CISCO-LWAPP-IPV6-MIB

All MIBs › CISCO-LWAPP-IPV6-MIB

Organization: Cisco Systems Inc.

Last Updated: 2017-05-23

Description: MIB for configuring and monitoring IPv6 CPU ACLs that restrict traffic reaching the NPU on Cisco LWAPP wireless LAN controllers

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CISCO-LWAPP-IPV6-MIB?

CISCO-LWAPP-IPV6-MIB manages IPv6 CPU access control lists on Cisco Wireless LAN Controllers, restricting IPv6 traffic that reaches the controller's CPU from the Network Processing Unit (NPU). It exposes named ACL definitions with an apply mode and counter-clear control, and a per-ACL rule table specifying each rule's action (permit/deny), direction, and source address type/match criteria. This is a security/configuration-monitoring MIB: administrators verify which IPv6 ACLs are applied to the controller's control plane and inspect individual rules to confirm expected traffic filtering, mirroring the role of the IPv4 CPU ACL MIB on the same platform. It parallels the IPv4 CISCO-LWAPP-ACL-MIB and depends on the controller's general IPv6 addressing support. It is deployed on Cisco wireless LAN controllers that support IPv6 management/data traffic. Engineers can download the CISCO-LWAPP-IPV6-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-LWAPP-IPV6-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco Wireless LAN Controllers

Monitoring Examples

An operator enumerates cLIpv6AclTable/cLIpv6AclEntry by cLIpv6AclName to see cLIpv6AclApplyMode and cLIpv6AclRowStatus, then drills into cLIpv6AclRuleTable/cLIpv6AclRuleEntry (keyed by cLIpv6AclRuleIndex) to check each rule's cLIpv6AclRuleAction, cLIpv6AclRuleDirection, and cLIpv6AclRuleSourceInetAddressType. This confirms whether IPv6 traffic to the controller CPU is being filtered as intended, and cLIpv6AclCounterClear lets counters be reset after investigating a suspected policy violation.

What Can Be Monitored

IPv6 ACL definitions and apply mode
IPv6 ACL rule action/direction
IPv6 ACL source address matching
ACL row status
ACL counter state

Imported Objects

From CISCO-LWAPP-DOT11-CLIENT-MIB

cldcClientMacAddress

OBJECT-TYPE

From CISCO-SMI

ciscoMgmt

OBJECT-IDENTITY

From INET-ADDRESS-MIB

InetAddress
InetAddressType
InetPortNumber

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

RowStatus
TruthValue

How to Use in IPNetwork Monitor

Example using cLIpv6AclRuleHits OID:

