All MIBs › CISCO-LWAPP-RLAN-MIB
Organization: Cisco Systems Inc.
Last Updated: 2019-10-17
Category: Cisco Devices, Wireless and WLAN
Description: Manages Remote LAN (RLAN) port configurations connecting wired devices through Cisco wireless LAN controllers.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is CISCO-LWAPP-RLAN-MIB?
CISCO-LWAPP-RLAN-MIB is a Cisco enterprise MIB for wireless LAN controllers that manage Remote LAN (RLAN) ports, which let wired client devices connect through a Cisco lightweight access point's Ethernet port and be treated like wireless clients for policy purposes. It exposes configuration data such as RLAN profile definitions, MAC filtering, authentication list assignment, and security modes including 802.1X and web authentication. Its monitoring value is primarily in configuration and access-control status rather than hardware health: administrators use it to verify RLAN row status, security mode, and web-authentication parameters to confirm a remote LAN port is correctly provisioned and enforcing the intended authentication policy. It is part of the broader Cisco LWAPP MIB family and depends on the same controller-AP tunnel relationship documented across CISCO-LWAPP-* MIBs. Typical deployment is in enterprise networks using Cisco wireless LAN controllers to extend consistent network access policy to wired peripheral devices attached to access points. Network engineers evaluating or troubleshooting this functionality can download the CISCO-LWAPP-RLAN-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-LWAPP-RLAN-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Cisco Wireless LAN Controller (WLC)
- Cisco lightweight access point (LWAPP/CAPWAP) with RLAN port
Monitoring Examples
An administrator would walk cLRlanTable/cLRlanEntry to inspect cLRlanProfileName, cLRlanRowStatus, and cLRlanSecurity8021X for each configured remote LAN port, confirming whether 802.1X or cLRlanSecurityWebAuth is active. Checking cLRlanEapAuthStatus alongside cLRlanEapAuthProfileName would reveal whether an EAP authentication profile is properly bound and operational. A row stuck in a non-active cLRlanRowStatus or a mismatched cLRlanMacFiltering setting would indicate a misconfigured or disabled RLAN port that is unexpectedly blocking a wired device.
What Can Be Monitored
- RLAN port profile configuration
- row/administrative status
- MAC filtering setting
- 802.1X and web authentication security mode
- EAP authentication profile status
This MIB depends on
Related MIBs
Imported Objects
From CISCO-SMI
| ciscoMgmt | OBJECT-IDENTITY |
From INET-ADDRESS-MIB
| InetAddress | |
| InetAddressType |
From SNMP-FRAMEWORK-MIB
| SnmpAdminString |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| OBJECT-GROUP |
From SNMPv2-SMI
| Integer32 | |
| MODULE-IDENTITY | |
| OBJECT-TYPE | |
| Unsigned32 |
From SNMPv2-TC
| RowStatus | |
| TruthValue |
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| ciscoLwappRlanCompliance | 1.3.6.1.4.1.9.9.856.2.1.1 | The compliance statement for the SNMP entities that implement the ciscoLwappRlanMIB module. | ||
| ciscoLwappRlanComplianceRev1 | 1.3.6.1.4.1.9.9.856.2.1.2 | The compliance statement for the SNMP entities that implement the ciscoLwappRlanMIB module. | ||
| ciscoLwappRlanComplianceRev2 | 1.3.6.1.4.1.9.9.856.2.1.3 | The compliance statement for the SNMP entities that implement the ciscoLwappRlanMIB module. | ||
| ciscoLwappRlanComplianceRev3 | 1.3.6.1.4.1.9.9.856.2.1.4 | The compliance statement for the SNMP entities that implement the ciscoLwappRlanMIB module. | ||
| ciscoLwappRlanCompliances | 1.3.6.1.4.1.9.9.856.2.1 | |||
| ciscoLwappRlanConfig | 1.3.6.1.4.1.9.9.856.1.1 | |||
