CISCO-LWAPP-NBAR-MIB

All MIBs › CISCO-LWAPP-NBAR-MIB

Organization: Cisco Systems Inc.

Last Updated: 2018-02-08

Category: Cisco Devices, Wireless and WLAN

Description: Manages NBAR (Network-Based Application Recognition) application visibility on Cisco LWAPP wireless controllers.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CISCO-LWAPP-NBAR-MIB?

The CISCO-LWAPP-NBAR-MIB manages Network-Based Application Recognition application-visibility configuration on Cisco Wireless LAN Controllers that terminate LWAPP/CAPWAP tunnels from lightweight access points, covering the classification engine that identifies both static and dynamic port applications. It exposes objects reporting the NBAR/AVC engine and protocol pack versions, along with profile and rule tables that define which applications are recognized and how they are treated. Administrators use it to monitor the software version and configuration status of the application-recognition subsystem, verifying cLNbarAVCEngineVersion and cLNbarAVCProtoPackVer are current, and reviewing profile/rule tables to confirm the intended application-visibility policy is active, which matters for troubleshooting misclassified or unthrottled application traffic. It is part of the Cisco LWAPP/CAPWAP controller MIB family and depends on Cisco's proprietary NBAR/AVC classification technology rather than an open standard. It is deployed in enterprise WLANs wanting visibility into and control over which applications wireless clients are using. Engineers can download the CISCO-LWAPP-NBAR-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-LWAPP-NBAR-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco Wireless LAN Controller (WLC) with LWAPP/CAPWAP-connected access points

Monitoring Examples

An admin checks cLNbarAVCEngineVersion and cLNbarAVCProtoPackVer/cLNbarAVCFlexProtoPackVer to confirm the NBAR classification engine and protocol pack are up to date, since an outdated pack could fail to recognize newer applications. cLNbarAVCProfileTable/cLNbarAVCProfileEntry list configured application-visibility profiles by cLNbarAVCProfileName, and cLNbarAVCRuleTable/cLNbarAVCRuleEntry show the classification rules within each profile, useful for verifying a specific application is correctly classified and policed as intended.

What Can Be Monitored

NBAR/AVC engine and protocol pack version
application-visibility profile configuration
classification rule definitions
profile/rule row status