Select a Cisco Wireless LAN Controller (LWAPP-based) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type cLIpv6AclRuleHits into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. This object specifies the number of hits in the particular rule under the ACL. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
C32 cIpv6NbNdSuppressDropCounterReasonInOut	1.3.6.1.4.1.9.9.847.1.2.2.3	Counter32	read-only	This object represents the total number of suppress drop counter for the reason owner is on the input interface.
ciscoLwappIpv6Config	1.3.6.1.4.1.9.9.847.1.1
ciscoLwappIpv6MIB	1.3.6.1.4.1.9.9.847			This MIB is intended to be implemented on all those devices operating as Central Controllers (CC) that terminate the Light Weight Access Point Protocol tunnel from Light-weight LWAPP Access Points. This MIB provides configuration and status information about the ACLs on the controller. Particularly this mib covers the CPU ACLs for the wireless controllers. Traffic to the controller CPU comes from the NPU (Network Processing Unit). Using CPU ACLs, the user can place restrictions on type of traffic reaching the CPU of the controller from the NPU. CPU ACLs introduce an ACL for the traffic to the CPU of controller. With this ACL the type of packets reaching the CPU can be controlled. The mode of operation is as follows. The administrator designates one ACL for the traffic to the CPU. The ACL kicks in for packets from the NPU to the CPU. Each ACL is an ordered set of rules. If a rule matches then action for that rule is applied to the packet. The decision to send or drop the packet is taken based on the action parameter of the ACL. There will be no ACL for the packets from the CPU to the NPU. GLOSSARY Access Control List ( ACL ) A list of rules used to restrict the traffic reaching an interface or the CPU. Each ACL is an ordered set of rules and actions. If a rule matches then the action for that rule is applied to the packet. Access Point ( AP ) An entity that contains an 802.11 medium access control ( MAC ) and physical layer ( PHY ) interface and provides acess to the distribution services via the wireless medium for associated clients. CPU ACL ( CPU ACL ) The ACL applied to the CPU. This controls the type of traffic reaching the CPU of the controller. Network Processing Unit ( NPU ) This entity is responsible for forwarding traffic to the CPU. The only exceptions are data coming thorugh the console port and the Service port i.e. these communicate directly with the CPU and not via the NPU. Light Weight Access Point Protocol ( LWAPP ) This is a generic protocol that defines the communciation between the Access Points and the Central Controller. Cryptographically Generated Addresses (CGA) Cryptographically Generated Addresses (CGAs) are IPv6 addresses, which allow for a secure association of an IPv6 address, the CGA, with a public key. Internet Protocol Version 6(IPV6) An IPv6 address is a numerical label that is used to identify a network interface of a computer or other network node participating in an IPv6 computer network. An IP address serves the purpose of uniquely identifying an individual network interface of a host, locating it on the network, and thus permitting the routing of IP packets between hosts. For routing, IP addresses are present in fields of the packet header where they indicate source and destination of the packet. IPv6 is the successor to the first addressing infrastructure of the Internet, Internet Protocol version 4 (IPv4). In contrast to IPv4, which defined an IP address as a 32-bit value, IPv6 addresses have a size of 128 bits. Therefore, IPv6 has a vastly enlarged address space compared to IPv4. Neighbor Discovery Protocol (NDP) The NDP is a protocol in the Internet protocol suite used with IPv6. It operates in the Link Layer of the Internet model, and is responsible for address autoconfiguration of nodes, discovery of other nodes on