| ciscoLwappRlanConfigGroup1 | 1.3.6.1.4.1.9.9.856.2.2.1 | This collection of objects represents the RLAN policy attributes. | ||
| ciscoLwappRlanConfigGroup1Sup1 | 1.3.6.1.4.1.9.9.856.2.2.5 | This collection of objects represents the RLAN policy attributes. | ||
| ciscoLwappRlanConfigGroup2 | 1.3.6.1.4.1.9.9.856.2.2.2 | This collection of objects represents the RLAN profile policy attributes. | ||
| ciscoLwappRlanConfigGroup2Sup1 | 1.3.6.1.4.1.9.9.856.2.2.3 | This collection of objects represents the RLAN profile policy attributes. | ||
| ciscoLwappRlanConfigGroup2Sup2 | 1.3.6.1.4.1.9.9.856.2.2.4 | This collection of objects represents the RLAN profile policy attributes. | ||
| ciscoLwappRlanConfigGroup2Sup3 | 1.3.6.1.4.1.9.9.856.2.2.6 | This collection of objects represents the RLAN profile policy attributes. | ||
| ciscoLwappRlanConform | 1.3.6.1.4.1.9.9.856.2 | |||
| ciscoLwappRlanGroups | 1.3.6.1.4.1.9.9.856.2.2 | |||
| ciscoLwappRlanMIB | 1.3.6.1.4.1.9.9.856 | This MIB is intended to be implemented on all those devices operating as Central Controllers (CC) that terminate the Light Weight Access Point Protocol tunnel from Cisco Light-weight LWAPP Access Points. This MIB helps to manage the RLANs on the controller. The relationship between CC and the LWAPP APs can be depicted as follows: +......+ +......+ +......+ +......+ + + + + + + + + + CC + + CC + + CC + + CC + + + + + + + + + +......+ +......+ +......+ +......+ .. . . . .. . . . . . . . . . . . . . . . . . . . . . . . +......+ +......+ +......+ +......+ +......+ + + + + + + + + + + + AP + + AP + + AP + + AP + + AP + + + + + + + + + + + +......+ +......+ +......+ +......+ +......+ . . . . . . . . . . . . . . . . . . . . . . . . +......+ +......+ +......+ +......+ +......+ + + + + + + + + + + + MN + + MN + + MN + + MN + + MN + + + + + + + + + + + +......+ +......+ +......+ +......+ +......+ The LWAPP tunnel exists between the controller and the APs. The MNs communicate with the APs through the protocol defined by the 802.11 standard. LWAPP APs, upon bootup, discover and join one of the controllers and the controller pushes the configuration, that includes the RLAN parameters, to the LWAPP APs. The APs then encapsulate all the 802.11 frames from wireless clients inside LWAPP frames and forward the LWAPP frames to the controller. GLOSSARY Access Point ( AP ) An entity that contains an 802.11 medium access control ( MAC ) and physical layer ( PHY ) interface and provides access to the distribution services via the wireless medium for associated clients. LWAPP APs encapsulate all the 802.11 frames in LWAPP frames and sends it to the controller to which it is logically connected to. Central Controller ( CC ) The central entity that terminates the LWAPP protocol tunnel from the LWAPP APs. Throughout this MIB, this entity also referred to as 'controller'. Light Weight Access Point Protocol ( LWAPP ) This is a generic protocol that defines the communication between the Access Points and the controllers. Mobile Node ( MN ) A roaming 802.11 wireless device in a wireless network associated with an access point. Access Control List ( ACL ) A list of rules used to restrict the traffic reaching an interface or the CPU or RLAN. Each ACL is an ordered set of rules and actions. If a rule matches then the action for that rule is applied to the packet. 