Imported Objects

From CISCO-SMI

ciscoMgmt

OBJECT-IDENTITY

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

RowStatus

OIDs

OID symbolic	OID numeric	Type	Access	Description
ciscoLwappNbarMIB	1.3.6.1.4.1.9.9.841			NBAR - Network Based Application Recognition is an intelligent classification engine that recognizes applications that are static (which use fixed TCP or UDP port numbers), and stateful (which dynamically assign TCP or UDP port numbers). The relationship between CC and the LWAPP APs can be depicted as follows: +......+ +......+ +......+ +......+ + + + + + + + + + CC + + CC + + CC + + CC + + + + + + + + + +......+ +......+ +......+ +......+ .. . . . .. . . . . . . . . . . . . . . . . . . . . . . . +......+ +......+ +......+ +......+ +......+ + + + + + + + + + + + AP + + AP + + AP + + AP + + AP + + + + + + + + + + + +......+ +......+ +......+ +......+ +......+ . . . . . . . . . . . . . . . . . . . . . . . . +......+ +......+ +......+ +......+ +......+ + + + + + + + + + + + MN + + MN + + MN + + MN + + MN + + + + + + + + + + + +......+ +......+ +......+ +......+ +......+ GLOSSARY Access Point ( AP ) An entity that contains an 802.11 medium access control ( MAC ) and physical layer ( PHY ) interface and provides access to the distribution services via the wireless medium for associated clients. LWAPP APs encapsulate all the 802.11 frames in LWAPP frames and sends it to the controller to which it is logically connected to. Central Controller ( CC ) The central entity that terminates the LWAPP protocol tunnel from the LWAPP APs. Throughout this MIB, this entity also referred to as 'controller'. Light Weight Access Point Protocol ( LWAPP ) This is a generic protocol that defines the communication between the Access Points and the controllers. Mobile Node ( MN ) A roaming 802.11 wireless device in a wireless network associated with an access point. AVC - Application Visibility and Control. The client application or protocol statistics and control.
ciscoLwappNbarMIBNotifs	1.3.6.1.4.1.9.9.841.0
NTF cLAVCProtoPackLoadNotifFailed	1.3.6.1.4.1.9.9.841.0.1			This notification is generated whenever a protocol pack download fails.
NTF cLAVCProtoPackLoadNotifSuccess	1.3.6.1.4.1.9.9.841.0.2			This notification is generated whenever a protocol pack download succeeds.
ciscoLwappNbarMIBObjects	1.3.6.1.4.1.9.9.841.1
ciscoLwappNbarTableObjects	1.3.6.1.4.1.9.9.841.1.1
cLNbarAVCProfileTable	1.3.6.1.4.1.9.9.841.1.1.1		not-accessible	This table represents the information about application visibility and control (AVC) profiles.
cLNbarAVCProfileEntry	1.3.6.1.4.1.9.9.841.1.1.1.1		not-accessible	An entry containing the configuration attributes of application visibility and control.
STR cLNbarAVCProfileName	1.3.6.1.4.1.9.9.841.1.1.1.1.1	SnmpAdminString	not-accessible	This object represents the AVC profile name.
ROW cLNbarAVCProfileRowStatus	1.3.6.1.4.1.9.9.841.1.1.1.1.2	RowStatus	read-create	This is the status column for this row and is used to create and delete specific instances of rows in this table.
cLNbarAVCRuleTable	1.3.6.1.4.1.9.9.841.1.1.2		not-accessible	This table represents the information about AVC rule for a given profile and application.
cLNbarAVCRuleEntry	1.3.6.1.4.1.9.9.841.1.1.2.1		not-accessible	An entry containing the configuration attributes of AVC rule.
STR cLNbarAVCRuleProfileName	1.3.6.1.4.1.9.9.841.1.1.2.1.1	SnmpAdminString	not-accessible	This object represents the AVC profile name.
STR cLNbarAVCRuleApplicationName	1.3.6.1.4.1.9.9.841.1.1.2.1.2	SnmpAdminString	not-accessible	This object represents the name of application or protocol of AVC rule. For Default Application Rule, Application Name should be configured as class-default.
STR cLNbarAVCRuleApplicationGroupName	1.3.6.1.4.1.9.9.841.1.1.2.1.3	SnmpAdminString	read-create	This object specifies the name of application group of AVC rule.
INT cLNbarAVCRuleApplicationAction	1.3.6.1.4.1.9.9.841.1.1.2.1.4	INTEGER	read-create	This object specifies the action for the application or protocol of AVC rule. For class-default type, only mark option is allowed. drop - the corresponding application or protocol packets will be dropped. mark - the corresponding application or protocol packets will be marked with DSCP value specified by cLNbarAVCRuleDscpValue. ratelimit - the corresponding application or protocol packets will be rate limited with average and burst rate limit values sepcified by cLNbarAVCRuleAppAvgRateLimit.
U32 cLNbarAVCRuleDscpValue	1.3.6.1.4.1.9.9.841.1.1.2.1.5	Unsigned32	read-create	This object specifies the DSCP value of AVC rule.
ROW cLNbarAVCRuleRowStatus	1.3.6.1.4.1.9.9.841.1.1.2.1.6	RowStatus	read-create	This is the status column for this row and is used to create and delete specific instances of rows in this table.
U32 cLNbarAVCRuleAppAvgRateLimit	1.3.6.1.4.1.9.9.841.1.1.2.1.7	Unsigned32	read-create	This object specifies the application average data rate limit of AVC rule.
