AWC-VLAN-CFG-MIB

All MIBs › AWC-VLAN-CFG-MIB

Organization: Cisco Systems, Inc.

Last Updated: 2002-09-06

Category: Cisco Devices, VLAN and Bridging, Wireless and WLAN

Description: Manages VLAN configuration on Cisco Aironet wireless access points, including VLAN-to-SSID mapping.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is AWC-VLAN-CFG-MIB?

AWC-VLAN-CFG-MIB manages VLAN configuration on Cisco Aironet wireless access points (the "AWC" prefix referencing Aironet Wireless Communications, later acquired by Cisco), covering VLAN-to-SSID mapping, encapsulation mode, and encryption settings for wireless VLANs. Its general data categories are configuration objects: VLAN identifiers, encapsulation mode, native VLAN assignment, per-VLAN enable/row-status, and security parameters like allowed encryption and unicast key rotation interval. While primarily a configuration MIB, it supports software/service status monitoring by exposing awcVlanEnabled and awcVlanRowStatus per VLAN entry, letting an operator confirm whether a configured wireless VLAN is actually active and properly instantiated on the AP. It depends on general 802.1Q VLAN and 802.11 wireless security concepts, and complements Cisco's broader Aironet/wireless MIB suite for radio and association monitoring. It is deployed on enterprise Cisco Aironet access points where multiple VLANs are mapped to different SSIDs for segmented wireless access. Engineers can download the AWC-VLAN-CFG-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in AWC-VLAN-CFG-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco Aironet wireless access point

Monitoring Examples

An admin would poll awcVlanCfgTable/awcVlanCfgEntry, keyed by awcVlanIndex, to verify awcVlanEnabled and awcVlanRowStatus for each configured VLAN, catching a VLAN that failed to activate (row status not "active"). awcNativeVlanId and awcVlanEncapMode reveal whether native VLAN tagging is configured correctly across the trunk to the AP, while awcVlanNUcastKeyRotationInterval and awcVlanAllowEncrypted expose whether the expected encryption/key-rotation policy is actually applied to a given SSID's VLAN. awcMaxVlanIds tells the operator the maximum VLANs the AP hardware can support, useful when planning additional SSID/VLAN mappings.

What Can Be Monitored

VLAN enable/row status
VLAN-to-SSID/encapsulation mode
native VLAN ID
encryption allowed per VLAN
unicast key rotation interval
maximum supported VLAN count

Imported Objects

From AWCVX-MIB

AwcDot11MicAlgorithm
AwcDot11WEPKeyPermuteAlgorithm
AwcPfPriority
AwcPolId
AwcVlanId
WEPKeytype128
awcVx	MODULE-IDENTITY

