-- *******************************************************************
-- CISCO-LWAPP-WLAN-MIB.my
-- This MIB helps to manage the WLANs on the controller
-- January 2006, Devesh Pujari, Prasanna Viswakumar
--
-- Copyright (c) 2006, 2007 by Cisco Systems, Inc.
-- All rights reserved.
-- *******************************************************************CISCO-LWAPP-WLAN-MIB DEFINITIONS::=BEGINIMPORTSMODULE-IDENTITY,OBJECT-TYPE,Unsigned32FROM SNMPv2-SMI
MODULE-COMPLIANCE,OBJECT-GROUPFROM SNMPv2-CONF
TruthValue,RowStatus,DisplayString,StorageTypeFROM SNMPv2-TC
SnmpAdminStringFROM SNMP-FRAMEWORK-MIB
ciscoMgmt
FROM CISCO-SMI;ciscoLwappWlanMIB MODULE-IDENTITYLAST-UPDATED"2007020300Z"ORGANIZATION"Cisco Systems Inc."CONTACT-INFO"Cisco Systems,
Customer Service
Postal: 170 West Tasman Drive
San Jose, CA 95134
USA
Tel: +1 800 553-NETS
Email: cs-wnbu-snmp@cisco.com"DESCRIPTION"This MIB is intended to be implemented on all those
devices operating as Central Controllers (CC) that
terminate the Light Weight Access Point Protocol
tunnel from Cisco Light-weight LWAPP Access Points.
This MIB helps to manage the WLANs on the controller.
The relationship between CC and the LWAPP APs
can be depicted as follows:
+......+ +......+ +......+ +......+
+ + + + + + + +
+ CC + + CC + + CC + + CC +
+ + + + + + + +
+......+ +......+ +......+ +......+
.. . . .
.. . . .
. . . . .
. . . . .
. . . . .
. . . . .
+......+ +......+ +......+ +......+ +......+
+ + + + + + + + + +
+ AP + + AP + + AP + + AP + + AP +
+ + + + + + + + + +
+......+ +......+ +......+ +......+ +......+
. . . .
. . . . .
. . . . .
. . . . .
. . . . .
+......+ +......+ +......+ +......+ +......+
+ + + + + + + + + +
+ MN + + MN + + MN + + MN + + MN +
+ + + + + + + + + +
+......+ +......+ +......+ +......+ +......+
The LWAPP tunnel exists between the controller and
the APs. The MNs communicate with the APs through
the protocol defined by the 802.11 standard.
LWAPP APs, upon bootup, discover and join one of the
controllers and the controller pushes the configuration,
that includes the WLAN parameters, to the LWAPP APs.
The APs then encapsulate all the 802.11 frames from
wireless clients inside LWAPP frames and forward
the LWAPP frames to the controller.
GLOSSARY
Access Point ( AP )
An entity that contains an 802.11 medium access
control ( MAC ) and physical layer ( PHY ) interface
and provides access to the distribution services via
the wireless medium for associated clients.
LWAPP APs encapsulate all the 802.11 frames in
LWAPP frames and sends it to the controller to which
it is logically connected to.
Central Controller ( CC )
The central entity that terminates the LWAPP protocol
tunnel from the LWAPP APs. Throughout this MIB,
this entity also referred to as 'controller'.
Light Weight Access Point Protocol ( LWAPP )
This is a generic protocol that defines the
communication between the Access Points and the
controllers.
Mobile Node ( MN )
A roaming 802.11 wireless device in a wireless
network associated with an access point.
Access Control List ( ACL )
A list of rules used to restrict the traffic reaching
an interface or the CPU or WLAN. Each ACL is an ordered
set of rules and actions. If a rule matches then the
action for that rule is applied to the packet.
802.1x
The IEEE ratified standard for enforcing port based
access control. This was originally intended for
use on wired LANs and later extended for use in
802.11 WLAN environments. This defines an
architecture with three main parts - a supplicant
(Ex. an 802.11 wireless client), an authenticator
(the AP) and an authentication server(a Radius
server). The authenticator passes messages back
and forth between the supplicant and the
authentication server to enable the supplicant
get authenticated to the network.
Temporal Key Integrity Protocol ( TKIP )
A security protocol defined to enhance the limitations
of WEP. Message Integrity Check and per-packet keying
on all WEP-encrypted frames are two significant
enhancements provided by TKIP to WEP.
Cisco Key Integrity Protocol ( CKIP )
A proprietary implementation similar to TKIP. CKIP
implements key permutation for protecting the CKIP
key against attacks. Other features of CKIP include
expansion of encryption key to 16 bytes of length for
key protection and MIC to ensure data integrity.
Wired Equivalent Privacy ( WEP )
A security method defined by 802.11. WEP uses a
symmetric key stream cipher called RC4 to encrypt the
data packets.
Wi-Fi Protected Access ( WPA )
Wi-Fi Protected Access (WPA and WPA2) are security
systems created in response to several serious
weaknesses found in Wired Equivalent Privacy (WEP).