802.1x The IEEE ratified standard for enforcing port based access control. This was originally intended for use on wired LANs and later extended for use in 802.11 RLAN environments. This defines an architecture with three main parts - a supplicant (Ex. an 802.11 wireless client), an authenticator (the AP) and an authentication server(a Radius server). The authenticator passes messages back and forth between the supplicant and the authentication server to enable the supplicant get authenticated to the network. Temporal Key Integrity Protocol ( TKIP ) A security protocol defined to enhance the limitations of WEP. Message Integrity Check and per-packet keying on all WEP-encrypted frames are two significant enhancements provided by TKIP to WEP. Cisco Key Integrity Protocol ( CKIP ) A proprietary implementation similar to TKIP. CKIP implements key permutation for protecting the CKIP key against attacks. Other features of CKIP include expansion of encryption key to 16 bytes of length for key protection and MIC to ensure data integrity. Wired Equivalent Privacy ( WEP ) A security method defined by 802.11. WEP uses a symmetric key stream cipher called RC4 to encrypt the data packets. Wi-Fi Protected Access ( WPA ) Wi-Fi Protected Access (WPA and WPA2) are security systems created in response to several serious weaknesses found in Wired Equivalent Privacy (WEP). WPA implements the majority of the IEEE 802.11i standard, and was intended as an intermediate measure to take the place of WEP while 802.11i was prepared. WPA is designed to work with all wireless network interface cards, but not necessarily with first generation wireless access points. RLAN Layer 2 Security RLAN layer 2 (MAC) security defines the encryption and authentication approaches such as 802.1x, WPA, WPA2, CKIP and WEP. POE (Power Over Ethernet) Power over Ethernet or PoE describes any of several standardized or ad-hoc systems which pass electrical power along with data on Ethernet cabling. This allows a single cable to provide both data connection and electrical power to devices such as wireless access points or IP cameras. Multicast Domain Name System (mDNS) This is the underlying protocol that is used for Service advertisement and discovery in technologies like Bonjour, Zero Touch Configuration REFERENCE [1] Wireless LAN Medium Access Control ( MAC ) and Physical Layer ( PHY ) Specifications. [2] Draft-obara-capwap-lwapp-00.txt, IETF Light Weight Access Point Protocol [3] IEEE 802.11 - The original 1 Mbit/s and 2 Mbit/s, 2.4 GHz RF and IR standard. | ||
| ciscoLwappRlanMIBNotifs | 1.3.6.1.4.1.9.9.856.0 | |||
| ciscoLwappRlanMIBObjects | 1.3.6.1.4.1.9.9.856.1 | |||
| T/F cLRlanAAAOverride | 1.3.6.1.4.1.9.9.856.1.1.2.1.7 | TruthValue | read-write | This object specifies if the AAA override for global parameters is enabled or disabled. A value of 'true' indicates that AAA Override is enabled. A value of 'false' indicates that AAA Override is disabled. |
| STR cLRlanAAAPolicyName | 1.3.6.1.4.1.9.9.856.1.1.2.1.17 | SnmpAdminString | read-write | This object identifies the AAA policy name for the given RLAN. |
| STR cLRlanAccountingList | 1.3.6.1.4.1.9.9.856.1.1.2.1.41 | SnmpAdminString | read-write | This object specifies the AAA Accounting list associated to the given RLAN |
| STR cLRlanAclName | 1.3.6.1.4.1.9.9.856.1.1.2.1.39 | SnmpAdminString | read-write | This object identifies the ACL name for the split tunnel data trafficking. |
| STR cLRlanAuthList | 1.3.6.1.4.1.9.9.856.1.1.1.1.5 | SnmpAdminString | read-write | This object is used to configure AAA Authentication list for RLAN |
| T/F cLRlanBlacklistEnabled | 1.3.6.1.4.1.9.9.856.1.1.2.1.15 | TruthValue | read-write | This object identifies is the blacklisting is enabled or not for the given RLAN. A value of 'true' indicates that RLAN Blacklisting is enabled. A value of 'false' indicates that RLAN Blacklisting is disabled. |
| U32 cLRlanBlacklistTimeout | 1.3.6.1.4.1.9.9.856.1.1.2.1.16 | Unsigned32 | read-write | This object identifies the timeout duration in seconds for the blacklist in RLAN. |