the link, determining the addresses of other nodes, duplicate address detection, finding available routers and Domain Name System (DNS) servers, address prefix discovery, and maintaining reachability information of other active neighbor nodes. NDP defines five ICMPv6 packet types for the purpose of router solicitation, router advertisement, neighbor solicitation, neighbor advertisement, and network redirects. Router Solicitation(RS) Hosts inquire with Router Solicitation messages to locate routers on an attached link. Routers which forward packets not addressed to them generate Router Advertisements immediately upon receipt of this message rather than at their next scheduled time. Router Advertisement(RA) Routers advertise their presence together with various link and Internet parameters either periodically, or in response to a Router Solicitation message. Neighbor Solicitation (NS) Neighbor solicitations are used by nodes to determine the link layer address of a neighbor, or to verify that a neighbor is still reachable via a cached link layer address. Neighbor Advertisement(NA) Neighbor advertisements are used by nodes to respond to a Neighbor Solicitation message. Redirect Routers may inform hosts of a better first hop router for a destination. REFERENCE [1] Part 11 Wireless LAN Medium Access Control ( MAC ) and Physical Layer ( PHY ) Specifications.
ciscoLwappIpv6MIBCompliance	1.3.6.1.4.1.9.9.847.2.1.1			The compliance statement for the SNMP entities that implement the ciscoLwappIpv6MIB module.
ciscoLwappIpv6MIBCompliances	1.3.6.1.4.1.9.9.847.2.1
ciscoLwappIpv6MIBConfigGroup	1.3.6.1.4.1.9.9.847.2.2.1			This collection of config objects specifies the required parameters for LWAPP IPv6 module.
ciscoLwappIpv6MIBConform	1.3.6.1.4.1.9.9.847.2
ciscoLwappIpv6MIBGroups	1.3.6.1.4.1.9.9.847.2.2
ciscoLwappIpv6MIBNotifs	1.3.6.1.4.1.9.9.847.0
ciscoLwappIpv6MIBObjects	1.3.6.1.4.1.9.9.847.1
ciscoLwappIpv6MIBStatsGroup	1.3.6.1.4.1.9.9.847.2.2.2			This collection of status objects specifies the required parameters for LWAPP IPv6 module.
ciscoLwappIpv6NbRaThrottleConfig	1.3.6.1.4.1.9.9.847.1.1.4
ciscoLwappIpv6NbTimerConfig	1.3.6.1.4.1.9.9.847.1.1.5
ciscoLwappIpv6RaFiltering	1.3.6.1.4.1.9.9.847.1.1.3
ciscoLwappIpv6Stats	1.3.6.1.4.1.9.9.847.1.2
INT cLIpv6AclApplyMode	1.3.6.1.4.1.9.9.847.1.1.1.1.2	INTEGER	read-only	This object represents the apply mode of the ACL on the device. A value of notapplied (1) indicates that, ACL has not been applied on the device. A value of applied (2) indicates that, ACL has been applied on the device.
T/F cLIpv6AclCounterClear	1.3.6.1.4.1.9.9.847.1.1.1.1.3	TruthValue	read-create	This object specifies the ipv6 acl counter clear value. A value of 'true' indicates that, ACL counters will be cleared. A value of 'false' indicates that, ACL counters will not be cleared.
cLIpv6AclEntry	1.3.6.1.4.1.9.9.847.1.1.1.1		not-accessible	Each entry in this table provides information about one IPv6 ACL of the controller.
STR cLIpv6AclName	1.3.6.1.4.1.9.9.847.1.1.1.1.1	SnmpAdminString	not-accessible	This object represents name of the Access Control List.
U32 cLIpv6AclNewRuleIndex	1.3.6.1.4.1.9.9.847.1.1.2.1.16	Unsigned32	read-create	This object specifies the new Index of the ACL rule. This object should be updated if the requirement is to reset the sequence of the rules of an ACL.
ROW cLIpv6AclRowStatus	1.3.6.1.4.1.9.9.847.1.1.1.1.4	RowStatus	read-create	This is the status column for this row and is used to create and delete specific instances of rows in this table. ACL Name is mandatory for creation as well as deletion.
INT cLIpv6AclRuleAction	1.3.6.1.4.1.9.9.847.1.1.2.1.2	INTEGER	read-create	This object specifies the permission mode of a rule. A value of deny(0) indicates that, rule is to be denied. A value of permit(1) indicates that, rule is to be permit.
IP cLIpv6AclRuleDestinationInetAddress	1.3.6.1.4.1.9.9.847.1.1.2.1.8	InetAddress	read-create	This object specifies the destination IP address of the ACL rule.
