CISCO-LWAPP-OPENDNS-MIB

All MIBs › CISCO-LWAPP-OPENDNS-MIB

Organization: Cisco Systems Inc.

Last Updated: 2018-07-03

Category: Cisco Devices, Wireless and WLAN

Description: Manages OpenDNS cloud security integration on Cisco wireless LAN controllers for DNS-based policy enforcement.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CISCO-LWAPP-OPENDNS-MIB?

CISCO-LWAPP-OPENDNS-MIB is a Cisco proprietary module for wireless LAN controllers acting as Central Controllers (CC) terminating the Lightweight Access Point Protocol (LWAPP) tunnel from lightweight access points, specifically covering integration with the OpenDNS cloud-based DNS security service. It exposes configuration objects for enabling OpenDNS, managing API tokens, defining security profiles, and mapping WLANs to those profiles for DNS-based policy enforcement. Its monitoring role is centered on confirming the operational status of this cloud security integration -- whether OpenDNS is enabled/forced, whether a profile's row status is active, and whether specific WLANs have OpenDNS filtering applied -- rather than classic hardware health metrics. It explicitly depends on Cisco's LWAPP/CAPWAP wireless controller architecture and is designed to be implemented on Cisco WLAN controllers terminating AP tunnels. It is typically deployed in enterprise wireless networks using Cisco WLC controllers where DNS-layer security filtering is enforced for wireless clients via OpenDNS. Network engineers evaluating or troubleshooting this functionality can download the CISCO-LWAPP-OPENDNS-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-LWAPP-OPENDNS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco Wireless LAN Controller (WLC)
Cisco lightweight access point (LWAPP/CAPWAP) deployment

Monitoring Examples

An administrator would check claOpendnsEnable and claOpendnsForceEnable to confirm whether OpenDNS filtering is globally active on the controller, then inspect claOpendnsProfileTable (claOpendnsProfileEntry) for a given claOpendnsProfileName to verify claOpendnsProfileRowStatus and claOpendnsProfileStatus are active. Cross-referencing claOpendnsWlanTable (claOpendnsWlanEntry) shows which claOpendnsWlanProfileName is bound to a specific WLAN; a WLAN missing its expected profile binding would mean wireless clients on that SSID are not receiving OpenDNS-based DNS filtering as intended.

What Can Be Monitored

OpenDNS global enable/force-enable state
OpenDNS security profile status
API token configuration presence
per-WLAN OpenDNS profile binding