| T/F cLRlanCentralDhcp | 1.3.6.1.4.1.9.9.856.1.1.2.1.43 | TruthValue | read-write | This object specifies if the central dhcp for RLAN is enabled or disabled. A value of 'true' indicates that Central DHCP is enabled. A value of 'false' indicates that Central DHCP is disabled. |
| T/F cLRlanCentralSwitching | 1.3.6.1.4.1.9.9.856.1.1.2.1.8 | TruthValue | read-write | This object specifies if the central switching for RLAN is enabled or disabled. A value of 'true' indicates that Central Switching is enabled. A value of 'false' indicates that Central Switching is disabled. |
| U32 cLRlanClientLimit | 1.3.6.1.4.1.9.9.856.1.1.1.1.11 | Unsigned32 | read-write | This object indicates the maximum number of allowed clients for the given RLAN. Default value 0 indicates no restriction on the client number. |
| U32 cLRlanDataVlanId | 1.3.6.1.4.1.9.9.856.1.1.2.1.14 | Unsigned32 | read-write | This object specifies VLAN ID for the data during the multi domain mode for RLAN on the controller. The host mode (cLRlanHostMode) should be set to multi-domain mode(value: 3). |
| T/F cLRlanDhcpEnabled | 1.3.6.1.4.1.9.9.856.1.1.2.1.42 | TruthValue | read-write | This object specifies whether the DHCP is required for the IPv4 of the given RLAN. A value of 'true' indicates that RLAN DHCP is enabled. A value of 'false' indicates that RLAN DHCP is disabled. |
| IP cLRlanDhcpServer | 1.3.6.1.4.1.9.9.856.1.1.2.1.21 | InetAddress | read-write | This object configures the DHCP parameters for Remote-LAN |
| IPt cLRlanDhcpServerType | 1.3.6.1.4.1.9.9.856.1.1.2.1.20 | InetAddressType | read-write | This object specifies the address type DHCP parameters IP for Remote-LAN. |
| STR cLRlanEapAuthProfileName | 1.3.6.1.4.1.9.9.856.1.1.1.1.8 | SnmpAdminString | read-write | This object uniquely identifies the profile name using which EAP authentication is done for this RLAN |
| T/F cLRlanEapAuthStatus | 1.3.6.1.4.1.9.9.856.1.1.1.1.9 | TruthValue | read-write | This object specifies if the EAP authentication is enabled or not for the RLAN. A value of 'true' indicates that EAP authentication is enabled. A value of 'false' indicates that EAP authentication is disabled. |
| cLRlanEntry | 1.3.6.1.4.1.9.9.856.1.1.1.1 | not-accessible | Each entry in this table represents the RLAN configuration sent by the controller to APs for use during their operations. entries can be added/deleted by explicit management actions by Prime or by user console. | |
| INT cLRlanHostMode | 1.3.6.1.4.1.9.9.856.1.1.2.1.11 | INTEGER | read-write | This object configures the host mode for the RLAN. 0 - SINGLE_HOST_MODE, 1 - MULTI_HOST_MODE, 2 - MULTI_DOMAIN_MODE. |
| U32 cLRlanIndex | 1.3.6.1.4.1.9.9.856.1.1.1.1.1 | Unsigned32 | not-accessible | This object uniquely identifies one instance of a RLAN on the controller. |
| STR cLRlanInterface | 1.3.6.1.4.1.9.9.856.1.1.2.1.9 | SnmpAdminString | read-write | This object uniquely identifies the RLAN interface name. |
| STR cLRlanIpv4EgressName | 1.3.6.1.4.1.9.9.856.1.1.2.1.33 | SnmpAdminString | read-write | This object specifies the Qos profile name for flow monitor on egress traffic, for IPv4. |
| T/F cLRlanIpv4EgressStatus | 1.3.6.1.4.1.9.9.856.1.1.2.1.29 | TruthValue | read-write | This object specifies if the flow monitor on egress traffic, for IPv4, is enabled or disabled. A value of 'true' indicates that IPv4 Engress traffic is enabled. A value of 'false' indicates that IPv4 Engress traffic is disabled. |
| STR cLRlanIpv4IngressName | 1.3.6.1.4.1.9.9.856.1.1.2.1.32 | SnmpAdminString | read-write | This object specifies the Qos profile name for flow monitor on ingress traffic, for IPv4. |