IPt cLIpv6AclRuleDestinationInetAddressType	1.3.6.1.4.1.9.9.847.1.1.2.1.7	InetAddressType	read-create	This object specifies the type of the destination IP address of the ACL rule.
U32 cLIpv6AclRuleDestinationPrefixLength	1.3.6.1.4.1.9.9.847.1.1.2.1.9	Unsigned32	read-create	This object specifies the prefix length for destination IP address of the ACL rule.
INT cLIpv6AclRuleDirection	1.3.6.1.4.1.9.9.847.1.1.2.1.3	INTEGER	read-create	This object specifies the direction of the packet to which the rule would be applied. A value of inbound(1) indicates that, rule is applied to inbound packets A value of outbound(2) indicates that,rule is applied to outbound packets A value of any(3) indicates that, rule is applied to any direction of packets.
U32 cLIpv6AclRuleDscp	1.3.6.1.4.1.9.9.847.1.1.2.1.15	Unsigned32	read-create	This object specifies the DSCP value of the rule. A value 256 implies Any.
INE cLIpv6AclRuleEndDestinationPort	1.3.6.1.4.1.9.9.847.1.1.2.1.14	InetPortNumber	read-create	This object specifies the End Destination Port of the packet. It can be either of the pre specified ports like HTTP, HTTPS, Telnet, RADIUS etc or any number between 0 and 65535.
INE cLIpv6AclRuleEndSourcePort	1.3.6.1.4.1.9.9.847.1.1.2.1.12	InetPortNumber	read-create	This object specifies the end Source Port of the packet. It can be either of the pre specified ports like HTTP, HTTPS, Telnet, RADIUS etc or any number between 0 and 65535.
cLIpv6AclRuleEntry	1.3.6.1.4.1.9.9.847.1.1.2.1		not-accessible	Each entry in this table provides information about one IPv6 ACL rule of the controller.
C32 cLIpv6AclRuleHitsEx	1.3.6.1.4.1.9.9.847.1.1.2.1.17	Counter32	read-only	This object specifies the number of hits in the particular rule under the ACL. This object is cleared by setting the cLIpv6AclCounterClear object.
U32 cLIpv6AclRuleIndex	1.3.6.1.4.1.9.9.847.1.1.2.1.1	Unsigned32	not-accessible	This object represents a unique ACL rule. This can be updated by using cLIpv6AclNewRuleIndex to reset the sequence of the rules of an ACL.
U32 cLIpv6AclRuleProtocol	1.3.6.1.4.1.9.9.847.1.1.2.1.10	Unsigned32	read-create	This object specifies protocol of the packet. It can be either of the pre specified protocols like TCP, UDP, ICMP, ESP, AH, GRE,IP, ethernet over IP, OSPF or any number between 0 and 255. A value 256 implies that this rule applies to 'Any' protocol.
ROW cLIpv6AclRuleRowStatus	1.3.6.1.4.1.9.9.847.1.1.2.1.18	RowStatus	read-create	This is the status column for this row and is used to create and delete specific instances of rows in this table.
IP cLIpv6AclRuleSourceInetAddress	1.3.6.1.4.1.9.9.847.1.1.2.1.5	InetAddress	read-create	This object specifies the source IP address of the ACL rule.
IPt cLIpv6AclRuleSourceInetAddressType	1.3.6.1.4.1.9.9.847.1.1.2.1.4	InetAddressType	read-create	This object specifies the type of the source IP address of the ACL rule.
U32 cLIpv6AclRuleSourcePrefixLength	1.3.6.1.4.1.9.9.847.1.1.2.1.6	Unsigned32	read-create	This object specifies the prefix length for source IP address of the ACL rule.
INE cLIpv6AclRuleStartDestinationPort	1.3.6.1.4.1.9.9.847.1.1.2.1.13	InetPortNumber	read-create	This object specifies the start Destination Port of the packet. It can be either of the pre specified ports like HTTP, HTTPS, Telnet, RADIUS etc or any number between 0 and 65535.
INE cLIpv6AclRuleStartSourcePort	1.3.6.1.4.1.9.9.847.1.1.2.1.11	InetPortNumber	read-create	This object specifies the start source port of the packet. It can be either of the pre specified ports like HTTP, HTTPS, Telnet, RADIUS etc or any number between 0 and 65535.
cLIpv6AclRuleTable	1.3.6.1.4.1.9.9.847.1.1.2		not-accessible	The table listing Acl rules(Access Control List Entries) on the ACL with name cLIpv6AclName.
cLIpv6AclTable	1.3.6.1.4.1.9.9.847.1.1.1		not-accessible	The table listing IPv6 ACLs (Access Control Lists) on the device.