Imported Objects

From CISCO-LWAPP-WLAN-MIB

cLWlanIndex

OBJECT-TYPE

From CISCO-SMI

ciscoMgmt

OBJECT-IDENTITY

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

RowStatus
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
ciscoLwappOpendnsMIB	1.3.6.1.4.1.9.9.837			This MIB is intended to be implemented on all those devices operating as Central Controllers (CC) that terminate the Light Weight Access Point Protocol tunnel from Light-weight LWAPP Access Points. This MIB provides configuration and status information about the OPENDNS on the controller. Particularly this mib covers the OPENDNS for the wireless controllers. OpenDNS provides cloud based security service by inspecting DNS query. It can filter the fully qualified domain name(FQDN) from the DNS query and provide customized policy for the security administrator to allow or deny traffic towards the FQDN. ISR4K platform can act as a DNS forwarder on network edge, the router can transparently intercept the DNS traffic and forward DNS queries to the OpenDNS cloud. GLOSSARY Access Point ( AP ) An entity that contains an 802.11 medium access control ( MAC ) and physical layer ( PHY ) interface and provides access to the distribution services via the wireless medium for associated clients. LWAPP APs encapsulate all the 802.11 frames in LWAPP frames and sends it to the controller to which it is logically connected to. Central Controller ( CC ) The central entity that terminates the LWAPP protocol tunnel from the LWAPP APs. Throughout this MIB, this entity also referred to as 'controller'. Light Weight Access Point Protocol ( LWAPP ) This is a generic protocol that defines the communication between the Access Points and the controllers.
ciscoLwappOpendnsMIBNotifs	1.3.6.1.4.1.9.9.837.0
ciscoLwappOpendnsMIBObjects	1.3.6.1.4.1.9.9.837.1
ciscoLwappOpendnsTag	1.3.6.1.4.1.9.9.837.1.1
claOpendnsProfileTable	1.3.6.1.4.1.9.9.837.1.1.1		not-accessible	This table represents the information about Opendns profiles.
claOpendnsProfileEntry	1.3.6.1.4.1.9.9.837.1.1.1.1		not-accessible	An entry containing the configuration attributes Opendns Feature
STR claOpendnsProfileName	1.3.6.1.4.1.9.9.837.1.1.1.1.1	SnmpAdminString	not-accessible	This object represents the OpenDNS profile name.
ROW claOpendnsProfileRowStatus	1.3.6.1.4.1.9.9.837.1.1.1.1.2	RowStatus	read-create	This object represents status column for this row and used to create, modify and delete specific instances of rows in this table. This table supports modification of writable objects when the RowStatus is 'active'. The following objects are mandatory for successful creation of an entry: claOpendnsProfileName.
INT claOpendnsProfileStatus	1.3.6.1.4.1.9.9.837.1.1.1.1.3	INTEGER	read-only	This object represents the Profile registration status with opendns server. notInuse indicates that the Profile is not in used state. inProgress indicates that the Profile is in the process of registering with opendns server. success indicates that the Profile registered successfully. failed indicates that the Profile registration failed. inuse indicate that the Profile is in Used state.
STR claOpendnsProfileIdentity	1.3.6.1.4.1.9.9.837.1.1.1.1.4	SnmpAdminString	read-only	This object represents the Identity of the profile in the Opendns Dashboard
claOpendnsWlanTable	1.3.6.1.4.1.9.9.837.1.1.2		not-accessible	This table represents the generic Opendns configuration for a particular WLAN in a controller.
claOpendnsWlanEntry	1.3.6.1.4.1.9.9.837.1.1.2.1		not-accessible	Each entry in this table represents the generic Opendns configuration for a WLAN.
STR claOpendnsWlanProfileName	1.3.6.1.4.1.9.9.837.1.1.2.1.1	SnmpAdminString	read-write	This object indicates the Opendns Mapped profile associated to this WLAN.
INT claOpendnsWlanMode	1.3.6.1.4.1.9.9.837.1.1.2.1.2	INTEGER	read-write	This object specifies the Opendns Mode associated to this particular WLAN. ignore mode indicates the normal dns will be used. copy mode indicates the stats will be copied from opendns. force mode indicates that opendns server will be forced to use.
T/F claOpendnsWlanProfileStatus	1.3.6.1.4.1.9.9.837.1.1.2.1.3	TruthValue	read-write	This object represents the Opendns status of wlan. A value of 'true' indicates that Opendns feature will be turned on for the wlan. A value of 'false' indicates that Opendns feature will be turned off for the wlan.
T/F claOpendnsWlanDhcpOpt6	1.3.6.1.4.1.9.9.837.1.1.2.1.4	TruthValue	read-write	This object represents the Opendns dhcp option 6 status of a WLAN. A value of 'true' indicates that Opendns dhcp option 6 is enabled for the WLAN. A value of 'false' indicates that Opendns dhcp option 6 is disabled for the WLAN.
ciscoLwappOpendnsConfig	1.3.6.1.4.1.9.9.837.1.2
T/F claOpendnsEnable	1.3.6.1.4.1.9.9.837.1.2.1	TruthValue	read-write	This object represents the OpenDNS status of the controller. A value of 'true' indicates that Opendns Feature will be turned on. A value of 'false' indicates that Opendns Feature will be turned off.
T/F claOpendnsForceEnable	1.3.6.1.4.1.9.9.837.1.2.2	TruthValue	read-write	This object represents the OpenDNS status of the controller. A value of 'true' indicates that Opendns will be the default DNS. A value of 'false' indicates that Opendns will not be the default DNS..
STR claOpendnsApiToken	1.3.6.1.4.1.9.9.837.1.2.3	SnmpAdminString	read-write	This object specifies the Api-Token for Opendns cloud server.
ciscoLwappOpendnsMIBConform	1.3.6.1.4.1.9.9.837.2
ciscoLwappOpendnsMIBCompliances	1.3.6.1.4.1.9.9.837.2.1
ciscoLwappOpendnsMIBCompliance	1.3.6.1.4.1.9.9.837.2.1.1			The compliance statement for the SNMP entities that implement the ciscoLwappOpendnsMIB module.
ciscoLwappOpendnsMIBComplianceRev1	1.3.6.1.4.1.9.9.837.2.1.2			The compliance statement for the SNMP entities that implement the ciscoLwappOpendnsMIB module.
ciscoLwappOpendnsMIBComplianceRev2	1.3.6.1.4.1.9.9.837.2.1.3			The compliance statement for the SNMP entities that implement the ciscoLwappOpendnsMIB module.
ciscoLwappOpendnsMIBGroups	1.3.6.1.4.1.9.9.837.2.2
ciscoLwappOpendnsTagGroup	1.3.6.1.4.1.9.9.837.2.2.1			This collection of objects represents the information about the general attributes of Opendns.
ciscoLwappOpendnsConfigGroup	1.3.6.1.4.1.9.9.837.2.2.2			This collection of objects represents the information about the general attributes of Opendns.
ciscoLwappOpendnsTagGroupVer2	1.3.6.1.4.1.9.9.837.2.2.3			This collection of objects represents the information about the general attributes of Opendns.

RFC description

Manages OpenDNS security configuration and cloud-based DNS filtering on Cisco wireless controllers and ISR platforms.

Start monitoring Cisco Wireless LAN Controllers (LWAPP-based) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CISCO-LWAPP-OPENDNS-MIB

What Is CISCO-LWAPP-OPENDNS-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description