| T/F cLRlanIpv4IngressStatus | 1.3.6.1.4.1.9.9.856.1.1.2.1.28 | TruthValue | read-write | This object specifies if the flow monitor on ingress traffic, for IPv4, is enabled or disabled. A value of 'true' indicates that IPv4 Ingress traffic is enabled. A value of 'false' indicates that IPv4 Ingress traffic is disabled. |
| STR cLRlanIpv6EgressName | 1.3.6.1.4.1.9.9.856.1.1.2.1.31 | SnmpAdminString | read-write | This object specifies the Qos profile name for flow monitor on egress traffic, for IPv6. |
| T/F cLRlanIpv6EgressStatus | 1.3.6.1.4.1.9.9.856.1.1.2.1.27 | TruthValue | read-write | This object specifies if the flow monitor on egress traffic, for IPv6, is enabled or disabled. A value of 'true' indicates that IPv6 Engress traffic is enabled. A value of 'false' indicates that IPv6 Engress traffic is disabled. |
| STR cLRlanIpv6IngressName | 1.3.6.1.4.1.9.9.856.1.1.2.1.30 | SnmpAdminString | read-write | This object specifies the Qos profile name for flow monitor on ingress traffic, for IPv6. |
| T/F cLRlanIpv6IngressStatus | 1.3.6.1.4.1.9.9.856.1.1.2.1.26 | TruthValue | read-write | This object specifies if the flow monitor on ingress traffic, for IPv6, is enabled or disabled. A value of 'true' indicates that IPv6 Ingress traffic is enabled. A value of 'false' indicates that IPv6 Ingress traffic is disabled. |
| T/F cLRlanLocalDhcpProfiling | 1.3.6.1.4.1.9.9.856.1.1.2.1.25 | TruthValue | read-write | This object uniquely identifies Client profiling on RLAN in local mode based on DHCP attribute. A value of 'true' indicates that Local DHCP profiling is enabled. A value of 'false' indicates that Local DHCP profiling is disabled. |
| T/F cLRlanLocalHttpProfiling | 1.3.6.1.4.1.9.9.856.1.1.2.1.24 | TruthValue | read-write | This object uniquely identifies Client profiling on RLAN in local mode based on HTTP attribute. A value of 'true' indicates that Local HTTP profiling is enabled. A value of 'false' indicates that Local HTTP profiling is disabled. |
| STR cLRlanMacFiltering | 1.3.6.1.4.1.9.9.856.1.1.1.1.4 | SnmpAdminString | read-write | A type of security policy for Mobile Stations (Clients). This enables filtering of clients by MAC address. |
| INT cLRlanMdnsMode | 1.3.6.1.4.1.9.9.856.1.1.1.1.16 | INTEGER | read-write | This object represents the mdns mode of the Remote Lan 0 indicates RLAN is in Bridge mode for mDNS packets 1 indicates RLAN is is Drop mode for mDNS packets 2 indicates RLAN is in Gateway mode for mDNS packets |
| STR cLRlanMdnsPolicy | 1.3.6.1.4.1.9.9.856.1.1.2.1.44 | SnmpAdminString | read-write | This object specifies the mDNS service policy configured under RLAN |
| T/F cLRlanPoeEnabled | 1.3.6.1.4.1.9.9.856.1.1.2.1.10 | TruthValue | read-write | This object uniquely identifies RLAN Power Over Ethernet status. A value of 'true' indicates that RLAN POE is enabled. A value of 'false' indicates that RLAN POE is disabled. |
| STR cLRlanPolicyDesc | 1.3.6.1.4.1.9.9.856.1.1.2.1.4 | SnmpAdminString | read-write | This object describes the policy of RLAN. |
| cLRlanPolicyEntry | 1.3.6.1.4.1.9.9.856.1.1.2.1 | not-accessible | Each entry in this table represents the RLAN policy configuration sent by the controller to APs for use during their operations. entries can be added/deleted by explicit management actions by NMS or by user console | |
| STR cLRlanPolicyIpv4Acl | 1.3.6.1.4.1.9.9.856.1.1.2.1.5 | SnmpAdminString | read-write | This object uniquely identifies the name of ipv4 ACL for given RLAN. |
| STR cLRlanPolicyIpv6Acl | 1.3.6.1.4.1.9.9.856.1.1.2.1.6 | SnmpAdminString | read-write | This object uniquely identifies the name of ipv6 ACL for given RLAN. |
| STR cLRlanPolicyProfileName | 1.3.6.1.4.1.9.9.856.1.1.2.1.1 | SnmpAdminString | not-accessible | This object uniquely identifies one instance of a RLAN policy on the controller. |