T/F cLIpv6GlobalEnabled	1.3.6.1.4.1.9.9.847.1.1.7	TruthValue	read-write	This object specifies the global state of IPv6. A value of 'true' indicates that, will enable the global IPv6 state. A value of 'false' indicates that, will disable the global IPv6 state.
cLIpv6NbNdSuppressDropCounter	1.3.6.1.4.1.9.9.847.1.2.2
C32 cLIpv6NbNdSuppressDropCounterReasonDad	1.3.6.1.4.1.9.9.847.1.2.2.4	Counter32	read-only	This object represents the total number of suppress drop counter for the reason duplicate address detected.
C32 cLIpv6NbNdSuppressDropCounterReasonInt	1.3.6.1.4.1.9.9.847.1.2.2.7	Counter32	read-only	This object represents the total number of suppress drop counter for the reason internal failure.
C32 cLIpv6NbNdSuppressDropCounterReasonMulticast	1.3.6.1.4.1.9.9.847.1.2.2.6	Counter32	read-only	This object represents the total number of suppress drop counter for the reason multicast suppressed.
C32 cLIpv6NbNdSuppressDropCounterReasonSilent	1.3.6.1.4.1.9.9.847.1.2.2.2	Counter32	read-only	This object represents the total number of suppress drop counter for the reason silent drop.
C32 cLIpv6NbNdSuppressDropCounterReasonUnicast	1.3.6.1.4.1.9.9.847.1.2.2.5	Counter32	read-only	This object represents the total number of suppress drop counter for the reason unicast suppressed.
C32 cLIpv6NbNdSuppressDropCounterTotal	1.3.6.1.4.1.9.9.847.1.2.2.1	Counter32	read-only	This object represents the total number of suppress drop counter, which includes all reasons.
U32 cLIpv6NbRaThrottleAllowAtleast	1.3.6.1.4.1.9.9.847.1.1.4.6	Unsigned32	read-write	This object specifies the RA policy throttle allowable atleast limit.
U32 cLIpv6NbRaThrottleAllowAtmost	1.3.6.1.4.1.9.9.847.1.1.4.7	Unsigned32	read-write	This object specifies the RA policy throttle allowable atmost limit.
T/F cLIpv6NbRaThrottleAllowNoLimitEnabled	1.3.6.1.4.1.9.9.847.1.1.4.8	TruthValue	read-write	This object specifies the RA policy throttle allowable no limit value. A value of 'true' indicates that, the value for cLIpv6RaThrottlerPolicyAllowAtmost will not be set. A value of 'false' indicates that, the value for cLIpv6RaThrottlerPolicyAllowAtmost will be set.
T/F cLIpv6NbRaThrottleEnabled	1.3.6.1.4.1.9.9.847.1.1.4.1	TruthValue	read-write	This object specifies the IPv6 RA throttle policy configuration on the controller. A value of 'true' indicates that, IPv6 RA throttling is enabled on the controller. A value of 'false' indicates that, IPv6 RA throttling is disabled on the controller.
INT cLIpv6NbRaThrottleIntervalOption	1.3.6.1.4.1.9.9.847.1.1.4.5	INTEGER	read-write	This object specifies the RA policy throttle interval option. A value of ignore(1) indicates that, RA policy throttle is ignored. A value of passthrough(2) indicates that, RA policy throttle is passed through. A value of throttle(3) indicates that, RA policy throttle is throttled.
U32 cLIpv6NbRaThrottleMaxThrough	1.3.6.1.4.1.9.9.847.1.1.4.3	Unsigned32	read-write	This object specifies the RA policy throttle max throughput value.
T/F cLIpv6NbRaThrottleMaxThroughNoLimitEnabled	1.3.6.1.4.1.9.9.847.1.1.4.4	TruthValue	read-write	This object specifies the RA policy throttle max throughput no limit value. A value of 'true' indicates that, the value for cLIpv6RaThrottlerPolicyMaxThrough will not be set. A value of 'false' indicates that, the value for cLIpv6RaThrottlerPolicyMaxThrough will be set.
U32 cLIpv6NbRaThrottlePeriod	1.3.6.1.4.1.9.9.847.1.1.4.2	Unsigned32	read-write	This object specifies the RA policy throttle period.
cLIpv6NbSnoopingDropCounterEntry	1.3.6.1.4.1.9.9.847.1.2.3.1		not-accessible	Each entry in this table represents the IPv6 neighbor binding snooping drop counter on the controller. Entries are automatically populated based on the type of snooping drop counter.
C32 cLIpv6NbSnoopingDropCounterReasonCga	1.3.6.1.4.1.9.9.847.1.2.3.1.5	Counter32	read-only	This object represents the total number of snooping drops for the reason CGA option does not verify.
