciscoLwappWlanPolicyGroups 8 }
ciscoLwappWlanPolicyConfigGroupRev4 OBJECT-GROUP
OBJECTS {
cLWlanPlcyRowStatus,
cLWlanPolicyDescription,
cLWlanPolicyInterfaceName,
cLWlanPolicyCentralSwitchMode,
cLWlanPolicyCentralAuthMode,
cLWlanPolicyDhcpCentral,
cLWlanPolicyNatPatEnabled,
cLWlanPolicyAssocCentral,
cLWlanPolicyIPv4AclName,
cLWlanPolicyIPv6AclName,
cLWlanPolicyL2AclName,
cLWlanPolicySessionTimeout,
cLWlanPolicyUserIdleTimeout,
cLWlanPolicyClientExclTimeout,
cLWlanPolicyNativeProfiling,
cLWlanPolicySubscriberPolicyName,
cLWlanPolicyHttpDeviceProfiling,
cLWlanPolicyQosPerSSIDInput,
cLWlanPolicyQosPerSSIDOutput,
cLWlanPolicyQosPerBSSIDInput,
cLWlanPolicyQosPerBSSIDOutput,
cLWlanPolicyBlacklistTimeout,
cLWlanPolicyBlacklistingCapability,
cLWlanPolicyDhcpRequired,
cLWlanPolicyDhcpServerIpAddress,
cLWlanPolicyAaaOverride,
cLWlanPolicyNac,
cLWlanPolicyStatus,
cLWlanPolicyRadiusHttpProfiling,
cLWlanPolicyUserIdleThreshold,
cLWlanPolicyQosFastlane,
cLWlanPolicyDHCPDeviceProfiling,
cLWlanPolicyDHCPOption82Ascii,
cLWlanPolicyDHCPOption82Rid,
cLWlanPolicyDHCPOption82Enable,
cLWlanPolicyDHCPOption82Apmac,
cLWlanPolicyDHCPOption82Apethmac,
cLWlanPolicyDHCPOption82Apname,
cLWlanPolicyDHCPOption82Policytag,
cLWlanPolicyDHCPOption82Aplocation,
cLWlanPolicyDHCPOption82Vlanid,
cLWlanPolicyDHCPOption82Ssid,
cLWlanPolicySplitMacAcl,
cLWlanPolicyVlanCentralSwitching,
cLWlanPolicyPassiveClient,
cLWlanPolicyNBARProtocolDiscovery,
cLWlanPolicyStaticIPMobility,
clWlanPolicyMobilityAnchor,
cLWlanPolicyBroadcastTagging,
cLWlanPolicyWgbVlan,
cLWlanPolicyReanchorClassmap,
cLWlanUmbrellaParamMapName,
cLWlanPolicyAccountingList,
cLWlanPolicyAAAPolicyName,
cLWlanPolicyQosCallSnooping,
cLWlanPolicyDefaultSgt,
cLWlanPolicyInlineTagging,
cLWlanPolicySgaclEnforcement,
cLWlanPolicyMdnsPolicy,
cLWlanPolicyHotspotAnqpServer,
cLWlanPolicyNacType,
cLWlanPolicyARPProxy,
cLWlanPolicyIPv6proxy,
cLWlanPolicyMulticastFilter,
cLWlanPolicyQBSSLoad
}
STATUS deprecated
DESCRIPTION
"This collection of objects represents the Policy
configuration of WLAN to be passed to LWAPP AP. This
deprecates ciscoLwappWlanPolicyConfigGroupRev3"
::= { ciscoLwappWlanPolicyGroups 9 }
ciscoLwappWlanPolicyConfigGroupRev5 OBJECT-GROUP
OBJECTS {
cLWlanPlcyRowStatus,
cLWlanPolicyDescription,
cLWlanPolicyInterfaceName,
cLWlanPolicyCentralSwitchMode,
cLWlanPolicyCentralAuthMode,
cLWlanPolicyDhcpCentral,
cLWlanPolicyNatPatEnabled,
cLWlanPolicyAssocCentral,
cLWlanPolicyIPv4AclName,
cLWlanPolicyIPv6AclName,
cLWlanPolicyL2AclName,
cLWlanPolicySessionTimeout,
cLWlanPolicyUserIdleTimeout,
cLWlanPolicyClientExclTimeout,
cLWlanPolicyNativeProfiling,
cLWlanPolicySubscriberPolicyName,
cLWlanPolicyHttpDeviceProfiling,
cLWlanPolicyQosPerSSIDInput,
cLWlanPolicyQosPerSSIDOutput,
cLWlanPolicyQosPerBSSIDInput,
cLWlanPolicyQosPerBSSIDOutput,
cLWlanPolicyBlacklistTimeout,
cLWlanPolicyBlacklistingCapability,
cLWlanPolicyDhcpRequired,
cLWlanPolicyDhcpServerIpAddress,
cLWlanPolicyAaaOverride,
cLWlanPolicyNac,
cLWlanPolicyStatus,
cLWlanPolicyRadiusHttpProfiling,
cLWlanPolicyUserIdleThreshold,
cLWlanPolicyQosFastlane,
cLWlanPolicyDHCPDeviceProfiling,
cLWlanPolicyDHCPOption82Ascii,
cLWlanPolicyDHCPOption82Rid,
cLWlanPolicyDHCPOption82Enable,
cLWlanPolicyDHCPOption82Apmac,
cLWlanPolicyDHCPOption82Apethmac,
cLWlanPolicyDHCPOption82Apname,
cLWlanPolicyDHCPOption82Policytag,
cLWlanPolicyDHCPOption82Aplocation,
cLWlanPolicyDHCPOption82Vlanid,
cLWlanPolicyDHCPOption82Ssid,
cLWlanPolicySplitMacAcl,
cLWlanPolicyVlanCentralSwitching,
cLWlanPolicyPassiveClient,
cLWlanPolicyNBARProtocolDiscovery,
cLWlanPolicyStaticIPMobility,
clWlanPolicyMobilityAnchor,
cLWlanPolicyBroadcastTagging,
cLWlanPolicyWgbVlan,
cLWlanPolicyReanchorClassmap,
cLWlanUmbrellaParamMapName,
cLWlanPolicyAccountingList,
cLWlanPolicyAAAPolicyName,
cLWlanPolicyQosCallSnooping,
cLWlanPolicyDefaultSgt,
cLWlanPolicyInlineTagging,
cLWlanPolicySgaclEnforcement,
cLWlanPolicyMdnsPolicy,
cLWlanPolicyHotspotAnqpServer,
cLWlanPolicyARPProxy,
cLWlanPolicyIPv6proxy,
cLWlanPolicyMulticastFilter,
cLWlanPolicyQBSSLoad
}
STATUS current
DESCRIPTION
"This collection of objects represents the Policy
configuration of WLAN to be passed to LWAPP AP. This
deprecates ciscoLwappWlanPolicyConfigGroupRev4"
::= { ciscoLwappWlanPolicyGroups 10 }
END