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

RowStatus
TEXTUAL-CONVENTION
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
awcVlanCfgMIB	1.3.6.1.4.1.522.3.21			Aironet products VLAN Configuration MIB.
awcVlanCfgObjects	1.3.6.1.4.1.522.3.21.1
U32 awcMaxVlanIds	1.3.6.1.4.1.522.3.21.1.1	Unsigned32	read-only	The Maximum number of discrete VLAN IDs supported. The VLAN IDs need not be consecutive.
AWC awcVlanEncapMode	1.3.6.1.4.1.522.3.21.1.2	AwcVlanEncapType	read-only	The encapsulation mode setting controls transmit tagging logic for all ports. The value of this object is derived from other settings within the VLAN MIB.
AWC awcNativeVlanId	1.3.6.1.4.1.522.3.21.1.3	AwcVlanId	read-write	Native VLAN ID for the device. The default Native VLAN ID is 0, for no VLAN ID. If the device is attached to an Ethernet bridge/switch VLAN port then a non-zero Native VLAN ID must match the Port VLAN ID of the bridge/switch port. The Native VLAN ID is the default VLAN ID for frames that are not otherwise associated with a VLAN ID.
T/F awcVlanAllowEncrypted	1.3.6.1.4.1.522.3.21.1.4	TruthValue	read-write	When this attribute is true, the STA shall indicate at the MAC service interface received MSDUs regardless of the setting of the WEP subfield of the Frame Control field, so long as no other VLAN parameters necessitate use of encryption. The default value of this attribute shall be true. The general use for awcVlanAllowEncrypted to be true even when no static WEP keys are set for a VLAN is to allow a station to utilize EAP authentication to encrypt directed packets, even while multicast packets are unencrypted.
T/F awcVlanAnyEnabled	1.3.6.1.4.1.522.3.21.1.5	TruthValue	read-write	When this attribute is true, VLAN operation of the system is enabled when any awcVlanEnabled value is true. When this attribute is false, VLAN operation is disabled. The awcVlanAnyEnabled thus acts as a master switch to enable or disable VLAN operation.
awcVlanCfgTable	1.3.6.1.4.1.522.3.21.1.6		not-accessible	A table used for configuring and managing VLANS.
awcVlanCfgEntry	1.3.6.1.4.1.522.3.21.1.6.1		not-accessible	VLAN table entry containing parameters for configuring and managing a particular VLAN.
AWC awcVlanIndex	1.3.6.1.4.1.522.3.21.1.6.1.1	AwcVlanIndex	not-accessible	VLAN ID to which the parameters in this conceptual row shall be applied. If 4095, the parameters in this conceptual row shall be applied to non-VLAN-tagged frames.
AWC awcVlanPolId	1.3.6.1.4.1.522.3.21.1.6.1.2	AwcPolId	read-create	Default Policy Group Identifier for hosts occupying this VLAN.
T/F awcVlanEnabled	1.3.6.1.4.1.522.3.21.1.6.1.3	TruthValue	read-create	If true, this VLAN is enabled on all trunk and hybrid ports. If false, this VLAN is disabled on all ports.
INT awcVlanNUcastKeyRotationInterval	1.3.6.1.4.1.522.3.21.1.6.1.4	INTEGER	read-create	WEP key rotation period. 0 indicates no key rotation.
ROW awcVlanRowStatus	1.3.6.1.4.1.522.3.21.1.6.1.5	RowStatus	read-create	Used for creating/deleting conceptual rows in this table.
AWC awcVlanMicAlgorithm	1.3.6.1.4.1.522.3.21.1.6.1.6	AwcDot11MicAlgorithm	read-create	Auxiliary Message Integrity Check (MIC) calculated on WEP-encoded packets of stations assigned to this VLAN. This object is not applicable for the reserved VLAN 4095.
AWC awcVlanWEPKeyPermuteAlgorithm	1.3.6.1.4.1.522.3.21.1.6.1.7	AwcDot11WEPKeyPermuteAlgorithm	read-create	Function through which the WEP encryption key is permuted between key renewal periods for stations assigned to this VLAN. This object is not applicable for the reserved VLAN 4095.
OCT awcVlanName	1.3.6.1.4.1.522.3.21.1.6.1.8	OCTET STRING	read-create	Descriptive textual name for the VLAN.
AWC awcVlanDefaultUserPriority	1.3.6.1.4.1.522.3.21.1.6.1.9	AwcPfPriority	read-create	Designation of the priority assigned to packets transmitted over this VLAN, if no other filter or classification rule has yet assigned a priority.
T/F awcVlanAlert	1.3.6.1.4.1.522.3.21.1.6.1.10	TruthValue	read-create	Should an alert be registered when a packet on this VLAN is observed?
awcVlanNUcastKeyTable	1.3.6.1.4.1.522.3.21.1.7		not-accessible	Default Shared WEP Keys for all 802.11 packets transmitted and received as non-VLAN-tagged frames over a port with the Port VLAN ID specified as awcVlanIndex. If WEP encryption is enabled for transmitted 802.11 frames, then the set of 1 to 4 default shared WEP keys are used to encrypt transmitted 802.11 broadcast/multicast frames associated with the Port VLAN ID. The shared WEP keys are also used to encrypt/decrypt unicast frames, associated with the Port VLAN ID, if an individual session key is not defined for the target station address.
awcVlanNUcastKeyEntry	1.3.6.1.4.1.522.3.21.1.7.1		not-accessible	An entry in the awcVlanNUcastKeyTable table.
INT awcVlanNUcastKeyIndex	1.3.6.1.4.1.522.3.21.1.7.1.1	INTEGER	not-accessible	802.11 WEP Key Index, + 1, used when transmitting or receiving frames with this key.
INT awcVlanNUcastKeyLen	1.3.6.1.4.1.522.3.21.1.7.1.2	INTEGER	read-write	Length in octets of awcVlanNUcastKeyValue. Common values are 5 for 40-bit WEP and 13 for 128-bit WEP. A value of 0 means that the key is not set.
WEP awcVlanNUcastKeyValue	1.3.6.1.4.1.522.3.21.1.7.1.3	WEPKeytype128	read-write	A WEP default secret key value. The value is write-only (attempt to read will result in return of zero-length string).
AWC awcVlanAllowUnencryptedVlanId	1.3.6.1.4.1.522.3.21.1.8	AwcVlanId	read-write	Single VLAN ID on which unencrypted packets are allowed. The default Unencrypted VLAN ID is 0, meaning that all VLANs require full encryption.
awcVlanCfgNotifications	1.3.6.1.4.1.522.3.21.2
awcVlanCfgConformance	1.3.6.1.4.1.522.3.21.3
awcVlanCfgCompliances	1.3.6.1.4.1.522.3.21.3.1
awcVlanCfgCompliance	1.3.6.1.4.1.522.3.21.3.1.1			The compliance statement for the awcVlanCfgMIB group.
awcVlanCfgGroups	1.3.6.1.4.1.522.3.21.3.2
awcVlanCfgObjectsGroup	1.3.6.1.4.1.522.3.21.3.2.1

RFC description

Configures VLAN settings including 802.1Q encapsulation and security parameters for Cisco Aironet wireless products.

Start monitoring Cisco Aironet wireless access points (legacy) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download AWC-VLAN-CFG-MIB

What Is AWC-VLAN-CFG-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description