C32 cLIpv6NbSnoopingDropCounterReasonInt	1.3.6.1.4.1.9.9.847.1.2.3.1.4	Counter32	read-only	This object represents the total number of snooping drops for the internal failure reasons.
C32 cLIpv6NbSnoopingDropCounterReasonLimit	1.3.6.1.4.1.9.9.847.1.2.3.1.7	Counter32	read-only	This object represents the total number of snooping drops for the reason address limit reached.
C32 cLIpv6NbSnoopingDropCounterReasonMartian	1.3.6.1.4.1.9.9.847.1.2.3.1.8	Counter32	read-only	This object represents the total number of snooping drops for the reason martian packet.
C32 cLIpv6NbSnoopingDropCounterReasonMartianMac	1.3.6.1.4.1.9.9.847.1.2.3.1.9	Counter32	read-only	This object represents the total number of snooping drops for the reason martian mac.
C32 cLIpv6NbSnoopingDropCounterReasonNotAllowed	1.3.6.1.4.1.9.9.847.1.2.3.1.10	Counter32	read-only	This object represents the total number of snooping drops for the reason more trusted entry exists.
C32 cLIpv6NbSnoopingDropCounterReasonNotAuthorised	1.3.6.1.4.1.9.9.847.1.2.3.1.11	Counter32	read-only	This object represents the total number of snooping drops for the reason packet not authorized on port.
C32 cLIpv6NbSnoopingDropCounterReasonRsa	1.3.6.1.4.1.9.9.847.1.2.3.1.6	Counter32	read-only	This object represents the total number of snooping drops for the reason RSA Signature does not verify.
C32 cLIpv6NbSnoopingDropCounterReasonStop	1.3.6.1.4.1.9.9.847.1.2.3.1.12	Counter32	read-only	This object represents the total number of snooping drops for the reason packet accepted but not forwarded.
C32 cLIpv6NbSnoopingDropCounterSilent	1.3.6.1.4.1.9.9.847.1.2.3.1.3	Counter32	read-only	This object represents the total number of snooping drops for the silent drop reason.
cLIpv6NbSnoopingDropCounterTable	1.3.6.1.4.1.9.9.847.1.2.3		not-accessible	This table represents the IPv6 Neighbor Binding snooping drop counters of the controller.
C32 cLIpv6NbSnoopingDropCounterTotal	1.3.6.1.4.1.9.9.847.1.2.3.1.2	Counter32	read-only	This object represents the total number of snooping drops, including all reasons.
INT cLIpv6NbSnoopingDropCounterType	1.3.6.1.4.1.9.9.847.1.2.3.1.1	INTEGER	not-accessible	This object represents the type of IPv6 Neighbor binding snooping drop counter and uniquely identifies an entry in this table. A value of ndpRs(1) indicates that, NDP router solicitation. A value of ndpRa(2) indicates that, NDP router advertisement. A value of ndpNs(3) indicates that, NDP neighbour solicitation. A value of ndpNa(4) indicates that, NDP neighbor advertisements. A value of ndpRedirect(5) indicates that, NDP redirect. A value of ndpCertSol(6) indicates that, NDP certificate solicit. A value of ndpCertAdv(7) indicates that, NDP certificate advertise. A value of dhcpV6Sol(8) indicates that, DHCPv6 solicit. A value of dhcpV6Adv(9) indicates that, DHCPv6 advertise. A value of dhcpV6Request(10) indicates that, DHCPv6 request. A value of dhcpV6Confirm(11) indicates that, DHCPv6 confirm. A value of dhcpV6Renew(12) indicates that, DHCPv6 renew. A value of dhcpV6Rebind(13) indicates that, DHCPv6 rebind. A value of dhcpV6Reply(14) indicates that, DHCPv6 reply. A value of dhcpV6Release(15) indicates that, DHCPv6 release. A value of dhcpV6Decline(16) indicates that, DHCPv6 decline. A value of dhcpV6Recfg(17) indicates that, DHCPv6 reconfigure. A value of dhcpV6InfoReq(18) indicates that, DHCPv6 information request. A value of dhcpV6RelayForward(19) indicates that, DHCPv6 relay forward. A value of dhcpV6RelayReplay(20) indicates that, DHCPv6 relay replay.
T/F cLIpv6NbTimerDownLifeTimeEnabled	1.3.6.1.4.1.9.9.847.1.1.5.1	TruthValue	read-write	This object specifies the neighbor binding down life timer. A value of 'true' indicates that, down life timer is enabled on the controller. A value of 'false' indicates that, down life timer is disabled on the controller.