WPA implements the majority of the IEEE 802.11i
standard, and was intended as an intermediate
measure to take the place of WEP while 802.11i was
prepared. WPA is designed to work with all wireless
network interface cards, but not necessarily with
first generation wireless access points.
WLAN Layer 2 Security
WLAN layer 2 (MAC) security defines the encryption and
authentication approaches such as 802.1x, WPA,
WPA2, CKIP and WEP.
REFERENCE
[1] Wireless LAN Medium Access Control ( MAC ) and
Physical Layer ( PHY ) Specifications.
[2] Draft-obara-capwap-lwapp-00.txt, IETF Light
Weight Access Point Protocol
[3] IEEE 802.11 - The original 1 Mbit/s and 2 Mbit/s,
2.4 GHz RF and IR standard."REVISION"200702030000Z"DESCRIPTION"Added following objects in cLWlanConfigTable:
cLWlanProfileName
cLWlanSsid
cLWlanDiagChan
cLWlanStorageType
Added following table:
cLWlanConfigClientTable
Added the following OBJECT-GROUPs:
ciscoLwappWlanConfigGroupSup1
ciscoLwappWlanConfigClientGroup
Added ciscoLwappWlanMIBComplianceRev1 MODULE-COMPLIANCE."REVISION"200603210000Z"DESCRIPTION"Initial version of this MIB module."::={ ciscoMgmt 512}ciscoLwappWlanMIBNotifs OBJECTIDENTIFIER::={ ciscoLwappWlanMIB 0}ciscoLwappWlanMIBObjects OBJECTIDENTIFIER::={ ciscoLwappWlanMIB 1}ciscoLwappWlanMIBConform OBJECTIDENTIFIER::={ ciscoLwappWlanMIB 2}ciscoLwappWlanConfig OBJECTIDENTIFIER::={ ciscoLwappWlanMIBObjects 1}-- ********************************************************************
-- WLAN configuration
-- ********************************************************************cLWlanConfigTable OBJECT-TYPESYNTAXSEQUENCEOF CLWlanConfigEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"This table represents the WLAN configuration sent by
the controller to the LWAPP APs for their operation.
LWAPP APs exchange configuration messages with the
controller and get the required configuration for
their 802.11 related operations. As part of these
messages, the WLAN configuration is pushed by the
controller to the LWAPP APs.
This table doesn't have any dependencies on other
existing tables. By defining cLWlanIndex, the
unique identifier for a WLAN, this table provides
a common index structure for use in several other
new tables that populate information on security
related attributes like authentication, encryption,
802.11 parameters, Quality-of-Service attributes
etc., that would relate to a particular WLAN.
Rows are added or deleted by explicit
management actions initiated by the user from a
network management station through the
cLWlanRowStatus object."::={ ciscoLwappWlanConfig 1}cLWlanConfigEntry OBJECT-TYPESYNTAX CLWlanConfigEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"Each entry in this table represents the WLAN
configuration sent by the controller to LWAPP APs
for use during their operations. entries can be added/deleted by explicit management actions by NMS or by user console"INDEX{ cLWlanIndex }::={ cLWlanConfigTable 1}
CLWlanConfigEntry ::=SEQUENCE{
cLWlanIndex Unsigned32,
cLWlanRowStatus RowStatus,
cLWlanProfileName SnmpAdminString,
cLWlanSsid OCTETSTRING,
cLWlanDiagChan TruthValue,
cLWlanStorageType StorageType}cLWlanIndex OBJECT-TYPESYNTAXUnsigned32(1..255)MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"This object uniquely identifies one instance of
a WLAN on the controller."::={ cLWlanConfigEntry 1}cLWlanRowStatus OBJECT-TYPESYNTAXRowStatusMAX-ACCESSread-createSTATUScurrentDESCRIPTION"This is the status column for this row and used
to create and delete specific instances of rows
in this table.
The following objects are mandatory for successful
creation of an entry:
cLWlanProfileName
cLWlanSsid."::={ cLWlanConfigEntry 2}cLWlanProfileName OBJECT-TYPESYNTAXSnmpAdminString(SIZE(1..64))MAX-ACCESSread-createSTATUScurrentDESCRIPTION"This object represents the profile name assigned
to this WLAN. The name assigned to a WLAN has to be
unique across all the WLANs on the controller.