U32 cLNbarAVCRuleAppBurstRateLimit	1.3.6.1.4.1.9.9.841.1.1.2.1.8	Unsigned32	read-create	This object specifies the application burst data rate limit of AVC rule.
cLNbarAVCFlexProfileTable	1.3.6.1.4.1.9.9.841.1.1.3		not-accessible	This table represents the information about flex application visibility and control (AVC) profiles.
cLNbarAVCFlexProfileEntry	1.3.6.1.4.1.9.9.841.1.1.3.1		not-accessible	An entry containing the configuration attributes of application visibility and control for NBAR.
STR cLNbarAVCFlexProfileName	1.3.6.1.4.1.9.9.841.1.1.3.1.1	SnmpAdminString	not-accessible	This object represents the AVC flex profile name.
INT cLNbarAVCFlexProfileApply	1.3.6.1.4.1.9.9.841.1.1.3.1.2	INTEGER	read-create	This object is used to push AVC flex profile configured on controller to AP. modified(1) - Indicates AVC flex profile is in modified state and is not yet applied.This value is not settable. apply(2) - Indicates AVC flex profile will be applied to AP.
ROW cLNbarAVCFlexProfileRowStatus	1.3.6.1.4.1.9.9.841.1.1.3.1.3	RowStatus	read-create	This is the status column for this row and is used to create and delete specific instances of rows in this table.
cLNbarAVCFlexRuleTable	1.3.6.1.4.1.9.9.841.1.1.4		not-accessible	This table represents the information about flex AVC rule.
cLNbarAVCFlexRuleEntry	1.3.6.1.4.1.9.9.841.1.1.4.1		not-accessible	An entry containing the configuration attributes of AVC rule.
STR cLNbarAVCFlexRuleProfileName	1.3.6.1.4.1.9.9.841.1.1.4.1.1	SnmpAdminString	not-accessible	This object represents the AVC profile name.
STR cLNbarAVCFlexRuleApplicationName	1.3.6.1.4.1.9.9.841.1.1.4.1.2	SnmpAdminString	not-accessible	This object represents the name of application or protocol of AVC flex rule. For Default Application Rule, Application Name should be configured as class-default.
STR cLNbarAVCFlexRuleApplicationGroupName	1.3.6.1.4.1.9.9.841.1.1.4.1.3	SnmpAdminString	read-create	This object specifies the name of application group of AVC flex rule.
INT cLNbarAVCFlexRuleApplicationAction	1.3.6.1.4.1.9.9.841.1.1.4.1.4	INTEGER	read-create	This object specifies the action for the application or protocol of AVC flex rule. For class-default type, only mark option is allowed. drop - the corresponding application or protocol packets will be dropped. mark - the corresponding application or protocol packets will be marked with DSCP value. ratelimit - the corresponding application or protocol packets will be rate limited with average and burst rate limit values.
U32 cLNbarAVCFlexRuleDscpValue	1.3.6.1.4.1.9.9.841.1.1.4.1.5	Unsigned32	read-create	This object specifies the DSCP value of AVC flex rule.
ROW cLNbarAVCFlexRuleRowStatus	1.3.6.1.4.1.9.9.841.1.1.4.1.6	RowStatus	read-create	This is the status column for this row and is used to create and delete specific instances of rows in this table.
U32 cLNbarAVCFlexRuleAppAvgRateLimit	1.3.6.1.4.1.9.9.841.1.1.4.1.7	Unsigned32	read-create	This object specifies the application average data rate limit of AVC flex rule.
U32 cLNbarAVCFlexRuleAppBurstRateLimit	1.3.6.1.4.1.9.9.841.1.1.4.1.8	Unsigned32	read-create	This object specifies the application burst data rate limit of AVC flex rule.
ciscoLwappNbarGlobalObjects	1.3.6.1.4.1.9.9.841.1.2
OCT cLNbarAVCEngineVersion	1.3.6.1.4.1.9.9.841.1.2.1	OCTET STRING	read-only	This object represents the AVC engine version.
OCT cLNbarAVCProtoPackName	1.3.6.1.4.1.9.9.841.1.2.2	OCTET STRING	read-only	This object represents the AVC protocol pack name.
OCT cLNbarAVCProtoPackVer	1.3.6.1.4.1.9.9.841.1.2.3	OCTET STRING	read-only	This object represents the AVC protocol pack version.
OCT cLNbarAVCFlexEngineVersion	1.3.6.1.4.1.9.9.841.1.2.4	OCTET STRING	read-only	This object represents the AVC flexconnect engine version.
OCT cLNbarAVCFlexProtoPackName	1.3.6.1.4.1.9.9.841.1.2.5	OCTET STRING	read-only	This object represents the AVC flexconnect protocol pack name.
OCT cLNbarAVCFlexProtoPackVer	1.3.6.1.4.1.9.9.841.1.2.6	OCTET STRING	read-only	This object represents the AVC flexconnect protocol pack version.
ciscoLwappNbarMIBConform	1.3.6.1.4.1.9.9.841.2
ciscoLwappNbarMIBCompliances	1.3.6.1.4.1.9.9.841.2.1
ciscoLwappNbarMIBCompliance	1.3.6.1.4.1.9.9.841.2.1.1			The compliance statement for the SNMP entities that implement the ciscoLwappNbarMIB module.
ciscoLwappNbarMIBGroups	1.3.6.1.4.1.9.9.841.2.2
cLNbarConfigGroup	1.3.6.1.4.1.9.9.841.2.2.1			This is a collection of objects which can be configured to control NBAR parameters.
cLNbarGlobalGroup	1.3.6.1.4.1.9.9.841.2.2.2			This is a collection of global objects which can be configured to control NBAR parameters.

RFC description

Cisco MIB module for managing Network Based Application Recognition (NBAR) on Lightweight Access Point Protocol (LWAPP) controllers, enabling intelligent application classification and network traffic analysis on wireless access points.

Start monitoring Cisco Wireless LAN Controllers (LWAPP-based) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CISCO-LWAPP-NBAR-MIB

What Is CISCO-LWAPP-NBAR-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description