U32 cLIpv6NbTimerDownLifeTimeInterval	1.3.6.1.4.1.9.9.847.1.1.5.2	Unsigned32	read-write	This object specifies interval of neighbor binding down life timer. The interval is set on the controller only when the down life timer is enabled on the controller.
T/F cLIpv6NbTimerNsMulticastCacheMissForward	1.3.6.1.4.1.9.9.847.1.1.5.7	TruthValue	read-write	This object specifies the NS Multicast CacheMiss Forward A value of 'true' indicates that, NS multicast cacheMiss forward is enabled on the controller. A value of 'false' indicates that, NS multicast cacheMiss forward is disabled on the controller.
T/F cLIpv6NbTimerReachableLifeTimeEnabled	1.3.6.1.4.1.9.9.847.1.1.5.5	TruthValue	read-write	This object specifies the neighbor binding reachable life timer. A value of 'true' indicates that, reachable life timer is enabled on the controller. A value of 'false' indicates that, reachable life timer is disabled on the controller.
U32 cLIpv6NbTimerReachableLifeTimeInterval	1.3.6.1.4.1.9.9.847.1.1.5.6	Unsigned32	read-write	This object specifies interval of neighbor binding reachable life timer. The interval is set on the controller only when the reachable life timer is enabled on the controller.
T/F cLIpv6NbTimerStaleLifeTimeEnabled	1.3.6.1.4.1.9.9.847.1.1.5.3	TruthValue	read-write	This object specifies the neighbor binding stale life timer. A value of 'true' indicates that, stale life timer is enabled on the controller. A value of 'false' indicates that, stale life timer is disabled on the controller.
U32 cLIpv6NbTimerStaleLifeTimeInterval	1.3.6.1.4.1.9.9.847.1.1.5.4	Unsigned32	read-write	This object specifies interval of neighbor binding stale life timer. The interval is set on the controller only when the stale life timer is enabled on the controller.
T/F cLIpv6NeighborBindingCounterClear	1.3.6.1.4.1.9.9.847.1.1.6	TruthValue	read-write	This object specifies the Ipv6 Neighbor binding counter clear value. A value of 'true' indicates that, will clear the counter of the IPv6 Neighbor Binding. A value of 'false' indicates that, will not clear the counter of the IPv6 Neighbor Binding
C32 cLIpv6NeighborBindingCounterDhcpV6Adv	1.3.6.1.4.1.9.9.847.1.2.1.1.10	Counter32	read-only	This object represents the number of DHCPv6 advertisement counters.
C32 cLIpv6NeighborBindingCounterDhcpV6Confirm	1.3.6.1.4.1.9.9.847.1.2.1.1.12	Counter32	read-only	This object represents the number of DHCPv6 confirm counters.
C32 cLIpv6NeighborBindingCounterDhcpV6Decline	1.3.6.1.4.1.9.9.847.1.2.1.1.17	Counter32	read-only	This object represents the number of DHCPv6 decline counters.
C32 cLIpv6NeighborBindingCounterDhcpV6InfoReq	1.3.6.1.4.1.9.9.847.1.2.1.1.19	Counter32	read-only	This object represents the number of DHCPv6 information request counters.
C32 cLIpv6NeighborBindingCounterDhcpV6Rebind	1.3.6.1.4.1.9.9.847.1.2.1.1.14	Counter32	read-only	This object represents the number of DHCPv6 rebind counters.
C32 cLIpv6NeighborBindingCounterDhcpV6Recfg	1.3.6.1.4.1.9.9.847.1.2.1.1.18	Counter32	read-only	This object represents the number of DHCPv6 reconfigure counters.
C32 cLIpv6NeighborBindingCounterDhcpV6RelayForward	1.3.6.1.4.1.9.9.847.1.2.1.1.20	Counter32	read-only	This object represents the number of DHCPv6 relay counters.
C32 cLIpv6NeighborBindingCounterDhcpV6RelayReplay	1.3.6.1.4.1.9.9.847.1.2.1.1.21	Counter32	read-only	This object represents the number of DHCPv6 relay reply counters.
C32 cLIpv6NeighborBindingCounterDhcpV6Release	1.3.6.1.4.1.9.9.847.1.2.1.1.16	Counter32	read-only	This object represents the number of DHCPv6 release counters.
C32 cLIpv6NeighborBindingCounterDhcpV6Renew	1.3.6.1.4.1.9.9.847.1.2.1.1.13	Counter32	read-only	This object represents the number of DHCPv6 renew counters.
C32 cLIpv6NeighborBindingCounterDhcpV6Reply	1.3.6.1.4.1.9.9.847.1.2.1.1.15	Counter32	read-only	This object represents the number of DHCPv6 reply counters.
C32 cLIpv6NeighborBindingCounterDhcpV6Request	1.3.6.1.4.1.9.9.847.1.2.1.1.11	Counter32	read-only	This object represents the number of DHCPv6 request counters.