An administrator can assign a meaningful
name that could be later used to refer a particular
WLAN on the controller. This object cannot be
modified when cLWlanRowStatus is 'active'."::={ cLWlanConfigEntry 3}cLWlanSsid OBJECT-TYPESYNTAXOCTETSTRING(SIZE(1..32))MAX-ACCESSread-createSTATUScurrentDESCRIPTION"This object represents the SSID assigned to
this WLAN. The access points will broadcast this SSID
on this WLAN. Different WLAN could use the same SSID as
long as the layer 2 security is different. This object
cannot be modified when cLWlanRowStatus is 'active'."::={ cLWlanConfigEntry 4}cLWlanDiagChan OBJECT-TYPESYNTAXTruthValueMAX-ACCESSread-createSTATUScurrentDESCRIPTION"This object is used to configure this WLAN as a
diagnostic WLAN. A value of 'true' indicates that
the diagnostic WLAN is enabled. A value of 'false'
indicates that the diagnostic WLAN is disabled."DEFVAL{ false }::={ cLWlanConfigEntry 5}cLWlanStorageType OBJECT-TYPESYNTAXStorageTypeMAX-ACCESSread-createSTATUScurrentDESCRIPTION"This object represnts the storage type for this conceptual
row."DEFVAL{ nonVolatile }::={ cLWlanConfigEntry 6}-- ********************************************************************
-- WLAN Client Configuration
-- ********************************************************************cLWlanConfigClientTable OBJECT-TYPE
SYNTAXSEQUENCEOF CLWlanConfigClientEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"This table represents the WLAN configuration for
the 802.11 wireless clients that are associated
with the APs that have joined this controller.
The creation of a new row in cLWlanConfigTable,
through an explicit network management action,
results in creation of an entry in this table.
Similarly, deletion of a row in
cLWlanConfigTable through user action causes the
deletion of corresponding row in this table.
This table has an one-to-one relationship with
cLWlanConfigTable. There exists an entry in this
table for each corresponding entry in the
cLWlanConfigTable."::={ ciscoLwappWlanConfig 2}cLWlanConfigClientEntry OBJECT-TYPESYNTAX CLWlanConfigClientEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"Each entry represents a conceptual row in this
table and provides the information about the
clients associated on the WLAN, uniquely identified by
the cLWlanIndex."AUGMENTS{ cLWlanConfigEntry }::={ cLWlanConfigClientTable 1}
CLWlanConfigClientEntry ::=SEQUENCE{
cLWlanClientAclName DisplayString}cLWlanClientAclName OBJECT-TYPESYNTAXDisplayString(SIZE(0..64))MAX-ACCESSread-writeSTATUScurrentDESCRIPTION"This object represents the name of the ACL applied
to this WLAN. If it is required to remove the ACL
name for a WLAN, it should be set to 'none'.
ACL's are applied in the following priority order -
interfaces ACLs, WLAN ACLs, client ACLs."::={ cLWlanConfigClientEntry 1}-- ********************************************************************
-- * Compliance statements
-- ********************************************************************ciscoLwappWlanMIBCompliances OBJECTIDENTIFIER::={ ciscoLwappWlanMIBConform 1}ciscoLwappWlanMIBGroups OBJECTIDENTIFIER::={ ciscoLwappWlanMIBConform 2}ciscoLwappWlanMIBCompliance MODULE-COMPLIANCESTATUSdeprecatedDESCRIPTION"The compliance statement for the SNMP entities that
implement the ciscoLwappWlanMIB module."MODULE-- this moduleMANDATORY-GROUPS{ ciscoLwappWlanConfigGroup }OBJECT cLWlanRowStatus
SYNTAXINTEGER{
active(1),
createAndGo(4),
destroy(6)}DESCRIPTION"An implementation is only required to support
three of the six enumerated values of the
RowStatus textual convention, specifically,
'active', 'createAndGo' and 'destroy'."::={ ciscoLwappWlanMIBCompliances 1}ciscoLwappWlanMIBComplianceRev1 MODULE-COMPLIANCESTATUScurrentDESCRIPTION"The compliance statement for the SNMP entities that
implement the ciscoLwappWlanMIB module."MODULE-- this moduleMANDATORY-GROUPS{
ciscoLwappWlanConfigGroupSup1,
ciscoLwappWlanConfigClientGroup
}OBJECT cLWlanRowStatus
SYNTAXINTEGER{
active(1),
createAndGo(4),
destroy(6)}DESCRIPTION"An implementation is only required to support
three of the six enumerated values of the
RowStatus textual convention, specifically,
'active', 'createAndGo' and 'destroy'."::={ ciscoLwappWlanMIBCompliances 2}-- ********************************************************************
-- * Units of conformance
-- ********************************************************************ciscoLwappWlanConfigGroup OBJECT-GROUPOBJECTS{ cLWlanRowStatus }STATUSdeprecatedDESCRIPTION"This collection of objects represent the
configuration of WLANs on the controller to be passed
to an LWAPP AP."::={ ciscoLwappWlanMIBGroups 1}ciscoLwappWlanConfigGroupSup1 OBJECT-GROUPOBJECTS{
cLWlanRowStatus,
cLWlanProfileName,
cLWlanSsid,
cLWlanDiagChan,
cLWlanStorageType
}
STATUScurrentDESCRIPTION"This collection of objects represent the
configuration of WLANs on the controller to be passed
to an LWAPP AP."::={ ciscoLwappWlanMIBGroups 2}ciscoLwappWlanConfigClientGroup OBJECT-GROUPOBJECTS{ cLWlanClientAclName }STATUScurrentDESCRIPTION"This collection of objects represent the
configuration of WLANs on the controller to be passed
to an 8021.11 clients."::={ ciscoLwappWlanMIBGroups 3}END