| ROW cLRlanPolicyRowStatus | 1.3.6.1.4.1.9.9.856.1.1.2.1.2 | RowStatus | read-create | This is the status column for this row and used to create, modify and delete specific instances of rows in this table. This table supports modification of writable objects when the RowStatus is 'active'. The following objects are mandatory for successful creation of an entry: cLRlanPolicyProfileName. |
| T/F cLRlanPolicyStatus | 1.3.6.1.4.1.9.9.856.1.1.2.1.3 | TruthValue | read-write | This object specifies whether the RLAN policy is enabled or not. A value of 'true' indicates that RLAN policy profile is enabled. A value of 'false' indicates that RLAN policy profile is disabled. |
| cLRlanPolicyTable | 1.3.6.1.4.1.9.9.856.1.1.2 | not-accessible | This table holds the RLAN policies configured on the controller. Each entry is represented by the object cLRlanPolicyEntry. | |
| U32 cLRlanPowerLevelId | 1.3.6.1.4.1.9.9.856.1.1.2.1.45 | Unsigned32 | read-write | This object specifies the power level for port |
| T/F cLRlanPreAuthEnabled | 1.3.6.1.4.1.9.9.856.1.1.2.1.19 | TruthValue | read-write | This object specifies if the preAuth is enabled or not for the RLAN on the controller. A value of 'true' indicates that RLAN Pre-Authentication is enabled. A value of 'false' indicates that RLAN Pre-Authentication is disabled. |
| STR cLRlanProfileName | 1.3.6.1.4.1.9.9.856.1.1.1.1.3 | SnmpAdminString | read-create | This object represents the profile name assigned to this RLAN. The name assigned to a RLAN has to be unique across all the RLANs on the controller. An administrator can assign a meaningful name that could later be used to refer a particular RLAN on the controller. This object cannot be modified when cLRlanRowStatus is 'active'. |
| T/F cLRlanRadiusDhcpProfiling | 1.3.6.1.4.1.9.9.856.1.1.2.1.23 | TruthValue | read-write | This object uniquely identifies Client profiling on RLAN in Radius mode based on DHCP attribute. A value of 'true' indicates that Radius DHCP profiling is enabled. A value of 'false' indicates that Radius DHCP profiling is disabled. |
| T/F cLRlanRadiusHttpProfiling | 1.3.6.1.4.1.9.9.856.1.1.2.1.22 | TruthValue | read-write | This object uniquely identifies Client profiling on RLAN in Radius mode based on HTTP attribute. A value of 'true' indicates that Radius HTTP profiling is enabled. A value of 'false' indicates that Radius HTTP profiling is disabled. |
| ROW cLRlanRowStatus | 1.3.6.1.4.1.9.9.856.1.1.1.1.2 | RowStatus | read-create | This is the status column for this row and used to create, modify and delete specific instances of rows in this table. This table supports modification of writable objects when the RowStatus is 'active'. The following objects are mandatory for successful creation of an entry: cLRlanIndex cLRlanProfileName. |
| T/F cLRlanSecurity8021X | 1.3.6.1.4.1.9.9.856.1.1.1.1.6 | TruthValue | read-write | This object specifies if the dot1x authentication is enabled or not for the RLAN. A value of 'true' indicates that dot1x security is enabled. A value of 'false' indicates that dot1x security is disabled. |
| STR cLRlanSecurity8021XAuthList | 1.3.6.1.4.1.9.9.856.1.1.1.1.15 | SnmpAdminString | read-write | This object represents the dot1x authentication list for the given RLAN. |
| T/F cLRlanSecurityWebAuth | 1.3.6.1.4.1.9.9.856.1.1.1.1.7 | TruthValue | read-write | This object specifies if the web authentication is enabled or not for the RLAN. A value of 'true' indicates that web authentication is enabled. A value of 'false' indicates that web authentication is disabled. |
| U32 cLRlanSessionTimeout | 1.3.6.1.4.1.9.9.856.1.1.2.1.18 | Unsigned32 | read-write | This object identifies the session timeout duration in seconds for RLAN. |