C32 cLIpv6NeighborBindingCounterDhcpV6Sol	1.3.6.1.4.1.9.9.847.1.2.1.1.9	Counter32	read-only	This object represents the number of DHCPv6 solicitated counters.
cLIpv6NeighborBindingCounterEntry	1.3.6.1.4.1.9.9.847.1.2.1.1		not-accessible	Each entry in this table represents the IPv6 neighbor binding counter on the controller. Entries are populated automatically based on the type of counter.
C32 cLIpv6NeighborBindingCounterNdpCertAdv	1.3.6.1.4.1.9.9.847.1.2.1.1.8	Counter32	read-only	This object represents the number of NDP neighbor certificate advertisement counters.
C32 cLIpv6NeighborBindingCounterNdpCertSol	1.3.6.1.4.1.9.9.847.1.2.1.1.7	Counter32	read-only	This object represents the number of NDP neighbor certificate solicitation counters.
C32 cLIpv6NeighborBindingCounterNdpNa	1.3.6.1.4.1.9.9.847.1.2.1.1.5	Counter32	read-only	This object represents the number of NDP neighbor advertisement counters.
C32 cLIpv6NeighborBindingCounterNdpNs	1.3.6.1.4.1.9.9.847.1.2.1.1.4	Counter32	read-only	This object represents the number of NDP neighbor solicitation counters.
C32 cLIpv6NeighborBindingCounterNdpRa	1.3.6.1.4.1.9.9.847.1.2.1.1.3	Counter32	read-only	This object represents the number of NDP router advertisement counters.
C32 cLIpv6NeighborBindingCounterNdpRedirect	1.3.6.1.4.1.9.9.847.1.2.1.1.6	Counter32	read-only	This object represents the number of NDP neighbor redirect counters.
C32 cLIpv6NeighborBindingCounterNdpRs	1.3.6.1.4.1.9.9.847.1.2.1.1.2	Counter32	read-only	This object represents the number of NDP router solicitation counters.
cLIpv6NeighborBindingCounterTable	1.3.6.1.4.1.9.9.847.1.2.1		not-accessible	This table represents the IPv6 neighbor binding counters of the controller.
INT cLIpv6NeighborBindingCounterType	1.3.6.1.4.1.9.9.847.1.2.1.1.1	INTEGER	not-accessible	This object represents the type of IPv6 neighbor binding counter. A value of receivedMessages (1) indicates that, messages which are received. A value of bridgedMessages (2) indicates that, messages which are bridged.
STR cLIpv6RaFilteringClientInfoApName	1.3.6.1.4.1.9.9.847.1.1.3.3.1.1	SnmpAdminString	read-only	This object represents the AP name on which the client is associated.
cLIpv6RaFilteringClientInfoEntry	1.3.6.1.4.1.9.9.847.1.1.3.3.1		not-accessible	Each entry in this table provides information about RA packets drop per client.
C32 cLIpv6RaFilteringClientInfoPktsDropped	1.3.6.1.4.1.9.9.847.1.1.3.3.1.3	Counter32	read-only	This object represents the number of RA packets dropped for the client.
cLIpv6RaFilteringClientInfoTable	1.3.6.1.4.1.9.9.847.1.1.3.3		not-accessible	The table lists the RA Packets drop per client. An entry is created automatically by the controller when the client gets associated to the AP. An existing entry gets deleted when client gets disassociates. Each client added to this table is uniquely identified by the client's MAC address.
U32 cLIpv6RaFilteringClientInfoWlan	1.3.6.1.4.1.9.9.847.1.1.3.3.1.2	Unsigned32	read-only	This object represents wlan identifier on which the client is associated.
T/F cLIpv6RaFilteringEnabled	1.3.6.1.4.1.9.9.847.1.1.3.1	TruthValue	read-write	This object specifies the IPv6 RA filtering configuration on the controller. A value of 'true' indicates that, RA filtering is enabled on the controller. A value of 'false' indicates that, RA filtering is disabled on the controller.
T/F cLIpv6RaFilteringOnApEnabled	1.3.6.1.4.1.9.9.847.1.1.3.2	TruthValue	read-write	This object specifies the IPv6 RA filtering configuration on the controller. A value of 'true' indicates that, IPv6 RA filtering is enabled on the AP. A value of 'false' indicates that, IPv6 RA filtering is disabled on the AP.

RFC description

Cisco lightweight access point protocol IPv6 MIB extension; manages IPv6 addressing, routes, and neighbor discovery on WLAN controllers.

Start monitoring Cisco Wireless LAN Controllers (LWAPP-based) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CISCO-LWAPP-IPV6-MIB