| T/F cLRlanSplitTunnel | 1.3.6.1.4.1.9.9.856.1.1.2.1.38 | TruthValue | read-write | This object identifies whether the split tunnel traffic movement of the data is enabled. A value of 'true' indicates that split tunnelling is enabled. A value of 'false' indicates that split tunnelling is disabled. |
| IP cLRlanSplitTunnelGateway | 1.3.6.1.4.1.9.9.856.1.1.2.1.35 | InetAddress | read-write | This object identifies the gateway address for the split tunnel trafficking of the data on RLAN. |
| IPt cLRlanSplitTunnelGatewayType | 1.3.6.1.4.1.9.9.856.1.1.2.1.34 | InetAddressType | read-write | This object identifies the IP address type of gateway address for the split tunnel trafficking of the data on RLAN. |
| IP cLRlanSplitTunnelNetmask | 1.3.6.1.4.1.9.9.856.1.1.2.1.37 | InetAddress | read-write | This object identifies the netmask for the split tunnel trafficking of the data on RLAN. |
| IPt cLRlanSplitTunnelNetmaskType | 1.3.6.1.4.1.9.9.856.1.1.2.1.36 | InetAddressType | read-write | This object identifies the netmask for the split tunnel trafficking of the data on RLAN. |
| T/F cLRlanSplitTunnelOverride | 1.3.6.1.4.1.9.9.856.1.1.2.1.40 | TruthValue | read-write | This object identifies whether the split tunnel traffic movement of the data is overriden. A value of 'true' indicates that split tunnel override is enabled. A value of 'false' indicates that split tunnel override is disabled. |
| T/F cLRlanStatus | 1.3.6.1.4.1.9.9.856.1.1.1.1.12 | TruthValue | read-write | This object represents the status of the RLAN. A value of 'true' indicates that RLAN profile is enabled. A value of 'false' indicates that RLAN profile is disabled. |
| cLRlanTable | 1.3.6.1.4.1.9.9.856.1.1.1 | not-accessible | This table represents the RLAN configuration sent by the controller to the APs for their operation. LWAPP APs exchange configuration messages with the controller and get the required configuration for their 802.11 related operations. As part of these messages, the RLAN configuration is pushed by the controller to the LWAPP APs. This table doesn't have any dependencies on other existing tables. By defining cLRlanIndex, the unique identifier for a RLAN, this table provides a common index structure for use in several other new tables that populate information on security related attributes like authentication, encryption, 802.11 parameters, Quality-of-Service attributes etc., that would relate to a particular RLAN. Rows are added or deleted by explicit management actions initiated by the user from a network management station through the cLRlanRowStatus object. | |
| INT cLRlanViolationMode | 1.3.6.1.4.1.9.9.856.1.1.2.1.12 | INTEGER | read-write | This objecti configures the voilation mode for the RLAN. 0 - REPLACE, 1 - SHUTDOWN, 2 - PROTECT |
| U32 cLRlanVoiceVlanId | 1.3.6.1.4.1.9.9.856.1.1.2.1.13 | Unsigned32 | read-write | This object specifies VLAN ID for the voice during the multi domain mode for RLAN on the controller. The host mode (cLRlanHostMode) should be set to multi-domain mode(value: 3). |
| STR cLRlanWebAuthIpv4Acl | 1.3.6.1.4.1.9.9.856.1.1.1.1.13 | SnmpAdminString | read-write | This object represents the pre web Auth IPv4 ACL for the given RLAN. |
| STR cLRlanWebAuthIpv6Acl | 1.3.6.1.4.1.9.9.856.1.1.1.1.14 | SnmpAdminString | read-write | This object represents the pre web Auth IPv4 ACL for the given RLAN. |
| STR cLRlanWebAuthParameter | 1.3.6.1.4.1.9.9.856.1.1.1.1.10 | SnmpAdminString | read-only | This object specifies the Parameter for web authentication for the given RLAN |
RFC description
Cisco Lightweight Access Point Protocol RLAN MIB managing roaming LANs on wireless controllers.
Start monitoring Cisco Wireless LAN Controllers (LWAPP-based) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.